dsh-artifact-linker 0.3.6 → 0.3.7

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.3.7 — 2026-10-29
+
+### 改：README 主文件改为中文
+
+npm 页面和 GitHub 首页默认渲染 `README.md`，而它此前是英文版 —— 中文用户打开仓库第一眼看到的是英文介绍。现在主文件为中文，英文完整版移到 `README.en.md`，两份顶部互链；`package.json` 的 `files` 同步更新。
+
 ## 0.3.6 — 2026-10-29
 
 ### 修：安全闸按候选 base 逐个判定

package/README.en.md

@@ -0,0 +1,145 @@
+# dsh-artifact-linker
+
+**Every artifact your agent delivers is one click away — no more "copy the path → open Explorer → paste into the address bar → Enter".**
+**让 DSH 交付的每一个产物，都能点一下就到位 —— 不用再「复制路径 → 打开文件管理器 → 贴到地址栏 → 回车」。**
+
+**English** · [简体中文](README.md) · [Interaction](#interaction) · [Install](#install) · [Config](#config) · [Boundaries](#what-it-does-not-do) · [Troubleshooting](#troubleshooting)
+
+---
+
+## The problem
+
+DSH already previews images, code, PDFs and Office files in the sidebar. But **scripts, Fluent exports, packed archives, temporary dumps** have no previewer — all you get in the transcript is a bare file name, so opening one costs four mechanical steps:
+
+1. Select and copy the path (assuming the model even printed one)
+2. Open File Explorer
+3. Paste into the address bar
+4. Press Enter
+
+Worse: the model often prints a **relative path or just a file name**, so step 1 fails outright and you have to go hunting for the file first.
+
+This plugin removes all four steps **and** removes the root cause.
+
+## What it does
+
+Two halves, one contract.
+
+| Half | Responsibility |
+| --- | --- |
+| **Host** (`lib/index.js`) | Registers a **resident system-prompt section** so "declare artifacts with full absolute paths" holds in *every* session and *every* preset — no skill needs to be loaded. Exposes eight loopback-only routes for path resolution, `stat`, reveal, open, save-as and copy-file. |
+| **Client** (`lib/client.js`) | Turns artifact names in the transcript into clickable targets: left click reveals, right click opens a seven-item menu (sidebar preview, open, reveal, save-as, copy file, copy path, add to composer). **No resident UI, no scanning, no timers.** |
+
+The host half closes the loop: even when the model only says `result.h5`, the route layer resolves it against the session workspace, then falls back to a shallow recursive basename search, and returns the real absolute path.
+
+## What it looks like
+
+Hover an artifact name and it picks up a Codex-style blue dashed outline — that is the only visual hint, nothing is rewritten in your transcript. Right click for the full menu:
+
+![Context menu](https://raw.githubusercontent.com/loyalchiiina/dsh-artifact-linker/main/docs/context-menu.png)
+
+## Interaction
+
+Click behaviour is decided by the modifier key — no first-time setup:
+
+| Action | Result |
+| --- | --- |
+| **Left click** on a file name / path | Reveal in File Explorer *with the file selected* |
+| **Ctrl / Shift / Cmd + click** | Open with the system's default application |
+| **Alt + click** | Copy the full absolute path to the clipboard |
+| **Right click** on an artifact | Inline menu — seven actions, listed below |
+| **Right click** on non-artifact text | Fully passed through, the host's native menu appears as usual |
+| **Hover** | Cursor becomes a pointer *only after* the file is confirmed to exist |
+| File missing / unresolvable | Silent pass-through or a one-shot toast. **Never pretends to succeed.** |
+
+### Right-click menu
+
+| Item | What it does |
+| --- | --- |
+| **Preview in sidebar** | Opens the file in DSH's built-in right sidebar — the same route as clicking a file link in chat. That viewer handles PDF, Word, Excel, PowerPoint, Markdown, plain text, CSV, images, audio and video; an extension it cannot render is redirected to the default app instead of showing a blank pane |
+| **Open with default app** | Hands the file to the OS association (Explorer / Excel / VLC / …) |
+| **Reveal in Explorer** | Opens the containing folder and selects the file |
+| **Save as…** | Copies the file to a location you pick |
+| **Copy file** | Puts the file *itself* on the clipboard (`CF_HDROP`), so you can paste it into Explorer, mail or chat |
+| **Copy path** | Puts the real absolute path on the clipboard |
+| **Add to composer** | Inserts the path into the input box for the next message |
+
+## How paths resolve
+
+A single path may arrive in four shapes, tried in order:
+
+1. **Absolute** — used as-is (`E:\project\out\case.h5`, `\\nas\share\a.zip`). Both drive letters and UNC are recognised.
+2. **Relative** — joined against the session workspace (`out\case.h5` → `<workspace>\out\case.h5`).
+3. **Workspace roots** — every known profile and session workspace is tried, not only the current one.
+4. **Bare file name** — a shallow recursive basename search (depth 2 by default), used only when exactly one match is found. Multiple matches are surfaced as candidates instead of guessing. When a mention swallows leading words (`结果#1_速度云图.png` arriving as `#1_速度云图.png`), segments are shrunk from the left until one resolves.
+
+Results are cached — 10 s for `stat`, 30 s for the basename index — so repeated hovers from DOM re-renders do not hammer the disk, while a just-deleted file still flips to "gone" quickly.
+
+## Install
+
+```bash
+# 1. Drop the package into DSH's local plugin directory
+#    Windows: %USERPROFILE%\.dsh\local-plugins\dsh-artifact-linker
+
+# 2. Declare the dependency in your profile's package.json
+#    %USERPROFILE%\.dsh\profiles\<profile>\package.json  →  dependencies
+#      "dsh-artifact-linker": "link:C:/Users/<you>/.dsh/local-plugins/dsh-artifact-linker"
+
+# 3. Fully restart DSH — client bundles are NOT reloaded by Ctrl+R
+```
+
+> The host half needs `webServer` and `systemPrompt`; the client half is a `__ModuleLoader__` bundle. Peers declare `@deepseek-ai/dsh >=0.2.1-rc.3` — the installer compares the runtime version against that range and refuses a mismatch.
+
+## Config
+
+All tunables live in `cordis.patch.yml` (or the profile-level patch). Changing them requires a restart.
+
+| Key | Default | Meaning |
+| --- | --- | --- |
+| `injectRules` | `true` | Register the resident prompt section |
+| `clientChips` | `true` | Client capsule + click takeover. `false` = pure injection mode |
+| `allowOutside` | `true` | Allow resolving paths outside the workspace |
+| `statTtlMs` | `10000` | Host-side `stat` cache lifetime |
+| `searchMaxDepth` | `2` (max 8) | Recursion depth for bare-filename lookup |
+| `rulesText` | built-in 6 lines | Replace the injected rules wholesale (array or multi-line string) |
+
+On `allowOutside`: artifacts almost always live on a project drive (`E:\`, `D:\`) rather than inside the DSH workspace, so a strict default would make the plugin useless on first run. **Set it to `false` when shipping to other people** — that is the gate which stops this plugin from becoming "the model names any path and your machine opens it".
+
+## What it does NOT do
+
+- **Never modifies a single DOM node.** React owns the transcript; mutating its nodes causes blank renders on re-render. Clickability comes from a capture-phase `click` listener plus `caretRangeFromPoint` to work out which word was hit.
+- **Never takes over markdown image or link syntax.** Rewriting `![](path)` into a chip would break the image.
+- **Never draws a chip for a file that does not exist.** Chat text is full of filename-shaped fragments — log excerpts, example paths, error messages. Turning those into chips produces a clickable target that only ever answers "not resolved", which is worse than not recognising the file at all. So there is an existence gate: on hover the client resolves asynchronously and only becomes a pointer / dashed highlight when the file is really there. Confirmed non-artifacts stay plain text and the right-click falls through to the host's native menu. Results are cached for 30 s.
+- **Never writes a file, never phones home.** Zero telemetry. The only `spawn` calls are the explicit `/reveal` and `/open` routes, using `execFile` with an argument array (no shell, no injection surface), guarded by a loopback-origin check.
+- **Never renames or moves anything.** Read-only by construction.
+- **Does not unify with the official `present` card.** If an artifact was already delivered as a card, the injected rules tell the model not to repeat it.
+
+## Troubleshooting
+
+| Symptom | Check |
+| --- | --- |
+| Nothing clickable | Was DSH **fully restarted**? `dsh.client` bundles do not hot-reload |
+| Capsule missing | `clientChips` is `true`; the loader reports `loaded without registering` if the bundle id mismatches `package.json` |
+| Click does nothing | File may have been deleted — the capsule marks it `gone` |
+| "outside workspace" | Either set `allowOutside: true`, or the path really is outside the project |
+| Injection not working | `injectRules` is `true`; look for the host log `artifact path rules registered` |
+| Theme colours look off | The plugin prefers `--dsw-alias-*` tokens, then self-detected light/dark, then hardcoded fallbacks |
+
+## Layout
+
+```
+dsh-artifact-linker/
+├── package.json          # dsh.bundle + dsh.client, peer >=0.2.1-rc.3
+├── cordis.patch.yml      # the patch entry (never duplicate this id)
+├── lib/
+│   ├── index.js          # host: prompt section + 8 loopback routes
+│   └── client.js         # client: __ModuleLoader__ bundle, read-only DOM
+├── locale/{zh,en}.json   # meta.title / meta.description
+├── icon.svg
+├── README.md / README.en.md
+├── CHANGELOG.md
+└── LICENSE
+```
+
+## License
+
+MIT © loyalchiiina

package/README.md

@@ -1,145 +1,190 @@
-# dsh-artifact-linker
+# dsh-artifact-linker · 产物路径联动器
 
-**Every artifact your agent delivers is one click away — no more "copy the path → open Explorer → paste into the address bar → Enter".**
-**让 DSH 交付的每一个产物，都能点一下就到位 —— 不用再「复制路径 → 打开文件管理器 → 贴到地址栏 → 回车」。**
+> 让 DSH 交付的每一个产物，都能**点一下就到位**——不用再「复制路径 → 打开文件管理器 → 贴到地址栏 → 回车」。
 
-**English** · [简体中文](README.zh.md) · [Interaction](#interaction) · [Install](#install) · [Config](#config) · [Boundaries](#what-it-does-not-do) · [Troubleshooting](#troubleshooting)
+[English](README.en.md) · **简体中文** · [安装](#安装) · [交互](#交互) · [配置](#配置) · [边界](#它不做什么) · [排查](#排查)
 
 ---
 
-## The problem
+## 它解决什么
 
-DSH already previews images, code, PDFs and Office files in the sidebar. But **scripts, Fluent exports, packed archives, temporary dumps** have no previewer — all you get in the transcript is a bare file name, so opening one costs four mechanical steps:
+DSH 里预览器已经能开图片、代码、pdf、office。但**插件、脚本、Fluent 出图、打包产物、临时导出**这些文件，正文里只给一个名字，想打开它得走完四步机械劳动：
 
-1. Select and copy the path (assuming the model even printed one)
-2. Open File Explorer
-3. Paste into the address bar
-4. Press Enter
+```
+看到 "结果.xlsx" → 复制路径 → Win+E → 地址栏输入 → 回车 → 在一堆同级文件里找那一个
+```
+
+`dsh-artifact-linker` 把这条路压成 **0 步**：正文里的文件名本身就是入口。
+
+它做两件互相咬合的事：
 
-Worse: the model often prints a **relative path or just a file name**, so step 1 fails outright and you have to go hunting for the file first.
+| 半边 | 做什么 |
+|---|---|
+| **宿主（提示词层）** | 常驻注入一条「产物路径铁律」，要求模型把产物写成**完整绝对路径**、而给用户看的正文**只写文件名**——路径有据可查，正文又不被长串路径污染 |
+| **客户端（渲染层）** | 正文里的产物名变成可点目标：左键揭示、右键七项菜单（侧边栏预览 / 默认程序打开 / 在文件夹中显示 / 另存为 / 复制文件 / 复制路径 / 添加到对话框）。**零常驻 UI、零扫描、零定时器** |
 
-This plugin removes all four steps **and** removes the root cause.
+第 1 条管「模型把路径写对」，第 2 条管「用户点得动」。缺前者，路径经常是猜的、点开是死链；缺后者，路径再对也要人去复制。
 
-## What it does
+## 长什么样
 
-Two halves, one contract.
+悬停到产物名上，会出现 Codex 风格的蓝色虚线框——这是唯一的视觉提示，正文一个字都不会被改写。右键弹出完整菜单：
 
-| Half | Responsibility |
-| --- | --- |
-| **Host** (`lib/index.js`) | Registers a **resident system-prompt section** so "declare artifacts with full absolute paths" holds in *every* session and *every* preset — no skill needs to be loaded. Exposes eight loopback-only routes for path resolution, `stat`, reveal, open, save-as and copy-file. |
-| **Client** (`lib/client.js`) | Turns artifact names in the transcript into clickable targets: left click reveals, right click opens a seven-item menu (sidebar preview, open, reveal, save-as, copy file, copy path, add to composer). **No resident UI, no scanning, no timers.** |
+![右键菜单](https://raw.githubusercontent.com/loyalchiiina/dsh-artifact-linker/main/docs/context-menu.png)
 
-The host half closes the loop: even when the model only says `result.h5`, the route layer resolves it against the session workspace, then falls back to a shallow recursive basename search, and returns the real absolute path.
+---
 
-## What it looks like
+## 交互
 
-Hover an artifact name and it picks up a Codex-style blue dashed outline — that is the only visual hint, nothing is rewritten in your transcript. Right click for the full menu:
+正文里点一个文件名（或绝对路径）：
 
-![Context menu](https://raw.githubusercontent.com/loyalchiiina/dsh-artifact-linker/main/docs/context-menu.png)
+| 操作 | 结果 |
+|---|---|
+| **左键** | 在系统资源管理器里**揭示并选中**该文件（不是打开它，是把它亮在你面前） |
+| **Ctrl / Shift / Cmd + 左键** | 用系统默认关联程序打开（Excel、PS、播放器……） |
+| **Alt + 左键** | 复制完整绝对路径到剪贴板 |
+| **右键**产物名 | 插件菜单，共七项（见下表） |
+| **右键**非产物文字 | 完全放行，宿主原生菜单照常出现 |
+| **悬停** | 只有**确认文件真的存在**才变手型、才画虚线 |
+| 文件不存在 / 解析不到 | 静默放行或一次性提示，**绝不假装成功** |
 
-## Interaction
+### 右键菜单
 
-Click behaviour is decided by the modifier key — no first-time setup:
+| 菜单项 | 作用 |
+|---|---|
+| **在侧边栏预览** | 在 DSH 内置右侧边栏里打开，和聊天里点文件链接是同一条通道。该查看器支持 PDF、Word、Excel、PowerPoint、Markdown、纯文本、CSV、图片、音视频；它渲染不了的扩展名会**自动改走默认程序**，不会给你一个空白面板 |
+| **用默认程序打开** | 交给系统关联（资源管理器 / Excel / 播放器……） |
+| **在文件夹中显示** | 打开所在目录并选中该文件 |
+| **另存为…** | 复制到你指定的位置 |
+| **复制文件** | 把文件**本身**放进剪贴板（`CF_HDROP`），可以直接粘到资源管理器、邮件、聊天窗口 |
+| **复制文件路径** | 把真实绝对路径放进剪贴板 |
+| **添加到对话框** | 把路径插入输入框，供下一条消息使用 |
 
-| Action | Result |
-| --- | --- |
-| **Left click** on a file name / path | Reveal in File Explorer *with the file selected* |
-| **Ctrl / Shift / Cmd + click** | Open with the system's default application |
-| **Alt + click** | Copy the full absolute path to the clipboard |
-| **Right click** on an artifact | Inline menu — seven actions, listed below |
-| **Right click** on non-artifact text | Fully passed through, the host's native menu appears as usual |
-| **Hover** | Cursor becomes a pointer *only after* the file is confirmed to exist |
-| File missing / unresolvable | Silent pass-through or a one-shot toast. **Never pretends to succeed.** |
+---
 
-### Right-click menu
+## 路径怎么解析（三源兜底）
 
-| Item | What it does |
-| --- | --- |
-| **Preview in sidebar** | Opens the file in DSH's built-in right sidebar — the same route as clicking a file link in chat. That viewer handles PDF, Word, Excel, PowerPoint, Markdown, plain text, CSV, images, audio and video; an extension it cannot render is redirected to the default app instead of showing a blank pane |
-| **Open with default app** | Hands the file to the OS association (Explorer / Excel / VLC / …) |
-| **Reveal in Explorer** | Opens the containing folder and selects the file |
-| **Save as…** | Copies the file to a location you pick |
-| **Copy file** | Puts the file *itself* on the clipboard (`CF_HDROP`), so you can paste it into Explorer, mail or chat |
-| **Copy path** | Puts the real absolute path on the clipboard |
-| **Add to composer** | Inserts the path into the input box for the next message |
+模型嘴里的话不可全信，插件按顺序试：
 
-## How paths resolve
+1. **`/workspace/<...>`** —— DSH 工作区的虚拟根，映射到真实 workspace 目录；
+2. **原生绝对路径** —— `E:\proj\out\a.xlsx` 直接用（盘符和 UNC 都认）；
+3. **会话相对路径** —— 以会话 workspace 为基准拼接；
+4. **各 workspace 根** —— 遍历所有已知的 profile / 会话 workspace，不只当前那一个；
+5. **裸文件名** —— 深浅递归搜同名文件（跳过 `node_modules/.git/dist/build/` 等），按「最近修改优先」+「目录深度浅优先」排序：
+   - 命中 **1 个** → 直接用；
+   - 命中 **多个** → 返回候选列表交给用户，**绝不猜**（猜错比不猜更糟）；
+   - 命中 **0 个** → 若 `allowOutside: true`，再在磁盘上按名字做一次浅层搜索。
 
-A single path may arrive in four shapes, tried in order:
+提到时若「提及吞掉了前面几个词」（`结果#1_速度云图.png` 只剩 `#1_速度云图.png`），会**从左逐段收缩重试**直到能命中。
 
-1. **Absolute** — used as-is (`E:\project\out\case.h5`, `\\nas\share\a.zip`). Both drive letters and UNC are recognised.
-2. **Relative** — joined against the session workspace (`out\case.h5` → `<workspace>\out\case.h5`).
-3. **Workspace roots** — every known profile and session workspace is tried, not only the current one.
-4. **Bare file name** — a shallow recursive basename search (depth 2 by default), used only when exactly one match is found. Multiple matches are surfaced as candidates instead of guessing. When a mention swallows leading words (`结果#1_速度云图.png` arriving as `#1_速度云图.png`), segments are shrunk from the left until one resolves.
+缓存两层：`stat` 10 秒、同名索引 30 秒——避免重复打满磁盘，同时刚删掉的文件也能很快翻成「已不存在」。
 
-Results are cached — 10 s for `stat`, 30 s for the basename index — so repeated hovers from DOM re-renders do not hammer the disk, while a just-deleted file still flips to "gone" quickly.
+---
 
-## Install
+## 安装
 
 ```bash
-# 1. Drop the package into DSH's local plugin directory
+# 1. 放进 DSH 的本地插件目录
 #    Windows: %USERPROFILE%\.dsh\local-plugins\dsh-artifact-linker
 
-# 2. Declare the dependency in your profile's package.json
-#    %USERPROFILE%\.dsh\profiles\<profile>\package.json  →  dependencies
-#      "dsh-artifact-linker": "link:C:/Users/<you>/.dsh/local-plugins/dsh-artifact-linker"
+# 2. profile 里声明依赖（<profile> 换成 desktop / web / xiufu）
+#    在 %USERPROFILE%\.dsh\profiles\<profile>\package.json 的 dependencies 里加：
+#      "dsh-artifact-linker": "file:~/.dsh/local-plugins/dsh-artifact-linker"
+
+# 3. 完全重启 DSH（客户端 bundle 不随 Ctrl+R 重载）
+```
+
+> ⚠️ **`file:` 依赖的坑**：`file:` / `link:` 指向会在 profile 重装依赖时把目录内容**按快照恢复**，本地改动可能被回滚。长期使用建议 `npm pack` 成 tarball 后用 `file:` 指向 tgz，或直接发到 npm。
 
-# 3. Fully restart DSH — client bundles are NOT reloaded by Ctrl+R
+装好后确认：
+
+```
+GET http://127.0.0.1:<port>/dsh-artifact-linker/info
 ```
 
-> The host half needs `webServer` and `systemPrompt`; the client half is a `__ModuleLoader__` bundle. Peers declare `@deepseek-ai/dsh >=0.2.1-rc.3` — the installer compares the runtime version against that range and refuses a mismatch.
+正常应返回插件名、版本、`workspace`、以及 `injectRules / clientChips / allowOutside` 三个开关的**实际生效值**（这一条是排障时唯一可信的地方——别信 README，信 `/info`）。
 
-## Config
+---
+
+## 配置
 
-All tunables live in `cordis.patch.yml` (or the profile-level patch). Changing them requires a restart.
+在 profile 的 `cordis.patch.yml` 里给本插件条目加 `config`（**不要在 profile 里手写第二段 `insert`**，同一 entry id 插两行会 `duplicate loader entry id`）：
 
-| Key | Default | Meaning |
-| --- | --- | --- |
-| `injectRules` | `true` | Register the resident prompt section |
-| `clientChips` | `true` | Client capsule + click takeover. `false` = pure injection mode |
-| `allowOutside` | `true` | Allow resolving paths outside the workspace |
-| `statTtlMs` | `10000` | Host-side `stat` cache lifetime |
-| `searchMaxDepth` | `2` (max 8) | Recursion depth for bare-filename lookup |
-| `rulesText` | built-in 6 lines | Replace the injected rules wholesale (array or multi-line string) |
+```yaml
+- id: dsh-artifact-linker
+  name: dsh-artifact-linker
+  config:
+    injectRules: true    # 常驻 prompt 铁律
+    clientChips: true    # 是否接管正文点击（false = 只留提示词注入，不动鼠标）
+    allowOutside: true   # 是否允许解析 workspace 之外的路径
+```
 
-On `allowOutside`: artifacts almost always live on a project drive (`E:\`, `D:\`) rather than inside the DSH workspace, so a strict default would make the plugin useless on first run. **Set it to `false` when shipping to other people** — that is the gate which stops this plugin from becoming "the model names any path and your machine opens it".
+| 开关 | 默认 | 置 false / true 的效果 |
+|---|---|---|
+| `injectRules` | `true` | `false` = 不注入 prompt 段，模型不再被要求输出绝对路径 |
+| `clientChips` | `true` | `false` = 纯注入模式，不接管任何鼠标事件 |
+| `allowOutside` | `true` | `false` = 只允许打开 workspace 内的文件 |
 
-## What it does NOT do
+**`allowOutside` 要特别说一句**：产物经常落在项目盘（`E:\…`、`D:\…`）而不是 DSH 的 workspace 里，所以默认放开。但它同时是安全闸——挡的是「模型说个 `C:\Windows\System32\xxx.exe` 就帮你点开」这类情况。**自己一个人用保持 `true` 更顺手；给别人用、或者接入不可信模型，改成 `false`。**
 
-- **Never modifies a single DOM node.** React owns the transcript; mutating its nodes causes blank renders on re-render. Clickability comes from a capture-phase `click` listener plus `caretRangeFromPoint` to work out which word was hit.
-- **Never takes over markdown image or link syntax.** Rewriting `![](path)` into a chip would break the image.
-- **Never draws a chip for a file that does not exist.** Chat text is full of filename-shaped fragments — log excerpts, example paths, error messages. Turning those into chips produces a clickable target that only ever answers "not resolved", which is worse than not recognising the file at all. So there is an existence gate: on hover the client resolves asynchronously and only becomes a pointer / dashed highlight when the file is really there. Confirmed non-artifacts stay plain text and the right-click falls through to the host's native menu. Results are cached for 30 s.
-- **Never writes a file, never phones home.** Zero telemetry. The only `spawn` calls are the explicit `/reveal` and `/open` routes, using `execFile` with an argument array (no shell, no injection surface), guarded by a loopback-origin check.
-- **Never renames or moves anything.** Read-only by construction.
-- **Does not unify with the official `present` card.** If an artifact was already delivered as a card, the injected rules tell the model not to repeat it.
+---
 
-## Troubleshooting
+## 它不做什么
 
-| Symptom | Check |
-| --- | --- |
-| Nothing clickable | Was DSH **fully restarted**? `dsh.client` bundles do not hot-reload |
-| Capsule missing | `clientChips` is `true`; the loader reports `loaded without registering` if the bundle id mismatches `package.json` |
-| Click does nothing | File may have been deleted — the capsule marks it `gone` |
-| "outside workspace" | Either set `allowOutside: true`, or the path really is outside the project |
-| Injection not working | `injectRules` is `true`; look for the host log `artifact path rules registered` |
-| Theme colours look off | The plugin prefers `--dsw-alias-*` tokens, then self-detected light/dark, then hardcoded fallbacks |
+这几条是**刻意**的，不是没做完：
 
-## Layout
+1. **不改任何 DOM 节点**。正文由 React 渲染，给文本包一层 `<span>` 就是移动 React 的节点，重渲染时整段白屏。本插件全程只读，可点性是「捕获期 click + 光标位置反查」实现的。
+2. **不接管 markdown 图片与链接语法**。`![](path)` 一旦被改写成芯片，图就不显示了。
+3. **不联网、零遥测**。全部路由只在 `127.0.0.1` 回环可用，外部来源一律 403。
+4. **不 spawn shell**。`reveal`/`open` 走 `execFile(cmd, args)` 参数数组，路径里的 `& | ; %VAR%` 全是字面量，没有命令注入面。
+5. **不猜多候选路径**。搜到多个同名文件时把选择权还给人。
+6. **不保证文件存在**。库里的文件随时可能被删、被移走、被别的进程占用——所以每次打开前都重新 stat，点开发现没了就明说「已不存在」，不会装作没事。
+7. **不给不存在的文件画芯片**。正文里长得像文件名的片段很多（日志摘录、示例路径、报错原文），只看「形状」就画成可点芯片，点开只会得到一句「没解析到」——那比根本不认识更糟。所以判定加了存在性闸门：悬停时先异步 `resolve`，**只有文件真的在**才变手型、画蓝色虚线；确认不是产物的就当普通文字，右键直接放行宿主原生菜单。解析结果进 30 秒 TTL 缓存，反复悬停不重复请求。
+
+---
+
+## 排查
+
+| 症状 | 原因与处置 |
+|---|---|
+| 正文文件名不可点 | ① `clientChips` 被置 false；② 扩展名不在白名单（本插件只认已知产物扩展名，避免把 `C:\Windows` 之类误标成产物）；③ 客户端 bundle 没重载——**Ctrl+R 不重载客户端 bundle，必须完全重启 DSH** |
+| 点开提示「解析不到绝对路径」 | 裸文件名不在 workspace 内，且 `allowOutside: false`。先确认文件真实路径，再决定是否放宽 |
+| 点开提示「文件已不存在」 | 路径是真的，文件被删/移了。清单里该行会打上删除线 |
+| 点产物名没反应 | ① 文件不在候选 base 下（访问宿主 `/info` 看 `bases`）；② 扩展名不在白名单（`lib/client.js` 的 `EXT`）；③ 直接看 `/resolve?p=<名字>` 返回的 `reason` |
+| 右键没出本插件菜单 | 该处文字没解析成文件（同上）；**对非产物右键本来就不接管**，出的是宿主原生菜单。0.3.3 起会先确认文件存在——不存在的片段既不画虚线也不接管右键 |
+| 日志里出现 N 份相同输出 | 热重载堆叠了多个实例。**Ctrl+R 无效，必须完全重启 DSH**；同时确认 `window.__dshArtifactLinkerV1.dispose()` 守卫在 |
+
+---
+
+## 目录
 
 ```
 dsh-artifact-linker/
-├── package.json          # dsh.bundle + dsh.client, peer >=0.2.1-rc.3
-├── cordis.patch.yml      # the patch entry (never duplicate this id)
+├── package.json          # dsh.bundle + dsh.client（两个都要，缺 bundle 装不上）
+├── cordis.patch.yml      # 插件注册补丁（entry id = 包名，唯一）
 ├── lib/
-│   ├── index.js          # host: prompt section + 8 loopback routes
-│   └── client.js         # client: __ModuleLoader__ bundle, read-only DOM
-├── locale/{zh,en}.json   # meta.title / meta.description
+│   ├── index.js          # 宿主：prompt 段 + 8 条回环路由 + 多源路径解析
+│   └── client.js         # 客户端：__ModuleLoader__.load bundle（id 必须 = 包名）
+├── locale/{zh,en}.json
 ├── icon.svg
-├── README.md / README.zh.md
-├── CHANGELOG.md
-└── LICENSE
+├── README.md · README.en.md · CHANGELOG.md · LICENSE
 ```
 
+---
+
+<a id="english-summary"></a>
+## English summary
+
+`dsh-artifact-linker` turns every delivered artifact into a one-click target, so you never copy a path into Explorer again.
+
+- **Host half** injects a resident system-prompt rule: always emit **absolute** artifact paths in tooling, but only the **file name** in user-facing prose.
+- **Client half** makes those names clickable — **left click** reveals and selects the file in Explorer, **right click** opens a seven-item menu: preview in sidebar, open with default app, reveal in Explorer, save as, copy the file itself, copy absolute path, add to composer. Hovering turns the cursor into a pointer only after the file is confirmed to exist. No floating UI, no document scanning, no timers.
+- Bare file names are resolved with a multi-tier fallback (native absolute → session-relative → every known workspace root → recursive same-name search), shrinking the mention from the left when leading words are swallowed. Ambiguous matches are surfaced as candidates rather than guessed.
+- All routes are loopback-only, telemetry-free, and spawn nothing through a shell. The client never mutates React-rendered DOM.
+
+MIT licensed.
+
+---
+
 ## License
 
-MIT © loyalchiiina
+MIT © loyalchiiina

package/lib/client.js

@@ -29,7 +29,7 @@ window.__ModuleLoader__.load({
     var exports = module.exports;
 
     var GUARD = "__dshArtifactLinkerV1";
-    var VERSION = "0.3.6";
+    var VERSION = "0.3.7";
     // 路由前缀必须与宿主的 ROUTE_PREFIX 一致；永远根相对，绝不拼宿主 origin
     var ROUTE = "/dsh-artifact-linker";
 

package/package.json

@@ -1,59 +1,59 @@
-{
-  "name": "dsh-artifact-linker",
-  "version": "0.3.6",
-  "description": "DSH 产物路径联动器：常驻注入「产物路径铁律」让模型输出完整绝对路径，同时把聊天正文里的文件名/路径渲染成一键可点的产物芯片——左键预览、右键菜单可打开/定位/另存为/复制文件/复制路径/添加到对话框。宿主端提供回环只读路由与 /saveas /copyfile 两个文件搬运动作（Shell COM 揭示、WinForms 保存对话框、CF_HDROP 剪贴板），客户端零侵入、不改 React 节点、不接管 markdown 图片语法。解决「产物要打开得先复制路径再粘到文件管理器」的反复割裂。/ Turn declared artifact paths into one-click chips: resident system-prompt rules force absolute paths, the client half renders file names as clickable chips, and the right-click menu offers open / reveal in Explorer / save-as / copy-file / copy-path / insert-into-composer. Host routes are loopback-only; zero telemetry.",
-  "type": "module",
-  "main": "lib/index.js",
-  "sideEffects": false,
-  "engines": {
-    "dsh": ">=0.2.1-rc.3",
-    "node": "^22.19.0 || >=24.0.0"
-  },
-  "exports": {
-    ".": "./lib/index.js",
-    "./client": "./lib/client.js",
-    "./package.json": "./package.json",
-    "./locale/zh.json": "./locale/zh.json",
-    "./locale/en.json": "./locale/en.json",
-    "./icon": "./icon.svg"
-  },
-  "files": [
-    "lib",
-    "lib/index.js",
-    "lib/client.js",
-    "cordis.patch.yml",
-    "README.md",
-    "README.zh.md",
-    "CHANGELOG.md",
-    "LICENSE",
-    "locale/*.json",
-    "icon.svg"
-  ],
-  "license": "MIT",
-  "keywords": [
-    "dsh-plugin",
-    "deepseek-harness",
-    "artifact",
-    "path",
-    "absolute-path",
-    "artifact-linker",
-    "reveal-in-explorer",
-    "产物路径",
-    "一键打开"
-  ],
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [
-        "@deepseek-ai/dsh-client-runtime"
-      ],
-      "platform": "web"
-    }
-  },
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh": ">=0.2.1-rc.3"
-  }
+{
+    "name":  "dsh-artifact-linker",
+    "version":  "0.3.7",
+    "description":  "DSH 产物路径联动器：常驻注入「产物路径铁律」让模型输出完整绝对路径，同时把聊天正文里的文件名/路径渲染成一键可点的产物芯片——左键预览、右键菜单可打开/定位/另存为/复制文件/复制路径/添加到对话框。宿主端提供回环只读路由与 /saveas /copyfile 两个文件搬运动作（Shell COM 揭示、WinForms 保存对话框、CF_HDROP 剪贴板），客户端零侵入、不改 React 节点、不接管 markdown 图片语法。解决「产物要打开得先复制路径再粘到文件管理器」的反复割裂。/ Turn declared artifact paths into one-click chips: resident system-prompt rules force absolute paths, the client half renders file names as clickable chips, and the right-click menu offers open / reveal in Explorer / save-as / copy-file / copy-path / insert-into-composer. Host routes are loopback-only; zero telemetry.",
+    "type":  "module",
+    "main":  "lib/index.js",
+    "sideEffects":  false,
+    "engines":  {
+                    "dsh":  "\u003e=0.2.1-rc.3",
+                    "node":  "^22.19.0 || \u003e=24.0.0"
+                },
+    "exports":  {
+                    ".":  "./lib/index.js",
+                    "./client":  "./lib/client.js",
+                    "./package.json":  "./package.json",
+                    "./locale/zh.json":  "./locale/zh.json",
+                    "./locale/en.json":  "./locale/en.json",
+                    "./icon":  "./icon.svg"
+                },
+    "files":  [
+                  "lib",
+                  "lib/index.js",
+                  "lib/client.js",
+                  "cordis.patch.yml",
+                  "README.md",
+                  "README.en.md",
+                  "CHANGELOG.md",
+                  "LICENSE",
+                  "locale/*.json",
+                  "icon.svg"
+              ],
+    "license":  "MIT",
+    "keywords":  [
+                     "dsh-plugin",
+                     "deepseek-harness",
+                     "artifact",
+                     "path",
+                     "absolute-path",
+                     "artifact-linker",
+                     "reveal-in-explorer",
+                     "产物路径",
+                     "一键打开"
+                 ],
+    "dsh":  {
+                "bundle":  {
+                               "patch":  "./cordis.patch.yml"
+                           },
+                "client":  {
+                               "inject":  [
+                                              "@deepseek-ai/dsh-client-runtime"
+                                          ],
+                               "platform":  "web"
+                           }
+            },
+    "peerDependencies":  {
+                             "@deepseek-ai/cordis":  "^4.0.2",
+                             "@deepseek-ai/dsh":  "\u003e=0.2.1-rc.3"
+                         }
 }

package/README.zh.md

@@ -1,190 +0,0 @@
-# dsh-artifact-linker · 产物路径联动器
-
-> 让 DSH 交付的每一个产物，都能**点一下就到位**——不用再「复制路径 → 打开文件管理器 → 贴到地址栏 → 回车」。
-
-[English](README.md) · **简体中文** · [安装](#安装) · [交互](#交互) · [配置](#配置) · [边界](#它不做什么) · [排查](#排查)
-
----
-
-## 它解决什么
-
-DSH 里预览器已经能开图片、代码、pdf、office。但**插件、脚本、Fluent 出图、打包产物、临时导出**这些文件，正文里只给一个名字，想打开它得走完四步机械劳动：
-
-```
-看到 "结果.xlsx" → 复制路径 → Win+E → 地址栏输入 → 回车 → 在一堆同级文件里找那一个
-```
-
-`dsh-artifact-linker` 把这条路压成 **0 步**：正文里的文件名本身就是入口。
-
-它做两件互相咬合的事：
-
-| 半边 | 做什么 |
-|---|---|
-| **宿主（提示词层）** | 常驻注入一条「产物路径铁律」，要求模型把产物写成**完整绝对路径**、而给用户看的正文**只写文件名**——路径有据可查，正文又不被长串路径污染 |
-| **客户端（渲染层）** | 正文里的产物名变成可点目标：左键揭示、右键七项菜单（侧边栏预览 / 默认程序打开 / 在文件夹中显示 / 另存为 / 复制文件 / 复制路径 / 添加到对话框）。**零常驻 UI、零扫描、零定时器** |
-
-第 1 条管「模型把路径写对」，第 2 条管「用户点得动」。缺前者，路径经常是猜的、点开是死链；缺后者，路径再对也要人去复制。
-
-## 长什么样
-
-悬停到产物名上，会出现 Codex 风格的蓝色虚线框——这是唯一的视觉提示，正文一个字都不会被改写。右键弹出完整菜单：
-
-![右键菜单](https://raw.githubusercontent.com/loyalchiiina/dsh-artifact-linker/main/docs/context-menu.png)
-
----
-
-## 交互
-
-正文里点一个文件名（或绝对路径）：
-
-| 操作 | 结果 |
-|---|---|
-| **左键** | 在系统资源管理器里**揭示并选中**该文件（不是打开它，是把它亮在你面前） |
-| **Ctrl / Shift / Cmd + 左键** | 用系统默认关联程序打开（Excel、PS、播放器……） |
-| **Alt + 左键** | 复制完整绝对路径到剪贴板 |
-| **右键**产物名 | 插件菜单，共七项（见下表） |
-| **右键**非产物文字 | 完全放行，宿主原生菜单照常出现 |
-| **悬停** | 只有**确认文件真的存在**才变手型、才画虚线 |
-| 文件不存在 / 解析不到 | 静默放行或一次性提示，**绝不假装成功** |
-
-### 右键菜单
-
-| 菜单项 | 作用 |
-|---|---|
-| **在侧边栏预览** | 在 DSH 内置右侧边栏里打开，和聊天里点文件链接是同一条通道。该查看器支持 PDF、Word、Excel、PowerPoint、Markdown、纯文本、CSV、图片、音视频；它渲染不了的扩展名会**自动改走默认程序**，不会给你一个空白面板 |
-| **用默认程序打开** | 交给系统关联（资源管理器 / Excel / 播放器……） |
-| **在文件夹中显示** | 打开所在目录并选中该文件 |
-| **另存为…** | 复制到你指定的位置 |
-| **复制文件** | 把文件**本身**放进剪贴板（`CF_HDROP`），可以直接粘到资源管理器、邮件、聊天窗口 |
-| **复制文件路径** | 把真实绝对路径放进剪贴板 |
-| **添加到对话框** | 把路径插入输入框，供下一条消息使用 |
-
----
-
-## 路径怎么解析（三源兜底）
-
-模型嘴里的话不可全信，插件按顺序试：
-
-1. **`/workspace/<...>`** —— DSH 工作区的虚拟根，映射到真实 workspace 目录；
-2. **原生绝对路径** —— `E:\proj\out\a.xlsx` 直接用（盘符和 UNC 都认）；
-3. **会话相对路径** —— 以会话 workspace 为基准拼接；
-4. **各 workspace 根** —— 遍历所有已知的 profile / 会话 workspace，不只当前那一个；
-5. **裸文件名** —— 深浅递归搜同名文件（跳过 `node_modules/.git/dist/build/` 等），按「最近修改优先」+「目录深度浅优先」排序：
-   - 命中 **1 个** → 直接用；
-   - 命中 **多个** → 返回候选列表交给用户，**绝不猜**（猜错比不猜更糟）；
-   - 命中 **0 个** → 若 `allowOutside: true`，再在磁盘上按名字做一次浅层搜索。
-
-提到时若「提及吞掉了前面几个词」（`结果#1_速度云图.png` 只剩 `#1_速度云图.png`），会**从左逐段收缩重试**直到能命中。
-
-缓存两层：`stat` 10 秒、同名索引 30 秒——避免重复打满磁盘，同时刚删掉的文件也能很快翻成「已不存在」。
-
----
-
-## 安装
-
-```bash
-# 1. 放进 DSH 的本地插件目录
-#    Windows: %USERPROFILE%\.dsh\local-plugins\dsh-artifact-linker
-
-# 2. profile 里声明依赖（<profile> 换成 desktop / web / xiufu）
-#    在 %USERPROFILE%\.dsh\profiles\<profile>\package.json 的 dependencies 里加：
-#      "dsh-artifact-linker": "file:~/.dsh/local-plugins/dsh-artifact-linker"
-
-# 3. 完全重启 DSH（客户端 bundle 不随 Ctrl+R 重载）
-```
-
-> ⚠️ **`file:` 依赖的坑**：`file:` / `link:` 指向会在 profile 重装依赖时把目录内容**按快照恢复**，本地改动可能被回滚。长期使用建议 `npm pack` 成 tarball 后用 `file:` 指向 tgz，或直接发到 npm。
-
-装好后确认：
-
-```
-GET http://127.0.0.1:<port>/dsh-artifact-linker/info
-```
-
-正常应返回插件名、版本、`workspace`、以及 `injectRules / clientChips / allowOutside` 三个开关的**实际生效值**（这一条是排障时唯一可信的地方——别信 README，信 `/info`）。
-
----
-
-## 配置
-
-在 profile 的 `cordis.patch.yml` 里给本插件条目加 `config`（**不要在 profile 里手写第二段 `insert`**，同一 entry id 插两行会 `duplicate loader entry id`）：
-
-```yaml
-- id: dsh-artifact-linker
-  name: dsh-artifact-linker
-  config:
-    injectRules: true    # 常驻 prompt 铁律
-    clientChips: true    # 是否接管正文点击（false = 只留提示词注入，不动鼠标）
-    allowOutside: true   # 是否允许解析 workspace 之外的路径
-```
-
-| 开关 | 默认 | 置 false / true 的效果 |
-|---|---|---|
-| `injectRules` | `true` | `false` = 不注入 prompt 段，模型不再被要求输出绝对路径 |
-| `clientChips` | `true` | `false` = 纯注入模式，不接管任何鼠标事件 |
-| `allowOutside` | `true` | `false` = 只允许打开 workspace 内的文件 |
-
-**`allowOutside` 要特别说一句**：产物经常落在项目盘（`E:\…`、`D:\…`）而不是 DSH 的 workspace 里，所以默认放开。但它同时是安全闸——挡的是「模型说个 `C:\Windows\System32\xxx.exe` 就帮你点开」这类情况。**自己一个人用保持 `true` 更顺手；给别人用、或者接入不可信模型，改成 `false`。**
-
----
-
-## 它不做什么
-
-这几条是**刻意**的，不是没做完：
-
-1. **不改任何 DOM 节点**。正文由 React 渲染，给文本包一层 `<span>` 就是移动 React 的节点，重渲染时整段白屏。本插件全程只读，可点性是「捕获期 click + 光标位置反查」实现的。
-2. **不接管 markdown 图片与链接语法**。`![](path)` 一旦被改写成芯片，图就不显示了。
-3. **不联网、零遥测**。全部路由只在 `127.0.0.1` 回环可用，外部来源一律 403。
-4. **不 spawn shell**。`reveal`/`open` 走 `execFile(cmd, args)` 参数数组，路径里的 `& | ; %VAR%` 全是字面量，没有命令注入面。
-5. **不猜多候选路径**。搜到多个同名文件时把选择权还给人。
-6. **不保证文件存在**。库里的文件随时可能被删、被移走、被别的进程占用——所以每次打开前都重新 stat，点开发现没了就明说「已不存在」，不会装作没事。
-7. **不给不存在的文件画芯片**。正文里长得像文件名的片段很多（日志摘录、示例路径、报错原文），只看「形状」就画成可点芯片，点开只会得到一句「没解析到」——那比根本不认识更糟。所以判定加了存在性闸门：悬停时先异步 `resolve`，**只有文件真的在**才变手型、画蓝色虚线；确认不是产物的就当普通文字，右键直接放行宿主原生菜单。解析结果进 30 秒 TTL 缓存，反复悬停不重复请求。
-
----
-
-## 排查
-
-| 症状 | 原因与处置 |
-|---|---|
-| 正文文件名不可点 | ① `clientChips` 被置 false；② 扩展名不在白名单（本插件只认已知产物扩展名，避免把 `C:\Windows` 之类误标成产物）；③ 客户端 bundle 没重载——**Ctrl+R 不重载客户端 bundle，必须完全重启 DSH** |
-| 点开提示「解析不到绝对路径」 | 裸文件名不在 workspace 内，且 `allowOutside: false`。先确认文件真实路径，再决定是否放宽 |
-| 点开提示「文件已不存在」 | 路径是真的，文件被删/移了。清单里该行会打上删除线 |
-| 点产物名没反应 | ① 文件不在候选 base 下（访问宿主 `/info` 看 `bases`）；② 扩展名不在白名单（`lib/client.js` 的 `EXT`）；③ 直接看 `/resolve?p=<名字>` 返回的 `reason` |
-| 右键没出本插件菜单 | 该处文字没解析成文件（同上）；**对非产物右键本来就不接管**，出的是宿主原生菜单。0.3.3 起会先确认文件存在——不存在的片段既不画虚线也不接管右键 |
-| 日志里出现 N 份相同输出 | 热重载堆叠了多个实例。**Ctrl+R 无效，必须完全重启 DSH**；同时确认 `window.__dshArtifactLinkerV1.dispose()` 守卫在 |
-
----
-
-## 目录
-
-```
-dsh-artifact-linker/
-├── package.json          # dsh.bundle + dsh.client（两个都要，缺 bundle 装不上）
-├── cordis.patch.yml      # 插件注册补丁（entry id = 包名，唯一）
-├── lib/
-│   ├── index.js          # 宿主：prompt 段 + 8 条回环路由 + 多源路径解析
-│   └── client.js         # 客户端：__ModuleLoader__.load bundle（id 必须 = 包名）
-├── locale/{zh,en}.json
-├── icon.svg
-├── README.md · CHANGELOG.md · LICENSE
-```
-
----
-
-<a id="english-summary"></a>
-## English summary
-
-`dsh-artifact-linker` turns every delivered artifact into a one-click target, so you never copy a path into Explorer again.
-
-- **Host half** injects a resident system-prompt rule: always emit **absolute** artifact paths in tooling, but only the **file name** in user-facing prose.
-- **Client half** makes those names clickable — **left click** reveals and selects the file in Explorer, **right click** opens a seven-item menu: preview in sidebar, open with default app, reveal in Explorer, save as, copy the file itself, copy absolute path, add to composer. Hovering turns the cursor into a pointer only after the file is confirmed to exist. No floating UI, no document scanning, no timers.
-- Bare file names are resolved with a multi-tier fallback (native absolute → session-relative → every known workspace root → recursive same-name search), shrinking the mention from the left when leading words are swallowed. Ambiguous matches are surfaced as candidates rather than guessed.
-- All routes are loopback-only, telemetry-free, and spawn nothing through a shell. The client never mutates React-rendered DOM.
-
-MIT licensed.
-
----
-
-## License
-
-MIT © loyalchiiina