@michengai/dsh-codex-ui 0.2.88 → 0.2.89

package/CHANGELOG.md

@@ -4,6 +4,31 @@
 
 This changelog records recent releases of DSH Codex UI and its one-click installer. Earlier changes remain available in the [Git history](https://github.com/MichengAI/dsh-codex-ui/commits/main).
 
+## 0.2.89 — 2026-08-27
+
+Companion release: `@michengai/dsh-codex-suite-installer@0.1.6`.
+
+### Added
+
+- Persisted workspace, channel, and scheduled-task folder expansion independently across refreshes with versioned, failure-safe browser storage.
+- Added scheduled-task list/overview switching, direct task-settings navigation, and group archive actions.
+- Added Node.js 22/24 CI for pushes and pull requests, and made the tag Release workflow run the full test suite before creating a release.
+
+### Fixed
+
+- Stopped classifying ordinary conversations as scheduled tasks from an editable timestamp-shaped title; automation ownership now requires the stable session ID prefix.
+- Made group archive continue after individual failures, clean local pin/unread state only for successful items, and leave failures selected for retry.
+- Validated scheduled-task settings requests at runtime, guarded browser storage access, and extended lazy Settings navigation to four seconds.
+- Restricted the Windows Explorer Host endpoint to exact registered workspace roots, rejecting drive roots, UNC paths, relative paths, children, and unrelated absolute paths.
+- Reduced compatibility observer work by filtering unrelated conversation, permission, and Settings DOM mutations before scheduling scans.
+
+### Release process
+
+- Aligned the root package, lightweight installer, private legacy Suite snapshot, member pins, and version-contract assertions; the aggregate Suite remains retired.
+- Corrected the installer command and executable name in local-verification help and READMEs, and added a build contract for the client bundle's static runtime modules.
+- Tracked and refreshed the current handoff documentation under `docs/00-交接入口/` while leaving historical documentation ignored.
+- Hardened the Windows installer against shell metacharacters in `DSH_BIN`.
+
 ## 0.2.88 — 2026-08-26
 
 Companion release: `@michengai/dsh-codex-suite-installer@0.1.5`.

package/CHANGELOG.zh-CN.md

@@ -4,6 +4,31 @@
 
 本日志记录 DSH Codex UI 及其一键安装器的最近发布；更早的变更可查看 [Git 提交历史](https://github.com/MichengAI/dsh-codex-ui/commits/main)。
 
+## 0.2.89 — 2026-08-27
+
+配套版本：`@michengai/dsh-codex-suite-installer@0.1.6`。
+
+### 新增
+
+- 工作区、频道和定时任务文件夹分别持久化展开/折叠状态；存储带版本，损坏或不可用时安全回退。
+- 定时任务侧栏增加列表/概览切换、直接打开任务设置和整组归档。
+- main push 与 PR 在 Node.js 22/24 上运行 CI；tag Release 创建版本前也必须通过完整测试。
+
+### 修复
+
+- 不再根据用户可编辑的时间戳格式标题把普通会话误判为定时任务；自动化归属只认稳定的会话 ID 前缀。
+- 整组归档遇到单项失败时继续处理后续会话，只清理成功项的本地置顶/未读状态，并保留失败项供重试。
+- 为定时任务设置请求增加运行时校验，保护浏览器存储访问，并把设置壳慢加载等待时间延长到 4 秒。
+- Windows Explorer Host 端点只允许打开已注册的精确工作区根，拒绝盘符根、UNC、相对路径、子路径与无关绝对路径。
+- 会话、权限和设置 DOM 兼容观察先过滤无关变更，再调度扫描，降低流式输出期间的额外工作。
+
+### 发布流程
+
+- 对齐根包、轻量安装器、私有旧 Suite 快照、成员钉版和版本契约断言；聚合 Suite 继续停止发布。
+- 修正本地验证说明中的安装器路径、帮助与错误前缀，并增加客户端 bundle 静态运行时模块的构建契约。
+- 将 `docs/00-交接入口/` 纳入版本控制并按当前实现更新，其他历史文档继续忽略。
+- 拒绝 `DSH_BIN` 中的 Windows shell 元字符，收紧安装器调用边界。
+
 ## 0.2.88 — 2026-08-26
 
 配套版本：`@michengai/dsh-codex-suite-installer@0.1.5`。

package/dist/client.js

@@ -19,7 +19,8 @@ window.__ModuleLoader__.load({
 			}
 		}
 		let cancelPendingNavigation;
-		function openSettingsSection(root, label, onMissing) {
+		const SETTINGS_NAVIGATION_TIMEOUT_MS = 4e3;
+		function openSettingsSection(root, label, onMissing, onSelected) {
 			const labels = typeof label === "string" ? [label] : label;
 			const trigger = root?.querySelector("[aria-haspopup=\"dialog\"]");
 			if (trigger === null || trigger === void 0) {
@@ -47,6 +48,7 @@ window.__ModuleLoader__.load({
 				if (target === void 0) return false;
 				cleanup();
 				target.click();
+				onSelected?.();
 				return true;
 			};
 			const schedule = () => {
@@ -61,7 +63,7 @@ window.__ModuleLoader__.load({
 				cleanup();
 				console.warn(`[michengai-codex-ui] 未找到设置分区：${labels.join(" / ")}`);
 				onMissing?.();
-			}, 1500);
+			}, SETTINGS_NAVIGATION_TIMEOUT_MS);
 			observer.observe(document.body, {
 				childList: true,
 				subtree: true
@@ -564,26 +566,33 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
-		function GroupHead({ expanded, title, icon, onToggle }) {
+		function GroupHead({ expanded, title, icon, onToggle, actions, menuOpen }) {
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: "dcu-wb-project-head",
+				className: `dcu-wb-project-head${menuOpen === true ? " dcu-wb-menu-open" : ""}`,
 				role: "treeitem",
 				"aria-expanded": expanded,
 				tabIndex: 0,
 				onClick: onToggle,
 				onKeyDown: (event) => {
-					if (event.key === "Enter" || event.key === " ") {
+					if (event.target === event.currentTarget && (event.key === "Enter" || event.key === " ")) {
 						event.preventDefault();
 						onToggle();
 					}
 				},
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-					className: "dcu-wb-folder",
-					children: icon
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-					className: "dcu-wb-project-title",
-					children: title
-				})]
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dcu-wb-folder",
+						children: icon
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dcu-wb-project-title",
+						children: title
+					}),
+					actions !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dcu-wb-actions",
+						children: actions
+					})
+				]
 			});
 		}
 		//#endregion
@@ -931,9 +940,14 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			style.textContent = CONVERSATION_HEADER_STYLE;
 			doc.head.append(style);
 		}
-		/** 观察会话顶栏与用户气泡；所有变更按帧合并，避免流式输出时每个 token 都全文档扫描。 */
+		const CONVERSATION_DECORATION_SELECTOR = "header, [data-conversation-scroll], [data-chat-flow-kind=\"user\"], [data-pending-steering]";
+		function conversationDecorationMutation(records) {
+			const relevant = (node) => node instanceof Element && (node.matches(CONVERSATION_DECORATION_SELECTOR) || node.closest("header, [data-chat-flow-kind=\"user\"], [data-pending-steering]") !== null || node.querySelector(CONVERSATION_DECORATION_SELECTOR) !== null);
+			return records.some((record) => relevant(record.target) || [...record.addedNodes].some(relevant) || [...record.removedNodes].some(relevant));
+		}
+		/** 观察会话顶栏与用户气泡；只对相关子树变更按帧合并，流式回答不会触发全文档扫描。 */
 		function observeConversationHeader(doc = document) {
-			if (doc.head === null) return () => {};
+			if (doc.head === null || doc.body === null) return () => {};
 			ensureStyle(doc);
 			ensureUserBubbleStyle(doc);
 			let applying = false;
@@ -965,8 +979,10 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 				frame = window.requestAnimationFrame(run);
 			};
 			sync();
-			const observer = new MutationObserver(sync);
-			observer.observe(doc.documentElement, {
+			const observer = new MutationObserver((records) => {
+				if (conversationDecorationMutation(records)) sync();
+			});
+			observer.observe(doc.body, {
 				childList: true,
 				subtree: true
 			});
@@ -1163,9 +1179,11 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 				]
 			});
 		}
-		const AUTOMATION_TITLE_RE = /^\d{4}-\d{2}-\d{2} \d{2}:\d{2}\s+-\s+/;
-		function isScheduleSession(id, title) {
-			return id.startsWith("dsh-automation-session-") || AUTOMATION_TITLE_RE.test(title.trim());
+		//#endregion
+		//#region src/client/schedule-sessions.ts
+		const AUTOMATION_SESSION_PREFIX = "dsh-automation-session-";
+		function isScheduleSession(id, _title) {
+			return id.startsWith(AUTOMATION_SESSION_PREFIX);
 		}
 		function scheduleGroupName(title) {
 			const name = /^(\d{4}-\d{2}-\d{2} \d{2}:\d{2})\s*-\s*(.+)$/.exec(title.trim())?.[2]?.trim();
@@ -1188,6 +1206,9 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			return [...groups.values()].map((group) => ({
 				...group,
 				sessions: [...group.sessions].sort((left, right) => (right.updatedAt ?? 0) - (left.updatedAt ?? 0))
+			})).sort((left, right) => left.label.localeCompare(right.label, "zh-CN", {
+				numeric: true,
+				sensitivity: "base"
 			}));
 		}
 		//#endregion
@@ -1297,6 +1318,40 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			return fallback !== void 0 && fallback.trim() !== "" ? fallback : void 0;
 		}
 		//#endregion
+		//#region src/client/tree-expansion.ts
+		const WORKSPACE_EXPANSION_STORAGE_KEY = "dsh-codex-ui.workspace-expansion.v1";
+		const CHANNEL_EXPANSION_STORAGE_KEY = "dsh-codex-ui.channel-expansion.v1";
+		const SCHEDULE_EXPANSION_STORAGE_KEY = "dsh-codex-ui.schedule-expansion.v1";
+		const MAX_EXPANSION_ENTRIES = 500;
+		const MAX_EXPANSION_KEY_LENGTH = 512;
+		function browserStorage() {
+			if (typeof window === "undefined") return void 0;
+			try {
+				return window.localStorage;
+			} catch {
+				return;
+			}
+		}
+		function parseTreeExpansionState(value) {
+			if (value === null || typeof value !== "object" || Array.isArray(value)) return {};
+			const entries = Object.entries(value).filter(([key, expanded]) => key.length > 0 && key.length <= MAX_EXPANSION_KEY_LENGTH && typeof expanded === "boolean").slice(0, MAX_EXPANSION_ENTRIES);
+			return Object.fromEntries(entries);
+		}
+		function readTreeExpansionState(storage, key) {
+			if (storage === void 0) return {};
+			try {
+				return parseTreeExpansionState(JSON.parse(storage.getItem(key) ?? "{}"));
+			} catch {
+				return {};
+			}
+		}
+		function writeTreeExpansionState(storage, key, state) {
+			if (storage === void 0) return;
+			try {
+				storage.setItem(key, JSON.stringify(parseTreeExpansionState(state)));
+			} catch {}
+		}
+		//#endregion
 		//#region src/client/CodexWorkspaceBrowser.tsx
 		const stylesheet$4 = `
 .dcu-wb{--dcu-wb-inset:4px;display:flex;flex:1;min-height:0;flex-direction:column;padding:4px var(--dcu-wb-inset) 8px;color:var(--dcu-sidebar-primary)}
@@ -1342,12 +1397,7 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 		const typographyStyles = `.dcu-wb{font:14px/20px var(--dcu-font,var(--dsw-font-family))}.dcu-wb-section-label{color:var(--dcu-sidebar-tertiary);font-size:13px;font-weight:400;letter-spacing:.02em}.dcu-wb-project-title{font-size:14px;line-height:20px;font-weight:400;color:var(--dcu-sidebar-primary)}.dcu-wb-session-title{font-size:14px;line-height:20px;font-weight:400;color:var(--dcu-sidebar-secondary)}.dcu-wb-session.dcu-wb-selected .dcu-wb-session-title,.dcu-wb-session:hover .dcu-wb-session-title{color:var(--dcu-sidebar-primary)}.dcu-wb-empty{color:var(--dcu-sidebar-tertiary);font-size:13px;line-height:18px}.dcu-wb-nochat{padding:0 8px 4px 28px;color:var(--dcu-sidebar-tertiary);font-size:14px;line-height:20px}`;
 		const WORKSPACE_TREE_STYLE = stylesheet$4 + runningStyles + typographyStyles;
 		function storage$1() {
-			if (typeof window === "undefined") return void 0;
-			try {
-				return window.localStorage;
-			} catch {
-				return;
-			}
+			return browserStorage();
 		}
 		function sameIds(left, right) {
 			return left.length === right.length && left.every((id, index) => id === right[index]);
@@ -1367,7 +1417,7 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 		function CodexWorkspaceTree({ wide, useSessions, useWorkspaces, t, archiveSession, deleteSession, deleteWorkspace, forkSession, insertSessionBefore, insertWorkspaceBefore, openPath, openSession, renameSession, renameWorkspace, startSession }) {
 			const sessions = useSessions((state) => state);
 			const workspaces = useWorkspaces((state) => state);
-			const [expanded, setExpanded] = (0, react.useState)({});
+			const [expanded, setExpanded] = (0, react.useState)(() => readTreeExpansionState(storage$1(), WORKSPACE_EXPANSION_STORAGE_KEY));
 			const [pinnedWorkspaceIds, setPinnedWorkspaceIdsState] = (0, react.useState)(() => readPinnedWorkspaceIds(storage$1()));
 			const pinnedWorkspaceIdsRef = (0, react.useRef)(pinnedWorkspaceIds);
 			pinnedWorkspaceIdsRef.current = pinnedWorkspaceIds;
@@ -1422,6 +1472,9 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			const headerMenuPointerAt = (0, react.useRef)(0);
 			const [sessionDrag, setSessionDrag] = (0, react.useState)();
 			const [sessionDropTarget, setSessionDropTarget] = (0, react.useState)();
+			(0, react.useEffect)(() => {
+				writeTreeExpansionState(storage$1(), WORKSPACE_EXPANSION_STORAGE_KEY, expanded);
+			}, [expanded]);
 			(0, react.useEffect)(() => {
 				savePinnedWorkspaceIds(storage$1(), pinnedWorkspaceIds);
 				if (!pinnedHostHydratedRef.current) return;
@@ -2545,7 +2598,7 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 		//#endregion
 		//#region src/client/session-row-actions.tsx
 		function storage() {
-			return typeof window === "undefined" ? void 0 : window.localStorage;
+			return browserStorage();
 		}
 		/** 频道/定时共用的本地置顶与未读标记。 */
 		function useSessionFlags(current) {
@@ -2796,7 +2849,7 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			const sessions = useSessions((state) => state);
 			const [groups, setGroups] = (0, react.useState)([]);
 			const [pollError, setPollError] = (0, react.useState)();
-			const [expanded, setExpanded] = (0, react.useState)({});
+			const [expanded, setExpanded] = (0, react.useState)(() => readTreeExpansionState(browserStorage(), CHANNEL_EXPANSION_STORAGE_KEY));
 			const flags = useSessionFlags(sessions.current);
 			const { showTip, hideTip, dismissTip } = useHoverDispatch();
 			const { busy, error, setError, run } = useBusyAction(() => {
@@ -2811,6 +2864,9 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 				setMenu(void 0);
 				setError(void 0);
 			});
+			(0, react.useEffect)(() => {
+				writeTreeExpansionState(browserStorage(), CHANNEL_EXPANSION_STORAGE_KEY, expanded);
+			}, [expanded]);
 			(0, react.useEffect)(() => {
 				let disposed = false;
 				let active;
@@ -2960,6 +3016,23 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			});
 		}
 		//#endregion
+		//#region src/client/schedule-group-actions.ts
+		/** 尝试归档整组并保留逐项结果，避免首个失败让后续会话永远不执行。 */
+		async function archiveScheduleGroup(sessionIds, archiveSession) {
+			const archivedIds = [];
+			const failedIds = [];
+			for (const sessionId of sessionIds) try {
+				await archiveSession(sessionId);
+				archivedIds.push(sessionId);
+			} catch {
+				failedIds.push(sessionId);
+			}
+			return {
+				archivedIds,
+				failedIds
+			};
+		}
+		//#endregion
 		//#region src/client/ScheduleBrowser.tsx
 		function ScheduleClock() {
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("svg", {
@@ -2979,7 +3052,8 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 		/** 定时树：数据来自会话快照，行/菜单/悬停与任务树共用。 */
 		function ScheduleBrowser(props) {
 			const [menu, setMenu] = (0, react.useState)();
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(HoverShell, {
+			const [view, setView] = (0, react.useState)("runs");
+			if (props.overviewContent === void 0) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(HoverShell, {
 				blocked: menu !== void 0,
 				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ScheduleBrowserTree, {
 					...props,
@@ -2987,11 +3061,50 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 					setMenu
 				})
 			});
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dcu-schedule-browser",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dcu-schedule-views",
+					role: "tablist",
+					"aria-label": props.t("sidebar.scheduleTab"),
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						role: "tab",
+						"aria-selected": view === "runs",
+						onClick: () => {
+							setMenu(void 0);
+							setView("runs");
+						},
+						children: props.t("sidebar.runsTab")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						role: "tab",
+						"aria-selected": view === "overview",
+						onClick: () => {
+							setMenu(void 0);
+							setView("overview");
+						},
+						children: props.t("sidebar.overviewTab")
+					})]
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					className: "dcu-schedule-pane",
+					children: view === "runs" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(HoverShell, {
+						blocked: menu !== void 0,
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ScheduleBrowserTree, {
+							...props,
+							menu,
+							setMenu
+						})
+					}) : props.overviewContent
+				})]
+			});
 		}
-		function ScheduleBrowserTree({ openSession, archiveSession, deleteSession, forkSession, renameSession, useSessions, useWorkspaces, t, menu, setMenu }) {
+		function ScheduleBrowserTree({ openSession, archiveSession, deleteSession, forkSession, renameSession, useSessions, useWorkspaces, t, openTaskSettings, menu, setMenu }) {
 			const sessions = useSessions((state) => state);
 			const workspaces = useWorkspaces((state) => state);
-			const [expanded, setExpanded] = (0, react.useState)({});
+			const [expanded, setExpanded] = (0, react.useState)(() => readTreeExpansionState(browserStorage(), SCHEDULE_EXPANSION_STORAGE_KEY));
+			const [groupMenu, setGroupMenu] = (0, react.useState)();
+			const [archiveGroupTarget, setArchiveGroupTarget] = (0, react.useState)();
 			const flags = useSessionFlags(sessions.current);
 			const { showTip, hideTip, dismissTip } = useHoverDispatch();
 			const { busy, error, setError, run } = useBusyAction(() => {
@@ -3006,6 +3119,26 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 				setMenu(void 0);
 				setError(void 0);
 			});
+			const groupMenuItems = [
+				{
+					id: "task-settings",
+					label: t("schedule.taskSettings"),
+					icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconSettingsOutline16, { size: 16 })
+				},
+				{
+					type: "separator",
+					id: "group-separator"
+				},
+				{
+					id: "archive-group",
+					label: t("schedule.archiveGroup"),
+					icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconArchiveOutline20, { size: 16 }),
+					danger: true
+				}
+			];
+			(0, react.useEffect)(() => {
+				writeTreeExpansionState(browserStorage(), SCHEDULE_EXPANSION_STORAGE_KEY, expanded);
+			}, [expanded]);
 			const groups = (0, react.useMemo)(() => {
 				const archived = new Set(workspaces.archivedSessionIds ?? []);
 				return groupScheduleSessions((sessions.ids ?? Object.keys(sessions.byId)).flatMap((id) => {
@@ -3049,12 +3182,52 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 										expanded: isExpanded,
 										title: group.label,
 										icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ScheduleClock, {}),
+										menuOpen: groupMenu === group.id,
 										onToggle: () => {
 											setExpanded((current) => ({
 												...current,
 												[group.id]: !isExpanded
 											}));
-										}
+										},
+										actions: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Menu, {
+											open: groupMenu === group.id,
+											onClose: () => {
+												setGroupMenu(void 0);
+											},
+											items: groupMenuItems,
+											onSelect: (action) => {
+												setGroupMenu(void 0);
+												if (action === "task-settings") {
+													setMenu(void 0);
+													openTaskSettings?.({
+														name: group.label,
+														sessionIds: group.sessions.map((session) => session.id)
+													});
+												}
+												if (action === "archive-group") {
+													setError(void 0);
+													setArchiveGroupTarget({
+														id: group.id,
+														label: group.label,
+														sessionIds: group.sessions.map((session) => session.id)
+													});
+												}
+											},
+											portal: true,
+											dense: true,
+											compact: true,
+											anchor: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+												type: "button",
+												className: "dcu-wb-more",
+												"aria-label": t("schedule.groupActions", { name: group.label }),
+												onClick: (event) => {
+													event.stopPropagation();
+													setMenu(void 0);
+													setGroupMenu((current) => current === group.id ? void 0 : group.id);
+												},
+												children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconEllipsisOutline16, { size: 16 })
+											})
+										})
 									}), isExpanded && group.sessions.map((session) => {
 										const id = session.id;
 										const title = session.title;
@@ -3127,6 +3300,73 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 						error,
 						...dialogs,
 						setError
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(_deepseek_ai_dsh_client_ui_primitives.Modal, {
+						open: archiveGroupTarget !== void 0,
+						onClose: () => {
+							if (busy !== "archive-group") {
+								setArchiveGroupTarget(void 0);
+								setError(void 0);
+							}
+						},
+						closeLabel: t("sessions.close"),
+						title: t("schedule.archiveGroup"),
+						footer: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dcu-wb-rename-actions",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+								variant: "outline",
+								disabled: busy === "archive-group",
+								onClick: () => {
+									setArchiveGroupTarget(void 0);
+									setError(void 0);
+								},
+								children: t("sessions.cancel")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+								variant: "outline",
+								className: "dcu-wb-delete-button",
+								disabled: busy === "archive-group",
+								onClick: () => {
+									if (archiveGroupTarget === void 0) return;
+									const target = archiveGroupTarget;
+									run("archive-group", async () => {
+										const result = await archiveScheduleGroup(target.sessionIds, (id) => archiveSession(id));
+										flags.setPinnedSessionIds((ids) => ids.filter((id) => !result.archivedIds.includes(id)));
+										flags.setUnreadSessionIds((ids) => ids.filter((id) => !result.archivedIds.includes(id)));
+										if (result.failedIds.length > 0) {
+											setArchiveGroupTarget({
+												...target,
+												sessionIds: result.failedIds
+											});
+											throw new Error(t("schedule.archiveGroupPartial", {
+												archived: result.archivedIds.length,
+												failed: result.failedIds.length
+											}));
+										}
+										setArchiveGroupTarget(void 0);
+									});
+								},
+								children: t("schedule.archiveGroupConfirm")
+							})]
+						}),
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dcu-wb-delete-copy",
+								children: archiveGroupTarget === void 0 ? "" : t("schedule.archiveGroupDescription", {
+									name: archiveGroupTarget.label,
+									count: archiveGroupTarget.sessionIds.length
+								})
+							}),
+							busy === "archive-group" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "dcu-wb-error",
+								role: "status",
+								children: t("schedule.archiveGroupPending")
+							}),
+							error !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "dcu-wb-error",
+								role: "alert",
+								children: t("sessions.failed", { message: error })
+							})
+						]
 					})
 				]
 			});
@@ -3229,20 +3469,51 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			};
 		}
 		//#endregion
+		//#region src/client/automation-task-settings.ts
+		const AUTOMATION_TASK_SETTINGS_EVENT = "dsh-automation:open-task-settings";
+		const AUTOMATION_TASK_SETTINGS_STORAGE_KEY = "dsh-automation:pending-task-settings";
+		function parseAutomationTaskSettingsRequest(value) {
+			if (value === null || typeof value !== "object") return void 0;
+			const record = value;
+			if (typeof record.name !== "string" || record.name.trim() === "" || !Array.isArray(record.sessionIds) || record.sessionIds.some((id) => typeof id !== "string" || id === "")) return void 0;
+			if (record.automationId !== void 0 && (typeof record.automationId !== "string" || record.automationId.trim() === "")) return void 0;
+			return {
+				...typeof record.automationId === "string" ? { automationId: record.automationId } : {},
+				name: record.name,
+				sessionIds: [...record.sessionIds]
+			};
+		}
+		/** 定时设置页可能切换分区后才挂载：先保存一次性请求，再通知已挂载实例。 */
+		function requestAutomationTaskSettings(request) {
+			if (typeof window === "undefined") return;
+			const validated = parseAutomationTaskSettingsRequest(request);
+			if (validated === void 0) return;
+			try {
+				window.sessionStorage.setItem(AUTOMATION_TASK_SETTINGS_STORAGE_KEY, JSON.stringify(validated));
+			} catch {}
+			window.dispatchEvent(new CustomEvent(AUTOMATION_TASK_SETTINGS_EVENT, { detail: validated }));
+		}
+		function clearAutomationTaskSettingsRequest() {
+			if (typeof window === "undefined") return;
+			try {
+				window.sessionStorage.removeItem(AUTOMATION_TASK_SETTINGS_STORAGE_KEY);
+			} catch {}
+		}
+		//#endregion
 		//#region src/client/CodexSidebar.tsx
 		const subscribeEmptyCompanionTabs = () => () => {};
 		const getEmptyCompanionTabs = () => EMPTY_COMPANION_TABS;
 		const SIDEBAR_COLLAPSE_SETTLE_MS = 140;
 		const stylesheet$3 = `
 .dcu-root{--dcu-font:Inter,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI","Microsoft YaHei UI",sans-serif;--dcu-sidebar-wide-width:240px;--dcu-sidebar-primary:#393d3e;--dcu-sidebar-secondary:#676b6c;--dcu-sidebar-tertiary:#9a9f9f;--dcu-sidebar-navigation:#4e5253;--dcu-sidebar-icon:#4e5253;--dcu-sidebar-hover:#dfe8e5;--dcu-sidebar-border:rgba(37,46,41,.10);--dcu-tip-bg:#ffffff;--dcu-tip-shadow:0 10px 32px rgba(31,39,36,.22);height:100%;min-width:0;box-sizing:border-box;display:flex;flex-direction:column;overflow:hidden;background:#eef7f5;color:var(--dcu-sidebar-primary);font:14px/20px var(--dcu-font)}body[data-ds-dark-theme] .dcu-root{background:#1d2120;--dcu-sidebar-primary:#b9bab9;--dcu-sidebar-secondary:#909191;--dcu-sidebar-tertiary:#666867;--dcu-sidebar-navigation:#b9bab9;--dcu-sidebar-icon:#afafaf;--dcu-sidebar-hover:#303432;--dcu-sidebar-border:rgba(255,255,255,.08);--dcu-tip-bg:#2a2e2c;--dcu-tip-shadow:0 10px 30px rgba(0,0,0,.28)}
-.dcu-expanded-shell{display:flex;width:var(--dcu-sidebar-wide-width);min-height:0;flex:1 0 auto;flex-direction:column;transform-origin:left center;transition:opacity 140ms ease-out,transform 180ms cubic-bezier(.16,1,.3,1);animation:dcu-sidebar-expanded-in 180ms cubic-bezier(.16,1,.3,1)}.dcu-compact-shell{display:none;width:56px}.dcu-root.dcu-collapsing .dcu-expanded-shell{opacity:0;transform:translateX(-6px);pointer-events:none}.dcu-root.dcu-compact .dcu-expanded-shell{display:none}.dcu-root.dcu-compact .dcu-compact-shell{display:flex;min-height:0;flex:1;flex-direction:column;align-items:center;animation:dcu-sidebar-compact-in 140ms ease-out}@keyframes dcu-sidebar-expanded-in{from{opacity:0;transform:translateX(-6px)}to{opacity:1;transform:none}}@keyframes dcu-sidebar-compact-in{from{opacity:0;transform:translateX(-4px)}to{opacity:1;transform:none}}
+.dcu-expanded-shell{display:flex;width:var(--dcu-sidebar-wide-width);min-height:0;flex:1 1 0;overflow:hidden;flex-direction:column;transform-origin:left center;transition:opacity 140ms ease-out,transform 180ms cubic-bezier(.16,1,.3,1);animation:dcu-sidebar-expanded-in 180ms cubic-bezier(.16,1,.3,1)}.dcu-compact-shell{display:none;width:56px}.dcu-root.dcu-collapsing .dcu-expanded-shell{opacity:0;transform:translateX(-6px);pointer-events:none}.dcu-root.dcu-compact .dcu-expanded-shell{display:none}.dcu-root.dcu-compact .dcu-compact-shell{display:flex;min-height:0;flex:1;flex-direction:column;align-items:center;animation:dcu-sidebar-compact-in 140ms ease-out}@keyframes dcu-sidebar-expanded-in{from{opacity:0;transform:translateX(-6px)}to{opacity:1;transform:none}}@keyframes dcu-sidebar-compact-in{from{opacity:0;transform:translateX(-4px)}to{opacity:1;transform:none}}
 .dcu-root *{box-sizing:border-box}.dcu-head{display:grid;grid-template-columns:minmax(0,1fr) auto;align-items:center;column-gap:8px;height:60px;padding:8px 8px 8px 12px}.dcu-brand{border:0;background:transparent;color:inherit;padding:0;display:flex;align-items:center;min-width:0;overflow:hidden}.dcu-brand svg{display:block;width:auto;max-width:100%;height:24px;min-width:0}.dcu-head-actions{display:grid;grid-auto-flow:column;grid-auto-columns:28px;align-items:center;column-gap:8px;height:28px}
 .dcu-icon,.dcu-menu button,.dcu-footer-link{appearance:none;border:0;background:transparent;color:inherit;font:inherit;cursor:pointer}.dcu-icon{display:grid;place-items:center;width:36px;height:36px;border-radius:8px;color:var(--dcu-sidebar-icon)}.dcu-head .dcu-icon{display:inline-flex;align-items:center;justify-content:center;width:28px;height:28px;margin:0;padding:0;border-radius:50%;line-height:0}.dcu-head .dcu-icon svg{display:block;width:16px;height:16px}
 .dcu-icon:hover,.dcu-menu button:hover:not(:disabled),.dcu-footer-link:hover{background:var(--dcu-sidebar-hover);color:var(--dcu-sidebar-primary)}
 .dcu-menu{padding:0 6px 8px;display:grid;gap:2px}.dcu-menu button,.dcu-footer-link{display:grid;grid-template-columns:20px minmax(0,1fr);column-gap:8px;align-items:center;width:100%;min-height:36px;padding:0 4px;border-radius:8px;color:var(--dcu-sidebar-navigation);font-size:14px;line-height:20px;text-align:left;font-weight:400}
 .dcu-menu-icon{display:grid;place-items:center start;width:20px;height:20px}.dcu-menu-icon svg,.dcu-footer-link svg{display:block;width:16px;height:16px;color:var(--dcu-sidebar-icon)}.dcu-menu button:disabled{color:var(--dcu-sidebar-secondary);cursor:default;opacity:1}.dcu-menu button:disabled svg{color:var(--dcu-sidebar-secondary)}
 .dcu-extension-items{display:grid;gap:1px;margin:1px 0 4px 28px}.dcu-extension-items button{min-height:32px;color:var(--dcu-sidebar-secondary);font-size:13px;font-weight:400}
-.dcu-workspaces{display:flex;min-height:0;flex:1;flex-direction:column;margin-top:2px;padding-top:8px;border-top:1px solid var(--dcu-sidebar-border)}.dcu-workspaces.dcu-workspaces-tabs{padding-top:0;border-top:0}.dcu-im-tabs{display:flex;gap:16px;margin:0 8px 12px;padding:0;border-bottom:1px solid var(--dcu-sidebar-border)}.dcu-im-tab{appearance:none;border:0;background:transparent;color:var(--dcu-sidebar-secondary);padding:8px 0 7px;font:14px/22px var(--dcu-font);font-weight:500;cursor:pointer}.dcu-im-tab[data-on=true]{color:var(--dcu-sidebar-primary);font-weight:600;box-shadow:inset 0 -2px 0 currentColor}.dcu-native-workspaces{display:flex;min-height:0;flex:1}.dcu-native-workspaces>*{min-width:0;flex:1}.dcu-native-workspaces .ima-tabs,.dcu-native-workspaces [role=tablist]{display:none!important}.dcu-foot{display:grid;width:var(--dcu-sidebar-wide-width);gap:4px;padding:8px 6px 12px;border-top:1px solid var(--dcu-sidebar-border);transition:opacity 120ms ease-out,transform 160ms cubic-bezier(.16,1,.3,1)}.dcu-root.dcu-collapsing>.dcu-foot{opacity:0;transform:translateX(-4px);pointer-events:none}.dcu-footer-actions:empty,.dcu-settings-seat:empty{display:none}.dcu-settings-seat>button{width:100%;min-height:36px;padding-left:4px!important;color:var(--dcu-sidebar-navigation);font:14px/20px var(--dcu-font);font-weight:400}.dcu-compact{width:100%;align-items:flex-start;overflow:hidden;padding:10px 0 8px}.dcu-compact-nav{display:flex;flex:1;min-height:0;flex-direction:column;align-items:center;gap:2px;overflow:auto;padding:6px 0}.dcu-compact .dcu-icon{width:36px;height:36px;flex:none}.dcu-compact .dcu-foot{width:36px;margin-top:auto;margin-left:10px;padding:8px 0;border-top:0}.dcu-compact .dcu-settings-seat{width:36px;overflow:hidden}.dcu-compact .dcu-settings-seat>button{display:grid;place-items:center;width:36px;min-height:36px;padding:0!important;font-size:0!important;line-height:0}.dcu-compact .dcu-settings-seat>button svg{width:16px;height:16px}.dcu-compact .dcu-footer-link{display:flex;justify-content:center;width:36px;padding:0;font-size:0}.dcu-compact .dcu-footer-link svg{width:16px;height:16px}
+.dcu-workspaces{display:flex;min-height:0;flex:1;flex-direction:column;margin-top:2px;padding-top:8px;border-top:1px solid var(--dcu-sidebar-border)}.dcu-workspaces.dcu-workspaces-tabs{padding-top:0;border-top:0}.dcu-im-tabs{display:flex;gap:16px;margin:0 8px 12px;padding:0;border-bottom:1px solid var(--dcu-sidebar-border)}.dcu-im-tab{appearance:none;border:0;background:transparent;color:var(--dcu-sidebar-secondary);padding:8px 0 7px;font:14px/22px var(--dcu-font);font-weight:500;cursor:pointer}.dcu-im-tab[data-on=true]{color:var(--dcu-sidebar-primary);font-weight:600;box-shadow:inset 0 -2px 0 currentColor}.dcu-native-workspaces{display:flex;min-height:0;flex:1}.dcu-native-workspaces>*{min-width:0;flex:1}.dcu-native-workspaces .ima-tabs,.dcu-native-workspaces [role=tablist]{display:none!important}.dcu-schedule-browser{display:flex;min-height:0;flex:1;flex-direction:column}.dcu-native-workspaces .dcu-schedule-views{display:flex!important;flex:none;min-height:30px;margin:0 8px 8px;padding:2px;border:1px solid var(--dcu-sidebar-border);border-radius:8px;background:rgba(255,255,255,.025)}.dcu-schedule-views button{appearance:none;flex:1;min-width:0;height:24px;border:0;border-radius:6px;background:transparent;color:var(--dcu-sidebar-secondary);font:600 12px/18px var(--dcu-font);cursor:pointer}.dcu-schedule-views button[aria-selected=true]{background:var(--dcu-sidebar-hover);color:var(--dcu-sidebar-primary);box-shadow:inset 0 0 0 1px var(--dcu-sidebar-border)}.dcu-schedule-pane{display:flex;min-height:0;flex:1}.dcu-schedule-pane>*{min-width:0;flex:1}.dcu-schedule-pane>[data-slot="sidebar.schedule"]{display:flex!important;width:100%;min-width:0;flex:1}.dcu-schedule-pane>[data-slot="sidebar.schedule"]>.dsh-st-rail{width:100%;min-width:0;padding-right:8px;scrollbar-gutter:auto}.dcu-schedule-pane .dsh-st-overview{padding-right:8px}.dcu-foot{display:grid;width:var(--dcu-sidebar-wide-width);gap:4px;padding:8px 6px 12px;border-top:1px solid var(--dcu-sidebar-border);transition:opacity 120ms ease-out,transform 160ms cubic-bezier(.16,1,.3,1)}.dcu-root.dcu-collapsing>.dcu-foot{opacity:0;transform:translateX(-4px);pointer-events:none}.dcu-footer-actions:empty,.dcu-settings-seat:empty{display:none}.dcu-settings-seat>button{width:100%;min-height:36px;padding-left:4px!important;color:var(--dcu-sidebar-navigation);font:14px/20px var(--dcu-font);font-weight:400}.dcu-compact{width:100%;align-items:flex-start;overflow:hidden;padding:10px 0 8px}.dcu-compact-nav{display:flex;flex:1;min-height:0;flex-direction:column;align-items:center;gap:2px;overflow:auto;padding:6px 0}.dcu-compact .dcu-icon{width:36px;height:36px;flex:none}.dcu-compact .dcu-foot{width:36px;margin-top:auto;margin-left:10px;padding:8px 0;border-top:0}.dcu-compact .dcu-settings-seat{width:36px;overflow:hidden}.dcu-compact .dcu-settings-seat>button{display:grid;place-items:center;width:36px;min-height:36px;padding:0!important;font-size:0!important;line-height:0}.dcu-compact .dcu-settings-seat>button svg{width:16px;height:16px}.dcu-compact .dcu-footer-link{display:flex;justify-content:center;width:36px;padding:0;font-size:0}.dcu-compact .dcu-footer-link svg{width:16px;height:16px}
 .dcu-native-workspaces{flex-direction:column}.dcu-native-workspaces>[data-mcp-connector-top-mount=true]{flex:none}.dcu-root .mcpConnectorLauncher,.dcu-root [data-mcp-connector-top-mount=true]{display:none!important}
 .dcu-dependency-notice{margin:0 10px 8px;border:1px solid var(--dcu-sidebar-border);border-radius:8px;padding:8px;color:var(--dcu-sidebar-secondary);font-size:12px;line-height:18px}
 [role="dialog"][aria-labelledby]{width:min(1000px,calc(100vw - 48px));max-width:calc(100vw - 48px);height:min(800px,calc(100vh - 48px))}
@@ -3645,6 +3916,32 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 				wide: true,
 				expandSidebar
 			}), [expandSidebar, renderSlot]);
+			const scheduleOverviewSlot = (0, react.useMemo)(() => renderSlot("sidebar.schedule", {
+				wide: true,
+				expandSidebar,
+				openSession,
+				archiveSession,
+				deleteSession,
+				forkSession,
+				renameSession,
+				openPath,
+				useSessions,
+				useWorkspaces,
+				view: "overview",
+				showViewSwitch: false
+			}), [
+				archiveSession,
+				companionTabs.schedule,
+				deleteSession,
+				expandSidebar,
+				forkSession,
+				openPath,
+				openSession,
+				renameSession,
+				renderSlot,
+				useSessions,
+				useWorkspaces
+			]);
 			const sidebarStyle = { "--dcu-sidebar-wide-width": `${lastWideWidth.current}px` };
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("aside", {
 				className: `dcu-root${visualCompact ? " dcu-compact" : ""}${collapsing ? " dcu-collapsing" : ""}`,
@@ -3806,7 +4103,16 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 										renameSession,
 										useSessions,
 										useWorkspaces,
-										t
+										t,
+										overviewContent: scheduleOverviewSlot,
+										openTaskSettings: (request) => {
+											openSettingsSection(settingsSeat.current, t("sidebar.schedule"), () => {
+												clearAutomationTaskSettingsRequest();
+												selectSection(t("about.nav"));
+											}, () => {
+												requestAutomationTaskSettings(request);
+											});
+										}
 									})
 								}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 									className: "dcu-native-workspaces",
@@ -4385,6 +4691,8 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			"sidebar.tasksTab": "任务",
 			"sidebar.channelsTab": "频道",
 			"sidebar.scheduleTab": "定时",
+			"sidebar.runsTab": "执行记录",
+			"sidebar.overviewTab": "任务总览",
 			"channels.empty": "还没有频道会话。先在设置 → IM助理 里连接渠道。",
 			"channels.loadError": "无法读取频道会话。",
 			"channel.dingtalk": "钉钉",
@@ -4395,6 +4703,13 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			"channel.qq": "QQ",
 			"channel.telegram": "Telegram",
 			"schedule.empty": "还没有定时任务运行记录。",
+			"schedule.groupActions": "{name} 的任务操作",
+			"schedule.taskSettings": "任务设置",
+			"schedule.archiveGroup": "归档整组会话",
+			"schedule.archiveGroupConfirm": "确认归档",
+			"schedule.archiveGroupDescription": "将归档“{name}”下的 {count} 个会话。归档后可以在“设置 → 已归档”中恢复。",
+			"schedule.archiveGroupPending": "正在归档整组会话…",
+			"schedule.archiveGroupPartial": "已归档 {archived} 个会话，另有 {failed} 个失败。可以重试剩余会话。",
 			"search.placeholder": "搜索会话、设置和操作",
 			"search.empty": "没有匹配的结果。",
 			"search.sessions": "会话",
@@ -4508,6 +4823,8 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			"sidebar.tasksTab": "Tasks",
 			"sidebar.channelsTab": "Channels",
 			"sidebar.scheduleTab": "Schedule",
+			"sidebar.runsTab": "Run history",
+			"sidebar.overviewTab": "Task overview",
 			"channels.empty": "No channel conversations yet. Connect a channel in Settings → IM Assistant.",
 			"channels.loadError": "Could not load channel conversations.",
 			"channel.dingtalk": "DingTalk",
@@ -4518,6 +4835,13 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			"channel.qq": "QQ",
 			"channel.telegram": "Telegram",
 			"schedule.empty": "No scheduled-task runs yet.",
+			"schedule.groupActions": "Task actions for {name}",
+			"schedule.taskSettings": "Task settings",
+			"schedule.archiveGroup": "Archive all conversations",
+			"schedule.archiveGroupConfirm": "Archive all",
+			"schedule.archiveGroupDescription": "Archive all {count} conversations for “{name}”. You can restore them later in Settings → Archived.",
+			"schedule.archiveGroupPending": "Archiving conversations…",
+			"schedule.archiveGroupPartial": "Archived {archived} conversations; {failed} failed. You can retry the remaining conversations.",
 			"search.placeholder": "Search conversations, settings, and actions",
 			"search.empty": "No matching results.",
 			"search.sessions": "Conversations",
@@ -4695,11 +5019,14 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			if (typeof document === "undefined" || document.body === null) return () => {};
 			let applying = false;
 			let frame;
+			const pendingRoots = /* @__PURE__ */ new Set([document]);
 			const apply = () => {
 				if (applying) return;
 				applying = true;
+				const roots = [...pendingRoots];
+				pendingRoots.clear();
 				try {
-					applySettingsNavIcons(document);
+					for (const root of roots) applySettingsNavIcons(root);
 				} finally {
 					applying = false;
 				}
@@ -4712,7 +5039,18 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 				});
 			};
 			apply();
-			const observer = new MutationObserver(schedule);
+			const observer = new MutationObserver((records) => {
+				for (const record of records) {
+					const button = (record.target.nodeType === 1 ? record.target : record.target.parentElement)?.closest("[role=\"dialog\"] nav button");
+					if (button !== null && button !== void 0) pendingRoots.add(button.closest("[role=\"dialog\"]") ?? document);
+					for (const node of record.addedNodes) {
+						if (!(node instanceof Element)) continue;
+						if (node.matches("[role=\"dialog\"] nav button")) pendingRoots.add(node.closest("[role=\"dialog\"]") ?? document);
+						else if (node.querySelector("[role=\"dialog\"] nav button") !== null) pendingRoots.add(node);
+					}
+				}
+				if (pendingRoots.size > 0) schedule();
+			});
 			observer.observe(document.body, {
 				childList: true,
 				subtree: true
@@ -4790,12 +5128,15 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			if (typeof document === "undefined" || document.body === null) return () => {};
 			let applying = false;
 			let frame;
+			const pendingRoots = /* @__PURE__ */ new Set([document]);
 			const apply = () => {
 				if (applying) return;
 				applying = true;
 				const active = locale.getSnapshot?.().active ?? document.documentElement.lang ?? window.navigator.language ?? "zh";
+				const roots = [...pendingRoots];
+				pendingRoots.clear();
 				try {
-					localizePermissionLabels(document, active);
+					for (const root of roots) localizePermissionLabels(root, active);
 				} finally {
 					applying = false;
 				}
@@ -4808,13 +5149,26 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 				});
 			};
 			apply();
-			const observer = new MutationObserver(schedule);
+			const observer = new MutationObserver((records) => {
+				for (const record of records) {
+					const control = (record.target.nodeType === 1 ? record.target : record.target.parentElement)?.closest(INTERACTIVE_SELECTOR);
+					if (control !== null && control !== void 0) pendingRoots.add(control);
+					for (const node of record.addedNodes) {
+						if (!(node instanceof Element)) continue;
+						if (node.matches(INTERACTIVE_SELECTOR) || node.querySelector(INTERACTIVE_SELECTOR) !== null) pendingRoots.add(node);
+					}
+				}
+				if (pendingRoots.size > 0) schedule();
+			});
 			observer.observe(document.body, {
 				childList: true,
 				characterData: true,
 				subtree: true
 			});
-			const unsubscribe = locale.subscribe?.(schedule) ?? (() => {});
+			const unsubscribe = locale.subscribe?.(() => {
+				pendingRoots.add(document);
+				schedule();
+			}) ?? (() => {});
 			return () => {
 				observer.disconnect();
 				unsubscribe();

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import { spawn } from "node:child_process";
 import { mkdir, readFile, rename, rm, unlink, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
-import { basename, dirname, isAbsolute, join, resolve, sep } from "node:path";
+import { basename, dirname, isAbsolute, join, resolve, sep, win32 } from "node:path";
 import { fileURLToPath } from "node:url";
 import { randomUUID } from "node:crypto";
 //#region src/dependencies.ts
@@ -514,6 +514,28 @@ async function installDependenciesLocked(ids, requestHotUpdate) {
 	return dependencyStatuses();
 }
 //#endregion
+//#region src/explorer-path-policy.ts
+function normalizedWindowsPath(path) {
+	if (!win32.isAbsolute(path)) return void 0;
+	const normalized = win32.normalize(path.trim()).replace(/[\\/]+$/, "");
+	const root = win32.parse(normalized).root;
+	if (root.startsWith("\\\\") || normalized.toLocaleLowerCase("en-US") === root.replace(/[\\/]+$/, "").toLocaleLowerCase("en-US")) return;
+	return normalized;
+}
+/**
+* 仅允许打开注册表中已有的工作区根目录。
+* 不接受子目录、盘符根或 UNC，避免同源页面把 Host 端点当成任意路径启动器。
+*/
+function authorizedExplorerWorkspacePath(path, workspaceRoots) {
+	const target = normalizedWindowsPath(path);
+	if (target === void 0) return void 0;
+	const targetKey = target.toLocaleLowerCase("en-US");
+	for (const root of workspaceRoots) {
+		const normalizedRoot = normalizedWindowsPath(root);
+		if (normalizedRoot !== void 0 && normalizedRoot.toLocaleLowerCase("en-US") === targetKey) return normalizedRoot;
+	}
+}
+//#endregion
 //#region src/host-services.ts
 function requireService(ctx, key, method) {
 	const service = ctx.get(key);
@@ -525,7 +547,8 @@ function hostServices(ctx) {
 	return {
 		webServer: requireService(ctx, "webServer", "register"),
 		agents: requireService(ctx, "agents", "get"),
-		tools: requireService(ctx, "tools", "schemas")
+		tools: requireService(ctx, "tools", "schemas"),
+		workspaceRegistry: requireService(ctx, "workspaceRegistry", "list")
 	};
 }
 //#endregion
@@ -869,7 +892,8 @@ async function readRequestBody(request, maxBytes = maxPreferencesBodyBytes) {
 const inject = [
 	"webServer",
 	"agents",
-	"tools"
+	"tools",
+	"workspaceRegistry"
 ];
 /** 提供不泄露地址、命令和凭证的连接器目录。 */
 function apply(ctx) {
@@ -1100,7 +1124,16 @@ function apply(ctx) {
 						response.end(JSON.stringify({ error: "目录路径无效。" }));
 						return;
 					}
-					await foregroundExplorer.open(body.path);
+					const authorizedPath = authorizedExplorerWorkspacePath(body.path, host.workspaceRegistry.list().map((workspace) => workspace.path));
+					if (authorizedPath === void 0) {
+						response.writeHead(403, {
+							"content-type": "application/json; charset=utf-8",
+							"cache-control": "no-store"
+						});
+						response.end(JSON.stringify({ error: "仅允许打开已注册的工作区目录。" }));
+						return;
+					}
+					await foregroundExplorer.open(authorizedPath);
 					response.writeHead(200, {
 						"content-type": "application/json; charset=utf-8",
 						"cache-control": "no-store"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-codex-ui",
-  "version": "0.2.88",
+  "version": "0.2.89",
   "description": "以 Codex 风格重构 DSH Web 侧栏的独立客户端插件",
   "license": "Apache-2.0",
   "publishConfig": {
@@ -16,6 +16,7 @@
   },
   "homepage": "https://github.com/MichengAI/dsh-codex-ui#readme",
   "type": "module",
+  "packageManager": "pnpm@11.22.0",
   "main": "dist/index.mjs",
   "types": "dist/index.d.mts",
   "exports": {
@@ -56,7 +57,7 @@
   "scripts": {
     "build": "tsc --noEmit && tsdown",
     "typecheck": "tsc --noEmit",
-    "test": "pnpm run typecheck && vitest run tests/client-runtime.integration.spec.ts && tsdown && node tests/run-assertions.mjs"
+    "test": "pnpm run typecheck && vitest run && tsdown && node tests/run-assertions.mjs"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.1 <5.0.0",