local filesystem fixes

Author: Sg312

apps/sim/app/workspace/[workspaceId]/home/components/message-content/components/special-tags/special-tags.tsx

@@ -66,6 +66,7 @@ export const CREDENTIAL_TAG_TYPES = [
   'credential_id',
   'link',
   'secret_input',
+  'folder_access',
 ] as const
 
 export type CredentialTagType = (typeof CREDENTIAL_TAG_TYPES)[number]
@@ -195,6 +196,11 @@ function isCredentialTagData(value: unknown): value is CredentialTagData {
     }
     return typeof value.name === 'string' && value.name.trim().length > 0
   }
+  // folder_access is a value-less action chip (optional `name` hints at the
+  // folder the user is being asked to grant, e.g. "Desktop").
+  if (value.type === 'folder_access') {
+    return value.name === undefined || typeof value.name === 'string'
+  }
   if (value.redacted === true) return value.value === undefined || typeof value.value === 'string'
   return typeof value.value === 'string'
 }
@@ -734,13 +740,91 @@ function SecretInputDisplay({ data }: { data: CredentialTagData }) {
   )
 }
 
+/**
+ * Folder icon for the local-folder grant chip (matches the credential chip
+ * icon sizing).
+ */
+const FolderGrantIcon = ({ className }: { className?: string }) => (
+  <svg className={className} viewBox='0 0 16 16' fill='none' xmlns='http://www.w3.org/2000/svg'>
+    <path
+      d='M1.5 4.5A1.5 1.5 0 0 1 3 3h3.2l1.6 1.8H13A1.5 1.5 0 0 1 14.5 6.3v5.2A1.5 1.5 0 0 1 13 13H3a1.5 1.5 0 0 1-1.5-1.5v-7z'
+      stroke='currentColor'
+      strokeWidth='1.2'
+      strokeLinejoin='round'
+    />
+  </svg>
+)
+
+/**
+ * Inline grant chip rendered for
+ * `<credential>{"type":"folder_access","name":"Desktop"}</credential>`.
+ * Clicking opens the desktop app's native folder picker (read-only grant,
+ * same flow as the local_mount_directory tool). Renders nothing outside the
+ * desktop app — there is no local filesystem bridge to grant against.
+ */
+function FolderAccessDisplay({ data }: { data: CredentialTagData }) {
+  const [picking, setPicking] = useState(false)
+  const [grantedName, setGrantedName] = useState<string | null>(null)
+
+  const bridge = typeof window !== 'undefined' ? window.simDesktop : undefined
+  if (!bridge?.localFilesystem) return null
+
+  const hint = (data.name ?? '').trim()
+  const label = grantedName
+    ? `Access granted — ${grantedName}`
+    : hint
+      ? `Grant access to ${hint}`
+      : 'Grant access to a local folder'
+
+  const handleClick = async () => {
+    if (picking || grantedName) return
+    setPicking(true)
+    try {
+      const response = await bridge.localFilesystem({ operation: 'mount_directory' })
+      if (response.ok && 'mount' in response.data && response.data.mount) {
+        setGrantedName(response.data.mount.name)
+        toast.success(`Granted access to ${response.data.mount.name}`)
+      }
+    } catch {
+      toast.error("Couldn't open the folder picker. Please try again.")
+    } finally {
+      setPicking(false)
+    }
+  }
+
+  return (
+    <button
+      type='button'
+      onClick={() => void handleClick()}
+      disabled={picking || grantedName !== null}
+      className={cn(
+        'flex w-full items-center gap-2 rounded-lg border border-[var(--divider)] px-3 py-2.5 text-left transition-colors',
+        grantedName === null && !picking && 'hover-hover:bg-[var(--surface-5)]',
+        picking && 'opacity-60'
+      )}
+    >
+      <FolderGrantIcon className='size-[16px] shrink-0' />
+      <span className='flex-1 text-[var(--text-body)] text-sm'>
+        {picking ? 'Choose a folder…' : label}
+      </span>
+      {grantedName === null && (
+        <ArrowRight className='size-[16px] shrink-0 text-[var(--text-icon)]' />
+      )}
+    </button>
+  )
+}
+
 function CredentialDisplay({ data }: { data: CredentialTagData }) {
   const { canEdit } = useUserPermissionsContext()
 
   if (data.type === 'secret_input') {
     return <SecretInputDisplay data={data} />
   }
 
+  if (data.type === 'folder_access') {
+    return <FolderAccessDisplay data={data} />
+  }
+
   if (data.type === 'link') {
     // Connecting a credential mutates the workspace — hide it from read-only members.
     if (!data.provider || !canEdit) return null

apps/sim/lib/copilot/tools/local-filesystem.ts

@@ -44,7 +44,8 @@ export function buildLocalFilesystemToolSchemas() {
     {
       name: LOCAL_FILESYSTEM_TOOL_NAMES.mountDirectory,
       description:
-        'Open the native folder picker so the user can grant the desktop app read-only access to one local directory. The grant is encrypted with the operating-system keychain and remembered across app restarts when secure storage is available. Returns an opaque localfs:// root URI; it never returns the absolute host path. Call this only when no suitable remembered mount exists.',
+        'Open the native folder picker so the user can grant the desktop app read-only access to one local directory. The grant is encrypted with the operating-system keychain and remembered across app restarts when secure storage is available. Returns an opaque localfs:// root URI; it never returns the absolute host path. ' +
+        'PREFER THE INLINE GRANT CHIP over calling this tool: when the user asks about their local files (their desktop, downloads, a folder on their machine) and local_list_mounts shows no suitable mount, respond with ONE short sentence plus `<credential>{"type":"folder_access","name":"Desktop"}</credential>` (set "name" to the folder they mentioned, or omit it) — this renders a grant button the user clicks, exactly like a credential connect chip. Never reply that you lack access to local files, and never make the user ask twice: check mounts, then emit the chip. Call this tool directly only when the user has just explicitly asked you to open the picker.',
       input_schema: objectSchema({}),
       executeLocally: true,
     },