dsh-zen-remote 1.1.11 → 1.1.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-zen-remote",
-  "version": "1.1.11",
+  "version": "1.1.13",
   "description": "把 DeepSeek Harness 变成手机 App：移动端界面重排（两级页面栈、会话列表主屏、composer 重排、手势、附件上传）+ 配对码认证网关 + PWA 安装 + 真 Web Push。Complete mobile plugin for DeepSeek Harness (DSH): app-shell mobile UI, pairing-code gateway for public-internet access behind your own reverse proxy, installable PWA, offline service worker, and real Web Push agent-done notifications.",
   "license": "MIT",
   "type": "module",
@@ -43,10 +43,7 @@
       "patch": "./cordis.patch.yml"
     },
     "client": {
-      "platform": "web",
-      "inject": [
-        "@deepseek-ai/dsh-client-runtime"
-      ]
+      "platform": "web"
     }
   },
   "keywords": [
@@ -82,18 +79,18 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-client-locale": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0",
-    "@deepseek-ai/dsh-client-runtime": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0",
-    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0",
-    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0",
-    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0",
-    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0",
-    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0",
-    "@deepseek-ai/dsh-session": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0",
-    "@deepseek-ai/dsh-session-log-export": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0 || >=0.1.2-rc.0 <0.2.0-0",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0 || >=0.1.2-rc.0 <0.2.0-0",
+    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0 || >=0.1.2-rc.0 <0.2.0-0",
+    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0 || >=0.1.2-rc.0 <0.2.0-0",
+    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0 || >=0.1.2-rc.0 <0.2.0-0",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0 || >=0.1.2-rc.0 <0.2.0-0",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0 || >=0.1.2-rc.0 <0.2.0-0",
+    "@deepseek-ai/dsh-session": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0 || >=0.1.2-rc.0 <0.2.0-0",
+    "@deepseek-ai/dsh-session-log-export": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.0 <0.2.0-0 || >=0.1.2-rc.0 <0.2.0-0",
     "react": "^18.2.0",
-    "@deepseek-ai/dsh-tools": ">=0.0.1-rc.1 <0.1.0 || >=0.1.0-rc.1 <0.2.0-0"
+    "@deepseek-ai/dsh-tools": ">=0.0.1-rc.1 <0.1.0 || >=0.1.0-rc.1 <0.2.0-0 || >=0.1.2-rc.0 <0.2.0-0",
+    "@deepseek-ai/dsh-workspace": ">=0.1.1-rc.0 <0.2.0-0 || >=0.1.2-rc.0 <0.2.0-0"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/dsh-host-webserver": {
@@ -104,26 +101,52 @@
     },
     "@deepseek-ai/dsh-tools": {
       "optional": true
+    },
+    "@deepseek-ai/dsh-workspace": {
+      "optional": true
     }
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-api-remotes": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-connection": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-apiproxy": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session-stats": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-token-meter": "0.1.1-rc.2",
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/cosmokit": "^1.8.3",
+    "@deepseek-ai/dsh-api-remotes": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-api-session-controller": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-api-workspace-controller": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-brand": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-connection": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-locale": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-store": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-layout": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-session": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-llm": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-scope": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-log-export": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-session-stats": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-subagent": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-timeout": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-token-meter": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-tools": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-util-crypto": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-util-values": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-workspace": "0.1.2-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.1",
     "@types/node": "^26.2.0",
     "@types/react": "~18.3.1",
     "@types/react-dom": "~18.3.0",
-    "typescript": "^6.0.3",
-    "@deepseek-ai/dsh-tools": "0.1.1-rc.2"
+    "typescript": "^6.0.3"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json && tsc -p tsconfig.client.json && node scripts/build-client.mjs",
     "verify": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit",
-    "test": "node --test \"test/*.test.cjs\" && node scripts/check-sunk-viewport.mjs && node scripts/check-keyboard-avoid.mjs && node scripts/check-attach-upload.mjs && node scripts/check-upload-endpoint.mjs && node scripts/sync-doc-version.mjs --check",
+    "test": "node --test \"test/*.test.cjs\" && node scripts/check-sunk-viewport.mjs && node scripts/check-keyboard-avoid.mjs && node scripts/check-attach-upload.mjs && node scripts/check-upload-endpoint.mjs && node scripts/check-host-shadow.mjs && node scripts/check-compat-store.mjs && node scripts/check-client-externals.mjs && node scripts/check-info-sheet-stacking.mjs && node scripts/sync-doc-version.mjs --check",
     "version": "node scripts/sync-doc-version.mjs && git add README.md README.zh-CN.md"
   }
 }

package/pwa/app.css

@@ -50,13 +50,6 @@ html:not([data-lan-device="desktop"]) body {
   overscroll-behavior-y: none;
 }
 
-/* iOS Safari zooms the whole page when a focused input's font-size is below
- * 16px. dsh-mobile-nav does not add this workaround, so it stays here. */
-html:not([data-lan-device="desktop"]) [data-slot="conversation"] input,
-html:not([data-lan-device="desktop"]) [data-slot="conversation"] textarea {
-  font-size: 16px;
-}
-
 /* Apply the pinch-to-resize font scale. touch-gestures.js sets
  * --dsh-pwa-font-scale via root.style.setProperty() on pinch; this is this
  * plugin's own gesture feature, not a dsh-mobile-nav concern. */
@@ -67,6 +60,53 @@ html:not([data-lan-device="desktop"]) [data-slot="conversation"] [data-phase] {
   font-size: calc(1em * var(--dsh-pwa-font-scale));
 }
 
+/* iOS Safari zooms the whole page when a focused input's font-size is below
+ * 16px, and it does NOT zoom back out when focus leaves — the page just stays
+ * magnified until the user pinches it back (reported 2026-09-06: the UI came
+ * back enlarged after a trip through a subagent session, and only leaving to
+ * the session list and re-entering cleared it).
+ *
+ * This was scoped to [data-slot="conversation"], which is an exact attribute
+ * match: it covers inputs inside the element whose slot is literally
+ * "conversation" and nothing in the dozens of conversation.* subtrees around
+ * it. Measured on the running UI: one input matched, while a visible 12px
+ * text field sat outside the rule — and the composer never triggered the zoom
+ * at all because it is contenteditable, not an input, which is why this went
+ * unnoticed for so long. So the guard now covers the whole mobile shell.
+ *
+ * File / checkbox / radio are excluded: they carry no text, the file inputs
+ * here are hidden anyway, and forcing 16px on them only disturbs layout.
+ *
+ * `[contenteditable]` is in the list because the thing users actually focus
+ * — the message composer — is one: a contenteditable div with role=textbox,
+ * not an input or a textarea. iOS treats it like any other editing host and
+ * zooms on it just the same, so covering only inputs left the single most
+ * focused element on the page unprotected, which is why widening this rule to
+ * every input still did not stop the page coming back magnified (2026-09-06).
+ * Measured before changing it: the composer computes 14px, and raising it to
+ * 16px moves no geometry at all — its line-height is a fixed 24px rather than
+ * a ratio, so the line box, the editor height and the card height are
+ * identical either way, and section 5 of composer.css.ts can go on counting
+ * lines in 24px units.
+ *
+ * It has to come AFTER the pinch-scale rule above, and say max() rather than
+ * a flat 16px. The composer's editing host carries `data-phase` of its own,
+ * so `[data-slot="conversation"] [data-phase]` matches it too — at exactly the
+ * same specificity as this rule (0,3,1). Source order was therefore the whole
+ * ballgame, and with this block sitting first the pinch rule quietly won and
+ * put the composer back to 1em. That is why the composer stayed at 14px even
+ * after this selector learned about contenteditable, and why the page went on
+ * zooming (measured 2026-09-06: both rules matched, the later one applied).
+ * max() keeps the two goals from fighting — a hard 16px floor so iOS never
+ * zooms, and everything above it still scaling with the pinch gesture.
+ *
+ * dsh-mobile-nav does not add this workaround, so it stays here. */
+html:not([data-lan-device="desktop"]) input:not([type="file"]):not([type="checkbox"]):not([type="radio"]),
+html:not([data-lan-device="desktop"]) textarea,
+html:not([data-lan-device="desktop"]) [contenteditable]:not([contenteditable="false"]) {
+  font-size: max(16px, calc(1em * var(--dsh-pwa-font-scale, 1)));
+}
+
 /* Home-indicator clearance for the composer USED to live here, as
  *   [data-slot="conversation.composer"], [data-slot="conversation.input.bar"]
  *   { padding-bottom: max(env(safe-area-inset-bottom), 8px) }

package/scripts/check-client-externals.mjs

@@ -0,0 +1,48 @@
+// Machine evidence for "the client half no longer requires anything that a
+// DSH version could fail to provide" (PLAN §3.1 verification): scan
+// lib/client.js for every non-relative require() specifier and assert the
+// set is within the small allowlist below.
+//
+// Why this matters: the browser resolves these names against the host's
+// module table (window.__ModuleLoader__). A name the table does not know
+// throws when the plugin factory runs, taking the WHOLE plugin down with it.
+// The seed words BOTH DSH versions statically provide are exactly the four
+// allowlisted entries — anything else here means the plugin stopped being
+// version-agnostic (or someone added a require the bundler did not inline).
+//
+// Run: node scripts/check-client-externals.mjs
+import { readFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const clientJs = join(dirname(dirname(fileURLToPath(import.meta.url))), 'lib', 'client.js')
+
+const ALLOWED = [
+  'react',
+  'react/jsx-runtime',
+  '@deepseek-ai/dsh-client-ui-primitives',
+  '@deepseek-ai/dsh-client-ui-slots',
+]
+
+const specifiers = new Set()
+const source = readFileSync(clientJs, 'utf8')
+for (const match of source.matchAll(/require\((['"])([^'"]+)\1\)/g)) {
+  const specifier = match[2]
+  if (specifier.startsWith('.')) continue // relative module — bundled inline
+  specifiers.add(specifier)
+}
+
+const extra = [...specifiers].filter((specifier) => !ALLOWED.includes(specifier))
+if (extra.length > 0) {
+  console.error(`check-client-externals: FAIL — lib/client.js requires packages outside the allowlist:
+  ${extra.join('\n  ')}
+
+These names are fetched from the host browser module table at runtime; a name
+the table does not know throws "missed the module table" and the plugin does
+not load at all. The only names BOTH DSH 0.1.1 and 0.1.2 seed statically are
+the four allowlisted ones. Add new host requires only after confirming the
+name is a seed word in every supported version.`)
+  process.exit(1)
+}
+
+console.log('check-client-externals: ok')

package/scripts/check-compat-store.mjs

@@ -0,0 +1,113 @@
+// Behaviour check for the self-written store compat layer
+// (src/client/compat/store.ts): workspaceTitleOf edge cases, snapshot-store
+// update/subscribe semantics, defineStore handle/actions wiring, and
+// whole-value persistence against a fake localStorage.
+//
+// Run: node scripts/check-compat-store.mjs   (needs Node >= 23.6 type stripping)
+import assert from 'node:assert/strict'
+import {
+  createSnapshotStore,
+  defineStore,
+  workspaceTitleOf,
+} from '../src/client/compat/store.ts'
+
+// ---- 1. workspaceTitleOf ---------------------------------------------------
+assert.equal(workspaceTitleOf('/a/b/c'), 'c')
+assert.equal(workspaceTitleOf('/a/b/c/'), 'c')
+assert.equal(workspaceTitleOf('C:\\x\\y'), 'y')
+assert.equal(workspaceTitleOf('/'), '')
+
+// ---- 2. createSnapshotStore basics ------------------------------------------
+const init = { n: 1 }
+const store = createSnapshotStore(init)
+const initialRef = store.getSnapshot()
+assert.deepEqual(initialRef, { n: 1 })
+assert.equal(store.getSnapshot(), initialRef, 'getSnapshot must return the same reference until an update')
+
+let calls = 0
+const unsubscribe = store.subscribe(() => { calls += 1 })
+store.update((draft) => { draft.n = 2 })
+assert.equal(store.getSnapshot().n, 2, 'update must apply the mutation')
+assert.notEqual(store.getSnapshot(), initialRef, 'update must swap in a new reference')
+assert.equal(calls, 1, 'subscriber must be called exactly once per update')
+assert.deepEqual(init, { n: 1 }, 'the shallow copy must protect the initial state from the mutator')
+
+unsubscribe()
+store.update((draft) => { draft.n = 3 })
+assert.equal(calls, 1, 'unsubscribed callbacks must not be called again')
+
+// ---- 3. defineStore basics ---------------------------------------------------
+// Same declaration shape as nav-store.ts: flat { view, workspace } state.
+const decl = {
+  init: () => ({ view: 'home', workspace: null }),
+  actions: {
+    show: (draft, view) => {
+      draft.view = view
+    },
+  },
+}
+const handle = defineStore(decl)
+assert.equal(handle.spec, decl, 'handle carries the declaration as its spec')
+const instance = handle.create()
+assert.equal(typeof instance.getSnapshot, 'function')
+assert.equal(typeof instance.store.getSnapshot, 'function', 'instance must carry the raw snapshot store')
+let viewCalls = 0
+const off = instance.subscribe(() => { viewCalls += 1 })
+instance.actions.show('session')
+assert.equal(instance.getSnapshot().view, 'session', 'baked action must move the view')
+assert.equal(viewCalls, 1, 'baked action must notify exactly once')
+off()
+
+// ---- 4. persistence against a fake localStorage -------------------------------
+const memory = new Map()
+let failWrites = false
+globalThis.localStorage = {
+  getItem: (key) => (memory.has(key) ? memory.get(key) : null),
+  setItem: (key, value) => {
+    if (failWrites) throw new Error('quota exceeded')
+    memory.set(key, String(value))
+  },
+  removeItem: (key) => {
+    memory.delete(key)
+  },
+}
+
+const persisted = defineStore({
+  persist: 'k',
+  init: () => ({ view: 'home', workspace: null }),
+  actions: {
+    show: (draft, view) => {
+      draft.view = view
+    },
+  },
+})
+const pInstance = persisted.create()
+pInstance.actions.show('session')
+assert.deepEqual(JSON.parse(memory.get('k')), { view: 'session', workspace: null },
+  'the persisted value must be the whole state as JSON, not a spread object')
+
+const scoped = persisted.create('sess-1')
+scoped.actions.show('session')
+assert.ok(memory.has('k'), 'the root-scope key must still be stored')
+assert.deepEqual(JSON.parse(memory.get('k.sess-1')), { view: 'session', workspace: null },
+  'a scoped instance must persist under `${decl.persist}.${scopeKey}`')
+
+scoped.clearPersisted()
+assert.ok(!memory.has('k.sess-1'), 'clearPersisted must drop exactly the scoped key')
+assert.ok(memory.has('k'), 'clearPersisted must not touch other keys')
+
+// A throwing setItem (quota / private mode) must not break the store. The
+// store logs the failure through console.error by design; silence it so the
+// check output stays readable.
+failWrites = true
+const realError = console.error
+console.error = () => {}
+try {
+  assert.doesNotThrow(() => { pInstance.actions.show('home') }, 'a failed persistence write must not throw')
+} finally {
+  console.error = realError
+}
+assert.equal(pInstance.getSnapshot().view, 'home', 'the in-memory update still applies when persisting fails')
+failWrites = false
+
+console.log('check-compat-store: ok')

package/scripts/check-host-shadow.mjs

@@ -0,0 +1,145 @@
+// Shadow check: every @deepseek-ai/* package the host half loads at runtime
+// must come from the DSH profile — except the ones explicitly registered in
+// SHADOW_ALLOWED below.
+//
+// Node resolves imports starting at the importing file's directory, so any
+// @deepseek-ai package physically present in <plugin>/node_modules wins over
+// the copy the DSH profile provides. With a 0.1.1 profile installed that
+// means the host half silently loads whatever version this plugin last
+// installed — "it links and starts" proves nothing.
+//
+// Instead of hand-maintaining a package list, the three files the host half
+// actually loads (dsh-push.mjs, lan-gate.mjs, lib/index.js) are scanned for
+// @deepseek-ai specifiers — static import, dynamic import() and require() —
+// so a new import added there gets watched automatically. src/index.ts is
+// type-only imports (erased at runtime) and the gateway subprocess uses only
+// stdlib + web-push, so this scan is the whole runtime story.
+//
+// Run: node scripts/check-host-shadow.mjs
+import assert from 'node:assert/strict'
+import { existsSync, readFileSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import { dirname, join, sep } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const pluginNodeModules = join(dirname(dirname(fileURLToPath(import.meta.url))), 'node_modules')
+const require = createRequire(import.meta.url)
+
+// Packages that are ALLOWED to sit in this plugin's node_modules and shadow
+// the profile's copy. Every entry must carry its justification here.
+//
+// @deepseek-ai/dsh-tools:
+// - Why allowed at all: test/push-tool.test.cjs and test/push.test.cjs import
+//   dsh-push.mjs in-process, and dsh-push.mjs does
+//   `import { defineTool } from '@deepseek-ai/dsh-tools'` statically. The
+//   host `tools` service only exposes register(definition) — there is no way
+//   to obtain defineTool from the host, so this import cannot be removed and
+//   the package must be resolvable for the tests to load the module.
+// - Why 0.1.2-rc.1: kept on the same release line as every other devDep.
+//   0.1.1's tools statically imports dsh-session, and dsh-session is pinned
+//   at 0.1.2 here — mixing the two lines inside one process is harder to
+//   debug than the shadow itself. 0.1.2's tools no longer statically imports
+//   dsh-session, so the whole closure stays on the 0.1.2 line.
+// - WHEN TO ACT: this machine's production DSH still runs 0.1.1 and the
+//   plugin is installed into its profile via link:, so this shadow is live
+//   in production — the host loads 0.1.2's defineTool today. Decide whether
+//   that is acceptable BEFORE merging (options: upgrade production to 0.1.2
+//   first, or temporarily accept the drift).
+// - npm-published tarballs contain no node_modules, so this shadow only
+//   exists on dev machines where the plugin is link-installed.
+const SHADOW_ALLOWED = ['@deepseek-ai/dsh-tools']
+
+// Packages that must never exist in this plugin's node_modules at all: DSH
+// 0.1.2 dropped them, and a stale copy would let the type check quietly pass
+// against outdated declarations. NOT exemptible via SHADOW_ALLOWED.
+const BANNED_PACKAGES = ['@deepseek-ai/dsh-client-runtime', '@deepseek-ai/dsh-host-apiproxy']
+
+// The three files the host half actually loads.
+const HOST_ENTRY_FILES = ['dsh-push.mjs', 'lan-gate.mjs', 'lib/index.js']
+
+// Matches the specifier of real module statements only — `... from 'pkg'`,
+// `import 'pkg'`, `import('pkg')`, `require('pkg')` — so @deepseek-ai names
+// that merely appear in prose comments don't pollute the set. Scoped
+// subpaths (`@deepseek-ai/x/client`) are trimmed back to the package name.
+const IMPORT_SPECIFIER = /(?:\bfrom\s*|\bimport\s*\(?\s*|\brequire\s*\(\s*)['"](@deepseek-ai\/[^'"\s]+)['"]/g
+
+const packageNameOf = (specifier) => specifier.split('/').slice(0, 2).join('/')
+
+/** Scan the host entry files for @deepseek-ai import/require specifiers. */
+function collectHostRuntimePackages() {
+  const found = new Map() // package name -> files referencing it
+  for (const file of HOST_ENTRY_FILES) {
+    const path = join(dirname(dirname(fileURLToPath(import.meta.url))), file)
+    if (!existsSync(path)) {
+      console.error(`check-host-shadow: FAIL — host entry file is missing: ${file}
+The scan cannot guard what it cannot read. Restore the file (lib/ is committed) and re-run.`)
+      process.exit(1)
+    }
+    for (const [, specifier] of readFileSync(path, 'utf8').matchAll(IMPORT_SPECIFIER)) {
+      const name = packageNameOf(specifier)
+      if (!found.has(name)) found.set(name, [])
+      if (!found.get(name).includes(file)) found.get(name).push(file)
+    }
+  }
+  return found
+}
+
+const insidePluginNodeModules = (resolved) => resolved.startsWith(pluginNodeModules + sep)
+
+/** Version of the copy sitting in the plugin's own node_modules, if any. */
+function pluginCopyVersion(packageName) {
+  try {
+    return JSON.parse(readFileSync(join(pluginNodeModules, ...packageName.split('/'), 'package.json'), 'utf8')).version
+  } catch {
+    return undefined
+  }
+}
+
+let failed = false
+const runtimePackages = collectHostRuntimePackages()
+
+for (const packageName of BANNED_PACKAGES) {
+  if (!existsSync(join(pluginNodeModules, ...packageName.split('/')))) continue
+  failed = true
+  console.error(`check-host-shadow: FAIL — ${packageName} is inside this plugin's node_modules.
+DSH 0.1.2 no longer has this package; a stale copy here would let the type
+check quietly pass against outdated declarations. Remove it from
+devDependencies and run pnpm install again. This one is not exemptible via
+SHADOW_ALLOWED.`)
+}
+
+for (const [packageName, files] of runtimePackages) {
+  let resolved
+  try {
+    resolved = require.resolve(packageName)
+  } catch (error) {
+    if (error?.code === 'MODULE_NOT_FOUND') continue // desired: the profile provides it
+    // The package exists but its entry could not be located through the
+    // "require" condition; the presence probe decides the verdict instead.
+    assert.match(error?.code ?? '', /^ERR_(PACKAGE_PATH_NOT_EXPORTED|INVALID_PACKAGE_TARGET)$/,
+      `unexpected error resolving ${packageName}: ${error?.message}`)
+    if (!existsSync(join(pluginNodeModules, ...packageName.split('/')))) continue
+    resolved = join(pluginNodeModules, ...packageName.split('/'))
+  }
+  if (!insidePluginNodeModules(resolved) && !existsSync(join(pluginNodeModules, ...packageName.split('/')))) continue
+
+  if (SHADOW_ALLOWED.includes(packageName)) {
+    console.log(`note: ${packageName}@${pluginCopyVersion(packageName) ?? 'unknown'} 是已登记的遮蔽（见脚本注释）`)
+    continue
+  }
+
+  failed = true
+  console.error(`check-host-shadow: FAIL — ${packageName} is inside this plugin's node_modules
+  (imported by ${files.join(', ')})
+  ${resolved}
+
+That shadows the real package in the DSH profile: Node resolves the plugin
+directory before the profile, so with a 0.1.1 profile installed the host
+loads the wrong version of this package. Either remove it from this plugin's
+devDependencies and run pnpm install again — or, if shadowing is truly
+unavoidable for it, add it to SHADOW_ALLOWED in this script with the reason
+written down next to it.`)
+}
+
+if (failed) process.exit(1)
+console.log('check-host-shadow: ok')

package/scripts/check-info-sheet-stacking.mjs

@@ -0,0 +1,55 @@
+// Self-check for the session-info sheet's stacking promotion (fixed 2026-09-04).
+//
+// The sheet renders INSIDE `[data-phase] header`, which header.css.ts makes a
+// stacking context (position: relative + z-index: 2). A child's z-index is
+// scoped to that context, so the layer's own z:70 competes with the header's
+// 2 — and the host composer seat (.wSkVaW_composerSeat, z:7, owned by
+// dsh-client-ui-conversation) wins, painting the input row through the card.
+// The fix promotes the header itself while the sheet is mounted.
+//
+// This regresses silently: nothing throws, the console stays clean, and the
+// card still opens — it just has the composer sitting on top of it. Hence a
+// check that fails loudly if the rule is dropped or its value drifts back
+// under the host's seat.
+// Run: node scripts/check-info-sheet-stacking.mjs   (needs Node >= 23.6 type stripping)
+import assert from 'node:assert/strict'
+import { INFO_CSS } from '../src/client/styles/info.css.ts'
+
+/** Host z-index values this sheet has to out-rank (dsh-client-ui-conversation). */
+const HOST_COMPOSER_SEAT = 7
+const HOST_SCROLL_TO_BOTTOM = 8
+
+const promotion = /\[data-phase\]\s*header:has\(\[data-mobile-nav="info-layer"\]\)\s*\{([^}]*)\}/.exec(INFO_CSS)
+assert.ok(
+  promotion,
+  'the header-promotion rule is gone: the info sheet renders inside [data-phase] header, ' +
+    'so without it the sheet is trapped at the header z-index (2) and the composer seat ' +
+    '(host z:7) paints over the card. See the comment in styles/info.css.ts.',
+)
+
+const z = Number(/z-index:\s*(\d+)/.exec(promotion[1])?.[1])
+assert.ok(Number.isFinite(z), 'header-promotion rule has no numeric z-index')
+assert.ok(
+  z > HOST_SCROLL_TO_BOTTOM && z > HOST_COMPOSER_SEAT,
+  `header promotion is z-index:${z}, which does not out-rank the host composer seat ` +
+    `(${HOST_COMPOSER_SEAT}) and scroll-to-bottom (${HOST_SCROLL_TO_BOTTOM})`,
+)
+
+// Depth-agnostic selector: the utilities slot wrapper is `display: contents`
+// and the host owns the nesting, so a child combinator would silently stop
+// matching on any host reshuffle (AGENTS.md).
+assert.ok(
+  !/header:has\(>\s*\[data-mobile-nav="info-layer"\]\)/.test(INFO_CSS),
+  'header promotion must use a descendant :has(), not `:has(> …)` — the host owns the depth',
+)
+
+// Desktop must stay pixel-identical: the promotion has to sit inside the
+// phone breakpoint, not at the top level of the sheet.
+const phone = /@media \(max-width: 767px\) \{/.exec(INFO_CSS)
+assert.ok(phone, 'info.css.ts lost its phone media query')
+assert.ok(
+  promotion.index > phone.index,
+  'the header promotion escaped the (max-width: 767px) block — it would change the desktop layout',
+)
+
+console.log('check-info-sheet-stacking: ok')

package/src/client/MobileAttachButton.tsx

@@ -2,7 +2,7 @@ import { useRef, useState } from 'react'
 import type { ChangeEvent } from 'react'
 import type { PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots'
 import { IconPaperclipOutline16 } from '@deepseek-ai/dsh-client-ui-primitives'
-import type { SessionId } from '@deepseek-ai/dsh-client-runtime/client'
+import type { SessionId } from './compat/types.ts'
 import { NS } from './locales.ts'
 import { draftWithMention, rememberThumbnail, uploadUrl } from './attach-upload.ts'
 

package/src/client/MobileHome.tsx

@@ -9,7 +9,8 @@ import {
   StateDot,
 } from '@deepseek-ai/dsh-client-ui-primitives'
 import type { StateDotState } from '@deepseek-ai/dsh-client-ui-primitives'
-import type { SessionId, SessionSummary, WorkspaceId } from '@deepseek-ai/dsh-client-runtime/client'
+import { agentPresetOf } from './compat/types.ts'
+import type { MobileSessionRow, SessionId, UsePendingInteractions, WorkspaceId } from './compat/types.ts'
 import { NS } from './locales.ts'
 import { GO_HOME_EVENT } from './nav-store.ts'
 import { hasLayer, popLayer, pushLayer } from './history-nav.ts'
@@ -36,11 +37,29 @@ export type MobileHomeProps =
     downloadSessionLog: (id: SessionId) => void
     /** Bound ctx.workspaces.archiveSession(id) — the row swipe action. */
     archiveSession: (id: SessionId) => Promise<void>
+    /**
+     * 0.1.2 的待处理交互选择器标准 prop；0.1.1 没有这个 prop，运行时读到
+     * undefined（见组件里 EMPTY_PENDING_HOOK 兜底）。
+     */
+    useSessionPendingInteraction?: UsePendingInteractions
   }
 
 /** Phone breakpoint: below the tablet range, where the app-shell layout applies. */
 const PHONE_QUERY = '(max-width: 767px)'
 
+/**
+ * Empty pending-interaction map singleton: when the 0.1.2 source is absent
+ * the fallback hook returns THIS map, so the selector sees one stable
+ * reference across renders — a fresh Map per render would make every
+ * selector result a new reference and loop the list into infinite
+ * re-renders. Module-level on purpose.
+ */
+const EMPTY_PENDING_MAP: ReadonlyMap<SessionId, unknown> = new Map()
+
+/** 0.1.1 兜底：恒返回空 Map 的替身 hook（见组件里 useSessionPendingInteraction ?? EMPTY_PENDING_HOOK）。 */
+const EMPTY_PENDING_HOOK: UsePendingInteractions =
+  <S,>(sel: (m: ReadonlyMap<SessionId, unknown>) => S) => sel(EMPTY_PENDING_MAP)
+
 /** Swipe geometry: reveal width of the archive action / settle threshold. */
 const SWIPE_REVEAL = 88
 const SWIPE_SETTLE = 44
@@ -216,18 +235,19 @@ function relativeTime(at: number): string {
 /**
  * Card status subline (real-device round 2 follow-up, 2026-08-17): reuses
  * `dotState`'s own state read (the same ongoing/warning/done semantics the
- * dot already encodes) plus `agentPreset` from the same `SessionSummary`
- * row — no new data source. Returns undefined when there is neither a
+ * dot already encodes) plus `agentPreset` from the same session row — no
+ * new data source. Returns undefined when there is neither a
  * state nor a preset to show, so the caller can skip the subline entirely
  * rather than render an empty row.
  */
-function statusLine(row: SessionSummary, dot: StateDotState | undefined, t: (key: MobileNavKey) => string): string | undefined {
+function statusLine(row: MobileSessionRow, dot: StateDotState | undefined, t: (key: MobileNavKey) => string): string | undefined {
+  const preset = agentPresetOf(row)
   const state = dot === 'ongoing' ? t('homeStatusOngoing')
     : dot === 'warning' ? t('homeStatusWarning')
     : dot === 'done' ? t('homeStatusDone')
     : undefined
-  if (state !== undefined && row.agentPreset !== undefined) return `${state} · ${row.agentPreset}`
-  return state ?? row.agentPreset
+  if (state !== undefined && preset !== undefined) return `${state} · ${preset}`
+  return state ?? preset
 }
 
 /**
@@ -242,6 +262,7 @@ function statusLine(row: SessionSummary, dot: StateDotState | undefined, t: (key
 export function MobileHome({
   useSessions,
   useWorkspaces,
+  useSessionPendingInteraction,
   useStore,
   actions,
   openSession,
@@ -262,6 +283,11 @@ export function MobileHome({
   const [sheet, setSheet] = useState<'filter' | 'chips' | null>(null)
   /** The one row whose archive action is swiped open (null = none). */
   const [swipeOpen, setSwipeOpen] = useState<SessionId | null>(null)
+  // 0.1.2 的待处理交互来源；0.1.1 没有这个标准 prop，读到 undefined 时用一个
+  // 恒返回空 Map 的替身，保证 hook 调用次数与顺序在两版之间一致（hooks 规则：
+  // 真实 hook 只在 0.1.2 被调用，且每次渲染同一位置无条件调用一次）。
+  const pendingHook = useSessionPendingInteraction ?? EMPTY_PENDING_HOOK
+  const pending = pendingHook((m) => m)
 
   /** Archive with the same confirm gate the session-info card uses. */
   const onArchiveRow = (id: SessionId): void => {
@@ -417,7 +443,7 @@ export function MobileHome({
 
       <ul data-mobile-nav="home-list">
         {rows.map((row) => {
-          const dot = dotState(row)
+          const dot = dotState(row, pending.has(row.id))
           const status = statusLine(row, dot, t)
           const initial = row.displayTitle.trim().charAt(0).toUpperCase()
           return (