dsh-multi-folder 0.1.1 → 0.1.3

package/README.md

@@ -6,6 +6,9 @@
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![Node.js >= 20](https://img.shields.io/badge/Node.js-%3E%3D20-brightgreen)](https://nodejs.org/)
+[![npm version](https://img.shields.io/npm/v/dsh-multi-folder)](https://www.npmjs.com/package/dsh-multi-folder)
+[![GitHub issues](https://img.shields.io/github/issues/AngelosZou/dsh-multi-folder)](https://github.com/AngelosZou/dsh-multi-folder/issues)
+[![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 
 A [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) plugin bundle that gives one project (workspace) a set of **secondary working directories**:
 
@@ -13,7 +16,7 @@ A [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) plugin bun
 - Under **Workspace Write** mode the agent gains the **same read / write / edit / execute permissions** on the configured secondary directories as on the primary workspace — enforced by re-rooting the session's own sandbox policy, so every mode keeps its semantics (`read-only` still denies, `workspace-write` allows, `danger-full-access` allows).
 - The directory list is **injected into the system prompt** and re-rendered per session assembly.
 - Configuration changes notify the agent through a **non-interrupting message queue** — delivered at the next message boundary (user send or tool-call end), and **only when the directory set actually changed**.
-- Configurable **before the session starts**: the session-creation page (new-session screen) offers a 「多工作目录」 entry that reads and edits the same per-workspace configuration through a **sessionless remote API** (`multiFolder/*` endpoints) — no session id required.
+- Configurable **before the session starts**: the session-creation page (new-session screen) offers a Multi-folder entry that reads and edits the same per-workspace configuration through a **sessionless remote API** (`multiFolder/*` endpoints) — no session id required.
 - **No new tools.** Everything is a framework-level change (tool-pipeline interception) plus a UI-level change (a session-scoped header entry).
 
 ## Requirements
@@ -33,7 +36,7 @@ Then **restart the DSH backend** (host composition loads at process start) and *
 
 ## Usage
 
-A **「多工作目录 / Multi-folder」** button appears in the session header, and a second entry appears on the **session-creation page** (fixed launcher in the bottom-right corner while the new-session screen is shown; an inline chip beside the workspace picker once the upstream `conversation.hero.workspaceExtras` slot is available). The panel lets you:
+A Multi-folder button appears in the session header, and a second entry appears on the **session-creation page** (fixed launcher in the bottom-right corner while the new-session screen is shown; an inline chip beside the workspace picker once the upstream `conversation.hero.workspaceExtras` slot is available). The panel lets you:
 
 | Action | Behavior |
 | ------ | -------- |

package/README.zh.md

@@ -6,6 +6,9 @@
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![Node.js >= 20](https://img.shields.io/badge/Node.js-%3E%3D20-brightgreen)](https://nodejs.org/)
+[![npm version](https://img.shields.io/npm/v/dsh-multi-folder)](https://www.npmjs.com/package/dsh-multi-folder)
+[![GitHub issues](https://img.shields.io/github/issues/AngelosZou/dsh-multi-folder)](https://github.com/AngelosZou/dsh-multi-folder/issues)
+[![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 
 一个 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 插件 bundle，为一个 Project（工作区）提供一组**副工作目录**：
 
@@ -13,7 +16,7 @@
 - 在 **Workspace Write** 模式下，Agent 对配置的副工作目录拥有与主工作目录**同等的读取、写入、编辑与命令执行权限**——实现方式是重定向会话自身的沙箱策略根，因此每种模式语义都自然保持（`read-only` 依旧拒绝、`workspace-write` 放行、`danger-full-access` 放行）；
 - 目录列表**注入系统提示词**，每次组装按会话求值；
 - 配置变更通过**不打断的消息队列**通知 Agent——在下一次消息边界（用户发送或工具调用结束）送达，且**仅在目录集合实际变化时**发送；
-- **会话开始前即可配置**：会话创建页（新会话界面）提供「多工作目录」入口，通过**无会话远程 API**（`multiFolder/*` 端点）读写同一份 per-workspace 配置——无需 session id；
+- **会话开始前即可配置**：会话创建页（新会话界面）提供「多工作目录」入口（英文界面显示 "Multi-folder"），通过**无会话远程 API**（`multiFolder/*` 端点）读写同一份 per-workspace 配置——无需 session id；
 - **不新增任何工具**：改动全部位于框架级（工具流水线拦截）与 UI 级（会话级头部入口）。
 
 ## 环境要求
@@ -33,7 +36,7 @@ dsh plugin --profile web add dsh-multi-folder
 
 ## 使用
 
-会话头部出现「多工作目录」按钮；**会话创建页**也有入口（新会话界面右下角的浮动按钮；当上游 DSH 声明 `conversation.hero.workspaceExtras` 插槽后，还会在工作区选择器旁显示内联 chip）。打开面板即可：
+会话头部出现「多工作目录」按钮（英文界面显示 "Multi-folder"）；**会话创建页**也有入口（新会话界面右下角的浮动按钮；当上游 DSH 声明 `conversation.hero.workspaceExtras` 插槽后，还会在工作区选择器旁显示内联 chip）。打开面板即可：
 
 | 操作 | 行为 |
 | ---- | ---- |

package/docs/design.md

@@ -35,13 +35,19 @@ A listener on the `tools/execute` around-dispatch waterfall handles `write`, `ed
 4. If the canonical path is inside a configured secondary directory, execute the
    operation directly with `{ ...standingPolicy, workspaceRoot: <secondary dir> }`:
    - `write`/`edit` → `fs.writeText` / `fs.editText`;
-   - `pwsh`/`bash` → `shell.resolve({ command, workdir, dshEnv, sandboxPolicy })` +
-     `shell.run`, with the canonical workdir so the confinement root and the process
-     cwd agree exactly.
+   - `pwsh`/`bash`, foreground → `shell.resolve({ command, workdir, dshEnv,
+     sandboxPolicy })` + `shell.run`, with the canonical workdir so the confinement
+     root and the process cwd agree exactly;
+   - `pwsh`/`bash`, background (`run_in_background: true`) → the same re-rooted
+     request registered through the generic jobs runtime (`ctx.jobs`) exactly like
+     the shipped shell tools (`kind` = tool name, `owner` = calling agent, streamed
+     reads shaped for `job_output` with sandbox markers, terminal outcome in the
+     `completed`/`killed` vocabulary). A caller-aborted call falls through to the
+     default pipeline, which raises the canonical abort error.
    The result carries the same canonical value/content shapes as the shipped tools, so
    downstream presentation keeps working.
 5. Anything else — unknown tools, paths outside every secondary directory, escalation
-   arguments (`sandbox_permissions`), `run_in_background`, missing optional services,
+   arguments (`sandbox_permissions`), missing optional services (`shell`, `jobs`),
    or any error — falls through to `next()` and the default pipeline.
 
 **Why mode parity is free:** the mode field of the standing policy is never touched.
@@ -145,14 +151,28 @@ window.__ModuleLoader__.load({
 })
 ```
 
-- `inject: ['remote', 'remote.commands', 'slots', 'workspaces', 'connection', 'sessions']`; the package's
+- `inject: ['remote', 'remote.commands', 'slots', 'workspaces', 'connection', 'sessions', 'locale']`; the package's
   `dsh.client.inject` lists the packages providing them
   (`@deepseek-ai/dsh-api-gateway`, `@deepseek-ai/dsh-api-remotes`,
-  `@deepseek-ai/dsh-client-connection`, `@deepseek-ai/dsh-client-runtime`).
+  `@deepseek-ai/dsh-client-connection`, `@deepseek-ai/dsh-client-locale`,
+  `@deepseek-ai/dsh-client-runtime`).
 - UI registrations: `conversation.session.header.actions` (session-scoped button),
   `shell.overlay` panel, `shell.overlay` hero launcher (root-scoped, fixed
   position), and `conversation.hero.workspaceExtras` (upstream slot; see
   below). One module-level store is shared by all of them.
+- **Localization (zh / en).** All client copy goes through
+  `@deepseek-ai/dsh-client-locale` (always composed by the standard web
+  profile). The bundle registers a `multi-folder` dictionary namespace with
+  `ctx.effect(() => locale.register(NS, { zh, en }))` — the locale service
+  enforces bilingual balance, and the effect ties the dictionaries to the
+  plugin fiber. Every slot registration declares `locale: 'multi-folder'`,
+  so the renderer synthesizes the `t` seat on component props and
+  re-renders mounted outlets on locale switch; list-entry `label`s are
+  thunks (`() => t('label')`) that `resolveSlotLabel` re-evaluates per read,
+  so registration-time text follows the active locale without
+  re-registering. The active locale is the browser language or the user's
+  Language preference in Settings; the English UI reads "Multi-folder", the
+  Chinese UI keeps 「多工作目录」.
 - Host communication, two channels:
   - session mode: `ctx.remote.commands.execute(sessionId, line)`. The return
     value is the RPC envelope `{ ok, value }` where `value` is the
@@ -192,8 +212,17 @@ window.__ModuleLoader__.load({
   observation domain.
 - `presentationMeta` is not computed on the short-circuit path; tool cards fall back to
   their default presentation.
-- `run_in_background` and `sandbox_permissions` escalation on `pwsh`/`bash` calls in
-  secondary directories are passed through to the default pipeline.
+- `sandbox_permissions` escalation on `pwsh`/`bash` calls in secondary directories is
+  passed through to the default pipeline, which re-roots the escalated run at the
+  PRIMARY workspace — escalation never widens a secondary root. (Background runs are
+  NOT passed through: they register with `ctx.jobs` under the same re-rooted policy
+  as foreground runs.)
+- The interceptor registers a background `pwsh`/`bash` job whenever `ctx.jobs` is
+  available; it cannot read the shipped shell tools' per-tool
+  `enableRunInBackground: false` config, so a deployment that disables background
+  execution would still serve secondary-dir background jobs. Deployments that
+  disable background execution should also disable this plugin's shell interception
+  or accept that exception.
 - The `/multi-folder` command lifecycle rows (`command/run`, `command/done`) are
   visible in the conversation UI by framework design; they are log-only and never
   reach the model. Workspace-mode (session-creation page) operations avoid them

package/docs/upstream-hero-slot.md

@@ -78,17 +78,23 @@ above is only authorized once it is listed):
 
 ## 4. Plugin side (already implemented)
 
-`lib/client.js` registers into the slot the moment it is declared:
+`lib/client.js` registers into the slot the moment it is declared. The entry
+declares the plugin's `multi-folder` locale namespace, so the chip renders
+through the framework `t` seat and its `label` is a thunk that follows the
+active locale (English: "Multi-folder", Chinese: 「多工作目录」):
 
 ```js
 slots.inject('conversation.hero.workspaceExtras', function () {
   return slots.register(
-    { name: 'conversation.hero.workspaceExtras', id: 'multi-folder', order: 30, label: '多工作目录' },
+    { name: 'conversation.hero.workspaceExtras', id: 'multi-folder', order: 30, label: () => t('label'), locale: NS },
     function (props) { return React.createElement(HeroChip, props); },
   );
 });
 ```
 
+(`NS` is the plugin's `multi-folder` namespace and `t` its bound translator —
+see the localization section of [design.md](design.md).)
+
 `HeroChip` prefers the owner-supplied `props.workspacePath` and falls back to
 the store-derived hero workspace. It opens the same overlay panel in workspace
 mode, which reads and writes the configuration through the sessionless
@@ -115,6 +121,7 @@ bundle; the same change there is three touchpoints:
 - Unit: the plugin's `test/smoke-client.mjs` registers and drives `HeroChip`
   with a mock owner share (`workspacePath`), asserting the panel opens in
   workspace mode and reuses the per-workspace cache.
-- Manual: with the patched build, the 「多工作目录」 chip renders in the hero
-  workspace row between the preset chip and the composer; clicking it lists
-  the workspace's secondary directories before any message is sent.
+- Manual: with the patched build, the Multi-folder chip (「多工作目录」 in the
+  Chinese UI) renders in the hero workspace row between the preset chip and
+  the composer; clicking it lists the workspace's secondary directories
+  before any message is sent.

package/lib/client.js

@@ -1,9 +1,11 @@
 /**
  * dsh-multi-folder — client half (hand-written factory bundle, no build step).
  *
- * Session-scoped UI: a "多工作目录" button in the conversation session header
- * (`conversation.session.header.actions`, scope: session) that opens a panel in
- * `shell.overlay` listing the project's secondary working directories.
+ * Session-scoped UI: a localized "Multi-folder" (「多工作目录」) button in the
+ * conversation session header (`conversation.session.header.actions`, scope:
+ * session) that opens a panel in `shell.overlay` listing the project's
+ * secondary working directories. All copy goes through the framework locale
+ * service (`@deepseek-ai/dsh-client-locale`) — see the "i18n" section below.
  * Mutations go through the Host `/multi-folder` command via the Remote BFF
  * (`ctx.remote.commands.execute(sessionId, line)`); the Host answers with a
  * human-readable result carrying a `[MF:JSON]` line the panel parses for
@@ -62,9 +64,60 @@ window.__ModuleLoader__.load({
       try { return JSON.parse(m[1]); } catch (_) { return null; }
     }
 
+    // ------------------------------------------------------------- i18n
+    /** Locale namespace owned by this plugin. Dictionaries are registered
+     *  with the `locale` service (`@deepseek-ai/dsh-client-locale`, always
+     *  composed by the standard web profile), which enforces bilingual
+     *  balance: both shipped locales (zh, en) must be registered together. */
+    var NS = 'multi-folder';
+    /** Simplified Chinese dictionary — the key-set source of truth. */
+    var zhDict = {
+      'label': '多工作目录',
+      'label.open': '多工作目录 ▾',
+      'label.heroLauncher': '多工作目录（新会话）',
+      'title.header': '多工作目录（副工作目录）',
+      'title.remove': '移除此副工作目录',
+      'title.close': '关闭',
+      'title.heroLauncher.hasWorkspace': '配置此项目的副工作目录（多工作目录）',
+      'title.heroLauncher.noWorkspace': '请先选择工作区，再配置多工作目录',
+      'title.heroChip': '配置此项目的副工作目录（多工作目录）',
+      'panel.title': '多工作目录（副工作目录）',
+      'panel.project': '项目：{path}',
+      'panel.noWorkspaceHint': '尚未选择工作区。请先在上方选择项目，再配置多工作目录。',
+      'panel.empty': '尚未配置副工作目录。',
+      'panel.pickWorkspaceHint': '选择工作区后可在此添加副工作目录。',
+      'panel.add': '+ 添加目录',
+      'panel.adding': '处理中…',
+      'panel.remove': '移除',
+      'panel.refresh': '刷新',
+      'panel.footnote': 'Agent 的主工作目录不变；在 Workspace Write 模式下，Agent 对上述目录拥有与主工作目录同等的读写与命令执行权限。配置变更会在下一条消息或工具调用结束时通知 Agent。',
+    };
+    /** English dictionary — checked complete against the zh key set. */
+    var enDict = {
+      'label': 'Multi-folder',
+      'label.open': 'Multi-folder ▾',
+      'label.heroLauncher': 'Multi-folder (new session)',
+      'title.header': 'Multi-folder (secondary working directories)',
+      'title.remove': 'Remove this secondary working directory',
+      'title.close': 'Close',
+      'title.heroLauncher.hasWorkspace': 'Configure secondary working directories for this project (Multi-folder)',
+      'title.heroLauncher.noWorkspace': 'Pick a workspace first, then configure Multi-folder',
+      'title.heroChip': 'Configure secondary working directories for this project (Multi-folder)',
+      'panel.title': 'Multi-folder (secondary working directories)',
+      'panel.project': 'Workspace: {path}',
+      'panel.noWorkspaceHint': 'No workspace selected yet. Pick a project above first, then configure secondary directories.',
+      'panel.empty': 'No secondary working directories configured yet.',
+      'panel.pickWorkspaceHint': 'Pick a workspace first — secondary directories can be added here afterwards.',
+      'panel.add': '+ Add directory',
+      'panel.adding': 'Working…',
+      'panel.remove': 'Remove',
+      'panel.refresh': 'Refresh',
+      'panel.footnote': "The agent's primary working directory stays unchanged; under Workspace Write mode the agent has the same read/write and command-execution rights on the listed directories as on the primary workspace. Configuration changes are announced at the next message or tool-call boundary.",
+    };
+
     // ------------------------------------------------------------- plugin
     var name = 'dsh-multi-folder';
-    var inject = ['remote', 'remote.commands', 'slots', 'workspaces', 'connection', 'sessions'];
+    var inject = ['remote', 'remote.commands', 'slots', 'workspaces', 'connection', 'sessions', 'locale'];
 
     function apply(ctx) {
       var slots = ctx.slots;
@@ -72,6 +125,22 @@ window.__ModuleLoader__.load({
       var workspaces = ctx.workspaces;
       var connection = ctx.connection;
       var sessions = ctx.sessions;
+      var locale = ctx.locale;
+
+      /** Register this plugin's dictionaries for every shipped locale
+       *  (bilingual balance is enforced by the locale service). The
+       *  registration is an effect on this plugin's fiber, so unloading the
+       *  plugin withdraws the dictionaries. */
+      ctx.effect(function () {
+        return locale.register(NS, { zh: zhDict, en: enDict });
+      }, 'dsh-multi-folder: client dictionaries');
+
+      /** Bound translator for slot labels: label thunks re-evaluate per read
+       *  (`resolveSlotLabel`), so registration-time text follows the active
+       *  locale without re-registering. Components themselves render through
+       *  the `t` seat the renderer synthesizes from the declared
+       *  `locale:` namespace (which also re-renders them on locale switch). */
+      var t = locale.bind(NS);
 
       // -------------------------------------------------- sessionless RPC
       /** Call one `multiFolder/*` endpoint over the shared /api channel.
@@ -232,6 +301,7 @@ window.__ModuleLoader__.load({
       function HeaderButton(props) {
         var store = useStore();
         var sessionId = props.sessionId;
+        var t = props.t;
         var open = store.open && store.sessionId === sessionId;
         // Session switch: keep the panel in sync with the session this
         // header belongs to. On a changed sessionId (or first mount) with
@@ -250,7 +320,7 @@ window.__ModuleLoader__.load({
           'button',
           {
             type: 'button',
-            title: '多工作目录（副工作目录）',
+            title: t('title.header'),
             onClick: function () {
               var current = getSnapshot();
               var isOpen = current.open && current.sessionId === sessionId;
@@ -273,14 +343,15 @@ window.__ModuleLoader__.load({
               cursor: 'pointer',
             },
           },
-          open ? '多工作目录 ▾' : '多工作目录',
+          open ? t('label.open') : t('label'),
         );
         return btn;
       }
 
       // Overlay panel ------------------------------------------------------
-      function Panel() {
+      function Panel(props) {
         var store = useStore();
+        var t = props.t;
         if (!store.open || !store.mode) return null;
         var sessionMode = store.mode === 'session';
         var usable = sessionMode || !!store.workspace;
@@ -311,7 +382,7 @@ window.__ModuleLoader__.load({
               'button',
               {
                 type: 'button',
-                title: '移除此副工作目录',
+                title: t('title.remove'),
                 disabled: !usable,
                 onClick: function () {
                   if (sessionMode) {
@@ -322,7 +393,7 @@ window.__ModuleLoader__.load({
                 },
                 style: { padding: '2px 8px', borderRadius: 6, border: '1px solid transparent', background: 'transparent', color: 'var(--color-danger, #c62828)', cursor: 'pointer' },
               },
-              '移除',
+              t('panel.remove'),
             ),
           );
         });
@@ -348,12 +419,12 @@ window.__ModuleLoader__.load({
           React.createElement(
             'div',
             { style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', marginBottom: 10 } },
-            React.createElement('div', { style: { fontWeight: 600, fontSize: 14 } }, '多工作目录（副工作目录）'),
+            React.createElement('div', { style: { fontWeight: 600, fontSize: 14 } }, t('panel.title')),
             React.createElement(
               'button',
               {
                 type: 'button',
-                title: '关闭',
+                title: t('title.close'),
                 onClick: function () { patch({ open: false }); },
                 style: { padding: '2px 8px', borderRadius: 6, border: '1px solid transparent', background: 'transparent', cursor: 'pointer' },
               },
@@ -364,18 +435,18 @@ window.__ModuleLoader__.load({
             ? React.createElement(
                 'div',
                 { style: { marginBottom: 8, color: 'var(--color-text-muted, #6b6b6b)', fontSize: 12, wordBreak: 'break-all' } },
-                '项目：' + store.workspace,
+                t('panel.project', { path: store.workspace }),
               )
             : (!sessionMode
                 ? React.createElement(
                     'div',
                     { style: { marginBottom: 8, color: 'var(--color-text-muted, #6b6b6b)' } },
-                    '尚未选择工作区。请先在上方选择项目，再配置多工作目录。',
+                    t('panel.noWorkspaceHint'),
                   )
                 : null),
           usable
-            ? (rows.length > 0 ? rows : React.createElement('div', { style: { marginBottom: 8, color: 'var(--color-text-muted, #6b6b6b)' } }, '尚未配置副工作目录。'))
-            : React.createElement('div', { style: { marginBottom: 8, color: 'var(--color-text-muted, #6b6b6b)' } }, '选择工作区后可在此添加副工作目录。'),
+            ? (rows.length > 0 ? rows : React.createElement('div', { style: { marginBottom: 8, color: 'var(--color-text-muted, #6b6b6b)' } }, t('panel.empty')))
+            : React.createElement('div', { style: { marginBottom: 8, color: 'var(--color-text-muted, #6b6b6b)' } }, t('panel.pickWorkspaceHint')),
           store.error
             ? React.createElement('div', { style: { marginBottom: 8, color: 'var(--color-danger, #c62828)', whiteSpace: 'pre-wrap' } }, String(store.error))
             : null,
@@ -399,7 +470,7 @@ window.__ModuleLoader__.load({
                   opacity: store.busy || !usable ? 0.6 : 1,
                 },
               },
-              store.busy ? '处理中…' : '+ 添加目录',
+              store.busy ? t('panel.adding') : t('panel.add'),
             ),
             React.createElement(
               'button',
@@ -423,7 +494,7 @@ window.__ModuleLoader__.load({
                   opacity: store.busy || !usable ? 0.6 : 1,
                 },
               },
-              '刷新',
+              t('panel.refresh'),
             ),
           ),
           React.createElement(
@@ -436,7 +507,7 @@ window.__ModuleLoader__.load({
                 color: 'var(--color-text-muted, #6b6b6b)',
               },
             },
-            'Agent 的主工作目录不变；在 Workspace Write 模式下，Agent 对上述目录拥有与主工作目录同等的读写与命令执行权限。配置变更会在下一条消息或工具调用结束时通知 Agent。',
+            t('panel.footnote'),
           ),
         );
       }
@@ -477,8 +548,9 @@ window.__ModuleLoader__.load({
 
       /** Fixed-position hero launcher (B2): visible only while the
        *  conversation root reports the hero phase. */
-      function HeroLauncher() {
+      function HeroLauncher(props) {
         var store = useStore();
+        var t = props.t;
         React.useEffect(
           function () {
             var disposers = [];
@@ -511,7 +583,7 @@ window.__ModuleLoader__.load({
           'button',
           {
             type: 'button',
-            title: store.heroWorkspace ? '配置此项目的副工作目录（多工作目录）' : '请先选择工作区，再配置多工作目录',
+            title: store.heroWorkspace ? t('title.heroLauncher.hasWorkspace') : t('title.heroLauncher.noWorkspace'),
             onClick: function () { openForWorkspace(store.heroWorkspace); },
             style: {
               position: 'fixed',
@@ -532,7 +604,7 @@ window.__ModuleLoader__.load({
               opacity: store.heroWorkspace ? 1 : 0.7,
             },
           },
-          '多工作目录',
+          t('label'),
         );
       }
 
@@ -541,12 +613,13 @@ window.__ModuleLoader__.load({
        *  declares the slot; a no-op registration until then. */
       function HeroChip(props) {
         var store = useStore();
+        var t = props.t;
         var workspacePath = props && props.workspacePath ? props.workspacePath : store.heroWorkspace;
         return React.createElement(
           'button',
           {
             type: 'button',
-            title: '配置此项目的副工作目录（多工作目录）',
+            title: t('title.heroChip'),
             onClick: function () { openForWorkspace(workspacePath); },
             style: {
               display: 'inline-flex',
@@ -561,34 +634,34 @@ window.__ModuleLoader__.load({
               cursor: 'pointer',
             },
           },
-          '多工作目录',
+          t('label'),
         );
       }
 
       // Registrations ------------------------------------------------------
       slots.inject('conversation.session.header.actions', function () {
         return slots.register(
-          { name: 'conversation.session.header.actions', id: 'multi-folder', order: 30, label: '多工作目录' },
+          { name: 'conversation.session.header.actions', id: 'multi-folder', order: 30, label: function () { return t('label'); }, locale: NS },
           function (props) { return React.createElement(HeaderButton, props); },
         );
       });
       slots.inject('shell.overlay', function () {
         return slots.register(
-          { name: 'shell.overlay', id: 'multi-folder', order: 100, label: '多工作目录' },
-          function () { return React.createElement(Panel); },
+          { name: 'shell.overlay', id: 'multi-folder', order: 100, label: function () { return t('label'); }, locale: NS },
+          function (props) { return React.createElement(Panel, props); },
         );
       });
       slots.inject('shell.overlay', function () {
         return slots.register(
-          { name: 'shell.overlay', id: 'multi-folder-hero', order: 200, label: '多工作目录（新会话）' },
-          function () { return React.createElement(HeroLauncher); },
+          { name: 'shell.overlay', id: 'multi-folder-hero', order: 200, label: function () { return t('label.heroLauncher'); }, locale: NS },
+          function (props) { return React.createElement(HeroLauncher, props); },
         );
       });
       // Upstream slot (B1): the callback fires only once a DSH build declares
       // `conversation.hero.workspaceExtras`; until then this contributes nothing.
       slots.inject('conversation.hero.workspaceExtras', function () {
         return slots.register(
-          { name: 'conversation.hero.workspaceExtras', id: 'multi-folder', order: 30, label: '多工作目录' },
+          { name: 'conversation.hero.workspaceExtras', id: 'multi-folder', order: 30, label: function () { return t('label'); }, locale: NS },
           function (props) { return React.createElement(HeroChip, props); },
         );
       });

package/lib/index.js

@@ -16,7 +16,11 @@
  *    here with the session's standing sandbox policy re-rooted to that
  *    directory — identical semantics to the primary workspace in every mode
  *    (read-only denies, workspace-write allows, danger-full-access allows).
- *    Reads (read/glob/grep) are unfenced and already work.
+ *    Background shell runs (`run_in_background: true`) register with the
+ *    generic jobs runtime (`ctx.jobs`) under the same re-rooted policy,
+ *    mirroring the shipped pwsh/bash tools so `job_output` / `job_kill` and
+ *    finish notices keep working. Reads (read/glob/grep) are unfenced and
+ *    already work.
  * 3. Prompt injection: one ordered system-prompt section rendered per
  *    assembly from the configured directories of the assembling session.
  * 4. Non-interrupting change notification: configuration changes made via
@@ -333,7 +337,8 @@ export function apply(ctx) {
         'Secondary working directories are available in this session (dsh-multi-folder plugin):\n' +
         dirs.map((d) => '- ' + d).join('\n') +
         '\nYou have the SAME read/write/edit and command-execution permissions on these directories as on the primary workspace under the current sandbox mode. ' +
-        'Use absolute paths inside them (or pass `workdir` to shell tools). The primary workspace remains the default working directory.'
+        'For shell tools, pass `workdir` pointing inside one of these directories — foreground and background (`run_in_background`) runs alike. ' +
+        'Reads from these directories work without `workdir`. The primary workspace remains the default working directory.'
       )
     },
   })
@@ -383,6 +388,49 @@ export function apply(ctx) {
     return text
   }
 
+  /** Terminal outcome for a background process, in the jobs-registry vocabulary. */
+  const processOutcome = (proc) => {
+    if (proc.status === 'killed') {
+      return {
+        status: 'killed',
+        detail: proc.signal !== null && proc.signal !== undefined ? 'signal: ' + proc.signal : 'killed before exit',
+      }
+    }
+    return {
+      status: 'completed',
+      detail: 'exit code: ' + (proc.exitCode === undefined || proc.exitCode === null ? 0 : proc.exitCode),
+    }
+  }
+
+  /**
+   * One consuming background read, shaped for `job_output`: the raw delta plus
+   * loss/spill notices and sandbox markers, mirroring the shipped pwsh/bash
+   * tools' background rendering. No escalation hint is appended — escalation
+   * calls stay on the default pipeline, which re-roots at the primary
+   * workspace, so this job can never receive a wider policy.
+   */
+  const renderProcessRead = (read, sandbox) => {
+    const notices = []
+    if (read.lossy) {
+      const paths = [read.stdoutSpillPath, read.stderrSpillPath].filter((path) => path !== undefined)
+      notices.push(
+        '[some output was dropped from memory; full output: ' +
+          (paths.length > 0 ? paths.join(', ') : '(unavailable)') +
+          ']',
+      )
+    }
+    if (sandbox && sandbox.runnerFailed) {
+      notices.push(
+        '[sandbox: the sandbox runner itself failed under ' + sandbox.mode +
+          ' mode — the command did not run; this is a sandbox problem, not a command failure]',
+      )
+    } else if (sandbox && sandbox.denied) {
+      notices.push('[sandbox: file access denied under ' + sandbox.mode + ' mode]')
+    }
+    if (notices.length === 0) return read.delta
+    return read.delta + (read.delta.length > 0 && !read.delta.endsWith('\n') ? '\n' : '') + notices.join('\n')
+  }
+
   ctx.on('tools/execute', async (exec, next) => {
     if (exec.agent && exec.agent.session && exec.agent.session.header) {
       hydrate(exec.agent.session.header.cwd)
@@ -459,7 +507,6 @@ export function apply(ctx) {
       if (exec.name === 'pwsh' || exec.name === 'bash') {
         const shell = ctx.get('shell')
         if (shell === undefined) return next()
-        if (args && args.run_in_background === true) return next()
         const dirs = dirsForSync(primary)
         if (dirs === null) return next()
         const rawWorkdir = args && typeof args.workdir === 'string' ? args.workdir : null
@@ -483,6 +530,39 @@ export function apply(ctx) {
           ...(shellEnv !== undefined ? { dshEnv: shellEnv.collect(exec) } : {}),
           sandboxPolicy: policy,
         }
+
+        // Background runs get the SAME re-rooted policy as foreground runs.
+        // They register with the generic jobs runtime (`ctx.jobs`) exactly
+        // like the shipped pwsh/bash tools do, so `job_output` / `job_kill`
+        // and the finish notice keep working for the intercepted job. A
+        // background process outlives the tool call, so no caller signal is
+        // forwarded; `shell.start` ignores `timeoutMs` by design.
+        if (args && args.run_in_background === true) {
+          // An aborted call belongs to the default pipeline, which raises the
+          // canonical abort error before anything starts.
+          if (exec.signal && exec.signal.aborted) return next()
+          const jobs = ctx.get('jobs')
+          if (jobs === undefined) return next()
+          const jobId = jobs.start({
+            kind: exec.name,
+            label: String(args.command),
+            ...(exec.agent ? { owner: exec.agent } : {}),
+            run: () => {
+              const proc = shell.start(shell.resolve(request))
+              return {
+                cancel: () => void proc.kill(),
+                done: proc.done.then(() => processOutcome(proc)),
+                readOutput: () => renderProcessRead(proc.readOutput(), proc.sandbox),
+              }
+            },
+          })
+          return {
+            isError: false,
+            value: { kind: 'background', jobId },
+            content: [{ type: 'text', text: 'started background job ' + jobId }],
+          }
+        }
+
         const result = await shell.run(shell.resolve({ ...request, signal: exec.signal }))
         if (result.aborted) {
           return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-multi-folder",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "DeepSeek Harness plugin: secondary working directories for a project. The agent keeps the primary workspace as cwd, gains equal write/exec permissions on configured secondary directories under workspace-write mode, and is notified of configuration changes at the next message boundary. Configurable from the session header AND from the session-creation page (before the first message) through a sessionless multiFolder remote API.",
   "keywords": [
     "dsh-plugin",
@@ -48,6 +48,7 @@
         "@deepseek-ai/dsh-api-gateway",
         "@deepseek-ai/dsh-api-remotes",
         "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-locale",
         "@deepseek-ai/dsh-client-runtime"
       ]
     }