feat: add local workspace workflow

[mussonking]

Summary

• add workspace-backed design creation, rebinding, file browsing, import, and preview hydration flows
• wire local workspace reads/writes through main/preload/renderer and core agent tools
• tighten workspace path validation, preview source resolution, local loopback preview support, and generation coordination
• package the preview executor's ms runtime dependency so packaged builds can load debug/puppeteer-core
• add focused coverage for workspace IPC, file tree loading, preview hydration, generation races, and tool behavior

Verification

• pnpm test
• pnpm lint
• pnpm typecheck
• pnpm build
• pnpm --filter @open-codesign/desktop test -- preview-runtime.test.ts
• pnpm --filter @open-codesign/desktop build:dir
• inspected generated app.asar and confirmed node_modules/ms is packaged alongside node_modules/debug/src/common.js
• pre-push hook: typecheck + lint + test

Scope

This intentionally excludes local doc-only changes from the working tree and keeps the PR focused on the local workspace workflow.

[github-actions]

Review mode: initial

Findings

• [Minor] Missing changeset for user-visible features — The PR adds workspace creation, rebinding, file browsing, preview detection/hydration, preview mode persistence, generation race prevention per workspace, and new i18n strings. These are user-visible changes and should be accompanied by a changeset entry before merging.
  Suggested fix: Run pnpm changeset and commit the generated .md file with a semver bump that reflects the scope (likely minor, given new features).

• [Minor] Loopback URL allowance in open-external.ts (apps/desktop/src/main/open-external.ts:17-35) — The change allows opening http://localhost:* and http://127.0.0.1:* URLs via shell.openExternal. This is intentional for local preview, but it widens the external URL surface from a restricted set of GitHub paths to any loopback host. The risk is low because URLs are only opened on explicit user action (e.g. clicking "Open" in preview UI), not automatically. Consider documenting this in a comment or release note.

• [Nit] Inconsistent ellipsis characters — FilesPanel.tsx uses ... (apps/desktop/src/renderer/src/components/FilesPanel.tsx:30) while FilesTabView.tsx uses the literal ellipsis … (apps/desktop/src/renderer/src/components/FilesTabView.tsx:90). Pick one style for consistency.

Summary

The PR adds a substantial local workspace workflow to the agentic design system: workspace-backed design creation, rebinding, lazy file tree browsing, import, preview mode selection (integrated/connected-url/external-app/off), automatic dev-server detection, generation race prevention per workspace, and preview hydration from workspace files. The changes are well-structured, include thorough tests (unit and integration), and respect the project's hard constraints (no bundled runtimes, permissive deps, BYOK, local-first).

One changeset is missing, and the loopback URL change should be clearly documented. No blockers; this is ready to merge after the changeset is added.

Testing

Extensive coverage: ask-ipc, generation-ipc, workspace-reader, workspace-files IPC, naming, rename races, session isolation, preview detection, export path helpers, preferences migration, store logic, and more. Good.

Open-CoDesign Bot

[github-actions]

Review mode: follow-up after new commits

Findings

No new issues found.

Summary

The follow-up diff resolves all previously flagged items:

• ✅ Changeset added — .changeset/local-workspace-preview.md documents the minor bump and the scope of changes.
• ✅ Loopback URL documented — A comment block in apps/desktop/src/main/open-external.ts explains the security rationale for allowing loopback URLs.
• ✅ Ellipsis consistency — FilesPanel.tsx now uses … matching FilesTabView.tsx.

The PR is now complete. Ready to merge.

Testing

No new tests needed for the follow-up changes (documentation comment, ellipsis character, changeset file). Existing test suite covers the functional changes.

Open-CoDesign Bot