dsh-chat-link-actions 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 regrevia
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,41 @@
-# Temporary Holding Version
+# dsh-chat-link-actions（对话里的文件链接，右键就有动作）
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**对话里的文件路径，右键就能引用回输入框，也能在访达里直接定位。菜单是 App 自己画的，不是系统弹窗。**
+
+长任务跑完，记录里一串路径；想引用回去得手打，想在访达里找到又是另一回事。这个插件把右键菜单接到对话里的文件链接上。
+
+## 三个动作
+
+| 右键文件链接 | 做什么 |
+| --- | --- |
+| **引用到对话** | 插成输入框里的引用芯片（`(</> 文件名)`），和拖文件、`@` 选文件的结果一样 |
+| **在访达中查看** | 打开所在目录并选中这个文件（Windows 用资源管理器；Linux 打开所在目录） |
+| **复制路径** | 绝对路径进剪贴板，直接粘给别的窗口 |
+
+## 认哪些链接
+
+右键不是只认一种写法，常见渲染都走同一条解析：`href` / `src` 里的 `?path=`（图片、附件卡片）、`data-path` 之类的绝对路径属性、`title` 里的路径（宿主自绘的文件链接、文件夹链接）、以及直接写在正文里的绝对路径（光标落在路径上才算）。Windows 的 `C:\...` 与含空格、中文的路径同样能认。
+
+## 装
+
+```sh
+dsh plugin install dsh-chat-link-actions
+```
+
+## 用
+
+鼠标停在对话里的文件链接上，右键。菜单跟着 App 的深浅色和圆角走；Esc 或点别处关掉。
+
+点下菜单之后，如果你又改了输入框或换了会话，插入会停下来不覆盖已写的内容——重新右键一次即可。
+
+芯片由宿主渲染：图和视频进的是附件，文件夹显示成 `文件夹名/`，其他文件按扩展名走同一个芯片。
+
+## 不做什么
+
+- 只认本机存在的绝对路径：网络路径、已删掉的文件，会直接说找不到。
+- 不上传、不打开编辑器；「在访达中查看」只让系统文件管理器选中文件，不修改它。
+- 不改对话内容：插入是一次正常的输入框编辑，可以撤销，也会进草稿。
+
+## 给 agent 的话
+
+要用户引用文件时，照常写绝对路径即可；用户可以用右键引用，不需要另换写法。

package/client.js

@@ -0,0 +1,596 @@
+/*!
+ * dsh-chat-link-actions — client half.
+ *
+ * Right-click menu for file links in the transcript, drawn in the app's own
+ * style (theme tokens, radius, elevation, blur) instead of the WebView's native
+ * menu. Two actions:
+ *
+ *   引用到对话               insert `@path` into the composer as one undoable edit
+ *   在访达/资源管理器中查看    reveal the file in the OS file manager (服务端接口)
+ *
+ * Wiring:
+ * - `inputActions` is a standard prop of session-scoped slots
+ *   (`ctx.uiSession.provide({ props: ["inputActions"] })` in ui-conversation).
+ *   A zero-size occupant of `conversation.input.overlay` captures it per
+ *   session; the menu uses `captureInsertion()` + `insertText(text, span)`,
+ *   which only lands while the captured `draftRev` is still current.
+ * - Revealing needs process access, so it runs in the 服务端半
+ *   (`POST /chat-link-actions`).
+ *
+ * Bundle format: the official client-bundle shape — a lazy-CJS closure
+ * registered with window.__ModuleLoader__.load({ id, factory }).
+ */
+window.__ModuleLoader__.load({
+  id: "dsh-chat-link-actions",
+  factory: (require) => {
+    var module = { exports: {} };
+    var exports = module.exports;
+    "use strict";
+
+    var react = require("react");
+
+    /* ── composer draft handles ─────────────────────────────────────────── */
+
+    /** SessionId -> inputActions for that session's composer. */
+    var drafts = new Map();
+    /** Client root context, kept for the session-scoped chip event. */
+    var rootContext = null;
+    /** Session whose composer rendered most recently. */
+    var activeSession = null;
+
+    function readInputActions(props) {
+      if (props === null || typeof props !== "object") return null;
+      var candidates = [props.inputActions, props.actions, props.input && props.input.actions];
+      for (var i = 0; i < candidates.length; i += 1) {
+        var candidate = candidates[i];
+        if (candidate !== null && typeof candidate === "object" && typeof candidate.insertText === "function") {
+          return candidate;
+        }
+      }
+      return null;
+    }
+
+    /** Invisible occupant: remembers the composer handle of the session it rendered for. */
+    function DraftCapture(props) {
+      var actions = readInputActions(props);
+      var sessionId = props.sessionId;
+      if (actions !== null) {
+        if (sessionId !== undefined) drafts.set(sessionId, actions);
+        activeSession = sessionId === undefined ? activeSession : sessionId;
+      }
+      return null;
+    }
+
+    function draftCandidates() {
+      var ordered = [];
+      var seen = [];
+      function add(sessionId) {
+        if (sessionId === undefined || sessionId === null) return;
+        var actions = drafts.get(sessionId);
+        if (actions === undefined || seen.indexOf(actions) !== -1) return;
+        seen.push(actions);
+        ordered.push({ sessionId: sessionId, actions: actions });
+      }
+      add(activeSession);
+      drafts.forEach(function (_actions, sessionId) {
+        add(sessionId);
+      });
+      return ordered;
+    }
+
+    /** `@path`; a path containing whitespace uses the quoted mention form. */
+    function referenceText(path) {
+      return /[\s"]/.test(path) ? '@"' + path.replace(/"/g, '\\"') + '"' : "@" + path;
+    }
+
+    /** Directory links carry a trailing separator; files never do. */
+    function looksLikeDirectory(path) {
+      return path.charAt(path.length - 1) === "/" || path.charAt(path.length - 1) === "\\";
+    }
+
+    /** Last path segment, the same label the composer's own reference chips show. */
+    function displayLabel(path, directory) {
+      var trimmed = path.replace(/[\\/]+$/, "");
+      var cut = Math.max(trimmed.lastIndexOf("/"), trimmed.lastIndexOf("\\"));
+      var name = cut === -1 ? trimmed : trimmed.slice(cut + 1);
+      if (name === "") name = trimmed;
+      return directory ? name + "/" : name;
+    }
+
+    /**
+     * Insert the reference as the composer's own reference chip (the `(</> name)`
+     * node), which the shell only builds for its file-drop and `@`-picker paths.
+     * The shell owns that insertion behind a session-scoped event; when the event
+     * is not reachable the caller falls back to plain `insertText`.
+     */
+    function insertChip(sessionId, actions, path) {
+      if (rootContext === null || typeof rootContext.sessions !== "object" || rootContext.sessions === null) return false;
+      var binding = null;
+      try {
+        binding = rootContext.sessions.binding(sessionId);
+      } catch (error) {
+        return false;
+      }
+      var sessionContext = binding === null || binding === undefined ? null : binding.ctx;
+      if (sessionContext === null || sessionContext === undefined || typeof sessionContext.emit !== "function") return false;
+      var before = actions.captureInsertion();
+      if (before === null || before === undefined) return false;
+      var directory = looksLikeDirectory(path);
+      var mention = referenceText(path);
+      var reference = {};
+      reference.source = "reference";
+      reference.ref = mention;
+      reference.label = displayLabel(path, directory);
+      reference.appearance = directory ? "folder" : "file";
+      reference.clipboardText = mention;
+      var request = {};
+      request.reference = reference;
+      request.span = before;
+      var delivered = false;
+      try {
+        delivered = sessionContext.emit("slash/input-insert-reference", request);
+      } catch (error) {
+        return false;
+      }
+      if (delivered === false) return false;
+      var after = actions.captureInsertion();
+      if (after === null || after === undefined) return true;
+      return after.start !== before.start || after.end !== before.end;
+    }
+
+    /** Insert the reference into a live composer. Returns true on success. */
+    function quoteIntoComposer(path) {
+      var candidates = draftCandidates();
+      for (var i = 0; i < candidates.length; i += 1) {
+        var sessionId = candidates[i].sessionId;
+        var actions = candidates[i].actions;
+        try {
+          if (typeof actions.captureInsertion !== "function") continue;
+          if (insertChip(sessionId, actions, path)) return true;
+          var span = actions.captureInsertion();
+          if (span === null || span === undefined) continue;
+          if (actions.insertText(referenceText(path) + " ", span) === true) return true;
+        } catch (error) {
+          /* try the next session's composer */
+        }
+      }
+      return false;
+    }
+
+    /* ── resolving a file path out of the clicked node ──────────────────── */
+
+    /** Trim a candidate down to the bare file path a link carries. */
+    function normalizeCandidate(value) {
+      if (typeof value !== "string") return null;
+      var candidate = value.trim();
+      if (candidate === "") return null;
+      if (candidate.charAt(0) === "@") candidate = candidate.slice(1).trim();
+      if (candidate.length > 1 && /^["']/.test(candidate) && /["']$/.test(candidate)) {
+        candidate = candidate.slice(1, -1);
+      }
+      candidate = candidate.replace(/[.,;:!?，。；：！？]+$/u, "");
+      candidate = candidate.replace(/^file:\/\//, "/");
+      if (/^[A-Za-z]:(?!\/)/.test(candidate)) candidate = candidate.slice(0, 2) + "/" + candidate.slice(2);
+      candidate = candidate.replace(/^([A-Za-z]):\//, "$1:/");
+      return looksAbsolute(candidate) ? candidate : null;
+    }
+
+    function looksAbsolute(value) {
+      return typeof value === "string" && (value.charAt(0) === "/" || /^[A-Za-z]:[\\/]/.test(value));
+    }
+
+    /** Highest-confidence marker: the file route an inline link or image points at. */
+    function decodePathFromHref(href) {
+      if (typeof href !== "string" || href === "") return null;
+      try {
+        var url = new URL(href, document.baseURI);
+        var fromQuery = normalizeCandidate(url.searchParams.get("path"));
+        if (fromQuery !== null) return fromQuery;
+        for (var i = 0; i < ["file", "filepath", "abs", "target"].length; i += 1) {
+          var fromNamed = normalizeCandidate(url.searchParams.get(["file", "filepath", "abs", "target"][i]));
+          if (fromNamed !== null) return fromNamed;
+        }
+        if (url.protocol === "file:") return normalizeCandidate(decodeURIComponent(url.pathname));
+        if (url.origin === location.origin && looksAbsolute(url.pathname) && /\.[A-Za-z0-9]{1,6}$/.test(url.pathname)) {
+          return normalizeCandidate(decodeURIComponent(url.pathname));
+        }
+      } catch (error) {
+        /* not a URL shape we handle */
+      }
+      return null;
+    }
+
+    /**
+     * Walk up from the clicked node looking for a link that names a file: href
+     * first, then an absolute `data-*` value, then the reference chip title.
+     */
+    var PATH_ATTRS = ["href", "src"];
+
+    /** `data-*` values that may carry a path, in confidence order. */
+    function datasetPath(node) {
+      var dataset = node.dataset || {};
+      var keys = Object.keys(dataset);
+      for (var i = 0; i < keys.length; i += 1) {
+        if (!/path|file|href|src|dir|folder|abs/i.test(keys[i])) continue;
+        var candidate = normalizeCandidate(dataset[keys[i]]);
+        if (candidate !== null) return candidate;
+      }
+      return null;
+    }
+
+    /** An absolute path written as plain text inside the clicked element. */
+    var PATH_IN_TEXT = /(?:^|[\s"'“”「」()（）\[\]])(@?"?(?:\/|[A-Za-z]:[\\/])[^\s"'“”「」<>，。；：！？]*)/u;
+
+    /** 正文纯文本里，取光标落点所在的那段路径。 */
+    function pathFromCaret(x, y) {
+      if (typeof document.caretRangeFromPoint !== "function") return null;
+      var range = null;
+      try {
+        range = document.caretRangeFromPoint(x, y);
+      } catch (error) {
+        return null;
+      }
+      if (range === null || range.startContainer === null || range.startContainer.nodeType !== 3) return null;
+      var data = range.startContainer.data;
+      var offset = Math.min(range.startOffset, data.length);
+      var bounds = [];
+      var matcher = new RegExp(PATH_IN_TEXT.source, "gu");
+      var hit = null;
+      while ((hit = matcher.exec(data)) !== null) {
+        bounds.push({ text: hit[0], start: hit.index, end: hit.index + hit[0].length });
+        if (hit[0].length === 0) matcher.lastIndex += 1;
+      }
+      for (var i = 0; i < bounds.length; i += 1) {
+        if (offset >= bounds[i].start && offset <= bounds[i].end) {
+          return normalizeCandidate(bounds[i].text);
+        }
+      }
+      return null;
+    }
+
+    /**
+     * Walk up from the clicked node looking for a file link: href/src first, then
+     * an absolute `data-*` value, then a title, then the element's own text. The
+     * text pass covers paths the transcript renders as plain prose.
+     */
+    function pathFromNode(start, point) {
+      for (var node = start; node !== null && node !== undefined && node !== document.body; node = node.parentElement) {
+        if (node.nodeType !== 1) continue;
+        for (var a = 0; a < PATH_ATTRS.length; a += 1) {
+          var fromHref = decodePathFromHref(node.getAttribute(PATH_ATTRS[a]));
+          if (fromHref !== null) return fromHref;
+        }
+        var fromData = datasetPath(node);
+        if (fromData !== null) return fromData;
+        var fromTitle = normalizeCandidate(node.getAttribute("title"));
+        if (fromTitle !== null) return fromTitle;
+      }
+      if (point !== null && point !== undefined) {
+        var fromCaret = pathFromCaret(point.x, point.y);
+        if (fromCaret !== null) return fromCaret;
+      }
+      return null;
+    }
+
+    /* ── wording ────────────────────────────────────────────────────────── */
+
+    function isMac() {
+      return /Mac/i.test(navigator.platform || navigator.userAgent || "");
+    }
+
+    /* ── menu styling: project tokens only, no new palette ──────────────── */
+
+    var STYLE_ID = "dsh-chat-link-actions-style";
+    var CSS = [
+      ".dcla-layer{position:fixed;inset:0;z-index:1100;pointer-events:none;}",
+      ".dcla-menu{position:fixed;z-index:1100;pointer-events:auto;box-sizing:border-box;padding:6px;min-width:200px;",
+      "max-width:min(320px,calc(100vw - 24px));background:var(--dsw-specific-menu,rgba(30,32,38,.96));",
+      "backdrop-filter:var(--dsw-menu-backdrop-filter,blur(20px) saturate(180%));",
+      "-webkit-backdrop-filter:var(--dsw-menu-backdrop-filter,blur(20px) saturate(180%));",
+      "border:1px solid var(--dsw-elevation-stroke-color,rgba(255,255,255,.08));",
+      "border-radius:var(--dsw-radius-lg,12px);box-shadow:var(--dsw-elevation-prominent,0 12px 32px rgba(0,0,0,.4));",
+      "font-family:var(--dsw-font-family,system-ui),-apple-system,\"PingFang SC\",\"Microsoft YaHei\",sans-serif;",
+      "font-size:var(--dsw-font-xs-13,13px);line-height:20px;",
+      "color:var(--dsw-alias-label-primary,#f2f3f5);user-select:none;-webkit-user-select:none;}",
+      ".dcla-path{padding:2px 8px 6px;color:var(--dsw-alias-label-tertiary,rgba(242,243,245,.45));",
+      "font-size:var(--dsw-font-xxs-12,12px);white-space:nowrap;overflow:hidden;text-overflow:ellipsis;direction:rtl;text-align:left;}",
+      ".dcla-sep{height:1px;margin:2px 6px 6px;background:var(--dsw-alias-border-l2,rgba(255,255,255,.08));}",
+      ".dcla-item{display:flex;align-items:center;gap:8px;width:100%;box-sizing:border-box;padding:6px 8px;",
+      "border:0;border-radius:var(--dsw-radius-md,8px);background:transparent;color:inherit;font:inherit;",
+      "text-align:left;cursor:default;white-space:nowrap;overflow:hidden;}",
+      ".dcla-item[data-active=true]{background:var(--dsw-alias-interactive-bg-hover,rgba(255,255,255,.08));}",
+      ".dcla-item:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,#4c8dff);outline-offset:-1px;}",
+      ".dcla-glyph{flex:none;display:inline-flex;width:16px;height:16px;align-items:center;justify-content:center;",
+      "color:var(--dsw-alias-label-secondary,rgba(242,243,245,.65));}",
+      ".dcla-label{flex:1 1 auto;overflow:hidden;text-overflow:ellipsis;}",
+      ".dcla-toast{position:fixed;left:50%;bottom:32px;transform:translateX(-50%);z-index:1100;",
+      "padding:6px 12px;border-radius:var(--dsw-radius-md,8px);background:var(--dsw-elevation-panel,rgba(30,32,38,.96));",
+      "border:1px solid var(--dsw-elevation-stroke-color,rgba(255,255,255,.08));color:var(--dsw-alias-label-primary,#f2f3f5);",
+      "font:inherit;font-size:var(--dsw-font-xs-13,13px);box-shadow:var(--dsw-elevation-panel,0 8px 24px rgba(0,0,0,.3));}",
+      "@media (prefers-reduced-motion:no-preference){.dcla-menu{animation:dcla-in 90ms ease-out;}}",
+      "@keyframes dcla-in{from{opacity:0;transform:translateY(-2px);}to{opacity:1;transform:none;}}"
+    ].join("");
+
+    function ensureStyle() {
+      if (document.getElementById(STYLE_ID) !== null) return;
+      var style = document.createElement("style");
+      style.id = STYLE_ID;
+      style.textContent = CSS;
+      document.head.appendChild(style);
+    }
+
+    /* ── icons: 16px outline, currentColor ──────────────────────────────── */
+
+    var ICONS = {
+      quote: ["M2.5 4.5h11M2.5 8h7M2.5 11.5h9"],
+      reveal: ["M2 5.7A1.6 1.6 0 0 1 3.6 4.1h2.2l1.2 1.5h4.6A1.6 1.6 0 0 1 13.2 7.2v4.6A1.6 1.6 0 0 1 11.6 13.4h-8A1.6 1.6 0 0 1 2 11.8V5.7Z"],
+      copy: ["M5.6 5.6h6.8v6.8H5.6z", "M10.4 5.6V4.2A1.6 1.6 0 0 0 8.8 2.6H4.2A1.6 1.6 0 0 0 2.6 4.2v4.6A1.6 1.6 0 0 0 4.2 10.4h1.4"]
+    };
+
+    function icon(name) {
+      var svg = document.createElementNS("http://www.w3.org/2000/svg", "svg");
+      svg.setAttribute("width", "16");
+      svg.setAttribute("height", "16");
+      svg.setAttribute("viewBox", "0 0 16 16");
+      svg.setAttribute("fill", "none");
+      svg.setAttribute("aria-hidden", "true");
+      var paths = ICONS[name];
+      for (var i = 0; i < paths.length; i += 1) {
+        var path = document.createElementNS("http://www.w3.org/2000/svg", "path");
+        path.setAttribute("d", paths[i]);
+        path.setAttribute("stroke", "currentColor");
+        path.setAttribute("stroke-width", "1.3");
+        path.setAttribute("stroke-linecap", "round");
+        path.setAttribute("stroke-linejoin", "round");
+        svg.appendChild(path);
+      }
+      return svg;
+    }
+
+    /* ── menu ───────────────────────────────────────────────────────────── */
+
+    var open = null;
+
+    function closeMenu(restoreFocus) {
+      if (open === null) return;
+      var state = open;
+      open = null;
+      document.removeEventListener("pointerdown", onPointerDown, true);
+      document.removeEventListener("keydown", onKeyDown, true);
+      document.removeEventListener("contextmenu", onContextDuringMenu, true);
+      window.removeEventListener("resize", onViewportChange, true);
+      window.removeEventListener("scroll", onViewportChange, true);
+      if (state.layer.parentNode !== null) state.layer.parentNode.removeChild(state.layer);
+      if (restoreFocus === true && state.restoreFocus !== null && document.contains(state.restoreFocus)) {
+        state.restoreFocus.focus({ preventScroll: true });
+      }
+    }
+
+    function onPointerDown(event) {
+      if (open === null || open.layer.contains(event.target)) return;
+      closeMenu(false);
+    }
+
+    function onContextDuringMenu(event) {
+      if (open !== null && open.layer.contains(event.target)) {
+        event.preventDefault();
+        event.stopPropagation();
+      }
+    }
+
+    function onKeyDown(event) {
+      if (open === null) return;
+      if (event.key === "Escape") {
+        event.preventDefault();
+        event.stopPropagation();
+        closeMenu(true);
+        return;
+      }
+      if (event.key === "ArrowDown" || event.key === "ArrowUp") {
+        event.preventDefault();
+        event.stopPropagation();
+        var count = open.items.length;
+        var step = event.key === "ArrowDown" ? 1 : -1;
+        open.index = ((open.index + step) % count + count) % count;
+        paintActive();
+        return;
+      }
+      if (event.key === "Enter" || event.key === " ") {
+        var item = open.items[open.index];
+        if (item === undefined) return;
+        event.preventDefault();
+        event.stopPropagation();
+        closeMenu(false);
+        item.run();
+      }
+    }
+
+    function onViewportChange() {
+      if (open === null) return;
+      placeMenu(open.panel, open.x, open.y);
+    }
+
+    /** Place the panel at the pointer, flipped inward at the viewport edges. */
+    function placeMenu(panel, x, y) {
+      var margin = 8;
+      var rect = panel.getBoundingClientRect();
+      var left = x;
+      var top = y;
+      if (left + rect.width > window.innerWidth - margin) left = Math.max(margin, x - rect.width);
+      if (top + rect.height > window.innerHeight - margin) top = Math.max(margin, y - rect.height);
+      panel.style.left = Math.round(left) + "px";
+      panel.style.top = Math.round(top) + "px";
+    }
+
+    function paintActive() {
+      if (open === null) return;
+      for (var i = 0; i < open.buttons.length; i += 1) {
+        open.buttons[i].setAttribute("data-active", i === open.index ? "true" : "false");
+      }
+    }
+
+    function buildMenu(path, items) {
+      var panel = document.createElement("div");
+      panel.className = "dcla-menu";
+      panel.setAttribute("role", "menu");
+      panel.setAttribute("aria-label", "文件操作");
+
+      var caption = document.createElement("div");
+      caption.className = "dcla-path";
+      caption.title = path;
+      caption.textContent = path;
+      panel.appendChild(caption);
+
+      var separator = document.createElement("div");
+      separator.className = "dcla-sep";
+      panel.appendChild(separator);
+
+      var buttons = [];
+      items.forEach(function (item, position) {
+        var button = document.createElement("button");
+        button.type = "button";
+        button.className = "dcla-item";
+        button.setAttribute("role", "menuitem");
+        button.setAttribute("data-active", position === 0 ? "true" : "false");
+
+        var glyph = document.createElement("span");
+        glyph.className = "dcla-glyph";
+        glyph.appendChild(icon(item.icon));
+        button.appendChild(glyph);
+
+        var label = document.createElement("span");
+        label.className = "dcla-label";
+        label.textContent = item.label;
+        button.appendChild(label);
+
+        button.addEventListener("mouseenter", function () {
+          if (open === null) return;
+          open.index = position;
+          paintActive();
+        });
+        button.addEventListener("click", function () {
+          closeMenu(false);
+          item.run();
+        });
+        panel.appendChild(button);
+        buttons.push(button);
+      });
+
+      return { panel: panel, buttons: buttons };
+    }
+
+    function openMenu(path, x, y) {
+      closeMenu(false);
+      ensureStyle();
+
+      var items = [
+        { id: "quote", label: "引用到对话", icon: "quote", run: function () {
+          if (!quoteIntoComposer(path)) {
+            navigator.clipboard.writeText(referenceText(path)).then(function () {
+              toast("已复制引用");
+            }, function () {});
+          }
+        } },
+        { id: "reveal", label: isMac() ? "在访达中查看" : "在文件管理器中查看", icon: "reveal", run: function () {
+          reveal(path);
+        } },
+        { id: "copy", label: "复制路径", icon: "copy", run: function () {
+          navigator.clipboard.writeText(path).then(function () {
+            toast("已复制路径");
+          }, function () {});
+        } }
+      ];
+
+      var layer = document.createElement("div");
+      layer.className = "dcla-layer";
+      var built = buildMenu(path, items);
+      layer.appendChild(built.panel);
+      document.body.appendChild(layer);
+
+      var state = {};
+      state.layer = layer;
+      state.panel = built.panel;
+      state.buttons = built.buttons;
+      state.items = items;
+      state.index = 0;
+      state.path = path;
+      state.x = x;
+      state.y = y;
+      state.restoreFocus = document.activeElement instanceof HTMLElement ? document.activeElement : null;
+      open = state;
+      placeMenu(built.panel, x, y);
+      document.addEventListener("pointerdown", onPointerDown, true);
+      document.addEventListener("keydown", onKeyDown, true);
+      document.addEventListener("contextmenu", onContextDuringMenu, true);
+      window.addEventListener("resize", onViewportChange, true);
+      window.addEventListener("scroll", onViewportChange, true);
+    }
+
+    /* ── small toast for the actions that do not change the screen ──────── */
+
+    var toastTimer = null;
+    var toastNode = null;
+
+    function toast(text) {
+      ensureStyle();
+      if (toastNode !== null && toastNode.parentNode !== null) toastNode.parentNode.removeChild(toastNode);
+      if (toastTimer !== null) clearTimeout(toastTimer);
+      toastNode = document.createElement("div");
+      toastNode.className = "dcla-toast";
+      toastNode.setAttribute("role", "status");
+      toastNode.textContent = text;
+      document.body.appendChild(toastNode);
+      toastTimer = setTimeout(function () {
+        if (toastNode !== null && toastNode.parentNode !== null) toastNode.parentNode.removeChild(toastNode);
+        toastNode = null;
+        toastTimer = null;
+      }, 1400);
+    }
+
+    /** Ask the 服务端 to select the file in the OS file manager. */
+    function reveal(path) {
+      fetch("/chat-link-actions?action=reveal&path=" + encodeURIComponent(path), { method: "POST" }).catch(function () {
+        toast("无法打开文件管理器");
+      });
+    }
+
+    /* ── interception ───────────────────────────────────────────────────── */
+
+    function onContextMenu(event) {
+      if (!(event.target instanceof Element)) return;
+      var target = event.target;
+      var path = pathFromNode(target, { x: event.clientX, y: event.clientY });
+      if (path === null) return;
+      event.preventDefault();
+      event.stopPropagation();
+      openMenu(path, event.clientX, event.clientY);
+    }
+
+    /* ── plugin entry ───────────────────────────────────────────────────── */
+
+    var inject = ["slots", "sessions"];
+
+    function apply(ctx) {
+      rootContext = ctx;
+      ctx.effect(function () {
+        document.addEventListener("contextmenu", onContextMenu, true);
+        return function () {
+          document.removeEventListener("contextmenu", onContextMenu, true);
+          closeMenu(false);
+        };
+      });
+      ctx.effect(function () {
+        return ctx.slots.inject("conversation.input.overlay", function () {
+          return ctx.slots.register({
+            name: "conversation.input.overlay",
+            id: "chat-link-actions",
+            order: 900
+          }, DraftCapture);
+        });
+      });
+    }
+
+    module.exports = { inject: inject, apply: apply };
+    return module.exports;
+  }
+});

package/cordis.patch.yml

@@ -0,0 +1,7 @@
+# dsh-chat-link-actions bundle patch
+#
+# One insert row; the entry `name` must equal the package name so the client
+# modules scan resolves ./client and serves it as the plugin's browser bundle.
+- insert:
+    - id: chat-link-actions
+      name: 'dsh-chat-link-actions'

package/index.js

@@ -0,0 +1,75 @@
+/**
+ * dsh-chat-link-actions — 服务端半：按请求在系统文件管理器里定位文件。
+ *
+ * 只做一件事：在文件管理器里选中文件本身。界面由 client.js 绘制。
+ *
+ * Security posture mirrors the other installed bundles: the connection's own
+ * request fence rejects cross-origin callers, the path must be absolute, and
+ * the argv is never shell-interpolated.
+ */
+
+import { spawn } from 'node:child_process'
+import { stat } from 'node:fs/promises'
+import { dirname, isAbsolute } from 'node:path'
+
+/** Services required before mounting: route registration + the web runtime fence. */
+export const inject = ['webServer', 'connection']
+
+/** Paths that are not a local file on this machine cannot be revealed. */
+function requireAbsolute(path) {
+  if (typeof path !== 'string' || path === '' || !isAbsolute(path)) {
+    throw new Error('absolute path required')
+  }
+  return path
+}
+
+/**
+ * The argv that selects `path` in the platform's file manager. Linux has no
+ * select protocol, so its containing directory is opened instead.
+ */
+function revealCommand(path, platform = process.platform) {
+  switch (platform) {
+    case 'darwin':
+      return { command: 'open', args: ['-R', path] }
+    case 'win32':
+      return { command: 'explorer.exe', args: [`/select,${path}`] }
+    case 'android':
+      return { command: 'termux-open', args: [dirname(path)] }
+    default:
+      return { command: 'xdg-open', args: [dirname(path)] }
+  }
+}
+
+function reply(res, status, body) {
+  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8' })
+  res.end(JSON.stringify(body))
+}
+
+export function apply(ctx) {
+  const fence = (req) => ctx.connection.requestRejection(req) === undefined
+
+  ctx.effect(() => ctx.webServer.register({
+    kind: 'prefix',
+    path: '/chat-link-actions',
+    handler: async (req, res) => {
+      if (!fence(req)) return reply(res, 403, { ok: false, error: 'forbidden' })
+      if (req.method !== 'POST') return reply(res, 405, { ok: false, error: 'method' })
+      try {
+        const url = new URL(req.url ?? '/', 'http://dsh.internal')
+        if (url.searchParams.get('action') !== 'reveal') {
+          return reply(res, 400, { ok: false, error: 'unknown action' })
+        }
+        const path = requireAbsolute(url.searchParams.get('path'))
+        const info = await stat(path).catch(() => null)
+        if (info === null) return reply(res, 404, { ok: false, error: 'not-found' })
+        const { command, args } = revealCommand(path)
+        const child = spawn(command, args, { detached: true, stdio: 'ignore' })
+        child.on('error', () => {})
+        child.unref()
+        return reply(res, 200, { ok: true })
+      } catch (error) {
+        return reply(res, 400, { ok: false, error: String(error?.message ?? error) })
+      }
+    },
+  }), 'dsh-chat-link-actions: reveal route')
+}

package/package.json

@@ -1,6 +1,52 @@
 {
   "name": "dsh-chat-link-actions",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "Right-click actions on file links in the DSH transcript: quote the path into the composer, or reveal the file in the OS file manager. Menus are drawn in the app's own style, never the system one.",
+  "type": "module",
+  "main": "index.js",
+  "exports": {
+    ".": "./index.js",
+    "./client": {
+      "default": "./client.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE",
+    "icon.png"
+  ],
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "dsh-plugin",
+    "link-actions",
+    "file-link",
+    "quote-path",
+    "reveal-in-finder"
+  ],
+  "license": "MIT",
+  "engines": {
+    "node": ">=20",
+    "dsh": ">=0.2.0"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-connection"
+      ],
+      "platform": "web"
+    }
+  },
+  "author": "regrevia",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/regrevia/dsh-chat-link-actions.git"
+  }
+}