dsh-ssh-workbench 1.7.0 → 1.7.8

package/lib/core/background.js

@@ -39,10 +39,17 @@ export function parseBackgroundStart(stdout) {
  * `nohup` + redirected stdio is what keeps the child alive after the SSH
  * channel closes; the whole launcher runs under `sh -c` so a fish/csh login
  * shell only has to parse the simple outer command.
+ *
+ * Logs default to `~/.dsh/ssh-workbench/logs` instead of `/tmp`, because a
+ * detached process may outlive the tmp cleanup window; `DSH_SSH_WORKBENCH_LOG_DIR`
+ * overrides the directory remotely, and `/tmp` stays as the fallback when the
+ * home directory is not writable.
  */
 export function buildPosixBackgroundCommand(builtCommand) {
   const script = [
-    'LOG=$(mktemp /tmp/dsh-ssh-workbench-bg.XXXXXX 2>/dev/null || echo /tmp/dsh-ssh-workbench-bg-$$-$(date +%s).log)',
+    'LOG_DIR=${DSH_SSH_WORKBENCH_LOG_DIR:-$HOME/.dsh/ssh-workbench/logs}',
+    'mkdir -p "$LOG_DIR" 2>/dev/null || LOG_DIR=/tmp',
+    'LOG=$(mktemp "$LOG_DIR/dsh-ssh-workbench-bg.XXXXXX" 2>/dev/null || echo "$LOG_DIR/dsh-ssh-workbench-bg-$$-$(date +%s).log")',
     `nohup "\${SHELL:-/bin/sh}" -lc ${quotePosix(builtCommand)} >"$LOG" 2>&1 &`,
     `echo "${BG_PID_MARKER}$!"`,
     `echo "${BG_LOG_MARKER}$LOG"`,
@@ -50,10 +57,10 @@ export function buildPosixBackgroundCommand(builtCommand) {
   return `sh -c ${quotePosix(script)}`
 }
 
-/** One model-facing description of a started background process. */
-export function renderBackgroundStart({ pid, log, errLog, target, command, dialect = 'posix' }) {
+/** The pid/log/stop lines shared by every background result renderer. */
+export function renderBackgroundDetails({ pid, log, errLog, dialect = 'posix' }) {
   const windows = dialect === 'windows'
-  const lines = [`background: started${target ? ` on ${target}` : ''}`, `command: ${command}`]
+  const lines = []
   if (pid !== undefined) lines.push(`pid: ${pid}`)
   if (log) lines.push(`log: ${log}`)
   if (errLog) lines.push(`stderr log: ${errLog}`)
@@ -65,5 +72,12 @@ export function renderBackgroundStart({ pid, log, errLog, target, command, diale
   )
   if (pid !== undefined) lines.push(windows ? `stop: Stop-Process -Id ${pid} -Force` : `stop: kill ${pid}`)
   lines.push('The process is detached from this tool call: timeoutMs does not apply and it keeps running until it exits or is stopped.')
+  return lines
+}
+
+/** One model-facing description of a started background process. */
+export function renderBackgroundStart({ pid, log, errLog, target, command, dialect = 'posix' }) {
+  const lines = [`background: started${target ? ` on ${target}` : ''}`, `command: ${command}`]
+  lines.push(...renderBackgroundDetails({ pid, log, errLog, dialect }))
   return lines.join('\n')
 }

package/lib/core/managed-context.js

@@ -103,7 +103,7 @@ export function renderManagedContext(servers, hints = {}) {
     )
   } else {
     lines.push(
-      '- Remote writes are disabled by config: remote_write/remote_edit will refuse. Use the workbench SFTP panel for uploads, or ask the user to enable remoteFileWrite.',
+      '- Remote writes are disabled: remote_write/remote_edit will refuse. Use the workbench SFTP panel for uploads, or ask the user to turn on remote writes in the plugin settings.',
     )
   }
   const candidates = Array.isArray(hints.candidates) ? hints.candidates.filter(Boolean) : []
@@ -149,6 +149,8 @@ export function buildManagedContextMessage(servers, hints, createUserMessage) {
  *   targets?: object,
  *   loadInventory?: () => object[],
  *   loadLastExecuted?: (sessionId: string) => string|null,
+ *   remoteFileWrite?: boolean,
+ *   loadRemoteFileWrite?: () => boolean,
  *   createUserMessage?: Function,
  * }} [options]
  */
@@ -229,11 +231,20 @@ export function installManagedContext(ctx, options = {}) {
       } catch {
         lastExecuted = null
       }
+      let remoteFileWrite = options.remoteFileWrite === true
+      if (typeof options.loadRemoteFileWrite === 'function') {
+        try {
+          remoteFileWrite = options.loadRemoteFileWrite() === true
+        } catch {
+          remoteFileWrite = false
+        }
+      }
       const hints = {
         candidates: state.candidates,
         lastExecuted: typeof lastExecuted === 'string' && lastExecuted.length > 0 ? lastExecuted : null,
         hostPlatform: options.hostPlatform,
         maxServers: maxContextServers,
+        remoteFileWrite,
       }
       const message = buildManagedContextMessage(servers, hints, await messageFactory())
       targets.markInjected(key, state.version)

package/lib/core/prefs.js

@@ -2,18 +2,25 @@
  * Small user-visible UI preferences that are not part of the server inventory.
  *
  * Kept in the same private data directory as the inventory so a profile export
- * carries them, and so the plugin manager's sidebar switch can change them
+ * carries them, and so the plugin manager's settings form can change them
  * without rewriting the profile's cordis.patch.yml.
+ *
+ * `remoteFileWrite` is deliberately tri-state: `null` means "follow the plugin
+ * config", a boolean means the user overrode it from the settings UI. Keeping
+ * the override separate from the config lets the plugin detail page show a
+ * switch without making the config file the only way in.
  */
 import { prefsPath, readTextFile, writePrivateFile } from './paths.js'
 
-export const DEFAULT_PREFS = Object.freeze({ sidebar: true })
+export const DEFAULT_PREFS = Object.freeze({ sidebar: true, remoteFileWrite: null, systemFileHierarchy: null })
 
 /** Coerce a stored document into the current preference shape. */
 function normalizePrefs(raw) {
   const prefs = { ...DEFAULT_PREFS }
   if (!raw || typeof raw !== 'object') return prefs
   if (typeof raw.sidebar === 'boolean') prefs.sidebar = raw.sidebar
+  if (typeof raw.remoteFileWrite === 'boolean') prefs.remoteFileWrite = raw.remoteFileWrite
+  if (typeof raw.systemFileHierarchy === 'boolean') prefs.systemFileHierarchy = raw.systemFileHierarchy
   return prefs
 }
 
@@ -36,3 +43,29 @@ export function savePrefs(patch) {
   writePrivateFile(prefsPath(), `${JSON.stringify(next, null, 2)}\n`)
   return next
 }
+
+/**
+ * Resolve the write switch the tools and the model context should honour.
+ *
+ * A stored override wins; otherwise the plugin config decides. Anything that
+ * is neither `true` nor `false` falls back to the config, so a corrupt prefs
+ * file can never silently enable remote writes.
+ */
+export function resolveRemoteFileWrite(config, prefs) {
+  const override = prefs?.remoteFileWrite
+  if (override === true || override === false) return override
+  return config?.remoteFileWrite === true
+}
+
+/**
+ * Resolve the hierarchical system file browser switch.
+ *
+ * Same tri-state contract as the write switch: a settings-page override wins,
+ * otherwise the plugin config decides. Defaults to off so the native files tab
+ * is untouched unless the user explicitly asks for the hierarchical browser.
+ */
+export function resolveSystemFileHierarchy(config, prefs) {
+  const override = prefs?.systemFileHierarchy
+  if (override === true || override === false) return override
+  return config?.systemFileHierarchy === true
+}

package/lib/core/remote-exec-tool.js

@@ -14,6 +14,7 @@
 import { defineTool } from '@deepseek-ai/dsh-tools'
 
 import { describeResultOutcome } from './activity.js'
+import { parseBackgroundStart, renderBackgroundDetails } from './background.js'
 import { effectiveDialect } from './dialect.js'
 import { isTransportFailure } from './posix-shell.js'
 import { resolveDialect, sessionKeyOf } from './remote-shell-tool.js'
@@ -102,6 +103,17 @@ async function resolveTasks({ tasks, servers, runtime, config, probe }) {
 
     const built = adapter.buildCommand(command, task.workdir, server, dialect)
     if (built?.error !== undefined) throw new Error(`${label}: ${built.error}`)
+
+    let background = null
+    if (task.run_in_background === true) {
+      if (typeof adapter.buildBackgroundCommand !== 'function') {
+        throw new Error(`${label}: background execution is not supported for ${dialect} targets`)
+      }
+      const bg = adapter.buildBackgroundCommand(command, task.workdir, server, dialect)
+      if (bg?.error !== undefined) throw new Error(`${label}: ${bg.error}`)
+      background = { command: bg.command, cwd: bg.cwd ?? built.cwd }
+    }
+
     return {
       index,
       task,
@@ -111,6 +123,7 @@ async function resolveTasks({ tasks, servers, runtime, config, probe }) {
       command,
       cwd: built.cwd,
       remoteCommand: built.command,
+      background,
       timeoutMs: adapter.resolveTimeoutMs(task, config),
       capability: undefined,
     }
@@ -136,7 +149,7 @@ async function resolveCapabilities(tasks, runtime, probe = true) {
   const cache = new Map()
   await Promise.all(
     tasks.map(async (task) => {
-      if (task.adapter?.remoteTimeout !== true) {
+      if (task.background || task.adapter?.remoteTimeout !== true) {
         task.capability = { mode: 'none', shell: '/bin/sh' }
         return
       }
@@ -182,11 +195,14 @@ function recordTaskActivity(task, { sessionId, durationMs, outcome }) {
 
 async function runOne(task, { runtime, config, perTaskOutputCap, perTaskStderrCap, signal, sessionId, connectTimeoutMs }) {
   const startedAt = Date.now()
+  const remoteCommand = task.background
+    ? task.background.command
+    : task.adapter.wrapTimeout(task.remoteCommand, task.timeoutMs, task.capability, {
+        killAfterMs: config?.timeoutKillAfterMs,
+      })
   let result
   try {
-    result = await runtime.exec(task.server, task.adapter.wrapTimeout(task.remoteCommand, task.timeoutMs, task.capability, {
-      killAfterMs: config?.timeoutKillAfterMs,
-    }), {
+    result = await runtime.exec(task.server, remoteCommand, {
       timeoutMs: task.timeoutMs,
       signal,
       readOnly: false,
@@ -201,6 +217,21 @@ async function runOne(task, { runtime, config, perTaskOutputCap, perTaskStderrCa
   }
 
   const durationMs = Date.now() - startedAt
+
+  if (task.background) {
+    const started = parseBackgroundStart(result?.stdout)
+    const detail =
+      (typeof result?.stderr === 'string' && result.stderr.trim()) ||
+      (typeof result?.stdout === 'string' && result.stdout.trim()) ||
+      'the launcher did not report a pid'
+    if (isTransportFailure(result) || started.pid === undefined) {
+      recordTaskActivity(task, { sessionId, durationMs, outcome: 'failed' })
+      return { index: task.index, task, error: `background start failed: ${detail}`, result, durationMs }
+    }
+    recordTaskActivity(task, { sessionId, durationMs, outcome: 'success' })
+    return { index: task.index, task, result, background: started, durationMs }
+  }
+
   recordTaskActivity(task, { sessionId, durationMs, outcome: describeResultOutcome(result) })
 
   if (isTransportFailure(result)) {
@@ -240,7 +271,7 @@ function renderTask(outcome, { perTaskOutputCap, perTaskStderrCap }) {
     `[${task.index + 1}] ${task.server.name} (${target}) · ${task.dialect}`,
     `command: ${task.command}`,
     `cwd: ${task.cwd}`,
-    `duration: ${outcome.durationMs}ms`,
+    `${outcome.background !== undefined ? 'start duration' : 'duration'}: ${outcome.durationMs}ms`,
   ]
   if (outcome.error !== undefined) {
     lines.push(`error: ${outcome.error}`)
@@ -248,6 +279,16 @@ function renderTask(outcome, { perTaskOutputCap, perTaskStderrCap }) {
   }
 
   const result = outcome.result ?? {}
+  if (outcome.background !== undefined) {
+    lines.push('background: started')
+    lines.push(...renderBackgroundDetails({ ...outcome.background, dialect: task.dialect }))
+    const stderr = clipText(result.stderr, perTaskStderrCap)
+    if (stderr.text.length > 0) {
+      lines.push('launcher stderr:')
+      lines.push(stderr.text.replace(/\n$/, ''))
+    }
+    return lines
+  }
   if (Number.isInteger(result.exitCode)) lines.push(`exit code: ${result.exitCode}`)
   if (result.outcome === 'timeout') lines.push('outcome: timed out')
   if (result.outcome === 'cancelled') lines.push('outcome: cancelled')
@@ -282,7 +323,8 @@ export function createRemoteExecTool({ runtime, config, loadInventory, recordAct
       'Each task carries its own server, so tasks on different resources run concurrently and no task depends on ' +
       'any session-level target state. Use it for multi-resource questions such as comparing versions ' +
       'or collecting status from several @mentioned resources in one step. POSIX targets use their login shell; ' +
-      'Windows targets use PowerShell. This tool is foreground-only; use remote_bash/remote_pwsh for a detached process. ' +
+      'Windows targets use PowerShell. Use run_in_background on a task for a detached process: the task returns ' +
+      'the remote pid and log file immediately, and timeoutMs only covers the start. ' +
       'The native shell tool always runs on the local DSH host, so never use it for these commands. ' +
       'Set probe:false to skip dialect/capability probing; combine it with connectTimeoutMs for quick status checks.',
     parameters: {
@@ -310,7 +352,12 @@ export function createRemoteExecTool({ runtime, config, loadInventory, recordAct
             },
             timeoutMs: {
               type: 'integer',
-              description: 'Foreground timeout for this task in milliseconds (default from config, capped by maxCommandTimeoutMs).',
+              description: 'Foreground timeout for this task in milliseconds (default from config, capped by maxCommandTimeoutMs). For run_in_background it bounds the launcher only.',
+            },
+            run_in_background: {
+              type: 'boolean',
+              description:
+                'Start this task as a detached remote process and return its pid and log file. The process keeps running after this tool call; timeoutMs does not apply to it.',
             },
           },
         },

package/lib/core/remote-file-tools.js

@@ -14,6 +14,7 @@
 import { defineTool } from '@deepseek-ai/dsh-tools'
 
 import { describeResultOutcome } from './activity.js'
+import { loadPrefs, resolveRemoteFileWrite } from './prefs.js'
 import { resolveDialect, sessionKeyOf } from './remote-shell-tool.js'
 import { requireServerRef } from './server-ref.js'
 import { win32Adapter } from './win32-adapter.js'
@@ -151,10 +152,14 @@ function recordFileActivity({ recordActivity, server, sessionId, startedAt, comm
   }
 }
 
+/**
+ * The write switch can come from the plugin config or from the settings UI
+ * override; both are resolved on every call so a toggle takes effect at once.
+ */
 function assertWritesEnabled(config) {
-  if (config?.remoteFileWrite !== true) {
+  if (resolveRemoteFileWrite(config, loadPrefs()) !== true) {
     throw new Error(
-      'remote file writes are disabled by configuration (remoteFileWrite=false); enable them in the plugin config before using remote_write or remote_edit',
+      'remote file writes are disabled; enable them in the plugin settings (远程工作台 → 远程写入) or with remoteFileWrite in the plugin config before using remote_write or remote_edit',
     )
   }
 }
@@ -163,6 +168,75 @@ function byteLength(value) {
   return Buffer.byteLength(String(value ?? ''), 'utf8')
 }
 
+function randomTempSuffix() {
+  return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`
+}
+
+/**
+ * Write one remote file with replace-on-success semantics.
+ *
+ * POSIX `rename(2)` over an existing path is atomic, so writing a sibling temp
+ * file and renaming it into place means a dropped connection or a failed write
+ * never leaves a half-written target. Windows OpenSSH cannot reliably rename
+ * over an existing file, so Windows targets keep the direct write. A symlink
+ * target is written through instead of replaced, so the link itself survives.
+ */
+async function writeRemoteFile({ runtime, server, path, content, dialect }) {
+  const writeDirect = async (fallback) => {
+    const result = await runtime.sftpWrite(server, path, content)
+    return { ...result, atomic: false, fallback }
+  }
+  if (dialect === 'windows') return writeDirect('windows')
+  if (typeof runtime.sftpRename !== 'function' || typeof runtime.sftpRemove !== 'function') {
+    return writeDirect('no-rename-support')
+  }
+
+  let existing = null
+  if (typeof runtime.sftpLstat === 'function') {
+    try {
+      existing = await runtime.sftpLstat(server, path)
+    } catch {
+      existing = null
+    }
+  }
+  // Never turn a symlink into a regular file; write through the link instead.
+  if (existing?.type === 'link') return writeDirect('symlink')
+
+  const temp = `${path}.sdh-tmp-${randomTempSuffix()}`
+  try {
+    await runtime.sftpWrite(server, temp, content)
+    if (existing && Number.isInteger(existing.mode) && typeof runtime.sftpChmod === 'function') {
+      try {
+        await runtime.sftpChmod(server, temp, existing.mode & 0o7777)
+      } catch {
+        // Preserving the mode is best effort; the content is what matters.
+      }
+    }
+    try {
+      await runtime.sftpRename(server, temp, path)
+      return { path, bytes: byteLength(content), atomic: true }
+    } catch {
+      // A server may refuse to rename over an existing file. Fall back to a
+      // direct write instead of deleting the target first (which would leave a
+      // window where the file does not exist).
+      await runtime.sftpWrite(server, path, content)
+      try {
+        await runtime.sftpRemove(server, temp)
+      } catch {
+        // Best effort cleanup.
+      }
+      return { path, bytes: byteLength(content), atomic: false, fallback: 'rename-refused' }
+    }
+  } catch (error) {
+    try {
+      await runtime.sftpRemove(server, temp)
+    } catch {
+      // Best effort cleanup; the original target is untouched.
+    }
+    throw error
+  }
+}
+
 export function createRemoteReadTool({ runtime, config, loadInventory, recordActivity }) {
   return defineTool({
     name: REMOTE_READ_TOOL_NAME,
@@ -226,7 +300,7 @@ export function createRemoteWriteTool({ runtime, config, loadInventory, recordAc
   return defineTool({
     name: REMOTE_WRITE_TOOL_NAME,
     description:
-      'Write a UTF-8 text file on a managed remote resource through SFTP. Requires remoteFileWrite to be enabled in the plugin config. The parent directory must already exist; the file is created or overwritten.',
+      'Write a UTF-8 text file on a managed remote resource through SFTP. Requires remote writes to be enabled in the plugin settings. The parent directory must already exist; the file is created or overwritten.',
     parameters: {
       server: { type: 'string', required: true, description: 'Managed resource name or id.' },
       path: { type: 'string', required: true, description: 'Absolute remote path, or a path under ~.' },
@@ -246,7 +320,7 @@ export function createRemoteWriteTool({ runtime, config, loadInventory, recordAc
         const bytes = byteLength(content)
         const cap = integerIn(config?.remoteFileEditBytes, 2097152, 1024, MAX_EDIT_HARD_LIMIT)
         if (bytes > cap) throw new Error(`file content is ${bytes} bytes, over the ${cap}-byte write limit`)
-        const result = await runtime.sftpWrite(server, path, content)
+        const result = await writeRemoteFile({ runtime, server, path, content, dialect })
         recordFileActivity({
           recordActivity,
           server,
@@ -255,11 +329,19 @@ export function createRemoteWriteTool({ runtime, config, loadInventory, recordAc
           command: `remote_write ${path}`,
           outcome: 'success',
         })
+        const note =
+          result?.atomic === true
+            ? ' (atomic replace)'
+            : result?.fallback === 'symlink'
+              ? ' (written through symlink)'
+              : result?.fallback === 'windows'
+                ? ' (direct write: atomic replace is not available on Windows targets)'
+                : ''
         return {
           text: renderHeader({
             server,
             path,
-            extra: [`wrote: ${result?.bytes ?? bytes} bytes`],
+            extra: [`wrote: ${result?.bytes ?? bytes} bytes${note}`],
           }).join('\n'),
         }
       } catch (error) {
@@ -281,7 +363,7 @@ export function createRemoteEditTool({ runtime, config, loadInventory, recordAct
   return defineTool({
     name: REMOTE_EDIT_TOOL_NAME,
     description:
-      'Replace text in a UTF-8 file on a managed remote resource. By default oldText must match exactly once; set replaceAll=true to replace every occurrence. Requires remoteFileWrite to be enabled.',
+      'Replace text in a UTF-8 file on a managed remote resource. By default oldText must match exactly once; set replaceAll=true to replace every occurrence. Requires remote writes to be enabled in the plugin settings.',
     parameters: {
       server: { type: 'string', required: true, description: 'Managed resource name or id.' },
       path: { type: 'string', required: true, description: 'Absolute remote path, or a path under ~.' },
@@ -314,7 +396,7 @@ export function createRemoteEditTool({ runtime, config, loadInventory, recordAct
         }
         const next = args?.replaceAll === true ? source.split(oldText).join(newText) : source.replace(oldText, newText)
         if (byteLength(next) > cap) throw new Error(`edited file would exceed the ${cap}-byte write limit`)
-        await runtime.sftpWrite(server, path, next)
+        const written = await writeRemoteFile({ runtime, server, path, content: next, dialect })
         recordFileActivity({
           recordActivity,
           server,
@@ -323,11 +405,12 @@ export function createRemoteEditTool({ runtime, config, loadInventory, recordAct
           command: `remote_edit ${path}`,
           outcome: 'success',
         })
+        const modeNote = written?.atomic === true ? ', atomic replace' : ''
         return {
           text: renderHeader({
             server,
             path,
-            extra: [`replacements: ${args?.replaceAll === true ? occurrences : 1}`],
+            extra: [`replacements: ${args?.replaceAll === true ? occurrences : 1}${modeNote}`],
           }).join('\n'),
         }
       } catch (error) {

package/lib/core/ssh.js

@@ -269,6 +269,26 @@ export function createSshRuntime({ getSecret, knownHosts, config = {}, log = ()
     }))
   }
 
+  /**
+   * `stat` follows symlinks; `lstat` reports the link itself. Atomic writes use
+   * this to avoid replacing a symlink with a regular file.
+   */
+  async function sftpLstat(server, remotePath) {
+    return await withSftp(server, (sftp) => new Promise((resolve, reject) => {
+      sftp.lstat(remotePath, (error, attrs) => {
+        if (error) return reject(toSftpError(error))
+        const type = typeof attrs?.isSymbolicLink === 'function' && attrs.isSymbolicLink() ? 'link' : undefined
+        resolve({ path: remotePath, ...statOf(attrs), ...(type ? { type } : {}) })
+      })
+    }))
+  }
+
+  async function sftpChmod(server, remotePath, mode) {
+    return await withSftp(server, (sftp) => new Promise((resolve, reject) => {
+      sftp.chmod(remotePath, mode, (error) => (error ? reject(toSftpError(error)) : resolve({ path: remotePath, mode })))
+    }))
+  }
+
   function clampReadBytes(value, fallback) {
     const hardCap = 64 * 1024 * 1024
     return Number.isInteger(value) ? Math.max(1024, Math.min(value, hardCap)) : fallback
@@ -707,6 +727,8 @@ export function createSshRuntime({ getSecret, knownHosts, config = {}, log = ()
     withSftp,
     sftpList,
     sftpStat,
+    sftpLstat,
+    sftpChmod,
     sftpHome,
     sftpRead,
     sftpReadBuffer,

package/lib/index.js

@@ -14,7 +14,7 @@ import path from 'node:path'
 import z from '@deepseek-ai/schemastery'
 
 import { loadServers, saveServers } from './core/store.js'
-import { loadPrefs, savePrefs } from './core/prefs.js'
+import { loadPrefs, savePrefs, resolveRemoteFileWrite, resolveSystemFileHierarchy } from './core/prefs.js'
 import { createTerminalHub } from './core/terminals.js'
 import { createLocalFs } from './core/localfs.js'
 import { createSecretStore } from './core/secrets.js'
@@ -59,6 +59,9 @@ export const Config = z.object({
   remoteFileReadBytes: z.natural().default(262144),
   remoteFileEditBytes: z.natural().default(2097152),
   remoteFileWrite: z.boolean().default(false),
+  // Replaces the native right-sidebar files page with the hierarchical local
+  // browser when enabled. Off by default so DSH's own file page is untouched.
+  systemFileHierarchy: z.boolean().default(false),
   remoteGlobMaxResults: z.natural().default(200),
   remoteGlobMaxDepth: z.natural().default(4),
   remoteGrepMaxResults: z.natural().default(200),
@@ -95,6 +98,7 @@ const APPLY_DEFAULTS = {
   remoteFileReadBytes: 262144,
   remoteFileEditBytes: 2097152,
   remoteFileWrite: false,
+  systemFileHierarchy: false,
   remoteGlobMaxResults: 200,
   remoteGlobMaxDepth: 4,
   remoteGrepMaxResults: 200,
@@ -117,7 +121,7 @@ const textOut = {
 export { APPLY_DEFAULTS }
 
 /** Public settings safe to show in the Client settings/state page. */
-export function publicConfig(config) {
+export function publicConfig(config, prefs) {
   return {
     hostKeyMode: config.hostKeyMode,
     connectTimeoutMs: config.connectTimeoutMs,
@@ -131,7 +135,8 @@ export function publicConfig(config) {
     maxBatchOutputBytes: config.maxBatchOutputBytes,
     remoteFileReadBytes: config.remoteFileReadBytes,
     remoteFileEditBytes: config.remoteFileEditBytes,
-    remoteFileWrite: config.remoteFileWrite === true,
+    remoteFileWrite: resolveRemoteFileWrite(config, prefs),
+    systemFileHierarchy: resolveSystemFileHierarchy(config, prefs),
     remoteGlobMaxResults: config.remoteGlobMaxResults,
     remoteGlobMaxDepth: config.remoteGlobMaxDepth,
     remoteGrepMaxResults: config.remoteGrepMaxResults,
@@ -353,7 +358,7 @@ export function apply(ctx, config, deps = {}) {
       remoteAvailable,
       hostPlatform: hostOs,
       maxContextServers: 20,
-      remoteFileWrite: config.remoteFileWrite === true,
+      loadRemoteFileWrite: () => resolveRemoteFileWrite(config, loadPrefs()),
     })
   }
 
@@ -400,7 +405,7 @@ export function apply(ctx, config, deps = {}) {
       prefs: { load: () => loadPrefs(), save: (patch) => savePrefs(patch) },
       terminals,
       localfs,
-      publicConfig: () => publicConfig(config),
+      publicConfig: () => publicConfig(config, loadPrefs()),
     }),
   )
   if (typeof ctx.effect === 'function') {

package/lib/routes.js

@@ -387,10 +387,24 @@ export function createRoutes({ loadServers, saveServers, runtime, secrets, known
       }
 
       if (rel === '/prefs') {
-        if (typeof body.sidebar !== 'boolean') {
-          return send(res, 400, { ok: false, error: 'prefs.sidebar must be a boolean' })
+        const patch = {}
+        if (typeof body.sidebar === 'boolean') patch.sidebar = body.sidebar
+        // `null` clears the override and falls back to the plugin config.
+        if (typeof body.remoteFileWrite === 'boolean' || body.remoteFileWrite === null) {
+          patch.remoteFileWrite = body.remoteFileWrite
         }
-        return send(res, 200, { ok: true, prefs: prefsApi.save({ sidebar: body.sidebar }) })
+        if (typeof body.systemFileHierarchy === 'boolean' || body.systemFileHierarchy === null) {
+          patch.systemFileHierarchy = body.systemFileHierarchy
+        }
+        if (Object.keys(patch).length === 0) {
+          return send(res, 400, { ok: false, error: 'prefs patch must contain sidebar, remoteFileWrite and/or systemFileHierarchy' })
+        }
+        const saved = prefsApi.save(patch)
+        return send(res, 200, {
+          ok: true,
+          prefs: saved,
+          config: typeof publicConfig === 'function' ? publicConfig() : undefined,
+        })
       }
 
       if (rel === '/terminal/open') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-ssh-workbench",
-  "version": "1.7.0",
+  "version": "1.7.8",
   "description": "远程工作台：SSH 终端、本地与远程文件、@服务器 对话执行；显式目标的远程 shell 与 read/glob/grep，Windows 宿主和目标都能用。DeepSeek Harness SSH workbench plugin.",
   "type": "module",
   "main": "lib/index.js",
@@ -38,7 +38,10 @@
       "platform": "web",
       "inject": [
         "@deepseek-ai/dsh-client-ui-renderer",
-        "@deepseek-ai/dsh-client-locale"
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-context-menu",
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-api-session-controller"
       ]
     }
   },
@@ -48,6 +51,9 @@
     "@deepseek-ai/schemastery": "^3.18.5",
     "@deepseek-ai/dsh-client-ui-renderer": ">=0.2.1-rc.1 <0.3.0",
     "@deepseek-ai/dsh-client-locale": ">=0.2.1-rc.1 <0.3.0",
+    "@deepseek-ai/dsh-client-ui-context-menu": ">=0.2.1-rc.1 <0.3.0",
+    "@deepseek-ai/dsh-api-remotes": ">=0.2.1-rc.1 <0.3.0",
+    "@deepseek-ai/dsh-api-session-controller": ">=0.2.1-rc.1 <0.3.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1"
   },
@@ -57,6 +63,15 @@
     },
     "@deepseek-ai/dsh-client-locale": {
       "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-context-menu": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-api-remotes": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-api-session-controller": {
+      "optional": true
     }
   },
   "scripts": {