dsh-ssh-workbench 1.7.0 → 1.7.8

package/lib/client.js

@@ -83,6 +83,17 @@ window.__ModuleLoader__.load({
       'workbench.disabled': '已关闭',
       'workbench.sidebarLoadFailed': '读取侧边栏设置失败：{msg}',
       'workbench.sidebarSaveFailed': '保存失败：{msg}',
+      'workbench.writeTitle': '允许远程写入',
+      'workbench.writeHint': '开启后模型可以用 remote_write / remote_edit 修改远程文件。关闭时远程读取、remote_glob、remote_grep 仍然可用，写入会被明确拒绝。',
+      'workbench.writeOn': '已允许',
+      'workbench.writeOff': '已禁止',
+      'workbench.writeLoadFailed': '读取远程写入设置失败：{msg}',
+      'workbench.writeNeedRestart': '已保存，但当前运行的后端还不支持这个开关，重启 DSH 后生效。',
+      'workbench.hierarchyTitle': '系统文件浏览使用层级模式',
+      'workbench.hierarchyHint': '开启后右侧栏「工作区文件」改为带面包屑和向上导航的层级浏览器，只浏览当前会话目录；关闭时保持 DSH 原生文件页。',
+      'workbench.hierarchyOn': '层级模式',
+      'workbench.hierarchyOff': '原生模式',
+      'workbench.hierarchyLoadFailed': '读取系统文件浏览设置失败：{msg}',
       'workbench.saving': '保存中…',
       'workbench.saved': '已保存',
       'workbench.split': '拖动调整终端与文件宽度',
@@ -157,6 +168,10 @@ window.__ModuleLoader__.load({
       'panel.keyRequired': '密钥文件路径不能为空',
       'source.section': '纳管资源',
       'files.title': '远程文件',
+      'files.systemTitle': '工作区文件',
+      'files.systemDescription': '层级浏览当前会话目录',
+      'files.noSessionDir': '当前会话还没有工作目录',
+      'files.outsideRoot': '只能在当前会话目录内浏览',
       'files.up': '上一级',
       'files.refresh': '刷新',
       'files.empty': '目录为空',
@@ -171,8 +186,22 @@ window.__ModuleLoader__.load({
       'files.enterPath': '输入路径，回车跳转',
       'files.created': '已创建文件夹 {name}',
       'files.more': '更多操作',
+      'files.openFile': '打开',
+      'files.actionFailed': '操作失败：{message}',
       'files.downloadFile': '下载',
       'files.copyFile': '复制文件',
+      'files.openInApp': '在应用中打开',
+      'files.openInAppWith': '用 {app} 打开',
+      'files.openInAppMore': '选择其他应用打开',
+      'files.openInAppDefault': '{app}（默认）',
+      'files.search': '搜索文件',
+      'files.searchPlaceholder': '搜索文件名或路径',
+      'files.searchClear': '清空搜索',
+      'files.searching': '正在搜索…',
+      'files.searchFailed': '搜索失败，请稍后重试',
+      'files.searchEmpty': '没有匹配的文件',
+      'files.searchTruncated': '结果较多，只显示前面一部分',
+      'files.searchIncomplete': '搜索未完成，结果可能不全',
       'files.copyPathEntry': '复制路径',
       'files.rename': '重命名',
       'files.delete': '删除',
@@ -233,6 +262,17 @@ window.__ModuleLoader__.load({
       'files.sourceMode': '源码',
       'files.viewerLoading': '读取文件…',
       'files.viewerBinary': '二进制文件，暂不支持在线阅读',
+      'files.truncated': '已截断',
+      'files.viewerTruncated': '文件较大，这里只显示开头一部分。',
+      'files.viewerImageTruncated': '图片超过预览上限，无法完整显示；请下载后查看。',
+      'files.tableMode': '表格',
+      'files.imageMode': '图片',
+      'files.tableRows': '{n} 行 · {columns} 列',
+      'files.tableRowsPartial': '前 {n} 行 · {columns} 列',
+      'files.linesPartial': '前 {n} 行',
+      'files.tableTruncatedRows': '表格较大，只显示前 {rows} 行。',
+      'files.tableTruncatedColumns': '表格较宽，只显示前 {columns} 列。',
+      'files.tableTruncatedBoth': '表格较大，只显示前 {rows} 行、前 {columns} 列。',
       'files.viewerDirectory': '该条目是目录，无法预览',
       'files.viewerNoParams': '预览参数缺失，请从远程文件重新打开',
       'files.openUnavailable': '当前宿主不支持打开预览页签',
@@ -309,6 +349,17 @@ window.__ModuleLoader__.load({
       'workbench.disabled': 'Off',
       'workbench.sidebarLoadFailed': 'Failed to read sidebar settings: {msg}',
       'workbench.sidebarSaveFailed': 'Save failed: {msg}',
+      'workbench.writeTitle': 'Allow remote writes',
+      'workbench.writeHint': 'When on, the model can modify remote files with remote_write / remote_edit. When off, remote_read, remote_glob and remote_grep still work and writes are refused explicitly.',
+      'workbench.writeOn': 'Allowed',
+      'workbench.writeOff': 'Blocked',
+      'workbench.writeLoadFailed': 'Failed to read the remote write setting: {msg}',
+      'workbench.writeNeedRestart': 'Saved, but the running backend does not support this switch yet. Restart DSH to apply it.',
+      'workbench.hierarchyTitle': 'Hierarchical system file browser',
+      'workbench.hierarchyHint': 'Replaces the right-sidebar Workspace Files page with the breadcrumb-and-up hierarchy browser, limited to the current session directory. Off keeps the native DSH file page.',
+      'workbench.hierarchyOn': 'Hierarchical',
+      'workbench.hierarchyOff': 'Native',
+      'workbench.hierarchyLoadFailed': 'Could not read the system file browser setting: {msg}',
       'workbench.saving': 'Saving…',
       'workbench.saved': 'Saved',
       'workbench.split': 'Drag to resize the terminal and file panes',
@@ -383,6 +434,10 @@ window.__ModuleLoader__.load({
       'panel.keyRequired': 'Key file path is required',
       'source.section': 'Managed resources',
       'files.title': 'Remote files',
+      'files.systemTitle': 'Workspace files',
+      'files.systemDescription': 'Browse the current session directory hierarchically',
+      'files.noSessionDir': 'This session has no working directory yet',
+      'files.outsideRoot': 'Only the current session directory can be browsed',
       'files.up': 'Up',
       'files.refresh': 'Refresh',
       'files.empty': 'Empty directory',
@@ -397,8 +452,22 @@ window.__ModuleLoader__.load({
       'files.enterPath': 'Enter a path and press Enter',
       'files.created': 'Folder created: {name}',
       'files.more': 'More actions',
+      'files.openFile': 'Open',
+      'files.actionFailed': 'Action failed: {message}',
       'files.downloadFile': 'Download',
       'files.copyFile': 'Copy file',
+      'files.openInApp': 'Open in app',
+      'files.openInAppWith': 'Open with {app}',
+      'files.openInAppMore': 'Open with another app',
+      'files.openInAppDefault': '{app} (default)',
+      'files.search': 'Search files',
+      'files.searchPlaceholder': 'Search by name or path',
+      'files.searchClear': 'Clear search',
+      'files.searching': 'Searching…',
+      'files.searchFailed': 'Search failed, please try again',
+      'files.searchEmpty': 'No matching files',
+      'files.searchTruncated': 'Too many matches; only the first ones are shown',
+      'files.searchIncomplete': 'Search incomplete; results may be partial',
       'files.copyPathEntry': 'Copy path',
       'files.rename': 'Rename',
       'files.delete': 'Delete',
@@ -457,6 +526,17 @@ window.__ModuleLoader__.load({
       'files.sourceMode': 'Source',
       'files.viewerLoading': 'Reading file…',
       'files.viewerBinary': 'Binary file; inline reading is not available',
+      'files.truncated': 'Truncated',
+      'files.viewerTruncated': 'This file is large; only the beginning is shown.',
+      'files.viewerImageTruncated': 'This image is larger than the preview limit and cannot be shown in full; download it to view.',
+      'files.tableMode': 'Table',
+      'files.imageMode': 'Image',
+      'files.tableRows': '{n} rows · {columns} columns',
+      'files.tableRowsPartial': 'first {n} rows · {columns} columns',
+      'files.linesPartial': 'first {n} lines',
+      'files.tableTruncatedRows': 'This table is large; only the first {rows} rows are shown.',
+      'files.tableTruncatedColumns': 'This table is wide; only the first {columns} columns are shown.',
+      'files.tableTruncatedBoth': 'This table is large; only the first {rows} rows and {columns} columns are shown.',
       'files.viewerDirectory': 'This entry is a directory; it cannot be previewed',
       'files.viewerNoParams': 'Missing preview parameters; reopen from Remote files',
       'files.openUnavailable': 'This host cannot open preview tabs',
@@ -579,8 +659,14 @@ window.__ModuleLoader__.load({
     let composerBridge = null
     /** Client `sessions` service: gives the session-scoped ctx that owns composer events. */
     let sessionsService = null
+    /** Set while the sidebar tab service is available; toggled from the settings form. */
+    let systemFilesSync = null
     /** Owner client ctx, set in apply(); used by the composer target chip. */
     let clientCtx = null
+    /** Namespace service (`remote.session`) used to open Host-local paths in their app. */
+    let sessionRemote = null
+    /** Namespace service (`remote.workspaceFiles`) used by the local files search. */
+    let workspaceFilesRemote = null
 
 
     /** The open conversation's session id, exposed on the chat region for a11y/debugging. */
@@ -917,6 +1003,17 @@ window.__ModuleLoader__.load({
         '.dsh-ssh-workbench-files-split button:hover{background:var(--dsw-alias-interactive-bg-hover)}',
         '.dsh-ssh-workbench-files-split button:focus-visible{outline:var(--dsw-focus-ring-width) solid var(--dsw-focus-ring-color,var(--dsw-alias-state-business-primary));outline-offset:-1px}',
         '.dsh-ssh-workbench-files-split svg{width:14px;height:14px}',
+        '.dsh-ssh-workbench-files-search{box-sizing:border-box;height:42px;padding:8px 8px 4px;flex:none}',
+        '.dsh-ssh-workbench-files-search-field{display:flex;gap:2px;align-items:center;height:100%;padding:0 2px;background:var(--dsw-alias-bg-layer-1);border:.5px solid var(--dsw-alias-border-l4);border-radius:var(--dsw-radius-md)}',
+        '.dsh-ssh-workbench-files-search-field:focus-within{border-color:var(--dsw-alias-state-business-primary)}',
+        '.dsh-ssh-workbench-files-search-glyph{display:inline-flex;flex:none;width:24px;height:24px;align-items:center;justify-content:center;color:var(--dsw-alias-label-tertiary);padding:4px}',
+        '.dsh-ssh-workbench-files-search-glyph svg{width:14px;height:14px}',
+        '.dsh-ssh-workbench-files-search-input{flex:1 1 auto;min-width:0;padding:0 4px;color:var(--dsw-alias-label-primary);background:0 0;border:0;outline:0;font:inherit}',
+        '.dsh-ssh-workbench-files-search-clear{display:inline-flex;flex:none;width:24px;height:24px;padding:4px;align-items:center;justify-content:center;color:var(--dsw-alias-label-tertiary);background:0 0;border:0;border-radius:var(--dsw-radius-sm);cursor:pointer}',
+        '.dsh-ssh-workbench-files-search-clear:hover{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}',
+        '.dsh-ssh-workbench-files-search-clear svg{width:14px;height:14px}',
+        '.dsh-ssh-workbench-files-search-dir{flex:none;max-width:45%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:var(--dsw-alias-label-tertiary);font-size:12px}',
+        '.dsh-ssh-workbench-files-search-note{padding:6px 10px;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:18px}',
         '.dsh-ssh-workbench-tool-row{box-sizing:border-box;display:flex;align-items:center;width:100%;min-width:0;height:calc(24px + var(--dsh-content-font-delta,0px));padding:0;border:0;background:0 0;color:var(--dsw-alias-label-tertiary);font:inherit;text-align:left;cursor:pointer;transition:color .1s}',
         '.dsh-ssh-workbench-tool-row:disabled{cursor:default}',
         '.dsh-ssh-workbench-tool-row:hover:not(:disabled){color:var(--dsw-alias-label-secondary)}',
@@ -2209,9 +2306,24 @@ window.__ModuleLoader__.load({
 
     const FILES_IMAGE_TYPES = {
       png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', gif: 'image/gif',
-      webp: 'image/webp', bmp: 'image/bmp', ico: 'image/x-icon',
+      webp: 'image/webp', bmp: 'image/bmp', ico: 'image/x-icon', svg: 'image/svg+xml',
     }
 
+    /** Delimited text rendered as a grid; the value is the field separator. */
+    const FILES_TABLE_TYPES = { csv: ',', tsv: '\t' }
+    const FILES_TABLE_MAX_ROWS = 500
+    const FILES_TABLE_MAX_COLUMNS = 40
+
+    /**
+     * The exclusion list DSH's own workspace search ships with. The rules are
+     * literal names/paths, so the local page keeps the same results as the
+     * native files page instead of searching `node_modules` or `.git`.
+     */
+    const FILES_SEARCH_EXCLUDED = [
+      '.git', '.hg', '.next', '.pnpm-store', '.svn', '.turbo', '.yarn', 'build', 'coverage', 'dist', 'node_modules',
+      '.DS_Store', '.Spotlight-V100', '.Trashes', '.fseventsd', 'Thumbs.db', 'desktop.ini', '$RECYCLE.BIN', 'System Volume Information',
+    ]
+
     function filesExtension(name) {
       const text = String(name || '')
       const dot = text.lastIndexOf('.')
@@ -2285,6 +2397,15 @@ window.__ModuleLoader__.load({
       return bytes
     }
 
+    /** Decode a UTF-8 payload from base64; used to show SVG source as text. */
+    function decodeBase64Text(base64) {
+      try {
+        return new TextDecoder('utf-8', { fatal: false }).decode(filesBase64ToBytes(base64))
+      } catch {
+        return ''
+      }
+    }
+
     function filesLoadTransferRecords() {
       try {
         const raw = window.localStorage.getItem(FILES_TRANSFER_STORAGE_KEY)
@@ -2438,6 +2559,75 @@ window.__ModuleLoader__.load({
       return { body: source.slice(match[0].length), source: match[1] }
     }
 
+    /**
+     * Split delimited text into rows and cells. Handles quoted fields (with
+     * doubled quotes and embedded newlines), CRLF, and a trailing newline. The
+     * reader is bounded so a pathological file cannot stall the renderer.
+     */
+    function parseDelimitedTable(source, separator) {
+      const text = String(source || '').replace(/^\uFEFF/, '')
+      const rows = []
+      let row = []
+      let cell = ''
+      let quoted = false
+      let index = 0
+      const pushCell = () => { row.push(cell); cell = '' }
+      const pushRow = () => {
+        pushCell()
+        rows.push(row)
+        row = []
+        return rows.length <= FILES_TABLE_MAX_ROWS
+      }
+      while (index < text.length) {
+        const char = text[index]
+        if (quoted) {
+          if (char === '"') {
+            if (text[index + 1] === '"') { cell += '"'; index += 2; continue }
+            quoted = false
+            index += 1
+            continue
+          }
+          cell += char
+          index += 1
+          continue
+        }
+        if (char === '"' && cell === '') { quoted = true; index += 1; continue }
+        if (char === separator) { pushCell(); index += 1; continue }
+        if (char === '\r') { index += 1; continue }
+        if (char === '\n') {
+          if (!pushRow()) return { rows, truncated: true }
+          index += 1
+          continue
+        }
+        cell += char
+        index += 1
+      }
+      if (cell !== '' || row.length > 0) pushRow()
+      return { rows, truncated: rows.length > FILES_TABLE_MAX_ROWS }
+    }
+
+    /** Present a parsed table: header row plus a bounded body for rendering. */
+    function buildDelimitedTable(source, separator) {
+      const parsed = parseDelimitedTable(source, separator)
+      const rows = parsed.rows
+      if (rows.length === 0) return null
+      const columnCount = Math.min(FILES_TABLE_MAX_COLUMNS, rows.reduce((max, cells) => Math.max(max, cells.length), 0))
+      const visible = rows.length > FILES_TABLE_MAX_ROWS ? rows.slice(0, FILES_TABLE_MAX_ROWS) : rows
+      const rowsTruncated = parsed.truncated || rows.length > visible.length
+      const columnsTruncated = rows.some((cells) => cells.length > columnCount)
+      return {
+        header: visible[0].slice(0, columnCount),
+        body: visible.slice(1).map((cells) => cells.slice(0, columnCount)),
+        columnCount,
+        rowCount: rows.length,
+        /** Data rows, i.e. everything after the header line. */
+        dataRowCount: Math.max(0, rows.length - 1),
+        rowsTruncated,
+        columnsTruncated,
+        truncated: rowsTruncated || columnsTruncated,
+      }
+    }
+
     /** Read the opener's navigation params from a tab's framework information. */
     function tabParamsOf(info) {
       if (!info || !info.tab) return undefined
@@ -2466,6 +2656,8 @@ window.__ModuleLoader__.load({
       const [meta, setMeta] = useState(null)
       const [wrap, setWrap] = useState(true)
       const [markdownSource, setMarkdownSource] = useState(false)
+      const [tableSource, setTableSource] = useState(false)
+      const [imageSource, setImageSource] = useState(false)
       /** Workbench preview passes onClose; the sidebar preview tab does not. */
       const onClose = typeof props.onClose === 'function' ? props.onClose : null
 
@@ -2480,8 +2672,14 @@ window.__ModuleLoader__.load({
             const body = await post('/sftp/read', { ref: server, path, base64: true, maxBytes: 5 * 1024 * 1024 })
             const result = body.result || {}
             setMeta({ size: result.size, truncated: result.truncated === true })
-            if (result.base64) { setImageUrl(`data:${mime};base64,${result.base64}`); setBinary(false); setContent('') }
-            else { setBinary(true); setContent(''); setError(t('files.viewerBinary')) }
+            if (result.base64) {
+              setImageUrl(`data:${mime};base64,${result.base64}`)
+              setBinary(false)
+              // SVG is text, so keep its source available for the source view;
+              // raster payloads are never decoded into text.
+              setContent(filesExtension(name) === 'svg' ? decodeBase64Text(result.base64) : '')
+              setImageSource(false)
+            } else { setBinary(true); setContent(''); setError(t('files.viewerBinary')) }
           } else {
             const body = await post('/sftp/read', { ref: server, path, maxBytes: 1024 * 1024 })
             const result = body.result || {}
@@ -2506,6 +2704,17 @@ window.__ModuleLoader__.load({
       const lines = content ? content.split('\n') : []
       const extension = filesExtension(name)
       const isMarkdown = FILES_MARKDOWN_EXTENSIONS.includes(extension)
+      const tableSeparator = FILES_TABLE_TYPES[extension]
+      const isTable = Boolean(tableSeparator) && !binary && Boolean(content)
+      const table = isTable && !tableSource ? buildDelimitedTable(content, tableSeparator) : null
+      const isTextImage = extension === 'svg'
+      const showImage = Boolean(imageUrl) && !(isTextImage && imageSource)
+      const byteTruncated = meta && meta.truncated === true
+      const truncatedHint = byteTruncated
+        ? tr('files.viewerTruncated', '文件较大，这里只显示开头一部分。')
+        : ''
+      /** A clipped bitmap/svg payload cannot be decoded, so say so instead of rendering a broken image. */
+      const imageTruncated = showImage && byteTruncated
       const MarkdownText = primitives && primitives.MarkdownText
       const CodeBlock = primitives && primitives.CodeBlock
       const markdownLabels = {
@@ -2540,13 +2749,31 @@ window.__ModuleLoader__.load({
             style: { flex: 1, minWidth: 0, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap', fontSize: 13 },
           }, name),
           meta && meta.size != null ? h('span', { style: { ...panelUi.fieldLabel, flexShrink: 0 } }, filesFormatBytes(meta.size)) : null,
+          byteTruncated
+            ? h('span', {
+                title: truncatedHint,
+                style: { ...panelUi.fieldLabel, flexShrink: 0, color: 'var(--dsw-alias-state-warning-primary, inherit)' },
+              }, t('files.truncated'))
+            : null,
           isMarkdown && !binary && !imageUrl && MarkdownText
             ? h('button', {
                 className: 'dsh-ssh-workbench-button dsh-ssh-workbench-button-ghost', style: { ...panelUi.ghostButton, flexShrink: 0 },
                 onClick: () => setMarkdownSource((value) => !value),
               }, markdownSource ? t('files.previewMode') : t('files.sourceMode'))
             : null,
-          !isMarkdown && !binary && !imageUrl ? toolbar(wrap ? t('files.unwrap') : t('files.wrap'), icon(12, [h('line', { x1: 3, y1: 6, x2: 21, y2: 6 }), h('line', { x1: 3, y1: 12, x2: 21, y2: 12 }), h('line', { x1: 3, y1: 18, x2: 15, y2: 18 })]), () => setWrap((value) => !value)) : null,
+          isTable
+            ? h('button', {
+                className: 'dsh-ssh-workbench-button dsh-ssh-workbench-button-ghost', style: { ...panelUi.ghostButton, flexShrink: 0 },
+                onClick: () => setTableSource((value) => !value),
+              }, tableSource ? t('files.tableMode') : t('files.sourceMode'))
+            : null,
+          isTextImage && imageUrl
+            ? h('button', {
+                className: 'dsh-ssh-workbench-button dsh-ssh-workbench-button-ghost', style: { ...panelUi.ghostButton, flexShrink: 0 },
+                onClick: () => setImageSource((value) => !value),
+              }, imageSource ? t('files.imageMode') : t('files.sourceMode'))
+            : null,
+          !isMarkdown && !binary && !showImage && !table ? toolbar(wrap ? t('files.unwrap') : t('files.wrap'), icon(12, [h('line', { x1: 3, y1: 6, x2: 21, y2: 6 }), h('line', { x1: 3, y1: 12, x2: 21, y2: 12 }), h('line', { x1: 3, y1: 18, x2: 15, y2: 18 })]), () => setWrap((value) => !value)) : null,
           toolbar(t('files.refresh'), refreshingIcon(), load),
           onClose
             ? toolbar(t('common.close'), icon(12, [h('path', { d: 'M18 6L6 18' }), h('path', { d: 'M6 6l12 12' })]), onClose)
@@ -2555,9 +2782,58 @@ window.__ModuleLoader__.load({
         h('div', { style: { flex: 1, minHeight: 0, overflow: 'auto', background: 'transparent' } },
           loading ? h('div', { style: { padding: '24px 12px', color: 'var(--dsw-alias-label-tertiary, inherit)' } }, t('files.viewerLoading')) : null,
           error ? h('div', { role: 'alert', style: { padding: '18px 12px', color: 'var(--dsw-alias-state-error-primary)' } }, error) : null,
-          imageUrl ? h('div', { style: { padding: 12, display: 'flex', justifyContent: 'center' } }, h('img', { src: imageUrl, alt: name, style: { maxWidth: '100%', maxHeight: '100%', objectFit: 'contain' } })) : null,
-          !loading && !error && !imageUrl && !binary
-            ? (isMarkdown && !markdownSource && MarkdownText != null
+          imageTruncated
+            ? h('div', { style: { padding: '18px 14px', color: 'var(--dsw-alias-label-secondary, inherit)' } }, tr('files.viewerImageTruncated', '图片超过预览上限，无法完整显示；请下载后查看。'))
+            : showImage
+              ? h('div', { style: { padding: 12, display: 'flex', justifyContent: 'center' } }, h('img', { src: imageUrl, alt: name, style: { maxWidth: '100%', maxHeight: '100%', objectFit: 'contain' } }))
+              : null,
+          !loading && !error && !imageTruncated && !showImage && !binary
+            ? (table
+                ? h('div', { style: { padding: 12, overflow: 'auto' }, 'data-sdh-table-preview': path },
+                    h('table', {
+                      style: {
+                        borderCollapse: 'collapse', fontSize: 'var(--dsh-code-font-size, 12px)',
+                        fontFamily: 'var(--ds-font-family-code)', width: '100%',
+                      },
+                    },
+                      h('thead', null,
+                        h('tr', null, table.header.map((cell, index) => h('th', {
+                          key: index,
+                          style: {
+                            textAlign: 'left', fontWeight: 500, whiteSpace: 'nowrap', padding: '4px 10px',
+                            borderBottom: '0.5px solid var(--dsw-alias-border-l2, #ddd)',
+                            color: 'var(--dsw-alias-label-primary, inherit)',
+                            position: 'sticky', top: 0, background: 'var(--dsw-specific-menu, transparent)',
+                          },
+                        }, cell))),
+                      ),
+                      h('tbody', null,
+                        table.body.map((cells, rowIndex) => h('tr', { key: rowIndex },
+                          cells.map((cell, cellIndex) => h('td', {
+                            key: cellIndex,
+                            style: {
+                              padding: '3px 10px', whiteSpace: 'nowrap', maxWidth: 320, overflow: 'hidden',
+                              textOverflow: 'ellipsis', borderBottom: '0.5px solid var(--dsw-alias-border-l3, #eee)',
+                              color: 'var(--dsw-alias-label-secondary, inherit)',
+                            },
+                          }, cell))),
+                        ),
+                      ),
+                    ),
+                    table.truncated
+                      ? h('div', { style: { paddingTop: 8, ...panelUi.fieldLabel } },
+                          table.rowsTruncated && table.columnsTruncated
+                            ? tr('files.tableTruncatedBoth', '表格较大，只显示前 {rows} 行、前 {columns} 列。')
+                                .replace('{rows}', String(FILES_TABLE_MAX_ROWS))
+                                .replace('{columns}', String(FILES_TABLE_MAX_COLUMNS))
+                            : table.rowsTruncated
+                              ? tr('files.tableTruncatedRows', '表格较大，只显示前 {rows} 行。')
+                                  .replace('{rows}', String(FILES_TABLE_MAX_ROWS))
+                              : tr('files.tableTruncatedColumns', '表格较宽，只显示前 {columns} 列。')
+                                  .replace('{columns}', String(FILES_TABLE_MAX_COLUMNS)))
+                      : null,
+                  )
+                : isMarkdown && !markdownSource && MarkdownText != null
                 ? h('div', {
                     style: { padding: '12px 16px', fontSize: 'var(--dsh-content-font-size, 14px)', lineHeight: 1.6, color: 'var(--dsw-alias-label-primary, inherit)' },
                     'data-sdh-markdown-preview': '',
@@ -2603,7 +2879,20 @@ window.__ModuleLoader__.load({
           },
         },
           h('span', { style: { flex: 1, minWidth: 0, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' } }, path),
-          h('span', { style: { flexShrink: 0 } }, tr('files.lines', '{n} 行').replace('{n}', String(lines.length))),
+          // A clipped image has no meaningful line count, so the footer stays bare.
+          imageTruncated
+            ? null
+            : h('span', { style: { flexShrink: 0 } }, table
+              ? (byteTruncated
+                  ? tr('files.tableRowsPartial', '前 {n} 行 · {columns} 列')
+                      .replace('{n}', String(table.dataRowCount))
+                      .replace('{columns}', String(table.columnCount))
+                  : tr('files.tableRows', '{n} 行 · {columns} 列')
+                      .replace('{n}', String(table.dataRowCount))
+                      .replace('{columns}', String(table.columnCount)))
+              : truncatedHint
+                ? tr('files.linesPartial', '前 {n} 行').replace('{n}', String(lines.length))
+                : tr('files.lines', '{n} 行').replace('{n}', String(lines.length))),
         ),
       )
     }
@@ -2648,6 +2937,10 @@ window.__ModuleLoader__.load({
     const iconArrowLeft = () => icon(14, [h('line', { x1: 19, y1: 12, x2: 5, y2: 12 }), h('polyline', { points: '12 5 5 12 12 19' })])
     const iconHome = () => icon(14, [h('path', { d: 'M4 10.5 12 4l8 6.5' }), h('path', { d: 'M6.5 9.5V20h11V9.5' })])
     const iconArrowUp16 = () => icon(16, [h('line', { x1: 12, y1: 19, x2: 12, y2: 5 }), h('polyline', { points: '5 12 12 5 19 12' })])
+    const iconRightUp = () => icon(14, [
+      h('path', { d: 'M8 17 17 8' }),
+      h('polyline', { points: '9.5 8 17 8 17 15.5' }),
+    ])
     const iconMore = () => icon(14, [
       h('circle', { cx: 5, cy: 12, r: 1.4, fill: 'currentColor', stroke: 'none' }),
       h('circle', { cx: 12, cy: 12, r: 1.4, fill: 'currentColor', stroke: 'none' }),
@@ -2673,6 +2966,93 @@ window.__ModuleLoader__.load({
 
     let filesPendingConflictResolve = null
 
+    /**
+     * Hand one Host-local path to the OS: `open` starts the associated app and
+     * `reveal` shows it in Finder/Explorer. Only paths the Host can map back to
+     * its own filesystem work, so callers must gate this to local browsing.
+     */
+    async function openHostPath(path, action = 'open') {
+      if (typeof path !== 'string' || !path) return false
+      const session = sessionRemote
+      if (!session || typeof session.openWorkspacePath !== 'function') return false
+      try {
+        const result = action === 'reveal'
+          ? await session.openWorkspacePath({ path, action: 'reveal' })
+          : await session.openWorkspacePath({ path })
+        return Boolean(result && result.ok)
+      } catch {
+        return false
+      }
+    }
+
+    /**
+     * List the apps the Host would use for one path: the same call the official
+     * "open in app" split button makes, so the menu matches DSH exactly.
+     */
+    async function loadHostApplications(path) {
+      const session = sessionRemote
+      if (!session || typeof session.workspacePathApplications !== 'function') return []
+      try {
+        const result = await session.workspacePathApplications({ path })
+        if (!result || result.ok !== true || !Array.isArray(result.value)) return []
+        return result.value.filter((item) => item && typeof item.id === 'string' && typeof item.name === 'string')
+      } catch {
+        return []
+      }
+    }
+
+    /**
+     * Workspace-wide search backed by the Host's ripgrep pass. Matches are
+     * `/`-joined paths relative to the session workspace root.
+     */
+    async function searchHostWorkspace(sessionId, request) {
+      const files = workspaceFilesRemote
+      if (!files || typeof files.search !== 'function') return null
+      try {
+        const result = await files.search(sessionId, request)
+        if (!result || result.ok !== true) return null
+        return result.value || null
+      } catch {
+        return null
+      }
+    }
+
+    /**
+     * Native file rows expose the official `contextMenu` target family, so the
+     * DSH context menu service resolves our actions the same way it resolves
+     * workspace and document-preview files. The captured value carries only
+     * JSON-safe row facts plus the id of the live panel that owns the handlers.
+     */
+    const FILES_MENU_TARGET = `${NS}.file`
+    let filesMenuSeq = 0
+    /** Panel id → mutable box `{ menuActions }` filled on every render. */
+    const filesMenuPanels = new Map()
+
+    function filesMenuEntryOf(value) {
+      if (value == null || typeof value !== 'object') return null
+      const path = typeof value.path === 'string' ? value.path : ''
+      if (!path) return null
+      return {
+        path,
+        name: typeof value.name === 'string' ? value.name : baseNameOf(path),
+        type: value.type === 'dir' ? 'dir' : 'file',
+        size: Number.isFinite(value.size) ? value.size : 0,
+      }
+    }
+
+    /** Build the menu actions for one captured row from its live panel. */
+    function resolveFilesMenuActions(value) {
+      const panelId = value && typeof value.panel === 'string' ? value.panel : ''
+      // The map stores the box itself, so the handlers sit directly on it.
+      const box = panelId ? filesMenuPanels.get(panelId) : null
+      if (!box || typeof box.menuActions !== 'function') return []
+      try {
+        return box.menuActions(value) || []
+      } catch {
+        return []
+      }
+    }
+
     function RemoteFilesPanel(props) {
       // Hierarchical browser (Luminax `remote-file-tree` behaviour) rendered in
       // the native Files chrome: one directory per view, breadcrumb navigation,
@@ -2687,6 +3067,21 @@ window.__ModuleLoader__.load({
       const initialPath = typeof props.initialPath === 'string' && props.initialPath ? props.initialPath : '/'
       const navRoot = typeof props.rootPath === 'string' && props.rootPath ? props.rootPath : '/'
       const rootLabel = typeof props.rootLabel === 'string' && props.rootLabel ? props.rootLabel : (navRoot === '/' ? '/' : navRoot)
+      const lockRoot = props.lockRoot === true
+      /**
+       * Local hierarchy page: it browses the Host's own disk, so uploads, new
+       * folders and the transfer log — which exist for slow remote copies —
+       * only add noise. The page keeps navigation, refresh, hidden files and
+       * gains "open in app" instead.
+       */
+      const localChrome = localMode && props.openNative === true
+      const withinRoot = (value) => {
+        const normalize = (input) => String(input || '/').replace(/[\\/]+/g, '/').replace(/\/+$/, '') || '/'
+        const root = normalize(navRoot)
+        const next = normalize(value)
+        if (root === '/') return next.startsWith('/')
+        return next === root || next.startsWith(`${root}/`)
+      }
       const [servers, setServers] = useState([])
       const [server, setServer] = useState(localMode ? (controlledServer ?? '__local__') : (controlledServer ?? ''))
       const [dir, setDir] = useState(initialPath)
@@ -2712,11 +3107,34 @@ window.__ModuleLoader__.load({
       const [showHidden, setShowHidden] = useState(() => {
         try { return window.localStorage.getItem('dsh-ssh-workbench.files.showHidden') === '1' } catch { return false }
       })
+      /** Local hierarchy page only: workspace-wide search driven by ripgrep on the Host. */
+      const [searchOpen, setSearchOpen] = useState(false)
+      const [query, setQuery] = useState('')
+      const [searchState, setSearchState] = useState(null)
+      const searchSeqRef = useRef(0)
+      /** Local hierarchy page only: the Host's own app list for "open in app". */
+      const [hostApps, setHostApps] = useState(null)
+      const [appsOpen, setAppsOpen] = useState(false)
       const Menu = primitives && primitives.Menu
       const ChevronIcon = primitives && primitives.IconChevronDownOutlineRegular
       const RefreshIcon = primitives && primitives.IconRefreshOutlineRegular
       /** Newest directory request wins; older responses are discarded (M8/R2). */
       const loadSeqRef = useRef(0)
+      /**
+       * The official context menu resolves rows by target value, so each panel
+       * publishes its handlers under a stable id while it is mounted.
+       */
+      const panelIdRef = useRef('')
+      if (!panelIdRef.current) panelIdRef.current = `files-${++filesMenuSeq}`
+      const menuBoxRef = useRef({ menuActions: null })
+      // Publish during render so an already-open menu sees fresh handlers, and
+      // re-publish from the effect because StrictMode unmounts once on mount.
+      filesMenuPanels.set(panelIdRef.current, menuBoxRef.current)
+      useEffect(() => {
+        const id = panelIdRef.current
+        filesMenuPanels.set(id, menuBoxRef.current)
+        return () => { filesMenuPanels.delete(id) }
+      }, [])
 
       useEffect(() => {
         if (localMode) {
@@ -2781,9 +3199,62 @@ window.__ModuleLoader__.load({
         void loadDir(server, dir)
       }, [server, dir, loadDir])
 
+      // Local hierarchy page: the Host's own app list, so "open in app" can
+      // offer the same menu as DSH's native split button.
+      useEffect(() => {
+        if (!localChrome) return undefined
+        let live = true
+        void loadHostApplications(dir).then((list) => { if (live) setHostApps(list) })
+        return () => { live = false }
+      }, [localChrome, dir])
+
+      // Local hierarchy page: one workspace-wide search per settled query; a
+      // newer query aborts the answer of the older one.
+      useEffect(() => {
+        if (!localChrome || !searchOpen) return undefined
+        const text = String(query || '').trim()
+        if (!text) {
+          searchSeqRef.current += 1
+          setSearchState(null)
+          return undefined
+        }
+        if (typeof props.sessionId !== 'string' || !props.sessionId) return undefined
+        const seq = searchSeqRef.current + 1
+        searchSeqRef.current = seq
+        setSearchState({ loading: true, matches: [], truncated: false, incomplete: false })
+        const timer = setTimeout(() => {
+          void searchHostWorkspace(props.sessionId, {
+            query: text,
+            excludedPaths: FILES_SEARCH_EXCLUDED,
+            includeHidden: showHidden === true,
+            respectGitignore: true,
+          }).then((answer) => {
+            if (seq !== searchSeqRef.current) return
+            if (!answer) {
+              setSearchState({ loading: false, failed: true, matches: [], truncated: false, incomplete: false })
+              return
+            }
+            setSearchState({
+              loading: false,
+              failed: false,
+              matches: Array.isArray(answer.matches) ? answer.matches : [],
+              truncated: answer.truncated === true,
+              incomplete: answer.incomplete === true,
+            })
+          })
+        }, 180)
+        return () => { clearTimeout(timer) }
+      }, [localChrome, searchOpen, query, showHidden, props.sessionId])
+
+      useEffect(() => () => { searchSeqRef.current += 1 }, [])
+
       const navigate = (next) => {
         const target = String(next || '/').trim() || '/'
         if (target === dir) return
+        if (lockRoot && !withinRoot(target)) {
+          setError(t('files.outsideRoot'))
+          return
+        }
         setBackStack((stack) => [...stack, dir])
         setDir(target)
         setNotice('')
@@ -2837,7 +3308,26 @@ window.__ModuleLoader__.load({
         })
       }
       const openFile = (entry) => {
-        const actions = props.actions || (props.tabInfo && props.tabInfo.tab && props.tabInfo.tab.actions)
+        const actions = (props.tabInfo && props.tabInfo.tab && props.tabInfo.tab.actions) || props.actions
+        // In the takeover of DSH's native files page, prefer the official
+        // resource protocol so the official preview (markdown/code/image/pdf)
+        // opens; the address has to be session-scoped and relative to cwd.
+        if (props.openNative === true && actions && typeof actions.openResource === 'function' && typeof props.sessionId === 'string' && typeof props.rootPath === 'string') {
+          const root = String(props.rootPath).replace(/[\\/]+$/, '')
+          const full = String(entry.path)
+          const rootLower = root.toLowerCase()
+          const fullLower = full.toLowerCase()
+          if (fullLower.startsWith(`${rootLower}/`) || fullLower.startsWith(`${rootLower}\\`)) {
+            const relative = full.slice(root.length).replace(/^[\\/]+/, '')
+            if (relative) {
+              const address = `dsh-resource://file/session/${encodeURIComponent(props.sessionId)}/${relative.split(/[\\/]+/).filter(Boolean).map((part) => encodeURIComponent(part)).join('/')}`
+              const panel = props.tabInfo && props.tabInfo.panel
+              if (panel && panel.isFloating !== true && panel.id) actions.openResource(address, { paneId: panel.id })
+              else actions.openResource(address)
+              return
+            }
+          }
+        }
         if (!actions || typeof actions.openTab !== 'function') {
           setError(t('files.openUnavailable'))
           return
@@ -3349,6 +3839,7 @@ window.__ModuleLoader__.load({
       const handleRowAction = (entry, action) => {
         if (action === 'download') { void downloadFile(entry); return }
         if (action === 'copyFile') { void copyFileEntry(entry); return }
+        if (action === 'openInApp') { void openHostPath(entry.path); return }
         if (action === 'copyPath') { void copyPathValue(entry.path); return }
         if (action === 'rename') { setRenameTarget(entry); setRenameValue(entry.name); return }
         if (action === 'delete') { setDeleteTarget(entry); return }
@@ -3356,13 +3847,107 @@ window.__ModuleLoader__.load({
       const rowMenuItems = (entry) => {
         const isDir = entry.type === 'dir'
         const items = []
-        if (!isDir) items.push({ id: 'download', label: t('files.downloadFile') })
-        if (!isDir) items.push({ id: 'copyFile', label: t('files.copyFile') })
+        if (!isDir && !localChrome) items.push({ id: 'download', label: t('files.downloadFile') })
+        if (!isDir && !localChrome) items.push({ id: 'copyFile', label: t('files.copyFile') })
+        if (localChrome) items.push({ id: 'openInApp', label: t('files.openInApp') })
         items.push({ id: 'copyPath', label: t('files.copyPathEntry') })
         items.push({ id: 'rename', label: t('files.rename') })
         items.push({ id: 'delete', label: t('files.delete') })
         return items
       }
+      /** Run one row action, turning a rejection into the inline error line. */
+      const runRowAction = (entry, action) => {
+        try {
+          handleRowAction(entry, action)
+        } catch (cause) {
+          setError(t('files.actionFailed', { message: messageOf(cause) }))
+        }
+      }
+      /**
+       * Official `MenuAction[]` for one row. The context menu service resolves
+       * these lazily, so labels are evaluated at open time and stay localized.
+       */
+      const rowMenuActions = (entry) => {
+        const isDir = entry.type === 'dir'
+        const actions = []
+        if (!isDir) {
+          actions.push({
+            id: 'open',
+            label: t('files.openFile'),
+            run: () => openFile(entry),
+          })
+        }
+        if (!isDir && !localChrome) {
+          actions.push({
+            id: 'download',
+            label: t('files.downloadFile'),
+            separatorBefore: actions.length > 0,
+            run: () => runRowAction(entry, 'download'),
+          })
+          actions.push({
+            id: 'copyFile',
+            label: t('files.copyFile'),
+            run: () => runRowAction(entry, 'copyFile'),
+          })
+        }
+        if (localChrome) {
+          actions.push({
+            id: 'openInApp',
+            label: t('files.openInApp'),
+            separatorBefore: actions.length > 0,
+            run: () => runRowAction(entry, 'openInApp'),
+          })
+        }
+        actions.push({
+          id: 'copyPath',
+          label: t('files.copyPathEntry'),
+          separatorBefore: actions.length > 0,
+          run: () => runRowAction(entry, 'copyPath'),
+        })
+        actions.push({
+          id: 'rename',
+          label: t('files.rename'),
+          run: () => runRowAction(entry, 'rename'),
+        })
+        actions.push({
+          id: 'delete',
+          label: t('files.delete'),
+          danger: true,
+          separatorBefore: true,
+          run: () => runRowAction(entry, 'delete'),
+        })
+        return actions
+      }
+      /** What the context menu service captures for one row. */
+      const menuTargetOf = (entry) => ({
+        kind: FILES_MENU_TARGET,
+        value: {
+          panel: panelIdRef.current,
+          path: entry.path,
+          name: entry.name,
+          type: entry.type === 'dir' ? 'dir' : 'file',
+          size: Number.isFinite(entry.size) ? entry.size : 0,
+        },
+      })
+      const useContextMenu = props.useContextMenu
+      const renderFactorySlot = props.renderFactorySlot
+      const getTriggerProps = (() => {
+        if (typeof useContextMenu !== 'function') return null
+        try {
+          const bindings = useContextMenu()
+          return bindings && typeof bindings.getTriggerProps === 'function' ? bindings.getTriggerProps : null
+        } catch {
+          return null
+        }
+      })()
+      /**
+       * Publish row handlers for the context menu service. Reassigned on every
+       * render so the closure always sees the latest directory and state.
+       */
+      menuBoxRef.current.menuActions = (value) => {
+        const row = filesMenuEntryOf(value)
+        return row ? rowMenuActions(row) : []
+      }
       const renderRowMenu = (entry) => {
         const moreButton = h('button', {
           type: 'button',
@@ -3374,6 +3959,22 @@ window.__ModuleLoader__.load({
             setRowMenuPath((current) => (current === entry.path ? '' : entry.path))
           },
         }, iconMore())
+        const menuTarget = menuTargetOf(entry)
+        // Prefer the official ellipsis trigger so right-click, Shift+F10 and the
+        // button share one menu surface; fall back to our own Menu when the
+        // renderer does not expose the factory slot.
+        if (typeof renderFactorySlot === 'function') {
+          const official = renderFactorySlot('contextMenu.button', {
+            target: menuTarget,
+            label: t('files.more'),
+            className: 'dsh-ssh-workbench-row-more',
+          }, {
+            fallback: h('span', { className: 'dsh-ssh-workbench-row-actions' }, moreButton),
+          })
+          if (official != null) {
+            return h('span', { className: 'dsh-ssh-workbench-row-actions' }, official)
+          }
+        }
         if (Menu == null) return null
         return h(Menu, {
           open: rowMenuPath === entry.path,
@@ -3484,6 +4085,167 @@ window.__ModuleLoader__.load({
         ...extra,
       }, glyph)
 
+      // ── local hierarchy page: search + "open in app" split button ───────
+      // DSH's native files page ships a reload, a search toggle and an
+      // "open in app" split button; the takeover keeps the same footprint and
+      // only adds the hierarchy navigation around it.
+      const searchActive = localChrome && searchOpen
+      const searchText = String(query || '').trim()
+      const searchResults = searchActive && searchText ? searchState : null
+      const searchToggle = localChrome
+        ? tool(t('files.search'), iconSearch(), () => {
+            setSearchOpen((value) => {
+              const next = !value
+              if (!next) setQuery('')
+              return next
+            })
+          }, !server, { 'aria-pressed': searchOpen, 'data-sdh-files-search-toggle': '' })
+        : null
+      const searchBar = searchActive
+        ? h('div', { 'data-sdh-files-search-bar': '', className: 'dsh-ssh-workbench-files-search' },
+            h('div', { className: 'dsh-ssh-workbench-files-search-field' },
+              h('span', { className: 'dsh-ssh-workbench-files-search-glyph' }, iconSearch()),
+              h('input', {
+                autoFocus: true,
+                className: 'dsh-ssh-workbench-files-search-input',
+                value: query,
+                placeholder: t('files.searchPlaceholder'),
+                'aria-label': t('files.search'),
+                onChange: (event) => setQuery(event.target.value),
+                onKeyDown: (event) => {
+                  if (event.key !== 'Escape') return
+                  event.preventDefault()
+                  setSearchOpen(false)
+                  setQuery('')
+                },
+              }),
+              query
+                ? h('button', {
+                    type: 'button',
+                    className: 'dsh-ssh-workbench-files-search-clear',
+                    title: t('files.searchClear'),
+                    'aria-label': t('files.searchClear'),
+                    onClick: () => setQuery(''),
+                  }, iconClose())
+                : null,
+            ),
+          )
+        : null
+      const searchResultPath = (match) => {
+        const relative = String(match.path || '').replace(/^[\\/]+/, '')
+        if (!relative) return dir
+        const root = String(navRoot || '/').replace(/[\\/]+$/, '')
+        return root === '' || root === '/' ? `/${relative}` : `${root}/${relative}`
+      }
+      const searchView = searchResults
+        ? h('div', { 'data-sdh-files-search-results': '', style: { display: 'flex', flexDirection: 'column' } },
+            searchResults.loading
+              ? h('div', { className: 'dsh-ssh-workbench-empty' }, t('files.searching'))
+              : searchResults.failed
+                ? h('div', { className: 'dsh-ssh-workbench-empty' }, t('files.searchFailed'))
+                : searchResults.matches.length === 0
+                  ? h('div', { className: 'dsh-ssh-workbench-empty' }, t('files.searchEmpty'))
+                  : searchResults.matches.map((match) => {
+                      const isDir = match.type === 'directory'
+                      const full = searchResultPath(match)
+                      const relative = String(match.path || '')
+                      const depth = relative.split('/').length - 1
+                      const name = baseNameOf(relative) || relative
+                      const entry = { path: full, name, type: isDir ? 'dir' : 'file' }
+                      return h('div', {
+                        key: relative,
+                        className: 'dsh-ssh-workbench-files-row',
+                        'data-sdh-files-search-row': isDir ? 'dir' : 'file',
+                        'data-sdh-files-path': full,
+                        role: 'button',
+                        tabIndex: 0,
+                        title: full,
+                        style: { paddingLeft: 10 + depth * 18 },
+                        onClick: () => { if (isDir) { setSearchOpen(false); setQuery(''); navigate(full) } else openFile(entry) },
+                        onKeyDown: (event) => {
+                          if (event.key !== 'Enter' && event.key !== ' ') return
+                          event.preventDefault()
+                          if (isDir) { setSearchOpen(false); setQuery(''); navigate(full) } else openFile(entry)
+                        },
+                      },
+                        h('span', { style: { display: 'inline-flex', flexShrink: 0, color: isDir ? 'var(--dsw-alias-label-tertiary)' : undefined } }, isDir ? nativeFolderIcon(false) : nativeFileIcon(name)),
+                        h('span', { style: { flex: 1, minWidth: 0, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' } }, name),
+                        h('span', { className: 'dsh-ssh-workbench-files-search-dir', title: full }, relative.includes('/') ? relative.slice(0, relative.lastIndexOf('/')) : ''),
+                      )
+                    }),
+            searchResults.matches.length > 0 && (searchResults.truncated || searchResults.incomplete)
+              ? h('div', { className: 'dsh-ssh-workbench-files-search-note' }, searchResults.truncated ? t('files.searchTruncated') : t('files.searchIncomplete'))
+              : null,
+          )
+        : null
+      const appList = localChrome && Array.isArray(hostApps) ? hostApps : []
+      const defaultApp = appList.find((app) => app.default === true) || appList[0] || null
+      const openInDefault = () => {
+        if (!appList.length) { void openHostPath(dir); return }
+        const target = defaultApp && typeof defaultApp.id === 'string' ? defaultApp.id : null
+        if (!sessionRemote || typeof sessionRemote.openWorkspacePath !== 'function') return
+        const request = target ? { path: dir, application: target } : { path: dir }
+        void Promise.resolve(sessionRemote.openWorkspacePath(request)).catch(() => false)
+      }
+      const appsAnchor = h('div', { style: { display: 'inline-flex' } },
+        h('div', { className: 'dsh-ssh-workbench-files-split', 'data-sdh-open-in-app': '' },
+          h('button', {
+            type: 'button',
+            className: 'main',
+            title: defaultApp ? t('files.openInAppWith', { app: defaultApp.name }) : t('files.openInApp'),
+            'aria-label': defaultApp ? t('files.openInAppWith', { app: defaultApp.name }) : t('files.openInApp'),
+            disabled: !server,
+            onClick: openInDefault,
+          },
+            defaultApp && defaultApp.icon
+              ? h('img', { src: defaultApp.icon, alt: '', width: 14, height: 14, style: { display: 'block', flexShrink: 0 } })
+              : iconRightUp(),
+            h('span', { style: { maxWidth: 92, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' } },
+              defaultApp ? defaultApp.name : t('files.openInApp')),
+          ),
+          h('button', {
+            type: 'button',
+            className: 'chevron',
+            title: t('files.openInAppMore'),
+            'aria-label': t('files.openInAppMore'),
+            'aria-haspopup': 'menu',
+            'aria-expanded': appsOpen,
+            disabled: !server,
+            onClick: () => setAppsOpen((value) => !value),
+          }, ChevronIcon ? h(ChevronIcon, { size: 12 }) : icon(12, [h('polyline', { points: '6 9 12 15 18 9' })])),
+        ),
+      )
+      const appsMenu = Menu != null && appsAnchor && appList.length > 0
+        ? h(Menu, {
+            open: appsOpen,
+            autoFocus: true,
+            portal: true,
+            dense: true,
+            align: 'end',
+            onClose: () => setAppsOpen(false),
+            items: appList.map((app) => ({
+              id: app.id,
+              icon: app.icon ? h('img', { src: app.icon, alt: '', width: 16, height: 16, style: { display: 'block' } }) : undefined,
+              label: app.default === true ? t('files.openInAppDefault', { app: app.name }) : app.name,
+            })),
+            onSelect: (id) => {
+              setAppsOpen(false)
+              if (!sessionRemote || typeof sessionRemote.openWorkspacePath !== 'function') return
+              void Promise.resolve(sessionRemote.openWorkspacePath({ path: dir, application: id })).catch(() => false)
+            },
+            anchor: appsAnchor,
+          })
+        : null
+      // `primitives.Menu` renders its own anchor, so hand it the split button
+      // rather than rendering the anchor a second time next to the menu. With
+      // no app list there is nothing to choose from, so fall back to a plain
+      // "open in app" button that uses the system default.
+      const appsControl = !localChrome
+        ? null
+        : appsMenu
+          ? appsMenu
+          : tool(t('files.openInApp'), iconRightUp(), () => { void openHostPath(dir) }, !server)
+
       const transferBar = transfer
         ? h('div', {
             'data-sdh-transfer': transfer.kind,
@@ -3753,20 +4515,31 @@ window.__ModuleLoader__.load({
                     })
                   : null,
               ),
-          h('input', {
-            id: 'dsh-ssh-workbench-files-upload',
-            type: 'file',
-            multiple: true,
-            style: { display: 'none' },
-            onChange: onPickedFiles,
-          }),
-          tool(t('files.upload'), iconUpload(), () => { setResumeRecord(null); triggerUploadInput() }, !server || transfer != null),
-          tool(t('files.newFolder'), iconFolderPlus(), () => setDialog({ value: '' }), !server || transfer != null),
+          localChrome
+            ? null
+            : h('input', {
+                id: 'dsh-ssh-workbench-files-upload',
+                type: 'file',
+                multiple: true,
+                style: { display: 'none' },
+                onChange: onPickedFiles,
+              }),
+          localChrome
+            ? null
+            : tool(t('files.upload'), iconUpload(), () => { setResumeRecord(null); triggerUploadInput() }, !server || transfer != null),
+          localChrome
+            ? null
+            : tool(t('files.newFolder'), iconFolderPlus(), () => setDialog({ value: '' }), !server || transfer != null),
           tool(showHidden ? t('files.hideHidden') : t('files.showHidden'), iconEye(showHidden), toggleHidden, !server, { 'aria-pressed': showHidden }),
           tool(t('files.refresh'), RefreshIcon ? h(RefreshIcon, { size: 15 }) : refreshingIcon(), () => loadDir(server, dir, true), !server),
-          tool(t('files.history'), iconHistory(), () => setHistoryOpen((value) => !value), !server),
+          searchToggle,
+          localChrome
+            ? null
+            : tool(t('files.history'), iconHistory(), () => setHistoryOpen((value) => !value), !server),
           hideServerPicker ? null : picker,
+          appsControl,
         ),
+        searchBar,
         error ? h('div', { role: 'alert', style: { padding: '6px 10px 0', color: 'var(--dsw-alias-state-error-primary)', fontSize: 12, lineHeight: '18px', wordBreak: 'break-all' } }, error) : null,
         notice ? h('div', { role: 'status', style: { padding: '6px 10px 0', color: 'var(--dsw-alias-label-secondary, inherit)', fontSize: 12, lineHeight: '18px' } }, notice) : null,
         transferBar,
@@ -3780,7 +4553,9 @@ window.__ModuleLoader__.load({
             )
           : historyOpen
             ? historyPanel
-            : h('div', { style: { flex: 1, minHeight: 0, overflowY: 'auto', padding: '8px 0 8px 8px', scrollbarGutter: 'stable' } },
+            : searchView
+              ? h('div', { style: { flex: 1, minHeight: 0, overflowY: 'auto', padding: '4px 0 8px', scrollbarGutter: 'stable' } }, searchView)
+              : h('div', { style: { flex: 1, minHeight: 0, overflowY: 'auto', padding: '8px 0 8px 8px', scrollbarGutter: 'stable' } },
                 h('div', { style: { display: 'flex', flexDirection: 'column' } },
                   dir !== navRoot
                     ? h('div', {
@@ -3798,13 +4573,7 @@ window.__ModuleLoader__.load({
                       ? h('div', { className: 'dsh-ssh-workbench-empty' }, t('files.empty'))
                       : visibleEntries.map((entry) => {
                           const isDir = entry.type === 'dir'
-                          return h('div', {
-                            key: entry.path,
-                            className: 'dsh-ssh-workbench-files-row',
-                            'data-sdh-files-row': isDir ? 'dir' : 'file',
-                            'data-sdh-files-path': entry.path,
-                            role: 'button',
-                            tabIndex: 0,
+                          const rowHandlers = {
                             onClick: () => { if (isDir) navigate(entry.path); else openFile(entry) },
                             onKeyDown: (event) => {
                               if (event.key !== 'Enter' && event.key !== ' ') return
@@ -3812,6 +4581,19 @@ window.__ModuleLoader__.load({
                               if (isDir) navigate(entry.path)
                               else openFile(entry)
                             },
+                          }
+                          // Official trigger adds onContextMenu + Shift+F10 and
+                          // owns tabIndex; keep the row a plain button otherwise.
+                          const rowProps = getTriggerProps
+                            ? getTriggerProps(menuTargetOf(entry), rowHandlers)
+                            : { ...rowHandlers, tabIndex: 0 }
+                          return h('div', {
+                            key: entry.path,
+                            className: 'dsh-ssh-workbench-files-row',
+                            'data-sdh-files-row': isDir ? 'dir' : 'file',
+                            'data-sdh-files-path': entry.path,
+                            role: 'button',
+                            ...rowProps,
                           },
                             h('span', { style: { display: 'inline-flex', flexShrink: 0, color: isDir ? 'var(--dsw-alias-label-tertiary)' : undefined } }, isDir ? nativeFolderIcon(false) : nativeFileIcon(entry.name)),
                             h('span', { style: { flex: 1, minWidth: 0, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' } }, entry.name),
@@ -4571,6 +5353,8 @@ ${d.join(`
                 ? h('div', { className: 'dsh-ssh-workbench-empty', style: { flex: 1 } }, t('panel.loading'))
                 : h(RemoteFilesPanel, {
                     t,
+                    useContextMenu: props.useContextMenu,
+                    renderFactorySlot: props.renderFactorySlot,
                     controlledServer: activeTab.server,
                     hideServerPicker: true,
                     initialPath: activeRemoteHome || '/',
@@ -4580,6 +5364,8 @@ ${d.join(`
               : localRoot
                 ? h(RemoteFilesPanel, {
                     t,
+                    useContextMenu: props.useContextMenu,
+                    renderFactorySlot: props.renderFactorySlot,
                     localMode: true,
                     controlledServer: '__local__',
                     initialPath: localRoot,
@@ -4605,46 +5391,120 @@ ${d.join(`
       )
     }
 
-    /** Plugin-manager bundle configuration: the left workbench rail switch. */
+    /** Plugin-manager bundle configuration: sidebar entry + remote write switch. */
     function SidebarSettingsForm(props) {
       const t = props.t ?? ((key) => key)
       ensurePanelStyle()
       const [enabled, setEnabled] = useState(null)
+      const [writeEnabled, setWriteEnabled] = useState(null)
+      const [hierarchyEnabled, setHierarchyEnabled] = useState(null)
       const [busy, setBusy] = useState(false)
       const [error, setError] = useState('')
       const [notice, setNotice] = useState('')
 
       useEffect(() => {
         let alive = true
-        api('/prefs')
-          .then((body) => { if (alive) setEnabled(body?.prefs?.sidebar !== false) })
+        Promise.all([api('/prefs'), api('/state')])
+          .then(([prefsBody, stateBody]) => {
+            if (!alive) return
+            setEnabled(prefsBody?.prefs?.sidebar !== false)
+            setWriteEnabled(stateBody?.config?.remoteFileWrite === true)
+            setHierarchyEnabled(stateBody?.config?.systemFileHierarchy === true)
+          })
           .catch((cause) => { if (alive) setError(t('workbench.sidebarLoadFailed', { msg: messageOf(cause) })) })
         return () => { alive = false }
       }, [])
 
-      const save = async () => {
-        if (enabled === null || busy) return
+      /**
+       * Apply one switch immediately: the flip is already visible, so the Host
+       * write runs right away and only the effective value comes back. There is
+       * no Save button — a settings switch that needs a second click to take
+       * effect reads as broken.
+       */
+      const commit = async (patch) => {
+        if (busy) return
         setBusy(true)
         setError('')
         setNotice('')
         try {
-          const body = await post('/prefs', { sidebar: enabled === true })
-          const value = body?.prefs?.sidebar !== false
+          const prefsBody = await post('/prefs', patch)
+          const value = prefsBody?.prefs?.sidebar !== false
           setEnabled(value)
+          let effective = prefsBody?.config?.remoteFileWrite
+          if (typeof effective !== 'boolean') {
+            // Older Hosts answer with prefs only: read the effective value back
+            // so the switch never reports a state the backend did not take.
+            try {
+              const stateBody = await api('/state')
+              effective = stateBody?.config?.remoteFileWrite
+            } catch {
+              effective = undefined
+            }
+          }
+          if (typeof effective === 'boolean') setWriteEnabled(effective)
+          let hierarchyEffective = prefsBody?.config?.systemFileHierarchy
+          if (typeof hierarchyEffective !== 'boolean') {
+            try {
+              const stateBody = await api('/state')
+              hierarchyEffective = stateBody?.config?.systemFileHierarchy
+            } catch {
+              hierarchyEffective = undefined
+            }
+          }
+          if (typeof hierarchyEffective === 'boolean') {
+            setHierarchyEnabled(hierarchyEffective)
+            if (typeof systemFilesSync === 'function') systemFilesSync(hierarchyEffective === true)
+          }
           if (typeof props.onApply === 'function') props.onApply(value)
-          setNotice(t('workbench.saved'))
+          // An older Host silently ignores a field it does not know. Only claim
+          // success when the effective value confirms the flip.
+          let applied = true
+          if ('remoteFileWrite' in patch) {
+            applied = applied && typeof effective === 'boolean' && effective === (patch.remoteFileWrite === true)
+          }
+          if ('systemFileHierarchy' in patch) {
+            applied = applied && typeof hierarchyEffective === 'boolean' && hierarchyEffective === (patch.systemFileHierarchy === true)
+          }
+          setNotice(applied ? t('workbench.saved') : t('workbench.writeNeedRestart'))
         } catch (cause) {
-          setError(t('workbench.sidebarSaveFailed', { msg: messageOf(cause) }))
+          // A Host built before this switch existed rejects the new field with a
+          // schema error instead of ignoring it. That is a restart, not a bug.
+          if (/prefs\.(sidebar|remoteFileWrite|systemFileHierarchy) must be a boolean/.test(messageOf(cause) || '')) {
+            setNotice(t('workbench.writeNeedRestart'))
+          } else {
+            setError(t('workbench.sidebarSaveFailed', { msg: messageOf(cause) }))
+          }
         } finally {
           setBusy(false)
         }
       }
 
+      const switchRow = (options) => h('div', {
+        style: { display: 'flex', alignItems: 'center', gap: 12, padding: options.first ? '0' : '16px 0 0' },
+      },
+        h('div', { style: { flex: 1, minWidth: 0, display: 'flex', flexDirection: 'column', gap: 4 } },
+          h('strong', { style: { fontSize: 14, fontWeight: 500, lineHeight: '20px', color: 'var(--dsw-alias-label-primary, inherit)' } }, options.title),
+          h('span', { style: { fontSize: 12, lineHeight: '18px', color: 'var(--dsw-alias-label-tertiary, inherit)' } }, options.hint),
+        ),
+        h('button', {
+          type: 'button',
+          role: 'switch',
+          'aria-checked': options.checked === true ? 'true' : 'false',
+          'aria-label': options.title,
+          'data-sdh-switch': options.key,
+          className: 'dsh-ssh-workbench-switch',
+          disabled: options.disabled,
+          onClick: options.onToggle,
+        }, h('span', { className: 'dsh-ssh-workbench-switch-thumb' })),
+      )
+
       if (props.view === 'summary') {
+        const parts = []
+        if (enabled !== null) parts.push(`${t('workbench.sidebarTitle')} ${enabled ? t('workbench.enabled') : t('workbench.disabled')}`)
+        if (writeEnabled !== null) parts.push(`${t('workbench.writeTitle')} ${writeEnabled ? t('workbench.writeOn') : t('workbench.writeOff')}`)
+        if (hierarchyEnabled !== null) parts.push(`${t('workbench.hierarchyTitle')} ${hierarchyEnabled ? t('workbench.hierarchyOn') : t('workbench.hierarchyOff')}`)
         return h('div', { style: { display: 'flex', alignItems: 'center', gap: 8, fontSize: 12, lineHeight: '18px', color: 'var(--dsw-alias-label-secondary, inherit)' } },
-          h('span', null, t('workbench.sidebarTitle')),
-          h('span', { style: { color: 'var(--dsw-alias-label-tertiary, inherit)' } },
-            enabled === null ? '' : (enabled ? t('workbench.enabled') : t('workbench.disabled'))),
+          h('span', null, parts.join(' · ')),
         )
       }
 
@@ -4652,26 +5512,52 @@ ${d.join(`
         'data-sdh-sidebar-pref': '',
         style: { display: 'flex', flexDirection: 'column', gap: 12, width: '100%', padding: '16px 0' },
       },
-        h('div', { style: { display: 'flex', alignItems: 'center', gap: 12 } },
-          h('div', { style: { flex: 1, minWidth: 0, display: 'flex', flexDirection: 'column', gap: 4 } },
-            h('strong', { style: { fontSize: 14, fontWeight: 500, lineHeight: '20px', color: 'var(--dsw-alias-label-primary, inherit)' } }, t('workbench.sidebarTitle')),
-            h('span', { style: { fontSize: 12, lineHeight: '18px', color: 'var(--dsw-alias-label-tertiary, inherit)' } }, t('workbench.sidebarHint')),
-          ),
-          h('button', {
-            type: 'button',
-            role: 'switch',
-            'aria-checked': enabled === true ? 'true' : 'false',
-            'aria-label': t('workbench.sidebarTitle'),
-            className: 'dsh-ssh-workbench-switch',
-            disabled: enabled === null || busy,
-            onClick: () => setEnabled((value) => !(value === true)),
-          }, h('span', { className: 'dsh-ssh-workbench-switch-thumb' })),
-        ),
+        switchRow({
+          key: 'sidebar',
+          first: true,
+          title: t('workbench.sidebarTitle'),
+          hint: t('workbench.sidebarHint'),
+          checked: enabled === true,
+          disabled: enabled === null || busy,
+          onToggle: () => {
+            const next = !(enabled === true)
+            setEnabled(next)
+            commit({ sidebar: next })
+          },
+        }),
+        switchRow({
+          key: 'remoteFileWrite',
+          first: false,
+          title: t('workbench.writeTitle'),
+          hint: t('workbench.writeHint'),
+          checked: writeEnabled === true,
+          disabled: writeEnabled === null || busy,
+          onToggle: () => {
+            const next = !(writeEnabled === true)
+            setWriteEnabled(next)
+            setNotice('')
+            commit({ remoteFileWrite: next })
+          },
+        }),
+        switchRow({
+          key: 'systemFileHierarchy',
+          first: false,
+          title: t('workbench.hierarchyTitle'),
+          hint: t('workbench.hierarchyHint'),
+          checked: hierarchyEnabled === true,
+          disabled: hierarchyEnabled === null || busy,
+          onToggle: () => {
+            const next = !(hierarchyEnabled === true)
+            setHierarchyEnabled(next)
+            if (typeof systemFilesSync === 'function') systemFilesSync(next)
+            setNotice('')
+            commit({ systemFileHierarchy: next })
+          },
+        }),
         error ? h('div', { className: 'dsh-ssh-workbench-error', role: 'alert' }, error) : null,
-        h('div', { style: { display: 'flex', alignItems: 'center', gap: 8 } },
-          h(UiButton, { variant: 'primary', disabled: busy || enabled === null, onClick: save }, busy ? t('workbench.saving') : t('panel.save')),
-          notice ? h('span', { role: 'status', style: { fontSize: 12, color: 'var(--dsw-alias-label-tertiary, inherit)' } }, notice) : null,
-        ),
+        notice
+          ? h('div', { role: 'status', style: { fontSize: 12, lineHeight: '18px', color: 'var(--dsw-alias-label-tertiary, inherit)' } }, notice)
+          : null,
       )
     }
 
@@ -4699,6 +5585,34 @@ ${d.join(`
       let layoutService = null
       if (typeof ctx.inject === 'function') {
         ctx.inject(['layout'], (inner) => { layoutService = inner.get('layout') ?? null })
+        // The gateway exposes Host-local file actions (open in an app / reveal in
+        // Finder) through `remote.session`. Only Host paths resolve, so the
+        // hierarchy page (session cwd) uses it and remote SFTP pages never do.
+        // The gateway exposes Host-local file actions through its namespace
+        // service. Inject the namespace itself: reading `ctx.remote.session`
+        // from outside an inject throws.
+        ctx.inject(['remote.session'], (inner) => { sessionRemote = inner.get('remote.session') ?? null })
+        // Workspace search for the local hierarchy page comes from the same
+        // gateway namespace the native files page uses (packaged ripgrep).
+        ctx.inject(['remote.workspaceFiles'], (inner) => { workspaceFilesRemote = inner.get('remote.workspaceFiles') ?? null })
+        // Native file rows reuse the official context menu: right-click and
+        // Shift+F10 come from its trigger bindings, and the actions below are
+        // resolved when the menu opens.
+        ctx.inject(['contextMenus'], (inner) => {
+          const menus = inner.get('contextMenus')
+          if (!menus || typeof menus.register !== 'function') return
+          const register = () => menus.register({
+            id: `${NS}.files`,
+            target: FILES_MENU_TARGET,
+            order: 100,
+            resolve: (value) => resolveFilesMenuActions(value),
+          })
+          if (typeof inner.effect === 'function') {
+            inner.effect(register, 'dsh-ssh-workbench: files context menu')
+          } else {
+            register()
+          }
+        })
       }
       // The left-rail workbench entry is the one sidebar surface the plugin
       // manager switch controls. Registration is a pair: the `main` page the
@@ -4713,9 +5627,13 @@ ${d.join(`
         own(slots.inject('main', () =>
           slots.register(
             { name: 'main', key: WORKBENCH_PANEL_ID, locale: NS, inject: () => ({ t }) },
-            function SdhSshOpsWorkbenchPage() {
+            function SdhSshOpsWorkbenchPage(props) {
               return h(WorkbenchPage, {
                 t,
+                // The official file context menu is wired through slot props;
+                // pass them down so the explorer rows can use it.
+                useContextMenu: props.useContextMenu,
+                renderFactorySlot: props.renderFactorySlot,
                 onBack: () => {
                   try { layoutService?.selectPanel?.(null) } catch { /* navigation is best effort */ }
                 },
@@ -4828,6 +5746,63 @@ ${d.join(`
             },
           ),
         )
+        slots.inject('sidebar.right.pane.tab.title', () =>
+          slots.register(
+            { name: 'sidebar.right.pane.tab.title', key: 'dsh-ssh-workbench/system-files', locale: NS },
+            function SdhSshOpsSystemFilesTitle() {
+              // Match DSH's own files tab title: the folder glyph from
+              // `FileTypeIcon` followed by the label, no extra chrome.
+              const FileTypeIcon = primitives && primitives.FileTypeIcon
+              return h('span', { style: { display: 'inline-flex', alignItems: 'center', gap: 6, minWidth: 0 } },
+                typeof FileTypeIcon === 'function'
+                  ? h(FileTypeIcon, { kind: 'folder', size: 16, style: { flexShrink: 0 } })
+                  : h(FilesTabArtwork, { size: 14 }),
+                h('span', { style: { overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' } }, t('files.systemTitle')),
+              )
+            },
+          ),
+        )
+        slots.inject('sidebar.right.pane.tab', () =>
+          slots.register(
+            {
+              name: 'sidebar.right.pane.tab',
+              key: 'dsh-ssh-workbench/system-files',
+              inject: (sessionId, actions) => ({ actions }),
+            },
+            function SdhSshOpsSystemFilesBody(props) {
+              const useTabInfo = props.useTabInfo
+              const tabInfo = typeof useTabInfo === 'function' ? useTabInfo() : null
+              const useSessions = props.useSessions
+              // The session workspace is the only root the takeover may show;
+              // the panel locks navigation to it so this page cannot escape the
+              // same boundary as DSH's native files page.
+              const cwd = typeof useSessions === 'function'
+                ? useSessions((sessions) => {
+                    const row = sessions && sessions.byId && sessions.byId[props.sessionId]
+                    return row && typeof row.cwd === 'string' && row.cwd ? row.cwd : undefined
+                  })
+                : undefined
+              if (!cwd) {
+                return h('div', {
+                  style: { padding: 16, fontSize: 12, lineHeight: '18px', color: 'var(--dsw-alias-label-tertiary, inherit)' },
+                }, t('files.noSessionDir'))
+              }
+              return h(RemoteFilesPanel, {
+                t,
+                ...props,
+                localMode: true,
+                controlledServer: '__local__',
+                rootPath: cwd,
+                initialPath: cwd,
+                rootLabel: baseNameOf(cwd) || cwd,
+                lockRoot: true,
+                openNative: true,
+                hideServerPicker: true,
+                tabInfo,
+              })
+            },
+          ),
+        )
         slots.inject('sidebar.right.pane.tab', () =>
           slots.register(
             { name: 'sidebar.right.pane.tab', key: 'dsh-ssh-workbench/file' },
@@ -4895,6 +5870,48 @@ ${d.join(`
           title: () => t('files.title'),
           guide: [],
         }), 'dsh-ssh-workbench: files tab')
+
+        // Take over the native `files` kind only when the setting is on. The
+        // extension definition outranks the builtin one, so the official page
+        // is shadowed without being unregistered; toggling off restores it.
+        let systemFilesDisposer = null
+        const syncSystemFiles = (enabled) => {
+          if (enabled === true && !systemFilesDisposer) {
+            systemFilesDisposer = tabs.register({
+              id: 'dsh-ssh-workbench/system-files',
+              kind: 'files',
+              keepMounted: true,
+              title: () => t('files.systemTitle'),
+              /**
+               * Reuse DSH's guide entry verbatim (`workspace` / `workspace.files`
+               * / order 10 / its artwork) so the entry keeps its original slot on
+               * the guide page instead of dropping to the bottom.
+               */
+              guide: [{
+                id: 'workspace',
+                commandId: 'workspace.files',
+                order: 10,
+                title: () => t('files.systemTitle'),
+                description: () => t('files.systemDescription'),
+                ...(primitives && primitives.GuideArtworkFiles ? { icon: primitives.GuideArtworkFiles } : {}),
+              }],
+            })
+          } else if (enabled !== true && systemFilesDisposer) {
+            systemFilesDisposer()
+            systemFilesDisposer = null
+          }
+        }
+        systemFilesSync = syncSystemFiles
+        inner.effect(() => () => {
+          if (systemFilesDisposer) {
+            systemFilesDisposer()
+            systemFilesDisposer = null
+          }
+          if (systemFilesSync === syncSystemFiles) systemFilesSync = null
+        }, 'dsh-ssh-workbench: system files tab')
+        api('/state')
+          .then((body) => syncSystemFiles(body?.config?.systemFileHierarchy === true))
+          .catch(() => {})
       })
 
       // Session-scoped contexts (composer reference events) come from this service.