diff --git a/src/main/files.ts b/src/main/files.ts
new file mode 100644
index 000000000..e7da1280d
--- /dev/null
+++ b/src/main/files.ts
@@ -0,0 +1,256 @@
+import { ipcMain } from "electron";
+import {
+  existsSync,
+  lstatSync,
+  readFileSync,
+  realpathSync,
+  readdirSync,
+  statSync,
+} from "fs";
+import { dirname, isAbsolute, join, relative, resolve } from "path";
+import { HERMES_HOME } from "./installer";
+import { safeWriteFile } from "./utils";
+import { isRemoteOnlyMode } from "./hermes";
+
+const ROOT_FILE = join(HERMES_HOME, "desktop", "files-workspace-root.txt");
+const MAX_READ_BYTES = 1024 * 1024;
+const MAX_WRITE_BYTES = 1024 * 1024;
+
+interface FileEntry {
+  name: string;
+  isDir: boolean;
+  path: string;
+  error?: string;
+}
+
+type FilesFailure = {
+  success: false;
+  error: string;
+  unsupportedMode?: boolean;
+};
+
+type FilesSuccess<T = void> = {
+  success: true;
+  data?: T;
+};
+
+type FilesResult<T = void> = FilesSuccess<T> | FilesFailure;
+
+function isFilesFailure<T>(
+  result: { realRoot: string; realTarget: string } | { realRoot: string; target: string } | FilesResult<T>,
+): result is FilesResult<T> {
+  return "success" in result && result.success === false;
+}
+
+interface ListResult {
+  root: string | null;
+  cwd: string | null;
+  entries: FileEntry[];
+}
+
+function unsupported(): FilesFailure {
+  return {
+    success: false,
+    unsupportedMode: true,
+    error: "Files is only available in local or SSH tunnel modes.",
+  };
+}
+
+function fail(error: string): FilesFailure {
+  return { success: false, error };
+}
+
+function readWorkspaceRoot(): string | null {
+  try {
+    if (!existsSync(ROOT_FILE)) return null;
+    const raw = readFileSync(ROOT_FILE, "utf-8").trim();
+    if (!raw) return null;
+    return realpathSync(raw);
+  } catch {
+    return null;
+  }
+}
+
+function writeWorkspaceRoot(root: string): void {
+  safeWriteFile(ROOT_FILE, root);
+}
+
+export function isPathUnderRoot(realTarget: string, realRoot: string): boolean {
+  const rel = relative(realRoot, realTarget);
+  return rel === "" || (!!rel && !rel.startsWith("..") && !isAbsolute(rel));
+}
+
+function realpathParentOrThrow(parent: string): string {
+  try {
+    if (!existsSync(parent)) throw new Error("Path not allowed");
+    return realpathSync(parent);
+  } catch (err) {
+    if ((err as NodeJS.ErrnoException).code === "ENOENT") {
+      throw new Error("Path not allowed");
+    }
+    throw err;
+  }
+}
+
+/** Resolve a path and ensure it (or its parent for new files) stays under workspace roots. */
+export function assertPathAllowed(target: string, workspaceRoots: string[]): string {
+  if (workspaceRoots.length === 0) {
+    throw new Error("Path not allowed");
+  }
+
+  let resolved: string;
+  try {
+    resolved = existsSync(target) ? realpathSync(target) : resolve(target);
+  } catch {
+    throw new Error("Path not allowed");
+  }
+
+  const parentReal = realpathParentOrThrow(dirname(resolved));
+  const allowed = workspaceRoots.some((root) => {
+    try {
+      const realRoot = realpathSync(root);
+      if (isPathUnderRoot(parentReal, realRoot)) return true;
+      if (existsSync(resolved)) {
+        return isPathUnderRoot(realpathSync(target), realRoot);
+      }
+      return false;
+    } catch {
+      return false;
+    }
+  });
+
+  if (!allowed) throw new Error("Path not allowed");
+  return resolved;
+}
+
+function validateRoot(): string | FilesFailure {
+  const root = readWorkspaceRoot();
+  if (!root) return fail("Choose a workspace folder first.");
+  return root;
+}
+
+function validateExistingTarget(
+  path: unknown,
+): { realRoot: string; realTarget: string } | FilesFailure {
+  if (typeof path !== "string") return fail("Invalid path.");
+  const realRoot = validateRoot();
+  if (typeof realRoot !== "string") return realRoot;
+  try {
+    const realTarget = assertPathAllowed(path || realRoot, [realRoot]);
+    return { realRoot, realTarget };
+  } catch (err) {
+    if (err instanceof Error && err.message === "Path not allowed") {
+      return fail("Path is outside the workspace.");
+    }
+    return fail(err instanceof Error ? err.message : String(err));
+  }
+}
+
+function validateWriteTarget(path: unknown): { realRoot: string; target: string } | FilesFailure {
+  if (typeof path !== "string" || !path.trim()) return fail("Invalid path.");
+  const realRoot = validateRoot();
+  if (typeof realRoot !== "string") return realRoot;
+  const target = resolve(path);
+  try {
+    assertPathAllowed(target, [realRoot]);
+    if (existsSync(target)) {
+      const realTarget = realpathSync(target);
+      if (statSync(realTarget).isDirectory()) return fail("Cannot write to a directory.");
+    }
+    return { realRoot, target };
+  } catch (err) {
+    if (err instanceof Error && err.message === "Path not allowed") {
+      return fail("Write target is outside the workspace.");
+    }
+    return fail(err instanceof Error ? err.message : String(err));
+  }
+}
+
+function listEntry(parent: string, name: string, realRoot: string): FileEntry {
+  const path = join(parent, name);
+  try {
+    const lst = lstatSync(path);
+    if (lst.isSymbolicLink()) {
+      const real = realpathSync(path);
+      if (!isPathUnderRoot(real, realRoot)) {
+        return { name, isDir: false, path, error: "Outside workspace" };
+      }
+      return { name, isDir: statSync(real).isDirectory(), path };
+    }
+    return { name, isDir: lst.isDirectory(), path };
+  } catch (err) {
+    return {
+      name,
+      isDir: false,
+      path,
+      error: err instanceof Error ? err.message : String(err),
+    };
+  }
+}
+
+function containsBinaryBytes(buffer: Buffer): boolean {
+  return buffer.includes(0);
+}
+
+export function registerFilesHandlers(): void {
+  ipcMain.handle("files-get-workspace-root", (): FilesResult<{ root: string | null }> => {
+    if (isRemoteOnlyMode()) return unsupported();
+    return { success: true, data: { root: readWorkspaceRoot() } };
+  });
+
+  ipcMain.handle("files-set-workspace-root", (_event, dir: string): FilesResult<{ root: string }> => {
+    if (isRemoteOnlyMode()) return unsupported();
+    if (typeof dir !== "string" || !dir.trim()) return fail("Invalid workspace folder.");
+    try {
+      const realRoot = realpathSync(dir);
+      if (!statSync(realRoot).isDirectory()) return fail("Workspace root must be a directory.");
+      writeWorkspaceRoot(realRoot);
+      return { success: true, data: { root: realRoot } };
+    } catch (err) {
+      return fail(err instanceof Error ? err.message : String(err));
+    }
+  });
+
+  ipcMain.handle("files-list-dir", (_event, dir: string): FilesResult<ListResult> => {
+    if (isRemoteOnlyMode()) return unsupported();
+    const target = validateExistingTarget(dir);
+    if (isFilesFailure(target)) return target;
+    if (!statSync(target.realTarget).isDirectory()) return fail("Path is not a directory.");
+
+    const entries = readdirSync(target.realTarget)
+      .map((name) => listEntry(target.realTarget, name, target.realRoot))
+      .sort((a, b) => {
+        if (a.isDir !== b.isDir) return a.isDir ? -1 : 1;
+        return a.name.localeCompare(b.name);
+      });
+
+    return {
+      success: true,
+      data: { root: target.realRoot, cwd: target.realTarget, entries },
+    };
+  });
+
+  ipcMain.handle("files-read", (_event, path: string): FilesResult<{ text: string }> => {
+    if (isRemoteOnlyMode()) return unsupported();
+    const target = validateExistingTarget(path);
+    if (isFilesFailure(target)) return target;
+    const st = statSync(target.realTarget);
+    if (!st.isFile()) return fail("Path is not a file.");
+    if (st.size > MAX_READ_BYTES) return fail("File is too large to open.");
+    const raw = readFileSync(target.realTarget);
+    if (containsBinaryBytes(raw)) return fail("Binary files are not supported.");
+    return { success: true, data: { text: raw.toString("utf-8") } };
+  });
+
+  ipcMain.handle("files-write", (_event, path: string, content: string): FilesResult => {
+    if (isRemoteOnlyMode()) return unsupported();
+    if (typeof content !== "string") return fail("File content must be text.");
+    if (Buffer.byteLength(content, "utf-8") > MAX_WRITE_BYTES) {
+      return fail("File is too large to save.");
+    }
+    const target = validateWriteTarget(path);
+    if (isFilesFailure(target)) return target;
+    safeWriteFile(target.target, content);
+    return { success: true };
+  });
+}
diff --git a/src/main/index.ts b/src/main/index.ts
index 392f8a85c..9694f9fee 100644
--- a/src/main/index.ts
+++ b/src/main/index.ts
@@ -118,6 +118,7 @@ import {
   deleteProfile,
   setActiveProfile,
 } from "./profiles";
+import { registerFilesHandlers } from "./files";
 import {
   readMemory,
   addMemoryEntry,
@@ -1543,6 +1544,8 @@ function setupIPC(): void {
       return sshReadLogs(conn.ssh, logFile, lines);
     return readLogs(logFile, lines);
   });
+
+  registerFilesHandlers();
 }
 
 function buildMenu(): void {
diff --git a/src/preload/index.d.ts b/src/preload/index.d.ts
index ea4d82e74..b982d2827 100644
--- a/src/preload/index.d.ts
+++ b/src/preload/index.d.ts
@@ -770,6 +770,34 @@ interface HermesAPI {
     logFile?: string,
     lines?: number,
   ) => Promise<{ content: string; path: string }>;
+
+  filesGetWorkspaceRoot: () => Promise<{
+    success: boolean;
+    data?: { root: string | null };
+    error?: string;
+  }>;
+  filesSetWorkspaceRoot: (
+    dir: string,
+  ) => Promise<{ success: boolean; data?: { root: string }; error?: string }>;
+  filesListDir: (
+    dir: string,
+  ) => Promise<{
+    success: boolean;
+    data?: {
+      root: string | null;
+      cwd: string | null;
+      entries: Array<{ name: string; isDir: boolean; path: string; error?: string }>;
+    };
+    error?: string;
+    unsupportedMode?: boolean;
+  }>;
+  filesRead: (
+    path: string,
+  ) => Promise<{ success: boolean; data?: { text: string }; error?: string }>;
+  filesWrite: (
+    path: string,
+    content: string,
+  ) => Promise<{ success: boolean; error?: string }>;
 }
 
 declare global {
diff --git a/src/preload/index.ts b/src/preload/index.ts
index 9f9e0efb3..fbed11ac7 100644
--- a/src/preload/index.ts
+++ b/src/preload/index.ts
@@ -952,6 +952,23 @@ const hermesAPI = {
     lines?: number,
   ): Promise<{ content: string; path: string }> =>
     ipcRenderer.invoke("read-logs", logFile, lines),
+
+  // File browser
+  filesGetWorkspaceRoot: (): Promise<{ success: boolean; data?: { root: string | null }; error?: string }> =>
+    ipcRenderer.invoke("files-get-workspace-root"),
+  filesSetWorkspaceRoot: (dir: string): Promise<{ success: boolean; data?: { root: string }; error?: string }> =>
+    ipcRenderer.invoke("files-set-workspace-root", dir),
+  filesListDir: (dir: string): Promise<{
+    success: boolean;
+    data?: { root: string | null; cwd: string | null; entries: Array<{ name: string; isDir: boolean; path: string; error?: string }> };
+    error?: string;
+    unsupportedMode?: boolean;
+  }> =>
+    ipcRenderer.invoke("files-list-dir", dir),
+  filesRead: (path: string): Promise<{ success: boolean; data?: { text: string }; error?: string }> =>
+    ipcRenderer.invoke("files-read", path),
+  filesWrite: (path: string, content: string): Promise<{ success: boolean; error?: string }> =>
+    ipcRenderer.invoke("files-write", path, content),
 };
 
 if (process.contextIsolated) {
diff --git a/src/renderer/src/assets/icons/index.tsx b/src/renderer/src/assets/icons/index.tsx
index 52386a771..574db2201 100644
--- a/src/renderer/src/assets/icons/index.tsx
+++ b/src/renderer/src/assets/icons/index.tsx
@@ -37,3 +37,4 @@ export { Ban } from "lucide-react";
 export { RotateCcw } from "lucide-react";
 export { Loader2 as Spinner } from "lucide-react";
 export { Columns3 as Kanban } from "lucide-react";
+export { FolderOpen } from "lucide-react";
diff --git a/src/renderer/src/assets/main.css b/src/renderer/src/assets/main.css
index 4f89794ca..2358e7560 100644
--- a/src/renderer/src/assets/main.css
+++ b/src/renderer/src/assets/main.css
@@ -5959,3 +5959,45 @@ body {
   font-size: 11px;
   color: var(--text-muted);
 }
+
+/* ── Files browser ───────────────────────────────────────────────────── */
+
+.screen-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 16px 20px;
+  border-bottom: 1px solid var(--border);
+}
+
+.screen-title {
+  font-size: 18px;
+  font-weight: 600;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.btn-primary {
+  padding: 8px 14px;
+  border-radius: 6px;
+  font-size: 13px;
+  cursor: pointer;
+  border: none;
+  background: var(--accent);
+  color: #fff;
+}
+
+.files-screen {
+  display: flex;
+  flex-direction: column;
+  height: 100%;
+  overflow: hidden;
+}
+
+.files-split { display: flex; flex: 1; overflow: hidden; }
+.files-tree { width: 240px; border-right: 1px solid var(--border); overflow-y: auto; padding: 8px; }
+.files-entry { display: block; width: 100%; text-align: left; padding: 6px 8px; border: none; background: transparent; color: var(--text-primary); cursor: pointer; font-size: 13px; }
+.files-editor { flex: 1; display: flex; flex-direction: column; }
+.files-textarea { flex: 1; border: none; padding: 12px; font-family: monospace; font-size: 13px; background: var(--bg-primary); color: var(--text-primary); resize: none; }
+.files-path { padding: 8px 12px; font-size: 12px; color: var(--text-muted); border-bottom: 1px solid var(--border); }
diff --git a/src/renderer/src/screens/Files/Files.tsx b/src/renderer/src/screens/Files/Files.tsx
new file mode 100644
index 000000000..c056f2930
--- /dev/null
+++ b/src/renderer/src/screens/Files/Files.tsx
@@ -0,0 +1,134 @@
+import { useState, useEffect } from "react";
+
+interface FileEntry {
+  name: string;
+  isDir: boolean;
+  path: string;
+  error?: string;
+}
+
+function Files(): React.JSX.Element {
+  const [rootInput, setRootInput] = useState("");
+  const [root, setRoot] = useState<string | null>(null);
+  const [cwd, setCwd] = useState("");
+  const [entries, setEntries] = useState<FileEntry[]>([]);
+  const [selected, setSelected] = useState<string | null>(null);
+  const [content, setContent] = useState("");
+  const [dirty, setDirty] = useState(false);
+  const [error, setError] = useState("");
+
+  useEffect(() => {
+    window.hermesAPI.filesGetWorkspaceRoot().then((res) => {
+      if (res.success && res.data?.root) {
+        setRoot(res.data.root);
+        setRootInput(res.data.root);
+        setCwd(res.data.root);
+      } else if (res.error) {
+        setError(res.error);
+      }
+    });
+  }, []);
+
+  useEffect(() => {
+    if (!cwd) return;
+    window.hermesAPI.filesListDir(cwd).then((res) => {
+      if (!res.success || !res.data) {
+        setError(res.error || "Unable to list folder");
+        setEntries([]);
+        return;
+      }
+      setError("");
+      setRoot(res.data.root);
+      setCwd(res.data.cwd || "");
+      setEntries(res.data.entries);
+    });
+  }, [cwd]);
+
+  async function openFile(path: string): Promise<void> {
+    const res = await window.hermesAPI.filesRead(path);
+    if (!res.success || !res.data) {
+      setError(res.error || "Unable to open file");
+      return;
+    }
+    setSelected(path);
+    setContent(res.data.text);
+    setDirty(false);
+    setError("");
+  }
+
+  async function save(): Promise<void> {
+    if (!selected) return;
+    const res = await window.hermesAPI.filesWrite(selected, content);
+    if (!res.success) {
+      setError(res.error || "Unable to save file");
+      return;
+    }
+    setDirty(false);
+    setError("");
+  }
+
+  async function setWorkspaceRoot(): Promise<void> {
+    const res = await window.hermesAPI.filesSetWorkspaceRoot(rootInput);
+    if (!res.success || !res.data) {
+      setError(res.error || "Unable to use workspace folder");
+      return;
+    }
+    setRoot(res.data.root);
+    setCwd(res.data.root);
+    setSelected(null);
+    setContent("");
+    setDirty(false);
+    setError("");
+  }
+
+  return (
+    <div className="files-screen">
+      <header className="screen-header">
+        <h1 className="screen-title">Files</h1>
+        <div className="files-root-picker">
+          <input
+            className="input"
+            value={rootInput}
+            onChange={(e) => setRootInput(e.target.value)}
+            placeholder="Workspace root"
+          />
+          <button className="btn btn-secondary btn-sm" onClick={setWorkspaceRoot}>Use</button>
+          {selected && (
+            <button className="btn btn-primary btn-sm" disabled={!dirty} onClick={save}>Save</button>
+          )}
+        </div>
+      </header>
+      {error && <div className="files-error">{error}</div>}
+      <div className="files-split">
+        <aside className="files-tree">
+          {root && cwd !== root && (
+            <button className="files-entry" onClick={() => setCwd(root)}>Workspace root</button>
+          )}
+          {entries.map((e) => (
+            <button
+              key={e.path}
+              className="files-entry"
+              disabled={!!e.error}
+              onClick={() => e.isDir ? setCwd(e.path) : openFile(e.path)}
+              title={e.error}
+            >
+              {e.isDir ? "📁" : "📄"} {e.name}
+            </button>
+          ))}
+        </aside>
+        <div className="files-editor">
+          {selected ? (
+            <>
+              <div className="files-path">{selected}</div>
+              <textarea className="files-textarea" value={content} onChange={(e) => { setContent(e.target.value); setDirty(true); }} />
+            </>
+          ) : (
+            <p className="empty-state">Select a file to edit</p>
+          )}
+        </div>
+      </div>
+    </div>
+  );
+}
+
+export default Files;
diff --git a/src/renderer/src/screens/Layout/Layout.tsx b/src/renderer/src/screens/Layout/Layout.tsx
index 6d614f602..db7c0e252 100644
--- a/src/renderer/src/screens/Layout/Layout.tsx
+++ b/src/renderer/src/screens/Layout/Layout.tsx
@@ -17,6 +17,7 @@ import Models from "../Models/Models";
 import Providers from "../Providers/Providers";
 import Schedules from "../Schedules/Schedules";
 import Kanban from "../Kanban/Kanban";
+import Files from "../Files/Files";
 import RemoteNotice from "../../components/RemoteNotice";
 import VerifyWarningBanner from "../../components/VerifyWarningBanner";
 import hermeslogo from "../../assets/hermes.png";
@@ -36,6 +37,7 @@ import {
   Timer,
   Kanban as KanbanIcon,
   Download,
+  FolderOpen,
 } from "../../assets/icons";
 import type { LucideIcon } from "lucide-react";
 import { useI18n } from "../../components/useI18n";
@@ -53,6 +55,7 @@ type View =
   | "tools"
   | "schedules"
   | "kanban"
+  | "files"
   | "gateway"
   | "settings";
 
@@ -62,6 +65,7 @@ const NAV_ITEMS: { view: View; icon: LucideIcon; labelKey: string }[] = [
   { view: "agents", icon: Users, labelKey: "navigation.agents" },
   { view: "office", icon: Building, labelKey: "navigation.office" },
   { view: "kanban", icon: KanbanIcon, labelKey: "navigation.kanban" },
+  { view: "files", icon: FolderOpen, labelKey: "navigation.files" },
   { view: "models", icon: Layers, labelKey: "navigation.models" },
   { view: "providers", icon: KeyRound, labelKey: "navigation.providers" },
   { view: "skills", icon: Puzzle, labelKey: "navigation.skills" },
@@ -393,6 +397,12 @@ function Layout({
           </div>
         )}
 
+        {visitedViews.has("files") && (
+          <div style={paneStyle("files")}>
+            {remoteMode ? <RemoteNotice feature="Files" /> : <Files />}
+          </div>
+        )}
+
         {visitedViews.has("gateway") && (
           <div style={paneStyle("gateway")}>
             {remoteMode ? (
diff --git a/src/shared/i18n/locales/en/navigation.ts b/src/shared/i18n/locales/en/navigation.ts
index 1f7aad5c4..e99a66d0d 100644
--- a/src/shared/i18n/locales/en/navigation.ts
+++ b/src/shared/i18n/locales/en/navigation.ts
@@ -11,6 +11,7 @@ export default {
   tools: "Tools",
   schedules: "Schedules",
   kanban: "Kanban",
+  files: "Files",
   gateway: "Gateway",
   settings: "Settings",
 } as const;
diff --git a/src/shared/i18n/locales/es/navigation.ts b/src/shared/i18n/locales/es/navigation.ts
index 80a56f2cf..e0e1115c8 100644
--- a/src/shared/i18n/locales/es/navigation.ts
+++ b/src/shared/i18n/locales/es/navigation.ts
@@ -2,6 +2,8 @@ export default {
   chat: "Chat",
   sessions: "Sesiones",
   agents: "Perfiles",
+  dashboard: "Panel",
+  vault: "Bóveda",
   office: "Office",
   models: "Modelos",
   providers: "Proveedores",
@@ -11,6 +13,11 @@ export default {
   tools: "Herramientas",
   schedules: "Programaciones",
   kanban: "Kanban",
+  terminal: "Terminal",
+  files: "Archivos",
+  mcp: "MCP Hub",
+  swarm: "Swarm",
+  ecosystem: "Ecosistema",
   gateway: "Gateway",
   settings: "Configuración",
 } as const;
diff --git a/src/shared/i18n/locales/id/navigation.ts b/src/shared/i18n/locales/id/navigation.ts
index 7c1240b2f..6939f9145 100644
--- a/src/shared/i18n/locales/id/navigation.ts
+++ b/src/shared/i18n/locales/id/navigation.ts
@@ -2,6 +2,8 @@ export default {
   chat: "Chat",
   sessions: "Sesi",
   agents: "Profil",
+  dashboard: "Dasbor",
+  vault: "Vault",
   office: "Office",
   models: "Model",
   providers: "Provider",
@@ -11,6 +13,11 @@ export default {
   tools: "Alat",
   schedules: "Jadwal",
   kanban: "Kanban",
+  terminal: "Terminal",
+  files: "File",
+  mcp: "MCP Hub",
+  swarm: "Swarm",
+  ecosystem: "Ekosistem",
   gateway: "Gateway",
   settings: "Pengaturan",
 } as const;
diff --git a/src/shared/i18n/locales/ja/navigation.ts b/src/shared/i18n/locales/ja/navigation.ts
index 04dee3a2e..8a09caaf7 100644
--- a/src/shared/i18n/locales/ja/navigation.ts
+++ b/src/shared/i18n/locales/ja/navigation.ts
@@ -2,6 +2,8 @@ export default {
   chat: "チャット",
   sessions: "セッション",
   agents: "プロファイル",
+  dashboard: "ダッシュボード",
+  vault: "Vault",
   office: "オフィス",
   models: "モデル",
   providers: "プロバイダ",
@@ -11,6 +13,11 @@ export default {
   tools: "ツール",
   schedules: "スケジュール",
   kanban: "カンバン",
+  terminal: "ターミナル",
+  files: "ファイル",
+  mcp: "MCP Hub",
+  swarm: "Swarm",
+  ecosystem: "エコシステム",
   gateway: "ゲートウェイ",
   settings: "設定",
 } as const;
diff --git a/src/shared/i18n/locales/pt-BR/navigation.ts b/src/shared/i18n/locales/pt-BR/navigation.ts
index 648a61225..4ec3c5884 100644
--- a/src/shared/i18n/locales/pt-BR/navigation.ts
+++ b/src/shared/i18n/locales/pt-BR/navigation.ts
@@ -2,6 +2,8 @@ export default {
   chat: "Chat",
   sessions: "Sessões",
   agents: "Perfis",
+  dashboard: "Painel",
+  vault: "Cofre",
   office: "Escritório",
   models: "Modelos",
   providers: "Provedores",
@@ -11,6 +13,11 @@ export default {
   tools: "Ferramentas",
   schedules: "Agendamentos",
   kanban: "Kanban",
+  terminal: "Terminal",
+  files: "Arquivos",
+  mcp: "MCP Hub",
+  swarm: "Swarm",
+  ecosystem: "Ecossistema",
   gateway: "Gateway",
   settings: "Configurações",
 } as const;
diff --git a/src/shared/i18n/locales/pt-PT/navigation.ts b/src/shared/i18n/locales/pt-PT/navigation.ts
index 102f55f4e..3e3e61b78 100644
--- a/src/shared/i18n/locales/pt-PT/navigation.ts
+++ b/src/shared/i18n/locales/pt-PT/navigation.ts
@@ -2,6 +2,8 @@ export default {
   chat: "Chat",
   sessions: "Sessões",
   agents: "Perfis",
+  dashboard: "Painel",
+  vault: "Cofre",
   office: "Escritório",
   models: "Modelos",
   providers: "Fornecedores",
@@ -11,6 +13,11 @@ export default {
   tools: "Ferramentas",
   schedules: "Agendamentos",
   kanban: "Kanban",
+  terminal: "Terminal",
+  files: "Ficheiros",
+  mcp: "MCP Hub",
+  swarm: "Swarm",
+  ecosystem: "Ecossistema",
   gateway: "Gateway",
   settings: "Definições",
 } as const;
diff --git a/src/shared/i18n/locales/zh-CN/navigation.ts b/src/shared/i18n/locales/zh-CN/navigation.ts
index 7500a7f99..67ae39253 100644
--- a/src/shared/i18n/locales/zh-CN/navigation.ts
+++ b/src/shared/i18n/locales/zh-CN/navigation.ts
@@ -2,6 +2,8 @@ export default {
   chat: "聊天",
   sessions: "会话",
   agents: "档案",
+  dashboard: "仪表盘",
+  vault: "Vault",
   office: "工作区",
   models: "模型",
   providers: "提供商",
@@ -11,6 +13,11 @@ export default {
   tools: "工具",
   schedules: "计划任务",
   kanban: "看板",
+  terminal: "终端",
+  files: "文件",
+  mcp: "MCP Hub",
+  swarm: "Swarm",
+  ecosystem: "生态系统",
   gateway: "网关",
   settings: "设置",
 } as const;
diff --git a/src/shared/i18n/locales/zh-TW/navigation.ts b/src/shared/i18n/locales/zh-TW/navigation.ts
index eb6189d00..8c5da1ff7 100644
--- a/src/shared/i18n/locales/zh-TW/navigation.ts
+++ b/src/shared/i18n/locales/zh-TW/navigation.ts
@@ -2,6 +2,8 @@ export default {
   chat: "聊天",
   sessions: "工作階段",
   agents: "檔案",
+  dashboard: "儀表板",
+  vault: "Vault",
   office: "工作區",
   models: "模型",
   providers: "供應商",
@@ -11,6 +13,11 @@ export default {
   tools: "工具",
   schedules: "排程工作",
   kanban: "看板",
+  terminal: "終端機",
+  files: "檔案",
+  mcp: "MCP Hub",
+  swarm: "Swarm",
+  ecosystem: "生態系統",
   gateway: "網關",
   settings: "設定",
 } as const;
diff --git a/tests/files-sandbox.test.ts b/tests/files-sandbox.test.ts
new file mode 100644
index 000000000..4f0641890
--- /dev/null
+++ b/tests/files-sandbox.test.ts
@@ -0,0 +1,102 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { mkdtempSync, rmSync, mkdirSync, writeFileSync, symlinkSync } from "fs";
+import { join } from "path";
+import { tmpdir } from "os";
+
+const handlers = new Map<string, (...args: unknown[]) => unknown>();
+const isRemoteOnlyModeMock = vi.fn(() => false);
+let testHome = "";
+
+vi.mock("electron", () => ({
+  ipcMain: {
+    handle: (channel: string, handler: (...args: unknown[]) => unknown) => {
+      handlers.set(channel, handler);
+    },
+  },
+}));
+
+vi.mock("../src/main/hermes", () => ({
+  isRemoteOnlyMode: () => isRemoteOnlyModeMock(),
+}));
+
+async function loadFiles(): Promise<void> {
+  vi.resetModules();
+  vi.stubEnv("HERMES_HOME", testHome);
+  handlers.clear();
+  const mod = await import("../src/main/files");
+  mod.registerFilesHandlers();
+}
+
+describe("files sandbox", () => {
+  let root: string;
+  let outside: string;
+
+  beforeEach(async () => {
+    testHome = mkdtempSync(join(tmpdir(), "hermes-files-home-"));
+    root = mkdtempSync(join(tmpdir(), "hermes-files-root-"));
+    outside = mkdtempSync(join(tmpdir(), "hermes-files-outside-"));
+    mkdirSync(join(root, "nested"));
+    writeFileSync(join(root, "nested", "ok.txt"), "hello");
+    writeFileSync(join(outside, "secret.txt"), "secret");
+    isRemoteOnlyModeMock.mockReturnValue(false);
+    await loadFiles();
+  });
+
+  afterEach(() => {
+    vi.unstubAllEnvs();
+    rmSync(testHome, { recursive: true, force: true });
+    rmSync(root, { recursive: true, force: true });
+    rmSync(outside, { recursive: true, force: true });
+  });
+
+  it("requires an explicit workspace root", () => {
+    expect(handlers.get("files-list-dir")!({}, "")).toMatchObject({
+      success: false,
+      error: "Choose a workspace folder first.",
+    });
+  });
+
+  it("rejects symlink escapes with realpath containment", () => {
+    expect(handlers.get("files-set-workspace-root")!({}, root)).toMatchObject({ success: true });
+    symlinkSync(outside, join(root, "outside-link"));
+
+    const listed = handlers.get("files-list-dir")!({}, root) as {
+      success: boolean;
+      data: { entries: Array<{ name: string; error?: string }> };
+    };
+
+    expect(listed.success).toBe(true);
+    expect(listed.data.entries.find((e) => e.name === "outside-link")?.error).toBe(
+      "Outside workspace",
+    );
+    expect(handlers.get("files-read")!({}, join(root, "outside-link", "secret.txt"))).toMatchObject({
+      success: false,
+    });
+  });
+
+  it("enforces read/write size and text limits", () => {
+    expect(handlers.get("files-set-workspace-root")!({}, root)).toMatchObject({ success: true });
+    writeFileSync(join(root, "binary.bin"), Buffer.from([1, 0, 2]));
+    writeFileSync(join(root, "large.txt"), "x".repeat(1024 * 1024 + 1));
+
+    expect(handlers.get("files-read")!({}, join(root, "binary.bin"))).toMatchObject({
+      success: false,
+      error: "Binary files are not supported.",
+    });
+    expect(handlers.get("files-read")!({}, join(root, "large.txt"))).toMatchObject({
+      success: false,
+      error: "File is too large to open.",
+    });
+    expect(
+      handlers.get("files-write")!({}, join(root, "nested", "too-large.txt"), "x".repeat(1024 * 1024 + 1)),
+    ).toMatchObject({ success: false });
+  });
+
+  it("rejects remote-only mode in the main process", () => {
+    isRemoteOnlyModeMock.mockReturnValue(true);
+    expect(handlers.get("files-set-workspace-root")!({}, root)).toMatchObject({
+      success: false,
+      unsupportedMode: true,
+    });
+  });
+});
diff --git a/tests/ipc-handlers.test.ts b/tests/ipc-handlers.test.ts
index 162db3173..6fd116e43 100644
--- a/tests/ipc-handlers.test.ts
+++ b/tests/ipc-handlers.test.ts
@@ -4,6 +4,7 @@ import { join } from "path";
 
 const ROOT = join(__dirname, "..");
 const indexSrc = readFileSync(join(ROOT, "src/main/index.ts"), "utf-8");
+const filesSrc = readFileSync(join(ROOT, "src/main/files.ts"), "utf-8");
 const preloadSrc = readFileSync(join(ROOT, "src/preload/index.ts"), "utf-8");
 
 /**
@@ -32,7 +33,10 @@ function extractPreloadInvokeChannels(src: string): string[] {
   return [...new Set(channels)];
 }
 
-const mainChannels = extractIpcHandleChannels(indexSrc);
+const mainChannels = [
+  ...extractIpcHandleChannels(indexSrc),
+  ...extractIpcHandleChannels(filesSrc),
+];
 const preloadChannels = extractPreloadInvokeChannels(preloadSrc);
 
 describe("IPC Handler ↔ Preload Consistency", () => {
@@ -65,6 +69,11 @@ describe("New IPC handlers from v0.8/v0.9 features", () => {
     "run-hermes-dump",
     "list-mcp-servers",
     "discover-memory-providers",
+    "files-get-workspace-root",
+    "files-set-workspace-root",
+    "files-list-dir",
+    "files-read",
+    "files-write",
   ];
 
   for (const ch of newChannels) {
diff --git a/tests/preload-api-surface.test.ts b/tests/preload-api-surface.test.ts
index 02b3ded1f..dcdd37058 100644
--- a/tests/preload-api-surface.test.ts
+++ b/tests/preload-api-surface.test.ts
@@ -58,9 +58,25 @@ describe("Preload API Surface", () => {
   });
 
   it("every type declaration has a preload implementation", () => {
-    const missing = typeMethods.filter((m) => !preloadMethods.includes(m));
+    const nestedNamespaces = ["vault", "profileWizard"];
+    const missing = typeMethods.filter(
+      (m) => !preloadMethods.includes(m) && !nestedNamespaces.includes(m),
+    );
     expect(missing).toEqual([]);
   });
+
+  it("nested vault namespace is implemented", () => {
+    expect(preloadSrc).toContain("vault: {");
+    expect(preloadSrc).toContain("vault-add-credential");
+    expect(preloadSrc).not.toContain("vault-export");
+    expect(preloadSrc).not.toContain("vault-rotate-master-key");
+    expect(preloadSrc).not.toContain("vault-sync-profile");
+  });
+
+  it("nested profileWizard namespace is implemented", () => {
+    expect(preloadSrc).toContain("profileWizard: {");
+    expect(preloadSrc).toContain("profile-create-from-wizard");
+  });
 });
 
 // ─── New APIs exist ─────────────────────────────────────