dsh-notify-windows 0.5.0 → 0.7.0

package/CHANGELOG.md

@@ -0,0 +1,62 @@
+# Changelog
+
+本项目遵循 [Semantic Versioning](https://semver.org/)。
+
+## [0.7.0] - 2026-08-20
+
+### 新增「点击通知跳转」功能
+
+- 任务完成 / 审批 / 提问的 toast 变为**可点击**：点击后打开 DSH Web GUI。优先聚焦已打开的
+  DSH 浏览器标签或 Chrome Application 窗口；无已开窗口则在默认浏览器新开标签。
+  目标 URL 携带 `?session=<id>`（rc.8 前端暂不消费，为未来深链预留）。
+- **实现**：
+  - `lib/notify.ps1` 使用 `activationType="protocol"` + `launch`（协议 `dshnotify://` 或原始
+    URL），使 toast 点击可触发跳转；
+  - `lib/launcher.ps1` 处理聚焦 / 跳转：CDP 尽力 → Win32 聚焦 → `Start-Process` 兜底；
+  - `lib/index.js` 新增配置 `openOnClick` / `preferExisting` / `webUrl`，并自动发现 web
+    基地址（`ctx.webServer.port`，默认 `http://127.0.0.1:3080`）。
+- **配置表补三行**：`openOnClick`(bool, true)、`preferExisting`(bool, true)、
+  `webUrl`(string, '' 自动发现)。
+
+### 已知限制
+
+- DSH 0.1.0-rc.8 前端暂无会话深链：点击后打开 GUI 首页 / 会话列表并聚焦已有窗口；真正的
+  「一键直达某会话」需前端侧支持。
+
+## [0.6.0] - 2026-08-20
+
+### 变更（dsh.bundle 安装 + 对齐 dsh 0.1.0-rc.8）
+
+- **改为 `dsh.bundle` 安装**：新增 `cordis.patch.yml`（包内自带 `insert:` 条目）并在
+  package.json 声明 `dsh.bundle.patch`。安装方式从「手动打 insert + 复制到
+  node_modules」改为 `dsh plugin --profile <name> add dsh-notify-windows`，
+  pnpm 安装后 `dsh` 自动把包加入 `dsh.profile.bundles` 层栈并挂载入口。
+- **删除 manual-insert 部署**：移除 `scripts/install-profile.ps1`（旧的复制 lib 到
+  version-suffixed node_modules 目录并正则改写 profile `cordis.patch.yml` 的做法）。
+- **rc.8 兼容**：
+  - 子代理过滤改用 rc.8 的 `session.header.delegationDepth`（旧字段 `depth` 已移除）；
+  - 导出风格改为 rc.8 推荐的 `export const name` + `export const apply`（旧 default
+    export 会让 loader 丢弃 `name` 命名导出，fiber 名显示为 `dshNotify`）。
+- **配置文件覆盖方式**：不再需要手动 `- insert:`；在 profile 的 `cordis.patch.yml`
+  中按 id（`dsh-notify`）覆盖 `config` 即可，与 `dsh-yolo-mode` 等 bundle 插件一致。
+
+### 其它
+
+- 冒烟测试 `scripts/smoke-test.mjs` 路径自发现（`DSH_HARNESS_DIR` 可覆盖），
+  适配新的 `apply` 导出与 `delegationDepth` 字段。
+- README 更新：安装 / 更新 / 卸载命令与配置覆盖示例。
+
+## [0.5.0] - 2026-08-13
+
+### 新增
+
+- /goal 自动推进回合默认静默提醒，仅目标完成 / 阻塞的最终回合弹通知（可配置）。
+- 任务完成通知自动附带 Agent 最后回复的摘要（可裁剪，`excerptMaxChars`）。
+
+## [0.4.0] - 2026-08-13
+
+### 新增
+
+- 增加审批（`approval/asked`）与提问（`ask_user_question` / `run_code` 内联调用）
+  提醒。
+- Windows 桌面 Toast 通知，通过 PowerShell 5.1 WinRT API 发送，零运行时依赖。

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 SeverusZh
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 SeverusZh
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -1,104 +1,132 @@
-# dsh-notify-windows
-
-> A DeepSeek Harness (DSH) plugin that sends Windows toast notifications whenever the agent needs your attention.
-
-<p align="center">
-  <img src="https://img.shields.io/npm/v/dsh-notify-windows" alt="npm">
-  <img src="https://img.shields.io/github/license/SeverusZh/dsh-notify-windows" alt="license">
-  <img src="https://img.shields.io/badge/platform-Windows%2010%2F11-blue" alt="platform">
-  <img src="https://img.shields.io/github/stars/SeverusZh/dsh-notify-windows?style=social" alt="stars">
-</p>
-
-**Task finished** ✅ ｜ **Approval pending** 🔐 ｜ **Question pending** ❓ — never miss anything that needs you, even away from the screen.
-
-## ✨ Features
-
-- **Task completion** — listens to `turn/end` session events; toasts on completed / errored / max-tokens turns, with the session title and reason;
-- **Approval pending** — listens to `approval/asked`; toasts the moment a permission decision is waiting, and skips sessions whose approval policy is `never` (nothing is waiting there);
-- **Question pending** — toasts when the agent calls `ask_user_question`; in this deployment every tool call goes through `run_code`, so the plugin also scans `run_code` source for `tools.ask_user_question(` calls and extracts the question text;
-- **Quiet by default** — subagent sessions are ignored unless `includeSubagents` is set;
-- **Zero dependencies** — toasts are sent through Windows PowerShell 5.1's WinRT toast API, with the AppUserModelId registered under HKCU on first use (no admin required);
-- **Diagnosable** — optional log (`%TEMP%\dsh-notify\notify.log`) and a debug event log.
-
-## 🚀 Install
-
-### Option A: npm (recommended)
-
-```powershell
-dsh plugin --profile web add dsh-notify-windows
-```
-
-Then add this entry to the profile's `cordis.patch.yml` (the running host hot-applies it — no restart needed):
-
-```yaml
-- insert:
-    - id: dsh-notify
-      name: 'dsh-notify-windows'
-      config:
-        enabled: true
-        reasons: [completed, error, max-tokens]
-        includeSubagents: false
-        notifyOnStart: true
-        notifyOnApproval: true
-        notifyOnAskUser: true
-        appName: 'DeepSeek Harness'
-        aumid: 'DeepSeekHarness.Notify'
-        log: true
-        debug: false
-```
-
-### Option B: from source
-
-```powershell
-git clone git@github.com:SeverusZh/dsh-notify-windows.git
-cd dsh-notify-windows
-pwsh scripts\install-profile.ps1 -Profile web
-```
-
-The script deploys the package into the profile's hoisted `node_modules` as `dsh-notify-windows-<version>` — the versioned directory lets a running host hot-load a redeploy without a restart — and writes the patch entry above idempotently.
-
-## ⚙️ Configuration
-
-| Key | Default | Meaning |
-| --- | --- | --- |
-| `enabled` | `true` | master switch |
-| `reasons` | `[completed, error, max-tokens]` | turn-end reasons to notify (`aborted` / `interrupted` / `blocked` also available) |
-| `includeSubagents` | `false` | also notify subagent sessions |
-| `notifyOnStart` | `false` | toast when the plugin loads |
-| `notifyOnApproval` | `true` | toast on `approval/asked` (skipped under policy `never`) |
-| `notifyOnAskUser` | `true` | toast when the agent asks you a question |
-| `notifyOnGoalRounds` | `false` | stay quiet on /goal auto-continuation rounds (except the final complete/block round) |
-| `excerpt` | `true` | append an excerpt of the agent's final reply to the toast |
-| `excerptMaxChars` | `80` | max characters of the excerpt |
-| `appName` | `DeepSeek Harness` | toast source display name and fallback title |
-| `aumid` | `DeepSeekHarness.Notify` | toast AppUserModelId |
-| `log` | `true` | write `%TEMP%\dsh-notify\notify.log` |
-| `debug` | `false` | log every session event (diagnostics, heavy) |
-
-## 🔔 Triggers
-
-| Scenario | Session event | Sample toast |
-| --- | --- | --- |
-| Task finished | `turn/end` | Task completed (turn N) |
-| Task errored / capped | `turn/end` | Task errored / Output hit token cap |
-| Approval waiting | `approval/asked` | DeepSeek Harness · Needs approval / tool pwsh: … |
-| Question waiting | `tool/call` (incl. run_code detection) | DeepSeek Harness · Needs your answer / Continue? |
-
-## 🧪 Verify
-
-```powershell
-node scripts\smoke-test.mjs
-```
-
-Runs the plugin on a bare cordis Context with synthetic events: three test toasts fire (completion, approval, question) and the log assertions verify the filtering (subagent, `never`-policy, unrelated calls).
-
-## ❓ FAQ
-
-- **No toast?** Check Windows notification settings for this app and Focus Assist; the AUMID registers itself on first use.
-- **Do /goal rounds toast?** Not by default: auto-continuation rounds stay quiet and only the final round that completes (or blocks) the goal toasts. Set `notifyOnGoalRounds` to `true` to hear every round.
-- **Approval toasts missing?** Sessions whose approval policy is `never` auto-reject — nothing waits, so the plugin stays quiet. Only `ask`-policy sessions notify.
-- **Hot-update after code changes?** Re-run the install script (the versioned directory name busts the module cache); for npm installs run `dsh plugin --profile web update dsh-notify-windows` and restart the host.
-
-## 📄 License
-
+# dsh-notify-windows
+
+> A DeepSeek Harness (DSH) plugin that sends Windows toast notifications whenever the agent needs your attention.
+
+<p align="center">
+  <img src="https://img.shields.io/npm/v/dsh-notify-windows" alt="npm">
+  <img src="https://img.shields.io/github/license/SeverusZh/dsh-notify-windows" alt="license">
+  <img src="https://img.shields.io/badge/platform-Windows%2010%2F11-blue" alt="platform">
+  <img src="https://img.shields.io/github/stars/SeverusZh/dsh-notify-windows?style=social" alt="stars">
+</p>
+
+**Task finished** ✅ ｜ **Approval pending** 🔐 ｜ **Question pending** ❓ — never miss anything that needs you, even away from the screen.
+
+## ✨ Features
+
+- **Task completion** — listens to `turn/end` session events; toasts on completed / errored / max-tokens turns, with the session title and reason;
+- **Approval pending** — listens to `approval/asked`; toasts the moment a permission decision is waiting, and skips sessions whose approval policy is `never` (nothing is waiting there);
+- **Question pending** — toasts when the agent calls `ask_user_question`; in this deployment every tool call goes through `run_code`, so the plugin also scans `run_code` source for `tools.ask_user_question(` calls and extracts the question text;
+- **Quiet by default** — subagent sessions are ignored unless `includeSubagents` is set;
+- **Zero dependencies** — toasts are sent through Windows PowerShell 5.1's WinRT toast API, with the AppUserModelId registered under HKCU on first use (no admin required);
+- **Diagnosable** — optional log (`%TEMP%\dsh-notify\notify.log`) and a debug event log.
+
+## 🚀 Install
+
+The plugin installs through the **`dsh.bundle`** mechanism: the npm package ships its own
+`cordis.patch.yml`, and after `dsh plugin add` it auto-mounts the `dsh-notify` entry — no
+manual `- insert:` needed.
+
+```powershell
+dsh plugin --profile web add dsh-notify-windows
+```
+
+Restart DSH and refresh the browser:
+
+```powershell
+dsh --profile web
+```
+
+> Note: don't hand-add `- insert:` with `dsh-notify` anymore — DSH would fail to boot with
+> `duplicate loader entry id: dsh-notify`. To tweak settings, override the entry by id in the
+> profile's `cordis.patch.yml` (see below).
+
+### Update / Remove
+
+```powershell
+dsh plugin --profile web update dsh-notify-windows
+dsh plugin --profile web remove dsh-notify-windows
+```
+
+Restart the DSH host after updating (a newly added bundle layer needs a boot).
+
+## ⚙️ Configuration
+
+All `config` keys are optional and default in the plugin. To override, target the entry by id
+in `$DSH_HOME/profiles/web/cordis.patch.yml` (hot-applied by the running host — no restart):
+
+```yaml
+- id: dsh-notify
+  name: dsh-notify-windows
+  config:
+    enabled: true
+    reasons: [completed, error, max-tokens]
+    notifyOnStart: true
+    notifyOnApproval: true
+    log: true
+```
+
+| Key | Default | Meaning |
+| --- | --- | --- |
+| `enabled` | `true` | master switch |
+| `reasons` | `[completed, error, max-tokens]` | turn-end reasons to notify (`aborted` / `interrupted` / `blocked` also available) |
+| `includeSubagents` | `false` | also notify subagent sessions |
+| `notifyOnStart` | `false` | toast when the plugin loads |
+| `notifyOnApproval` | `true` | toast on `approval/asked` (skipped under policy `never`) |
+| `notifyOnAskUser` | `true` | toast when the agent asks you a question |
+| `notifyOnGoalRounds` | `false` | stay quiet on /goal auto-continuation rounds (except the final complete/block round) |
+| `excerpt` | `true` | append an excerpt of the agent's final reply to the toast |
+| `excerptMaxChars` | `80` | max characters of the excerpt |
+| `appName` | `DeepSeek Harness` | toast source display name and fallback title |
+| `aumid` | `DeepSeekHarness.Notify` | toast AppUserModelId |
+| `log` | `true` | write `%TEMP%\dsh-notify\notify.log` |
+| `debug` | `false` | log every session event (diagnostics, heavy) |
+| `openOnClick` | `true` | make completion / approval / question toasts clickable (false falls back to the old non-clickable toast) |
+| `preferExisting` | `true` | when true, launcher prefers focusing an open DSH window; when false, just open the URL in the default browser |
+| `webUrl` | `''` | override the auto-discovered base URL (e.g. `http://192.168.1.5:4000`); leave empty to auto-discover (defaults to `http://127.0.0.1:3080`) |
+
+## 🔔 Triggers
+
+| Scenario | Session event | Sample toast |
+| --- | --- | --- |
+| Task finished | `turn/end` | Task completed (turn N) |
+| Task errored / capped | `turn/end` | Task errored / Output hit token cap |
+| Approval waiting | `approval/asked` | DeepSeek Harness · Needs approval / tool pwsh: … |
+| Question waiting | `tool/call` (incl. run_code detection) | DeepSeek Harness · Needs your answer / Continue? |
+
+## 🔗 Click to open
+
+Toasts for task completion / approval pending / question pending are clickable → they open the
+DSH Web GUI. The plugin prefers to focus an already-open DSH browser tab or Chrome Application
+window; if none is open, it opens a new tab in the default browser and loads the GUI. The target
+URL carries a `?session=<id>` parameter (not yet consumed by the rc.8 frontend — reserved for
+future deep links).
+
+**Configuration:**
+
+- `openOnClick` (default `true`; `false` disables clickability and falls back to the old non-clickable toast);
+- `preferExisting` (default `true`; when true the launcher prefers reusing an existing window; when false it opens the URL directly in the default browser);
+- `webUrl` (optional, overrides the auto-discovered base URL, e.g. `http://192.168.1.5:4000`; leave empty to auto-discover / default `http://127.0.0.1:3080`).
+
+**Notes:** the first click auto-registers the `dshnotify://` protocol handler (HKCU, no admin
+needed); on failure it silently degrades to "open in default browser".
+
+> Note: DSH 0.1.0-rc.8 does not yet support deep-linking to a single session by URL; clicking opens the DSH interface (home / session list) and focuses the existing window, and you pick the target session from the list. Once the DSH frontend supports deep links, `?session=<id>` will jump straight to it.
+
+## 🧪 Verify
+
+```powershell
+node scripts\smoke-test.mjs
+```
+
+Runs the plugin on a bare cordis Context with synthetic events: three test toasts fire (completion, approval, question) and the log assertions verify the filtering (subagent, `never`-policy, unrelated calls).
+
+## ❓ FAQ
+
+- **No toast?** Check Windows notification settings for this app and Focus Assist; the AUMID registers itself on first use.
+- **Do /goal rounds toast?** Not by default: auto-continuation rounds stay quiet and only the final round that completes (or blocks) the goal toasts. Set `notifyOnGoalRounds` to `true` to hear every round.
+- **Approval toasts missing?** Sessions whose approval policy is `never` auto-reject — nothing waits, so the plugin stays quiet. Only `ask`-policy sessions notify.
+- **Hot-update after code changes?** Run `dsh plugin --profile web update dsh-notify-windows`, then restart the DSH host.
+
+## 📄 License
+
 [MIT](./LICENSE) © 2026 SeverusZh

package/README.md

@@ -1,104 +1,129 @@
-# dsh-notify-windows
-
-> DeepSeek Harness（DSH）插件：当 Agent 需要你关注时，向 Windows 发送系统桌面通知。
-
-<p align="center">
-  <img src="https://img.shields.io/npm/v/dsh-notify-windows" alt="npm">
-  <img src="https://img.shields.io/github/license/SeverusZh/dsh-notify-windows" alt="license">
-  <img src="https://img.shields.io/badge/platform-Windows%2010%2F11-blue" alt="platform">
-  <img src="https://img.shields.io/github/stars/SeverusZh/dsh-notify-windows?style=social" alt="stars">
-</p>
-
-**任务完成** ✅ ｜ **等待审批** 🔐 ｜ **等待回答** ❓ —— 离开屏幕也不错过任何需要你处理的事。
-
-## ✨ 功能
-
-- **任务完成提醒**：监听会话 `turn/end` 事件，任务完成 / 出错 / 输出超限时立即弹窗，标题自动使用会话标题，正文显示原因与轮次；
-- **权限审批提醒**：监听 `approval/asked` 事件，有操作等待你的审批时立即提醒；会话审批策略为 `never` 时自动跳过（此时没有东西在等你）；
-- **提问确认提醒**：Agent 调用 `ask_user_question` 向你提问时提醒；本部署下所有工具都经 `run_code` 调用，插件会扫描 `run_code` 程序源码中的 `tools.ask_user_question(` 调用并提取问题文本；
-- **防打扰**：默认忽略子代理（subagent）会话，只提醒主会话；
-- **零依赖**：通知通过 Windows PowerShell 5.1 的 WinRT Toast API 发送，自动注册 HKCU 的 AppUserModelId（无需管理员权限）；
-- **可诊断**：可选日志（`%TEMP%\dsh-notify\notify.log`）与 debug 事件日志。
-
-## 🚀 安装
-
-### 方式一：npm（推荐）
-
-```powershell
-dsh plugin --profile web add dsh-notify-windows
-```
-
-然后在 profile 的 `cordis.patch.yml` 中追加条目（该文件被运行中的 DSH 热监视，改动立即生效，无需重启）：
-
-```yaml
-- insert:
-    - id: dsh-notify
-      name: 'dsh-notify-windows'
-      config:
-        enabled: true
-        reasons: [completed, error, max-tokens]
-        includeSubagents: false
-        notifyOnStart: true
-        notifyOnApproval: true
-        notifyOnAskUser: true
-        appName: 'DeepSeek Harness'
-        aumid: 'DeepSeekHarness.Notify'
-        log: true
-        debug: false
-```
-
-### 方式二：源码安装
-
-```powershell
-git clone git@github.com:SeverusZh/dsh-notify-windows.git
-cd dsh-notify-windows
-pwsh scripts\install-profile.ps1 -Profile web
-```
-
-脚本会把插件部署到 profile 的 hoisted `node_modules`（目录名 `dsh-notify-windows-<版本>`，重新部署时更换目录名，让运行中的宿主热加载新代码而无需重启），并幂等地写入上面的 patch 条目。
-
-## ⚙️ 配置项
-
-| 配置 | 默认值 | 说明 |
-| --- | --- | --- |
-| `enabled` | `true` | 总开关 |
-| `reasons` | `[completed, error, max-tokens]` | 需要提醒的回合结束原因（可选 `aborted` / `interrupted` / `blocked`） |
-| `includeSubagents` | `false` | 是否也提醒子代理会话 |
-| `notifyOnStart` | `false` | 插件加载时发一条「已激活」通知 |
-| `notifyOnApproval` | `true` | 审批请求提醒（策略 `never` 时自动跳过） |
-| `notifyOnAskUser` | `true` | Agent 提问等待回答时提醒 |
-| `notifyOnGoalRounds` | `false` | /goal 自动推进回合不提醒（目标完成/阻塞的最终回合除外） |
-| `excerpt` | `true` | 通知正文附带 Agent 最后回复的摘要 |
-| `excerptMaxChars` | `80` | 摘要最大字符数 |
-| `appName` | `DeepSeek Harness` | 通知来源显示名与兜底标题 |
-| `aumid` | `DeepSeekHarness.Notify` | 通知 AppUserModelId |
-| `log` | `true` | 写日志到 `%TEMP%\dsh-notify\notify.log` |
-| `debug` | `false` | 把所有会话事件写入日志（排查用，量大） |
-
-## 🔔 触发场景
-
-| 场景 | 会话事件 | 通知示例 |
-| --- | --- | --- |
-| 任务完成 | `turn/end` | 「任务已完成（第 N 轮）」 |
-| 任务出错 / 超限 | `turn/end` | 「任务出错」/「输出达到 token 上限」 |
-| 等待审批 | `approval/asked` | 「DeepSeek Harness · 需要审批 / 工具 pwsh：…」 |
-| 等待回答 | `tool/call`（含 run_code 检测） | 「DeepSeek Harness · 需要回答 / 是否继续？」 |
-
-## 🧪 验证
-
-```powershell
-node scripts\smoke-test.mjs
-```
-
-独立进程内用 cordis Context 模拟会话事件：应弹出任务完成 / 审批 / 提问三条测试通知，并断言日志记录与过滤行为（子代理、`never` 策略、无关调用均被过滤）。
-
-## ❓ 常见问题
-
-- **收不到通知？** 检查 Windows「通知与操作」设置是否允许该应用显示通知，以及「专注助手」是否开启；首次发送会自动注册 AUMID。
-- **/goal 模式会提醒吗？** 默认不会：自动推进的中间回合保持静默，只有目标完成（或阻塞）的最终回合才提醒；如需每个回合都提醒，把 `notifyOnGoalRounds` 设为 `true`。
-- **为什么审批提醒有时不弹？** 会话审批策略为 `never` 时审批会被自动拒绝、不会等待，插件会跳过提醒；策略为 `ask` 时才提醒。
-- **更新插件代码后如何热更新？** 重新执行安装脚本（版本目录名变化即热加载）；用 npm 安装时执行 `dsh plugin --profile web update dsh-notify-windows` 后重启宿主。
-
-## 📄 许可证
-
+# dsh-notify-windows
+
+> DeepSeek Harness（DSH）插件：当 Agent 需要你关注时，向 Windows 发送系统桌面通知。
+
+<p align="center">
+  <img src="https://img.shields.io/npm/v/dsh-notify-windows" alt="npm">
+  <img src="https://img.shields.io/github/license/SeverusZh/dsh-notify-windows" alt="license">
+  <img src="https://img.shields.io/badge/platform-Windows%2010%2F11-blue" alt="platform">
+  <img src="https://img.shields.io/github/stars/SeverusZh/dsh-notify-windows?style=social" alt="stars">
+</p>
+
+**任务完成** ✅ ｜ **等待审批** 🔐 ｜ **等待回答** ❓ —— 离开屏幕也不错过任何需要你处理的事。
+
+## ✨ 功能
+
+- **任务完成提醒**：监听会话 `turn/end` 事件，任务完成 / 出错 / 输出超限时立即弹窗，标题自动使用会话标题，正文显示原因与轮次；
+- **权限审批提醒**：监听 `approval/asked` 事件，有操作等待你的审批时立即提醒；会话审批策略为 `never` 时自动跳过（此时没有东西在等你）；
+- **提问确认提醒**：Agent 调用 `ask_user_question` 向你提问时提醒；本部署下所有工具都经 `run_code` 调用，插件会扫描 `run_code` 程序源码中的 `tools.ask_user_question(` 调用并提取问题文本；
+- **防打扰**：默认忽略子代理（subagent）会话，只提醒主会话；
+- **零依赖**：通知通过 Windows PowerShell 5.1 的 WinRT Toast API 发送，自动注册 HKCU 的 AppUserModelId（无需管理员权限）；
+- **可诊断**：可选日志（`%TEMP%\dsh-notify\notify.log`）与 debug 事件日志。
+
+## 🚀 安装
+
+项目通过 **`dsh.bundle`** 机制安装：npm 包自带的 `cordis.patch.yml` 会在
+`dsh plugin add` 后自动挂载 `dsh-notify` 入口，**不需要**再手动 `- insert:`。
+
+```powershell
+dsh plugin --profile web add dsh-notify-windows
+```
+
+重启 DSH 并刷新浏览器后生效：
+
+```powershell
+dsh --profile web
+```
+
+> 注意：不要再用 `- insert:` 手动添加 `dsh-notify`，否则启动会报
+> `duplicate loader entry id: dsh-notify`。想调整配置，在 profile 的
+> `cordis.patch.yml` 里按 id 覆盖即可（见下节）。
+
+### 更新 / 卸载
+
+```powershell
+dsh plugin --profile web update dsh-notify-windows
+dsh plugin --profile web remove dsh-notify-windows
+```
+
+更新后需重启 DSH 宿主（新增 bundle 层需要重新启动）。
+
+## ⚙️ 配置项
+
+插件行 `config` 全字段可选，未填按默认值。需要调整时，在
+`$DSH_HOME/profiles/web/cordis.patch.yml` 里按 id 覆盖主条目即可
+（该文件被运行中的 DSH 热监视，改动立即生效，无需重启）：
+
+```yaml
+- id: dsh-notify
+  name: dsh-notify-windows
+  config:
+    enabled: true
+    reasons: [completed, error, max-tokens]
+    notifyOnStart: true
+    notifyOnApproval: true
+    log: true
+```
+
+| 配置 | 默认值 | 说明 |
+| --- | --- | --- |
+| `enabled` | `true` | 总开关 |
+| `reasons` | `[completed, error, max-tokens]` | 需要提醒的回合结束原因（可选 `aborted` / `interrupted` / `blocked`） |
+| `includeSubagents` | `false` | 是否也提醒子代理会话 |
+| `notifyOnStart` | `false` | 插件加载时发一条「已激活」通知 |
+| `notifyOnApproval` | `true` | 审批请求提醒（策略 `never` 时自动跳过） |
+| `notifyOnAskUser` | `true` | Agent 提问等待回答时提醒 |
+| `notifyOnGoalRounds` | `false` | /goal 自动推进回合不提醒（目标完成/阻塞的最终回合除外） |
+| `excerpt` | `true` | 通知正文附带 Agent 最后回复的摘要 |
+| `excerptMaxChars` | `80` | 摘要最大字符数 |
+| `appName` | `DeepSeek Harness` | 通知来源显示名与兜底标题 |
+| `aumid` | `DeepSeekHarness.Notify` | 通知 AppUserModelId |
+| `log` | `true` | 写日志到 `%TEMP%\dsh-notify\notify.log` |
+| `debug` | `false` | 把所有会话事件写入日志（排查用，量大） |
+| `openOnClick` | `true` | 任务完成 / 审批 / 提问 toast 是否可点击（false 回退为旧的无点击 toast） |
+| `preferExisting` | `true` | true 走 launcher 优先聚焦已开 DSH 窗口；false 直接用默认浏览器打开 URL |
+| `webUrl` | `''` | 覆盖自动发现的基地址（如 `http://192.168.1.5:4000`），留空自动发现（默认 `http://127.0.0.1:3080`） |
+
+## 🔔 触发场景
+
+| 场景 | 会话事件 | 通知示例 |
+| --- | --- | --- |
+| 任务完成 | `turn/end` | 「任务已完成（第 N 轮）」 |
+| 任务出错 / 超限 | `turn/end` | 「任务出错」/「输出达到 token 上限」 |
+| 等待审批 | `approval/asked` | 「DeepSeek Harness · 需要审批 / 工具 pwsh：…」 |
+| 等待回答 | `tool/call`（含 run_code 检测） | 「DeepSeek Harness · 需要回答 / 是否继续？」 |
+
+## 🔗 点击通知跳转
+
+任务完成 / 等待审批 / 等待回答的 toast 可点击 → 打开 DSH Web GUI。优先聚焦已打开的
+DSH 浏览器标签或 Chrome Application 窗口；没有已开窗口时在默认浏览器新开标签并打开 GUI。
+目标 URL 带 `?session=<id>` 参数（rc.8 前端暂不消费，为未来深链预留）。
+
+**配置：**
+
+- `openOnClick`（默认 `true`，`false` 则关闭可点击，回退为旧的无点击 toast）；
+- `preferExisting`（默认 `true`，`true` 走 launcher 优先复用已开窗口；`false` 直接用默认浏览器打开 URL）；
+- `webUrl`（可选，覆盖自动发现的基地址，如 `http://192.168.1.5:4000`，留空自动发现 / 默认 `http://127.0.0.1:3080`）。
+
+**注意事项：** 首次点击会自动注册 `dshnotify://` 协议处理器（HKCU，无需管理员）；故障会静默降级为「默认浏览器打开」。
+
+> 说明：DSH 0.1.0-rc.8 前端暂不支持按 URL 直达单个会话；点击后打开的是 DSH 界面（首页/会话列表）并聚焦已有窗口，目标会话需在列表中选择。未来 DSH 前端支持深链后 `?session=<id>` 将直接定位。
+
+## 🧪 验证
+
+```powershell
+node scripts\smoke-test.mjs
+```
+
+独立进程内用 cordis Context 模拟会话事件：应弹出任务完成 / 审批 / 提问三条测试通知，并断言日志记录与过滤行为（子代理、`never` 策略、无关调用均被过滤）。
+
+## ❓ 常见问题
+
+- **收不到通知？** 检查 Windows「通知与操作」设置是否允许该应用显示通知，以及「专注助手」是否开启；首次发送会自动注册 AUMID。
+- **/goal 模式会提醒吗？** 默认不会：自动推进的中间回合保持静默，只有目标完成（或阻塞）的最终回合才提醒；如需每个回合都提醒，把 `notifyOnGoalRounds` 设为 `true`。
+- **为什么审批提醒有时不弹？** 会话审批策略为 `never` 时审批会被自动拒绝、不会等待，插件会跳过提醒；策略为 `ask` 时才提醒。
+- **更新插件代码后如何生效？** 执行 `dsh plugin --profile web update dsh-notify-windows` 后重启 DSH 宿主。
+
+## 📄 许可证
+
 [MIT](./LICENSE) © 2026 SeverusZh

package/cordis.patch.yml

@@ -0,0 +1,14 @@
+# dsh-notify-windows bundle patch.
+#
+# Declares the plugin's single loader entry. The `insert:` rows live in the
+# package's own patch file, so `dsh plugin add dsh-notify-windows` auto-mounts
+# the entry — no manual `- insert:` in the profile's cordis.patch.yml.
+# The `name` (a bare package specifier) resolves to this package's
+# `main`/`exports["."]` (lib/index.js) via the loader's two-anchor resolution
+# (dsh install first, then the profile's node_modules).
+#
+# Install: dsh plugin --profile <name> add dsh-notify-windows
+# Restart `dsh --profile <name>` after installing.
+- insert:
+    - id: dsh-notify
+      name: dsh-notify-windows

package/lib/index.js

@@ -7,6 +7,11 @@
 //   - tool/call         — the agent called the ask_user_question tool (directly
 //                         or inside a run_code program) and is waiting.
 //
+// Click-to-open: when enabled (default) and a session is available, the toast
+// becomes clickable and opens the DSH web GUI (preferring an already-open
+// browser/App window) deep-linked to that conversation. Disable with
+// openOnClick:false or omit the session to keep the legacy non-clickable toast.
+//
 // Goal rounds (/goal auto-continuation) are quiet by default: only the final
 // round that completes or blocks the goal produces a toast.
 //
@@ -20,7 +25,7 @@ import { join } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const NOTIFY_SCRIPT = fileURLToPath(new URL("./notify.ps1", import.meta.url));
-const VERSION = "0.5.0";
+const VERSION = "0.7.0";
 
 const REASON_TEXT = {
   completed: "任务已完成",
@@ -111,7 +116,7 @@ function turnWindow(session, turnEnd) {
   return { userSource, goalOps, lastAssistantText };
 }
 
-export default function dshNotify(ctx, config = {}) {
+export const apply = (ctx, config = {}) => {
   const cfg = {
     enabled: true,
     reasons: ["completed", "error", "max-tokens"],
@@ -126,6 +131,10 @@ export default function dshNotify(ctx, config = {}) {
     aumid: "DeepSeekHarness.Notify",
     log: true,
     debug: false,
+    // Click-to-open feature (v0.7.0):
+    openOnClick: true, // when false: never make toasts clickable (never pass -Url)
+    preferExisting: true, // true -> -LaunchProtocol 1 (launcher, prefer existing window); false -> 0 (plain open)
+    webUrl: "", // manual override of the web GUI base; empty = auto-discover
     ...config,
   };
   const reasons = new Set(cfg.reasons);
@@ -141,27 +150,51 @@ export default function dshNotify(ctx, config = {}) {
     }
   };
 
-  const sendToast = (title, body) => {
-    const child = spawn(
-      "powershell.exe",
-      [
-        "-NoProfile",
-        "-NonInteractive",
-        "-ExecutionPolicy",
-        "Bypass",
-        "-File",
-        NOTIFY_SCRIPT,
-        "-Title",
-        title,
-        "-Body",
-        body,
-        "-Aumid",
-        cfg.aumid,
-        "-AppName",
-        cfg.appName,
-      ],
-      { stdio: "ignore", windowsHide: true },
-    );
+  // Authoritative base URL discovery (verified against rc.8).
+  // Always loopback: ctx.webServer.host may be 0.0.0.0, which is not a valid
+  // browser target. Use the actual bound port (correct even when config port=0).
+  const webBaseUrl = () => {
+    if (cfg.webUrl) return cfg.webUrl.replace(/\/+$/, "");
+    try {
+      const port = ctx.get?.("webServer")?.port; // actual bound port
+      if (Number.isInteger(port) && port > 0) return "http://127.0.0.1:" + port;
+    } catch {
+      // fall through to documented default
+    }
+    return "http://127.0.0.1:3080"; // documented default (dsh-web-app patch.yml)
+  };
+
+  // Per-session deep link. rc.8 ignores the ?session= query but it is harmless
+  // and future-proof for frontends that want to jump straight to a conversation.
+  const conversationUrl = (sessionId) => {
+    const base = webBaseUrl();
+    if (!sessionId) return base + "/";
+    return base + "/?session=" + encodeURIComponent(sessionId);
+  };
+
+  const sendToast = (title, body, opts = {}) => {
+    const args = [
+      "-NoProfile",
+      "-NonInteractive",
+      "-ExecutionPolicy",
+      "Bypass",
+      "-File",
+      NOTIFY_SCRIPT,
+      "-Title",
+      title,
+      "-Body",
+      body,
+      "-Aumid",
+      cfg.aumid,
+      "-AppName",
+      cfg.appName,
+    ];
+    const sessionId = opts?.sessionId;
+    if (cfg.openOnClick && sessionId) {
+      const url = conversationUrl(sessionId);
+      args.push("-Url", url, "-LaunchProtocol", cfg.preferExisting ? 1 : 0);
+    }
+    const child = spawn("powershell.exe", args, { stdio: "ignore", windowsHide: true });
     child.on("error", (error) => {
       log({ event: "error", message: String(error?.message ?? error) });
       ctx.logger?.warn?.("dsh-notify: 启动通知进程失败", error);
@@ -185,7 +218,7 @@ export default function dshNotify(ctx, config = {}) {
   /** True for subagent sessions when subagents are excluded. */
   const isFilteredSession = (session) => {
     if (cfg.includeSubagents) return false;
-    return session?.header?.origin === "subagent" || session?.header?.depth !== undefined;
+    return session?.header?.origin === "subagent" || session?.header?.delegationDepth !== undefined;
   };
 
   /** Last approval/policy event of the session, or undefined (defaults to ask). */
@@ -223,7 +256,8 @@ export default function dshNotify(ctx, config = {}) {
       if (cfg.excerpt && window.lastAssistantText) {
         body += "\n" + truncate(window.lastAssistantText, cfg.excerptMaxChars);
       }
-      sendToast(title, body);
+      sendToast(title, body, { sessionId: session?.id });
+      const url = cfg.openOnClick && session?.id ? conversationUrl(session?.id) : undefined;
       log({
         event: "notify",
         sessionId: session?.id,
@@ -231,6 +265,7 @@ export default function dshNotify(ctx, config = {}) {
         turn: event.data?.turn,
         title,
         body,
+        ...(url ? { url } : {}),
       });
       return;
     }
@@ -245,8 +280,16 @@ export default function dshNotify(ctx, config = {}) {
           ? "工具 " + data.toolName + "：" + truncate(data.reason, 100)
           : "工具 " + data.toolName)
         : "有一项操作等待你的批准";
-      sendToast(cfg.appName + " · 需要审批", body);
-      log({ event: "approval", sessionId: session?.id, id: data.id, toolName: data.toolName, reason: data.reason });
+      sendToast(cfg.appName + " · 需要审批", body, { sessionId: session?.id });
+      const url = cfg.openOnClick && session?.id ? conversationUrl(session?.id) : undefined;
+      log({
+        event: "approval",
+        sessionId: session?.id,
+        id: data.id,
+        toolName: data.toolName,
+        reason: data.reason,
+        ...(url ? { url } : {}),
+      });
       return;
     }
 
@@ -259,8 +302,14 @@ export default function dshNotify(ctx, config = {}) {
         question = extractQuestionFromCode(data.arguments);
       }
       if (question !== undefined || data.name === "ask_user_question") {
-        sendToast(cfg.appName + " · 需要回答", question ? truncate(question, 100) : "Agent 正在等待你的确认");
-        log({ event: "ask-user", sessionId: session?.id, question: question ?? null });
+        sendToast(cfg.appName + " · 需要回答", question ? truncate(question, 100) : "Agent 正在等待你的确认", { sessionId: session?.id });
+        const url = cfg.openOnClick && session?.id ? conversationUrl(session?.id) : undefined;
+        log({
+          event: "ask-user",
+          sessionId: session?.id,
+          question: question ?? null,
+          ...(url ? { url } : {}),
+        });
       }
       return;
     }
@@ -268,6 +317,7 @@ export default function dshNotify(ctx, config = {}) {
 
   log({ event: "start", version: VERSION, enabled: cfg.enabled, reasons: [...reasons], sessionId: null });
   if (cfg.enabled && cfg.notifyOnStart) {
+    // Activation toast has no session: leave non-clickable (legacy behavior).
     sendToast(cfg.appName, "任务完成提醒已激活（v" + VERSION + "）");
   }
 }

package/lib/launcher.ps1

@@ -0,0 +1,310 @@
+# dsh-notify launcher (Windows PowerShell 5.1).
+# Registered as the "dshnotify" protocol handler. Invoked by the OS as:
+#   powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -File "launcher.ps1" "%1"
+# It decodes the target URL from dshnotify://open?u=<encoded> and tries, in order:
+#   A) navigate an already-open DSH tab via Chrome DevTools Protocol (WebSocket);
+#   B) focus an already-open DSH window via Win32 P/Invoke;
+#   C) open the target URL in the default browser (Start-Process).
+# Every failure degrades silently. The click must never do nothing.
+param(
+  [Parameter(Mandatory = $true)][string]$ProtocolArgs
+)
+
+# ---------------------------------------------------------------------------
+# Helpers
+# ---------------------------------------------------------------------------
+function Write-Trace {
+  param([string]$Message)
+  try {
+    $dir = Join-Path $env:TEMP "dsh-notify"
+    if (-not (Test-Path $dir)) { New-Item -Path $dir -ItemType Directory -Force | Out-Null }
+    $line = (Get-Date -Format "yyyy-MM-dd HH:mm:ss.fff") + " " + $Message
+    Add-Content -Path (Join-Path $dir "launcher.log") -Value $line -Encoding UTF8
+  } catch {
+    # diagnostics must never break the flow
+  }
+}
+
+function Send-WebSocketJson {
+  # Synchronously sends a JSON string over a Chrome DevTools Protocol WebSocket
+  # and waits briefly for an ack frame. Returns $true on successful send.
+  param(
+    [string]$WsUrl,
+    [string]$Json,
+    [int]$TimeoutMs = 2000
+  )
+  try {
+    $ws = [System.Net.WebSockets.ClientWebSocket]::new()
+    $ct = [System.Threading.CancellationToken]::None
+    $connectTask = $ws.ConnectAsync($WsUrl, $ct)
+    $connectTask.Wait($TimeoutMs)
+    if ($ws.State -ne [System.Net.WebSockets.WebSocketState]::Open) {
+      try { $ws.Dispose() } catch {}
+      return $false
+    }
+    $bytes = [System.Text.Encoding]::UTF8.GetBytes($Json)
+    $seg = New-Object System.ArraySegment[byte] (, $bytes)
+    $sendTask = $ws.SendAsync($seg, [System.Net.WebSockets.WebMessageType]::Text, $true, $ct)
+    $sendTask.Wait($TimeoutMs)
+    if (-not $sendTask.IsCompletedSuccessfully) {
+      try { $ws.Dispose() } catch {}
+      return $false
+    }
+    # Best-effort ack read so the frame is flushed before we close.
+    $buf = New-Object byte[] 4096
+    $recvSeg = New-Object System.ArraySegment[byte] (, $buf)
+    $recvTask = $ws.ReceiveAsync($recvSeg, $ct)
+    if ($recvTask.Wait($TimeoutMs)) {
+      $ackBytes = $recvSeg.Array[0..($recvTask.Result.Count - 1)]
+      Write-Trace ("[cdp] ack=" + [System.Convert]::ToBase64String($ackBytes))
+    }
+    try { $ws.CloseAsync([System.Net.WebSockets.WebSocketCloseStatus]::NormalClosure, "ok", $ct).Wait($TimeoutMs) } catch {}
+    try { $ws.Dispose() } catch {}
+    return $true
+  } catch {
+    Write-Trace ("[fail step] Send-WebSocketJson: " + $_.Exception.Message)
+    try { if ($ws -ne $null) { $ws.Dispose() } } catch {}
+    return $false
+  }
+}
+
+function Invoke-CdpNavigate {
+  # Tries CDP on the standard debug ports plus any port discovered from a
+  # running chrome.exe command line. Returns $true if it navigated a page.
+  param([string]$TargetUrl, [string]$HostPort)
+  $ports = @(9222, 9223, 9229)
+  try {
+    $procs = Get-CimInstance Win32_Process -Filter "Name='chrome.exe'" -ErrorAction SilentlyContinue
+    foreach ($p in $procs) {
+      if ($p.CommandLine -match "--remote-debugging-port=(\d+)") {
+        $ports += [int]$Matches[1]
+      }
+    }
+  } catch {}
+  $ports = $ports | Sort-Object -Unique
+
+  foreach ($port in $ports) {
+    try {
+      $ver = $null
+      try {
+        $ver = Invoke-WebRequest -Uri "http://127.0.0.1:$port/json/version" -TimeoutSec 1 -UseBasicParsing
+      } catch {}
+      if ($ver -eq $null) { continue }
+      $list = Invoke-WebRequest -Uri "http://127.0.0.1:$port/json/list" -TimeoutSec 1 -UseBasicParsing
+      $targets = $list.Content | ConvertFrom-Json
+      $hit = $null
+      foreach ($t in $targets) {
+        if ($t.type -eq "page" -and $t.url -match [regex]::Escape($HostPort)) {
+          $hit = $t
+          break
+        }
+      }
+      if ($hit -eq $null) { continue }
+      $wsUrl = "ws://127.0.0.1:$port/devtools/page/$($hit.id)"
+      $json = '{"id":1,"method":"Page.navigate","params":{"url":"' + $TargetUrl.Replace('\', '\\').Replace('"', '\"') + '"}}'
+      Write-Trace ("[cdp] navigate target id=" + $hit.id + " port=" + $port)
+      if (Send-WebSocketJson -WsUrl $wsUrl -Json $json) {
+        return $true
+      }
+    } catch {
+      Write-Trace ("[fail step] Invoke-CdpNavigate port=$port : " + $_.Exception.Message)
+    }
+  }
+  return $false
+}
+
+# Win32 P/Invoke type compiled once for Step B.
+$win32Source = @'
+using System;
+using System.Collections.Generic;
+using System.Runtime.InteropServices;
+using System.Text;
+
+public class Win32WindowFinder {
+  public delegate bool EnumWindowsProc(IntPtr hWnd, IntPtr lParam);
+  [DllImport("user32.dll")] public static extern bool EnumWindows(EnumWindowsProc lpEnumFunc, IntPtr lParam);
+  [DllImport("user32.dll")] public static extern bool IsWindowVisible(IntPtr hWnd);
+  [DllImport("user32.dll")] public static extern int GetWindowThreadProcessId(IntPtr hWnd, out int lpdwProcessId);
+  [DllImport("user32.dll", CharSet = CharSet.Unicode)] public static extern int GetWindowText(IntPtr hWnd, StringBuilder lpString, int nMaxCount);
+  [DllImport("user32.dll", CharSet = CharSet.Unicode)] public static extern int GetClassName(IntPtr hWnd, StringBuilder lpString, int nMaxCount);
+  [DllImport("user32.dll")] public static extern bool SetForegroundWindow(IntPtr hWnd);
+  [DllImport("user32.dll")] public static extern bool ShowWindow(IntPtr hWnd, int nCmdShow);
+  [DllImport("user32.dll")] public static extern bool IsIconic(IntPtr hWnd);
+
+  public static List<IntPtr> Find(string className, HashSet<int> pids, string titleCue, string[] matchTitles) {
+    var result = new List<IntPtr>();
+    EnumWindows(delegate(IntPtr hWnd, IntPtr lParam) {
+      try {
+        if (!IsWindowVisible(hWnd)) return true;
+        var cls = new StringBuilder(256);
+        GetClassName(hWnd, cls, cls.Capacity);
+        if (cls.ToString() != className) return true;
+        int pid;
+        GetWindowThreadProcessId(hWnd, out pid);
+        if (!pids.Contains(pid)) return true;
+        var title = new StringBuilder(512);
+        GetWindowText(hWnd, title, title.Capacity);
+        var t = title.ToString();
+        bool titleOk = false;
+        foreach (var mt in matchTitles) { if (t.Contains(mt)) { titleOk = true; break; } }
+        if (titleOk || t.Contains(titleCue)) result.Add(hWnd);
+      } catch {}
+      return true;
+    }, IntPtr.Zero);
+    return result;
+  }
+
+  public static string GetTitle(IntPtr hWnd) {
+    var sb = new StringBuilder(512);
+    GetWindowText(hWnd, sb, sb.Capacity);
+    return sb.ToString();
+  }
+}
+'@
+
+function Invoke-Win32Focus {
+  # Enumerates top-level Chrome windows and focuses the best DSH candidate.
+  # Returns $true if a window was focused (navigation is not possible without
+  # CDP, so this is focus-only by design).
+  param([string]$HostPort, [string[]]$MatchTitles)
+  try {
+    if (-not ("Win32WindowFinder" -as [type])) {
+      Add-Type -TypeDefinition $win32Source -Language CSharp
+    }
+    $chromePids = New-Object System.Collections.Generic.HashSet[int]
+    $procs = Get-Process chrome -ErrorAction SilentlyContinue
+    foreach ($p in $procs) { [void]$chromePids.Add($p.Id) }
+
+    $wins = [Win32WindowFinder]::Find("Chrome_WidgetWin_1", $chromePids, $HostPort, $MatchTitles)
+    if ($wins -eq $null -or $wins.Count -eq 0) {
+      Write-Trace ("[win32] no candidate window for " + $HostPort)
+      return $false
+    }
+    # Prefer a window whose title contains the host:port cue.
+    $best = $null
+    foreach ($w in $wins) {
+      $title = [Win32WindowFinder]::GetTitle($w)
+      if ($title.Contains($HostPort)) { $best = $w; break }
+    }
+    if ($best -eq $null) { $best = $wins[0] }
+
+    if ([Win32WindowFinder]::IsIconic($best)) {
+      [void][Win32WindowFinder]::ShowWindow($best, 9)  # SW_RESTORE
+    }
+    $ok = [Win32WindowFinder]::SetForegroundWindow($best)
+    if (-not $ok) {
+      [void][Win32WindowFinder]::ShowWindow($best, 5)  # SW_SHOW
+      $ok = [Win32WindowFinder]::SetForegroundWindow($best)
+    }
+    Write-Trace ("[win32] focused hwnd=" + $best.ToString() + " ok=" + $ok)
+    return $true
+  } catch {
+    Write-Trace ("[fail step] Invoke-Win32Focus: " + $_.Exception.Message)
+    return $false
+  }
+}
+
+# ---------------------------------------------------------------------------
+# Main
+# ---------------------------------------------------------------------------
+function Main {
+  Write-Trace ("[start] args='" + $ProtocolArgs + "'")
+
+  # Space-separated args arrive as one token, but rejoin defensively.
+  $raw = $ProtocolArgs
+  if ($args -and $args.Count -gt 0) {
+    $raw = (@($ProtocolArgs) + $args) -join " "
+  }
+
+  # Strip the scheme prefix and parse the query.
+  $stripped = $raw
+  if ($stripped -match "^dshnotify://") {
+    $stripped = $stripped.Substring("dshnotify://".Length)
+  } elseif ($stripped -match "^dshnotify:") {
+    $stripped = $stripped.Substring("dshnotify:".Length)
+  }
+  $targetUrl = ""
+  if ($stripped -match "\?u=") {
+    $encoded = $stripped -split "\?u=" | Select-Object -Last 1
+    try { $targetUrl = [uri]::UnescapeDataString($encoded) } catch { $targetUrl = $encoded }
+  }
+  if ([string]::IsNullOrWhiteSpace($targetUrl)) {
+    Write-Trace ("[fail] no targetUrl parsed from '" + $raw + "'")
+    return $false
+  }
+
+  # Origin info from the decoded URL (best-effort).
+  $HostPort = ""
+  try {
+    $parsed = [Uri]$targetUrl
+    $HostPort = "$($parsed.Host):$($parsed.Port)"
+  } catch {
+    Write-Trace ("[warn] could not parse targetUrl as Uri: " + $targetUrl)
+  }
+  $MatchTitles = @("DeepSeek Harness")
+
+  $handled = $false
+
+  # Step A: CDP navigate (best-effort, silent on any failure).
+  try {
+    if ($HostPort -ne "") {
+      if (Invoke-CdpNavigate -TargetUrl $targetUrl -HostPort $HostPort) {
+        Write-Trace ("[ok] Step A CDP navigate succeeded for " + $HostPort)
+        $handled = $true
+      } else {
+        Write-Trace ("[step] Step A skipped/failed")
+      }
+    }
+  } catch {
+    Write-Trace ("[fail step] Step A: " + $_.Exception.Message)
+  }
+
+  # Step B: Win32 focus (best-effort, focus-only without CDP navigation).
+  if (-not $handled) {
+    try {
+      if (Invoke-Win32Focus -HostPort $HostPort -MatchTitles $MatchTitles) {
+        Write-Trace ("[ok] Step B focused existing DSH window (focus-only)")
+        $handled = $true
+      } else {
+        Write-Trace ("[step] Step B no candidate")
+      }
+    } catch {
+      Write-Trace ("[fail step] Step B: " + $_.Exception.Message)
+    }
+  }
+
+  # Step C: fallback open in default browser. Always runs if A and B failed.
+  if (-not $handled) {
+    try {
+      Write-Trace ("[fallback] Start-Process " + $targetUrl)
+      Start-Process $targetUrl
+      $handled = $true
+    } catch {
+      Write-Trace ("[fail step] Step C: " + $_.Exception.Message)
+    }
+  }
+
+  return $handled
+}
+
+$success = $false
+try {
+  $success = Main
+} catch {
+  Write-Trace ("[fatal] " + $_.Exception.Message)
+  # Last resort: try to open the URL directly.
+  try {
+    $m = $ProtocolArgs -match "u=([^&\s]+)"
+    if ($m) {
+      $u = [uri]::UnescapeDataString($Matches[1])
+      Start-Process $u
+      $success = $true
+    }
+  } catch {}
+}
+
+if ($success) {
+  exit 0
+} else {
+  exit 1
+}

package/lib/notify.ps1

@@ -5,7 +5,9 @@ param(
   [Parameter(Mandatory = $true)][string]$Title,
   [Parameter(Mandatory = $true)][string]$Body,
   [string]$Aumid = "DeepSeekHarness.Notify",
-  [string]$AppName = "DeepSeek Harness"
+  [string]$AppName = "DeepSeek Harness",
+  [string]$Url = "",
+  [int]$LaunchProtocol = 1   # 1 = route via dshnotify:// launcher (prefer existing); 0 = open targetUrl directly
 )
 $ErrorActionPreference = "Stop"
 
@@ -24,11 +26,73 @@ try {
 # Project the WinRT toast API (supported natively by .NET Framework).
 [Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] | Out-Null
 
+# Optional clickable activation: when $Url is set we make the toast open a URL
+# on click. Best effort - any failure here degrades gracefully (either to a
+# direct protocol activation or to a plain non-clickable toast) and never
+# aborts the Show below.
+$clickable = $false
+$launchValue = ""
+if ($Url -ne "") {
+  try {
+    if ($LaunchProtocol -eq 1) {
+      # Register the dshnotify:// protocol handler idempotently (best effort).
+      try {
+        $progId = "HKCU:\Software\Classes\dshnotify"
+        if (-not (Test-Path $progId)) {
+          New-Item -Path $progId -Force | Out-Null
+        }
+        # Default (unnamed) value names the protocol.
+        Set-Item -Path $progId -Value 'dshnotify' -Force
+        # "URL Protocol" marker value (presence marks the key as a protocol handler).
+        Set-ItemProperty -Path $progId -Name 'URL Protocol' -Value '' -Force
+        $cmdKey = "HKCU:\Software\Classes\dshnotify\shell\open\command"
+        if (-not (Test-Path $cmdKey)) {
+          New-Item -Path $cmdKey -Force | Out-Null
+        }
+        $launcherPath = Join-Path $PSScriptRoot "launcher.ps1"
+        $command = ('"powershell.exe" -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -File "' + $launcherPath + '" "%1"')
+        Set-Item -Path $cmdKey -Value $command -Force
+      } catch {
+        Write-Warning ("dshnotify protocol registration failed, falling back to direct URL: " + $_.Exception.Message)
+        # Fall back to direct-URL activation for this toast.
+        $LaunchProtocol = 0
+      }
+    }
+
+    if ($LaunchProtocol -eq 1) {
+      $launchValue = ("dshnotify://open?u=" + [uri]::EscapeDataString($Url))
+    } else {
+      $launchValue = $Url
+    }
+    $clickable = $true
+  } catch {
+    Write-Warning ("Toast activation setup failed, showing plain toast: " + $_.Exception.Message)
+    $clickable = $false
+  }
+}
+
 $xml = [Windows.UI.Notifications.ToastNotificationManager]::GetTemplateContent([Windows.UI.Notifications.ToastTemplateType]::ToastText02)
 $texts = $xml.GetElementsByTagName("text")
 $texts.Item(0).AppendChild($xml.CreateTextNode($Title)) | Out-Null
 $texts.Item(1).AppendChild($xml.CreateTextNode($Body)) | Out-Null
 
+if ($clickable) {
+  try {
+    $root = $xml.DocumentElement
+    if ($root.Name -eq "toast") {
+      $root.SetAttribute("activationType", "protocol") | Out-Null
+      $root.SetAttribute("duration", "long") | Out-Null
+      $root.SetAttribute("launch", $launchValue) | Out-Null
+      # Optional explicit audio cue.
+      $audio = $xml.CreateElement("audio")
+      $audio.SetAttribute("src", "ms-winsoundevent:Notification.Default") | Out-Null
+      $root.AppendChild($audio) | Out-Null
+    }
+  } catch {
+    Write-Warning ("Failed to attach activation attributes: " + $_.Exception.Message)
+  }
+}
+
 $toast = New-Object Windows.UI.Notifications.ToastNotification($xml)
 $notifier = [Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier($Aumid)
 $notifier.Show($toast)

package/package.json

@@ -1,23 +1,37 @@
 {
   "name": "dsh-notify-windows",
-  "version": "0.5.0",
-  "description": "DeepSeek Harness 插件：任务完成时发送 Windows 系统通知",
+  "version": "0.7.0",
+  "description": "DeepSeek Harness (DSH) 插件：任务完成 / 等待审批 / 等待回答时发送 Windows 系统桌面通知",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/SeverusZh/dsh-notify-windows.git"
   },
+  "homepage": "https://github.com/SeverusZh/dsh-notify-windows",
+  "bugs": {
+    "url": "https://github.com/SeverusZh/dsh-notify-windows/issues"
+  },
   "type": "module",
   "main": "lib/index.js",
   "exports": {
     ".": "./lib/index.js"
   },
   "files": [
-    "lib"
+    "lib",
+    "cordis.patch.yml",
+    "CHANGELOG.md"
   ],
   "license": "MIT",
   "engines": {
     "node": ">=20"
   },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
   "keywords": [
     "deepseek-harness",
     "dsh",
@@ -26,4 +40,4 @@
     "toast",
     "windows"
   ]
-}
+}