@xirang-ai/dsh-teamflow 0.1.0 → 0.1.1

package/README.en.md

@@ -4,7 +4,7 @@
 
 Teamflow (`@xirang-ai/dsh-teamflow`) is a [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (DSH) plugin that turns **requirements → high-level design → detailed design → stories → development runs → bug fixes** into a persistent, resumable pipeline. It also adds a team workbench called **Xirang Workbench** to the DSH Web UI.
 
-Version: **`0.1.0`** (first release; see [CHANGELOG.md](CHANGELOG.md)).
+Version: **`0.1.1`** (adds drag and drop to the create page attachments; see [CHANGELOG.md](CHANGELOG.md)).
 
 - Data lives in SQLite; documents live in the workspace, so closing a session does not lose progress.
 - Five agent presets cover requirements, stories, bugs, development, and detailed design. Each preset controls its own tool boundary.
@@ -69,8 +69,8 @@ dsh plugin --profile web remove @xirang-ai/dsh-teamflow
 - **Requirement detail**: high-level design, detailed-design file tree, story list, execution flow chart, linked sessions, and a properties panel.
 - **Story / bug detail**: body, status, run history, and manual actions such as run, cancel, and complete.
 - **Three permission tiers**: the **Run** button on a story row, the story page, and the bug page has an arrow menu for **Normal run / Read-only run / Full permission run**. The main button always starts a normal run; the choice is not remembered, so picking full permission once does not carry over. The session starts with the matching sandbox mode and approval policy, and its header shows a short Normal / Read-only / Full badge (sessions started before this feature have no record and show no badge).
-- **Create page**: pick a type and workspace to start a session without choosing an agent manually. Files can be attached too: images are checked against the same rules the session composer uses (type, per-file size, count and total taken from `ctx.attachments.imageLimits`, never a second list defined here), other file types carry no extra limits, each picked file can be removed, and the submission sends them as attachments on the new conversation's first message next to the workspace and description. The submit button is held back until uploading finishes so no attachment is lost.
-- **Composer type picker**: in an empty session, switch between requirement / story / bug / high-level design / detailed design / story-splitting presets.
+- **Create page**: pick a type and workspace to start a session without choosing an agent manually. Files can be attached too: the attachment card is both a click target and a drop zone, and a drop goes through the same rules as a picker selection (images are checked against the same rules the session composer uses — type, per-file size, count and total taken from `ctx.attachments.imageLimits`, never a second list defined here; other file types carry no extra limits), with a reason for every refused file. Each picked file can be removed, and the submission sends them as attachments on the new conversation's first message next to the workspace and description. The submit button is held back until uploading finishes so no attachment is lost.
+- **Composer type picker**: an empty session switches between requirement / story / bug; a discussion session started from a requirement detail also offers requirement & outline / detailed design / story splitting.
 - **Session tab**: read-only view of the requirement, story, or bug linked to the current session.
 - **Delete and clean up**: only records with no active agent run can be deleted. The confirmation shows the impact; deletion is physical and cannot be undone.
 
@@ -124,7 +124,7 @@ dsh plugin --profile dev add .
 dsh --profile dev --port 3091 --no-open
 ```
 
-Development rules, official documentation links, and the full verification checklist are in [AGENTS.md](https://github.com/xirang-ai/teamflow/blob/main/AGENTS.md) and [RELEASE.md](RELEASE.md).
+Development rules, official documentation links, and the full verification checklist are in [AGENTS.md](https://github.com/xirang-ai/dsh-teamflow/blob/main/AGENTS.md) and [RELEASE.md](RELEASE.md).
 
 ## License
 

package/README.md

@@ -4,7 +4,7 @@
 
 Teamflow（`@xirang-ai/dsh-teamflow`）是 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（下称 DSH）的插件：把**需求 → 概要设计 → 详细设计 → 故事拆分 → 研发执行 → 缺陷修复**做成一条可持久化、可断点续跑的流水线，并在 Web 端提供团队工作台「息壤工作台」。
 
-当前版本：**`0.1.0`**（首版，变更记录见 [CHANGELOG.md](CHANGELOG.md)）。
+当前版本：**`0.1.1`**（新增创建页附件拖放，变更记录见 [CHANGELOG.md](CHANGELOG.md)）。
 
 - 数据落在 SQLite，文档落在工作区，关掉会话不丢进度。
 - 五个 Agent 预设分别负责需求、故事、缺陷、研发和详细设计，工具边界由预设控制。
@@ -69,8 +69,8 @@ dsh plugin --profile web remove @xirang-ai/dsh-teamflow
 - **需求详情**：概设正文、详设文件树、故事列表、执行流程图、关联会话和属性面板。
 - **故事 / 缺陷详情**：正文、状态、运行记录，以及执行、取消、完成等人工动作。
 - **三档权限执行**：需求详情的故事行、故事页、缺陷页三处的「执行」按钮右侧带箭头菜单，可选「普通执行 / 仅查看执行 / 完全权限执行」。主按钮直接按「普通执行」启动；默认档不记忆，上一次选「完全权限执行」也不会留到下一次。会话以对应沙箱模式与审批策略启动，会话头部显示「普通 / 仅查看 / 完全权限」短标签（旧会话没有记录，不显示）。
-- **创建页**：选类型和工作区后直接开新会话，不需要手动挑 Agent。还可以附带文件：图片按宿主会话上传的同一套规则校验（类型、单张大小、条数与总大小取自 `ctx.attachments.imageLimits`，不在本页另立白名单），其它类型的文件不设额外限制；已选文件可逐个移除，提交时与工作区、描述一起作为第一条消息的附件发进新会话。附件上传完成前提交按钮会拦住，避免丢附件。
-- **输入框「创建类型」**：空白会话下可切换需求 / 故事 / 缺陷 / 概要设计 / 详细设计 / 故事拆分预设。
+- **创建页**：选类型和工作区后直接开新会话，不需要手动挑 Agent。还可以附带文件：附件区整块可点击选择，也可以把文件直接拖进附件卡片，拖放与点选走同一套规则（图片按宿主会话上传的同一套规则校验，类型、单张大小、条数与总大小取自 `ctx.attachments.imageLimits`，不在本页另立白名单；其它类型的文件不设额外限制），不合规的文件逐条给出原因；已选文件可逐个移除，提交时与工作区、描述一起作为第一条消息的附件发进新会话。附件上传完成前提交按钮会拦住，避免丢附件。
+- **输入框「创建类型」**：空白会话下可切换需求 / 故事 / 缺陷；从需求详情发起的讨论会话还会显示「需求与概要设计」/「详细设计」/「故事拆分」，用于继续对应的讨论。
 - **会话页签**：在会话顶部只读查看当前会话关联的需求、故事或缺陷。
 - **删除与清理**：只允许删除没有 Agent 正在执行的记录；删除前展示影响范围，物理删除不可恢复。
 
@@ -124,7 +124,7 @@ dsh plugin --profile dev add .
 dsh --profile dev --port 3091 --no-open
 ```
 
-开发规则、官方文档入口与完整验证清单见 [AGENTS.md](https://github.com/xirang-ai/teamflow/blob/main/AGENTS.md) 和 [RELEASE.md](RELEASE.md)。
+开发规则、官方文档入口与完整验证清单见 [AGENTS.md](https://github.com/xirang-ai/dsh-teamflow/blob/main/AGENTS.md) 和 [RELEASE.md](RELEASE.md)。
 
 ## 许可证
 

package/RELEASE.md

@@ -9,7 +9,7 @@
 
 | 项 | 值 |
 | --- | --- |
-| 目标版本号 | **0.1.0**（用户已确认保持当前 `package.json` 版本） |
+| 目标版本号 | **0.1.1**（用户已确认） |
 | 发布分支 / commit | 发布时填写 |
 | 发布日期 | 发布时填写 |
 | 发布人 | 发布时填写 |
@@ -30,7 +30,7 @@ git ls-remote --tags --refs https://github.com/deepseek-ai/deepseek-harness.git
   | sort -V
 ```
 
-2026-11-10 核对结果：
+2026-11-11 核对结果：
 
 | 项 | 结果 |
 | --- | --- |
@@ -123,7 +123,7 @@ sqlite3 "$DSH_HOME/xirang-ai/dsh-teamflow/teamflow.sqlite" \
 - [ ] 安装命令使用 `dsh plugin --profile <profile> add ...`，并说明安装后要重启 Host，不能只刷新浏览器。
 - [ ] Node 版本写 `>=24.9.0`，与 `engines.node` 一致。
 - [ ] 开发端口统一为 `3091`（与本文件、AGENTS.md §5.1 一致）。
-- [ ] README 中的链接均可访问；仓库根的 `docs/` 仅作为提示词一致性报告与快照的测试证据保留，不进入 npm 包。
+- [ ] README 中的链接均可访问；仓库根的 `docs/` 仅作为提示词一致性报告、快照、Demo 走查结论与历次发版检查留痕保留，不进入 npm 包。
 - [ ] 配置说明指向 **profile 配置层** 的 `id: teamflow` 覆盖，而不是让用户改 `node_modules` 里的包内文件。
 - [ ] 版本号、schema 版本、工具数量（当前 19 个）、预设数量（当前 5 个）与实际一致。
 - [ ] 本文件已按本次发版更新；AGENTS.md 的阅读路径与文档索引没有死链。
@@ -134,7 +134,7 @@ sqlite3 "$DSH_HOME/xirang-ai/dsh-teamflow/teamflow.sqlite" \
 - [ ] 没有未完成功能、`TODO` / `FIXME` / `HACK` / `XXX`、注释掉的半成品代码、调试日志。
 - [ ] 没有 smoke / mock / demo / fixture / seed 数据进入 `src/` 或 npm 包（测试临时目录必须在 `tmpdir()` 下创建并清理）。
 - [ ] 本地 scratch 已删除：`.tmp/`、`.devhome/`、`.xirang-ai/`、`*.sqlite*`、`*.log`、临时截图 / 原型。
-- [ ] `design/` 已按维护决定删除；`docs/` 只保留提示词一致性报告与快照，测试依赖它，不得删除，且不进入 npm 包。
+- [ ] `design/` 已按维护决定删除；`docs/` 只保留提示词一致性报告与快照、Demo 走查结论、发版检查留痕，测试依赖其中的快照，不得删除，且不进入 npm 包。
 - [ ] `lib/` 未提交（由构建生成），但发布包中必须包含最新构建。
 - [ ] `git status` 干净；`git ls-files` 包含 `package.json`、`cordis.patch.yml`、`src/`、`test/`、`locale/`、`scripts/`，不再只有 README / LICENSE。
 
@@ -157,7 +157,7 @@ find . -maxdepth 2 \( -name '*.sqlite*' -o -name '.tmp' -o -name '.devhome' -o -
 - [ ] Agent 人设 / prompt 中的语言与目标用户一致；新增语言时同时补字典、`normalizeLocale` 与测试。
 - [ ] `pnpm test` 中的 locale 测试通过。
 
-当前核对（2026-11-10）：en / zh 各 332 个键，集合一致、无空值；en 无中文残留；`src/remote` 的错误均走 `translate()`；客户端硬编码中文只出现在注释与验收标准正则中。
+当前核对（2026-11-11）：en / zh 各 334 个键，集合一致、无空值；en 无中文残留；`src/remote` 的错误均走 `translate()`；客户端硬编码中文只出现在注释与验收标准正则中。
 
 ## 7. Git、npm 与发布
 

package/lib/client.js

@@ -1,4 +1,4 @@
-/* @xirang-ai/dsh-teamflow 0.1.0 — generated by scripts/build.mjs, do not edit. */
+/* @xirang-ai/dsh-teamflow 0.1.1 — generated by scripts/build.mjs, do not edit. */
 window.__ModuleLoader__.load({
 	id: "@xirang-ai/dsh-teamflow",
 	factory: (require) => {
@@ -234,10 +234,12 @@ window.__ModuleLoader__.load({
 		  "composer.locked": "The conversation has started; create a new one to switch agents.",
 		  "composer.noPreset": "The preset agent is not loaded, so the switch was not applied.",
 		  "composer.other": "Other (default)",
-		  "create.attachment.add": "Add files",
+		  "create.attachment.add": "Add attachments",
 		  "create.attachment.blocked": "Attachments are still uploading; wait for them to finish before sending.",
 		  "create.attachment.busy": "The conversation is busy, so the attachments were not sent. Try again.",
 		  "create.attachment.cancelled": "Upload cancelled; nothing was sent.",
+		  "create.attachment.dropActive": "Release to attach these files.",
+		  "create.attachment.dropHint": "Click to choose files, or drop them here.",
 		  "create.attachment.failed": "Upload failed",
 		  "create.attachment.failed.network": "The upload failed. Check the network and try again.",
 		  "create.attachment.failed.rejected": "The host rejected the file (damaged content or wrong type).",
@@ -570,10 +572,12 @@ window.__ModuleLoader__.load({
 		  "composer.locked": "会话已开始，无法再切换 Agent；请新建会话。",
 		  "composer.noPreset": "预设 Agent 未加载，无法切换。",
 		  "composer.other": "其他（默认）",
-		  "create.attachment.add": "选择文件",
+		  "create.attachment.add": "添加附件",
 		  "create.attachment.blocked": "附件正在上传，上传完成后再提交。",
 		  "create.attachment.busy": "会话正忙，附件未发送，请稍后重试。",
 		  "create.attachment.cancelled": "已取消上传，附件未发送。",
+		  "create.attachment.dropActive": "松手即可添加附件。",
+		  "create.attachment.dropHint": "点击选择文件，或把文件拖到这里。",
 		  "create.attachment.failed": "上传失败",
 		  "create.attachment.failed.network": "上传暂时失败，请检查网络后重试。",
 		  "create.attachment.failed.rejected": "宿主拒绝了该文件（内容损坏或类型不符）。",
@@ -1093,6 +1097,7 @@ window.__ModuleLoader__.load({
 		});
 
 		// src/client/composer.tsx
+		var import_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
 		var import_react = require("react");
 
 		// src/create.ts
@@ -2281,8 +2286,82 @@ window.__ModuleLoader__.load({
 		 * Attachment block. The picker is the Host's own file input, so it keeps the
 		 * Host rules for what can be selected; it is only hidden because the visible
 		 * control is the card's button and native inputs cannot be styled consistently.
+		 * The whole card body is one picker: a large plus, the action, and what a drop
+		 * will do. It stays a real <button>, so the drop target always keeps a
+		 * keyboard and single-pointer equivalent for the drag gesture.
 		 */
-		.tf-attachment-bar { display: flex; align-items: center; gap: 10px; margin-top: 8px; }
+		.tf-attachment-pick {
+		  display: flex;
+		  flex-direction: column;
+		  align-items: center;
+		  justify-content: center;
+		  gap: 6px;
+		  width: 100%;
+		  min-height: 150px;
+		  margin-top: 10px;
+		  padding: 20px 16px;
+		  border: 1px dashed var(--dsw-alias-border-l3, currentColor);
+		  border-radius: 12px;
+		  background: var(--dsw-alias-bg-l2, transparent);
+		  color: var(--dsw-alias-label-secondary, inherit);
+		  font: inherit;
+		  text-align: center;
+		  cursor: pointer;
+		  transition: border-color .12s ease, background-color .12s ease;
+		}
+		.tf-attachment-pick:hover:not(:disabled) {
+		  border-color: var(--dsw-alias-state-business-primary, #4176e6);
+		  background: var(--dsw-alias-interactive-bg-hover, transparent);
+		}
+		.tf-attachment-pick:focus-visible {
+		  outline: 2px solid var(--dsw-alias-link, #4176e6);
+		  outline-offset: 2px;
+		}
+		.tf-attachment-pick:disabled { opacity: .5; cursor: default; }
+		.tf-attachment-plus {
+		  display: grid;
+		  place-items: center;
+		  width: 40px;
+		  height: 40px;
+		  border-radius: 50%;
+		  background: var(--dsw-alias-interactive-bg-hover, rgba(0, 0, 0, .04));
+		  color: var(--dsw-alias-state-business-primary, #4176e6);
+		  font-size: 24px;
+		  font-weight: 300;
+		  line-height: 1;
+		}
+		.tf-attachment-pick-title {
+		  font-size: 13px;
+		  font-weight: 600;
+		  color: var(--dsw-alias-label-primary, inherit);
+		}
+		.tf-attachment-pick-sub {
+		  font-size: 11.5px;
+		  line-height: 1.5;
+		  color: var(--dsw-alias-label-tertiary, inherit);
+		}
+		.tf-attachment-limits {
+		  margin: 8px 0 0;
+		  font-size: 11.5px;
+		  line-height: 1.5;
+		  text-align: center;
+		  color: var(--dsw-alias-label-caption, inherit);
+		}
+		/*
+		 * The attachment card doubles as the drop target, so a file dropped anywhere
+		 * the user reads as "the attachment area" lands on the picker's own intake path.
+		 * Only the picker itself lights up while a file drag is inside the card, and its
+		 * subtitle says what releasing will do.
+		 */
+		.tf-attachment-dropzone[data-drag='active'] .tf-attachment-pick {
+		  border-style: solid;
+		  border-color: var(--dsw-alias-state-business-primary, #4176e6);
+		  background: color-mix(in srgb, var(--dsw-alias-state-business-primary, #4176e6) 7%, transparent);
+		}
+		.tf-attachment-dropzone[data-drag='active'] .tf-attachment-pick-sub {
+		  color: var(--dsw-alias-state-business-primary, #4176e6);
+		  font-weight: 600;
+		}
 		.tf-attachment-input {
 		  position: absolute;
 		  width: 1px;
@@ -2472,23 +2551,37 @@ window.__ModuleLoader__.load({
 		`;
 		var COMPOSER_STYLES = `
 		.tf-composer { display: inline-flex; align-items: center; gap: 6px; min-width: 0; max-width: 100%; }
-		.tf-composer-field { display: inline-flex; align-items: center; gap: 5px; min-width: 0; }
-		.tf-composer-label { font-size: 11.5px; color: var(--dsw-alias-label-tertiary, inherit); white-space: nowrap; }
-		.tf-composer-select {
-		  height: 24px;
-		  max-width: 132px;
-		  padding: 0 6px;
-		  border: 1px solid var(--dsw-alias-border-l2, transparent);
-		  border-radius: 7px;
-		  background: transparent;
+		/* Trigger matches the Host's composer selects (permission, model): same height,
+		   radius, spacing, type scale and interaction colors, all from theme tokens. */
+		.tf-composer-trigger {
+		  display: inline-flex;
+		  align-items: center;
+		  gap: 4px;
+		  min-width: 0;
+		  max-width: 220px;
+		  height: 28px;
+		  padding: 0 4px 0 8px;
+		  border: none;
+		  border-radius: var(--dsw-radius-sm, 7px);
+		  background: none;
 		  color: var(--dsw-alias-label-secondary, inherit);
 		  font: inherit;
-		  font-size: 11.5px;
+		  font-size: 13px;
+		  font-weight: 500;
+		  line-height: 20px;
 		  cursor: pointer;
 		  outline: none;
 		}
-		.tf-composer-select:focus { border-color: var(--dsw-alias-label-caption, transparent); }
-		.tf-composer-select:disabled { opacity: .55; cursor: default; }
+		@media (hover: hover) {
+		  .tf-composer-trigger:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover, transparent); }
+		}
+		.tf-composer-trigger:focus-visible {
+		  box-shadow: 0 0 0 2px var(--dsw-focus-ring-color, var(--dsw-alias-state-business-primary));
+		}
+		.tf-composer-trigger:disabled { color: var(--dsw-alias-label-dimmed, inherit); cursor: default; }
+		.tf-composer-value { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+		.tf-composer-chevron { display: inline-flex; flex: none; color: var(--dsw-alias-label-caption, inherit); transition: transform .12s; }
+		.tf-composer-chevron-open { transform: rotate(180deg); }
 		.tf-composer-note {
 		  font-size: 11px;
 		  color: var(--dsw-alias-label-caption, inherit);
@@ -2516,6 +2609,7 @@ window.__ModuleLoader__.load({
 		  const kinds = discussionSession ? COMPOSER_KINDS : CREATE_KINDS;
 		  const [pending, setPending] = (0, import_react.useState)(false);
 		  const [error, setError] = (0, import_react.useState)(null);
+		  const [open, setOpen] = (0, import_react.useState)(false);
 		  const change = (0, import_react.useCallback)(
 		    (next) => {
 		      setError(null);
@@ -2569,26 +2663,55 @@ window.__ModuleLoader__.load({
 		    },
 		    [agentPresets, blank, mode, sessionId, t]
 		  );
+		  const locked = !blank;
+		  const currentLabel = mode === "" ? t("composer.other") : t(COMPOSER_KIND_LABEL[mode]);
+		  const items = [
+		    { id: "", label: t("composer.other") },
+		    ...kinds.map((kind) => ({ id: kind, label: t(COMPOSER_KIND_LABEL[kind]) }))
+		  ];
 		  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
 		    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("style", { children: COMPOSER_STYLES }),
 		    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { className: "tf-composer", children: [
-		      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("label", { className: "tf-composer-field", children: [
-		        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "tf-composer-label", children: t("composer.label") }),
-		        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(
-		          "select",
-		          {
-		            className: "tf-select tf-composer-select",
-		            value: mode,
-		            disabled: pending,
-		            title: blank ? t("composer.hint") : t("composer.locked"),
-		            onChange: (event) => change(event.target.value),
-		            children: [
-		              /* @__PURE__ */ (0, import_jsx_runtime.jsx)("option", { value: "", children: t("composer.other") }),
-		              kinds.map((kind) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("option", { value: kind, children: t(COMPOSER_KIND_LABEL[kind]) }, kind))
-		            ]
-		          }
-		        )
-		      ] }),
+		      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+		        import_dsh_client_ui_primitives.Menu,
+		        {
+		          open,
+		          items,
+		          selectedId: mode,
+		          onSelect: (id2) => {
+		            setOpen(false);
+		            change(id2);
+		          },
+		          onClose: () => setOpen(false),
+		          side: "top",
+		          portal: true,
+		          anchor: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(
+		            "button",
+		            {
+		              type: "button",
+		              className: "tf-composer-trigger",
+		              "aria-label": `${t("composer.label")}: ${currentLabel}`,
+		              "aria-haspopup": "menu",
+		              "aria-expanded": open,
+		              "aria-busy": pending,
+		              title: blank ? t("composer.hint") : t("composer.locked"),
+		              disabled: pending || locked,
+		              onClick: () => setOpen((value2) => !value2),
+		              children: [
+		                /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "tf-composer-value", children: currentLabel }),
+		                /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+		                  "span",
+		                  {
+		                    className: open ? "tf-composer-chevron tf-composer-chevron-open" : "tf-composer-chevron",
+		                    "aria-hidden": "true",
+		                    children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_dsh_client_ui_primitives.IconChevronDownOutlineRegular, {})
+		                  }
+		                )
+		              ]
+		            }
+		          )
+		        }
+		      ),
 		      error !== null ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "tf-composer-note", role: "status", children: error }) : null
 		    ] })
 		  ] });
@@ -2700,6 +2823,12 @@ window.__ModuleLoader__.load({
 		  }
 		  return { accepted: kept, rejections };
 		}
+		function carriesFiles(types) {
+		  return types !== void 0 && types.includes("Files");
+		}
+		function droppedFiles(files) {
+		  return files === void 0 ? [] : Array.from(files);
+		}
 
 		// src/client/icon.tsx
 		var import_react2 = require("react");
@@ -2747,7 +2876,7 @@ window.__ModuleLoader__.load({
 		}
 
 		// src/client/page.tsx
-		var import_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
+		var import_dsh_client_ui_primitives2 = require("@deepseek-ai/dsh-client-ui-primitives");
 		var import_react10 = require("react");
 
 		// src/client/board.ts
@@ -3449,6 +3578,8 @@ window.__ModuleLoader__.load({
 		  const [files, setFiles] = (0, import_react4.useState)([]);
 		  const [rejections, setRejections] = (0, import_react4.useState)([]);
 		  const picker = (0, import_react4.useRef)(null);
+		  const [dragActive, setDragActive] = (0, import_react4.useState)(false);
+		  const dragDepth = (0, import_react4.useRef)(0);
 		  const previews = (0, import_react4.useRef)(/* @__PURE__ */ new Map());
 		  const [, bumpPreviews] = (0, import_react4.useState)(0);
 		  const [broken, setBroken] = (0, import_react4.useState)([]);
@@ -3501,18 +3632,75 @@ window.__ModuleLoader__.load({
 		    },
 		    []
 		  );
-		  const pick = (event) => {
-		    const picked = Array.from(event.target.files ?? []);
-		    event.target.value = "";
+		  const addFiles = (picked) => {
 		    if (picked.length === 0) return;
 		    const intake = intakeAttachments(picked, files, attachmentPolicy ?? null);
 		    if (intake.accepted.length > 0) setFiles((current) => [...current, ...intake.accepted]);
 		    setRejections(intake.rejections);
 		  };
+		  const pick = (event) => {
+		    const picked = Array.from(event.target.files ?? []);
+		    event.target.value = "";
+		    addFiles(picked);
+		  };
+		  const dropRefused = busy || attachmentAvailable === false;
+		  const dragEnter = (event) => {
+		    if (!carriesFiles(event.dataTransfer?.types) || dropRefused) return;
+		    event.preventDefault();
+		    dragDepth.current += 1;
+		    setDragActive(true);
+		  };
+		  const dragOver = (event) => {
+		    if (!carriesFiles(event.dataTransfer?.types)) return;
+		    event.preventDefault();
+		    event.dataTransfer.dropEffect = dropRefused ? "none" : "copy";
+		  };
+		  const dragLeave = (event) => {
+		    if (!carriesFiles(event.dataTransfer?.types)) return;
+		    dragDepth.current = Math.max(0, dragDepth.current - 1);
+		    if (dragDepth.current === 0) setDragActive(false);
+		  };
+		  const drop = (event) => {
+		    if (!carriesFiles(event.dataTransfer?.types)) return;
+		    event.preventDefault();
+		    dragDepth.current = 0;
+		    setDragActive(false);
+		    if (dropRefused) return;
+		    addFiles(droppedFiles(event.dataTransfer?.files));
+		  };
+		  (0, import_react4.useEffect)(() => {
+		    if (!dragActive) return;
+		    const reset = () => {
+		      dragDepth.current = 0;
+		      setDragActive(false);
+		    };
+		    const onKeyDown = (event) => {
+		      if (event.key === "Escape") reset();
+		    };
+		    window.addEventListener("keydown", onKeyDown);
+		    window.addEventListener("dragend", reset);
+		    window.addEventListener("drop", reset);
+		    window.addEventListener("blur", reset);
+		    return () => {
+		      window.removeEventListener("keydown", onKeyDown);
+		      window.removeEventListener("dragend", reset);
+		      window.removeEventListener("drop", reset);
+		      window.removeEventListener("blur", reset);
+		    };
+		  }, [dragActive]);
 		  const remove2 = (index2) => {
 		    setFiles((current) => current.filter((_, position) => position !== index2));
 		    setRejections([]);
 		  };
+		  const pageDragOver = (event) => {
+		    if (carriesFiles(event.dataTransfer?.types)) event.preventDefault();
+		  };
+		  const pageDrop = (event) => {
+		    if (!carriesFiles(event.dataTransfer?.types)) return;
+		    event.preventDefault();
+		    dragDepth.current = 0;
+		    setDragActive(false);
+		  };
 		  const submit = (event) => {
 		    event.preventDefault();
 		    if (busy) return;
@@ -3543,7 +3731,7 @@ window.__ModuleLoader__.load({
 		    size: formatBytes(attachmentPolicy.maxImageBytes),
 		    count: attachmentPolicy.maxImagesPerMessage
 		  });
-		  return /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "tf-create", children: [
+		  return /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "tf-create", onDragOver: pageDragOver, onDrop: pageDrop, children: [
 		    /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("header", { className: "tf-detail-head", children: /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "tf-detail-heading", children: [
 		      /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("h1", { className: "tf-title", children: t("create.title") }),
 		      /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("p", { className: "tf-sub", children: t("create.subtitle") })
@@ -3606,88 +3794,100 @@ window.__ModuleLoader__.load({
 		          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-field-hint", children: t("create.descriptionHint") })
 		        ] })
 		      ] }),
-		      /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("section", { className: "tf-card", children: [
-		        /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "tf-card-head", children: [
-		          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("h2", { className: "tf-card-title", children: t("create.attachment.label") }),
-		          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-card-hint", children: t("create.attachment.optional") })
-		        ] }),
-		        /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "tf-attachment-bar", children: [
-		          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
-		            "button",
-		            {
-		              className: "tf-btn",
-		              "data-tone": "soft",
-		              type: "button",
-		              disabled: busy || attachmentAvailable === false,
-		              onClick: () => picker.current?.click(),
-		              children: t("create.attachment.add")
-		            }
-		          ),
-		          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-field-hint tf-grow", children: attachmentHint })
-		        ] }),
-		        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
-		          "input",
-		          {
-		            ref: picker,
-		            className: "tf-attachment-input",
-		            type: "file",
-		            multiple: true,
-		            tabIndex: -1,
-		            "aria-hidden": true,
-		            onChange: pick
-		          }
-		        ),
-		        files.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("ul", { className: "tf-attachment-list", children: files.map((file, index2) => {
-		          const state = uploads[fileKey(file)];
-		          const label = state === void 0 ? null : state.status === "uploaded" ? t("create.attachment.uploaded") : state.status === "failed" ? t("create.attachment.failed") : state.status === "uploading" ? state.percent === void 0 ? t("create.attachment.uploading") : t("create.attachment.uploadingPercent", { percent: state.percent }) : t("create.attachment.queued");
-		          const key = fileKey(file);
-		          const preview = broken.includes(key) ? void 0 : previews.current.get(key);
-		          return /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("li", { className: "tf-attachment-item", "data-state": state?.status, children: [
-		            /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-thumb", "data-kind": isImageFile(file) ? "image" : "file", children: preview === void 0 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-ext", children: fileExtension(file.name) }) : /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
-		              "img",
-		              {
-		                className: "tf-attachment-thumb-img",
-		                src: preview,
-		                alt: file.name,
-		                onError: () => setBroken((current) => current.includes(key) ? current : [...current, key])
-		              }
-		            ) }),
-		            /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("span", { className: "tf-attachment-body", children: [
-		              /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-name", title: file.name, children: file.name }),
-		              /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("span", { className: "tf-attachment-meta", children: [
-		                /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-size", children: formatBytes(file.size) }),
-		                label === null ? null : /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_jsx_runtime4.Fragment, { children: [
-		                  /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-sep", "aria-hidden": true, children: t("create.attachment.metaSep") }),
-		                  /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-status", children: label })
-		                ] })
-		              ] }),
-		              state?.status === "failed" && state.reason !== void 0 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-error", children: t(FAILURE_KEY[state.reason]) }) : null,
-		              state?.status === "uploading" ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-track", children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
-		                "span",
-		                {
-		                  className: "tf-attachment-fill",
-		                  style: { width: `${Math.max(4, Math.min(100, state.percent ?? 0))}%` }
-		                }
-		              ) }) : null
+		      /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(
+		        "section",
+		        {
+		          className: "tf-card tf-attachment-dropzone",
+		          "data-drag": dragActive ? "active" : void 0,
+		          onDragEnter: dragEnter,
+		          onDragOver: dragOver,
+		          onDragLeave: dragLeave,
+		          onDrop: drop,
+		          children: [
+		            /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "tf-card-head", children: [
+		              /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("h2", { className: "tf-card-title", children: t("create.attachment.label") }),
+		              /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-card-hint", children: t("create.attachment.optional") })
 		            ] }),
-		            /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+		            /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(
 		              "button",
 		              {
-		                className: "tf-attachment-remove",
+		                className: "tf-attachment-pick",
 		                type: "button",
-		                "aria-label": `${t("create.attachment.remove")} ${file.name}`,
-		                disabled: busy,
-		                onClick: () => remove2(index2),
-		                children: "×"
+		                disabled: busy || attachmentAvailable === false,
+		                onClick: () => picker.current?.click(),
+		                children: [
+		                  /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-plus", "aria-hidden": "true", children: "+" }),
+		                  /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-pick-title", children: t("create.attachment.add") }),
+		                  /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-pick-sub", children: dragActive ? t("create.attachment.dropActive") : t("create.attachment.dropHint") })
+		                ]
 		              }
-		            )
-		          ] }, `${fileKey(file)}-${index2}`);
-		        }) }) : null,
-		        rejections.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("ul", { className: "tf-attachment-rejected", role: "alert", children: rejections.map((rejection, index2) => /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("li", { children: t(REJECTION_KEY[rejection.reason], {
-		          name: rejection.file.name,
-		          ...rejection.params
-		        }) }, `${rejection.file.name}-${index2}`)) }) : null
-		      ] }),
+		            ),
+		            /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("p", { className: "tf-attachment-limits", children: attachmentHint }),
+		            /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+		              "input",
+		              {
+		                ref: picker,
+		                className: "tf-attachment-input",
+		                type: "file",
+		                multiple: true,
+		                tabIndex: -1,
+		                "aria-hidden": true,
+		                onChange: pick
+		              }
+		            ),
+		            files.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("ul", { className: "tf-attachment-list", children: files.map((file, index2) => {
+		              const state = uploads[fileKey(file)];
+		              const label = state === void 0 ? null : state.status === "uploaded" ? t("create.attachment.uploaded") : state.status === "failed" ? t("create.attachment.failed") : state.status === "uploading" ? state.percent === void 0 ? t("create.attachment.uploading") : t("create.attachment.uploadingPercent", { percent: state.percent }) : t("create.attachment.queued");
+		              const key = fileKey(file);
+		              const preview = broken.includes(key) ? void 0 : previews.current.get(key);
+		              return /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("li", { className: "tf-attachment-item", "data-state": state?.status, children: [
+		                /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-thumb", "data-kind": isImageFile(file) ? "image" : "file", children: preview === void 0 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-ext", children: fileExtension(file.name) }) : /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+		                  "img",
+		                  {
+		                    className: "tf-attachment-thumb-img",
+		                    src: preview,
+		                    alt: file.name,
+		                    onError: () => setBroken((current) => current.includes(key) ? current : [...current, key])
+		                  }
+		                ) }),
+		                /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("span", { className: "tf-attachment-body", children: [
+		                  /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-name", title: file.name, children: file.name }),
+		                  /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("span", { className: "tf-attachment-meta", children: [
+		                    /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-size", children: formatBytes(file.size) }),
+		                    label === null ? null : /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_jsx_runtime4.Fragment, { children: [
+		                      /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-sep", "aria-hidden": true, children: t("create.attachment.metaSep") }),
+		                      /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-status", children: label })
+		                    ] })
+		                  ] }),
+		                  state?.status === "failed" && state.reason !== void 0 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-error", children: t(FAILURE_KEY[state.reason]) }) : null,
+		                  state?.status === "uploading" ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { className: "tf-attachment-track", children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+		                    "span",
+		                    {
+		                      className: "tf-attachment-fill",
+		                      style: { width: `${Math.max(4, Math.min(100, state.percent ?? 0))}%` }
+		                    }
+		                  ) }) : null
+		                ] }),
+		                /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+		                  "button",
+		                  {
+		                    className: "tf-attachment-remove",
+		                    type: "button",
+		                    "aria-label": `${t("create.attachment.remove")} ${file.name}`,
+		                    disabled: busy,
+		                    onClick: () => remove2(index2),
+		                    children: "×"
+		                  }
+		                )
+		              ] }, `${fileKey(file)}-${index2}`);
+		            }) }) : null,
+		            rejections.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("ul", { className: "tf-attachment-rejected", role: "alert", children: rejections.map((rejection, index2) => /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("li", { children: t(REJECTION_KEY[rejection.reason], {
+		              name: rejection.file.name,
+		              ...rejection.params
+		            }) }, `${rejection.file.name}-${index2}`)) }) : null
+		          ]
+		        }
+		      ),
 		      invalid !== null || error !== null ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("div", { className: "tf-error", role: "alert", children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(AlertText, { text: invalid?.message ?? error ?? "" }) }) : null,
 		      /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)("div", { className: "tf-create-actions", children: [
 		        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("button", { className: "tf-btn", "data-tone": "primary", type: "submit", disabled: !canSubmit, children: staging ? t("create.attachment.submitUploading") : busy ? t("create.submitting") : t("create.submit") }),
@@ -13852,7 +14052,7 @@ window.__ModuleLoader__.load({
 		    },
 		    [basePath, onMissing, onOpenPath]
 		  );
-		  return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_dsh_client_ui_primitives.MarkdownDelegateProvider, { openFile: basePath === void 0 ? void 0 : openFile, children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_dsh_client_ui_primitives.MarkdownText, { text, labels }) });
+		  return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_dsh_client_ui_primitives2.MarkdownDelegateProvider, { openFile: basePath === void 0 ? void 0 : openFile, children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(import_dsh_client_ui_primitives2.MarkdownText, { text, labels }) });
 		}
 		function SectionHead({
 		  title,

package/locale/en.json

@@ -26,10 +26,12 @@
   "composer.locked": "The conversation has started; create a new one to switch agents.",
   "composer.noPreset": "The preset agent is not loaded, so the switch was not applied.",
   "composer.other": "Other (default)",
-  "create.attachment.add": "Add files",
+  "create.attachment.add": "Add attachments",
   "create.attachment.blocked": "Attachments are still uploading; wait for them to finish before sending.",
   "create.attachment.busy": "The conversation is busy, so the attachments were not sent. Try again.",
   "create.attachment.cancelled": "Upload cancelled; nothing was sent.",
+  "create.attachment.dropActive": "Release to attach these files.",
+  "create.attachment.dropHint": "Click to choose files, or drop them here.",
   "create.attachment.failed": "Upload failed",
   "create.attachment.failed.network": "The upload failed. Check the network and try again.",
   "create.attachment.failed.rejected": "The host rejected the file (damaged content or wrong type).",

package/locale/zh.json

@@ -26,10 +26,12 @@
   "composer.locked": "会话已开始，无法再切换 Agent；请新建会话。",
   "composer.noPreset": "预设 Agent 未加载，无法切换。",
   "composer.other": "其他（默认）",
-  "create.attachment.add": "选择文件",
+  "create.attachment.add": "添加附件",
   "create.attachment.blocked": "附件正在上传，上传完成后再提交。",
   "create.attachment.busy": "会话正忙，附件未发送，请稍后重试。",
   "create.attachment.cancelled": "已取消上传，附件未发送。",
+  "create.attachment.dropActive": "松手即可添加附件。",
+  "create.attachment.dropHint": "点击选择文件，或把文件拖到这里。",
   "create.attachment.failed": "上传失败",
   "create.attachment.failed.network": "上传暂时失败，请检查网络后重试。",
   "create.attachment.failed.rejected": "宿主拒绝了该文件（内容损坏或类型不符）。",

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@xirang-ai/dsh-teamflow",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "DeepSeek Harness plugin: Xirang workbench for the requirement → development → defect pipeline.",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/xirang-ai/teamflow.git"
+    "url": "git+https://github.com/xirang-ai/dsh-teamflow.git"
   },
   "keywords": [
     "deepseek-harness",
@@ -115,8 +115,8 @@
     "@deepseek-ai/schemastery": "^3.19.0",
     "nanoid": "^6.0.2"
   },
-  "homepage": "https://github.com/xirang-ai/teamflow#readme",
+  "homepage": "https://github.com/xirang-ai/dsh-teamflow#readme",
   "bugs": {
-    "url": "https://github.com/xirang-ai/teamflow/issues"
+    "url": "https://github.com/xirang-ai/dsh-teamflow/issues"
   }
 }