@songtonyli/dsh-cli 0.1.12 → 0.1.13

package/node_modules/@deepseek-ai/dsh-client-ui-deliverables/lib/index.js

@@ -1,4 +1,12 @@
 import { remoteErrorOf } from "@deepseek-ai/dsh-typert-protocol";
+//#region lib/types/changes.js
+/** Authenticated GET route serving one announced change summary while its Session lives. */
+const CHANGED_FILES_PATH = "/api/changes.summary";
+/** Authenticated GET route serving one listed file's turn-start and turn-end comparison while its Session lives. */
+const CHANGES_DIFF_PATH = "/api/changes.diff";
+/** Authenticated POST route for opening a changed file on the Host desktop. */
+const CHANGES_OPEN_PATH = "/api/changes.open";
+//#endregion
 //#region lib/types/presented.js
 /** Authenticated POST route for opening a workspace file on the Host desktop. */
 const PRESENT_OPEN_PATH = "/api/present.open";
@@ -27,8 +35,10 @@ function isPresentedData(value) {
 //#endregion
 //#region lib/types/present-open.js
 /**
-* Register native opening inside Connection's authentication fence.
-* @param ctx - Session lookup, native opener, and route lifetime.
+* Register the deliverables routes inside Connection's authentication fence:
+* desktop metadata, change summaries and comparisons, declared-file actions,
+* and changed-file opening.
+* @param ctx - Session lookup, change summaries, native opener, and route lifetime.
 */
 function registerPresentOpen(ctx) {
 	ctx.connection.fetch.register({
@@ -37,18 +47,41 @@ function registerPresentOpen(ctx) {
 		requestBody: "buffered",
 		fetch: () => Promise.resolve(Response.json(ctx.sessionController.workspaceDesktop(), { headers: { "cache-control": "no-store" } }))
 	});
+	ctx.connection.fetch.register({
+		path: CHANGED_FILES_PATH,
+		methods: ["GET"],
+		requestBody: "buffered",
+		fetch: (request) => Promise.resolve(handleChangesSummary(ctx, request))
+	});
 	const lifetime = new AbortController();
 	const pending = /* @__PURE__ */ new Set();
 	ctx.effect(() => async () => {
 		lifetime.abort();
 		await Promise.allSettled(pending);
 	});
-	ctx.connection.fetch.register({
-		path: PRESENT_OPEN_PATH,
-		methods: ["POST"],
+	const routes = [
+		[
+			PRESENT_OPEN_PATH,
+			"POST",
+			handlePresentOpen
+		],
+		[
+			CHANGES_OPEN_PATH,
+			"POST",
+			handleChangesOpen
+		],
+		[
+			CHANGES_DIFF_PATH,
+			"GET",
+			handleChangesDiff
+		]
+	];
+	for (const [path, method, handler] of routes) ctx.connection.fetch.register({
+		path,
+		methods: [method],
 		requestBody: "buffered",
 		fetch: (request) => {
-			const task = handlePresentOpen(ctx, new Request(request, { signal: AbortSignal.any([request.signal, lifetime.signal]) }));
+			const task = handler(ctx, new Request(request, { signal: AbortSignal.any([request.signal, lifetime.signal]) }));
 			pending.add(task);
 			task.then(() => {
 				pending.delete(task);
@@ -59,59 +92,148 @@ function registerPresentOpen(ctx) {
 		}
 	});
 }
+const NUMERIC = /^\d+$/;
+function coordinate(value) {
+	return value !== null && NUMERIC.test(value) && Number.isSafeInteger(Number(value)) ? Number(value) : void 0;
+}
+/** Translate lookup and filesystem failures into the not-found or failure status the browser retries from. */
+function failureStatus(error) {
+	const remote = remoteErrorOf(error);
+	return remote?.code === "session/not-found" || remote?.code === "workspace-file/not-found" || remote?.code === "workspace-file/not-regular-file" || error instanceof Error && "code" in error && (error.code === "SESSION_QUERY_SESSION_NOT_FOUND" || error.code === "SESSION_QUERY_EVENT_NOT_FOUND" || error.code === "ENOENT" || error.code === "ENOTDIR") ? 404 : 500;
+}
+/**
+* Read the addressed event once the Host desktop is known to be available.
+* @returns the event with its Session header, or the refusal to answer with.
+*/
+async function readTarget(ctx, request, id, seq) {
+	request.signal.throwIfAborted();
+	if (!ctx.sessionController.workspaceDesktop().available) return new Response("Host desktop unavailable.", { status: 409 });
+	return ctx.sessionQuery.readEvent({
+		sessionId: id,
+		seq,
+		before: 0,
+		after: 0
+	}, request.signal);
+}
+/**
+* Open one verified Host path. A file is verified through the Session
+* filesystem; a directory is verified by the Host filesystem mapping alone.
+* @returns the HTTP status to answer with.
+*/
+async function openVerified(ctx, request, path, action) {
+	const { fs } = ctx;
+	const mapped = fs.processPathFromHostPath(path);
+	if (mapped === void 0 || fs.processPath(await fs.resolve(mapped, { signal: request.signal })) !== path) return new Response("Path has no verified Host path.", { status: 422 });
+	request.signal.throwIfAborted();
+	await ctx.sessionController.openWorkspacePath({
+		path,
+		...action === "reveal" ? { action } : {}
+	}, request.signal);
+	return new Response(null, {
+		status: 204,
+		headers: { "cache-control": "no-store" }
+	});
+}
 async function handlePresentOpen(ctx, request) {
 	const query = new URL(request.url).searchParams;
 	const action = query.get("action") ?? "open";
 	if (action !== "open" && action !== "reveal") return new Response("Invalid file action.", { status: 400 });
 	const id = query.get("sessionId");
-	const seq = query.get("seq");
-	const index = query.get("index");
-	if (!id || seq === null || index === null || !/^\d+$/.test(seq) || !/^\d+$/.test(index) || !Number.isSafeInteger(Number(seq)) || !Number.isSafeInteger(Number(index))) return new Response("Invalid Presented file coordinates.", { status: 400 });
+	const seq = coordinate(query.get("seq"));
+	const index = coordinate(query.get("index"));
+	if (!id || seq === void 0 || index === void 0) return new Response("Invalid Presented file coordinates.", { status: 400 });
 	try {
-		request.signal.throwIfAborted();
-		if (!ctx.sessionController.workspaceDesktop().available) return new Response("Host desktop unavailable.", { status: 409 });
-		const { target, session } = await ctx.sessionQuery.readEvent({
-			sessionId: id,
-			seq: Number(seq),
-			before: 0,
-			after: 0
-		}, request.signal);
-		const file = target.type === "deliverables/presented" && isPresentedData(target.data) ? target.data.files[Number(index)] : void 0;
+		const read = await readTarget(ctx, request, id, seq);
+		if (read instanceof Response) return read;
+		const { target, session } = read;
+		const file = target.type === "deliverables/presented" && isPresentedData(target.data) ? target.data.files[index] : void 0;
 		if (!isPresentedFile(file)) return new Response("Presented file not found in this Session result.", { status: 404 });
 		request.signal.throwIfAborted();
-		const { fs, workspaceFiles } = ctx;
-		const { absolutePath: path } = await workspaceFiles.stat({
+		const { absolutePath: path } = await ctx.workspaceFiles.stat({
 			sessionId: id,
 			workspaceRoot: session.cwd ?? ctx.sandboxPolicy.workspaceRoot
 		}, file.path, request.signal);
-		const mapped = fs.processPathFromHostPath(path);
-		if (mapped === void 0 || fs.processPath(await fs.resolve(mapped, { signal: request.signal })) !== path) return new Response("Presented file has no verified Host path.", { status: 422 });
+		return await openVerified(ctx, request, path, action);
+	} catch (error) {
 		request.signal.throwIfAborted();
-		await ctx.sessionController.openWorkspacePath({
-			path,
-			...action === "reveal" ? { action } : {}
-		}, request.signal);
-		return new Response(null, {
-			status: 204,
-			headers: { "cache-control": "no-store" }
-		});
+		return new Response("Presented file unavailable.", { status: failureStatus(error) });
+	}
+}
+/** The summary one `workspace/changes` event announced, without the Host working directory; 404 once the Host no longer serves it. */
+function handleChangesSummary(ctx, request) {
+	const query = new URL(request.url).searchParams;
+	const id = query.get("sessionId");
+	const seq = coordinate(query.get("seq"));
+	if (!id || seq === void 0) return new Response("Invalid change summary coordinates.", { status: 400 });
+	const summary = ctx.workspaceChanges.summary(id, seq);
+	if (summary === void 0) return new Response("Change summary unavailable.", { status: 404 });
+	const { turn, files, total, added, deleted } = summary;
+	return Response.json({
+		turn,
+		files,
+		total,
+		added,
+		deleted
+	}, { headers: { "cache-control": "no-store" } });
+}
+/** A changed file's coordinates from a route query, or the 400 to answer with. */
+function changedFileCoordinates(request) {
+	const query = new URL(request.url).searchParams;
+	const id = query.get("sessionId");
+	const seq = coordinate(query.get("seq"));
+	const index = coordinate(query.get("index"));
+	if (!id || seq === void 0 || index === void 0) return new Response("Invalid changed file coordinates.", { status: 400 });
+	return {
+		id,
+		seq,
+		index
+	};
+}
+/** One listed file's comparison; 404 once the Host no longer serves the summary or the index names no file. */
+async function handleChangesDiff(ctx, request) {
+	const coordinates = changedFileCoordinates(request);
+	if (coordinates instanceof Response) return coordinates;
+	const { id, seq, index } = coordinates;
+	try {
+		const diff = await ctx.workspaceChanges.diff(id, seq, index, request.signal);
+		if (diff === void 0) return new Response("Change comparison unavailable.", { status: 404 });
+		return Response.json(diff, { headers: { "cache-control": "no-store" } });
+	} catch (error) {
+		request.signal.throwIfAborted();
+		return new Response("Change comparison unavailable.", { status: failureStatus(error) });
+	}
+}
+async function handleChangesOpen(ctx, request) {
+	const coordinates = changedFileCoordinates(request);
+	if (coordinates instanceof Response) return coordinates;
+	const { id, seq, index } = coordinates;
+	try {
+		request.signal.throwIfAborted();
+		if (!ctx.sessionController.workspaceDesktop().available) return new Response("Host desktop unavailable.", { status: 409 });
+		const changes = ctx.workspaceChanges.summary(id, seq);
+		if (changes === void 0) return new Response("Change summary unavailable.", { status: 404 });
+		const workspaceRoot = changes.cwd;
+		const file = changes.files[index];
+		if (file === void 0) return new Response("Changed file not found in this summary.", { status: 404 });
+		const { absolutePath: path } = await ctx.workspaceFiles.stat({
+			sessionId: id,
+			workspaceRoot
+		}, file.path, request.signal);
+		return await openVerified(ctx, request, path, "open");
 	} catch (error) {
 		request.signal.throwIfAborted();
-		const remote = remoteErrorOf(error);
-		const missing = remote?.code === "session/not-found" || remote?.code === "workspace-file/not-found" || remote?.code === "workspace-file/not-regular-file" || error instanceof Error && "code" in error && (error.code === "SESSION_QUERY_SESSION_NOT_FOUND" || error.code === "SESSION_QUERY_EVENT_NOT_FOUND" || error.code === "ENOENT" || error.code === "ENOTDIR");
-		return new Response("Presented file unavailable.", { status: missing ? 404 : 500 });
+		return new Response("Changed file unavailable.", { status: failureStatus(error) });
 	}
 }
 //#endregion
 //#region lib/types/index.js
 /**
-* Deliverables plugin, node half. Registers the response-format guidance that
-* lets the browser half recognize final-response file references and serves
-* authenticated native opens of declared files. The browser
+* Deliverables plugin, node half. Registers Web file-reference guidance and
+* serves authenticated native opens of declared files. The browser
 * half ships via exports["./client"], discovered through the package.json
 * dsh.client declaration.
 */
-/** Services required for file-reference guidance and authenticated native opens of declared files. */
+/** Services required for file-reference guidance, change summaries, and authenticated native opens. */
 const inject = [
 	"systemPrompt",
 	"connection",
@@ -119,12 +241,13 @@ const inject = [
 	"sessionController",
 	"workspaceFiles",
 	"fs",
-	"sandboxPolicy"
+	"sandboxPolicy",
+	"workspaceChanges"
 ];
-/** Stable final-response guidance owned by the matching renderer. */
-const FILE_REFERENCE_PROMPT = "When you successfully create or modify files, mention the primary outputs in your final response. To make those and any other changed-file references clickable in Web, format them as Markdown inline code using the exact file-tool path, or a basename when unique among the files changed in that turn.";
+/** Static Web guidance for primary outputs and existing-file references. */
+const FILE_REFERENCE_PROMPT = "When you successfully create or modify files, mention the primary outputs in your final response. Outside commands, configuration expressions, and code blocks, link every mention of an existing file, including repeats and tables, to its full path relative to the working directory or absolute; append #L24 or #L24-L30 to the target for known lines. Use the filename or a clear alias as the label, adding only enough parent directories to distinguish files; keep full paths out of labels. Default to the name alone; when precise locations matter, append :24 or :24–30, with no # or L in the line suffix.";
 /**
-* Register model guidance for the file-reference renderer shipped by this package.
+* Register Web file-reference guidance and native opens for declared files.
 * @param ctx - host context carrying the system-prompt registry.
 */
 function apply(ctx) {

package/node_modules/@deepseek-ai/dsh-client-ui-deliverables/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-client-ui-deliverables",
-  "description": "Produced-files turn tail and clickable final-response file references for Web",
-  "version": "0.1.6-alpha.1",
+  "description": "Changed-files card with per-file comparison tabs, delivery cards, and clickable final-response file references for Web",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -34,6 +34,7 @@
         "@deepseek-ai/dsh-client-ui-chat",
         "@deepseek-ai/dsh-client-ui-conversation",
         "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-ui-sidebar-right",
         "@deepseek-ai/dsh-client-ui-tool"
       ],
       "platform": "web"
@@ -44,28 +45,32 @@
     "@deepseek-ai/cordis": "4.0.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-api-remotes": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-connection": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-locale": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-chat": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-api-remotes": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-chat": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-sidebar-right": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.6-alpha.2",
     "@types/react": "~18.3.1",
     "@deepseek-ai/cordis": "4.0.2",
     "react": "^18.2.0",
-    "@deepseek-ai/dsh-session": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-query": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-llm": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-tool": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-tool-present": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-api-session-controller": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-util-workspace-path": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-api-workspace-files": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-fs": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-fs-local": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session-query": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-tool": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-tool-present": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-workspace-changes": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-api-session-controller": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-util-workspace-path": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-api-workspace-files": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-fs": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-fs-local": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.6-alpha.2"
   },
   "files": [
     "lib/index.js",
@@ -73,6 +78,6 @@
     "lib/types/**/*.d.ts"
   ],
   "dependencies": {
-    "@deepseek-ai/dsh-typert-protocol": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-typert-protocol": "0.1.6-alpha.2"
   }
 }

package/node_modules/@deepseek-ai/dsh-client-ui-directory-picker-browse/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-client-ui-directory-picker-browse",
   "description": "In-app directory browsing surface: the workspace directory-flow owner rendering the host's listing and creation primitives",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -41,10 +41,12 @@
     "@deepseek-ai/cordis": "4.0.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-api-remotes": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-locale": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-workspace": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-api-remotes": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "0.1.6-alpha.2",
     "@testing-library/react": "^16.1.0",
     "@types/react": "~18.3.1",
     "@deepseek-ai/cordis": "4.0.2",

package/node_modules/@deepseek-ai/dsh-client-ui-directory-picker-native/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/client/ui-directory-picker-native/README.md
-README.md: 4d35b30e093f06e939d0831a1ea45c050c43bf03
-README.zh.md: 98bdf1b15eea5de9dee2f0a7dab583f0f124b504
+README.md: 73115c441399fca56d0fd208307240226faf653a
+README.zh.md: 5cf92adfb43eb3b0e3b7cc4e441b503e9a0757af

package/node_modules/@deepseek-ai/dsh-client-ui-directory-picker-native/README.md

@@ -1,5 +1,5 @@
 ---
-description: "Native directory-picker surface: the browser half that drives the host OS chooser for workspace-directory flows; for users and maintainers choosing a picking interaction."
+description: "Native directory-picker surface: the browser half that drives the local Desktop or Host OS chooser for workspace-directory flows; for users and maintainers choosing a picking interaction."
 kind: "package-reference"
 ---
 
@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-This package provides the native directory-picking surface for the Web GUI: when a workspace flow asks for a directory, a renderless browser occupant opens the operating system's own chooser on the machine running the Host and reports the single outcome — a picked path, a cancellation, or a failure. It fills the two directory-flow slots declared by `ui-workspace`, composing the client side of the native picking interaction in one `cordis.yml` row. Choose it when the browser runs on the same machine as the Host; in-process and remote-browser deployments need the [`-browse`](../ui-directory-picker-browse/README.md) surface instead.
+This package provides the native directory-picking surface for the Web GUI: when a workspace flow asks for a directory, a renderless browser occupant opens the operating system's own chooser on the local machine and reports the single outcome — a picked path, a cancellation, or a failure. It fills the two directory-flow slots declared by `ui-workspace`, composing the client side of the native picking interaction in one `cordis.yml` row. Choose it when the browser runs on the same machine as the Host; in-process and remote-browser deployments need the [`-browse`](../ui-directory-picker-browse/README.md) surface instead.
 
 ## Table of Contents
 
@@ -27,6 +27,8 @@ This package provides the native directory-picking surface for the Web GUI: when
 
 Mount this plugin alongside `ui-workspace` and the host backend [`dsh-host-directory-picker-native`](../../host/directory-picker-native/README.md); one `cordis.yml` row then composes the whole native picking interaction. When a workspace add or picker flow opens a directory request, the user sees the operating system's folder dialog; the picked path is adopted by the workspace flow, and cancelling closes the dialog.
 
+In the local Electron application, this flow uses the narrow preload directory-picker bridge. Cancellation and failure never retry through the Host chooser. Ordinary Web uses the Host call; the separate browse composition always lists Host directories.
+
 ### When to choose it
 
 Choose this surface when the browser runs on the same machine as the Host, so an OS dialog can open there. Choose the [`-browse`](../ui-directory-picker-browse/README.md) surface when the browser is remote or in-process and no local chooser exists. The two surfaces fill the same slots, so switching is a composition change, not a code change.
@@ -39,7 +41,7 @@ Choose this surface when the browser runs on the same machine as the Host, so an
 <details>
 <summary>Implementation internals — click to expand</summary>
 
-Both slot registrations install as one transactional effect through nested `ctx.slots.inject()` calls, because either declaring entry may activate later or replace its declaration. The occupant arms once per rising `open` edge, so re-renders never launch a second chooser; settlements ride a ref so the answer reaches the owner's latest handlers. An unmount (HMR replacing the occupant) discards the settlement wholesale: the wire carries no per-request abort, so the host-side chooser survives until answered and its answer lands nowhere. The node half is an empty `apply` that keeps the plugin on the host roster.
+Both slot registrations install as one transactional effect through nested `ctx.slots.inject()` calls, because either declaring entry may activate later or replace its declaration. The occupant arms once per rising `open` edge, so re-renders never launch a second chooser; settlements ride a ref so the answer reaches the owner's latest handlers. An unmount (HMR replacing the occupant) discards the settlement wholesale: the wire carries no per-request abort, so the native chooser survives until answered and its answer lands nowhere. The node half is an empty `apply` that keeps the plugin on the host roster.
 
 </details>
 
@@ -73,8 +75,9 @@ None; this package neither assembles nor sends a provider request.
 
 These limits define when the native chooser fits. They are current package constraints, not a general picker comparison or a task backlog.
 
-- **No cancellation of an open chooser** — the wire has no per-request abort, so a chooser already on the host display cannot be closed from the browser; a discarded settlement is ignored.
-- **Local Host carriers only** — an OS dialog opens on the machine running the Host, so in-process and remote-browser deployments need the `-browse` composition instead. Platform failures surface through the owner's retryable folder dialog.
+- **No cancellation of an open chooser** — the wire has no per-request abort, so a chooser already on the local display cannot be closed from the browser; a discarded settlement is ignored.
+- **Local carriers only** — the Electron dialog selects local paths; ordinary Web opens the Host chooser. Remote-browser and in-process deployments use the `-browse` composition. Platform failures surface through the owner's retryable folder dialog.
+- **Linux automatic selection** — without zenity or kdialog, the Host selects browse even in Desktop; the Electron dialog is not used.
 
 <a id="dev-note"></a>
 ### Dev Note

package/node_modules/@deepseek-ai/dsh-client-ui-directory-picker-native/README.zh.md

@@ -1,5 +1,5 @@
 ---
-description: "原生目录选择表面：驱动 Host 操作系统选择器的浏览器半部，用于工作区目录流程；供选择拾取交互的用户与维护者阅读。"
+description: "原生目录选择表面：驱动本地 Desktop 或 Host 操作系统选择器的浏览器半部，用于工作区目录流程；供选择拾取交互的用户与维护者阅读。"
 kind: "package-reference"
 ---
 
@@ -9,7 +9,7 @@ kind: "package-reference"
 
 ## 概述
 
-本包提供 Web GUI 的原生目录拾取表面：当工作区流程请求一个目录时，一个无渲染的浏览器填充会在运行 Host 的机器上打开操作系统自带的选择器，并回报唯一结果——拾取的路径、取消或失败。它填充 `ui-workspace` 声明的两个目录流程 slot，用一行 `cordis.yml` 组合出原生拾取交互的客户端一侧。当浏览器与 Host 运行在同一台机器上时选择它；进程内与远程浏览器部署则需要 [`-browse`](../ui-directory-picker-browse/README.zh.md) 表面。
+本包提供 Web GUI 的原生目录拾取表面：当工作区流程请求一个目录时，一个无渲染的浏览器填充会在本地机器上打开操作系统自带的选择器，并回报唯一结果——拾取的路径、取消或失败。它填充 `ui-workspace` 声明的两个目录流程 slot，用一行 `cordis.yml` 组合出原生拾取交互的客户端一侧。当浏览器与 Host 运行在同一台机器上时选择它；进程内与远程浏览器部署则需要 [`-browse`](../ui-directory-picker-browse/README.zh.md) 表面。
 
 ## 目录
 
@@ -27,6 +27,8 @@ kind: "package-reference"
 
 与 `ui-workspace` 及 Host 后端 [`dsh-host-directory-picker-native`](../../host/directory-picker-native/README.zh.md) 一起挂载本插件；一行 `cordis.yml` 随即组合出完整的原生拾取交互。当工作区添加或选择器流程发起目录请求时，用户看到操作系统的文件夹对话框；拾取的路径被工作区流程采纳，取消则关闭对话框。
 
+在本地 Electron 应用中，此流程使用 preload 提供的窄目录选择接口。取消和失败都不会改用 Host 选择器重试。普通 Web 使用 Host 调用；独立的浏览组合始终列出 Host 目录。
+
 ### 何时选择
 
 当浏览器与 Host 运行在同一台机器上、操作系统对话框可以在那里打开时，选择此表面。当浏览器为远程或进程内、没有本地选择器时，选择 [`-browse`](../ui-directory-picker-browse/README.zh.md) 表面。两个表面填充相同的 slot，因此切换只是组合改动，而非代码改动。
@@ -73,8 +75,9 @@ kind: "package-reference"
 
 这些限制界定了原生选择器的适用时机。它们是当前包约束，不是通用选择器对比或任务积压。
 
-- **无法取消已打开的选择器**——wire 没有按请求中止的机制，因此已显示在 Host 上的选择器无法从浏览器关闭；被丢弃的结算会被忽略。
-- **仅限本地 Host 承载**——操作系统对话框在运行 Host 的机器上打开，因此进程内与远程浏览器部署需要 `-browse` 组合。平台失败经由持有方的可重试文件夹对话框呈现。
+- **无法取消已打开的选择器**——wire 没有按请求中止的机制，因此已显示在本地的选择器无法从浏览器关闭；被丢弃的结算会被忽略。
+- **仅限本地承载**——Electron 对话框选择本地路径；普通 Web 打开 Host 选择器。远程浏览器与进程内部署使用 `-browse` 组合。平台失败经由持有方的可重试文件夹对话框呈现。
+- **Linux 自动选择**——缺少 zenity 或 kdialog 时，Host 即使在 Desktop 中也选择浏览模式，不使用 Electron 对话框。
 
 <a id="dev-note"></a>
 ### 开发备注

package/node_modules/@deepseek-ai/dsh-client-ui-directory-picker-native/lib/client.js

@@ -60,7 +60,9 @@ window.__ModuleLoader__.load({
 		* @param ctx - client root context.
 		*/
 		function apply(ctx) {
-			const injected = () => ({ pick: () => ctx.uiWorkspace.pickDirectory() });
+			const desktop = globalThis.__DSH_DIRECTORY_PICKER__;
+			const pick = desktop === void 0 ? () => ctx.uiWorkspace.pickDirectory() : () => desktop.pick();
+			const injected = () => ({ pick });
 			ctx.slots.inject("conversation.hero.workspace.directoryFlow", () => ctx.slots.inject("sidebar.workspaces.directoryFlow", function* () {
 				yield ctx.slots.register({
 					name: "conversation.hero.workspace.directoryFlow",

package/node_modules/@deepseek-ai/dsh-client-ui-directory-picker-native/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-client-ui-directory-picker-native",
-  "description": "Native directory-picker surface: the renderless workspace directory-flow occupant driving the host's OS chooser",
-  "version": "0.1.6-alpha.1",
+  "description": "Native directory-picker surface: the renderless workspace directory-flow occupant driving the local Desktop or Host OS chooser",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -39,8 +39,8 @@
     "@deepseek-ai/cordis": "4.0.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-client-ui-renderer": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-workspace": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-workspace": "0.1.6-alpha.2",
     "@testing-library/react": "^16.1.0",
     "@types/react": "~18.3.1",
     "@deepseek-ai/cordis": "4.0.2",

package/node_modules/@deepseek-ai/dsh-client-ui-goal/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-client-ui-goal",
   "description": "Session goal surface: GoalBar docked above the composer, read from the goal session projection",
-  "version": "0.1.6-alpha.1",
+  "version": "0.1.6-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -44,22 +44,24 @@
     "@deepseek-ai/cordis": "4.0.2"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-api-remotes": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-api-session-controller": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-locale": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-chat": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-session": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-commands": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-goal": "0.1.6-alpha.1",
+    "@deepseek-ai/dsh-api-remotes": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-api-session-controller": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-chat": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-client-ui-session": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-commands": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-goal": "0.1.6-alpha.2",
     "@testing-library/react": "^16.1.0",
     "@types/react": "~18.3.1",
     "@deepseek-ai/cordis": "4.0.2",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
-    "@deepseek-ai/dsh-session": "0.1.6-alpha.1",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.6-alpha.1"
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.6-alpha.2"
   },
   "files": [
     "lib/index.js",

package/node_modules/@deepseek-ai/dsh-client-ui-input-trigger/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/client/ui-input-trigger/README.md
-README.md: ad10001829dea48b961b922c4e90cad0ce9efa92
-README.zh.md: d34d05410902ee6f98175339f0c881f958da621c
+README.md: 10c0f8df7b2cc0698ba7e10f695da09c1fa72a33
+README.zh.md: fb0f0a969965c27bbd129e70381692c4b1297f5b

package/node_modules/@deepseek-ai/dsh-client-ui-input-trigger/README.md

@@ -29,7 +29,7 @@ Mount this plugin alongside `ui-conversation`; the menu then appears in the inpu
 
 ### Keyboard and mouse
 
-The composer surface keeps focus while the menu is open: rows pick on mousedown, the highlight rides `aria-activedescendant`, and a pointer press outside both the menu and the composer card dismisses it. Space and Enter adjudication polls the optional `matchSpace`/`matchEnter` hooks in registration order; the first non-undefined answer wins, and a source can refuse a submission it cannot consume whole. Tab acts on the highlighted completion: a candidate declaring `drill: true` routes through `onPick` with `action: 'drill'`, while an ordinary candidate settles through `action: 'pick'`; without a highlight, Tab passes untouched so native focus traversal survives. A drillable row's trailing chevron exposes the same second verb to pointer users. A source implementing the optional `header` hook additionally publishes crumbs above its group: the pipeline re-polls it on every hit with the live query and whether a drill, rather than typing, produced it, and a crumb pick routes back through `onPick` with `action: 'drill'`.
+The composer surface keeps focus while the menu is open: rows pick on mousedown, the highlight rides `aria-activedescendant`, and a pointer press outside both the menu and the composer card dismisses it. Opening it from the launcher button puts the keyboard back in the editor before the menu opens, so the arrows drive it there too. Space and Enter adjudication polls the optional `matchSpace`/`matchEnter` hooks in registration order; the first non-undefined answer wins, and a source can refuse a submission it cannot consume whole. Tab acts on the highlighted completion: a candidate declaring `drill: true` routes through `onPick` with `action: 'drill'`, while an ordinary candidate settles through `action: 'pick'`; without a highlight Tab passes untouched so native focus traversal survives. Escape and Shift+Tab leave the menu instead, never settling: the exit gesture cannot consume or rewrite the draft. A dismissed menu stays dismissed: the same token re-tracked with the same query keeps its menu closed, so restoring the caret after a pointer dismissal — or after a settled command closes the surface it opened — cannot bring the menu back; typing a new query or moving to another token re-arms it. A drillable row's trailing chevron exposes the same second verb to pointer users. A source implementing the optional `header` hook additionally publishes crumbs above its group: the pipeline re-polls it on every hit with the live query and whether a drill, rather than typing, produced it, and a crumb pick routes back through `onPick` with `action: 'drill'`.
 
 A source may implement `openReference(session, reference)` to open a draft reference without submitting it. Acceptance may precede asynchronous catalog loading. Chips route by source name; editable tokens route through the current source lexicon. Returning `false`, a missing source, or a disposed controller leaves the editor gesture unchanged.
 

package/node_modules/@deepseek-ai/dsh-client-ui-input-trigger/README.zh.md

@@ -29,7 +29,7 @@ kind: "package-reference"
 
 ### 键盘与鼠标
 
-菜单打开期间 composer 表面保持焦点：行在 mousedown 时完成 pick，高亮由 `aria-activedescendant` 承载，指针落在菜单与所在 composer 卡片之外即关闭菜单。空格与回车裁决按注册序轮询可选的 `matchSpace`／`matchEnter` 钩子；第一个非 undefined 的应答胜出，source 也可以拒绝它无法整体消费的提交。Tab 会作用于高亮补全项：声明 `drill: true` 的候选项以 `action: 'drill'` 进入 `onPick`，普通候选项则以 `action: 'pick'` 完成选定；没有高亮项时 Tab 原样放行，原生焦点遍历不受影响。可下钻行尾的 chevron 向指针用户提供同一个动词。实现可选 `header` 钩子的 source 还会在其分组上方发布面包屑：流水线在每次命中时用实时查询、以及该查询由下钻还是由键入产生这一事实重新询问它，点击面包屑经 `onPick` 以 `action: 'drill'` 回到该 source。
+菜单打开期间 composer 表面保持焦点：行在 mousedown 时完成 pick，高亮由 `aria-activedescendant` 承载，指针落在菜单与所在 composer 卡片之外即关闭菜单。从 launcher 按钮打开菜单时会先把键盘还给编辑器再开菜单，因此方向键在那里同样可用。空格与回车裁决按注册序轮询可选的 `matchSpace`／`matchEnter` 钩子；第一个非 undefined 的应答胜出，source 也可以拒绝它无法整体消费的提交。Tab 会作用于高亮补全项：声明 `drill: true` 的候选项以 `action: 'drill'` 进入 `onPick`，普通候选项则以 `action: 'pick'` 完成选定；没有高亮项时 Tab 原样放行，原生焦点遍历不受影响。Escape 与 Shift+Tab 则是离开菜单——它们从不选定，因此退出动作不会消耗或改写草稿。被关闭的菜单保持关闭：同一个 token 以同一查询重新 track 时菜单不会重开——因此指针关闭之后恢复光标、或已选定的命令关闭它自己打开的界面，都不会把菜单召回来；输入新的查询或移到另一个 token 才会重新武装。可下钻行尾的 chevron 向指针用户提供同一个动词。实现可选 `header` 钩子的 source 还会在其分组上方发布面包屑：流水线在每次命中时用实时查询、以及该查询由下钻还是由键入产生这一事实重新询问它，点击面包屑经 `onPick` 以 `action: 'drill'` 回到该 source。
 
 来源可以实现 `openReference(session, reference)`，打开草稿引用而不提交。来源可以先接受预览请求，再异步加载目录。标签按来源名称路由；可编辑文本按来源当前的词表路由。返回 `false`、来源缺失或控制器已释放时，保留编辑器原有的手势处理。