dsh-zen-remote 2.3.6 → 2.3.7

package/lib/client.js

@@ -2067,7 +2067,7 @@ __modules["client-data/settings-form.js"] = function (require, module, exports)
  * (devices / pairing) plus the T14 envelope (ok / gateway / config / viaGateway).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ZenRemoteSettingsForm = exports.SETTINGS_FIELDS = exports.IDLE_HOURS_MAX = exports.SERVER_NAME_MAX = exports.RESTART_FIELDS = exports.PAIRING_CODE_LENGTH = exports.PAIRING_CODE_ALPHABET = exports.DEVICE_TOKEN_FIELD = exports.CLIENT_CONFIG_ROUTE = exports.CLIENT_RECONNECT_ROUTE = exports.CLIENT_STATUS_ROUTE = exports.CLIENT_CLAIM_ROUTE = exports.ADMIN_PLUGIN_BRIDGE_ROUTE = exports.ADMIN_PUSH_TEST_ROUTE = exports.ADMIN_ACTION_ROUTE = exports.ADMIN_PAIR_ROUTE = exports.ADMIN_STATUS_ROUTE = void 0;
+exports.ZenRemoteSettingsForm = exports.SETTINGS_FIELDS = exports.IDLE_HOURS_MAX = exports.SERVER_NAME_MAX = exports.RESTART_FIELDS = exports.PAIRING_CODE_LENGTH = exports.PAIRING_CODE_ALPHABET = exports.DEVICE_TOKEN_FIELD = exports.CLIENT_CONFIG_ROUTE = exports.CLIENT_DEBUG_REPORT_ROUTE = exports.CLIENT_RECONNECT_ROUTE = exports.CLIENT_STATUS_ROUTE = exports.CLIENT_CLAIM_ROUTE = exports.ADMIN_PLUGIN_BRIDGE_ROUTE = exports.ADMIN_PUSH_TEST_ROUTE = exports.ADMIN_ACTION_ROUTE = exports.ADMIN_PAIR_ROUTE = exports.ADMIN_STATUS_ROUTE = void 0;
 exports.deriveClientStatusView = deriveClientStatusView;
 exports.clientStatusLineOf = clientStatusLineOf;
 exports.normalizePairingCode = normalizePairingCode;
@@ -2100,6 +2100,9 @@ exports.CLIENT_CLAIM_ROUTE = '/_dsh/zen-remote/client/claim';
 exports.CLIENT_STATUS_ROUTE = '/_dsh/zen-remote/client/status';
 /** T43: one immediate reconnect — answered 409 unless the client is offline. */
 exports.CLIENT_RECONNECT_ROUTE = '/_dsh/zen-remote/client/reconnect';
+/** CU-4: the redacted diagnostic report (GET, both roles, machine-local only
+ * — a gateway-forwarded fetch is refused server-side). */
+exports.CLIENT_DEBUG_REPORT_ROUTE = '/_dsh/zen-remote/client/debug-report';
 /** The lightweight client-facing config route (host half, both roles): the
  * settings page's FALLBACK role probe (T17) — it registers wherever a
  * webServer exists, and since T17 its body carries the effective `role`
@@ -3303,15 +3306,23 @@ exports.zh = {
     'settings.client.diagRecentFailures': '最近的远程调用失败',
     'settings.client.diagCompatGroups': '指纹有差异的组：{groups}',
     'settings.client.diagCompatCalls': '最近的不兼容调用',
-    // --- RD-3 远程会话拖拽守卫的诊断行（浏览器端计数，渲染时现读） ---
-    'settings.client.diagRemoteDrop': '远程拖拽守卫',
+    // --- RD-3/AU-3 附件入口守卫的诊断行（浏览器端计数，渲染时现读） ---
+    'settings.client.diagRemoteDrop': '附件入口守卫',
     'settings.client.diagRemoteDropOk': '已安装 · 拦截 {intercepted} · 重派发 {redispatched} · 文件夹 {blocked} · 放行 {passthrough} · 重包失败 {failed}',
+    'settings.client.diagRemoteDropEntries': '分入口 · 拦截 拖拽 {dropI} / 回形针 {pickerI} / 粘贴 {pasteI} · 放行 拖拽 {dropP} / 回形针 {pickerP} / 粘贴 {pasteP}',
     'settings.client.diagRemoteDropOff': '未安装（{reason}）',
     // --- RD-6 上传改道（fetch-route 拦截）的诊断行：读 remote-status 的 serviceProbe ---
     'settings.client.diagUploadRedirect': '上传改道',
     'settings.client.diagUploadRedirectOk': '已安装 · 上传已接管',
     'settings.client.diagUploadRedirectRefused': '拒装：{reason}',
     'settings.client.diagUploadRedirectPending': '服务注入未触发 · connection {connection} · fileUploads {fileUploads}',
+    // --- CU-4 诊断信息导出（设置页最底部，两种角色都有） ---
+    'settings.debug.title': '诊断信息',
+    'settings.debug.export': '导出诊断信息',
+    'settings.debug.exporting': '正在生成…',
+    'settings.debug.hint': '下载一份脱敏后的诊断文件（版本、配置形态、连接诊断、插件日志）。令牌与密钥、对话内容、附件和完整文件路径一律不包含，服务器地址只保留类型。建议从机与主服务器各导一份，可直接附到 GitHub issue。',
+    'settings.debug.done': '诊断文件已下载',
+    'settings.debug.fail': '导出失败：无法生成诊断报告',
     // --- PB-5 插件桥：主服务端同意小节 + 子客户端诊断小节 ---
     'settings.bridge.title': '插件桥',
     'settings.bridge.empty': '暂无插件登记插件桥',
@@ -3813,16 +3824,24 @@ exports.en = {
     'settings.client.diagRecentFailures': 'Recent remote call failures',
     'settings.client.diagCompatGroups': 'Groups with fingerprint differences: {groups}',
     'settings.client.diagCompatCalls': 'Recent incompatible calls',
-    // --- RD-3: the remote drop guard's diagnostics line (browser-side
+    // --- RD-3/AU-3: the attachment-entry guard's diagnostics line (browser-side
     // counters, read at render time) ---
-    'settings.client.diagRemoteDrop': 'Remote drop guard',
+    'settings.client.diagRemoteDrop': 'Attachment entry guard',
     'settings.client.diagRemoteDropOk': 'Installed · intercepted {intercepted} · redispatched {redispatched} · folders {blocked} · passthrough {passthrough} · rewrap failed {failed}',
+    'settings.client.diagRemoteDropEntries': 'By entry · intercepted drop {dropI} / picker {pickerI} / paste {pasteI} · passthrough drop {dropP} / picker {pickerP} / paste {pasteP}',
     'settings.client.diagRemoteDropOff': 'Not installed ({reason})',
     // --- RD-6: the upload-redirect (fetch-route intercept) diagnostics row ---
     'settings.client.diagUploadRedirect': 'Upload redirect',
     'settings.client.diagUploadRedirectOk': 'Installed · upload wrapped',
     'settings.client.diagUploadRedirectRefused': 'Refused: {reason}',
     'settings.client.diagUploadRedirectPending': 'Service inject never fired · connection {connection} · fileUploads {fileUploads}',
+    // --- CU-4: the diagnostics export (bottom of the settings page, both roles) ---
+    'settings.debug.title': 'Diagnostics',
+    'settings.debug.export': 'Export diagnostics',
+    'settings.debug.exporting': 'Generating…',
+    'settings.debug.hint': 'Download a redacted diagnostics file (versions, config shape, connection diagnostics, plugin log). Tokens and secrets, conversation content, attachments and full file paths are never included; server addresses keep only their type. Export one on the client and one on the server — both can be attached to a GitHub issue as-is.',
+    'settings.debug.done': 'Diagnostics file downloaded',
+    'settings.debug.fail': 'Export failed: the diagnostics report could not be generated',
     // --- PB-5 plugin bridge: host consent section + sub-client diagnostics ---
     'settings.bridge.title': 'Plugin bridge',
     'settings.bridge.empty': 'No plugin has registered a bridge yet',
@@ -9771,6 +9790,44 @@ exports.MISC_CSS = `  /* ---------- hero composer on mobile ----------
     display: none !important;
   }
 }
+
+/* ---------- tablet standalone PWA: pay the safe area above 1023px ---------- */
+/* The gateway serves viewport-fit=cover to every non-desktop device (see
+   coverViewport in lan-gate-server), phone-chrome only manages the meta at
+   <=1023px, and every compensation rule in layout.css lives behind the same
+   1023px breakpoint and the data-mobile-nav frame marker MobileNavOverlay
+   only sets there. A wide tablet's home-screen PWA — iPad landscape, the
+   12.9"/13" iPad portrait at exactly 1024, Android tablets — therefore
+   painted under the status bar with nothing paying the inset: the top row
+   of controls sat in the system area and was hard to tap.
+
+   Anchor: the official AppFrame (ui-layout AppFrame.tsx) is the direct
+   parent of the [data-shell-overlay] layer — the same element
+   MobileNavOverlay's findFrame() resolves — and the frame already pads
+   ITSELF for the Windows titlebar (padding-top: --dsh-windows-titlebar-height
+   in AppFrame.module.css), so padding the frame is the host's own pattern
+   for system bars.
+
+   Structural no-op everywhere else, by construction:
+   - display-mode: standalone matches only an installed PWA; desktop
+     browsers report browser.
+   - The Electron app never receives this stylesheet at all (the
+     isDesktopShell gate in client/index.tsx) and never gets cover.
+   - env() insets are hard 0 in every desktop browser, so even a browser
+     that somehow matched the media query computes 0px padding; on iPads
+     the bottom inset is 0 too (no home indicator) — the bottom line only
+     ever pays out on Android tablets with a gesture/nav bar.
+   box-sizing is load-bearing (the S2.1 lesson, see the frame rule in
+   layout.css): the official frame is height:100% content-box, and padding
+   without border-box would grow it past the viewport instead of reserving
+   the strip. Pinned by scripts/check-tablet-safe-area.mjs. */
+@media (min-width: 1024px) and (display-mode: standalone) {
+  :has(> [data-shell-overlay]) {
+    box-sizing: border-box !important;
+    padding-top: var(--mnav-sat) !important;
+    padding-bottom: var(--mnav-sab) !important;
+  }
+}
 `;
 };
 __modules["client/styles/home.css.js"] = function (require, module, exports) {
@@ -16223,6 +16280,69 @@ const EXPORT_STYLE = {
     whiteSpace: 'nowrap',
 };
 };
+__modules["client-data/current-session.js"] = function (require, module, exports) {
+"use strict";
+/**
+ * T62: the browser half's current-session parsing, as pure functions — the
+ * readable core of the reporter (src/client/current-session-report.ts) and
+ * the one place its rules are unit-tested without a DOM.
+ *
+ * The host DSH persists its selection (the session its UI has open) to
+ * localStorage under `dsh.sessions.current` as a JSON object carrying
+ * `sessionId` (dsh-client-ui-workspace's snapshot store, `replaceMain` /
+ * `clearMain`). The reporter re-reads that key and POSTs it to the backend
+ * whenever it CHANGES; the backend's intercept layer judges close frames
+ * against it — a closed session the user has open keeps its page and its
+ * 「远程已关闭」 banner, anything else hides. The vocabulary mirrors the
+ * intercept side's `CurrentSessionRead`:
+ * - `unavailable`: the key is absent or the value unreadable — NEVER
+ *   report; the backend keeps its conservative tombstone behavior;
+ * - `none`: readable, no session open — report `{sessionId: null}`;
+ * - `open`: a session id — report `{sessionId}`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CURRENT_SESSION_STORAGE_KEY = void 0;
+exports.parseCurrentSessionStorage = parseCurrentSessionStorage;
+exports.currentSessionReportEquals = currentSessionReportEquals;
+/** Mirror of src/intercept.ts's key (the client build cannot import the
+ * host file). The host's selection store persists under this exact name. */
+exports.CURRENT_SESSION_STORAGE_KEY = 'dsh.sessions.current';
+/** Parse one raw localStorage read. `null` / `undefined` (the key is absent
+ * — the host store only starts persisting with its first write) and any
+ * value that does not parse into an object with a usable shape are
+ * `unavailable`: no signal, never a guess. An object WITHOUT a `sessionId`
+ * (the host's `clearMain` writes `{}`) is a real, reportable "nothing is
+ * open". */
+function parseCurrentSessionStorage(raw) {
+    if (raw === null || raw === undefined)
+        return { kind: 'unavailable' };
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return { kind: 'unavailable' };
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+        return { kind: 'unavailable' };
+    const sessionId = parsed.sessionId;
+    if (typeof sessionId === 'string' && sessionId !== '')
+        return { kind: 'open', sessionId };
+    if (sessionId === undefined || sessionId === null || sessionId === '')
+        return { kind: 'none' };
+    return { kind: 'unavailable' };
+}
+/** Whether one report differs from another — the reporter posts only on a
+ * change, so this compares content, never object identity: kind first, then
+ * the session id. */
+function currentSessionReportEquals(a, b) {
+    if (a.kind !== b.kind)
+        return false;
+    if (a.kind === 'open' && b.kind === 'open')
+        return a.sessionId === b.sessionId;
+    return true;
+}
+};
 __modules["virtual-id.js"] = function (require, module, exports) {
 "use strict";
 /**
@@ -16335,6 +16455,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.isRemoteSessionId = isRemoteSessionId;
 exports.decideRemoteDrop = decideRemoteDrop;
 exports.rewrapFiles = rewrapFiles;
+exports.decideRemoteIntake = decideRemoteIntake;
 const virtual_id_ts_1 = require("./virtual-id.js");
 /** True when the id is one of this plugin's virtual (relay) session ids —
  * the `zr~<serverId>~<id>` form. `undefined` (no readable current-session
@@ -16387,68 +16508,48 @@ function decideRemoteDrop(input) {
 function rewrapFiles(files) {
     return Array.from(files, (file) => new File([file], file.name, { type: file.type, lastModified: file.lastModified }));
 }
-};
-__modules["client-data/current-session.js"] = function (require, module, exports) {
-"use strict";
 /**
- * T62: the browser half's current-session parsing, as pure functions — the
- * readable core of the reporter (src/client/current-session-report.ts) and
- * the one place its rules are unit-tested without a DOM.
+ * The three gates, then the intervention rule. The gates are decideRemoteDrop's
+ * verbatim (all must affirmatively pass — a missing signal reads as local and
+ * never intervenes); the rule after them:
+ * 1. `items === undefined` — no inventory, pass through (`no-entry-api`;
+ *    deciding blind could eat a working flow);
+ * 2. any directory — `block-directories`, ahead of every redirect: a folder
+ *    cannot be fixed by single-file upload, the whole intake is stopped with
+ *    a toast (same semantics as the drop branch);
+ * 3. no items at all — passthrough (`no-files`; the plain-text paste shape);
+ * 4. otherwise — `redirect` when ANY item is a `drop` item (the frozen
+ *    "any file intervenes" semantics) or carries a path while not being an
+ *    image (the zero-copy bad branch — exactly what issue #49 broke on);
+ *    `no-path-or-image-only` passthrough when none does.
  *
- * The host DSH persists its selection (the session its UI has open) to
- * localStorage under `dsh.sessions.current` as a JSON object carrying
- * `sessionId` (dsh-client-ui-workspace's snapshot store, `replaceMain` /
- * `clearMain`). The reporter re-reads that key and POSTs it to the backend
- * whenever it CHANGES; the backend's intercept layer judges close frames
- * against it — a closed session the user has open keeps its page and its
- * 「远程已关闭」 banner, anything else hides. The vocabulary mirrors the
- * intercept side's `CurrentSessionRead`:
- * - `unavailable`: the key is absent or the value unreadable — NEVER
- *   report; the backend keeps its conservative tombstone behavior;
- * - `none`: readable, no session open — report `{sessionId: null}`;
- * - `open`: a session id — report `{sessionId}`.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CURRENT_SESSION_STORAGE_KEY = void 0;
-exports.parseCurrentSessionStorage = parseCurrentSessionStorage;
-exports.currentSessionReportEquals = currentSessionReportEquals;
-/** Mirror of src/intercept.ts's key (the client build cannot import the
- * host file). The host's selection store persists under this exact name. */
-exports.CURRENT_SESSION_STORAGE_KEY = 'dsh.sessions.current';
-/** Parse one raw localStorage read. `null` / `undefined` (the key is absent
- * — the host store only starts persisting with its first write) and any
- * value that does not parse into an object with a usable shape are
- * `unavailable`: no signal, never a guess. An object WITHOUT a `sessionId`
- * (the host's `clearMain` writes `{}`) is a real, reportable "nothing is
- * open". */
-function parseCurrentSessionStorage(raw) {
-    if (raw === null || raw === undefined)
-        return { kind: 'unavailable' };
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return { kind: 'unavailable' };
-    }
-    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
-        return { kind: 'unavailable' };
-    const sessionId = parsed.sessionId;
-    if (typeof sessionId === 'string' && sessionId !== '')
-        return { kind: 'open', sessionId };
-    if (sessionId === undefined || sessionId === null || sessionId === '')
-        return { kind: 'none' };
-    return { kind: 'unavailable' };
-}
-/** Whether one report differs from another — the reporter posts only on a
- * change, so this compares content, never object identity: kind first, then
- * the session id. */
-function currentSessionReportEquals(a, b) {
-    if (a.kind !== b.kind)
-        return false;
-    if (a.kind === 'open' && b.kind === 'open')
-        return a.sessionId === b.sessionId;
-    return true;
+ * Drop-entry parity pin: a `drop` item's intervention semantics here are
+ * kept EQUIVALENT to `decideRemoteDrop` — same gates, directory rule and
+ * "any file intervenes" — with exactly ONE deliberate divergence: when
+ * `items === undefined`, `decideRemoteDrop` redispatches (a drop always has
+ * a Files payload worth re-shaping) while this function passes through
+ * (`no-entry-api` — an intake caller that cannot even enumerate its items
+ * must not be intercepted blind). If either function's gate sequence or
+ * drop-entry rule changes, update the other in the same commit; the truth
+ * tables in scripts/check-remote-drop.mjs pin both sides.
+ */
+function decideRemoteIntake(input) {
+    if (!input.trusted)
+        return { action: 'passthrough', reason: 'untrusted-event' };
+    if (!input.hasHostPaths)
+        return { action: 'passthrough', reason: 'no-host-paths' };
+    if (!isRemoteSessionId(input.currentSessionId))
+        return { action: 'passthrough', reason: 'not-remote-session' };
+    if (input.items === undefined)
+        return { action: 'passthrough', reason: 'no-entry-api' };
+    if (input.items.some((item) => item.isDirectory))
+        return { action: 'block-directories', reason: 'contains-directory' };
+    if (input.items.length === 0)
+        return { action: 'passthrough', reason: 'no-files' };
+    const intervenes = input.items.some((item) => item.entry === 'drop' || (item.hasPath && !item.isImage));
+    return intervenes
+        ? { action: 'redirect', reason: 'remote-path-files' }
+        : { action: 'passthrough', reason: 'no-path-or-image-only' };
 }
 };
 __modules["client/effects/remote-drop.js"] = function (require, module, exports) {
@@ -16463,18 +16564,60 @@ const locales_ts_1 = require("./client/locales.js");
  * Re-mounting (a plugin row reload) resets it. */
 let diagnostics = freshDiagnostics();
 function freshDiagnostics() {
-    return { installed: false, notInstalledReason: undefined, intercepted: 0, redispatched: 0, blockedDirectories: 0, passthrough: 0, rewrapFailed: 0 };
+    return {
+        installed: false,
+        notInstalledReason: undefined,
+        intercepted: 0,
+        redispatched: 0,
+        blockedDirectories: 0,
+        passthrough: 0,
+        rewrapFailed: 0,
+        interceptedBy: { drop: 0, picker: 0, paste: 0 },
+        redirectedBy: { drop: 0, picker: 0, paste: 0 },
+        blockedBy: { drop: 0, picker: 0, paste: 0 },
+        passthroughBy: { drop: 0, picker: 0, paste: 0 },
+    };
 }
 /** A snapshot for the diagnostics carriers (settings page). Copying keeps
- * callers from holding a live reference into a later mount's state. */
+ * callers from holding a live reference into a later mount's state — the
+ * per-entry objects are copied too, or a caller would keep counting. */
 function remoteDropDiagnostics() {
-    return { ...diagnostics };
+    return {
+        ...diagnostics,
+        interceptedBy: { ...diagnostics.interceptedBy },
+        redirectedBy: { ...diagnostics.redirectedBy },
+        blockedBy: { ...diagnostics.blockedBy },
+        passthroughBy: { ...diagnostics.passthroughBy },
+    };
+}
+function bump(counts, entry) {
+    counts[entry] += 1;
 }
 /** The contextBridge global's existence only — never touched otherwise
  * (it is deep-frozen and must stay unwrapped). */
 function hostPathsOf() {
     return globalThis.__DSH_HOST_PATHS__;
 }
+/** The bridge's `pathFor` — the preload's `webUtils.getPathForFile`. A
+ * non-empty string means the File still carries its disk path, the exact
+ * fact the host's zero-copy branch keys on. Anything else (bridge shape,
+ * non-string answer, a throw) reads as "no path" — the conservative
+ * direction: the file is treated as already byte-uploading and stays
+ * untouched. */
+function bridgePathFor(bridge, file) {
+    if (bridge === null || typeof bridge !== 'object')
+        return '';
+    const pathFor = bridge.pathFor;
+    if (typeof pathFor !== 'function')
+        return '';
+    try {
+        const result = pathFor.call(bridge, file);
+        return typeof result === 'string' ? result : '';
+    }
+    catch {
+        return '';
+    }
+}
 /** The current-session signal, read AT EVENT TIME (the selection changes
  * while the page is open; a mount-time snapshot would go stale). Any
  * storage failure reads as "no signal" = local session = passthrough. */
@@ -16533,6 +16676,28 @@ function dismissHostDropOverlay() {
         // No window / Event in this host: the overlay is the only casualty.
     }
 }
+/** Build the redispatch payload WITHOUT touching any event: re-wrap the files
+ * (path-stripped) and pack them into a fresh DataTransfer. `undefined` means
+ * the file list was empty (nothing to dispatch — the caller passes through);
+ * a throw means a re-wrap or an items.add failed (0-byte / exotic File) and
+ * the caller releases the original event untouched (宁坏勿丢). Shared by all
+ * three entries — the payload shape is the redispatch contract, and the
+ * drop entry's behavior is frozen by its existing tests. */
+function buildDropPayload(files) {
+    const rewrapped = (0, remote_drop_ts_1.rewrapFiles)(files);
+    if (rewrapped.length === 0)
+        return undefined;
+    const payload = new DataTransfer();
+    for (const file of rewrapped)
+        payload.items.add(file);
+    return payload;
+}
+/** Dispatch the host-shaped synthetic drop on document, bubble phase — the
+ * host's own drop handler (mask reset, busy rejection, addFiles) digests it;
+ * our capture listener skips it via the isTrusted gate. */
+function dispatchSyntheticDrop(payload) {
+    document.dispatchEvent(new DragEvent('drop', { bubbles: true, cancelable: true, dataTransfer: payload }));
+}
 function mountRemoteDropGuard(ctx) {
     ctx.effect(() => {
         // Fresh state per mount: a plugin reload re-runs apply() and must not
@@ -16609,6 +16774,7 @@ function mountRemoteDropGuard(ctx) {
             });
             if (decision.action === 'passthrough') {
                 diagnostics.passthrough += 1;
+                bump(diagnostics.passthroughBy, 'drop');
                 return;
             }
             if (decision.action === 'block-directories') {
@@ -16618,7 +16784,9 @@ function mountRemoteDropGuard(ctx) {
                 event.stopPropagation();
                 dismissHostDropOverlay();
                 diagnostics.intercepted += 1;
+                bump(diagnostics.interceptedBy, 'drop');
                 diagnostics.blockedDirectories += 1;
+                bump(diagnostics.blockedBy, 'drop');
                 showToast();
                 return;
             }
@@ -16627,23 +16795,23 @@ function mountRemoteDropGuard(ctx) {
             // host still receives today's (path-chip) behavior instead of
             // nothing at all.
             try {
-                const rewrapped = (0, remote_drop_ts_1.rewrapFiles)(Array.from(transfer.files));
-                if (rewrapped.length === 0) {
+                const payload = buildDropPayload(Array.from(transfer.files));
+                if (payload === undefined) {
                     diagnostics.passthrough += 1;
+                    bump(diagnostics.passthroughBy, 'drop');
                     return;
                 }
-                const payload = new DataTransfer();
-                for (const file of rewrapped)
-                    payload.items.add(file);
                 event.preventDefault();
                 event.stopPropagation();
                 diagnostics.intercepted += 1;
+                bump(diagnostics.interceptedBy, 'drop');
                 // The host's drop handler sits on document, bubble phase (F4): a
                 // bubbling synthetic drop on document reaches it. Its own handler
                 // does the preventDefault / mask reset / addFiles work; our capture
                 // listener skips this event via the isTrusted gate above.
-                document.dispatchEvent(new DragEvent('drop', { bubbles: true, cancelable: true, dataTransfer: payload }));
+                dispatchSyntheticDrop(payload);
                 diagnostics.redispatched += 1;
+                bump(diagnostics.redirectedBy, 'drop');
             }
             catch {
                 // A re-wrap or a single items.add threw (0-byte / exotic File):
@@ -16652,8 +16820,173 @@ function mountRemoteDropGuard(ctx) {
             }
         };
         document.addEventListener('drop', onDrop, true);
+        // --- the picker entry (AU-2): the composer's hidden file selector -------
+        // F1: the host composer's picker is an `input[type=file][multiple][hidden]`
+        // with NO accept attribute, and its React onChange feeds intakeFiles →
+        // addFiles — the same zero-copy branch the drop entry guards. Judged by
+        // STRUCTURE, never by class names (hash classes cannot be anchored): an
+        // input with an accept attribute (import / restore pickers), a visible
+        // one, or a `webkitdirectory` folder picker (a third-party composition
+        // could combine all four) is somebody else's and passes through. The
+        // host composer has none of those, so the hit is unchanged.
+        const onChange = (event) => {
+            if (!event.isTrusted)
+                return;
+            const input = event.target;
+            if (!(input instanceof HTMLInputElement))
+                return;
+            if (input.type !== 'file' || !input.multiple || !input.hidden || input.hasAttribute('accept') || input.webkitdirectory)
+                return;
+            const files = Array.from(input.files ?? []);
+            if (files.length === 0)
+                return;
+            // The remote gate first, BEFORE counting: a local session's everyday
+            // picker use must not show up in the diagnostics at all (the counters
+            // are a record of what the guard saw in remote sessions).
+            if (!(0, remote_drop_ts_1.isRemoteSessionId)(readCurrentSessionId()))
+                return;
+            const bridge = hostPathsOf();
+            const items = files.map((file) => ({
+                entry: 'picker',
+                // A picker yields plain files; directories are structurally
+                // impossible, so the block-directories branch is unreachable here
+                // (defensive passthrough below).
+                isDirectory: false,
+                hasPath: bridgePathFor(bridge, file) !== '',
+                isImage: file.type.startsWith('image/'),
+            }));
+            const decision = (0, remote_drop_ts_1.decideRemoteIntake)({
+                hasHostPaths: bridge !== undefined,
+                currentSessionId: readCurrentSessionId(),
+                trusted: event.isTrusted,
+                items,
+            });
+            if (decision.action !== 'redirect') {
+                // passthrough, or the defensive block branch that cannot happen for
+                // a picker — either way zero intervention.
+                diagnostics.passthrough += 1;
+                bump(diagnostics.passthroughBy, 'picker');
+                return;
+            }
+            // Build the payload BEFORE stopping the event (宁坏勿丢): a re-wrap
+            // failure releases the change untouched — the host keeps today's
+            // (path-chip) behavior instead of losing the pick entirely.
+            try {
+                const payload = buildDropPayload(files);
+                if (payload === undefined) {
+                    diagnostics.passthrough += 1;
+                    bump(diagnostics.passthroughBy, 'picker');
+                    return;
+                }
+                // stopPropagation keeps the event from reaching React's delegated
+                // onChange at the root container (F5); clearing the value lets the
+                // SAME file trigger a later change again (the host's own onPickFiles
+                // habit, applied here since the host's handler no longer runs).
+                event.stopPropagation();
+                input.value = '';
+                diagnostics.intercepted += 1;
+                bump(diagnostics.interceptedBy, 'picker');
+                dispatchSyntheticDrop(payload);
+                diagnostics.redispatched += 1;
+                bump(diagnostics.redirectedBy, 'picker');
+            }
+            catch {
+                diagnostics.rewrapFailed += 1;
+            }
+        };
+        document.addEventListener('change', onChange, true);
+        // --- the paste entry (AU-2): the editor's clipboard files ---------------
+        // F2: the composer editor (a contenteditable root) reads file items off
+        // clipboardData; a path-carrying non-image lands on the same zero-copy
+        // branch. Pasting into any other target (settings fields, search) is not
+        // ours. clipboardData is read-only, so a redirect can only re-dispatch
+        // — preventDefault keeps the editor from inserting anything.
+        const onPaste = (event) => {
+            if (!event.isTrusted)
+                return;
+            const transfer = event.clipboardData;
+            if (transfer === null)
+                return;
+            const firstElement = event.composedPath().find((node) => node instanceof Element);
+            if (firstElement === undefined || firstElement.closest('[contenteditable="true"]') === null)
+                return;
+            // The remote gate BEFORE any per-item work (same rationale as picker):
+            // a local session's paste — including pasted FILES — returns here, so
+            // it never runs bridgePathFor per file and never reaches the counters.
+            // Everything after this point still runs inside this one synchronous
+            // handler, within the dispatch lifetime clipboardData requires.
+            if (!(0, remote_drop_ts_1.isRemoteSessionId)(readCurrentSessionId()))
+                return;
+            const bridge = hostPathsOf();
+            const files = [];
+            const items = [];
+            for (const item of Array.from(transfer.items)) {
+                if (item.kind !== 'file')
+                    continue;
+                const file = item.getAsFile();
+                if (file === null)
+                    continue;
+                // Directory detection with the host's own default: no entry API
+                // reads as "not a directory". Items without a File behind them never
+                // reach the descriptors, so a plain-text paste arrives as an empty
+                // list — the pure no-files passthrough.
+                const entry = typeof item.webkitGetAsEntry === 'function' ? item.webkitGetAsEntry() : null;
+                files.push(file);
+                items.push({
+                    entry: 'paste',
+                    isDirectory: entry?.isDirectory === true,
+                    hasPath: bridgePathFor(bridge, file) !== '',
+                    isImage: file.type.startsWith('image/'),
+                });
+            }
+            const decision = (0, remote_drop_ts_1.decideRemoteIntake)({
+                hasHostPaths: bridge !== undefined,
+                currentSessionId: readCurrentSessionId(),
+                trusted: event.isTrusted,
+                items,
+            });
+            if (decision.action === 'block-directories') {
+                // A folder paste cannot be fixed by single-file upload: same toast
+                // semantics as the drop branch (no overlay to dismiss — paste never
+                // opened one).
+                event.preventDefault();
+                event.stopPropagation();
+                diagnostics.intercepted += 1;
+                bump(diagnostics.interceptedBy, 'paste');
+                diagnostics.blockedDirectories += 1;
+                bump(diagnostics.blockedBy, 'paste');
+                showToast();
+                return;
+            }
+            if (decision.action !== 'redirect') {
+                diagnostics.passthrough += 1;
+                bump(diagnostics.passthroughBy, 'paste');
+                return;
+            }
+            try {
+                const payload = buildDropPayload(files);
+                if (payload === undefined) {
+                    diagnostics.passthrough += 1;
+                    bump(diagnostics.passthroughBy, 'paste');
+                    return;
+                }
+                event.preventDefault();
+                event.stopPropagation();
+                diagnostics.intercepted += 1;
+                bump(diagnostics.interceptedBy, 'paste');
+                dispatchSyntheticDrop(payload);
+                diagnostics.redispatched += 1;
+                bump(diagnostics.redirectedBy, 'paste');
+            }
+            catch {
+                diagnostics.rewrapFailed += 1;
+            }
+        };
+        document.addEventListener('paste', onPaste, true);
         return () => {
             document.removeEventListener('drop', onDrop, true);
+            document.removeEventListener('change', onChange, true);
+            document.removeEventListener('paste', onPaste, true);
             removeToast();
             // Keep the counters readable after a dispose (the settings page may
             // still be open mid-reload); `installed` is the armed flag only.
@@ -16704,7 +17037,9 @@ const react_1 = require("react");
 const dsh_client_ui_primitives_1 = require("@deepseek-ai/dsh-client-ui-primitives");
 const settings_form_ts_1 = require("./client-data/settings-form.js");
 const plugin_bridge_ts_1 = require("./client-data/plugin-bridge.js");
-const remote_drop_ts_1 = require("./client/effects/remote-drop.js");
+const current_session_ts_1 = require("./client-data/current-session.js");
+const remote_drop_ts_1 = require("./client-data/remote-drop.js");
+const remote_drop_ts_2 = require("./client/effects/remote-drop.js");
 const shares_ts_1 = require("./client-data/shares.js");
 /** Device roles the pairing picker offers, in display order. */
 const PAIR_ROLES = ['web', 'desktop-client'];
@@ -16730,6 +17065,45 @@ async function postJson(url, payload) {
         return { ok: false, sent: 0, failed: 0 };
     }
 }
+/** CU-4: the export's download name, `zen-remote-debug-<role>-<yyyymmdd-hhmm>.json`,
+ * stamped in the browser's local time (the file is for the user's own
+ * folder; the report's `_meta.generatedAt` carries the exact UTC instant). */
+function debugExportFileName(role, now) {
+    const pad = (n) => String(n).padStart(2, '0');
+    const stamp = `${now.getFullYear()}${pad(now.getMonth() + 1)}${pad(now.getDate())}-${pad(now.getHours())}${pad(now.getMinutes())}`;
+    return `zen-remote-debug-${role}-${stamp}.json`;
+}
+/** CU-4: one transient notice for the export's outcome — the same inline-
+ * styled overlay habit the remote-drop guard's folder toast uses (styles
+ * stay inline: nothing of this goes into pwa/app.css or the style sheets),
+ * one at a time, gone after 3 s, never intercepting taps. */
+let debugToast;
+let debugToastTimer;
+function showDebugToast(text) {
+    if (debugToastTimer !== undefined)
+        window.clearTimeout(debugToastTimer);
+    debugToast?.remove();
+    const el = document.createElement('div');
+    el.dataset.zenRemote = 'debug-export-toast';
+    el.textContent = text;
+    el.style.cssText = [
+        'position:fixed', 'left:50%', 'transform:translateX(-50%)',
+        'bottom:calc(env(safe-area-inset-bottom, 0px) + 32px)',
+        'z-index:2147483000',
+        'background:rgba(0,0,0,.82)', 'color:#fff',
+        'font:13px/1.5 -apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif',
+        'padding:10px 16px', 'border-radius:10px', 'max-width:90vw', 'text-align:center',
+        'pointer-events:none',
+    ].join(';');
+    document.body.appendChild(el);
+    debugToast = el;
+    debugToastTimer = window.setTimeout(() => {
+        el.remove();
+        if (debugToast === el)
+            debugToast = undefined;
+        debugToastTimer = undefined;
+    }, 3000);
+}
 function SettingsSection(props) {
     // The summary view is a one-liner only — it must not even fetch
     // admin/status, so every hook (and the fetch) lives in the page component.
@@ -16803,6 +17177,8 @@ function SettingsSectionPage({ config, shares, t }) {
     // JS dialog methods, so renames edit inline).
     const [renaming, setRenaming] = (0, react_1.useState)(null);
     const [pushTest, setPushTest] = (0, react_1.useState)({ state: 'idle' });
+    // CU-4: the debug export's in-flight marker.
+    const [debugBusy, setDebugBusy] = (0, react_1.useState)(false);
     // The client group's pairing form (T16). The address prefills from the row
     // (once the shared form's document is served) until the user types into it;
     // the code normalizes as typed. The registered name is the shared 设备名称
@@ -16900,7 +17276,7 @@ function SettingsSectionPage({ config, shares, t }) {
     // time — no snapshot state of its own: the initial mount, the 15s
     // connected-status poll and the countdown ticker all re-render this page,
     // and each render takes the values as they are right then.
-    const dropDiag = (0, remote_drop_ts_1.remoteDropDiagnostics)();
+    const dropDiag = (0, remote_drop_ts_2.remoteDropDiagnostics)();
     const clientRetryAt = clientView?.nextRetryAt;
     const clientCountingDown = clientRetryAt !== undefined;
     // Offline with a pending retry: refresh the status shortly after the
@@ -17154,6 +17530,50 @@ function SettingsSectionPage({ config, shares, t }) {
         const result = await postJson(settings_form_ts_1.ADMIN_PUSH_TEST_ROUTE, {});
         setPushTest(result.ok ? { state: 'ok', sent: result.sent, failed: result.failed } : { state: 'fail' });
     };
+    // CU-4 导出诊断信息: the backend's redacted report (both roles answer
+    // their own), merged with the two facts only THIS page can read — the
+    // attachment-entry guard's browser-side counters and whether the session
+    // open right now is a remote one — then downloaded as one JSON file. The
+    // browser plate carries counters and a boolean, nothing else: no session
+    // id, no storage dump.
+    const runDebugExport = async () => {
+        setDebugBusy(true);
+        try {
+            const res = await fetch(settings_form_ts_1.CLIENT_DEBUG_REPORT_ROUTE);
+            if (!res.ok)
+                throw new StatusError(res.status);
+            const report = await res.json();
+            let remote = false;
+            try {
+                const current = (0, current_session_ts_1.parseCurrentSessionStorage)(window.localStorage.getItem(current_session_ts_1.CURRENT_SESSION_STORAGE_KEY));
+                remote = current.kind === 'open' && (0, remote_drop_ts_1.isRemoteSessionId)(current.sessionId);
+            }
+            catch { /* storage unreadable: report not-remote */ }
+            const merged = {
+                ...report,
+                browser: {
+                    remoteDrop: (0, remote_drop_ts_2.remoteDropDiagnostics)(),
+                    currentSession: { remote },
+                },
+            };
+            const blob = new Blob([`${JSON.stringify(merged, null, 2)}\n`], { type: 'application/json' });
+            const url = URL.createObjectURL(blob);
+            const anchor = document.createElement('a');
+            anchor.href = url;
+            anchor.download = debugExportFileName(clientRole ? 'client' : 'host', new Date());
+            document.body.appendChild(anchor);
+            anchor.click();
+            anchor.remove();
+            // Revoked on the next tick: some engines start the download only
+            // after the click handler returns.
+            window.setTimeout(() => { URL.revokeObjectURL(url); }, 0);
+            showDebugToast(t('settings.debug.done'));
+        }
+        catch {
+            showDebugToast(t('settings.debug.fail'));
+        }
+        setDebugBusy(false);
+    };
     // --- client group (T16) ----------------------------------------------------
     // The address prefill reads the row's stored serverUrl while the user has
     // not typed anything of their own.
@@ -17371,7 +17791,14 @@ function SettingsSectionPage({ config, shares, t }) {
                                                 passthrough: dropDiag.passthrough,
                                                 failed: dropDiag.rewrapFailed,
                                             })
-                                            : t('settings.client.diagRemoteDropOff', { reason: dropDiag.notInstalledReason ?? '—' }) })] })), clientView?.uploadProbe !== undefined && (() => {
+                                            : t('settings.client.diagRemoteDropOff', { reason: dropDiag.notInstalledReason ?? '—' }) }), dropDiag.installed && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: t('settings.client.diagRemoteDropEntries', {
+                                            dropI: dropDiag.interceptedBy.drop,
+                                            pickerI: dropDiag.interceptedBy.picker,
+                                            pasteI: dropDiag.interceptedBy.paste,
+                                            dropP: dropDiag.passthroughBy.drop,
+                                            pickerP: dropDiag.passthroughBy.picker,
+                                            pasteP: dropDiag.passthroughBy.paste,
+                                        }) }))] })), clientView?.uploadProbe !== undefined && (() => {
                                 const probe = clientView.uploadProbe;
                                 const seen = probe.uploadInjectSeen === true;
                                 const refused = seen && probe.fetchRoute?.shape?.reasons instanceof Array && probe.fetchRoute.shape.reasons.length > 0;
@@ -17387,7 +17814,7 @@ function SettingsSectionPage({ config, shares, t }) {
                                 return ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagUploadRedirect') }) }), (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: text })] }));
                             })(), clientView.compat !== undefined && ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [clientView.compat.mismatchedGroups.length > 0 && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.client.diagCompatGroups', { groups: clientView.compat.mismatchedGroups.join(', ') }) })), clientView.compat.recentCalls.length > 0 && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.client.diagCompatCalls') }) }), clientView.compat.recentCalls.map((failure, index) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [new Date(failure.time).toLocaleString(), " \u00B7 ", failure.method !== '' ? failure.method : '—', " \u00B7 ", failure.code] }, index)))] }))] })), (clientView.pluginBridge?.length ?? 0) > 0 && clientView.pluginBridge !== undefined && ((0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsx)("div", { className: "zr-settings-head", children: (0, jsx_runtime_1.jsx)("label", { children: t('settings.bridge.title') }) }), clientView.pluginBridge.map((row) => ((0, jsx_runtime_1.jsxs)("p", { className: "zr-settings-hint", children: [row.plugin, " \u00B7 ", row.localVersion !== '' ? `v${row.localVersion}` : '—', " \u00B7", ' ', row.stateKey === 'settings.bridge.stateVersionMismatch'
                                                 ? t(row.stateKey, { version: row.serverVersion ?? '?' })
-                                                : t(row.stateKey)] }, row.plugin)))] })), clientView.pluginRouteIntercept !== undefined && !clientView.pluginRouteIntercept.installed && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.bridge.interceptOff', { reason: clientView.pluginRouteIntercept.reasons.join('; ') || '—' }) }))] }))] }))] }));
+                                                : t(row.stateKey)] }, row.plugin)))] })), clientView.pluginRouteIntercept !== undefined && !clientView.pluginRouteIntercept.installed && ((0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", "data-invalid": "true", children: t('settings.bridge.interceptOff', { reason: clientView.pluginRouteIntercept.reasons.join('; ') || '—' }) }))] }))] })), (0, jsx_runtime_1.jsx)("div", { className: "zr-settings-card", children: (0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-field", children: [(0, jsx_runtime_1.jsxs)("div", { className: "zr-settings-head", children: [(0, jsx_runtime_1.jsx)("span", { className: "zr-settings-head-title", children: t('settings.debug.title') }), (0, jsx_runtime_1.jsx)("span", { style: { flex: 1 } }), (0, jsx_runtime_1.jsx)(dsh_client_ui_primitives_1.Button, { variant: "outline", size: "sm", disabled: debugBusy, onClick: () => { void runDebugExport(); }, children: debugBusy ? t('settings.debug.exporting') : t('settings.debug.export') })] }), (0, jsx_runtime_1.jsx)("p", { className: "zr-settings-hint", children: t('settings.debug.hint') })] }) })] }));
 }
 /** Display name of a value's source layer for the invalid-saved-value note. */
 function sourceName(source, t) {