@crazx/dsh-api-session-controller 0.1.5-alpha.1.zw.3 → 0.1.5-rc.1.zw.1

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/api/session-controller/README.md
-README.md: ef6ffb35636f9f1a87c3b30832f68540d5dcd0ea
-README.zh.md: 97949e01379446e6171debb9fb1250e8088413f8
+README.md: 24cfbba626ddec510452e3b6c8bc4333c03876bd
+README.zh.md: 883fa2343693e6512638fa437a3f8bd0db09310c

package/README.md

@@ -28,7 +28,7 @@ History pages and follow opening snapshots carry one `{ type: 'event', event: Se
 
 The Client journal validates exact V3 event envelopes before publishing follow snapshots, live entries, or history pages. It reuses the browser-safe Session validators for required surface markers, exact replacement endpoints, earlier unique source seqs, embedded Assistant provenance, request-header omissions, and tool-error consistency. Invalid records fail without field stripping or normalization; range membership and source existence remain durable-log checks on the Host.
 
-Each endpoint states its activation policy. List reads only stored headers and projection-cache rows: it never calls per-session stat or opens a cold Session body. A current-format cache identity may supply every list hint; a lifecycle-matching predecessor cache may supply only its version-compatible title as a stale display fact, never as an authoritative fold seed. Search, attachment, history pages, log following, skill discovery, and workspace-path opening can inspect persistence without activating an Agent; `canOpenWorkspacePath()` reports native-opening availability without addressing a Session. Queue mutation and cancellation require live state; model, rename, prompt, and file-reference operations may resolve or resume an ordinary Session. Prompt rejects content with neither non-whitespace text nor an attachment before resolving the Agent or appending Session events; queue edits accept only non-empty text content. Prompt admission consumes opaque receipts from the injected [`fileUploads`](../../client/file-upload/README.md) Host service and resolves every same-Agent receipt before sending the complete ordered content list through `ctx.attachments`. Prompt retries whose `requestId` is already queued or logged return the original acceptance without inserting another message. Create and fork are the only operations that create a new Agent directly. The service applies one preset-aware resume policy and subagent ownership fence to its own methods and to the Typert Agent and Session lookups used by other Remote namespaces. Queue mutation has one narrow exception: a live child whose current projected identity is continuable and comes from its own non-seed suffix accepts the ordinary Edit, Remove, and QueueDock Steer actions across both inbox destinations. One-shot, missing, unknown, corrupt, seed-only, or cold children remain rejected without resume. The skill catalog uses a live Agent when present or the recorded preset's standing scope when cold, so listing never starts an Agent.
+Each endpoint states its activation policy. List reads only stored headers and projection-cache rows: it never calls per-session stat or opens a cold Session body. A current-format cache identity may supply every list hint; a lifecycle-matching predecessor cache may supply only its version-compatible title as a stale display fact, never as an authoritative fold seed. Search, attachment, history pages, log following, skill discovery, and workspace-path opening can inspect persistence without activating an Agent; `canOpenWorkspacePath()` reports native-opening availability without addressing a Session. Queue mutation and cancellation require live state; model, rename, prompt, and file-reference operations may resolve or resume an ordinary Session. Prompt rejects content with neither non-whitespace text nor an attachment before resolving the Agent or appending Session events; queue edits accept only non-empty text content. Prompt admission consumes opaque receipts from the injected [`fileUploads`](../../client/file-upload/README.md) Host service and resolves every same-Agent receipt before sending the complete ordered content list through `ctx.attachments`. Prompt retries whose `requestId` is already queued or logged return the original acceptance without inserting another message. Create and fork are the only operations that create a new Agent directly. The service applies one preset-aware resume policy and subagent ownership fence to its own methods and to the Typert Agent and Session lookups used by other Remote namespaces. Queue mutation has one narrow exception: a live child whose current projected identity is continuable and comes from its own non-seed suffix accepts the ordinary Edit, Remove, and QueueDock Steer actions across both inbox destinations. One-shot, missing, unknown, corrupt, seed-only, or cold children remain rejected without resume. The skill catalog uses a live Agent when present or the recorded preset's standing scope when cold, so listing never starts an Agent. The authenticated delivery routes use `workspaceDesktop()` for the serving Host name and file-manager behavior. `openWorkspacePath({ path, action: "reveal" })` delegates file-manager navigation to the native adapter; omitting `action` opens the default application.
 
 The Client adapter exposes `SessionEventStream`, a Gateway `RemoteJournalStream` bound to one ordinary or direct-subagent address. It opens follow before the initial page, publishes only contiguous `replace`, `prepend`, `append`, and `settle-assistant` changes, and repairs reconnect or sequence gaps through a tail page. Backwards paging has two verbs: `loadOlder()` pulls one 50-message page, and `loadThrough(seq)` — the turn-jump loader — loops 200-message pages until the window covers the target seq, lowering a shared target on repeated calls, stopping on a page that makes no progress, and reporting busy through the same `loadingOlder` snapshot bit. The Web adapter explicitly opts into cursorless Assistant frames: each opening carries the active attempt's `startedAfterSeq`, `nextIndex`, and compact stream, and every stream member becomes a Client-only `assistant/live-chunk` entry ordered between durable cursors. The Host captures a follower-local arrival ordinal with that baseline and suppresses buffered frames at or before the cut; a replacement Agent may restart frame revision at one. A durable `assistant/message` or `assistant/attempt` arriving after an active opening stays staged only when its seq follows `startedAfterSeq` and its Turn and Step match; the matching end type, seq, and index publishes one named settlement delta that retires the attempt's transient rows and adds the durable entry while earlier same-step retries remain visible. Revision, dense-index, or settlement gaps for a known attempt reopen follow, while a controller that missed the start ignores unknown-attempt frames and publishes their durable settlement normally. An abandoned end publishes a settlement delta without a durable entry so its transient rows retire immediately. A durable gap-repair page has no Assistant baseline, so its held notification reopens follow once for a paired page and baseline. Every history record covers exactly its event seq. A business, persistence, or unresolved continuity failure terminates the stream, while only physical carrier loss selects automatic resumption. `SessionControlStream` is a Gateway `RemoteSnapshotStream`; every generation opens with a complete process-local baseline, so reconnect replaces queue, jobs, and projection state instead of treating transient values as durable events. For each inbox change, the Host publishes the projection frame first and derives the queue replacement from that same validated post-fold value, so listener registration order cannot produce a stale queue frame.Client Agent contexts provide the identity used by the independent [`fileUpload`](../../client/file-upload/README.md) service; Session objects expose lifecycle, prompt, queue, and history operations rather than file transfer.
 

package/README.zh.md

@@ -8,7 +8,7 @@ kind: "package-reference"
 
 ## 概述
 
-`@deepseek-ai/dsh-api-session-controller` 拥有 Host 的 `ctx.sessionController` 服务，以及生成的 Client `session`、`skills` 和 `fileReferences` Remote namespace。它提供 Session 生命周期与历史、Host generation 模型目录、工作区路径打开、用户可调用 skill 发现和面向 Agent 的文件引用。当 Client 需要按 Session 寻址的操作时，请通过 API Gateway 使用它。
+`@deepseek-ai/dsh-api-session-controller` 拥有 Host 的 `ctx.sessionController` 服务，以及生成的 Client `session`、`skills` 和 `fileReferences` Remote namespace。它提供 Session 生命周期与历史、Host generation 模型目录、工作区路径打开、用户可调用 skill（技能）发现和 Agent（智能体）范围的文件引用。当 Client 需要按 Session 寻址的操作时，请通过 API Gateway 使用它。
 
 ## 目录
 
@@ -24,21 +24,21 @@ kind: "package-reference"
 <a id="use-this-package"></a>
 ## 使用本包
 
-历史页与 follow opening snapshot 为每个持久 Session event 携带一条 `{ type: 'event', event: SessionWireEvent }` record。Client 把每条已接受 record 保留为一个持久 `SessionEventLikeEntry`；Assistant token 边界保留在 `assistant/message` 或 `assistant/attempt` 的紧凑 stream 内。工具参数、结果内容、失败信息和 `tool/result.data.meta` 原样通过；controller 不解析 Tool definition、不运行 presenter，也不附加 UI 数据。
+历史页与 follow opening 快照为每个持久 Session 事件携带一条 `{ type: 'event', event: SessionWireEvent }` record。Client 把每条已接受 record 保留为一个持久 `SessionEventLikeEntry`；Assistant token 边界保留在 `assistant/message` 或 `assistant/attempt` 的紧凑流内。工具参数、结果内容、失败信息和 `tool/result.data.meta` 原样通过；控制器不解析工具定义、不运行展示转换器，也不附加 UI 数据。
 
-Client journal 在发布 follow snapshot、live entry 或历史页之前验证精确的 V3 event envelope。它复用浏览器安全的 Session validator，检查必需的 surface marker、精确的 replacement endpoint、更早且唯一的 source seq、内嵌 Assistant 来源、request header 可选字段的省略规则以及 tool error 一致性。无效 record 直接失败，不删除字段或归一化；范围成员与来源存在性仍由 Host 的持久日志检查。
+Client journal 在发布 follow 快照、live entry 或历史页之前验证精确的 V3 事件 envelope。它复用浏览器安全的 Session validator，检查必需的 surface marker、精确的 replacement endpoint、更早且唯一的 source seq、内嵌 Assistant 来源、request header 可选字段的省略规则以及工具错误一致性。无效 record 直接失败，不删除字段或归一化；范围成员与来源存在性仍由 Host 的持久日志检查。
 
-每个 endpoint 都声明自己的激活策略。列表只读取持久化 header 与 projection cache row，绝不调用逐 Session stat 或打开冷 Session body。当前格式 cache identity 可以提供全部列表 hint；生命周期匹配的 predecessor cache 只能提供版本兼容的 title，作为可能过时的展示事实，绝不能作为权威 fold seed。搜索、附件、历史页、日志跟随、skill 发现和工作区路径打开可以在不激活 Agent 的情况下检查 persistence；`canOpenWorkspacePath()` 无需指定 Session 即可报告原生打开能力。queue 变更与取消要求 live 状态；模型、重命名、prompt 和文件引用操作可以解析或恢复普通 Session。prompt 会在解析 Agent 或追加 Session event 前，拒绝既没有非空白文本也没有附件的 content；queue edit 只接受非空文本 content。prompt 准入从注入的 [`fileUploads`](../../client/file-upload/README.zh.md) Host 服务取得不透明凭证，在把完整有序内容列表交给 `ctx.attachments` 前解析每个属于同一 Agent 的凭证。`requestId` 已进入 queue 或日志时，prompt 重试直接返回原来的接受结果，不会重复插入消息。只有 create 与 fork 会直接创建新 Agent。该服务把同一套感知 preset 的恢复策略和 subagent ownership fence 同时用于自身方法，以及其他 Remote namespace 使用的 Typert Agent 与 Session lookup。Queue 变更只有一个狭窄例外：当前 projection identity 为 continuable 且来自自身非 seed suffix 的在线 child，可以在两个 inbox 目标上使用普通 Edit、Remove 与 QueueDock Steer action。One-shot、缺失、未知、损坏、仅含 seed identity 或冷 child 继续被拒绝，且不会恢复。skill 目录优先使用已有 live Agent，否则使用所记录 preset 的常驻 scope，因此列表查询绝不会启动 Agent。
+每个 endpoint 都声明自己的激活策略。列表只读取持久化 header 与 projection cache row，绝不调用逐 Session stat 或打开冷 Session body。当前格式 cache identity 可以提供全部列表 hint；生命周期匹配的 predecessor cache 只能提供版本兼容的 title，作为可能过时的展示事实，绝不能作为权威 fold seed。搜索、附件、历史页、日志跟随、skill 发现和工作区路径打开可以在不激活 Agent 的情况下检查 persistence；`canOpenWorkspacePath()` 无需指定 Session 即可报告原生打开能力。queue 变更与取消要求 live 状态；模型、重命名、prompt 和文件引用操作可以解析或恢复普通 Session。提示词会在解析 Agent 或追加 Session 事件前，拒绝既没有非空白文本也没有附件的 content；queue edit 只接受非空文本 content。prompt 准入从注入的 [`fileUploads`](../../client/file-upload/README.zh.md) Host 服务取得不透明凭证，在把完整有序内容列表交给 `ctx.attachments` 前解析每个属于同一 Agent 的凭证。`requestId` 已进入 queue 或日志时，prompt 重试直接返回原来的接受结果，不会重复插入消息。只有 create 与 fork 会直接创建新 Agent。该服务把同一套感知 preset 的恢复策略和 subagent ownership fence 同时用于自身方法，以及其他 Remote namespace 使用的 Typert Agent 与 Session lookup。Queue 变更只有一个狭窄例外：当前 projection identity 为 continuable 且来自自身非 seed suffix 的在线 child，可以在两个 inbox 目标上使用普通 Edit、Remove 与 QueueDock Steer action。One-shot、缺失、未知、损坏、仅含 seed identity 或冷 child 继续被拒绝，且不会恢复。skill 目录优先使用已有 live Agent，否则使用所记录 preset 的常驻 scope，因此列表查询绝不会启动 Agent。经过鉴权的文件交付路由通过 `workspaceDesktop()` 获取提供服务的 Host 名称和文件管理器行为。`openWorkspacePath({ path, action: "reveal" })` 将文件管理器导航委托给原生适配器；省略 `action` 时打开默认应用。
 
-Client adapter 提供 `SessionEventStream`，即绑定到一个普通 Session 或 direct subagent address 的 Gateway `RemoteJournalStream`。它在读取首个 page 前打开 follow，只发布连续的 `replace`、`prepend`、`append` 与 `settle-assistant` 变更，并通过 tail page 修复重连或 seq 缺口。向后分页有两个动词：`loadOlder()` 拉一页 50 条 message，而 `loadThrough(seq)`——轮次跳转加载器——按 200 条 message 一页循环拉取直到窗口覆盖目标 seq，重复调用会下调共享目标，遇到无进展的页即停止，忙碌状态复用同一个 `loadingOlder` 快照位。Web adapter 显式选择接收无 cursor 的 Assistant frame：每个 opening 携带活跃 attempt 的 `startedAfterSeq`、`nextIndex` 与紧凑 stream，每个 stream member 都成为排在持久 cursor 之间的 Client-only `assistant/live-chunk` 条目。Host 会随该 baseline 捕获 follower 本地到达序号，并抑制该 cut 及之前的 buffered frame；replacement Agent 可以从 revision 一重新开始。活跃 opening 之后到达的持久 `assistant/message` 或 `assistant/attempt` 只有在其 seq 晚于 `startedAfterSeq` 且 Turn 与 Step 匹配时才会保持暂存；匹配的 end type、seq 与 index 会发布一个具名 settlement delta，删除该 attempt 的瞬态 row、加入持久条目，并保留同一步骤中更早的 retry。已知 attempt 的 revision、密集 index 或 settlement 缺口会重新打开 follow；若 controller 错过 start，则忽略 unknown-attempt frame，并正常发布其持久 settlement。Abandoned end 会发布不含持久条目的 settlement delta，使瞬态 row 立即退出。持久缺口修复 page 不携带 Assistant baseline，因此 held notification 会重新打开 follow 一次，以取得配对的 page 与 baseline。每条历史 record 只覆盖自身的 event seq。业务、persistence 或无法恢复的连续性错误会终止 stream，只有物理载体断开才触发自动恢复。`SessionControlStream` 是 Gateway `RemoteSnapshotStream`；每代都以完整的进程本地 baseline 开始，因此重连会替换 queue、jobs 和 projection 状态，而不会把瞬态值当作 durable event。每次 inbox 变更时，Host 会先发布 projection frame，再从同一份已校验的折叠后值派生 queue replacement，因此监听器注册顺序不会产生陈旧的 queue frame。Client Agent context 提供独立 [`fileUpload`](../../client/file-upload/README.zh.md) 服务使用的身份；Session 对象提供生命周期、prompt、queue 与历史操作，不提供文件传输。
+Client 适配器提供 `SessionEventStream`，即绑定到一个普通 Session 或 direct subagent address 的 Gateway `RemoteJournalStream`。它在读取首个 page 前打开 follow，只发布连续的 `replace`、`prepend`、`append` 与 `settle-assistant` 变更，并通过 tail page 修复重连或 seq 缺口。向后分页有两个动词：`loadOlder()` 拉一页 50 条消息，而 `loadThrough(seq)`——轮次跳转加载器——按每页 200 条消息循环拉取直到窗口覆盖目标 seq，重复调用会下调共享目标，遇到无进展的页即停止，忙碌状态复用同一个 `loadingOlder` 快照位。Web 适配器显式选择接收无 cursor 的 Assistant frame：每个 opening 携带活跃 attempt 的 `startedAfterSeq`、`nextIndex` 与紧凑 stream，每个 stream member 都成为排在持久 cursor 之间的 Client-only `assistant/live-chunk` 条目。Host 会随该 baseline 捕获 follower 本地到达序号，并抑制该 cut 及之前的 buffered frame；replacement Agent 可以从 revision 一重新开始。活跃 opening 之后到达的持久 `assistant/message` 或 `assistant/attempt` 只有在其 seq 晚于 `startedAfterSeq` 且轮次与步骤匹配时才会保持暂存；匹配的 end type、seq 与 index 会发布一个具名 settlement delta，删除该 attempt 的瞬态 row、加入持久条目，并保留同一步骤中更早的 retry。已知 attempt 的 revision、密集 index 或 settlement 缺口会重新打开 follow；若 controller 错过 start，则忽略 unknown-attempt frame，并正常发布其持久 settlement。Abandoned end 会发布不含持久条目的 settlement delta，使瞬态 row 立即退出。持久缺口修复 page 不携带 Assistant baseline，因此 held notification 会重新打开 follow 一次，以取得配对的 page 与 baseline。每条历史 record 只覆盖自身的事件 seq。业务、persistence 或无法恢复的连续性错误会终止 stream，只有物理载体断开才触发自动恢复。`SessionControlStream` 是 Gateway `RemoteSnapshotStream`；每代都以完整的进程本地 baseline 开始，因此重连会替换 queue、jobs 和 projection 状态，而不会把瞬态值当作持久事件。每次 inbox 变更时，Host 会先发布 projection frame，再从同一份已校验的折叠后值派生 queue replacement，因此监听器注册顺序不会产生陈旧的 queue frame。Client Agent 上下文提供独立 [`fileUpload`](../../client/file-upload/README.zh.md) 服务使用的身份；Session 对象提供生命周期、prompt、queue 与历史操作，不提供文件传输。
 
-Session 对象还承载本地提交回显：`session.beginSubmission` 在调用方序列化与 prompt 之前，同步把一条回显写入 `SessionSnapshot.pendingSubmissions`，会话 UI 因此能在点击提交的当帧显示消息。回显按顺序存放图片预览与持久文件引用。Session 根据当前运行状态与请求的投递模式推导其 `transcript`、`queued` 或 `steering` 位置，并在序列化期间保留该位置。prompt 的 `requestId` 是关联标识：Host 把它回显为 durable user source 的 `rpcId`，queue occurrence 也把它投影为 `SessionQueuedItem.rpcId`。回显在观察到其 durable event 或 queue occurrence 后延迟一个动画帧退休，带标识的 prompt 失败或被放弃时立即退休，销毁时按 failed 退休。每次退休恰好触发一次 `onRetire`；observed 退休还会携带有序的持久附件引用，让 composer 释放成功卡片并保留失败草稿。回显只存在于 Client 内存；刷新与重连只从 durable event 重建会话。
+Session 对象还承载本地提交回显：`session.beginSubmission` 在调用方序列化与提示词之前，同步把一条回显写入 `SessionSnapshot.pendingSubmissions`，会话 UI 因此能在点击提交的当帧显示消息。回显按顺序存放图片预览与持久文件引用。Session 根据当前运行状态与请求的投递模式推导其 `transcript`、`queued` 或 `steering` 位置，并在序列化期间保留该位置。提示词的 `requestId` 是关联标识：Host 把它回显为 durable user source 的 `rpcId`，queue occurrence 也把它投影为 `SessionQueuedItem.rpcId`。回显在观察到其 durable event 或 queue occurrence 后延迟一个动画帧退休，带标识的提示词失败或被放弃时立即退休，销毁时按 failed 退休。每次退休恰好触发一次 `onRetire`；observed 退休还会携带有序的持久附件引用，让 composer 释放成功卡片并保留失败草稿。回显只存在于 Client 内存；刷新与重连只从持久事件重建会话。
 
 
 <a id="session-media-references"></a>
 ## 会话媒体引用
 
-当 `connection`、`fs` 与 `attachments` 均被组合时，`SessionMediaReferences` 在鉴权 `connection.fetch` 通道上挂载 `GET|HEAD /api/file?path=<绝对路径>`。它通过 `ctx.fs` 读取普通文件，包括已注册工作区之外的临时路径与远程提供方中的文件。目录包含关系与 MIME 类别均不限制访问；`mime-types` 提供响应类型，未知扩展名使用 `application/octet-stream`。GET 复用 `readBytes` 执行读取前及读取中的字节限制；HEAD 只读取元数据。所有文件均使用 `ctx.attachments.imageLimits.maxImageBytes`（通常为 20 MiB）；超过此上限返回 413。响应包含完整文件，忽略 Range，并携带 `private, no-store`、`nosniff` 与 sandbox CSP，使直接打开的 HTML/SVG 无法以 API 源身份执行脚本。客户端重写位于 `ui-chat`（`AssistantMarkdown`）；音视频文件响应已可用，Markdown 音视频播放器节点仍是独立工作。
+当 `connection`、`fs` 与 `attachments` 均被组合时，`SessionMediaReferences` 在鉴权 `connection.fetch` 通道上挂载 `GET|HEAD /api/file?path=<绝对路径>`。它通过 `ctx.fs` 读取普通文件，包括已注册工作区之外的临时路径与远程提供方中的文件。目录包含关系与 MIME 类别均不限制访问；`mime-types` 提供响应类型，未知扩展名使用 `application/octet-stream`。GET 复用 `readBytes` 执行读取前及读取中的字节限制；HEAD 只读取元数据。所有文件均使用 `ctx.attachments.imageLimits.maxImageBytes`（通常为 20 MiB）；超过此上限返回 413。响应包含完整文件，忽略 Range，并携带 `private, no-store`、`nosniff` 与沙箱 CSP，使直接打开的 HTML/SVG 无法以 API 源身份执行脚本。客户端重写位于 `ui-chat`（`AssistantMarkdown`）；音视频文件响应已可用，Markdown 音视频播放器节点仍是独立工作。
 
 -----
 
@@ -56,11 +56,11 @@ Session 对象还承载本地提交回显：`session.beginSubmission` 在调用
 <a id="model-experience"></a>
 ## 模型体验
 
-无，因为被调用的 Agent 命令拥有任何模型可见效果。
+无；任何模型可见效果都由被调用的 Agent 命令负责。
 
 #### KV Cache 影响
 
-无直接影响；模型请求仍由 Agent 和 LLM 包拥有。
+无直接影响；模型请求仍由 Agent 和 LLM（大语言模型）包拥有。
 
 ## 已知限制与延期工作
 
@@ -69,7 +69,7 @@ Session 对象还承载本地提交回显：`session.beginSubmission` 在调用
 - 图片字节上限不校验解码后的尺寸或像素数。
 - Control baseline 表示进程本地状态，因此 Host 重启后无法重建 jobs。
 - follow 恢复失败会对调用方可见，而不会无限重试。
-- 浏览器原始字节上传使用一次不带断点续传偏移的流式 HTTP 请求；重试会从第一个字节重新传输整个文件。
+- 浏览器原始字节上传使用一次不带断点续传偏移的流式 HTTP 请求；重试会从第零字节重新传输整个文件。
 - 文件引用补全使用共享 Agent lookup，因此可能恢复冷 Session；`skills/list` 目录是不激活 Agent 的 skill 元数据读取路径。
 
 

package/lib/client.js

@@ -127,6 +127,7 @@ window.__ModuleLoader__.load({
 			"compaction/prune",
 			"compaction/start",
 			"compaction/summary",
+			"deliverables/presented",
 			"feedback/message-delete",
 			"feedback/message-put",
 			"feedback/record",
@@ -148,6 +149,7 @@ window.__ModuleLoader__.load({
 			"session/title-llm-request",
 			"step/end",
 			"step/start",
+			"subagent/catalog",
 			"subagent/descriptor",
 			"subagent/model-selection-policy",
 			"system/message",
@@ -2179,87 +2181,6 @@ window.__ModuleLoader__.load({
 			return refs;
 		}
 		//#endregion
-		//#region lib/types/client/sessions/selection-history.js
-		function sameSelection(left, right) {
-			return left.sessionId === right.sessionId && left.address?.parentSessionId === right.address?.parentSessionId && left.address?.childSessionId === right.address?.childSessionId;
-		}
-		/**
-		* Bounded LIFO-with-cursor history. Recording a selection made outside
-		* navigation collapses consecutive repeats, truncates the forward tail after
-		* a backtrack, and drops the oldest entry past the bound. Pruning removes
-		* deleted sessions wherever they sit and re-points the cursor onto the same
-		* logical position.
-		*/
-		var SelectionHistory = class {
-			limit;
-			/** Oldest-first; the cursor sits ON the current entry (-1 while empty). */
-			#entries = [];
-			#cursor = -1;
-			constructor(limit = 50) {
-				this.limit = limit;
-			}
-			get entries() {
-				return this.#entries;
-			}
-			get cursor() {
-				return this.#cursor;
-			}
-			/** Whether an older entry exists to go back to. */
-			canBack() {
-				return this.#cursor > 0;
-			}
-			/** Whether a newer entry exists to go forward to. */
-			canForward() {
-				return this.#cursor < this.#entries.length - 1;
-			}
-			/**
-			* Record one selection made outside history navigation.
-			* @param entry - the selection (session, addressed subagent, or clear).
-			*/
-			record(entry) {
-				const current = this.#entries[this.#cursor];
-				if (current !== void 0 && sameSelection(current, entry)) return;
-				this.#entries.length = this.#cursor + 1;
-				this.#entries.push(entry);
-				if (this.#entries.length > this.limit) this.#entries.shift();
-				this.#cursor = this.#entries.length - 1;
-			}
-			/**
-			* Step one entry back.
-			* @returns the entry to replay, or undefined at the oldest bound.
-			*/
-			back() {
-				if (!this.canBack()) return void 0;
-				this.#cursor -= 1;
-				return this.#entries[this.#cursor];
-			}
-			/**
-			* Step one entry forward.
-			* @returns the entry to replay, or undefined at the newest bound.
-			*/
-			forward() {
-				if (!this.canForward()) return void 0;
-				this.#cursor += 1;
-				return this.#entries[this.#cursor];
-			}
-			/**
-			* Drop every entry referencing the removed session wherever it sits,
-			* keeping the cursor on the same logical position.
-			* @param sessionId - the removed session.
-			*/
-			prune(sessionId) {
-				let removedBeforeCursor = 0;
-				for (let index = this.#entries.length - 1; index >= 0; index -= 1) {
-					const entry = this.#entries[index];
-					if (entry === void 0 || entry.sessionId !== sessionId) continue;
-					this.#entries.splice(index, 1);
-					if (index <= this.#cursor) removedBeforeCursor += 1;
-				}
-				this.#cursor -= removedBeforeCursor;
-				if (this.#cursor > this.#entries.length - 1) this.#cursor = this.#entries.length - 1;
-			}
-		};
-		//#endregion
 		//#region lib/types/client/sessions/manager.js
 		function sessionSeqCursor(value) {
 			return value === -1 ? -1 : SessionSeq(value);
@@ -2310,10 +2231,6 @@ window.__ModuleLoader__.load({
 			*/
 			jobsBySession = /* @__PURE__ */ new Map();
 			selected;
-			/** Toolbar back/forward history over selections (session, addressed child, or clear). */
-			selectionHistory = new SelectionHistory();
-			/** While replaying a history entry, the selections it makes must not re-record. */
-			navigatingHistory = false;
 			listSnapshotCache;
 			/** Entry-identity cache (reference stability): list rebuilds reuse the previous entry
 			*  object when every field matches — wire refreshes mint all-new summary objects, so identity
@@ -2331,10 +2248,6 @@ window.__ModuleLoader__.load({
 				this.remote = remote;
 				this.selected = restoredSelection;
 				if (restoredAddress !== void 0) this.addresses.set(restoredAddress.childSessionId, restoredAddress);
-				this.selectionHistory.record(restoredSelection === void 0 ? {} : {
-					sessionId: restoredSelection,
-					...restoredAddress !== void 0 ? { address: restoredAddress } : {}
-				});
 				this.listSnapshotCache = this.buildListSnapshot();
 			}
 			/**
@@ -2348,10 +2261,6 @@ window.__ModuleLoader__.load({
 				this.sessions.get(sessionId)?.configureSubagent(address, address === void 0 ? void 0 : this.catalogs.get(address.parentSessionId)?.parentAvailable);
 				this.selected = sessionId;
 				this.completedNotifications.delete(sessionId);
-				if (!this.navigatingHistory) this.selectionHistory.record(address === void 0 ? { sessionId } : {
-					sessionId,
-					address
-				});
 				this.refreshSubagents(sessionId);
 				this.notifier.notifyNow();
 			}
@@ -2367,69 +2276,14 @@ window.__ModuleLoader__.load({
 				this.sessions.get(address.childSessionId)?.configureSubagent(address, catalog?.parentAvailable);
 				this.selected = address.childSessionId;
 				this.completedNotifications.delete(address.childSessionId);
-				if (!this.navigatingHistory) this.selectionHistory.record({
-					sessionId: address.childSessionId,
-					address
-				});
 				this.refreshSubagents(address.childSessionId);
 				this.notifier.notifyNow();
 			}
 			/** Clear the selection (the layout falls to the no-session view state). */
 			clearSelection() {
 				this.selected = void 0;
-				if (!this.navigatingHistory) this.selectionHistory.record({});
 				this.notifier.notifyNow();
 			}
-			/** Whether an older selection exists to go back to. */
-			canBack() {
-				return this.selectionHistory.canBack();
-			}
-			/** Whether a newer selection exists to go forward to. */
-			canForward() {
-				return this.selectionHistory.canForward();
-			}
-			/**
-			* Select the previous history entry. Unreachable entries (sessions removed
-			* before their prune landed) are pruned and the walk continues to older
-			* entries; the walk stops silently at the oldest bound.
-			*/
-			back() {
-				while (this.selectionHistory.canBack()) {
-					const entry = this.selectionHistory.back();
-					if (entry === void 0) return;
-					if (!this.canReplay(entry)) {
-						if (entry.sessionId !== void 0) this.selectionHistory.prune(entry.sessionId);
-						continue;
-					}
-					this.replaySelection(entry);
-					return;
-				}
-			}
-			/**
-			* Select the next history entry after a back navigation; silently a
-			* no-op at the newest bound.
-			*/
-			forward() {
-				const entry = this.selectionHistory.forward();
-				if (entry === void 0) return;
-				if (this.canReplay(entry)) this.replaySelection(entry);
-				else if (entry.sessionId !== void 0) this.selectionHistory.prune(entry.sessionId);
-			}
-			/** Whether a history entry names a session that is still listed or addressed. */
-			canReplay(entry) {
-				if (entry.sessionId === void 0) return true;
-				return this.summaries.some((summary) => summary.sessionId === entry.sessionId) || this.addresses.has(entry.sessionId);
-			}
-			/** Replay one entry without recording it back into the history. */
-			replaySelection(entry) {
-				this.navigatingHistory = true;
-				try {
-					if (entry.sessionId === void 0) this.clearSelection();
-					else this.select(entry.sessionId);
-				} finally {
-					this.navigatingHistory = false;
-				}
-			}
 			/**
 			* Return the durable catalog address retained for one child.
 			* @param sessionId - possible addressed child id.
@@ -2646,7 +2500,6 @@ window.__ModuleLoader__.load({
 							let summaries = baseline;
 							for (const mutation of mutations) {
 								summaries = applyMutation(summaries, mutation);
-								if (mutation.kind === "remove") this.selectionHistory.prune(mutation.sessionId);
 								this.summaries = summaries;
 								this.syncCompletedNotifications();
 							}
@@ -2787,7 +2640,6 @@ window.__ModuleLoader__.load({
 			recordMutation(mutation) {
 				this.listMutations?.push(mutation);
 				this.summaries = applyMutation(this.summaries, mutation);
-				if (mutation.kind === "remove") this.selectionHistory.prune(mutation.sessionId);
 				this.syncCompletedNotifications();
 				this.notifier.markDirty();
 			}
@@ -3282,22 +3134,6 @@ window.__ModuleLoader__.load({
 			clear() {
 				this.manager.clearSelection();
 			}
-			/** Whether the transient selection history has an older entry to go back to. */
-			canBack() {
-				return this.manager.canBack();
-			}
-			/** Whether the transient selection history has a newer entry to go forward to. */
-			canForward() {
-				return this.manager.canForward();
-			}
-			/** Select the previous history entry (prunes unreachable entries on the way). */
-			back() {
-				this.manager.back();
-			}
-			/** Select the next history entry after a back navigation. */
-			forward() {
-				this.manager.forward();
-			}
 			/**
 			* Refresh the real Session baseline, reusing an in-flight pull.
 			* @returns completion of the current or newly started baseline pull.

package/lib/index.js

@@ -1,6 +1,7 @@
+import { hostname } from "node:os";
 import z from "@deepseek-ai/schemastery";
 import { AssistantStreamAccumulator, ReasoningEffortId, assistantStreamChunks, createUserMessage, errorChain, freezeMessage } from "@deepseek-ai/dsh-llm";
-import { canOpenNativePath, openNativePath } from "@deepseek-ai/dsh-native-command";
+import { canOpenNativePath, nativeFileManager, openNativePath, revealNativePath } from "@deepseek-ai/dsh-native-command";
 import { Remote, RemoteError, TypertRemoteService, remoteErrorOf } from "@deepseek-ai/dsh-typert-protocol";
 import { mkdir } from "node:fs/promises";
 import { installModelSelection } from "@deepseek-ai/dsh-agent";
@@ -2730,6 +2731,7 @@ let SessionController = (() => {
 		history;
 		listState;
 		openPath;
+		revealPath;
 		canOpenPath;
 		promotions = /* @__PURE__ */ new Set();
 		/**
@@ -2756,6 +2758,7 @@ let SessionController = (() => {
 			});
 			this.listState = new ApiSessionList(ctx);
 			this.openPath = internals.openPath ?? openNativePath;
+			this.revealPath = internals.revealPath ?? revealNativePath;
 			this.canOpenPath = internals.canOpenPath ?? (() => config.nativeOpen ?? (internals.openPath !== void 0 || canOpenNativePath()));
 			ctx.plugin(SessionFileReferences);
 			ctx.plugin(SessionMediaReferences);
@@ -2879,6 +2882,18 @@ let SessionController = (() => {
 			return this.canOpenPath();
 		}
 		/**
+		* Describe the serving desktop for authenticated file-action routes.
+		* @returns Host name, configured availability, and platform-specific file-manager behavior.
+		*/
+		workspaceDesktop() {
+			const fileManager = nativeFileManager();
+			return {
+				name: hostname(),
+				available: fileManager !== null && this.canOpenPath(),
+				fileManager
+			};
+		}
+		/**
 		* Open one path prepared by a Session-aware caller on the Host desktop.
 		* @param request - path after best-effort Session workspace resolution.
 		* @param signal - caller lifetime; abort terminates the native command.
@@ -2889,7 +2904,8 @@ let SessionController = (() => {
 			if (request.path.length === 0) throw new RemoteError("gateway/bad-request", "session.openWorkspacePath requires a non-empty path", {});
 			signal.throwIfAborted();
 			try {
-				await this.openPath(request.path, signal);
+				if (request.action === "reveal") await this.revealPath(request.path, signal);
+				else await this.openPath(request.path, signal);
 				return { opened: true };
 			} catch (error) {
 				if (signal.aborted) throw new RemoteError("gateway/cancelled", "path open was aborted", {});