dsh-ssh-workbench 1.7.8 → 1.7.9

package/CHANGELOG.md

@@ -4,6 +4,16 @@
 
 > 产品对外名称：**SSH Workbench / 远程工作台**（v1.6.4 起统一）。包名 `dsh-ssh-workbench`、数据目录 `~/.dsh/ssh-workbench`。历史条目中的旧标识已统一为当前名称，便于检索。
 
+## [1.7.9] - 2026-11-14
+
+### 修复（Windows 系统「工作区文件」）
+
+- 层级模式改为按**会话 `cwd`** 创建受限的本地文件浏览根，不再套用工作台本地面板的 `localRoot`。Windows 会话目录在用户目录之外（如 `C:\A\B\lumina`）时也可以正常浏览；越出会话目录仍会被拒绝。
+- 面包屑首段显示会话完整路径，Windows 下用 `\` 分隔；路径根为完整 `C:\...` 时不再只显示最后一段。
+- 本地文件路由支持 `session` 作用域；分块读写会记录并复用打开它的会话作用域。
+- `withinRoot` 对 Windows 盘符/UNC 路径做大小写不敏感比较。
+- 层级页工具栏增加「选择目录」按钮（调用 DSH Host 原生目录选择器），选择结果仍限制在当前会话目录内。
+
 ## [1.7.8] - 2026-11-14
 
 ### 变更（远程执行能力补齐）

package/README.md

@@ -32,7 +32,7 @@ DeepSeek Harness 的**远程工作台**：SSH 终端、本地与远程文件、@
 | 执行统计 | composer 下方的 pill 只读展示本会话的远程执行次数，结构对齐 DSH Token 用量弹窗：标题「远程执行」+ 总次数、分隔线、目标名 → 次数；没有执行时不显示。执行中 pill 会实时显示当前目标（单目标为 `host165 · 执行中`，多目标为 `2 个目标 · 执行中`），1.5 秒轮询；它不切换目标、不打开工作台，也不显示成功/失败或用时 |
 | 远程工作台 | 左侧导航的独立页面：左侧终端（本地终端 / 远程 SSH 终端），右侧文件管理（本地用户主目录 / 远程 SFTP，远程默认打开登录 home），文件可**在工作台内直接预览**，拖动分隔条调整宽度；每个页签一个终端会话，仅活动页签轮询、非活动页签暂停并在切回时续读（UI 能力，不占模型工具） |
 | 侧边栏开关 | 插件管理 → 远程工作台 → 页面里的「在侧边栏显示远程工作台」可关闭左侧导航入口；关闭后 `@资源名` 远程执行、设置页与模型工具不受影响 |
-| 系统文件层级模式 | 插件管理 → 远程工作台 → 「系统文件浏览使用层级模式」默认关闭。开启后右侧栏「工作区文件」改为带面包屑/上级导航的层级浏览器，只浏览当前会话目录；保留 DSH 原生的刷新、搜索与「在应用中打开」（含选择其他应用）；关闭恢复 DSH 原生页面 |
+| 系统文件层级模式 | 插件管理 → 远程工作台 → 「系统文件浏览使用层级模式」默认关闭。开启后右侧栏「工作区文件」改为带面包屑/上级导航的层级浏览器，只浏览当前会话目录；保留 DSH 原生的刷新、搜索与「在应用中打开」（含选择其他应用），并提供「选择目录」按钮在会话目录内跳转；关闭恢复 DSH 原生页面 |
 | 危险命令黑名单 | `rm -rf /`、`mkfs`、`dd of=/dev/*`、`fdisk/parted/wipefs`、改根目录权限、fork bomb 等同步拦截；多行脚本、`&`、引号/转义、路径变体、`$()`/`eval` 都会先还原再判断；其他命令交给 DSH 审批 |
 
 **不做**：诊断包、HTTP 探测、跨主机文件分发、远程 IDE/SSHFS/透明代理（远程文件能力是显式的 `remote_*` 工具，不把本地 `read`/`write` 隐式重定向到远端）、命令分级（allow/guarded）、AI 风险解释和审计。
@@ -50,7 +50,7 @@ dsh plugin --profile desktop add dsh-ssh-workbench
 ```bash
 npm test
 npm run pack
-# 然后在 DSH 的插件管理里安装 dist/dsh-ssh-workbench-1.7.8.tgz
+# 然后在 DSH 的插件管理里安装 dist/dsh-ssh-workbench-1.7.9.tgz
 ```
 
 发布包是**自包含**的：SSH 传输依赖（纯 JS 的 ssh2 及其依赖）已放在 `vendor/` 里随包携带，安装时不会运行 `node-gyp`、不需要 Xcode Command Line Tools，也不会额外下载依赖；包体积因此略大（约 1.1 MB），换来任何机器开箱即装。组件与许可证见 `vendor/NOTICE.md`。
@@ -101,7 +101,7 @@ npm run pack
 ## 已知限制
 
 - **stdout/stderr 顺序**：两者是独立管道，收集后分开返回（与原生 bash 的值契约一致），交错顺序会丢失；看 `make`/`pip install` 这类日志时需要留意。
-- **Windows 本地路径**：工作台本地文件面板已按 Windows 分隔符处理面包屑与文件名；极少数外部工具生成的混合分隔符路径仍可能显示成一段，可在路径编辑框直接输入绝对路径。
+- **Windows 本地路径**：工作台本地文件面板按 Windows 分隔符处理面包屑与文件名；系统「工作区文件」层级模式以会话 `cwd` 为根，不受 `localRoot` 限制，可直接浏览 `C:\A\B\...` 这类工作区。
 - **`remote_exec` 批量规则**：一次最多 8 个 task、默认并发 4，所有结果共享 `maxBatchOutputBytes` 预算，超出会按任务截断；每个 task 都可以单独设置 `run_in_background`。
 - **后台任务**：`run_in_background` 返回的是远端 pid + 日志，不是 DSH 本地 job id；`timeoutMs` 和取消只影响启动调用，不作用于已脱离的进程。POSIX 日志默认写在 `~/.dsh/ssh-workbench/logs`（可用 `DSH_SSH_WORKBENCH_LOG_DIR` 覆盖），只有该目录不可写时才回退 `/tmp`。
 - **超时终止**：远端有 `timeout` 时，超时会连同远端进程组一起终止（支持 `-k` 时再补一次 KILL，缓冲时间可用 `timeoutKillAfterMs` 调整）；远端没有 `timeout` 时只能停止等待，stderr 会提示"命令可能仍在运行"。**取消（Esc）不会立刻杀远端**：通道关闭后远端仍会计时到自己的 deadline。

package/docs/architecture.md

@@ -1,4 +1,4 @@
-# SSH Workbench（dsh-ssh-workbench）架构（v1.7.8）
+# SSH Workbench（dsh-ssh-workbench）架构（v1.7.9）
 
 > 产品定位与用法见 [README.md](../README.md)；本文只讲实现分层。
 

package/docs/quickstart.md

@@ -10,7 +10,7 @@ npm test
 npm run pack
 ```
 
-然后安装 `dist/dsh-ssh-workbench-1.7.8.tgz`。安装后重启/重载插件。
+然后安装 `dist/dsh-ssh-workbench-1.7.9.tgz`。安装后重启/重载插件。
 
 插件管理 → 远程工作台里可以打开「系统文件浏览使用层级模式」：右侧栏「工作区文件」会换成插件的层级浏览器，范围仅限当前会话目录；默认关闭。
 

package/lib/client.js

@@ -194,6 +194,7 @@ window.__ModuleLoader__.load({
       'files.openInAppWith': '用 {app} 打开',
       'files.openInAppMore': '选择其他应用打开',
       'files.openInAppDefault': '{app}（默认）',
+      'files.pickDirectory': '选择目录',
       'files.search': '搜索文件',
       'files.searchPlaceholder': '搜索文件名或路径',
       'files.searchClear': '清空搜索',
@@ -460,6 +461,7 @@ window.__ModuleLoader__.load({
       'files.openInAppWith': 'Open with {app}',
       'files.openInAppMore': 'Open with another app',
       'files.openInAppDefault': '{app} (default)',
+      'files.pickDirectory': 'Choose folder',
       'files.search': 'Search files',
       'files.searchPlaceholder': 'Search by name or path',
       'files.searchClear': 'Clear search',
@@ -667,6 +669,8 @@ window.__ModuleLoader__.load({
     let sessionRemote = null
     /** Namespace service (`remote.workspaceFiles`) used by the local files search. */
     let workspaceFilesRemote = null
+    /** Workspace navigation service, for the Host-native directory picker. */
+    let uiWorkspaceService = null
 
 
     /** The open conversation's session id, exposed on the chat region for a11y/debugging. */
@@ -2511,6 +2515,7 @@ window.__ModuleLoader__.load({
     const iconFileGlyph = () => icon(14, [h('path', { d: 'M6.2 3.5h7.1l4.5 4.5v12.5H6.2z' }), h('path', { d: 'M13.3 3.5V8h4.5' })])
     const iconUpload = () => icon(14, [h('path', { d: 'M12 16V4' }), h('polyline', { points: '6 10 12 4 18 10' }), h('line', { x1: 4, y1: 20, x2: 20, y2: 20 })])
     const iconFolderPlus = () => icon(14, [h('path', { d: 'M3 7.4A1.7 1.7 0 0 1 4.7 5.7h3.9l1.8 2.1h7.9A1.7 1.7 0 0 1 20 9.5v7.8a1.7 1.7 0 0 1-1.7 1.7H4.7A1.7 1.7 0 0 1 3 17.3V7.4z' }), h('line', { x1: 12, y1: 12, x2: 12, y2: 17 }), h('line', { x1: 9.5, y1: 14.5, x2: 14.5, y2: 14.5 })])
+    const iconFolderOpen = () => icon(14, [h('path', { d: 'M3 7.4A1.7 1.7 0 0 1 4.7 5.7h3.9l1.8 2.1h6.4A1.7 1.7 0 0 1 18.5 9.5v1' }), h('path', { d: 'M3.4 10.2h17.2l-1.8 7.4a1.5 1.5 0 0 1-1.5 1.2H5.2a1.5 1.5 0 0 1-1.5-1.2L2 11.6a1.2 1.2 0 0 1 1.4-1.4z' })])
 
     function nativeFileIcon(name) {
       const FileTypeIcon = primitives && primitives.FileTypeIcon
@@ -2985,6 +2990,18 @@ window.__ModuleLoader__.load({
       }
     }
 
+    /** Ask the Host for a directory. The hierarchy page still clamps it to the session root. */
+    async function pickHostDirectory() {
+      const workspace = uiWorkspaceService
+      if (!workspace || typeof workspace.pickDirectory !== 'function') return null
+      try {
+        const picked = await workspace.pickDirectory()
+        return typeof picked === 'string' && picked ? picked : null
+      } catch {
+        return null
+      }
+    }
+
     /**
      * List the apps the Host would use for one path: the same call the official
      * "open in app" split button makes, so the menu matches DSH exactly.
@@ -3075,12 +3092,23 @@ window.__ModuleLoader__.load({
        * gains "open in app" instead.
        */
       const localChrome = localMode && props.openNative === true
+      /**
+       * The hierarchy page asks the Host for the session workspace root. Local
+       * file routes use this id to scope the browser to that workspace instead
+       * of the workbench's localRoot (Windows workspaces may live elsewhere).
+       */
+      const localSession = localMode && typeof props.sessionId === 'string' && props.sessionId ? props.sessionId : undefined
+      const filesPost = (path, payload) => post(path, localSession ? { ...payload, session: localSession } : payload)
       const withinRoot = (value) => {
         const normalize = (input) => String(input || '/').replace(/[\\/]+/g, '/').replace(/\/+$/, '') || '/'
         const root = normalize(navRoot)
         const next = normalize(value)
         if (root === '/') return next.startsWith('/')
-        return next === root || next.startsWith(`${root}/`)
+        // Windows paths and UNC shares are case-insensitive.
+        const fold = (text) => (/^[A-Za-z]:/.test(text) || text.startsWith('//') ? text.toLowerCase() : text)
+        const foldedRoot = fold(root)
+        const foldedNext = fold(next)
+        return foldedNext === foldedRoot || foldedNext.startsWith(`${foldedRoot}/`)
       }
       const [servers, setServers] = useState([])
       const [server, setServer] = useState(localMode ? (controlledServer ?? '__local__') : (controlledServer ?? ''))
@@ -3178,7 +3206,7 @@ window.__ModuleLoader__.load({
         setLoading(true)
         setError('')
         try {
-          const body = await post('/sftp/list', { ref: name, path, ...(force ? { refresh: true } : {}) })
+          const body = await filesPost('/sftp/list', { ref: name, path, ...(force ? { refresh: true } : {}) })
           if (seq !== loadSeqRef.current) return
           setEntries(sortEntries(body.result || []))
         } catch (cause) {
@@ -3259,6 +3287,15 @@ window.__ModuleLoader__.load({
         setDir(target)
         setNotice('')
       }
+      const chooseDirectory = async () => {
+        const picked = await pickHostDirectory()
+        if (!picked) return
+        if (lockRoot && !withinRoot(picked)) {
+          setError(t('files.outsideRoot'))
+          return
+        }
+        navigate(picked)
+      }
       const goBack = () => {
         if (backStack.length === 0) return
         setDir(backStack[backStack.length - 1])
@@ -3413,7 +3450,7 @@ window.__ModuleLoader__.load({
         })
         let listing = entries
         try {
-          const body = await post('/sftp/list', { ref: server, path: dir })
+          const body = await filesPost('/sftp/list', { ref: server, path: dir })
           listing = body.result || []
         } catch { /* keep the cached listing */ }
         const reserved = new Set(listing.map((entry) => entry.name))
@@ -3470,7 +3507,7 @@ window.__ModuleLoader__.load({
             let sessionError = null
             let currentBytes = 0
             try {
-              const opened = await post('/sftp/open-write', { ref: server, path: partPath, truncate: true })
+              const opened = await filesPost('/sftp/open-write', { ref: server, path: partPath, truncate: true })
               session = opened.result.session
               sessionOpen = true
               partCreated = true
@@ -3486,7 +3523,7 @@ window.__ModuleLoader__.load({
                 signal: controller.signal,
                 loadChunk: async (offset, length) => new Uint8Array(await file.slice(offset, offset + length).arrayBuffer()),
                 saveChunk: async (offset, chunk) => {
-                  await post('/sftp/write-chunk', { session, offset, contentBase64: filesBytesToBase64(chunk) })
+                  await filesPost('/sftp/write-chunk', { session, offset, contentBase64: filesBytesToBase64(chunk) })
                 },
                 onChunkDone: (bytes) => { fileDone += bytes; currentBytes = fileDone; report() },
                 onContiguousDone: (offset) => { contiguous = offset },
@@ -3495,19 +3532,19 @@ window.__ModuleLoader__.load({
                 cancelled = true
                 sessionError = new Error('cancelled')
                 if (sessionOpen) {
-                  try { await post('/sftp/close-write', { session, abort: true }) } catch { /* already closed */ }
+                  try { await filesPost('/sftp/close-write', { session, abort: true }) } catch { /* already closed */ }
                   sessionOpen = false
                 }
                 if (single && partCreated) {
                   singlePart = { partPath, targetPath, contiguousBytes: contiguous, sourceMtimeMs: file.lastModified, transferredBytes: currentBytes }
                 }
               } else {
-                await post('/sftp/close-write', { session })
+                await filesPost('/sftp/close-write', { session })
                 sessionOpen = false
                 if (target.overwrite) {
-                  try { await post('/sftp/remove', { ref: server, path: targetPath }) } catch { /* may already be gone */ }
+                  try { await filesPost('/sftp/remove', { ref: server, path: targetPath }) } catch { /* may already be gone */ }
                 }
-                await post('/sftp/rename', { ref: server, path: partPath, targetPath })
+                await filesPost('/sftp/rename', { ref: server, path: partPath, targetPath })
                 reserved.add(target.name)
                 doneBytes += file.size
                 uploaded += 1
@@ -3516,14 +3553,14 @@ window.__ModuleLoader__.load({
             } catch (cause) {
               lastError = cause
               if (sessionOpen) {
-                try { await post('/sftp/close-write', { session, abort: true }) } catch { /* already closed */ }
+                try { await filesPost('/sftp/close-write', { session, abort: true }) } catch { /* already closed */ }
               }
               if (controller.signal.aborted) cancelled = true
               else failed += 1
               if (single && partCreated) {
                 singlePart = { partPath, targetPath, contiguousBytes: contiguous, sourceMtimeMs: file.lastModified, transferredBytes: currentBytes }
               } else {
-                try { await post('/sftp/remove', { ref: server, path: partPath }) } catch { /* best effort */ }
+                try { await filesPost('/sftp/remove', { ref: server, path: partPath }) } catch { /* best effort */ }
               }
             }
             if (cancelled) break
@@ -3600,7 +3637,7 @@ window.__ModuleLoader__.load({
         let session = ''
         let sessionOpen = false
         try {
-          const opened = await post('/sftp/open-write', { ref: server, path: record.partPath, truncate: false })
+          const opened = await filesPost('/sftp/open-write', { ref: server, path: record.partPath, truncate: false })
           session = opened.result.session
           sessionOpen = true
           let fileDone = startOffset
@@ -3613,27 +3650,27 @@ window.__ModuleLoader__.load({
             signal: controller.signal,
             loadChunk: async (offset, length) => new Uint8Array(await file.slice(offset, offset + length).arrayBuffer()),
             saveChunk: async (offset, chunk) => {
-              await post('/sftp/write-chunk', { session, offset, contentBase64: filesBytesToBase64(chunk) })
+              await filesPost('/sftp/write-chunk', { session, offset, contentBase64: filesBytesToBase64(chunk) })
             },
             onChunkDone: (bytes) => { fileDone += bytes; doneBytes = fileDone; report() },
           })
           if (outcome.outcome === 'cancelled') {
             patchRecord(record.id, { status: 'cancelled', bytes: doneBytes, contiguousBytes: outcome.contiguous, finishedAt: Date.now() })
-            await post('/sftp/close-write', { session, abort: true }).catch(() => undefined)
+            await filesPost('/sftp/close-write', { session, abort: true }).catch(() => undefined)
             sessionOpen = false
             setNotice(t('files.transferStatusCancelled'))
             return
           }
-          await post('/sftp/close-write', { session })
+          await filesPost('/sftp/close-write', { session })
           sessionOpen = false
-          try { await post('/sftp/remove', { ref: server, path: record.targetPath }) } catch { /* target may not exist */ }
-          await post('/sftp/rename', { ref: server, path: record.partPath, targetPath: record.targetPath })
+          try { await filesPost('/sftp/remove', { ref: server, path: record.targetPath }) } catch { /* target may not exist */ }
+          await filesPost('/sftp/rename', { ref: server, path: record.partPath, targetPath: record.targetPath })
           patchRecord(record.id, { status: 'completed', bytes: file.size, contiguousBytes: file.size, finishedAt: Date.now() })
           setNotice(t('files.transferStatusCompleted'))
           await loadDir(server, dir)
         } catch (cause) {
           if (sessionOpen) {
-            try { await post('/sftp/close-write', { session, abort: true }) } catch { /* already closed */ }
+            try { await filesPost('/sftp/close-write', { session, abort: true }) } catch { /* already closed */ }
           }
           patchRecord(record.id, { status: controller.signal.aborted ? 'cancelled' : 'partial', bytes: doneBytes, contiguousBytes: startOffset, finishedAt: Date.now(), error: messageOf(cause) })
           setError(t('files.uploadFailed', { msg: messageOf(cause) }))
@@ -3670,7 +3707,7 @@ window.__ModuleLoader__.load({
         let session = ''
         let received = 0
         try {
-          const opened = await post('/sftp/open-read', { ref: server, path: entry.path })
+          const opened = await filesPost('/sftp/open-read', { ref: server, path: entry.path })
           session = opened.result.session
           const size = opened.result.size ?? entry.size
           const data = new Uint8Array(size)
@@ -3679,7 +3716,7 @@ window.__ModuleLoader__.load({
             totalBytes: size,
             signal: controller.signal,
             loadChunk: async (offset, length) => {
-              const body = await post('/sftp/read-chunk', { session, offset, length })
+              const body = await filesPost('/sftp/read-chunk', { session, offset, length })
               return filesBase64ToBytes(body.result.base64)
             },
             saveChunk: async (offset, chunk) => { data.set(chunk, offset) },
@@ -3697,7 +3734,7 @@ window.__ModuleLoader__.load({
           setError(t('files.downloadFailed', { msg: messageOf(cause) }))
           pushRecord({ direction: 'download', name: entry.name, kind: 'file', source: entry.path, destination: entry.name, status: controller.signal.aborted ? 'cancelled' : 'failed', totalBytes: entry.size, bytes: received, fileCount: 1, failedCount: 1, averageSpeed: 0, startedAt, finishedAt: Date.now(), targetServer: server, error: messageOf(cause) })
         } finally {
-          if (session) { try { await post('/sftp/close-read', { session }) } catch { /* closed */ } }
+          if (session) { try { await filesPost('/sftp/close-read', { session }) } catch { /* closed */ } }
           setBusy('')
           endTransfer()
         }
@@ -3719,20 +3756,20 @@ window.__ModuleLoader__.load({
         let writeSession = ''
         let copied = 0
         try {
-          const openedRead = await post('/sftp/open-read', { ref: server, path: entry.path })
+          const openedRead = await filesPost('/sftp/open-read', { ref: server, path: entry.path })
           readSession = openedRead.result.session
-          const openedWrite = await post('/sftp/open-write', { ref: server, path: targetPath, truncate: true })
+          const openedWrite = await filesPost('/sftp/open-write', { ref: server, path: targetPath, truncate: true })
           writeSession = openedWrite.result.session
           const report = filesThrottle(() => patchTransfer({ label: t('files.copying', { name: entry.name }), ...transferProgress(copied, entry.size, startedAt) }))
           const outcome = await filesRunChunkWindow({
             totalBytes: entry.size,
             signal: controller.signal,
             loadChunk: async (offset, length) => {
-              const body = await post('/sftp/read-chunk', { session: readSession, offset, length }, { signal: controller.signal })
+              const body = await filesPost('/sftp/read-chunk', { session: readSession, offset, length }, { signal: controller.signal })
               return filesBase64ToBytes(body.result.base64)
             },
             saveChunk: async (offset, chunk) => {
-              await post('/sftp/write-chunk', { session: writeSession, offset, contentBase64: filesBytesToBase64(chunk) }, { signal: controller.signal })
+              await filesPost('/sftp/write-chunk', { session: writeSession, offset, contentBase64: filesBytesToBase64(chunk) }, { signal: controller.signal })
             },
             onChunkDone: (bytes) => { copied += bytes; report() },
           })
@@ -3740,20 +3777,20 @@ window.__ModuleLoader__.load({
             setNotice(t('files.transferStatusCancelled'))
             return
           }
-          await post('/sftp/close-write', { session: writeSession })
+          await filesPost('/sftp/close-write', { session: writeSession })
           writeSession = ''
-          await post('/sftp/close-read', { session: readSession })
+          await filesPost('/sftp/close-read', { session: readSession })
           readSession = ''
           setNotice(t('files.transferStatusCompleted'))
           await loadDir(server, dir)
         } catch (cause) {
-          if (writeSession) { try { await post('/sftp/close-write', { session: writeSession, abort: true }) } catch { /* closed */ } }
-          if (readSession) { try { await post('/sftp/close-read', { session: readSession }) } catch { /* closed */ } }
-          try { await post('/sftp/remove', { ref: server, path: targetPath }) } catch { /* best effort */ }
+          if (writeSession) { try { await filesPost('/sftp/close-write', { session: writeSession, abort: true }) } catch { /* closed */ } }
+          if (readSession) { try { await filesPost('/sftp/close-read', { session: readSession }) } catch { /* closed */ } }
+          try { await filesPost('/sftp/remove', { ref: server, path: targetPath }) } catch { /* best effort */ }
           setError(t('files.copyFailed', { msg: messageOf(cause) }))
         } finally {
-          if (writeSession) { try { await post('/sftp/close-write', { session: writeSession, abort: true }) } catch { /* closed */ } }
-          if (readSession) { try { await post('/sftp/close-read', { session: readSession }) } catch { /* closed */ } }
+          if (writeSession) { try { await filesPost('/sftp/close-write', { session: writeSession, abort: true }) } catch { /* closed */ } }
+          if (readSession) { try { await filesPost('/sftp/close-read', { session: readSession }) } catch { /* closed */ } }
           setBusy('')
           endTransfer()
         }
@@ -3773,7 +3810,7 @@ window.__ModuleLoader__.load({
         setBusy('rename')
         setError('')
         try {
-          await post('/sftp/rename', { ref: server, path: entry.path, targetPath: joinRemotePath(parentRemotePath(entry.path), value) })
+          await filesPost('/sftp/rename', { ref: server, path: entry.path, targetPath: joinRemotePath(parentRemotePath(entry.path), value) })
           setRenameTarget(null)
           setNotice(t('files.transferStatusCompleted'))
           await loadDir(server, dir)
@@ -3785,15 +3822,15 @@ window.__ModuleLoader__.load({
       }
 
       const removeRecursive = async (path, isDir) => {
-        if (!isDir) return await post('/sftp/remove', { ref: server, path })
+        if (!isDir) return await filesPost('/sftp/remove', { ref: server, path })
         try {
-          return await post('/sftp/remove', { ref: server, path, isDir: true })
+          return await filesPost('/sftp/remove', { ref: server, path, isDir: true })
         } catch (cause) {
-          const body = await post('/sftp/list', { ref: server, path })
+          const body = await filesPost('/sftp/list', { ref: server, path })
           const children = body.result || []
           if (children.length === 0) throw cause
           for (const child of children) await removeRecursive(child.path, child.type === 'dir')
-          return await post('/sftp/remove', { ref: server, path, isDir: true })
+          return await filesPost('/sftp/remove', { ref: server, path, isDir: true })
         }
       }
 
@@ -3823,7 +3860,7 @@ window.__ModuleLoader__.load({
         setBusy('mkdir')
         setError('')
         try {
-          await post('/sftp/mkdir', { ref: server, path: targetPath })
+          await filesPost('/sftp/mkdir', { ref: server, path: targetPath })
           setDialog(null)
           setNotice(t('files.created', { name: value }))
           navigate(targetPath)
@@ -4245,6 +4282,12 @@ window.__ModuleLoader__.load({
         : appsMenu
           ? appsMenu
           : tool(t('files.openInApp'), iconRightUp(), () => { void openHostPath(dir) }, !server)
+      // The hierarchy page is rooted at the session workspace. This picker lets
+      // the user jump within that workspace without typing a path; selections
+      // outside it are rejected by chooseDirectory().
+      const pickControl = !localChrome
+        ? null
+        : tool(t('files.pickDirectory'), iconFolderOpen(), () => { void chooseDirectory() }, !server)
 
       const transferBar = transfer
         ? h('div', {
@@ -4495,7 +4538,7 @@ window.__ModuleLoader__.load({
                   ? crumbs.map((crumb, index) => {
                       const isLast = index === crumbs.length - 1
                       return h('span', { key: crumb.path, style: { display: 'inline-flex', alignItems: 'center', flexShrink: 0 } },
-                        index > 1 ? h('span', { style: { color: 'var(--dsw-alias-label-tertiary, inherit)', padding: '0 1px' } }, '/') : null,
+                        index > 1 ? h('span', { style: { color: 'var(--dsw-alias-label-tertiary, inherit)', padding: '0 1px' } }, pathSeparatorFor(navRoot)) : null,
                         h('button', {
                           type: 'button',
                           className: 'dsh-ssh-workbench-files-crumb',
@@ -4531,6 +4574,7 @@ window.__ModuleLoader__.load({
             ? null
             : tool(t('files.newFolder'), iconFolderPlus(), () => setDialog({ value: '' }), !server || transfer != null),
           tool(showHidden ? t('files.hideHidden') : t('files.showHidden'), iconEye(showHidden), toggleHidden, !server, { 'aria-pressed': showHidden }),
+          pickControl,
           tool(t('files.refresh'), RefreshIcon ? h(RefreshIcon, { size: 15 }) : refreshingIcon(), () => loadDir(server, dir, true), !server),
           searchToggle,
           localChrome
@@ -5595,6 +5639,8 @@ ${d.join(`
         // Workspace search for the local hierarchy page comes from the same
         // gateway namespace the native files page uses (packaged ripgrep).
         ctx.inject(['remote.workspaceFiles'], (inner) => { workspaceFilesRemote = inner.get('remote.workspaceFiles') ?? null })
+        // Host-native directory picker used by the hierarchy page path control.
+        ctx.inject(['uiWorkspace'], (inner) => { uiWorkspaceService = inner.get('uiWorkspace') ?? null })
         // Native file rows reuse the official context menu: right-click and
         // Shift+F10 come from its trigger bindings, and the actions below are
         // resolved when the menu opens.
@@ -5794,7 +5840,7 @@ ${d.join(`
                 controlledServer: '__local__',
                 rootPath: cwd,
                 initialPath: cwd,
-                rootLabel: baseNameOf(cwd) || cwd,
+                rootLabel: cwd,
                 lockRoot: true,
                 openNative: true,
                 hideServerPicker: true,

package/lib/index.js

@@ -368,10 +368,18 @@ export function apply(ctx, config, deps = {}) {
   // the OS user home (what users expect from the local pane of an SSH client);
   // `localRoot` can pin another directory. All access stays confined by localfs.
   let subprocessService = null
+  let sessionsService = null
   if (typeof ctx.inject === 'function') {
     ctx.inject(['subprocess'], (inner) => {
       subprocessService = inner.get('subprocess') ?? null
     })
+    // The hierarchy files page browses the session workspace, which may live
+    // outside the local-pane root (`C:\A\B\lumina` on Windows). Resolving the
+    // root from the live session keeps that page usable without widening the
+    // workbench's localRoot boundary for every other local operation.
+    ctx.inject(['sessions'], (inner) => {
+      sessionsService = inner.get('sessions') ?? null
+    })
   }
   const expandedLocalRoot = expandLocalRoot(config.localRoot)
   if (expandedLocalRoot && !path.isAbsolute(expandedLocalRoot)) {
@@ -405,6 +413,13 @@ export function apply(ctx, config, deps = {}) {
       prefs: { load: () => loadPrefs(), save: (patch) => savePrefs(patch) },
       terminals,
       localfs,
+      getSessionCwd: (sessionId) => {
+        try {
+          return sessionsService?.get?.(sessionId)?.header?.cwd
+        } catch {
+          return undefined
+        }
+      },
       publicConfig: () => publicConfig(config, loadPrefs()),
     }),
   )

package/lib/routes.js

@@ -10,9 +10,11 @@
  * Every browser-facing request is fenced by `ctx.connection.requestRejection`
  * when the Connection service exists.
  */
+import path from 'node:path'
 import { Readable } from 'node:stream'
 
 import { createLocalFileApi, LOCAL_FILE_REF } from './core/local-file-api.js'
+import { createLocalFs } from './core/localfs.js'
 import { effectiveDialect } from './core/dialect.js'
 import { SshError } from './core/errors.js'
 import { summarizeExecution } from './core/execution-stats.js'
@@ -165,7 +167,7 @@ function lastExecutedServer(entries, session) {
   return entry?.server ?? null
 }
 
-export function createRoutes({ loadServers, saveServers, runtime, secrets, knownHosts, targets, liveExecutions, refreshFacts, prefs, terminals, localfs, publicConfig, activity }) {
+export function createRoutes({ loadServers, saveServers, runtime, secrets, knownHosts, targets, liveExecutions, refreshFacts, prefs, terminals, localfs, getSessionCwd, publicConfig, activity }) {
   const prefsApi = prefs ?? {
     load: () => ({ sidebar: true }),
     save: () => ({ sidebar: true }),
@@ -173,6 +175,36 @@ export function createRoutes({ loadServers, saveServers, runtime, secrets, known
   // Reuse the files panel for the local workspace by giving it the same
   // method surface as the SSH runtime under the synthetic `__local__` ref.
   const localFiles = localfs ? createLocalFileApi(localfs) : null
+  /**
+   * Session-scoped local file APIs. The hierarchy page browses a session's
+   * cwd, which may sit outside the local-pane root (e.g. `C:\A\B\lumina` on
+   * Windows). The scoped API keeps the same boundary checks, just rooted at the
+   * live session workspace instead of `localRoot`.
+   */
+  const scopedLocalFiles = new Map()
+  /** Local transfer session id → the API instance that opened it. */
+  const localTransferOwners = new Map()
+
+  function localApiForSession(sessionId) {
+    if (!localfs || !getSessionCwd || typeof sessionId !== 'string' || !sessionId) return localFiles
+    let cwd
+    try {
+      cwd = getSessionCwd(sessionId)
+    } catch {
+      return localFiles
+    }
+    if (typeof cwd !== 'string' || !cwd || !path.isAbsolute(cwd)) return localFiles
+    let api = scopedLocalFiles.get(cwd)
+    if (!api) {
+      api = createLocalFileApi(createLocalFs({ getRoot: () => cwd }))
+      scopedLocalFiles.set(cwd, api)
+    }
+    return api
+  }
+
+  function localTransferApi(sessionId) {
+    return localTransferOwners.get(sessionId) ?? (localFiles && sessionId.startsWith('loc') ? localFiles : null)
+  }
   // Small UI-facing caches: a repeated directory view or connection test should
   // not pay another round trip. Write operations invalidate the affected server.
   const TEST_TTL_MS = 30000
@@ -262,9 +294,10 @@ export function createRoutes({ loadServers, saveServers, runtime, secrets, known
    * workstream); fall back to `localfs.rootReal()` and finally the lexical
    * `localfs.root()` so this route keeps working while the two land.
    */
-  async function localHomeDirectory() {
+  async function localHomeDirectory(sessionId) {
     const sources = []
-    if (typeof localFiles?.sftpHome === 'function') sources.push(() => localFiles.sftpHome())
+    const api = localApiForSession(sessionId)
+    if (typeof api?.sftpHome === 'function') sources.push(() => api.sftpHome())
     if (typeof localfs?.rootReal === 'function') sources.push(() => localfs.rootReal())
     if (typeof localfs?.root === 'function') sources.push(() => localfs.root())
     if (sources.length === 0) throw new Error('local files are unavailable on this host')
@@ -291,11 +324,11 @@ export function createRoutes({ loadServers, saveServers, runtime, secrets, known
   }
 
   /** GET/POST /sftp/home → `{ ok:true, result:{ home } }` (U5). */
-  async function serveSftpHome(res, ref) {
+  async function serveSftpHome(res, ref, sessionId) {
     if (!ref) return send(res, 400, { ok: false, error: 'ref is required' })
     try {
       if (ref === LOCAL_FILE_REF) {
-        const home = await localHomeDirectory()
+        const home = await localHomeDirectory(sessionId)
         return send(res, 200, { ok: true, result: { home } })
       }
       const server = findTarget(loadServers(), ref)
@@ -366,15 +399,19 @@ export function createRoutes({ loadServers, saveServers, runtime, secrets, known
       if (req.method === 'GET' && rel === '/localfs/root') {
         if (!localfs) return send(res, 503, { ok: false, error: 'local files are unavailable on this host' })
         // S3: list()/entry paths are canonicalized through realpath, so the
-        // navigation root handed to the client must use the same form.
-        const root = typeof localfs.rootReal === 'function'
-          ? await localfs.rootReal()
-          : await Promise.resolve(localfs.root())
+        // navigation root handed to the client must use the same form. A
+        // `session` query scopes this to the session workspace (hierarchy page).
+        const api = localApiForSession(searchParams.get('session'))
+        const root = typeof api?.sftpHome === 'function'
+          ? await api.sftpHome()
+          : typeof localfs.rootReal === 'function'
+            ? await localfs.rootReal()
+            : await Promise.resolve(localfs.root())
         return send(res, 200, { ok: true, result: { root } })
       }
       if (req.method === 'GET' && rel === '/sftp/home') {
         const ref = resolveRef(searchParams.get('ref') ?? searchParams.get('server') ?? searchParams.get('name'))
-        return await serveSftpHome(res, ref)
+        return await serveSftpHome(res, ref, searchParams.get('session'))
       }
       if (req.method !== 'POST') return send(res, 404, { ok: false, error: 'not found' })
       const body = await readBody(req)
@@ -383,7 +420,7 @@ export function createRoutes({ loadServers, saveServers, runtime, secrets, known
         const ref = resolveRef(
           body.ref ?? body.server ?? body.name ?? searchParams.get('ref') ?? searchParams.get('server') ?? searchParams.get('name'),
         )
-        return await serveSftpHome(res, ref)
+        return await serveSftpHome(res, ref, body.session)
       }
 
       if (rel === '/prefs') {
@@ -451,7 +488,7 @@ export function createRoutes({ loadServers, saveServers, runtime, secrets, known
       // Chunked transfer sessions: the client holds a session id, so these
       // routes do not take a server ref. They must run before ref resolution.
       const sessionId = typeof body.session === 'string' ? body.session : ''
-      const localTransfer = localFiles && sessionId.startsWith('loc') ? localFiles : null
+      const localTransfer = localTransferApi(sessionId)
       if (rel === '/sftp/write-chunk') {
         if (!sessionId) return send(res, 400, { ok: false, error: 'session is required' })
         // B10: offset used to be silently coerced to 0 by the runtime, which
@@ -477,6 +514,7 @@ export function createRoutes({ loadServers, saveServers, runtime, secrets, known
           return send(res, 200, { ok: true, result })
         }
         const result = await fileOp('finish upload', undefined, () => api.sftpCloseTransfer(sessionId, { verify: true }))
+        localTransferOwners.delete(sessionId)
         // F1/B5/B8: the local adapter used to return no `server`, so the dir
         // cache was cleared for `undefined` and the activity log said
         // "unknown". Prefer the reported id, fall back to the synthetic local
@@ -508,6 +546,7 @@ export function createRoutes({ loadServers, saveServers, runtime, secrets, known
         if (!sessionId) return send(res, 400, { ok: false, error: 'session is required' })
         const api = localTransfer ?? runtime
         const result = await fileOp('close download', undefined, () => api.sftpCloseTransfer(sessionId))
+        localTransferOwners.delete(sessionId)
         return send(res, 200, { ok: true, result })
       }
 
@@ -515,9 +554,11 @@ export function createRoutes({ loadServers, saveServers, runtime, secrets, known
       const servers = loadServers()
       let target
       let fileApi = runtime
+      let localApi = null
       if (ref === LOCAL_FILE_REF && localFiles) {
-        target = localFiles.server
-        fileApi = localFiles
+        localApi = localApiForSession(body.session)
+        target = localApi.server
+        fileApi = localApi
       } else {
         target = ref ? findTarget(servers, ref) : undefined
       }
@@ -619,11 +660,15 @@ export function createRoutes({ loadServers, saveServers, runtime, secrets, known
 
       if (rel === '/sftp/open-write') {
         if (typeof body.path !== 'string') return send(res, 400, { ok: false, error: 'path is required' })
-        return send(res, 200, { ok: true, result: await fileOp('open for writing', body.path, () => fileApi.sftpOpenWrite(target, body.path, body.truncate !== false)) })
+        const result = await fileOp('open for writing', body.path, () => fileApi.sftpOpenWrite(target, body.path, body.truncate !== false))
+        if (localApi && typeof result?.session === 'string') localTransferOwners.set(result.session, localApi)
+        return send(res, 200, { ok: true, result })
       }
       if (rel === '/sftp/open-read') {
         if (typeof body.path !== 'string') return send(res, 400, { ok: false, error: 'path is required' })
-        return send(res, 200, { ok: true, result: await fileOp('open for reading', body.path, () => fileApi.sftpOpenRead(target, body.path)) })
+        const result = await fileOp('open for reading', body.path, () => fileApi.sftpOpenRead(target, body.path))
+        if (localApi && typeof result?.session === 'string') localTransferOwners.set(result.session, localApi)
+        return send(res, 200, { ok: true, result })
       }
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-ssh-workbench",
-  "version": "1.7.8",
+  "version": "1.7.9",
   "description": "远程工作台：SSH 终端、本地与远程文件、@服务器 对话执行；显式目标的远程 shell 与 read/glob/grep，Windows 宿主和目标都能用。DeepSeek Harness SSH workbench plugin.",
   "type": "module",
   "main": "lib/index.js",