dsh-artifact-linker 0.3.3 → 0.3.6

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## 0.3.6 — 2026-10-29
+
+### 修：安全闸按候选 base 逐个判定
+
+`reveal` / `open` 两条路由原本用 `isInside(process.cwd(), abs)` 做越界检查——而宿主的 `process.cwd()` 并不等于会话 workspace，这是个潜伏的错判点（`allowOutside: true` 时被掩盖，一旦关掉就会误拒 workspace 内的合法文件）。改为 `insideAnyBase(abs, allowOutside)`，逐候选 base 判定。
+
+## 0.3.5 — 2026-10-29
+
+### 新：「在侧边栏预览」
+
+右键菜单新增一项，把文件交给 DSH 内置右侧边栏渲染——和聊天里点文件链接走同一条通道（`dsh-resource://file/` 地址 + 宿主 `openResource`），所以 PDF、Word、Excel、PowerPoint、Markdown、纯文本、CSV、图片、音视频都能在里面看。
+
+实现上做了两件事：一是地址构造与官方 `dsh-util-workspace-path` 逐字对齐（不新增依赖）；二是加了一道类型闸——查看器渲染不了的扩展名**自动改走默认程序**，不会给出一个空白面板。客户端插件声明 `inject: ["slots"]`，预览器缺席时该菜单项自动隐藏。
+
+## 0.3.4 — 2026-10-29
+
+### 修：右键偶尔「假死」
+
+右键菜单弹出后立刻点菜单项，第一次点击有时被吞。改为用 pointer 事件绑定菜单项，并避开菜单挂载那一帧的焦点竞态。
+
+### 新：音视频扩展名
+
+白名单补上 `.flac .wav .mp3 .m4a .ogg .mp4 .mkv .mov .webm .avi`——音频产物（TTS 输出、母带）此前完全点不动。
+
 ## 0.3.3 — 2026-10-28
 
 ### 修：先确认文件存在，才让它变成芯片

package/README.md

@@ -27,57 +27,52 @@ Two halves, one contract.
 | Half | Responsibility |
 | --- | --- |
 | **Host** (`lib/index.js`) | Registers a **resident system-prompt section** so "declare artifacts with full absolute paths" holds in *every* session and *every* preset — no skill needs to be loaded. Exposes eight loopback-only routes for path resolution, `stat`, reveal, open, save-as and copy-file. |
-| **Client** (`lib/client.js`) | Turns artifact names in the transcript into clickable targets: left click reveals, right click opens a menu. **No resident UI, no scanning, no timers.** |
+| **Client** (`lib/client.js`) | Turns artifact names in the transcript into clickable targets: left click reveals, right click opens a seven-item menu (sidebar preview, open, reveal, save-as, copy file, copy path, add to composer). **No resident UI, no scanning, no timers.** |
 
 The host half closes the loop: even when the model only says `result.h5`, the route layer resolves it against the session workspace, then falls back to a shallow recursive basename search, and returns the real absolute path.
 
 ## What it looks like
 
-Hover an artifact name and it picks up a Codex-style blue dashed outline — that is the only visual hint, nothing is rewritten in your transcript:
-
-![Hover highlight](https://raw.githubusercontent.com/loyalchiiina/dsh-artifact-linker/main/docs/hover-highlight.png)
-
-Right click for the three actions:
+Hover an artifact name and it picks up a Codex-style blue dashed outline — that is the only visual hint, nothing is rewritten in your transcript. Right click for the full menu:
 
 ![Context menu](https://raw.githubusercontent.com/loyalchiiina/dsh-artifact-linker/main/docs/context-menu.png)
 
-"Copy file path" puts the real absolute path on your clipboard:
-
-![Copy path](https://raw.githubusercontent.com/loyalchiiina/dsh-artifact-linker/main/docs/copy-path.png)
-
 ## Interaction
 
-Click behaviour is decided by the modifier key — no menu, no first-time setup:
+Click behaviour is decided by the modifier key — no first-time setup:
 
 | Action | Result |
 | --- | --- |
 | **Left click** on a file name / path | Reveal in File Explorer *with the file selected* |
 | **Ctrl / Shift / Cmd + click** | Open with the system's default application |
 | **Alt + click** | Copy the full absolute path to the clipboard |
-
-### Interactions (v0.2 — no floating pill any more)
-
-| Action | Result |
-|---|---|
-| **Left click** an artifact name | Reveals and selects the file in Explorer |
-| **Right click** an artifact name | Inline menu: `📍 reveal` / `↗ open with default app` / `⧉ copy absolute path` |
-| **Hover** an artifact name | Cursor turns into a pointer (the only visual hint) |
-| Right click on **non-artifact** text | Fully passed through — the host's native menu appears as usual |
+| **Right click** on an artifact | Inline menu — seven actions, listed below |
+| **Right click** on non-artifact text | Fully passed through, the host's native menu appears as usual |
+| **Hover** | Cursor becomes a pointer *only after* the file is confirmed to exist |
 | File missing / unresolvable | Silent pass-through or a one-shot toast. **Never pretends to succeed.** |
 
-The following describes the removed v0.1 design:
+### Right-click menu
 
-The panel refreshes on its own; there are also explicit refresh / flush-cache / clear / close controls.
+| Item | What it does |
+| --- | --- |
+| **Preview in sidebar** | Opens the file in DSH's built-in right sidebar — the same route as clicking a file link in chat. That viewer handles PDF, Word, Excel, PowerPoint, Markdown, plain text, CSV, images, audio and video; an extension it cannot render is redirected to the default app instead of showing a blank pane |
+| **Open with default app** | Hands the file to the OS association (Explorer / Excel / VLC / …) |
+| **Reveal in Explorer** | Opens the containing folder and selects the file |
+| **Save as…** | Copies the file to a location you pick |
+| **Copy file** | Puts the file *itself* on the clipboard (`CF_HDROP`), so you can paste it into Explorer, mail or chat |
+| **Copy path** | Puts the real absolute path on the clipboard |
+| **Add to composer** | Inserts the path into the input box for the next message |
 
 ## How paths resolve
 
-A single path may arrive in three shapes, tried in order:
+A single path may arrive in four shapes, tried in order:
 
 1. **Absolute** — used as-is (`E:\project\out\case.h5`, `\\nas\share\a.zip`). Both drive letters and UNC are recognised.
 2. **Relative** — joined against the session workspace (`out\case.h5` → `<workspace>\out\case.h5`).
-3. **Bare file name** — a shallow recursive basename search under the workspace (depth 2 by default), used only when exactly one match is found. Multiple matches are surfaced as candidates instead of guessing.
+3. **Workspace roots** — every known profile and session workspace is tried, not only the current one.
+4. **Bare file name** — a shallow recursive basename search (depth 2 by default), used only when exactly one match is found. Multiple matches are surfaced as candidates instead of guessing. When a mention swallows leading words (`结果#1_速度云图.png` arriving as `#1_速度云图.png`), segments are shrunk from the left until one resolves.
 
-Results are cached with a 10 s TTL so that repeated queries from DOM re-renders do not hammer the disk, while a just-deleted file still flips to "gone" quickly.
+Results are cached — 10 s for `stat`, 30 s for the basename index — so repeated hovers from DOM re-renders do not hammer the disk, while a just-deleted file still flips to "gone" quickly.
 
 ## Install
 
@@ -140,7 +135,6 @@ dsh-artifact-linker/
 │   └── client.js         # client: __ModuleLoader__ bundle, read-only DOM
 ├── locale/{zh,en}.json   # meta.title / meta.description
 ├── icon.svg
-├── scripts/probe-regex.mjs
 ├── README.md / README.zh.md
 ├── CHANGELOG.md
 └── LICENSE

package/README.zh.md

@@ -21,24 +21,16 @@ DSH 里预览器已经能开图片、代码、pdf、office。但**插件、脚
 | 半边 | 做什么 |
 |---|---|
 | **宿主（提示词层）** | 常驻注入一条「产物路径铁律」，要求模型把产物写成**完整绝对路径**、而给用户看的正文**只写文件名**——路径有据可查，正文又不被长串路径污染 |
-| **客户端（渲染层）** | 正文里的产物名变成可点目标：左键揭示、右键菜单。**零常驻 UI、零扫描、零定时器** |
+| **客户端（渲染层）** | 正文里的产物名变成可点目标：左键揭示、右键七项菜单（侧边栏预览 / 默认程序打开 / 在文件夹中显示 / 另存为 / 复制文件 / 复制路径 / 添加到对话框）。**零常驻 UI、零扫描、零定时器** |
 
 第 1 条管「模型把路径写对」，第 2 条管「用户点得动」。缺前者，路径经常是猜的、点开是死链；缺后者，路径再对也要人去复制。
 
 ## 长什么样
 
-悬停到产物名上，会出现 Codex 风格的蓝色虚线框——这是唯一的视觉提示，正文一个字都不会被改写：
-
-![悬停高亮](https://raw.githubusercontent.com/loyalchiiina/dsh-artifact-linker/main/docs/hover-highlight.png)
-
-右键是三个动作：
+悬停到产物名上，会出现 Codex 风格的蓝色虚线框——这是唯一的视觉提示，正文一个字都不会被改写。右键弹出完整菜单：
 
 ![右键菜单](https://raw.githubusercontent.com/loyalchiiina/dsh-artifact-linker/main/docs/context-menu.png)
 
-「复制文件路径」把真实绝对路径放进剪贴板：
-
-![复制路径](https://raw.githubusercontent.com/loyalchiiina/dsh-artifact-linker/main/docs/copy-path.png)
-
 ---
 
 ## 交互
@@ -50,27 +42,22 @@ DSH 里预览器已经能开图片、代码、pdf、office。但**插件、脚
 | **左键** | 在系统资源管理器里**揭示并选中**该文件（不是打开它，是把它亮在你面前） |
 | **Ctrl / Shift / Cmd + 左键** | 用系统默认关联程序打开（Excel、PS、播放器……） |
 | **Alt + 左键** | 复制完整绝对路径到剪贴板 |
-
-### 三种交互（v0.2 起不再有浮球）
-
-正文里出现产物名时：
-
-| 操作 | 效果 |
-|---|---|
-| **左键**点产物名 | 在资源管理器里揭示并选中该文件 |
-| **右键**点产物名 | 本插件菜单：`📍 揭示` / `↗ 默认程序打开` / `⧉ 复制完整路径` |
-| **悬停**在产物名上 | 鼠标变手型（唯一的视觉提示） |
-| 在**非产物**文字上右键 | 完全放行，宿主原生菜单照常出现 |
+| **右键**产物名 | 插件菜单，共七项（见下表） |
+| **右键**非产物文字 | 完全放行，宿主原生菜单照常出现 |
+| **悬停** | 只有**确认文件真的存在**才变手型、才画虚线 |
 | 文件不存在 / 解析不到 | 静默放行或一次性提示，**绝不假装成功** |
 
-以下为 v0.1 的历史设计（已移除）：
-
-- 点击展开清单，按发现时间倒序，每行给出：类型图标 · 文件名 · 状态点 · 完整路径 · 大小 · 修改时间；
-- 状态点：🟢 存在 / 🔴 已不存在（划掉） / ⚪ 尚未确认；
-- 每行右侧三个按钮：`📍` 揭示 · `↗` 打开 · `⧉` 复制；
-- 顶部：`刷新`（重查状态）· `清缓存`（清宿主 stat 缓存）· `清空`（只清面板清单，**不动任何文件**）。
+### 右键菜单
 
-同一文件名出现多次只记一条（按次数累计），清单上限 200 条，超出后按发现顺序淘汰最旧。
+| 菜单项 | 作用 |
+|---|---|
+| **在侧边栏预览** | 在 DSH 内置右侧边栏里打开，和聊天里点文件链接是同一条通道。该查看器支持 PDF、Word、Excel、PowerPoint、Markdown、纯文本、CSV、图片、音视频；它渲染不了的扩展名会**自动改走默认程序**，不会给你一个空白面板 |
+| **用默认程序打开** | 交给系统关联（资源管理器 / Excel / 播放器……） |
+| **在文件夹中显示** | 打开所在目录并选中该文件 |
+| **另存为…** | 复制到你指定的位置 |
+| **复制文件** | 把文件**本身**放进剪贴板（`CF_HDROP`），可以直接粘到资源管理器、邮件、聊天窗口 |
+| **复制文件路径** | 把真实绝对路径放进剪贴板 |
+| **添加到对话框** | 把路径插入输入框，供下一条消息使用 |
 
 ---
 
@@ -79,14 +66,17 @@ DSH 里预览器已经能开图片、代码、pdf、office。但**插件、脚
 模型嘴里的话不可全信，插件按顺序试：
 
 1. **`/workspace/<...>`** —— DSH 工作区的虚拟根，映射到真实 workspace 目录；
-2. **原生绝对路径** —— `E:\proj\out\a.xlsx` 直接用；
-3. **workspace 内的相对路径** —— 以 workspace 为基准拼接；
-4. **裸文件名** —— 在 workspace 内递归搜同名文件（跳过 `node_modules/.git/dist/build/` 等），按「最近修改优先」+「目录深度浅优先」排序：
+2. **原生绝对路径** —— `E:\proj\out\a.xlsx` 直接用（盘符和 UNC 都认）；
+3. **会话相对路径** —— 以会话 workspace 为基准拼接；
+4. **各 workspace 根** —— 遍历所有已知的 profile / 会话 workspace，不只当前那一个；
+5. **裸文件名** —— 深浅递归搜同名文件（跳过 `node_modules/.git/dist/build/` 等），按「最近修改优先」+「目录深度浅优先」排序：
    - 命中 **1 个** → 直接用；
    - 命中 **多个** → 返回候选列表交给用户，**绝不猜**（猜错比不猜更糟）；
    - 命中 **0 个** → 若 `allowOutside: true`，再在磁盘上按名字做一次浅层搜索。
 
-结果一律带 10 秒 TTL 缓存，避免重复 stat 打满磁盘。
+提到时若「提及吞掉了前面几个词」（`结果#1_速度云图.png` 只剩 `#1_速度云图.png`），会**从左逐段收缩重试**直到能命中。
+
+缓存两层：`stat` 10 秒、同名索引 30 秒——避免重复打满磁盘，同时刚删掉的文件也能很快翻成「已不存在」。
 
 ---
 
@@ -187,8 +177,8 @@ dsh-artifact-linker/
 `dsh-artifact-linker` turns every delivered artifact into a one-click target, so you never copy a path into Explorer again.
 
 - **Host half** injects a resident system-prompt rule: always emit **absolute** artifact paths in tooling, but only the **file name** in user-facing prose.
-- **Client half** makes those names clickable — **left click** reveals and selects the file in Explorer, **right click** opens a small menu (reveal / open with default app / copy absolute path). Hovering turns the cursor into a pointer. No floating UI, no document scanning, no timers.
-- Bare file names are resolved with a three-tier fallback (native absolute → workspace-relative → recursive same-name search). Ambiguous matches are surfaced as candidates rather than guessed.
+- **Client half** makes those names clickable — **left click** reveals and selects the file in Explorer, **right click** opens a seven-item menu: preview in sidebar, open with default app, reveal in Explorer, save as, copy the file itself, copy absolute path, add to composer. Hovering turns the cursor into a pointer only after the file is confirmed to exist. No floating UI, no document scanning, no timers.
+- Bare file names are resolved with a multi-tier fallback (native absolute → session-relative → every known workspace root → recursive same-name search), shrinking the mention from the left when leading words are swallowed. Ambiguous matches are surfaced as candidates rather than guessed.
 - All routes are loopback-only, telemetry-free, and spawn nothing through a shell. The client never mutates React-rendered DOM.
 
 MIT licensed.

package/lib/client.js

@@ -29,10 +29,51 @@ window.__ModuleLoader__.load({
     var exports = module.exports;
 
     var GUARD = "__dshArtifactLinkerV1";
-    var VERSION = "0.3.3";
+    var VERSION = "0.3.6";
     // 路由前缀必须与宿主的 ROUTE_PREFIX 一致；永远根相对，绝不拼宿主 origin
     var ROUTE = "/dsh-artifact-linker";
 
+    // ── 侧边栏预览：地址构造 ────────────────────────────────────────────────
+    // 宿主 ctx.sidebarRight.openResource 只认 dsh-resource:// 地址，不认裸绝对路径。
+    // 下面这组函数与官方 @deepseek-ai/dsh-util-workspace-path 的实现逐字对齐
+    // （见 dsh-client-ui-reference/lib/client.js），自己抄一份是为了不新增运行时依赖。
+    var FILE_ADDRESS_PREFIX = "dsh-resource://file/";
+    function encodeSegment(segment) {
+      return encodeURIComponent(segment).replace(/%3A/gi, ":");
+    }
+    function encodePath(p) {
+      return p.split("/").map(encodeSegment).join("/");
+    }
+    function sessionFileAddress(sessionId, p) {
+      var normalized = p.replace(/\\/g, "/").replace(/^(?:\.\/)+/, "");
+      return FILE_ADDRESS_PREFIX + "session/" + encodeSegment(sessionId) + "/" + encodePath(normalized);
+    }
+    function isWinAbs(p) {
+      return /^[A-Za-z]:[/\\]/.test(p) || p.indexOf("\\\\") === 0;
+    }
+    function fileAddressFor(sessionId, cwd, p) {
+      var normalized = p.replace(/\\/g, "/");
+      if (!(normalized.charAt(0) === "/" || isWinAbs(normalized))) return sessionFileAddress(sessionId, normalized);
+      var root = cwd === undefined || cwd === null ? "" : String(cwd).replace(/\\/g, "/").replace(/\/+$/, "");
+      if (root !== "" && normalized === root) return sessionFileAddress(sessionId, "");
+      if (root !== "" && normalized.indexOf(root + "/") === 0) return sessionFileAddress(sessionId, normalized.slice(root.length + 1));
+      // 工作区外的绝对路径：原样保留在 session 地址里，宿主按 Session 读权限解析
+      return sessionFileAddress(sessionId, normalized);
+    }
+
+    // 侧边栏 documentpreview 真正能渲染的类型（读官方 README 得出，不是猜的）：
+    //   md/代码/纯文本 → 分页文本；pdf → PDF.js；图片 → 完整字节；
+    //   xlsx/xls/csv/tsv → 浏览器内只读表格；doc/docx/ppt/pptx → 本地转 PDF
+    // 音视频与压缩包没有注册渲染器，走「不支持预览」空状态，所以干脆不显示这一项。
+    var PREVIEWABLE = /^(pdf|docx?|pptx?|xls[xm]?|csv|tsv|md|markdown|txt|log|json|ya?ml|ini|toml|xml|html?|png|jpe?g|gif|webp|bmp|tiff?|svg|py|js|mjs|cjs|ts|tsx|ipynb|ps1|sh|cas|dat|h5|hsf|cxa|trn|rfile|plt|flprj|jou|set|out)$/i;
+
+    function extOf(p) {
+      var base = String(p).split(/[\\/]/).pop() || "";
+      var dot = base.lastIndexOf(".");
+      return dot > 0 ? base.slice(dot + 1) : "";
+    }
+
+
     // 产物扩展名白名单。刻意**不含 exe/msi/dll** 之类可执行体：
     // 正文里出现这些名字多半是命令输出/报错文本，不是「要打开看的产物」。
     var EXT = [
@@ -42,7 +83,11 @@ window.__ModuleLoader__.load({
       "log", "txt", "md", "json", "ya?ml", "ini", "toml", "xml", "html?",
       "py", "js", "mjs", "cjs", "ts", "tsx", "ipynb", "ps1", "sh",
       "cas", "dat", "h5", "hsf", "cxa", "trn", "rfile", "plt", "flprj", "jou", "set", "out",
-      "scdocx?", "pmdb", "unv", "msh", "stp", "step", "igs", "iges", "dwg", "dxf", "inp"
+      "scdocx?", "pmdb", "unv", "msh", "stp", "step", "igs", "iges", "dwg", "dxf", "inp",
+      // 音频/视频：合成音频（YuE、TTS、音色克隆）与录屏导出很常见，
+      // 之前不在白名单里，用户右键 audio.flac 就完全没反应。
+      "flac", "wav", "mp3", "m4a", "aac", "ogg", "opus", "wma", "amr",
+      "mp4", "mkv", "mov", "avi", "webm", "wmv", "flv", "m4v"
     ].join("|");
 
     // 一段文本里「像产物路径」的片段：
@@ -258,6 +303,44 @@ window.__ModuleLoader__.load({
       return false;
     }
 
+    // 客户端根 ctx，apply 时存下来；侧边栏预览要用它取 sessions / sidebarRight。
+    var rootCtx = null;
+
+    // 在右侧边栏打开一个文件。
+    // 用的是官方导航入口 ctx.sidebarRight.openResource(address)，和聊天里点文件链接
+    // 走的是同一条路，所以不会和宿主自己的预览行为打架。
+    // 返回 false 表示「这次开不了」，调用方据此给提示，绝不假装成功。
+    function openInSidebar(abs) {
+      try {
+        if (!rootCtx || typeof rootCtx.get !== "function") return false;
+        var sidebar = rootCtx.get("sidebarRight");
+        if (!sidebar || typeof sidebar.openResource !== "function") return false;
+        var sessions = rootCtx.get("sessions");
+        if (!sessions || !sessions.list || typeof sessions.list.getSnapshot !== "function") return false;
+        var snap = sessions.list.getSnapshot();
+        var byId = (snap && snap.byId) || {};
+        // 找当前会话：优先 mounted（屏幕上那个），否则取第一个带 cwd 的
+        var sid = null;
+        var mounted = sidebar.mounted;
+        if (mounted && typeof mounted.get === "function") {
+          var m = mounted.get();
+          if (m && m.sessionId) sid = m.sessionId;
+        } else if (mounted && mounted.sessionId) {
+          sid = mounted.sessionId;
+        }
+        if (!sid) {
+          for (var k in byId) { if (byId[k] && byId[k].cwd) { sid = k; break; } }
+        }
+        if (!sid) return false;
+        var cwd = byId[sid] ? byId[sid].cwd : undefined;
+        sidebar.openResource(fileAddressFor(sid, cwd, abs));
+        return true;
+      } catch (e) {
+        // 服务缺失、地址不被任何 tab 类型认领、会话还没就绪 —— 一律当作开不了
+        return false;
+      }
+    }
+
     function showMenu(x, y, abs) {
       hideMenu();
       if (!document || !document.body) return;
@@ -289,21 +372,26 @@ window.__ModuleLoader__.load({
         // 复制文件：两张纸 + 中间的文件线，和「复制路径」区分开
         copyfile: '<rect x="8.6" y="3.4" width="11" height="13" rx="2"/><path d="M5.4 7.4h-.7A1.7 1.7 0 0 0 3 9.1v9.4a1.7 1.7 0 0 0 1.7 1.7h8.4a1.7 1.7 0 0 0 1.7-1.7v-.7"/><path d="M11.6 8.2h5"/><path d="M11.6 11.4h5"/>',
         // 添加到对话框：带横线的气泡
-        quote: '<path d="M20.5 11.6a8.3 8.3 0 0 1-8.3 8.3H7.4L3.5 21.9l1-4.1A8.3 8.3 0 1 1 20.5 11.6Z"/><path d="M9 11h6"/><path d="M9 14.2h3.6"/>'
+        quote: '<path d="M20.5 11.6a8.3 8.3 0 0 1-8.3 8.3H7.4L3.5 21.9l1-4.1A8.3 8.3 0 1 1 20.5 11.6Z"/><path d="M9 11h6"/><path d="M9 14.2h3.6"/>',
+        // 侧边栏预览：一块面板 + 右侧分栏
+        preview: '<rect x="3.2" y="4.4" width="17.6" height="15.2" rx="2.2"/><path d="M14.4 4.4v15.2"/>'
       };
       // 文案要说人话：「资源管理器」这个词很多用户不认识，改成「文件夹窗口」。
       // 顺序按「最常做的动作」排，并用 "sep" 占位分成三组：
-      //   看（打开 / 定位）→ 搬运（另存为 / 复制文件 / 复制路径）→ 喂给 AI（添加到对话框）
-      var items = [
-        ["open", "用默认程序打开", "按文件类型用对应软件打开：PDF 用阅读器、表格用 Excel 那类"],
-        ["reveal", "在文件夹中显示", "打开 Windows 文件夹窗口，并选中这个文件"],
-        ["sep", "", ""],
-        ["saveas", "另存为…", "另存一份到别的位置（会弹出系统保存窗口）"],
-        ["copyfile", "复制文件", "把文件本身放进剪贴板，可直接粘到任意文件夹"],
-        ["copy", "复制文件路径", "只复制路径文字，不复制文件本身"],
-        ["sep", "", ""],
-        ["quote", "添加到对话框", "把完整路径插入上方的聊天输入框"]
-      ];
+      //   看（侧边栏预览 / 打开 / 定位）→ 搬运（另存为 / 复制文件 / 复制路径）→ 喂给 AI（添加到对话框）
+      // 侧边栏预览只对宿主真能渲染的类型出现：音视频、压缩包在侧边栏里只有
+      // 「不支持预览」空状态，摆一个点了白点的入口不如不摆。
+      var canPreview = PREVIEWABLE.test(extOf(abs));
+      var items = [];
+      if (canPreview) items.push(["preview", "在侧边栏预览", "在右侧边栏里直接看，不用切出去"]);
+      items.push(["open", "用默认程序打开", "按文件类型用对应软件打开：PDF 用阅读器、表格用 Excel 那类"]);
+      items.push(["reveal", "在文件夹中显示", "打开 Windows 文件夹窗口，并选中这个文件"]);
+      items.push(["sep", "", ""]);
+      items.push(["saveas", "另存为…", "另存一份到别的位置（会弹出系统保存窗口）"]);
+      items.push(["copyfile", "复制文件", "把文件本身放进剪贴板，可直接粘到任意文件夹"]);
+      items.push(["copy", "复制文件路径", "只复制路径文字，不复制文件本身"]);
+      items.push(["sep", "", ""]);
+      items.push(["quote", "添加到对话框", "把完整路径插入上方的聊天输入框"]);
       for (var i = 0; i < items.length; i++) {
         // 分隔线：一个 1px 的 div，左右留白对齐文字缩进，不加任何可点区域
         if (items[i][0] === "sep") {
@@ -330,7 +418,14 @@ window.__ModuleLoader__.load({
             ev.stopPropagation();
             hideMenu();
 
-            // ① 只复制路径文字 —— 纯客户端，不必过宿主
+            // ① 侧边栏预览 —— 纯客户端，走宿主导航入口
+            if (action === "preview") {
+              if (openInSidebar(abs)) toast("已在侧边栏打开");
+              else toast("侧边栏打不开这个文件");
+              return;
+            }
+
+            // ② 只复制路径文字 —— 纯客户端，不必过宿主
             if (action === "copy") {
               try {
                 navigator.clipboard.writeText(abs);
@@ -485,11 +580,23 @@ window.__ModuleLoader__.load({
       var c = cached(hit.raw);
       // 已确认不是产物 → 同样放行宿主原生菜单，绝不抢
       if (c && !c.ok) return;
-      ev.preventDefault();
-      ev.stopPropagation();
       // 有结论且确实存在 → 直接弹自己的菜单，省一次往返
-      if (c && c.ok) { showMenu(ev.clientX, ev.clientY, c.abs); return; }
-      act(hit.raw, "menu", ev.clientX, ev.clientY);
+      if (c && c.ok) {
+        ev.preventDefault();
+        ev.stopPropagation();
+        showMenu(ev.clientX, ev.clientY, c.abs);
+        return;
+      }
+      // 🔴 还没有结论时**绝不先 preventDefault**。
+      // 旧版在这里无条件拦下原生菜单，然后异步去解析；一旦解析失败（正文里
+      // 形状像文件名、实际不存在的那类片段），act() 直接静默返回 ——
+      // 结果是原生菜单被拦掉、自己的菜单也没弹出，右键**彻底无反应**。
+      // 宁可让原生菜单先闪一下，也不能让右键失灵。
+      verify(hit.raw, function (rec) {
+        if (disposed) return;
+        if (!rec.ok || !rec.abs) return;
+        showMenu(ev.clientX, ev.clientY, rec.abs);
+      });
     }
 
     // ── 悬停高亮：让「这几个字是可以点的产物」一眼看得出来 ──────────────────
@@ -605,6 +712,7 @@ window.__ModuleLoader__.load({
 
       disposed = false;
       mounted = false;
+      rootCtx = ctx || null;
       api = { apply: apply, dispose: dispose, version: VERSION };
       try { window[GUARD] = api; } catch (e) { /* 极端沙箱下挂不上，不影响本实例 */ }
 
@@ -626,7 +734,9 @@ window.__ModuleLoader__.load({
     exports.apply = apply;
     exports.dispose = dispose;
     exports.version = VERSION;
-    exports.inject = [];       // 不依赖任何宿主服务，纯 DOM 事件
+    // 侧边栏预览要 sessions + sidebarRight。两个服务由官方 bundle 提供，
+    // 桌面端与 web 端都在；万一某个组合没有，cordis 会跳过本插件而不影响其它插件。
+    exports.inject = ["sessions", "sidebarRight"];
     return module.exports;
   }
 });

package/lib/index.js

@@ -230,6 +230,19 @@ function candidateBases() {
   return out.slice();
 }
 
+// allowOutside 关闭时的安全闸：落在**任意一个候选 workspace**里就算合法。
+// 2026-10-28 修正：原来这两个守卫只拿 process.cwd() 比对，但宿主 cwd 并不是会话
+// workspace（同 201 行那次的同一个坑），一旦有人为了给别人用把 allowOutside 关掉，
+// workspace 内的合法文件会被误拒成 outside-base。改成逐候选 base 判定。
+function insideAnyBase(abs, allowOutside) {
+  if (allowOutside) return true;
+  var cand = candidateBases();
+  for (var i = 0; i < cand.length; i++) {
+    try { if (isInside(cand[i], abs)) return true; } catch (e) { }
+  }
+  return false;
+}
+
 function resolveAcross(raw, extraBase, allowOutside) {
   var bases = [];
   if (extraBase) bases.push(pathResolve(extraBase));
@@ -742,7 +755,7 @@ export function apply(ctx, config) {
           return;
         }
         abs = pathResolve(abs);
-        if (!allowOutside && !isInside(process.cwd(), abs)) {
+        if (!insideAnyBase(abs, allowOutside)) {
           json(res, 200, { ok: false, reason: "outside-base", abs: abs });
           return;
         }
@@ -778,7 +791,7 @@ export function apply(ctx, config) {
           return;
         }
         abs = pathResolve(abs);
-        if (!allowOutside && !isInside(process.cwd(), abs)) {
+        if (!insideAnyBase(abs, allowOutside)) {
           json(res, 200, { ok: false, reason: "outside-base", abs: abs });
           return;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-artifact-linker",
-  "version": "0.3.3",
+  "version": "0.3.6",
   "description": "DSH 产物路径联动器：常驻注入「产物路径铁律」让模型输出完整绝对路径，同时把聊天正文里的文件名/路径渲染成一键可点的产物芯片——左键预览、右键菜单可打开/定位/另存为/复制文件/复制路径/添加到对话框。宿主端提供回环只读路由与 /saveas /copyfile 两个文件搬运动作（Shell COM 揭示、WinForms 保存对话框、CF_HDROP 剪贴板），客户端零侵入、不改 React 节点、不接管 markdown 图片语法。解决「产物要打开得先复制路径再粘到文件管理器」的反复割裂。/ Turn declared artifact paths into one-click chips: resident system-prompt rules force absolute paths, the client half renders file names as clickable chips, and the right-click menu offers open / reveal in Explorer / save-as / copy-file / copy-path / insert-into-composer. Host routes are loopback-only; zero telemetry.",
   "type": "module",
   "main": "lib/index.js",