@tivility/dsh-session-share 0.1.0 → 0.3.0

package/README.md

@@ -36,12 +36,33 @@ Restricting what a visitor can reach is
 [`@tivility/dsh-readonly-auth`](../readonly-auth)'s job, and it does it at the
 API rather than in the DOM.
 
+## Getting a link
+
+A **Copy link** control in the session header, beside the session log. Its
+hover text is the URL itself — which is also how someone discovers the format
+exists.
+
+That control is the difference between a feature and a convention. Without it
+the link format reaches only the *model*, through the system prompt, and a
+person looking at the GUI is left to assemble a URL from a session id the
+interface never shows them.
+
+The origin comes from `window.location`, so the link is always the address this
+browser reached the harness at — loopback when that is how you opened it, the
+LAN address when it is not. Nothing to configure, and nothing that can drift
+from where the server actually answers.
+
+A refused clipboard write (denied permission, insecure context) leaves the
+button idle rather than claiming a copy that did not happen. The URL is in the
+hover text either way.
+
 ## How it works
 
 Two halves, which is what the harness's client-module system is for.
 
 **The browser half** reads `?session=`, waits for the session list, calls
-`sessions.open(id)`, then strips the parameter from the address bar.
+`sessions.open(id)`, then strips the parameter from the address bar. It also
+registers the header control into `conversation.session.header.utilities`.
 
 Two details carry their weight:
 
@@ -82,6 +103,35 @@ is repository-bound (it locates packages by globbing inside the harness
 checkout), so the four rules are written out instead. They are short, and they
 are the whole of what makes a bundle loadable.
 
+## Profile scope, and links behind a proxy
+
+**This row is safe in any profile.** It activates without `webServer` and
+simply serves nothing, so a suite installed once in `$DSH_HOME/cordis.patch.yml`
+does not turn a Web feature into a headless startup failure.
+
+**`publicBaseUrl` is the origin browsers actually reach.** The local bind is
+not the public origin behind a reverse proxy, tunnel, port forwarder, or TLS
+terminator, and no inference recovers one — so a deployment that has one says
+so:
+
+```yaml
+    publicBaseUrl: https://dsh.example.com
+```
+
+Origin only: scheme, host, optional port. Credentials, queries, fragments, and
+path prefixes are refused at activation rather than half-supported — every
+route is appended whole, so a prefix would vanish from the middle of each link.
+`DSH_PUBLIC_BASE_URL` sets it process-wide; explicit configuration outranks it.
+
+Forwarded headers are deliberately never consulted: `Host` and `X-Forwarded-*`
+are attacker-controlled on any request that reaches the server, so trusting
+them would let a visitor choose the origin the model puts in front of a user.
+
+With no `webServer` **and** no `publicBaseUrl`, the prompt section renders
+nothing rather than naming a loopback address — in a headless profile that
+would point at a server which is not running. Configure the origin of the Web
+profile serving the same data and headless agents can link into it.
+
 ## Configuration
 
 ```yaml

package/lib/client/ShareLink.js

@@ -0,0 +1,48 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * The session header's "copy link" control.
+ *
+ * Without it the feature is unreachable by a person: the link format lives in
+ * the system prompt, which teaches the *model* to hand out links, and leaves
+ * whoever is looking at the GUI to construct one from a session id they cannot
+ * see. This is the one affordance that makes it a feature rather than a
+ * convention.
+ *
+ * The origin comes from `window.location`, so the link is always the address
+ * this browser reached the harness at — the loopback URL when that is how you
+ * opened it, the LAN address when it is not. Nothing to configure, and nothing
+ * that can drift from where the server actually answers.
+ * @module @tivility/dsh-session-share/client/ShareLink
+ */
+import { useCallback, useState } from 'react';
+import { Button, IconCheckOutline16, IconLinkOutline16, writeClipboard, } from '@deepseek-ai/dsh-client-ui-primitives';
+import { shareQuery } from '../param.js';
+import { SHARE_NS } from './namespace.js';
+/** How long the copied state shows, in ms — matched to the harness's own copy controls. */
+const COPIED_MS = 1000;
+/**
+ * Render the copy-link control for the current session.
+ * @param props - composed slot props.
+ * @returns the control.
+ */
+export function ShareLink({ sessionId, t }) {
+    const [copied, setCopied] = useState(false);
+    const url = `${window.location.origin}/${shareQuery(String(sessionId))}`;
+    const onCopy = useCallback(() => {
+        if (copied)
+            return;
+        void writeClipboard(url).then((accepted) => {
+            // A refused write (denied permission, insecure context) leaves the flag
+            // alone: the control must never claim a copy the host declined.
+            if (!accepted)
+                return;
+            setCopied(true);
+            window.setTimeout(() => { setCopied(false); }, COPIED_MS);
+        });
+    }, [copied, url]);
+    return (_jsx(Button, { variant: "ghost", size: "sm", onClick: onCopy, 
+        // The URL itself is the most useful hover text: it is what gets copied,
+        // and seeing it is how someone learns the format exists.
+        title: copied ? t('copied') : `${t('hint')}\n${url}`, icon: copied ? _jsx(IconCheckOutline16, { size: 14 }) : _jsx(IconLinkOutline16, { size: 14 }), children: copied ? t('copied') : t('copy') }));
+}
+//# sourceMappingURL=ShareLink.js.map

package/lib/client/ShareLink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShareLink.js","sourceRoot":"","sources":["../../src/client/ShareLink.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAC7C,OAAO,EACL,MAAM,EACN,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,GACf,MAAM,uCAAuC,CAAA;AAI9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,2FAA2F;AAC3F,MAAM,SAAS,GAAG,IAAI,CAAA;AAOtB;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,EAAkB;IACxD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC3C,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAA;IAExE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9B,IAAI,MAAM;YAAE,OAAM;QAClB,KAAK,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACzC,wEAAwE;YACxE,gEAAgE;YAChE,IAAI,CAAC,QAAQ;gBAAE,OAAM;YACrB,SAAS,CAAC,IAAI,CAAC,CAAA;YACf,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;IACJ,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAEjB,OAAO,CACL,KAAC,MAAM,IACL,OAAO,EAAC,OAAO,EACf,IAAI,EAAC,IAAI,EACT,OAAO,EAAE,MAAM;QACf,wEAAwE;QACxE,yDAAyD;QACzD,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,EACpD,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAC,kBAAkB,IAAC,IAAI,EAAE,EAAE,GAAI,CAAC,CAAC,CAAC,KAAC,iBAAiB,IAAC,IAAI,EAAE,EAAE,GAAI,YAEhF,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAC1B,CACV,CAAA;AACH,CAAC"}

package/lib/client/index.js

@@ -1,11 +1,11 @@
 /**
- * The browser half: open the session a link names.
+ * The browser half: open the session a link names, and offer a way to get one.
  *
  * The harness's GUI has no routing — the whole client is searched in vain for
  * `pushState`, `location.hash`, or `searchParams`. The selected session lives
  * in the sessions manager and is restored from persisted state on load, so a
- * URL naming one has nowhere to be read. This adds that one step and nothing
- * else: read the parameter, select the session, get out of the way.
+ * URL naming one has nowhere to be read. This adds that step, and the control
+ * that makes it reachable by a person rather than only by the model.
  *
  * It deliberately hides nothing. The sidebar, the other sessions, and the
  * composer are all exactly as they would be — the link decides where you land,
@@ -17,14 +17,18 @@
  * node half pulls in the harness's HOST augmentations of `Context` — where
  * `sessions` is a different service with the same name. Importing
  * `ClientContext` would therefore resolve `ctx.sessions` to the host's shape.
- * The harness avoids this with separate client and host programs; a two-file
- * package states the three members it uses instead, which also leaves this
- * half with no harness type dependency at all.
+ * The harness avoids this with separate client and host programs; this package
+ * states the members it uses instead.
  * @module @tivility/dsh-session-share/client
  */
 import { SESSION_PARAM } from '../param.js';
+import { en, zh } from './locales.js';
+import { SHARE_NS } from './namespace.js';
+import { ShareLink } from './ShareLink.js';
+export { ShareLink } from './ShareLink.js';
+export { SHARE_NS } from './namespace.js';
 /** Client-side services this plugin drives. */
-export const inject = ['sessions'];
+export const inject = ['sessions', 'slots', 'locale'];
 /**
  * Remove the parameter from the address bar once it has been acted on.
  *
@@ -41,13 +45,13 @@ function stripParam() {
     window.history.replaceState(window.history.state, '', `${url.pathname}${url.search}${url.hash}`);
 }
 /**
- * Watch the session list until the named session can be opened.
+ * Open the session a `?session=` parameter names, once the list can carry it.
  * @param ctx - the client root context.
  */
-export function apply(ctx) {
+function openRequestedSession(ctx) {
     const requested = new URL(window.location.href).searchParams.get(SESSION_PARAM);
     // No parameter is the overwhelmingly common case — every ordinary visit — so
-    // this plugin costs nothing at all when it has nothing to do.
+    // this costs nothing at all when it has nothing to do.
     if (requested === null || requested === '')
         return;
     ctx.effect(() => {
@@ -78,4 +82,19 @@ export function apply(ctx) {
         return unsubscribe;
     });
 }
+/**
+ * Read the link, and offer one.
+ * @param ctx - the client root context.
+ */
+export function apply(ctx) {
+    openRequestedSession(ctx);
+    ctx.effect(() => ctx.locale.register(SHARE_NS, { zh, en }));
+    ctx.effect(() => ctx.slots.register({
+        // The header's utility band, not the title row: this is a control, and the
+        // band beside the breadcrumb is where static session context belongs.
+        name: 'conversation.session.header.utilities',
+        id: 'session-share',
+        locale: SHARE_NS,
+    }, ShareLink));
+}
 //# sourceMappingURL=index.js.map

package/lib/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AA8B3C,+CAA+C;AAC/C,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,CAAA;AAElC;;;;;;;GAOG;AACH,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACzC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,OAAM;IAChD,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACtC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAClG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,GAAiB;IACrC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAC/E,6EAA6E;IAC7E,8DAA8D;IAC9D,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,EAAE;QAAE,OAAM;IAElD,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,IAAI,IAAI,GAAG,KAAK,CAAA;QAChB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,IAAI,IAAI;gBAAE,OAAM;YAChB,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;YAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAI,GAAG,IAAI,CAAA;gBACX,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBAC5B,UAAU,EAAE,CAAA;gBACZ,OAAM;YACR,CAAC;YACD,yEAAyE;YACzE,yEAAyE;YACzE,+CAA+C;YAC/C,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC5B,IAAI,GAAG,IAAI,CAAA;gBACX,UAAU,EAAE,CAAA;gBACZ,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,6BAA6B,SAAS,kBAAkB,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC,CAAA;QACD,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACxD,4EAA4E;QAC5E,6EAA6E;QAC7E,OAAO,EAAE,CAAA;QACT,OAAO,WAAW,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AA0CzC,+CAA+C;AAC/C,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;AAErD;;;;;;;GAOG;AACH,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACzC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,OAAM;IAChD,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACtC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAClG,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,GAAiB;IAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAC/E,6EAA6E;IAC7E,uDAAuD;IACvD,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,EAAE;QAAE,OAAM;IAElD,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,IAAI,IAAI,GAAG,KAAK,CAAA;QAChB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,IAAI,IAAI;gBAAE,OAAM;YAChB,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;YAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAI,GAAG,IAAI,CAAA;gBACX,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBAC5B,UAAU,EAAE,CAAA;gBACZ,OAAM;YACR,CAAC;YACD,yEAAyE;YACzE,yEAAyE;YACzE,+CAA+C;YAC/C,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC5B,IAAI,GAAG,IAAI,CAAA;gBACX,UAAU,EAAE,CAAA;gBACZ,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,6BAA6B,SAAS,kBAAkB,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC,CAAA;QACD,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACxD,4EAA4E;QAC5E,6EAA6E;QAC7E,OAAO,EAAE,CAAA;QACT,OAAO,WAAW,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,GAAiB;IACrC,oBAAoB,CAAC,GAAG,CAAC,CAAA;IAEzB,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QAClC,2EAA2E;QAC3E,sEAAsE;QACtE,IAAI,EAAE,uCAAuC;QAC7C,EAAE,EAAE,eAAe;QACnB,MAAM,EAAE,QAAQ;KACjB,EAAE,SAAS,CAAC,CAAC,CAAA;AAChB,CAAC"}

package/lib/client/locales.js

@@ -0,0 +1,14 @@
+/** Copy for the session-header share control. */
+/** English copy. */
+export const en = {
+    copy: 'Copy link',
+    copied: 'Copied',
+    hint: 'Copy a link that opens this session',
+};
+/** Chinese copy. */
+export const zh = {
+    copy: '复制链接',
+    copied: '已复制',
+    hint: '复制一个直接打开这条会话的链接',
+};
+//# sourceMappingURL=locales.js.map

package/lib/client/locales.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"locales.js","sourceRoot":"","sources":["../../src/client/locales.ts"],"names":[],"mappings":"AAAA,iDAAiD;AAKjD,oBAAoB;AACpB,MAAM,CAAC,MAAM,EAAE,GAA6B;IAC1C,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,qCAAqC;CAC5C,CAAA;AAED,oBAAoB;AACpB,MAAM,CAAC,MAAM,EAAE,GAA6B;IAC1C,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,iBAAiB;CACxB,CAAA"}

package/lib/client/namespace.js

@@ -0,0 +1,12 @@
+/**
+ * The locale namespace this bundle registers, and the key union its copy
+ * satisfies.
+ *
+ * Kept in its own module because the declaration merge below has to be visible
+ * to both the registration site and the component, and importing the component
+ * from the registration site (or the reverse) would make that a cycle.
+ * @module @tivility/dsh-session-share/client/namespace
+ */
+/** Locale namespace for the session-header share control. */
+export const SHARE_NS = 'session.share';
+//# sourceMappingURL=namespace.js.map

package/lib/client/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../src/client/namespace.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,6DAA6D;AAC7D,MAAM,CAAC,MAAM,QAAQ,GAAG,eAAe,CAAA"}

package/lib/client.js

@@ -1,6 +1,9 @@
 window.__ModuleLoader__.load({ id: "@tivility/dsh-session-share", factory: (require) => {
 var module = { exports: {} }; var exports = module.exports;
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+let react_jsx_runtime = require("react/jsx-runtime");
+let react = require("react");
+let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
 
 //#region lib/param.js
 /**
@@ -16,17 +19,101 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 */
 /** Query parameter naming the session to open on load. */
 const SESSION_PARAM = "session";
+/**
+* Build the query a share link carries.
+* @param sessionId - the session to open.
+* @returns the query string, question mark included.
+*/
+function shareQuery(sessionId) {
+	return `?${SESSION_PARAM}=${encodeURIComponent(sessionId)}`;
+}
+
+//#endregion
+//#region lib/client/locales.js
+/** Copy for the session-header share control. */
+/** English copy. */
+const en = {
+	copy: "Copy link",
+	copied: "Copied",
+	hint: "Copy a link that opens this session"
+};
+/** Chinese copy. */
+const zh = {
+	copy: "复制链接",
+	copied: "已复制",
+	hint: "复制一个直接打开这条会话的链接"
+};
+
+//#endregion
+//#region lib/client/namespace.js
+/**
+* The locale namespace this bundle registers, and the key union its copy
+* satisfies.
+*
+* Kept in its own module because the declaration merge below has to be visible
+* to both the registration site and the component, and importing the component
+* from the registration site (or the reverse) would make that a cycle.
+* @module @tivility/dsh-session-share/client/namespace
+*/
+/** Locale namespace for the session-header share control. */
+const SHARE_NS = "session.share";
+
+//#endregion
+//#region lib/client/ShareLink.js
+/**
+* The session header's "copy link" control.
+*
+* Without it the feature is unreachable by a person: the link format lives in
+* the system prompt, which teaches the *model* to hand out links, and leaves
+* whoever is looking at the GUI to construct one from a session id they cannot
+* see. This is the one affordance that makes it a feature rather than a
+* convention.
+*
+* The origin comes from `window.location`, so the link is always the address
+* this browser reached the harness at — the loopback URL when that is how you
+* opened it, the LAN address when it is not. Nothing to configure, and nothing
+* that can drift from where the server actually answers.
+* @module @tivility/dsh-session-share/client/ShareLink
+*/
+/** How long the copied state shows, in ms — matched to the harness's own copy controls. */
+const COPIED_MS = 1e3;
+/**
+* Render the copy-link control for the current session.
+* @param props - composed slot props.
+* @returns the control.
+*/
+function ShareLink({ sessionId, t }) {
+	const [copied, setCopied] = (0, react.useState)(false);
+	const url = `${window.location.origin}/${shareQuery(String(sessionId))}`;
+	return (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+		variant: "ghost",
+		size: "sm",
+		onClick: (0, react.useCallback)(() => {
+			if (copied) return;
+			(0, _deepseek_ai_dsh_client_ui_primitives.writeClipboard)(url).then((accepted) => {
+				if (!accepted) return;
+				setCopied(true);
+				window.setTimeout(() => {
+					setCopied(false);
+				}, COPIED_MS);
+			});
+		}, [copied, url]),
+		title: copied ? t("copied") : `${t("hint")}\n${url}`,
+		icon: copied ? (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconCheckOutline16, { size: 14 }) : (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconLinkOutline16, { size: 14 }),
+		children: copied ? t("copied") : t("copy")
+	});
+}
 
 //#endregion
 //#region lib/client/index.js
 /**
-* The browser half: open the session a link names.
+* The browser half: open the session a link names, and offer a way to get one.
 *
 * The harness's GUI has no routing — the whole client is searched in vain for
 * `pushState`, `location.hash`, or `searchParams`. The selected session lives
 * in the sessions manager and is restored from persisted state on load, so a
-* URL naming one has nowhere to be read. This adds that one step and nothing
-* else: read the parameter, select the session, get out of the way.
+* URL naming one has nowhere to be read. This adds that step, and the control
+* that makes it reachable by a person rather than only by the model.
 *
 * It deliberately hides nothing. The sidebar, the other sessions, and the
 * composer are all exactly as they would be — the link decides where you land,
@@ -38,13 +125,16 @@ const SESSION_PARAM = "session";
 * node half pulls in the harness's HOST augmentations of `Context` — where
 * `sessions` is a different service with the same name. Importing
 * `ClientContext` would therefore resolve `ctx.sessions` to the host's shape.
-* The harness avoids this with separate client and host programs; a two-file
-* package states the three members it uses instead, which also leaves this
-* half with no harness type dependency at all.
+* The harness avoids this with separate client and host programs; this package
+* states the members it uses instead.
 * @module @tivility/dsh-session-share/client
 */
 /** Client-side services this plugin drives. */
-const inject = ["sessions"];
+const inject = [
+	"sessions",
+	"slots",
+	"locale"
+];
 /**
 * Remove the parameter from the address bar once it has been acted on.
 *
@@ -60,10 +150,10 @@ function stripParam() {
 	window.history.replaceState(window.history.state, "", `${url.pathname}${url.search}${url.hash}`);
 }
 /**
-* Watch the session list until the named session can be opened.
+* Open the session a `?session=` parameter names, once the list can carry it.
 * @param ctx - the client root context.
 */
-function apply(ctx) {
+function openRequestedSession(ctx) {
 	const requested = new URL(window.location.href).searchParams.get(SESSION_PARAM);
 	if (requested === null || requested === "") return;
 	ctx.effect(() => {
@@ -88,8 +178,26 @@ function apply(ctx) {
 		return unsubscribe;
 	});
 }
+/**
+* Read the link, and offer one.
+* @param ctx - the client root context.
+*/
+function apply(ctx) {
+	openRequestedSession(ctx);
+	ctx.effect(() => ctx.locale.register(SHARE_NS, {
+		zh,
+		en
+	}));
+	ctx.effect(() => ctx.slots.register({
+		name: "conversation.session.header.utilities",
+		id: "session-share",
+		locale: SHARE_NS
+	}, ShareLink));
+}
 
 //#endregion
+exports.SHARE_NS = SHARE_NS;
+exports.ShareLink = ShareLink;
 exports.apply = apply;
 exports.inject = inject;
 return module.exports; } });

package/lib/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","names":[],"sources":["param.js","client/index.js"],"sourcesContent":["/**\n * The one fact both halves of this plugin have to agree on.\n *\n * The query parameter is a constant rather than configuration because the two\n * halves cannot share a configuration value: the browser bundle is fetched\n * outside the loader's config tree and receives only what its own `apply`\n * is handed, while the link the host writes into the system prompt is built\n * on the other side of the wire. A constant is the honest form of a value\n * that must match in two places.\n * @module @tivility/dsh-session-share/param\n */\n/** Query parameter naming the session to open on load. */\nexport const SESSION_PARAM = 'session';\n/**\n * Build the query a share link carries.\n * @param sessionId - the session to open.\n * @returns the query string, question mark included.\n */\nexport function shareQuery(sessionId) {\n    return `?${SESSION_PARAM}=${encodeURIComponent(sessionId)}`;\n}\n//# sourceMappingURL=param.js.map","/**\n * The browser half: open the session a link names.\n *\n * The harness's GUI has no routing — the whole client is searched in vain for\n * `pushState`, `location.hash`, or `searchParams`. The selected session lives\n * in the sessions manager and is restored from persisted state on load, so a\n * URL naming one has nowhere to be read. This adds that one step and nothing\n * else: read the parameter, select the session, get out of the way.\n *\n * It deliberately hides nothing. The sidebar, the other sessions, and the\n * composer are all exactly as they would be — the link decides where you land,\n * not what you can see.\n *\n * ## Why the context is typed here\n *\n * The two halves of this package compile in one TypeScript program, and the\n * node half pulls in the harness's HOST augmentations of `Context` — where\n * `sessions` is a different service with the same name. Importing\n * `ClientContext` would therefore resolve `ctx.sessions` to the host's shape.\n * The harness avoids this with separate client and host programs; a two-file\n * package states the three members it uses instead, which also leaves this\n * half with no harness type dependency at all.\n * @module @tivility/dsh-session-share/client\n */\nimport { SESSION_PARAM } from '../param.js';\n/** Client-side services this plugin drives. */\nexport const inject = ['sessions'];\n/**\n * Remove the parameter from the address bar once it has been acted on.\n *\n * The selection is persisted by the runtime, so leaving the parameter in place\n * would make every later reload jump back to the linked session — fighting the\n * user each time they navigate away and refresh. Consuming it once makes the\n * link mean \"start here\", which is what a link means.\n */\nfunction stripParam() {\n    const url = new URL(window.location.href);\n    if (!url.searchParams.has(SESSION_PARAM))\n        return;\n    url.searchParams.delete(SESSION_PARAM);\n    window.history.replaceState(window.history.state, '', `${url.pathname}${url.search}${url.hash}`);\n}\n/**\n * Watch the session list until the named session can be opened.\n * @param ctx - the client root context.\n */\nexport function apply(ctx) {\n    const requested = new URL(window.location.href).searchParams.get(SESSION_PARAM);\n    // No parameter is the overwhelmingly common case — every ordinary visit — so\n    // this plugin costs nothing at all when it has nothing to do.\n    if (requested === null || requested === '')\n        return;\n    ctx.effect(() => {\n        let done = false;\n        const attempt = () => {\n            if (done)\n                return;\n            const state = ctx.sessions.list.getSnapshot();\n            if (state.byId[requested] !== undefined) {\n                done = true;\n                ctx.sessions.open(requested);\n                stripParam();\n                return;\n            }\n            // The list arrives asynchronously, so an id that is absent right now may\n            // simply not have loaded. The phase is what separates \"not yet\" from \"no\n            // such session\" — a timeout would guess at it.\n            if (state.phase === 'ready') {\n                done = true;\n                stripParam();\n                ctx.logger?.warn?.(`session-share: no session ${requested} in this harness`);\n            }\n        };\n        const unsubscribe = ctx.sessions.list.subscribe(attempt);\n        // The list may already be ready before this plugin activates, in which case\n        // no change is ever published and the subscription alone would wait forever.\n        attempt();\n        return unsubscribe;\n    });\n}\n//# sourceMappingURL=index.js.map"],"mappings":";;;;;;;;;;;;;;;;;AAYA,MAAa,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACc7B,MAAa,SAAS,CAAC,WAAW;;;;;;;;;AASlC,SAAS,aAAa;CAClB,MAAM,MAAM,IAAI,IAAI,OAAO,SAAS,KAAK;AACzC,KAAI,CAAC,IAAI,aAAa,IAAI,cAAc,CACpC;AACJ,KAAI,aAAa,OAAO,cAAc;AACtC,QAAO,QAAQ,aAAa,OAAO,QAAQ,OAAO,IAAI,GAAG,IAAI,WAAW,IAAI,SAAS,IAAI,OAAO;;;;;;AAMpG,SAAgB,MAAM,KAAK;CACvB,MAAM,YAAY,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,cAAc;AAG/E,KAAI,cAAc,QAAQ,cAAc,GACpC;AACJ,KAAI,aAAa;EACb,IAAI,OAAO;EACX,MAAM,gBAAgB;AAClB,OAAI,KACA;GACJ,MAAM,QAAQ,IAAI,SAAS,KAAK,aAAa;AAC7C,OAAI,MAAM,KAAK,eAAe,QAAW;AACrC,WAAO;AACP,QAAI,SAAS,KAAK,UAAU;AAC5B,gBAAY;AACZ;;AAKJ,OAAI,MAAM,UAAU,SAAS;AACzB,WAAO;AACP,gBAAY;AACZ,QAAI,QAAQ,OAAO,6BAA6B,UAAU,kBAAkB;;;EAGpF,MAAM,cAAc,IAAI,SAAS,KAAK,UAAU,QAAQ;AAGxD,WAAS;AACT,SAAO;GACT"}
+{"version":3,"file":"client.js","names":["Button","IconCheckOutline16","IconLinkOutline16"],"sources":["param.js","client/locales.js","client/namespace.js","client/ShareLink.js","client/index.js"],"sourcesContent":["/**\n * The one fact both halves of this plugin have to agree on.\n *\n * The query parameter is a constant rather than configuration because the two\n * halves cannot share a configuration value: the browser bundle is fetched\n * outside the loader's config tree and receives only what its own `apply`\n * is handed, while the link the host writes into the system prompt is built\n * on the other side of the wire. A constant is the honest form of a value\n * that must match in two places.\n * @module @tivility/dsh-session-share/param\n */\n/** Query parameter naming the session to open on load. */\nexport const SESSION_PARAM = 'session';\n/**\n * Build the query a share link carries.\n * @param sessionId - the session to open.\n * @returns the query string, question mark included.\n */\nexport function shareQuery(sessionId) {\n    return `?${SESSION_PARAM}=${encodeURIComponent(sessionId)}`;\n}\n//# sourceMappingURL=param.js.map","/** Copy for the session-header share control. */\n/** English copy. */\nexport const en = {\n    copy: 'Copy link',\n    copied: 'Copied',\n    hint: 'Copy a link that opens this session',\n};\n/** Chinese copy. */\nexport const zh = {\n    copy: '复制链接',\n    copied: '已复制',\n    hint: '复制一个直接打开这条会话的链接',\n};\n//# sourceMappingURL=locales.js.map","/**\n * The locale namespace this bundle registers, and the key union its copy\n * satisfies.\n *\n * Kept in its own module because the declaration merge below has to be visible\n * to both the registration site and the component, and importing the component\n * from the registration site (or the reverse) would make that a cycle.\n * @module @tivility/dsh-session-share/client/namespace\n */\n/** Locale namespace for the session-header share control. */\nexport const SHARE_NS = 'session.share';\n//# sourceMappingURL=namespace.js.map","import { jsx as _jsx } from \"react/jsx-runtime\";\n/**\n * The session header's \"copy link\" control.\n *\n * Without it the feature is unreachable by a person: the link format lives in\n * the system prompt, which teaches the *model* to hand out links, and leaves\n * whoever is looking at the GUI to construct one from a session id they cannot\n * see. This is the one affordance that makes it a feature rather than a\n * convention.\n *\n * The origin comes from `window.location`, so the link is always the address\n * this browser reached the harness at — the loopback URL when that is how you\n * opened it, the LAN address when it is not. Nothing to configure, and nothing\n * that can drift from where the server actually answers.\n * @module @tivility/dsh-session-share/client/ShareLink\n */\nimport { useCallback, useState } from 'react';\nimport { Button, IconCheckOutline16, IconLinkOutline16, writeClipboard, } from '@deepseek-ai/dsh-client-ui-primitives';\nimport { shareQuery } from '../param.js';\nimport { SHARE_NS } from './namespace.js';\n/** How long the copied state shows, in ms — matched to the harness's own copy controls. */\nconst COPIED_MS = 1000;\n/**\n * Render the copy-link control for the current session.\n * @param props - composed slot props.\n * @returns the control.\n */\nexport function ShareLink({ sessionId, t }) {\n    const [copied, setCopied] = useState(false);\n    const url = `${window.location.origin}/${shareQuery(String(sessionId))}`;\n    const onCopy = useCallback(() => {\n        if (copied)\n            return;\n        void writeClipboard(url).then((accepted) => {\n            // A refused write (denied permission, insecure context) leaves the flag\n            // alone: the control must never claim a copy the host declined.\n            if (!accepted)\n                return;\n            setCopied(true);\n            window.setTimeout(() => { setCopied(false); }, COPIED_MS);\n        });\n    }, [copied, url]);\n    return (_jsx(Button, { variant: \"ghost\", size: \"sm\", onClick: onCopy, \n        // The URL itself is the most useful hover text: it is what gets copied,\n        // and seeing it is how someone learns the format exists.\n        title: copied ? t('copied') : `${t('hint')}\\n${url}`, icon: copied ? _jsx(IconCheckOutline16, { size: 14 }) : _jsx(IconLinkOutline16, { size: 14 }), children: copied ? t('copied') : t('copy') }));\n}\n//# sourceMappingURL=ShareLink.js.map","/**\n * The browser half: open the session a link names, and offer a way to get one.\n *\n * The harness's GUI has no routing — the whole client is searched in vain for\n * `pushState`, `location.hash`, or `searchParams`. The selected session lives\n * in the sessions manager and is restored from persisted state on load, so a\n * URL naming one has nowhere to be read. This adds that step, and the control\n * that makes it reachable by a person rather than only by the model.\n *\n * It deliberately hides nothing. The sidebar, the other sessions, and the\n * composer are all exactly as they would be — the link decides where you land,\n * not what you can see.\n *\n * ## Why the context is typed here\n *\n * The two halves of this package compile in one TypeScript program, and the\n * node half pulls in the harness's HOST augmentations of `Context` — where\n * `sessions` is a different service with the same name. Importing\n * `ClientContext` would therefore resolve `ctx.sessions` to the host's shape.\n * The harness avoids this with separate client and host programs; this package\n * states the members it uses instead.\n * @module @tivility/dsh-session-share/client\n */\nimport { SESSION_PARAM } from '../param.js';\nimport { en, zh } from './locales.js';\nimport { SHARE_NS } from './namespace.js';\nimport { ShareLink } from './ShareLink.js';\nexport { ShareLink } from './ShareLink.js';\nexport { SHARE_NS } from './namespace.js';\n/** Client-side services this plugin drives. */\nexport const inject = ['sessions', 'slots', 'locale'];\n/**\n * Remove the parameter from the address bar once it has been acted on.\n *\n * The selection is persisted by the runtime, so leaving the parameter in place\n * would make every later reload jump back to the linked session — fighting the\n * user each time they navigate away and refresh. Consuming it once makes the\n * link mean \"start here\", which is what a link means.\n */\nfunction stripParam() {\n    const url = new URL(window.location.href);\n    if (!url.searchParams.has(SESSION_PARAM))\n        return;\n    url.searchParams.delete(SESSION_PARAM);\n    window.history.replaceState(window.history.state, '', `${url.pathname}${url.search}${url.hash}`);\n}\n/**\n * Open the session a `?session=` parameter names, once the list can carry it.\n * @param ctx - the client root context.\n */\nfunction openRequestedSession(ctx) {\n    const requested = new URL(window.location.href).searchParams.get(SESSION_PARAM);\n    // No parameter is the overwhelmingly common case — every ordinary visit — so\n    // this costs nothing at all when it has nothing to do.\n    if (requested === null || requested === '')\n        return;\n    ctx.effect(() => {\n        let done = false;\n        const attempt = () => {\n            if (done)\n                return;\n            const state = ctx.sessions.list.getSnapshot();\n            if (state.byId[requested] !== undefined) {\n                done = true;\n                ctx.sessions.open(requested);\n                stripParam();\n                return;\n            }\n            // The list arrives asynchronously, so an id that is absent right now may\n            // simply not have loaded. The phase is what separates \"not yet\" from \"no\n            // such session\" — a timeout would guess at it.\n            if (state.phase === 'ready') {\n                done = true;\n                stripParam();\n                ctx.logger?.warn?.(`session-share: no session ${requested} in this harness`);\n            }\n        };\n        const unsubscribe = ctx.sessions.list.subscribe(attempt);\n        // The list may already be ready before this plugin activates, in which case\n        // no change is ever published and the subscription alone would wait forever.\n        attempt();\n        return unsubscribe;\n    });\n}\n/**\n * Read the link, and offer one.\n * @param ctx - the client root context.\n */\nexport function apply(ctx) {\n    openRequestedSession(ctx);\n    ctx.effect(() => ctx.locale.register(SHARE_NS, { zh, en }));\n    ctx.effect(() => ctx.slots.register({\n        // The header's utility band, not the title row: this is a control, and the\n        // band beside the breadcrumb is where static session context belongs.\n        name: 'conversation.session.header.utilities',\n        id: 'session-share',\n        locale: SHARE_NS,\n    }, ShareLink));\n}\n//# sourceMappingURL=index.js.map"],"mappings":";;;;;;;;;;;;;;;;;;;;AAYA,MAAa,gBAAgB;;;;;;AAM7B,SAAgB,WAAW,WAAW;AAClC,QAAO,IAAI,cAAc,GAAG,mBAAmB,UAAU;;;;;;;ACjB7D,MAAa,KAAK;CACd,MAAM;CACN,QAAQ;CACR,MAAM;CACT;;AAED,MAAa,KAAK;CACd,MAAM;CACN,QAAQ;CACR,MAAM;CACT;;;;;;;;;;;;;;ACFD,MAAa,WAAW;;;;;;;;;;;;;;;;;;;;ACWxB,MAAM,YAAY;;;;;;AAMlB,SAAgB,UAAU,EAAE,WAAW,KAAK;CACxC,MAAM,CAAC,QAAQ,iCAAsB,MAAM;CAC3C,MAAM,MAAM,GAAG,OAAO,SAAS,OAAO,GAAG,WAAW,OAAO,UAAU,CAAC;AAatE,mCAAaA,8CAAQ;EAAE,SAAS;EAAS,MAAM;EAAM,sCAZpB;AAC7B,OAAI,OACA;AACJ,6DAAoB,IAAI,CAAC,MAAM,aAAa;AAGxC,QAAI,CAAC,SACD;AACJ,cAAU,KAAK;AACf,WAAO,iBAAiB;AAAE,eAAU,MAAM;OAAK,UAAU;KAC3D;KACH,CAAC,QAAQ,IAAI,CAAC;EAIb,OAAO,SAAS,EAAE,SAAS,GAAG,GAAG,EAAE,OAAO,CAAC,IAAI;EAAO,MAAM,oCAAcC,0DAAoB,EAAE,MAAM,IAAI,CAAC,8BAAQC,yDAAmB,EAAE,MAAM,IAAI,CAAC;EAAE,UAAU,SAAS,EAAE,SAAS,GAAG,EAAE,OAAO;EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACf1M,MAAa,SAAS;CAAC;CAAY;CAAS;CAAS;;;;;;;;;AASrD,SAAS,aAAa;CAClB,MAAM,MAAM,IAAI,IAAI,OAAO,SAAS,KAAK;AACzC,KAAI,CAAC,IAAI,aAAa,IAAI,cAAc,CACpC;AACJ,KAAI,aAAa,OAAO,cAAc;AACtC,QAAO,QAAQ,aAAa,OAAO,QAAQ,OAAO,IAAI,GAAG,IAAI,WAAW,IAAI,SAAS,IAAI,OAAO;;;;;;AAMpG,SAAS,qBAAqB,KAAK;CAC/B,MAAM,YAAY,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,cAAc;AAG/E,KAAI,cAAc,QAAQ,cAAc,GACpC;AACJ,KAAI,aAAa;EACb,IAAI,OAAO;EACX,MAAM,gBAAgB;AAClB,OAAI,KACA;GACJ,MAAM,QAAQ,IAAI,SAAS,KAAK,aAAa;AAC7C,OAAI,MAAM,KAAK,eAAe,QAAW;AACrC,WAAO;AACP,QAAI,SAAS,KAAK,UAAU;AAC5B,gBAAY;AACZ;;AAKJ,OAAI,MAAM,UAAU,SAAS;AACzB,WAAO;AACP,gBAAY;AACZ,QAAI,QAAQ,OAAO,6BAA6B,UAAU,kBAAkB;;;EAGpF,MAAM,cAAc,IAAI,SAAS,KAAK,UAAU,QAAQ;AAGxD,WAAS;AACT,SAAO;GACT;;;;;;AAMN,SAAgB,MAAM,KAAK;AACvB,sBAAqB,IAAI;AACzB,KAAI,aAAa,IAAI,OAAO,SAAS,UAAU;EAAE;EAAI;EAAI,CAAC,CAAC;AAC3D,KAAI,aAAa,IAAI,MAAM,SAAS;EAGhC,MAAM;EACN,IAAI;EACJ,QAAQ;EACX,EAAE,UAAU,CAAC"}

package/lib/index.js

@@ -21,17 +21,24 @@
  * @module @tivility/dsh-session-share
  */
 import z from '@deepseek-ai/schemastery';
-import { absoluteUrl, isTrustedRequest, sendStatus } from '@tivility/dsh-web-kit';
+import { isTrustedRequest, normalizePublicBaseUrl, resolvePublicBaseUrl, sendStatus } from '@tivility/dsh-web-kit';
 import { SESSION_PARAM, shareQuery } from './param.js';
 export { SESSION_PARAM, shareQuery } from './param.js';
 /** Stable Cordis plugin name. */
 export const name = 'session-share';
-/** The HTTP carrier this plugin mounts its redirect on. */
-export const inject = ['webServer'];
+/**
+ * Nothing hard. The redirect needs `webServer`, but requiring it here would
+ * make this row a startup failure in every profile that serves no HTTP — and a
+ * plugin suite installed once in the home overlay is exactly how that happens.
+ * The route mounts through a nested injection instead, so a headless profile
+ * activates the row and still teaches its agents the link format.
+ */
+export const inject = [];
 export const Config = z.object({
     route: z.string().default('/s'),
     prompt: z.boolean().default(true),
     trustedHosts: z.array(String).default([]),
+    publicBaseUrl: z.string().default(''),
 });
 /** A session id as it may appear in a URL: the harness mints uuids. */
 const SESSION_ID = /^[A-Za-z0-9_-]{1,128}$/;
@@ -84,12 +91,17 @@ function createHandler(route, trustedHosts) {
  * @param sessionId - the session the calling agent belongs to.
  * @returns the prompt text.
  */
-function promptSection(ctx, route, sessionId) {
-    const base = absoluteUrl(ctx, '/');
-    const link = `${base}${shareQuery(sessionId)}`;
+function promptSection(ctx, route, sessionId, publicBaseUrl) {
+    const origin = resolvePublicBaseUrl(ctx, publicBaseUrl);
+    // A headless profile with no configured origin has nowhere to point: the
+    // sessions may well be served by a Web profile elsewhere, but only the
+    // operator knows where, and a guessed loopback link points at nothing.
+    if (origin === undefined)
+        return '';
+    const link = `${origin}/${shareQuery(sessionId)}`;
     const shortForm = route === ''
         ? ''
-        : ` The shorter ${absoluteUrl(ctx, route)}/${sessionId} redirects to the same place.`;
+        : ` The shorter ${origin}${route}/${sessionId} redirects to the same place.`;
     return [
         `This conversation has a direct link: ${link}`,
         `Opening it in a browser selects this session instead of whatever was last open.${shortForm}`,
@@ -108,15 +120,24 @@ function promptSection(ctx, route, sessionId) {
 export function apply(ctx, config = {}) {
     const route = config.route ?? '/s';
     const trustedHosts = config.trustedHosts ?? [];
+    const publicBaseUrl = config.publicBaseUrl ?? '';
+    // Validate a configured origin at activation: a typo should stop the load,
+    // not quietly put broken links in front of the model.
+    if (publicBaseUrl !== '')
+        normalizePublicBaseUrl(publicBaseUrl);
     if (route !== '') {
         if (!route.startsWith('/') || route.endsWith('/')) {
             throw new Error(`session-share: route ${JSON.stringify(route)} must be an absolute path without a trailing slash`);
         }
-        ctx.effect(() => ctx.webServer.register({
-            kind: 'prefix',
-            path: route,
-            handler: createHandler(route, trustedHosts),
-        }), `session-share: ${route} route`);
+        // Nested, so a profile with no HTTP server activates this row and simply
+        // serves no redirect.
+        ctx.inject(['webServer'], (web) => {
+            web.effect(() => web.webServer.register({
+                kind: 'prefix',
+                path: route,
+                handler: createHandler(route, trustedHosts),
+            }), `session-share: ${route} route`);
+        });
     }
     if (config.prompt === false)
         return;
@@ -128,7 +149,7 @@ export function apply(ctx, config = {}) {
                 // Resolved per assembly: the port is known only after the server binds,
                 // and the session id is whichever agent this prompt is being built for.
                 const sessionId = context.agent?.session.id;
-                return sessionId === undefined ? '' : promptSection(scope, route, String(sessionId));
+                return sessionId === undefined ? '' : promptSection(scope, route, String(sessionId), publicBaseUrl);
             },
         });
     });

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAKxC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEtD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEtD,iCAAiC;AACjC,MAAM,CAAC,MAAM,IAAI,GAAG,eAAe,CAAA;AAEnC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,WAAW,CAAC,CAAA;AAenC,MAAM,CAAC,MAAM,MAAM,GAAc,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACjC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,CAAC,CAAA;AAEF,uEAAuE;AACvE,MAAM,UAAU,GAAG,wBAAwB,CAAA;AAE3C;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CACpB,KAAa,EACb,YAA+B;IAE/B,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClD,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;YAClE,OAAM;QACR,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC;YACzC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;YACjC,OAAM;QACR,CAAC;QACD,oEAAoE;QACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAA;QAC7D,IAAI,EAAU,CAAA;QACd,IAAI,CAAC;YACH,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;YAC5C,OAAM;QACR,CAAC;QACD,2EAA2E;QAC3E,wDAAwD;QACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;YAC5C,OAAM;QACR,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QACtD,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,GAAY,EAAE,KAAa,EAAE,SAAiB;IACnE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,GAAG,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,EAAE,CAAA;IAC9C,MAAM,SAAS,GAAG,KAAK,KAAK,EAAE;QAC5B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,gBAAgB,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,SAAS,+BAA+B,CAAA;IACvF,OAAO;QACL,wCAAwC,IAAI,EAAE;QAC9C,kFAAkF,SAAS,EAAE;QAC7F,4FAA4F;QAC5F,wFAAwF;QACxF,6EAA6E;QAC7E,uFAAuF;QACvF,wDAAwD;KACzD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAAiB,EAAE;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAA;IAClC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAA;IAC9C,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACpH,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;YACtC,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC;SAC5C,CAAC,EAAE,kBAAkB,KAAK,QAAQ,CAAC,CAAA;IACtC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK;QAAE,OAAM;IACnC,GAAG,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;QACrC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;gBAChB,wEAAwE;gBACxE,wEAAwE;gBACxE,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAA;gBAC3C,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;YACtF,CAAC;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAKxC,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEtD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEtD,iCAAiC;AACjC,MAAM,CAAC,MAAM,IAAI,GAAG,eAAe,CAAA;AAEnC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,MAAM,GAAa,EAAE,CAAA;AAsBlC,MAAM,CAAC,MAAM,MAAM,GAAc,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACjC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACtC,CAAC,CAAA;AAEF,uEAAuE;AACvE,MAAM,UAAU,GAAG,wBAAwB,CAAA;AAE3C;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CACpB,KAAa,EACb,YAA+B;IAE/B,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClD,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;YAClE,OAAM;QACR,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC;YACzC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;YACjC,OAAM;QACR,CAAC;QACD,oEAAoE;QACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAA;QAC7D,IAAI,EAAU,CAAA;QACd,IAAI,CAAC;YACH,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;YAC5C,OAAM;QACR,CAAC;QACD,2EAA2E;QAC3E,wDAAwD;QACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;YAC5C,OAAM;QACR,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QACtD,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,GAAY,EAAE,KAAa,EAAE,SAAiB,EAAE,aAAqB;IAC1F,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IACvD,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACnC,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAA;IACjD,MAAM,SAAS,GAAG,KAAK,KAAK,EAAE;QAC5B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,gBAAgB,MAAM,GAAG,KAAK,IAAI,SAAS,+BAA+B,CAAA;IAC9E,OAAO;QACL,wCAAwC,IAAI,EAAE;QAC9C,kFAAkF,SAAS,EAAE;QAC7F,4FAA4F;QAC5F,wFAAwF;QACxF,6EAA6E;QAC7E,uFAAuF;QACvF,wDAAwD;KACzD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAAiB,EAAE;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAA;IAClC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAA;IAC9C,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAA;IAChD,2EAA2E;IAC3E,sDAAsD;IACtD,IAAI,aAAa,KAAK,EAAE;QAAE,sBAAsB,CAAC,aAAa,CAAC,CAAA;IAE/D,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACpH,CAAC;QACD,yEAAyE;QACzE,sBAAsB;QACtB,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;YAChC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;gBACtC,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC;aAC5C,CAAC,EAAE,kBAAkB,KAAK,QAAQ,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK;QAAE,OAAM;IACnC,GAAG,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;QACrC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;gBAChB,wEAAwE;gBACxE,wEAAwE;gBACxE,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAA;gBAC3C,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAA;YACrG,CAAC;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/types/client/ShareLink.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The session header's "copy link" control.
+ *
+ * Without it the feature is unreachable by a person: the link format lives in
+ * the system prompt, which teaches the *model* to hand out links, and leaves
+ * whoever is looking at the GUI to construct one from a session id they cannot
+ * see. This is the one affordance that makes it a feature rather than a
+ * convention.
+ *
+ * The origin comes from `window.location`, so the link is always the address
+ * this browser reached the harness at — the loopback URL when that is how you
+ * opened it, the LAN address when it is not. Nothing to configure, and nothing
+ * that can drift from where the server actually answers.
+ * @module @tivility/dsh-session-share/client/ShareLink
+ */
+import type { PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
+import { SHARE_NS } from './namespace.js';
+/** Full component props: the framework's session context plus this bundle's copy. */
+export type ShareLinkProps = PropsRuntime<'conversation.session.header.utilities'> & PropsLocale<typeof SHARE_NS>;
+/**
+ * Render the copy-link control for the current session.
+ * @param props - composed slot props.
+ * @returns the control.
+ */
+export declare function ShareLink({ sessionId, t }: ShareLinkProps): import("react").JSX.Element;
+//# sourceMappingURL=ShareLink.d.ts.map

package/lib/types/client/ShareLink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShareLink.d.ts","sourceRoot":"","sources":["../../../src/client/ShareLink.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAIjF,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAKzC,qFAAqF;AACrF,MAAM,MAAM,cAAc,GACxB,YAAY,CAAC,uCAAuC,CAAC,GACnD,WAAW,CAAC,OAAO,QAAQ,CAAC,CAAA;AAEhC;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,cAAc,+BA4BzD"}

package/lib/types/client/index.d.ts

@@ -1,11 +1,11 @@
 /**
- * The browser half: open the session a link names.
+ * The browser half: open the session a link names, and offer a way to get one.
  *
  * The harness's GUI has no routing — the whole client is searched in vain for
  * `pushState`, `location.hash`, or `searchParams`. The selected session lives
  * in the sessions manager and is restored from persisted state on load, so a
- * URL naming one has nowhere to be read. This adds that one step and nothing
- * else: read the parameter, select the session, get out of the way.
+ * URL naming one has nowhere to be read. This adds that step, and the control
+ * that makes it reachable by a person rather than only by the model.
  *
  * It deliberately hides nothing. The sidebar, the other sessions, and the
  * composer are all exactly as they would be — the link decides where you land,
@@ -17,11 +17,12 @@
  * node half pulls in the harness's HOST augmentations of `Context` — where
  * `sessions` is a different service with the same name. Importing
  * `ClientContext` would therefore resolve `ctx.sessions` to the host's shape.
- * The harness avoids this with separate client and host programs; a two-file
- * package states the three members it uses instead, which also leaves this
- * half with no harness type dependency at all.
+ * The harness avoids this with separate client and host programs; this package
+ * states the members it uses instead.
  * @module @tivility/dsh-session-share/client
  */
+export { ShareLink } from './ShareLink.js';
+export { SHARE_NS } from './namespace.js';
 /** The session-list snapshot this plugin reads. */
 interface SessionListSnapshot {
     /** Every listed session, keyed by id. */
@@ -41,9 +42,24 @@ interface SessionsFace {
      */
     open(id: string): void;
 }
+/** The slot registry, narrowed to the one registration this plugin makes. */
+interface SlotsFace {
+    register(spec: {
+        name: string;
+        id?: string;
+        order?: number;
+        locale?: string;
+    }, component: unknown): () => void;
+}
+/** The locale registry, narrowed to the one bundle this plugin adds. */
+interface LocaleFace {
+    register(namespace: string, dictionaries: Record<string, unknown>): () => void;
+}
 /** The client context members this plugin uses. */
 interface ShareContext {
     readonly sessions: SessionsFace;
+    readonly slots: SlotsFace;
+    readonly locale: LocaleFace;
     effect(run: () => () => void): unknown;
     readonly logger?: {
         warn?(message: string): void;
@@ -52,9 +68,8 @@ interface ShareContext {
 /** Client-side services this plugin drives. */
 export declare const inject: string[];
 /**
- * Watch the session list until the named session can be opened.
+ * Read the link, and offer one.
  * @param ctx - the client root context.
  */
 export declare function apply(ctx: ShareContext): void;
-export {};
 //# sourceMappingURL=index.d.ts.map

package/lib/types/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,mDAAmD;AACnD,UAAU,mBAAmB;IAC3B,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAChD,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAA;CACpC;AAED,kEAAkE;AAClE,UAAU,YAAY;IACpB,QAAQ,CAAC,IAAI,EAAE;QACb,WAAW,IAAI,mBAAmB,CAAA;QAClC,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAA;KAC5C,CAAA;IACD;;;OAGG;IACH,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,mDAAmD;AACnD,UAAU,YAAY;IACpB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,MAAM,CAAC,GAAG,EAAE,MAAM,MAAM,IAAI,GAAG,OAAO,CAAA;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;CACnD;AAED,+CAA+C;AAC/C,eAAO,MAAM,MAAM,UAAe,CAAA;AAiBlC;;;GAGG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAgC7C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,mDAAmD;AACnD,UAAU,mBAAmB;IAC3B,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAChD,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAA;CACpC;AAED,kEAAkE;AAClE,UAAU,YAAY;IACpB,QAAQ,CAAC,IAAI,EAAE;QACb,WAAW,IAAI,mBAAmB,CAAA;QAClC,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAA;KAC5C,CAAA;IACD;;;OAGG;IACH,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,6EAA6E;AAC7E,UAAU,SAAS;IACjB,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,SAAS,EAAE,OAAO,GAAG,MAAM,IAAI,CAAA;CAC/G;AAED,wEAAwE;AACxE,UAAU,UAAU;IAClB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,IAAI,CAAA;CAC/E;AAED,mDAAmD;AACnD,UAAU,YAAY;IACpB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,MAAM,CAAC,GAAG,EAAE,MAAM,MAAM,IAAI,GAAG,OAAO,CAAA;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;CACnD;AAED,+CAA+C;AAC/C,eAAO,MAAM,MAAM,UAAkC,CAAA;AAuDrD;;;GAGG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAW7C"}

package/lib/types/client/locales.d.ts

@@ -0,0 +1,8 @@
+/** Copy for the session-header share control. */
+/** Locale keys this surface renders. */
+export type ShareKey = 'copy' | 'copied' | 'hint';
+/** English copy. */
+export declare const en: Record<ShareKey, string>;
+/** Chinese copy. */
+export declare const zh: Record<ShareKey, string>;
+//# sourceMappingURL=locales.d.ts.map

package/lib/types/client/locales.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"locales.d.ts","sourceRoot":"","sources":["../../../src/client/locales.ts"],"names":[],"mappings":"AAAA,iDAAiD;AAEjD,wCAAwC;AACxC,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAA;AAEjD,oBAAoB;AACpB,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAIvC,CAAA;AAED,oBAAoB;AACpB,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAIvC,CAAA"}

package/lib/types/client/namespace.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The locale namespace this bundle registers, and the key union its copy
+ * satisfies.
+ *
+ * Kept in its own module because the declaration merge below has to be visible
+ * to both the registration site and the component, and importing the component
+ * from the registration site (or the reverse) would make that a cycle.
+ * @module @tivility/dsh-session-share/client/namespace
+ */
+import type { ShareKey } from './locales.js';
+/** Locale namespace for the session-header share control. */
+export declare const SHARE_NS = "session.share";
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+    interface LocaleNamespaceMap {
+        /** The share control's copy. */
+        'session.share': ShareKey;
+    }
+}
+//# sourceMappingURL=namespace.d.ts.map

package/lib/types/client/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../../src/client/namespace.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAE5C,6DAA6D;AAC7D,eAAO,MAAM,QAAQ,kBAAkB,CAAA;AAEvC,OAAO,QAAQ,kCAAkC,CAAC;IAChD,UAAU,kBAAkB;QAC1B,gCAAgC;QAChC,eAAe,EAAE,QAAQ,CAAA;KAC1B;CACF"}

package/lib/types/index.d.ts

@@ -25,7 +25,13 @@ import z from '@deepseek-ai/schemastery';
 export { SESSION_PARAM, shareQuery } from './param.js';
 /** Stable Cordis plugin name. */
 export declare const name = "session-share";
-/** The HTTP carrier this plugin mounts its redirect on. */
+/**
+ * Nothing hard. The redirect needs `webServer`, but requiring it here would
+ * make this row a startup failure in every profile that serves no HTTP — and a
+ * plugin suite installed once in the home overlay is exactly how that happens.
+ * The route mounts through a nested injection instead, so a headless profile
+ * activates the row and still teaches its agents the link format.
+ */
 export declare const inject: string[];
 /** Plugin configuration. */
 export interface Config {
@@ -38,6 +44,13 @@ export interface Config {
     prompt?: boolean;
     /** Non-loopback authorities this deployment serves, as `host` or `host:port`. */
     trustedHosts?: string[];
+    /**
+     * The origin browsers actually reach this deployment at, when that is not
+     * the local bind — behind a reverse proxy, tunnel, or port forwarder. Also
+     * what lets a headless profile link into a Web profile serving the same
+     * sessions. Origin only: scheme, host, optional port.
+     */
+    publicBaseUrl?: string;
 }
 export declare const Config: z<Config>;
 /**

package/lib/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAQxC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEtD,iCAAiC;AACjC,eAAO,MAAM,IAAI,kBAAkB,CAAA;AAEnC,2DAA2D;AAC3D,eAAO,MAAM,MAAM,UAAgB,CAAA;AAEnC,4BAA4B;AAC5B,MAAM,WAAW,MAAM;IACrB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oFAAoF;IACpF,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CACxB;AAED,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAI3B,CAAA;AA0EF;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,MAAW,GAAG,IAAI,CA2B7D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAQxC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEtD,iCAAiC;AACjC,eAAO,MAAM,IAAI,kBAAkB,CAAA;AAEnC;;;;;;GAMG;AACH,eAAO,MAAM,MAAM,EAAE,MAAM,EAAO,CAAA;AAElC,4BAA4B;AAC5B,MAAM,WAAW,MAAM;IACrB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oFAAoF;IACpF,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAK3B,CAAA;AA8EF;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,MAAW,GAAG,IAAI,CAoC7D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tivility/dsh-session-share",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Link straight to one DeepSeek Harness session: the GUI opens on it instead of wherever it was left.",
   "license": "MIT",
   "type": "module",
@@ -37,12 +37,14 @@
     "client": {
       "platform": "web",
       "inject": [
-        "@deepseek-ai/dsh-client-runtime"
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-client-locale"
       ]
     }
   },
   "dependencies": {
-    "@tivility/dsh-web-kit": "^0.1.0"
+    "@tivility/dsh-web-kit": "^0.2.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "*",
@@ -61,10 +63,19 @@
   "devDependencies": {
     "@deepseek-ai/cordis": "*",
     "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.1-rc.2",
     "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
     "@deepseek-ai/dsh-host-webserver": "0.1.1-rc.2",
     "@deepseek-ai/dsh-system-prompt": "0.1.1-rc.2",
     "@deepseek-ai/schemastery": "*",
+    "@testing-library/react": "^16.1.0",
+    "@types/react": "~18.3.1",
+    "jsdom": "^26.0.0",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0",
     "tsdown": "^0.20.0"
   },
   "publishConfig": {

package/src/client/ShareLink.tsx

@@ -0,0 +1,71 @@
+/**
+ * The session header's "copy link" control.
+ *
+ * Without it the feature is unreachable by a person: the link format lives in
+ * the system prompt, which teaches the *model* to hand out links, and leaves
+ * whoever is looking at the GUI to construct one from a session id they cannot
+ * see. This is the one affordance that makes it a feature rather than a
+ * convention.
+ *
+ * The origin comes from `window.location`, so the link is always the address
+ * this browser reached the harness at — the loopback URL when that is how you
+ * opened it, the LAN address when it is not. Nothing to configure, and nothing
+ * that can drift from where the server actually answers.
+ * @module @tivility/dsh-session-share/client/ShareLink
+ */
+
+import { useCallback, useState } from 'react'
+import {
+  Button,
+  IconCheckOutline16,
+  IconLinkOutline16,
+  writeClipboard,
+} from '@deepseek-ai/dsh-client-ui-primitives'
+import type { PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots'
+// Type-only: pulls the ui-conversation SlotMap merge that declares this seat.
+import type {} from '@deepseek-ai/dsh-client-ui-conversation/client'
+import { shareQuery } from '../param.js'
+import { SHARE_NS } from './namespace.js'
+
+/** How long the copied state shows, in ms — matched to the harness's own copy controls. */
+const COPIED_MS = 1000
+
+/** Full component props: the framework's session context plus this bundle's copy. */
+export type ShareLinkProps =
+  PropsRuntime<'conversation.session.header.utilities'>
+  & PropsLocale<typeof SHARE_NS>
+
+/**
+ * Render the copy-link control for the current session.
+ * @param props - composed slot props.
+ * @returns the control.
+ */
+export function ShareLink({ sessionId, t }: ShareLinkProps) {
+  const [copied, setCopied] = useState(false)
+  const url = `${window.location.origin}/${shareQuery(String(sessionId))}`
+
+  const onCopy = useCallback(() => {
+    if (copied) return
+    void writeClipboard(url).then((accepted) => {
+      // A refused write (denied permission, insecure context) leaves the flag
+      // alone: the control must never claim a copy the host declined.
+      if (!accepted) return
+      setCopied(true)
+      window.setTimeout(() => { setCopied(false) }, COPIED_MS)
+    })
+  }, [copied, url])
+
+  return (
+    <Button
+      variant="ghost"
+      size="sm"
+      onClick={onCopy}
+      // The URL itself is the most useful hover text: it is what gets copied,
+      // and seeing it is how someone learns the format exists.
+      title={copied ? t('copied') : `${t('hint')}\n${url}`}
+      icon={copied ? <IconCheckOutline16 size={14} /> : <IconLinkOutline16 size={14} />}
+    >
+      {copied ? t('copied') : t('copy')}
+    </Button>
+  )
+}

package/src/client/index.ts

@@ -1,11 +1,11 @@
 /**
- * The browser half: open the session a link names.
+ * The browser half: open the session a link names, and offer a way to get one.
  *
  * The harness's GUI has no routing — the whole client is searched in vain for
  * `pushState`, `location.hash`, or `searchParams`. The selected session lives
  * in the sessions manager and is restored from persisted state on load, so a
- * URL naming one has nowhere to be read. This adds that one step and nothing
- * else: read the parameter, select the session, get out of the way.
+ * URL naming one has nowhere to be read. This adds that step, and the control
+ * that makes it reachable by a person rather than only by the model.
  *
  * It deliberately hides nothing. The sidebar, the other sessions, and the
  * composer are all exactly as they would be — the link decides where you land,
@@ -17,13 +17,18 @@
  * node half pulls in the harness's HOST augmentations of `Context` — where
  * `sessions` is a different service with the same name. Importing
  * `ClientContext` would therefore resolve `ctx.sessions` to the host's shape.
- * The harness avoids this with separate client and host programs; a two-file
- * package states the three members it uses instead, which also leaves this
- * half with no harness type dependency at all.
+ * The harness avoids this with separate client and host programs; this package
+ * states the members it uses instead.
  * @module @tivility/dsh-session-share/client
  */
 
 import { SESSION_PARAM } from '../param.js'
+import { en, zh } from './locales.js'
+import { SHARE_NS } from './namespace.js'
+import { ShareLink } from './ShareLink.js'
+
+export { ShareLink } from './ShareLink.js'
+export { SHARE_NS } from './namespace.js'
 
 /** The session-list snapshot this plugin reads. */
 interface SessionListSnapshot {
@@ -46,15 +51,27 @@ interface SessionsFace {
   open(id: string): void
 }
 
+/** The slot registry, narrowed to the one registration this plugin makes. */
+interface SlotsFace {
+  register(spec: { name: string, id?: string, order?: number, locale?: string }, component: unknown): () => void
+}
+
+/** The locale registry, narrowed to the one bundle this plugin adds. */
+interface LocaleFace {
+  register(namespace: string, dictionaries: Record<string, unknown>): () => void
+}
+
 /** The client context members this plugin uses. */
 interface ShareContext {
   readonly sessions: SessionsFace
+  readonly slots: SlotsFace
+  readonly locale: LocaleFace
   effect(run: () => () => void): unknown
   readonly logger?: { warn?(message: string): void }
 }
 
 /** Client-side services this plugin drives. */
-export const inject = ['sessions']
+export const inject = ['sessions', 'slots', 'locale']
 
 /**
  * Remove the parameter from the address bar once it has been acted on.
@@ -72,13 +89,13 @@ function stripParam(): void {
 }
 
 /**
- * Watch the session list until the named session can be opened.
+ * Open the session a `?session=` parameter names, once the list can carry it.
  * @param ctx - the client root context.
  */
-export function apply(ctx: ShareContext): void {
+function openRequestedSession(ctx: ShareContext): void {
   const requested = new URL(window.location.href).searchParams.get(SESSION_PARAM)
   // No parameter is the overwhelmingly common case — every ordinary visit — so
-  // this plugin costs nothing at all when it has nothing to do.
+  // this costs nothing at all when it has nothing to do.
   if (requested === null || requested === '') return
 
   ctx.effect(() => {
@@ -108,3 +125,20 @@ export function apply(ctx: ShareContext): void {
     return unsubscribe
   })
 }
+
+/**
+ * Read the link, and offer one.
+ * @param ctx - the client root context.
+ */
+export function apply(ctx: ShareContext): void {
+  openRequestedSession(ctx)
+
+  ctx.effect(() => ctx.locale.register(SHARE_NS, { zh, en }))
+  ctx.effect(() => ctx.slots.register({
+    // The header's utility band, not the title row: this is a control, and the
+    // band beside the breadcrumb is where static session context belongs.
+    name: 'conversation.session.header.utilities',
+    id: 'session-share',
+    locale: SHARE_NS,
+  }, ShareLink))
+}

package/src/client/locales.ts

@@ -0,0 +1,18 @@
+/** Copy for the session-header share control. */
+
+/** Locale keys this surface renders. */
+export type ShareKey = 'copy' | 'copied' | 'hint'
+
+/** English copy. */
+export const en: Record<ShareKey, string> = {
+  copy: 'Copy link',
+  copied: 'Copied',
+  hint: 'Copy a link that opens this session',
+}
+
+/** Chinese copy. */
+export const zh: Record<ShareKey, string> = {
+  copy: '复制链接',
+  copied: '已复制',
+  hint: '复制一个直接打开这条会话的链接',
+}

package/src/client/namespace.ts

@@ -0,0 +1,21 @@
+/**
+ * The locale namespace this bundle registers, and the key union its copy
+ * satisfies.
+ *
+ * Kept in its own module because the declaration merge below has to be visible
+ * to both the registration site and the component, and importing the component
+ * from the registration site (or the reverse) would make that a cycle.
+ * @module @tivility/dsh-session-share/client/namespace
+ */
+
+import type { ShareKey } from './locales.js'
+
+/** Locale namespace for the session-header share control. */
+export const SHARE_NS = 'session.share'
+
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+  interface LocaleNamespaceMap {
+    /** The share control's copy. */
+    'session.share': ShareKey
+  }
+}

package/src/index.ts

@@ -28,7 +28,7 @@ import type {} from '@deepseek-ai/dsh-host-webserver'
 import type {} from '@deepseek-ai/dsh-system-prompt'
 // Type-only: contributes the `agent` field on the prompt assembly context.
 import type {} from '@deepseek-ai/dsh-agent'
-import { absoluteUrl, isTrustedRequest, sendStatus } from '@tivility/dsh-web-kit'
+import { isTrustedRequest, normalizePublicBaseUrl, resolvePublicBaseUrl, sendStatus } from '@tivility/dsh-web-kit'
 import { SESSION_PARAM, shareQuery } from './param.js'
 
 export { SESSION_PARAM, shareQuery } from './param.js'
@@ -36,8 +36,14 @@ export { SESSION_PARAM, shareQuery } from './param.js'
 /** Stable Cordis plugin name. */
 export const name = 'session-share'
 
-/** The HTTP carrier this plugin mounts its redirect on. */
-export const inject = ['webServer']
+/**
+ * Nothing hard. The redirect needs `webServer`, but requiring it here would
+ * make this row a startup failure in every profile that serves no HTTP — and a
+ * plugin suite installed once in the home overlay is exactly how that happens.
+ * The route mounts through a nested injection instead, so a headless profile
+ * activates the row and still teaches its agents the link format.
+ */
+export const inject: string[] = []
 
 /** Plugin configuration. */
 export interface Config {
@@ -50,12 +56,20 @@ export interface Config {
   prompt?: boolean
   /** Non-loopback authorities this deployment serves, as `host` or `host:port`. */
   trustedHosts?: string[]
+  /**
+   * The origin browsers actually reach this deployment at, when that is not
+   * the local bind — behind a reverse proxy, tunnel, or port forwarder. Also
+   * what lets a headless profile link into a Web profile serving the same
+   * sessions. Origin only: scheme, host, optional port.
+   */
+  publicBaseUrl?: string
 }
 
 export const Config: z<Config> = z.object({
   route: z.string().default('/s'),
   prompt: z.boolean().default(true),
   trustedHosts: z.array(String).default([]),
+  publicBaseUrl: z.string().default(''),
 })
 
 /** A session id as it may appear in a URL: the harness mints uuids. */
@@ -113,12 +127,16 @@ function createHandler(
  * @param sessionId - the session the calling agent belongs to.
  * @returns the prompt text.
  */
-function promptSection(ctx: Context, route: string, sessionId: string): string {
-  const base = absoluteUrl(ctx, '/')
-  const link = `${base}${shareQuery(sessionId)}`
+function promptSection(ctx: Context, route: string, sessionId: string, publicBaseUrl: string): string {
+  const origin = resolvePublicBaseUrl(ctx, publicBaseUrl)
+  // A headless profile with no configured origin has nowhere to point: the
+  // sessions may well be served by a Web profile elsewhere, but only the
+  // operator knows where, and a guessed loopback link points at nothing.
+  if (origin === undefined) return ''
+  const link = `${origin}/${shareQuery(sessionId)}`
   const shortForm = route === ''
     ? ''
-    : ` The shorter ${absoluteUrl(ctx, route)}/${sessionId} redirects to the same place.`
+    : ` The shorter ${origin}${route}/${sessionId} redirects to the same place.`
   return [
     `This conversation has a direct link: ${link}`,
     `Opening it in a browser selects this session instead of whatever was last open.${shortForm}`,
@@ -138,15 +156,24 @@ function promptSection(ctx: Context, route: string, sessionId: string): string {
 export function apply(ctx: Context, config: Config = {}): void {
   const route = config.route ?? '/s'
   const trustedHosts = config.trustedHosts ?? []
+  const publicBaseUrl = config.publicBaseUrl ?? ''
+  // Validate a configured origin at activation: a typo should stop the load,
+  // not quietly put broken links in front of the model.
+  if (publicBaseUrl !== '') normalizePublicBaseUrl(publicBaseUrl)
+
   if (route !== '') {
     if (!route.startsWith('/') || route.endsWith('/')) {
       throw new Error(`session-share: route ${JSON.stringify(route)} must be an absolute path without a trailing slash`)
     }
-    ctx.effect(() => ctx.webServer.register({
-      kind: 'prefix',
-      path: route,
-      handler: createHandler(route, trustedHosts),
-    }), `session-share: ${route} route`)
+    // Nested, so a profile with no HTTP server activates this row and simply
+    // serves no redirect.
+    ctx.inject(['webServer'], (web) => {
+      web.effect(() => web.webServer.register({
+        kind: 'prefix',
+        path: route,
+        handler: createHandler(route, trustedHosts),
+      }), `session-share: ${route} route`)
+    })
   }
 
   if (config.prompt === false) return
@@ -158,7 +185,7 @@ export function apply(ctx: Context, config: Config = {}): void {
         // Resolved per assembly: the port is known only after the server binds,
         // and the session id is whichever agent this prompt is being built for.
         const sessionId = context.agent?.session.id
-        return sessionId === undefined ? '' : promptSection(scope, route, String(sessionId))
+        return sessionId === undefined ? '' : promptSection(scope, route, String(sessionId), publicBaseUrl)
       },
     })
   })