From f8342b0a8e1ce85497a97a26325ac1c6904dbd1f Mon Sep 17 00:00:00 2001
From: Tianyi Cui <53024+tianyicui@users.noreply.github.com>
Date: Sun, 26 Jul 2026 20:38:36 +0800
Subject: [PATCH] test(web): cover the settings surface and workspace
 management
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Two new keyless scenarios for the functionality master gained since this
lane's base (#644 websettings, #643 workspace browser rework), both zero
model calls:

- settings-chrome: the modal shell (sidebar-foot trigger aria states,
  role=dialog, aria-current section switch to the deliberately empty
  Models, Escape + close-button paths, dialog aria golden); the Appearance
  row as the REAL theme gesture — retiring lifecycle-chrome's
  TODO(web-theme-gesture): clicking 深色 runs aria-pressed -> persisted
  dsh.theme -> body[data-ds-dark-theme] -> alias-token flip, survives
  reload, and 'system' follows the emulated OS scheme both ways; the
  Language row switches the settings-scoped copy to English (dsh.locale
  persisted, survives reload) and restores zh. Intentional reloads tear
  the SSE stream, so the spec drains exactly its own reconnect warnings —
  the tripwire still fails on unexpected connection loss.
- workspace-management: create-by-name twice through the region-header
  dialog (host-durable via ctx.workspace.list()); rename end to end —
  hover-revealed row menu (the button is display:none until the row
  hovers), duplicate-name pre-check (inline role=alert + disabled primary
  before any wire call), then workspace.rename through the real RPC,
  row update, host durability, reload survival; the flat 'In one list'
  view (section label flips, group headers drop, dsh.workspace.view
  persists across reload, grouped restored); the session hover card
  (dwell to open, closes on pointer leave). The one session row reuses
  seeded-history's committed seed — no new recording. Deliberately not
  driven: the inert menu rows and drag reorder (deferred in the note
  with re-entry triggers).

Agent Note gains scenarios 8-9 and the drag-reorder deferred item in both
languages; llm-replay README's zh side catches up with the { patches }
paragraph; pairings re-recorded.
---
 ...6-07-24-web-gui-browser-e2e-lane.i18n.yaml |   4 +-
 .../2026-07-24-web-gui-browser-e2e-lane.md    |   5 +-
 .../2026-07-24-web-gui-browser-e2e-lane.zh.md |   5 +-
 apps/web/tests/lifecycle-chrome.e2e.ts        |   9 +-
 apps/web/tests/settings-chrome.e2e.ts         | 179 ++++++++++++++++++
 .../settings-chrome/dialog.expected.md        |  30 +++
 .../snapshots/workspace-management/.gitkeep   |   0
 apps/web/tests/workspace-management.e2e.ts    | 169 +++++++++++++++++
 apps/web/tsconfig.json                        |   2 +
 packages/support/llm-replay/README.i18n.yaml  |   4 +-
 packages/support/llm-replay/README.zh.md      |   2 +-
 tsconfig.host.json                            |   2 +
 12 files changed, 400 insertions(+), 11 deletions(-)
 create mode 100644 apps/web/tests/settings-chrome.e2e.ts
 create mode 100644 apps/web/tests/snapshots/settings-chrome/dialog.expected.md
 create mode 100644 apps/web/tests/snapshots/workspace-management/.gitkeep
 create mode 100644 apps/web/tests/workspace-management.e2e.ts

diff --git a/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.i18n.yaml b/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.i18n.yaml
index 3745347bea..3600a981c9 100644
--- a/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.i18n.yaml
+++ b/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.i18n.yaml
@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write
-2026-07-24-web-gui-browser-e2e-lane.md: cc9b1606a62cfbb2322a4c4647d809dfd809b117
-2026-07-24-web-gui-browser-e2e-lane.zh.md: 3ab0f3716affef6f1446e50d237d74486161afb1
+2026-07-24-web-gui-browser-e2e-lane.md: 1d96028e8e9255518b4e5127f0aeeaa4ee68b411
+2026-07-24-web-gui-browser-e2e-lane.zh.md: e07fce4b62c05b1b4774e6d1758321e3b7bd315c
diff --git a/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.md b/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.md
index cc9b1606a6..1d96028e8e 100644
--- a/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.md
+++ b/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.md
@@ -48,7 +48,9 @@ The typecheck plane split is structural: the three files that boot the host spin
 4. **`question-composer`** — the shipped composition's resident `ask_user_question` takeover: a recorded turn blocks mid-step on the real userInteraction seam, the composer (`[data-question-key]`) renders in the browser, the test answers through it (the ONE sanctioned place a drive step reacts to model content: the turn cannot complete without the answer, in record and replay alike), and the tool result carries the chosen label. Goldens: the composer's stable waiting state (`ui.expected.md`) and the answered transcript (`answered.expected.md` — the question resolved into its tool round trip plus the final reply, takeover gone).
 5. **`steering`** — mid-turn steer while the question composer blocks the step (the deterministic mid-turn window; no timing dependence). The composer locks while running, so the steer POSTs `session.prompt` `mode:'steer'` from the page over the same same-origin `/api` wire the client uses (`TODO(web-steer-composer)`: drive a composer gesture once one exists); everything downstream is product — gateway → `Agent.steer` → step-boundary drain → durable `steering/message` → SSE → badged interjection bubble. Record-mode fixture honesty: the recording is rejected unless the live model's final reply obeys an instruction only the steering message carries. Goldens pin the timing semantics visually: `mid-steer.expected.md` captures the accepted-but-invisible state (the loop drains steering only at the step boundary, so no interjection bubble exists while the question still blocks — if the client ever renders pending steers eagerly, this golden flips first) and `settled.expected.md` the badged bubble plus obeying reply.
 6. **`navigation-panes`** — one rich two-turn seed (turn 1: bash + two parallel reads in one assistant message; turn 2: a markdown-heavy reply) rendered cold through the seeded-history pattern (zero model calls), serving four surfaces: sidebar search (client-side title filter — asserted only after the durable title lands with the attach baseline, because a cold `SessionSummary` carries no title and search matches the `displayTitle` the user sees; negative query empties the tree, positive narrows, clear restores), the Trajectory tab (turn sections + the step group's tool mix plus the view-area aria golden), the Waterfall tab (span stats + one lane per span — the P-I fold counts a turn-0 prologue span because only assistant/steering nodes carry a turn number, pinned as-is), and the details column (the bash toolview row routes click to openDetails; open/closed is asserted on the frame's `data-details-collapsed` attribute because close collapses the grid column to width 0 without unmounting the subtree). Goldens: `trajectory.expected.md` and `waterfall.expected.md` (each tab's view area) plus `details-open.expected.md` (the open panel: tool-name header, Input args, Output result).
-7. **`lifecycle-chrome`** — one tiny recorded text turn drives three whole-page concerns. Workspace flow over the real wire: the empty-state hero's first send materializes a real Workspace + Session (the jsdom `workspace-flow.snapshot.ts` suite pins this state machine over the fixture client; this scenario pins it through HTTP RPC + SSE + the gateway), proven durably by the session header's cwd being the create-by-name target `<workspaceRoot>/workspace`, plus the hero waiting-state aria golden. Reload recovery: collapse the sidebar (persisted `dsh.layout.panels`), `page.reload`, and the surface comes back whole from persistence alone — layout collapsed, selection restored (`dsh.sessions.current`), the recorded turn re-rendered from `session.history` with zero model calls (the drained replay cursor makes any stray request fail loud at close), and `reloaded.expected.md` pins the rebuilt conversation region — rendering the same settled transcript from persistence alone IS the recovery claim. Dark mode: no product control flips the theme yet, so the scenario drives the ThemeService's entire DOM contract — the `body[data-ds-dark-theme]` attribute — and pins the shipped cascade: the alias token flips, a painted surface repaints, and removing the attribute restores the light sample exactly (`TODO(web-theme-gesture)` upgrades to a real settings control); per the scope ruling there is no theme/layout golden (aria is color-blind).
+7. **`lifecycle-chrome`** — one tiny recorded text turn drives three whole-page concerns. Workspace flow over the real wire: the empty-state hero's first send materializes a real Workspace + Session (the jsdom `workspace-flow.snapshot.ts` suite pins this state machine over the fixture client; this scenario pins it through HTTP RPC + SSE + the gateway), proven durably by the session header's cwd being the create-by-name target `<workspaceRoot>/workspace`, plus the hero waiting-state aria golden. Reload recovery: collapse the sidebar (persisted `dsh.layout.panels`), `page.reload`, and the surface comes back whole from persistence alone — layout collapsed, selection restored (`dsh.sessions.current`), the recorded turn re-rendered from `session.history` with zero model calls (the drained replay cursor makes any stray request fail loud at close), and `reloaded.expected.md` pins the rebuilt conversation region — rendering the same settled transcript from persistence alone IS the recovery claim. Dark mode: the scenario drives the ThemeService's DOM contract seam directly — the `body[data-ds-dark-theme]` attribute — and pins the shipped cascade (alias token flips, a painted surface repaints, removal restores the light sample exactly), independent of the settings surface whose real user gesture `settings-chrome` owns; per the scope ruling there is no theme/layout golden (aria is color-blind).
+8. **`settings-chrome`** — the settings surface (#644), zero model calls on a blank frame. The modal shell: sidebar-foot trigger (`aria-haspopup`/`aria-expanded`) opens `role=dialog` 设置, General active by default with the skeleton rows plus the functional Language and Appearance rows (dialog aria golden), section switch moves `aria-current` to the deliberately empty Models, closes via Escape and the header close button. The Appearance row is the REAL theme gesture (retiring the lifecycle scenario's `TODO(web-theme-gesture)`): clicking 深色 runs the whole chain — `aria-pressed`, persisted `dsh.theme`, `body[data-ds-dark-theme]`, alias-token flip — and survives reload; `system` follows the emulated OS scheme both ways (`page.emulateMedia`), and the spec restores the light default for inter-spec hygiene. The Language row switches the settings-scoped copy to English (`dsh.locale` persisted, dialog re-registers as Settings/General/Appearance), survives reload, and restores zh — only the settings namespaces are localized today, so the scenario asserts exactly that surface. Intentional reloads tear the SSE stream, so the spec drains exactly the reconnect warnings its own reloads caused; the tripwire still fails on any unexpected connection loss.
+9. **`workspace-management`** — the workspace browser operations (#643), zero model calls (workspace.create/rename are host RPCs; the one session row comes from re-seeding seeded-history's committed seed, so no new fixture is recorded). Create-by-name twice through the region-header ＋ dialog (`workspace.create` mkdirs and prepends to the durable registry — asserted host-side via `ctx.workspace.list()`). Rename end to end: the hover-revealed row-actions menu (the button is `display:none` until its row hovers) → Rename dialog → the duplicate-name pre-check raises the inline `role=alert` and disables the primary button before any wire call → a fresh name goes through the `workspace.rename` RPC, updates the row, persists on the host, and survives reload. The flat "In one list" view: the Group by menu flips the section label to Sessions, drops group headers (seeded session becomes a top-level row), persists in `dsh.workspace.view` across reload, and the spec restores grouped mode. The session hover card renders after the dwell (display-only, no aria role — text anchors) and closes when the pointer leaves. Deliberately NOT driven: the visual-only menu rows this iteration ships inert (session Rename/Fork/Delete, workspace Delete) and drag reorder — see Deferred.
 
 ### CI stance
 
@@ -91,6 +93,7 @@ The lane itself: `pnpm run test:web` runs every scenario keylessly alongside the
 - **Follow-up-prompt-after-resume scenario**: the history/live stitch path over the real wire; add as its own scenario when that code changes or regresses.
 - **Web error surface**: the client consumes no `agent/error` frames and a pre-chunk failure freezes no partial, so a non-retryable provider failure renders no error copy — the user sees the send simply stop. The AUTH scenario pins the current contract (no crash, composer recovers, turn logged `error`) and `FIXME(web-error-surface)` marks where visible error text gets asserted once the UI grows an error rendering.
 - **Composer steering gesture**: the input locks while running (stop-or-wait), so the steering scenario steers over the wire from the page; `TODO(web-steer-composer)` upgrades the drive step to a real composer gesture when the product grows one.
+- **Drag session reorder**: `workspace.insertSessionBefore` (manual ordering, #643) has no browser scenario yet — it needs two sessions materialized in ONE workspace (a two-script recorded fixture) plus synthesized HTML5 drag events; add it when that surface changes or regresses. The inert menu rows (session Rename/Fork/Delete, workspace Delete) get scenarios when they gain behavior.
 
 ## Consequences
 
diff --git a/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.zh.md b/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.zh.md
index 3ab0f3716a..e07fce4b62 100644
--- a/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.zh.md
+++ b/.agents/notes/implemented/testing/2026-07-24-web-gui-browser-e2e-lane.zh.md
@@ -48,7 +48,9 @@ Web GUI 以一条真实组装链交付——chromium 页面 → client 插件 bu
 4. **`question-composer`**——已交付组合中常驻的 `ask_user_question` 接管：一段已录轮次在真实的 userInteraction seam 上阻塞于步骤中途，提问输入框（`[data-question-key]`）在浏览器中渲染，测试经它作答（这是驱动步骤对模型内容作出反应的唯一获准之处：没有这个回答，轮次无法完成，record 与 replay 皆然），工具结果携带所选的 label。预期输出：提问输入框稳定的等待态（`ui.expected.md`）与已作答的文本记录（`answered.expected.md`——提问已落定为其工具往返加最终回复，接管消失）。
 5. **`steering`**——在提问输入框阻塞该步骤时做轮次中途 steering（中途引导），此即确定性的轮次中途窗口，不依赖任何时序。输入框在运行期间锁定，因此这一 steer 由页面经客户端所用的同一条同源 `/api` wire POST `session.prompt` `mode:'steer'`（`TODO(web-steer-composer)`：待有输入框手势后改为驱动它）；下游的一切都是产品路径——gateway → `Agent.steer` → 步骤边界排空 → 持久的 `steering/message` → SSE → 带徽标的插话气泡。record 模式的 fixture 诚实性：除非真实模型的最终回复遵循了一条只有 steering 消息才携带的指令，否则该次录制被拒绝。预期输出以可视方式钉住这一时序语义：`mid-steer.expected.md` 捕捉「已接受但不可见」的状态（循环仅在步骤边界才排空 steering，因此提问仍在阻塞时不存在插话气泡——若 client 日后提前渲染待处理的 steer，这份预期输出会最先翻转），`settled.expected.md` 则捕捉带徽标的气泡加遵循指令的回复。
 6. **`navigation-panes`**——一份内容丰富的双轮次种子（轮次 1：同一条 assistant 消息内的 bash + 两次并行 read；轮次 2：一段 markdown 密集的回复）经 seeded-history 模式冷渲染（零模型调用），承载四个表面：侧栏搜索（客户端标题过滤；仅在持久的标题随 attach 基线一同到达后才断言，因为冷的 `SessionSummary` 不携带标题，而搜索匹配的是用户所见的 `displayTitle`；反例查询清空整棵树，正例查询收窄，清除后复原）、Trajectory 标签页（轮次分节 + 步骤组的工具构成，外加视图区 aria 预期输出）、Waterfall 标签页（span 统计 + 每个 span 一条泳道；只有 assistant/steering 节点携带轮次编号，因此 P-I 折叠会将一个轮次 0 的序幕 span 计入，按原样钉住）与详情列（bash 工具视图行把点击路由到 openDetails；打开/关闭状态断言在 frame 的 `data-details-collapsed` 属性上，因为关闭把网格列收缩到宽度 0 而不卸载子树）。预期输出：`trajectory.expected.md` 与 `waterfall.expected.md`（各自标签页的视图区），外加 `details-open.expected.md`（打开的面板：工具名标题、Input 参数、Output 结果）。
-7. **`lifecycle-chrome`**——一段极小的已录纯文本轮次驱动三个整页关注点。真实 wire 上的 Workspace 动线：空态 hero 的首次发送物化出真实的 Workspace + Session（jsdom 的 `workspace-flow.snapshot.ts` 套件基于 fixture 客户端钉住这一状态机；本场景则经 HTTP RPC + SSE + gateway 钉住它），其持久证据是会话头部的 cwd 恰为按名创建的目标 `<workspaceRoot>/workspace`，外加 hero 等待态的 aria 预期输出。重新加载恢复：折叠侧栏（持久化于 `dsh.layout.panels`），`page.reload`，整个表面纯凭持久化完整归来——布局保持折叠，选中项恢复（`dsh.sessions.current`），已录轮次从 `session.history` 重新渲染且零模型调用（已耗尽的回放游标使任何离群请求都在 close 时大声失败），且 `reloaded.expected.md` 钉住重建后的会话区——纯凭持久化渲染出同一份安定的文本记录，这本身就是恢复主张。暗色模式：产品尚无任何控件能切换主题，因此本场景驱动 ThemeService 的整个 DOM 契约（即 `body[data-ds-dark-theme]` 属性），并钉住已交付的级联：alias token 翻转，某个实际绘制的表面重绘，移除该属性则精确还原亮色采样值（`TODO(web-theme-gesture)`：待有真实设置控件后升级为驱动它）；按范围裁定，主题/布局不设预期输出（aria 感知不到颜色）。
+7. **`lifecycle-chrome`**——一段极小的已录纯文本轮次驱动三个整页关注点。真实 wire 上的 Workspace 动线：空态 hero 的首次发送物化出真实的 Workspace + Session（jsdom 的 `workspace-flow.snapshot.ts` 套件基于 fixture 客户端钉住这一状态机；本场景则经 HTTP RPC + SSE + gateway 钉住它），其持久证据是会话头部的 cwd 恰为按名创建的目标 `<workspaceRoot>/workspace`，外加 hero 等待态的 aria 预期输出。重新加载恢复：折叠侧栏（持久化于 `dsh.layout.panels`），`page.reload`，整个表面纯凭持久化完整归来——布局保持折叠，选中项恢复（`dsh.sessions.current`），已录轮次从 `session.history` 重新渲染且零模型调用（已耗尽的回放游标使任何离群请求都在 close 时大声失败），且 `reloaded.expected.md` 钉住重建后的会话区——纯凭持久化渲染出同一份安定的文本记录，这本身就是恢复主张。暗色模式：本场景直接驱动 ThemeService 的 DOM 契约 seam（即 `body[data-ds-dark-theme]` 属性），并钉住已交付的级联（alias token 翻转，某个实际绘制的表面重绘，移除该属性则精确还原亮色采样值），且独立于设置表面——该表面的真实用户手势归 `settings-chrome` 管；按范围裁定，主题/布局不设预期输出（aria 感知不到颜色）。
+8. **`settings-chrome`**——设置表面（#644），空白 frame 上零模型调用。模态框外壳：侧栏底部的触发按钮（`aria-haspopup`/`aria-expanded`）打开 `role=dialog` 的「设置」，默认激活「通用设置」，其中既有骨架行，也有具备实际功能的「语言」与「外观」两行（对话框 aria 预期输出）；分节切换把 `aria-current` 移到刻意留空的「模型」分节；经 Escape 与头部的「关闭」按钮均可关闭。「外观」行是真正的主题手势（lifecycle 场景的 `TODO(web-theme-gesture)` 就此撤除）：点击「深色」跑通整条链路（`aria-pressed`、持久化的 `dsh.theme`、`body[data-ds-dark-theme]`、alias token 翻转）并在重新加载后存续；`system` 双向跟随所模拟的操作系统配色方案（`page.emulateMedia`），该 spec 还会恢复「浅色」默认值以保证 spec 之间互不污染。「语言」行把设置范围内的文案切换为 English（`dsh.locale` 持久化，对话框重新注册为 Settings/General/Appearance），在重新加载后存续，最后恢复为「中文」——目前本地化只覆盖设置命名空间，因此该场景断言的恰是这一表面。有意的重新加载会撕断 SSE 流，因此该 spec 恰好只排空自身重新加载引发的重连警告；任何意外的连接丢失仍会触发绊线失败。
+9. **`workspace-management`**——工作区浏览器操作（#643），零模型调用（workspace.create/rename 是 host 侧 RPC；唯一的会话行来自重新播种 seeded-history 已提交的种子，因此没有录制任何新 fixture）。经区域头部的「＋」对话框按名创建两次（`workspace.create` 会 mkdir 并把新项前插到持久注册表——host 侧经 `ctx.workspace.list()` 断言）。端到端的重命名：悬停显露的行操作菜单（按钮在所在行悬停之前是 `display:none`）→ Rename 对话框 → 重名预检在发出任何 wire 调用之前就亮出内联 `role=alert` 并禁用主按钮 → 换一个全新名称则走 `workspace.rename` RPC，更新该行、在 host 上持久化并在重新加载后存续。扁平的「In one list」视图：Group by 菜单把分节标签翻转为 Sessions，去掉分组头（播种的会话成为顶层行），在 `dsh.workspace.view` 中持久化并跨重新加载存续，该 spec 最后恢复分组模式。会话悬停卡片在驻留延时后渲染（纯展示，无 aria role——用文本锚定），指针移开即关闭。刻意不驱动：本次迭代以无行为形态交付的纯视觉菜单行（会话的 Rename/Fork/Delete、工作区的 Delete）与拖拽重排——见「暂缓」。
 
 ### CI 立场
 
@@ -91,6 +93,7 @@ Web GUI 以一条真实组装链交付——chromium 页面 → client 插件 bu
 - **恢复后追问场景**：真实 wire 上的历史/实时缝合路径；当该代码变更或回归时作为独立场景补充。
 - **Web 错误表面**：客户端不消费任何 `agent/error` 帧，分片前的失败也没有可冻结的部分输出，因此不可重试的提供方失败不渲染任何错误文案——用户看到的只是发送就此停住。AUTH 场景钉住当前契约（不崩溃、输入框恢复可用、轮次记录为 `error`），`FIXME(web-error-surface)` 标记了待 UI 长出错误渲染后断言可见错误文本的位置。
 - **输入框 steering 手势**：输入在运行期间锁定（只能停止或等待），因此 steering 场景从页面走 wire 做 steer；`TODO(web-steer-composer)` 待产品长出真实的输入框手势后，把驱动步骤升级为该手势。
+- **拖拽会话重排**：`workspace.insertSessionBefore`（手动排序，#643）尚无浏览器场景——它需要在同一个工作区里物化两个会话（一份双脚本的已录 fixture）外加合成的 HTML5 拖拽事件；当该表面变更或回归时再补充。无行为的菜单行（会话的 Rename/Fork/Delete、工作区的 Delete）待长出行为后获得各自的场景。
 
 ## 后果
 
diff --git a/apps/web/tests/lifecycle-chrome.e2e.ts b/apps/web/tests/lifecycle-chrome.e2e.ts
index d91704f585..5b16736771 100644
--- a/apps/web/tests/lifecycle-chrome.e2e.ts
+++ b/apps/web/tests/lifecycle-chrome.e2e.ts
@@ -124,10 +124,11 @@ describe('web e2e: lifecycle & chrome (workspace flow / reload / dark mode)', ()
 
   it.skipIf(MODE === 'record')('cascades the dark theme from the body attribute to painted surfaces', async () => {
     onTestFailed(() => saveFailureShot(page, 'web-e2e-lifecycle-dark'))
-    // No product control flips the theme yet — the ThemeService's whole DOM
-    // contract is the body[data-ds-dark-theme] attribute, so the scenario
-    // drives exactly that seam and pins the shipped stylesheet's cascade.
-    // TODO(web-theme-gesture): drive a real settings control once one exists.
+    // This scenario pins the ThemeService's DOM contract seam directly (the
+    // body[data-ds-dark-theme] attribute -> stylesheet cascade); the REAL
+    // user gesture above it (Settings -> Appearance cubes) is owned by
+    // settings-chrome.e2e.ts. Driving the attribute here keeps the cascade
+    // pinned independently of the settings surface's own lifecycle.
     const sample = async (): Promise<{ token: string; sidebarBg: string; bodyBg: string }> =>
       await page.evaluate(() => {
         const sidebar = document.querySelector('[class*="sidebar"], [class*="rail"]') ?? document.body
diff --git a/apps/web/tests/settings-chrome.e2e.ts b/apps/web/tests/settings-chrome.e2e.ts
new file mode 100644
index 0000000000..1d3c0d52bb
--- /dev/null
+++ b/apps/web/tests/settings-chrome.e2e.ts
@@ -0,0 +1,179 @@
+// Web e2e scenarios: the settings surface — the modal shell (trigger, nav,
+// section switching, both close paths), the Appearance preference row (the
+// real theme gesture — click 深色 and the whole cascade runs: ThemeService preference -> localStorage dsh.theme
+// -> theme/change -> ui-layout's presenter -> body attribute -> alias token)
+// and the Language row (settings-scoped localization + persisted dsh.locale).
+// Zero model calls: everything is pure client + persistence state on a blank
+// frame, so there is no fixture and a stray stream would fail loud on the
+// open llm seam.
+import { fileURLToPath } from 'node:url'
+import type { Browser, Page } from 'playwright'
+import { chromium } from 'playwright'
+import { afterAll, beforeAll, describe, expect, it, onTestFailed } from 'vitest'
+import { join } from 'node:path'
+import {
+  assertFixtureInventory, captureStableAria, compareOrRefreshGolden,
+  launchWebScaffold, watchConsole, webSnapshotMode, type WebScaffold,
+} from './scaffold.ts'
+import { saveFailureShot } from './support.ts'
+
+const SNAPSHOT_DIR = fileURLToPath(new URL('./snapshots/settings-chrome', import.meta.url))
+const DIALOG_EXPECTED = join(SNAPSHOT_DIR, 'dialog.expected.md')
+const MODE = webSnapshotMode()
+
+describe('web e2e: settings modal, appearance gesture, language switch', () => {
+  let scaffold: WebScaffold
+  let browser: Browser
+  let page: Page
+  let tripwire: ReturnType<typeof watchConsole>
+
+  beforeAll(async () => {
+    scaffold = await launchWebScaffold({})
+    browser = await chromium.launch()
+    page = await browser.newPage({ viewport: { width: 1680, height: 1000 } })
+    tripwire = watchConsole(page)
+    await page.goto(scaffold.baseUrl, { waitUntil: 'load' })
+    await page.waitForSelector('[class*="frame"]', { timeout: 30_000 })
+  }, 120_000)
+
+  /**
+   * An INTENTIONAL reload tears the SSE stream mid-flight, so the dying
+   * page's reconnect note is expected — drain exactly those entries so the
+   * tripwire still fails the spec on any UNEXPECTED connection loss.
+   */
+  const drainReloadWarnings = (): void => {
+    const kept = tripwire.warnings.filter(text => !/connection lost/i.test(text))
+    tripwire.warnings.length = 0
+    tripwire.warnings.push(...kept)
+  }
+
+  afterAll(async () => {
+    await browser?.close()
+    await scaffold?.close()
+  })
+
+  it('opens the settings dialog, switches sections, and closes by every path', async () => {
+    onTestFailed(() => saveFailureShot(page, 'web-e2e-settings-shell'))
+    const trigger = page.getByRole('button', { name: '设置', exact: true })
+    expect(await trigger.getAttribute('aria-haspopup')).toBe('dialog')
+    expect(await trigger.getAttribute('aria-expanded')).toBe('false')
+    await trigger.click()
+    const dialog = page.getByRole('dialog', { name: '设置' })
+    await dialog.waitFor({ timeout: 10_000 })
+    expect(await trigger.getAttribute('aria-expanded')).toBe('true')
+    // General is the active section by default; its skeleton rows plus the
+    // functional Language and Appearance rows render.
+    expect(await dialog.getByRole('button', { name: '通用设置' }).getAttribute('aria-current')).toBe('true')
+    await expect.poll(() => dialog.getByText('语言', { exact: true }).count(), { timeout: 5_000 }).toBe(1)
+    await expect.poll(() => dialog.getByText('外观', { exact: true }).count(), { timeout: 5_000 }).toBe(1)
+    // Golden of the freshly opened dialog (default zh, General active).
+    const snapshot = await captureStableAria(page, '[role="dialog"]', scaffold.workspaceCwd)
+    await compareOrRefreshGolden(DIALOG_EXPECTED, snapshot, MODE)
+    // Section switch: aria-current moves; Models is deliberately empty.
+    await dialog.getByRole('button', { name: '模型' }).click()
+    await expect.poll(() => dialog.getByRole('button', { name: '模型' }).getAttribute('aria-current'), { timeout: 5_000 }).toBe('true')
+    expect(await dialog.getByRole('button', { name: '通用设置' }).getAttribute('aria-current')).toBeNull()
+    // Close path 1: Escape.
+    await page.keyboard.press('Escape')
+    await expect.poll(() => page.getByRole('dialog', { name: '设置' }).count(), { timeout: 5_000 }).toBe(0)
+    expect(await trigger.getAttribute('aria-expanded')).toBe('false')
+    // Close path 2: the header close button (focus lands there on open).
+    await trigger.click()
+    await page.getByRole('dialog', { name: '设置' }).getByRole('button', { name: '关闭' }).click()
+    await expect.poll(() => page.getByRole('dialog', { name: '设置' }).count(), { timeout: 5_000 }).toBe(0)
+    expect(tripwire.pageErrors).toEqual([])
+  }, 60_000)
+
+  it('flips the theme through the Appearance cubes and persists across reload', async () => {
+    onTestFailed(() => saveFailureShot(page, 'web-e2e-settings-appearance'))
+    const readState = async (): Promise<{ attr: boolean; token: string; stored: string | null }> =>
+      await page.evaluate(() => ({
+        attr: document.body.hasAttribute('data-ds-dark-theme'),
+        token: getComputedStyle(document.body).getPropertyValue('--dsw-alias-bg-base').trim(),
+        stored: localStorage.getItem('dsh.theme'),
+      }))
+    // Pin the OS scheme to light so the default `system` preference resolves
+    // light and the dark flip below is unambiguously the gesture's doing.
+    await page.emulateMedia({ colorScheme: 'light' })
+    const light = await readState()
+    expect(light.attr).toBe(false)
+
+    await page.getByRole('button', { name: '设置', exact: true }).click()
+    const dialog = page.getByRole('dialog', { name: '设置' })
+    await dialog.waitFor({ timeout: 10_000 })
+    const darkCube = dialog.getByRole('button', { name: '深色' })
+    expect(await darkCube.getAttribute('aria-pressed')).toBe('false')
+    await darkCube.click()
+    // The full cascade: pressed state, persisted preference, body attribute,
+    // alias token flip — all from one real user gesture.
+    await expect.poll(() => darkCube.getAttribute('aria-pressed'), { timeout: 5_000 }).toBe('true')
+    const dark = await readState()
+    expect(dark.attr).toBe(true)
+    expect(dark.stored).toBe('dark')
+    expect(dark.token).not.toBe(light.token)
+    await page.keyboard.press('Escape')
+
+    // Reload: the preference survives boot (restore + presenter initial apply).
+    await page.reload({ waitUntil: 'load' })
+    await page.waitForSelector('[class*="frame"]', { timeout: 30_000 })
+    drainReloadWarnings()
+    await page.emulateMedia({ colorScheme: 'light' })
+    const reloaded = await readState()
+    expect(reloaded.attr).toBe(true)
+    expect(reloaded.stored).toBe('dark')
+
+    // `system` follows the emulated OS scheme (dark stays dark, light clears).
+    await page.getByRole('button', { name: '设置', exact: true }).click()
+    const systemCube = page.getByRole('dialog', { name: '设置' }).getByRole('button', { name: '跟随系统' })
+    await systemCube.click()
+    await expect.poll(() => systemCube.getAttribute('aria-pressed'), { timeout: 5_000 }).toBe('true')
+    await expect.poll(async () => (await readState()).attr, { timeout: 5_000 }).toBe(false)
+    await page.emulateMedia({ colorScheme: 'dark' })
+    await expect.poll(async () => (await readState()).attr, { timeout: 5_000 }).toBe(true)
+    // Restore for the specs that follow: light preference beats the emulated
+    // dark OS scheme, leaving the shared page in the light default.
+    await page.getByRole('dialog', { name: '设置' }).getByRole('button', { name: '浅色' }).click()
+    await expect.poll(async () => (await readState()).attr, { timeout: 5_000 }).toBe(false)
+    await page.keyboard.press('Escape')
+    expect(tripwire.pageErrors).toEqual([])
+  }, 90_000)
+
+  it('switches the settings surface language and persists dsh.locale', async () => {
+    onTestFailed(() => saveFailureShot(page, 'web-e2e-settings-language'))
+    await page.getByRole('button', { name: '设置', exact: true }).click()
+    const zhDialog = page.getByRole('dialog', { name: '设置' })
+    await zhDialog.waitFor({ timeout: 10_000 })
+    // The Language selector pill shows the active locale's own name.
+    const selector = zhDialog.getByRole('button', { name: '中文' })
+    expect(await selector.getAttribute('aria-haspopup')).toBe('menu')
+    await selector.click()
+    await page.getByRole('menuitem', { name: 'English' }).click()
+    // The settings-owned copy re-registers localized: dialog title, nav,
+    // Appearance labels. (Only the settings namespaces are localized today —
+    // the rest of the app's copy is intentionally out of this row's scope.)
+    const enDialog = page.getByRole('dialog', { name: 'Settings' })
+    await enDialog.waitFor({ timeout: 10_000 })
+    expect(await enDialog.getByRole('button', { name: 'General' }).getAttribute('aria-current')).toBe('true')
+    await expect.poll(() => enDialog.getByText('Appearance', { exact: true }).count(), { timeout: 5_000 }).toBe(1)
+    expect(await page.evaluate(() => localStorage.getItem('dsh.locale'))).toBe('en')
+    // Reload keeps English; then restore zh so shared page state (and the
+    // other specs' 设置-anchored selectors + goldens) see the default again.
+    await page.reload({ waitUntil: 'load' })
+    await page.waitForSelector('[class*="frame"]', { timeout: 30_000 })
+    drainReloadWarnings()
+    const enTrigger = page.getByRole('button', { name: 'Settings' })
+    await enTrigger.waitFor({ timeout: 10_000 })
+    await enTrigger.click()
+    await page.getByRole('dialog', { name: 'Settings' }).getByRole('button', { name: 'English' }).click()
+    await page.getByRole('menuitem', { name: '中文' }).click()
+    await page.getByRole('dialog', { name: '设置' }).waitFor({ timeout: 10_000 })
+    expect(await page.evaluate(() => localStorage.getItem('dsh.locale'))).toBe('zh')
+    await page.keyboard.press('Escape')
+    expect(tripwire.pageErrors).toEqual([])
+  }, 90_000)
+
+  it.skipIf(MODE === 'record')('keeps the fixture inventory closed', async () => {
+    expect(tripwire.warnings).toEqual([])
+    await assertFixtureInventory(SNAPSHOT_DIR, ['dialog.expected.md'])
+  })
+})
diff --git a/apps/web/tests/snapshots/settings-chrome/dialog.expected.md b/apps/web/tests/snapshots/settings-chrome/dialog.expected.md
new file mode 100644
index 0000000000..75959994f1
--- /dev/null
+++ b/apps/web/tests/snapshots/settings-chrome/dialog.expected.md
@@ -0,0 +1,30 @@
+- dialog "设置":
+  - navigation:
+    - text: 设置
+    - button "通用设置":
+      - img
+      - text: 通用设置
+    - button "模型":
+      - img
+      - text: 模型
+  - button "关闭":
+    - img
+    - text: 关闭
+  - text: 权限 选择默认权限模式
+  - button "Read only" [disabled]:
+    - text: Read only
+    - img
+  - text: 工具调用 Schema mode Traditional function calling — invoke tools one at a time Code mode Chain multiple tools with code — multi-step orchestration 语言
+  - button "中文":
+    - text: 中文
+    - img
+  - text: 外观
+  - button "浅色":
+    - img
+    - text: 浅色
+  - button "深色":
+    - img
+    - text: 深色
+  - button "跟随系统" [pressed]:
+    - img
+    - text: 跟随系统
diff --git a/apps/web/tests/snapshots/workspace-management/.gitkeep b/apps/web/tests/snapshots/workspace-management/.gitkeep
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/apps/web/tests/workspace-management.e2e.ts b/apps/web/tests/workspace-management.e2e.ts
new file mode 100644
index 0000000000..9aa857f731
--- /dev/null
+++ b/apps/web/tests/workspace-management.e2e.ts
@@ -0,0 +1,169 @@
+// Web e2e scenarios: workspace management — the create-by-name dialog, the
+// rename round trip over the real wire (workspace.rename RPC + durable
+// registry), duplicate-name pre-check, the flat "In one list" view with its
+// persisted group-by preference, and the session hover card. Zero model
+// calls: workspace.create/rename are host RPCs with no model involvement,
+// and the one session row the flat/hover scenarios need comes from a seeded
+// fixture (the seeded-history seed reused verbatim — no new recording).
+import { mkdir, readFile, writeFile } from 'node:fs/promises'
+import { fileURLToPath } from 'node:url'
+import { join } from 'node:path'
+import type { Browser, Page } from 'playwright'
+import { chromium } from 'playwright'
+import { afterAll, beforeAll, describe, expect, it, onTestFailed } from 'vitest'
+import {
+  assertFixtureInventory, launchWebScaffold, seedSession, watchConsole,
+  webSnapshotMode, type WebScaffold,
+} from './scaffold.ts'
+import { saveFailureShot } from './support.ts'
+
+const SNAPSHOT_DIR = fileURLToPath(new URL('./snapshots/workspace-management', import.meta.url))
+// The seed is another scenario's committed fixture, reused read-only: this
+// spec needs any one cold session row, not new recorded content.
+const SEED = fileURLToPath(new URL('./snapshots/seeded-history/seed.jsonl', import.meta.url))
+const MODE = webSnapshotMode()
+const SEED_ID = 'workspace-management-web-e2e'
+
+describe('web e2e: workspace management (create / rename / flat view / hover card)', () => {
+  let scaffold: WebScaffold
+  let browser: Browser
+  let page: Page
+  let tripwire: ReturnType<typeof watchConsole>
+
+  beforeAll(async () => {
+    scaffold = await launchWebScaffold({})
+    // Seed one cold session (Ungrouped bucket) for the flat view + hover card.
+    const sessionCwd = join(scaffold.workspaceCwd, 'workspace')
+    await mkdir(sessionCwd, { recursive: true })
+    await writeFile(join(sessionCwd, 'a.txt'), 'alpha\n')
+    await writeFile(join(sessionCwd, 'b.txt'), 'beta\n')
+    await seedSession(scaffold, await readFile(SEED, 'utf8'), SEED_ID)
+    browser = await chromium.launch()
+    page = await browser.newPage({ viewport: { width: 1680, height: 1000 } })
+    tripwire = watchConsole(page)
+    await page.goto(scaffold.baseUrl, { waitUntil: 'load' })
+    await page.waitForSelector('[class*="frame"]', { timeout: 30_000 })
+  }, 120_000)
+
+  /**
+   * An INTENTIONAL reload tears the SSE stream mid-flight, so the dying
+   * page's reconnect note is expected — drain exactly those entries so the
+   * tripwire still fails the spec on any UNEXPECTED connection loss.
+   */
+  const drainReloadWarnings = (): void => {
+    const kept = tripwire.warnings.filter(text => !/connection lost/i.test(text))
+    tripwire.warnings.length = 0
+    tripwire.warnings.push(...kept)
+  }
+
+  afterAll(async () => {
+    await browser?.close()
+    await scaffold?.close()
+  })
+
+  it('creates two workspaces by name through the region-header dialog', async () => {
+    onTestFailed(() => saveFailureShot(page, 'web-e2e-ws-create'))
+    const createByName = async (name: string): Promise<void> => {
+      await page.getByRole('button', { name: 'Create workspace' }).click()
+      // The pick menu's Create workspace submenu opens on hover/focus.
+      await page.getByRole('menuitem', { name: 'Create workspace' }).hover()
+      await page.getByRole('menuitem', { name: 'Create a new workspace' }).click()
+      const dialog = page.getByRole('dialog', { name: 'Create a new workspace' })
+      await dialog.waitFor({ timeout: 10_000 })
+      await dialog.getByLabel('New workspace name').fill(name)
+      await dialog.getByRole('button', { name: 'Create workspace' }).click()
+      await expect.poll(() => page.getByRole('dialog', { name: 'Create a new workspace' }).count(), { timeout: 10_000 }).toBe(0)
+      // The real workspace materializes in the tree as a group row.
+      await expect.poll(() => page.getByText(name, { exact: true }).count(), { timeout: 10_000 }).toBeGreaterThanOrEqual(1)
+    }
+    await createByName('alpha-ws')
+    await createByName('beta-ws')
+    // Durable on the host: both registered, newest first (create prepends).
+    const titles = scaffold.ctx.workspace.list().map(workspace => workspace.title)
+    expect(titles.slice(0, 2)).toEqual(['beta-ws', 'alpha-ws'])
+    expect(tripwire.pageErrors).toEqual([])
+  }, 90_000)
+
+  it('renames a workspace over the wire with a duplicate-name pre-check', async () => {
+    onTestFailed(() => saveFailureShot(page, 'web-e2e-ws-rename'))
+    // The actions button is display:none until its row hovers — hover the
+    // group row first, then the revealed button becomes actionable.
+    await page.locator('[role="treeitem"]').filter({ hasText: 'alpha-ws' }).first().hover()
+    await page.getByRole('button', { name: 'Workspace actions for alpha-ws' }).click()
+    await page.getByRole('menuitem', { name: 'Rename' }).click()
+    const dialog = page.getByRole('dialog', { name: 'Rename workspace' })
+    await dialog.waitFor({ timeout: 10_000 })
+    const input = dialog.getByLabel('Workspace name')
+    // Client pre-check: a name colliding with another live workspace raises
+    // the inline alert and blocks the primary button before any wire call.
+    await input.fill('beta-ws')
+    await expect.poll(() => dialog.getByRole('alert').count(), { timeout: 5_000 }).toBe(1)
+    expect(await dialog.getByRole('button', { name: 'Rename' }).isDisabled()).toBe(true)
+    // A fresh name goes through workspace.rename to the durable registry.
+    await input.fill('gamma-ws')
+    await expect.poll(() => dialog.getByRole('alert').count(), { timeout: 5_000 }).toBe(0)
+    await dialog.getByRole('button', { name: 'Rename' }).click()
+    await expect.poll(() => page.getByRole('dialog', { name: 'Rename workspace' }).count(), { timeout: 10_000 }).toBe(0)
+    await expect.poll(() => page.getByText('gamma-ws', { exact: true }).count(), { timeout: 10_000 }).toBeGreaterThanOrEqual(1)
+    expect(await page.getByText('alpha-ws', { exact: true }).count()).toBe(0)
+    // Host durability, then reload: the projection is rebuilt from the wire.
+    expect(scaffold.ctx.workspace.list().map(workspace => workspace.title)).toContain('gamma-ws')
+    await page.reload({ waitUntil: 'load' })
+    await page.waitForSelector('[class*="frame"]', { timeout: 30_000 })
+    drainReloadWarnings()
+    await expect.poll(() => page.getByText('gamma-ws', { exact: true }).count(), { timeout: 15_000 }).toBeGreaterThanOrEqual(1)
+    expect(tripwire.pageErrors).toEqual([])
+  }, 90_000)
+
+  it('switches to the flat "In one list" view and persists the preference', async () => {
+    onTestFailed(() => saveFailureShot(page, 'web-e2e-ws-flat'))
+    // Grouped default: workspace group rows render (the seeded session sits
+    // under Ungrouped; the created workspaces are empty groups).
+    await expect.poll(() => page.getByText('Workspaces', { exact: true }).count(), { timeout: 10_000 }).toBe(1)
+    await page.getByRole('button', { name: 'Group by' }).click()
+    await page.getByRole('menuitem', { name: 'In one list' }).click()
+    // Flat mode: the section label flips and the seeded session is a
+    // top-level row with no group headers above it.
+    await expect.poll(() => page.getByText('Sessions', { exact: true }).count(), { timeout: 10_000 }).toBeGreaterThanOrEqual(1)
+    await expect.poll(() => page.getByText('Ungrouped', { exact: true }).count(), { timeout: 5_000 }).toBe(0)
+    await expect.poll(() => page.locator('[role="treeitem"]').count(), { timeout: 10_000 }).toBeGreaterThanOrEqual(1)
+    expect(await page.evaluate(() => localStorage.getItem('dsh.workspace.view'))).toContain('flat')
+    // Persisted across reload; then restore grouped for inter-spec hygiene.
+    await page.reload({ waitUntil: 'load' })
+    await page.waitForSelector('[class*="frame"]', { timeout: 30_000 })
+    drainReloadWarnings()
+    await expect.poll(() => page.getByText('Ungrouped', { exact: true }).count(), { timeout: 15_000 }).toBe(0)
+    await page.getByRole('button', { name: 'Group by' }).click()
+    await page.getByRole('menuitem', { name: 'WorkSpace' }).click()
+    await expect.poll(() => page.getByText('Ungrouped', { exact: true }).count(), { timeout: 10_000 }).toBeGreaterThanOrEqual(1)
+    expect(tripwire.pageErrors).toEqual([])
+  }, 90_000)
+
+  it('shows the session hover card after a dwell on the row', async () => {
+    onTestFailed(() => saveFailureShot(page, 'web-e2e-ws-hover'))
+    // Expand Ungrouped to reveal the seeded session row, then dwell on it
+    // (the card opens after a 500ms hover delay, portaled to body).
+    await page.getByText('Ungrouped', { exact: true }).click()
+    // A cold summary carries no durable title, so the row falls back to a
+    // cwd-derived display title — anchored on the run-local workspace-root
+    // basename rather than a literal.
+    const wsBase = scaffold.workspaceCwd.split('/').pop()!
+    const sessionRow = page.locator('[role="treeitem"]').filter({ hasText: wsBase }).first()
+    await sessionRow.waitFor({ timeout: 10_000 })
+    await sessionRow.hover()
+    // Card content: the full title plus the Idle status line (display-only
+    // card; no aria role — text anchors are the stable selector).
+    await expect.poll(() => page.getByText('Idle', { exact: true }).count(), { timeout: 5_000 }).toBeGreaterThanOrEqual(1)
+    // Leaving the anchor closes it with no delay.
+    await page.getByRole('button', { name: '设置' }).hover()
+    await expect.poll(() => page.getByText('Idle', { exact: true }).count(), { timeout: 5_000 }).toBe(0)
+    expect(tripwire.pageErrors).toEqual([])
+  }, 60_000)
+
+  it.skipIf(MODE === 'record')('issued zero model calls and stayed clean', async () => {
+    expect(tripwire.warnings).toEqual([])
+    // This spec mints no fixture directory contents of its own; the seed it
+    // reuses is owned (and inventory-guarded) by seeded-history.
+    await assertFixtureInventory(SNAPSHOT_DIR, ['.gitkeep'])
+  })
+})
diff --git a/apps/web/tsconfig.json b/apps/web/tsconfig.json
index 55ad95ffdb..b22b6f1efa 100644
--- a/apps/web/tsconfig.json
+++ b/apps/web/tsconfig.json
@@ -28,6 +28,8 @@
     "tests/steering.e2e.ts",
     "tests/navigation-panes.e2e.ts",
     "tests/lifecycle-chrome.e2e.ts",
+    "tests/settings-chrome.e2e.ts",
+    "tests/workspace-management.e2e.ts",
     "tests/replay-round-trip.e2e.ts",
     "tests/seeded-history.e2e.ts"
   ],
diff --git a/packages/support/llm-replay/README.i18n.yaml b/packages/support/llm-replay/README.i18n.yaml
index 63b9979098..9039715a71 100644
--- a/packages/support/llm-replay/README.i18n.yaml
+++ b/packages/support/llm-replay/README.i18n.yaml
@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write
-README.md: 901a3b7b4312fffd93e6d375c378e39064318260
-README.zh.md: b9a8068d329e28933c934e7ad352ac65641f3d23
+README.md: f184e271ff9e68760db43cfe79d4f39be81ef00f
+README.zh.md: a47bc81ab747fcdc130d535e116979e45304b319
diff --git a/packages/support/llm-replay/README.zh.md b/packages/support/llm-replay/README.zh.md
index b9a8068d32..a47bc81ab7 100644
--- a/packages/support/llm-replay/README.zh.md
+++ b/packages/support/llm-replay/README.zh.md
@@ -10,7 +10,7 @@
 
 Fixture 就是持久化会话日志（`<scenario>/session.jsonl`）。其 `assistant/chunk` 事件携带每个 `StreamChunk`，因此按 `(turn, step)` 对其分组可重建每次 `stream()` 调用的分片序列（每个 loop 步骤一次模型调用）。因此，录制操作是「运行一次真实 agent 并收集 `.jsonl`」，由快照 harness 完成；该插件不执行录制。Fixture 的 `request/header` 内容可能被 token 化为 `{{system}}`/`{{tools}}`（harness 在一个场景中固定该内容，并擦除其余场景）；回放对此并不关心，因为派生只读取 `assistant/chunk` 事件和第 0 行会话 header。
 
-有两种失败 mode 无法仅从 `assistant/chunk` 重建：在任何分片前纯抛出（例如 HTTP 401，日志只包含 `turn/end {error}` 而没有分片），以及 cancel/hang（是时序，而非分片内容）。需要这些的场景提供可选 sidecar（`<scenario>/replay.override.json`：一个 `ReplayEntry[]`），以替换派生脚本。`hang` 条目可以指定 `readyFile`；在其前缀分片到达 loop 后、等待取消前，回放会写入该空标记，使外部驱动器可以在不观察展示更新的情况下确定性取消。
+有两种失败 mode 无法仅从 `assistant/chunk` 重建：在任何分片前纯抛出（例如 HTTP 401，日志只包含 `turn/end {error}` 而没有分片），以及 cancel/hang（是时序，而非分片内容）。需要这些的场景提供可选 sidecar（`<scenario>/replay.override.json`），它要么替换派生脚本（裸 `ReplayEntry[]`），要么增补派生脚本（`{ patches: [{ at, entry }] }`：保留全部由 JSONL 派生的调用，仅在点名的调用索引处换入，索引从 0 计；`at` 等于派生长度时为追加，正是注入的瞬态抛出之后那次重试尝试所占的槽位）。`hang` 条目可以指定 `readyFile`；在其前缀分片到达 loop 后、等待取消前，回放会写入该空标记，使外部驱动器可以在不观察展示更新的情况下确定性取消。
 
 ## 嵌套 agent：每会话键控
 
diff --git a/tsconfig.host.json b/tsconfig.host.json
index 63f1c835b9..72b7f245c3 100644
--- a/tsconfig.host.json
+++ b/tsconfig.host.json
@@ -15,6 +15,8 @@
     "apps/web/tests/steering.e2e.ts",
     "apps/web/tests/navigation-panes.e2e.ts",
     "apps/web/tests/lifecycle-chrome.e2e.ts",
+    "apps/web/tests/settings-chrome.e2e.ts",
+    "apps/web/tests/workspace-management.e2e.ts",
     "apps/web/tests/replay-round-trip.e2e.ts",
     "apps/web/tests/seeded-history.e2e.ts",
     "apps/cli/tests/**/*.ts",