dsh-over-ssh 0.1.1 → 0.2.1

package/lib/client.js

@@ -29,6 +29,25 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 var import_cordis = require("@deepseek-ai/cordis");
 
+// src/client/core/abort.ts
+function createAbortGate() {
+  let active;
+  return {
+    begin: () => {
+      active?.abort();
+      active = new AbortController();
+      return active.signal;
+    },
+    abort: () => {
+      active?.abort();
+      active = void 0;
+    },
+    get live() {
+      return active !== void 0 && !active.signal.aborted;
+    }
+  };
+}
+
 // src/client/core/locale.ts
 var OVER_SSH_NS = "over-ssh";
 var OVER_SSH_DICTS = {
@@ -43,9 +62,10 @@ var OVER_SSH_DICTS = {
     rootsTitle: "\u8FDC\u7A0B\u5DE5\u4F5C\u533A",
     // 本页只列插件已登记的根、并可移除：「增」在审计 0027 已移到工作区目录流，旧文案的
     // 「在这里增删…」是错的。作用域那句（不会自动出现在会话的目录列表里）是审计 0056 的护栏，保留。
-    rootsDescription: "\u8FD9\u91CC\u53EA\u5217\u51FA\u63D2\u4EF6\u5DF2\u767B\u8BB0\u7684\u6839\uFF0C\u5E76\u53EF\u4EE5\u79FB\u9664\uFF1B\u8981\u6DFB\u52A0\u76EE\u5F55\u8BF7\u5728\u5DE5\u4F5C\u533A\u7684\u76EE\u5F55\u6D41\u91CC\u505A\u3002\u8FD9\u91CC\u767B\u8BB0\u7684\u6839\u4E0D\u4F1A\u81EA\u52A8\u51FA\u73B0\u5728\u4F1A\u8BDD\u7684\u76EE\u5F55\u5217\u8868\u91CC\uFF1A\u4F1A\u8BDD\u8981\u7528\u5B83\uFF0C\u9700\u5728\u4F1A\u8BDD\u91CC\u70B9\u300C\u6DFB\u52A0\u76EE\u5F55\u300D\u3002profile \u91CC\u58F0\u660E\u7684\u6839\u53EA\u8BFB\u663E\u793A\uFF1A\u5220\u6389\u5B83\u91CD\u542F\u540E\u8FD8\u4F1A\u56DE\u6765\u3002",
+    rootsDescription: "\u8FD9\u91CC\u53EA\u5217\u51FA\u63D2\u4EF6\u5DF2\u767B\u8BB0\u7684\u6839\uFF0C\u5E76\u53EF\u4EE5\u79FB\u9664\uFF1B\u8981\u6DFB\u52A0\u76EE\u5F55\u8BF7\u5728\u5DE5\u4F5C\u533A\u7684\u76EE\u5F55\u6D41\u91CC\u505A\u3002\u8FD9\u91CC\u767B\u8BB0\u7684\u6839\u4E0D\u4F1A\u81EA\u52A8\u51FA\u73B0\u5728\u4F1A\u8BDD\u7684\u76EE\u5F55\u5217\u8868\u91CC\uFF1A\u4F1A\u8BDD\u8981\u7528\u5B83\uFF0C\u9700\u5728\u4F1A\u8BDD\u91CC\u70B9\u300C\u6DFB\u52A0\u76EE\u5F55\u300D\u3002\u6A21\u578B\u5DE5\u5177\u53EA\u8BA4\u300C\u843D\u5728\u672C\u4F1A\u8BDD\u5DE5\u4F5C\u533A\u5185\u7684\u6839\u300D\u4E0E\u300C\u951A\u70B9\u5C31\u662F\u672C\u4F1A\u8BDD\u5DE5\u4F5C\u533A\u7684\u8FDC\u7AEF\u6839\u300D\uFF1B\u5176\u4F59\u6839\u5728\u88C5\u5165\u4F1A\u8BDD\u4E4B\u524D\u4F1A\u62A5\u300C\u4F1A\u8BDD\u9694\u79BB\u300D\u3002profile \u91CC\u58F0\u660E\u7684\u6839\u53EA\u8BFB\u663E\u793A\uFF1A\u5220\u6389\u5B83\u91CD\u542F\u540E\u8FD8\u4F1A\u56DE\u6765\u3002",
     rootsAdvancedSummary: "\u9AD8\u7EA7\uFF1A\u6839\u8868\uFF08\u8BCA\u65AD\uFF09",
     rootsAdvancedNote: "\u8FD9\u662F\u63D2\u4EF6\u7684\u6839\u8DEF\u7531\u8868\uFF1A\u6BCF\u6761 = \u4E00\u4E2A\u8FDC\u7AEF\u76EE\u5F55 + \u63D2\u4EF6\u4E3A\u5B83\u5EFA\u7684\u672C\u5730\u951A\u70B9\u76EE\u5F55\u3002\u5220\u6389\u67D0\u6761\u540E\uFF0C\u6B63\u5728\u4F7F\u7528\u8BE5\u951A\u70B9\u7684\u5DE5\u4F5C\u533A\u91CC remote_* \u5DE5\u5177\u4F1A\u7ACB\u523B\u62A5\u300C\u4E0D\u5728\u4EFB\u4F55\u8FDC\u7AEF\u6839\u5185\u300D\uFF1B\u5DE5\u4F5C\u533A\u672C\u8EAB\u4ECD\u5728\u4FA7\u680F\u3002",
+    rootsScopeNoSession: "\u6CA1\u6709\u4F1A\u8BDD\u4F5C\u7528\u57DF\uFF1A\u6A21\u578B\u53EA\u5BF9\u843D\u5728\u4F1A\u8BDD\u5DE5\u4F5C\u533A\u5185\u7684\u6839\u53EF\u8FBE\uFF1B\u5176\u4F59\u9700\u5728\u4F1A\u8BDD\u91CC\u70B9\u300C\u6DFB\u52A0\u76EE\u5F55\u300D",
     rootsEmpty: "\u8FD8\u6CA1\u6709\u914D\u7F6E\u4EFB\u4F55\u6839\u3002",
     rootsPending: "\u6B63\u5728\u4E0E\u5BBF\u4E3B\u901A\u4FE1\u2026",
     rootsAuthPassword: "\u7528\u6237\u540D + \u5BC6\u7801",
@@ -167,7 +187,6 @@ var OVER_SSH_DICTS = {
     rootsImportFailed: "\u5BFC\u5165\u5931\u8D25\uFF1A{message}",
     transferTitle: "\u4F20\u8F93\u8FDB\u5EA6",
     transferDescription: "\u5F53\u524D\u4E0E\u6700\u8FD1\u7684\u4F20\u8F93\uFF1A\u901F\u7387\u3001\u5DF2\u5B8C\u6210\u5B57\u8282\u3001\u5269\u4F59\u65F6\u95F4\u3002\u5931\u8D25\u9879\u7559\u5728\u4E0B\u9762\u3002",
-    remoteFilesHint: "\u8FDC\u7AEF\u6587\u4EF6\u901A\u8FC7\u5BF9\u8BDD\u8BBF\u95EE\uFF1A@ \u8DEF\u5F84\uFF0C\u6216\u8BA9\u6211\u5217\u76EE\u5F55\u3002",
     transferEmpty: "\u5F53\u524D\u6CA1\u6709\u4F20\u8F93\u3002",
     transferLoading: "\u6B63\u5728\u8BFB\u53D6\u4F20\u8F93\u72B6\u6001\u2026",
     transferRefresh: "\u5237\u65B0",
@@ -235,7 +254,9 @@ var OVER_SSH_DICTS = {
     sessionRootsTitle: "\u672C\u4F1A\u8BDD\u53EF\u7528\u7684\u76EE\u5F55",
     sessionRootsEmpty: "\u8FD8\u6CA1\u6709\u6DFB\u52A0\u76EE\u5F55\u3002\u70B9\u300C\u6D4F\u89C8\u2026\u300D\u9009\u4E00\u4E2A\u672C\u5730\u6216\u8FDC\u7AEF\u76EE\u5F55\u3002",
     sessionRootsLoading: "\u6B63\u5728\u8BFB\u53D6\u8FD9\u4E2A\u4F1A\u8BDD\u7684\u76EE\u5F55\u2026",
-    sessionRootsHint: "\u672C\u5730\u76EE\u5F55\u76F4\u63A5\u8BFB\u5199\uFF1B\u8FDC\u7AEF\u76EE\u5F55\u7ECF SSH \u4EE3\u7406\u8BBF\u95EE\u3002\u53EA\u6709\u4F60\u81EA\u5DF1\u52A0\u7684\u76EE\u5F55\u80FD\u5220\u9664\u3002\u63D2\u4EF6\u8BBE\u7F6E\u91CC\u767B\u8BB0\u7684\u6839\u4E0D\u5728\u8FD9\u91CC\u2014\u2014\u8981\u7528\u5B83\uFF0C\u5148\u5728\u4F1A\u8BDD\u91CC\u6DFB\u52A0\u3002",
+    sessionRootsHint: "\u672C\u5730\u76EE\u5F55\u76F4\u63A5\u8BFB\u5199\uFF1B\u8FDC\u7AEF\u76EE\u5F55\u7ECF SSH \u4EE3\u7406\u8BBF\u95EE\u3002\u7B2C\u4E00\u884C\u662F\u5F53\u524D\u5DE5\u4F5C\u533A\uFF08\u59CB\u7EC8\u53EF\u7528\u3001\u4E0D\u53EF\u5220\u9664\uFF09\uFF1B\u53EA\u6709\u4F60\u81EA\u5DF1\u52A0\u7684\u76EE\u5F55\u80FD\u5220\u9664\u3002\u63D2\u4EF6\u8BBE\u7F6E\u91CC\u767B\u8BB0\u7684\u6839\u4E0D\u5728\u8FD9\u91CC\u2014\u2014\u8981\u7528\u5B83\uFF0C\u5148\u5728\u4F1A\u8BDD\u91CC\u6DFB\u52A0\u3002",
+    sessionRootsWorkspaceBadge: "\u5DE5\u4F5C\u533A",
+    sessionRootsWorkspaceNote: "\u4F1A\u8BDD\u7684\u9ED8\u8BA4\u8FB9\u754C\uFF1Bworkspace-write \u4E0B\u4E0E\u5DF2\u6DFB\u52A0\u76EE\u5F55\u4E00\u6837\u53EF\u5199\uFF0Cread-only \u4E0B\u90FD\u4E0D\u53EF\u5199",
     sessionRootsFailed: "\u8BFB\u53D6\u76EE\u5F55\u5217\u8868\u5931\u8D25\uFF1A{reason}",
     sessionAddDone: "\u5DF2\u52A0\u5165\uFF1A{path}\uFF08\u672A\u65B0\u5EFA\u5DE5\u4F5C\u533A\uFF09",
     sessionAddFailed: "\u52A0\u5165\u5931\u8D25\uFF1A{reason}",
@@ -258,6 +279,11 @@ var OVER_SSH_DICTS = {
     sessionResultPurged: "\u5DF2\u6C38\u4E45\u6E05\u9664\u8BE5\u6761\u76EE",
     sessionResultSweepNone: "\u6CA1\u6709\u9700\u8981\u6E05\u7406\u7684\u6761\u76EE",
     sessionResultSweepDone: "\u5DF2\u6E05\u7406 {count} \u4E2A\u6761\u76EE",
+    sessionResultSweepPartial: "\u5DF2\u6E05\u7406 {count} \u4E2A\u6761\u76EE\uFF0C\u53E6\u6709 {failed} \u4E2A\u5931\u8D25\uFF08\u539F\u56E0\u89C1\u5BBF\u4E3B\u65E5\u5FD7\uFF09",
+    sessionResultDeletedPermanentPartial: "\u5DF2\u6C38\u4E45\u5220\u9664 {size}\uFF08\u4E0D\u53EF\u6062\u590D\uFF09\uFF0C\u53E6\u6709 {refused} \u4E2A\u88AB\u62D2\u7EDD",
+    sessionResultRecycledPartial: "\u5DF2\u79FB\u5165\u4F1A\u8BDD\u56DE\u6536\u7AD9 {size}\uFF08\u53EF\u6062\u590D\uFF09\uFF0C\u53E6\u6709 {refused} \u4E2A\u88AB\u62D2\u7EDD",
+    sessionResultSweepConfirmTitle: "\u786E\u8BA4\u6E05\u7406\u56DE\u6536\u7AD9",
+    sessionResultSweepConfirmBody: "\u5C06\u6309\u4FDD\u7559\u7B56\u7565\u6C38\u4E45\u6E05\u9664\u56DE\u6536\u7AD9\u4E2D\u7684\u6761\u76EE\uFF08\u4E0D\u53EF\u6062\u590D\uFF09\u3002\u786E\u5B9A\u7EE7\u7EED\uFF1F",
     sessionWorkspaceUnknown: "\uFF08\u65E0\u5DE5\u4F5C\u533A\uFF09",
     connectionTestNoAnswer: "\u5BBF\u4E3B\u6CA1\u6709\u56DE\u6D4B\u8BD5\u7ED3\u679C",
     connectionTestFailed: "\u8FDE\u63A5\u6D4B\u8BD5\u5931\u8D25",
@@ -283,9 +309,10 @@ var OVER_SSH_DICTS = {
     rootsTitle: "Remote workspaces",
     // Same correction as the Chinese copy: this page can only remove rows (adding moved to the workspace
     // directory flow, audit 0027). The scope sentence is the audit-0056 guard and stays.
-    rootsDescription: "This page only lists the roots the plugin has registered, and lets you remove them; to add a directory, use the workspace directory flow. A root registered here does not appear in a session's directory list automatically: to use it, add it from the session first. Roots declared in the profile are read-only here: deleting one would bring it back after a restart.",
+    rootsDescription: "This page only lists the roots the plugin has registered, and lets you remove them; to add a directory, use the workspace directory flow. A root registered here does not appear in a session's directory list automatically: to use it, add it from the session first. The model reaches only roots that fall inside the session workspace (or a remote root whose anchor is that workspace); every other root reports session isolation until a session takes it in. Roots declared in the profile are read-only here: deleting one would bring it back after a restart.",
     rootsAdvancedSummary: "Advanced: root table (diagnostic)",
     rootsAdvancedNote: "This is the plugin's root routing table: each row is a remote directory plus the local anchor directory the plugin created for it. Deleting a row makes the remote_* tools fail immediately in any workspace that already uses that anchor; the workspace itself stays in the sidebar.",
+    rootsScopeNoSession: "No session scope: the model reaches only roots inside the session workspace; add it from the session otherwise",
     rootsEmpty: "No root is configured yet.",
     rootsPending: "Talking to the host\u2026",
     rootsAuthPassword: "Username + password",
@@ -402,7 +429,6 @@ var OVER_SSH_DICTS = {
     rootsImportFailed: "Import failed: {message}",
     transferTitle: "Transfers",
     transferDescription: "Current and recent transfers: rate, bytes done, time left. Failures stay listed below.",
-    remoteFilesHint: "Remote files are reached through the conversation: @ a path, or ask me to list a directory.",
     transferEmpty: "Nothing is transferring.",
     transferLoading: "Reading transfer state\u2026",
     transferRefresh: "Refresh",
@@ -470,7 +496,9 @@ var OVER_SSH_DICTS = {
     sessionRootsTitle: "Directories available to this session",
     sessionRootsEmpty: "No directory yet. Use \u300CBrowse\u2026\u300D to pick a local or remote one.",
     sessionRootsLoading: "Reading this session's directories\u2026",
-    sessionRootsHint: "Local directories are read and written directly; remote ones go through the SSH agent. Only directories you added can be removed. A root registered in the plugin settings is not listed here \u2014 add it from this session to use it.",
+    sessionRootsHint: "Local directories are read and written directly; remote ones go through the SSH agent. The first row is the current workspace (always available, cannot be removed); only directories you added can be removed. A root registered in the plugin settings is not listed here \u2014 add it from this session to use it.",
+    sessionRootsWorkspaceBadge: "Workspace",
+    sessionRootsWorkspaceNote: "The conversation's default boundary; writable under workspace-write like added directories, neither is writable under read-only",
     sessionRootsFailed: "Could not read the directory list: {reason}",
     sessionAddDone: "Added: {path} (no workspace was created)",
     sessionAddFailed: "Could not add it: {reason}",
@@ -493,6 +521,11 @@ var OVER_SSH_DICTS = {
     sessionResultPurged: "Permanently removed that entry",
     sessionResultSweepNone: "Nothing to sweep",
     sessionResultSweepDone: "Swept {count} entries",
+    sessionResultSweepPartial: "Swept {count} entries; {failed} failed (see host log)",
+    sessionResultDeletedPermanentPartial: "Permanently deleted {size} (unrecoverable); {refused} refused",
+    sessionResultRecycledPartial: "Moved {size} to the recycle bin (recoverable); {refused} refused",
+    sessionResultSweepConfirmTitle: "Confirm sweeping the bin",
+    sessionResultSweepConfirmBody: "This permanently purges bin entries beyond the retention policy (unrecoverable). Continue?",
     sessionWorkspaceUnknown: "(no workspace)",
     connectionTestNoAnswer: "The host returned no test result",
     connectionTestFailed: "The connection test failed",
@@ -1285,6 +1318,10 @@ var BUTTON_VARIANT_CLASS = {
 function isEscape(event) {
   return event.key === "Escape";
 }
+function fieldValue(event) {
+  const target = event.target;
+  return typeof target?.value === "string" ? target.value : "";
+}
 function Button(props) {
   const variantClass = BUTTON_VARIANT_CLASS[props.variant];
   return (0, import_react.createElement)(
@@ -1507,6 +1544,7 @@ function useCardTabTrap(open, container) {
 // src/shared/routes.ts
 var ROOTS_API_PATH = "/api/over-ssh/roots";
 var SESSION_API_PATH = "/api/over-ssh/sessions";
+var GIT_STATUS_API_PATH = "/api/over-ssh/git-status";
 
 // src/shared/root-keys.ts
 function isAbsoluteLocalPath(path) {
@@ -1785,6 +1823,9 @@ function buildRootsView(input) {
     title: row.label ?? row.path,
     subtitle: row.location === "remote" ? `${row.connectionId ?? "?"}:${row.path}` : row.path,
     badgeKey: row.location === "remote" ? "rootsBadgeRemote" : "rootsBadgeLocal",
+    // 只有"用户在设置页登记、且没有任何会话作用域"的行才对 AI 不可用；profile 里的根是部署级共享根，
+    // 不属于这个提示的适用范围。
+    ...row.source === "user" && (row.workspaces?.length ?? 0) === 0 && (row.sessions?.length ?? 0) === 0 ? { scopeKey: "rootsScopeNoSession" } : {},
     // Only a root the panel owns can be deleted: a config root comes back after a restart, so offering a
     // delete button for it would be a lie the user cannot see. A root that is both declared and added is
     // deletable — the file entry goes away, which is what the user asked for.
@@ -1942,6 +1983,10 @@ function withoutError(state) {
   const { error: _error, ...rest } = state;
   return rest;
 }
+function withoutAdding(state) {
+  const { addingConnection: _adding, ...rest } = state;
+  return rest;
+}
 function withoutEditing(state) {
   const { editingId: _editing, ...rest } = state;
   return rest;
@@ -1980,7 +2025,7 @@ function rootsPanelReducer(state, action) {
     case "succeeded": {
       const saved = action.scope === void 0 ? void 0 : SAVED_MESSAGE[action.scope];
       return {
-        ...withoutError(withoutFormNotice(withoutEditing(withoutConfirming(state)))),
+        ...withoutError(withoutFormNotice(withoutAdding(withoutEditing(withoutConfirming(state))))),
         pending: false,
         loaded: true,
         // The edit dialog is closed by `withoutEditing` whether the request added or removed something, so its
@@ -1999,11 +2044,16 @@ function rootsPanelReducer(state, action) {
       if (!canEdit(state)) return state;
       return { ...withoutFormNotice(state), pending: true };
     }
+    case "add-connection-opened":
+      return { ...withoutEditing(withoutFormNotice(state)), addingConnection: true };
+    case "add-connection-closed":
+      if (state.addingConnection !== true) return state;
+      return withoutAdding(withoutFormNotice(state));
     case "edit-started": {
       const row = state.snapshot?.connections.find((candidate) => candidate.id === action.id);
       if (row === void 0) return state;
       return {
-        ...withoutFormNotice(state),
+        ...withoutFormNotice(withoutAdding(state)),
         editingId: row.id,
         editDrafts: {
           id: row.id,
@@ -2446,6 +2496,17 @@ function createTransferProgress(options) {
       listeners.clear();
       void running;
     },
+    /**
+     * Re-arm after a `dispose()`.
+     *
+     * React's development replay runs an effect's cleanup and then the effect again **on the same controller**
+     * (the instance is kept by `useMemo`). Without `activate()` the second mount's `start()` was silently
+     * ignored — `dispose()` set `disposed = true` and nothing cleared it — so the transfer panel never polled
+     * again for the rest of the session. Every other controller in this half already has this method.
+     */
+    activate: () => {
+      disposed = false;
+    },
     requests: () => issued
   };
 }
@@ -2456,6 +2517,7 @@ function TransferProgressSection({ copy }) {
   const progress = (0, import_react4.useMemo)(() => createTransferProgress({ io }), [io]);
   const panel = (0, import_react4.useSyncExternalStore)(progress.subscribe, progress.getState);
   (0, import_react4.useEffect)(() => {
+    progress.activate();
     progress.start();
     return () => progress.dispose();
   }, [progress]);
@@ -2514,6 +2576,7 @@ function createRootsPanelController(options) {
   const listeners = /* @__PURE__ */ new Set();
   let token = 0;
   let disposed = false;
+  const requests = createAbortGate();
   const dispatch = (action) => {
     const next = rootsPanelReducer(state, action);
     if (next === state) return;
@@ -2523,8 +2586,9 @@ function createRootsPanelController(options) {
   const latest = (mine) => !disposed && mine === token;
   const reload = async () => {
     const mine = ++token;
+    const signal = requests.begin();
     dispatch({ type: "load" });
-    const result = await options.api.load();
+    const result = await options.api.load(signal);
     if (!latest(mine)) return;
     if (result.ok) dispatch({ type: "loaded", snapshot: result.value });
     else dispatch({ type: "failed", error: result.error });
@@ -2554,6 +2618,7 @@ function createRootsPanelController(options) {
   };
   const submitConnection = async () => {
     if (state.editingId !== void 0) return;
+    if (state.addingConnection !== true) return;
     if (!canEdit(state)) return;
     const { drafts } = state;
     const portText = drafts.newPort.trim();
@@ -2592,6 +2657,12 @@ function createRootsPanelController(options) {
   const cancelEdit = () => {
     dispatch({ type: "edit-ended" });
   };
+  const openAddConnection = () => {
+    dispatch({ type: "add-connection-opened" });
+  };
+  const closeAddConnection = () => {
+    dispatch({ type: "add-connection-closed" });
+  };
   const defer = options.defer ?? ((run) => {
     const handle = setTimeout(run, 0);
     return () => clearTimeout(handle);
@@ -2704,6 +2775,8 @@ function createRootsPanelController(options) {
     changeEditDraft: (patch) => dispatch({ type: "edit-draft-changed", patch }),
     submitRoot,
     submitConnection,
+    openAddConnection,
+    closeAddConnection,
     remove,
     startEdit,
     cancelEdit,
@@ -2722,6 +2795,7 @@ function createRootsPanelController(options) {
     submitImport,
     dispose: () => {
       disposed = true;
+      requests.abort();
       listeners.clear();
       surfaceAttached();
     }
@@ -2733,6 +2807,8 @@ function rootsPanelSectionActions(controller) {
     onEditDraftChange: controller.changeEditDraft,
     onSubmitRoot: (location) => void controller.submitRoot(location),
     onSubmitConnection: () => void controller.submitConnection(),
+    onOpenAddConnection: controller.openAddConnection,
+    onCloseAddConnection: controller.closeAddConnection,
     onRemove: (key) => void controller.remove(key),
     onSubmitEdit: () => void controller.submitEdit(),
     onCancelEdit: controller.cancelEdit,
@@ -2745,9 +2821,43 @@ function rootsPanelSectionActions(controller) {
     onImportSubmit: () => void controller.submitImport()
   };
 }
-function fieldValue(event) {
-  const target = event.target;
-  return typeof target?.value === "string" ? target.value : "";
+function selectRootsViewForRender(state) {
+  const cached = rootsViewCache;
+  if (cached !== void 0 && cached.snapshot === state.snapshot && cached.error === state.error && cached.pending === state.pending) {
+    return cached.view;
+  }
+  const view = selectRootsView(state);
+  rootsViewCache = { snapshot: state.snapshot, error: state.error, pending: state.pending, view };
+  return view;
+}
+var rootsViewCache;
+var rootsRowElementsCache = /* @__PURE__ */ new WeakMap();
+function rootsPanelRowElements(view, copy, editable, onRemove) {
+  const cached = rootsRowElementsCache.get(view);
+  if (cached !== void 0 && cached.copy === copy && cached.editable === editable && cached.onRemove === onRemove) {
+    return cached.elements;
+  }
+  const elements = view.rows.map((row) => renderRow(row, copy, editable, onRemove));
+  rootsRowElementsCache.set(view, { copy, editable, onRemove, elements });
+  return elements;
+}
+function openRootsDialog(portal, doc) {
+  const origin = captureFocusOrigin(doc);
+  portal.mount();
+  portal.focusCard();
+  return () => {
+    portal.unmount();
+    restoreFocusOrigin(origin);
+  };
+}
+function installRootsDialogEscape(doc, close) {
+  if (doc?.addEventListener === void 0) return () => void 0;
+  const onKeyDown = (event) => {
+    if (event.key !== "Escape") return;
+    close();
+  };
+  doc.addEventListener("keydown", onKeyDown);
+  return () => doc.removeEventListener?.("keydown", onKeyDown);
 }
 function renderFormNotice(copy, state, scope) {
   const notice = state.formNotice;
@@ -2766,6 +2876,7 @@ function renderRow(row, copy, editable, onRemove) {
     (0, import_react5.createElement)("span", { className: CLASS.rowTitle }, row.title),
     (0, import_react5.createElement)("code", { className: CLASS.badge }, resolveMessage2(copy, { key: row.badgeKey })),
     (0, import_react5.createElement)("span", { className: CLASS.rowMeta }, row.subtitle),
+    row.scopeKey === void 0 ? null : (0, import_react5.createElement)("span", { className: CLASS.hint }, resolveMessage2(copy, { key: row.scopeKey })),
     // The one and only source of "may this be deleted": the view model's `removable`. A per-row destructive
     // action is the `ghost` variant, so the row stays quiet until the operator means it.
     row.removable ? (0, import_react5.createElement)(
@@ -2775,9 +2886,15 @@ function renderRow(row, copy, editable, onRemove) {
     ) : null
   );
 }
-function SshConfigImportDialog({ copy, state, actions, idPrefix = DEFAULT_ROOTS_ID_PREFIX }) {
+function SshConfigImportDialog({
+  copy,
+  state,
+  actions,
+  idPrefix = DEFAULT_ROOTS_ID_PREFIX,
+  editable: editableOverride
+}) {
   if (state.importOpen !== true) return null;
-  const editable = canEdit(state);
+  const editable = editableOverride ?? canEdit(state);
   const listing = state.importListing;
   const selected = new Set(state.importSelected ?? []);
   const busy = state.importBusy === true;
@@ -2789,10 +2906,12 @@ function SshConfigImportDialog({ copy, state, actions, idPrefix = DEFAULT_ROOTS_
     "section",
     {
       className: CLASS.block,
-      role: "dialog",
-      // Named by its own heading. **Not** `aria-modal`: this dialog is rendered inside the settings page's own
-      // scroll flow (it is not portalled), the page behind it stays interactive, and there is no Tab trap — a
-      // modal claim the behaviour does not back is worse than no claim (audit 2026-11-01b ui P2-2).
+      // A named **region**, not a dialog. It is rendered inline inside the settings page's own scroll flow (it is
+      // not portalled), the page behind it stays interactive, and it has no Tab trap — a `role="dialog"` would
+      // promise modal behaviour the surface does not implement, which is worse than not claiming it. The other
+      // two forms really are portalled modals (`aria-modal`, focus trap), so the two roles stay honest
+      // (audit 2026-11-01b ui P2-2; 2026-11-05 P2-3).
+      role: "region",
       "aria-labelledby": `${idPrefix}-import-title`,
       // Esc closes it from anywhere inside, like the other five dialogs. It is inline, so this handler is the
       // only one that will see the key while the settings page scrolls the caret inside it.
@@ -2915,10 +3034,154 @@ function SshConfigImportDialog({ copy, state, actions, idPrefix = DEFAULT_ROOTS_
     )
   );
 }
-function ConnectionEditForm({ copy, state, actions, idPrefix = DEFAULT_ROOTS_ID_PREFIX }) {
+function ConnectionAddForm({
+  copy,
+  state,
+  actions,
+  idPrefix = DEFAULT_ROOTS_ID_PREFIX,
+  editable: editableOverride
+}) {
+  if (state.addingConnection !== true) return null;
+  const editable = editableOverride ?? canEdit(state);
+  const drafts = state.drafts;
+  return (0, import_react5.createElement)(
+    "form",
+    {
+      onSubmit: (event) => {
+        event.preventDefault();
+        actions.onSubmitConnection();
+      },
+      className: CLASS.dialog,
+      role: "dialog",
+      "aria-modal": "true",
+      "aria-label": copy.rootsAddConnection,
+      onKeyDown: (event) => {
+        if (!isEscape(event)) return;
+        event.stopPropagation?.();
+        actions.onCloseAddConnection();
+      }
+    },
+    (0, import_react5.createElement)(
+      "div",
+      { className: CLASS.dialogHeader },
+      (0, import_react5.createElement)("h3", { className: CLASS.sectionTitle }, copy.rootsAddConnection)
+    ),
+    (0, import_react5.createElement)(
+      "div",
+      { className: CLASS.dialogBody },
+      (0, import_react5.createElement)(
+        "div",
+        { className: CLASS.form },
+        Field({
+          htmlFor: `${idPrefix}-connection-id`,
+          label: copy.rootsIdLabel,
+          children: TextInput({
+            id: `${idPrefix}-connection-id`,
+            name: "roots-connection-id",
+            value: drafts.newId,
+            disabled: !editable,
+            onChange: (event) => actions.onDraftChange({ newId: fieldValue(event) })
+          })
+        }),
+        Field({
+          htmlFor: `${idPrefix}-connection-host`,
+          label: copy.rootsHostLabel,
+          children: TextInput({
+            id: `${idPrefix}-connection-host`,
+            name: "roots-connection-host",
+            value: drafts.newHost,
+            disabled: !editable,
+            onChange: (event) => actions.onDraftChange({ newHost: fieldValue(event) })
+          })
+        }),
+        Field({
+          htmlFor: `${idPrefix}-connection-user`,
+          label: copy.rootsUserLabel,
+          children: TextInput({
+            id: `${idPrefix}-connection-user`,
+            name: "roots-connection-user",
+            value: drafts.newUser,
+            disabled: !editable,
+            onChange: (event) => actions.onDraftChange({ newUser: fieldValue(event) })
+          })
+        }),
+        Field({
+          htmlFor: `${idPrefix}-connection-auth`,
+          label: copy.rootsAuthLabel,
+          children: Select({
+            id: `${idPrefix}-connection-auth`,
+            name: "roots-connection-auth",
+            value: drafts.newAuthKind,
+            disabled: !editable,
+            onChange: (value) => actions.onDraftChange({ newAuthKind: value === "password" ? "password" : "key" }),
+            options: [
+              { value: "key", label: copy.rootsAuthKey },
+              { value: "password", label: copy.rootsAuthPassword }
+            ]
+          })
+        }),
+        // Only meaningful for key authentication; shown on demand rather than as a dead field.
+        drafts.newAuthKind === "key" ? Field({
+          htmlFor: `${idPrefix}-connection-key-path`,
+          label: copy.rootsKeyPathLabel,
+          children: TextInput({
+            id: `${idPrefix}-connection-key-path`,
+            name: "roots-connection-key-path",
+            value: drafts.newKeyPath,
+            disabled: !editable,
+            onChange: (event) => actions.onDraftChange({ newKeyPath: fieldValue(event) })
+          })
+        }) : null,
+        // Only meaningful for password authentication. The value never comes back from the host, so this field is
+        // always empty on render: the panel can say a password is stored, never show one.
+        drafts.newAuthKind === "password" ? Field({
+          htmlFor: `${idPrefix}-connection-password`,
+          label: copy.rootsPasswordLabel,
+          children: TextInput({
+            id: `${idPrefix}-connection-password`,
+            name: "roots-connection-password",
+            type: "password",
+            autoComplete: "new-password",
+            value: drafts.newPassword,
+            disabled: !editable,
+            placeholder: copy.rootsPasswordLabel,
+            onChange: (event) => actions.onDraftChange({ newPassword: fieldValue(event) })
+          })
+        }) : null,
+        Field({
+          htmlFor: `${idPrefix}-connection-port`,
+          label: copy.rootsPortLabel,
+          children: TextInput({
+            id: `${idPrefix}-connection-port`,
+            name: "roots-connection-port",
+            value: drafts.newPort,
+            disabled: !editable,
+            inputMode: "numeric",
+            size: "compact",
+            onChange: (event) => actions.onDraftChange({ newPort: fieldValue(event) })
+          })
+        })
+      ),
+      renderFormNotice(copy, state, "connection")
+    ),
+    (0, import_react5.createElement)(
+      "div",
+      { className: CLASS.actions },
+      Button({ variant: "primary", type: "submit", disabled: !editable, children: copy.rootsSave }),
+      Button({ variant: "secondary", type: "button", disabled: !editable, onClick: actions.onCloseAddConnection, children: copy.rootsEditCancel })
+    )
+  );
+}
+function ConnectionEditForm({
+  copy,
+  state,
+  actions,
+  idPrefix = DEFAULT_ROOTS_ID_PREFIX,
+  editable: editableOverride
+}) {
   const editingId = state.editingId;
   if (editingId === void 0) return null;
-  const editable = canEdit(state);
+  const editable = editableOverride ?? canEdit(state);
   const drafts = state.editDrafts;
   const renamed = drafts.id.trim() !== editingId;
   return (0, import_react5.createElement)(
@@ -3082,12 +3345,16 @@ function RootsPanelSection({
   actions,
   transfers,
   portal,
-  idPrefix = DEFAULT_ROOTS_ID_PREFIX
+  idPrefix = DEFAULT_ROOTS_ID_PREFIX,
+  view: precomputedView,
+  rows: precomputedRows,
+  editable: editableOverride
 }) {
-  const view = selectRootsView(state);
-  const editForm = ConnectionEditForm({ copy, state, actions, idPrefix });
-  const editable = view.canEdit;
-  const { drafts } = state;
+  const view = precomputedView ?? selectRootsViewForRender(state);
+  const editable = editableOverride ?? view.canEdit;
+  const editForm = ConnectionEditForm({ copy, state, actions, idPrefix, editable });
+  const addForm = ConnectionAddForm({ copy, state, actions, idPrefix, editable });
+  const rowElements = precomputedRows ?? rootsPanelRowElements(view, copy, editable, actions.onRemove);
   const notice = resolveMessage2(copy, view.notice);
   return (0, import_react5.createElement)(
     "section",
@@ -3103,113 +3370,15 @@ function RootsPanelSection({
     // collapsed diagnostic block at the bottom of this section (see below): it is still the only place a
     // root can be removed from, so it is demoted, never dropped.
     // -- add a connection ----------------------------------------------------
+    // 2026-11-05（用户反馈）：原先是常驻的页内表单，六个字段把页面占满；现在是一个按钮，点开才出现对话框，
+    // 与「编辑」同一种卡片形态（同样的 `CLASS.dialog`、Esc 关闭、字段布局）。
     (0, import_react5.createElement)(
-      "form",
-      {
-        onSubmit: (event) => {
-          event.preventDefault();
-          actions.onSubmitConnection();
-        },
-        className: CLASS.block
-      },
-      (0, import_react5.createElement)("h4", { className: CLASS.blockTitle }, copy.rootsAddConnection),
-      (0, import_react5.createElement)(
-        "div",
-        { className: CLASS.form },
-        Field({
-          htmlFor: `${idPrefix}-connection-id`,
-          label: copy.rootsIdLabel,
-          children: TextInput({
-            id: `${idPrefix}-connection-id`,
-            name: "roots-connection-id",
-            value: drafts.newId,
-            disabled: !editable,
-            onChange: (event) => actions.onDraftChange({ newId: fieldValue(event) })
-          })
-        }),
-        Field({
-          htmlFor: `${idPrefix}-connection-host`,
-          label: copy.rootsHostLabel,
-          children: TextInput({
-            id: `${idPrefix}-connection-host`,
-            name: "roots-connection-host",
-            value: drafts.newHost,
-            disabled: !editable,
-            onChange: (event) => actions.onDraftChange({ newHost: fieldValue(event) })
-          })
-        }),
-        Field({
-          htmlFor: `${idPrefix}-connection-user`,
-          label: copy.rootsUserLabel,
-          children: TextInput({
-            id: `${idPrefix}-connection-user`,
-            name: "roots-connection-user",
-            value: drafts.newUser,
-            disabled: !editable,
-            onChange: (event) => actions.onDraftChange({ newUser: fieldValue(event) })
-          })
-        }),
-        Field({
-          htmlFor: `${idPrefix}-connection-auth`,
-          label: copy.rootsAuthLabel,
-          children: Select({
-            id: `${idPrefix}-connection-auth`,
-            name: "roots-connection-auth",
-            value: drafts.newAuthKind,
-            disabled: !editable,
-            onChange: (value) => actions.onDraftChange({ newAuthKind: value === "password" ? "password" : "key" }),
-            options: [
-              { value: "key", label: copy.rootsAuthKey },
-              { value: "password", label: copy.rootsAuthPassword }
-            ]
-          })
-        }),
-        // Only meaningful for key authentication; shown on demand rather than as a dead field.
-        drafts.newAuthKind === "key" ? Field({
-          htmlFor: `${idPrefix}-connection-key-path`,
-          label: copy.rootsKeyPathLabel,
-          children: TextInput({
-            id: `${idPrefix}-connection-key-path`,
-            name: "roots-connection-key-path",
-            value: drafts.newKeyPath,
-            disabled: !editable,
-            onChange: (event) => actions.onDraftChange({ newKeyPath: fieldValue(event) })
-          })
-        }) : null,
-        // Only meaningful for password authentication. The value never comes back from the host, so this
-        // field is always empty on render: the panel can say a password is stored, never show one.
-        drafts.newAuthKind === "password" ? Field({
-          htmlFor: `${idPrefix}-connection-password`,
-          label: copy.rootsPasswordLabel,
-          children: TextInput({
-            id: `${idPrefix}-connection-password`,
-            name: "roots-connection-password",
-            type: "password",
-            autoComplete: "new-password",
-            value: drafts.newPassword,
-            disabled: !editable,
-            placeholder: copy.rootsPasswordLabel,
-            onChange: (event) => actions.onDraftChange({ newPassword: fieldValue(event) })
-          })
-        }) : null,
-        Field({
-          htmlFor: `${idPrefix}-connection-port`,
-          label: copy.rootsPortLabel,
-          children: TextInput({
-            id: `${idPrefix}-connection-port`,
-            name: "roots-connection-port",
-            value: drafts.newPort,
-            disabled: !editable,
-            inputMode: "numeric",
-            size: "compact",
-            onChange: (event) => actions.onDraftChange({ newPort: fieldValue(event) })
-          })
-        }),
-        Button({ variant: "primary", type: "submit", disabled: !editable, children: copy.rootsSave })
-      )
+      "div",
+      { className: CLASS.block },
+      Button({ variant: "primary", disabled: !editable, onClick: () => actions.onOpenAddConnection(), children: copy.rootsAddConnection })
     ),
+    // 成功行留在页面上：保存成功后对话框会关闭，提示必须仍在用户眼前。
     renderFormSuccess(copy, state, "connection"),
-    renderFormNotice(copy, state, "connection"),
     // -- import from ~/.ssh/config (FR-2.1.4) --------------------------------
     // The button sits next to the add form because it is an alternative way to *create* a connection, and it
     // is disabled for the same reason every other control is (`canEdit`).
@@ -3218,17 +3387,16 @@ function RootsPanelSection({
       { className: CLASS.block },
       Button({ variant: "secondary", disabled: !editable, onClick: () => actions.onImportOpen(), children: copy.rootsImportOpen })
     ),
-    SshConfigImportDialog({ copy, state, actions, idPrefix }),
-    // -- remote files are reached through the conversation (audit 0085) -------
-    // There is no tree here, and no button that opens one. A file manager inside settings was the wrong
-    // artifact: it duplicated the agent's own access, wrote to the remote machine with no audit trail, and
-    // competed with the conversation as a second source of truth. The sentence says where the capability
-    // actually lives; the tools behind it (`@` a path, or asking for a listing) are the agent's.
-    (0, import_react5.createElement)("p", { className: CLASS.description }, copy.remoteFilesHint),
+    SshConfigImportDialog({ copy, state, actions, idPrefix, editable }),
+    // -- no file tree, no entry point (audit 0085) ---------------------------
+    // Settings used to carry a sentence pointing at the conversation. It was a signpost for a capability
+    // that deliberately has no UI; the decision still stands (remote files are the agent's), but the
+    // signpost is gone — the settings section is not the place to teach it.
     // -- transfer progress (FR-2.6.4) ----------------------------------------
     transfers ?? null,
     // -- edit one saved connection (a dialog, not a block in this page) -------
     editForm === null ? null : portal === void 0 ? editForm : portal.render(editForm, portal.container),
+    addForm === null ? null : portal === void 0 ? addForm : portal.render(addForm, portal.container),
     // -- the advanced root table (diagnostic) --------------------------------
     // This block used to be the section's headline content, which made it read as "the remote workspaces
     // list". It is not one: each row is a *root route*  -  a remote directory plus the local anchor the
@@ -3248,7 +3416,7 @@ function RootsPanelSection({
         void 0,
         (0, import_react5.createElement)("summary", { className: CLASS.blockTitle }, copy.rootsAdvancedSummary),
         (0, import_react5.createElement)("p", { className: CLASS.description }, copy.rootsAdvancedNote),
-        view.rows.length === 0 ? (0, import_react5.createElement)("p", { className: CLASS.empty }, copy.rootsEmpty) : (0, import_react5.createElement)("ul", { className: CLASS.list }, ...view.rows.map((row) => renderRow(row, copy, editable, actions.onRemove)))
+        view.rows.length === 0 ? (0, import_react5.createElement)("p", { className: CLASS.empty }, copy.rootsEmpty) : (0, import_react5.createElement)("ul", { className: CLASS.list }, ...rowElements)
       )
     )
   );
@@ -3257,6 +3425,16 @@ function RootsPanelContainer({ copy, controller }) {
   const state = (0, import_react5.useSyncExternalStore)(controller.subscribe, controller.getState);
   const uid = (0, import_react5.useId)();
   const idPrefix = `dsh-rw-${uid.replace(/[^A-Za-z0-9_-]/g, "")}`;
+  const view = (0, import_react5.useMemo)(
+    () => selectRootsViewForRender(state),
+    [state.snapshot, state.error, state.pending]
+  );
+  const editable = view.canEdit;
+  const sectionActions = (0, import_react5.useMemo)(() => rootsPanelSectionActions(controller), [controller]);
+  const rowElements = (0, import_react5.useMemo)(
+    () => rootsPanelRowElements(view, copy, editable, sectionActions.onRemove),
+    [view, copy, editable, sectionActions.onRemove]
+  );
   const [portal] = (0, import_react5.useState)(
     () => createCardPortal({
       document: browserPortalDocument(),
@@ -3273,23 +3451,27 @@ function RootsPanelContainer({ copy, controller }) {
     controller.surfaceAttached();
     return controller.surfaceDetached;
   }, [controller]);
-  useCardTabTrap(state.editingId !== void 0, portal.container);
+  const cardOpen = state.editingId !== void 0 || state.addingConnection === true;
+  useCardTabTrap(cardOpen, portal.container);
   (0, import_react5.useLayoutEffect)(() => {
-    if (state.editingId === void 0) return;
-    portal.mount();
-    portal.focusCard();
-    return () => {
-      portal.unmount();
-    };
-  }, [portal, state.editingId]);
-  const sectionActions = (0, import_react5.useMemo)(() => rootsPanelSectionActions(controller), [controller]);
+    if (!cardOpen) return;
+    return openRootsDialog(portal, browserPortalDocument());
+  }, [portal, cardOpen]);
+  const closeOpenDialog = state.editingId !== void 0 ? sectionActions.onCancelEdit : state.addingConnection === true ? sectionActions.onCloseAddConnection : void 0;
+  (0, import_react5.useEffect)(() => {
+    if (!cardOpen || closeOpenDialog === void 0) return;
+    return installRootsDialogEscape(browserPortalDocument(), closeOpenDialog);
+  }, [cardOpen, closeOpenDialog]);
   return RootsPanelSection({
     copy,
     state,
     idPrefix,
+    view,
+    rows: rowElements,
+    editable,
     // No `actions`: the transfer panel owns its own polling and its own buttons (the prop that used to be passed
     // here was typed `unknown` and never read — audit 2026-10-31 client.md §2.4).
-    transfers: (0, import_react5.createElement)(TransferProgressSection, { copy, state }),
+    transfers: (0, import_react5.createElement)(TransferProgressSection, { copy }),
     // The panel needs the connection list, which this section already read; it does not re-fetch it.
     actions: sectionActions,
     portal
@@ -3315,14 +3497,14 @@ function renderConnectionRow(row, actions) {
       "span",
       { className: CLASS.rowActions },
       row.test === void 0 || onTest === void 0 ? null : Button({
-        variant: "ghost",
+        variant: "secondary",
         size: "compact",
         // Disabled while its own probe runs: one honest click, and the label says what is happening.
         disabled: row.test.status === "running" || disabled === true,
         onClick: () => onTest(row.id),
         children: row.test.label
       }),
-      row.actions === void 0 || onEdit === void 0 ? null : Button({ variant: "ghost", size: "compact", disabled: disabled === true, onClick: () => onEdit(row.id), children: row.actions.editLabel }),
+      row.actions === void 0 || onEdit === void 0 ? null : Button({ variant: "secondary", size: "compact", disabled: disabled === true, onClick: () => onEdit(row.id), children: row.actions.editLabel }),
       row.actions === void 0 || onRemove === void 0 ? null : Button({ variant: "ghost", size: "compact", disabled: disabled === true, onClick: () => onRemove(row.id), children: row.actions.removeLabel })
     )
   );
@@ -3434,22 +3616,18 @@ function buildPanelModel(copy, options = {}) {
         acceptLabel: copy.rootsConfirmRemoveAccept,
         // The count is the reason this confirmation exists: deleting a connection silently takes its
         // remote roots with it (the host does that, and a row showing only `id · host` would not say so).
-        body: (row, remoteRoots) => resolveCopy(copy.rootsConfirmRemoveBody, { id: row.id, count: remoteRoots })
+        body: (row, remoteRoots) => resolveTemplate(copy.rootsConfirmRemoveBody, { id: row.id, count: remoteRoots })
       }
     }
   };
 }
-function resolveCopy(template, params) {
-  return template.replace(/\{(\w+)\}/g, (placeholder, name) => {
-    const value = params[name];
-    return value === void 0 ? placeholder : String(value);
-  });
-}
 
-// src/client/core/remote.ts
+// src/shared/remote-identity.ts
 var SSH_DEV_REMOTE_NAMESPACE = "sshdev";
-var SSH_DEV_REMOTE_METHOD = "connections";
 var SSH_DEV_REMOTE_SERVICE = "sshDevRemote";
+
+// src/client/core/remote.ts
+var SSH_DEV_REMOTE_METHOD = "connections";
 var SSH_DEV_REMOTE_PACKAGE = "dsh-over-ssh";
 var SSH_DEV_CONNECTIONS_DESCRIPTOR = {
   id: `${SSH_DEV_REMOTE_PACKAGE}#${SSH_DEV_REMOTE_NAMESPACE}/${SSH_DEV_REMOTE_METHOD}`,
@@ -3503,6 +3681,7 @@ function createConnectionTester(options) {
   const listeners = /* @__PURE__ */ new Set();
   let state = /* @__PURE__ */ new Map();
   let disposed = false;
+  const controllers = /* @__PURE__ */ new Map();
   const set = (id, next) => {
     if (disposed) return;
     const copy = new Map(state);
@@ -3534,15 +3713,21 @@ function createConnectionTester(options) {
   };
   const test = async (id) => {
     if (disposed) return;
+    controllers.get(id)?.abort();
+    const controller = new AbortController();
+    controllers.set(id, controller);
     set(id, { status: "running" });
-    const signal = typeof AbortSignal !== "undefined" && typeof AbortSignal.timeout === "function" ? AbortSignal.timeout(timeoutMs) : void 0;
+    const timeoutSignal = typeof AbortSignal !== "undefined" && typeof AbortSignal.timeout === "function" ? AbortSignal.timeout(timeoutMs) : void 0;
+    const signal = timeoutSignal === void 0 ? controller.signal : typeof AbortSignal.any === "function" ? AbortSignal.any([controller.signal, timeoutSignal]) : timeoutSignal;
+    const current = () => !disposed && controllers.get(id) === controller;
     try {
       const response = await options.fetchImpl(path, {
         method: "POST",
         headers: { "content-type": "application/json" },
         body: JSON.stringify({ action: "test-connection", id }),
-        ...signal === void 0 ? {} : { signal }
+        signal
       });
+      if (!current()) return;
       if (!response.ok) {
         set(id, {
           status: "failed",
@@ -3553,6 +3738,7 @@ function createConnectionTester(options) {
       }
       set(id, parse(await response.json()));
     } catch (error) {
+      if (!current()) return;
       if (isTimeout(error)) {
         set(id, {
           status: "failed",
@@ -3562,6 +3748,8 @@ function createConnectionTester(options) {
         return;
       }
       set(id, { status: "failed", code: "UNREACHABLE", message: error instanceof Error ? error.message : String(error) });
+    } finally {
+      if (controllers.get(id) === controller) controllers.delete(id);
     }
   };
   return {
@@ -3575,6 +3763,8 @@ function createConnectionTester(options) {
     },
     dispose: () => {
       disposed = true;
+      for (const controller of controllers.values()) controller.abort();
+      controllers.clear();
       listeners.clear();
     }
   };
@@ -3597,7 +3787,21 @@ function createLatestOnly() {
   };
 }
 
+// src/shared/path-fold.ts
+function foldPathKey(path) {
+  return path.replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase();
+}
+
 // src/client/session/session-panel.ts
+function unblockOrphanSubsessions(rows) {
+  const byId = new Map(rows.map((row) => [row.id, row]));
+  return rows.map((row) => {
+    if (row.classification !== "subsession" || row.blockedReason !== "subsession" || row.running) return row;
+    const parent = row.parentSessionId === void 0 ? void 0 : byId.get(row.parentSessionId);
+    if (parent !== void 0 && parent.classification !== "unreadable") return row;
+    return { ...row, deletable: true, blockedReason: void 0 };
+  });
+}
 function toSessionRowView(raw) {
   const id = raw["id"];
   if (typeof id !== "string" || id === "") return void 0;
@@ -3663,20 +3867,18 @@ function workspaceLabel(row) {
   return "";
 }
 function visibleSessions(rows) {
-  const present = new Set(rows.map((row) => row.id));
+  const byId = new Map(rows.map((row) => [row.id, row]));
   return rows.filter((row) => {
     if (row.classification !== "subsession") return true;
     if (row.parentSessionId === void 0) return true;
-    return !present.has(row.parentSessionId);
+    const parent = byId.get(row.parentSessionId);
+    return parent === void 0 || parent.classification === "unreadable";
   });
 }
-function hiddenSubsessionCount(rows) {
-  return rows.length - visibleSessions(rows).length;
-}
 function groupByWorkspace(rows) {
   const groups = /* @__PURE__ */ new Map();
   for (const row of rows) {
-    const key = row.cwd === void 0 || row.cwd === "" ? "" : row.cwd;
+    const key = row.cwd === void 0 || row.cwd === "" ? "" : foldPathKey(row.cwd);
     const existing = groups.get(key);
     if (existing === void 0) {
       groups.set(key, { label: workspaceLabel(row), cwd: row.cwd, sessions: [row] });
@@ -3714,26 +3916,31 @@ function parseSessionSnapshot(value) {
   if (body["ok"] !== true) return emptySnapshot();
   const available = body["available"] === true;
   const sessions = Array.isArray(body["sessions"]) ? body["sessions"].flatMap((raw) => typeof raw === "object" && raw !== null ? [toSessionRowView(raw)].filter((row) => row !== void 0) : []) : [];
+  const unblocked = unblockOrphanSubsessions(sessions);
   const bin = Array.isArray(body["bin"]) ? body["bin"].flatMap((raw) => typeof raw === "object" && raw !== null ? [toBinRowView(raw)].filter((row) => row !== void 0) : []) : [];
   const rawPolicy = typeof body["policy"] === "object" && body["policy"] !== null ? body["policy"] : {};
   const numberOr = (key) => typeof rawPolicy[key] === "number" && Number.isFinite(rawPolicy[key]) ? rawPolicy[key] : 0;
   return {
     available,
-    sessions,
+    sessions: unblocked,
     bin,
     policy: { maxEntries: numberOr("maxEntries"), maxBytes: numberOr("maxBytes"), maxAgeMs: numberOr("maxAgeMs") },
     totals: {
-      sessions: sessions.length,
-      bytes: sessions.reduce((sum, row) => sum + row.bytes, 0),
-      subsessions: sessions.filter((row) => row.classification === "subsession").length,
+      sessions: unblocked.length,
+      bytes: unblocked.reduce((sum, row) => sum + row.bytes, 0),
+      subsessions: unblocked.filter((row) => row.classification === "subsession").length,
       live: sessions.filter((row) => row.live).length,
       running: sessions.filter((row) => row.running).length
     }
   };
 }
-async function readSessionPanel(io) {
+async function readSessionPanel(io, signal) {
   try {
-    const response = await io.fetch(SESSION_API_PATH, { method: "GET", headers: { accept: "application/json" } });
+    const response = await io.fetch(SESSION_API_PATH, {
+      method: "GET",
+      headers: { accept: "application/json" },
+      ...signal === void 0 ? {} : { signal }
+    });
     if (!response.ok) return { ok: false, error: `http-${response.status}` };
     return { ok: true, snapshot: parseSessionSnapshot(await response.json()) };
   } catch (error) {
@@ -3765,10 +3972,16 @@ async function deleteSessions(io, ids, options = {}) {
   if (options.permanent === true) body["confirm"] = true;
   return postAction(io, body, (value) => {
     const recoverable = value["recoverable"] === true;
+    const refused = Array.isArray(value["refusals"]) ? value["refusals"].length : 0;
     const size = formatBytes(Number(value["bytes"] ?? 0));
-    if (options.permanent === true) return { key: "sessionResultDeletedPermanent", params: { size } };
+    if (refused > 0 && Number(value["bytes"] ?? 0) === 0) {
+      return { key: "sessionResultDeleteNone" };
+    }
+    if (options.permanent === true) {
+      return refused === 0 ? { key: "sessionResultDeletedPermanent", params: { size } } : { key: "sessionResultDeletedPermanentPartial", params: { size, refused } };
+    }
     if (!recoverable) return { key: "sessionResultDeleteNone" };
-    return { key: "sessionResultRecycled", params: { size } };
+    return refused === 0 ? { key: "sessionResultRecycled", params: { size } } : { key: "sessionResultRecycledPartial", params: { size, refused } };
   });
 }
 async function deleteWorkspaceSessions(io, cwd, options = {}) {
@@ -3780,10 +3993,12 @@ async function deleteWorkspaceSessions(io, cwd, options = {}) {
   };
   if (options.permanent === true) body["confirm"] = true;
   return postAction(io, body, (value) => {
-    const count = Number(value["matched"] ?? 0);
-    const size = formatBytes(Number(value["bytes"] ?? 0));
-    if (count === 0) return { key: "sessionResultWorkspaceEmpty" };
+    const matched = Number(value["matched"] ?? 0);
     const refused = Array.isArray(value["refusals"]) ? value["refusals"].length : 0;
+    const count = Math.max(0, matched - refused);
+    const size = formatBytes(Number(value["bytes"] ?? 0));
+    if (matched === 0) return { key: "sessionResultWorkspaceEmpty" };
+    if (count === 0) return { key: "sessionResultDeleteNone" };
     const params = refused === 0 ? { count, size } : { count, size, refused };
     if (options.permanent === true) {
       return { key: refused === 0 ? "sessionResultWorkspacePurged" : "sessionResultWorkspacePurgedRefused", params };
@@ -3799,10 +4014,14 @@ async function purgeSession(io, entryId) {
   if (entryId === "") return { kind: "error", message: { key: "sessionResultMissingEntryId" } };
   return postAction(io, { action: "purge", entryId, confirm: true }, () => ({ key: "sessionResultPurged" }));
 }
-async function sweepSessions(io) {
-  return postAction(io, { action: "sweep" }, (value) => {
+async function sweepSessions(io, options = {}) {
+  const body = { action: "sweep" };
+  if (options.confirm === true) body["confirm"] = true;
+  return postAction(io, body, (value) => {
     const purged = Array.isArray(value["purged"]) ? value["purged"].length : 0;
-    return purged === 0 ? { key: "sessionResultSweepNone" } : { key: "sessionResultSweepDone", params: { count: purged } };
+    const failed = Array.isArray(value["failed"]) ? value["failed"].length : 0;
+    if (purged === 0 && failed === 0) return { key: "sessionResultSweepNone" };
+    return failed === 0 ? { key: "sessionResultSweepDone", params: { count: purged } } : { key: "sessionResultSweepPartial", params: { count: purged, failed } };
   });
 }
 async function postAction(io, body, describe) {
@@ -3820,7 +4039,16 @@ async function postAction(io, body, describe) {
     };
   }
   if (!response.ok) return { kind: "error", message: await errorMessage(response), status: response.status };
-  const value = await response.json();
+  let value;
+  try {
+    const decoded = await response.json();
+    if (typeof decoded !== "object" || decoded === null || Array.isArray(decoded)) {
+      return { kind: "error", message: { key: "sessionResultActionFailed" }, status: response.status };
+    }
+    value = decoded;
+  } catch {
+    return { kind: "error", message: { key: "sessionResultActionFailed" }, status: response.status };
+  }
   if (value["ok"] !== true) {
     return {
       kind: "error",
@@ -3895,7 +4123,10 @@ function renderBinRow(props) {
     (0, import_react7.createElement)(
       "div",
       { className: CLASS.row },
-      (0, import_react7.createElement)("code", { className: CLASS.badge }, row.sessionId),
+      // 回收站条目以前只画完整 uuid，用户没法判断该还原/清除哪一条；宿主本来就带 title 与删除时间。
+      (0, import_react7.createElement)("code", { className: CLASS.badge }, shortId(row.sessionId)),
+      row.title === void 0 || row.title === "" ? null : (0, import_react7.createElement)("span", { className: CLASS.rowTitle, title: `movedBy: ${row.movedBy}` }, row.title),
+      (0, import_react7.createElement)("span", { className: CLASS.rowMeta }, formatStamp(row.deletedAtMs)),
       (0, import_react7.createElement)("span", { className: CLASS.rowMeta }, formatBytes(row.bytes)),
       (0, import_react7.createElement)(
         "span",
@@ -3979,54 +4210,84 @@ function SessionPanel({ copy, io, close }) {
   const [selected, setSelected] = (0, import_react7.useState)([]);
   const [outcome, setOutcome] = (0, import_react7.useState)(void 0);
   const [busy, setBusy] = (0, import_react7.useState)(false);
+  const busyRef = (0, import_react7.useRef)(false);
+  const markBusy = (0, import_react7.useCallback)((value) => {
+    busyRef.current = value;
+    setBusy(value);
+  }, []);
   const [pending, setPending] = (0, import_react7.useState)(void 0);
   const snapshot = phase.kind === "ready" ? phase.snapshot : EMPTY_SNAPSHOT;
   const [reads] = (0, import_react7.useState)(() => createLatestOnly());
+  const [actions] = (0, import_react7.useState)(() => createLatestOnly());
+  const [requests] = (0, import_react7.useState)(() => createAbortGate());
   const alive = (0, import_react7.useRef)(true);
   (0, import_react7.useEffect)(() => {
     alive.current = true;
     return () => {
       alive.current = false;
+      requests.abort();
     };
-  }, []);
+  }, [requests]);
   const refresh = (0, import_react7.useCallback)(async () => {
+    if (busyRef.current) return;
     const mine = reads.begin();
-    setBusy(true);
+    const signal = requests.begin();
+    markBusy(true);
     try {
-      const result = await readSessionPanel(io);
+      const result = await readSessionPanel(io, signal);
       if (!alive.current || !reads.isCurrent(mine)) return;
       setPhase(result.ok ? { kind: "ready", snapshot: result.snapshot } : { kind: "failed", error: result.error });
+      if (result.ok) {
+        const stillVisible = new Set(visibleSessions(result.snapshot.sessions).map((row) => row.id));
+        setSelected((previous) => previous.filter((id) => stillVisible.has(id)));
+      }
     } finally {
-      if (alive.current && reads.isCurrent(mine)) setBusy(false);
+      if (alive.current && reads.isCurrent(mine)) markBusy(false);
     }
-  }, [io, reads]);
+  }, [io, markBusy, reads, requests]);
+  const refreshRef = (0, import_react7.useRef)(refresh);
   (0, import_react7.useEffect)(() => {
-    void refresh();
+    refreshRef.current = refresh;
   }, [refresh]);
+  const mounted = (0, import_react7.useRef)(false);
+  (0, import_react7.useEffect)(() => {
+    if (mounted.current) return;
+    mounted.current = true;
+    void refreshRef.current();
+  }, []);
   const run = (0, import_react7.useCallback)(
     async (action) => {
+      if (busyRef.current) return;
       const mine = reads.begin();
-      setBusy(true);
+      const actionId = actions.begin();
+      const signal = requests.begin();
+      markBusy(true);
       try {
-        const result = await action();
-        if (!alive.current || !reads.isCurrent(mine)) return;
-        setOutcome(result);
+        let result;
+        try {
+          result = await action();
+        } catch {
+          result = { kind: "error", message: { key: "sessionResultActionFailed" } };
+        }
+        if (!alive.current) return;
+        if (actions.isCurrent(actionId)) setOutcome(result);
         setSelected([]);
         setPending(void 0);
-        const read = await readSessionPanel(io);
+        const read = await readSessionPanel(io, signal);
         if (!alive.current || !reads.isCurrent(mine)) return;
         setPhase(read.ok ? { kind: "ready", snapshot: read.snapshot } : { kind: "failed", error: read.error });
       } finally {
-        if (alive.current && reads.isCurrent(mine)) setBusy(false);
+        if (alive.current && actions.isCurrent(actionId)) markBusy(false);
       }
     },
-    [io, reads]
+    [actions, io, markBusy, reads, requests]
   );
   const visible = (0, import_react7.useMemo)(() => visibleSessions(snapshot.sessions), [snapshot.sessions]);
-  const hidden = hiddenSubsessionCount(snapshot.sessions);
+  const selectedSet = (0, import_react7.useMemo)(() => new Set(selected), [selected]);
+  const hidden = snapshot.sessions.length - visible.length;
   const deletable = (0, import_react7.useMemo)(
-    () => visible.filter((row) => row.deletable && selected.includes(row.id)),
-    [visible, selected]
+    () => visible.filter((row) => row.deletable && selectedSet.has(row.id)),
+    [visible, selectedSet]
   );
   const groups = (0, import_react7.useMemo)(() => groupByWorkspace(visible), [visible]);
   const toggle = (0, import_react7.useCallback)((id) => {
@@ -4037,6 +4298,7 @@ function SessionPanel({ copy, io, close }) {
     if (current === void 0) return;
     setPending(void 0);
     void run(() => {
+      if (current.kind === "sweep") return sweepSessions(io, { confirm: true });
       if (current.kind === "purge") return purgeSession(io, current.ids[0]);
       if (current.kind === "delete-workspace") return deleteWorkspaceSessions(io, current.cwd, { permanent: true });
       return deleteSessions(io, current.ids, { permanent: true });
@@ -4089,7 +4351,7 @@ function SessionPanel({ copy, io, close }) {
       (0, import_react7.createElement)(
         "div",
         { className: CLASS.headerActions },
-        Button({ variant: "secondary", size: "compact", onClick: () => void refresh(), children: copy.refresh }),
+        Button({ variant: "secondary", size: "compact", disabled: busy, onClick: () => void refresh(), children: copy.refresh }),
         Button({ variant: "secondary", size: "compact", onClick: close, children: copy.close })
       )
     ),
@@ -4180,7 +4442,7 @@ function SessionPanel({ copy, io, close }) {
         variant: "secondary",
         size: "compact",
         disabled: busy,
-        onClick: () => void run(() => sweepSessions(io)),
+        onClick: () => setPending({ kind: "sweep" }),
         children: copy.sweep
       })
     ),
@@ -4202,7 +4464,11 @@ function renderConfirmationDialog(pending, copy, handlers, titleId, loadedIdle =
         handlers.cancel();
       }
     },
-    (0, import_react7.createElement)("h3", { id: titleId, className: CLASS.dialogHeader }, copy.confirmTitle),
+    (0, import_react7.createElement)(
+      "h3",
+      { id: titleId, className: CLASS.dialogHeader },
+      pending.kind === "sweep" ? copy.sweepConfirmTitle : copy.confirmTitle
+    ),
     (0, import_react7.createElement)("p", { className: CLASS.dialogBody }, confirmationBody(pending, copy, loadedIdle)),
     (0, import_react7.createElement)(
       "div",
@@ -4217,6 +4483,7 @@ function workspaceDeleteAction(group) {
   return { kind: "delete-workspace", cwd: group.cwd };
 }
 function confirmationBody(pending, copy, loadedIdle = 0) {
+  if (pending.kind === "sweep") return copy.sweepConfirmBody;
   if (pending.kind === "delete-workspace") return copy.confirmWorkspaceBody(pending.cwd);
   const targets = pending.ids.join(", ");
   const sentence = pending.kind === "purge" ? copy.confirmPurgeBody(targets) : copy.confirmBody(targets);
@@ -4290,7 +4557,12 @@ function createSessionRowActionStore(deps) {
       return current !== void 0 && current.kind === request.kind && current.sessionId === request.sessionId;
     };
     dispatch({ ...state, busy: true, outcome: void 0 });
-    const result = await deleteSessions(deps.io, [request.sessionId], request.kind === "delete" ? { permanent: true } : {});
+    let result;
+    try {
+      result = await deleteSessions(deps.io, [request.sessionId], request.kind === "delete" ? { permanent: true } : {});
+    } catch {
+      result = { kind: "error", message: { key: "sessionResultActionFailed" } };
+    }
     if (disposed || !stillPending()) return;
     dispatch({ ...state, busy: false, outcome: result });
     if (result.kind === "ok") {
@@ -4557,7 +4829,6 @@ var import_react11 = require("react");
 
 // src/client/flows/directory-browser.ts
 var import_react10 = require("react");
-var GIT_STATUS_API_PATH = "/api/over-ssh/git-status";
 var GIT_STATUS_BADGE = {
   modified: "M",
   added: "A",
@@ -4598,11 +4869,12 @@ function postFailureReason(parsed, status, path) {
   const error = parsed?.["error"];
   return typeof error === "string" ? error : transportFailureReason(status, path);
 }
-async function postRootsJson(fetchImpl, path, body) {
+async function postRootsJson(fetchImpl, path, body, signal) {
   try {
     const response = await fetchImpl(path, {
       method: "POST",
       headers: { "content-type": "application/json" },
+      ...signal === void 0 ? {} : { signal },
       body: JSON.stringify(body)
     });
     let parsed;
@@ -4626,10 +4898,10 @@ function createDirectoryBrowserIo(options) {
     const result = await rootsApi.load();
     return result.ok ? { ok: true, value: result.value.connections } : { ok: false, error: result.error };
   };
-  const listLocal = async (target) => {
+  const listLocal = async (target, signal) => {
     const body = { action: "list-local" };
     if (target !== void 0 && target !== "") body["path"] = target;
-    const result = await postRootsJson(options.fetchImpl, path, body);
+    const result = await postRootsJson(options.fetchImpl, path, body, signal);
     if (!result.ok) return result;
     const answer = result.value;
     const answerPath = answer["path"];
@@ -4650,9 +4922,9 @@ function createDirectoryBrowserIo(options) {
     }
     return { ok: true, value: { path: answerPath, crumbs, entries, truncated: answer["truncated"] === true } };
   };
-  const listRemote = async (input) => {
+  const listRemote = async (input, signal) => {
     if (input.connectionId === "") return { ok: false, error: NO_CONNECTION_ERROR };
-    const result = await postRootsJson(options.fetchImpl, path, { action: "list-remote", connectionId: input.connectionId, path: input.path });
+    const result = await postRootsJson(options.fetchImpl, path, { action: "list-remote", connectionId: input.connectionId, path: input.path }, signal);
     if (!result.ok) return result;
     const raw = result.value["entries"];
     const entries = [];
@@ -4666,9 +4938,9 @@ function createDirectoryBrowserIo(options) {
     const answerPath = typeof result.value["path"] === "string" && result.value["path"] !== "" ? result.value["path"] : input.path;
     return { ok: true, value: { path: answerPath, entries, truncated: result.value["truncated"] === true } };
   };
-  const loadGitStatus = async (input) => {
+  const loadGitStatus = async (input, signal) => {
     if (input.connectionId === "" || input.path === "") return { ok: false, error: NO_CONNECTION_ERROR };
-    const result = await postRootsJson(options.fetchImpl, GIT_STATUS_API_PATH, { connectionId: input.connectionId, path: input.path });
+    const result = await postRootsJson(options.fetchImpl, GIT_STATUS_API_PATH, { connectionId: input.connectionId, path: input.path }, signal);
     if (!result.ok) return result;
     return { ok: true, value: parseGitStatusView(result.value) };
   };
@@ -4750,11 +5022,14 @@ function directoryBrowserReducer(state, action) {
         }))
       };
     case "git-loaded": {
-      if (action.view.available !== true) return { ...withoutOptional(state) };
+      if (action.view.available !== true) {
+        const { git: _drop, ...rest } = state;
+        return rest;
+      }
       const changes = {};
       for (const change of action.view.changes) changes[change.path] = change.status;
       return {
-        ...withoutOptional(state),
+        ...state,
         git: {
           root: action.view.root ?? "",
           directory: action.view.directory ?? "",
@@ -4827,6 +5102,13 @@ function createDirectoryBrowser(deps) {
   };
   const listeners = /* @__PURE__ */ new Set();
   let token = 0;
+  let inFlight;
+  const beginRequest = () => {
+    inFlight?.abort();
+    const controller = new AbortController();
+    inFlight = controller;
+    return controller.signal;
+  };
   let gitToken = 0;
   let disposed = false;
   const dispatch = (action) => {
@@ -4837,20 +5119,21 @@ function createDirectoryBrowser(deps) {
   };
   const current = (issued) => !disposed && issued === token;
   const currentGit = (issued) => !disposed && issued === gitToken;
-  const loadGit = async (connectionId, path) => {
+  const loadGit = async (connectionId, path, signal) => {
     const load = deps.io.loadGitStatus;
     if (load === void 0 || connectionId === "" || path === "") return;
     const issued = ++gitToken;
-    const result = await load({ connectionId, path });
+    const result = await load({ connectionId, path }, signal);
     if (!currentGit(issued)) return;
     if (!result.ok) return;
     dispatch({ type: "git-loaded", view: result.value });
   };
   const readLocal = async (path) => {
+    const signal = beginRequest();
     const issued = ++token;
     gitToken += 1;
     dispatch({ type: "target", path: path ?? "" });
-    const result = await deps.io.listLocal(path === void 0 || path === "" ? void 0 : path);
+    const result = await deps.io.listLocal(path === void 0 || path === "" ? void 0 : path, signal);
     if (!current(issued)) return;
     if (!result.ok) {
       dispatch({ type: "failed", error: result.error });
@@ -4859,29 +5142,37 @@ function createDirectoryBrowser(deps) {
     dispatch({ type: "local-loaded", listing: result.value });
   };
   const readRemote = async (connectionId, path) => {
+    const signal = beginRequest();
     const issued = ++token;
     gitToken += 1;
     dispatch({ type: "target", path });
-    const result = await deps.io.listRemote({ connectionId, path });
+    const result = await deps.io.listRemote({ connectionId, path }, signal);
     if (!current(issued)) return;
     if (!result.ok) {
       dispatch({ type: "failed", error: result.error });
       return;
     }
     dispatch({ type: "remote-loaded", path, listing: result.value });
-    void loadGit(connectionId, result.value.path);
+    void loadGit(connectionId, result.value.path, signal);
   };
+  let connectionsInFlight;
   const ensureConnections = async () => {
     if (state.connections.length > 0) return true;
-    if (state.connectionsPending) return false;
+    if (connectionsInFlight !== void 0) return connectionsInFlight;
     dispatch({ type: "connections-loading" });
-    const result = await deps.io.loadConnections();
-    if (!result.ok) {
-      dispatch({ type: "connections-failed", error: result.error });
-      return false;
-    }
-    dispatch({ type: "connections-loaded", connections: result.value });
-    return true;
+    const attempt = (async () => {
+      const result = await deps.io.loadConnections();
+      connectionsInFlight = void 0;
+      if (disposed) return false;
+      if (!result.ok) {
+        dispatch({ type: "connections-failed", error: result.error });
+        return false;
+      }
+      dispatch({ type: "connections-loaded", connections: result.value });
+      return true;
+    })();
+    connectionsInFlight = attempt;
+    return attempt;
   };
   const refresh = async (path) => {
     if (disposed) return;
@@ -4942,6 +5233,8 @@ function createDirectoryBrowser(deps) {
     },
     dispose: () => {
       disposed = true;
+      inFlight?.abort();
+      inFlight = void 0;
       listeners.clear();
     }
   };
@@ -5212,6 +5505,9 @@ function createSessionDirectoryIo(options) {
   const loadRoots = async (workspacePath, sessionId) => {
     const result = await rootsApi.load();
     if (!result.ok) return result;
+    if (result.value.warnings.includes("roots-invalid-answer")) {
+      return { ok: false, error: "roots-invalid-answer" };
+    }
     const all = result.value.roots;
     if (workspacePath === void 0 || workspacePath === "") return { ok: true, value: [] };
     return {
@@ -5338,15 +5634,26 @@ function selectSessionDirectoryView(state, copy) {
     workspaceLine: state.workspacePath === void 0 ? copy["sessionAddWorkspaceUnknown"] : resolveMessage2(copy, { key: "sessionAddWorkspace", params: { path: state.workspacePath } }),
     ...state.workspacePath === void 0 ? {} : { workspacePath: state.workspacePath },
     ...state.added === void 0 ? {} : { added: state.added },
-    roots: state.roots.map((row) => ({
-      key: row.key,
-      // A label is what the user called it; without one the path is the only honest title. A remote path alone
-      // would hide which host it is on, so the connection name is part of the title there.
-      title: row.label ?? (row.location === "remote" ? `${row.connectionId ?? ""}:${row.path}` : row.path),
-      subtitle: row.label === void 0 ? "" : row.path,
-      badge: row.location === "remote" ? copy["rootsBadgeRemote"] : copy["rootsBadgeLocal"],
-      removable: row.inUserFile
-    })),
+    // 工作区永远排在第一行：它是默认边界，`workspace-write` 下与已添加目录一样可写（ADR-0016）。
+    roots: [
+      ...state.workspacePath === void 0 ? [] : [{
+        key: `workspace:${state.workspacePath}`,
+        title: state.workspacePath,
+        subtitle: copy["sessionRootsWorkspaceNote"],
+        badge: copy["sessionRootsWorkspaceBadge"],
+        removable: false,
+        workspace: true
+      }],
+      ...state.roots.map((row) => ({
+        key: row.key,
+        // A label is what the user called it; without one the path is the only honest title. A remote path alone
+        // would hide which host it is on, so the connection name is part of the title there.
+        title: row.label ?? (row.location === "remote" ? `${row.connectionId ?? ""}:${row.path}` : row.path),
+        subtitle: row.label === void 0 ? "" : row.path,
+        badge: row.location === "remote" ? copy["rootsBadgeRemote"] : copy["rootsBadgeLocal"],
+        removable: row.inUserFile
+      }))
+    ],
     rootsPending: state.rootsPending,
     rootsReading: state.rootsReading,
     browsing: state.browsing
@@ -5390,6 +5697,10 @@ function createSessionDirectory(deps) {
       dispatch({ type: "roots-failed", reason: result.error });
       return;
     }
+    if (state.workspacePath !== workspacePath || state.sessionId !== sessionId) {
+      await refreshRoots();
+      return;
+    }
     dispatch({ type: "root-removed", key });
   };
   const commit = async (path, connectionId) => {
@@ -5508,7 +5819,7 @@ function SessionDirectorySection({
       { className: CLASS.block },
       (0, import_react11.createElement)("h4", { className: CLASS.blockTitle }, copy.sessionRootsTitle),
       (0, import_react11.createElement)("p", { className: CLASS.hint }, copy.sessionRootsHint),
-      view.roots.length === 0 ? view.rootsReading ? Notice({ role: "status", tone: "info", children: copy.sessionRootsLoading }) : (
+      view.roots.filter((row) => row.workspace !== true).length === 0 ? view.rootsReading ? Notice({ role: "status", tone: "info", children: copy.sessionRootsLoading }) : (
         // A failed read is not an empty list: the error notice below is the whole truth there, and
         // 「还没有添加目录」 next to it would contradict it (same rule as the import dialog, ui P2-2/P2-3).
         view.notice === "" ? (0, import_react11.createElement)("p", { className: CLASS.empty }, copy.sessionRootsEmpty) : null
@@ -5967,10 +6278,6 @@ function createWorkspaceDirectoryFlow(deps) {
     }
   };
 }
-function fieldValue2(event) {
-  const target = event.target;
-  return typeof target?.value === "string" ? target.value : "";
-}
 function WorkspaceDirectoryFlowSection({
   copy,
   state,
@@ -6113,7 +6420,7 @@ function WorkspaceDirectoryFlowSection({
                   value: state.drafts.path,
                   disabled: !canPickLocal2,
                   placeholder: copy.rootsRemotePathLabel,
-                  onChange: (event) => actions.onDraftChange({ path: fieldValue2(event) })
+                  onChange: (event) => actions.onDraftChange({ path: fieldValue(event) })
                 }),
                 Button({
                   variant: "secondary",
@@ -6272,6 +6579,8 @@ function apply(ctx) {
         subsessionBadge: dict.sessionPanelSubsession,
         unreadableBadge: dict.sessionPanelUnreadable,
         confirmTitle: dict.sessionPanelConfirmTitle,
+        sweepConfirmTitle: dict.sessionResultSweepConfirmTitle,
+        sweepConfirmBody: dict.sessionResultSweepConfirmBody,
         confirmBody: (targets) => resolveMessage2(dict, { key: "sessionPanelConfirmBody", params: { targets } }),
         confirmPurgeBody: (targets) => resolveMessage2(dict, { key: "sessionPanelConfirmPurgeBody", params: { targets } }),
         confirmCancel: dict.sessionPanelConfirmCancel,
@@ -6295,7 +6604,7 @@ function apply(ctx) {
       };
     };
     const io = { fetch: (input, init) => globalThis.fetch(input, init) };
-    return ctx.slots.inject(
+    const register = () => ctx.slots.inject(
       "settings.section",
       () => ctx.slots.register(
         {
@@ -6303,12 +6612,20 @@ function apply(ctx) {
           id: SESSION_SECTION_ID,
           order: SESSION_SECTION_ORDER,
           label: copy().title,
-          inject: () => ({ copy: copy(), io, close: () => {
-          } })
+          inject: () => ({ copy: copy(), io })
         },
         SessionPanel
       )
     );
+    let dispose = register();
+    const offLocaleChange = ctx.on("locale/change", () => {
+      dispose();
+      dispose = register();
+    });
+    return () => {
+      offLocaleChange();
+      dispose();
+    };
   });
   ctx.effect(() => {
     let rows;
@@ -6438,7 +6755,7 @@ function apply(ctx) {
     let lastOverlay = "";
     const overlayOf = () => {
       const state = rootsController.getState();
-      return `${state.editingId ?? ""}|${state.confirmingRemove ?? ""}|${state.pending ? "busy" : "idle"}`;
+      return `${state.editingId ?? ""}|${state.confirmingRemove ?? ""}`;
     };
     lastOverlay = overlayOf();
     const offSnapshot = rootsController.subscribe(() => {
@@ -6469,15 +6786,18 @@ function apply(ctx) {
     const api = createRootsApi((input, init) => globalThis.fetch(input, init));
     let ids = /* @__PURE__ */ new Set();
     let disposed = false;
+    const requests = createAbortGate();
     const dict = () => OVER_SSH_DICTS[ctx.locale.getLocale().active === "en" ? "en" : "zh"];
     const label = () => dict().rootsTitle;
     let loaded = false;
     let dispose = () => void 0;
     async function reload() {
+      const signal = requests.begin();
       try {
-        const [roots, sessions] = await Promise.all([api.load(), loadSessionPanel(io)]);
+        const [roots, sessions] = await Promise.all([api.load(signal), readSessionPanel(io, signal)]);
         if (disposed || !roots.ok) return;
-        const next = remoteSessionIds(sessions.sessions, roots.value.anchorRoot);
+        if (!sessions.ok || !sessions.snapshot.available) return;
+        const next = remoteSessionIds(sessions.snapshot.sessions, roots.value.anchorRoot);
         if (sameIds(next, ids)) return;
         ids = next;
         refresh();
@@ -6517,6 +6837,7 @@ function apply(ctx) {
     const offLocaleChange = ctx.on("locale/change", refresh);
     return () => {
       disposed = true;
+      requests.abort();
       doc?.removeEventListener("visibilitychange", onVisibility);
       offLocaleChange();
       dispose();