dsh-linked-workspace 0.8.1 → 0.8.2

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## 0.8.2 — 2026-11-11
+
+Three-day review round: security, data-integrity and large-directory fixes.
+
+- **Document preview XSS (high)**: the preview sanitizer now normalizes control characters, whitespace and zero-width characters before checking a URL scheme, so `jav\tascript:` links (and `vbscript:`, `file:`, `blob:`, `data:text/html`) can no longer run in the GUI. Only `http(s)`, `mailto`, `tel`, relative URLs and bitmap `data:image/*` sources are kept; SVG data URLs stay blocked.
+- **Mirror containment on Windows**: `realpathSync.native` is used for the containment check, so a directory junction can no longer make `.remote` (or a mirrored file) point outside the workspace. Linked `.local`/`.remote` entries that are themselves links are removed as links, never followed.
+- **No silent truncation when copying**: copying a remote file larger than 64 MB, or reading one incompletely, now fails with an explicit error instead of writing a truncated copy. The `linked_workspace` read tool no longer mirrors a truncated payload into `.remote`.
+- **Large local files**: `local.read` reads only the requested head of the file instead of loading the whole thing into memory, so peeking at multi-gigabyte files no longer allocates them (or fails with `ERR_FS_FILE_TOO_LARGE`).
+- **Non-empty directory delete from the tool**: `linked_workspace` `delete` now removes directories recursively, matching the UI, instead of failing on SFTP `rmdir`.
+- **Paged directory listings**: `fs.list` and `local.list` return `limit`/`offset` with `total` and `hasMore` (default 500, max 5000); both trees render a “Load more (N left)” row. A 20,000-entry folder no longer freezes the UI (it used to render all 20,012 rows).
+- **Deep sync trees**: the mirror sync marks a job truncated when it stops at the depth limit, instead of reporting success with missing files.
+- **Accessibility**: visible `:focus-visible` rings for tree rows, inputs, buttons and tabs; `role="treeitem"`/`aria-level`/`aria-selected`/`aria-expanded` on tree rows with ←/→ collapse/expand; the add-workspace dialog focuses its first field, traps Tab, and closes on Escape.
+- **Excel preview honesty**: `read_xlsx` reports `totalRow`/`totalCol`/`truncated`, and the grid notes when it shows only the first 200 rows × 40 columns or the first 20 worksheets.
+- **Build and host fixes**: the client build fails loudly when a `src/parts/*` file is missing; the dead branch in `linked.update` is gone; `HostPool` reuses one in-flight connection per host instead of leaking a duplicate on concurrent first connects.
+
+Earlier unreleased work included in this version:
+
+- Fixed linked-directory context-menu creation on both the remote and local trees: New folder and New file are direct menu actions, so the scrollable menu no longer clips the creation submenu.
+- CSV, HTML, SVG and other preview formats now create ordinary empty files; only Markdown, PDF, DOCX, XLSX and PPTX use document templates.
+- Creation keeps the name dialog open on failure, displays the error and prevents repeated submissions while pending. New files and folders reject existing names with HTTP 409 instead of replacing or silently reusing them, on both remote and local trees.
+
 ## 0.8.1 — 2026-11-09
 
 - **Image zoom**: the image preview gains zoom-out/zoom-in buttons, a percentage readout, “Fit to window” and “1:1” controls, plus `Ctrl/Cmd + wheel` zoom.

package/README.en.md

@@ -119,6 +119,21 @@ Old “Remote directories” tabs are restored after refresh through hidden lega
 
 See [CHANGELOG.md](CHANGELOG.md) for the full version history.
 
+### 0.8.2
+
+Security, data-integrity and large-directory fixes from the three-day review round:
+
+- The document-preview sanitizer normalizes control characters, whitespace and zero-width characters before checking a URL scheme, so `jav\tascript:`, `vbscript:`, `file:` and `data:text/html` links no longer run in the GUI; only `http(s)`, `mailto`, `tel`, relative URLs and bitmap `data:image` sources are kept.
+- Windows junctions can no longer escape the `.remote` containment check (`realpathSync.native`); linked `.local`/`.remote` entries are removed as links, never followed.
+- Copying a remote file over 64 MB, or reading one incompletely, now fails loudly instead of writing a truncated copy; the read tool no longer mirrors truncated payloads.
+- `local.read` reads only the requested head instead of loading the whole file into memory.
+- The `linked_workspace` `delete` action removes non-empty directories recursively.
+- Directory listings are paged (500 by default, 5000 max, with `total`/`hasMore`) and both trees render a “Load more” row, so a 20,000-entry folder no longer freezes the UI.
+- Mirror sync marks a job truncated at the depth limit instead of reporting success with files missing.
+- Accessibility: `:focus-visible` rings, `treeitem`/`aria-level`/`aria-expanded` semantics, `←`/`→` collapse and expand, and an add-workspace dialog that focuses its first field, traps Tab and closes on Escape.
+- Excel previews report `totalRow`/`totalCol`/`truncated` and note when the grid shows only the first 200 rows × 40 columns or the first 20 worksheets.
+- The client build fails when a `src/parts/*` file is missing; the dead `linked.update` branch is gone; `HostPool` reuses one in-flight connection per host.
+
 ### 0.7.0
 
 Single-click tree navigation with preview tabs and double-click pinning, remote/local terminal buttons with `cd`, VSCode-like shortcuts, unsaved-close prompts, and an auto-save switch under Settings → Connections.

package/README.md

@@ -114,6 +114,21 @@ dsh plugin --profile "$DSH_PROFILE" add "file:$PWD/dsh-linked-workspace"
 
 已打开的旧右侧栏「远程目录」标签页会在刷新后自动恢复（插件保留了两个隐藏的旧 tab 类型别名），标签标题也会自动改成「联动工作区目录」，新开的标签使用新的 `dsh-linked-workspace` 类型。
 
+### 0.8.2 变化
+
+安全、数据完整性与大目录体验修复（三日评审轮）：
+
+- 文档预览净化器先归一控制字符/空白/零宽字符再判 scheme，`jav\tascript:`、`vbscript:`、`file:`、`data:text/html` 不再可执行；只保留 http(s)/mailto/tel、相对链接与位图 `data:image`。
+- Windows junction 不再能绕过 `.remote` 包含性校验（改用 `realpathSync.native`）；链接目录只删链接本身。
+- 远端复制 >64 MB 或读取不完整时直接报错，不再静默写入截断副本；工具读文件只在未截断时同步到 `.remote`。
+- `local.read` 只读取所需头部，不再把超大文件整体读入内存。
+- 工具 `delete` 可递归删除非空远端目录。
+- 目录列表分页（默认 500、最大 5000，返回 `total`/`hasMore`），树底「加载更多」；2 万项目录不再卡死。
+- 同步深度超限会标记为截断，不再把漏文件当成功。
+- 可访问性：`:focus-visible` 焦点环、树行 `treeitem`/`aria-level`/`aria-expanded`、`←`/`→` 折叠展开、添加工作区弹窗聚焦首字段 + Tab 循环 + Esc 关闭。
+- Excel 预览返回 `totalRow`/`totalCol`/`truncated`，并提示「仅显示前 200 行 × 40 列」「仅显示前 20 个工作表」。
+- 客户端构建缺 `src/parts/*` 文件时直接失败；移除 `linked.update` 死分支；`HostPool` 并发首连复用同一连接。
+
 ### 0.5.11 变化
 
 远程目录的只读文件现在能看到代码内容；设置里「打开工作区」会跳转并关闭设置，远程目录「打开」会打开对应远程标签。

package/docs/API.md

@@ -58,12 +58,12 @@ relative to the scope root, or absolute inside it.
 | `workspaces.remove` | `{ id }` | `{}` |
 | `workspaces.rename` | `{ id, name }` | `{ workspace }` |
 | `workspaces.test` | `{ id }` | `{ ok, latencyMs?, resolvedPath?, error? }` |
-| `fs.list` | `{ workspaceId?/linkedId?, path }` | `{ path, entries: RemoteEntry[] }` |
+| `fs.list` | `{ workspaceId?/linkedId?, path, limit?, offset? }` | `{ path, entries: RemoteEntry[], total, offset, limit, hasMore }` (default 500, max 5000) |
 | `fs.read` | `{ workspaceId?/linkedId?, path, maxBytes? }` | `FileRead` |
 | `media.read` | `{ workspaceId?/linkedId?, path }` | `{ path, size, mtime, mime, base64 }` (PNG/JPG/GIF/WebP/BMP/ICO/AVIF/SVG, max 24 MB) |
-| `fs.write` | `{ workspaceId?/linkedId?, path, content, expectedMtime? }` | `{ path, size, mtime }` |
+| `fs.write` | `{ workspaceId?/linkedId?, path, content, expectedMtime?, createOnly? }` | `{ path, size, mtime }` (`createOnly: true`: existing target → 409) |
 | `fs.stat` | `{ workspaceId?/linkedId?, path }` | `{ path, relative, type, size, mtime, mode }` |
-| `fs.mkdir` | `{ workspaceId?/linkedId?, path }` | `{}` |
+| `fs.mkdir` | `{ workspaceId?/linkedId?, path, createOnly? }` | `{}` (`createOnly: true`: existing target → 409) |
 | `fs.rename` | `{ workspaceId?/linkedId?, from, to }` | `{}` |
 | `fs.move` | `{ workspaceId?/linkedId?, path, targetDir? }` | `{ path }` (same remote tree; collision → 409) |
 | `fs.delete` | `{ workspaceId?/linkedId?, path }` | `{}` |
@@ -71,7 +71,7 @@ relative to the scope root, or absolute inside it.
 | `settings.get` | `{}` | `{ editorTheme, editorThemeFamily, editorThemeMode, fileOpenMode, autoSave }` |
 | `settings.update` | `{ editorTheme?, editorThemeFamily?, editorThemeMode?, fileOpenMode?, autoSave? }` | `{ editorTheme, editorThemeFamily, editorThemeMode, fileOpenMode, autoSave }` |
 | `local.browse` | `{ path? }` | `{ path, parent, home, entries: [{ name, path }] }` |
-| `local.mkdir` | `{ path, name }` | `{ path }` |
+| `local.mkdir` | `{ path, name }` | `{ path }` (existing target → 409) |
 | `linked.list` | `{}` | `{ links: LinkInfo[] }` (each link carries `running`) |
 | `linked.create` | `{ hostId, remotePath, localPath, name?, mirror? }` | `{ link, workspaceId: string|null }` |
 | `linked.update` | `{ id, name?, mirror? }` | `{ link }` |
@@ -79,7 +79,7 @@ relative to the scope root, or absolute inside it.
 | `linked.sync` | `{ id, maxFiles?, maxBytes? }` | `{ job: SyncJob }` (starts a background job) |
 | `linked.syncStatus` | `{ id }` | `{ job: SyncJob | null }` |
 | `linked.syncCancel` | `{ id }` | `{ cancelled: boolean }` |
-| `local.list` | `{ path }` | `{ path, entries: [{ name, path, type, size, mtime }] }` |
+| `local.list` | `{ path, limit?, offset? }` | `{ path, entries: [{ name, path, type, size, mtime }], total, offset, limit, hasMore }` |
 | `local.openExternal` | `{ path }` | `{ opened, path }` |
 | `terminal.open` | `{ workspaceId?/linkedId?, side: 'remote'\|'local' }` | `{ opened, side, path, host? }` |
 | `fs.openExternal` | `{ workspaceId?/linkedId?, path }` | `{ opened, localPath, size }` |
@@ -102,7 +102,7 @@ relative to the scope root, or absolute inside it.
 | `local.move` | `{ path, targetDir?, root? }` | `{ path, type }` (same local tree; collision → 409) |
 | `local.delete` | `{ path, root? }` | `{}` (recursive) |
 | `local.copy` | `{ path, targetDir? }` | `{ path, type }` |
-| `local.newFile` | `{ path }` | `{ path }` |
+| `local.newFile` | `{ path }` | `{ path }` (existing target → 409) |
 | `local.chmod` | `{ path, mode }` | `{ path, mode }` |
 | `local.edit` | `{ path, app? }` | `{ path }` (opens Notepad) |
 

package/docs/VERIFY.md

@@ -89,6 +89,8 @@ Host code (lib/) reloads live with `plugin_manager set_plugin include:linked-wor
 19. 编辑器：内部内容面板不显示路径/保存头部（Ctrl+S 保存）；修改未保存时文件标签名前出现灰色圆点；行号、语法高亮（字符串/注释/关键字有颜色）、主题配色、
    远端并发修改 → 冲突提示（重新加载/强制保存）、二进制/大文件只读；底部状态栏完整可见（不再被视口裁切）。
 
+20. **右键新建回归**：远端目录和本地目录的文件夹均右击后，菜单中直接出现「新建文件夹」「新建文件」（不依赖向右展开的子菜单）；分别在根目录和嵌套目录创建文件夹、`.txt`、`.csv`、`.html`、`.svg`、`.png`，应创建空普通文件。`.md`、`.pdf`、`.docx`、`.xlsx`、`.pptx` 仍创建对应模板并打开；重复名称应留在命名对话框并显示错误，不得覆盖已有文件。
+
 ## 联动会话（模型工具）
 
 1. 在联动工作区里新建会话，问模型「这个联动工作区的远端根目录是什么」→ 它应调用 `linked_workspace` 的 `list`/`info`。
@@ -132,3 +134,14 @@ Host code (lib/) reloads live with `plugin_manager set_plugin include:linked-wor
 4. 本地与远端各打开一个 `.html`/`.htm`：内容面板以 iframe 渲染页面，状态栏显示 HTML、大小和「网页脚本已禁用」。
 5. HTML 内联样式与静态标签正常显示；页面内脚本不执行，链接不会跳出 DSH 主界面。
 6. 读取失败的 HTML（权限/过大/二进制）显示错误提示和重试按钮。
+
+## 安全、分页与可访问性（0.8.2）
+
+1. **预览链接净化**：在本地或远端放一个 Markdown 文件，内容含 `<a href="jav&#9;ascript:document.title='X'">click</a>` 与 `[example](https://example.com)`；预览后点第一个链接：页面不应跳转、标题不变、DSH 界面不被替换；第二个链接仍指向 `https://example.com`。`vbscript:`、`file:`、`data:text/html`、`data:image/svg+xml` 链接同样应被移除。
+2. **大目录分页**：造一个 20 000 项的目录（`1..20000 | % { New-Item -ItemType File "f$_.txt" }`），在目录树展开它：应只出现 500 行和「加载更多（剩余 19500 项）」，页面不卡顿、可滚动、可点其他文件；点「加载更多」追加 500 行并更新剩余计数，滚到底部后可继续加载。
+3. **键盘操作**：Tab 到目录树行应看到明显焦点环；聚焦树行时 `←` 收起、`→` 展开目录；读屏应能听到 treeitem 层级与展开状态。
+4. **添加工作区弹窗**：打开后焦点直接在第一个输入框；连按 Tab 焦点在弹窗内循环，不会跑到背景页面；`Esc` 关闭弹窗。
+5. **大文件窥视**：打开一个 >2 GB 的本地文件（只读预览）：应显示「文件过大，仅显示前 512 KB」而不是报错或长时间卡住；内存不随文件大小增长。
+6. **复制上限**：在远端复制一个 >64 MB 的文本/二进制文件：应提示「超过 64 MB，无法复制」，目标目录不得出现被截断的副本。
+7. **非空目录删除（工具）**：让 agent 用 `linked_workspace` 的 `delete` 删除一个含文件的远端目录：应递归删除成功，不再报 SFTP `Failure`。
+8. **Excel 截断提示**：打开一个 >200 行或 >40 列的 xlsx：表格上方应出现「仅显示前 200 行 × 40 列」；工作表超过 20 个时出现「仅显示前 20 个工作表」。

package/lib/client.js

@@ -1835,8 +1835,112 @@ function fileIconSpec(name, isDir) {
   return ICON_spec('unknown')
 }
 
+// ---- file-creation.js ----
+// Shared by the directory menu, its submit handler and API regression tests.
+// Preview formats (CSV/HTML/images) are regular files; only document templates
+// are sent to docs.create.
+function newEntryMenuItems(menu, t, onNew) {
+  return [true, false].map(function (isDir) {
+    var title = t(isDir ? 'newFolderTitle' : 'newFileTitle');
+    return {
+      label: t(isDir ? 'ctxNewFolder' : 'ctxNewFile'),
+      onSelect: function () {
+        onNew({ kind: 'new', side: menu.side, dir: menu.path, isDir: isDir,
+          title: title, label: t('nameLabel'), value: title });
+      },
+    };
+  });
+}
+
+function newEntryRequest(side, dirPath, name, isDir, scope) {
+  var child = String(name || '').trim();
+  if (!child || child === '.' || child === '..' || /[/\\\0]/.test(child)) {
+    var error = new Error('文件或文件夹名称无效 / Invalid file or folder name');
+    error.code = 'BAD_REQUEST';
+    throw error;
+  }
+  var parent = String(dirPath || '');
+  var separator = side === 'remote' || parent.indexOf('\\') < 0 ? '/' : '\\';
+  var target = parent + (/[\\/]$/.test(parent) ? '' : separator) + child;
+  var match = child.toLowerCase().match(/\.[^./\\]+$/);
+  var extension = match ? match[0] : '';
+  var kinds = { '.md': 'markdown', '.markdown': 'markdown', '.pdf': 'pdf',
+    '.docx': 'docx', '.xlsx': 'xlsx', '.pptx': 'pptx' };
+  var kind = isDir ? '' : (kinds[extension] || '');
+  var method;
+  var params;
+  if (isDir) {
+    method = side === 'remote' ? 'fs.mkdir' : 'local.mkdir';
+    params = side === 'remote' ? { path: target, createOnly: true } : { path: parent, name: child };
+  } else if (kind) {
+    method = 'docs.create';
+    params = { path: target, kind: kind };
+  } else {
+    method = side === 'remote' ? 'fs.write' : 'local.newFile';
+    params = side === 'remote' ? { path: target, content: '', createOnly: true } : { path: target };
+  }
+  if (side === 'remote') params = Object.assign({}, scope, params);
+  return { method: method, params: params, path: target, kind: kind };
+}
+
+// ---- url-safety.js ----
+// URL safety helpers shared by the document sanitizer and its unit tests.
+//
+// Browsers strip ASCII control characters, tabs and newlines while parsing a
+// URL scheme, so `jav&#9;ascript:` reaches the address bar as `javascript:`.
+// The checks below normalise the value the same way before looking at it.
+var SAFE_SCHEMES = { http: 1, https: 1, mailto: 1, tel: 1 };
+var IMAGE_DATA = /^data:image\/(?:png|jpeg|jpg|gif|webp|bmp|avif|x-icon)[;,]/
+var URL_ATTRIBUTES = {
+  href: 1,
+  src: 1,
+  'xlink:href': 1,
+  action: 1,
+  formaction: 1,
+  data: 1,
+  poster: 1,
+  background: 1,
+  cite: 1,
+  longdesc: 1,
+  usemap: 1,
+};
+
+function normalizeUrlValue(value) {
+  return String(value == null ? '' : value)
+    // C0/C1 controls, space, zero-width and line/paragraph separators are what
+    // URL parsers silently drop inside a scheme.
+    .replace(/[\u0000-\u0020\u007f-\u009f\u200b-\u200f\u2028\u2029\ufeff]/g, '')
+    .trim();
+}
+
+function urlSchemeOf(value) {
+  var text = normalizeUrlValue(value);
+  var match = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(text);
+  return match ? match[1].toLowerCase() : '';
+}
+
+// Returns '' when the attribute is safe to keep, or a short reason when the
+// sanitizer has to drop it. `tagName` is only needed for data: URLs, which are
+// allowed for images and rejected everywhere else.
+function urlAttributeViolation(name, value, tagName) {
+  var attribute = String(name || '').toLowerCase();
+  if (/^on/.test(attribute)) return 'event handler';
+  if (!URL_ATTRIBUTES[attribute]) return '';
+  var text = normalizeUrlValue(value);
+  if (text === '') return '';
+  // Relative paths, fragments and protocol-relative URLs have no scheme.
+  if (text.charAt(0) === '#' || text.slice(0, 2) === '//') return '';
+  var scheme = urlSchemeOf(text);
+  if (scheme === '') return '';
+  if (SAFE_SCHEMES[scheme]) return '';
+  if (scheme === 'data' && String(tagName || '').toLowerCase() === 'img' && IMAGE_DATA.test(text)) return '';
+  return scheme + ': URL';
+}
+
     var TREE_TAB_TYPE = 'dsh-linked-workspace';
     var REMOTE_TAB_TYPE = 'dsh-linked-workspace:remote';
+    // One tree page; a folder with 20k entries must not render 20k rows.
+    var TREE_PAGE_SIZE = 500;
     var linkedLocalKeys = new Set();
     var linkedWorkspaceKeys = new Set();
     var hasRemoteDirectories = false;
@@ -2050,6 +2154,10 @@ function fileIconSpec(name, isDir) {
       latency: '延迟',
       countSuffix: ' 个',
       noEntries: '空目录',
+      loadMore: '加载更多（剩余 {{count}} 项）',
+      loadMoreShort: '加载更多',
+      sheetTruncated: '仅显示前 {{rows}} 行 × {{cols}} 列',
+      sheetMore: '工作表较多，仅显示前 20 个',
       noCredential: '缺少凭据',
       sourceManagerShort: 'SSH',
       remoteGroup: '远程目录',
@@ -2379,6 +2487,10 @@ function fileIconSpec(name, isDir) {
       latency: 'Latency',
       countSuffix: '',
       noEntries: 'Empty directory',
+      loadMore: 'Load more ({{count}} left)',
+      loadMoreShort: 'Load more',
+      sheetTruncated: 'Showing the first {{rows}} rows × {{cols}} columns',
+      sheetMore: 'Showing the first 20 worksheets only',
       noCredential: 'No credentials',
       sourceManagerShort: 'SSH',
       remoteGroup: 'Remote directories',
@@ -2689,6 +2801,7 @@ function fileIconSpec(name, isDir) {
         FS_IS_DIR: '目标是目录',
         FS_NOT_DIR: '目标不是目录',
         FS_TOO_LARGE: '文件过大',
+        FS_EXISTS: '目标已存在，请使用其他名称',
         CONFLICT: '远端文件已被修改',
         BAD_REQUEST: '请求参数无效',
       },
@@ -2703,6 +2816,7 @@ function fileIconSpec(name, isDir) {
         FS_IS_DIR: 'That path is a directory',
         FS_NOT_DIR: 'That path is not a directory',
         FS_TOO_LARGE: 'The file is too large',
+        FS_EXISTS: 'The target already exists; choose another name',
         CONFLICT: 'The remote file changed',
         BAD_REQUEST: 'Invalid request',
       },
@@ -2783,7 +2897,7 @@ function fileIconSpec(name, isDir) {
         parsed.querySelectorAll('script,style,iframe,object,embed,link,meta,base,form').forEach(function (node) { node.remove(); });
         parsed.querySelectorAll('*').forEach(function (element) {
           Array.from(element.attributes).forEach(function (attribute) {
-            if (/^on/i.test(attribute.name) || /^javascript:/i.test(attribute.value) || /^data:text\/html/i.test(attribute.value)) {
+            if (urlAttributeViolation(attribute.name, attribute.value, element.tagName)) {
               element.removeAttribute(attribute.name);
             }
           });
@@ -3049,6 +3163,9 @@ function fileIconSpec(name, isDir) {
       '.rw-tree-body{padding:2px 4px 6px;border-top:1px solid var(--dsw-alias-border-l1)}',
       '.rw-row{display:flex;align-items:center;gap:5px;width:100%;min-width:0;height:23px;padding:0 6px;border:0;border-radius:5px;background:transparent;color:var(--dsw-alias-label-primary);font:inherit;font-size:12.5px;cursor:pointer;text-align:left;box-sizing:border-box}',
       '.rw-row:hover{background:var(--dsw-alias-interactive-bg-hover,rgba(127,127,127,.12))}',
+      '.rw-row:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-brand-primary,#4176e6));outline-offset:-1px}',
+      '.rw-input:focus-visible,.rw-textarea:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-brand-primary,#4176e6));outline-offset:-1px}',
+      '.rw-btn:focus-visible,.rw-doc-tab:focus-visible,.rw-icon-btn:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-brand-primary,#4176e6));outline-offset:1px}',
       '.rw-row.is-active{background:color-mix(in srgb,var(--dsw-alias-brand-primary) 14%,transparent)}',
       '.rw-row-name{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;flex:1 1 auto;min-width:0}',
       '.rw-row-size{flex:none;font-size:10.5px;color:var(--dsw-alias-label-tertiary);font-variant-numeric:tabular-nums}',
@@ -3176,6 +3293,10 @@ function fileIconSpec(name, isDir) {
       '.rw-doc-table td{border:1px solid var(--dsw-alias-border-l2);padding:0}',
       '.rw-doc-table input{width:100%;border:0;background:transparent;padding:4px 5px;font:inherit;color:var(--dsw-alias-label-primary);outline:none;box-sizing:border-box}',
       '.rw-doc-tabs{display:flex;gap:3px;padding:5px;border-bottom:1px solid var(--dsw-alias-border-l1);overflow:auto;flex:none}',
+      '.rw-doc-note{padding:3px 10px;font-size:11px;color:var(--dsw-alias-label-tertiary);border-bottom:1px solid var(--dsw-alias-border-l1)}',
+      '.rw-load-more{width:100%;border:0;background:transparent;cursor:pointer;text-align:left;font:inherit;font-size:11.5px;color:var(--dsw-alias-brand-primary)}',
+      '.rw-load-more:hover{text-decoration:underline}',
+      '.rw-load-more:disabled{opacity:.6;cursor:default}',
       '.rw-doc-tab{padding:2px 8px;border:1px solid transparent;border-radius:5px;background:transparent;color:var(--dsw-alias-label-secondary);font:inherit;font-size:11.5px;cursor:pointer;white-space:nowrap}',
       '.rw-doc-tab.is-on{background:var(--dsw-alias-bg-layer-2);border-color:var(--dsw-alias-border-l2);color:var(--dsw-alias-label-primary)}',
       '.rw-doc-grid{width:100%;border-collapse:collapse;font-size:11.5px}',
@@ -4507,6 +4628,19 @@ function fileIconSpec(name, isDir) {
         });
       }
 
+      function listRequest(path, offset) {
+        var params = { path: path, limit: TREE_PAGE_SIZE, offset: offset };
+        return props.kind === 'local'
+          ? apiCall('local.list', params)
+          : apiCall('fs.list', Object.assign(params, scopeParams(props.scope)));
+      }
+
+      function applyEntries(list) {
+        return props.showHidden ? list : list.filter(function (entry) {
+          return String(entry.name || '').charAt(0) !== '.';
+        });
+      }
+
       function load(path, silent) {
         if (pending.current.has(path)) return;
         pending.current.add(path);
@@ -4516,18 +4650,18 @@ function fileIconSpec(name, isDir) {
           entries.set(path, { loading: !silent, error: null, entries: existing.entries || [], loaded: existing.loaded });
           return { entries: entries };
         });
-        var request = props.kind === 'local'
-          ? apiCall('local.list', { path: path })
-          : apiCall('fs.list', Object.assign({ path: path }, scopeParams(props.scope)));
-        request.then(function (result) {
+        listRequest(path, 0).then(function (result) {
           pending.current.delete(path);
-          var entries = result.entries || [];
-          if (!props.showHidden) {
-            entries = entries.filter(function (entry) { return String(entry.name || '').charAt(0) !== '.'; });
-          }
           setCache(function (previous) {
             var next = new Map(previous.entries);
-            next.set(path, { loading: false, error: null, loaded: true, entries: entries });
+            next.set(path, {
+              loading: false,
+              error: null,
+              loaded: true,
+              entries: applyEntries(result.entries || []),
+              total: Number(result.total) || (result.entries || []).length,
+              hasMore: Boolean(result.hasMore),
+            });
             return { entries: next };
           });
           setExpanded(function (previous) {
@@ -4545,7 +4679,39 @@ function fileIconSpec(name, isDir) {
         });
       }
 
-      return h(TreeDirectory, {
+      function loadMore(path) {
+        var record = cache.entries.get(path);
+        if (!record || record.loadingMore || !record.hasMore) return;
+        setCache(function (previous) {
+          var next = new Map(previous.entries);
+          var current = next.get(path);
+          if (current) next.set(path, Object.assign({}, current, { loadingMore: true }));
+          return { entries: next };
+        });
+        listRequest(path, (record.entries || []).length).then(function (result) {
+          setCache(function (previous) {
+            var next = new Map(previous.entries);
+            var current = next.get(path) || { entries: [] };
+            next.set(path, Object.assign({}, current, {
+              loadingMore: false,
+              loaded: true,
+              entries: current.entries.concat(applyEntries(result.entries || [])),
+              total: Number(result.total) || current.total,
+              hasMore: Boolean(result.hasMore),
+            }));
+            return { entries: next };
+          });
+        }).catch(function (error) {
+          setCache(function (previous) {
+            var next = new Map(previous.entries);
+            var current = next.get(path);
+            if (current) next.set(path, Object.assign({}, current, { loadingMore: false, moreError: error }));
+            return { entries: next };
+          });
+        });
+      }
+
+      return h('div', { className: 'rw-tree', role: 'tree', 'aria-label': t('allFiles') }, h(TreeDirectory, {
         path: rootPath,
         name: props.rootName || t('allFiles'),
         depth: 0,
@@ -4556,12 +4722,13 @@ function fileIconSpec(name, isDir) {
         toggle: toggle,
         state: { entries: cache.entries },
         load: load,
+        loadMore: loadMore,
         onSelect: props.onSelect,
         onPin: props.onPin,
         onSelectPath: props.onSelectPath,
         onContextMenu: props.onContextMenu,
         selectedPath: props.selectedPath || '',
-      });
+      }));
     }
 
     function TreeSection(props) {
@@ -4883,20 +5050,46 @@ function fileIconSpec(name, isDir) {
       var state = useState(props.value || '');
       var value = state[0];
       var setValue = state[1];
-      function submit() { if (value.trim() !== '') props.onSubmit(value.trim()); }
-      return h(DialogShell, { title: props.title, onClose: props.onClose },
+      var statusState = useState({ busy: false, error: '' });
+      var status = statusState[0];
+      var setStatus = statusState[1];
+      var pendingRef = useRef(false);
+      var mountedRef = useRef(true);
+      useEffect(function () {
+        mountedRef.current = true;
+        return function () { mountedRef.current = false; };
+      }, []);
+      function close() { if (!pendingRef.current) props.onClose(); }
+      function submit() {
+        if (value.trim() === '' || pendingRef.current) return;
+        pendingRef.current = true;
+        setStatus({ busy: true, error: '' });
+        Promise.resolve().then(function () { return props.onSubmit(value.trim()); }).then(function () {
+          pendingRef.current = false;
+          if (mountedRef.current) setStatus({ busy: false, error: '' });
+        }).catch(function (error) {
+          pendingRef.current = false;
+          if (mountedRef.current) setStatus({ busy: false, error: messageOf(error, props.t, props.locale) });
+        });
+      }
+      return h(DialogShell, { title: props.title, onClose: close },
         h('label', { className: 'rw-dialog-label' }, props.label),
         h('input', {
           className: 'rw-dialog-input',
           value: value,
+          disabled: status.busy,
           autoFocus: true,
           spellCheck: false,
           onChange: function (event) { setValue(event.currentTarget.value); },
-          onKeyDown: function (event) { if (event.key === 'Enter') submit(); },
+          onKeyDown: function (event) {
+            if (event.key === 'Enter' && (!event.nativeEvent || !event.nativeEvent.isComposing)) { event.preventDefault(); submit(); }
+            else if (event.key === 'Escape') close();
+          },
         }),
+        status.error ? h(Banner, { kind: 'error' }, status.error) : null,
         h('div', { className: 'rw-dialog-actions' },
-          h('button', { type: 'button', className: 'rw-btn rw-btn-sm', onClick: props.onClose }, props.t('cancel')),
-          h('button', { type: 'button', className: 'rw-btn rw-btn-sm rw-btn-primary', onClick: submit }, props.t('confirm'))));
+          h('button', { type: 'button', className: 'rw-btn rw-btn-sm', disabled: status.busy, onClick: close }, props.t('cancel')),
+          h('button', { type: 'button', className: 'rw-btn rw-btn-sm rw-btn-primary', disabled: status.busy || value.trim() === '', onClick: submit }, props.t(status.busy ? 'loading' : 'confirm'))));
     }
 
     function ConfirmDialog(props) {
@@ -5225,6 +5418,12 @@ function fileIconSpec(name, isDir) {
           h('div', { className: 'rw-doc-tabs' }, sheets.map(function (sheet, index) {
             return h('button', { key: sheet.name, type: 'button', className: 'rw-doc-tab' + (index === state.sheet ? ' is-on' : ''), onClick: function () { patch({ sheet: index }); } }, sheet.name);
           })),
+          active.truncated
+            ? h('div', { className: 'rw-doc-note' }, t('sheetTruncated', { rows: active.maxRow || 0, cols: active.maxCol || 0 }))
+            : null,
+          (state.data.sheetCount || sheets.length) > sheets.length
+            ? h('div', { className: 'rw-doc-note' }, t('sheetMore'))
+            : null,
           h('div', { style: { flex: '1 1 auto', overflow: 'auto', padding: 8 } },
             h('table', { className: 'rw-doc-grid' },
               h('thead', null, header),
@@ -5814,27 +6013,13 @@ function fileIconSpec(name, isDir) {
       }
 
       function submitNew(side, dirPath, name, isDir) {
-        var target = joinChildPath(dirPath, name, side);
-        var docKind = documentKindOf(name);
-        var promise;
-        if (isDir) {
-          promise = side === 'remote'
-            ? apiCall('fs.mkdir', Object.assign({ path: target }, scopeParams(scopeRef)))
-            : apiCall('local.mkdir', { path: dirPath, name: name });
-        } else if (docKind) {
-          promise = side === 'remote'
-            ? apiCall('docs.create', Object.assign({ path: target, kind: docKind }, scopeParams(scopeRef)))
-            : apiCall('docs.create', { path: target, kind: docKind });
-        } else {
-          promise = side === 'remote'
-            ? apiCall('fs.write', Object.assign({ path: target, content: '' }, scopeParams(scopeRef)))
-            : apiCall('local.newFile', { path: target });
-        }
-        promise.then(function () {
+        var request = newEntryRequest(side, dirPath, name, isDir, scopeParams(scopeRef));
+        return apiCall(request.method, request.params).then(function () {
+          setDialog(null);
           showNotice('success', t('newDone'));
           refreshTree();
-          if (!isDir && docKind) openInternalFile(side, target);
-        }).catch(noticeError);
+          if (!isDir && request.kind) openInternalFile(side, request.path);
+        });
       }
 
       function submitChmod(side, targetPath, mode) {
@@ -5849,9 +6034,9 @@ function fileIconSpec(name, isDir) {
       }
 
       function submitDialog(current, value) {
+        if (current.kind === 'new') return submitNew(current.side, current.dir, value, current.isDir);
         setDialog(null);
         if (current.kind === 'rename') submitRenamed(current.side, current.path, value);
-        else if (current.kind === 'new') submitNew(current.side, current.dir, value, current.isDir);
         else if (current.kind === 'chmod') submitChmod(current.side, current.path, value);
       }
 
@@ -5911,14 +6096,8 @@ function fileIconSpec(name, isDir) {
           setDialog({ kind: 'chmod', side: menu.side, path: menu.path, title: t('chmodTitle'), label: t('chmodLabel'), value: '644' });
         } });
         if (menu.isDir) {
-          items.push({ label: t('ctxNew'), sub: [
-            { label: t('ctxNewFolder'), onSelect: function () {
-              setDialog({ kind: 'new', side: menu.side, dir: menu.path, isDir: true, title: t('newFolderTitle'), label: t('nameLabel'), value: t('newFolderTitle') });
-            } },
-            { label: t('ctxNewFile'), onSelect: function () {
-              setDialog({ kind: 'new', side: menu.side, dir: menu.path, isDir: false, title: t('newFileTitle'), label: t('nameLabel'), value: t('newFileTitle') });
-            } },
-          ] });
+          items.push({ separator: true });
+          items = items.concat(newEntryMenuItems(menu, t, setDialog));
         }
         items.push({ separator: true });
         items.push({ label: t('ctxProperties'), onSelect: function () { showProperties(menu.side, menu.path); } });
@@ -5979,11 +6158,12 @@ function fileIconSpec(name, isDir) {
         }
         return h(PromptDialog, {
           t: t,
+          locale: locale,
           title: dialog.title,
           label: dialog.label,
           value: dialog.value,
           onClose: function () { setDialog(null); },
-          onSubmit: function (value) { submitDialog(dialog, value); },
+          onSubmit: function (value) { return submitDialog(dialog, value); },
         });
       }
 
@@ -6348,6 +6528,7 @@ function fileIconSpec(name, isDir) {
                 toggle: toggle,
                 state: state,
                 load: props.load,
+                loadMore: props.loadMore,
                 onSelect: onSelect,
                 onPin: onPin,
                 onSelectPath: onSelectPath,
@@ -6359,6 +6540,9 @@ function fileIconSpec(name, isDir) {
               children.push(h('button', {
                 key: child.path,
                 type: 'button',
+                role: 'treeitem',
+                'aria-level': depth + 1,
+                'aria-selected': active,
                 className: 'rw-row' + (active ? ' is-active' : ''),
                 style: { paddingLeft: 6 + (depth + 1) * 12 },
                 title: child.path,
@@ -6380,12 +6564,28 @@ function fileIconSpec(name, isDir) {
                 h('span', { className: 'rw-row-size' }, formatBytes(child.size))));
             }
           });
+          if (entry.hasMore) {
+            children.push(h('button', {
+              key: 'more',
+              type: 'button',
+              className: 'rw-row-msg rw-load-more',
+              style: { paddingLeft: 6 + (depth + 1) * 12 },
+              disabled: Boolean(entry.loadingMore),
+              onClick: function () { if (props.loadMore) props.loadMore(path); },
+            }, entry.loadingMore ? Spinner(12) : null,
+            entry.moreError
+              ? messageOf(entry.moreError, t, locale)
+              : t('loadMore', { count: Math.max((entry.total || 0) - entry.entries.length, 0) })));
+          }
         }
       }
 
       return h(React.Fragment, null,
         h('button', {
           type: 'button',
+          role: 'treeitem',
+          'aria-level': depth + 1,
+          'aria-expanded': isOpen,
           className: 'rw-row' + (selectedPath === path ? ' is-active' : ''),
           style: { paddingLeft: 6 + depth * 12 },
           title: path,
@@ -6393,13 +6593,16 @@ function fileIconSpec(name, isDir) {
             if (onSelectPath) onSelectPath({ path: path, name: name, isDir: true });
             if (event.detail !== 2) toggle(path);
           },
+          onKeyDown: function (event) {
+            if (event.key === 'ArrowRight' && !isOpen) { event.preventDefault(); toggle(path); }
+            else if (event.key === 'ArrowLeft' && isOpen) { event.preventDefault(); toggle(path); }
+          },
           onContextMenu: function (event) {
             if (!onContextMenu) return;
             event.preventDefault();
             event.stopPropagation();
             onContextMenu({ path: path, name: name, isDir: true, event: event });
           },
-          'aria-expanded': isOpen,
         },
           h('span', { className: 'rw-chevron' + (isOpen ? ' is-open' : '') }, IconChevron(12)),
           h(FileGlyph, { name: name, dir: true, open: isOpen, size: 13 }),
@@ -6430,6 +6633,11 @@ function fileIconSpec(name, isDir) {
         });
       }
 
+      function listRequest(path, offset) {
+        return Object.assign({ path: path, limit: TREE_PAGE_SIZE, offset: offset },
+          source.kind === 'linked' ? { linkedId: source.id } : { workspaceId: source.id });
+      }
+
       function load(path) {
         setCache(function (previous) {
           var record = previous.entries.get(path);
@@ -6439,13 +6647,17 @@ function fileIconSpec(name, isDir) {
           entries.set(path, { loading: true, error: null, entries: existing.entries || [], loaded: existing.loaded });
           return { entries: entries };
         });
-        var request = source.kind === 'linked'
-          ? { linkedId: source.id, path: path }
-          : { workspaceId: source.id, path: path };
-        apiCall('fs.list', request).then(function (result) {
+        apiCall('fs.list', listRequest(path, 0)).then(function (result) {
           setCache(function (previous) {
             var entries = new Map(previous.entries);
-            entries.set(path, { loading: false, error: null, loaded: true, entries: result.entries || [] });
+            entries.set(path, {
+              loading: false,
+              error: null,
+              loaded: true,
+              entries: result.entries || [],
+              total: Number(result.total) || (result.entries || []).length,
+              hasMore: Boolean(result.hasMore),
+            });
             return { entries: entries };
           });
           setExpanded(function (previous) {
@@ -6462,6 +6674,38 @@ function fileIconSpec(name, isDir) {
         });
       }
 
+      function loadMore(path) {
+        var record = cache.entries.get(path);
+        if (!record || record.loadingMore || !record.hasMore) return;
+        setCache(function (previous) {
+          var entries = new Map(previous.entries);
+          var current = entries.get(path);
+          if (current) entries.set(path, Object.assign({}, current, { loadingMore: true }));
+          return { entries: entries };
+        });
+        apiCall('fs.list', listRequest(path, (record.entries || []).length)).then(function (result) {
+          setCache(function (previous) {
+            var entries = new Map(previous.entries);
+            var current = entries.get(path) || { entries: [] };
+            entries.set(path, Object.assign({}, current, {
+              loadingMore: false,
+              loaded: true,
+              entries: current.entries.concat(result.entries || []),
+              total: Number(result.total) || current.total,
+              hasMore: Boolean(result.hasMore),
+            }));
+            return { entries: entries };
+          });
+        }).catch(function (error) {
+          setCache(function (previous) {
+            var entries = new Map(previous.entries);
+            var current = entries.get(path);
+            if (current) entries.set(path, Object.assign({}, current, { loadingMore: false, moreError: error }));
+            return { entries: entries };
+          });
+        });
+      }
+
       useEffect(function () {
         if (!open) return;
         var root = source.remotePath;
@@ -6490,7 +6734,7 @@ function fileIconSpec(name, isDir) {
             h('span', { className: 'rw-tree-ws-sub' }, source.username + '@' + source.host + (source.kind === 'linked' ? ' · ' + t('linkedChip') : ''))),
           h(StatusPill, { status: source.status, t: t })),
         open
-          ? h('div', { className: 'rw-tree-body' },
+          ? h('div', { className: 'rw-tree-body', role: 'tree', 'aria-label': source.name },
             h(TreeDirectory, {
               path: source.remotePath,
               name: '/',
@@ -6502,6 +6746,7 @@ function fileIconSpec(name, isDir) {
               toggle: toggle,
               state: { entries: cache.entries },
               load: load,
+              loadMore: loadMore,
               onSelect: props.onSelect,
               selectedPath: props.selectedPath,
             }))
@@ -6778,10 +7023,58 @@ function fileIconSpec(name, isDir) {
         });
       }
 
+      var modalRef = useRef(null);
+      var focusablesOf = function () {
+        var node = modalRef.current;
+        if (!node) return [];
+        return Array.prototype.filter.call(
+          node.querySelectorAll('button, input, select, textarea, a[href], [tabindex]:not([tabindex="-1"])'),
+          function (element) { return !element.disabled && element.offsetParent !== null; });
+      };
+
+      useEffect(function () {
+        if (!props.open) return;
+        var node = modalRef.current;
+        if (!node) return;
+        // Focus the first real field, not the tab strip, so typing works at once.
+        var target = node.querySelector('.rw-modal-body input, .rw-modal-body textarea') || focusablesOf()[0];
+        if (target && typeof target.focus === 'function') target.focus();
+      }, [props.open, flow]);
+
+      function onModalKeyDown(event) {
+        if (event.key === 'Escape') {
+          event.preventDefault();
+          event.stopPropagation();
+          if (props.onCancel) props.onCancel();
+          return;
+        }
+        if (event.key !== 'Tab') return;
+        // Keep Tab inside the dialog: without this the focus escapes to the
+        // page behind the backdrop.
+        var focusables = focusablesOf();
+        if (focusables.length === 0) return;
+        var first = focusables[0];
+        var last = focusables[focusables.length - 1];
+        if (event.shiftKey && document.activeElement === first) {
+          event.preventDefault();
+          last.focus();
+        } else if (!event.shiftKey && document.activeElement === last) {
+          event.preventDefault();
+          first.focus();
+        }
+      }
+
       if (!props.open) return null;
 
       return h('div', { className: 'rw-modal-backdrop', role: 'presentation' },
-        h('div', { className: 'rw-modal', role: 'dialog', 'aria-modal': 'true', 'aria-label': t('flowTitle') },
+        h('div', {
+          ref: modalRef,
+          className: 'rw-modal',
+          role: 'dialog',
+          'aria-modal': 'true',
+          'aria-label': t('flowTitle'),
+          onKeyDown: onModalKeyDown,
+        },
           h('div', { className: 'rw-modal-head' },
             h('span', { className: 'rw-icon-chip' }, IconLink(16)),
             h('span', { className: 'rw-modal-title' }, t('flowTitle')),

package/lib/index.js

@@ -16,7 +16,7 @@
  * addresses and workspace paths.
  */
 import { randomUUID } from 'node:crypto'
-import { chmodSync, cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from 'node:fs'
+import { chmodSync, closeSync, cpSync, existsSync, mkdirSync, mkdtempSync, openSync, readFileSync, readSync, readdirSync, renameSync, rmSync, writeFileSync } from 'node:fs'
 import { spawn } from 'node:child_process'
 import { mkdir, readdir, stat as fsStat } from 'node:fs/promises'
 import { homedir, tmpdir } from 'node:os'
@@ -61,6 +61,7 @@ const LINKED_SYNC_BYTES = 50 * 1024 * 1024
 const LINKED_SYNC_FILE = 20 * 1024 * 1024
 const LINKED_SYNC_EXCLUDES = new Set(['.git', 'node_modules', '__pycache__', '.conda', '.venv', '.mypy_cache', '.pytest_cache', '.ipynb_checkpoints', '.ruff_cache'])
 const LINKED_SYNC_TIMEOUT_MS = 30_000
+const LINKED_SYNC_MAX_DEPTH = 24
 const LINKED_OPEN_FILE_CAP = 64 * 1024 * 1024
 const MAX_BODY_BYTES = 16 * 1024 * 1024
 const EDITABLE_LIMIT = 2 * 1024 * 1024
@@ -82,6 +83,17 @@ const IMAGE_MIME = Object.freeze({
 const MAX_NAME_LENGTH = 120
 const CONNECT_TIMEOUT_MS = 20_000
 const OP_TIMEOUT_MS = 60_000
+// Directory listings are paged so a folder with tens of thousands of entries
+// cannot stall the Host or flood the renderer.
+const LIST_PAGE_SIZE = 500
+const LIST_PAGE_MAX = 5000
+
+/** Clamp a requested page window to the listing limits. */
+const pageWindow = (params = {}, total = 0) => {
+  const limit = Math.min(Math.max(Number(params.limit) || LIST_PAGE_SIZE, 1), LIST_PAGE_MAX)
+  const offset = Math.min(Math.max(Number(params.offset) || 0, 0), Math.max(total, 0))
+  return { limit, offset }
+}
 
 const LOG_PREFIX = '[dsh-linked-workspace]'
 
@@ -505,10 +517,31 @@ function mapLocalFsError(error, fallback = 'INTERNAL') {
   if (code === 'ENOENT') return new ApiError('FS_NOT_FOUND', '本地路径不存在')
   if (code === 'EACCES' || code === 'EPERM') return new ApiError('FS_PERMISSION', '没有权限访问本地路径')
   if (code === 'ENOTDIR') return new ApiError('FS_NOT_DIR', '本地路径不是目录')
-  if (code === 'EEXIST') return new ApiError('BAD_REQUEST', '同名文件夹已存在')
+  if (code === 'EEXIST') return new ApiError('FS_EXISTS', '同名文件或文件夹已存在')
   return new ApiError(fallback, error && error.message ? error.message : String(error))
 }
 
+/**
+ * Read at most `maxBytes` from the start of a local file.
+ * Unlike readFileSync this never maps the whole file, so a peek at a huge
+ * (or larger-than-2-GiB) file stays cheap.
+ */
+function readHeadSync(absolute, maxBytes) {
+  const fd = openSync(absolute, 'r')
+  try {
+    const buffer = Buffer.allocUnsafe(Math.max(1, Math.min(maxBytes, 16 * 1024 * 1024)))
+    let filled = 0
+    while (filled < buffer.length) {
+      const read = readSync(fd, buffer, filled, buffer.length - filled, filled)
+      if (read <= 0) break
+      filled += read
+    }
+    return buffer.subarray(0, filled)
+  } finally {
+    closeSync(fd)
+  }
+}
+
 function localDrives() {
   if (process.platform !== 'win32') return []
   const drives = []
@@ -670,6 +703,7 @@ class HostPool {
     this.knownHostsFile = knownHostsFile
     this.records = new Map() // hostId -> HostRecord
     this.connections = new Map() // hostId -> { authority, remote: RemoteHost }
+    this.connecting = new Map() // hostId -> in-flight connect promise
     this.statuses = new Map() // hostId -> { state, message?, latencyMs?, checkedAt }
   }
 
@@ -703,8 +737,8 @@ class HostPool {
   }
 
   async remote(hostRecord) {
-    const existing = this.connections.get(hostRecord.id)
     const authority = `${hostRecord.host}:${hostRecord.port}`
+    const existing = this.connections.get(hostRecord.id)
     if (existing && existing.authority === authority) {
       try {
         await existing.remote.ensureConnected()
@@ -715,15 +749,33 @@ class HostPool {
         throw error
       }
     }
+    // Two concurrent first requests for one host must share one connection;
+    // otherwise the second RemoteHost overwrites the map entry and the first
+    // SSH socket leaks.
+    const pending = this.connecting.get(hostRecord.id)
+    if (pending) return pending
     const remote = new RemoteHost({
       host: hostRecord,
       knownHostsFile: this.knownHostsFile,
       connectTimeoutMs: CONNECT_TIMEOUT_MS,
       logger: log,
     })
-    this.connections.set(hostRecord.id, { authority, remote })
-    await remote.connect()
-    return remote
+    const entry = { authority, remote }
+    this.connections.set(hostRecord.id, entry)
+    const attempt = (async () => {
+      try {
+        await remote.connect()
+        return remote
+      } catch (error) {
+        if (this.connections.get(hostRecord.id) === entry) this.connections.delete(hostRecord.id)
+        remote.dispose().catch(() => {})
+        throw error
+      } finally {
+        this.connecting.delete(hostRecord.id)
+      }
+    })()
+    this.connecting.set(hostRecord.id, attempt)
+    return attempt
   }
 
   async disposeAll() {
@@ -1107,8 +1159,11 @@ export function apply(ctx) {
         const seen = new Set()
         const shouldStop = () => job.cancel || job.files >= job.maxFiles || job.bytes >= job.maxBytes
         const visit = async (directory, depth) => {
-          if (depth > 24 || shouldStop()) {
-            if (shouldStop() && !job.cancel) job.truncated = true
+          // Hitting the depth limit makes the scan incomplete, exactly like the
+          // file/byte caps: flag it so the removal pass is skipped and the UI
+          // can say the archive is partial.
+          if (depth > LINKED_SYNC_MAX_DEPTH || shouldStop()) {
+            if (!job.cancel) job.truncated = true
             return
           }
           let listing
@@ -1325,7 +1380,15 @@ export function apply(ctx) {
   const remoteCopyRecursive = async (remote, source, target) => {
     const stat = await remote.stat(source)
     if (stat.type !== 'dir') {
+      // readFile truncates silently, so an oversized source has to be refused
+      // here: copying only its first 64 MiB would corrupt the destination.
+      if (stat.size > LINKED_OPEN_FILE_CAP) {
+        throw new ApiError('FS_TOO_LARGE', `${posix.basename(source)} 超过 64 MB，无法复制`)
+      }
       const read = await remote.readFile(source, { maxBytes: LINKED_OPEN_FILE_CAP })
+      if (read.truncated || read.data.length !== stat.size) {
+        throw new ApiError('FS_TOO_LARGE', `${posix.basename(source)} 读取不完整，已取消复制`)
+      }
       await remote.writeFileAtomic(target, read.data)
       return 1
     }
@@ -1805,16 +1868,22 @@ export function apply(ctx) {
         ? scope.root
         : scopeTarget(scope, params.path)
       const listing = await scope.remote.listDir(target)
+      const all = listing.entries.map((entry) => ({
+        name: entry.name,
+        path: entry.path,
+        type: entry.type,
+        size: entry.size,
+        mtime: entry.mtime,
+        relative: scopeRelative(scope, entry.path),
+      }))
+      const page = pageWindow(params, all.length)
       return {
         path: target,
-        entries: listing.entries.map((entry) => ({
-          name: entry.name,
-          path: entry.path,
-          type: entry.type,
-          size: entry.size,
-          mtime: entry.mtime,
-          relative: scopeRelative(scope, entry.path),
-        })),
+        entries: all.slice(page.offset, page.offset + page.limit),
+        total: all.length,
+        offset: page.offset,
+        limit: page.limit,
+        hasMore: page.offset + page.limit < all.length,
       }
     },
 
@@ -1876,6 +1945,7 @@ export function apply(ctx) {
         if (apiError.code !== 'FS_NOT_FOUND') throw apiError
         current = undefined
       }
+      if (params.createOnly === true && current) throw new ApiError('FS_EXISTS', '目标已存在，请使用其他名称')
       if (current && current.type === 'dir') throw new ApiError('FS_IS_DIR', '目标是目录，无法写入')
       if (current && typeof params.expectedMtime === 'number' && params.expectedMtime > 0) {
         const currentSeconds = Math.floor(current.mtime / 1000)
@@ -2059,6 +2129,17 @@ export function apply(ctx) {
       const scope = await requireScope(params)
       const target = scopeTarget(scope, params.path)
       if (target === scope.root) throw new ApiError('BAD_REQUEST', '不能创建工作区根目录')
+      if (params.createOnly === true) {
+        let current
+        try {
+          current = await scope.remote.stat(target)
+        } catch (error) {
+          const apiError = asApiError(error)
+          if (apiError.code !== 'FS_NOT_FOUND') throw apiError
+          current = undefined
+        }
+        if (current) throw new ApiError('FS_EXISTS', '目标已存在，请使用其他名称')
+      }
       await scope.remote.mkdirp(target)
       return {}
     },
@@ -2187,32 +2268,43 @@ export function apply(ctx) {
         throw mapLocalFsError(error)
       }
       if (!info.isDirectory()) throw new ApiError('FS_NOT_DIR', '本地路径不是目录')
-      let rawEntries
-      try {
-        rawEntries = await readdir(target, { withFileTypes: true })
-      } catch (error) {
+      const rawEntries = await readdir(target, { withFileTypes: true }).catch((error) => {
         throw mapLocalFsError(error)
-      }
+      })
       const entries = []
-      for (const entry of rawEntries) {
-        const full = join(target, entry.name)
-        let stat
-        try {
-          stat = await fsStat(full)
-        } catch {
-          continue
-        }
-        let type = 'file'
-        if (stat.isDirectory()) type = 'dir'
-        else if (stat.isSymbolicLink()) type = 'symlink'
-        entries.push({ name: entry.name, path: full, type, size: stat.size, mtime: stat.mtimeMs })
+      // Stat in small parallel batches: one await per entry is slow for big
+      // folders, but an unbounded Promise.all can exhaust file descriptors.
+      for (let start = 0; start < rawEntries.length; start += 128) {
+        const batch = rawEntries.slice(start, start + 128)
+        const stated = await Promise.all(batch.map(async (entry) => {
+          const full = join(target, entry.name)
+          let stat
+          try {
+            stat = await fsStat(full)
+          } catch {
+            return null
+          }
+          let type = 'file'
+          if (stat.isDirectory()) type = 'dir'
+          else if (stat.isSymbolicLink()) type = 'symlink'
+          return { name: entry.name, path: full, type, size: stat.size, mtime: stat.mtimeMs }
+        }))
+        for (const item of stated) if (item) entries.push(item)
       }
       entries.sort((left, right) => {
         if (left.type === 'dir' && right.type !== 'dir') return -1
         if (right.type === 'dir' && left.type !== 'dir') return 1
         return left.name.localeCompare(right.name)
       })
-      return { path: target, entries }
+      const page = pageWindow(params, entries.length)
+      return {
+        path: target,
+        entries: entries.slice(page.offset, page.offset + page.limit),
+        total: entries.length,
+        offset: page.offset,
+        limit: page.limit,
+        hasMore: page.offset + page.limit < entries.length,
+      }
     },
 
     async 'local.stat'(params = {}) {
@@ -2246,13 +2338,15 @@ export function apply(ctx) {
       if (info.isDirectory()) throw new ApiError('FS_IS_DIR', '目标是目录，无法作为文件读取')
       const tooLarge = info.size > EDITABLE_LIMIT
       const cap = tooLarge ? PEEK_LIMIT : READ_CAP
+      // Read at most `cap` bytes. Reading the whole file first would pull
+      // multi-gigabyte files into Host memory (and on Windows readFileSync
+      // throws ERR_FS_FILE_TOO_LARGE above 2 GiB even for a peek).
       let data
       try {
-        data = readFileSync(absolute)
+        data = readHeadSync(absolute, cap)
       } catch (error) {
         throw mapLocalFsError(error)
       }
-      if (data.length > cap) data = data.subarray(0, cap)
       const binary = looksBinary(data)
       return {
         path: absolute,
@@ -2640,7 +2734,6 @@ export function apply(ctx) {
       if (nextName.length > MAX_NAME_LENGTH) throw new ApiError('BAD_REQUEST', '工作区名称过长')
       const nextMirror = typeof params.mirror === 'boolean' ? params.mirror : record.mirror
       const renamed = nextName !== '' && nextName !== record.name
-      if (renamed && nextName === '') throw new ApiError('BAD_REQUEST', '名称不能为空')
       record.name = nextName !== '' ? nextName : record.name
       record.mirror = nextMirror
       if (nextMirror === false) {
@@ -2919,8 +3012,11 @@ export function apply(ctx) {
             return toolText(`${target} (${stat.size} B, mtime ${stat.mtime}) is a binary file; use list_dir/stat or download it locally.`)
           }
           const content = decodeUtf8(read.data)
-          const suffix = read.data.length < stat.size ? `\n...(truncated at ${read.data.length} of ${stat.size} bytes)` : ''
-          await mirrorWrite(link, target, read.data)
+          const truncated = read.data.length < stat.size
+          const suffix = truncated ? `\n...(truncated at ${read.data.length} of ${stat.size} bytes)` : ''
+          // Only a complete read may be archived: mirroring a truncated prefix
+          // would leave a silently corrupt copy under .remote.
+          if (!truncated) await mirrorWrite(link, target, read.data)
           return toolText(`${target} (${stat.size} B, mtime ${stat.mtime})${suffix}\n\n${content}`)
         }
 
@@ -2993,7 +3089,9 @@ export function apply(ctx) {
         if (action === 'delete') {
           if (target === root) throw new ApiError('BAD_REQUEST', '不能删除联动工作区根目录')
           const stat = await remote.stat(target)
-          if (stat.type === 'dir') await remote.rmdir(target)
+          // rmdir only removes empty directories (same as the UI's fs.delete,
+          // which uses this recursive helper).
+          if (stat.type === 'dir') await remoteDeleteRecursive(remote, target)
           else await remote.unlink(target)
           await linkedFs.removeMirrorPath(link.localPath, linkedRelative(link, target)).catch(() => {})
           return toolText(`Deleted ${target}`)

package/lib/linked.js

@@ -509,6 +509,35 @@ function isContained(realRoot, realTarget) {
   return offset !== '' && !offset.startsWith('..') && !isAbsolute(offset)
 }
 
+/**
+ * Resolve a path the way the OS does. The JS `realpathSync` does not follow
+ * Windows junctions, so a junction pointing outside the workspace would pass a
+ * plain string containment test; the native call resolves it correctly.
+ */
+function realPathOf(target) {
+  return typeof realpathSync.native === 'function' ? realpathSync.native(target) : realpathSync(target)
+}
+
+/**
+ * True for symlinks and for Windows junctions, which `lstatSync` reports as
+ * ordinary directories (mode 40666, `isSymbolicLink() === false`).
+ */
+function isLinkLike(target, stats) {
+  if (stats && stats.isSymbolicLink()) return true
+  if (process.platform !== 'win32') return false
+  try {
+    return realPathOf(target) !== resolve(target)
+  } catch {
+    return false
+  }
+}
+
+function unsafeLinkError(target, detail) {
+  const error = new Error(`refusing to remove ${target}: ${detail}`)
+  error.code = 'ELINKED_UNSAFE'
+  return error
+}
+
 /**
  * Remove empty parent directories of `target`, stopping at `stopAt` (exclusive).
  * Best effort: the first non-empty or unreadable directory ends the walk.
@@ -550,8 +579,8 @@ export async function removeMirrorPath(localPath, relativePath) {
   const mirrorRoot = join(root, MIRROR_DIR)
   const target = join(mirrorRoot, ...relativeValue.split('/'))
 
-  // A symlinked `.remote` would redirect every operation outside the
-  // workspace; refuse instead of deleting through it.
+  // A symlinked or junctioned `.remote` would redirect every operation
+  // outside the workspace; refuse instead of deleting through it.
   let mirrorStats
   try {
     mirrorStats = lstatSync(mirrorRoot)
@@ -559,12 +588,13 @@ export async function removeMirrorPath(localPath, relativePath) {
     if (error && error.code === 'ENOENT') return false
     throw error
   }
-  if (mirrorStats.isSymbolicLink()) {
-    const error = new Error(
-      `refusing to remove ${target}: ${mirrorRoot} is a symbolic link`,
-    )
-    error.code = 'ELINKED_UNSAFE'
-    throw error
+  if (isLinkLike(mirrorRoot, mirrorStats)) {
+    throw unsafeLinkError(target, `${mirrorRoot} is a symbolic link`)
+  }
+  const realRoot = realPathOf(root)
+  const realMirror = realPathOf(mirrorRoot)
+  if (!isContained(realRoot, realMirror)) {
+    throw unsafeLinkError(target, `${mirrorRoot} resolves outside ${root}`)
   }
 
   let stats
@@ -576,18 +606,13 @@ export async function removeMirrorPath(localPath, relativePath) {
     throw error
   }
 
-  if (stats.isSymbolicLink()) {
+  if (isLinkLike(target, stats)) {
     // Delete the link itself, never what it points at.
     removeSymlink(target)
   } else {
-    const realMirror = realpathSync(mirrorRoot)
-    const realTarget = realpathSync(target)
+    const realTarget = realPathOf(target)
     if (!isContained(realMirror, realTarget)) {
-      const error = new Error(
-        `refusing to remove ${target}: it resolves outside ${mirrorRoot}`,
-      )
-      error.code = 'ELINKED_UNSAFE'
-      throw error
+      throw unsafeLinkError(target, `it resolves outside ${mirrorRoot}`)
     }
     rmSync(target, { recursive: true, force: true, maxRetries: 3 })
   }
@@ -626,18 +651,15 @@ function removeOwnedDir(target, root) {
     if (error && error.code === 'ENOENT') return false
     throw error
   }
-  if (stats.isSymbolicLink()) {
+  if (isLinkLike(target, stats)) {
+    // A junction/symlink owns only the link: remove it, keep the data outside.
     removeSymlink(target)
     return true
   }
-  const realRoot = realpathSync(root)
-  const realTarget = realpathSync(target)
+  const realRoot = realPathOf(root)
+  const realTarget = realPathOf(target)
   if (!isContained(realRoot, realTarget)) {
-    const error = new Error(
-      `refusing to remove ${target}: it resolves outside ${root}`,
-    )
-    error.code = 'ELINKED_UNSAFE'
-    throw error
+    throw unsafeLinkError(target, `it resolves outside ${root}`)
   }
   rmSync(target, { recursive: true, force: true, maxRetries: 3 })
   return true

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-linked-workspace",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "Linked local ⇄ remote workspaces and SSH-backed remote directories for DeepSeek Harness: theme-aware split editor, file-type icons, and an agent tool that edits remote files directly.",
   "type": "module",
   "main": "lib/index.js",
@@ -72,7 +72,7 @@
   },
   "scripts": {
     "build": "node scripts/build-client.mjs",
-    "test": "node --test test/linked.test.mjs test/parts.test.mjs test/git.test.mjs && node test/client-smoke.mjs",
+    "test": "node --test test/linked.test.mjs test/parts.test.mjs test/git.test.mjs test/file-creation.test.mjs && node test/client-smoke.mjs",
     "prepack": "node scripts/build-client.mjs"
   },
   "repository": {

package/scripts/doc_tool.py

@@ -106,18 +106,25 @@ def read_xlsx(path):
     sheets = []
     for sheet in workbook.worksheets[:20]:
         rows = []
-        max_row = min(sheet.max_row or 0, MAX_SHEET_ROWS)
-        max_col = min(sheet.max_column or 0, MAX_SHEET_COLS)
+        total_row = sheet.max_row or 0
+        total_col = sheet.max_column or 0
+        max_row = min(total_row, MAX_SHEET_ROWS)
+        max_col = min(total_col, MAX_SHEET_COLS)
         for row in sheet.iter_rows(min_row=1, max_row=max_row, min_col=1, max_col=max_col):
             rows.append([json_value(cell.value) for cell in row])
         sheets.append({
             "name": sheet.title,
             "rows": rows,
+            # maxRow/maxCol stay the rendered window so the client can size the
+            # grid; totalRow/totalCol/truncated tell it the sheet is larger.
             "maxRow": max_row,
             "maxCol": max_col,
+            "totalRow": total_row,
+            "totalCol": total_col,
+            "truncated": total_row > max_row or total_col > max_col,
             "frozen": bool(sheet.freeze_panes),
         })
-    emit({"kind": "xlsx", "sheets": sheets, "sheetCount": len(workbook.worksheets)})
+    emit({"kind": "xlsx", "sheets": sheets, "sheetCount": len(workbook.worksheets), "sheetLimit": 20})
 
 
 def write_xlsx(source, data, out):