dsh-select-quote 0.3.21 → 0.4.0

package/lib/client.js

@@ -95,6 +95,8 @@ const zh = {
 	"toolbar.askInSide": "在侧边提问",
 	"toolbar.sideTaskFailed": "侧边提问创建失败",
 	"toolbar.sideTaskUnavailable": "当前无法创建侧边提问",
+	"toolbar.sideUnavailable": "侧边提问不可用：宿主的侧边栏服务未就绪",
+	"toolbar.translateUnavailable": "翻译不可用：宿主的模型服务未就绪",
 	"sideTask.title": "在侧边提问",
 	"sideTask.placeholder": "就这段原文提问…",
 	"sideTask.send": "发送",
@@ -238,6 +240,8 @@ const en = {
 	"toolbar.askInSide": "Ask in side task",
 	"toolbar.sideTaskFailed": "Could not start the side task",
 	"toolbar.sideTaskUnavailable": "The side task is unavailable here",
+	"toolbar.sideUnavailable": "Sidebar questions are unavailable: the host sidebar service is not ready",
+	"toolbar.translateUnavailable": "Translation is unavailable: the host model service is not ready",
 	"sideTask.title": "Ask in side task",
 	"sideTask.placeholder": "Ask about this passage…",
 	"sideTask.send": "Send",
@@ -383,6 +387,8 @@ const ja = {
 	"toolbar.askInSide": "サイドで質問",
 	"toolbar.sideTaskFailed": "サイドタスクを開始できませんでした",
 	"toolbar.sideTaskUnavailable": "この画面ではサイドタスクを使えません",
+	"toolbar.sideUnavailable": "サイドバー質問は利用できません: ホストのサイドバーサービスが未準備です",
+	"toolbar.translateUnavailable": "翻訳は利用できません: ホストのモデルサービスが未準備です",
 	"sideTask.title": "サイドで質問",
 	"sideTask.placeholder": "この箇所について質問…",
 	"sideTask.send": "送信",
@@ -526,6 +532,8 @@ const es = {
 	"toolbar.askInSide": "Preguntar en tarea lateral",
 	"toolbar.sideTaskFailed": "No se pudo iniciar la tarea lateral",
 	"toolbar.sideTaskUnavailable": "La tarea lateral no está disponible aquí",
+	"toolbar.sideUnavailable": "Las preguntas laterales no están disponibles: el servicio de barra lateral del host no está listo",
+	"toolbar.translateUnavailable": "La traducción no está disponible: el servicio de modelos del host no está listo",
 	"sideTask.title": "Preguntar en tarea lateral",
 	"sideTask.placeholder": "Pregunta sobre este pasaje…",
 	"sideTask.send": "Enviar",
@@ -671,6 +679,8 @@ const fr = {
 	"toolbar.askInSide": "Demander dans une tâche latérale",
 	"toolbar.sideTaskFailed": "Impossible de démarrer la tâche latérale",
 	"toolbar.sideTaskUnavailable": "La tâche latérale n’est pas disponible ici",
+	"toolbar.sideUnavailable": "Les questions latérales sont indisponibles : le service de barre latérale de l’hôte n’est pas prêt",
+	"toolbar.translateUnavailable": "La traduction est indisponible : le service de modèles de l’hôte n’est pas prêt",
 	"sideTask.title": "Demander dans une tâche latérale",
 	"sideTask.placeholder": "Posez une question sur ce passage…",
 	"sideTask.send": "Envoyer",
@@ -816,6 +826,8 @@ const de = {
 	"toolbar.askInSide": "In Seitenaufgabe fragen",
 	"toolbar.sideTaskFailed": "Seitenaufgabe konnte nicht gestartet werden",
 	"toolbar.sideTaskUnavailable": "Die Seitenaufgabe ist hier nicht verfügbar",
+	"toolbar.sideUnavailable": "Seitenfragen sind nicht verfügbar: der Sidebar-Dienst des Hosts ist nicht bereit",
+	"toolbar.translateUnavailable": "Übersetzung ist nicht verfügbar: der Modell-Dienst des Hosts ist nicht bereit",
 	"sideTask.title": "In Seitenaufgabe fragen",
 	"sideTask.placeholder": "Frage zu dieser Passage stellen…",
 	"sideTask.send": "Senden",
@@ -961,6 +973,8 @@ const ru = {
 	"toolbar.askInSide": "Спросить в боковой задаче",
 	"toolbar.sideTaskFailed": "Не удалось открыть боковую задачу",
 	"toolbar.sideTaskUnavailable": "Боковая задача недоступна в этом окне",
+	"toolbar.sideUnavailable": "Боковые вопросы недоступны: служба боковой панели хоста не готова",
+	"toolbar.translateUnavailable": "Перевод недоступен: служба моделей хоста не готова",
 	"sideTask.title": "Спросить в боковой задаче",
 	"sideTask.placeholder": "Спросите об этом фрагменте…",
 	"sideTask.send": "Отправить",
@@ -1110,6 +1124,8 @@ const pt = {
 	"toolbar.askInSide": "Perguntar na tarefa lateral",
 	"toolbar.sideTaskFailed": "Não foi possível iniciar a tarefa lateral",
 	"toolbar.sideTaskUnavailable": "A tarefa lateral não está disponível aqui",
+	"toolbar.sideUnavailable": "Perguntas laterais indisponíveis: o serviço de barra lateral do host não está pronto",
+	"toolbar.translateUnavailable": "A tradução está indisponível: o serviço de modelos do host não está pronto",
 	"sideTask.title": "Perguntar na tarefa lateral",
 	"sideTask.placeholder": "Pergunte sobre esta passagem…",
 	"sideTask.send": "Enviar",
@@ -1544,7 +1560,7 @@ const COMPONENTS_CSS = [
   --dsq-shadow: var(--dsw-elevation-prominent, 0 0 0 .5px rgba(0, 0, 0, 0.04), 0 3px 8px rgba(0, 0, 0, 0.04), 0 0 20px rgba(0, 0, 0, 0.05));
   /* Every surface above takes the same elevation; declaring it once here is
      what keeps the component blocks free of a copied box-shadow. */
-  box-shadow: var(--dsq-shadow);
+  box-shadow: var(--dsw-elevation-prominent, 0 0 0 0.5px rgba(0, 0, 0, 0.04), 0 3px 8px rgba(0, 0, 0, 0.06));
 }
 
 /* 浮层挂载与层带（2026-10-20 定，改前先读）：
@@ -1623,6 +1639,48 @@ const COMPONENTS_CSS = [
   background: var(--dsq-fill-hover);
 }
 
+/* An entry point the Host cannot run right now stays in the row, dimmed, and
+   explains itself on hover. Removing it instead would read as a missing
+   feature; a click that only produces a toast makes the user hunt for why. */
+.dsq_button[aria-disabled='true'],
+.dsq_touchAction[aria-disabled='true'],
+.dsq_ctxItem[aria-disabled='true'],
+.dsq_handoffChevron[aria-disabled='true'] {
+  opacity: 0.42;
+  cursor: default;
+}
+
+.dsq_button[aria-disabled='true']:hover {
+  background: transparent;
+}
+
+/* Hover tooltip. A native title would be slower and styled by the OS; this
+   rides the same token set as the rest of the chrome. */
+[data-dsq-tip] {
+  position: relative;
+}
+
+[data-dsq-tip]:hover::after {
+  content: attr(data-dsq-tip);
+  position: absolute;
+  top: calc(100% + 8px);
+  left: 50%;
+  z-index: 4;
+  max-width: 240px;
+  padding: 5px 9px;
+  border-radius: 8px;
+  border: 0.5px solid var(--dsq-line);
+  background: var(--dsq-bg-raised);
+  color: var(--dsq-label);
+  box-shadow: var(--dsw-elevation-prominent, 0 0 0 0.5px rgba(0, 0, 0, 0.04), 0 3px 8px rgba(0, 0, 0, 0.08));
+  font-size: 11.5px;
+  line-height: 16px;
+  font-weight: 400;
+  white-space: normal;
+  pointer-events: none;
+  transform: translateX(-50%);
+}
+
 /* Accent-filled actions: comment commit and annotation save. Only the
    metrics differ; fill and hover live here once. */
 .dsq_buttonAddComment,
@@ -1700,16 +1758,30 @@ const COMPONENTS_CSS = [
    only where they anchor differs. */
 .dsq_status,
 .dsq_touchStatus {
-  padding: 4px 10px;
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  padding: 5px 11px 5px 9px;
   border-radius: 999px;
-  background: var(--dsq-bg-toast);
-  color: var(--dsq-label-inverted);
+  border: 0.5px solid var(--dsq-toast-line);
+  /* Surface colours, not an inverted pill: a light page gets a light chip with
+     dark text, a dark page a dark chip with light text. The hairline keeps the
+     chip readable when it sits on a same-tone bubble. */
+  background: var(--dsq-toast-bg);
+  color: var(--dsq-toast-fg);
+  box-shadow: var(--dsw-elevation-prominent, 0 0 0 0.5px rgba(0, 0, 0, 0.04), 0 3px 8px rgba(0, 0, 0, 0.06));
   font-size: 12px;
   line-height: 18px;
   pointer-events: none;
   white-space: nowrap;
 }
 
+/* Every current status is a failure notice, so the icon is the error glyph. */
+.dsq_statusIcon {
+  flex: none;
+  color: var(--dsq-danger);
+}
+
 .dsq_status {
   position: absolute;
   z-index: 3;
@@ -2120,8 +2192,9 @@ const COMPONENTS_CSS = [
   left: 8px;
   z-index: 12;
   width: 20%;
-  min-width: 148px;
-  max-width: 220px;
+  /* Wide enough for the title and an inline confirm chip on one line. */
+  min-width: 210px;
+  max-width: 240px;
   align-items: stretch;
   gap: 6px;
   pointer-events: auto;
@@ -2137,6 +2210,9 @@ const COMPONENTS_CSS = [
   width: 20px;
   height: 20px;
   padding: 0;
+  /* On exit the confirm chip hands the corner back to this 20px button; the
+     label inside is still fading, so clip it instead of letting it spill. */
+  overflow: hidden;
   border-radius: 6px;
   color: var(--dsq-label-3);
   font-size: 14px;
@@ -2293,9 +2369,13 @@ const COMPONENTS_CSS = [
 }
 
 .dsq_summaryItem {
+  position: relative;
   display: block;
   padding: 8px 10px;
   border-radius: 8px;
+  /* The confirm pill overlays the row; clip it to the card so a very narrow
+     summary can never push content outside the visible surface. */
+  overflow: hidden;
   transition: background-color 0.12s;
 }
 
@@ -2304,10 +2384,13 @@ const COMPONENTS_CSS = [
 }
 
 .dsq_summaryItemHead {
+  position: relative;
   gap: 6px;
   /* Normal mode's action buttons set the row height; keep it in edit mode too
      so the badge and the label never move when the actions disappear. */
   min-height: 26px;
+  /* The confirm pill and the row label both clip here, never squeeze the row. */
+  min-width: 0;
 }
 
 .dsq_summaryItemBadge {
@@ -2345,6 +2428,106 @@ const COMPONENTS_CSS = [
   color: var(--dsq-label);
 }
 
+/* Second step of a remove: the same button grows a "确认移除" label.
+ *
+ * Layout here is load-bearing. The summary card is 20% wide (min 148px) and the
+ * head row is a flex line that already holds the ordinal badge and the
+ * "选中文本" label. Growing a label *inside* that row cannot work: whatever the
+ * button asks for, the flex line only has the leftover width, and a shrinkable
+ * flex item ends up a few pixels wide with the label wrapping one character per
+ * line — the collapse this rule exists to prevent.
+ *
+ * So the confirm step leaves the flow entirely: the button keeps its 26px
+ * square footprint (nothing shifts), and the "确认移除" pill is an absolutely
+ * positioned overlay measured against that square, so the badge and the row's
+ * label can never squeeze it. */
+.dsq_summaryItemActions {
+  position: relative;
+  min-width: 0;
+}
+/* Second step of a remove: the same button becomes an in-flow pill.
+ *
+ * The shared rule (preview.ts) already grows a "确认移除" label by animating its
+ * max-width. That animation only reads when the button stays in flow: the
+ * sibling edit button slides left as the label grows. So this rule deliberately
+ * does NOT position the button or its label — the original breakage was a flex
+ * squeeze (the row shrank the growing button to a few pixels and the label
+ * wrapped one character per line), not placement. flex:none plus nowrap keeps
+ * the pill at its natural width; the row label truncates instead, so nothing
+ * is covered and nothing wraps. */
+.dsq_summaryItemActions .dsq_deleteConfirm {
+  flex: none;
+  white-space: nowrap;
+}
+
+/* Collapsed label reserves no width, so the pill only occupies what it shows. */
+.dsq_summaryItemActions .dsq_deleteConfirm .dsq_deleteConfirmInner {
+  white-space: nowrap;
+}
+
+/* The row label yields width to the growing pill rather than competing. */
+.dsq_summaryItemHead .dsq_summaryItemLabel {
+  min-width: 0;
+  margin-top: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+/* "移除全部" on the summary card, second step.
+ *
+ * The chip keeps the icon button's corner (absolute, right-anchored) and only
+ * claims a fixed width, so it grows leftwards without touching the card layout:
+ * the badge, the title and the hint stay exactly where they were, with no
+ * reflow and no jitter. Because cardClose already sits in that corner, the
+ * confirm step is the same control in the same place — it just gets wider.
+ *
+ * Fixed rather than shrink-to-fit: the width has to hold "× 确认移除" at the
+ * smallest text size the app uses, and a fixed value keeps the two states
+ * visually interchangeable. */
+.dsq_summary > .dsq_deleteConfirm {
+  position: absolute;
+  top: 4px;
+  right: 4px;
+  z-index: 3;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 80px;
+  height: 26px;
+  padding: 0;
+  gap: 0;
+  white-space: nowrap;
+}
+
+.dsq_summary > .dsq_deleteConfirm .dsq_deleteConfirmInner {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  white-space: nowrap;
+}
+
+/* The pill reads "× 确认移除": the icon already precedes the label in the DOM,
+   so in flow the two sit side by side inside one chip. */
+.dsq_summary > .dsq_deleteConfirm .dsq_deleteConfirmInner {
+  display: inline-flex;
+  align-items: center;
+  white-space: nowrap;
+}
+
+/* Body gives way by truncating, never by wrapping. */
+.dsq_summaryBody {
+  min-width: 0;
+}
+
+.dsq_summaryTitle,
+.dsq_summaryHint {
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
 .dsq_summaryItemMain {
   min-width: 0;
   /* The lead-in lives on the shared wrapper, not on the normal-mode button, so
@@ -2411,6 +2594,26 @@ const COMPONENTS_CSS = [
   color: var(--dsq-label-3);
 }
 
+/* A user message that carries annotations but no words.
+ *
+ * The bubble is Host-rendered now, and the Host decides to show it from the raw
+ * content: an annotation-only message still has content (the protocol block), so
+ * the bubble paints — but our userText rule renders that block as empty text, so
+ * what remains is an empty rounded box above the card. Hide it, and hide it only
+ * when the bubble really holds nothing else:
+ *
+ *   bubble > (only child) userText root > (only child) text seat > (only child) empty run
+ *
+ * Any attachment, file card, reference summary or extra JSON block adds a
+ * sibling at one of those levels and keeps the bubble visible. */
+[data-message-bubble]:has(
+    > span:only-child
+      > span[data-slot='conversation.user.text.node']:only-child
+      > span:empty:only-child
+  ) {
+  display: none;
+}
+
 /* Inline edit form rendered inside the hover panel item (no extra layer).
    Shares .dsq_summaryItemText with the read view, but shows the full quote
    instead of clamp-reading it. */
@@ -2560,6 +2763,10 @@ const COMPONENTS_CSS = [
 
 .dsq_translateHead {
   gap: 6px;
+  /* Without this the row stretches its children: the 24px close button then
+     pins to the top of a taller row, so its hover plate looks detached from
+     the icon. */
+  align-items: center;
 }
 
 .dsq_translateTargetLabel {
@@ -2571,9 +2778,9 @@ const COMPONENTS_CSS = [
 
 .dsq_translateClose {
   flex: none;
-  width: 24px;
-  height: 24px;
-  border-radius: 7px;
+  width: 28px;
+  height: 28px;
+  border-radius: 8px;
   color: var(--dsq-label-3);
 }
 
@@ -2751,9 +2958,30 @@ const COMPONENTS_CSS = [
 
 .dsq_translateActions {
   justify-content: flex-end;
+  align-items: center;
   gap: 6px;
 }
 
+/* Copy result: an icon button in the actions row, matching the close control's
+   footprint so the two read as one family. The check glyph is the copied
+   confirmation; the label stays on aria-label/title. */
+.dsq_translateCopy {
+  flex: none;
+  width: 28px;
+  height: 28px;
+  border-radius: 8px;
+  color: var(--dsq-label-2);
+}
+
+.dsq_translateCopy:hover {
+  background: var(--dsq-fill-hover);
+  color: var(--dsq-label);
+}
+
+.dsq_translateCopy[data-copied='true'] {
+  color: var(--dsq-accent);
+}
+
 /* Language dropdown shared by the popover and the settings page. The trigger
    sits inline; the menu is a body-level frosted list so neither surface can
    clip it. */
@@ -2932,13 +3160,19 @@ const COMPONENTS_CSS = [
   white-space: nowrap;
 }
 
+/* Exit transition (this rule is the state the label lands in when confirm is
+   cancelled). Text leaves first and the box collapses afterwards: a 50ms fade
+   followed by a delayed width run, so the eye never tracks a half-transparent
+   label sliding into the icon. The entering direction is declared on the
+   confirming rule below, which is the state the label lands in on the way in —
+   CSS uses the transition of the destination state, not the origin. */
 .dsq_deleteConfirmLabel {
   max-width: 0;
   margin-left: 0;
   overflow: hidden;
   opacity: 0;
   white-space: nowrap;
-  transition: max-width 0.16s ease, margin-left 0.16s ease, opacity 0.12s ease;
+  transition: opacity 0.05s ease, max-width 0.12s ease 0.05s, margin-left 0.12s ease 0.05s;
 }
 
 /* One grid item, so the icon-only state stays centered in the 26/20px button
@@ -2948,10 +3182,12 @@ const COMPONENTS_CSS = [
   align-items: center;
 }
 
+/* Enter transition: the box opens first, the text fades in once it has room. */
 .dsq_deleteConfirm[data-confirming='true'] .dsq_deleteConfirmLabel {
   max-width: 140px;
   margin-left: 4px;
   opacity: 1;
+  transition: max-width 0.14s ease, margin-left 0.14s ease, opacity 0.1s ease 0.06s;
 }
 
 /* Touch selection chrome. Fixed to the visual viewport and mounted on body:
@@ -3169,66 +3405,59 @@ const COMPONENTS_CSS = [
   transition: background-color 0.12s;
 }
 
-/* Ordinal as a superscript corner badge at the END of the marked text, so it
-   never sits between the reader and the sentence. Only the last fragment of a
-   multi-fragment mark carries the index, so the number appears exactly once.
-   Absolute so the badge adds no inline advance width: annotating never reflows
-   the paragraph or moves following words. Bottom (not top) anchors to the last
-   fragment: for a mark spanning several lines the containing block is the union
-   of the first and last fragments, so its bottom edge is the last line.
-   BADGE_BOTTOM / BADGE_HEIGHT / the 2px margin in annotate-text.ts mirror the
-   numbers below for collision measurement. */
-.dsq_annMark[data-dsq-ann-index]::after {
-  content: attr(data-dsq-ann-index);
+/* Badge painted at the END of a mark: the ordinal, the handoff arrow, or the
+   bot glyph for a side question.
+   A real element, not a ::after. A mark that wraps is one inline box spanning
+   several lines, and percentage offsets resolve against a width unrelated to
+   where the text actually ends (measured: a 678px two-line mark resolved
+   +left: 100%+ to 0, a 91px one-line mark to 90.88px). annotate-text.ts
+   therefore measures the last line fragment and writes left/top in pixels;
+   collision offsets become a transform on this element alone. */
+.dsq_annBadge {
   position: absolute;
-  bottom: 8px;
-  left: 100%;
-  /* Above the native selection highlight and the background of a later mark:
-     both otherwise paint over the badge when their ranges meet. */
-  z-index: 2;
-  /* JS shifts colliding badges right/up; the resting position is unchanged. */
-  transform: translate(var(--dsq-ann-badge-x, 0px), var(--dsq-ann-badge-y, 0px));
   display: grid;
   place-items: center;
   min-width: 15px;
   height: 15px;
-  margin-left: 2px;
   padding: 0 3px;
   border-radius: 999px;
   background: var(--dsq-mark-color);
   color: #fff;
   font-size: 10px;
+  font-style: normal;
   font-weight: 600;
   line-height: 1;
-  /* The only click target on a mark; the prose itself stays selectable. */
-  pointer-events: auto;
-  cursor: pointer;
+  /* Above the native selection highlight and the background of a later mark:
+     both otherwise paint over the badge when their ranges meet. */
+  z-index: 2;
+  /* The mark stays the click target; the badge is decoration. */
+  pointer-events: none;
+  /* Never part of a text selection. Otherwise Ctrl+A or a drag across the
+     sentence includes the glyph, and the native highlight paints a coloured
+     box behind a badge that is meant to look like a superscript label. */
+  user-select: none;
+  -webkit-user-select: none;
+}
+
+/* Side-question mark: the lucide bot glyph instead of the ordinal, drawn in
+   white to match the badge ink on the accent fill. The glyph is a data URI
+   because the badge is a single element with no room for an inline svg. */
+.dsq_annBadge[data-dsq-ann-robot] {
+  /* Same padding as an ordinal badge, so the two read as one control; the
+     glyph shrinks to the content box (15px min-width - 6px padding). */
+  padding: 0 3px;
+  background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='none' stroke='%23ffffff' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M12 8V4H8'/%3E%3Crect width='16' height='12' x='4' y='8' rx='2'/%3E%3Cpath d='M2 14h2'/%3E%3Cpath d='M20 14h2'/%3E%3Cpath d='M15 13v2'/%3E%3Cpath d='M9 13v2'/%3E%3C/svg%3E");
+  background-repeat: no-repeat;
+  background-position: center;
+  background-size: 9px 9px;
 }
 
 /* Arrow badge for a selection sent to another conversation. One glyph, so the
    width is fixed instead of digit-based; the box matches the ordinal badge so
    collision offsets stay interchangeable. */
-.dsq_annMark[data-dsq-ann-arrow]::after {
-  content: "↗";
-  position: absolute;
-  bottom: 8px;
-  left: 100%;
-  z-index: 2;
-  transform: translate(var(--dsq-ann-badge-x, 0px), var(--dsq-ann-badge-y, 0px));
-  display: grid;
-  place-items: center;
+.dsq_annBadge[data-dsq-ann-arrow] {
   width: 15px;
-  height: 15px;
-  margin-left: 2px;
   padding: 0;
-  border-radius: 999px;
-  background: var(--dsq-mark-color);
-  color: #fff;
-  font-size: 10px;
-  font-weight: 600;
-  line-height: 1;
-  pointer-events: auto;
-  cursor: pointer;
 }
 
 .dsq_annMark:hover {
@@ -3951,7 +4180,14 @@ body {
   --dsq-font-size: var(--dsh-content-font-size, 14px);
   --dsq-font-delta: var(--dsh-content-font-delta, 0px);
   --dsq-bg-raised: var(--dsw-alias-bg-layer-1, #fff);
-  --dsq-bg-toast: var(--dsw-alias-bg-layer-3, rgba(0, 0, 0, 0.78));
+  /* Toast pill. The product token that used to back this (bg-layer-3) is plain
+     white in dsh 0.2.2 while the label inverted token is white too — a white
+     pill with white text. Pair two tokens that are guaranteed to be each
+     other's inverse instead: primary label as the surface, raised surface as
+     the ink. Light theme gives dark-on-light, dark theme flips with it. */
+  --dsq-toast-bg: var(--dsq-bg-raised);
+  --dsq-toast-fg: var(--dsq-label);
+  --dsq-toast-line: var(--dsq-line);
   /* The settings switch mirrors the Host's own switch: neutral track when off,
      brand fill when on, and a thumb that inverts with the theme. */
   --dsq-switch-off: var(--dsw-alias-border-l3, rgba(0, 0, 0, 0.12));
@@ -4033,6 +4269,7 @@ const styles = {
 	kbd: "dsq_kbd",
 	divider: "dsq_divider",
 	status: "dsq_status",
+	statusIcon: "dsq_statusIcon",
 	ctxMenu: "dsq_ctxMenu",
 	ctxItem: "dsq_ctxItem",
 	modelSeat: "dsq_modelSeat",
@@ -4100,6 +4337,7 @@ const styles = {
 	annDirective: "dsq_annDirective",
 	annAnchor: "dsq_annAnchor",
 	annMark: "dsq_annMark",
+	annBadge: "dsq_annBadge",
 	annMarkFlash: "dsq_annMarkFlash",
 	annMessageFlash: "dsq_annMessageFlash",
 	handoffRow: "dsq_handoffRow",
@@ -4135,6 +4373,7 @@ const styles = {
 	translateHead: "dsq_translateHead",
 	translateTargetLabel: "dsq_translateTargetLabel",
 	translateClose: "dsq_translateClose",
+	translateCopy: "dsq_translateCopy",
 	translateBody: "dsq_translateBody",
 	translateText: "dsq_translateText",
 	translateHint: "dsq_translateHint",
@@ -4506,6 +4745,7 @@ function cleanTextOf(item) {
 */
 const MARK_ATTR = "data-dsq-ann-mark";
 const INDEX_ATTR = "data-dsq-ann-index";
+const ROBOT_ATTR = "data-dsq-ann-robot";
 const ARROW_ATTR = "data-dsq-ann-arrow";
 const FLASH_MS = 1500;
 const jobs = /* @__PURE__ */ new Map();
@@ -4597,6 +4837,18 @@ function sameText(a, b) {
 	return norm(a) === norm(b);
 }
 /**
+* The mark's own prose, without the badge glyph.
+*
+* The badge is a child element carrying the ordinal or the arrow, so plain
+* `textContent` returns "…text1" and never equals the annotation text.
+*/
+function markTextOf(mark) {
+	let text = "";
+	for (const node of mark.childNodes) if (node instanceof Text) text += node.data;
+	else if (node instanceof Element && !node.classList.contains(styles.annBadge)) text += node.textContent ?? "";
+	return text;
+}
+/**
 * Already decorated by THIS job. A different job may wrap the same span (a
 * local pending annotation and the outbound arrow of the same selection are
 * separate marks), so the check must be by mark id, not by any mark.
@@ -4623,6 +4875,24 @@ function makeArrowInteractive(mark, targetLabel) {
 	const label = t("handoff.markAria", { target: targetLabel ?? "" });
 	if (mark.getAttribute("aria-label") !== label) mark.setAttribute("aria-label", label);
 }
+/**
+* Attach the badge element to the mark's last fragment.
+*
+* Called **after** the mark is in the document: `Range.surroundContents()`
+* clears the new parent's children before moving the range into it, so a badge
+* appended beforehand is silently dropped.
+*/
+function attachBadge(mark, job) {
+	const badge = document.createElement("i");
+	badge.className = styles.annBadge;
+	badge.setAttribute("aria-hidden", "true");
+	if (job.variant === "arrow") {
+		badge.setAttribute(ARROW_ATTR, "true");
+		badge.textContent = "↗";
+	} else if (job.variant === "robot") badge.setAttribute(ROBOT_ATTR, "true");
+	else badge.textContent = String(job.index);
+	mark.append(badge);
+}
 function createMark(job, withIndex) {
 	const mark = document.createElement("span");
 	mark.className = styles.annMark;
@@ -4664,8 +4934,10 @@ function wrapRange(item, job, from, to) {
 		const range = document.createRange();
 		range.setStart(node, piece.start - piece.entry.start);
 		range.setEnd(node, piece.end - piece.entry.start);
-		const mark = createMark(job, i === pieces.length - 1);
+		const last = i === pieces.length - 1;
+		const mark = createMark(job, last);
 		range.surroundContents(mark);
+		if (last) attachBadge(mark, job);
 		wrapped = true;
 	});
 	return wrapped;
@@ -4742,11 +5014,54 @@ function refreshAnnotationMarkLabels() {
 * never participates in text layout. Collisions are resolved inside each
 * message block, and a stack may not climb into the message above.
 */
+/** The badge element of one mark, when it has one. */
+function badgeOf(mark) {
+	return mark.querySelector(`.${styles.annBadge}`);
+}
+/**
+* Position one badge at the end of its mark's **last line fragment**.
+*
+* `left: 100%` cannot do this: a mark that wraps is one inline box spanning
+* several lines, and the percentage resolves against a width that has nothing
+* to do with where the text actually ends (measured: a 678px-wide two-line mark
+* resolved to `left: 0`, another 91px-wide one to `left: 90.88px`). So the
+* badge is a real element placed in pixels: measure the last client rect of a
+* range over the mark's text, then convert it into the mark's own coordinate
+* space.
+*/
+function placeBadge(mark, badge) {
+	const text = mark.firstChild;
+	if (!(text instanceof Text) || text.length === 0) return null;
+	const range = document.createRange();
+	range.setStart(text, 0);
+	range.setEnd(text, text.length);
+	const rects = Array.from(range.getClientRects()).filter((rect) => rect.width > 0 || rect.height > 0);
+	const last = rects[rects.length - 1];
+	if (last === void 0) return null;
+	badge.style.left = "0px";
+	badge.style.top = "0px";
+	badge.style.transform = "none";
+	const origin = badge.getBoundingClientRect();
+	if (origin.width === 0 && origin.height === 0) return null;
+	const height = origin.height || 15;
+	const dx = last.right + 2 - origin.left;
+	const dy = last.bottom - height - 8 - origin.top;
+	badge.style.transform = `translate(${dx}px, ${dy}px)`;
+	return {
+		dx,
+		dy
+	};
+}
 function layoutBadges(scope) {
 	const marks = Array.from(scope.querySelectorAll(`[${INDEX_ATTR}], [${ARROW_ATTR}]`));
+	const badges = /* @__PURE__ */ new Map();
+	const bases = /* @__PURE__ */ new WeakMap();
 	for (const mark of marks) {
-		mark.style.removeProperty("--dsq-ann-badge-x");
-		mark.style.removeProperty("--dsq-ann-badge-y");
+		const badge = badgeOf(mark);
+		if (badge === null) continue;
+		badges.set(mark, badge);
+		const base = placeBadge(mark, badge);
+		if (base !== null) bases.set(badge, base);
 	}
 	if (marks.length < 2) return;
 	const scroller = marks[0]?.closest("[data-conversation-scroll]");
@@ -4765,18 +5080,19 @@ function layoutBadges(scope) {
 		const ownerRect = owner?.getBoundingClientRect();
 		const topEdge = Math.max(scrollerTop, ownerRect && ownerRect.height > 0 ? ownerRect.top : scrollerTop) + 4;
 		const anchors = group.map((mark) => {
-			const rect = mark.getBoundingClientRect();
-			const arrow = mark.hasAttribute(ARROW_ATTR);
+			const badge = badges.get(mark);
+			if (badge === void 0) return null;
+			const rect = badge.getBoundingClientRect();
 			return {
-				mark,
+				badge,
 				index: Number(mark.getAttribute(INDEX_ATTR) ?? 0),
-				x: rect.right + 2,
-				y: rect.bottom - 8 - 15,
-				width: arrow ? 15 : 24,
-				height: 15,
+				x: rect.left,
+				y: rect.top,
+				width: rect.width || 24,
+				height: rect.height || 15,
 				visible: rect.width > 0 && rect.height > 0
 			};
-		}).filter((anchor) => anchor.visible).sort((a, b) => a.index - b.index);
+		}).filter((anchor) => anchor !== null && anchor.visible).sort((a, b) => a.index - b.index);
 		if (anchors.length < 2) continue;
 		const offsets = placeBadges(anchors, {
 			right: rightEdge - 4,
@@ -4784,11 +5100,16 @@ function layoutBadges(scope) {
 		});
 		anchors.forEach((anchor, i) => {
 			const { dx, dy } = offsets[i];
-			if (dx !== 0) anchor.mark.style.setProperty("--dsq-ann-badge-x", `${dx}px`);
-			if (dy !== 0) anchor.mark.style.setProperty("--dsq-ann-badge-y", `${dy}px`);
+			const base = bases.get(anchor.badge);
+			if (base === void 0) return;
+			anchor.badge.style.transform = `translate(${base.dx + dx}px, ${base.dy + dy}px)`;
 		});
 	}
 }
+/** True when this message row is rendered inside the right sidebar's session pane. */
+function insideSidePane(node) {
+	return node.closest("[data-sidebar-right-session]") !== null;
+}
 /**
 * Apply registered jobs. With `only`, touch just those rendered messages — the
 * mutation-driven path — instead of resolving and scanning every message for
@@ -4806,6 +5127,7 @@ function applyAnnotationMarks(root, only) {
 		const items = only ? job.messageId === "" ? onlyItems : onlyByKey?.get(job.messageId) ?? [] : job.messageId === "" ? lookup?.all ?? [] : [lookup?.byKey.get(job.messageId)].filter((item) => item !== void 0);
 		let decorated = false;
 		for (const item of items) {
+			if (job.variant !== "robot" && insideSidePane(item)) continue;
 			if (refreshMarkIndex(item, job)) {
 				decorated = true;
 				continue;
@@ -4817,10 +5139,16 @@ function applyAnnotationMarks(root, only) {
 	}
 	if (!only) {
 		layoutBadges(scope);
+		if (typeof requestAnimationFrame === "function") requestAnimationFrame(() => layoutBadges(scope));
 		return;
 	}
 	for (const item of only) if (item.isConnected) layoutBadges(item);
 }
+/** Re-place every badge; call after any layout change that moves text. */
+function relayoutAnnotationMarks(root) {
+	if (typeof document === "undefined") return;
+	layoutBadges(root ?? document.body);
+}
 /** Insert or refresh jobs; identical jobs are no-ops. */
 function upsertAnnotationJobs(next) {
 	let changed = false;
@@ -4959,7 +5287,7 @@ function findAnnotationMark(index, text, markId) {
 	const marks = [...document.querySelectorAll(`[${INDEX_ATTR}="${index}"]`)].filter((node) => node instanceof HTMLElement);
 	if (marks.length === 0) return null;
 	if (text) {
-		const hit = marks.find((mark) => sameText(mark.textContent ?? "", text));
+		const hit = marks.find((mark) => sameText(markTextOf(mark), text));
 		if (hit) return hit;
 	}
 	return marks[0];
@@ -5175,86 +5503,10 @@ function openSourceAndLocate(input) {
 	};
 	window.setTimeout(tick, 0);
 }
-const DRAFT_MARKER_RE = /\u200B/g;
-/** Plain text from Chat user-node content blocks (string or block array). */
-function contentBlocksToText(content) {
-	if (typeof content === "string") return content;
-	if (!Array.isArray(content)) return "";
-	return content.map((block) => {
-		if (block && typeof block === "object" && "text" in block) {
-			const text = block.text;
-			return typeof text === "string" ? text : "";
-		}
-		return "";
-	}).join("");
-}
-/** Short one-line card title from selected body text. */
-function previewTitle$1(text, max = 48) {
-	const oneLine = text.replace(/\s+/g, " ").trim();
-	return oneLine.length > max ? `${oneLine.slice(0, max)}…` : oneLine;
-}
-/** Ensure the draft carries the invisible marker, without disturbing its text. */
-function withDraftMarker(draft) {
-	return draft.includes("​") ? draft : `${draft}​`;
-}
 /** Remove every invisible marker from a draft. */
 function stripDraftMarker(draft) {
 	return draft.split("​").join("");
 }
-function toQuote(body) {
-	const text = body.join("\n").trim();
-	if (!text) return null;
-	return {
-		title: previewTitle$1(text),
-		body: text
-	};
-}
-/**
-* Single-pass reader for plugin quote blocks. Yields both the parsed quotes
-* and the leftover display text (question / non-quote lines).
-*/
-function scanQuoteMessage(text) {
-	const quotes = [];
-	const restLines = [];
-	let body = null;
-	const close = () => {
-		if (body === null) return;
-		const quote = toQuote(body);
-		if (quote) quotes.push(quote);
-		body = null;
-	};
-	for (const line of text.split("\n")) {
-		const trimmed = line.trimEnd();
-		const isMarker = trimmed === "> [选中文本]" || trimmed.startsWith("> [选中文本]");
-		if (body === null) {
-			if (isMarker) body = [];
-			else restLines.push(line);
-			continue;
-		}
-		if (trimmed.startsWith(">")) {
-			body.push(trimmed.replace(/^>\s?/, ""));
-			continue;
-		}
-		close();
-		if (isMarker) body = [];
-		else restLines.push(line);
-	}
-	close();
-	return {
-		quotes,
-		rest: restLines.join("\n").replace(/^\n+/, "").trim()
-	};
-}
-/**
-* Display text for a user bubble: drop every plugin quote block so the
-* transcript shows only the question. The durable message (and model payload)
-* still contains the full `> [选中文本]` text.
-*/
-function displayTextWithoutQuote(text) {
-	const clean = text.replace(DRAFT_MARKER_RE, "");
-	if (!clean.includes("> [选中文本]")) return clean;
-	return scanQuoteMessage(clean).rest;
-}
 //#endregion
 //#region src/client/protocol/annotation-protocol.ts
 /**
@@ -6096,7 +6348,9 @@ const SHAPES = {
 	"chevron-down": "<path d=\"m6 9 6 6 6-6\"/>",
 	"chevron-right": "<path d=\"m9 18 6-6-6-6\"/>",
 	check: "<path d=\"M20 6 9 17l-5-5\"/>",
-	"arrow-up-right": "<path d=\"M7 7h10v10\"/><path d=\"M7 17 17 7\"/>"
+	"arrow-up-right": "<path d=\"M7 7h10v10\"/><path d=\"M7 17 17 7\"/>",
+	"circle-alert": "<circle cx=\"12\" cy=\"12\" r=\"10\"/><path d=\"M12 8v4\"/><path d=\"M12 16h.01\"/>",
+	bot: "<path d=\"M12 8V4H8\"/><rect width=\"16\" height=\"12\" x=\"4\" y=\"8\" rx=\"2\"/><path d=\"M2 14h2\"/><path d=\"M20 14h2\"/><path d=\"M15 13v2\"/><path d=\"M9 13v2\"/>"
 };
 /** Markup form for plain-DOM call sites; `insertAdjacentHTML('afterbegin', …)`. */
 function iconMarkup(name, size = 15) {
@@ -6759,28 +7013,37 @@ function AnnotationSummary({ count, items, onRemoveAll, onItemSelect, onItemRemo
 //#endregion
 //#region src/client/composer/useDraftMarker.ts
 /**
-* Keep the composer's own send button usable while only annotations are
-* pending: an invisible marker makes an otherwise empty draft non-empty.
+* True when the draft is nothing but the legacy invisible send marker.
 *
-* Written ONCE per list change — never on a draft change (see QuoteCard history
-* for why rewriting on draft fights IME / backspace).
+* The plugin used to append U+200B so an annotation-only draft looked non-empty
+* and the Host's send button stayed enabled. That is gone: it made sending a
+* wordless message possible, and a Host-rendered bubble for such a message is
+* an empty box. Older persisted drafts may still carry the character, so the
+* composer distinguishes "only the marker" (empty the draft) from "marker next
+* to real text" (strip the marker, keep the text).
 */
-function useDraftMarker({ itemCount, draftRef, setDraft }) {
-	(0, react.useEffect)(() => {
-		if (itemCount === 0) return;
-		const current = draftRef.current;
-		if (current.includes("​")) return;
-		if (current.trim() !== "") return;
-		setDraft(withDraftMarker(current));
-	}, [
-		itemCount,
-		draftRef,
-		setDraft
-	]);
+function isMarkerOnly(draft) {
+	return draft.includes("​") && stripDraftMarker(draft).trim() === "";
 }
-function clearDraftMarker(draft, setDraft) {
-	if (!draft.includes("​")) return;
-	setDraft(stripDraftMarker(draft));
+//#endregion
+//#region src/client/composer/draft-write.ts
+/**
+* Replace the draft text without clearing atomic nodes when the host supports
+* an append-only edit.
+*
+* `current` is the draft the caller read before computing `next`; on a Lexical
+* host a revision mismatch simply returns false and the caller falls back.
+*/
+function writeDraft(actions, next, current) {
+	if (next === current) return true;
+	const capture = actions.captureInsertion;
+	const insert = actions.insertText;
+	if (typeof capture === "function" && typeof insert === "function") {
+		const span = capture();
+		if (span.start === 0 && span.end === current.length && typeof span.draftRev === "number" && insert.call(actions, next, span)) return true;
+	}
+	actions.setDraft(next);
+	return false;
 }
 //#endregion
 //#region src/client/composer/useSendIntercept.ts
@@ -6789,15 +7052,16 @@ function clearDraftMarker(draft, setDraft) {
 * composer, or the primary send button) so the composer's submit path carries
 * the JSON protocol block.
 */
-function useSendIntercept({ itemCount, draftRef, setDraft, onFolded, foldingRef }) {
+function useSendIntercept({ itemCount, draftRef, actionsRef, sessionId, onSelfWrite, onFolded, foldingRef }) {
 	(0, react.useEffect)(() => {
 		if (itemCount === 0) return;
 		const inject = () => {
 			const current = getAnnotations();
 			if (current.length === 0) return;
 			if (foldingRef !== void 0) foldingRef.current = true;
-			setDraft(composeAnnotatedMessage(draftRef.current, current));
-			clearAnnotations(void 0, "sent");
+			onSelfWrite();
+			writeDraft(actionsRef.current, composeAnnotatedMessage(draftRef.current, current), draftRef.current);
+			clearAnnotations(sessionId, "sent");
 			onFolded();
 		};
 		const onKeyDown = (event) => {
@@ -6829,7 +7093,9 @@ function useSendIntercept({ itemCount, draftRef, setDraft, onFolded, foldingRef
 	}, [
 		itemCount,
 		draftRef,
-		setDraft,
+		actionsRef,
+		sessionId,
+		onSelfWrite,
 		onFolded,
 		foldingRef
 	]);
@@ -6882,10 +7148,24 @@ function AnnotationPanel({ useInput, inputActions, sessionId }) {
 	actionsRef.current = inputActions;
 	sessionRef.current = sessionId;
 	const setDraft = (0, react.useCallback)((text) => {
-		actionsRef.current.setDraft(text);
+		selfWrites.current += 1;
+		writeDraft(actionsRef.current, text, draftRef.current);
 	}, []);
+	/**
+	* Bumped whenever this component rewrites the draft itself.
+	*
+	* The rewind path below treats *any* draft carrying a complete protocol
+	* block as a withdrawn message and lifts its annotations back into the
+	* pending list. The host publishes every programmatic write as a normal
+	* draft change, so without this counter the plugin's own write would be read
+	* back as a rewind. The restore records the stamp it ran at and bails when
+	* the draft it is looking at was produced by a later self-write.
+	*/
+	const selfWrites = (0, react.useRef)(0);
+	/** Stamp of the newest self-write the rewind path has already accounted for. */
+	const seenSelfWrite = (0, react.useRef)(0);
 	const sync = (0, react.useCallback)(() => {
-		setItems(getAnnotations());
+		setItems(getAnnotations(sessionId));
 	}, []);
 	(0, react.useEffect)(() => {
 		bindAnnotationSession(sessionId);
@@ -6913,15 +7193,14 @@ function AnnotationPanel({ useInput, inputActions, sessionId }) {
 			card.style.removeProperty("--dsq-quote-pad");
 		};
 	}, [items]);
-	useDraftMarker({
-		itemCount: items.length,
-		draftRef,
-		setDraft
-	});
 	useSendIntercept({
 		itemCount: items.length,
 		draftRef,
-		setDraft,
+		actionsRef,
+		sessionId,
+		onSelfWrite: () => {
+			selfWrites.current += 1;
+		},
 		onFolded: () => setItems(EMPTY),
 		foldingRef
 	});
@@ -6931,9 +7210,11 @@ function AnnotationPanel({ useInput, inputActions, sessionId }) {
 			return;
 		}
 		if (foldingRef.current || composing.current) return;
+		if (seenSelfWrite.current === selfWrites.current) return;
 		const restored = readComposedDraft(draft);
 		if (restored === null) return;
 		foldingRef.current = true;
+		seenSelfWrite.current = selfWrites.current;
 		restoreAnnotations(sessionId, restored.annotations);
 		setDraft(restored.rest);
 	}, [
@@ -6944,41 +7225,35 @@ function AnnotationPanel({ useInput, inputActions, sessionId }) {
 	]);
 	(0, react.useEffect)(() => {
 		if (composing.current) return;
-		if (items.length === 0) {
-			if (draft.includes("​")) setDraft(stripDraftMarker(draft));
-			return;
-		}
-		if (!draft.includes("​") && draft.trim() === "") setDraft(withDraftMarker(draft));
+		if (!draft.includes("​")) return;
+		setDraft(isMarkerOnly(draft) ? "" : stripDraftMarker(draft));
 	}, [
-		items,
 		draft,
 		setDraft,
 		composing
 	]);
 	const onRemoveAll = (0, react.useCallback)(() => {
-		clearAnnotations(void 0, "discarded");
+		clearAnnotations(sessionId, "discarded");
 		setItems(EMPTY);
-		clearDraftMarker(draftRef.current, setDraft);
-	}, [setDraft]);
+	}, []);
 	const dropIfEmpty = (0, react.useCallback)(() => {
-		setItems(getAnnotations());
-		if (getAnnotations().length === 0) clearDraftMarker(draftRef.current, setDraft);
-	}, [setDraft]);
+		setItems(getAnnotations(sessionId));
+	}, []);
 	const onItemSelect = (0, react.useCallback)((index, item) => {
 		scrollToAnnotation(index + 1, item.text, item.id);
 	}, []);
 	const onItemRemove = (0, react.useCallback)((_index, item) => {
-		if (item.id) removeAnnotation(void 0, item.id);
+		if (item.id) removeAnnotation(sessionId, item.id);
 		else {
-			const hit = getAnnotations().find((entry) => entry.text === item.text);
-			if (hit) removeAnnotation(void 0, hit.id);
+			const hit = getAnnotations(sessionId).find((entry) => entry.text === item.text);
+			if (hit) removeAnnotation(sessionId, hit.id);
 		}
 		dropIfEmpty();
 	}, [dropIfEmpty]);
 	const onItemEdit = (0, react.useCallback)((_index, item, comment) => {
-		const id = item.id ?? getAnnotations().find((entry) => entry.text === item.text)?.id;
+		const id = item.id ?? getAnnotations(sessionId).find((entry) => entry.text === item.text)?.id;
 		if (!id) return;
-		updateAnnotationComment(void 0, id, comment);
+		updateAnnotationComment(sessionId, id, comment);
 		sync();
 	}, [sync]);
 	/**
@@ -6994,7 +7269,7 @@ function AnnotationPanel({ useInput, inputActions, sessionId }) {
 			showToast(t("handoff.archived", { title: live }));
 			return;
 		}
-		const entry = getAnnotations().find((candidate) => candidate.id === item.id);
+		const entry = getAnnotations(sessionId).find((candidate) => candidate.id === item.id);
 		const handoffId = origin.handoffId ?? entry?.origin?.handoffId;
 		openSourceAndLocate({
 			sessionId: origin.sessionId,
@@ -7604,20 +7879,39 @@ function readSelectionSnapshot(toolbarRoot) {
 function clearNativeSelection() {
 	window.getSelection()?.removeAllRanges();
 }
+/**
+* Put text on the clipboard, falling back to the legacy selection copy.
+*
+* The async Clipboard API is the good path, but it is not always available in
+* practice: it rejects with `NotAllowedError` when the document is not focused
+* (a popover opened over an unfocused window, DevTools holding focus, an
+* embedded frame) and on origins the browser does not treat as secure. Only
+* reaching for the fallback when the API is *missing* turned every one of those
+* into a hard failure — the copy button reported "copy failed" and the text was
+* lost. Try the API, and on rejection fall back before giving up.
+*/
 async function copyText(text) {
-	if (navigator.clipboard?.writeText) {
+	if (navigator.clipboard?.writeText) try {
 		await navigator.clipboard.writeText(text);
 		return;
-	}
+	} catch {}
 	const area = document.createElement("textarea");
 	area.value = text;
 	area.setAttribute("readonly", "");
 	area.style.position = "fixed";
+	area.style.top = "0";
 	area.style.left = "-9999px";
 	document.body.appendChild(area);
+	const previous = document.activeElement;
 	area.select();
-	document.execCommand("copy");
-	area.remove();
+	let copied = false;
+	try {
+		copied = document.execCommand("copy");
+	} finally {
+		area.remove();
+		if (previous instanceof HTMLElement) previous.focus({ preventScroll: true });
+	}
+	if (!copied) throw new Error("the clipboard rejected the copy");
 }
 //#endregion
 //#region src/client/model/rank.ts
@@ -8407,12 +8701,9 @@ function splitLabelAt(label, accent) {
 		{ text: label.slice(at + needle.length) }
 	].filter((part) => part.text !== "");
 }
-/**
-* One ordered list for both surfaces: the floating toolbar paints it inline,
-* the right-click menu paints it vertically. Adding or reordering an action
-* here reaches both, so the two entry points cannot drift apart.
-*/
-function selectionActions(snapshot, handoff, visibility) {
+function selectionActions(snapshot, handoff, visibility, availability) {
+	const translateDisabled = availability?.translate === false;
+	const sideDisabled = availability?.sideTask === false;
 	return [
 		...linkTarget(snapshot.text, snapshot.anchorHref) === null ? [] : [{
 			key: "open",
@@ -8427,7 +8718,11 @@ function selectionActions(snapshot, handoff, visibility) {
 		...visibility?.hideTranslate ? [] : [{
 			key: "translate",
 			icon: "languages",
-			label: t("toolbar.translate")
+			label: t("toolbar.translate"),
+			...translateDisabled ? {
+				disabled: true,
+				disabledReason: t("toolbar.translateUnavailable")
+			} : {}
 		}],
 		{
 			key: "add",
@@ -8444,7 +8739,11 @@ function selectionActions(snapshot, handoff, visibility) {
 		{
 			key: "side",
 			icon: "panel-right",
-			label: t("toolbar.askInSide")
+			label: t("toolbar.askInSide"),
+			...sideDisabled ? {
+				disabled: true,
+				disabledReason: t("toolbar.sideUnavailable")
+			} : {}
 		}
 	];
 }
@@ -8555,9 +8854,11 @@ function SelectionMenu({ entries, x, y, onClose, initialFocus = "first" }) {
 			role: "menuitem",
 			className: cx(A.plain, A.row, styles.ctxItem),
 			tabIndex: -1,
+			"aria-disabled": entry.disabled ? "true" : void 0,
+			"data-dsq-tip": entry.disabled ? entry.disabledReason : void 0,
 			onPointerDown: keepSelection,
 			onPointerEnter: (event) => event.currentTarget.focus({ preventScroll: true }),
-			onClick: entry.onClick,
+			onClick: entry.disabled ? void 0 : entry.onClick,
 			children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(LucideIcon, {
 				name: entry.icon,
 				size: 15
@@ -8745,8 +9046,10 @@ function ActionRow({ actions, stacked, onHandoffPick }) {
 				type: "button",
 				className: cx(A.plain, stacked ? A.col : A.inlineRow, stacked ? styles.touchAction : styles.button),
 				"aria-haspopup": handoff ? "dialog" : void 0,
+				"aria-disabled": action.disabled ? "true" : void 0,
+				"data-dsq-tip": action.disabled ? action.disabledReason : void 0,
 				"data-dsq-handoff-trigger": handoff ? "true" : void 0,
-				onClick: action.onClick,
+				onClick: action.disabled ? void 0 : action.onClick,
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(LucideIcon, {
 					name: action.icon,
 					size: stacked ? 18 : 14
@@ -9061,9 +9364,15 @@ function TranslatePanel({ translate, touch = false, quote }) {
 			className: cx(A.row, styles.translateActions),
 			children: state.status === "done" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 				type: "button",
-				className: cx(A.plain, A.inlineRow, styles.button, styles.buttonAddComment),
+				className: cx(A.plain, A.gridMid, styles.translateCopy),
+				"aria-label": translate.copied ? t("translate.copied") : t("translate.copy"),
+				title: translate.copied ? t("translate.copied") : t("translate.copy"),
+				"data-copied": translate.copied ? "true" : void 0,
 				onClick: translate.onCopy,
-				children: translate.copied ? t("translate.copied") : t("translate.copy")
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(LucideIcon, {
+					name: translate.copied ? "check" : "copy",
+					size: 16
+				})
 			}) : state.status === "pending" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 				type: "button",
 				className: cx(A.plain, A.inlineRow, styles.button),
@@ -9170,11 +9479,15 @@ function ToolbarView({ touch, phase, active, status, viewport, actions, comment,
 					})
 				]
 			})] }) : null,
-			status ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+			status ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: styles.touchStatus,
 				style: { bottom: `calc(${viewport.inset}px + 72px + env(safe-area-inset-bottom, 0px))` },
 				role: "status",
-				children: status
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(LucideIcon, {
+					name: "circle-alert",
+					size: 13,
+					className: styles.statusIcon
+				}), status]
 			}) : null
 		] }), document.body);
 	}
@@ -9246,11 +9559,15 @@ function ToolbarView({ touch, phase, active, status, viewport, actions, comment,
 				onCancel: onCancelSide
 			})
 		}) : null,
-		status ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		status ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 			className: styles.status,
 			style: toolbarStyle,
 			role: "status",
-			children: status
+			children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(LucideIcon, {
+				name: "circle-alert",
+				size: 13,
+				className: styles.statusIcon
+			}), status]
 		}) : null
 	] }), active.layer.host);
 }
@@ -10072,6 +10389,24 @@ function useSelectionWatcher({ toolbarRef, commentWrapRef, phaseRef, touch, dism
 * its model seat and the send gesture. The transcript surface is the toolbar's;
 * this hook owns the question, its route and the host call.
 */
+/**
+* Remove the pending draft annotations that stand for this selection.
+*
+* A pending item carries every source the selection resolved to; the side send
+* carries the same locator. Matching on `selectionKeyOf` keeps two annotations
+* of identical text from different messages apart, and falls back to plain text
+* when the snapshot has no locator (the selection missed the transcript model).
+*/
+function consumeQuote(target, sessionId) {
+	const source = target.source;
+	const wanted = selectionKeyOf(target.text, source === void 0 ? void 0 : {
+		text: target.text,
+		messageId: source.messageId,
+		startOffset: source.startOffset,
+		endOffset: source.endOffset
+	});
+	for (const item of getAnnotations(sessionId)) if (item.sources.some((candidate) => source === void 0 ? candidate.text === target.text : selectionKeyOf(candidate.text, candidate) === wanted)) removeAnnotation(sessionId, item.id);
+}
 function useSideQuestion(input) {
 	const { phase, activeRef, hide, setStatus, setActive, dismissMenu, setPhase } = input;
 	const [sideText, setSideText] = (0, react.useState)("");
@@ -10116,6 +10451,7 @@ function useSideQuestion(input) {
 		run(snapshot, question, sideModel).then(() => {
 			setSending(false);
 			clearNativeSelection();
+			consumeQuote(snapshot);
 			hide();
 		}, (error) => {
 			setSending(false);
@@ -11035,7 +11371,11 @@ function SelectionToolbar({ sessionId }) {
 		left: active.left,
 		top: active.top
 	};
-	const actions = selectionActions(active, handoff.options, visibilityFor(active.text)).map((action) => ({
+	const availability = {
+		sideTask: runtime.sideTask !== void 0,
+		translate: runtime.translate !== void 0
+	};
+	const actions = selectionActions(active, handoff.options, visibilityFor(active.text), availability).map((action) => ({
 		...action,
 		onClick: () => runAction(action.key, active)
 	}));
@@ -11108,7 +11448,7 @@ function SelectionToolbar({ sessionId }) {
 			onClose: handoff.closePicker
 		}) : null,
 		menu ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SelectionMenu, {
-			entries: selectionActions(menu.snapshot, handoff.options, visibilityFor(menu.snapshot.text)).map((action) => ({
+			entries: selectionActions(menu.snapshot, handoff.options, visibilityFor(menu.snapshot.text), availability).map((action) => ({
 				...action,
 				label: action.key === "handoff" ? action.menuLabel ?? action.label : action.label,
 				onClick: () => runAction(action.key, menu.snapshot, "menu")
@@ -12651,11 +12991,55 @@ function bindChipPreview(chip, index) {
 */
 const DECO = "dsq-ann-directive";
 const DECO_KEY = "dsqAnnDirective";
+/** True when the text is exactly one directive and nothing else. */
+function isOnlyDirective(value) {
+	return new RegExp(`^\\s*${ANNOTATION_DIRECTIVE_RE.source}\\s*$`, "u").test(value);
+}
+/**
+* Whether a text node sitting inside `<code>` should be turned into a chip.
+*
+* The protocol header tells the model to emit the directive inside inline code,
+* so the common case is a `<code>` whose entire content is one directive. A
+* fenced block (inside `pre`) or a sentence that merely mentions the marker
+* keeps its literal text.
+*/
+function shouldChipCode(value, codeText, inPre) {
+	if (inPre) return false;
+	if (codeText == null) return false;
+	if (codeText.trim() !== value.trim()) return false;
+	return isOnlyDirective(value);
+}
+/**
+* Replace a `<code>` that holds nothing but one directive with its chip.
+*
+* The code element itself is dropped: keeping it would leave the grey inline
+* background around a button. The chip carries the same affordance the prose
+* form gets, so the reply reads the same either way.
+*/
+function decorateCodeSpan(code, raw) {
+	const match = new RegExp(`^\\s*${ANNOTATION_DIRECTIVE_RE.source}\\s*$`, "u").exec(raw);
+	if (match === null) return;
+	const index = Number(match[1]);
+	if (!Number.isFinite(index) || index <= 0) return;
+	const chip = document.createElement("button");
+	chip.type = "button";
+	chip.className = cx(styles.annDirective, A.inlineRow);
+	chip.setAttribute("data-dsq-deco", "true");
+	chip.dataset[DECO_KEY] = String(index);
+	chip.textContent = t("chip.annotation", { index });
+	bindChipPreview(chip, index);
+	code.replaceWith(chip);
+}
 function decorateTextNode(node) {
 	const value = node.nodeValue;
 	if (!value || !value.includes(":dsh-annotation{")) return;
 	const parent = node.parentElement;
 	if (!parent || parent.closest(`[data-${DECO}]`)) return;
+	const code = parent.closest("code");
+	if (code !== null && shouldChipCode(value, code.textContent, code.closest("pre") !== null)) {
+		decorateCodeSpan(code, value);
+		return;
+	}
 	if (parent.closest("pre, code, [data-dsq-toolbar], [data-dsq-chip-preview]")) return;
 	if (parent.closest("textarea, input, [data-lexical-editor=\"true\"]")) return;
 	const frag = document.createDocumentFragment();
@@ -12742,10 +13126,9 @@ function watchAnnotationDirectives(root) {
 * from the composer draft — which, at that instant, is the protocol block the
 * send gesture just folded in. A message submitted while a turn is running is
 * also previewed in the queue dock (`[data-queue-dock]`) from the same wire
-* content. Both are rendered by the chat flow itself, not by a
-* `conversation.chat.node` registration, so `UserMessageDisplay` never sees
-* them; without this, the raw JSON sits on screen until (or unless) a durable
-* message replaces it.
+* content. Both are painted by the chat flow itself rather than by any slot
+* entry, so the durable-message path never sees them; without this, the raw
+* JSON sits on screen until (or unless) a durable message replaces it.
 *
 * The durable message keeps the block (the model needs it). This is display
 * only: the echo's protocol run is rewritten in place, and the queue preview's
@@ -26754,6 +27137,57 @@ function createPluginRemote() {
 */
 var remote_default = createPluginRemote();
 //#endregion
+//#region src/client/transcript/chat-seat.ts
+/** Plain text from Chat user-node content blocks (string or block array). */
+function blocksToText(content) {
+	if (typeof content === "string") return content;
+	if (!Array.isArray(content)) return "";
+	let out = "";
+	for (const block of content) {
+		if (block === null || typeof block !== "object") continue;
+		const text = block.text;
+		if (typeof text === "string") out += text;
+	}
+	return out;
+}
+/**
+* The message text behind one user row, or undefined while it is not loaded.
+*
+* Matching is on `rpcId`, not on `messageId`: the seat's source carries the
+* submission rpc id, and the durable node keeps that same id in its own
+* `data.source`, while `data.messageId` is a different value.
+*
+* Kept as plain data code (no React) so the verification harness can replay it
+* without a DOM.
+*/
+/**
+* The message text for one chat flow key.
+*
+* The activation prompt a side question sends carries `source: { kind: "user" }`
+* with **no rpcId** (the Host's `startLocal` submits it that way), so the rpcId
+* match cannot find it. The row's own `data-chat-flow-key` is the durable key
+* into `nodes.byKey`, which resolves it exactly instead of guessing.
+*/
+function chatNodeTextOf(state, flowKey) {
+	if (flowKey === null || flowKey === void 0) return void 0;
+	const byKey = state?.nodes?.byKey;
+	if (!(byKey instanceof Map)) return void 0;
+	const node = byKey.get(flowKey);
+	if (node?.kind !== "user") return void 0;
+	return blocksToText(node.data?.content);
+}
+function userMessageTextOf(state, rpcId) {
+	if (rpcId === void 0) return void 0;
+	const byKey = state?.nodes?.byKey;
+	if (!(byKey instanceof Map)) return void 0;
+	for (const value of byKey.values()) {
+		const node = value;
+		if (node?.kind !== "user") continue;
+		if (node.data?.source?.rpcId !== rpcId) continue;
+		return blocksToText(node.data?.content);
+	}
+}
+//#endregion
 //#region src/client/transcript/TranscriptQuoteCard.tsx
 /**
 * History-side summary for one user message's annotations.
@@ -26765,7 +27199,7 @@ var remote_default = createPluginRemote();
 * scrolls back to the marked text in the source message; the ordinal badge
 * matches the `:dsh-annotation{index="N"}` the model refers to.
 */
-function TranscriptQuoteCard({ node }) {
+function TranscriptQuoteCard({ node, robot = false }) {
 	ensureToolbarStyles();
 	const stackRef = (0, react.useRef)(null);
 	const quotes = node.data?.quotes ?? [];
@@ -26781,7 +27215,8 @@ function TranscriptQuoteCard({ node }) {
 			index: index + 1,
 			text: quote.text,
 			startOffset: quote.startOffset,
-			endOffset: quote.endOffset
+			endOffset: quote.endOffset,
+			...robot ? { variant: "robot" } : {}
 		})));
 	}, [quotes]);
 	(0, react.useEffect)(() => {
@@ -26818,6 +27253,29 @@ function TranscriptQuoteCard({ node }) {
 		}
 		scrollToAnnotation(index + 1, quote.text, markIdOf(index));
 	}, [markIdOf, quotes]);
+	/**
+	* "From: <source>" opens the conversation this annotation was selected in.
+	*
+	* The composer card has always wired this; the history card rendered the same
+	* button from `item.origin` but passed no handler, so the link was visibly
+	* there and did nothing. A cross-session item has no mark in THIS transcript
+	* by design, so the origin jump is the only way back to its source.
+	*/
+	const onOrigin = (0, react.useCallback)((index, _item) => {
+		const quote = quotes[index];
+		const origin = quote?.origin;
+		if (origin === void 0) return;
+		const live = sessionTitleOf(origin.sessionId, origin.title);
+		if (isSessionArchived(origin.sessionId)) {
+			showToast(t("handoff.archived", { title: live }));
+			return;
+		}
+		openSourceAndLocate({
+			sessionId: origin.sessionId,
+			text: quote.text,
+			...origin.handoffId ? { markId: handoffMarkIdOf(origin.handoffId) } : {}
+		});
+	}, [quotes]);
 	if (quotes.length === 0) return null;
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 		ref: stackRef,
@@ -26836,129 +27294,183 @@ function TranscriptQuoteCard({ node }) {
 					archived: isSessionArchived(quote.origin.sessionId)
 				} } : {}
 			})),
-			onItemSelect: onSelect
+			onItemSelect: onSelect,
+			onItemOrigin: onOrigin
 		})
 	});
 }
 //#endregion
-//#region src/client/transcript/UserMessageDisplay.tsx
-function isTextBlock(block) {
-	if (block === null || typeof block !== "object") return false;
-	const candidate = block;
-	if ((candidate.type === "image" || candidate.type === "file") && candidate.attachment !== void 0) return false;
-	return candidate.type === "text" || typeof candidate.text === "string";
-}
+//#region src/client/transcript/UserBeforeCard.tsx
 /**
-* Replace all text blocks with one stripped text block, keeping attachments and
-* unknown blocks in place. The host's `contentParts` joins text blocks and
-* lifts attachments out anyway, so one text block is the same message content
-* with the protocol block gone.
+* Annotation card above a user message, mounted on the Host's own decoration
+* seat (`conversation.chat.user.before`).
+*
+* dsh 0.2.2 makes this seat the official place for message-source decoration,
+* and it is the reason this plugin mounts its card here instead of overriding
+* the `user` Chat node. That override used to shadow the Host's own
+* `UserMessageNodeView`, and once shadowed the Host entry disappeared from the
+* registry — so the wrapper could never find it to delegate to, fell back to a
+* private bubble, and the message lost its time/copy row.
+*
+* The seat hands the entry `{source, kind}` only: no message body. Two ways back
+* to the body, in this order:
+*
+*  1. `source.rpcId` — a user submission or a `subagents.prompt` delivery both
+*     carry one, and the durable node keeps it in `data.source`.
+*  2. the row's own `data-chat-flow-key` — the activation prompt of a side
+*     question is submitted as `source: { kind: 'user' }`, with **no rpcId**.
+*
+* A subagent session is a fork of its parent: every copied message keeps the
+* parent's rpcId, so those rows would re-render the parent's cards inside the
+* child. Inherited rows are hidden there; only the child's own question (the
+* rpcId-less activation) decorates.
+*/
+/**
+* Annotation summary for the user row this seat decorates.
+*
+* Renders nothing when the message carries no annotation block, so rows without
+* annotations are untouched — the Host keeps ownership of the bubble, its
+* attachments and its time/copy actions row.
 */
-function strippedContent(raw, text) {
-	const rest = Array.isArray(raw) ? raw.filter((block) => !isTextBlock(block)) : [];
-	if (text) rest.unshift({
-		type: "text",
-		text
+function UserBeforeCard({ matched, useChat, sessionId }) {
+	const rpcId = typeof matched?.source?.rpcId === "string" ? matched.source.rpcId : void 0;
+	const hostRef = (0, react.useRef)(null);
+	const [flowKey, setFlowKey] = (0, react.useState)(null);
+	(0, react.useLayoutEffect)(() => {
+		if (rpcId !== void 0) return;
+		const key = hostRef.current?.closest("[data-chat-flow-key]")?.getAttribute("data-chat-flow-key");
+		setFlowKey(key ?? null);
+	}, [rpcId]);
+	const select = (read) => typeof useChat === "function" ? useChat(read) : void 0;
+	const rpcText = select((state) => userMessageTextOf(state, rpcId));
+	const keyedText = select((state) => chatNodeTextOf(state, flowKey));
+	const text = rpcText ?? keyedText;
+	const quotes = (0, react.useMemo)(() => {
+		if (typeof text !== "string" || !text.includes("<response-annotations>")) return null;
+		const scanned = scanAnnotatedMessage(text);
+		return scanned.annotations.length > 0 ? scanned.annotations : null;
+	}, [text]);
+	const isSubagent = sessionId !== void 0 && runtime.isSubagentSession?.(sessionId) === true;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+		ref: hostRef,
+		style: { display: "contents" },
+		"data-dsq-user-before": "",
+		children: quotes !== null && !(isSubagent && rpcId !== void 0) ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(TranscriptQuoteCard, {
+			node: { data: { quotes } },
+			robot: isSubagent
+		}) : null
 	});
-	return rest;
-}
-/** Image attachments for the factory-less fallback bubble. */
-function imageAttachments(raw) {
-	if (!Array.isArray(raw)) return [];
-	const images = [];
-	for (const block of raw) {
-		if (block === null || typeof block !== "object") continue;
-		const candidate = block;
-		if (candidate.type === "image" && candidate.attachment !== void 0) images.push(candidate.attachment);
-	}
-	return images;
 }
+//#endregion
+//#region src/client/transcript/protocol-rule.ts
 /**
-* Replacement for the built-in `user` Chat node view.
+* dsh 0.2.2 user-text rule: hide the annotation protocol block.
+*
+* The host splits a durable user message into inline nodes through
+* `uiConversation.userText` rules. Text that no rule claims is rendered as the
+* literal substring, so a message carrying this plugin's
+* `<response-annotations>` block would paint the whole JSON — header prose
+* included — into the bubble.
 *
-* It does **not** redraw the bubble or its actions row. It resolves the host's
-* own `UserMessageNodeView` from `ctx.slots.entries('conversation.chat.node')`
-* and renders that component with a rewritten `node`: the annotation protocol
-* block is removed from the text blocks, everything else (attachments, file
-* cards, reference labels, time, copy, and any plugin that portals into the
-* actions row, e.g. dsh-rewind's ↶) stays host-owned and follows host changes.
-* The annotation summary is the only extra DOM, prepended above the host row.
+* The rule claims exactly the protocol span (header prose and the
+* `<response-annotations>…</response-annotations>` payload) and renders it as
+* nothing. Annotation cards themselves are not built here: this rule only
+* removes text. The cards come from the `conversation.chat.user.before` chain,
+* which the host still renders above the bubble.
 *
-* The summary must live inside the `user` node view rather than on a
-* `select-quote` Chat node: `conversation.chat.node` is gated by the shipped
-* `TURN_PROCESS_INDEPENDENT_KINDS` allowlist (system-prompt, user, steering,
-* turn-trigger, turn-process, turn-error, turn-max-tokens, turn-tail), and any
-* other kind is `hidden` when the completed turn's process disclosure folds.
+* Contract (see `UserTextDocument` in `@deepseek-ai/dsh-client-ui-conversation`):
+* `match(text, from, context)` must return a node whose `start >= from`, whose
+* `end > start`, whose `end <= text.length`, and whose `id` is either this
+* rule's id or the reserved `text` id. Returning `undefined` means "nothing
+* here". Evaluators run the head of every rule at each cursor, so the rule must
+* be cheap and must report the earliest claimed position, not the first
+* occurrence in the document.
 */
-function UserMessageDisplay(props) {
-	ensureToolbarStyles();
-	const { node, hostNodeOf, ...rest } = props;
-	const raw = contentBlocksToText(node.data?.content);
-	const scanned = scanAnnotatedMessage(raw);
-	const text = displayTextWithoutQuote(scanned.rest).trim();
-	const quotes = scanned.annotations;
-	const rewritten = quotes.length > 0 || text !== raw.trim();
-	const displayNode = (0, react.useMemo)(() => rewritten ? {
-		...node,
-		data: {
-			...node.data,
-			content: strippedContent(node.data?.content, text)
-		}
-	} : node, [
-		node,
-		rewritten,
-		text
-	]);
-	const cards = quotes.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(TranscriptQuoteCard, { node: { data: { quotes } } }) : null;
-	const Host = hostNodeOf?.();
-	if (Host !== void 0) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [cards, /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Host, {
-		...rest,
-		node: displayNode
-	})] });
-	const images = imageAttachments(node.data?.content);
-	const loadImage = props.loadImage;
-	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [cards, /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-		className: cx(A.colEnd, styles.userRow),
-		children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-			className: cx(A.colEnd, styles.userStack),
-			"data-dsq-fallback-content": "true",
-			children: [images.length > 0 && loadImage !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-				className: cx(A.colEnd, styles.userImages),
-				"data-message-attachments": true,
-				children: images.map((attachment, index) => {
-					const url = loadImage(attachment);
-					return url === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("img", {
-						src: url,
-						alt: ""
-					}, `image-${index}`);
-				})
-			}) : null, text ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-				className: styles.userBubble,
-				children: text
-			}) : null]
-		})
-	})] });
-}
-//#endregion
-//#region src/client/transcript/host-user.ts
-const HOST_NODE_NAME = "UserMessageNodeView";
-/** Component name across memo/forwardRef/plain function shapes. */
-function componentName(component) {
-	const candidate = component;
-	return candidate?.type?.name ?? candidate?.render?.name ?? candidate?.name ?? candidate?.displayName;
+/** Rule id registered with `uiConversation.userText`. */
+const PROTOCOL_RULE_ID = "select-quote.annotations";
+/**
+* Runs after the host's own rules (`session` = 10, whitespace = 1000/1010) so
+* a `@session` reference inside the block cannot claim a prefix of it and leave
+* a half-block behind. Lower order wins ties at the same start.
+*/
+const PROTOCOL_RULE_ORDER = 10100;
+const BLOCK_OPEN = "<response-annotations>";
+const BLOCK_CLOSE = "</response-annotations>";
+const HEADER_MARKER = "# Response annotations:";
+/**
+* True when `between` is the instruction body that sits between the header
+* title and the open marker: prose lines followed by one blank line, with no
+* second paragraph break. An unrelated quotation of the title leaves a whole
+* paragraph of other text there instead, and is rejected.
+*/
+function isProtocolHeader(between) {
+	const trimmed = between.replace(/\n+$/u, "");
+	if (trimmed === "") return false;
+	return !trimmed.includes("\n\n");
 }
 /**
-* The host view registered for `key`, or undefined when it cannot be
-* identified safely.
+* The protocol span that begins at or after `from`, or undefined.
 *
-* A renamed host leaves one non-self entry for that key, which is still
-* almost certainly the host; more than one is ambiguous, so callers should
-* show the hostless fallback instead of delegating to an arbitrary plugin's
-* wrapper.
+* The close marker may itself appear inside a JSON string of an older message
+* (written before `<` was escaped), so the scan accepts the first close marker
+* that leaves a JSON payload the composer's own reader would accept. A block
+* whose payload is unreadable is still hidden as long as both markers are
+* present — protocol text must never reach the transcript, valid or not.
 */
-function pickHostNode(entries, self, key) {
-	const candidates = entries.filter((entry) => entry.options?.key === key && entry.component !== void 0 && entry.component !== self);
-	return (candidates.find((entry) => componentName(entry.component) === HOST_NODE_NAME) ?? (candidates.length === 1 ? candidates[0] : void 0))?.component;
+function nextProtocolSpan(text, from) {
+	const open = text.indexOf(BLOCK_OPEN, from);
+	if (open < 0) return void 0;
+	const payloadStart = open + 22;
+	let close = text.indexOf(BLOCK_CLOSE, payloadStart);
+	let end = -1;
+	while (close >= 0) {
+		const payload = text.slice(payloadStart, close).trim().replace(/\\u003c/gu, "<");
+		try {
+			JSON.parse(payload);
+			end = close + 23;
+			break;
+		} catch {
+			close = text.indexOf(BLOCK_CLOSE, close + 23);
+		}
+	}
+	if (end < 0) {
+		const firstClose = text.indexOf(BLOCK_CLOSE, payloadStart);
+		if (firstClose < 0) return void 0;
+		end = firstClose + 23;
+	}
+	const header = text.lastIndexOf(HEADER_MARKER, open);
+	let start = open;
+	if (header >= from && isProtocolHeader(text.slice(header + 23, open))) start = header;
+	let trimmed = end;
+	while (trimmed < text.length && (text[trimmed] === "\n" || text[trimmed] === "\r")) trimmed += 1;
+	return {
+		start,
+		end: trimmed
+	};
+}
+/**
+* Build the rule. `data.text` must equal the claimed substring byte for byte —
+* the host validates `text` nodes against `text.slice(start, end)`; `display`
+* is what actually renders, and an empty display hides the block.
+*/
+function createProtocolRule() {
+	return {
+		id: PROTOCOL_RULE_ID,
+		order: PROTOCOL_RULE_ORDER,
+		match(text, from) {
+			const span = nextProtocolSpan(text, from);
+			if (span === void 0) return void 0;
+			return {
+				id: "text",
+				start: span.start,
+				end: span.end,
+				data: {
+					text: text.slice(span.start, span.end),
+					display: ""
+				}
+			};
+		}
+	};
 }
 //#endregion
 //#region src/client/state/annotation-persistence.ts
@@ -27223,13 +27735,13 @@ function createAnnotationPersistence() {
 * Selection toolbar is root-scoped (`shell.overlay`) so transcript selections
 * are always observed. Annotation summary stays on the session composer.
 *
-* History summary renders **inside** the `user` Chat node view, not on a
-* `select-quote` Chat node. `conversation.chat.node` is gated by the shipped
-* `TURN_PROCESS_INDEPENDENT_KINDS` allowlist (system-prompt, user, steering,
-* turn-trigger, turn-process, turn-error, turn-max-tokens, turn-tail): any other
-* kind is classified as a turn-process member and `hidden` when the completed
-* turn's process disclosure is folded — mounted, but invisible. `user` is on
-* that allowlist, so the bubble is the only placement that is reliably visible.
+* History summary mounts on the Host's own decoration seat
+* (`conversation.chat.user.before`) rather than by overriding a Chat node:
+* overriding the `user` node shadowed the Host's `UserMessageNodeView`, which
+* then left the registry and could not be delegated to — the message lost its
+* time/copy actions row. The seat keeps the bubble Host-owned; the card only
+* reads the message body through the `useChat` snapshot (see
+* `transcript/UserBeforeCard.tsx`).
 *
 * Language is the host's decision, never this plugin's: dictionaries go to
 * `ctx.locale`, and `t()` resolves against whatever language the user picked in
@@ -27246,6 +27758,35 @@ function createAnnotationPersistence() {
 const inject = ["slots", "locale"];
 function apply(ctx) {
 	ensureToolbarStyles();
+	try {
+		applyBody(ctx);
+	} catch (error) {
+		console.error("dsh-select-quote: activation failed", error);
+		throw error;
+	}
+}
+/**
+* Annotation cards hang on the Host's own user-message decoration seat.
+*
+* `conversation.chat.user.before` is the official place for message-source
+* decoration in dsh 0.2.2, and using it is what keeps the bubble Host-owned:
+* the message keeps its attachments, reference summary and time/copy actions
+* row, and this plugin only adds the summary above it.
+*
+* The entry receives `{source, kind}` — no message body — so the card resolves
+* the body through the `useChat` seat (see `transcript/UserBeforeCard.tsx`),
+* matching the durable node by `source.rpcId`.
+*/
+function registerHistoryCard(ctx) {
+	ctx.slots.inject("conversation.chat.user.before", () => ctx.slots.register({
+		name: "conversation.chat.user.before",
+		select: (owner) => {
+			return owner?.kind === "user" ? owner : null;
+		}
+	}, UserBeforeCard));
+}
+function applyBody(ctx) {
+	registerHistoryCard(ctx);
 	const hostLanguageIds = new Set(ctx.locale.getSnapshot().locales.map((language) => language.id.toLowerCase()));
 	for (const language of OPTIONAL_LANGUAGES) {
 		if (hostLanguageIds.has(language.id)) continue;
@@ -27359,11 +27900,12 @@ function apply(ctx) {
 			let publishedTranslate;
 			const publish = () => {
 				const api = scope.get("remote.selectQuoteSideTask");
-				const sidebar = scope.get("sidebarRight");
-				if (api !== void 0 && sidebar !== void 0) {
+				if (api !== void 0) {
 					const openSideTask = async (snapshot, question, model) => {
 						const sessionId = runtime.sessionId;
 						if (!sessionId) throw new Error("no active session");
+						const sidebar = scope.get("sidebarRight");
+						if (sidebar === void 0) throw new Error("the right sidebar is unavailable");
 						const source = snapshot.source;
 						const prompt = composeQuotedMessage(question, {
 							text: snapshot.text,
@@ -27465,6 +28007,13 @@ function apply(ctx) {
 	});
 	ctx.effect(() => watchAnnotationDirectives(), "dsh-select-quote: annotation directives");
 	ctx.effect(() => watchAnnotationMarks(), "dsh-select-quote: annotation marks");
+	ctx.effect(() => {
+		if (typeof document === "undefined" || typeof window === "undefined") return () => {};
+		const relayout = () => relayoutAnnotationMarks();
+		window.addEventListener("resize", relayout);
+		document.fonts?.ready.then(relayout).catch(() => {});
+		return () => window.removeEventListener("resize", relayout);
+	}, "dsh-select-quote: mark badge relayout");
 	ctx.effect(() => bindAnnotationMarkPreview(), "dsh-select-quote: mark preview");
 	ctx.effect(() => watchSubmissionEcho(), "dsh-select-quote: submission echo");
 	ctx.effect(() => {
@@ -27495,6 +28044,11 @@ function apply(ctx) {
 			setAnnotationPersistence(null);
 		};
 	}, "dsh-select-quote: annotation persistence");
+	ctx.inject(["uiConversation"], (scope) => {
+		const rules = scope.uiConversation?.userText;
+		if (typeof rules?.register !== "function") return;
+		scope.effect(() => rules.register(createProtocolRule()), "dsh-select-quote: user-text rule");
+	});
 	ctx.slots.inject("shell.overlay", () => {
 		ctx.slots.register({
 			name: "shell.overlay",
@@ -27516,29 +28070,6 @@ function apply(ctx) {
 			order: 1
 		}, SessionBridge);
 	});
-	const hostNodeOf = (key, self) => {
-		return pickHostNode(typeof ctx.slots.entries === "function" ? ctx.slots.entries("conversation.chat.node") : [], self, key);
-	};
-	function UserNode(props) {
-		return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UserMessageDisplay, {
-			...props,
-			hostNodeOf: () => hostNodeOf("user", UserNode)
-		});
-	}
-	function SteeringNode(props) {
-		return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UserMessageDisplay, {
-			...props,
-			hostNodeOf: () => hostNodeOf("steering", SteeringNode)
-		});
-	}
-	for (const [key, View] of [["user", UserNode], ["steering", SteeringNode]]) ctx.slots.inject("conversation.chat.node", () => {
-		ctx.slots.register({
-			name: "conversation.chat.node",
-			key,
-			priority: -10,
-			locale: "chat"
-		}, View);
-	});
 }
 /** Invisible session-scoped bridge that publishes sessionId for the root toolbar. */
 function SessionBridge({ sessionId }) {