dsh-zen-remote 2.2.4 → 2.2.6

package/lib/client.js

@@ -1500,6 +1500,22 @@ function MobileHome({ useSessions, useWorkspaces, useSessionPendingInteraction,
         window.addEventListener(nav_store_ts_1.GO_HOME_EVENT, onGoHome);
         return () => window.removeEventListener(nav_store_ts_1.GO_HOME_EVENT, onGoHome);
     }, [actions]);
+    // Mirror the current phone view onto the AppFrame element itself so CSS inside
+    // the main column (session header hide + fade strip gate) can key off a direct
+    // ancestor attribute instead of relying solely on cross-subtree body:has(...)
+    // invalidation on iOS WebKit (especially across installViewportHeal's display
+    // toggle on standalone PWA launch).
+    (0, react_1.useLayoutEffect)(() => {
+        const frame = document.querySelector('[data-mobile-nav="frame"]')
+            ?? document.querySelector('[data-shell-overlay]')?.parentElement
+            ?? null;
+        if (!phone || frame === null) {
+            frame?.removeAttribute('data-mobile-view');
+            return;
+        }
+        frame.setAttribute('data-mobile-view', view);
+        return () => frame.removeAttribute('data-mobile-view');
+    }, [phone, view]);
     const enter = (start) => {
         start();
         setSheet(null);
@@ -1507,19 +1523,74 @@ function MobileHome({ useSessions, useWorkspaces, useSessionPendingInteraction,
         (0, history_nav_ts_1.pushLayer)({ id: SESSION_LAYER, close: () => actions.show('home') });
     };
     // Opens the OFFICIAL settings modal (dsh-client-ui-settings-general's
-    // SettingsRoot) by clicking its real trigger button — its "open" state is
+    // SettingsRoot) by clicking its real trigger — its "open" state is
     // component-local React state with no public setter, same reasoning as
-    // MobileSessionHeader's Chat/Trajectory tab click. The trigger mounts
-    // inside the sidebar's `sidebar.settings` footer slot
-    // (`[class$="_settingsArea"]`, the sidebar shell's stable class suffix —
-    // see dsh-client-ui-sidebar's SidebarRoot), which is display:none on the
-    // phone breakpoint (home.css.ts): `.click()` still dispatches (bypasses
-    // hit-testing, S2.1 precedent) and flips `open`, but the resulting
-    // `aria-modal="true"` dialog would still paint nothing without the portal
-    // fix in styles/chips.css.ts (`:has([aria-modal="true"])` un-hides exactly
-    // the ancestor chain down to it, not the whole sidebar).
+    // MobileSessionHeader's Chat/Trajectory tab click. The trigger lives in the
+    // sidebar's `sidebar.settings` footer slot (`[class$="_settingsArea"]`, the
+    // sidebar shell's stable class suffix — see dsh-client-ui-sidebar's
+    // SidebarRoot), which is display:none on the phone breakpoint
+    // (home.css.ts): `.click()` still dispatches (bypasses hit-testing, S2.1
+    // precedent) and flips `open`.
+    //
+    // DSH 0.2.1-rc.2 moved the entry: that slot now holds only the ACCOUNT
+    // launcher (aria-haspopup="menu"), and Settings is an item inside its menu
+    // — the `button[aria-haspopup="dialog"]` this used to forward to is gone
+    // (and the resulting dialog is a body portal now, so the chips.css.ts
+    // ancestor un-hide below no longer has anything to reveal). Hence the
+    // menu fallback; both paths keep the label-free, structure-free
+    // "dispatch a click on the official control" approach.
     const openSettings = () => {
-        document.querySelector('[class$="_settingsArea"] button[aria-haspopup="dialog"]')?.click();
+        const area = document.querySelector('[class$="_settingsArea"]');
+        // Older DSH: the settings modal's own trigger sits in the settings area.
+        const direct = area?.querySelector('button[aria-haspopup="dialog"]');
+        if (direct) {
+            direct.click();
+            return;
+        }
+        // DSH 0.2.1-rc.2: the sidebar footer's settings area now holds only the
+        // ACCOUNT launcher (aria-haspopup="menu", data-signed-out), and 设置 /
+        // Settings is an item inside its menu — the dialog trigger this used to
+        // forward to no longer exists there, so the bare
+        // querySelector()?.click() silently no-oped (real-phone report
+        // 2026-10-21: "手机端右上角设置点了没反应"). Open the menu, then click the
+        // settings item.
+        //
+        // Two constraints from review: (1) menus are body portals and a sibling
+        // menu (session actions, model picker) may already be mounted, so the
+        // item must come from the menu THIS click opened — snapshot the existing
+        // ones and pick the newly mounted menu; (2) the item is located without
+        // depending on its label, because the account menu's copy is localized:
+        // 设置 / Settings is the FIRST menuitem in both the signed-in and the
+        // signed-out variant (AccountMenu items: settings, contact, signin/out),
+        // so the first item is the locale-independent anchor, with the label as
+        // a refinement if that order ever changes.
+        const launcher = area?.querySelector('button[aria-haspopup="menu"], button');
+        if (!launcher)
+            return;
+        const before = new Set(document.querySelectorAll('[role="menu"]'));
+        launcher.click();
+        const pick = () => {
+            const menu = [...document.querySelectorAll('[role="menu"]')].find((el) => !before.has(el));
+            if (!menu)
+                return false;
+            const items = [...menu.querySelectorAll('button[role="menuitem"]')];
+            const item = items.find((el) => /设置|Settings/i.test(el.textContent || '')) ?? items[0];
+            if (!item)
+                return false;
+            item.click();
+            return true;
+        };
+        // React commits the menu in the click's own task; observe for the mount
+        // (a deferred sibling launcher cannot leave a stale poll behind) and give
+        // up instead of leaking the observer if it never appears.
+        if (pick())
+            return;
+        const observer = new MutationObserver(() => {
+            if (pick())
+                observer.disconnect();
+        });
+        observer.observe(document.body, { childList: true, subtree: true });
+        setTimeout(() => observer.disconnect(), 1000);
     };
     if (!phone)
         return null;
@@ -2151,6 +2222,9 @@ function deriveClientStatusView(body) {
         compat: deriveCompatView(safe.compat),
         pluginBridge: (0, plugin_bridge_ts_1.derivePluginBridgeStatuses)(safe.pluginBridge),
         pluginRouteIntercept: derivePluginRouteInterceptView(safe.pluginRouteIntercept),
+        uploadProbe: safe.serviceProbe !== null && typeof safe.serviceProbe === 'object'
+            ? Object.freeze({ ...safe.serviceProbe })
+            : undefined,
     };
 }
 function clientStatusLineOf(view, now) {
@@ -3219,6 +3293,15 @@ exports.zh = {
     'settings.client.diagRecentFailures': '最近的远程调用失败',
     'settings.client.diagCompatGroups': '指纹有差异的组：{groups}',
     'settings.client.diagCompatCalls': '最近的不兼容调用',
+    // --- RD-3 远程会话拖拽守卫的诊断行（浏览器端计数，渲染时现读） ---
+    'settings.client.diagRemoteDrop': '远程拖拽守卫',
+    'settings.client.diagRemoteDropOk': '已安装 · 拦截 {intercepted} · 重派发 {redispatched} · 文件夹 {blocked} · 放行 {passthrough} · 重包失败 {failed}',
+    'settings.client.diagRemoteDropOff': '未安装（{reason}）',
+    // --- RD-6 上传改道（fetch-route 拦截）的诊断行：读 remote-status 的 serviceProbe ---
+    'settings.client.diagUploadRedirect': '上传改道',
+    'settings.client.diagUploadRedirectOk': '已安装 · 上传已接管',
+    'settings.client.diagUploadRedirectRefused': '拒装：{reason}',
+    'settings.client.diagUploadRedirectPending': '服务注入未触发 · connection {connection} · fileUploads {fileUploads}',
     // --- PB-5 插件桥：主服务端同意小节 + 子客户端诊断小节 ---
     'settings.bridge.title': '插件桥',
     'settings.bridge.empty': '暂无插件登记插件桥',
@@ -3260,6 +3343,12 @@ exports.zh = {
     'remoteGroupRevoked': '（令牌已吊销）',
     'remoteGroupUnpaired': '（已解除配对）',
     'remoteGroupMismatch': '（版本有差异）',
+    // --- 远程会话拖拽附件（RD-2）：文件夹被拦截时的短暂提示 ---
+    'remoteDropFolderBlocked': '远程会话暂不支持拖入文件夹',
+    // --- 2.2.6: 远程会话产物下载（deliverable 卡片 / 文档预览头） ---
+    'downloadToLocal': '下载到本机',
+    'downloadBusy': '下载中…',
+    'downloadFailed': '下载失败',
 };
 /** English dictionary, key-identical to the Chinese source of truth. */
 exports.en = {
@@ -3508,6 +3597,16 @@ exports.en = {
     'settings.client.diagRecentFailures': 'Recent remote call failures',
     'settings.client.diagCompatGroups': 'Groups with fingerprint differences: {groups}',
     'settings.client.diagCompatCalls': 'Recent incompatible calls',
+    // --- RD-3: the remote drop guard's diagnostics line (browser-side
+    // counters, read at render time) ---
+    'settings.client.diagRemoteDrop': 'Remote drop guard',
+    'settings.client.diagRemoteDropOk': 'Installed · intercepted {intercepted} · redispatched {redispatched} · folders {blocked} · passthrough {passthrough} · rewrap failed {failed}',
+    'settings.client.diagRemoteDropOff': 'Not installed ({reason})',
+    // --- RD-6: the upload-redirect (fetch-route intercept) diagnostics row ---
+    'settings.client.diagUploadRedirect': 'Upload redirect',
+    'settings.client.diagUploadRedirectOk': 'Installed · upload wrapped',
+    'settings.client.diagUploadRedirectRefused': 'Refused: {reason}',
+    'settings.client.diagUploadRedirectPending': 'Service inject never fired · connection {connection} · fileUploads {fileUploads}',
     // --- PB-5 plugin bridge: host consent section + sub-client diagnostics ---
     'settings.bridge.title': 'Plugin bridge',
     'settings.bridge.empty': 'No plugin has registered a bridge yet',
@@ -3548,6 +3647,13 @@ exports.en = {
     'remoteGroupRevoked': ' (token revoked)',
     'remoteGroupUnpaired': ' (unpaired)',
     'remoteGroupMismatch': ' (version mismatch)',
+    // --- RD-2: the short toast when a folder drop into a remote session is blocked ---
+    'remoteDropFolderBlocked': 'Folders cannot be dropped into a remote session yet',
+    // 2.2.6: remote-session artifact download (deliverable cards / document
+    // preview header).
+    'downloadToLocal': 'Download to this computer',
+    'downloadBusy': 'Downloading…',
+    'downloadFailed': 'Download failed',
 };
 };
 __modules["client-data/shares.js"] = function (require, module, exports) {
@@ -6970,6 +7076,8 @@ exports.UPLOAD_DIR = exports.UPLOAD_ROUTE = void 0;
 exports.uploadUrl = uploadUrl;
 exports.mentionsIn = mentionsIn;
 exports.draftWithMention = draftWithMention;
+exports.appendDraftOf = appendDraftOf;
+exports.writeMention = writeMention;
 exports.draftWithoutMention = draftWithoutMention;
 exports.leafOf = leafOf;
 exports.middleEllipsis = middleEllipsis;
@@ -7023,6 +7131,37 @@ function draftWithMention(draft, relPath) {
         return `${draft}@${relPath} `;
     return `${draft} @${relPath} `;
 }
+/**
+ * The host's non-destructive append, when the running DSH exposes one.
+ * @param actions - the slot's `inputActions` (or any object carrying them).
+ * @returns a bound `appendDraft`, or undefined when the host has none.
+ */
+function appendDraftOf(actions) {
+    const append = actions.appendDraft;
+    return typeof append === 'function' ? append.bind(actions) : undefined;
+}
+/**
+ * Write one `@path` mention into the composer.
+ *
+ * Prefers `appendDraft` (no whole-draft rewrite, so nothing the user typed or
+ * referenced meanwhile can be lost); falls back to `setDraft` with
+ * {@link draftWithMention} over `base` on a host without it.
+ * @param actions - the draft writers.
+ * @param base - the draft to rebase onto for the `setDraft` fallback.
+ * @param relPath - workspace-relative path returned by the upload route.
+ * @returns the draft text the fallback wrote, or `base` unchanged when the
+ *   host appended for us (the next render's `useInput` carries the result).
+ */
+function writeMention(actions, base, relPath) {
+    const append = appendDraftOf(actions);
+    if (append !== undefined) {
+        append(`@${relPath} `);
+        return base;
+    }
+    const next = draftWithMention(base, relPath);
+    actions.setDraft(next);
+    return next;
+}
 /**
  * Remove one `@path` mention from the draft — what a chip's × does.
  *
@@ -7196,8 +7335,11 @@ async function uploadFile(sessionId, file) {
  * host without one (DSH ≤ 0.1.2) everything below loads exactly as before.
  *
  * Every picked file takes the SAME path: upload to the node half, then append
- * `@.dsh-uploads/name` to the draft through `inputActions.setDraft` (the
- * official write path — no DOM value poking). S7.1 removed the split that used
+ * `@.dsh-uploads/name` to the draft through the official write path — no DOM
+ * value poking: `inputActions.appendDraft` where the running DSH exposes it
+ * (0.2.1-rc.3+ editor runtime; keeps the user's text and inline references),
+ * else `inputActions.setDraft` with the whole next draft (attach-upload.ts
+ * `writeMention`). S7.1 removed the split that used
  * to send inlineable images straight into the session with `session.prompt`:
  * one behaviour for every attachment, and the user always presses send.
  * MobileAttachChips renders the preview row off those same draft tokens.
@@ -7230,19 +7372,21 @@ function MobileAttachButton({ t, sessionId, useInput, inputActions }) {
             return;
         setBusy(true);
         setError(null);
-        // setDraft takes the WHOLE next draft, so each mention is appended to the
-        // value we last wrote — unless the ref shows the user has typed since, in
-        // which case theirs wins and we append to that instead. (Rebasing on the
-        // ref unconditionally would lose a mention whenever React had not yet
+        // appendDraft (DSH 0.2.1-rc.3+) appends after whatever the composer holds
+        // right now, so no rebasing is needed. The setDraft fallback takes the
+        // WHOLE next draft, so each mention is appended to the value we last
+        // wrote — unless the ref shows the user has typed since, in which case
+        // theirs wins and we append to that instead. (Rebasing on the ref
+        // unconditionally would lose a mention whenever React had not yet
         // re-rendered us between two files of the same pick.)
+        const appends = (0, attach_upload_ts_1.appendDraftOf)(inputActions) !== undefined;
         let written = liveDraft.current;
         try {
             for (const file of files) {
                 const relPath = await uploadFile(sessionId, file);
                 // Local preview for the chip row; a no-op for non-images.
                 (0, attach_upload_ts_1.rememberThumbnail)(relPath, file);
-                written = (0, attach_upload_ts_1.draftWithMention)(liveDraft.current === written ? written : liveDraft.current, relPath);
-                inputActions.setDraft(written);
+                written = (0, attach_upload_ts_1.writeMention)(inputActions, (appends || liveDraft.current === written) ? written : liveDraft.current, relPath);
             }
         }
         catch (cause) {
@@ -7311,7 +7455,12 @@ function MobileAttachChips({ t, useInput, inputActions }) {
     return ((0, jsx_runtime_1.jsx)("div", { "data-mobile-nav": "attach-chips", children: attachments.map((relPath) => {
             const name = (0, attach_upload_ts_1.leafOf)(relPath);
             const preview = (0, attach_upload_ts_1.thumbnailFor)(relPath);
-            return ((0, jsx_runtime_1.jsxs)("span", { "data-mobile-nav": "attach-chip", "data-kind": preview === undefined ? 'file' : 'image', title: name, children: [(0, jsx_runtime_1.jsxs)("span", { "data-mobile-nav": "attach-chip-art", children: [(0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.IconPaperclipOutlineRegular, { size: 16 }), preview === undefined ? null : (0, jsx_runtime_1.jsx)("img", { src: preview, alt: "" })] }), preview === undefined ? (0, jsx_runtime_1.jsx)("span", { "data-mobile-nav": "attach-chip-name", children: (0, attach_upload_ts_1.middleEllipsis)(name) }) : null, (0, jsx_runtime_1.jsx)("button", { type: "button", "data-mobile-nav": "attach-chip-remove", "aria-label": t('attachRemove', { name }), onClick: () => inputActions.setDraft((0, attach_upload_ts_1.draftWithoutMention)(draft, relPath)), children: (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.IconCloseFillRegular, { size: 14 }) })] }, relPath));
+            return ((0, jsx_runtime_1.jsxs)("span", { "data-mobile-nav": "attach-chip", "data-kind": preview === undefined ? 'file' : 'image', title: name, children: [(0, jsx_runtime_1.jsxs)("span", { "data-mobile-nav": "attach-chip-art", children: [(0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.IconPaperclipOutlineRegular, { size: 16 }), preview === undefined ? null : (0, jsx_runtime_1.jsx)("img", { src: preview, alt: "" })] }), preview === undefined ? (0, jsx_runtime_1.jsx)("span", { "data-mobile-nav": "attach-chip-name", children: (0, attach_upload_ts_1.middleEllipsis)(name) }) : null, (0, jsx_runtime_1.jsx)("button", { type: "button", "data-mobile-nav": "attach-chip-remove", "aria-label": t('attachRemove', { name }), 
+                        // Removal stays on setDraft even where the host has appendDraft
+                        // (DSH 0.2.1-rc.3+): append can only add text, and the public
+                        // inputActions face has no span-replace verb, so lifting one
+                        // token out still means writing the whole next draft.
+                        onClick: () => inputActions.setDraft((0, attach_upload_ts_1.draftWithoutMention)(draft, relPath)), children: (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.IconCloseFillRegular, { size: 14 }) })] }, relPath));
         }) }));
 }
 };
@@ -7906,7 +8055,14 @@ exports.LAYOUT_CSS = `/* ---------- mobile-only layout ---------- */
      display:none rule below, and the user can no longer type a path
      (issue #12, 2026-08-16). The picker family keeps the official layout
      on mobile in every mode. */
-  [aria-modal="true"]:has(> :first-child > :last-child > button):not(:has([role="navigation"])):not(:has([class*="ZuhsRW"])) {
+  /* DSH 0.2.1-rc.2 renders this dialog as a body PORTAL
+     (body > overlay > panel), so the placement below must key off the nav
+     list the panel owns, not off a guessed child depth: that is both the
+     stable "this is the settings sheet" anchor and the reason the safe-area
+     offset below still applies inside the portal (the constants live on
+     :root, so they cross the portal boundary). The bottom inset is
+     subtracted too — a tall panel must not run under the home indicator. */
+  [aria-modal="true"]:has(> :first-child > :last-child > button):not(:has([role="navigation"])):not(:has([class*="ZuhsRW"])):has([class$="_navList"]) {
     position: absolute !important;
     left: 8px !important;
     /* Fixed top (no translateY): a transform on the panel combined with the
@@ -7917,11 +8073,11 @@ exports.LAYOUT_CSS = `/* ---------- mobile-only layout ---------- */
     width: calc(100vw - 16px) !important;
     max-width: calc(100vw - 16px) !important;
     /* Height follows the content (no dead space under a short page); it
-       caps at 100dvh-24 (less the safe-area top) and the options area
+       caps at 100dvh-24 (less both safe-area insets) and the options area
        scrolls only then. */
     height: auto !important;
-    max-height: min(800px, calc(100vh - 24px - var(--mnav-sat))) !important;
-    max-height: min(800px, calc(100dvh - 24px - var(--mnav-sat))) !important;
+    max-height: min(800px, calc(100vh - 24px - var(--mnav-sat) - var(--mnav-sab))) !important;
+    max-height: min(800px, calc(100dvh - 24px - var(--mnav-sat) - var(--mnav-sab))) !important;
     flex-direction: column !important;
     border-radius: 14px !important;
     animation: dsh-mobile-nav-sheet-in .22s var(--ds-ease-out, ease-in-out);
@@ -7969,14 +8125,24 @@ exports.LAYOUT_CSS = `/* ---------- mobile-only layout ---------- */
      (config file + close) is reparented INTO this nav row by a client
      effect (MobileNavOverlay), so the tab list must be anchored by its
      class, NOT by :last-child (the reparented toolbar becomes the nav's
-     new last child). */
+     new last child).
+
+     2026-10-21 (DSH 0.2.1-rc.2): this rule used to declare
+     "flex-wrap: wrap; overflow: visible" on top of the flex/min-width/gap
+     above. Because it is one class-anchored compound selector with a much
+     higher specificity than compat.css.ts's portal-scoped navList rule, it
+     silently won the tie and the tab list wrapped into two rows — with the
+     reparented ✕ vertically centred across both of them. Measured on a
+     phone shell: the list was 86px tall (two rows) instead of one 40px row,
+     and it scrolled nowhere. The wrap was a 2026-08-16 trade-off (show every
+     tab, no hidden scroll cut-off); with the thin scrollbar affordance now
+     in compat.css.ts the single scrolling row is the better trade, so the
+     two declarations live there and this rule no longer contradicts them. */
   [aria-modal="true"]:has(> :first-child > :last-child > button):not(:has([role="navigation"])):not(:has([class*="ZuhsRW"])) > :first-child [class$="_navList"] {
     flex: 1 1 auto !important;
     min-width: 0 !important;
     flex-direction: row !important;
-    flex-wrap: wrap !important;
     gap: 6px !important;
-    overflow: visible !important;
   }
   /* Content toolbar (Open configuration file + close): grouped flush to
      the right edge, and reparented INTO the nav row on mobile so it shares
@@ -8337,31 +8503,62 @@ exports.COMPAT_CSS = `  /* ---------- dsh-web-ui family compatibility ----------
      one row with a thin scrollbar keeps every tab reachable and returns
      that space to the options area (user feedback 2026-08-16). An earlier
      one-row attempt had no scroll affordance and silently cut the last
-     tab off; the thin scrollbar IS the affordance. Scoped to the frame
-     marker: the desktop dialog keeps its official vertical nav column. */
-  [data-mobile-nav="frame"] [aria-modal="true"]:has(> :first-child > :last-child > button):not(:has([role="navigation"])):not(:has([class*="ZuhsRW"])) > :first-child [class$="_navList"] {
+     tab off; the thin scrollbar IS the affordance.
+
+     2026-10-21 (DSH 0.2.1-rc.2, measured on a real phone shell): the whole
+     block below had silently stopped matching. The settings dialog no longer
+     renders inside the app frame — it is a PORTAL on body
+     (body > [class$="_overlay"] > [class$="_panel"]), so a
+     [data-mobile-nav="frame"] [aria-modal="true"] … prefix can never match
+     it, and the panel depth the old :has(> :first-child > :last-child >
+     button) gate was written against is no longer the shape the sheet has
+     (now panel > nav > (navTitle, navList, header)). Symptom: four nav cells
+     fell back to the host's wrapping grid (measured 209x132 for the list
+     instead of one 40px row) and the "open config file" action came back
+     into the header. Keep the same phone gate from the ancestor side
+     (html:has([data-mobile-nav="frame"]) — the marker only exists outside
+     the desktop gate) and identify the dialog by the nav list it owns, not
+     by a guessed depth. Desktop untouched.
+
+     This rule is the only place that declares the row's wrap/overflow now:
+     layout.css.ts's navList rule has a higher specificity and used to force
+     "flex-wrap: wrap; overflow: visible", so the one-row intent below never
+     actually rendered (see the note in layout.css.ts).
+
+     Every selector below is gated on :has([class$="_navList"]) — the one
+     stable feature of the settings sheet. The ancestor marker alone is not
+     enough: once the dialog is a body portal, [aria-modal="true"] matches
+     EVERY dialog on the phone (session export, directory picker, plugin
+     sheets), which is how the first cut of this block ended up hiding the
+     top-right action button of all of them (review, 2026-10-22). */
+  html:has([data-mobile-nav="frame"]) [aria-modal="true"]:has([class$="_navList"]) [class$="_navList"] {
     display: flex !important;
     flex-wrap: nowrap !important;
+    /* The nav row is [navList][header(close)]: min-width:0 + flex-basis auto
+       lets the list shrink to the width left over by the ✕ and scroll inside
+       itself — without it the nowrap content widens the row and pushes the
+       close button off-screen. */
+    flex: 1 1 auto !important;
+    min-width: 0 !important;
     overflow-x: auto !important;
     overflow-y: hidden !important;
     gap: 6px !important;
-    width: 100% !important;
     scrollbar-width: thin !important;
     -webkit-overflow-scrolling: touch !important;
   }
   /* Hairline scrollbar for the tab row: the default WebKit scrollbar reads
      fat on a phone; 2px keeps the scroll affordance without the bulk. */
-  [data-mobile-nav="frame"] [aria-modal="true"] [class$="_navList"]::-webkit-scrollbar {
+  html:has([data-mobile-nav="frame"]) [aria-modal="true"]:has([class$="_navList"]) [class$="_navList"]::-webkit-scrollbar {
     height: 2px !important;
   }
-  [data-mobile-nav="frame"] [aria-modal="true"] [class$="_navList"]::-webkit-scrollbar-thumb {
+  html:has([data-mobile-nav="frame"]) [aria-modal="true"]:has([class$="_navList"]) [class$="_navList"]::-webkit-scrollbar-thumb {
     background: var(--dsw-alias-border-l2, rgba(0, 0, 0, .22)) !important;
     border-radius: 1px !important;
   }
-  [data-mobile-nav="frame"] [aria-modal="true"] [class$="_navList"]::-webkit-scrollbar-track {
+  html:has([data-mobile-nav="frame"]) [aria-modal="true"]:has([class$="_navList"]) [class$="_navList"]::-webkit-scrollbar-track {
     background: transparent !important;
   }
-  [data-mobile-nav="frame"] [aria-modal="true"] [class$="_navCell"] {
+  html:has([data-mobile-nav="frame"]) [aria-modal="true"]:has([class$="_navList"]) [class$="_navCell"] {
     flex: 0 0 auto !important;
     white-space: nowrap !important;
     padding: 6px 8px !important;
@@ -8369,7 +8566,7 @@ exports.COMPAT_CSS = `  /* ---------- dsh-web-ui family compatibility ----------
     font-size: 13px !important;
     justify-content: flex-start !important;
   }
-  [data-mobile-nav="frame"] [aria-modal="true"] [class$="_navCell"] svg {
+  html:has([data-mobile-nav="frame"]) [aria-modal="true"]:has([class$="_navList"]) [class$="_navCell"] svg {
     width: 14px !important;
     height: 14px !important;
     flex: none !important;
@@ -8377,11 +8574,11 @@ exports.COMPAT_CSS = `  /* ---------- dsh-web-ui family compatibility ----------
   /* Content toolbar: the "Open configuration file" button is hidden on
      mobile — it is rarely needed on a phone and steals ~180px from the
      tab row's scroll area (user feedback 2026-08-16). Only the close ✕
-     stays, flush right in the nav row. Desktop untouched (frame scoped). */
-  [data-mobile-nav="frame"] [aria-modal="true"] [class$="_header"] [class$="_actions"] {
+     stays, flush right in the nav row. Desktop untouched (phone gate). */
+  html:has([data-mobile-nav="frame"]) [aria-modal="true"]:has([class$="_navList"]) [class$="_header"] [class$="_actions"] {
     display: none !important;
   }
-  [data-mobile-nav="frame"] [aria-modal="true"] [class$="_header"] [class$="_actions"] [class$="_action"] {
+  html:has([data-mobile-nav="frame"]) [aria-modal="true"]:has([class$="_navList"]) [class$="_header"] [class$="_actions"] [class$="_action"] {
     font-size: 13px !important;
     padding: 6px 12px !important;
     min-height: 0 !important;
@@ -9275,7 +9472,17 @@ exports.HOME_CSS = `/* ---------- phone app shell (< 768px) ---------- */
   [data-mobile-nav="home"] {
     position: absolute;
     inset: 0;
-    z-index: 5;
+    /* rc.3 raise (real-device report 2026-10-25 "top strip leaking the
+       conversation through"): this shell layer mounts INSIDE the host's
+       PIRFFq_overlayLayer (z-index:20, new in rc.3 — the conversation
+       content itself moved under it too), so the old z:5 let host session
+       content (STRONG/CODE rows measured at viewport y=4) paint over the
+       shell's top bar on BOTH pages, reading as a faint fixed strip at the
+       window top. z:30 puts the whole shell above everything the host
+       stacks inside that layer; the shell's own transparent middle and
+       pointer-events passthrough keep the conversation visible and tappable
+       (verified live via console injection before landing). */
+    z-index: 30;
     display: flex;
     flex-direction: column;
     pointer-events: auto;
@@ -9320,6 +9527,34 @@ exports.HOME_CSS = `/* ---------- phone app shell (< 768px) ---------- */
       opacity .3s var(--ds-ease-in-out, ease-in-out),
       visibility 0s .3s;
   }
+  /* The host's SESSION header must not sit on top of this list page.
+     Real-device report (2026-10-22, DSH 0.2.0-rc.2, dsh-web-mobile 3.2.1,
+     360x792 phone): on the list page the top strip showed the LAST SESSION's
+     header — its title plus the session's tab row — and the workspace switcher
+     underneath was neither visible nor tappable, so "switch workspace" did
+     nothing at all. Measured with elementFromPoint(150,30) on the phone
+     viewport: span.wSkVaW_crumbCurrent, i.e. the host header's crumb, while
+     our own workspace button sat at [46,8,208,44] underneath it.
+
+     Why z-index is not the fix: this page is position:absolute; z-index:5
+     inside the shell overlay layer, and the host header carries its own
+     stacking context, so raising us above its z-index:30 changed nothing
+     (measured: the crumb still won the hit test). The session header has to
+     leave the hit tree while the list page is up — the list page draws its
+     own top bar (home-top, with the workspace switcher).
+
+     The gate is this page's own marker: data-view="session" means a session
+     is open, so the rule lapses exactly when the host header is wanted again
+     (verified: entering a session restores display:grid, the back button in
+     that header stays tappable, and going back hides it once more). Two
+     selectors on purpose — the class suffix survives CSS-module hash renames,
+     the structural one survives a rename of the class itself. */
+  [data-mobile-nav="frame"]:not([data-mobile-view="session"]) header[class*="_header"],
+  [data-mobile-nav="frame"]:not([data-mobile-view="session"]) header:has([class*="_titleRow"]),
+  body:has([data-mobile-nav="home"]:not([data-view="session"])) [data-mobile-nav="frame"] header[class*="_header"],
+  body:has([data-mobile-nav="home"]:not([data-view="session"])) [data-mobile-nav="frame"] header:has([class*="_titleRow"]) {
+    display: none !important;
+  }
   @media (prefers-reduced-motion: reduce) {
     [data-mobile-nav="home"],
     [data-mobile-nav="home"][data-view="session"] {
@@ -9756,6 +9991,13 @@ __modules["client/styles/header.css.js"] = function (require, module, exports) {
 //                               hidden below, our workbench button routes to
 //                               its controls instead)
 //     div.tabs[role="tablist"]  Chat/Trajectory, only when there is >1 view
+//                               (DSH <= 0.2.1-rc.2)
+//     div.tabs                  DSH 0.2.1-rc.3: the row lost its role and
+//       div.viewTabs[role="tablist"][data-conversation-tabs]
+//       div.viewsMoreAnchor     "More conversation views" (…) menu launcher,
+//                               present while conversation.session.header.
+//                               views.actions has registrations (the web app
+//                               ships dsh-client-ui-entry-customization)
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HEADER_CSS = void 0;
 exports.HEADER_CSS = `/* ---------- session header five-piece reflow (< 768px) ---------- */
@@ -9816,27 +10058,39 @@ exports.HEADER_CSS = `/* ---------- session header five-piece reflow (< 768px) -
        above. */
     z-index: 2;
     padding: 0 8px 28px !important;
+    border-bottom: none !important;
   }
   /* No header bottom line — fade instead (real-device round 2, 2026-08-17).
-     The official header draws its border as a \`::after\` 1px bar (the
-     \`border-bottom\` on the header itself is transparent, just a layout
-     reserve — dsh-client-ui-conversation lib/client.js ".wSkVaW_header{
-     border-bottom:1px solid #0000}.wSkVaW_header:after{...height:1px;
-     position:absolute;bottom:1px...}", verified live 2026-08-17), so the
-     bar is repurposed rather than hidden: restyled into a 20px strip
-     hanging just below the header that fades the messages in — the same
-     look the scroller's mask-image used to produce, without a mask on a
-     scroll container (iOS WebKit renders that as fog over the header, see
-     composer.css.ts "no divider above OR below the message list",
-     2026-08-23). color-mix instead of the transparent keyword: the host
-     writes its own seat gradient that way, and plain \`transparent\` is
-     rgba(0,0,0,0) — WebKit interpolates it through grey. */
-  [data-phase] header::after {
-    height: 20px !important;
+     The official header in rc.2 drew its border as a \`::after\` 1px bar; in
+     rc.3 (2026-10-25) the host replaced that pseudo-element with a plain 0.5px
+     border-bottom (cleared above) and added a blank 0px header in the hero
+     phase (\`_headerBlank\`). Declaring \`content: ''\` + \`position: absolute;
+     left: 0; right: 0\` explicitly on \`[data-phase="active"] header:not([class$="_headerBlank"])::after\`
+     keeps the 20px fade strip anchored right below the real session header on
+     both rc.2 and rc.3 without touching the scroll container:
+     - When the session header is display:none on the list page, ::after is
+       not generated at all (unlike _scrollBody::before, which stayed in flow
+       at y=0 whenever the header was hidden or blank and showed up at the top
+       of the window on iOS standalone PWA launch before data-view mutated).
+     - :not([class$="_headerBlank"]) excludes the 0-height blank header.
+     - color-mix instead of the transparent keyword: plain \`transparent\` is
+       rgba(0,0,0,0) — WebKit interpolates it through grey. */
+  [data-phase="active"] header:not([class$="_headerBlank"])::after {
+    content: '';
+    position: absolute;
+    left: 0;
+    right: 0;
     top: 100% !important;
     bottom: auto !important;
+    height: 20px !important;
+    pointer-events: none;
     background: linear-gradient(to bottom, var(--dsw-alias-bg-base), color-mix(in srgb, var(--dsw-alias-bg-base) 0%, transparent)) !important;
   }
+  [data-mobile-nav="frame"]:not([data-mobile-view="session"]) [data-phase] header::after,
+  body:has([data-mobile-nav="home"]:not([data-view="session"])) [data-phase] header::after {
+    content: none !important;
+    display: none !important;
+  }
   /* grid-row: 1 on every item is load-bearing, not decoration (S2.1 fix for
      the "标题被挤下去" report). The three items are placed with explicit
      grid-column but arrive in DOM order crumbs(2) → headerActions(1) →
@@ -10178,6 +10432,35 @@ exports.HEADER_CSS = `/* ---------- session header five-piece reflow (< 768px) -
   [data-phase] header [class$="_tabs"][role="tablist"] {
     display: none;
   }
+  /* DSH 0.2.1-rc.3 split the row: div._tabs (no role) now wraps the
+     tablist (div._viewTabs[role=tablist][data-conversation-tabs]) and the
+     new "More conversation views" launcher, so the rule above matches
+     nothing there and the official row — plus a stray (…) More button —
+     came back under our view-switch band. It cannot simply be display:none
+     either: while the More menu has registrations the header folds every
+     View past floor((row.clientWidth - 48) / 120) into More, and a
+     display:none row measures 0, which would leave only Chat as a
+     [role=tab] for readViewTabs() (MobileSessionHeader.tsx) to mirror.
+     So the row keeps a wide layout box that paints nothing: absolute (out
+     of the header's flow, no band), 2048px wide (room for 16 tabs before
+     anything folds), scale(0) so it adds no scrollable overflow (clientWidth
+     ignores transforms), visibility:hidden + pointer-events:none so it is
+     never seen or hit. Its tabs still take the synthetic .click() the view
+     switcher sends — the same reasoning as the display:none rule above. */
+  [data-phase] header [class$="_tabs"]:has(> [data-conversation-tabs]) {
+    position: absolute !important;
+    top: 0;
+    left: 0;
+    width: 2048px !important;
+    max-width: none !important;
+    height: 0 !important;
+    margin: 0 !important;
+    overflow: hidden !important;
+    transform: scale(0);
+    transform-origin: 0 0;
+    visibility: hidden !important;
+    pointer-events: none !important;
+  }
 
   /* View-switch row: "current view name + dots", replacing the (still
      present, still clickable) official tablist visually. It renders inside
@@ -15243,6 +15526,445 @@ const EXPORT_STYLE = {
     whiteSpace: 'nowrap',
 };
 };
+__modules["virtual-id.js"] = function (require, module, exports) {
+"use strict";
+/**
+ * Reversible virtual ids for sessions and workspaces the sub-client surfaces
+ * locally while their real records live on a relay server (T23b-1). The UI
+ * only ever sees `zr~<serverId>~<original id>`; the interceptor maps those
+ * back to the original ids before a call travels, and maps server-returned
+ * ids back to virtual form on the way out.
+ *
+ * The mapping is deliberately a PURE function of (serverId, id), not a
+ * session-table lookup: every shared session of one server gets the same
+ * virtual id whether or not this process ever opened it, so result rewriting
+ * needs no state. Parsing validates the fixed skeleton (`zr~` + the 8 hex
+ * chars `loadServerId` mints, relay-server.ts) and keeps the remainder
+ * VERBATIM — the original id may contain any characters, including `~`, so
+ * nothing after the second separator is interpreted.
+ *
+ * A local DSH id can never collide with the prefix: real session ids are
+ * `session-<uuid>` and workspace ids are bare uuids.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VIRTUAL_GROUP_NAME_MARK = exports.VIRTUAL_ID_PREFIX = void 0;
+exports.toVirtual = toVirtual;
+exports.fromVirtual = fromVirtual;
+exports.isVirtual = isVirtual;
+/** The fixed prefix every virtual id starts with. */
+exports.VIRTUAL_ID_PREFIX = 'zr~';
+/**
+ * The invisible WORD JOINER (U+2060) every virtual GROUP NAME starts with
+ * (T74). DSH 0.2.0 renders the model menu's provider groups with the
+ * primitives' MenuGroup, whose `aria-labelledby` carries only a useId — the
+ * group id is gone from the markup — so the browser half can no longer tell
+ * a virtual group from a local one by attribute. The merged catalog's group
+ * NAME (merge-streams.ts mergeModelCatalogs) is the one mark that survives
+ * in both 0.1.7 and 0.2.0, and effects/model-group-side.ts classifies each
+ * group container by which headings start with it. Zero-width: headings
+ * read exactly as before. Sidebar workspace TITLES deliberately do NOT
+ * carry it — those groups are told apart by their `zr~` row ids, not by
+ * text.
+ */
+exports.VIRTUAL_GROUP_NAME_MARK = '\u2060';
+/** The server id half: exactly the 8 lowercase hex chars relay-server.ts
+ * mints (`randomBytes(4).toString('hex')`). */
+const SERVER_ID_PATTERN = /^[0-9a-f]{8}$/;
+/** Build the virtual form of one server-side session or workspace id. */
+function toVirtual(serverId, id) {
+    return `${exports.VIRTUAL_ID_PREFIX}${serverId}~${id}`;
+}
+/**
+ * Parse one virtual id back into its halves, or `undefined` for anything
+ * that does not match the skeleton. Strict on the parts that carry meaning:
+ * the literal prefix, exactly 8 lowercase hex server id chars, and the
+ * separating `~` after them. The remainder is not validated — any string,
+ * including the empty one, is a legal original id.
+ */
+function fromVirtual(id) {
+    if (typeof id !== 'string' || !id.startsWith(exports.VIRTUAL_ID_PREFIX))
+        return undefined;
+    const rest = id.slice(exports.VIRTUAL_ID_PREFIX.length);
+    // The shortest legal remainder is `<8 hex>~` — 9 chars with the separator
+    // at index 8. Anything shorter cannot carry a server id.
+    if (rest.length < 9 || rest[8] !== '~')
+        return undefined;
+    const serverId = rest.slice(0, 8);
+    if (!SERVER_ID_PATTERN.test(serverId))
+        return undefined;
+    return { serverId, id: rest.slice(9) };
+}
+/** True when {@link fromVirtual} would parse this value. */
+function isVirtual(id) {
+    return fromVirtual(id) !== undefined;
+}
+};
+__modules["client-data/remote-drop.js"] = function (require, module, exports) {
+"use strict";
+/**
+ * Remote-session drag-and-drop decision core (RD-1): the DOM-free, readable
+ * half of the document-level drop guard (src/client/effects/remote-drop.ts).
+ *
+ * Why this exists: the desktop app's attachment pipeline has a same-machine
+ * zero-copy fast path — the Electron preload exposes `__DSH_HOST_PATHS__`,
+ * and the host's `addFiles` turns a File that still carries a real disk path
+ * into an `@/absolute/path` mention chip WITHOUT uploading any bytes. In a
+ * remote session (`zr~<serverId>~<id>`) that path names a file on the
+ * SUB-CLIENT's machine; the server-side session can never read it, so the
+ * mention lands broken. The fix re-shapes the drop before the host sees it:
+ * strip the internal path by re-wrapping each File (`new File([f], ...)`) and
+ * redispatch a synthetic, untrusted DragEvent carrying them in a fresh
+ * DataTransfer. The host's own drop handler then treats it as an ordinary
+ * browser drag — the byte-upload branch — which the T51 fetch-route
+ * interception already relays to the server for staging.
+ *
+ * This module only DECIDES; it never touches the DOM:
+ * - `isRemoteSessionId` — the current-session gate, judged by the same
+ *   `zr~` skeleton (virtual-id.ts) every other remote gate in this plugin
+ *   keys on, so the two ends cannot drift;
+ * - `decideRemoteDrop` — the three trigger gates plus the directory rule,
+ *   as a pure function over injectable data so the whole truth table is
+ *   assertable in Node (scripts/check-remote-drop.mjs);
+ * - `rewrapFiles` — the File re-wrap itself (Node >= 20 has File).
+ *
+ * Misjudgement direction is safe by construction: every gate failing open
+ * lands on `passthrough` = today's behavior. The only wrong action a stale
+ * current-session signal can produce is re-shaping a LOCAL session's drop
+ * into an upload — bytes travel that did not have to, but nothing is lost.
+ * The reverse (a remote drop reaching the host untouched) is what loses the
+ * attachment, which is why all three gates must affirmatively pass.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isRemoteSessionId = isRemoteSessionId;
+exports.decideRemoteDrop = decideRemoteDrop;
+exports.rewrapFiles = rewrapFiles;
+const virtual_id_ts_1 = require("./virtual-id.js");
+/** True when the id is one of this plugin's virtual (relay) session ids —
+ * the `zr~<serverId>~<id>` form. `undefined` (no readable current-session
+ * signal) is deliberately NOT remote: the conservative gate reads a missing
+ * signal as a local session and never intervenes. */
+function isRemoteSessionId(id) {
+    return typeof id === 'string' && (0, virtual_id_ts_1.isVirtual)(id);
+}
+/**
+ * The three trigger gates, then the directory rule. Every gate must
+ * affirmatively pass before anything is intervened on:
+ * 1. `trusted` — synthetic (our own) events pass straight through, which is
+ *    what makes the redispatch loop-free;
+ * 2. `hasHostPaths` — without the Electron bridge the host is already on
+ *    the byte-upload branch and there is nothing to fix;
+ * 3. remote session — a missing/failed current-session read counts as local
+ *    (conservative: passthrough keeps today's behavior);
+ * 4. no entry API — redispatch (no directory knowledge, same default as the
+ *    host);
+ * 5. any directory — `block-directories`, which takes precedence over
+ *    redispatch: a folder cannot be fixed by single-file upload, so the
+ *    whole drop is stopped with a toast rather than silently reduced;
+ * 6. no file items at all — passthrough (the host's own `Files`-in-types
+ *    gate would ignore the drop; there is nothing to re-shape);
+ * 7. otherwise — `redispatch`.
+ */
+function decideRemoteDrop(input) {
+    if (!input.trusted)
+        return { action: 'passthrough', reason: 'untrusted-event' };
+    if (!input.hasHostPaths)
+        return { action: 'passthrough', reason: 'no-host-paths' };
+    if (!isRemoteSessionId(input.currentSessionId))
+        return { action: 'passthrough', reason: 'not-remote-session' };
+    if (input.items === undefined)
+        return { action: 'redispatch', reason: 'no-entry-api' };
+    if (input.items.some((item) => item.isDirectory))
+        return { action: 'block-directories', reason: 'contains-directory' };
+    if (!input.items.some((item) => item.kind === 'file'))
+        return { action: 'passthrough', reason: 'no-files' };
+    return { action: 'redispatch', reason: 'remote-files' };
+}
+/**
+ * Re-wrap files so they stop carrying their disk paths. A File the browser
+ * constructed from an OS drop keeps a hidden reference the Electron
+ * `getPathForFile` can read; `new File([f], ...)` builds a JS-constructed
+ * File with no such backing — `getPathForFile` returns "" for it, which
+ * sends the host's `addFiles` down the byte-upload branch. name / type /
+ * lastModified are preserved so the staged upload keeps its filename.
+ */
+function rewrapFiles(files) {
+    return Array.from(files, (file) => new File([file], file.name, { type: file.type, lastModified: file.lastModified }));
+}
+};
+__modules["client-data/current-session.js"] = function (require, module, exports) {
+"use strict";
+/**
+ * T62: the browser half's current-session parsing, as pure functions — the
+ * readable core of the reporter (src/client/current-session-report.ts) and
+ * the one place its rules are unit-tested without a DOM.
+ *
+ * The host DSH persists its selection (the session its UI has open) to
+ * localStorage under `dsh.sessions.current` as a JSON object carrying
+ * `sessionId` (dsh-client-ui-workspace's snapshot store, `replaceMain` /
+ * `clearMain`). The reporter re-reads that key and POSTs it to the backend
+ * whenever it CHANGES; the backend's intercept layer judges close frames
+ * against it — a closed session the user has open keeps its page and its
+ * 「远程已关闭」 banner, anything else hides. The vocabulary mirrors the
+ * intercept side's `CurrentSessionRead`:
+ * - `unavailable`: the key is absent or the value unreadable — NEVER
+ *   report; the backend keeps its conservative tombstone behavior;
+ * - `none`: readable, no session open — report `{sessionId: null}`;
+ * - `open`: a session id — report `{sessionId}`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CURRENT_SESSION_STORAGE_KEY = void 0;
+exports.parseCurrentSessionStorage = parseCurrentSessionStorage;
+exports.currentSessionReportEquals = currentSessionReportEquals;
+/** Mirror of src/intercept.ts's key (the client build cannot import the
+ * host file). The host's selection store persists under this exact name. */
+exports.CURRENT_SESSION_STORAGE_KEY = 'dsh.sessions.current';
+/** Parse one raw localStorage read. `null` / `undefined` (the key is absent
+ * — the host store only starts persisting with its first write) and any
+ * value that does not parse into an object with a usable shape are
+ * `unavailable`: no signal, never a guess. An object WITHOUT a `sessionId`
+ * (the host's `clearMain` writes `{}`) is a real, reportable "nothing is
+ * open". */
+function parseCurrentSessionStorage(raw) {
+    if (raw === null || raw === undefined)
+        return { kind: 'unavailable' };
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return { kind: 'unavailable' };
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+        return { kind: 'unavailable' };
+    const sessionId = parsed.sessionId;
+    if (typeof sessionId === 'string' && sessionId !== '')
+        return { kind: 'open', sessionId };
+    if (sessionId === undefined || sessionId === null || sessionId === '')
+        return { kind: 'none' };
+    return { kind: 'unavailable' };
+}
+/** Whether one report differs from another — the reporter posts only on a
+ * change, so this compares content, never object identity: kind first, then
+ * the session id. */
+function currentSessionReportEquals(a, b) {
+    if (a.kind !== b.kind)
+        return false;
+    if (a.kind === 'open' && b.kind === 'open')
+        return a.sessionId === b.sessionId;
+    return true;
+}
+};
+__modules["client/effects/remote-drop.js"] = function (require, module, exports) {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.remoteDropDiagnostics = remoteDropDiagnostics;
+exports.mountRemoteDropGuard = mountRemoteDropGuard;
+const remote_drop_ts_1 = require("./client-data/remote-drop.js");
+const current_session_ts_1 = require("./client-data/current-session.js");
+const locales_ts_1 = require("./client/locales.js");
+/** Module-level singleton: the bundle has one document, so one guard state.
+ * Re-mounting (a plugin row reload) resets it. */
+let diagnostics = freshDiagnostics();
+function freshDiagnostics() {
+    return { installed: false, notInstalledReason: undefined, intercepted: 0, redispatched: 0, blockedDirectories: 0, passthrough: 0, rewrapFailed: 0 };
+}
+/** A snapshot for the diagnostics carriers (settings page). Copying keeps
+ * callers from holding a live reference into a later mount's state. */
+function remoteDropDiagnostics() {
+    return { ...diagnostics };
+}
+/** The contextBridge global's existence only — never touched otherwise
+ * (it is deep-frozen and must stay unwrapped). */
+function hostPathsOf() {
+    return globalThis.__DSH_HOST_PATHS__;
+}
+/** The current-session signal, read AT EVENT TIME (the selection changes
+ * while the page is open; a mount-time snapshot would go stale). Any
+ * storage failure reads as "no signal" = local session = passthrough. */
+function readCurrentSessionId() {
+    let raw;
+    try {
+        const storage = globalThis.localStorage;
+        raw = storage === null || storage === undefined ? null : storage.getItem(current_session_ts_1.CURRENT_SESSION_STORAGE_KEY);
+    }
+    catch {
+        return undefined;
+    }
+    const report = (0, current_session_ts_1.parseCurrentSessionStorage)(raw);
+    return report.kind === 'open' ? report.sessionId : undefined;
+}
+/** Reduce the drop's items to RD-1's descriptors. `undefined` when the
+ * entry API is missing entirely — directories cannot be detected, and the
+ * host's own semantics treat that as "no directories". Directory entries
+ * surface as file-kind items (their bytes are unreadable), which is what
+ * the block-directories branch keys on. */
+function collectItems(transfer) {
+    const out = [];
+    for (const item of Array.from(transfer.items)) {
+        if (item.kind !== 'file')
+            continue;
+        if (typeof item.webkitGetAsEntry !== 'function')
+            return undefined;
+        const entry = item.webkitGetAsEntry();
+        out.push({ kind: 'file', isDirectory: entry?.isDirectory === true });
+    }
+    return out;
+}
+/** The toast copy in the page's language (the plugin's namespace carries
+ * both dictionaries; the framework `t` seat is not reachable from a
+ * non-React effect — same pick as the bridge note). */
+function toastText(language) {
+    const key = 'remoteDropFolderBlocked';
+    return typeof language === 'string' && language.startsWith('zh') ? locales_ts_1.zh[key] : locales_ts_1.en[key];
+}
+/** Take the host's「拖拽文件到此处添加」drop overlay back down after this
+ * guard has stopped a drop outright. The overlay's own state machine
+ * (`dsh-client-ui-attachment` drop-events.ts) closes on the reset() inside
+ * its DOCUMENT-level bubble `drop` handler — which this guard's capture
+ * stopPropagation deliberately prevents from running — or on `dragend` at
+ * `window` level, a channel it reads without isTrust-checking. An OS-file
+ * drag never delivers a native dragend (the drag source is the OS, not a
+ * page element), so a branch that eats the drop must fire a synthetic one
+ * itself or the overlay stays up forever. Only the folder-block branch
+ * calls this: the redispatch branch's synthetic drop reaches the host's
+ * bubble handler, whose own reset brings the overlay down. */
+function dismissHostDropOverlay() {
+    try {
+        window.dispatchEvent(new Event('dragend'));
+    }
+    catch {
+        // No window / Event in this host: the overlay is the only casualty.
+    }
+}
+function mountRemoteDropGuard(ctx) {
+    ctx.effect(() => {
+        // Fresh state per mount: a plugin reload re-runs apply() and must not
+        // inherit the previous mount's counters or installed flag.
+        diagnostics = freshDiagnostics();
+        // Capability self-check — anything missing means "not installed",
+        // back to today's behavior. Counted, not thrown: the diagnostics
+        // block explains why the guard is absent.
+        if (typeof DragEvent !== 'function') {
+            diagnostics.notInstalledReason = 'drag-event-unavailable';
+            return () => { };
+        }
+        try {
+            new DataTransfer();
+        }
+        catch {
+            diagnostics.notInstalledReason = 'datatransfer-unavailable';
+            return () => { };
+        }
+        if (hostPathsOf() === undefined) {
+            // Phone / plain-browser hosts: the bridge is absent and the host is
+            // already on the byte-upload branch — nothing to fix here.
+            diagnostics.notInstalledReason = 'host-paths-unavailable';
+            return () => { };
+        }
+        diagnostics.installed = true;
+        // --- toast (folder-blocked notice), inline styles per the CSS split ---
+        let toast;
+        let toastTimer;
+        const removeToast = () => {
+            if (toastTimer !== undefined)
+                clearTimeout(toastTimer);
+            toastTimer = undefined;
+            toast?.remove();
+            toast = undefined;
+        };
+        const showToast = () => {
+            // Restart the window on rapid re-drops rather than stacking toasts.
+            removeToast();
+            const el = document.createElement('div');
+            el.dataset.zenRemote = 'remote-drop-toast';
+            el.textContent = toastText(navigator.language);
+            el.style.cssText = [
+                'position:fixed', 'left:50%', 'transform:translateX(-50%)',
+                // Safe-area habit shared with the overlay effects: keep clear of the
+                // home indicator, degrade to a plain 32px offset where env() is 0.
+                'bottom:calc(env(safe-area-inset-bottom, 0px) + 32px)',
+                'z-index:2147483000',
+                'background:rgba(0,0,0,.82)', 'color:#fff',
+                'font:13px/1.5 -apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif',
+                'padding:10px 16px', 'border-radius:10px', 'max-width:90vw', 'text-align:center',
+                // Purely informational: never intercepts the taps under it.
+                'pointer-events:none',
+            ].join(';');
+            document.body.appendChild(el);
+            toast = el;
+            toastTimer = setTimeout(removeToast, 3000);
+        };
+        const onDrop = (event) => {
+            // Self-reentry guard first: the redispatched event is untrusted, and
+            // this capture listener would otherwise see it again.
+            if (!event.isTrusted)
+                return;
+            const transfer = event.dataTransfer;
+            if (transfer === null || !transfer.types.includes('Files'))
+                return;
+            // Not a file drag: the host's own Files-in-types gate ignores the
+            // drop anyway — not a candidate, not counted.
+            const decision = (0, remote_drop_ts_1.decideRemoteDrop)({
+                hasHostPaths: hostPathsOf() !== undefined,
+                currentSessionId: readCurrentSessionId(),
+                trusted: event.isTrusted,
+                items: collectItems(transfer),
+            });
+            if (decision.action === 'passthrough') {
+                diagnostics.passthrough += 1;
+                return;
+            }
+            if (decision.action === 'block-directories') {
+                // A folder cannot be fixed by single-file upload: stop the whole
+                // drop, say so, nothing is dispatched.
+                event.preventDefault();
+                event.stopPropagation();
+                dismissHostDropOverlay();
+                diagnostics.intercepted += 1;
+                diagnostics.blockedDirectories += 1;
+                showToast();
+                return;
+            }
+            // redispatch: build the ENTIRE payload before stopping the original
+            // event — any failure below releases the original untouched, so the
+            // host still receives today's (path-chip) behavior instead of
+            // nothing at all.
+            try {
+                const rewrapped = (0, remote_drop_ts_1.rewrapFiles)(Array.from(transfer.files));
+                if (rewrapped.length === 0) {
+                    diagnostics.passthrough += 1;
+                    return;
+                }
+                const payload = new DataTransfer();
+                for (const file of rewrapped)
+                    payload.items.add(file);
+                event.preventDefault();
+                event.stopPropagation();
+                diagnostics.intercepted += 1;
+                // The host's drop handler sits on document, bubble phase (F4): a
+                // bubbling synthetic drop on document reaches it. Its own handler
+                // does the preventDefault / mask reset / addFiles work; our capture
+                // listener skips this event via the isTrusted gate above.
+                document.dispatchEvent(new DragEvent('drop', { bubbles: true, cancelable: true, dataTransfer: payload }));
+                diagnostics.redispatched += 1;
+            }
+            catch {
+                // A re-wrap or a single items.add threw (0-byte / exotic File):
+                // count it and let the original event flow — 宁坏勿丢.
+                diagnostics.rewrapFailed += 1;
+            }
+        };
+        document.addEventListener('drop', onDrop, true);
+        return () => {
+            document.removeEventListener('drop', onDrop, true);
+            removeToast();
+            // Keep the counters readable after a dispose (the settings page may
+            // still be open mid-reload); `installed` is the armed flag only.
+            diagnostics.installed = false;
+        };
+    }, 'dsh-zen-remote: remote drop guard');
+}
+};
 __modules["client/settings/SettingsSection.js"] = function (require, module, exports) {
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -15285,6 +16007,7 @@ const react_1 = require("react");
 const dsh_client_ui_primitives_1 = require("@deepseek-ai/dsh-client-ui-primitives");
 const settings_form_ts_1 = require("./client-data/settings-form.js");
 const plugin_bridge_ts_1 = require("./client-data/plugin-bridge.js");
+const remote_drop_ts_1 = require("./client/effects/remote-drop.js");
 const shares_ts_1 = require("./client-data/shares.js");
 /** Device roles the pairing picker offers, in display order. */
 const PAIR_ROLES = ['web', 'desktop-client'];
@@ -15476,6 +16199,11 @@ function SettingsSectionPage({ config, shares, t }) {
     // The client group's rendered view, hoisted for the countdown ticker and
     // the retry-follow refresh below (T43).
     const clientView = clientLoad.state === 'ready' || clientLoad.state === 'stale' ? clientLoad.view : undefined;
+    // RD-3: the remote drop guard's browser-side counters, read at render
+    // time — no snapshot state of its own: the initial mount, the 15s
+    // connected-status poll and the countdown ticker all re-render this page,
+    // and each render takes the values as they are right then.
+    const dropDiag = (0, remote_drop_ts_1.remoteDropDiagnostics)();
     const clientRetryAt = clientView?.nextRetryAt;
     const clientCountingDown = clientRetryAt !== undefined;
     // Offline with a pending retry: refresh the status shortly after the
@@ -15936,9 +16664,31 @@ function SettingsSectionPage({ config, shares, t }) {
                                 // hyphens stripped) on every keystroke, and only the
                                 // NORMALIZED length gates the pair button — a code pasted with
                                 // separators must survive pasting intact.
-                                value: pairCode, onChange: (e) => { setPairCode((0, settings_form_ts_1.normalizePairingCode)(e.currentTarget.value)); } }), (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: t('settings.client.pairingCodeHint') })] }), (0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 12 }, children: [(0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: !claimAllowed, onClick: () => { void runClaim(); }, children: claimBusy ? t('settings.client.pairing') : t('settings.client.pair') }), form.serverName.invalid && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.fixDeviceName') }), claimFail !== null && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: pairFailText(claimFail, t) }), claimWriteFailed && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.failWrite') })] }), (0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.client.statusTitle') }), (0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 4 }, children: [(0, jsx_runtime_1.jsx)("p", { className: "zr-settings-status-line", style: { flex: 1 }, "data-down": clientView !== undefined && (clientView.state === 'unreachable' || clientView.state === 'unexpected' || clientView.state === 'revoked' || clientView.state === 'invalid-url' || clientView.state === 'incompatible') ? 'true' : undefined, children: clientView === undefined ? '' : clientStatusText(clientView, now, t) }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: clientView === undefined || clientView.nextRetryAt === undefined || reconnectBusy, onClick: () => { void runReconnect(); }, children: reconnectBusy ? t('settings.client.reconnectBusy') : t('settings.client.reconnect') }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: clientLoad.state === 'loading', onClick: loadClientStatus, children: clientLoad.state === 'loading' ? t('settings.client.statusRefreshing') : t('settings.client.statusRefresh') })] }), form.deviceToken.configured && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 12 }, children: [(0, jsx_runtime_1.jsx)("span", { className: "zr-settings-badge", children: t('settings.client.tokenSet') }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "ghost", size: "sm", disabled: !form.available || !form.writable || unpairBusy, onClick: () => { void runUnpair(); }, children: unpairBusy ? t('settings.client.unpairBusy') : t('settings.client.unpair') })] })), unpairDone && (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", style: { paddingBottom: 12 }, children: t('settings.client.unpairDone') }), clientView !== undefined && (clientView.lastError !== '' || clientView.intercept !== undefined || clientView.compat !== undefined || (clientView.pluginBridge?.length ?? 0) > 0 || clientView.pluginRouteIntercept !== undefined) && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.client.diagTitle') }), clientView.lastError !== '' && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": clientView.state === 'unreachable' ? 'true' : undefined, children: t('settings.client.diagLastError', { code: clientView.lastError }) })), clientView.intercept !== undefined && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: clientView.intercept.installed
+                                value: pairCode, onChange: (e) => { setPairCode((0, settings_form_ts_1.normalizePairingCode)(e.currentTarget.value)); } }), (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: t('settings.client.pairingCodeHint') })] }), (0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 12 }, children: [(0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: !claimAllowed, onClick: () => { void runClaim(); }, children: claimBusy ? t('settings.client.pairing') : t('settings.client.pair') }), form.serverName.invalid && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.fixDeviceName') }), claimFail !== null && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: pairFailText(claimFail, t) }), claimWriteFailed && (0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.failWrite') })] }), (0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.client.statusTitle') }), (0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 4 }, children: [(0, jsx_runtime_1.jsx)("p", { className: "zr-settings-status-line", style: { flex: 1 }, "data-down": clientView !== undefined && (clientView.state === 'unreachable' || clientView.state === 'unexpected' || clientView.state === 'revoked' || clientView.state === 'invalid-url' || clientView.state === 'incompatible') ? 'true' : undefined, children: clientView === undefined ? '' : clientStatusText(clientView, now, t) }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: clientView === undefined || clientView.nextRetryAt === undefined || reconnectBusy, onClick: () => { void runReconnect(); }, children: reconnectBusy ? t('settings.client.reconnectBusy') : t('settings.client.reconnect') }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: clientLoad.state === 'loading', onClick: loadClientStatus, children: clientLoad.state === 'loading' ? t('settings.client.statusRefreshing') : t('settings.client.statusRefresh') })] }), form.deviceToken.configured && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-row", style: { paddingBottom: 12 }, children: [(0, jsx_runtime_1.jsx)("span", { className: "zr-settings-badge", children: t('settings.client.tokenSet') }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "ghost", size: "sm", disabled: !form.available || !form.writable || unpairBusy, onClick: () => { void runUnpair(); }, children: unpairBusy ? t('settings.client.unpairBusy') : t('settings.client.unpair') })] })), unpairDone && (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", style: { paddingBottom: 12 }, children: t('settings.client.unpairDone') }), clientView !== undefined && (clientView.lastError !== '' || clientView.intercept !== undefined || clientView.compat !== undefined || (clientView.pluginBridge?.length ?? 0) > 0 || clientView.pluginRouteIntercept !== undefined || dropDiag.installed || dropDiag.notInstalledReason !== undefined) && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)("h3", { className: "zr-settings-card-title", children: t('settings.client.diagTitle') }), clientView.lastError !== '' && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": clientView.state === 'unreachable' ? 'true' : undefined, children: t('settings.client.diagLastError', { code: clientView.lastError }) })), clientView.intercept !== undefined && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: clientView.intercept.installed
                                             ? t('settings.client.diagInterceptInstalled')
-                                            : t('settings.client.diagInterceptMissing') }), clientView.intercept.reasons.length > 0 && ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", "data-invalid": "true", children: [t('settings.client.diagInterceptDisabled'), clientView.intercept.reasons.map((reason, index) => ((0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", children: reason }, index)))] })), clientView.intercept.recentFailures.length > 0 && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagRecentFailures') }) }), clientView.intercept.recentFailures.map((failure, index) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [new Date(failure.time).toLocaleString(), " \u00B7 ", failure.method !== '' ? failure.method : '—', " \u00B7 ", failure.code] }, index)))] }))] })), clientView.compat !== undefined && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [clientView.compat.mismatchedGroups.length > 0 && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.diagCompatGroups', { groups: clientView.compat.mismatchedGroups.join(', ') }) })), clientView.compat.recentCalls.length > 0 && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagCompatCalls') }) }), clientView.compat.recentCalls.map((failure, index) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [new Date(failure.time).toLocaleString(), " \u00B7 ", failure.method !== '' ? failure.method : '—', " \u00B7 ", failure.code] }, index)))] }))] })), (clientView.pluginBridge?.length ?? 0) > 0 && clientView.pluginBridge !== undefined && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.bridge.title') }) }), clientView.pluginBridge.map((row) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [row.plugin, " \u00B7 ", row.localVersion !== '' ? `v${row.localVersion}` : '—', " \u00B7", ' ', row.stateKey === 'settings.bridge.stateVersionMismatch'
+                                            : t('settings.client.diagInterceptMissing') }), clientView.intercept.reasons.length > 0 && ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", "data-invalid": "true", children: [t('settings.client.diagInterceptDisabled'), clientView.intercept.reasons.map((reason, index) => ((0, jsx_runtime_1.jsx)("span", { className: "zr-settings-hint", children: reason }, index)))] })), clientView.intercept.recentFailures.length > 0 && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagRecentFailures') }) }), clientView.intercept.recentFailures.map((failure, index) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [new Date(failure.time).toLocaleString(), " \u00B7 ", failure.method !== '' ? failure.method : '—', " \u00B7 ", failure.code] }, index)))] }))] })), (dropDiag.installed || dropDiag.notInstalledReason !== undefined) && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagRemoteDrop') }) }), (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: dropDiag.installed
+                                            ? t('settings.client.diagRemoteDropOk', {
+                                                intercepted: dropDiag.intercepted,
+                                                redispatched: dropDiag.redispatched,
+                                                blocked: dropDiag.blockedDirectories,
+                                                passthrough: dropDiag.passthrough,
+                                                failed: dropDiag.rewrapFailed,
+                                            })
+                                            : t('settings.client.diagRemoteDropOff', { reason: dropDiag.notInstalledReason ?? '—' }) })] })), clientView?.uploadProbe !== undefined && (() => {
+                                const probe = clientView.uploadProbe;
+                                const seen = probe.uploadInjectSeen === true;
+                                const refused = seen && probe.fetchRoute?.shape?.reasons instanceof Array && probe.fetchRoute.shape.reasons.length > 0;
+                                const wrapped = probe.fetchRoute?.uploadWrapped === true;
+                                const text = wrapped
+                                    ? t('settings.client.diagUploadRedirectOk')
+                                    : refused
+                                        ? t('settings.client.diagUploadRedirectRefused', { reason: (probe.fetchRoute?.shape?.reasons).join('; ') })
+                                        : t('settings.client.diagUploadRedirectPending', {
+                                            connection: typeof probe.connectionService === 'string' ? probe.connectionService : '—',
+                                            fileUploads: typeof probe.fileUploadsService === 'string' ? probe.fileUploadsService : '—',
+                                        });
+                                return ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagUploadRedirect') }) }), (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: text })] }));
+                            })(), clientView.compat !== undefined && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [clientView.compat.mismatchedGroups.length > 0 && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.diagCompatGroups', { groups: clientView.compat.mismatchedGroups.join(', ') }) })), clientView.compat.recentCalls.length > 0 && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagCompatCalls') }) }), clientView.compat.recentCalls.map((failure, index) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [new Date(failure.time).toLocaleString(), " \u00B7 ", failure.method !== '' ? failure.method : '—', " \u00B7 ", failure.code] }, index)))] }))] })), (clientView.pluginBridge?.length ?? 0) > 0 && clientView.pluginBridge !== undefined && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.bridge.title') }) }), clientView.pluginBridge.map((row) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [row.plugin, " \u00B7 ", row.localVersion !== '' ? `v${row.localVersion}` : '—', " \u00B7", ' ', row.stateKey === 'settings.bridge.stateVersionMismatch'
                                                 ? t(row.stateKey, { version: row.serverVersion ?? '?' })
                                                 : t(row.stateKey)] }, row.plugin)))] })), clientView.pluginRouteIntercept !== undefined && !clientView.pluginRouteIntercept.installed && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.bridge.interceptOff', { reason: clientView.pluginRouteIntercept.reasons.join('; ') || '—' }) }))] }))] }))] }));
 }
@@ -16652,79 +17402,6 @@ function registerRemoteShareUi(ctx, headerIcon, menuItem) {
     });
 }
 };
-__modules["virtual-id.js"] = function (require, module, exports) {
-"use strict";
-/**
- * Reversible virtual ids for sessions and workspaces the sub-client surfaces
- * locally while their real records live on a relay server (T23b-1). The UI
- * only ever sees `zr~<serverId>~<original id>`; the interceptor maps those
- * back to the original ids before a call travels, and maps server-returned
- * ids back to virtual form on the way out.
- *
- * The mapping is deliberately a PURE function of (serverId, id), not a
- * session-table lookup: every shared session of one server gets the same
- * virtual id whether or not this process ever opened it, so result rewriting
- * needs no state. Parsing validates the fixed skeleton (`zr~` + the 8 hex
- * chars `loadServerId` mints, relay-server.ts) and keeps the remainder
- * VERBATIM — the original id may contain any characters, including `~`, so
- * nothing after the second separator is interpreted.
- *
- * A local DSH id can never collide with the prefix: real session ids are
- * `session-<uuid>` and workspace ids are bare uuids.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.VIRTUAL_GROUP_NAME_MARK = exports.VIRTUAL_ID_PREFIX = void 0;
-exports.toVirtual = toVirtual;
-exports.fromVirtual = fromVirtual;
-exports.isVirtual = isVirtual;
-/** The fixed prefix every virtual id starts with. */
-exports.VIRTUAL_ID_PREFIX = 'zr~';
-/**
- * The invisible WORD JOINER (U+2060) every virtual GROUP NAME starts with
- * (T74). DSH 0.2.0 renders the model menu's provider groups with the
- * primitives' MenuGroup, whose `aria-labelledby` carries only a useId — the
- * group id is gone from the markup — so the browser half can no longer tell
- * a virtual group from a local one by attribute. The merged catalog's group
- * NAME (merge-streams.ts mergeModelCatalogs) is the one mark that survives
- * in both 0.1.7 and 0.2.0, and effects/model-group-side.ts classifies each
- * group container by which headings start with it. Zero-width: headings
- * read exactly as before. Sidebar workspace TITLES deliberately do NOT
- * carry it — those groups are told apart by their `zr~` row ids, not by
- * text.
- */
-exports.VIRTUAL_GROUP_NAME_MARK = '\u2060';
-/** The server id half: exactly the 8 lowercase hex chars relay-server.ts
- * mints (`randomBytes(4).toString('hex')`). */
-const SERVER_ID_PATTERN = /^[0-9a-f]{8}$/;
-/** Build the virtual form of one server-side session or workspace id. */
-function toVirtual(serverId, id) {
-    return `${exports.VIRTUAL_ID_PREFIX}${serverId}~${id}`;
-}
-/**
- * Parse one virtual id back into its halves, or `undefined` for anything
- * that does not match the skeleton. Strict on the parts that carry meaning:
- * the literal prefix, exactly 8 lowercase hex server id chars, and the
- * separating `~` after them. The remainder is not validated — any string,
- * including the empty one, is a legal original id.
- */
-function fromVirtual(id) {
-    if (typeof id !== 'string' || !id.startsWith(exports.VIRTUAL_ID_PREFIX))
-        return undefined;
-    const rest = id.slice(exports.VIRTUAL_ID_PREFIX.length);
-    // The shortest legal remainder is `<8 hex>~` — 9 chars with the separator
-    // at index 8. Anything shorter cannot carry a server id.
-    if (rest.length < 9 || rest[8] !== '~')
-        return undefined;
-    const serverId = rest.slice(0, 8);
-    if (!SERVER_ID_PATTERN.test(serverId))
-        return undefined;
-    return { serverId, id: rest.slice(9) };
-}
-/** True when {@link fromVirtual} would parse this value. */
-function isVirtual(id) {
-    return fromVirtual(id) !== undefined;
-}
-};
 __modules["client-data/remote-status.js"] = function (require, module, exports) {
 "use strict";
 /**
@@ -17290,69 +17967,6 @@ function registerRemoteStatusUi(ctx, icon, banner) {
     }, banner));
 }
 };
-__modules["client-data/current-session.js"] = function (require, module, exports) {
-"use strict";
-/**
- * T62: the browser half's current-session parsing, as pure functions — the
- * readable core of the reporter (src/client/current-session-report.ts) and
- * the one place its rules are unit-tested without a DOM.
- *
- * The host DSH persists its selection (the session its UI has open) to
- * localStorage under `dsh.sessions.current` as a JSON object carrying
- * `sessionId` (dsh-client-ui-workspace's snapshot store, `replaceMain` /
- * `clearMain`). The reporter re-reads that key and POSTs it to the backend
- * whenever it CHANGES; the backend's intercept layer judges close frames
- * against it — a closed session the user has open keeps its page and its
- * 「远程已关闭」 banner, anything else hides. The vocabulary mirrors the
- * intercept side's `CurrentSessionRead`:
- * - `unavailable`: the key is absent or the value unreadable — NEVER
- *   report; the backend keeps its conservative tombstone behavior;
- * - `none`: readable, no session open — report `{sessionId: null}`;
- * - `open`: a session id — report `{sessionId}`.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CURRENT_SESSION_STORAGE_KEY = void 0;
-exports.parseCurrentSessionStorage = parseCurrentSessionStorage;
-exports.currentSessionReportEquals = currentSessionReportEquals;
-/** Mirror of src/intercept.ts's key (the client build cannot import the
- * host file). The host's selection store persists under this exact name. */
-exports.CURRENT_SESSION_STORAGE_KEY = 'dsh.sessions.current';
-/** Parse one raw localStorage read. `null` / `undefined` (the key is absent
- * — the host store only starts persisting with its first write) and any
- * value that does not parse into an object with a usable shape are
- * `unavailable`: no signal, never a guess. An object WITHOUT a `sessionId`
- * (the host's `clearMain` writes `{}`) is a real, reportable "nothing is
- * open". */
-function parseCurrentSessionStorage(raw) {
-    if (raw === null || raw === undefined)
-        return { kind: 'unavailable' };
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return { kind: 'unavailable' };
-    }
-    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
-        return { kind: 'unavailable' };
-    const sessionId = parsed.sessionId;
-    if (typeof sessionId === 'string' && sessionId !== '')
-        return { kind: 'open', sessionId };
-    if (sessionId === undefined || sessionId === null || sessionId === '')
-        return { kind: 'none' };
-    return { kind: 'unavailable' };
-}
-/** Whether one report differs from another — the reporter posts only on a
- * change, so this compares content, never object identity: kind first, then
- * the session id. */
-function currentSessionReportEquals(a, b) {
-    if (a.kind !== b.kind)
-        return false;
-    if (a.kind === 'open' && b.kind === 'open')
-        return a.sessionId === b.sessionId;
-    return true;
-}
-};
 __modules["client/current-session-report.js"] = function (require, module, exports) {
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -18225,6 +18839,44 @@ option[value^="zr~"] {
 html[data-zr-remote-session="1"] [data-slot="conversation.session.header.utilities"] [class$="_moreButton"] ~ [role="menu"] > [role="presentation"] > :first-child {
   display: none !important;
 }
+
+/* ---------- remote session: the "save to this machine" action (2.2.6) ----------
+   One class, owned by this plugin (no host module class, no hash): the
+   deliverable-card entry renders it in the card's own actions cell, the
+   document-preview entry in the preview header where open-in-app's control
+   sits (that one is hidden remotely by the [data-open-target] rule above,
+   so this is the only action left there). Both entries only MOUNT for a
+   virtual session, so the html attribute gate is belt-and-braces, not the
+   decision.
+   The palette variables are the host's own (label-secondary / border-l1 /
+   interactive-bg-hover / state-error), which keeps light/dark identical to
+   the cards around it without copying a theme. */
+html[data-zr-remote-session="1"] .zr-download-action {
+  box-sizing: border-box;
+  flex: none;
+  font: inherit;
+  font-size: 12px;
+  line-height: 18px;
+  color: var(--dsw-alias-label-secondary, #6b7280);
+  background: transparent;
+  border: 0.5px solid var(--dsw-alias-border-l1, #d9dde3);
+  border-radius: var(--dsw-radius-sm, 4px);
+  padding: 1px 8px;
+  cursor: pointer;
+  white-space: nowrap;
+}
+html[data-zr-remote-session="1"] .zr-download-action:hover {
+  color: var(--dsw-alias-label-primary, #111827);
+  background: var(--dsw-alias-interactive-bg-hover, rgba(0, 0, 0, 0.05));
+}
+html[data-zr-remote-session="1"] .zr-download-action[data-phase="busy"] {
+  cursor: progress;
+  opacity: 0.7;
+}
+html[data-zr-remote-session="1"] .zr-download-action[data-phase="error"] {
+  color: var(--dsw-alias-state-error-primary, #dc2626);
+  border-color: var(--dsw-alias-state-error-primary, #dc2626);
+}
 `;
 };
 __modules["client/effects/remote-session.js"] = function (require, module, exports) {
@@ -18562,6 +19214,289 @@ function installModelGroupSide(ctx) {
     }, 'dsh-zen-remote: model group side');
 }
 };
+__modules["client/remote-file-save.js"] = function (require, module, exports) {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DOWNLOAD_CHUNK_BYTES = void 0;
+exports.downloadFileNameOf = downloadFileNameOf;
+exports.downloadPathFromCard = downloadPathFromCard;
+exports.collectRemoteFile = collectRemoteFile;
+exports.createSaveRemoteFile = createSaveRemoteFile;
+/** The byte window one relayed read asks for. Matches the host default
+ * (`Config.maxBytes` 2 MiB) exactly: one round trip per window, and a host
+ * configured smaller self-corrects through the too-large branch below. */
+exports.DOWNLOAD_CHUNK_BYTES = 2 * 1024 * 1024;
+/** A hard ceiling on windows per file (4 GiB at the default size) — the
+ * guard against a reader that never advances (a host ignoring `range` and
+ * answering the same bytes forever) hanging the button in `busy`. */
+const MAX_DOWNLOAD_CHUNKS = 2048;
+/**
+ * The last path segment, as the browser download name. Slash- and
+ * backslash-separated paths both occur (the host may be Windows); an empty
+ * tail falls back to a fixed name so `download` is never blank.
+ * @param path - the file's absolute path on the host.
+ * @returns the name to save under.
+ */
+function downloadFileNameOf(path) {
+    const cut = Math.max(path.lastIndexOf('/'), path.lastIndexOf('\\'));
+    const name = (cut === -1 ? path : path.slice(cut + 1)).trim();
+    return name === '' ? 'download' : name;
+}
+/**
+ * The file path a produced-file card carries, read off the host's own
+ * rendered contract: the card root is `[data-presented-file]`, and its
+ * preview button's `title` is the resolved workspace path (RT
+ * dsh-client-ui-deliverables PresentedFileCard: `title:
+ * resolveWorkspacePath(cwd, file.path)`). The action button mounts inside
+ * that card, so `closest` picks THIS card, never a neighbouring one.
+ * @param button - the download action's own DOM node.
+ * @returns the path, or undefined when the card shape is not there (a future
+ * host): the caller then reports failure instead of guessing a path.
+ */
+function downloadPathFromCard(button) {
+    const card = button?.closest('[data-presented-file]');
+    if (card === null || card === undefined)
+        return undefined;
+    // Prefer the DIRECT child: the card's preview overlay is the first child
+    // button, while this action (and open-in-app's control) live deeper in the
+    // actions cell — and this action carries a `title` of its own, so a broad
+    // `querySelector('button[title]')` could match ITSELF on a host whose card
+    // markup differs. `:scope` narrows the match to the card's own children.
+    let preview = null;
+    try {
+        preview = card.querySelector(':scope > button[title]');
+    }
+    catch {
+        preview = null;
+    }
+    preview ??= card.querySelector('button[title]');
+    const title = preview?.getAttribute('title')?.trim();
+    return title === undefined || title === '' ? undefined : title;
+}
+/**
+ * Read one file window by window and return its complete bytes.
+ *
+ * The window starts at `chunkBytes` and adapts DOWN when the host refuses a
+ * window as too large (`workspace-file/too-large` + `details.limit`), so a
+ * host configured below the default still completes. The loop ends at the
+ * host's own `eof` flag, or on an empty window (never spin on a server that
+ * reports neither).
+ * @param read - one ranged read, already bound to the session and path.
+ * @param chunkBytes - the first window size; tests inject a small one.
+ * @returns the complete file bytes, in one buffer.
+ * @throws when a read is refused (the code rides the message) or the reader
+ * keeps advancing past {@link MAX_DOWNLOAD_CHUNKS} windows.
+ */
+async function collectRemoteFile(read, chunkBytes = exports.DOWNLOAD_CHUNK_BYTES) {
+    const chunks = [];
+    let offset = 0;
+    let size = Math.max(1, Math.floor(chunkBytes));
+    for (;;) {
+        if (chunks.length >= MAX_DOWNLOAD_CHUNKS)
+            throw new Error('workspace-file/too-many-chunks');
+        const result = await read({ offset, length: size });
+        if (!result.ok) {
+            const limit = result.error.details?.limit;
+            if (result.error.code === 'workspace-file/too-large' &&
+                typeof limit === 'number' &&
+                Number.isSafeInteger(limit) &&
+                limit > 0 &&
+                limit < size) {
+                // The host's own window cap is below ours: take its number and retry
+                // the SAME offset — nothing was read.
+                size = limit;
+                continue;
+            }
+            throw new Error(result.error.code === undefined ? 'workspace-file/read-failed' : result.error.code);
+        }
+        const data = result.value.data;
+        chunks.push(data);
+        offset += data.byteLength;
+        if (result.value.eof || data.byteLength === 0)
+            break;
+    }
+    let total = 0;
+    for (const chunk of chunks)
+        total += chunk.byteLength;
+    const out = new Uint8Array(total);
+    let at = 0;
+    for (const chunk of chunks) {
+        out.set(chunk, at);
+        at += chunk.byteLength;
+    }
+    return out;
+}
+/** Hand a finished byte array to the browser's download machinery. */
+function saveBytes(data, fileName) {
+    // `new Uint8Array(length)` always owns a plain ArrayBuffer; the cast only
+    // satisfies the BlobPart union in DOM typings that predate generic views.
+    const blob = new Blob([data], { type: 'application/octet-stream' });
+    const url = URL.createObjectURL(blob);
+    const anchor = document.createElement('a');
+    anchor.href = url;
+    anchor.download = downloadFileNameOf(fileName);
+    anchor.rel = 'noopener';
+    anchor.style.display = 'none';
+    document.body.append(anchor);
+    anchor.click();
+    anchor.remove();
+    setTimeout(() => {
+        URL.revokeObjectURL(url);
+    }, 60_000);
+}
+/**
+ * Bind the save capability the download buttons share to the client context.
+ *
+ * The `remote.workspaceFiles` service is looked up at CLICK time, not at
+ * registration time: a host without the service (an older DSH) must not
+ * break the plugin's apply, and the buttons only ever mount for a virtual
+ * session — where the service exists by construction.
+ * @param ctx - client root context.
+ * @returns the save function the injected `saveFile` prop carries.
+ */
+function createSaveRemoteFile(ctx) {
+    return async (sessionId, path) => {
+        // The namespace is BOTH a service of its own (`remote.workspaceFiles`) and
+        // reachable through the `remote` service's namespace proxy; ask for the
+        // exact service first and fall back to the proxy, so a composition that
+        // only provides one of the two still works.
+        const direct = ctx.get('remote.workspaceFiles');
+        const remote = ctx.get('remote');
+        const files = direct ?? remote?.workspaceFiles;
+        if (files === undefined)
+            throw new Error('remote-unavailable');
+        let data;
+        try {
+            data = await collectRemoteFile((range) => files.readBytes(sessionId, path, { range }, undefined));
+        }
+        catch (error) {
+            throw new Error(`read: ${describeError(error)}`, { cause: error });
+        }
+        try {
+            saveBytes(data, path);
+        }
+        catch (error) {
+            throw new Error(`save: ${describeError(error)}`, { cause: error });
+        }
+    };
+}
+/** A short, user-visible reason: an error's message (the relay's failures
+ * carry their code as the message), else the thrown value's text. Kept short
+ * because it is rendered INSIDE the card's button. */
+function describeError(error) {
+    const text = error instanceof Error ? error.message : String(error);
+    const trimmed = text.trim();
+    return trimmed.length > 40 ? `${trimmed.slice(0, 40)}…` : trimmed === '' ? 'unknown' : trimmed;
+}
+};
+__modules["client/RemoteFileDownload.js"] = function (require, module, exports) {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeliverableDownload = DeliverableDownload;
+exports.DocumentDownload = DocumentDownload;
+const jsx_runtime_1 = require("react/jsx-runtime");
+/**
+ * The "save this file to THIS machine" action for a REMOTE session (2.2.6).
+ *
+ * DSH's produced-file surfaces only ever OPEN a file: the deliverable card's
+ * overlay previews it in the document panel, and open-in-app's split button
+ * hands the path to the machine the DSH process runs on. On a paired desktop
+ * sub-client both of those are the HOST's machine, which is why the
+ * remote-session stylesheet hides the open controls — leaving a produced
+ * Word/PDF/zip with no way to reach the client's disk at all. This action
+ * fills exactly that gap: it reads the file through the relayed
+ * `workspaceFiles/readBytes` channel (src/client/remote-file-save.ts) and
+ * hands the bytes to the browser's download machinery, so the file lands on
+ * the machine whose screen the user is looking at.
+ *
+ * Two surfaces, one button:
+ *
+ * - `deliverables.file.actions` — the file card of a closing turn. The slot
+ *   deliberately hands its entries only the open-route coordinates
+ *   (`actionUrl`), NOT the path; the card's own preview button carries the
+ *   resolved absolute path in its `title` attribute (RT
+ *   dsh-client-ui-deliverables PresentedFileCard: `title:
+ *   resolveWorkspacePath(cwd, file.path)`), and the entry mounts INSIDE that
+ *   card (`[data-presented-file]`), so the button reads the same host-rendered
+ *   contract the plugin's stylesheets already anchor on. A card without the
+ *   attribute (a future host) simply renders no path and the button reports
+ *   the failure instead of guessing.
+ * - `sidebar.right.tab.document.actions` — the document preview header, where
+ *   the owner hands `absolutePath` directly (RT
+ *   dsh-client-ui-sidebar-documentpreview TextPreview `fileOwner`), so the
+ *   same file can be saved without hunting for the card again.
+ *
+ * Both registrations are unconditional; both COMPONENTS return null for a
+ * local session (`isVirtual`), so a host-role deployment — and every local
+ * session on a client deployment — renders exactly nothing.
+ */
+const react_1 = require("react");
+const virtual_id_js_1 = require("./virtual-id.js");
+const remote_file_save_ts_1 = require("./client/remote-file-save.js");
+/**
+ * The save control. One download at a time; the label carries the three
+ * states (idle / saving / failed) so a failure is visible on the card instead
+ * of a silent no-op.
+ * @param props - session, copy, save capability and (header only) the path.
+ * @returns the button.
+ */
+function DownloadButton({ sessionId, t, saveFile, absolutePath }) {
+    const [phase, setPhase] = (0, react_1.useState)('idle');
+    const [failure, setFailure] = (0, react_1.useState)(undefined);
+    const buttonRef = (0, react_1.useRef)(null);
+    const onClick = async () => {
+        if (phase === 'busy')
+            return;
+        const path = absolutePath ?? (0, remote_file_save_ts_1.downloadPathFromCard)(buttonRef.current);
+        setFailure(undefined);
+        if (path === undefined) {
+            setFailure('no-path');
+            setPhase('error');
+            return;
+        }
+        setPhase('busy');
+        try {
+            await saveFile(sessionId, path);
+            setPhase('idle');
+        }
+        catch (error) {
+            // The reason is rendered INSIDE the button (short) and logged for the
+            // console: without it a failed download on a client we cannot debug is
+            // a dead end.
+            const reason = (error instanceof Error ? error.message : String(error)).trim();
+            console.error('[dsh-zen-remote] remote download failed:', path, error);
+            setFailure(reason === '' ? 'unknown' : reason.slice(0, 22));
+            setPhase('error');
+        }
+    };
+    const label = phase === 'busy' ? t('downloadBusy') : phase === 'error' ? (failure === undefined ? t('downloadFailed') : `${t('downloadFailed')} (${failure})`) : t('downloadToLocal');
+    return ((0, jsx_runtime_1.jsx)("button", { ref: buttonRef, type: "button", className: "zr-download-action", "data-phase": phase, "aria-label": t('downloadToLocal'), title: failure === undefined ? t('downloadToLocal') : `${t('downloadToLocal')} — ${failure}`, onClick: () => {
+            void onClick();
+        }, children: label }));
+}
+/**
+ * The deliverable card entry. Renders nothing on a local session.
+ * @param props - the card slot's owner props plus the injected save
+ * capability and copy.
+ * @returns the save button, or null.
+ */
+function DeliverableDownload({ sessionId, t, saveFile }) {
+    if (!(0, virtual_id_js_1.isVirtual)(sessionId))
+        return null;
+    return (0, jsx_runtime_1.jsx)(DownloadButton, { sessionId: sessionId, t: t, saveFile: saveFile });
+}
+/**
+ * The document preview header entry. Renders nothing on a local session.
+ * @param props - the document slot's owner props plus the injected save
+ * capability and copy.
+ * @returns the save button, or null.
+ */
+function DocumentDownload({ sessionId, t, saveFile, absolutePath }) {
+    if (!(0, virtual_id_js_1.isVirtual)(sessionId))
+        return null;
+    return (0, jsx_runtime_1.jsx)(DownloadButton, { sessionId: sessionId, t: t, saveFile: saveFile, absolutePath: absolutePath });
+}
+};
 __modules["client/index.js"] = function (require, module, exports) {
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -18604,10 +19539,13 @@ const RemoteStatusIcon_tsx_1 = require("./client/RemoteStatusIcon.js");
 const RemoteComposerBanner_tsx_1 = require("./client/RemoteComposerBanner.js");
 const remote_status_register_ts_1 = require("./client/remote-status-register.js");
 const current_session_report_ts_1 = require("./client/current-session-report.js");
+const remote_drop_ts_1 = require("./client/effects/remote-drop.js");
 const remote_group_expansion_ts_1 = require("./client/remote-group-expansion.js");
 const remote_fetch_ts_1 = require("./client/remote-fetch.js");
 const remote_session_ts_1 = require("./client/effects/remote-session.js");
 const model_group_side_ts_1 = require("./client/effects/model-group-side.js");
+const RemoteFileDownload_tsx_1 = require("./client/RemoteFileDownload.js");
+const remote_file_save_ts_1 = require("./client/remote-file-save.js");
 /** Required services (cordis fiber inject — the loader passes all module exports as an object plugin). */
 exports.inject = ['slots', 'layout', 'locale', 'sessionLogDownload', 'sessions', 'workspaces'];
 /**
@@ -18675,6 +19613,15 @@ function apply(ctx) {
     // 的桌面端 App 正是远程会话所在；只在探测出的子客户端角色下运行，主
     // 服务端的页面探测一次后就静默。
     (0, current_session_report_ts_1.mountCurrentSessionReporter)(ctx);
+    // 远程会话拖拽附件（RD-2）：document 级 capture 阶段的 drop 拦截。桌面端
+    // 的同机零拷贝会把拖入的文件变成 `@本机绝对路径` chip，远程会话里服务端
+    // 读不到这个路径——守卫把远程会话的文件拖拽改写成无路径 File 的合成
+    // drop（宿主原生管道按浏览器拖拽走字节上传，再由 T51 的 fetch-route
+    // 拦截经中继转服务端）。判定在 client-data/remote-drop.ts（纯函数），
+    // 这里只做监听与重派发。同样必须在桌面门之前挂载：远程会话恰在桌面端
+    // 全宽使用；三门全不中（本地会话 / 手机端无 bridge / 非受信事件）时
+    // 零干预，主服务端的页面不受影响。
+    (0, remote_drop_ts_1.mountRemoteDropGuard)(ctx);
     // T64 服务端分组展开状态的记忆与恢复：宿主在工作区列表 ready 时会把不在
     // 列表里的分组展开记录清掉（retainAccountKeys），而本地工作区先 ready、
     // 服务端分组后并入，zr~ 键每次加载都被清掉、分组回到折叠。与上报器共用
@@ -18695,6 +19642,30 @@ function apply(ctx) {
     // client-data/model-group-side.ts），CSS 按标隐藏。同样必须在桌面门之前挂载：
     // 桌面端子客户端的模型选单一样要分侧，桌面无手机外壳不影响它。
     (0, model_group_side_ts_1.installModelGroupSide)(ctx);
+    // 2.2.6 远程会话产物下载：子客户端最常见的诉求是「把服务端工作区里刚产出的
+    // 文件拿到本机」。DSH 官方的产物卡片只有预览，打开类动作（present.open /
+    // open-in-app）作用于跑 DSH 的那台机器，远程会话里被样式表整组隐藏——
+    // 也就是说此前客户端根本没有把文件落到本机磁盘的入口。两个入口共用同一个
+    // 「读中继 + 浏览器下载」实现（RemoteFileDownload.tsx + remote-file-save.ts）：
+    // deliverable 卡片上的按钮从卡片自己的预览按钮 title 取绝对路径，
+    // 文档预览头的按钮直接拿 owner 给的 absolutePath；两者都只在虚拟会话渲染，
+    // 主服务端与本地会话逐像素 no-op。同样在桌面门之前注册——client 角色的
+    // 桌面端 App 正是远程会话所在。
+    const saveRemoteFileToLocal = (0, remote_file_save_ts_1.createSaveRemoteFile)(ctx);
+    ctx.slots.inject('deliverables.file.actions', () => ctx.slots.register({
+        name: 'deliverables.file.actions',
+        id: 'zr-download',
+        order: 40,
+        locale: locales_ts_1.NS,
+        inject: () => ({ saveFile: saveRemoteFileToLocal }),
+    }, RemoteFileDownload_tsx_1.DeliverableDownload));
+    ctx.slots.inject('sidebar.right.tab.document.actions', () => ctx.slots.register({
+        name: 'sidebar.right.tab.document.actions',
+        id: 'zr-download',
+        order: 40,
+        locale: locales_ts_1.NS,
+        inject: () => ({ saveFile: saveRemoteFileToLocal }),
+    }, RemoteFileDownload_tsx_1.DocumentDownload));
     // Desktop gate (DSH 0.1.7): the official Electron shell can be dragged
     // down to ~520px wide, where every width-based gate would flip the phone
     // shell on inside the desktop app. Inside that shell this plugin is a