@deepseek-ai/dsh-client-ui-open-in-app 0.1.3-alpha.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.i18n.yaml

@@ -0,0 +1,6 @@
+# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
+# side as of the last confirmed-consistent state. Both languages carry equal authority;
+# after editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write packages/client/ui-open-in-app/README.md
+README.md: d242d5a84dffbf0895485f7c79eafd5e332fe446
+README.zh.md: e50e08ab52ce8462af47d75f09a276674d4f4652

package/README.md

@@ -0,0 +1,83 @@
+---
+description: "Web Session-header \"Open In...\" split button: launches the remembered application on the session workspace directory and lists every application the host probed as installed."
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-client-ui-open-in-app
+
+English | [中文](README.zh.md)
+
+## Summary
+
+This package provides the browser surface of the open-in-app feature: a Session-header split button whose main button opens the current session's workspace directory (the summary's `cwd`) in the remembered application, and whose chevron lists every catalog application the host probed as installed. Availability, icons, and launches come from the host routes of [`dsh-host-open-in-app`](../../host/open-in-app/README.md); mount the two packages together. A session without a workspace directory, or a host where nothing nameable is installed, renders no button at all.
+
+## Table of Contents
+
+- [Use this package](#use-this-package)
+- [Understand the implementation](#understand-the-implementation)
+- [Further Exploration](#further-exploration)
+- [Model Experience](#model-experience)
+- [Known Limitations and Deferred Work](#known-limitations-and-deferred-work)
+- [Dev Note](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## Use this package
+
+Mount this plugin in the Web composition beside [`dsh-host-open-in-app`](../../host/open-in-app/README.md); the pair composes the whole feature in two cordis.yml rows and this row takes no config. The Session header grows an "Open In..." split button whenever the host probed at least one installed catalog application and the session has a known workspace directory.
+
+### What to expect
+
+The main button shows the remembered application's icon — the real application icon wherever the host extracts one (macOS bundle icons, Windows executable icons, Linux theme icons), a generic glyph where it serves none — and a design-system tooltip ("Open locally"); clicking launches immediately. The chevron opens a dense menu of the installed applications with the remembered one marked by a filled row. Availability is read once per page from the host; the last chosen application persists in the browser (`dsh.open-in-app.choice`), and a choice that is no longer installed falls back to the first available entry. A launch that finishes quickly leaves the button untouched — the dimmed busy treatment appears only after 250 ms in flight — and a failed launch shows the error tooltip and a red outline for two seconds. All copy lives in the bilingual `open-in-app` locale namespace; an application id the dictionaries cannot name is not offered.
+
+-----
+
+<a id="understand-the-implementation"></a>
+## Understand the implementation
+
+<details>
+<summary>Implementation internals — click to expand</summary>
+
+The plugin registers the split button on `conversation.session.header.utilities` through the standard slot/inject currency and registers the `open-in-app` dictionaries as one effect. A page-lifetime controller ([`src/client/controller.ts`](src/client/controller.ts)) owns the once-per-page availability read, the persisted choice snapshot store, and the launch POST; the component receives both stores through the inject `hooks` compartment, so every Session header shares one truth. Route paths and wire payload types are inlined from the host package's browser-safe `@deepseek-ai/dsh-host-open-in-app/shared` subpath. In-flight launches are guarded by a ref — repeat clicks and menu picks during a launch are ignored whole (a pick would otherwise persist a choice the gesture never opened) — and the busy/error dress is timer-driven around the `launch` promise. The node half is an empty `apply` that keeps the plugin on the host roster.
+
+</details>
+
+-----
+
+<a id="further-exploration"></a>
+## Further Exploration
+
+- [dsh-host-open-in-app](../../host/open-in-app/README.md) — the host routes serving availability, icons, and launches, and the catalog behind them.
+- [dsh-session-log-export](../../session-query/session-log-export/README.md) — the sibling Session-header action.
+- [Web client architecture](../../../.agents/notes/implemented/architecture/2026-07-19-gui-web-client-architecture.md) — how browser plugin rows load and register slots.
+
+-----
+
+<a id="model-experience"></a>
+## Model Experience
+
+None, as the split button is browser chrome; nothing here reaches a model request.
+
+#### KV Cache effect
+
+None; this package neither assembles nor sends a provider request.
+
+## Known Limitations and Deferred Work
+
+<a id="known-limitations-and-deferred-work"></a>
+
+- **The dictionaries gate the menu.** A host catalog extension without a matching `app.<id>` entry in both dictionaries stays invisible instead of showing a raw id; extending the catalog means extending [`dsh-host-open-in-app`](../../host/open-in-app/README.md) and this package's locales together.
+- **Availability is read once per page.** An application installed while the page is open appears after a reload (and, host-side, after a host restart).
+
+<a id="dev-note"></a>
+### Dev Note
+
+<details>
+<summary>Working context for maintainers — click to expand</summary>
+
+The feature-level decisions, including the split into the host package and this surface, are recorded in the [promotion Agent Note](../../../.agents/notes/implemented/feature/2026-08-25-promote-open-anywhere-plugin.md).
+
+</details>
+
+**Runtime invariant:** No companion is published. The plugin registers one dictionary effect and one header-slot entry whose disposal the HMR-safety spec proves; availability and choice live in the controller's snapshot stores with no second copy to diverge.

package/README.zh.md

@@ -0,0 +1,83 @@
+---
+description: "Web 会话头部 \"Open In...\" 分体按钮：在记住的应用中打开会话 workspace 目录，并列出主机探测到已安装的全部应用。"
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-client-ui-open-in-app
+
+[English](README.md) | 中文
+
+## 概述
+
+本包提供 open-in-app 功能的浏览器表面：会话头部的一个分体按钮，主按钮在记住的应用中打开当前会话的 workspace 目录（会话摘要的 `cwd`），下拉箭头列出主机探测到已安装的全部目录应用。可用性、图标与启动均来自 [`dsh-host-open-in-app`](../../host/open-in-app/README.zh.md) 的主机路由；两个包应一起挂载。没有 workspace 目录的会话、或没装任何可命名应用的主机，完全不渲染按钮。
+
+## 目录
+
+- [使用本包](#use-this-package)
+- [理解实现](#understand-the-implementation)
+- [进一步探索](#further-exploration)
+- [模型体验](#model-experience)
+- [已知限制与延后工作](#known-limitations-and-deferred-work)
+- [开发备注](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## 使用本包
+
+把本插件与 [`dsh-host-open-in-app`](../../host/open-in-app/README.zh.md) 并排挂进 Web 组合；这对包用两行 cordis.yml 组成完整功能，本行不接受任何 config。只要主机探测到至少一个已安装的目录应用且会话有已知的 workspace 目录，会话头部就会出现 "Open In..." 分体按钮。
+
+### 预期行为
+
+主按钮显示记住的应用图标——凡主机能提取的都是应用真实图标（macOS bundle 图标、Windows 可执行文件图标、Linux 主题图标），提取不到时是通用占位图形——并带设计系统 tooltip（「在本地打开」）；点击立即启动。下拉箭头打开已安装应用的紧凑菜单，记住的条目以整行填充标记。可用性每页读取一次；上次选择的应用持久化在浏览器中（`dsh.open-in-app.choice`），不再安装的选择回退到第一个可用条目。快速完成的启动不改变按钮外观——变暗的等待态只在飞行超过 250 毫秒后出现——失败的启动显示错误 tooltip 与红色描边两秒。所有文案在双语 `open-in-app` locale 命名空间中；词典无法命名的应用 id 不会被提供。
+
+-----
+
+<a id="understand-the-implementation"></a>
+## 理解实现
+
+<details>
+<summary>实现内幕——点击展开</summary>
+
+插件经标准 slot/inject 通货把分体按钮注册到 `conversation.session.header.utilities`，并以一个 effect 注册 `open-in-app` 词典。一个页面生命周期的 controller（[`src/client/controller.ts`](src/client/controller.ts)）拥有每页一次的可用性读取、持久化选择的 snapshot store 与启动 POST；组件经 inject 的 `hooks` 隔间接收两个 store，因此所有会话头部共享同一份事实。路由路径与 wire 载荷类型从主机包的浏览器安全子路径 `@deepseek-ai/dsh-host-open-in-app/shared` 内联。飞行中的启动由 ref 守卫——启动期间的重复点击与菜单选择被整体忽略（否则会持久化一个该手势从未打开的选择）——busy/error 视觉由围绕 `launch` promise 的定时器驱动。节点半边是一个空 `apply`，让插件出现在主机侧的插件名册上。
+
+</details>
+
+-----
+
+<a id="further-exploration"></a>
+## 进一步探索
+
+- [dsh-host-open-in-app](../../host/open-in-app/README.zh.md)——提供可用性、图标与启动的主机路由，及其背后的目录。
+- [dsh-session-log-export](../../session-query/session-log-export/README.zh.md)——会话头部的姊妹动作。
+- [Web client 架构](../../../.agents/notes/implemented/architecture/2026-07-19-gui-web-client-architecture.zh.md)——浏览器插件行如何加载并注册 slot。
+
+-----
+
+<a id="model-experience"></a>
+## 模型体验
+
+无。分体按钮是浏览器 chrome；这里没有任何东西进入模型请求。
+
+#### KV 缓存影响
+
+无；本包从不组装或发送 provider 请求。
+
+## 已知限制与延后工作
+
+<a id="known-limitations-and-deferred-work"></a>
+
+- **词典把守菜单。** 主机目录的新条目若在两份词典中没有对应的 `app.<id>` 条目，将保持不可见而不是显示裸 id；扩展目录意味着同时扩展 [`dsh-host-open-in-app`](../../host/open-in-app/README.zh.md) 与本包的 locale。
+- **可用性每页只读一次。** 页面打开期间安装的应用要重新加载页面后才出现（主机侧还需主机重启）。
+
+<a id="dev-note"></a>
+### 开发备注
+
+<details>
+<summary>维护者工作语境——点击展开</summary>
+
+功能层面的各项决定，包括拆分为主机包与本表面包，记录在[转正 Agent Note](../../../.agents/notes/implemented/feature/2026-08-25-promote-open-anywhere-plugin.zh.md)。
+
+</details>
+
+**运行时不变量：** 不发布 companion。插件注册一个词典 effect 与一个头部 slot 条目，HMR 安全测试已证明其可处置；可用性与选择存于 controller 的 snapshot store，没有可能分叉的第二份副本。

package/lib/client.js

@@ -0,0 +1,431 @@
+window.__ModuleLoader__.load({
+	id: "@deepseek-ai/dsh-client-ui-open-in-app",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let _deepseek_ai_dsh_client_store = require("@deepseek-ai/dsh-client-store");
+		let react_jsx_runtime = require("react/jsx-runtime");
+		let react = require("react");
+		let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
+		//#region ../../host/open-in-app/src/shared.ts
+		/**
+		* Route paths and wire payloads shared verbatim by the host routes and the
+		* browser package (`@deepseek-ai/dsh-client-ui-open-in-app`), published as
+		* the `./shared` subpath. Browser-safe: constants and types only.
+		*/
+		/** GET route serving the probed application ids. */
+		const OPEN_IN_APP_APPS_ROUTE = "/open-in-app/apps";
+		/** GET prefix serving one PNG bundle icon per application id. */
+		const OPEN_IN_APP_ICON_PREFIX = "/open-in-app/icon";
+		/** POST route launching one application on one workspace directory. */
+		const OPEN_IN_APP_OPEN_ROUTE = "/open-in-app/open";
+		//#endregion
+		//#region lib/types/client/controller.js
+		/** Browser availability/choice state and the launch carrier for the split button. */
+		/** Resolve the browser's Host base with the connection carrier's null-origin fallback. */
+		function hostBase() {
+			const origin = globalThis.location?.origin;
+			return origin !== void 0 && origin !== "null" ? origin : "http://dsh.internal";
+		}
+		/**
+		* Owns the once-per-page availability read, the persisted last choice, and
+		* the launch POST. Availability and choice publish through uSES-safe sources
+		* so every Session header shares one truth.
+		*/
+		var OpenInAppController = class {
+			fetcher;
+			/** Installed app ids in host menu order; null until the host answered. */
+			apps = (0, _deepseek_ai_dsh_client_store.createSnapshotStore)(null);
+			/** Last chosen app id, or empty before the first choice, shared across sessions and browser restarts. */
+			choice = (0, _deepseek_ai_dsh_client_store.createSnapshotStore)("", { persist: { name: "dsh.open-in-app.choice" } });
+			loading;
+			/**
+			* @param fetcher - HTTP carrier for the apps read and the launch POST.
+			*/
+			constructor(fetcher = (input, init) => fetch(input, init)) {
+				this.fetcher = fetcher;
+			}
+			/**
+			* Read availability once per controller life; concurrent calls share the read.
+			* A failed read publishes an empty list, which renders no button at all.
+			* @returns after availability is published.
+			*/
+			load() {
+				this.loading ??= this.run();
+				return this.loading;
+			}
+			/**
+			* Remember one picked app id.
+			* @param appId - catalog id from the availability list.
+			*/
+			choose(appId) {
+				this.choice.set(appId);
+			}
+			/**
+			* Launch one installed app on a workspace directory.
+			* @param appId - catalog id from the availability list.
+			* @param path - the session's absolute workspace directory.
+			* @returns after the host acknowledged the launch; rejects on any failure.
+			*/
+			async launch(appId, path) {
+				const body = {
+					app: appId,
+					path
+				};
+				const response = await this.fetcher(new URL(OPEN_IN_APP_OPEN_ROUTE, hostBase()), {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify(body)
+				});
+				if (!response.ok) throw new Error(`open failed: HTTP ${String(response.status)}`);
+			}
+			async run() {
+				let apps = [];
+				try {
+					const response = await this.fetcher(new URL(OPEN_IN_APP_APPS_ROUTE, hostBase()), { headers: { accept: "application/json" } });
+					if (response.ok) {
+						const payload = await response.json();
+						if (Array.isArray(payload.apps)) apps = payload.apps.filter((id) => typeof id === "string");
+					}
+				} catch {}
+				this.apps.set(apps);
+			}
+		};
+		//#endregion
+		//#region \0dsh-css:/home/runner/work/deepseek-harness/deepseek-harness/packages/client/ui-open-in-app/src/client/OpenInAppAction.module.css.mjs
+		const css = ".CAgGvG_split{box-sizing:border-box;border:.5px solid var(--dsw-alias-border-l4);height:26px;font-family:var(--dsw-font-family);border-radius:13px;align-items:stretch;display:inline-flex;overflow:hidden}.CAgGvG_main,.CAgGvG_chevron{color:var(--dsw-alias-label-primary);cursor:pointer;white-space:nowrap;background:0 0;border:0;align-items:center;gap:5px;font-size:11px;font-weight:400;line-height:16px;display:inline-flex}.CAgGvG_main{padding:5px 6px 5px 7px}.CAgGvG_main:hover:not(:disabled),.CAgGvG_main:focus-visible,.CAgGvG_chevron:hover,.CAgGvG_chevron:focus-visible{background:var(--dsw-alias-interactive-bg-hover)}.CAgGvG_main:disabled{color:var(--dsw-alias-label-dimmed);cursor:wait}.CAgGvG_main[data-state=error]{color:var(--dsw-alias-state-error-primary);box-shadow:inset 0 0 0 1px var(--dsw-alias-state-error-primary)}.CAgGvG_chevron{border-left:.5px solid var(--dsw-alias-border-l4);color:var(--dsw-alias-label-secondary);padding:5px 6px 5px 4px}.CAgGvG_icon{flex:none}img.CAgGvG_icon{object-fit:contain;user-select:none;display:block}";
+		const tagId = "@deepseek-ai/dsh-client-ui-open-in-app/OpenInAppAction.module.css";
+		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
+			const tag = document.createElement("style");
+			tag.dataset.plugin = "@deepseek-ai/dsh-client-ui-open-in-app";
+			tag.dataset.pluginCss = tagId;
+			tag.textContent = css;
+			document.head.appendChild(tag);
+		}
+		var OpenInAppAction_module_css_default = {
+			"chevron": "CAgGvG_chevron",
+			"icon": "CAgGvG_icon",
+			"main": "CAgGvG_main",
+			"split": "CAgGvG_split"
+		};
+		//#endregion
+		//#region lib/types/client/OpenInAppAction.js
+		/**
+		* Label keys per catalog id: the browser renders only ids it can name, so a
+		* host catalog extension without a matching dictionary entry stays invisible
+		* instead of showing a raw id.
+		*/
+		const APP_LABEL_KEY = {
+			finder: "app.finder",
+			explorer: "app.explorer",
+			filemanager: "app.filemanager",
+			cursor: "app.cursor",
+			vscode: "app.vscode",
+			vscodeinsiders: "app.vscodeinsiders",
+			windsurf: "app.windsurf",
+			zed: "app.zed",
+			sublimetext: "app.sublimetext",
+			xcode: "app.xcode",
+			androidstudio: "app.androidstudio",
+			intellij: "app.intellij",
+			pycharm: "app.pycharm",
+			webstorm: "app.webstorm",
+			phpstorm: "app.phpstorm",
+			goland: "app.goland",
+			rider: "app.rider",
+			rustrover: "app.rustrover",
+			fork: "app.fork",
+			sourcetree: "app.sourcetree",
+			github: "app.github",
+			tower: "app.tower",
+			gitkraken: "app.gitkraken",
+			smartgit: "app.smartgit",
+			sublimemerge: "app.sublimemerge",
+			ghostty: "app.ghostty",
+			warp: "app.warp",
+			iterm: "app.iterm",
+			kitty: "app.kitty",
+			terminal: "app.terminal",
+			windowsterminal: "app.windowsterminal",
+			gitbash: "app.gitbash",
+			gnometerminal: "app.gnometerminal",
+			konsole: "app.konsole"
+		};
+		/** App ids whose icon image already failed this page; a 404 icon is fetched once, not per menu open. */
+		const failedIcons = /* @__PURE__ */ new Set();
+		/**
+		* One application's real bundle icon (host-served PNG) with an inline generic
+		* app-square fallback while the host has none.
+		* @param props - catalog id, host icon URL, and rendered size.
+		* @returns the icon image or its fallback glyph.
+		*/
+		function AppIcon({ id, url, size }) {
+			const [failed, setFailed] = (0, react.useState)(failedIcons.has(id));
+			if (failed) return (0, react_jsx_runtime.jsx)("svg", {
+				width: size,
+				height: size,
+				viewBox: "0 0 24 24",
+				fill: "none",
+				stroke: "currentColor",
+				strokeWidth: 1.8,
+				className: OpenInAppAction_module_css_default.icon,
+				"aria-hidden": true,
+				children: (0, react_jsx_runtime.jsx)("rect", {
+					x: 3,
+					y: 3,
+					width: 18,
+					height: 18,
+					rx: 5
+				})
+			});
+			return (0, react_jsx_runtime.jsx)("img", {
+				src: url,
+				width: size,
+				height: size,
+				className: OpenInAppAction_module_css_default.icon,
+				alt: "",
+				"aria-hidden": true,
+				draggable: false,
+				onError: () => {
+					failedIcons.add(id);
+					setFailed(true);
+				}
+			});
+		}
+		/**
+		* Quick launches settle well under this delay, so their busy dress never
+		* paints — the visible dim-and-wait treatment is reserved for launches that
+		* are actually taking a while, instead of flashing on every click.
+		*/
+		const BUSY_DRESS_DELAY_MS = 250;
+		/**
+		* Session-header split button: the main button opens the session's workspace
+		* directory in the remembered application, the chevron opens the menu of
+		* every application the host probed as installed. It renders nothing until
+		* the host reported at least one nameable application and the session has a
+		* known workspace directory, so a host without the capability never grows
+		* the control.
+		* @param props - session runtime, injected controller face, and localized copy.
+		* @returns the split button and its menu, or null when there is nothing to offer.
+		*/
+		function OpenInAppAction(props) {
+			const { sessionId, useSessions, useOpenInAppApps, useOpenInAppChoice, t } = props;
+			const cwd = useSessions((state) => state.byId[sessionId]?.cwd);
+			const available = useOpenInAppApps((apps) => apps);
+			const choice = useOpenInAppChoice((id) => id);
+			const [open, setOpen] = (0, react.useState)(false);
+			const [phase, setPhase] = (0, react.useState)("idle");
+			const inFlight = (0, react.useRef)(false);
+			const busyTimer = (0, react.useRef)(void 0);
+			const errorTimer = (0, react.useRef)(void 0);
+			(0, react.useEffect)(() => () => {
+				clearTimeout(busyTimer.current);
+				clearTimeout(errorTimer.current);
+			}, []);
+			const apps = (available ?? []).map((id) => ({
+				id,
+				labelKey: APP_LABEL_KEY[id]
+			})).filter((entry) => entry.labelKey !== void 0);
+			const currentEntry = apps.find((entry) => entry.id === choice) ?? apps[0];
+			if (currentEntry === void 0 || cwd === void 0 || cwd === "") return null;
+			const current = currentEntry.id;
+			const currentLabel = t(currentEntry.labelKey);
+			const title = phase === "error" ? t("open.error") : t("open.title", { app: currentLabel });
+			const launch = (appId) => {
+				if (inFlight.current) return;
+				inFlight.current = true;
+				clearTimeout(errorTimer.current);
+				clearTimeout(busyTimer.current);
+				busyTimer.current = setTimeout(() => {
+					setPhase("busy");
+				}, BUSY_DRESS_DELAY_MS);
+				props.launch(appId, cwd).then(() => {
+					inFlight.current = false;
+					clearTimeout(busyTimer.current);
+					setPhase("idle");
+				}, () => {
+					inFlight.current = false;
+					clearTimeout(busyTimer.current);
+					setPhase("error");
+					clearTimeout(errorTimer.current);
+					errorTimer.current = setTimeout(() => {
+						setPhase("idle");
+					}, 2e3);
+				});
+			};
+			return (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Menu, {
+				open,
+				align: "end",
+				dense: true,
+				selection: "fill",
+				onClose: () => {
+					setOpen(false);
+				},
+				items: apps.map((entry) => ({
+					id: entry.id,
+					label: t(entry.labelKey),
+					icon: (0, react_jsx_runtime.jsx)(AppIcon, {
+						id: entry.id,
+						url: props.iconUrl(entry.id),
+						size: 18
+					})
+				})),
+				selectedId: current,
+				onSelect: (id) => {
+					setOpen(false);
+					if (inFlight.current) return;
+					props.choose(id);
+					launch(id);
+				},
+				anchor: (0, react_jsx_runtime.jsxs)("div", {
+					className: OpenInAppAction_module_css_default.split,
+					children: [(0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Tooltip, {
+						label: phase === "error" ? t("open.error") : t("open.tooltip"),
+						side: "bottom",
+						children: (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: OpenInAppAction_module_css_default.main,
+							"data-state": phase,
+							disabled: phase === "busy",
+							"aria-label": title,
+							onClick: () => {
+								launch(current);
+							},
+							children: (0, react_jsx_runtime.jsx)(AppIcon, {
+								id: current,
+								url: props.iconUrl(current),
+								size: 15
+							})
+						})
+					}), (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						className: OpenInAppAction_module_css_default.chevron,
+						"aria-expanded": open,
+						"aria-haspopup": "menu",
+						title: t("menu.toggle"),
+						"aria-label": t("menu.toggle"),
+						onClick: () => {
+							setOpen((value) => !value);
+						},
+						children: (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, { size: 11 })
+					})]
+				})
+			});
+		}
+		//#endregion
+		//#region lib/types/client/locales.js
+		/** `open-in-app` namespace dictionaries. */
+		/** Dictionary namespace owned by this plugin. */
+		const NS = "open-in-app";
+		/** Application labels shared verbatim by both dictionaries (product names). */
+		const PRODUCT_NAMES = {
+			"app.cursor": "Cursor",
+			"app.vscode": "VS Code",
+			"app.vscodeinsiders": "VS Code Insiders",
+			"app.windsurf": "Windsurf",
+			"app.zed": "Zed",
+			"app.sublimetext": "Sublime Text",
+			"app.xcode": "Xcode",
+			"app.androidstudio": "Android Studio",
+			"app.intellij": "IntelliJ IDEA",
+			"app.pycharm": "PyCharm",
+			"app.webstorm": "WebStorm",
+			"app.phpstorm": "PhpStorm",
+			"app.goland": "GoLand",
+			"app.rider": "Rider",
+			"app.rustrover": "RustRover",
+			"app.fork": "Fork",
+			"app.sourcetree": "Sourcetree",
+			"app.github": "GitHub Desktop",
+			"app.tower": "Tower",
+			"app.gitkraken": "GitKraken",
+			"app.smartgit": "SmartGit",
+			"app.sublimemerge": "Sublime Merge",
+			"app.ghostty": "Ghostty",
+			"app.warp": "Warp",
+			"app.iterm": "iTerm2",
+			"app.kitty": "kitty",
+			"app.windowsterminal": "Windows Terminal",
+			"app.gitbash": "Git Bash",
+			"app.gnometerminal": "GNOME Terminal",
+			"app.konsole": "Konsole"
+		};
+		/** Simplified Chinese dictionary (the key-set source of truth). */
+		const zh = {
+			"open.title": "在 {app} 中打开工作目录",
+			"open.tooltip": "在本地打开",
+			"open.error": "打开失败",
+			"menu.toggle": "选择打开方式",
+			"menu.aria": "打开方式",
+			...PRODUCT_NAMES,
+			"app.finder": "访达",
+			"app.explorer": "文件资源管理器",
+			"app.filemanager": "文件管理器",
+			"app.terminal": "终端"
+		};
+		/** English dictionary, key-identical to the Chinese source of truth. */
+		const en = {
+			"open.title": "Open workspace in {app}",
+			"open.tooltip": "Open locally",
+			"open.error": "Failed to open",
+			"menu.toggle": "Choose an app to open in",
+			"menu.aria": "Open in",
+			...PRODUCT_NAMES,
+			"app.finder": "Finder",
+			"app.explorer": "File Explorer",
+			"app.filemanager": "Files",
+			"app.terminal": "Terminal"
+		};
+		//#endregion
+		//#region lib/types/client/index.js
+		/**
+		* Browser half of open-in-app: one Session-header split button opening the
+		* session's workspace directory (the summary's `cwd`) in the remembered
+		* installed application. Availability arrives once per page from the host
+		* apps route; the last choice persists in the browser through the controller's
+		* persisted snapshot store.
+		*/
+		/** Required services for locale registration and the header-slot contribution. */
+		const inject = [
+			"sessions",
+			"slots",
+			"locale"
+		];
+		/**
+		* Client plugin body: register the dictionaries and the header split button.
+		* @param ctx - client root context.
+		*/
+		function apply(ctx) {
+			const controller = new OpenInAppController();
+			controller.load();
+			ctx.effect(() => ctx.locale.register(NS, {
+				zh,
+				en
+			}), "open-in-app: dictionaries");
+			ctx.slots.inject("conversation.session.header.utilities", () => ctx.slots.register({
+				name: "conversation.session.header.utilities",
+				id: "open-in-app",
+				order: -10,
+				locale: NS,
+				inject: () => ({
+					hooks: {
+						openInAppApps: controller.apps,
+						openInAppChoice: controller.choice
+					},
+					launch: (appId, path) => controller.launch(appId, path),
+					choose: (appId) => {
+						controller.choose(appId);
+					},
+					iconUrl: (appId) => `${OPEN_IN_APP_ICON_PREFIX}/${appId}`
+				})
+			}, OpenInAppAction));
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});
+
+//# sourceMappingURL=client.js.map

package/lib/index.js

@@ -0,0 +1,12 @@
+//#region lib/types/index.js
+/**
+* Open-in-app browsing surface, node half. Pure UI plugin: the empty apply
+* exists so the plugin appears in the host cordis.yml / Loader; the browser
+* half ships via exports["./client"], discovered through the package.json
+* dsh.client declaration. The routes it drives live in
+* `@deepseek-ai/dsh-host-open-in-app`.
+*/
+/** Host plugin body — no host-side behavior for this surface plugin. */
+function apply() {}
+//#endregion
+export { apply };

package/lib/types/client/OpenInAppAction.d.ts

@@ -0,0 +1,27 @@
+import type { ObservableSnapshot } from '@deepseek-ai/dsh-client-store';
+import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
+import { NS } from './locales.ts';
+/** Browser operations and state injected into the Session Header contribution. */
+export interface OpenInAppActionInjected {
+    hooks: {
+        openInAppApps: ObservableSnapshot<readonly string[] | null>;
+        openInAppChoice: ObservableSnapshot<string>;
+    };
+    launch: (appId: string, path: string) => Promise<void>;
+    choose: (appId: string) => void;
+    iconUrl: (appId: string) => string;
+}
+/** Full props for the Session-header open-in-app split button. */
+export type OpenInAppActionProps = PropsRuntime<'conversation.session.header.utilities'> & PropsLocale<typeof NS> & InjectFace<OpenInAppActionInjected>;
+/**
+ * Session-header split button: the main button opens the session's workspace
+ * directory in the remembered application, the chevron opens the menu of
+ * every application the host probed as installed. It renders nothing until
+ * the host reported at least one nameable application and the session has a
+ * known workspace directory, so a host without the capability never grows
+ * the control.
+ * @param props - session runtime, injected controller face, and localized copy.
+ * @returns the split button and its menu, or null when there is nothing to offer.
+ */
+export declare function OpenInAppAction(props: OpenInAppActionProps): React.JSX.Element | null;
+//# sourceMappingURL=OpenInAppAction.d.ts.map

package/lib/types/client/controller.d.ts

@@ -0,0 +1,41 @@
+/** Browser availability/choice state and the launch carrier for the split button. */
+import { type SnapshotStore } from '@deepseek-ai/dsh-client-store';
+type Fetch = (input: string | URL, init?: RequestInit) => Promise<Response>;
+/**
+ * Owns the once-per-page availability read, the persisted last choice, and
+ * the launch POST. Availability and choice publish through uSES-safe sources
+ * so every Session header shares one truth.
+ */
+export declare class OpenInAppController {
+    private readonly fetcher;
+    /** Installed app ids in host menu order; null until the host answered. */
+    readonly apps: SnapshotStore<readonly string[] | null>;
+    /** Last chosen app id, or empty before the first choice, shared across sessions and browser restarts. */
+    readonly choice: SnapshotStore<string>;
+    private loading;
+    /**
+     * @param fetcher - HTTP carrier for the apps read and the launch POST.
+     */
+    constructor(fetcher?: Fetch);
+    /**
+     * Read availability once per controller life; concurrent calls share the read.
+     * A failed read publishes an empty list, which renders no button at all.
+     * @returns after availability is published.
+     */
+    load(): Promise<void>;
+    /**
+     * Remember one picked app id.
+     * @param appId - catalog id from the availability list.
+     */
+    choose(appId: string): void;
+    /**
+     * Launch one installed app on a workspace directory.
+     * @param appId - catalog id from the availability list.
+     * @param path - the session's absolute workspace directory.
+     * @returns after the host acknowledged the launch; rejects on any failure.
+     */
+    launch(appId: string, path: string): Promise<void>;
+    private run;
+}
+export {};
+//# sourceMappingURL=controller.d.ts.map

package/lib/types/client/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Browser half of open-in-app: one Session-header split button opening the
+ * session's workspace directory (the summary's `cwd`) in the remembered
+ * installed application. Availability arrives once per page from the host
+ * apps route; the last choice persists in the browser through the controller's
+ * persisted snapshot store.
+ */
+import type { Context as ClientContext } from '@deepseek-ai/cordis';
+import { type OpenInAppKey } from './locales.ts';
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+    interface LocaleNamespaceMap {
+        /** Session-header "open workspace in application" copy. */
+        'open-in-app': OpenInAppKey;
+    }
+}
+export type { OpenInAppActionInjected, OpenInAppActionProps } from './OpenInAppAction.tsx';
+/** Required services for locale registration and the header-slot contribution. */
+export declare const inject: string[];
+/**
+ * Client plugin body: register the dictionaries and the header split button.
+ * @param ctx - client root context.
+ */
+export declare function apply(ctx: ClientContext): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/client/locales.d.ts

@@ -0,0 +1,50 @@
+/** `open-in-app` namespace dictionaries. */
+/** Dictionary namespace owned by this plugin. */
+export declare const NS = "open-in-app";
+/** Simplified Chinese dictionary (the key-set source of truth). */
+export declare const zh: {
+    readonly 'app.finder': "访达";
+    readonly 'app.explorer': "文件资源管理器";
+    readonly 'app.filemanager': "文件管理器";
+    readonly 'app.terminal': "终端";
+    readonly 'app.cursor': "Cursor";
+    readonly 'app.vscode': "VS Code";
+    readonly 'app.vscodeinsiders': "VS Code Insiders";
+    readonly 'app.windsurf': "Windsurf";
+    readonly 'app.zed': "Zed";
+    readonly 'app.sublimetext': "Sublime Text";
+    readonly 'app.xcode': "Xcode";
+    readonly 'app.androidstudio': "Android Studio";
+    readonly 'app.intellij': "IntelliJ IDEA";
+    readonly 'app.pycharm': "PyCharm";
+    readonly 'app.webstorm': "WebStorm";
+    readonly 'app.phpstorm': "PhpStorm";
+    readonly 'app.goland': "GoLand";
+    readonly 'app.rider': "Rider";
+    readonly 'app.rustrover': "RustRover";
+    readonly 'app.fork': "Fork";
+    readonly 'app.sourcetree': "Sourcetree";
+    readonly 'app.github': "GitHub Desktop";
+    readonly 'app.tower': "Tower";
+    readonly 'app.gitkraken': "GitKraken";
+    readonly 'app.smartgit': "SmartGit";
+    readonly 'app.sublimemerge': "Sublime Merge";
+    readonly 'app.ghostty': "Ghostty";
+    readonly 'app.warp': "Warp";
+    readonly 'app.iterm': "iTerm2";
+    readonly 'app.kitty': "kitty";
+    readonly 'app.windowsterminal': "Windows Terminal";
+    readonly 'app.gitbash': "Git Bash";
+    readonly 'app.gnometerminal': "GNOME Terminal";
+    readonly 'app.konsole': "Konsole";
+    readonly 'open.title': "在 {app} 中打开工作目录";
+    readonly 'open.tooltip': "在本地打开";
+    readonly 'open.error': "打开失败";
+    readonly 'menu.toggle': "选择打开方式";
+    readonly 'menu.aria': "打开方式";
+};
+/** English dictionary, key-identical to the Chinese source of truth. */
+export declare const en: Record<OpenInAppKey, string>;
+/** Key domain of the `open-in-app` namespace (zh is the source of truth). */
+export type OpenInAppKey = keyof typeof zh;
+//# sourceMappingURL=locales.d.ts.map

package/lib/types/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Open-in-app browsing surface, node half. Pure UI plugin: the empty apply
+ * exists so the plugin appears in the host cordis.yml / Loader; the browser
+ * half ships via exports["./client"], discovered through the package.json
+ * dsh.client declaration. The routes it drives live in
+ * `@deepseek-ai/dsh-host-open-in-app`.
+ */
+/** Host plugin body — no host-side behavior for this surface plugin. */
+export declare function apply(): void;
+//# sourceMappingURL=index.d.ts.map

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "@deepseek-ai/dsh-client-ui-open-in-app",
+  "description": "Web Session-header \"Open In...\" split button opening the session workspace directory in a locally installed application",
+  "version": "0.1.3-alpha.2",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+    "directory": "packages/client/ui-open-in-app"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/client.js",
+    "lib/types/**/*.d.ts"
+  ],
+  "license": "MIT",
+  "dsh": {
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-ui-session"
+      ],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2"
+  },
+  "devDependencies": {
+    "@types/react": "~18.3.1",
+    "react": "^18.2.0",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-client-locale": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-client-store": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-client-test-runtime": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-client-ui-session": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-api-session-controller": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-host-open-in-app": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-session": "^0.1.3-alpha.2"
+  },
+  "scripts": {
+    "bundle": "tsdown",
+    "watch": "tsdown --watch"
+  }
+}