[Yuqing (mydmdm)]

Summary

• Bundle a deterministic ACP proxy harness with stateless fs-list / fs-read, bounded UTF-8 reads, versioned continuation cursors, ordinary symlink handling, and explicit filesystem errors.
• Provision a hidden Profile per connected device and use private, queued, no-history ACP Jobs with owner-only HTTP access, connection-generation fencing, deadlines, and process reclamation.
• Add Chat's Browse files action, a lazy virtualized Files sidebar, copy-only Canvas drag/Add, metadata-only file-reference nodes, and a bounded read-only plain-text Preview.
• Update the architecture documentation. Agentlet and Agenetes changes are committed separately from Huabu application changes.

Boundaries

The selected device's OS account permissions are the filesystem authority; there is no project-root allowlist or privilege elevation. No new filesystem transport, model call, shell command capability, watcher, rename tracking, file import, or automatic remote reads from cold Canvas nodes are introduced. .tex is displayed as source, not compiled.

Validation

• Repository-level pnpm typecheck, pnpm format, and pnpm lint:fix pass; lint reports warnings but no errors.
• Focused suites: 159 server, 88 web, 36 shared, and 72 Agentlet/Profile tests pass.
• Production web build and complete server/Agentlet packaging pass.
• The self-contained packaged proxy passes a real ACP stdio initialize / command-discovery / list / read / unsupported-command smoke test.
• Locale parity, source headers, and diff whitespace checks pass.

Linux validation is complete for the commands above. Native Windows/macOS desktop execution was not available in this environment and remains a platform-validation limitation.

References #349.