dsh-long-plugins 1.3.9 → 2.0.0

package/lib/index.js

@@ -503,36 +503,95 @@ async function docxHtml(buf) {
   }
 }
 
-/** Render the first sheet of a .xlsx as an HTML table. */
+/** Excel 列号（A=1, AA=27）。 */
+function colToNum(letters) {
+  let n = 0;
+  for (const ch of String(letters).toUpperCase()) n = n * 26 + (ch.charCodeAt(0) - 64);
+  return n;
+}
+
+/** 渲染 .xlsx 为 HTML 表格（多工作表 + 合并单元格 + 表头样式，bound 保持预览量）。 */
 async function xlsxHtml(buf) {
   try {
     const workbook = new ExcelJS.Workbook();
     await workbook.xlsx.load(buf);
-    const sheet = workbook.worksheets[0];
-    if (!sheet) return "<p>（空工作簿）</p>";
-    const rows = [];
-    const limit = 500; // cell cap to keep the preview bounded
-    let rendered = 0;
-    for (const row of sheet.eachRow({ includeEmpty: false })) {
-      if (rendered >= limit) break;
-      const cells = [];
-      for (let col = 1; col <= Math.min(row.cellCount, 32); col += 1) {
-        const cell = row.getCell(col);
-        let value = cell.value;
-        if (value !== null && typeof value === "object") {
-          if (value.richText) value = value.richText.map((t) => t.text).join("");
-          else if (value.text !== undefined) value = value.text;
-          else if (value.result !== undefined) value = value.result;
-          else value = "";
+    const sheets = workbook.worksheets.slice(0, 3);
+    if (sheets.length === 0) return "<p>（空工作簿）</p>";
+    let html = "";
+    for (const sheet of sheets) {
+      // 合并范围：topLeft -> {rowspan, colspan}；并记录被覆盖的格子。
+      // exceljs 版本差异：mergedCells 可能是 getter；用 model.merges 兜底（格式 "A1:C1"）。
+      const merges = (sheet.mergedCells && sheet.mergedCells.length ? sheet.mergedCells : (sheet.model && sheet.model.merges)) || [];
+      const merged = new Map();
+      const covered = new Set();
+      for (const range of merges) {
+        const m = /^([A-Z]+)(\d+):([A-Z]+)(\d+)$/.exec(String(range));
+        if (!m) continue;
+        const c1 = colToNum(m[1]), r1 = parseInt(m[2], 10), c2 = colToNum(m[3]), r2 = parseInt(m[4], 10);
+        merged.set(`${r1},${c1}`, { rowspan: r2 - r1 + 1, colspan: c2 - c1 + 1 });
+        for (let rr = r1; rr <= r2; rr++) for (let cc = c1; cc <= c2; cc++) if (!(rr === r1 && cc === c1)) covered.add(`${rr},${cc}`);
+      }
+      const rowLimit = 500, colLimit = 32;
+      const rows = [];
+      sheet.eachRow({ includeEmpty: false }, (row, rowNumber) => {
+        if (rows.length >= rowLimit) return;
+        const rn = rowNumber;
+        const cells = [];
+        for (let col = 1; col <= Math.min(row.cellCount, colLimit); col += 1) {
+          if (covered.has(`${rn},${col}`)) continue;
+          let value = row.getCell(col).value;
+          if (value !== null && typeof value === "object") {
+            if (value.richText) value = value.richText.map((t) => t.text).join("");
+            else if (value.text !== undefined) value = value.text;
+            else if (value.result !== undefined) value = value.result;
+            else value = "";
+          }
+          const span = merged.get(`${rn},${col}`);
+          const attr = span ? (span.colspan > 1 ? ` colspan="${span.colspan}"` : "") + (span.rowspan > 1 ? ` rowspan="${span.rowspan}"` : "") : "";
+          cells.push(`<td${attr}>${escHtml(value ?? "")}</td>`);
         }
-        cells.push(`<td>${escHtml(value ?? "")}</td>`);
+        rows.push(`<tr>${cells.join("")}</tr>`);
+      });
+      const header = rows.length > 0 ? `<thead>${rows[0].replace(/<td/g, "<th").replace(/<\/td>/g, "</th>")}</thead>` : "";
+      const body = rows.length > 1 ? `<tbody>${rows.slice(1).join("")}</tbody>` : "";
+      html += `<div class="sheet"><h3>${escHtml(sheet.name || "Sheet")}</h3><table>${header}${body}</table></div>`;
+    }
+    const css = "<style>table{border-collapse:collapse;width:100%;font-size:12px;margin-bottom:14px}th,td{border:1px solid #cfd5dd;padding:4px 8px;white-space:pre-wrap;word-break:break-all;vertical-align:top}thead th{background:#f0f3f8;font-weight:600;text-align:left}.sheet h3{font-size:14px;margin:8px 0 4px;color:#1f3a5f}</style>";
+    return `${css}${html}`;
+  } catch {
+    return null;
+  }
+}
+
+/** 解析 CSV/TSV 文本为 HTML 表格（首行当作表头，bound）。 */
+function csvHtml(text) {
+  try {
+    const limit = 500;
+    const rows = [];
+    const parse = (line) => {
+      const out = [];
+      let cur = "", inQ = false;
+      for (let i = 0; i < line.length; i += 1) {
+        const ch = line[i];
+        if (inQ) {
+          if (ch === '"') { if (line[i + 1] === '"') { cur += '"'; i += 1; } else inQ = false; }
+          else cur += ch;
+        } else if (ch === '"') { inQ = true; }
+        else if (ch === "," || ch === "\t") { out.push(cur); cur = ""; }
+        else cur += ch;
       }
-      rows.push(`<tr>${cells.join("")}</tr>`);
-      rendered += 1;
+      out.push(cur);
+      return out;
+    };
+    for (const line of String(text || "").split(/\r?\n/)) {
+      if (rows.length >= limit) break;
+      if (line.trim() === "") continue;
+      rows.push(parse(line));
     }
-    const header = rows.length > 0 ? `<thead><tr>${rows[0]}</tr></thead>` : "";
-    const body = rows.length > 1 ? `<tbody>${rows.slice(1).join("")}</tbody>` : "";
-    const css = "<style>table{border-collapse:collapse;width:100%;font-size:12px}td{border:1px solid #d0d0d0;padding:4px 8px;white-space:pre-wrap;word-break:break-all}</style>";
+    if (rows.length === 0) return "<p>（空）</p>";
+    const header = `<thead><tr>${rows[0].map((c) => `<th>${escHtml(c)}</th>`).join("")}</tr></thead>`;
+    const body = rows.length > 1 ? `<tbody>${rows.slice(1).map((r) => `<tr>${r.map((c) => `<td>${escHtml(c)}</td>`).join("")}</tr>`).join("")}</tbody>` : "";
+    const css = "<style>table{border-collapse:collapse;width:100%;font-size:12px}th,td{border:1px solid #cfd5dd;padding:4px 8px;white-space:pre-wrap;word-break:break-all;vertical-align:top}thead th{background:#f0f3f8;font-weight:600;text-align:left}</style>";
     return `${css}<table>${header}${body}</table>`;
   } catch {
     return null;
@@ -603,9 +662,36 @@ async function officePreviewHtml(name, buffer) {
   if (ext === ".docx") return docxHtml(buffer);
   if (ext === ".xlsx") return xlsxHtml(buffer);
   if (ext === ".pptx") return pptxHtml(buffer);
+  if (ext === ".csv" || ext === ".tsv") return csvHtml(buffer.toString("utf8"));
   return null;
 }
 
+/** 仅保留毛玻璃配置允许字段并 clamp，避免写入任意/超大内容。背景图只收 data:image/*;base64 且限 2MB。 */
+function sanitizeGlass(input) {
+  const out = {};
+  if ("enabled" in input) out.enabled = input.enabled === true;
+  if ("blur" in input) { const n = Number(input.blur); out.blur = Number.isFinite(n) ? Math.max(0, Math.min(80, Math.round(n))) : undefined; }
+  if ("mask" in input) { const n = Number(input.mask); out.mask = Number.isFinite(n) ? Math.max(0, Math.min(0.95, n)) : undefined; }
+  if ("color" in input) out.color = /^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/.test(String(input.color)) ? String(input.color) : undefined;
+  const sanitizeUri = (v) => { const s = String(v ?? ""); return (/^data:image\/(png|jpe?g|webp|gif);base64,/.test(s) && s.length <= 2 * 1024 * 1024 + 256) ? s : undefined; };
+  if ("bgImage" in input) out.bgImage = sanitizeUri(input.bgImage);
+  // 会话区/输入区各自独立罩色+罩强度
+  if (input.zone && typeof input.zone === "object") {
+    const zo = {};
+    for (const key of ["session", "input"]) {
+      const z = input.zone[key];
+      if (z && typeof z === "object") {
+        const o = {};
+        if ("color" in z) o.color = /^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/.test(String(z.color)) ? String(z.color) : undefined;
+        if ("mask" in z) { const n = Number(z.mask); o.mask = Number.isFinite(n) ? Math.max(0, Math.min(0.95, n)) : undefined; }
+        zo[key] = Object.fromEntries(Object.entries(o).filter(([, v]) => v !== undefined));
+      }
+    }
+    if (Object.keys(zo).length) out.zone = zo;
+  }
+  return Object.fromEntries(Object.entries(out).filter(([, v]) => v !== undefined));
+}
+
 export function createHandlers(options = {}) {
   const root = resolve(options.root || resolveUploadRoot());
   const maxFileBytes = positiveInteger(options.maxFileBytes, resolveMaxFileBytes());
@@ -819,9 +905,11 @@ export function createHandlers(options = {}) {
       const buffer = await readFile(full);
       const binary = buffer.subarray(0, 8192).includes(0);
       const truncated = buffer.length > PREVIEW_LIMIT;
-      const officeHtml = binary && OFFICE_EXTS.has(extname(name).toLowerCase())
+      // Office 二进制（docx/xlsx/pptx）或 CSV/TSV 文本 → 表格 HTML 预览
+      const tableHtml = (binary && OFFICE_EXTS.has(extname(name).toLowerCase())) || /\.(csv|tsv)$/i.test(name)
         ? await officePreviewHtml(name, buffer)
         : undefined;
+      const officeHtml = tableHtml;
       // Markdown 返回内联样式后的完整 HTML 片段（含 MD_CSS），供前端 srcDoc 渲染真实效果，
       // 避免内嵌带独立头部的 workspace-preview 页面导致按钮重复、放大失效。
       const mdHtml = !binary && /\.(md|markdown)$/i.test(name)
@@ -1270,7 +1358,274 @@ window.addEventListener('resize',function(){ try{ if(fitMode) zoomFit(); else ap
     }
   };
 
-  return { root, maxFileBytes, totalMaxBytes, api, download, preview, workspaceList, workspaceFile, workspacePreview, workspaceBrowse, workspaceDelete, workspaceRename, workspaceSave, docxPreviewPage, docxPreviewAsset, pptxPreviewPage };
+  // ---- xlsx 真实预览（浏览器端渲染，所见即所得）----
+  // 返回一个自包含 HTML：引 SheetJS(xlsx.full.min.js) 解析 .xlsx，转换成 x-spreadsheet
+  // 的 data 结构，用 x-spreadsheet 渲染成真实电子表格网格（行列表头/合并/冻结/缩放）。
+  // 仅供参考；纯浏览器端渲染，不依赖 NAS 端转换，效果与 Excel/浏览器一致。
+  const xlsxPreviewPage = async (req, res) => {
+    try {
+      requireTrusted(req);
+      if (req.method !== "GET" && req.method !== "HEAD") {
+        methodNotAllowed(res, ["GET", "HEAD"]);
+        return;
+      }
+      const rel = (() => {
+        try {
+          return decodeURIComponent(new URL(req.url || "/", "http://dsh.internal").searchParams.get("path") || "");
+        } catch {
+          return "";
+        }
+      })();
+      // 只允许 .xlsx（避免把别的文件喂给 SheetJS/x-spreadsheet）
+      if (!/\.xlsx$/i.test(rel)) throw new HttpError(400, "only .xlsx supported");
+      const full = safeResolve(workspaceRoot, rel);
+      if (full === undefined) throw new HttpError(400, "invalid path");
+      const info = await stat(full);
+      if (!info.isFile()) throw new HttpError(400, "not a regular file");
+      const name = rel.split("/").pop() || "file";
+      const downloadHref = `workspace-file?path=${encodeURIComponent(rel)}&download=1`;
+      const inlineHref = `workspace-file?path=${encodeURIComponent(rel)}&inline=1`;
+      const assetBase = "/api/dsh-uploads/xlsx-preview-asset";
+      res.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
+      res.end(`<!DOCTYPE html>
+<html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
+<title>预览 - ${escapeHtml(name)}</title>
+<style>
+ html,body{margin:0;height:100%;background:#1a2530;color:#e5e7eb;font-family:-apple-system,"PingFang SC","Microsoft YaHei",sans-serif}
+ .bar{position:sticky;top:0;z-index:20;display:flex;gap:8px;padding:10px 14px;align-items:center;background:#1a2530;border-bottom:1px solid #2c3a47;flex-wrap:wrap}
+ .bar strong{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:#e5e7eb;font-size:13px}
+ .bar button,.bar a{padding:6px 12px;border:1px solid #2c3a47;border-radius:8px;background:transparent;color:#e5e7eb;text-decoration:none;font-size:13px;cursor:pointer;white-space:nowrap}
+ .tabs{display:flex;gap:6px;padding:8px 14px;background:#141f2b;border-bottom:1px solid #2c3a47;overflow:auto}
+ .tabs button{padding:4px 12px;border:1px solid #2c3a47;border-radius:7px;background:transparent;color:#9ca3af;font-size:12px;cursor:pointer;white-space:nowrap;flex:none}
+ .tabs button.on{background:#2563eb;color:#fff;border-color:#2563eb}
+ // 静态图：整表一次性画到 canvas。拖动=移动/滚动一张画好的图，不重绘；放大用 CSS width/height 变化（与 ppt 预览一致）。
+ #stage{position:relative;overflow:auto;height:calc(100vh - 48px);background:#e9ebee;padding:18px}
+ #wrap{display:block;width:max-content;margin:0 auto;background:#fff;box-shadow:0 2px 14px rgba(0,0,0,.18)}
+ canvas{display:block}
+ #msg{color:#9ca3af;padding:24px;text-align:center;font-size:14px;font-family:inherit}
+</style>
+</head><body>
+<div class="bar">
+  <strong>${escapeHtml(name)}</strong>
+  <span style="display:flex;gap:4px;align-items:center">
+    <button type="button" title="缩小" onclick="zoomBy(0.8)">−</button>
+    <button type="button" title="放大" onclick="zoomBy(1.25)">＋</button>
+    <button type="button" title="适合宽度" onclick="zoomFit()">适合</button>
+  </span>
+  <a href="${downloadHref}" download>下载</a>
+  <button type="button" onclick="closePreview()">✕ 关闭</button>
+</div>
+<div class="tabs" id="tabs"></div>
+<div id="stage"><div id="wrap"><canvas id="canvas"></canvas><div id="msg">加载中…</div></div></div>
+<script src="${assetBase}?f=xlsx.full.min.js"></script>
+<script>
+function closePreview(){
+  try{ if(window.self!==window.top&&window.parent){ window.parent.postMessage({type:'dsh-close-preview'},location.origin); return; } }catch(e){ /* 跨域忽略 */ }
+  window.close();
+}
+const stage=document.getElementById('stage');
+const canvas=document.getElementById('canvas');
+const wrap=document.getElementById('wrap');
+const msg=document.getElementById('msg');
+const tabsEl=document.getElementById('tabs');
+const dpr=Math.min(window.devicePixelRatio||1, 2);
+const HDR=26, IDXW=48, ROWH=26;
+const FONT='13px -apple-system,"PingFang SC","Microsoft YaHei",sans-serif';
+const FONTB='bold 13px -apple-system,"PingFang SC","Microsoft YaHei",sans-serif';
+var zoom=1, fitMode=true, natW=800, natH=600, wb=null, sheetIdx=0;
+function fmt(v){
+  if(v===null||v===undefined) return '';
+  if(v instanceof Date){ const p=(n)=>String(n).padStart(2,'0'); return v.getFullYear()+'-'+p(v.getMonth()+1)+'-'+p(v.getDate()); }
+  return String(v);
+}
+function colLetter(c){ c+=1; var s=''; while(c>0){ var m=(c-1)%26; s=String.fromCharCode(65+m)+s; c=(c-m-1)/26; } return s; }
+function applyZoom(){
+  canvas.style.width=Math.round(natW*zoom)+'px';
+  canvas.style.height=Math.round(natH*zoom)+'px';
+}
+function zoomFit(){
+  zoom=Math.min(1,((stage.clientWidth-36)||600)/natW); fitMode=true; applyZoom();
+}
+function zoom100(){ zoom=1; fitMode=false; applyZoom(); }
+function zoomBy(f){ zoom=Math.min(8,Math.max(0.05,zoom*f)); fitMode=false; applyZoom(); }
+function renderTabs(){
+  if(!wb) return;
+  tabsEl.innerHTML='';
+  wb.SheetNames.forEach(function(nm,i){
+    var b=document.createElement('button'); b.textContent=nm;
+    if(i===sheetIdx) b.className='on';
+    b.onclick=function(){ sheetIdx=i; renderSheet(); };
+    tabsEl.appendChild(b);
+  });
+}
+function renderSheet(){
+  msg.style.display='';
+  var ws=wb.Sheets[wb.SheetNames[sheetIdx]];
+  var range=ws['!ref']?XLSX.utils.decode_range(ws['!ref']):{s:{r:0,c:0},e:{r:0,c:0}};
+  var mc=document.createElement('canvas').getContext('2d'); mc.font=FONT;
+  var texts={}, maxCols={};
+  for(var r=range.s.r;r<=range.e.r;r++){
+    for(var c=range.s.c;c<=range.e.c;c++){
+      var cell=ws[XLSX.utils.encode_cell({r:r,c:c})];
+      var t='';
+      if(cell){ if(cell.t==='n')t=String(cell.v); else if(cell.t==='b')t=cell.v?'TRUE':'FALSE'; else t=fmt(cell.v); }
+      texts[r+'_'+c]=t;
+      if(t){ var w=mc.measureText(t).width+18; if(!maxCols[c]||w>maxCols[c])maxCols[c]=w; }
+    }
+  }
+  var colW={};
+  for(var c=range.s.c;c<=range.e.c;c++){ colW[c]=Math.max(64,Math.min(380,maxCols[c]||120)); }
+  var colX={}, acc=IDXW;
+  for(var c=range.s.c;c<=range.e.c;c++){ colX[c]=acc; acc+=colW[c]; }
+  var rowY={}, accy=HDR;
+  for(var r=range.s.r;r<=range.e.r;r++){ rowY[r]=accy; accy+=ROWH; }
+  // 合并单元格：记录左上角跨的格数，其余标记为 covered（不画独立边框/文字）
+  var mergeMap={}, covered={};
+  (ws['!merges']||[]).forEach(function(m){
+    mergeMap[m.s.r+'_'+m.s.c]={rs:m.e.r-m.s.r+1, cs:m.e.c-m.s.c+1};
+    for(var rr=m.s.r;rr<=m.e.r;rr++)for(var cc=m.s.c;cc<=m.e.c;cc++){ if(rr===m.s.r&&cc===m.s.c)continue; covered[rr+'_'+cc]=1; }
+  });
+  var totalW=acc, totalH=accy; natW=totalW; natH=totalH;
+  var w=Math.round(totalW*dpr), h=Math.round(totalH*dpr);
+  var maxDim=16000;
+  if(w>maxDim||h>maxDim){ var s=Math.min(maxDim/Math.max(1,w),maxDim/Math.max(1,h)); w=Math.round(totalW*dpr*s); h=Math.round(totalH*dpr*s); }
+  canvas.width=w; canvas.height=h;
+  var ctx=canvas.getContext('2d');
+  ctx.setTransform(w/Math.max(1,totalW),0,0,h/Math.max(1,totalH),0,0);
+  ctx.textBaseline='middle';
+  ctx.fillStyle='#ffffff'; ctx.fillRect(0,0,totalW,totalH);
+  // 左上角
+  ctx.fillStyle='#e9ebee'; ctx.fillRect(0,0,IDXW,HDR);
+  // 列标头
+  ctx.font=FONTB; ctx.fillStyle='#374151';
+  for(var c=range.s.c;c<=range.e.c;c++){
+    ctx.fillStyle='#f3f4f7'; ctx.fillRect(colX[c],0,colW[c],HDR);
+    ctx.strokeStyle='#dfe3ea'; ctx.beginPath(); ctx.moveTo(colX[c],0); ctx.lineTo(colX[c],HDR); ctx.stroke();
+    ctx.beginPath(); ctx.moveTo(colX[c],HDR); ctx.lineTo(colX[c]+colW[c],HDR); ctx.stroke();
+    var lx=colX[c]+colW[c]/2;
+    ctx.fillStyle='#374151'; ctx.fillText(colLetter(c),lx,HDR/2+0.5);
+  }
+  // 行标头
+  for(var r=range.s.r;r<=range.e.r;r++){
+    ctx.fillStyle='#f3f4f7'; ctx.fillRect(0,rowY[r],IDXW,ROWH);
+    ctx.strokeStyle='#dfe3ea'; ctx.beginPath(); ctx.moveTo(IDXW,rowY[r]); ctx.lineTo(IDXW,rowY[r]+ROWH); ctx.stroke();
+    ctx.beginPath(); ctx.moveTo(0,rowY[r]+ROWH); ctx.lineTo(IDXW,rowY[r]+ROWH); ctx.stroke();
+    ctx.fillStyle='#374151'; ctx.fillText(String(r+1),IDXW/2,rowY[r]+ROWH/2+0.5);
+  }
+  // 单元格
+  ctx.font=FONT;
+  for(var r=range.s.r;r<=range.e.r;r++){
+    for(var c=range.s.c;c<=range.e.c;c++){
+      var key=r+'_'+c;
+      if(covered[key]) continue;
+      var x=colX[c], y=rowY[r], ww=colW[c], hh=ROWH;
+      var mk=mergeMap[key];
+      if(mk){ for(var i=1;i<mk.cs;i++)ww+=colW[c+i]; for(var j=1;j<mk.rs;j++)hh+=ROWH; }
+      ctx.fillStyle='#ffffff'; ctx.fillRect(x,y,ww,hh);
+      ctx.strokeStyle='#e2e5ea'; ctx.strokeRect(x+0.5,y+0.5,ww-1,hh-1);
+      var t=texts[key];
+      if(t){
+        var isNum=(ws[XLSX.utils.encode_cell({r:r,c:c})]||{}).t==='n';
+        ctx.fillStyle='#1f2937';
+        var xoff=isNum?(x+ww-6):(x+6);
+        ctx.textAlign=isNum?'right':'left';
+        ctx.fillText(t,xoff,y+hh/2+0.5);
+        ctx.textAlign='left';
+      }
+    }
+  }
+  msg.style.display='none';
+  renderTabs();
+  zoomFit();
+}
+(async()=>{
+  try{
+    const r=await fetch(${JSON.stringify(inlineHref)},{cache:'no-store'});
+    if(!r.ok) throw new Error('HTTP '+r.status);
+    const buf=await r.arrayBuffer();
+    wb=XLSX.read(new Uint8Array(buf),{type:'array',cellDates:true});
+    renderSheet();
+  }catch(e){ msg.style.display=''; msg.textContent='渲染失败：'+((e&&e.message)||e); }
+})();
+window.addEventListener('resize',function(){ try{ if(fitMode) zoomFit(); else applyZoom(); }catch(e){} });
+</script>
+
+</body></html>`);
+    } catch (error) {
+      sendError(res, error, onError);
+    }
+  };
+
+  // serve SheetJS 前端库（从 PACKAGE_DIR/client/vendor 读）
+  const xlsxPreviewAsset = async (req, res) => {
+    try {
+      requireTrusted(req);
+      if (req.method !== "GET" && req.method !== "HEAD") {
+        methodNotAllowed(res, ["GET", "HEAD"]);
+        return;
+      }
+      const f = decodeURIComponent(new URL(req.url || "/", "http://dsh.internal").searchParams.get("f") || "");
+      // 只允许 xlsx 预览页用到的 SheetJS 解析库（浏览器端把 .xlsx 转成静态表格图）。
+      if (!["xlsx.full.min.js"].includes(f)) throw new HttpError(400, "unknown asset");
+      const target = join(VENDOR_DIR, f);
+      const buf = await readFile(target);
+      res.writeHead(200, {
+        "content-type": "text/javascript; charset=utf-8",
+        "cache-control": "no-store",
+        "x-content-type-options": "nosniff",
+      });
+      res.end(buf);
+    } catch (error) {
+      sendError(res, error, onError);
+    }
+  };
+
+  // ---- 毛玻璃界面 (glass UI) 配置：读写 ~/.dsh-long-plugins/glass.json ----
+  // 背景图以 data-URI 存进配置，随配置持久化。enabled=总开关；blur=磨砂模糊；mask=整页罩强度；
+  // color=叠加/罩色；bgImage=共用背景图。顶栏/左栏的"罩"与整页共用 mask+color（不再单独存，简化）。
+  const GLASS_DEFAULTS = {
+    enabled: false, blur: 20, bgImage: "",
+    zone: { session: { color: "#1a2332", mask: 0.45 }, input: { color: "#1a2332", mask: 0.6 } },
+  };
+  const glassDir = resolve(homedir(), ".dsh-long-plugins");
+  const glassFile = join(glassDir, "glass.json");
+  async function readGlassJSON() {
+    try { const raw = JSON.parse(await readFile(glassFile, "utf8")); return { ...GLASS_DEFAULTS, ...(raw && typeof raw === "object" ? raw : {}) }; }
+    catch { return { ...GLASS_DEFAULTS }; }
+  }
+  const glassConfig = async (req, res) => {
+    try {
+      requireTrusted(req);
+      if (req.method === "GET" || req.method === "HEAD") {
+        const cfg = await readGlassJSON();
+        sendJson(res, 200, {
+          found: true,
+          cfg: {
+            enabled: cfg.enabled, blur: cfg.blur,
+            session: cfg.zone?.session || { color: "#1a2332", mask: 0.45 },
+            input: cfg.zone?.input || { color: "#1a2332", mask: 0.6 },
+            bgImage: cfg.bgImage ? { present: true, bytes: Math.round((cfg.bgImage.length * 3) / 4) } : { present: false },
+          },
+          bgImage: cfg.bgImage,
+        });
+        return;
+      }
+      if (req.method === "POST") {
+        const body = await readJsonBody(req);
+        const current = await readGlassJSON();
+        const next = { ...current, ...sanitizeGlass(typeof body === "object" && body !== null ? body : {}) };
+        await mkdir(glassDir, { recursive: true, mode: 0o700 });
+        await writeFile(glassFile, JSON.stringify(next, null, 2), "utf8");
+        sendJson(res, 200, { ok: true, saved: true });
+        return;
+      }
+      methodNotAllowed(res, ["GET", "HEAD", "POST"]);
+    } catch (error) {
+      sendError(res, error, onError);
+    }
+  };
+
+  return { root, maxFileBytes, totalMaxBytes, api, download, preview, workspaceList, workspaceFile, workspacePreview, workspaceBrowse, workspaceDelete, workspaceRename, workspaceSave, docxPreviewPage, docxPreviewAsset, pptxPreviewPage, xlsxPreviewPage, xlsxPreviewAsset, glassConfig };
 }
 
 /** 人类可读文件大小。 */
@@ -1324,21 +1679,23 @@ function workspaceBrowseHtml(groups, ws = "", all = false) {
       const isPdf = /\.pdf$/i.test(f.name);
       const isDocx = /\.docx$/i.test(f.name);
       const isPptx = /\.pptx$/i.test(f.name);
+      const isXlsx = /\.xlsx$/i.test(f.name);
       // PDF 直接嵌原始流（单层 iframe，浏览器原生查看器可滚动翻页）；
-      // docx 走 docx-preview、pptx 走 PptxViewJS 真实渲染页（浏览器端解析，所见即所得）；
+      // docx 走 docx-preview、pptx 走 PptxViewJS、xlsx 走 x-spreadsheet 真实渲染页
+      // （浏览器端解析，所见即所得）；
       // 其它可预览类型走渲染页；不可预览 → 下载。
       const viewHref = previewable
-        ? (isPdf ? `workspace-file?path=${rel}&inline=1` : isDocx ? `docx-preview?path=${rel}` : isPptx ? `pptx-preview?path=${rel}` : `workspace-preview?path=${rel}&from=list`)
+        ? (isPdf ? `workspace-file?path=${rel}&inline=1` : isDocx ? `docx-preview?path=${rel}` : isPptx ? `pptx-preview?path=${rel}` : isXlsx ? `xlsx-preview?path=${rel}` : `workspace-preview?path=${rel}&from=list`)
         : `workspace-file?path=${rel}&download=1`;
       return `<tr data-ts="${Math.floor(f.mtime)}" data-name="${escapeHtml(f.name)}" data-size="${f.size}">
         <td class="name"><a class="flink" href="${viewHref}" data-preview="${escapeHtml(viewHref)}" title="${escapeHtml(f.path)}">${escapeHtml(f.name)}</a></td>
         <td class="size">${humanSize(f.size)}</td>
         <td class="time">${humanTime(f.mtime)}</td>
         <td class="acts">
-          ${previewable ? `<a class="tag" href="${viewHref}" data-preview="${escapeHtml(viewHref)}">${ICON_EYE} 预览</a>` : `<a class="tag" href="${viewHref}">${ICON_DL} 下载</a>`}
+          <button type="button" class="tag plain" data-copypath="${escapeHtml(f.path)}">复制路径</button>
+          <button type="button" class="tag plain" data-rename="${escapeHtml(f.path)}">重命名</button>
           <a class="tag dl" href="workspace-file?path=${rel}&download=1">${ICON_DL} 下载</a>
-          <button type="button" class="tag" data-rename="${escapeHtml(f.path)}">重命名</button>
-          <button type="button" class="tag" data-copypath="${escapeHtml(f.path)}">复制路径</button>
+          ${previewable ? `<a class="tag" href="${viewHref}" data-preview="${escapeHtml(viewHref)}">${ICON_EYE} 预览</a>` : ""}
         </td>
       </tr>`;
     }).join("");
@@ -1441,6 +1798,9 @@ function workspaceBrowseHtml(groups, ws = "", all = false) {
   .tag { display:inline-flex; align-items:center; gap:4px; text-decoration:none; font-size:12px; padding:4px 10px; border-radius:6px; margin-right:6px; background:var(--lp-tag-bg); color:var(--lp-accent); }
   .tag:hover { background:var(--lp-tag-hover); }
   .tag.dl { color:var(--lp-ok); }
+  /* 重命名/复制路径：不设强调色，做白色/常规文字按钮 */
+  .tag.plain { background:transparent; color:var(--lp-fg); border:1px solid var(--lp-border); }
+  .tag.plain:hover { background:var(--lp-hover); }
   .empty { color:var(--lp-meta); text-align:center; padding:60px 0; }
   .ic { width:14px; height:14px; flex:none; }
   @media (max-width: 640px) {
@@ -2152,6 +2512,24 @@ export async function apply(ctx, config = {}) {
     handler: handlers.pptxPreviewPage,
   }), "dsh-long-plugins: pptx real-preview route");
 
+  ctx.effect(() => ctx.webServer.register({
+    kind: "exact",
+    path: "/api/dsh-uploads/xlsx-preview",
+    handler: handlers.xlsxPreviewPage,
+  }), "dsh-long-plugins: xlsx real-preview route");
+
+  ctx.effect(() => ctx.webServer.register({
+    kind: "exact",
+    path: "/api/dsh-uploads/xlsx-preview-asset",
+    handler: handlers.xlsxPreviewAsset,
+  }), "dsh-long-plugins: xlsx-preview vendor assets");
+
+  ctx.effect(() => ctx.webServer.register({
+    kind: "exact",
+    path: "/api/dsh-uploads/glass-config",
+    handler: handlers.glassConfig,
+  }), "dsh-long-plugins: glass-ui config route");
+
   ctx.effect(() => ctx.webServer.register({
     kind: "exact",
     path: "/api/dsh-uploads/workspace-browse",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-long-plugins",
-  "version": "1.3.9",
+  "version": "2.0.0",
   "description": "Merged DSH web plugins: upload manager (drag-and-drop attach any file to the message), workspace output files, skill docs, account balance, Markdown-to-Word (md2docx), and polished file preview (Word & PowerPoint real preview with zoom/pan, rendered Markdown), plus an auto-repair install for DSH core patches (reverse-proxy WebSocket heartbeat, upgrade relink). | 一个插件整合 DSH Web 的常用增强：上传管理（拖放上传：拖任意文件到会话框直接附加）、工作区「输出文件」面板、技能文档浏览、账户余额显示、Markdown 转 Word（md2docx）、Word/PowerPoint 真实预览（可缩放、翻页）；并自带修复安装，自动重连 DSH 核心补丁（反代 WebSocket 心跳、升级重连）。",
   "type": "module",
   "license": "MIT",