dsh-notify-windows 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -0,0 +1,41 @@
+# Changelog
+
+本项目遵循 [Semantic Versioning](https://semver.org/)。
+
+## [0.6.0] - 2026-08-20
+
+### 变更（dsh.bundle 安装 + 对齐 dsh 0.1.0-rc.8）
+
+- **改为 `dsh.bundle` 安装**：新增 `cordis.patch.yml`（包内自带 `insert:` 条目）并在
+  package.json 声明 `dsh.bundle.patch`。安装方式从「手动打 insert + 复制到
+  node_modules」改为 `dsh plugin --profile <name> add dsh-notify-windows`，
+  pnpm 安装后 `dsh` 自动把包加入 `dsh.profile.bundles` 层栈并挂载入口。
+- **删除 manual-insert 部署**：移除 `scripts/install-profile.ps1`（旧的复制 lib 到
+  version-suffixed node_modules 目录并正则改写 profile `cordis.patch.yml` 的做法）。
+- **rc.8 兼容**：
+  - 子代理过滤改用 rc.8 的 `session.header.delegationDepth`（旧字段 `depth` 已移除）；
+  - 导出风格改为 rc.8 推荐的 `export const name` + `export const apply`（旧 default
+    export 会让 loader 丢弃 `name` 命名导出，fiber 名显示为 `dshNotify`）。
+- **配置文件覆盖方式**：不再需要手动 `- insert:`；在 profile 的 `cordis.patch.yml`
+  中按 id（`dsh-notify`）覆盖 `config` 即可，与 `dsh-yolo-mode` 等 bundle 插件一致。
+
+### 其它
+
+- 冒烟测试 `scripts/smoke-test.mjs` 路径自发现（`DSH_HARNESS_DIR` 可覆盖），
+  适配新的 `apply` 导出与 `delegationDepth` 字段。
+- README 更新：安装 / 更新 / 卸载命令与配置覆盖示例。
+
+## [0.5.0] - 2026-08-13
+
+### 新增
+
+- /goal 自动推进回合默认静默提醒，仅目标完成 / 阻塞的最终回合弹通知（可配置）。
+- 任务完成通知自动附带 Agent 最后回复的摘要（可裁剪，`excerptMaxChars`）。
+
+## [0.4.0] - 2026-08-13
+
+### 新增
+
+- 增加审批（`approval/asked`）与提问（`ask_user_question` / `run_code` 内联调用）
+  提醒。
+- Windows 桌面 Toast 通知，通过 PowerShell 5.1 WinRT API 发送，零运行时依赖。

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 SeverusZh
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 SeverusZh
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -1,104 +1,110 @@
-# dsh-notify-windows
-
-> A DeepSeek Harness (DSH) plugin that sends Windows toast notifications whenever the agent needs your attention.
-
-<p align="center">
-  <img src="https://img.shields.io/npm/v/dsh-notify-windows" alt="npm">
-  <img src="https://img.shields.io/github/license/SeverusZh/dsh-notify-windows" alt="license">
-  <img src="https://img.shields.io/badge/platform-Windows%2010%2F11-blue" alt="platform">
-  <img src="https://img.shields.io/github/stars/SeverusZh/dsh-notify-windows?style=social" alt="stars">
-</p>
-
-**Task finished** ✅ ｜ **Approval pending** 🔐 ｜ **Question pending** ❓ — never miss anything that needs you, even away from the screen.
-
-## ✨ Features
-
-- **Task completion** — listens to `turn/end` session events; toasts on completed / errored / max-tokens turns, with the session title and reason;
-- **Approval pending** — listens to `approval/asked`; toasts the moment a permission decision is waiting, and skips sessions whose approval policy is `never` (nothing is waiting there);
-- **Question pending** — toasts when the agent calls `ask_user_question`; in this deployment every tool call goes through `run_code`, so the plugin also scans `run_code` source for `tools.ask_user_question(` calls and extracts the question text;
-- **Quiet by default** — subagent sessions are ignored unless `includeSubagents` is set;
-- **Zero dependencies** — toasts are sent through Windows PowerShell 5.1's WinRT toast API, with the AppUserModelId registered under HKCU on first use (no admin required);
-- **Diagnosable** — optional log (`%TEMP%\dsh-notify\notify.log`) and a debug event log.
-
-## 🚀 Install
-
-### Option A: npm (recommended)
-
-```powershell
-dsh plugin --profile web add dsh-notify-windows
-```
-
-Then add this entry to the profile's `cordis.patch.yml` (the running host hot-applies it — no restart needed):
-
-```yaml
-- insert:
-    - id: dsh-notify
-      name: 'dsh-notify-windows'
-      config:
-        enabled: true
-        reasons: [completed, error, max-tokens]
-        includeSubagents: false
-        notifyOnStart: true
-        notifyOnApproval: true
-        notifyOnAskUser: true
-        appName: 'DeepSeek Harness'
-        aumid: 'DeepSeekHarness.Notify'
-        log: true
-        debug: false
-```
-
-### Option B: from source
-
-```powershell
-git clone git@github.com:SeverusZh/dsh-notify-windows.git
-cd dsh-notify-windows
-pwsh scripts\install-profile.ps1 -Profile web
-```
-
-The script deploys the package into the profile's hoisted `node_modules` as `dsh-notify-windows-<version>` — the versioned directory lets a running host hot-load a redeploy without a restart — and writes the patch entry above idempotently.
-
-## ⚙️ Configuration
-
-| Key | Default | Meaning |
-| --- | --- | --- |
-| `enabled` | `true` | master switch |
-| `reasons` | `[completed, error, max-tokens]` | turn-end reasons to notify (`aborted` / `interrupted` / `blocked` also available) |
-| `includeSubagents` | `false` | also notify subagent sessions |
-| `notifyOnStart` | `false` | toast when the plugin loads |
-| `notifyOnApproval` | `true` | toast on `approval/asked` (skipped under policy `never`) |
-| `notifyOnAskUser` | `true` | toast when the agent asks you a question |
-| `notifyOnGoalRounds` | `false` | stay quiet on /goal auto-continuation rounds (except the final complete/block round) |
-| `excerpt` | `true` | append an excerpt of the agent's final reply to the toast |
-| `excerptMaxChars` | `80` | max characters of the excerpt |
-| `appName` | `DeepSeek Harness` | toast source display name and fallback title |
-| `aumid` | `DeepSeekHarness.Notify` | toast AppUserModelId |
-| `log` | `true` | write `%TEMP%\dsh-notify\notify.log` |
-| `debug` | `false` | log every session event (diagnostics, heavy) |
-
-## 🔔 Triggers
-
-| Scenario | Session event | Sample toast |
-| --- | --- | --- |
-| Task finished | `turn/end` | Task completed (turn N) |
-| Task errored / capped | `turn/end` | Task errored / Output hit token cap |
-| Approval waiting | `approval/asked` | DeepSeek Harness · Needs approval / tool pwsh: … |
-| Question waiting | `tool/call` (incl. run_code detection) | DeepSeek Harness · Needs your answer / Continue? |
-
-## 🧪 Verify
-
-```powershell
-node scripts\smoke-test.mjs
-```
-
-Runs the plugin on a bare cordis Context with synthetic events: three test toasts fire (completion, approval, question) and the log assertions verify the filtering (subagent, `never`-policy, unrelated calls).
-
-## ❓ FAQ
-
-- **No toast?** Check Windows notification settings for this app and Focus Assist; the AUMID registers itself on first use.
-- **Do /goal rounds toast?** Not by default: auto-continuation rounds stay quiet and only the final round that completes (or blocks) the goal toasts. Set `notifyOnGoalRounds` to `true` to hear every round.
-- **Approval toasts missing?** Sessions whose approval policy is `never` auto-reject — nothing waits, so the plugin stays quiet. Only `ask`-policy sessions notify.
-- **Hot-update after code changes?** Re-run the install script (the versioned directory name busts the module cache); for npm installs run `dsh plugin --profile web update dsh-notify-windows` and restart the host.
-
-## 📄 License
-
+# dsh-notify-windows
+
+> A DeepSeek Harness (DSH) plugin that sends Windows toast notifications whenever the agent needs your attention.
+
+<p align="center">
+  <img src="https://img.shields.io/npm/v/dsh-notify-windows" alt="npm">
+  <img src="https://img.shields.io/github/license/SeverusZh/dsh-notify-windows" alt="license">
+  <img src="https://img.shields.io/badge/platform-Windows%2010%2F11-blue" alt="platform">
+  <img src="https://img.shields.io/github/stars/SeverusZh/dsh-notify-windows?style=social" alt="stars">
+</p>
+
+**Task finished** ✅ ｜ **Approval pending** 🔐 ｜ **Question pending** ❓ — never miss anything that needs you, even away from the screen.
+
+## ✨ Features
+
+- **Task completion** — listens to `turn/end` session events; toasts on completed / errored / max-tokens turns, with the session title and reason;
+- **Approval pending** — listens to `approval/asked`; toasts the moment a permission decision is waiting, and skips sessions whose approval policy is `never` (nothing is waiting there);
+- **Question pending** — toasts when the agent calls `ask_user_question`; in this deployment every tool call goes through `run_code`, so the plugin also scans `run_code` source for `tools.ask_user_question(` calls and extracts the question text;
+- **Quiet by default** — subagent sessions are ignored unless `includeSubagents` is set;
+- **Zero dependencies** — toasts are sent through Windows PowerShell 5.1's WinRT toast API, with the AppUserModelId registered under HKCU on first use (no admin required);
+- **Diagnosable** — optional log (`%TEMP%\dsh-notify\notify.log`) and a debug event log.
+
+## 🚀 Install
+
+The plugin installs through the **`dsh.bundle`** mechanism: the npm package ships its own
+`cordis.patch.yml`, and after `dsh plugin add` it auto-mounts the `dsh-notify` entry — no
+manual `- insert:` needed.
+
+```powershell
+dsh plugin --profile web add dsh-notify-windows
+```
+
+Restart DSH and refresh the browser:
+
+```powershell
+dsh --profile web
+```
+
+> Note: don't hand-add `- insert:` with `dsh-notify` anymore — DSH would fail to boot with
+> `duplicate loader entry id: dsh-notify`. To tweak settings, override the entry by id in the
+> profile's `cordis.patch.yml` (see below).
+
+### Update / Remove
+
+```powershell
+dsh plugin --profile web update dsh-notify-windows
+dsh plugin --profile web remove dsh-notify-windows
+```
+
+Restart the DSH host after updating (a newly added bundle layer needs a boot).
+
+## ⚙️ Configuration
+
+All `config` keys are optional and default in the plugin. To override, target the entry by id
+in `$DSH_HOME/profiles/web/cordis.patch.yml` (hot-applied by the running host — no restart):
+
+```yaml
+- id: dsh-notify
+  name: dsh-notify-windows
+  config:
+    enabled: true
+    reasons: [completed, error, max-tokens]
+    notifyOnStart: true
+    notifyOnApproval: true
+    log: true
+```
+
+| Key | Default | Meaning |
+| --- | --- | --- |
+| `enabled` | `true` | master switch |
+| `reasons` | `[completed, error, max-tokens]` | turn-end reasons to notify (`aborted` / `interrupted` / `blocked` also available) |
+| `includeSubagents` | `false` | also notify subagent sessions |
+| `notifyOnStart` | `false` | toast when the plugin loads |
+| `notifyOnApproval` | `true` | toast on `approval/asked` (skipped under policy `never`) |
+| `notifyOnAskUser` | `true` | toast when the agent asks you a question |
+| `notifyOnGoalRounds` | `false` | stay quiet on /goal auto-continuation rounds (except the final complete/block round) |
+| `excerpt` | `true` | append an excerpt of the agent's final reply to the toast |
+| `excerptMaxChars` | `80` | max characters of the excerpt |
+| `appName` | `DeepSeek Harness` | toast source display name and fallback title |
+| `aumid` | `DeepSeekHarness.Notify` | toast AppUserModelId |
+| `log` | `true` | write `%TEMP%\dsh-notify\notify.log` |
+| `debug` | `false` | log every session event (diagnostics, heavy) |
+
+## 🔔 Triggers
+
+| Scenario | Session event | Sample toast |
+| --- | --- | --- |
+| Task finished | `turn/end` | Task completed (turn N) |
+| Task errored / capped | `turn/end` | Task errored / Output hit token cap |
+| Approval waiting | `approval/asked` | DeepSeek Harness · Needs approval / tool pwsh: … |
+| Question waiting | `tool/call` (incl. run_code detection) | DeepSeek Harness · Needs your answer / Continue? |
+
+## 🧪 Verify
+
+```powershell
+node scripts\smoke-test.mjs
+```
+
+Runs the plugin on a bare cordis Context with synthetic events: three test toasts fire (completion, approval, question) and the log assertions verify the filtering (subagent, `never`-policy, unrelated calls).
+
+## ❓ FAQ
+
+- **No toast?** Check Windows notification settings for this app and Focus Assist; the AUMID registers itself on first use.
+- **Do /goal rounds toast?** Not by default: auto-continuation rounds stay quiet and only the final round that completes (or blocks) the goal toasts. Set `notifyOnGoalRounds` to `true` to hear every round.
+- **Approval toasts missing?** Sessions whose approval policy is `never` auto-reject — nothing waits, so the plugin stays quiet. Only `ask`-policy sessions notify.
+- **Hot-update after code changes?** Run `dsh plugin --profile web update dsh-notify-windows`, then restart the DSH host.
+
+## 📄 License
+
 [MIT](./LICENSE) © 2026 SeverusZh

package/README.md

@@ -1,104 +1,110 @@
-# dsh-notify-windows
-
-> DeepSeek Harness（DSH）插件：当 Agent 需要你关注时，向 Windows 发送系统桌面通知。
-
-<p align="center">
-  <img src="https://img.shields.io/npm/v/dsh-notify-windows" alt="npm">
-  <img src="https://img.shields.io/github/license/SeverusZh/dsh-notify-windows" alt="license">
-  <img src="https://img.shields.io/badge/platform-Windows%2010%2F11-blue" alt="platform">
-  <img src="https://img.shields.io/github/stars/SeverusZh/dsh-notify-windows?style=social" alt="stars">
-</p>
-
-**任务完成** ✅ ｜ **等待审批** 🔐 ｜ **等待回答** ❓ —— 离开屏幕也不错过任何需要你处理的事。
-
-## ✨ 功能
-
-- **任务完成提醒**：监听会话 `turn/end` 事件，任务完成 / 出错 / 输出超限时立即弹窗，标题自动使用会话标题，正文显示原因与轮次；
-- **权限审批提醒**：监听 `approval/asked` 事件，有操作等待你的审批时立即提醒；会话审批策略为 `never` 时自动跳过（此时没有东西在等你）；
-- **提问确认提醒**：Agent 调用 `ask_user_question` 向你提问时提醒；本部署下所有工具都经 `run_code` 调用，插件会扫描 `run_code` 程序源码中的 `tools.ask_user_question(` 调用并提取问题文本；
-- **防打扰**：默认忽略子代理（subagent）会话，只提醒主会话；
-- **零依赖**：通知通过 Windows PowerShell 5.1 的 WinRT Toast API 发送，自动注册 HKCU 的 AppUserModelId（无需管理员权限）；
-- **可诊断**：可选日志（`%TEMP%\dsh-notify\notify.log`）与 debug 事件日志。
-
-## 🚀 安装
-
-### 方式一：npm（推荐）
-
-```powershell
-dsh plugin --profile web add dsh-notify-windows
-```
-
-然后在 profile 的 `cordis.patch.yml` 中追加条目（该文件被运行中的 DSH 热监视，改动立即生效，无需重启）：
-
-```yaml
-- insert:
-    - id: dsh-notify
-      name: 'dsh-notify-windows'
-      config:
-        enabled: true
-        reasons: [completed, error, max-tokens]
-        includeSubagents: false
-        notifyOnStart: true
-        notifyOnApproval: true
-        notifyOnAskUser: true
-        appName: 'DeepSeek Harness'
-        aumid: 'DeepSeekHarness.Notify'
-        log: true
-        debug: false
-```
-
-### 方式二：源码安装
-
-```powershell
-git clone git@github.com:SeverusZh/dsh-notify-windows.git
-cd dsh-notify-windows
-pwsh scripts\install-profile.ps1 -Profile web
-```
-
-脚本会把插件部署到 profile 的 hoisted `node_modules`（目录名 `dsh-notify-windows-<版本>`，重新部署时更换目录名，让运行中的宿主热加载新代码而无需重启），并幂等地写入上面的 patch 条目。
-
-## ⚙️ 配置项
-
-| 配置 | 默认值 | 说明 |
-| --- | --- | --- |
-| `enabled` | `true` | 总开关 |
-| `reasons` | `[completed, error, max-tokens]` | 需要提醒的回合结束原因（可选 `aborted` / `interrupted` / `blocked`） |
-| `includeSubagents` | `false` | 是否也提醒子代理会话 |
-| `notifyOnStart` | `false` | 插件加载时发一条「已激活」通知 |
-| `notifyOnApproval` | `true` | 审批请求提醒（策略 `never` 时自动跳过） |
-| `notifyOnAskUser` | `true` | Agent 提问等待回答时提醒 |
-| `notifyOnGoalRounds` | `false` | /goal 自动推进回合不提醒（目标完成/阻塞的最终回合除外） |
-| `excerpt` | `true` | 通知正文附带 Agent 最后回复的摘要 |
-| `excerptMaxChars` | `80` | 摘要最大字符数 |
-| `appName` | `DeepSeek Harness` | 通知来源显示名与兜底标题 |
-| `aumid` | `DeepSeekHarness.Notify` | 通知 AppUserModelId |
-| `log` | `true` | 写日志到 `%TEMP%\dsh-notify\notify.log` |
-| `debug` | `false` | 把所有会话事件写入日志（排查用，量大） |
-
-## 🔔 触发场景
-
-| 场景 | 会话事件 | 通知示例 |
-| --- | --- | --- |
-| 任务完成 | `turn/end` | 「任务已完成（第 N 轮）」 |
-| 任务出错 / 超限 | `turn/end` | 「任务出错」/「输出达到 token 上限」 |
-| 等待审批 | `approval/asked` | 「DeepSeek Harness · 需要审批 / 工具 pwsh：…」 |
-| 等待回答 | `tool/call`（含 run_code 检测） | 「DeepSeek Harness · 需要回答 / 是否继续？」 |
-
-## 🧪 验证
-
-```powershell
-node scripts\smoke-test.mjs
-```
-
-独立进程内用 cordis Context 模拟会话事件：应弹出任务完成 / 审批 / 提问三条测试通知，并断言日志记录与过滤行为（子代理、`never` 策略、无关调用均被过滤）。
-
-## ❓ 常见问题
-
-- **收不到通知？** 检查 Windows「通知与操作」设置是否允许该应用显示通知，以及「专注助手」是否开启；首次发送会自动注册 AUMID。
-- **/goal 模式会提醒吗？** 默认不会：自动推进的中间回合保持静默，只有目标完成（或阻塞）的最终回合才提醒；如需每个回合都提醒，把 `notifyOnGoalRounds` 设为 `true`。
-- **为什么审批提醒有时不弹？** 会话审批策略为 `never` 时审批会被自动拒绝、不会等待，插件会跳过提醒；策略为 `ask` 时才提醒。
-- **更新插件代码后如何热更新？** 重新执行安装脚本（版本目录名变化即热加载）；用 npm 安装时执行 `dsh plugin --profile web update dsh-notify-windows` 后重启宿主。
-
-## 📄 许可证
-
+# dsh-notify-windows
+
+> DeepSeek Harness（DSH）插件：当 Agent 需要你关注时，向 Windows 发送系统桌面通知。
+
+<p align="center">
+  <img src="https://img.shields.io/npm/v/dsh-notify-windows" alt="npm">
+  <img src="https://img.shields.io/github/license/SeverusZh/dsh-notify-windows" alt="license">
+  <img src="https://img.shields.io/badge/platform-Windows%2010%2F11-blue" alt="platform">
+  <img src="https://img.shields.io/github/stars/SeverusZh/dsh-notify-windows?style=social" alt="stars">
+</p>
+
+**任务完成** ✅ ｜ **等待审批** 🔐 ｜ **等待回答** ❓ —— 离开屏幕也不错过任何需要你处理的事。
+
+## ✨ 功能
+
+- **任务完成提醒**：监听会话 `turn/end` 事件，任务完成 / 出错 / 输出超限时立即弹窗，标题自动使用会话标题，正文显示原因与轮次；
+- **权限审批提醒**：监听 `approval/asked` 事件，有操作等待你的审批时立即提醒；会话审批策略为 `never` 时自动跳过（此时没有东西在等你）；
+- **提问确认提醒**：Agent 调用 `ask_user_question` 向你提问时提醒；本部署下所有工具都经 `run_code` 调用，插件会扫描 `run_code` 程序源码中的 `tools.ask_user_question(` 调用并提取问题文本；
+- **防打扰**：默认忽略子代理（subagent）会话，只提醒主会话；
+- **零依赖**：通知通过 Windows PowerShell 5.1 的 WinRT Toast API 发送，自动注册 HKCU 的 AppUserModelId（无需管理员权限）；
+- **可诊断**：可选日志（`%TEMP%\dsh-notify\notify.log`）与 debug 事件日志。
+
+## 🚀 安装
+
+项目通过 **`dsh.bundle`** 机制安装：npm 包自带的 `cordis.patch.yml` 会在
+`dsh plugin add` 后自动挂载 `dsh-notify` 入口，**不需要**再手动 `- insert:`。
+
+```powershell
+dsh plugin --profile web add dsh-notify-windows
+```
+
+重启 DSH 并刷新浏览器后生效：
+
+```powershell
+dsh --profile web
+```
+
+> 注意：不要再用 `- insert:` 手动添加 `dsh-notify`，否则启动会报
+> `duplicate loader entry id: dsh-notify`。想调整配置，在 profile 的
+> `cordis.patch.yml` 里按 id 覆盖即可（见下节）。
+
+### 更新 / 卸载
+
+```powershell
+dsh plugin --profile web update dsh-notify-windows
+dsh plugin --profile web remove dsh-notify-windows
+```
+
+更新后需重启 DSH 宿主（新增 bundle 层需要重新启动）。
+
+## ⚙️ 配置项
+
+插件行 `config` 全字段可选，未填按默认值。需要调整时，在
+`$DSH_HOME/profiles/web/cordis.patch.yml` 里按 id 覆盖主条目即可
+（该文件被运行中的 DSH 热监视，改动立即生效，无需重启）：
+
+```yaml
+- id: dsh-notify
+  name: dsh-notify-windows
+  config:
+    enabled: true
+    reasons: [completed, error, max-tokens]
+    notifyOnStart: true
+    notifyOnApproval: true
+    log: true
+```
+
+| 配置 | 默认值 | 说明 |
+| --- | --- | --- |
+| `enabled` | `true` | 总开关 |
+| `reasons` | `[completed, error, max-tokens]` | 需要提醒的回合结束原因（可选 `aborted` / `interrupted` / `blocked`） |
+| `includeSubagents` | `false` | 是否也提醒子代理会话 |
+| `notifyOnStart` | `false` | 插件加载时发一条「已激活」通知 |
+| `notifyOnApproval` | `true` | 审批请求提醒（策略 `never` 时自动跳过） |
+| `notifyOnAskUser` | `true` | Agent 提问等待回答时提醒 |
+| `notifyOnGoalRounds` | `false` | /goal 自动推进回合不提醒（目标完成/阻塞的最终回合除外） |
+| `excerpt` | `true` | 通知正文附带 Agent 最后回复的摘要 |
+| `excerptMaxChars` | `80` | 摘要最大字符数 |
+| `appName` | `DeepSeek Harness` | 通知来源显示名与兜底标题 |
+| `aumid` | `DeepSeekHarness.Notify` | 通知 AppUserModelId |
+| `log` | `true` | 写日志到 `%TEMP%\dsh-notify\notify.log` |
+| `debug` | `false` | 把所有会话事件写入日志（排查用，量大） |
+
+## 🔔 触发场景
+
+| 场景 | 会话事件 | 通知示例 |
+| --- | --- | --- |
+| 任务完成 | `turn/end` | 「任务已完成（第 N 轮）」 |
+| 任务出错 / 超限 | `turn/end` | 「任务出错」/「输出达到 token 上限」 |
+| 等待审批 | `approval/asked` | 「DeepSeek Harness · 需要审批 / 工具 pwsh：…」 |
+| 等待回答 | `tool/call`（含 run_code 检测） | 「DeepSeek Harness · 需要回答 / 是否继续？」 |
+
+## 🧪 验证
+
+```powershell
+node scripts\smoke-test.mjs
+```
+
+独立进程内用 cordis Context 模拟会话事件：应弹出任务完成 / 审批 / 提问三条测试通知，并断言日志记录与过滤行为（子代理、`never` 策略、无关调用均被过滤）。
+
+## ❓ 常见问题
+
+- **收不到通知？** 检查 Windows「通知与操作」设置是否允许该应用显示通知，以及「专注助手」是否开启；首次发送会自动注册 AUMID。
+- **/goal 模式会提醒吗？** 默认不会：自动推进的中间回合保持静默，只有目标完成（或阻塞）的最终回合才提醒；如需每个回合都提醒，把 `notifyOnGoalRounds` 设为 `true`。
+- **为什么审批提醒有时不弹？** 会话审批策略为 `never` 时审批会被自动拒绝、不会等待，插件会跳过提醒；策略为 `ask` 时才提醒。
+- **更新插件代码后如何生效？** 执行 `dsh plugin --profile web update dsh-notify-windows` 后重启 DSH 宿主。
+
+## 📄 许可证
+
 [MIT](./LICENSE) © 2026 SeverusZh

package/cordis.patch.yml

@@ -0,0 +1,14 @@
+# dsh-notify-windows bundle patch.
+#
+# Declares the plugin's single loader entry. The `insert:` rows live in the
+# package's own patch file, so `dsh plugin add dsh-notify-windows` auto-mounts
+# the entry — no manual `- insert:` in the profile's cordis.patch.yml.
+# The `name` (a bare package specifier) resolves to this package's
+# `main`/`exports["."]` (lib/index.js) via the loader's two-anchor resolution
+# (dsh install first, then the profile's node_modules).
+#
+# Install: dsh plugin --profile <name> add dsh-notify-windows
+# Restart `dsh --profile <name>` after installing.
+- insert:
+    - id: dsh-notify
+      name: dsh-notify-windows

package/lib/index.js

@@ -1,273 +1,273 @@
-// dsh-notify-windows — DeepSeek Harness plugin: send a Windows toast notification
-// whenever the agent needs the user's attention:
-//   - turn/end          — a task completed, failed, or was cut off (with an
-//                         optional excerpt of the agent's final reply);
-//   - approval/asked    — a permission approval is waiting (only when the
-//                         session's effective approval policy is "ask");
-//   - tool/call         — the agent called the ask_user_question tool (directly
-//                         or inside a run_code program) and is waiting.
-//
-// Goal rounds (/goal auto-continuation) are quiet by default: only the final
-// round that completes or blocks the goal produces a toast.
-//
-// Zero runtime dependencies: notifications go through the toast sender
-// script (./notify.ps1) executed by Windows PowerShell 5.1, whose .NET
-// Framework runtime supports the WinRT toast API.
-import { spawn } from "node:child_process";
-import { appendFileSync, mkdirSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const NOTIFY_SCRIPT = fileURLToPath(new URL("./notify.ps1", import.meta.url));
-const VERSION = "0.5.0";
-
-const REASON_TEXT = {
-  completed: "任务已完成",
-  error: "任务出错",
-  "max-tokens": "输出达到 token 上限",
-  aborted: "任务已取消",
-  interrupted: "任务中断",
-  blocked: "任务未开始",
-};
-
-export const name = "dsh-notify-windows";
-
-function truncate(text, max) {
-  if (typeof text !== "string") return "";
-  return text.length > max ? text.slice(0, max) + "…" : text;
-}
-
-/** First question text of an ask_user_question tool call, if parseable. */
-function extractAskQuestion(argumentsJson) {
-  try {
-    const parsed = JSON.parse(argumentsJson);
-    const first = Array.isArray(parsed?.questions) ? parsed.questions[0] : undefined;
-    return typeof first?.question === "string" ? first.question : undefined;
-  } catch {
-    return undefined;
-  }
-}
-
-/**
- * This deployment invokes every tool through run_code programs, so a real
- * question never appears as a model-level ask_user_question tool call.
- * Detect the nested call inside a run_code program's code and pull out the
- * first question text.
- */
-function extractQuestionFromCode(argumentsJson) {
-  try {
-    const parsed = JSON.parse(argumentsJson);
-    const code = typeof parsed?.code === "string" ? parsed.code : "";
-    const callIndex = code.search(/tools\.ask_user_question\s*\(/);
-    if (callIndex < 0) return undefined;
-    const region = code.slice(callIndex, callIndex + 8000);
-    const matches = [...region.matchAll(/question\s*:\s*["']([^"']{2,200})["']/g)];
-    return matches.length > 0 ? matches[0][1] : undefined;
-  } catch {
-    return undefined;
-  }
-}
-
-/** First non-empty text block of a message, trimmed. */
-function textOfMessage(message) {
-  const blocks = message?.content;
-  if (!Array.isArray(blocks)) return undefined;
-  for (const block of blocks) {
-    if (block?.type === "text" && typeof block.text === "string" && block.text.trim().length > 0) return block.text.trim();
-  }
-  return undefined;
-}
-
-/**
- * Scan the session log from the turn/end event back to its turn/start and
- * collect what the notification needs: the driving user message's source,
- * every goal/change operation in the window, and the last assistant reply
- * text (for the excerpt).
- */
-function turnWindow(session, turnEnd) {
-  const events = session?.events ?? [];
-  const turn = turnEnd?.data?.turn;
-  let endIndex = events.length - 1;
-  for (let i = events.length - 1; i >= 0; i -= 1) {
-    if (events[i]?.seq === turnEnd?.seq) { endIndex = i; break; }
-  }
-  let userSource;
-  const goalOps = [];
-  let lastAssistantText;
-  for (let i = endIndex; i >= 0; i -= 1) {
-    const event = events[i];
-    if (!event) continue;
-    if (event.type === "turn/start" && event.data?.turn === turn) break;
-    // Every user/message in the window overwrites: walking backwards, the
-    // final value is the FIRST message of the turn — the driving input.
-    if (event.type === "user/message" && event.data?.source) userSource = event.data.source;
-    if (event.type === "goal/change" && event.data?.operation) goalOps.push(event.data.operation);
-    if (event.type === "assistant/message" && event.data?.turn === turn && lastAssistantText === undefined) {
-      const text = textOfMessage(event.data.message);
-      if (text) lastAssistantText = text;
-    }
-  }
-  return { userSource, goalOps, lastAssistantText };
-}
-
-export default function dshNotify(ctx, config = {}) {
-  const cfg = {
-    enabled: true,
-    reasons: ["completed", "error", "max-tokens"],
-    includeSubagents: false,
-    notifyOnStart: false,
-    notifyOnApproval: true,
-    notifyOnAskUser: true,
-    notifyOnGoalRounds: false,
-    excerpt: true,
-    excerptMaxChars: 80,
-    appName: "DeepSeek Harness",
-    aumid: "DeepSeekHarness.Notify",
-    log: true,
-    debug: false,
-    ...config,
-  };
-  const reasons = new Set(cfg.reasons);
-  const logPath = join(tmpdir(), "dsh-notify", "notify.log");
-
-  const log = (entry) => {
-    if (!cfg.log) return;
-    try {
-      mkdirSync(join(tmpdir(), "dsh-notify"), { recursive: true });
-      appendFileSync(logPath, JSON.stringify({ time: Date.now(), ...entry }) + "\n");
-    } catch {
-      // diagnostics must never break the agent loop
-    }
-  };
-
-  const sendToast = (title, body) => {
-    const child = spawn(
-      "powershell.exe",
-      [
-        "-NoProfile",
-        "-NonInteractive",
-        "-ExecutionPolicy",
-        "Bypass",
-        "-File",
-        NOTIFY_SCRIPT,
-        "-Title",
-        title,
-        "-Body",
-        body,
-        "-Aumid",
-        cfg.aumid,
-        "-AppName",
-        cfg.appName,
-      ],
-      { stdio: "ignore", windowsHide: true },
-    );
-    child.on("error", (error) => {
-      log({ event: "error", message: String(error?.message ?? error) });
-      ctx.logger?.warn?.("dsh-notify: 启动通知进程失败", error);
-    });
-    child.on("exit", (code) => {
-      if (code !== 0) {
-        log({ event: "error", code });
-        ctx.logger?.warn?.("dsh-notify: 通知进程退出码 " + code);
-      }
-    });
-  };
-
-  const titleFor = (session) => {
-    try {
-      return ctx.sessionTitle?.get?.(session)?.title;
-    } catch {
-      return undefined;
-    }
-  };
-
-  /** True for subagent sessions when subagents are excluded. */
-  const isFilteredSession = (session) => {
-    if (cfg.includeSubagents) return false;
-    return session?.header?.origin === "subagent" || session?.header?.depth !== undefined;
-  };
-
-  /** Last approval/policy event of the session, or undefined (defaults to ask). */
-  const effectivePolicy = (session) => {
-    const events = session?.events ?? [];
-    for (let index = events.length - 1; index >= 0; index -= 1) {
-      const event = events[index];
-      if (event?.type === "approval/policy") return event.data?.policy;
-    }
-    return undefined;
-  };
-
-  ctx.on("session/event", (session, event) => {
-    if (!cfg.enabled) return;
-    if (cfg.debug) {
-      log({ event: "debug", type: event.type, name: event.data?.name ?? null, sessionId: session?.id });
-    }
-    if (isFilteredSession(session)) return;
-
-    if (event.type === "turn/end") {
-      const reason = event.data?.reason;
-      if (typeof reason?.kind !== "string" || !reasons.has(reason.kind)) return;
-      const window = turnWindow(session, event);
-
-      // /goal 自动推进回合默认静默：仅在目标完成/阻塞的最终回合提醒。
-      if (!cfg.notifyOnGoalRounds) {
-        const isGoalRound = window.userSource?.kind === "goal" && window.userSource.round > 0;
-        const terminal = window.goalOps.some((op) => op === "complete" || op === "block");
-        if (isGoalRound && !terminal) return;
-      }
-
-      const title = titleFor(session) || cfg.appName;
-      let body = REASON_TEXT[reason.kind] ?? "任务已结束";
-      if (Number.isInteger(event.data.turn)) body += "（第 " + event.data.turn + " 轮）";
-      if (cfg.excerpt && window.lastAssistantText) {
-        body += "\n" + truncate(window.lastAssistantText, cfg.excerptMaxChars);
-      }
-      sendToast(title, body);
-      log({
-        event: "notify",
-        sessionId: session?.id,
-        reason: reason.kind,
-        turn: event.data?.turn,
-        title,
-        body,
-      });
-      return;
-    }
-
-    if (event.type === "approval/asked" && cfg.notifyOnApproval) {
-      // Never notify when the session policy auto-rejects: nothing waits for
-      // the user, so a toast would be noise.
-      if (effectivePolicy(session) === "never") return;
-      const data = event.data ?? {};
-      const body = typeof data.toolName === "string"
-        ? (typeof data.reason === "string" && data.reason.length > 0
-          ? "工具 " + data.toolName + "：" + truncate(data.reason, 100)
-          : "工具 " + data.toolName)
-        : "有一项操作等待你的批准";
-      sendToast(cfg.appName + " · 需要审批", body);
-      log({ event: "approval", sessionId: session?.id, id: data.id, toolName: data.toolName, reason: data.reason });
-      return;
-    }
-
-    if (event.type === "tool/call" && cfg.notifyOnAskUser) {
-      const data = event.data ?? {};
-      let question;
-      if (data.name === "ask_user_question") {
-        question = extractAskQuestion(data.arguments);
-      } else if (data.name === "run_code" && typeof data.arguments === "string" && data.arguments.includes("ask_user_question")) {
-        question = extractQuestionFromCode(data.arguments);
-      }
-      if (question !== undefined || data.name === "ask_user_question") {
-        sendToast(cfg.appName + " · 需要回答", question ? truncate(question, 100) : "Agent 正在等待你的确认");
-        log({ event: "ask-user", sessionId: session?.id, question: question ?? null });
-      }
-      return;
-    }
-  });
-
-  log({ event: "start", version: VERSION, enabled: cfg.enabled, reasons: [...reasons], sessionId: null });
-  if (cfg.enabled && cfg.notifyOnStart) {
-    sendToast(cfg.appName, "任务完成提醒已激活（v" + VERSION + "）");
-  }
-}
+// dsh-notify-windows — DeepSeek Harness plugin: send a Windows toast notification
+// whenever the agent needs the user's attention:
+//   - turn/end          — a task completed, failed, or was cut off (with an
+//                         optional excerpt of the agent's final reply);
+//   - approval/asked    — a permission approval is waiting (only when the
+//                         session's effective approval policy is "ask");
+//   - tool/call         — the agent called the ask_user_question tool (directly
+//                         or inside a run_code program) and is waiting.
+//
+// Goal rounds (/goal auto-continuation) are quiet by default: only the final
+// round that completes or blocks the goal produces a toast.
+//
+// Zero runtime dependencies: notifications go through the toast sender
+// script (./notify.ps1) executed by Windows PowerShell 5.1, whose .NET
+// Framework runtime supports the WinRT toast API.
+import { spawn } from "node:child_process";
+import { appendFileSync, mkdirSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const NOTIFY_SCRIPT = fileURLToPath(new URL("./notify.ps1", import.meta.url));
+const VERSION = "0.6.0";
+
+const REASON_TEXT = {
+  completed: "任务已完成",
+  error: "任务出错",
+  "max-tokens": "输出达到 token 上限",
+  aborted: "任务已取消",
+  interrupted: "任务中断",
+  blocked: "任务未开始",
+};
+
+export const name = "dsh-notify-windows";
+
+function truncate(text, max) {
+  if (typeof text !== "string") return "";
+  return text.length > max ? text.slice(0, max) + "…" : text;
+}
+
+/** First question text of an ask_user_question tool call, if parseable. */
+function extractAskQuestion(argumentsJson) {
+  try {
+    const parsed = JSON.parse(argumentsJson);
+    const first = Array.isArray(parsed?.questions) ? parsed.questions[0] : undefined;
+    return typeof first?.question === "string" ? first.question : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+/**
+ * This deployment invokes every tool through run_code programs, so a real
+ * question never appears as a model-level ask_user_question tool call.
+ * Detect the nested call inside a run_code program's code and pull out the
+ * first question text.
+ */
+function extractQuestionFromCode(argumentsJson) {
+  try {
+    const parsed = JSON.parse(argumentsJson);
+    const code = typeof parsed?.code === "string" ? parsed.code : "";
+    const callIndex = code.search(/tools\.ask_user_question\s*\(/);
+    if (callIndex < 0) return undefined;
+    const region = code.slice(callIndex, callIndex + 8000);
+    const matches = [...region.matchAll(/question\s*:\s*["']([^"']{2,200})["']/g)];
+    return matches.length > 0 ? matches[0][1] : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+/** First non-empty text block of a message, trimmed. */
+function textOfMessage(message) {
+  const blocks = message?.content;
+  if (!Array.isArray(blocks)) return undefined;
+  for (const block of blocks) {
+    if (block?.type === "text" && typeof block.text === "string" && block.text.trim().length > 0) return block.text.trim();
+  }
+  return undefined;
+}
+
+/**
+ * Scan the session log from the turn/end event back to its turn/start and
+ * collect what the notification needs: the driving user message's source,
+ * every goal/change operation in the window, and the last assistant reply
+ * text (for the excerpt).
+ */
+function turnWindow(session, turnEnd) {
+  const events = session?.events ?? [];
+  const turn = turnEnd?.data?.turn;
+  let endIndex = events.length - 1;
+  for (let i = events.length - 1; i >= 0; i -= 1) {
+    if (events[i]?.seq === turnEnd?.seq) { endIndex = i; break; }
+  }
+  let userSource;
+  const goalOps = [];
+  let lastAssistantText;
+  for (let i = endIndex; i >= 0; i -= 1) {
+    const event = events[i];
+    if (!event) continue;
+    if (event.type === "turn/start" && event.data?.turn === turn) break;
+    // Every user/message in the window overwrites: walking backwards, the
+    // final value is the FIRST message of the turn — the driving input.
+    if (event.type === "user/message" && event.data?.source) userSource = event.data.source;
+    if (event.type === "goal/change" && event.data?.operation) goalOps.push(event.data.operation);
+    if (event.type === "assistant/message" && event.data?.turn === turn && lastAssistantText === undefined) {
+      const text = textOfMessage(event.data.message);
+      if (text) lastAssistantText = text;
+    }
+  }
+  return { userSource, goalOps, lastAssistantText };
+}
+
+export const apply = (ctx, config = {}) => {
+  const cfg = {
+    enabled: true,
+    reasons: ["completed", "error", "max-tokens"],
+    includeSubagents: false,
+    notifyOnStart: false,
+    notifyOnApproval: true,
+    notifyOnAskUser: true,
+    notifyOnGoalRounds: false,
+    excerpt: true,
+    excerptMaxChars: 80,
+    appName: "DeepSeek Harness",
+    aumid: "DeepSeekHarness.Notify",
+    log: true,
+    debug: false,
+    ...config,
+  };
+  const reasons = new Set(cfg.reasons);
+  const logPath = join(tmpdir(), "dsh-notify", "notify.log");
+
+  const log = (entry) => {
+    if (!cfg.log) return;
+    try {
+      mkdirSync(join(tmpdir(), "dsh-notify"), { recursive: true });
+      appendFileSync(logPath, JSON.stringify({ time: Date.now(), ...entry }) + "\n");
+    } catch {
+      // diagnostics must never break the agent loop
+    }
+  };
+
+  const sendToast = (title, body) => {
+    const child = spawn(
+      "powershell.exe",
+      [
+        "-NoProfile",
+        "-NonInteractive",
+        "-ExecutionPolicy",
+        "Bypass",
+        "-File",
+        NOTIFY_SCRIPT,
+        "-Title",
+        title,
+        "-Body",
+        body,
+        "-Aumid",
+        cfg.aumid,
+        "-AppName",
+        cfg.appName,
+      ],
+      { stdio: "ignore", windowsHide: true },
+    );
+    child.on("error", (error) => {
+      log({ event: "error", message: String(error?.message ?? error) });
+      ctx.logger?.warn?.("dsh-notify: 启动通知进程失败", error);
+    });
+    child.on("exit", (code) => {
+      if (code !== 0) {
+        log({ event: "error", code });
+        ctx.logger?.warn?.("dsh-notify: 通知进程退出码 " + code);
+      }
+    });
+  };
+
+  const titleFor = (session) => {
+    try {
+      return ctx.sessionTitle?.get?.(session)?.title;
+    } catch {
+      return undefined;
+    }
+  };
+
+  /** True for subagent sessions when subagents are excluded. */
+  const isFilteredSession = (session) => {
+    if (cfg.includeSubagents) return false;
+    return session?.header?.origin === "subagent" || session?.header?.delegationDepth !== undefined;
+  };
+
+  /** Last approval/policy event of the session, or undefined (defaults to ask). */
+  const effectivePolicy = (session) => {
+    const events = session?.events ?? [];
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+      const event = events[index];
+      if (event?.type === "approval/policy") return event.data?.policy;
+    }
+    return undefined;
+  };
+
+  ctx.on("session/event", (session, event) => {
+    if (!cfg.enabled) return;
+    if (cfg.debug) {
+      log({ event: "debug", type: event.type, name: event.data?.name ?? null, sessionId: session?.id });
+    }
+    if (isFilteredSession(session)) return;
+
+    if (event.type === "turn/end") {
+      const reason = event.data?.reason;
+      if (typeof reason?.kind !== "string" || !reasons.has(reason.kind)) return;
+      const window = turnWindow(session, event);
+
+      // /goal 自动推进回合默认静默：仅在目标完成/阻塞的最终回合提醒。
+      if (!cfg.notifyOnGoalRounds) {
+        const isGoalRound = window.userSource?.kind === "goal" && window.userSource.round > 0;
+        const terminal = window.goalOps.some((op) => op === "complete" || op === "block");
+        if (isGoalRound && !terminal) return;
+      }
+
+      const title = titleFor(session) || cfg.appName;
+      let body = REASON_TEXT[reason.kind] ?? "任务已结束";
+      if (Number.isInteger(event.data.turn)) body += "（第 " + event.data.turn + " 轮）";
+      if (cfg.excerpt && window.lastAssistantText) {
+        body += "\n" + truncate(window.lastAssistantText, cfg.excerptMaxChars);
+      }
+      sendToast(title, body);
+      log({
+        event: "notify",
+        sessionId: session?.id,
+        reason: reason.kind,
+        turn: event.data?.turn,
+        title,
+        body,
+      });
+      return;
+    }
+
+    if (event.type === "approval/asked" && cfg.notifyOnApproval) {
+      // Never notify when the session policy auto-rejects: nothing waits for
+      // the user, so a toast would be noise.
+      if (effectivePolicy(session) === "never") return;
+      const data = event.data ?? {};
+      const body = typeof data.toolName === "string"
+        ? (typeof data.reason === "string" && data.reason.length > 0
+          ? "工具 " + data.toolName + "：" + truncate(data.reason, 100)
+          : "工具 " + data.toolName)
+        : "有一项操作等待你的批准";
+      sendToast(cfg.appName + " · 需要审批", body);
+      log({ event: "approval", sessionId: session?.id, id: data.id, toolName: data.toolName, reason: data.reason });
+      return;
+    }
+
+    if (event.type === "tool/call" && cfg.notifyOnAskUser) {
+      const data = event.data ?? {};
+      let question;
+      if (data.name === "ask_user_question") {
+        question = extractAskQuestion(data.arguments);
+      } else if (data.name === "run_code" && typeof data.arguments === "string" && data.arguments.includes("ask_user_question")) {
+        question = extractQuestionFromCode(data.arguments);
+      }
+      if (question !== undefined || data.name === "ask_user_question") {
+        sendToast(cfg.appName + " · 需要回答", question ? truncate(question, 100) : "Agent 正在等待你的确认");
+        log({ event: "ask-user", sessionId: session?.id, question: question ?? null });
+      }
+      return;
+    }
+  });
+
+  log({ event: "start", version: VERSION, enabled: cfg.enabled, reasons: [...reasons], sessionId: null });
+  if (cfg.enabled && cfg.notifyOnStart) {
+    sendToast(cfg.appName, "任务完成提醒已激活（v" + VERSION + "）");
+  }
+}

package/lib/notify.ps1

@@ -1,35 +1,35 @@
-# dsh-notify toast sender (Windows PowerShell 5.1 required: WinRT projection).
-# Parameters are bound by PowerShell from the process argument vector, so this
-# file stays ASCII-only and needs no BOM.
-param(
-  [Parameter(Mandatory = $true)][string]$Title,
-  [Parameter(Mandatory = $true)][string]$Body,
-  [string]$Aumid = "DeepSeekHarness.Notify",
-  [string]$AppName = "DeepSeek Harness"
-)
-$ErrorActionPreference = "Stop"
-
-# Register the AppUserModelId once under HKCU so Win32 toasts are allowed.
-# Best effort: if the write is denied we still try to show the toast below.
-$key = "HKCU:\SOFTWARE\Classes\AppUserModelId\$Aumid"
-try {
-  if (-not (Test-Path $key)) {
-    New-Item -Path $key -Force | Out-Null
-    New-ItemProperty -Path $key -Name DisplayName -Value $AppName -PropertyType String -Force | Out-Null
-  }
-} catch {
-  Write-Warning ("AUMID registration failed: " + $_.Exception.Message)
-}
-
-# Project the WinRT toast API (supported natively by .NET Framework).
-[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] | Out-Null
-
-$xml = [Windows.UI.Notifications.ToastNotificationManager]::GetTemplateContent([Windows.UI.Notifications.ToastTemplateType]::ToastText02)
-$texts = $xml.GetElementsByTagName("text")
-$texts.Item(0).AppendChild($xml.CreateTextNode($Title)) | Out-Null
-$texts.Item(1).AppendChild($xml.CreateTextNode($Body)) | Out-Null
-
-$toast = New-Object Windows.UI.Notifications.ToastNotification($xml)
-$notifier = [Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier($Aumid)
-$notifier.Show($toast)
-Write-Output "toast shown"
+# dsh-notify toast sender (Windows PowerShell 5.1 required: WinRT projection).
+# Parameters are bound by PowerShell from the process argument vector, so this
+# file stays ASCII-only and needs no BOM.
+param(
+  [Parameter(Mandatory = $true)][string]$Title,
+  [Parameter(Mandatory = $true)][string]$Body,
+  [string]$Aumid = "DeepSeekHarness.Notify",
+  [string]$AppName = "DeepSeek Harness"
+)
+$ErrorActionPreference = "Stop"
+
+# Register the AppUserModelId once under HKCU so Win32 toasts are allowed.
+# Best effort: if the write is denied we still try to show the toast below.
+$key = "HKCU:\SOFTWARE\Classes\AppUserModelId\$Aumid"
+try {
+  if (-not (Test-Path $key)) {
+    New-Item -Path $key -Force | Out-Null
+    New-ItemProperty -Path $key -Name DisplayName -Value $AppName -PropertyType String -Force | Out-Null
+  }
+} catch {
+  Write-Warning ("AUMID registration failed: " + $_.Exception.Message)
+}
+
+# Project the WinRT toast API (supported natively by .NET Framework).
+[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] | Out-Null
+
+$xml = [Windows.UI.Notifications.ToastNotificationManager]::GetTemplateContent([Windows.UI.Notifications.ToastTemplateType]::ToastText02)
+$texts = $xml.GetElementsByTagName("text")
+$texts.Item(0).AppendChild($xml.CreateTextNode($Title)) | Out-Null
+$texts.Item(1).AppendChild($xml.CreateTextNode($Body)) | Out-Null
+
+$toast = New-Object Windows.UI.Notifications.ToastNotification($xml)
+$notifier = [Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier($Aumid)
+$notifier.Show($toast)
+Write-Output "toast shown"

package/package.json

@@ -1,23 +1,37 @@
 {
   "name": "dsh-notify-windows",
-  "version": "0.5.0",
-  "description": "DeepSeek Harness 插件：任务完成时发送 Windows 系统通知",
+  "version": "0.6.0",
+  "description": "DeepSeek Harness (DSH) 插件：任务完成 / 等待审批 / 等待回答时发送 Windows 系统桌面通知",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/SeverusZh/dsh-notify-windows.git"
   },
+  "homepage": "https://github.com/SeverusZh/dsh-notify-windows",
+  "bugs": {
+    "url": "https://github.com/SeverusZh/dsh-notify-windows/issues"
+  },
   "type": "module",
   "main": "lib/index.js",
   "exports": {
     ".": "./lib/index.js"
   },
   "files": [
-    "lib"
+    "lib",
+    "cordis.patch.yml",
+    "CHANGELOG.md"
   ],
   "license": "MIT",
   "engines": {
     "node": ">=20"
   },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
   "keywords": [
     "deepseek-harness",
     "dsh",
@@ -26,4 +40,4 @@
     "toast",
     "windows"
   ]
-}
+}