dsh-zen-remote 2.0.3 → 2.2.0

package/lib/client.js

@@ -1850,6 +1850,123 @@ exports.RESTART_FIELDS = [
     'pushTool',
 ];
 };
+__modules["client-data/plugin-bridge.js"] = function (require, module, exports) {
+"use strict";
+/**
+ * The plugin bridge's settings-page pure pieces (PB-5): the status → copy
+ * mapping the 子客户端诊断区 renders, and the consent-toggle arithmetic the
+ * 主服务端插件桥 section stages. Pure by the settings-form discipline — no
+ * fetch, no clock, no context — so scripts/check-plugin-bridge-ui.mjs pins
+ * every copy and every toggle shape.
+ *
+ * Deliberately import-free: this file rides the BROWSER bundle, and the
+ * bridge's own module (src/plugin-bridge.ts) drags node:crypto in. The
+ * status shape is therefore restated structurally here — it mirrors
+ * lib/plugin-bridge.js's `BridgeStatus` verbatim, and a drifted wire is
+ * handled by the tolerant mapping, not by the type system.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.derivePluginBridgeStatuses = derivePluginBridgeStatuses;
+exports.bridgeSectionState = bridgeSectionState;
+exports.togglePluginConsent = togglePluginConsent;
+exports.readAdminBridgeRow = readAdminBridgeRow;
+/** The reason → copy-key table, one entry per BridgeReason plus the
+ * everything-else fallback (an unknown reason from a newer server reads as
+ * 未桥接-generic — the offline copy, honest without inventing a claim). */
+const REASON_KEYS = {
+    'not-on-server': 'settings.bridge.stateNotOnServer',
+    'version-mismatch': 'settings.bridge.stateVersionMismatch',
+    'declaration-mismatch': 'settings.bridge.stateDeclarationMismatch',
+    'consent-off': 'settings.bridge.stateConsentOff',
+    offline: 'settings.bridge.stateOffline',
+    'server-too-old': 'settings.bridge.stateServerTooOld',
+};
+/** Tolerant read of one `pluginBridge` wire array into the render rows,
+ * input order kept (the route already sorts by plugin name). A malformed
+ * entry is skipped, never thrown into the settings page. */
+function derivePluginBridgeStatuses(value) {
+    if (!Array.isArray(value))
+        return [];
+    const rows = [];
+    for (const entry of value) {
+        if (entry === null || typeof entry !== 'object' || Array.isArray(entry))
+            continue;
+        const record = entry;
+        if (typeof record.plugin !== 'string' || record.plugin === '')
+            continue;
+        const bridged = record.bridged === true;
+        const reason = typeof record.reason === 'string' ? record.reason : undefined;
+        rows.push({
+            plugin: record.plugin,
+            localVersion: typeof record.localVersion === 'string' ? record.localVersion : '',
+            stateKey: bridged
+                ? 'settings.bridge.stateBridged'
+                : reason !== undefined && REASON_KEYS[reason] !== undefined
+                    ? REASON_KEYS[reason]
+                    : 'settings.bridge.stateOffline',
+            serverVersion: typeof record.serverVersion === 'string' ? record.serverVersion : undefined,
+        });
+    }
+    return rows;
+}
+/**
+ * The three-state resolution for the host settings page's 插件桥 list
+ * (PB-9-fix): a fetch that has not answered is LOADING, a failed or
+ * refused fetch is an ERROR — and only a successful answer with zero rows
+ * means "no plugin has registered a bridge". Collapsing the first two into
+ * the empty copy would tell the user nothing is bridged while the answer is
+ * simply not in yet (or the page was opened through the gateway, where the
+ * listing is refused). Pure so the check pins all four outcomes.
+ */
+function bridgeSectionState(load, rows) {
+    if (load === 'loading')
+        return 'loading';
+    if (load === 'error')
+        return 'error';
+    return Array.isArray(rows) && rows.length > 0 ? 'plugins' : 'empty';
+}
+/**
+ * One consent-toggle click: the NEXT whole-machine-data consent map, staged
+ * over the row's `pluginBridgeConsent` field. Only `plugin`'s key moves —
+ * every other key (including entries for plugins no longer registered; the
+ * settings page deliberately never prunes what it does not render) is
+ * carried over verbatim, in its existing key order. An illegal current map
+ * (a hand-edited row) reads as the empty map: the toggle then writes exactly
+ * one key, and the junk is left for the row validator to keep refusing.
+ */
+function togglePluginConsent(current, plugin, allow) {
+    const next = {};
+    if (current !== null && typeof current === 'object' && !Array.isArray(current)) {
+        for (const [key, value] of Object.entries(current)) {
+            if (typeof value === 'boolean')
+                next[key] = value;
+        }
+    }
+    next[plugin] = allow;
+    return next;
+}
+/**
+ * Tolerant read of one admin listing row into the render shape (PB-11).
+ * A malformed row is `undefined`, never a throw — the settings page skips
+ * it the same way {@link derivePluginBridgeStatuses} skips a bad verdict.
+ * `adapted` defaults to false: an older server's answer simply reads as
+ * "nothing is adapted".
+ */
+function readAdminBridgeRow(row) {
+    if (row === null || typeof row !== 'object' || Array.isArray(row))
+        return undefined;
+    const record = row;
+    if (typeof record.plugin !== 'string' || record.plugin === '')
+        return undefined;
+    return {
+        plugin: record.plugin,
+        version: typeof record.version === 'string' ? record.version : '',
+        hasServerScope: record.hasServerScope === true,
+        consent: record.consent === true,
+        adapted: record.adapted === true,
+    };
+}
+};
 __modules["client-data/settings-form.js"] = function (require, module, exports) {
 "use strict";
 /**
@@ -1879,7 +1996,7 @@ __modules["client-data/settings-form.js"] = function (require, module, exports)
  * (devices / pairing) plus the T14 envelope (ok / gateway / config / viaGateway).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ZenRemoteSettingsForm = exports.SETTINGS_FIELDS = exports.IDLE_HOURS_MAX = exports.SERVER_NAME_MAX = exports.RESTART_FIELDS = exports.DEVICE_TOKEN_FIELD = exports.CLIENT_CONFIG_ROUTE = exports.CLIENT_RECONNECT_ROUTE = exports.CLIENT_STATUS_ROUTE = exports.CLIENT_CLAIM_ROUTE = exports.ADMIN_PUSH_TEST_ROUTE = exports.ADMIN_ACTION_ROUTE = exports.ADMIN_PAIR_ROUTE = exports.ADMIN_STATUS_ROUTE = void 0;
+exports.ZenRemoteSettingsForm = exports.SETTINGS_FIELDS = exports.IDLE_HOURS_MAX = exports.SERVER_NAME_MAX = exports.RESTART_FIELDS = exports.DEVICE_TOKEN_FIELD = exports.CLIENT_CONFIG_ROUTE = exports.CLIENT_RECONNECT_ROUTE = exports.CLIENT_STATUS_ROUTE = exports.CLIENT_CLAIM_ROUTE = exports.ADMIN_PLUGIN_BRIDGE_ROUTE = exports.ADMIN_PUSH_TEST_ROUTE = exports.ADMIN_ACTION_ROUTE = exports.ADMIN_PAIR_ROUTE = exports.ADMIN_STATUS_ROUTE = void 0;
 exports.deriveClientStatusView = deriveClientStatusView;
 exports.clientStatusLineOf = clientStatusLineOf;
 exports.normalizePairingCode = normalizePairingCode;
@@ -1895,14 +2012,18 @@ exports.nameField = nameField;
 exports.claimDeviceNameOf = claimDeviceNameOf;
 exports.oneOfField = oneOfField;
 exports.boolField = boolField;
+exports.consentField = consentField;
 exports.localOpsAllowed = localOpsAllowed;
 exports.deriveSettingsView = deriveSettingsView;
 const restart_fields_ts_1 = require("./restart-fields.js");
+const plugin_bridge_ts_1 = require("./client-data/plugin-bridge.js");
 /** Same-origin admin routes the settings block talks to (host half: T14). */
 exports.ADMIN_STATUS_ROUTE = '/_dsh/zen-remote/admin/status';
 exports.ADMIN_PAIR_ROUTE = '/_dsh/zen-remote/admin/pair';
 exports.ADMIN_ACTION_ROUTE = '/_dsh/zen-remote/admin/action';
 exports.ADMIN_PUSH_TEST_ROUTE = '/_dsh/zen-remote/admin/push-test';
+/** PB-5: the plugin bridge's registered-plugin listing (GET, server-local only). */
+exports.ADMIN_PLUGIN_BRIDGE_ROUTE = '/_dsh/zen-remote/admin/plugin-bridge';
 /** Same-origin client routes the sub-client block talks to (host half: T16). */
 exports.CLIENT_CLAIM_ROUTE = '/_dsh/zen-remote/client/claim';
 exports.CLIENT_STATUS_ROUTE = '/_dsh/zen-remote/client/status';
@@ -1972,6 +2093,18 @@ function deriveInterceptView(value) {
         recentFailures: failureListOf(record.recentFailures),
     };
 }
+/** PB-4 route-interception block, presence-gated the same way: only the
+ * install flag and the shape reasons (the 本机改道未启用 line) — the
+ * counters belong to the status surface, not this copy. */
+function derivePluginRouteInterceptView(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    const record = asRecord(value);
+    return {
+        installed: record.installed === true,
+        reasons: stringListOf(record.reasons, 20),
+    };
+}
 /** T42 compat block, only when the body carried the field at all. The wire
  * names are the status route's (`different` / `incompatibleCalls`); the view
  * keeps the render-side names the block was written against. */
@@ -2016,6 +2149,8 @@ function deriveClientStatusView(body) {
         deviceName: typeof safe.deviceName === 'string' ? safe.deviceName : '',
         intercept: deriveInterceptView(safe.intercept),
         compat: deriveCompatView(safe.compat),
+        pluginBridge: (0, plugin_bridge_ts_1.derivePluginBridgeStatuses)(safe.pluginBridge),
+        pluginRouteIntercept: derivePluginRouteInterceptView(safe.pluginRouteIntercept),
     };
 }
 function clientStatusLineOf(view, now) {
@@ -2215,6 +2350,51 @@ function boolField(field) {
         parse: (text) => (text === 'true' || text === 'false' ? { kind: 'set', value: text === 'true' } : undefined),
     };
 }
+/**
+ * `pluginBridgeConsent` (PB-5): a name → boolean map staged as its canonical
+ * JSON draft. Nothing renders it as text — the 插件桥 toggles stage the NEXT
+ * map wholesale (`togglePluginConsent` builds it, one key per click) — but
+ * riding the shared spec table is what puts the field on the SAME save path
+ * as `autoShareNewSessions`: one staged revision, one save button, one
+ * atomic mutation. `format` keeps the value's own key order so a staged
+ * draft equal to the displayed value reads as "no change"; an illegal stored
+ * map formats as `{}` (the toggle then writes from scratch, and the junk
+ * stays refused by the row validator, never laundered through).
+ */
+function consentField(field) {
+    const format = (value) => {
+        if (value === null || typeof value !== 'object' || Array.isArray(value))
+            return '{}';
+        const out = {};
+        for (const [key, entry] of Object.entries(value)) {
+            if (typeof entry === 'boolean')
+                out[key] = entry;
+        }
+        return JSON.stringify(out);
+    };
+    return {
+        field,
+        format,
+        parse: (text) => {
+            let parsed;
+            try {
+                parsed = JSON.parse(text);
+            }
+            catch {
+                return undefined;
+            }
+            if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed))
+                return undefined;
+            const out = {};
+            for (const [key, entry] of Object.entries(parsed)) {
+                if (typeof entry !== 'boolean')
+                    return undefined;
+                out[key] = entry;
+            }
+            return { kind: 'set', value: out };
+        },
+    };
+}
 /** Longest legal `serverName`, mirroring src/config.ts's cap. */
 exports.SERVER_NAME_MAX = 40;
 /** Upper bound of `idleHours`, mirroring src/config.ts. */
@@ -2235,6 +2415,7 @@ exports.SETTINGS_FIELDS = [
     nameField('serverName', exports.SERVER_NAME_MAX),
     hoursField('idleHours', exports.IDLE_HOURS_MAX),
     boolField('autoShareNewSessions'),
+    consentField('pluginBridgeConsent'),
 ];
 // --- the status -> view mapping ---------------------------------------------
 /**
@@ -3038,6 +3219,22 @@ exports.zh = {
     'settings.client.diagRecentFailures': '最近的远程调用失败',
     'settings.client.diagCompatGroups': '指纹有差异的组：{groups}',
     'settings.client.diagCompatCalls': '最近的不兼容调用',
+    // --- PB-5 插件桥：主服务端同意小节 + 子客户端诊断小节 ---
+    'settings.bridge.title': '插件桥',
+    'settings.bridge.empty': '暂无插件登记插件桥',
+    'settings.bridge.loading': '正在读取插件桥登记…',
+    'settings.bridge.loadFailed': '插件桥列表读取失败（旧版服务端或经网关打开的页面）',
+    'settings.bridge.sessionOnly': '随会话共享转发',
+    'settings.bridge.consentToggle': '允许转发整机数据',
+    'settings.bridge.consentHint': '打开后，已配对的桌面应用端可在远程会话里读取该插件的整机数据。',
+    'settings.bridge.stateBridged': '已桥接',
+    'settings.bridge.stateNotOnServer': '服务端未安装',
+    'settings.bridge.stateVersionMismatch': '版本不同（服务端 {version}）',
+    'settings.bridge.stateDeclarationMismatch': '声明不一致',
+    'settings.bridge.stateConsentOff': '服务端主人未允许整机数据',
+    'settings.bridge.stateOffline': '中继离线',
+    'settings.bridge.stateServerTooOld': '服务端 zen-remote 版本过旧',
+    'settings.bridge.interceptOff': '本机改道未启用：{reason}',
     // --- T34 子客户端远程状态：标题行图标、横幅、关闭远程 ---
     'remoteStatusOnline': '远程会话 · 已连接',
     'remoteStatusOffline': '服务端离线，正在重连',
@@ -3054,6 +3251,9 @@ exports.zh = {
     'remoteStatusOfflineClick': '服务端离线，无法操作',
     'remoteStatusUnshareFail': '关闭远程失败，请稍后再试',
     'remoteStatusUnshareFailCode': '关闭远程失败（{code}），请稍后再试',
+    // --- PB-14: the unbridged better-sidebar note (a CSS variable the
+    // remote-session stylesheet spends as the empty tab's ::before copy) ---
+    'remoteBridgeUnbridgedNote': 'better-sidebar 未在远程会话桥接（服务端未装同版本或未允许），文件与改动请以会话内消息为准',
     // 远程分组标题的后缀（后台 merge-streams 拿不到界面语言，固定用中文）；
     // 这里登记英文对照，供界面侧需要复述同样状态时使用。
     'remoteGroupOffline': '（离线）',
@@ -3308,6 +3508,22 @@ exports.en = {
     'settings.client.diagRecentFailures': 'Recent remote call failures',
     'settings.client.diagCompatGroups': 'Groups with fingerprint differences: {groups}',
     'settings.client.diagCompatCalls': 'Recent incompatible calls',
+    // --- PB-5 plugin bridge: host consent section + sub-client diagnostics ---
+    'settings.bridge.title': 'Plugin bridge',
+    'settings.bridge.empty': 'No plugin has registered a bridge yet',
+    'settings.bridge.loading': 'Loading the bridge registrations…',
+    'settings.bridge.loadFailed': 'The bridge listing failed to load (an older server, or the page opened through the gateway)',
+    'settings.bridge.sessionOnly': 'Forwards with shared sessions',
+    'settings.bridge.consentToggle': 'Allow forwarding whole-machine data',
+    'settings.bridge.consentHint': 'When on, paired desktop apps can read this plugin\u2019s whole-machine data in remote sessions.',
+    'settings.bridge.stateBridged': 'Bridged',
+    'settings.bridge.stateNotOnServer': 'Not installed on the server',
+    'settings.bridge.stateVersionMismatch': 'Version differs (server {version})',
+    'settings.bridge.stateDeclarationMismatch': 'Declaration mismatch',
+    'settings.bridge.stateConsentOff': 'Server owner has not allowed whole-machine data',
+    'settings.bridge.stateOffline': 'Relay offline',
+    'settings.bridge.stateServerTooOld': 'Server zen-remote is too old',
+    'settings.bridge.interceptOff': 'Local rerouting not enabled: {reason}',
     // --- T34 remote-status icon, composer banner, unshare ---
     'remoteStatusOnline': 'Remote session · connected',
     'remoteStatusOffline': 'Server offline — reconnecting',
@@ -3324,6 +3540,7 @@ exports.en = {
     'remoteStatusOfflineClick': 'The server is offline — nothing to do',
     'remoteStatusUnshareFail': 'Closing the remote failed — try again later',
     'remoteStatusUnshareFailCode': 'Closing the remote failed ({code}) — try again later',
+    'remoteBridgeUnbridgedNote': 'better-sidebar is not bridged for this remote session (the server lacks the same version or has not allowed it) — treat files and changes as session messages only',
     // Remote group title suffixes (the background merger cannot know the UI
     // language and always uses the Chinese forms); the English equivalents
     // live here for UI surfaces that restate the same status.
@@ -15067,6 +15284,7 @@ const jsx_runtime_1 = require("react/jsx-runtime");
 const react_1 = require("react");
 const dsh_client_ui_primitives_1 = require("@deepseek-ai/dsh-client-ui-primitives");
 const settings_form_ts_1 = require("./client-data/settings-form.js");
+const plugin_bridge_ts_1 = require("./client-data/plugin-bridge.js");
 const shares_ts_1 = require("./client-data/shares.js");
 /** Device roles the pairing picker offers, in display order. */
 const PAIR_ROLES = ['web', 'desktop-client'];
@@ -15320,6 +15538,41 @@ function SettingsSectionPage({ config, shares, t }) {
         ? (0, settings_form_ts_1.deriveSettingsView)(load.body, { now, rowUser: config.rowUser() })
         : undefined;
     const clientRole = config.savedRoleIsClient();
+    // The plugin bridge's registered-plugin listing (PB-5), host page only:
+    // loaded once per page life and refreshed whenever a save lands (the
+    // consent staged by the toggles below rides that very save). Starts in
+    // the loading state — the section renders the loading copy until the
+    // first answer lands (or the load fails, which is its own state, never
+    // the empty one); a composition without the route stays loading.
+    // PB-9-fix: the listing is a THREE-state read — loading, failed (an old
+    // build, or the page opened through the gateway where the listing is
+    // refused), or an answer that carries zero rows. Only the third means
+    // "nothing registered"; the first two must not masquerade as it.
+    const [bridgeLoad, setBridgeLoad] = (0, react_1.useState)({ state: 'loading', rows: [] });
+    const loadBridge = (0, react_1.useCallback)(() => {
+        setBridgeLoad((prev) => ({ state: 'loading', rows: prev.rows }));
+        fetch(settings_form_ts_1.ADMIN_PLUGIN_BRIDGE_ROUTE)
+            .then((res) => {
+            if (!res.ok)
+                return Promise.reject(new Error(String(res.status)));
+            return res.json();
+        })
+            .then((body) => {
+            const plugins = body?.value?.plugins;
+            if (!Array.isArray(plugins))
+                return;
+            setBridgeLoad({
+                state: 'ready',
+                rows: plugins.filter((row) => row !== null && typeof row === 'object' && typeof row.plugin === 'string'),
+            });
+        })
+            .catch(() => { setBridgeLoad((prev) => ({ state: 'error', rows: prev.rows })); });
+    }, []);
+    (0, react_1.useEffect)(() => {
+        if (!clientRole)
+            loadBridge();
+    }, [clientRole, loadBridge]);
+    const bridgeState = (0, plugin_bridge_ts_1.bridgeSectionState)(bridgeLoad.state, bridgeLoad.rows);
     const statusPoll = config.statusPoll();
     (0, react_1.useEffect)(() => {
         if (statusPoll === 'client')
@@ -15632,6 +15885,10 @@ function SettingsSectionPage({ config, shares, t }) {
             setClientLoad({ state: 'loading' });
         const refresh = config.savedRoleIsClient() ? loadClientStatus : loadStatus;
         refresh();
+        // The plugin bridge listing re-reads too (PB-5): the consent toggles
+        // stage through the very save that just landed.
+        if (!config.savedRoleIsClient())
+            loadBridge();
         // Immediate pull + 1.5s covers a hot-only save. A save that reloads the
         // plugin row (T17) restarts the row and the gateway child with it — the
         // reload and the gateway's rebinding of its port both take longer than
@@ -15653,7 +15910,19 @@ function SettingsSectionPage({ config, shares, t }) {
                         const reloadsRow = saveReloadsRow();
                         void config.save().then((landed) => { if (landed)
                             saveLanded(reloadsRow); });
-                    }, onDiscard: () => { config.discard(); }, children: [(0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.roleTitle') }), select(form.role, 'role', t('settings.role'), t('settings.roleHint'), ['host', 'client'], (option) => (option === 'host' ? t('settings.roleHost') : t('settings.roleClient'))), text(form.serverName, 'serverName', t('settings.fieldServerName'), t(clientRole ? 'settings.fieldServerNameHintClient' : 'settings.fieldServerNameHint'), t('settings.invalidName')), reloadPending && (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-status-line", children: t('settings.reloadNote') }), !clientRole && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.gatewayTitle') }), text(form.host, 'host', t('settings.fieldHost'), t('settings.fieldHostHint'), '', false, t('settings.fieldHostNote')), text(form.port, 'port', t('settings.fieldPort'), t('settings.fieldPortHint'), t('settings.invalidPort'), true), text(form.trustedProxies, 'trustedProxies', t('settings.fieldTrustedProxies'), t('settings.fieldTrustedProxiesHint'), ''), text(form.rateLimit, 'rateLimit', t('settings.fieldRateLimit'), t('settings.fieldRateLimitHint'), t('settings.invalidPositiveInt'), true), text(form.vapidSubject, 'vapidSubject', t('settings.fieldVapidSubject'), t('settings.fieldVapidSubjectHint'), ''), (0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.pushTitle') }), bool(form.pushSummary, 'pushSummary', t('settings.fieldPushSummary'), t('settings.fieldPushSummaryHint')), bool(form.pushTurnEnd, 'pushTurnEnd', t('settings.fieldPushTurnEnd'), t('settings.fieldPushTurnEndHint')), bool(form.pushTool, 'pushTool', t('settings.fieldPushTool'), t('settings.fieldPushToolHint')), text(form.pushDebounceMs, 'pushDebounceMs', t('settings.fieldPushDebounceMs'), t('settings.fieldPushDebounceMsHint'), t('settings.invalidNonNegativeInt'), true), select(form.lang, 'lang', t('settings.fieldLang'), t('settings.fieldLangHint'), ['auto', 'zh', 'en'], (option) => (option === 'auto' ? t('settings.langAuto') : option === 'zh' ? t('settings.langZh') : t('settings.langEn'))), (0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.shareTitle') }), text(form.idleHours, 'idleHours', t('settings.fieldIdleHours'), t('settings.fieldIdleHoursHint'), t('settings.invalidHours'), true), bool(form.autoShareNewSessions, 'autoShareNewSessions', t('settings.fieldAutoShare'), t('settings.fieldAutoShareHint'))] }))] }) }), !clientRole && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-card", children: [(0, jsx_runtime_1.jsx)("p", { className: "zr-settings-status-line", "data-down": data !== undefined && !data.gatewayReachable && !data.gatewayAbnormal ? 'true' : undefined, children: data === undefined
+                    }, onDiscard: () => { config.discard(); }, children: [(0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.roleTitle') }), select(form.role, 'role', t('settings.role'), t('settings.roleHint'), ['host', 'client'], (option) => (option === 'host' ? t('settings.roleHost') : t('settings.roleClient'))), text(form.serverName, 'serverName', t('settings.fieldServerName'), t(clientRole ? 'settings.fieldServerNameHintClient' : 'settings.fieldServerNameHint'), t('settings.invalidName')), reloadPending && (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-status-line", children: t('settings.reloadNote') }), !clientRole && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.gatewayTitle') }), text(form.host, 'host', t('settings.fieldHost'), t('settings.fieldHostHint'), '', false, t('settings.fieldHostNote')), text(form.port, 'port', t('settings.fieldPort'), t('settings.fieldPortHint'), t('settings.invalidPort'), true), text(form.trustedProxies, 'trustedProxies', t('settings.fieldTrustedProxies'), t('settings.fieldTrustedProxiesHint'), ''), text(form.rateLimit, 'rateLimit', t('settings.fieldRateLimit'), t('settings.fieldRateLimitHint'), t('settings.invalidPositiveInt'), true), text(form.vapidSubject, 'vapidSubject', t('settings.fieldVapidSubject'), t('settings.fieldVapidSubjectHint'), ''), (0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.pushTitle') }), bool(form.pushSummary, 'pushSummary', t('settings.fieldPushSummary'), t('settings.fieldPushSummaryHint')), bool(form.pushTurnEnd, 'pushTurnEnd', t('settings.fieldPushTurnEnd'), t('settings.fieldPushTurnEndHint')), bool(form.pushTool, 'pushTool', t('settings.fieldPushTool'), t('settings.fieldPushToolHint')), text(form.pushDebounceMs, 'pushDebounceMs', t('settings.fieldPushDebounceMs'), t('settings.fieldPushDebounceMsHint'), t('settings.invalidNonNegativeInt'), true), select(form.lang, 'lang', t('settings.fieldLang'), t('settings.fieldLangHint'), ['auto', 'zh', 'en'], (option) => (option === 'auto' ? t('settings.langAuto') : option === 'zh' ? t('settings.langZh') : t('settings.langEn'))), (0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.shareTitle') }), text(form.idleHours, 'idleHours', t('settings.fieldIdleHours'), t('settings.fieldIdleHoursHint'), t('settings.invalidHours'), true), bool(form.autoShareNewSessions, 'autoShareNewSessions', t('settings.fieldAutoShare'), t('settings.fieldAutoShareHint')), (0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.bridge.title') }), bridgeState === 'loading' && (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: t('settings.bridge.loading') }), bridgeState === 'error' && (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.bridge.loadFailed') }), bridgeState === 'empty' && (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: t('settings.bridge.empty') }), bridgeLoad.rows.map((row) => {
+                                    let current = {};
+                                    try {
+                                        const parsed = JSON.parse(form.pluginBridgeConsent.text);
+                                        if (parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed)) {
+                                            current = parsed;
+                                        }
+                                    }
+                                    catch { /* a malformed draft reads as nothing consented */ }
+                                    return ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-head", children: [(0, jsx_runtime_1.jsx)("span", { className: "zr-settings-head-title", children: row.plugin }), (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-badge", children: row.version })] }), row.hasServerScope ? ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-head", children: [(0, jsx_runtime_1.jsx)("label", { children: t('settings.bridge.consentToggle') }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Switch, { checked: current[row.plugin] === true, onChange: (checked) => {
+                                                                    config.stage('pluginBridgeConsent', JSON.stringify((0, plugin_bridge_ts_1.togglePluginConsent)(current, row.plugin, checked)));
+                                                                }, label: t('settings.bridge.consentToggle') })] }), (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: t('settings.bridge.consentHint') })] })) : ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: t('settings.bridge.sessionOnly') }))] }, row.plugin));
+                                })] }))] }) }), !clientRole && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-card", children: [(0, jsx_runtime_1.jsx)("p", { className: "zr-settings-status-line", "data-down": data !== undefined && !data.gatewayReachable && !data.gatewayAbnormal ? 'true' : undefined, children: data === undefined
                             ? ''
                             : data.gatewayAbnormal
                                 ? t('settings.gatewayAbnormal', { code: data.gatewayStatus })
@@ -15667,9 +15936,11 @@ function SettingsSectionPage({ config, shares, t }) {
                                 // hyphens stripped) on every keystroke, and only the
                                 // NORMALIZED length gates the pair button — a code pasted with
                                 // separators must survive pasting intact.
-                                value: pairCode, onChange: (e) => { setPairCode((0, settings_form_ts_1.normalizePairingCode)(e.currentTarget.value)); } }), (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: t('settings.client.pairingCodeHint') })] }), (0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 12 }, children: [(0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: !claimAllowed, onClick: () => { void runClaim(); }, children: claimBusy ? t('settings.client.pairing') : t('settings.client.pair') }), form.serverName.invalid && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.fixDeviceName') }), claimFail !== null && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: pairFailText(claimFail, t) }), claimWriteFailed && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.failWrite') })] }), (0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.client.statusTitle') }), (0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 4 }, children: [(0, jsx_runtime_1.jsx)("p", { className: "zr-settings-status-line", style: { flex: 1 }, "data-down": clientView !== undefined && (clientView.state === 'unreachable' || clientView.state === 'unexpected' || clientView.state === 'revoked' || clientView.state === 'invalid-url' || clientView.state === 'incompatible') ? 'true' : undefined, children: clientView === undefined ? '' : clientStatusText(clientView, now, t) }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: clientView === undefined || clientView.nextRetryAt === undefined || reconnectBusy, onClick: () => { void runReconnect(); }, children: reconnectBusy ? t('settings.client.reconnectBusy') : t('settings.client.reconnect') }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: clientLoad.state === 'loading', onClick: loadClientStatus, children: clientLoad.state === 'loading' ? t('settings.client.statusRefreshing') : t('settings.client.statusRefresh') })] }), form.deviceToken.configured && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 12 }, children: [(0, jsx_runtime_1.jsx)("span", { className: "zr-settings-badge", children: t('settings.client.tokenSet') }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "ghost", size: "sm", disabled: !form.available || !form.writable || unpairBusy, onClick: () => { void runUnpair(); }, children: unpairBusy ? t('settings.client.unpairBusy') : t('settings.client.unpair') })] })), unpairDone && (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", style: { paddingBottom: 12 }, children: t('settings.client.unpairDone') }), clientView !== undefined && (clientView.lastError !== '' || clientView.intercept !== undefined || clientView.compat !== undefined) && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.client.diagTitle') }), clientView.lastError !== '' && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": clientView.state === 'unreachable' ? 'true' : undefined, children: t('settings.client.diagLastError', { code: clientView.lastError }) })), clientView.intercept !== undefined && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: clientView.intercept.installed
+                                value: pairCode, onChange: (e) => { setPairCode((0, settings_form_ts_1.normalizePairingCode)(e.currentTarget.value)); } }), (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: t('settings.client.pairingCodeHint') })] }), (0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 12 }, children: [(0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: !claimAllowed, onClick: () => { void runClaim(); }, children: claimBusy ? t('settings.client.pairing') : t('settings.client.pair') }), form.serverName.invalid && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.fixDeviceName') }), claimFail !== null && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: pairFailText(claimFail, t) }), claimWriteFailed && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.failWrite') })] }), (0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.client.statusTitle') }), (0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 4 }, children: [(0, jsx_runtime_1.jsx)("p", { className: "zr-settings-status-line", style: { flex: 1 }, "data-down": clientView !== undefined && (clientView.state === 'unreachable' || clientView.state === 'unexpected' || clientView.state === 'revoked' || clientView.state === 'invalid-url' || clientView.state === 'incompatible') ? 'true' : undefined, children: clientView === undefined ? '' : clientStatusText(clientView, now, t) }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: clientView === undefined || clientView.nextRetryAt === undefined || reconnectBusy, onClick: () => { void runReconnect(); }, children: reconnectBusy ? t('settings.client.reconnectBusy') : t('settings.client.reconnect') }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: clientLoad.state === 'loading', onClick: loadClientStatus, children: clientLoad.state === 'loading' ? t('settings.client.statusRefreshing') : t('settings.client.statusRefresh') })] }), form.deviceToken.configured && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 12 }, children: [(0, jsx_runtime_1.jsx)("span", { className: "zr-settings-badge", children: t('settings.client.tokenSet') }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "ghost", size: "sm", disabled: !form.available || !form.writable || unpairBusy, onClick: () => { void runUnpair(); }, children: unpairBusy ? t('settings.client.unpairBusy') : t('settings.client.unpair') })] })), unpairDone && (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", style: { paddingBottom: 12 }, children: t('settings.client.unpairDone') }), clientView !== undefined && (clientView.lastError !== '' || clientView.intercept !== undefined || clientView.compat !== undefined || (clientView.pluginBridge?.length ?? 0) > 0 || clientView.pluginRouteIntercept !== undefined) && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.client.diagTitle') }), clientView.lastError !== '' && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": clientView.state === 'unreachable' ? 'true' : undefined, children: t('settings.client.diagLastError', { code: clientView.lastError }) })), clientView.intercept !== undefined && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: clientView.intercept.installed
                                             ? t('settings.client.diagInterceptInstalled')
-                                            : t('settings.client.diagInterceptMissing') }), clientView.intercept.reasons.length > 0 && ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", "data-invalid": "true", children: [t('settings.client.diagInterceptDisabled'), clientView.intercept.reasons.map((reason, index) => ((0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", children: reason }, index)))] })), clientView.intercept.recentFailures.length > 0 && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagRecentFailures') }) }), clientView.intercept.recentFailures.map((failure, index) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [new Date(failure.time).toLocaleString(), " \u00B7 ", failure.method !== '' ? failure.method : '—', " \u00B7 ", failure.code] }, index)))] }))] })), clientView.compat !== undefined && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [clientView.compat.mismatchedGroups.length > 0 && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.diagCompatGroups', { groups: clientView.compat.mismatchedGroups.join(', ') }) })), clientView.compat.recentCalls.length > 0 && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagCompatCalls') }) }), clientView.compat.recentCalls.map((failure, index) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [new Date(failure.time).toLocaleString(), " \u00B7 ", failure.method !== '' ? failure.method : '—', " \u00B7 ", failure.code] }, index)))] }))] }))] }))] }))] }));
+                                            : t('settings.client.diagInterceptMissing') }), clientView.intercept.reasons.length > 0 && ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", "data-invalid": "true", children: [t('settings.client.diagInterceptDisabled'), clientView.intercept.reasons.map((reason, index) => ((0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", children: reason }, index)))] })), clientView.intercept.recentFailures.length > 0 && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagRecentFailures') }) }), clientView.intercept.recentFailures.map((failure, index) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [new Date(failure.time).toLocaleString(), " \u00B7 ", failure.method !== '' ? failure.method : '—', " \u00B7 ", failure.code] }, index)))] }))] })), clientView.compat !== undefined && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [clientView.compat.mismatchedGroups.length > 0 && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.diagCompatGroups', { groups: clientView.compat.mismatchedGroups.join(', ') }) })), clientView.compat.recentCalls.length > 0 && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagCompatCalls') }) }), clientView.compat.recentCalls.map((failure, index) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [new Date(failure.time).toLocaleString(), " \u00B7 ", failure.method !== '' ? failure.method : '—', " \u00B7 ", failure.code] }, index)))] }))] })), (clientView.pluginBridge?.length ?? 0) > 0 && clientView.pluginBridge !== undefined && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.bridge.title') }) }), clientView.pluginBridge.map((row) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [row.plugin, " \u00B7 ", row.localVersion !== '' ? `v${row.localVersion}` : '—', " \u00B7", ' ', row.stateKey === 'settings.bridge.stateVersionMismatch'
+                                                ? t(row.stateKey, { version: row.serverVersion ?? '?' })
+                                                : t(row.stateKey)] }, row.plugin)))] })), clientView.pluginRouteIntercept !== undefined && !clientView.pluginRouteIntercept.installed && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.bridge.interceptOff', { reason: clientView.pluginRouteIntercept.reasons.join('; ') || '—' }) }))] }))] }))] }));
 }
 /** Display name of a value's source layer for the invalid-saved-value note. */
 function sourceName(source, t) {
@@ -16486,8 +16757,9 @@ __modules["client-data/remote-status.js"] = function (require, module, exports)
  * - `getRemoteStatusStore()` is the page-wide singleton.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.REMOTE_STATUS_POLL_MS = exports.documentVisibility = exports.CLIENT_UNSHARE_ROUTE = exports.REMOTE_STATUS_ROUTE = void 0;
+exports.REMOTE_STATUS_POLL_MS = exports.documentVisibility = exports.BRIDGE_STAMP_ATTRIBUTE = exports.BRIDGE_STAMP_PLUGIN = exports.CLIENT_UNSHARE_ROUTE = exports.REMOTE_STATUS_ROUTE = void 0;
 exports.parseRemoteStatusBody = parseRemoteStatusBody;
+exports.shouldStampBridgeAttribute = shouldStampBridgeAttribute;
 exports.createZhRemoteStatusFormatter = createZhRemoteStatusFormatter;
 exports.describeRemoteStatus = describeRemoteStatus;
 exports.bannerText = bannerText;
@@ -16521,9 +16793,30 @@ function parseRemoteStatusBody(body, now) {
         versionMismatch: record.versionMismatch === true,
         serverName: typeof record.serverName === 'string' ? record.serverName : '',
         closed,
+        bridgedPlugins: Array.isArray(record.bridgedPlugins)
+            ? record.bridgedPlugins.filter((name) => typeof name === 'string' && name !== '')
+            : [],
         asOf: now,
     };
 }
+// --- the bridge stamp (PB-14) -----------------------------------------------
+/**
+ * Whether ONE plugin's bridge verdict is bridged RIGHT NOW, judged off the
+ * `bridgedPlugins` list the remote-status body carries. Tolerant by the
+ * same discipline as the parse: a garbage list (an older server that never
+ * learned the field, a broken body) reads as "not bridged" — the hiding
+ * rules stay in force unless the server positively says otherwise, never
+ * the reverse. This is the pure core behind the
+ * `html[data-zr-bridge-<plugin>]` stamp the remote-session stylesheet
+ * spends.
+ */
+function shouldStampBridgeAttribute(bridgedPlugins, plugin) {
+    return Array.isArray(bridgedPlugins) && bridgedPlugins.includes(plugin);
+}
+/** The plugin the bridge stamp names. */
+exports.BRIDGE_STAMP_PLUGIN = 'dsh-better-sidebar';
+/** The html attribute the stamp writes (`data-zr-bridge-dsh-better-sidebar`). */
+exports.BRIDGE_STAMP_ATTRIBUTE = `data-zr-bridge-${exports.BRIDGE_STAMP_PLUGIN}`;
 /** Default formatter: the plugin's Chinese dictionary. Components pass their
  * real framework `t`; this serves the pure-function callers (tests, check
  * scripts). */
@@ -17654,17 +17947,23 @@ html[data-zr-remote-session="1"] [data-open-target] {
   display: none !important;
 }
 
-/* ---------- remote session: hide dsh-better-sidebar's file surfaces (T53) ----------
-   dsh-better-sidebar 0.24.x is the second big "open the machine's files" UI.
-   Every tab it registers (files/editor, git changes, subagent/tasks, side
-   chat, the markdown/html/code file viewers) builds its requests from a
-   {sessionId, cwd} scope and POSTs them to the plugin's own /sidebar/api/*
-   routes on whichever machine answers — in a remote session that is the
-   SUB-CLIENT's machine (client.js call() ~3111, fetchUpload ~3162,
-   encodeHtmlUrl /sidebar/html/ ~3069-3414), so the tree would show same-named
-   LOCAL files as if they were the session's and an edit would WRITE locally.
-   Per the T53 decision the interfaces are hidden, not proxied: the relay
-   carries no /sidebar routes and none are added.
+/* ---------- remote session: hide dsh-better-sidebar's file surfaces (T53, two regimes since PB-14) ----------
+   dsh-better-sidebar 0.25.0 is the second big "open the machine's files" UI
+   AND, since PB-12/13, the first ADAPTER-BRIDGED one: at exactly 0.25.0 its
+   /sidebar/api routes, its two WebSockets and its side chat cross the byte
+   tunnel and read/write the SERVER's data, gated on the whole-machine-data
+   consent. The hiding below therefore applies ONLY while the plugin is NOT
+   bridged — the :not([data-zr-bridge-dsh-better-sidebar="1"]) stamp the
+   remote-status poll writes; see the PB-14 note above): bridged, the panels
+   are remote-aware and stay visible; unbridged (a different version, the
+   server without the adapter's consent), every tab it registers (files/
+   editor, git changes, subagent/tasks, side chat, the markdown/html/code
+   file viewers) builds its requests from a {sessionId, cwd} scope and POSTs
+   them to the plugin's own /sidebar/api/* routes on whichever machine
+   answers — in a remote session that is the SUB-CLIENT's machine (client.js
+   call() ~3111, fetchUpload ~3162, encodeHtmlUrl /sidebar/html/ ~3069-3414),
+   so the tree would show same-named LOCAL files as if they were the
+   session's and an edit would WRITE locally.
 
    Anchors, all the plugin's or the host's own rendered contracts (no hashed
    class names; the one suffix selector, _chipIcon, is unique among the
@@ -17673,18 +17972,21 @@ html[data-zr-remote-session="1"] [data-open-target] {
    @liustack/modsearch / @wxg-prc-cpg/browser-skill-dsh-plugin (modsearch /
    browser-skill) / dshmarket and every @deepseek-ai sidebar package for it):
 
-   HONEST LIMITS (T53-fix): everything here is display:none ONLY. The plugin's
+   HONEST LIMITS (T53-fix, adjusted PB-14): unbridged, the plugin's
    components stay mounted and keep silently POSTing READ-ONLY /sidebar/api
    requests to the local machine (session.cwd, changes.ops, the tree reads a
    mounted tab refreshes with) — the data never leaves that machine, and no
-   write can happen because every write control is inside the hidden surfaces.
-   Known boundary: a dsh-resource://file/** address opened through
-   sidebarRight.openResource in a remote session (file links in chat,
-   deliverables, @-references, skills) is CLAIMED by the plugin's editor
-   registration (client.js ~21377: patterns ["dsh-resource://file/**"]) before
-   the host preview sees it — the right sidebar expands, the rules below hide
-   the tab's body and chip, and an EMPTY panel remains. Root fix needs
-   zen-remote's own remote file tree; separate discussion.
+   write can happen because every write control is inside the hidden
+   surfaces (the tab body hides its CHILDREN and spends the note copy as a
+   ::before, so an already-open tab reads WHY it is empty instead of
+   sitting blank). Known boundary: a dsh-resource://file/** address opened
+   through sidebarRight.openResource in a remote session (file links in
+   chat, deliverables, @-references, skills) is CLAIMED by the plugin's
+   editor registration (client.js ~21377: patterns ["dsh-resource://file/**"])
+   before the host preview sees it — the right sidebar expands, the rules
+   below hide the tab's body content and chip, and the note fills the panel.
+   Bridged (0.25.0 + consent), none of this applies: the tab reads the
+   server's data through the adapter and stays visible whole.
 
    - [data-dsh-bottom-toggle] — the header-utilities button that expands the
      bottom workbench (client.js BottomDockToggle ~20863; slot registration
@@ -17757,31 +18059,61 @@ html[data-zr-remote-session="1"] [data-open-target] {
      attribute and this rule hides it too (cosmetic; the page stays reachable
      through its shortcut command path and the plugin's takeover is the
      "files" implementation on every deployment this plugin pairs with
-     better-sidebar anyway). */
-html[data-zr-remote-session="1"] [data-dsh-bottom-toggle] {
+     better-sidebar anyway).
+
+   /* PB-14: every T53 rule below carries
+   :not([data-zr-bridge-dsh-better-sidebar="1"]) — when the adapter
+   (PB-12) bridges the plugin, the panels read the SERVER's data through
+   the byte tunnel and MUST stay visible; the hiding applies only to the
+   unbridged combination, and the empty tab body then carries a note
+   instead of blankness. The stamp is written by
+   effects/remote-session.ts off the remote-status poll's bridgedPlugins
+   list (client-data/remote-status.ts shouldStampBridgeAttribute). */
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) [data-dsh-bottom-toggle] {
   display: none !important;
 }
-html[data-zr-remote-session="1"] [data-dsh-panel-host] {
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) [data-dsh-panel-host] {
   display: none !important;
 }
-html[data-zr-remote-session="1"] {
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) {
   --dsh-sidebar-height: 0px !important;
 }
-html[data-zr-remote-session="1"] [data-dsh-native-tab-host] {
+/* The unbridged tab body: hide the plugin's own content and spend the
+   note copy as a ::before — an already-open tab reads WHY it is empty
+   (0.25.0 keeps tabs mounted, so a stale body would otherwise sit blank).
+   --zr-bridge-note is set on <html> by the stamp effect, in the
+   browser's language; unset (effect not running yet) the content falls
+   through and nothing renders. */
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) [data-dsh-native-tab-host] > * {
+  display: none !important;
+}
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) [data-dsh-native-tab-host]::before {
+  content: var(--zr-bridge-note);
+  display: block;
+  padding: 24px 16px;
+  font-size: 13px;
+  line-height: 1.7;
+  color: var(--dsh-fg-muted, #6b7280);
+  word-break: break-word;
+}
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) [data-dockkit-tab]:has([class$="_chipIcon"]) {
   display: none !important;
 }
-html[data-zr-remote-session="1"] [data-dockkit-tab]:has([class$="_chipIcon"]) {
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) [data-floating-window]:has([data-window-body]) {
   display: none !important;
 }
-html[data-zr-remote-session="1"] [data-floating-window]:has([data-window-body]) {
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) [data-sidebar-right-guide-entry="git"],
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) [data-sidebar-right-guide-entry="subagent"],
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) [data-sidebar-right-guide-entry="sidechat"] {
   display: none !important;
 }
-html[data-zr-remote-session="1"] [data-sidebar-right-guide-entry="git"],
-html[data-zr-remote-session="1"] [data-sidebar-right-guide-entry="subagent"],
-html[data-zr-remote-session="1"] [data-sidebar-right-guide-entry="sidechat"] {
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) [data-sidebar-right-guide-entry="files"]:not([aria-keyshortcuts]) {
   display: none !important;
 }
-html[data-zr-remote-session="1"] [data-sidebar-right-guide-entry="files"]:not([aria-keyshortcuts]) {
+/* 0.25.0's dock fallback — the floating quick-open button the plugin pins
+   for empty workspaces. Same treatment as every other open-the-machine's-
+   files control: hidden while unbridged, untouched when bridged. */
+html[data-zr-remote-session="1"]:not([data-zr-bridge-dsh-better-sidebar="1"]) [data-dsh-dock-fallback] {
   display: none !important;
 }
 
@@ -17902,6 +18234,8 @@ exports.installRemoteSessionGuard = installRemoteSessionGuard;
 const types_ts_1 = require("./client/compat/types.js");
 const virtual_id_ts_1 = require("./virtual-id.js");
 const remote_session_css_ts_1 = require("./client/styles/remote-session.css.js");
+const remote_status_ts_1 = require("./client-data/remote-status.js");
+const locales_ts_1 = require("./client/locales.js");
 /**
  * The remote-session marker (T41b): the CURRENT main-view session id, read
  * the way the official uiSession `publishMain` reads it (RT
@@ -17924,6 +18258,26 @@ const remote_session_css_ts_1 = require("./client/styles/remote-session.css.js")
  * attribute must track the current session regardless of which panel is
  * mounted, and an attribute + stylesheet survives every re-render untouched.
  */
+/** The CURRENT main-view session id, the publishMain way (see the module
+ * comment). Shared by the session marker and the bridge stamp — both key on
+ * the same "which session is on screen" answer. */
+function currentMainSessionIdOf(ctx) {
+    const { byId } = ctx.sessions.list.getSnapshot();
+    const uiSession = ctx.get('uiSession');
+    const current = uiSession?.current?.value?.key;
+    const rows = byId;
+    return typeof current === 'string' && (rows[current]?.retainedBy?.mainView ?? 0) > 0
+        ? current
+        : (0, types_ts_1.mainSessionIdOf)(byId);
+}
+/** The unbridged note copy in the BROWSER's language (the plugin's own
+ * namespace carries both dictionaries; the framework `t` seat is not
+ * reachable from a non-React effect, so the navigator's language picks —
+ * `zh*` reads Chinese, everything else English). */
+function bridgeNoteOf(language) {
+    const key = 'remoteBridgeUnbridgedNote';
+    return typeof language === 'string' && language.startsWith('zh') ? locales_ts_1.zh[key] : locales_ts_1.en[key];
+}
 function installRemoteSessionGuard(ctx) {
     ctx.effect(() => {
         const tag = document.createElement('style');
@@ -17937,15 +18291,7 @@ function installRemoteSessionGuard(ctx) {
     }, 'dsh-zen-remote: remote-session styles');
     ctx.effect(() => {
         const apply = () => {
-            const { byId } = ctx.sessions.list.getSnapshot();
-            // publishMain's tie-break (see the module comment): prefer the still-
-            // retained current main binding, else the first mainView row.
-            const uiSession = ctx.get('uiSession');
-            const current = uiSession?.current?.value?.key;
-            const rows = byId;
-            const sessionId = typeof current === 'string' && (rows[current]?.retainedBy?.mainView ?? 0) > 0
-                ? current
-                : (0, types_ts_1.mainSessionIdOf)(byId);
+            const sessionId = currentMainSessionIdOf(ctx);
             const root = document.documentElement;
             if (sessionId !== undefined && (0, virtual_id_ts_1.isVirtual)(sessionId))
                 root.setAttribute('data-zr-remote-session', '1');
@@ -17966,6 +18312,64 @@ function installRemoteSessionGuard(ctx) {
             document.documentElement.removeAttribute('data-zr-remote-session');
         };
     }, 'dsh-zen-remote: remote-session attribute');
+    // The bridge stamp (PB-14): while a REMOTE session is on screen, the
+    // remote-status poll's `bridgedPlugins` decides whether better-sidebar is
+    // bridged RIGHT NOW — bridged, the T53 hiding rules lift (the panels read
+    // the server's data through the adapter) and the html carries
+    // `data-zr-bridge-dsh-better-sidebar="1"`; not bridged, the rules stay
+    // and the html carries the unbridged note copy as a CSS variable the
+    // stylesheet spends on the empty tab body. The subscription rides
+    // subscribeIfVirtual — a LOCAL session (or a host page) never polls, and
+    // the attribute comes off; better-sidebar not installed or the server not
+    // paired simply never appear in `bridgedPlugins`, so the stamp never
+    // fires from this side alone.
+    ctx.effect(() => {
+        const root = document.documentElement;
+        const store = (0, remote_status_ts_1.getRemoteStatusStore)();
+        let offStore;
+        const clear = () => {
+            root.removeAttribute(remote_status_ts_1.BRIDGE_STAMP_ATTRIBUTE);
+            root.style.removeProperty('--zr-bridge-note');
+        };
+        const applyBridge = () => {
+            const view = store.getSnapshot().view;
+            if ((0, remote_status_ts_1.shouldStampBridgeAttribute)(view?.bridgedPlugins, remote_status_ts_1.BRIDGE_STAMP_PLUGIN)) {
+                root.setAttribute(remote_status_ts_1.BRIDGE_STAMP_ATTRIBUTE, '1');
+                root.style.removeProperty('--zr-bridge-note');
+            }
+            else {
+                root.removeAttribute(remote_status_ts_1.BRIDGE_STAMP_ATTRIBUTE);
+                // JSON.stringify's quotes are a legal CSS string — the stylesheet's
+                // ::before spends it as `content: var(--zr-bridge-note)`.
+                root.style.setProperty('--zr-bridge-note', JSON.stringify(bridgeNoteOf(navigator.language)));
+            }
+        };
+        const retune = () => {
+            const sessionId = currentMainSessionIdOf(ctx);
+            const virtualNow = sessionId !== undefined && (0, virtual_id_ts_1.isVirtual)(sessionId);
+            if (virtualNow && offStore === undefined && typeof sessionId === 'string') {
+                offStore = (0, remote_status_ts_1.subscribeIfVirtual)(store, sessionId, applyBridge);
+                applyBridge();
+                return;
+            }
+            if (!virtualNow && offStore !== undefined) {
+                offStore();
+                offStore = undefined;
+                clear();
+            }
+        };
+        retune();
+        const offs = [ctx.sessions.list.subscribe(retune)];
+        const current = ctx.get('uiSession')?.current;
+        if (typeof current?.subscribe === 'function')
+            offs.push(current.subscribe(retune));
+        return () => {
+            for (const off of offs)
+                off();
+            offStore?.();
+            clear();
+        };
+    }, 'dsh-zen-remote: bridge stamp');
 }
 };
 __modules["client-data/model-group-side.js"] = function (require, module, exports) {