fix: show hidden files, sort dotfiles first, restore uploaded file names, fix close tabs killing running sessions, fix telegram streaming truncation

[huagusam]

fixes #459, #469, #487, #490

Changes

• workspace tree: show hidden files and sort dotfiles first
• uploaded file names: strip uuid prefix on history reload ([BUG] 会话上传文件后作为历史会话查看，文件名全部变成uuid #469)
• session close: context menu checks chatState before disconnect ([BUG] 关闭会话后,工作中的会话会停止会话流 #490)
• telegram: split long tool_use messages into chunks ([BUG] Telegram Bot 流式生成长回复时内容被截断，无法完整显示 #487)
• settings sidebar overflow fix
• click-outside dismiss for add-to-chat floating menus (chat selection, workspace panel)
• restore MarkdownSurface + fix orphaned JSX in WorkspacePanel

[github-actions]

PR quality triage

Changed areas: area:adapters, area:desktop, area:server

CLI core policy: No CLI-core policy block detected.

Missing-test policy: Blocked by policy until a maintainer applies allow-missing-tests or matching tests are added.

Coverage baseline policy: No coverage-baseline policy block detected.

CLI core files:

• none

Coverage policy files:

• none

Expected checks:

• change-policy
• desktop-checks
• server-checks
• adapter-checks
• desktop-native-checks
• coverage-checks

Test coverage signals:

• BLOCKING unless allow-missing-tests is applied: Desktop product files changed without a desktop test file in the PR.
• BLOCKING unless allow-missing-tests is applied: Adapter product files changed without an adapter test file in the PR.
• BLOCKING unless allow-missing-tests is applied: Agent/runtime product files changed without a tools/utils test file in the PR.
• Agent/model runtime path changed: use mock/request-shape tests in PR and maintainer live-model smoke before release.

Risk notes:

• Desktop state/API layer changed: verify store persistence, WebSocket behavior, and startup errors.
• Session runtime changed: review reconnect, startup diagnostics, provider selection, and thinking settings.
• Provider/search behavior changed: PR gate uses mock tests; live-provider tests stay maintainer-only.

Hard merge gates still come from GitHub Actions, not AI review.

Dosu handoff: Dosu can be used as the AI reviewer for risk explanation, missing-test prompts, and maintainer Q&A. If it does not comment automatically from the PR template, ask:

@dosubot review this PR for changed-area risk, missing tests, docs impact, desktop startup risk, and CLI core impact.

[NanmiCoder]

感谢代码贡献，请问有build成软件之后测试吗