dsh-remote-vs 0.9.3 → 0.10.0

package/README.en.md

@@ -37,8 +37,9 @@ dsh plugin --profile web add dsh-remote-vs
 (From npm, recommended; installing straight from the repository also works:
 `dsh plugin --profile web add github:xiray-xia/dsh-remote-vs`.)
 
-Requires DSH `0.2.1-alpha.3` or newer (`engines.dsh` enforces the range; **the tested
-baseline is `0.2.1-rc.2`**). `--profile web` selects which profile to install into —
+Requires DSH `0.2.2-alpha.2` or newer (`engines.dsh` enforces the range; **the tested
+baseline is `0.2.2-alpha.2`**). Older Hosts (`0.2.1-rc.2` generation) need plugin `0.9.3`: the
+Remote preset of this version uses the `0.2.2-alpha.2` tool schema. `--profile web` selects which profile to install into —
 this is a Web plugin, so it has to go into the profile your Web GUI runs from (`web` is
 the common name; use your own profile's name).
 
@@ -301,7 +302,7 @@ over helper RPC (fs) / ssh2 (processes), local stays untouched; both share one H
 
 - Alias dirs: `$DSH_HOME/remote-ssh/aliases/<id>` (empty shells, routing keys only), auto-registered into the native workspace list as `<server> > <base>`
 - Routing switch (dropdown at the top of Settings → Remote hosts; underneath it is profile patch `- id: remote-vs`, `config.routingMode`, volatile, no restart):
-  `off` (default, local passthrough) / `shadow` (logs, still local) / `enforce` (real routing)
+  default `enforce` (real routing); switch to `off` (pure local passthrough) / `shadow` (logs, still local) as debugging escapes
 - New workspace: the native "Add workspace…" entry is adopted (local/remote dual tab; remote leg = host→push→bind wizard)
 - Presets: a `Remote` preset (bash toolset); under enforce, new remote sessions switch to it automatically (default preset only, never overrides an explicit choice)
 - Ground truths (measured, not assumed):
@@ -319,7 +320,7 @@ over helper RPC (fs) / ssh2 (processes), local stays untouched; both share one H
 Upstream never published helper binaries (all Release assets are empty), so this plugin builds its own:
 
 - Build machine: WSL2 Ubuntu-22.04 (glibc 2.35, matching the remote targets), Node v24.21.0 + pnpm 11.28.5
-- Sources: the `dsh-v0.2.1-alpha.2` tag (the **build baseline**: what must match is the wire protocol version, not the Host version — it is still 2, so a Host upgrade to alpha.4 or alpha.5 does not require a rebuild)
+- Sources: the `dsh-v0.2.1-alpha.2` tag (the **build baseline**: what must match is the wire protocol version, not the Host version — our protocol is still **2**, so a Host upgrade to `0.2.2-alpha.2` needs no rebuild either: the plugin intentionally stays on `dsh-ssh@0.2.1-rc.2`, and the new generation's protocol 3 is deliberately not followed — see §2.26 of the maintenance notes)
 - Command: stock script `pnpm exec tsx scripts/build-exe-for-ssh-helper.ts --target=node24-linux-x64`
 - Only deviation: no docker for the manylinux 2.28 rebuild, so a `DSH_GLIBC_CEILING`
   env override was added (default stays 2.28); this build targets 2.35 (see `glibc-ceiling.patch` in the cache dir)

package/README.md

@@ -34,7 +34,8 @@ dsh plugin --profile web add dsh-remote-vs
 
 （从 npm 装，推荐；也可以直接跟仓库装：`dsh plugin --profile web add github:xiray-xia/dsh-remote-vs`。）
 
-要求 DSH `0.2.1-alpha.3` 及以上（`engines.dsh` 门到底；**当前实测基线 `0.2.1-rc.2`**）。
+要求 DSH `0.2.2-alpha.2` 及以上（`engines.dsh` 门到底；**当前实测基线 `0.2.2-alpha.2`**）。
+旧 Host（`0.2.1-rc.2` 一代）请用插件 `0.9.3`：新版的 Remote 预设用了 `0.2.2-alpha.2` 的工具 schema。
 `--profile web` 指明装进哪个 profile —— 本插件是 Web 插件，
 必须装进 Web GUI 所用的那个（`web` 是常见命名，以你自己的 profile 名为准）。
 
@@ -266,7 +267,7 @@ helper RPC（fs）/ ssh2（进程），本地一切不变；两者同 Host、共
 
 - 别名目录：`$DSH_HOME/remote-ssh/aliases/<id>`（空壳，只做路由键），自动注册进原生工作区列表，标题 `<server> > <base>`
 - 路由开关（设置 → 远程主机页顶部下拉；底层是 profile patch `- id: remote-vs` 下 `config.routingMode`，volatile，免重启）：
-  `off`（默认，直通本地）/ `shadow`（记日志仍走本地）/ `enforce`（真路由）
+  默认 `enforce`（真路由）；可切 `off`（纯直通本地）/ `shadow`（记日志仍走本地）作为排障开关
 - 新建工作区：原生"添加工作区…"入口已接管（本地/远端双 tab；远端腿=主机→推送→绑定向导）
 - 预设：`Remote` 预设（bash 工具集）；enforce 下远端新会话自动切过去（默认预设才切，不践踏显式选择）
 - 顶层真相（实测结论，非假设）：
@@ -284,7 +285,9 @@ helper RPC（fs）/ ssh2（进程），本地一切不变；两者同 Host、共
 官方从未发布 helper 二进制（Release assets 全空），本插件走自编译：
 
 - 构建机：WSL2 Ubuntu-22.04（glibc 2.35，与目标远端一致），Node v24.21.0 + pnpm 11.28.5
-- 源码：`dsh-v0.2.1-alpha.2` tag（**构建基线**：对齐的是 wire 协议号，不是 Host 版本号 —— 协议号至今仍是 2，故 Host 升到 alpha.4 / alpha.5 都无需重编）
+- 源码：`dsh-v0.2.1-alpha.2` tag（**构建基线**：对齐的是 wire 协议号，不是 Host 版本号 —— 我们用到的
+  协议号仍是 **2**，Host 升到 `0.2.2-alpha.2` 也不需要重编：插件自行停在 `dsh-ssh@0.2.1-rc.2`，
+  新 Host 那一代 `dsh-ssh` 的协议 3 我们故意不跟，差异见维护文档 §2.26）
 - 命令：官方原脚本 `pnpm exec tsx scripts/build-exe-for-ssh-helper.ts --target=node24-linux-x64`
 - 唯一偏离：无 docker 跑不了 manylinux 2.28 重编，加了 `DSH_GLIBC_CEILING`
   环境覆盖（默认仍 2.28），本次以 2.35 构建（见缓存目录 `glibc-ceiling.patch`）

package/cordis.patch.yml

@@ -54,7 +54,7 @@
       inject: [localFileReferences, remoteWorlds]
 
     # Remote agent preset, bound to this bundle's lifecycle.
-    # Mirrored from preset-standard @ dsh 0.2.1-alpha.3 with these diffs:
+    # Mirrored from preset-standard @ dsh 0.2.2-alpha.2 with these diffs:
     #   1. persona prefix reframed for remote SSH work (transparent routing);
     #   2. tool-bash moved into an isolated shell group with our routed bash
     #      executor (stock root shell stays pwsh on Windows);
@@ -67,6 +67,12 @@
     # preset) right after `tool-plugin-manager` — mirrored here for the same
     # reason as above: a row missing from the mirror is a preset that silently
     # loads a different toolset than stock.
+    # 0.2.2-alpha.2 note: stock dropped `tool-subagent-list-agents` (the
+    # `dsh-tool-subagent-control/list-agents` subpath is gone from the package),
+    # renamed `modelSelectionSettings` to `modelSelection` + `modelDiscovery`,
+    # and made the plugin-manager row conditional on `profileContext`. All
+    # three are mirrored here: the first one is a hard module-resolution error,
+    # the other two are schema drift.
     - id: preset-remote
       name: '@deepseek-ai/dsh-agent-preset'
       config:
@@ -207,14 +213,13 @@
             config:
               - id: tool-subagent-control
                 name: '@deepseek-ai/dsh-tool-subagent-control'
-              - id: tool-subagent-list-agents
-                name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
               - id: tool-subagent
                 name: '@deepseek-ai/dsh-tool-subagent'
                 config:
                   provider: spawn
                   toolName: subagent
-                  modelSelectionSettings: true
+                  modelSelection: true
+                  modelDiscovery: true
               - id: tool-subagent-fork
                 name: '@deepseek-ai/dsh-tool-subagent'
                 config:
@@ -241,7 +246,7 @@
             name: '@deepseek-ai/dsh-tool-present'
           - id: tool-plugin-manager
             name: '@deepseek-ai/dsh-plugin-manager/tools'
-            disabled: true
+            disabled: !!js "!ctx.get('profileContext')"
           - id: tool-plugin-market
             name: '@deepseek-ai/dsh-plugin-market/tools'
             disabled: true

package/lib/client.js

@@ -1355,7 +1355,7 @@ window.__ModuleLoader__.load({
 			"route.off": "关闭（直通本地）",
 			"route.shadow": "影子（记日志仍走本地）",
 			"route.enforce": "强制（真路由）",
-			"route.hint": "切换即时生效并写入 profile，无需重启",
+			"route.hint": "切换即时生效并写入 profile，无需重启；默认「强制（真路由）」。",
 			"route.saving": "保存中…",
 			"route.tombstones": "墓碑",
 			"route.aliasPath": "本地别名目录（原生工作区入口）",
@@ -1706,7 +1706,7 @@ window.__ModuleLoader__.load({
 			"route.off": "Off (local passthrough)",
 			"route.shadow": "Shadow (log only, still local)",
 			"route.enforce": "Enforce (real routing)",
-			"route.hint": "Applies immediately and persists to the profile; no restart needed.",
+			"route.hint": "Applies immediately and persists to the profile; no restart needed. Default: enforce (real routing).",
 			"route.saving": "Saving…",
 			"route.tombstones": "tombstones",
 			"route.aliasPath": "Local alias dir (native workspace entry)",
@@ -35259,7 +35259,7 @@ window.__ModuleLoader__.load({
 				const { actx, input } = resolved;
 				const snapshot = input.state.getSnapshot();
 				if (input.insertReference === void 0 || snapshot.draftRev === void 0) return false;
-				if (snapshot.phase === "adjudicating" || snapshot.phase === "submitting") return false;
+				if (snapshot.phase === "adjudicating" || snapshot.phase === "submitting" || snapshot.phase === "sending") return false;
 				before = snapshot.draftRev;
 				const at = appendOffset(snapshot);
 				if (at === void 0) return false;
@@ -35314,6 +35314,7 @@ window.__ModuleLoader__.load({
 				const { actx, input } = resolved;
 				const snapshot = input.state.getSnapshot();
 				const draft = snapshot.draft;
+				if (snapshot.phase === "adjudicating" || snapshot.phase === "submitting" || snapshot.phase === "sending") return false;
 				if ((snapshot.occurrences ?? []).length > 0 || snapshot.phase === "claimed") {
 					const at = appendOffset(snapshot);
 					if (snapshot.draftRev === void 0 || at === void 0) {
@@ -38129,7 +38130,7 @@ Integer Float Double Long Int32 Int64 Uint8 uint32_t int32_t uint64_t int64_t si
 					const primary = host.querySelectorAll("[class*=\"rvs-ck-\"]").length;
 					const fallback = host.querySelectorAll("span[class^=\"rvs-t-\"]").length;
 					const count = primary > 0 ? primary : fallback;
-					console.info(`[dsh-remote-vs] build 1028-1237 · ${source} · colored tokens: ${count} (${propsRef.current.path})`);
+					console.info(`[dsh-remote-vs] build 1028-1532 · ${source} · colored tokens: ${count} (${propsRef.current.path})`);
 					propsRef.current.onTokens?.(count);
 				};
 				const armFallback = () => {
@@ -41695,7 +41696,7 @@ Integer Float Double Long Int32 Int64 Uint8 uint32_t int32_t uint64_t int64_t si
 			hosts: [],
 			workspaces: [],
 			routing: {
-				mode: "off",
+				mode: "enforce",
 				aliasPaths: {},
 				tombstones: []
 			},
@@ -44414,8 +44415,8 @@ Integer Float Double Long Int32 Int64 Uint8 uint32_t int32_t uint64_t int64_t si
 						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 							className: "rvs-build",
-							title: `dsh-remote-vs build 1028-1237`,
-							children: "1028-1237"
+							title: `dsh-remote-vs build 1028-1532`,
+							children: "1028-1532"
 						}),
 						tokenCount !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 							className: "rvs-build",
@@ -64559,7 +64560,8 @@ Integer Float Double Long Int32 Int64 Uint8 uint32_t int32_t uint64_t int64_t si
 		function SettingsHostsSection(_props) {
 			const [t] = (0, react.useState)(() => makeT(detectLang()));
 			const [hosts, setHosts] = (0, react.useState)([]);
-			const [mode, setMode] = (0, react.useState)("off");
+			/** Pre-load placeholder; matches the plugin's default (nforce) until the host answers. */
+			const [mode, setMode] = (0, react.useState)("enforce");
 			const [version, setVersion] = (0, react.useState)("");
 			const [saving, setSaving] = (0, react.useState)(false);
 			const [error, setError] = (0, react.useState)(void 0);

package/lib/index.js

@@ -4006,7 +4006,7 @@ const Config = z.object({
 		"off",
 		"shadow",
 		"enforce"
-	]).default("off").volatile(),
+	]).default("enforce").volatile(),
 	gitTimeoutMs: z.number().step(1).min(MIN_TIMEOUT_MS).max(MAX_TIMEOUT_MS).default(DEFAULT_GIT_TIMEOUT_MS).volatile(),
 	readTimeoutMs: z.number().step(1).min(MIN_TIMEOUT_MS).max(MAX_TIMEOUT_MS).default(DEFAULT_READ_TIMEOUT_MS).volatile()
 });
@@ -4063,7 +4063,7 @@ function apply(ctx, config) {
 	const worlds = new RemoteWorlds(ctx, {
 		store,
 		pool,
-		mode: () => readField(config?.routingMode, "off")
+		mode: () => readField(config?.routingMode, "enforce")
 	});
 	ctx.provide("remoteWorlds", worlds);
 	ctx.effect(() => () => {

package/lib/types/client/composer.d.ts

@@ -95,7 +95,11 @@ interface InputSnapshot {
     draft: string;
     draftRev?: number;
     occurrences?: readonly OccurrenceLike[];
-    phase?: 'plain' | 'adjudicating' | 'claimed' | 'submitting';
+    /**
+     * Host submission plane. `sending` exists since DSH 0.2.2-alpha.2: an ordinary
+     * message the host has not accepted yet — the editor is read-only there too.
+     */
+    phase?: 'plain' | 'adjudicating' | 'claimed' | 'submitting' | 'sending';
     claim?: {
         readonly token: string;
     };

package/lib/types/index.d.ts

@@ -39,6 +39,11 @@ export interface Config {
     /**
      * P2 transparent-routing kill-switch: off = pure local passthrough;
      * shadow = log remote decisions but execute locally; enforce = route.
+     *
+     * The DEFAULT is `enforce`: the plugin exists to execute remote workspaces
+     * remotely, and a fresh profile that silently kept executing locally was the
+     * most common "why is nothing remote" report. `off`/`shadow` stay available as
+     * explicit opt-outs for debugging and for hosts that must stay local.
      */
     routingMode?: RoutingMode;
     /** Per-command timeout for git work on a remote host (ms). */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-remote-vs",
   "description": "VSCode-style remote development for DSH: SSH host manager (key/password), helper deploy pipeline with version check, remote file explorer + editor + terminal in dsh-better-sidebar.",
-  "version": "0.9.3",
+  "version": "0.10.0",
   "icon": "icon.svg",
   "keywords": [
     "dsh",
@@ -59,7 +59,7 @@
     "./locale/*.json": "./locale/*.json"
   },
   "engines": {
-    "dsh": ">=0.2.1-alpha.3 <0.3.0"
+    "dsh": ">=0.2.2-alpha.2 <0.3.0"
   },
   "dsh": {
     "bundle": {
@@ -122,7 +122,7 @@
     "@codemirror/view": "^6.43.14",
     "@deepseek-ai/dsh-fs-ssh": "0.2.1-rc.2",
     "@deepseek-ai/dsh-ssh": "0.2.1-rc.2",
-    "@deepseek-ai/schemastery": "3.18.5",
+    "@deepseek-ai/schemastery": "3.18.6-alpha.1",
     "@lezer/highlight": "1.2.3",
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/xterm": "^6.0.0",
@@ -130,44 +130,44 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.5-alpha.2",
-    "@deepseek-ai/dsh-agent-preset": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-bash-local": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-file-reference": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-fs": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-shell": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-spill": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-subprocess": "^0.2.1-rc.2",
-    "@deepseek-ai/dsh-tools": "^0.2.1-rc.2",
+    "@deepseek-ai/cordis": "^4.0.6-alpha.1",
+    "@deepseek-ai/dsh-agent-preset": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-bash-local": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-file-reference": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-fs": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-shell": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-spill": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-subprocess": "^0.2.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "^0.2.2-alpha.2",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.4",
-    "@deepseek-ai/dsh-agent": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-agent-preset-registry": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-api-remotes": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-bash-local": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-locale": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-sidebar-right": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-workspace": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-file-reference": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-fs": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-host-directory-picker": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-llm": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-sandbox": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-shell": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-spill": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-subprocess": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-working-directory": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-workspace": "0.2.1-rc.2",
+    "@deepseek-ai/cordis": "^4.0.6-alpha.1",
+    "@deepseek-ai/dsh-agent": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-agent-preset-registry": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-api-remotes": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-bash-local": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-locale": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-sidebar-right": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-file-reference": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-fs": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-host-directory-picker": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-sandbox": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-session": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-shell": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-spill": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-subprocess": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-working-directory": "0.2.2-alpha.2",
+    "@deepseek-ai/dsh-workspace": "0.2.2-alpha.2",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.1",
     "@types/react-dom": "^18.3.5",

package/src/client/SettingsHosts.tsx

@@ -22,7 +22,8 @@ import { Notice, Row, hairline, optionStyle, selectStyle } from './ui.tsx'
 export function SettingsHostsSection(_props: SettingsSectionOwnerProps): ReactNode {
   const [t] = useState(() => makeT(detectLang()))
   const [hosts, setHosts] = useState<RemoteHostSummary[]>([])
-  const [mode, setMode] = useState<'off' | 'shadow' | 'enforce'>('off')
+  /** Pre-load placeholder; matches the plugin's default (nforce) until the host answers. */
+  const [mode, setMode] = useState<'off' | 'shadow' | 'enforce'>('enforce')
   const [version, setVersion] = useState('')
   const [saving, setSaving] = useState(false)
   const [error, setError] = useState<string | undefined>(undefined)

package/src/client/composer.ts

@@ -100,7 +100,11 @@ interface InputSnapshot {
   draft: string
   draftRev?: number
   occurrences?: readonly OccurrenceLike[]
-  phase?: 'plain' | 'adjudicating' | 'claimed' | 'submitting'
+  /**
+   * Host submission plane. `sending` exists since DSH 0.2.2-alpha.2: an ordinary
+   * message the host has not accepted yet — the editor is read-only there too.
+   */
+  phase?: 'plain' | 'adjudicating' | 'claimed' | 'submitting' | 'sending'
   claim?: { readonly token: string }
 }
 
@@ -295,7 +299,7 @@ export function insertDraftReference(
     const { actx, input } = resolved
     const snapshot = input.state.getSnapshot()
     if (input.insertReference === undefined || snapshot.draftRev === undefined) return false
-    if (snapshot.phase === 'adjudicating' || snapshot.phase === 'submitting') return false
+    if (snapshot.phase === 'adjudicating' || snapshot.phase === 'submitting' || snapshot.phase === 'sending') return false
     before = snapshot.draftRev
     const at = appendOffset(snapshot)
     if (at === undefined) return false
@@ -346,6 +350,11 @@ export function appendToDraft(ctx: Context, sessionId: string, text: string): bo
     const { actx, input } = resolved
     const snapshot = input.state.getSnapshot()
     const draft = snapshot.draft
+    // The host makes the editor read-only on every submission plane: a slash
+    // command being checked, a claimed command running, and (since DSH
+    // 0.2.2-alpha.2) an ordinary message waiting for the host to accept it.
+    // Writing there would either be refused or land after the send snapshot.
+    if (snapshot.phase === 'adjudicating' || snapshot.phase === 'submitting' || snapshot.phase === 'sending') return false
     if ((snapshot.occurrences ?? []).length > 0 || snapshot.phase === 'claimed') {
       const at = appendOffset(snapshot)
       if (snapshot.draftRev === undefined || at === undefined) {

package/src/client/i18n.ts

@@ -138,7 +138,7 @@ const zh: Record<string, string> = {
   'route.off': '关闭（直通本地）',
   'route.shadow': '影子（记日志仍走本地）',
   'route.enforce': '强制（真路由）',
-  'route.hint': '切换即时生效并写入 profile，无需重启',
+  'route.hint': '切换即时生效并写入 profile，无需重启；默认「强制（真路由）」。',
   'route.saving': '保存中…',
   'route.tombstones': '墓碑',
   'route.aliasPath': '本地别名目录（原生工作区入口）',
@@ -494,7 +494,7 @@ const en: Record<string, string> = {
   'route.off': 'Off (local passthrough)',
   'route.shadow': 'Shadow (log only, still local)',
   'route.enforce': 'Enforce (real routing)',
-  'route.hint': 'Applies immediately and persists to the profile; no restart needed.',
+  'route.hint': 'Applies immediately and persists to the profile; no restart needed. Default: enforce (real routing).',
   'route.saving': 'Saving…',
   'route.tombstones': 'tombstones',
   'route.aliasPath': 'Local alias dir (native workspace entry)',

package/src/client/store.tsx

@@ -350,7 +350,8 @@ const state: State = {
   error: undefined,
   hosts: [],
   workspaces: [],
-  routing: { mode: 'off', aliasPaths: {}, tombstones: [] },
+  // Pre-bootstrap placeholder: same default as the plugin config (nforce).
+  routing: { mode: 'enforce', aliasPaths: {}, tombstones: [] },
   workspaceId: readWorkspaceId(),
   status: undefined,
   head: undefined,

package/src/index.ts

@@ -69,6 +69,11 @@ export interface Config {
   /**
    * P2 transparent-routing kill-switch: off = pure local passthrough;
    * shadow = log remote decisions but execute locally; enforce = route.
+   *
+   * The DEFAULT is `enforce`: the plugin exists to execute remote workspaces
+   * remotely, and a fresh profile that silently kept executing locally was the
+   * most common "why is nothing remote" report. `off`/`shadow` stay available as
+   * explicit opt-outs for debugging and for hosts that must stay local.
    */
   routingMode?: RoutingMode
   /** Per-command timeout for git work on a remote host (ms). */
@@ -107,7 +112,7 @@ export interface ResolvedConfig {
 export const Config = z.object({
   announceToAgent: z.boolean().default(false).volatile(),
   enabled: z.boolean().default(true).volatile(),
-  routingMode: z.union(['off', 'shadow', 'enforce'] as const).default('off').volatile(),
+  routingMode: z.union(['off', 'shadow', 'enforce'] as const).default('enforce').volatile(),
   gitTimeoutMs: z.number().step(1).min(MIN_TIMEOUT_MS).max(MAX_TIMEOUT_MS)
     .default(DEFAULT_GIT_TIMEOUT_MS).volatile(),
   readTimeoutMs: z.number().step(1).min(MIN_TIMEOUT_MS).max(MAX_TIMEOUT_MS)
@@ -171,7 +176,10 @@ export function apply(ctx: Context, config?: ResolvedConfig): void {
   const worlds = new RemoteWorlds(ctx, {
     store,
     pool,
-    mode: () => readField(config?.routingMode, 'off' as RoutingMode),
+    // Keep the runtime fallback equal to the schema default: a Host that hands
+    // the plugin a config object without this field must behave like a fresh
+    // profile, not like the old opt-in (`off`) behaviour.
+    mode: () => readField(config?.routingMode, 'enforce' as RoutingMode),
   })
   ctx.provide('remoteWorlds', worlds)
   ctx.effect(() => () => { pool.dispose() }, 'dsh-remote-vs: pool')