@linxin666/dsh-remote-web-ui 0.4.2 → 0.4.4

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@linxin666/dsh-remote-web-ui",
   "description": "Scan-to-pair remote access for the dsh web GUI that shares one official interface: a QR beside the settings button pairs phones and PCs into the same Web GUI (a portrait-touch adaptation layer for phones, full desktop on PCs) through one-time tokens and revocable device sessions, with a LAN bind toggle, optional Cloudflare tunnel, and one-click family self-update",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "icon": "icon.svg",
   "type": "module",
   "engines": {
@@ -38,7 +38,7 @@
   "license": "Apache-2.0",
   "dsh": {
     "engines": {
-      "dsh": ">=0.1.7-rc.2"
+      "dsh": ">=0.2.0-rc.1"
     },
     "bundle": {
       "patch": "./cordis.patch.yml"
@@ -53,36 +53,36 @@
     }
   },
   "dependencies": {
+    "@deepseek-ai/schemastery": "^3.18.4",
     "cloudflared": "^0.7.3",
     "clsx": "^2.1.1",
     "qrcode.react": "^4.2.0",
-    "schemastery": "^3.18.0",
     "yaml": "^2.8.2",
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh": ">=0.1.7-rc.2",
+    "@deepseek-ai/dsh": ">=0.2.0-rc.1",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.4",
-    "@deepseek-ai/dsh-agent": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-api-remotes": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-api-session-controller": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-api-workspace-controller": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-connection": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-locale": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-store": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-sidebar": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-commands": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-invariants": "^0.1.7-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.1.7-rc.2",
+    "@deepseek-ai/dsh-agent": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-api-remotes": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-api-session-controller": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-api-workspace-controller": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-client-connection": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-client-locale": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-client-store": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-commands": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-invariants": "^0.2.0-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.2.0-rc.1",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/react": "^16.3.2",
     "@types/node": "^22.20.0",

package/src/client/RemoteEntry.tsx

@@ -1,11 +1,11 @@
 /**
- * The sidebar remote-control seat: the update trigger plus the phone-icon
- * trigger beside the settings button, and the pairing panel modal. Owns the
- * panel behavior — token minting on open, the status SSE subscription,
- * stop/refresh/copy — and renders the pure {@link RemotePanel} body. The
- * update seat (the dsh-web self-update flow) rides the same footer row,
- * rendered by {@link UpdateEntry}. Component-local state per the client
- * stack rules: nothing here survives remounts or crosses entries.
+ * The sidebar remote-control seat: the phone-icon trigger beside the
+ * settings button, and the pairing panel modal. Owns the panel behavior —
+ * token minting on open, the status SSE subscription, stop/refresh/copy — and
+ * renders the pure {@link RemotePanel} body. The family self-update seat is
+ * its own plugin (dsh-update) and no longer rides this row. Component-local
+ * state per the client stack rules: nothing here survives remounts or crosses
+ * entries.
  */
 import { useCallback, useEffect, useRef, useState } from 'react'
 import { createPortal } from 'react-dom'
@@ -14,7 +14,6 @@ import type { PairingPhase } from '../pairing.ts'
 import { RemotePanel, type PanelState } from './RemotePanel.tsx'
 import { copyText, issuePair, revokePair, stopPair, type DeviceFrame, type IssueResponse, type PairStateFrame, type RelayStatusFrame, type TunnelStatusFrame } from './pair-api.ts'
 import { PhoneIcon } from './PhoneIcon.tsx'
-import { UpdateEntry } from './UpdateEntry.tsx'
 import css from './remote.module.css'
 
 /** Entry props: the sidebar column state and the standard locale seat. */
@@ -233,7 +232,6 @@ export function RemoteEntry({ wide, t }: RemoteEntryProps) {
   return (
     <>
       <div className={css.entryRow} data-rail={wide ? undefined : 'rail'}>
-        <UpdateEntry wide={wide} t={t} />
         <TooltipAnchor wide={wide} label={t('entry.label')} onClick={openPanel} expanded={open} />
       </div>
       {open && createPortal((

package/src/client/RemoteSettingsCard.tsx

@@ -175,8 +175,6 @@ export function RemoteSettingsCard(props: RemoteSettingsCardProps) {
       descriptionKey="settings.description"
       defaultOpen={false}
       state={state}
-      renderChildrenWhenNotExposed
-      hideNotExposedNotice
       onSave={props.save}
       onDiscard={props.discard}
     >

package/src/client/index.ts

@@ -41,6 +41,7 @@ import { FenceNotice } from './FenceNotice.tsx'
 import { reportDailyHeartbeat } from './telemetry.ts'
 import { startMobileAdapt, type RemoteAdaptGlobal } from './mobile-adapt.ts'
 import { installPluginCard } from './plugin-card-seat.ts'
+import { createServedEntryForm } from './settings-entry-form.ts'
 
 // Portrait-touch adaptation of the official UI: installed under the plugin
 // lifecycle (apply) so disabling the plugin in cordis patch (disabled: true)
@@ -51,8 +52,6 @@ export type { PanelState, RemotePanelProps } from './RemotePanel.tsx'
 export type { PairFailedNoticeProps } from './PairFailedNotice.tsx'
 export type { RemoteKey } from './locales.ts'
 export type { RemoteSettingsCardFace, RemoteSettingsCardState } from './RemoteSettingsCard.tsx'
-export type { UpdateEntryProps } from './UpdateEntry.tsx'
-export type { UpdatePanelProps, UpdateView } from './UpdatePanel.tsx'
 
 declare module '@deepseek-ai/dsh-client-ui-slots' {
   interface LocaleNamespaceMap {
@@ -110,22 +109,70 @@ declare module '@deepseek-ai/cordis' {
 /** Dictionary namespace owned by this plugin. */
 const NS = 'remote'
 
-/** Settings namespace the remote-control card edits (the Host plugin registers it). */
+/**
+ * Settings namespace the remote-control card edits: the family identity of
+ * this plugin's own settings form, and the row id a standalone bundle install
+ * carries.
+ */
 const REMOTE_WEB_UI_NS = 'remote-web-ui'
+
+/** Profile entry id the family aggregate's generated row carries. */
 const AGGREGATE_ENTRY_ID = 'web-ui-remote-web-ui'
+
+/** Profile entry ids this package's patch rows carry, most specific first. */
 const REMOTE_WEB_UI_ENTRY_IDS: readonly string[] = [AGGREGATE_ENTRY_ID, 'ui-remote-web-ui', REMOTE_WEB_UI_NS]
 
-function servedEntryId(forms: ConfigForms): string {
+/**
+ * The profile entry id this package's own row carries, for a page that serves
+ * no family binder.
+ *
+ * The shared describe mirror answers asynchronously, so at plugin activation it
+ * usually holds nothing yet — and an unanswered or empty mirror is not evidence
+ * of absence. Binding the bare namespace there left the card bound to an entry
+ * the Host does not serve, and the form is bound once per session, so the card
+ * never recovered (every save answered `No configurable plugin entry`). The
+ * aggregate row id matches nearly every deployment; only a mirror that answers
+ * with OTHER plugins' rows falls back to the namespace itself (the pre-0.1.7
+ * keying shape), because that answer is the one that actually proves this
+ * package's own row is not served.
+ * @param forms - the shared configuration forms service.
+ * @returns the entry id to bind.
+ */
+export function servedEntryId(forms: ConfigForms): string {
   let served: readonly string[] | undefined
   try {
     served = forms.describe().getSnapshot().view?.namespaces.map(view => view.ns)
   } catch {
+    // A mirror that refuses the read is unanswered too, not absent.
     served = undefined
   }
-  if (!served || served.length === 0) return REMOTE_WEB_UI_NS
+  if (served === undefined || served.length === 0) return AGGREGATE_ENTRY_ID
   return REMOTE_WEB_UI_ENTRY_IDS.find(id => served.includes(id)) ?? REMOTE_WEB_UI_NS
 }
 
+/**
+ * Bind the settings form the remote-control card reads and writes.
+ *
+ * The family binder comes first: it resolves this package's family namespace
+ * onto the profile entry id the Host serves the form under, and keeps the
+ * loopback bridge as its own fallback. A page without that group (or one where
+ * its client half has not applied yet) binds through the shared forms service,
+ * on the entry id the describe mirror justifies and rebound as soon as the
+ * mirror answers — see {@link createServedEntryForm}.
+ * @param ctx - client context carrying the family binder and/or the shared forms service.
+ * @returns the form the card stages and saves through.
+ */
+export function bindSettingsForm(ctx: ClientContext): ConfigForm<RemoteSettings> {
+  const family = ctx.get('webUiSettings')
+  if (family !== undefined && typeof family.bind === 'function') {
+    return family.bind<RemoteSettings>({ namespace: REMOTE_WEB_UI_NS })
+  }
+  return createServedEntryForm<RemoteSettings>({
+    forms: ctx.configForms,
+    entryIds: REMOTE_WEB_UI_ENTRY_IDS,
+  })
+}
+
 /** Heartbeat cadence from a paired phone (presence + revocation liveness). */
 const HEARTBEAT_INTERVAL_MS = 10_000
 
@@ -204,10 +251,7 @@ export function apply(ctx: ClientContext): void {
   // shared form (natively, or over its loopback bridge); without that group the
   // namespace IS the owning entry id, so the official service is addressed
   // directly.
-  const family = ctx.get('webUiSettings')
-  const settingsForm: ConfigForm<RemoteSettings> = family !== undefined && typeof family.bind === 'function'
-    ? family.bind<RemoteSettings>({ namespace: REMOTE_WEB_UI_NS })
-    : ctx.configForms.get<RemoteSettings>(servedEntryId(ctx.configForms))
+  const settingsForm: ConfigForm<RemoteSettings> = bindSettingsForm(ctx)
   const enabled = (): boolean => {
     const snapshot = settingsForm.getSnapshot()
     return snapshot.status === 'ready'

package/src/client/locales.ts

@@ -123,48 +123,6 @@ export const zh = {
   'settings.saveFailed': '部署未接受这些值，已保留供你修改。',
   'settings.invalidNumber': '请输入数字，留空则使用默认值。',
   // 更新面板（侧边栏更新按钮）。
-  'update.label': '检查更新',
-  'update.badge': '有更新',
-  'update.availableLabel': '发现新版本，检查更新',
-  'update.title': '检查更新',
-  'update.checking': '正在检查远程仓库中的新版本…',
-  'update.upToDate': '当前已是最新版本',
-  'update.upToDateDetail': '{name} 已是最新版本 v{version}。',
-  'update.found': '发现新版本',
-  'update.foundDetail': '{name} 有新版本 v{version}。确认后开始更新。',
-  'update.start': '开始更新',
-  'update.updating': '正在更新 {name} 至 v{version}，可能需要 1-2 分钟…',
-  'update.cooldownNotice': '本次更新由你主动触发，将跳过 pnpm 的 24 小时发布冷却期（供应链保护）直接安装所选版本。',
-  'update.updatingTitle': '正在更新…',
-  'update.done': '更新完成',
-  'update.doneDetail': '所有组件已更新到最新版本。',
-  'update.restartHint': '请重启 dsh web 使新版本生效：在终端按 Ctrl+C 停止后重新运行 dsh web。',
-  'update.linkMode': '当前为本地开发模式',
-  'update.linkModeDetail': 'dsh-web 或其组件通过本地链接安装（开发模式），无法自动更新。npm 上最新版本：{version}。请同步本地仓库，或移除与全家桶重复的独立链接。',
-  'update.missing': '未找到 dsh-web 安装',
-  'update.missingDetail': '无法定位已安装的 dsh-web 聚合包。请先运行 dsh plugin --profile <profile> add @linxin666/dsh-web-all。',
-  'update.offline': '无法连接更新源',
-  'update.offlineDetail': '网络不可用或更新服务异常，请稍后重试。',
-  'update.unmounted': '更新服务未加载',
-  'update.unmountedDetail': '当前 dsh web 进程运行的插件版本不含更新服务，请重启 dsh web（Ctrl+C 后重新运行）后再试。',
-  'update.error': '更新失败',
-  'update.packages': '组件版本',
-  'update.releaseNotes': 'v{version} 更新说明',
-  'update.releaseFeatures': '新增功能',
-  'update.releaseFixes': '修复',
-  'update.releaseOther': '其他变动',
-  'update.releaseUnavailable': '本次发布说明暂不可用，可前往 GitHub Release 查看。',
-  'update.componentVersions': '查看组件版本',
-  'update.retry': '重新检查',
-  'update.close': '关闭更新面板',
-  'update.error.pnpmMissing': '未找到 pnpm，已尝试 pnpm / corepack / npx 仍不可用。请安装 pnpm 后重启应用（Windows: npm install -g pnpm 或 corepack enable；macOS: brew install pnpm 或 corepack enable）。',
-  'update.error.timeout': '更新超时，已终止安装进程，请重试。',
-  'update.error.notFound': '未找到 dsh-web 聚合包安装，无法更新。',
-  'update.error.link': 'dsh-web 或其组件使用本地链接，无法自动更新；请同步本地仓库，或移除与全家桶重复的独立链接。',
-  'update.error.pnpmFailed': '更新执行失败（pnpm 退出码 {code}），详见下方输出。',
-  'update.error.stale': '更新命令已执行，但安装版本未变化。常见原因：pnpm 11 的 minimumReleaseAge 门禁会静默跳过发布不足 24 小时的新版本。请在 profile 目录（~/.dsh/profiles/<profile>）的 pnpm-workspace.yaml 中配置 minimumReleaseAgeExclude（例如 "@linxin666/*"）或 minimumReleaseAge: 0 后重新点击更新。',
-  'update.error.verifyFailed': '更新命令已执行，但无法核对安装后的版本（可能是 registry 探测失败或安装路径变化）。请查看下方输出，或稍后重试。',
-  'update.error.unknown': '更新失败，请重试。',
 } satisfies Record<string, string>
 
 /** The remote namespace key union. */
@@ -296,46 +254,4 @@ export const en = {
   'settings.saveFailed': 'The deployment did not accept these values; they were left for you to correct.',
   'settings.invalidNumber': 'Enter a number, or leave blank to use the default.',
   // Update panel (the sidebar update trigger).
-  'update.label': 'Check for updates',
-  'update.badge': 'Update available',
-  'update.availableLabel': 'New version available. Check for updates',
-  'update.title': 'Check for updates',
-  'update.checking': 'Checking the remote repository for newer releases…',
-  'update.upToDate': 'Everything is up to date',
-  'update.upToDateDetail': '{name} is at the latest version v{version}.',
-  'update.found': 'A new version is available',
-  'update.foundDetail': '{name} has a newer release v{version}. Confirm to start the update.',
-  'update.start': 'Update now',
-  'update.updating': 'Updating {name} to v{version}; this may take 1-2 minutes…',
-  'update.cooldownNotice': 'This user-initiated update bypasses pnpm\'s 24-hour release cooldown (supply-chain protection) and installs the selected version immediately.',
-  'update.updatingTitle': 'Updating…',
-  'update.done': 'Update complete',
-  'update.doneDetail': 'All components are up to date.',
-  'update.restartHint': 'Restart dsh web for the new version to take effect: stop it with Ctrl+C in the terminal, then run dsh web again.',
-  'update.linkMode': 'Local development mode',
-  'update.linkModeDetail': 'dsh-web or one of its components is installed via a local link and cannot be updated remotely. Latest npm release: {version}. Sync the local checkout, or remove a standalone link duplicated by the aggregate.',
-  'update.missing': 'dsh-web not found',
-  'update.missingDetail': 'Could not locate the installed dsh-web aggregate package. Install it with: dsh plugin --profile <profile> add @linxin666/dsh-web-all',
-  'update.offline': 'Cannot reach the update source',
-  'update.offlineDetail': 'The network is unavailable or the update service is failing; try again later.',
-  'update.unmounted': 'The update service is not loaded',
-  'update.unmountedDetail': 'The running dsh web process loads a plugin build without the update service; restart dsh web (Ctrl+C, then run dsh web again) and retry.',
-  'update.error': 'Update failed',
-  'update.packages': 'Component versions',
-  'update.releaseNotes': 'v{version} release notes',
-  'update.releaseFeatures': 'New Features',
-  'update.releaseFixes': 'Bug Fixes',
-  'update.releaseOther': 'Other Changes',
-  'update.releaseUnavailable': 'Release notes are unavailable for this version; see the GitHub release instead.',
-  'update.componentVersions': 'View component versions',
-  'update.retry': 'Check again',
-  'update.close': 'Close update panel',
-  'update.error.pnpmMissing': 'pnpm was not found (tried pnpm / corepack / npx). Install pnpm and restart the app (Windows: npm install -g pnpm or corepack enable; macOS: brew install pnpm or corepack enable).',
-  'update.error.timeout': 'The update timed out and the install process was killed; try again.',
-  'update.error.notFound': 'The dsh-web aggregate package is not installed; nothing to update.',
-  'update.error.link': 'dsh-web or one of its components uses a local link. Sync the checkout, or remove a standalone link duplicated by the aggregate.',
-  'update.error.pnpmFailed': 'The update failed (pnpm exited with code {code}); see the output below.',
-  'update.error.stale': 'The update command ran but the installed versions did not change. Likely cause: the pnpm 11 minimumReleaseAge gate silently skips releases published less than 24 hours ago. Add minimumReleaseAgeExclude (e.g. "@linxin666/*") or set minimumReleaseAge: 0 in pnpm-workspace.yaml under the profile directory (~/.dsh/profiles/<profile>), then run the update again.',
-  'update.error.verifyFailed': 'The update command ran but the installed versions could not be verified afterwards (registry probe failed or the install path changed). Inspect the output below, or retry later.',
-  'update.error.unknown': 'Update failed; try again.',
 } satisfies Record<RemoteKey, string>

package/src/client/mobile-adapt.ts

@@ -54,6 +54,17 @@ const ADAPT_CSS_ID = 'dsh-remote-web-ui/mobile-adapt.css'
 const ACTIVE_CLASS = 'dsh-remote-portrait'
 /** Body class while the collapsed rail is hidden behind the whale. */
 const RAIL_HIDDEN_CLASS = 'dsh-remote-rail-hidden'
+/**
+ * The official sidebar column root. Also the scope of the row sweep: every row
+ * the drag suppression covers is a descendant of it, so the document-wide scan
+ * it replaces only ever returned these.
+ */
+const SIDEBAR_SELECTOR = '[class*="_sidebarCol"]'
+/** The official draggable session/project rows (see disableRowDrag). */
+const ROW_SELECTOR = '[class*="_sessionRow"], [class*="_projectRow"]'
+/** The injected stylesheet, addressed through the same cached lookup. */
+const STYLE_SELECTOR = `style[data-plugin-css="${ADAPT_CSS_ID}"]`
+
 /** Whale button id. */
 const WHALE_ID = 'dshRemoteWhale'
 /** Compact picker: synthesized model button id. */
@@ -346,6 +357,8 @@ export function startMobileAdapt(): void {
   let whaleObserver: MutationObserver | null = null
   /** Header subtree observer: marks the geometry measurement dirty on re-render. */
   let headerObserver: MutationObserver | null = null
+  /** Document child-list observer: invalidates the cached-absent selector set. */
+  let domObserver: MutationObserver | null = null
   let observedHeader: Element | null = null
   /** Whether the seated-actions geometry needs re-measuring (see alignActionsText). */
   let headerGeometryDirty = true
@@ -368,17 +381,28 @@ export function startMobileAdapt(): void {
    * rail compaction) while the body class stays.
    */
   function ensureAdaptStyle(): void {
-    if (nodeOf(`style[data-plugin-css="${ADAPT_CSS_ID}"]`) !== null) return
+    if (nodeOf(STYLE_SELECTOR) !== null) return
     const tag = document.createElement('style')
     tag.dataset.plugin = 'remote-web-ui'
     tag.dataset.pluginCss = ADAPT_CSS_ID
     tag.textContent = ADAPT_CSS.join('')
     document.head.appendChild(tag)
+    // Seed the lookup cache: the tag is created here, outside nodeOf, so the
+    // negative cache could otherwise report it missing for one more tick and
+    // stack a duplicate stylesheet.
+    nodeCache.set(STYLE_SELECTOR, tag)
+    nodeMissCache.delete(STYLE_SELECTOR)
   }
 
   function apply(): void {
     if (active) return
     active = true
+    // First statement of the activation, before any lookup: nothing observed the
+    // document while the layer was reverted (the observer is created below), so
+    // no "absent" verdict recorded earlier may be served now. Clearing here
+    // rather than beside the observer also covers the lookups this path runs
+    // before that point.
+    forgetAbsentSelectors()
     document.body.classList.add(ACTIVE_CLASS)
     // A details panel opened before the viewport rotated into portrait (or
     // restored across reloads) would sit behind the display:none above;
@@ -397,6 +421,7 @@ export function startMobileAdapt(): void {
       meta.setAttribute('content', `${savedViewportContent}, viewport-fit=cover`)
     }
     ensureWhale()
+    ensureDomObserver()
     syncWhale()
     // React builds nodes with attributes before inserting them, so
     // attribute observers miss the initial collapsed state — a light
@@ -429,6 +454,45 @@ export function startMobileAdapt(): void {
       whaleObserver.disconnect()
       whaleObserver = null
     }
+    if (domObserver !== null) {
+      domObserver.disconnect()
+      domObserver = null
+    }
+    // Nothing observes the document from here on; a verdict recorded now could
+    // not be trusted after the next apply().
+    forgetAbsentSelectors()
+  }
+
+  /**
+   * Observe the document for the two kinds of change that can make a cached-absent
+   * target discoverable again (see nodeOf): node insertion/removal, and the
+   * class / compat-stamp attributes the cached selectors match on.
+   *
+   * Body class writes are excluded by target: the layer toggles three body
+   * classes every tick, and counting those would invalidate the negative cache
+   * on every tick and restore the very scan this cache removes. They cannot
+   * create a target either — every cached selector matches an element other
+   * than <body>.
+   *
+   * The record queue is drained on a microtask, so this stays off the layout
+   * path; a chat turn's insertions are a handful per second, not per element.
+   */
+  function ensureDomObserver(): void {
+    if (domObserver !== null || typeof MutationObserver === 'undefined' || !document.body) return
+    domObserver = new MutationObserver((records) => {
+      for (const record of records) {
+        if (record.type === 'childList' || record.target !== document.body) {
+          noteDomChange()
+          return
+        }
+      }
+    })
+    domObserver.observe(document.body, {
+      childList: true,
+      subtree: true,
+      attributes: true,
+      attributeFilter: ['class', 'data-dsh-frame'],
+    })
   }
 
   /** Start/stop the 600ms sync tick; a no-op when already in the asked state. */
@@ -702,7 +766,7 @@ export function startMobileAdapt(): void {
   const dragOverridden = new Map<Element, string | null>()
   function disableRowDrag(): void {
     if (!active) return
-    const rows = document.querySelectorAll('[class*="_sidebarCol"] [class*="_sessionRow"], [class*="_sidebarCol"] [class*="_projectRow"]')
+    const rows = sidebarRows()
     for (const row of rows) {
       if (row.getAttribute('draggable') !== 'false') {
         if (!dragOverridden.has(row)) dragOverridden.set(row, row.getAttribute('draggable'))
@@ -731,15 +795,90 @@ export function startMobileAdapt(): void {
    * node on a major re-render, which the isConnected guard detects.
    */
   const nodeCache = new Map<string, Element>()
+  /**
+   * Selectors known to be absent as of {@link domGeneration}. A miss is the
+   * common case, not the exception: the layer holds no overlay of its own, and
+   * several official surfaces it looks for (tabs row, tools row, sidebar rows)
+   * legitimately do not exist at once. Re-walking a conversation-sized document
+   * for the same absent selector on every 600ms tick was waste that almost
+   * always resolved to null: five document-wide lookups per tick on the measured
+   * fixture, zero after this cache. That is a lookup count — the wall-clock
+   * saving is real while the mounted content is quiet and shrinks to the
+   * row-scope saving when a turn streams (see the Agent Note for the harness and
+   * the before/after numbers).
+   *
+   * A miss is trusted only while the observed content has not changed, so a
+   * surface that appears is still found on the very next tick — the same
+   * discovery latency the unconditional probe had. The cache is never aged by a
+   * clock: it is cleared by {@link noteDomChange} while the observer is live and
+   * by {@link forgetAbsentSelectors} across the windows where it is not (apply
+   * and revert). One blind spot is deliberate and load-bearing: the observer
+   * watches <body>, so a head-resident target is not covered by that signal —
+   * the one such target is seeded into the cache where it is created (see
+   * ensureAdaptStyle).
+   */
+  const nodeMissCache = new Set<string>()
+  /**
+   * Bumped whenever a cached target may have appeared or disappeared. A surface
+   * qualifies on a class token or on the aggregate compat stamp
+   * (`data-dsh-frame`), so both insertions/removals AND those two attributes
+   * can change the answer. Nothing the layer writes per tick lands here: its own
+   * class writes are all on <body>, and its row/transform/label writes touch
+   * other attributes entirely (see ensureDomObserver).
+   */
+  let domGeneration = 0
+  /** The generation the negative cache was recorded against. */
+  let missGeneration = -1
+
+  function noteDomChange(): void {
+    domGeneration += 1
+  }
+
+  /**
+   * Drop every cached "absent" verdict. Called on apply and revert: while the
+   * observer is disconnected the layer is blind to insertions, so a verdict
+   * recorded before the gap could otherwise outlive the change that falsified
+   * it and be served without a probe. The positive cache needs no equivalent —
+   * its `isConnected` guard already re-resolves a replaced node.
+   */
+  function forgetAbsentSelectors(): void {
+    nodeMissCache.clear()
+    domGeneration += 1
+  }
+
   function nodeOf(selector: string): Element | null {
     const cached = nodeCache.get(selector)
-    if (cached !== undefined && cached.isConnected) return cached
+    if (cached !== undefined) {
+      // A node React replaced is no longer connected; drop it and fall through
+      // so the lookup below can find its replacement.
+      if (cached.isConnected) return cached
+      nodeCache.delete(selector)
+    }
+    if (missGeneration !== domGeneration) {
+      nodeMissCache.clear()
+      missGeneration = domGeneration
+    }
+    if (nodeMissCache.has(selector)) return null
     const found = document.querySelector(selector)
-    if (found === null) nodeCache.delete(selector)
-    else nodeCache.set(selector, found)
+    if (found === null) {
+      nodeMissCache.add(selector)
+      return null
+    }
+    nodeCache.set(selector, found)
     return found
   }
 
+  /**
+   * The session/project rows the drag suppression covers, scoped to the cached
+   * sidebar root. Each row carries the sidebar column class as an ancestor, so
+   * the document-wide scan this replaces only ever returned rows from here.
+   */
+  function sidebarRows(): Element[] {
+    const sidebar = nodeOf(SIDEBAR_SELECTOR)
+    if (sidebar === null) return []
+    return Array.from(sidebar.querySelectorAll(ROW_SELECTOR))
+  }
+
   /** The official application frame, through the same cached lookup. */
   function frameEl(): HTMLElement | null {
     const frame = nodeOf(APP_FRAME_SELECTOR)