@dsh-cove/dsh-web-all 0.0.0-stage → 0.4.3

package/src/client/sidebar/panels/ssh/xterm.css.ts

@@ -0,0 +1,2 @@
+/** xterm.css text embedded at build-authoring time (the ?raw suffix is not resolvable by the tsdown/rolldown pipeline). Generated file — see the package docs. */
+export const XTERM_CSS: string = "/**\n * Copyright (c) 2014 The xterm.js authors. All rights reserved.\n * Copyright (c) 2012-2013, Christopher Jeffrey (MIT License)\n * https://github.com/chjj/term.js\n * @license MIT\n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal\n * in the Software without restriction, including without limitation the rights\n * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n * copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\n * THE SOFTWARE.\n *\n * Originally forked from (with the author's permission):\n *   Fabrice Bellard's javascript vt100 for jslinux:\n *   http://bellard.org/jslinux/\n *   Copyright (c) 2011 Fabrice Bellard\n *   The original design remains. The terminal itself\n *   has been extended to include xterm CSI codes, among\n *   other features.\n */\n\n/**\n *  Default styles for xterm.js\n */\n\n.xterm {\n    cursor: text;\n    position: relative;\n    user-select: none;\n    -ms-user-select: none;\n    -webkit-user-select: none;\n}\n\n.xterm.focus,\n.xterm:focus {\n    outline: none;\n}\n\n.xterm .xterm-helpers {\n    position: absolute;\n    top: 0;\n    /**\n     * The z-index of the helpers must be higher than the canvases in order for\n     * IMEs to appear on top.\n     */\n    z-index: 5;\n}\n\n.xterm .xterm-helper-textarea {\n    padding: 0;\n    border: 0;\n    margin: 0;\n    /* Move textarea out of the screen to the far left, so that the cursor is not visible */\n    position: absolute;\n    opacity: 0;\n    left: -9999em;\n    top: 0;\n    width: 0;\n    height: 0;\n    z-index: -5;\n    /** Prevent wrapping so the IME appears against the textarea at the correct position */\n    white-space: nowrap;\n    overflow: hidden;\n    resize: none;\n}\n\n.xterm .composition-view {\n    /* TODO: Composition position got messed up somewhere */\n    background: #000;\n    color: #FFF;\n    display: none;\n    position: absolute;\n    white-space: nowrap;\n    z-index: 1;\n}\n\n.xterm .composition-view.active {\n    display: block;\n}\n\n.xterm .xterm-viewport {\n    /* On OS X this is required in order for the scroll bar to appear fully opaque */\n    background-color: #000;\n    overflow-y: scroll;\n    cursor: default;\n    position: absolute;\n    right: 0;\n    left: 0;\n    top: 0;\n    bottom: 0;\n}\n\n.xterm .xterm-screen {\n    position: relative;\n}\n\n.xterm .xterm-screen canvas {\n    position: absolute;\n    left: 0;\n    top: 0;\n}\n\n.xterm-char-measure-element {\n    display: inline-block;\n    visibility: hidden;\n    position: absolute;\n    top: 0;\n    left: -9999em;\n    line-height: normal;\n}\n\n.xterm.enable-mouse-events {\n    /* When mouse events are enabled (eg. tmux), revert to the standard pointer cursor */\n    cursor: default;\n}\n\n.xterm.xterm-cursor-pointer,\n.xterm .xterm-cursor-pointer {\n    cursor: pointer;\n}\n\n.xterm.column-select.focus {\n    /* Column selection mode */\n    cursor: crosshair;\n}\n\n.xterm .xterm-accessibility:not(.debug),\n.xterm .xterm-message {\n    position: absolute;\n    left: 0;\n    top: 0;\n    bottom: 0;\n    right: 0;\n    z-index: 10;\n    color: transparent;\n    pointer-events: none;\n}\n\n.xterm .xterm-accessibility-tree:not(.debug) *::selection {\n  color: transparent;\n}\n\n.xterm .xterm-accessibility-tree {\n  font-family: monospace;\n  user-select: text;\n  white-space: pre;\n}\n\n.xterm .xterm-accessibility-tree > div {\n  transform-origin: left;\n  width: fit-content;\n}\n\n.xterm .live-region {\n    position: absolute;\n    left: -9999px;\n    width: 1px;\n    height: 1px;\n    overflow: hidden;\n}\n\n.xterm-dim {\n    /* Dim should not apply to background, so the opacity of the foreground color is applied\n     * explicitly in the generated class and reset to 1 here */\n    opacity: 1 !important;\n}\n\n.xterm-underline-1 { text-decoration: underline; }\n.xterm-underline-2 { text-decoration: double underline; }\n.xterm-underline-3 { text-decoration: wavy underline; }\n.xterm-underline-4 { text-decoration: dotted underline; }\n.xterm-underline-5 { text-decoration: dashed underline; }\n\n.xterm-overline {\n    text-decoration: overline;\n}\n\n.xterm-overline.xterm-underline-1 { text-decoration: overline underline; }\n.xterm-overline.xterm-underline-2 { text-decoration: overline double underline; }\n.xterm-overline.xterm-underline-3 { text-decoration: overline wavy underline; }\n.xterm-overline.xterm-underline-4 { text-decoration: overline dotted underline; }\n.xterm-overline.xterm-underline-5 { text-decoration: overline dashed underline; }\n\n.xterm-strikethrough {\n    text-decoration: line-through;\n}\n\n.xterm-screen .xterm-decoration-container .xterm-decoration {\n\tz-index: 6;\n\tposition: absolute;\n}\n\n.xterm-screen .xterm-decoration-container .xterm-decoration.xterm-decoration-top-layer {\n\tz-index: 7;\n}\n\n.xterm-decoration-overview-ruler {\n    z-index: 8;\n    position: absolute;\n    top: 0;\n    right: 0;\n    pointer-events: none;\n}\n\n.xterm-decoration-top {\n    z-index: 2;\n    position: relative;\n}\n\n\n\n/* Derived from vs/base/browser/ui/scrollbar/media/scrollbar.css */\n\n/* xterm.js customization: Override xterm's cursor style */\n.xterm .xterm-scrollable-element > .scrollbar {\n    cursor: default;\n}\n\n/* Arrows */\n.xterm .xterm-scrollable-element > .scrollbar > .scra {\n\tcursor: pointer;\n\tfont-size: 11px !important;\n}\n\n.xterm .xterm-scrollable-element > .visible {\n\topacity: 1;\n\n\t/* Background rule added for IE9 - to allow clicks on dom node */\n\tbackground:rgba(0,0,0,0);\n\n\ttransition: opacity 100ms linear;\n\t/* In front of peek view */\n\tz-index: 11;\n}\n.xterm .xterm-scrollable-element > .invisible {\n\topacity: 0;\n\tpointer-events: none;\n}\n.xterm .xterm-scrollable-element > .invisible.fade {\n\ttransition: opacity 800ms linear;\n}\n\n/* Scrollable Content Inset Shadow */\n.xterm .xterm-scrollable-element > .shadow {\n\tposition: absolute;\n\tdisplay: none;\n}\n.xterm .xterm-scrollable-element > .shadow.top {\n\tdisplay: block;\n\ttop: 0;\n\tleft: 3px;\n\theight: 3px;\n\twidth: 100%;\n\tbox-shadow: var(--vscode-scrollbar-shadow, #000) 0 6px 6px -6px inset;\n}\n.xterm .xterm-scrollable-element > .shadow.left {\n\tdisplay: block;\n\ttop: 3px;\n\tleft: 0;\n\theight: 100%;\n\twidth: 3px;\n\tbox-shadow: var(--vscode-scrollbar-shadow, #000) 6px 0 6px -6px inset;\n}\n.xterm .xterm-scrollable-element > .shadow.top-left-corner {\n\tdisplay: block;\n\ttop: 0;\n\tleft: 0;\n\theight: 3px;\n\twidth: 3px;\n}\n.xterm .xterm-scrollable-element > .shadow.top.left {\n\tbox-shadow: var(--vscode-scrollbar-shadow, #000) 6px 0 6px -6px inset;\n}\n"

package/src/client/sidebar/right-pane-i18n.ts

@@ -0,0 +1,243 @@
+/**
+ * Copy for the web-all right-pane pages (Git management, sandboxed browser
+ * and their shared diff surface). zh is the key source; en mirrors every key.
+ */
+export const RIGHT_PANE_LOCALE = 'web-all-right-pane' as const
+
+export const rightPaneZh = {
+  // Page guide entries.
+  'git.title': 'Git 管理',
+  'git.description': '查看工作区更改、差异与提交历史',
+  'browser.title': '浏览器',
+  'browser.description': '在安全沙箱中浏览外部网站',
+  'workspaceRequired': '请选择已注册工作区的会话。',
+  'git.back': '返回 Git 管理',
+  // Git header.
+  'git.refresh': '刷新',
+  'git.createBranch': '新建分支',
+  'git.branchName': '分支名称',
+  'git.branchPlaceholder': '输入分支名称',
+  // Git sections.
+  'git.staged': '已暂存的更改',
+  'git.stagedEmpty': '没有已暂存的更改',
+  'git.changes': '更改',
+  'git.changesEmpty': '没有更改',
+  'git.stageAll': '全部暂存',
+  'git.unstageAll': '全部取消暂存',
+  'git.stage': '暂存',
+  'git.unstage': '取消暂存',
+  'git.discard': '丢弃更改',
+  'git.openEditor': '在编辑器中打开',
+  'git.viewDiff': '查看差异',
+  'git.copyRelative': '复制相对路径',
+  'git.copyAbsolute': '复制绝对路径',
+  'git.copyShortHash': '复制短哈希',
+  'git.copyFullHash': '复制完整哈希',
+  'git.copySubject': '复制提交主题',
+  'git.revert': '还原提交',
+  'git.cherryPick': '挑拣提交',
+  'git.commit': '提交',
+  'git.commitPlaceholder': '提交信息（Ctrl+Enter 提交）',
+  'git.closeDiff': '关闭差异视图',
+  'git.commitHint': '先把要提交的更改暂存起来。',
+  'git.history': '历史记录',
+  'git.loadMore': '加载更多',
+  'git.loading': '正在加载…',
+  'git.notRepo': '当前会话没有 Git 仓库。',
+  'git.notRepoHint': '在工作区终端中运行 git init 或 git clone 后刷新。',
+  'git.conflictBanner': '存在合并冲突，请先解决再继续。',
+  'git.opBanner': '有 Git 操作正在进行中。',
+  // Git dialogs.
+  'git.createBranchTitle': '新建分支',
+  'git.cancel': '取消',
+  'git.confirm': '确认',
+  'git.close': '关闭',
+  'git.discardTitle': '丢弃更改',
+  'git.discardDesc': '确定丢弃「{path}」的所有更改？此操作无法撤销。',
+  'git.revertTitle': '还原提交',
+  'git.revertDesc': '用一个新的提交来还原「{subject}」？',
+  'git.cherryPickTitle': '挑拣提交',
+  'git.cherryPickDesc': '把「{subject}」挑拣到当前分支？',
+  // Git operation errors (mirror the git-graph GitError codes).
+  'git.error.conflictsPresent': '存在合并冲突，先解决冲突再修改 Git 历史。',
+  'git.error.operationInProgress': '请先完成或中止当前的 Git 操作。',
+  'git.error.dirtyWorktree': '请先提交、暂存或丢弃工作区更改。',
+  'git.error.applyConflict': 'Git 因提交与当前分支冲突而停止，请在终端中解决或中止。',
+  'git.error.nothingToApply': '该提交在这里没有可应用的更改。',
+  'git.error.commitNotFound': '所选提交已不存在。',
+  'git.error.fileNotTracked': '只能丢弃已跟踪的文件。',
+  'git.error.invalidFilePath': '所选文件路径对该仓库不安全。',
+  'git.error.workspaceUnknown': '该会话未关联已注册的工作区。',
+  'git.error.internal': 'Git 操作失败：{message}',
+  'git.error.unknown': '未知错误',
+  // Diff surface labels.
+  'git.diff.worktree': '工作区更改',
+  'git.diff.staged': '已暂存更改',
+  'git.diff.commit': '提交',
+  'git.diff.binary': '二进制文件',
+  'git.diff.added': '新增',
+  'git.diff.deleted': '删除',
+  'git.diff.renamed': '重命名',
+  'git.diff.expand': '展开 {count} 行',
+  'git.diff.collapse': '收起',
+  'git.diff.fileCount': '{count} 个文件',
+  'git.diff.noDiff': '没有可显示的差异。',
+  // Relative history time.
+  'git.ago.now': '刚刚',
+  'git.ago.minutes': '{n} 分钟前',
+  'git.ago.hours': '{n} 小时前',
+  'git.ago.days': '{n} 天前',
+  'git.ago.months': '{n} 个月前',
+  'git.ago.years': '{n} 年前',
+  // Browser.
+  'browser.placeholder': '输入网址，例如 example.com',
+  'browser.invalid': '请输入有效的 HTTP(S) 网址。',
+  'browser.blockedScheme': '仅支持 HTTP(S) 协议。',
+  'browser.blockedLoopback': '已阻止回环地址与 DSH 自身地址。',
+  'browser.navBlocked': '导航被阻止：{reason}',
+  'browser.embedBlocked': '「{host}」拒绝在嵌入视图中显示',
+  'browser.embedBlockedDesc': '该网站通过 X-Frame-Options 或 frame-ancestors 禁用了嵌入，直接加载只会显示空白页。',
+  'browser.embedAnyway': '仍然加载',
+  'browser.openExternal': '在浏览器中打开',
+  'browser.start': '在安全的沙箱中浏览任意 HTTP(S) 网站。',
+  'browser.sandboxOn': '沙箱已开启：页面无法碰触本机数据',
+  'browser.sandboxOff': '沙箱已关闭：页面以完整权限运行',
+  'browser.sandboxUnlock': '临时解锁',
+  'browser.sandboxRestore': '恢复沙箱',
+  'browser.loading': '正在加载…',
+  'browser.recent': '最近访问',
+  'agentBrowser.title': 'Agent 浏览器',
+  'agentBrowser.description': '连接并管理当前会话的 Playwright 浏览器',
+  'agentBrowser.live': '本机 Chrome 已连接',
+  'agentBrowser.notEnabled': '当前使用独立浏览器模式；本机 Chrome 连接未启用。',
+  'agentBrowser.connecting': '正在等待 Chrome 扩展确认与标签页选择…',
+  'agentBrowser.noPage': '浏览器尚未打开页面',
+  'agentBrowser.closed': '尚未连接本机 Chrome',
+  'agentBrowser.error': '浏览器连接失败',
+  'agentBrowser.hint': '只会操作你在 Playwright 扩展中授权给本会话的标签页。',
+  'agentBrowser.connect': '连接本机 Chrome',
+  'agentBrowser.disconnect': '断开连接',
+  'agentBrowser.refresh': '刷新状态',
+  'agentBrowser.busy': '本机 Chrome 正被另一个会话使用。请先在那个会话中断开。',
+  'agentBrowser.noSession': '请选择一个会话后再连接浏览器。',
+  'agentBrowser.install': '安装 Playwright Extension',
+  'agentBrowser.installHint': '连接前，请先在 Chrome 或 Edge 中安装官方 Playwright Extension。',
+  'agentBrowser.security': '写操作会经过 DSH 的一次性审批；任意代码工具默认不向本机 Chrome 开放。',
+  'agentBrowser.denied': '无法连接本机 Chrome：请确认已通过宿主机部署的规范地址登录，再重试。',
+} as const
+
+export type RightPaneLocaleKey = keyof typeof rightPaneZh
+
+export const rightPaneEn: Record<RightPaneLocaleKey, string> = {
+  'git.title': 'Source Control',
+  'git.description': 'Inspect workspace changes, diffs and commit history',
+  'browser.title': 'Browser',
+  'browser.description': 'Browse an external site in a secure sandbox',
+  'workspaceRequired': 'Select a conversation with a registered workspace.',
+  'git.back': 'Back to source control',
+  'git.refresh': 'Refresh',
+  'git.createBranch': 'Create branch',
+  'git.branchName': 'Branch name',
+  'git.branchPlaceholder': 'Enter a branch name',
+  'git.staged': 'Staged Changes',
+  'git.stagedEmpty': 'No staged changes',
+  'git.changes': 'Changes',
+  'git.changesEmpty': 'No changes',
+  'git.stageAll': 'Stage all',
+  'git.unstageAll': 'Unstage all',
+  'git.stage': 'Stage',
+  'git.unstage': 'Unstage',
+  'git.discard': 'Discard changes',
+  'git.openEditor': 'Open in editor',
+  'git.viewDiff': 'View diff',
+  'git.copyRelative': 'Copy relative path',
+  'git.copyAbsolute': 'Copy absolute path',
+  'git.copyShortHash': 'Copy short hash',
+  'git.copyFullHash': 'Copy full hash',
+  'git.copySubject': 'Copy commit subject',
+  'git.revert': 'Revert commit',
+  'git.cherryPick': 'Cherry-pick commit',
+  'git.commit': 'Commit',
+  'git.commitPlaceholder': 'Commit message (Ctrl+Enter to commit)',
+  'git.closeDiff': 'Close diff view',
+  'git.commitHint': 'Stage the changes you want to commit first.',
+  'git.history': 'History',
+  'git.loadMore': 'Load more',
+  'git.loading': 'Loading…',
+  'git.notRepo': 'This session has no Git repository.',
+  'git.notRepoHint': 'Run git init or git clone in the workspace terminal, then refresh.',
+  'git.conflictBanner': 'Merge conflicts exist; resolve them first.',
+  'git.opBanner': 'A Git operation is in progress.',
+  'git.createBranchTitle': 'Create branch',
+  'git.cancel': 'Cancel',
+  'git.confirm': 'Confirm',
+  'git.close': 'Close',
+  'git.discardTitle': 'Discard changes',
+  'git.discardDesc': 'Discard all changes to "{path}"? This cannot be undone.',
+  'git.revertTitle': 'Revert commit',
+  'git.revertDesc': 'Revert "{subject}" with a new commit?',
+  'git.cherryPickTitle': 'Cherry-pick commit',
+  'git.cherryPickDesc': 'Cherry-pick "{subject}" onto the current branch?',
+  'git.error.conflictsPresent': 'Resolve existing conflicts before changing Git history.',
+  'git.error.operationInProgress': 'Finish or abort the current Git operation first.',
+  'git.error.dirtyWorktree': 'Commit, stash, or discard working changes before this operation.',
+  'git.error.applyConflict': 'Git stopped because the commit conflicts with this branch. Resolve or abort it in a terminal.',
+  'git.error.nothingToApply': 'This commit has no changes to apply here.',
+  'git.error.commitNotFound': 'The selected commit no longer exists.',
+  'git.error.fileNotTracked': 'Only tracked files can be discarded.',
+  'git.error.invalidFilePath': 'The selected file path is not safe for this repository.',
+  'git.error.workspaceUnknown': 'This session is not attached to a registered workspace.',
+  'git.error.internal': 'Git operation failed: {message}',
+  'git.error.unknown': 'unknown error',
+  'git.diff.worktree': 'Working tree',
+  'git.diff.staged': 'Staged changes',
+  'git.diff.commit': 'Commit',
+  'git.diff.binary': 'Binary file',
+  'git.diff.added': 'Added',
+  'git.diff.deleted': 'Deleted',
+  'git.diff.renamed': 'Renamed',
+  'git.diff.expand': 'Expand {count} lines',
+  'git.diff.collapse': 'Collapse',
+  'git.diff.fileCount': '{count} files',
+  'git.diff.noDiff': 'No diff to display.',
+  'git.ago.now': 'now',
+  'git.ago.minutes': '{n}m ago',
+  'git.ago.hours': '{n}h ago',
+  'git.ago.days': '{n}d ago',
+  'git.ago.months': '{n}mo ago',
+  'git.ago.years': '{n}y ago',
+  'browser.placeholder': 'Enter a URL, e.g. example.com',
+  'browser.invalid': 'Enter a valid HTTP(S) URL.',
+  'browser.blockedScheme': 'Only HTTP(S) URLs are supported.',
+  'browser.blockedLoopback': 'Loopback and the DSH origin are blocked.',
+  'browser.navBlocked': 'Navigation blocked: {reason}',
+  'browser.embedBlocked': '"{host}" refuses to be embedded',
+  'browser.embedBlockedDesc': 'This site forbids embedding via X-Frame-Options or frame-ancestors; loading it directly shows a blank page.',
+  'browser.embedAnyway': 'Load anyway',
+  'browser.openExternal': 'Open in browser',
+  'browser.start': 'Browse any HTTP(S) site inside a secure sandbox.',
+  'browser.sandboxOn': 'Sandbox on: the page cannot touch local data',
+  'browser.sandboxOff': 'Sandbox off: the page runs with full privileges',
+  'browser.sandboxUnlock': 'Temporarily unlock',
+  'browser.sandboxRestore': 'Restore sandbox',
+  'browser.loading': 'Loading…',
+  'browser.recent': 'Recent',
+  'agentBrowser.title': 'Agent Browser',
+  'agentBrowser.description': 'Connect and manage this session\'s Playwright browser',
+  'agentBrowser.live': 'Local Chrome connected',
+  'agentBrowser.notEnabled': 'The isolated browser mode is active; local Chrome attachment is not enabled.',
+  'agentBrowser.connecting': 'Waiting for Chrome extension approval and tab selection…',
+  'agentBrowser.noPage': 'The browser has no page yet',
+  'agentBrowser.closed': 'Local Chrome is not connected',
+  'agentBrowser.error': 'Browser connection failed',
+  'agentBrowser.hint': 'Only tabs assigned to this session in the Playwright extension can be operated.',
+  'agentBrowser.connect': 'Connect local Chrome',
+  'agentBrowser.disconnect': 'Disconnect',
+  'agentBrowser.refresh': 'Refresh status',
+  'agentBrowser.busy': 'Local Chrome is already controlled by another session. Disconnect it there first.',
+  'agentBrowser.noSession': 'Select a conversation before connecting a browser.',
+  'agentBrowser.install': 'Install Playwright Extension',
+  'agentBrowser.installHint': 'Install the official Playwright Extension in Chrome or Edge before connecting.',
+  'agentBrowser.security': 'Mutations pass through one-shot DSH approval; arbitrary-code tools are hidden from local Chrome by default.',
+  'agentBrowser.denied': 'Cannot attach to the host\'s local Chrome: sign in through the host\'s canonical deployment address and retry.',
+}

package/src/client/sidebar/right-pane.tsx

@@ -0,0 +1,156 @@
+/** Native right-sidebar additions owned exclusively by the web-all sidebar position. */
+import { createElement, type ComponentType, type ReactNode } from 'react'
+import type { Context as ClientContext } from '@deepseek-ai/cordis'
+import type {} from '@deepseek-ai/dsh-client-ui-slots'
+import type {} from '@deepseek-ai/dsh-client-ui-renderer/client'
+import { IconBranchOutline16 } from '../ui-icons.ts'
+import { IconAgentBrowser16 } from './icons.tsx'
+import { AgentBrowserPanel } from './agent-browser.tsx'
+import { GitWorkbench } from './git-workbench.tsx'
+import { RenderBoundary } from './RenderBoundary.tsx'
+import { fileAddressFor } from '../../core/right-pane/protocol.ts'
+import {
+  RIGHT_PANE_LOCALE, rightPaneEn, rightPaneZh, type RightPaneLocaleKey,
+} from './right-pane-i18n.ts'
+import { useSessionWorkbenchScope } from './scope.ts'
+import css from './sidebar.module.css'
+
+export { RIGHT_PANE_LOCALE, rightPaneEn, rightPaneZh }
+export type { RightPaneLocaleKey }
+
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+  interface LocaleNamespaceMap { 'web-all-right-pane': RightPaneLocaleKey }
+}
+
+interface NativeTabDefinition {
+  id: string
+  kind: string
+  title: (address?: string) => string
+  guide?: readonly {
+    id: string
+    order: number
+    title: () => string
+    description?: () => string
+    icon?: ComponentType<{ size?: number; className?: string }>
+  }[]
+}
+interface TabRegistry { register(definition: NativeTabDefinition): () => void }
+interface Rightbar {
+  openTab(kind: string, options?: { params?: Record<string, unknown> }): void
+  openResource?(address: string): void
+}
+type BindLocale = (key: RightPaneLocaleKey, params?: Record<string, string | number>) => string
+interface NativeTabInfo {
+  sidebar: { expanded: boolean; fullscreen: boolean }
+  panel: { id: string }
+  tab: { visible: boolean; navigation: { params: Record<string, unknown>; revision: number }; signal: AbortSignal }
+}
+type UseTabInfo = () => NativeTabInfo
+interface PositionTabProps { useTabInfo?: UseTabInfo }
+interface PageSpec {
+  id: 'git' | 'browser' | 'agent-browser'
+  kind: 'web-ui.git' | 'web-ui.browser' | 'web-ui.agent-browser'
+  title: () => string
+  description: () => string
+  order: number
+  icon: ComponentType<{ size?: number; className?: string }>
+  requiresWorkspace: boolean
+  render(ctx: ClientContext, info: NativeTabInfo | undefined, sessionId?: string): ReactNode
+}
+
+function optionalService<T>(ctx: ClientContext, name: string): T | undefined {
+  try { return (ctx as unknown as { get(id: string, strict?: boolean): unknown }).get(name, false) as T | undefined } catch { return undefined }
+}
+function stableInfo(useTabInfo?: UseTabInfo): NativeTabInfo | undefined { return useTabInfo?.() }
+
+/** z/h text helper shared by the pages; falls back to the en dictionary so a
+ *  direct render (tests, skins) never shows bare keys. */
+export function bindRightPaneLocale(ctx: ClientContext): BindLocale {
+  const bind = ctx.locale.bind(RIGHT_PANE_LOCALE)
+  return (key, params) => {
+    const text = bind(key) ?? rightPaneEn[key]
+    if (params === undefined) return text
+    return text.replace(/\{([a-zA-Z0-9_]+)\}/gu, (_match, name: string) => String(params[name] ?? ''))
+  }
+}
+
+function NativePage({ ctx, spec, useTabInfo, sessionId }: { ctx: ClientContext; spec: PageSpec; useTabInfo?: UseTabInfo; sessionId?: string }) {
+  const info = stableInfo(useTabInfo)
+  const scope = useSessionWorkbenchScope(ctx, sessionId)
+  const t = bindRightPaneLocale(ctx)
+  if (spec.requiresWorkspace && (!scope.sessionId || !scope.cwd)) {
+    return <section className={css.nativeFused} data-dsh-plugin="web-all" data-dsh-better-sidebar="" data-dsh-part="native-fused"><div className={css.emptyState}>{t('workspaceRequired')}</div></section>
+  }
+  return <section className={css.nativeFused} data-dsh-plugin="web-all" data-dsh-better-sidebar="" data-dsh-part="native-fused" data-visible={info?.tab.visible ?? true}><RenderBoundary>{spec.render(ctx, info, sessionId)}</RenderBoundary></section>
+}
+
+function GitPage({ ctx, sessionId }: { ctx: ClientContext; sessionId?: string }) {
+  const scope = useSessionWorkbenchScope(ctx, sessionId)
+  const t = bindRightPaneLocale(ctx)
+  const openInEditor = (path: string): void => {
+    if (scope.sessionId === undefined) return
+    const address = fileAddressFor(scope.sessionId, scope.cwd, path)
+    optionalService<Rightbar>(ctx, 'sidebarRight')?.openResource?.(address)
+  }
+  return <GitWorkbench scope={scope} t={t} onOpenFile={openInEditor}/>
+}
+
+function pages(ctx: ClientContext): readonly PageSpec[] {
+  const t = bindRightPaneLocale(ctx)
+  return [
+    { id: 'git', kind: 'web-ui.git', title: () => t('git.title'), description: () => t('git.description'), order: 30, icon: IconBranchOutline16, requiresWorkspace: true, render: (owner, _info, sessionId) => <GitPage ctx={owner} sessionId={sessionId}/> },
+    { id: 'agent-browser', kind: 'web-ui.agent-browser', title: () => t('agentBrowser.title'), description: () => t('agentBrowser.description'), order: 32, icon: IconAgentBrowser16, requiresWorkspace: false, render: (_owner, info, sessionId) => <AgentBrowserPanel sessionId={sessionId} visible={info?.tab.visible ?? true} signal={info?.tab.signal} t={t}/> },
+  ]
+}
+
+export const NATIVE_PAGE_SPECS = [
+  { id: 'git', kind: 'web-ui.git', order: 30, requiresWorkspace: true },
+] as const
+
+/** Register the Git management page DSH does not ship. */
+function mountRightPaneFaces(ctx: ClientContext, tabs: TabRegistry): () => void {
+  const disposers: Array<() => void> = []
+  for (const spec of pages(ctx)) {
+    const key = `dsh-web-all/${spec.id}`
+    disposers.push(tabs.register({
+      id: key,
+      kind: spec.kind,
+      title: spec.title,
+      guide: [{ id: spec.id, order: spec.order, title: spec.title, description: spec.description, icon: spec.icon }],
+    }))
+    // 原生 keyed 槽：key 用类型 id，inject(sessionId) 由框架按会话作用域注入。
+    disposers.push(ctx.slots.inject('sidebar.right.pane.tab' as never, () => ctx.slots.register(
+      { name: 'sidebar.right.pane.tab', key, locale: RIGHT_PANE_LOCALE, inject: (sessionId: string) => ({ sessionId }) } as never,
+      ((props: PositionTabProps & { sessionId?: string }) => createElement(NativePage, { ctx, spec, useTabInfo: props.useTabInfo, sessionId: props.sessionId })) as never,
+    )))
+  }
+  return () => { for (const dispose of disposers.reverse()) { try { dispose() } catch {} } }
+}
+
+export function mountRightPane(ctx: ClientContext): () => void {
+  const disposeLocale = ctx.locale.register(RIGHT_PANE_LOCALE, { zh: rightPaneZh, en: rightPaneEn })
+  let disposeFaces = (): void => {}
+  const owner = ctx as unknown as { inject?: (services: string[], setup: (scope: ClientContext) => void | (() => void)) => void }
+  if (typeof owner.inject === 'function') {
+    owner.inject(['sidebarRightTabs', 'sidebarRight'], scope => {
+      const tabs = optionalService<TabRegistry>(scope, 'sidebarRightTabs')
+      if (!tabs || !optionalService<Rightbar>(scope, 'sidebarRight')) return
+      disposeFaces = mountRightPaneFaces(scope, tabs)
+      return disposeFaces
+    })
+    return () => { disposeFaces(); disposeLocale() }
+  }
+  const tabs = optionalService<TabRegistry>(ctx, 'sidebarRightTabs')
+  if (tabs && optionalService<Rightbar>(ctx, 'sidebarRight')) disposeFaces = mountRightPaneFaces(ctx, tabs)
+  return () => { disposeFaces(); disposeLocale() }
+}
+
+/**
+ * Open one right-pane tab by its registered kind. Only the kinds this package
+ * registers are addressable: `sidebarRight.openTab` throws for a kind nothing
+ * registered, so the union carries no unregistered member.
+ */
+export function openWorkbenchTab(ctx: ClientContext, kind: 'git' | 'agent-browser', params?: Record<string, unknown>): void {
+  const kindOf = kind === 'git' ? 'web-ui.git' : 'web-ui.agent-browser'
+  optionalService<Rightbar>(ctx, 'sidebarRight')?.openTab(kindOf, { params })
+}

package/src/client/sidebar/scope.ts

@@ -0,0 +1,54 @@
+/** Session-scoped facts used by every native right-sidebar page. */
+import { useRef, useSyncExternalStore } from 'react'
+import type { Context as ClientContext } from '@deepseek-ai/cordis'
+import type { ISessions } from '@deepseek-ai/dsh-api-session-controller/client'
+
+export interface WorkbenchScope {
+  sessionId?: string
+  cwd?: string
+  root?: string
+}
+
+/**
+ * 0.2 会话作用域：右栏 tab 由框架通过 inject(sessionId) 注入会话身份
+ * （\`sessions.list\` 不再暴露 current），cwd 仍从会话目录读取。
+ * 快照必须引用稳定，否则 fused 页面重渲染会撞 React 更新深度上限。
+ */
+export function useSessionWorkbenchScope(ctx: ClientContext, sessionId?: string): WorkbenchScope {
+  const sessions = ctx.get('sessions') as unknown as ISessions
+  const cache = useRef<{ key: string; value: WorkbenchScope }>()
+  return useSyncExternalStore(
+    callback => sessions.list.subscribe(callback),
+    () => {
+      const view = sessions.list.getSnapshot() as unknown as { byId?: Record<string, { cwd?: string }> }
+      const cwd = sessionId === undefined ? undefined : view.byId?.[sessionId]?.cwd
+      const key = `${sessionId ?? ''}|${cwd ?? ''}`
+      if (cache.current?.key === key) return cache.current.value
+      const next: WorkbenchScope = { sessionId, cwd, root: cwd }
+      cache.current = { key, value: next }
+      return next
+    },
+  )
+}
+
+/** Address one workspace-scoped host route. */
+export function workbenchUrl(route: string, scope: WorkbenchScope, path = '', extra?: Record<string, string>): string {
+  return `/api/workbench/${route}?${new URLSearchParams({
+    root: scope.root ?? scope.cwd ?? '',
+    path,
+    ...(scope.sessionId ? { session: scope.sessionId } : {}),
+    ...extra,
+  })}`
+}
+
+export async function getWorkbenchJson<T>(url: string, init?: RequestInit): Promise<T> {
+  const response = await fetch(url, init)
+  if (!response.ok) throw new Error(`${response.status} ${await response.text()}`)
+  return response.json() as Promise<T>
+}
+
+export function workspaceRelative(scope: WorkbenchScope, path: string): string {
+  const normalized = path.replaceAll('\\', '/')
+  const cwd = scope.cwd?.replaceAll('\\', '/').replace(/\/+$/u, '')
+  return cwd && normalized.startsWith(`${cwd}/`) ? normalized.slice(cwd.length + 1) : normalized.replace(/^\.\//u, '')
+}

package/src/client/sidebar/sidebar-header.module.css

@@ -0,0 +1,72 @@
+/*
+ * 侧栏标题行（官方 shell 的 DOM，不属于本包）。
+ *
+ * 官方 sidebar 展开时在标题行左端渲染 DeepSeek 品牌锁排（whale mark + 字标，
+ * 由 @deepseek-ai/dsh-client-ui-brand-official 填入 sidebar.brand.mark /
+ * sidebar.brand.name），右端渲染折叠/展开按钮；收起成 rail 之后，同一枚 mark
+ * 又成了按钮的外观。本包一律不要这枚品牌：
+ *
+ *  - 标题行的品牌位与它那个「新建会话」隐形点击区不出现（按钮本身也不能留在
+ *    可点区里，所以隐藏的是 .brand 元素而不是它的内容）；
+ *  - 标题行因此不再承载任何东西，整行收掉（展开态与 rail 都不留空带）；
+ *  - 折叠/展开按钮搬到底部页脚，展开态与「设置」行并列（右下角），rail 排在
+ *    设置齿轮正上方；两种状态下按钮都显示面板图标，不再用品牌 mark 当外观。
+ *
+ * 锚定方式与 compat shim 打出的 data-pane="sidebar" 同一路数——官方只给这些
+ * 节点 css-module 局部名（hash_local，如 hHd-Xa_logoRow）。选择器里的 `_` 前缀
+ * 就是那层 hash 与局部名的分隔，用来避免 `[class*='toggle']` 这类过宽的匹配：
+ * 侧栏里 `_collapsed` / `_toggle` / `_logoRow` 各自只命中一个官方节点。
+ * 官方改局部名或挪动按钮归属时，这里要同步。
+ */
+
+/* 品牌位（含其隐形点击区）不出现。 */
+[data-pane='sidebar'] [class*='_logoRow'] > [class*='_brand'] {
+  display: none;
+}
+
+/* 标题行不再有内容：整行收掉，并放开裁剪，免得影响搬走的按钮。 */
+[data-pane='sidebar'] [class*='_logoRow'] {
+  height: 0;
+  margin: 0;
+  padding: 0;
+  overflow: visible;
+}
+
+/* 折叠按钮的定位基准：侧栏列本身（列与官方 root 同尺寸，中间层是 display:contents）。 */
+[data-pane='sidebar'] {
+  position: relative;
+}
+
+/*
+ * 展开态：右下角，与「设置」行同一水平线（右缘对齐侧栏内容右缘）。
+ * 「设置」那行是整行按钮，右端 28px 与按钮重叠；z-index 让重叠处归折叠按钮
+ * （两者都是定位元素且 z-index:auto 时，命中测试按 DOM 顺序，设置行在后）。
+ */
+[data-pane='sidebar']:not(:has([class*='_collapsed'])) [class*='_toggle'] {
+  position: absolute;
+  z-index: 2;
+  right: 12px;
+  bottom: 16px;
+}
+
+/*
+ * rail：与设置齿轮同轴排在其上方（36px 按钮 + 8px 间距），不再出现在栏首。
+ * 用 margin 居中而不是 transform，避免覆盖官方 rail 入场动画的 transform。
+ */
+[data-pane='sidebar']:has([class*='_collapsed']) [class*='_toggle'] {
+  position: absolute;
+  z-index: 2;
+  right: 0;
+  bottom: 60px;
+  left: 0;
+  margin-inline: auto;
+}
+
+/* rail 的按钮外观：恒定显示面板图标，官方那枚品牌 mark 不出现。 */
+[data-pane='sidebar'] [class*='_railMark'] {
+  display: none;
+}
+
+[data-pane='sidebar']:has([class*='_collapsed']) [class*='_panelIcon'] {
+  display: inline;
+}