dsh-notify-windows 0.6.0 → 0.7.0

package/CHANGELOG.md

@@ -2,6 +2,27 @@
 
 本项目遵循 [Semantic Versioning](https://semver.org/)。
 
+## [0.7.0] - 2026-08-20
+
+### 新增「点击通知跳转」功能
+
+- 任务完成 / 审批 / 提问的 toast 变为**可点击**：点击后打开 DSH Web GUI。优先聚焦已打开的
+  DSH 浏览器标签或 Chrome Application 窗口；无已开窗口则在默认浏览器新开标签。
+  目标 URL 携带 `?session=<id>`（rc.8 前端暂不消费，为未来深链预留）。
+- **实现**：
+  - `lib/notify.ps1` 使用 `activationType="protocol"` + `launch`（协议 `dshnotify://` 或原始
+    URL），使 toast 点击可触发跳转；
+  - `lib/launcher.ps1` 处理聚焦 / 跳转：CDP 尽力 → Win32 聚焦 → `Start-Process` 兜底；
+  - `lib/index.js` 新增配置 `openOnClick` / `preferExisting` / `webUrl`，并自动发现 web
+    基地址（`ctx.webServer.port`，默认 `http://127.0.0.1:3080`）。
+- **配置表补三行**：`openOnClick`(bool, true)、`preferExisting`(bool, true)、
+  `webUrl`(string, '' 自动发现)。
+
+### 已知限制
+
+- DSH 0.1.0-rc.8 前端暂无会话深链：点击后打开 GUI 首页 / 会话列表并聚焦已有窗口；真正的
+  「一键直达某会话」需前端侧支持。
+
 ## [0.6.0] - 2026-08-20
 
 ### 变更（dsh.bundle 安装 + 对齐 dsh 0.1.0-rc.8）

package/README.en.md

@@ -80,6 +80,9 @@ in `$DSH_HOME/profiles/web/cordis.patch.yml` (hot-applied by the running host
 | `aumid` | `DeepSeekHarness.Notify` | toast AppUserModelId |
 | `log` | `true` | write `%TEMP%\dsh-notify\notify.log` |
 | `debug` | `false` | log every session event (diagnostics, heavy) |
+| `openOnClick` | `true` | make completion / approval / question toasts clickable (false falls back to the old non-clickable toast) |
+| `preferExisting` | `true` | when true, launcher prefers focusing an open DSH window; when false, just open the URL in the default browser |
+| `webUrl` | `''` | override the auto-discovered base URL (e.g. `http://192.168.1.5:4000`); leave empty to auto-discover (defaults to `http://127.0.0.1:3080`) |
 
 ## 🔔 Triggers
 
@@ -90,6 +93,25 @@ in `$DSH_HOME/profiles/web/cordis.patch.yml` (hot-applied by the running host
 | Approval waiting | `approval/asked` | DeepSeek Harness · Needs approval / tool pwsh: … |
 | Question waiting | `tool/call` (incl. run_code detection) | DeepSeek Harness · Needs your answer / Continue? |
 
+## 🔗 Click to open
+
+Toasts for task completion / approval pending / question pending are clickable → they open the
+DSH Web GUI. The plugin prefers to focus an already-open DSH browser tab or Chrome Application
+window; if none is open, it opens a new tab in the default browser and loads the GUI. The target
+URL carries a `?session=<id>` parameter (not yet consumed by the rc.8 frontend — reserved for
+future deep links).
+
+**Configuration:**
+
+- `openOnClick` (default `true`; `false` disables clickability and falls back to the old non-clickable toast);
+- `preferExisting` (default `true`; when true the launcher prefers reusing an existing window; when false it opens the URL directly in the default browser);
+- `webUrl` (optional, overrides the auto-discovered base URL, e.g. `http://192.168.1.5:4000`; leave empty to auto-discover / default `http://127.0.0.1:3080`).
+
+**Notes:** the first click auto-registers the `dshnotify://` protocol handler (HKCU, no admin
+needed); on failure it silently degrades to "open in default browser".
+
+> Note: DSH 0.1.0-rc.8 does not yet support deep-linking to a single session by URL; clicking opens the DSH interface (home / session list) and focuses the existing window, and you pick the target session from the list. Once the DSH frontend supports deep links, `?session=<id>` will jump straight to it.
+
 ## 🧪 Verify
 
 ```powershell

package/README.md

@@ -80,6 +80,9 @@ dsh plugin --profile web remove dsh-notify-windows
 | `aumid` | `DeepSeekHarness.Notify` | 通知 AppUserModelId |
 | `log` | `true` | 写日志到 `%TEMP%\dsh-notify\notify.log` |
 | `debug` | `false` | 把所有会话事件写入日志（排查用，量大） |
+| `openOnClick` | `true` | 任务完成 / 审批 / 提问 toast 是否可点击（false 回退为旧的无点击 toast） |
+| `preferExisting` | `true` | true 走 launcher 优先聚焦已开 DSH 窗口；false 直接用默认浏览器打开 URL |
+| `webUrl` | `''` | 覆盖自动发现的基地址（如 `http://192.168.1.5:4000`），留空自动发现（默认 `http://127.0.0.1:3080`） |
 
 ## 🔔 触发场景
 
@@ -90,6 +93,22 @@ dsh plugin --profile web remove dsh-notify-windows
 | 等待审批 | `approval/asked` | 「DeepSeek Harness · 需要审批 / 工具 pwsh：…」 |
 | 等待回答 | `tool/call`（含 run_code 检测） | 「DeepSeek Harness · 需要回答 / 是否继续？」 |
 
+## 🔗 点击通知跳转
+
+任务完成 / 等待审批 / 等待回答的 toast 可点击 → 打开 DSH Web GUI。优先聚焦已打开的
+DSH 浏览器标签或 Chrome Application 窗口；没有已开窗口时在默认浏览器新开标签并打开 GUI。
+目标 URL 带 `?session=<id>` 参数（rc.8 前端暂不消费，为未来深链预留）。
+
+**配置：**
+
+- `openOnClick`（默认 `true`，`false` 则关闭可点击，回退为旧的无点击 toast）；
+- `preferExisting`（默认 `true`，`true` 走 launcher 优先复用已开窗口；`false` 直接用默认浏览器打开 URL）；
+- `webUrl`（可选，覆盖自动发现的基地址，如 `http://192.168.1.5:4000`，留空自动发现 / 默认 `http://127.0.0.1:3080`）。
+
+**注意事项：** 首次点击会自动注册 `dshnotify://` 协议处理器（HKCU，无需管理员）；故障会静默降级为「默认浏览器打开」。
+
+> 说明：DSH 0.1.0-rc.8 前端暂不支持按 URL 直达单个会话；点击后打开的是 DSH 界面（首页/会话列表）并聚焦已有窗口，目标会话需在列表中选择。未来 DSH 前端支持深链后 `?session=<id>` 将直接定位。
+
 ## 🧪 验证
 
 ```powershell

package/lib/index.js

@@ -1,273 +1,323 @@
-// dsh-notify-windows — DeepSeek Harness plugin: send a Windows toast notification
-// whenever the agent needs the user's attention:
-//   - turn/end          — a task completed, failed, or was cut off (with an
-//                         optional excerpt of the agent's final reply);
-//   - approval/asked    — a permission approval is waiting (only when the
-//                         session's effective approval policy is "ask");
-//   - tool/call         — the agent called the ask_user_question tool (directly
-//                         or inside a run_code program) and is waiting.
-//
-// Goal rounds (/goal auto-continuation) are quiet by default: only the final
-// round that completes or blocks the goal produces a toast.
-//
-// Zero runtime dependencies: notifications go through the toast sender
-// script (./notify.ps1) executed by Windows PowerShell 5.1, whose .NET
-// Framework runtime supports the WinRT toast API.
-import { spawn } from "node:child_process";
-import { appendFileSync, mkdirSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const NOTIFY_SCRIPT = fileURLToPath(new URL("./notify.ps1", import.meta.url));
-const VERSION = "0.6.0";
-
-const REASON_TEXT = {
-  completed: "任务已完成",
-  error: "任务出错",
-  "max-tokens": "输出达到 token 上限",
-  aborted: "任务已取消",
-  interrupted: "任务中断",
-  blocked: "任务未开始",
-};
-
-export const name = "dsh-notify-windows";
-
-function truncate(text, max) {
-  if (typeof text !== "string") return "";
-  return text.length > max ? text.slice(0, max) + "…" : text;
-}
-
-/** First question text of an ask_user_question tool call, if parseable. */
-function extractAskQuestion(argumentsJson) {
-  try {
-    const parsed = JSON.parse(argumentsJson);
-    const first = Array.isArray(parsed?.questions) ? parsed.questions[0] : undefined;
-    return typeof first?.question === "string" ? first.question : undefined;
-  } catch {
-    return undefined;
-  }
-}
-
-/**
- * This deployment invokes every tool through run_code programs, so a real
- * question never appears as a model-level ask_user_question tool call.
- * Detect the nested call inside a run_code program's code and pull out the
- * first question text.
- */
-function extractQuestionFromCode(argumentsJson) {
-  try {
-    const parsed = JSON.parse(argumentsJson);
-    const code = typeof parsed?.code === "string" ? parsed.code : "";
-    const callIndex = code.search(/tools\.ask_user_question\s*\(/);
-    if (callIndex < 0) return undefined;
-    const region = code.slice(callIndex, callIndex + 8000);
-    const matches = [...region.matchAll(/question\s*:\s*["']([^"']{2,200})["']/g)];
-    return matches.length > 0 ? matches[0][1] : undefined;
-  } catch {
-    return undefined;
-  }
-}
-
-/** First non-empty text block of a message, trimmed. */
-function textOfMessage(message) {
-  const blocks = message?.content;
-  if (!Array.isArray(blocks)) return undefined;
-  for (const block of blocks) {
-    if (block?.type === "text" && typeof block.text === "string" && block.text.trim().length > 0) return block.text.trim();
-  }
-  return undefined;
-}
-
-/**
- * Scan the session log from the turn/end event back to its turn/start and
- * collect what the notification needs: the driving user message's source,
- * every goal/change operation in the window, and the last assistant reply
- * text (for the excerpt).
- */
-function turnWindow(session, turnEnd) {
-  const events = session?.events ?? [];
-  const turn = turnEnd?.data?.turn;
-  let endIndex = events.length - 1;
-  for (let i = events.length - 1; i >= 0; i -= 1) {
-    if (events[i]?.seq === turnEnd?.seq) { endIndex = i; break; }
-  }
-  let userSource;
-  const goalOps = [];
-  let lastAssistantText;
-  for (let i = endIndex; i >= 0; i -= 1) {
-    const event = events[i];
-    if (!event) continue;
-    if (event.type === "turn/start" && event.data?.turn === turn) break;
-    // Every user/message in the window overwrites: walking backwards, the
-    // final value is the FIRST message of the turn — the driving input.
-    if (event.type === "user/message" && event.data?.source) userSource = event.data.source;
-    if (event.type === "goal/change" && event.data?.operation) goalOps.push(event.data.operation);
-    if (event.type === "assistant/message" && event.data?.turn === turn && lastAssistantText === undefined) {
-      const text = textOfMessage(event.data.message);
-      if (text) lastAssistantText = text;
-    }
-  }
-  return { userSource, goalOps, lastAssistantText };
-}
-
-export const apply = (ctx, config = {}) => {
-  const cfg = {
-    enabled: true,
-    reasons: ["completed", "error", "max-tokens"],
-    includeSubagents: false,
-    notifyOnStart: false,
-    notifyOnApproval: true,
-    notifyOnAskUser: true,
-    notifyOnGoalRounds: false,
-    excerpt: true,
-    excerptMaxChars: 80,
-    appName: "DeepSeek Harness",
-    aumid: "DeepSeekHarness.Notify",
-    log: true,
-    debug: false,
-    ...config,
-  };
-  const reasons = new Set(cfg.reasons);
-  const logPath = join(tmpdir(), "dsh-notify", "notify.log");
-
-  const log = (entry) => {
-    if (!cfg.log) return;
-    try {
-      mkdirSync(join(tmpdir(), "dsh-notify"), { recursive: true });
-      appendFileSync(logPath, JSON.stringify({ time: Date.now(), ...entry }) + "\n");
-    } catch {
-      // diagnostics must never break the agent loop
-    }
-  };
-
-  const sendToast = (title, body) => {
-    const child = spawn(
-      "powershell.exe",
-      [
-        "-NoProfile",
-        "-NonInteractive",
-        "-ExecutionPolicy",
-        "Bypass",
-        "-File",
-        NOTIFY_SCRIPT,
-        "-Title",
-        title,
-        "-Body",
-        body,
-        "-Aumid",
-        cfg.aumid,
-        "-AppName",
-        cfg.appName,
-      ],
-      { stdio: "ignore", windowsHide: true },
-    );
-    child.on("error", (error) => {
-      log({ event: "error", message: String(error?.message ?? error) });
-      ctx.logger?.warn?.("dsh-notify: 启动通知进程失败", error);
-    });
-    child.on("exit", (code) => {
-      if (code !== 0) {
-        log({ event: "error", code });
-        ctx.logger?.warn?.("dsh-notify: 通知进程退出码 " + code);
-      }
-    });
-  };
-
-  const titleFor = (session) => {
-    try {
-      return ctx.sessionTitle?.get?.(session)?.title;
-    } catch {
-      return undefined;
-    }
-  };
-
-  /** True for subagent sessions when subagents are excluded. */
-  const isFilteredSession = (session) => {
-    if (cfg.includeSubagents) return false;
-    return session?.header?.origin === "subagent" || session?.header?.delegationDepth !== undefined;
-  };
-
-  /** Last approval/policy event of the session, or undefined (defaults to ask). */
-  const effectivePolicy = (session) => {
-    const events = session?.events ?? [];
-    for (let index = events.length - 1; index >= 0; index -= 1) {
-      const event = events[index];
-      if (event?.type === "approval/policy") return event.data?.policy;
-    }
-    return undefined;
-  };
-
-  ctx.on("session/event", (session, event) => {
-    if (!cfg.enabled) return;
-    if (cfg.debug) {
-      log({ event: "debug", type: event.type, name: event.data?.name ?? null, sessionId: session?.id });
-    }
-    if (isFilteredSession(session)) return;
-
-    if (event.type === "turn/end") {
-      const reason = event.data?.reason;
-      if (typeof reason?.kind !== "string" || !reasons.has(reason.kind)) return;
-      const window = turnWindow(session, event);
-
-      // /goal 自动推进回合默认静默：仅在目标完成/阻塞的最终回合提醒。
-      if (!cfg.notifyOnGoalRounds) {
-        const isGoalRound = window.userSource?.kind === "goal" && window.userSource.round > 0;
-        const terminal = window.goalOps.some((op) => op === "complete" || op === "block");
-        if (isGoalRound && !terminal) return;
-      }
-
-      const title = titleFor(session) || cfg.appName;
-      let body = REASON_TEXT[reason.kind] ?? "任务已结束";
-      if (Number.isInteger(event.data.turn)) body += "（第 " + event.data.turn + " 轮）";
-      if (cfg.excerpt && window.lastAssistantText) {
-        body += "\n" + truncate(window.lastAssistantText, cfg.excerptMaxChars);
-      }
-      sendToast(title, body);
-      log({
-        event: "notify",
-        sessionId: session?.id,
-        reason: reason.kind,
-        turn: event.data?.turn,
-        title,
-        body,
-      });
-      return;
-    }
-
-    if (event.type === "approval/asked" && cfg.notifyOnApproval) {
-      // Never notify when the session policy auto-rejects: nothing waits for
-      // the user, so a toast would be noise.
-      if (effectivePolicy(session) === "never") return;
-      const data = event.data ?? {};
-      const body = typeof data.toolName === "string"
-        ? (typeof data.reason === "string" && data.reason.length > 0
-          ? "工具 " + data.toolName + "：" + truncate(data.reason, 100)
-          : "工具 " + data.toolName)
-        : "有一项操作等待你的批准";
-      sendToast(cfg.appName + " · 需要审批", body);
-      log({ event: "approval", sessionId: session?.id, id: data.id, toolName: data.toolName, reason: data.reason });
-      return;
-    }
-
-    if (event.type === "tool/call" && cfg.notifyOnAskUser) {
-      const data = event.data ?? {};
-      let question;
-      if (data.name === "ask_user_question") {
-        question = extractAskQuestion(data.arguments);
-      } else if (data.name === "run_code" && typeof data.arguments === "string" && data.arguments.includes("ask_user_question")) {
-        question = extractQuestionFromCode(data.arguments);
-      }
-      if (question !== undefined || data.name === "ask_user_question") {
-        sendToast(cfg.appName + " · 需要回答", question ? truncate(question, 100) : "Agent 正在等待你的确认");
-        log({ event: "ask-user", sessionId: session?.id, question: question ?? null });
-      }
-      return;
-    }
-  });
-
-  log({ event: "start", version: VERSION, enabled: cfg.enabled, reasons: [...reasons], sessionId: null });
-  if (cfg.enabled && cfg.notifyOnStart) {
-    sendToast(cfg.appName, "任务完成提醒已激活（v" + VERSION + "）");
-  }
-}
+// dsh-notify-windows — DeepSeek Harness plugin: send a Windows toast notification
+// whenever the agent needs the user's attention:
+//   - turn/end          — a task completed, failed, or was cut off (with an
+//                         optional excerpt of the agent's final reply);
+//   - approval/asked    — a permission approval is waiting (only when the
+//                         session's effective approval policy is "ask");
+//   - tool/call         — the agent called the ask_user_question tool (directly
+//                         or inside a run_code program) and is waiting.
+//
+// Click-to-open: when enabled (default) and a session is available, the toast
+// becomes clickable and opens the DSH web GUI (preferring an already-open
+// browser/App window) deep-linked to that conversation. Disable with
+// openOnClick:false or omit the session to keep the legacy non-clickable toast.
+//
+// Goal rounds (/goal auto-continuation) are quiet by default: only the final
+// round that completes or blocks the goal produces a toast.
+//
+// Zero runtime dependencies: notifications go through the toast sender
+// script (./notify.ps1) executed by Windows PowerShell 5.1, whose .NET
+// Framework runtime supports the WinRT toast API.
+import { spawn } from "node:child_process";
+import { appendFileSync, mkdirSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const NOTIFY_SCRIPT = fileURLToPath(new URL("./notify.ps1", import.meta.url));
+const VERSION = "0.7.0";
+
+const REASON_TEXT = {
+  completed: "任务已完成",
+  error: "任务出错",
+  "max-tokens": "输出达到 token 上限",
+  aborted: "任务已取消",
+  interrupted: "任务中断",
+  blocked: "任务未开始",
+};
+
+export const name = "dsh-notify-windows";
+
+function truncate(text, max) {
+  if (typeof text !== "string") return "";
+  return text.length > max ? text.slice(0, max) + "…" : text;
+}
+
+/** First question text of an ask_user_question tool call, if parseable. */
+function extractAskQuestion(argumentsJson) {
+  try {
+    const parsed = JSON.parse(argumentsJson);
+    const first = Array.isArray(parsed?.questions) ? parsed.questions[0] : undefined;
+    return typeof first?.question === "string" ? first.question : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+/**
+ * This deployment invokes every tool through run_code programs, so a real
+ * question never appears as a model-level ask_user_question tool call.
+ * Detect the nested call inside a run_code program's code and pull out the
+ * first question text.
+ */
+function extractQuestionFromCode(argumentsJson) {
+  try {
+    const parsed = JSON.parse(argumentsJson);
+    const code = typeof parsed?.code === "string" ? parsed.code : "";
+    const callIndex = code.search(/tools\.ask_user_question\s*\(/);
+    if (callIndex < 0) return undefined;
+    const region = code.slice(callIndex, callIndex + 8000);
+    const matches = [...region.matchAll(/question\s*:\s*["']([^"']{2,200})["']/g)];
+    return matches.length > 0 ? matches[0][1] : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+/** First non-empty text block of a message, trimmed. */
+function textOfMessage(message) {
+  const blocks = message?.content;
+  if (!Array.isArray(blocks)) return undefined;
+  for (const block of blocks) {
+    if (block?.type === "text" && typeof block.text === "string" && block.text.trim().length > 0) return block.text.trim();
+  }
+  return undefined;
+}
+
+/**
+ * Scan the session log from the turn/end event back to its turn/start and
+ * collect what the notification needs: the driving user message's source,
+ * every goal/change operation in the window, and the last assistant reply
+ * text (for the excerpt).
+ */
+function turnWindow(session, turnEnd) {
+  const events = session?.events ?? [];
+  const turn = turnEnd?.data?.turn;
+  let endIndex = events.length - 1;
+  for (let i = events.length - 1; i >= 0; i -= 1) {
+    if (events[i]?.seq === turnEnd?.seq) { endIndex = i; break; }
+  }
+  let userSource;
+  const goalOps = [];
+  let lastAssistantText;
+  for (let i = endIndex; i >= 0; i -= 1) {
+    const event = events[i];
+    if (!event) continue;
+    if (event.type === "turn/start" && event.data?.turn === turn) break;
+    // Every user/message in the window overwrites: walking backwards, the
+    // final value is the FIRST message of the turn — the driving input.
+    if (event.type === "user/message" && event.data?.source) userSource = event.data.source;
+    if (event.type === "goal/change" && event.data?.operation) goalOps.push(event.data.operation);
+    if (event.type === "assistant/message" && event.data?.turn === turn && lastAssistantText === undefined) {
+      const text = textOfMessage(event.data.message);
+      if (text) lastAssistantText = text;
+    }
+  }
+  return { userSource, goalOps, lastAssistantText };
+}
+
+export const apply = (ctx, config = {}) => {
+  const cfg = {
+    enabled: true,
+    reasons: ["completed", "error", "max-tokens"],
+    includeSubagents: false,
+    notifyOnStart: false,
+    notifyOnApproval: true,
+    notifyOnAskUser: true,
+    notifyOnGoalRounds: false,
+    excerpt: true,
+    excerptMaxChars: 80,
+    appName: "DeepSeek Harness",
+    aumid: "DeepSeekHarness.Notify",
+    log: true,
+    debug: false,
+    // Click-to-open feature (v0.7.0):
+    openOnClick: true, // when false: never make toasts clickable (never pass -Url)
+    preferExisting: true, // true -> -LaunchProtocol 1 (launcher, prefer existing window); false -> 0 (plain open)
+    webUrl: "", // manual override of the web GUI base; empty = auto-discover
+    ...config,
+  };
+  const reasons = new Set(cfg.reasons);
+  const logPath = join(tmpdir(), "dsh-notify", "notify.log");
+
+  const log = (entry) => {
+    if (!cfg.log) return;
+    try {
+      mkdirSync(join(tmpdir(), "dsh-notify"), { recursive: true });
+      appendFileSync(logPath, JSON.stringify({ time: Date.now(), ...entry }) + "\n");
+    } catch {
+      // diagnostics must never break the agent loop
+    }
+  };
+
+  // Authoritative base URL discovery (verified against rc.8).
+  // Always loopback: ctx.webServer.host may be 0.0.0.0, which is not a valid
+  // browser target. Use the actual bound port (correct even when config port=0).
+  const webBaseUrl = () => {
+    if (cfg.webUrl) return cfg.webUrl.replace(/\/+$/, "");
+    try {
+      const port = ctx.get?.("webServer")?.port; // actual bound port
+      if (Number.isInteger(port) && port > 0) return "http://127.0.0.1:" + port;
+    } catch {
+      // fall through to documented default
+    }
+    return "http://127.0.0.1:3080"; // documented default (dsh-web-app patch.yml)
+  };
+
+  // Per-session deep link. rc.8 ignores the ?session= query but it is harmless
+  // and future-proof for frontends that want to jump straight to a conversation.
+  const conversationUrl = (sessionId) => {
+    const base = webBaseUrl();
+    if (!sessionId) return base + "/";
+    return base + "/?session=" + encodeURIComponent(sessionId);
+  };
+
+  const sendToast = (title, body, opts = {}) => {
+    const args = [
+      "-NoProfile",
+      "-NonInteractive",
+      "-ExecutionPolicy",
+      "Bypass",
+      "-File",
+      NOTIFY_SCRIPT,
+      "-Title",
+      title,
+      "-Body",
+      body,
+      "-Aumid",
+      cfg.aumid,
+      "-AppName",
+      cfg.appName,
+    ];
+    const sessionId = opts?.sessionId;
+    if (cfg.openOnClick && sessionId) {
+      const url = conversationUrl(sessionId);
+      args.push("-Url", url, "-LaunchProtocol", cfg.preferExisting ? 1 : 0);
+    }
+    const child = spawn("powershell.exe", args, { stdio: "ignore", windowsHide: true });
+    child.on("error", (error) => {
+      log({ event: "error", message: String(error?.message ?? error) });
+      ctx.logger?.warn?.("dsh-notify: 启动通知进程失败", error);
+    });
+    child.on("exit", (code) => {
+      if (code !== 0) {
+        log({ event: "error", code });
+        ctx.logger?.warn?.("dsh-notify: 通知进程退出码 " + code);
+      }
+    });
+  };
+
+  const titleFor = (session) => {
+    try {
+      return ctx.sessionTitle?.get?.(session)?.title;
+    } catch {
+      return undefined;
+    }
+  };
+
+  /** True for subagent sessions when subagents are excluded. */
+  const isFilteredSession = (session) => {
+    if (cfg.includeSubagents) return false;
+    return session?.header?.origin === "subagent" || session?.header?.delegationDepth !== undefined;
+  };
+
+  /** Last approval/policy event of the session, or undefined (defaults to ask). */
+  const effectivePolicy = (session) => {
+    const events = session?.events ?? [];
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+      const event = events[index];
+      if (event?.type === "approval/policy") return event.data?.policy;
+    }
+    return undefined;
+  };
+
+  ctx.on("session/event", (session, event) => {
+    if (!cfg.enabled) return;
+    if (cfg.debug) {
+      log({ event: "debug", type: event.type, name: event.data?.name ?? null, sessionId: session?.id });
+    }
+    if (isFilteredSession(session)) return;
+
+    if (event.type === "turn/end") {
+      const reason = event.data?.reason;
+      if (typeof reason?.kind !== "string" || !reasons.has(reason.kind)) return;
+      const window = turnWindow(session, event);
+
+      // /goal 自动推进回合默认静默：仅在目标完成/阻塞的最终回合提醒。
+      if (!cfg.notifyOnGoalRounds) {
+        const isGoalRound = window.userSource?.kind === "goal" && window.userSource.round > 0;
+        const terminal = window.goalOps.some((op) => op === "complete" || op === "block");
+        if (isGoalRound && !terminal) return;
+      }
+
+      const title = titleFor(session) || cfg.appName;
+      let body = REASON_TEXT[reason.kind] ?? "任务已结束";
+      if (Number.isInteger(event.data.turn)) body += "（第 " + event.data.turn + " 轮）";
+      if (cfg.excerpt && window.lastAssistantText) {
+        body += "\n" + truncate(window.lastAssistantText, cfg.excerptMaxChars);
+      }
+      sendToast(title, body, { sessionId: session?.id });
+      const url = cfg.openOnClick && session?.id ? conversationUrl(session?.id) : undefined;
+      log({
+        event: "notify",
+        sessionId: session?.id,
+        reason: reason.kind,
+        turn: event.data?.turn,
+        title,
+        body,
+        ...(url ? { url } : {}),
+      });
+      return;
+    }
+
+    if (event.type === "approval/asked" && cfg.notifyOnApproval) {
+      // Never notify when the session policy auto-rejects: nothing waits for
+      // the user, so a toast would be noise.
+      if (effectivePolicy(session) === "never") return;
+      const data = event.data ?? {};
+      const body = typeof data.toolName === "string"
+        ? (typeof data.reason === "string" && data.reason.length > 0
+          ? "工具 " + data.toolName + "：" + truncate(data.reason, 100)
+          : "工具 " + data.toolName)
+        : "有一项操作等待你的批准";
+      sendToast(cfg.appName + " · 需要审批", body, { sessionId: session?.id });
+      const url = cfg.openOnClick && session?.id ? conversationUrl(session?.id) : undefined;
+      log({
+        event: "approval",
+        sessionId: session?.id,
+        id: data.id,
+        toolName: data.toolName,
+        reason: data.reason,
+        ...(url ? { url } : {}),
+      });
+      return;
+    }
+
+    if (event.type === "tool/call" && cfg.notifyOnAskUser) {
+      const data = event.data ?? {};
+      let question;
+      if (data.name === "ask_user_question") {
+        question = extractAskQuestion(data.arguments);
+      } else if (data.name === "run_code" && typeof data.arguments === "string" && data.arguments.includes("ask_user_question")) {
+        question = extractQuestionFromCode(data.arguments);
+      }
+      if (question !== undefined || data.name === "ask_user_question") {
+        sendToast(cfg.appName + " · 需要回答", question ? truncate(question, 100) : "Agent 正在等待你的确认", { sessionId: session?.id });
+        const url = cfg.openOnClick && session?.id ? conversationUrl(session?.id) : undefined;
+        log({
+          event: "ask-user",
+          sessionId: session?.id,
+          question: question ?? null,
+          ...(url ? { url } : {}),
+        });
+      }
+      return;
+    }
+  });
+
+  log({ event: "start", version: VERSION, enabled: cfg.enabled, reasons: [...reasons], sessionId: null });
+  if (cfg.enabled && cfg.notifyOnStart) {
+    // Activation toast has no session: leave non-clickable (legacy behavior).
+    sendToast(cfg.appName, "任务完成提醒已激活（v" + VERSION + "）");
+  }
+}

package/lib/launcher.ps1

@@ -0,0 +1,310 @@
+# dsh-notify launcher (Windows PowerShell 5.1).
+# Registered as the "dshnotify" protocol handler. Invoked by the OS as:
+#   powershell.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -File "launcher.ps1" "%1"
+# It decodes the target URL from dshnotify://open?u=<encoded> and tries, in order:
+#   A) navigate an already-open DSH tab via Chrome DevTools Protocol (WebSocket);
+#   B) focus an already-open DSH window via Win32 P/Invoke;
+#   C) open the target URL in the default browser (Start-Process).
+# Every failure degrades silently. The click must never do nothing.
+param(
+  [Parameter(Mandatory = $true)][string]$ProtocolArgs
+)
+
+# ---------------------------------------------------------------------------
+# Helpers
+# ---------------------------------------------------------------------------
+function Write-Trace {
+  param([string]$Message)
+  try {
+    $dir = Join-Path $env:TEMP "dsh-notify"
+    if (-not (Test-Path $dir)) { New-Item -Path $dir -ItemType Directory -Force | Out-Null }
+    $line = (Get-Date -Format "yyyy-MM-dd HH:mm:ss.fff") + " " + $Message
+    Add-Content -Path (Join-Path $dir "launcher.log") -Value $line -Encoding UTF8
+  } catch {
+    # diagnostics must never break the flow
+  }
+}
+
+function Send-WebSocketJson {
+  # Synchronously sends a JSON string over a Chrome DevTools Protocol WebSocket
+  # and waits briefly for an ack frame. Returns $true on successful send.
+  param(
+    [string]$WsUrl,
+    [string]$Json,
+    [int]$TimeoutMs = 2000
+  )
+  try {
+    $ws = [System.Net.WebSockets.ClientWebSocket]::new()
+    $ct = [System.Threading.CancellationToken]::None
+    $connectTask = $ws.ConnectAsync($WsUrl, $ct)
+    $connectTask.Wait($TimeoutMs)
+    if ($ws.State -ne [System.Net.WebSockets.WebSocketState]::Open) {
+      try { $ws.Dispose() } catch {}
+      return $false
+    }
+    $bytes = [System.Text.Encoding]::UTF8.GetBytes($Json)
+    $seg = New-Object System.ArraySegment[byte] (, $bytes)
+    $sendTask = $ws.SendAsync($seg, [System.Net.WebSockets.WebMessageType]::Text, $true, $ct)
+    $sendTask.Wait($TimeoutMs)
+    if (-not $sendTask.IsCompletedSuccessfully) {
+      try { $ws.Dispose() } catch {}
+      return $false
+    }
+    # Best-effort ack read so the frame is flushed before we close.
+    $buf = New-Object byte[] 4096
+    $recvSeg = New-Object System.ArraySegment[byte] (, $buf)
+    $recvTask = $ws.ReceiveAsync($recvSeg, $ct)
+    if ($recvTask.Wait($TimeoutMs)) {
+      $ackBytes = $recvSeg.Array[0..($recvTask.Result.Count - 1)]
+      Write-Trace ("[cdp] ack=" + [System.Convert]::ToBase64String($ackBytes))
+    }
+    try { $ws.CloseAsync([System.Net.WebSockets.WebSocketCloseStatus]::NormalClosure, "ok", $ct).Wait($TimeoutMs) } catch {}
+    try { $ws.Dispose() } catch {}
+    return $true
+  } catch {
+    Write-Trace ("[fail step] Send-WebSocketJson: " + $_.Exception.Message)
+    try { if ($ws -ne $null) { $ws.Dispose() } } catch {}
+    return $false
+  }
+}
+
+function Invoke-CdpNavigate {
+  # Tries CDP on the standard debug ports plus any port discovered from a
+  # running chrome.exe command line. Returns $true if it navigated a page.
+  param([string]$TargetUrl, [string]$HostPort)
+  $ports = @(9222, 9223, 9229)
+  try {
+    $procs = Get-CimInstance Win32_Process -Filter "Name='chrome.exe'" -ErrorAction SilentlyContinue
+    foreach ($p in $procs) {
+      if ($p.CommandLine -match "--remote-debugging-port=(\d+)") {
+        $ports += [int]$Matches[1]
+      }
+    }
+  } catch {}
+  $ports = $ports | Sort-Object -Unique
+
+  foreach ($port in $ports) {
+    try {
+      $ver = $null
+      try {
+        $ver = Invoke-WebRequest -Uri "http://127.0.0.1:$port/json/version" -TimeoutSec 1 -UseBasicParsing
+      } catch {}
+      if ($ver -eq $null) { continue }
+      $list = Invoke-WebRequest -Uri "http://127.0.0.1:$port/json/list" -TimeoutSec 1 -UseBasicParsing
+      $targets = $list.Content | ConvertFrom-Json
+      $hit = $null
+      foreach ($t in $targets) {
+        if ($t.type -eq "page" -and $t.url -match [regex]::Escape($HostPort)) {
+          $hit = $t
+          break
+        }
+      }
+      if ($hit -eq $null) { continue }
+      $wsUrl = "ws://127.0.0.1:$port/devtools/page/$($hit.id)"
+      $json = '{"id":1,"method":"Page.navigate","params":{"url":"' + $TargetUrl.Replace('\', '\\').Replace('"', '\"') + '"}}'
+      Write-Trace ("[cdp] navigate target id=" + $hit.id + " port=" + $port)
+      if (Send-WebSocketJson -WsUrl $wsUrl -Json $json) {
+        return $true
+      }
+    } catch {
+      Write-Trace ("[fail step] Invoke-CdpNavigate port=$port : " + $_.Exception.Message)
+    }
+  }
+  return $false
+}
+
+# Win32 P/Invoke type compiled once for Step B.
+$win32Source = @'
+using System;
+using System.Collections.Generic;
+using System.Runtime.InteropServices;
+using System.Text;
+
+public class Win32WindowFinder {
+  public delegate bool EnumWindowsProc(IntPtr hWnd, IntPtr lParam);
+  [DllImport("user32.dll")] public static extern bool EnumWindows(EnumWindowsProc lpEnumFunc, IntPtr lParam);
+  [DllImport("user32.dll")] public static extern bool IsWindowVisible(IntPtr hWnd);
+  [DllImport("user32.dll")] public static extern int GetWindowThreadProcessId(IntPtr hWnd, out int lpdwProcessId);
+  [DllImport("user32.dll", CharSet = CharSet.Unicode)] public static extern int GetWindowText(IntPtr hWnd, StringBuilder lpString, int nMaxCount);
+  [DllImport("user32.dll", CharSet = CharSet.Unicode)] public static extern int GetClassName(IntPtr hWnd, StringBuilder lpString, int nMaxCount);
+  [DllImport("user32.dll")] public static extern bool SetForegroundWindow(IntPtr hWnd);
+  [DllImport("user32.dll")] public static extern bool ShowWindow(IntPtr hWnd, int nCmdShow);
+  [DllImport("user32.dll")] public static extern bool IsIconic(IntPtr hWnd);
+
+  public static List<IntPtr> Find(string className, HashSet<int> pids, string titleCue, string[] matchTitles) {
+    var result = new List<IntPtr>();
+    EnumWindows(delegate(IntPtr hWnd, IntPtr lParam) {
+      try {
+        if (!IsWindowVisible(hWnd)) return true;
+        var cls = new StringBuilder(256);
+        GetClassName(hWnd, cls, cls.Capacity);
+        if (cls.ToString() != className) return true;
+        int pid;
+        GetWindowThreadProcessId(hWnd, out pid);
+        if (!pids.Contains(pid)) return true;
+        var title = new StringBuilder(512);
+        GetWindowText(hWnd, title, title.Capacity);
+        var t = title.ToString();
+        bool titleOk = false;
+        foreach (var mt in matchTitles) { if (t.Contains(mt)) { titleOk = true; break; } }
+        if (titleOk || t.Contains(titleCue)) result.Add(hWnd);
+      } catch {}
+      return true;
+    }, IntPtr.Zero);
+    return result;
+  }
+
+  public static string GetTitle(IntPtr hWnd) {
+    var sb = new StringBuilder(512);
+    GetWindowText(hWnd, sb, sb.Capacity);
+    return sb.ToString();
+  }
+}
+'@
+
+function Invoke-Win32Focus {
+  # Enumerates top-level Chrome windows and focuses the best DSH candidate.
+  # Returns $true if a window was focused (navigation is not possible without
+  # CDP, so this is focus-only by design).
+  param([string]$HostPort, [string[]]$MatchTitles)
+  try {
+    if (-not ("Win32WindowFinder" -as [type])) {
+      Add-Type -TypeDefinition $win32Source -Language CSharp
+    }
+    $chromePids = New-Object System.Collections.Generic.HashSet[int]
+    $procs = Get-Process chrome -ErrorAction SilentlyContinue
+    foreach ($p in $procs) { [void]$chromePids.Add($p.Id) }
+
+    $wins = [Win32WindowFinder]::Find("Chrome_WidgetWin_1", $chromePids, $HostPort, $MatchTitles)
+    if ($wins -eq $null -or $wins.Count -eq 0) {
+      Write-Trace ("[win32] no candidate window for " + $HostPort)
+      return $false
+    }
+    # Prefer a window whose title contains the host:port cue.
+    $best = $null
+    foreach ($w in $wins) {
+      $title = [Win32WindowFinder]::GetTitle($w)
+      if ($title.Contains($HostPort)) { $best = $w; break }
+    }
+    if ($best -eq $null) { $best = $wins[0] }
+
+    if ([Win32WindowFinder]::IsIconic($best)) {
+      [void][Win32WindowFinder]::ShowWindow($best, 9)  # SW_RESTORE
+    }
+    $ok = [Win32WindowFinder]::SetForegroundWindow($best)
+    if (-not $ok) {
+      [void][Win32WindowFinder]::ShowWindow($best, 5)  # SW_SHOW
+      $ok = [Win32WindowFinder]::SetForegroundWindow($best)
+    }
+    Write-Trace ("[win32] focused hwnd=" + $best.ToString() + " ok=" + $ok)
+    return $true
+  } catch {
+    Write-Trace ("[fail step] Invoke-Win32Focus: " + $_.Exception.Message)
+    return $false
+  }
+}
+
+# ---------------------------------------------------------------------------
+# Main
+# ---------------------------------------------------------------------------
+function Main {
+  Write-Trace ("[start] args='" + $ProtocolArgs + "'")
+
+  # Space-separated args arrive as one token, but rejoin defensively.
+  $raw = $ProtocolArgs
+  if ($args -and $args.Count -gt 0) {
+    $raw = (@($ProtocolArgs) + $args) -join " "
+  }
+
+  # Strip the scheme prefix and parse the query.
+  $stripped = $raw
+  if ($stripped -match "^dshnotify://") {
+    $stripped = $stripped.Substring("dshnotify://".Length)
+  } elseif ($stripped -match "^dshnotify:") {
+    $stripped = $stripped.Substring("dshnotify:".Length)
+  }
+  $targetUrl = ""
+  if ($stripped -match "\?u=") {
+    $encoded = $stripped -split "\?u=" | Select-Object -Last 1
+    try { $targetUrl = [uri]::UnescapeDataString($encoded) } catch { $targetUrl = $encoded }
+  }
+  if ([string]::IsNullOrWhiteSpace($targetUrl)) {
+    Write-Trace ("[fail] no targetUrl parsed from '" + $raw + "'")
+    return $false
+  }
+
+  # Origin info from the decoded URL (best-effort).
+  $HostPort = ""
+  try {
+    $parsed = [Uri]$targetUrl
+    $HostPort = "$($parsed.Host):$($parsed.Port)"
+  } catch {
+    Write-Trace ("[warn] could not parse targetUrl as Uri: " + $targetUrl)
+  }
+  $MatchTitles = @("DeepSeek Harness")
+
+  $handled = $false
+
+  # Step A: CDP navigate (best-effort, silent on any failure).
+  try {
+    if ($HostPort -ne "") {
+      if (Invoke-CdpNavigate -TargetUrl $targetUrl -HostPort $HostPort) {
+        Write-Trace ("[ok] Step A CDP navigate succeeded for " + $HostPort)
+        $handled = $true
+      } else {
+        Write-Trace ("[step] Step A skipped/failed")
+      }
+    }
+  } catch {
+    Write-Trace ("[fail step] Step A: " + $_.Exception.Message)
+  }
+
+  # Step B: Win32 focus (best-effort, focus-only without CDP navigation).
+  if (-not $handled) {
+    try {
+      if (Invoke-Win32Focus -HostPort $HostPort -MatchTitles $MatchTitles) {
+        Write-Trace ("[ok] Step B focused existing DSH window (focus-only)")
+        $handled = $true
+      } else {
+        Write-Trace ("[step] Step B no candidate")
+      }
+    } catch {
+      Write-Trace ("[fail step] Step B: " + $_.Exception.Message)
+    }
+  }
+
+  # Step C: fallback open in default browser. Always runs if A and B failed.
+  if (-not $handled) {
+    try {
+      Write-Trace ("[fallback] Start-Process " + $targetUrl)
+      Start-Process $targetUrl
+      $handled = $true
+    } catch {
+      Write-Trace ("[fail step] Step C: " + $_.Exception.Message)
+    }
+  }
+
+  return $handled
+}
+
+$success = $false
+try {
+  $success = Main
+} catch {
+  Write-Trace ("[fatal] " + $_.Exception.Message)
+  # Last resort: try to open the URL directly.
+  try {
+    $m = $ProtocolArgs -match "u=([^&\s]+)"
+    if ($m) {
+      $u = [uri]::UnescapeDataString($Matches[1])
+      Start-Process $u
+      $success = $true
+    }
+  } catch {}
+}
+
+if ($success) {
+  exit 0
+} else {
+  exit 1
+}

package/lib/notify.ps1

@@ -1,35 +1,99 @@
-# dsh-notify toast sender (Windows PowerShell 5.1 required: WinRT projection).
-# Parameters are bound by PowerShell from the process argument vector, so this
-# file stays ASCII-only and needs no BOM.
-param(
-  [Parameter(Mandatory = $true)][string]$Title,
-  [Parameter(Mandatory = $true)][string]$Body,
-  [string]$Aumid = "DeepSeekHarness.Notify",
-  [string]$AppName = "DeepSeek Harness"
-)
-$ErrorActionPreference = "Stop"
-
-# Register the AppUserModelId once under HKCU so Win32 toasts are allowed.
-# Best effort: if the write is denied we still try to show the toast below.
-$key = "HKCU:\SOFTWARE\Classes\AppUserModelId\$Aumid"
-try {
-  if (-not (Test-Path $key)) {
-    New-Item -Path $key -Force | Out-Null
-    New-ItemProperty -Path $key -Name DisplayName -Value $AppName -PropertyType String -Force | Out-Null
-  }
-} catch {
-  Write-Warning ("AUMID registration failed: " + $_.Exception.Message)
-}
-
-# Project the WinRT toast API (supported natively by .NET Framework).
-[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] | Out-Null
-
-$xml = [Windows.UI.Notifications.ToastNotificationManager]::GetTemplateContent([Windows.UI.Notifications.ToastTemplateType]::ToastText02)
-$texts = $xml.GetElementsByTagName("text")
-$texts.Item(0).AppendChild($xml.CreateTextNode($Title)) | Out-Null
-$texts.Item(1).AppendChild($xml.CreateTextNode($Body)) | Out-Null
-
-$toast = New-Object Windows.UI.Notifications.ToastNotification($xml)
-$notifier = [Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier($Aumid)
-$notifier.Show($toast)
-Write-Output "toast shown"
+# dsh-notify toast sender (Windows PowerShell 5.1 required: WinRT projection).
+# Parameters are bound by PowerShell from the process argument vector, so this
+# file stays ASCII-only and needs no BOM.
+param(
+  [Parameter(Mandatory = $true)][string]$Title,
+  [Parameter(Mandatory = $true)][string]$Body,
+  [string]$Aumid = "DeepSeekHarness.Notify",
+  [string]$AppName = "DeepSeek Harness",
+  [string]$Url = "",
+  [int]$LaunchProtocol = 1   # 1 = route via dshnotify:// launcher (prefer existing); 0 = open targetUrl directly
+)
+$ErrorActionPreference = "Stop"
+
+# Register the AppUserModelId once under HKCU so Win32 toasts are allowed.
+# Best effort: if the write is denied we still try to show the toast below.
+$key = "HKCU:\SOFTWARE\Classes\AppUserModelId\$Aumid"
+try {
+  if (-not (Test-Path $key)) {
+    New-Item -Path $key -Force | Out-Null
+    New-ItemProperty -Path $key -Name DisplayName -Value $AppName -PropertyType String -Force | Out-Null
+  }
+} catch {
+  Write-Warning ("AUMID registration failed: " + $_.Exception.Message)
+}
+
+# Project the WinRT toast API (supported natively by .NET Framework).
+[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] | Out-Null
+
+# Optional clickable activation: when $Url is set we make the toast open a URL
+# on click. Best effort - any failure here degrades gracefully (either to a
+# direct protocol activation or to a plain non-clickable toast) and never
+# aborts the Show below.
+$clickable = $false
+$launchValue = ""
+if ($Url -ne "") {
+  try {
+    if ($LaunchProtocol -eq 1) {
+      # Register the dshnotify:// protocol handler idempotently (best effort).
+      try {
+        $progId = "HKCU:\Software\Classes\dshnotify"
+        if (-not (Test-Path $progId)) {
+          New-Item -Path $progId -Force | Out-Null
+        }
+        # Default (unnamed) value names the protocol.
+        Set-Item -Path $progId -Value 'dshnotify' -Force
+        # "URL Protocol" marker value (presence marks the key as a protocol handler).
+        Set-ItemProperty -Path $progId -Name 'URL Protocol' -Value '' -Force
+        $cmdKey = "HKCU:\Software\Classes\dshnotify\shell\open\command"
+        if (-not (Test-Path $cmdKey)) {
+          New-Item -Path $cmdKey -Force | Out-Null
+        }
+        $launcherPath = Join-Path $PSScriptRoot "launcher.ps1"
+        $command = ('"powershell.exe" -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -File "' + $launcherPath + '" "%1"')
+        Set-Item -Path $cmdKey -Value $command -Force
+      } catch {
+        Write-Warning ("dshnotify protocol registration failed, falling back to direct URL: " + $_.Exception.Message)
+        # Fall back to direct-URL activation for this toast.
+        $LaunchProtocol = 0
+      }
+    }
+
+    if ($LaunchProtocol -eq 1) {
+      $launchValue = ("dshnotify://open?u=" + [uri]::EscapeDataString($Url))
+    } else {
+      $launchValue = $Url
+    }
+    $clickable = $true
+  } catch {
+    Write-Warning ("Toast activation setup failed, showing plain toast: " + $_.Exception.Message)
+    $clickable = $false
+  }
+}
+
+$xml = [Windows.UI.Notifications.ToastNotificationManager]::GetTemplateContent([Windows.UI.Notifications.ToastTemplateType]::ToastText02)
+$texts = $xml.GetElementsByTagName("text")
+$texts.Item(0).AppendChild($xml.CreateTextNode($Title)) | Out-Null
+$texts.Item(1).AppendChild($xml.CreateTextNode($Body)) | Out-Null
+
+if ($clickable) {
+  try {
+    $root = $xml.DocumentElement
+    if ($root.Name -eq "toast") {
+      $root.SetAttribute("activationType", "protocol") | Out-Null
+      $root.SetAttribute("duration", "long") | Out-Null
+      $root.SetAttribute("launch", $launchValue) | Out-Null
+      # Optional explicit audio cue.
+      $audio = $xml.CreateElement("audio")
+      $audio.SetAttribute("src", "ms-winsoundevent:Notification.Default") | Out-Null
+      $root.AppendChild($audio) | Out-Null
+    }
+  } catch {
+    Write-Warning ("Failed to attach activation attributes: " + $_.Exception.Message)
+  }
+}
+
+$toast = New-Object Windows.UI.Notifications.ToastNotification($xml)
+$notifier = [Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier($Aumid)
+$notifier.Show($toast)
+Write-Output "toast shown"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-notify-windows",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "DeepSeek Harness (DSH) 插件：任务完成 / 等待审批 / 等待回答时发送 Windows 系统桌面通知",
   "repository": {
     "type": "git",