dsh-users-open-source-workspace 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 KAIROSLLL
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,57 @@
+# dsh-users-open-source-workspace
+
+`dsh-users-open-source` 的伴生插件：受理 `POST /dsh-users-open-source/open-workspace`，在系统文件管理器里
+打开**用户当前正在用的那个工作区目录**（Web 界面上就是设置页「开源用户」里的 **云端备份** 按钮）。
+
+## 目录是怎么定的
+
+按可靠性依次尝试，任一命中即用：
+
+1. 请求里带 `sessionId` → 命中该会话所属的工作区（最准）；
+2. 会话日志分桶目录里**最新写入**的那个桶 → 编码回工作区路径
+   （例如 `D:\work\my-project` ⇄ `--D-work-my-project--`）。当前会话一直在写日志，所以这条能顶住 id 缺失；
+3. 会话投影缓存 `$DSH_HOME/storages/session_projcache/sessions/*.json` 里最新那份的 `cwd`；
+4. 注册表里 `updatedAt` 最新的工作区；
+5. 全落空 → 注册表第一个工作区。
+
+客户端只能递 `sessionId`，**路径永远由宿主从 DSH 自己的账本里取**，所以不存在
+「递个路径就打开任意目录」的面。打开动作走宿主自己的 `ctx.subprocess`，目录作为 argv
+里的一项直传、不经 shell，所以空格、中文、`&` 都不会被当成命令。
+
+## 为什么 Windows 上要绕一圈 PowerShell
+
+DSH 以**隐藏方式**启动插件的子进程 —— 直接 `spawn('explorer.exe', [dir])` 得到的窗口
+确实存在（COM 能枚举到 `CabinetWClass`），但 `IsWindowVisible` 是 `false`：**看不见**。
+后台进程再直接调 `SetForegroundWindow` 也会被 Windows 拒绝。
+
+所以 Windows 上改走包内的 `open-folder.ps1` + `focus.cs`：用 `Shell.Application.Explore`
+打开目录，再用 `AttachThreadInput` + `ShowWindow(SW_SHOW/SW_RESTORE)` +
+`BringWindowToTop` + `SetForegroundWindow` 把窗口真正显示并顶到前台（实测：窗口
+`visible` 由 false 变 true，前台窗口变成「工作区名 - 文件资源管理器」）。
+
+## 为什么是独立的包
+
+`dsh-users-open-source` 带 `dsh.client` 客户端半边，而 `dsh-client-modules` 按「模块最近的
+package.json」判定来源包 —— 同一个包里再挂第二个 loader 入口：
+
+- name 写包内子路径 → loader 解析不了，entry 报 `failed to import`；
+- name 写 file: URL → 被算成本包第二个 Loader 源，启动直接崩：
+  `client-modules: package dsh-users-open-source resolves from multiple active Loader sources`。
+
+独立成包后 entry name 就是包名，两边都干净，宿主侧改动也不必等 dsh web 重启。
+
+## 安装
+
+```powershell
+# 通常不需要单独装：它由主包 dsh-users-open-source 作为 dependency 带上来
+dsh plugin --profile desktop add "link:<本仓库>\packages\dsh-users-open-source-workspace"
+```
+
+## 自检
+
+```powershell
+node tests/smoke.mjs
+```
+
+9 项：路由注册、sessionId 命中、三条兜底线索各自命中、全落空退第一个、
+目录缺失、无工作区、非 POST 405。

package/lib/focus.cs

@@ -0,0 +1,44 @@
+using System;
+using System.Text;
+using System.Runtime.InteropServices;
+
+/// <summary>
+/// Win32 helpers for "open a folder and make sure its window is actually visible".
+/// DSH starts plugin subprocesses hidden, so an explorer window spawned that way is
+/// created with visible = false; plain SetForegroundWindow from a background process
+/// is refused by Windows, hence the AttachThreadInput trick.
+/// </summary>
+public class FolderFocus
+{
+    public delegate bool EnumProc(IntPtr hwnd, IntPtr lparam);
+
+    [DllImport("user32.dll")] public static extern bool EnumWindows(EnumProc cb, IntPtr lparam);
+    [DllImport("user32.dll", CharSet = CharSet.Unicode)] public static extern int GetWindowText(IntPtr hwnd, StringBuilder text, int max);
+    [DllImport("user32.dll", CharSet = CharSet.Unicode)] public static extern int GetClassName(IntPtr hwnd, StringBuilder text, int max);
+    [DllImport("user32.dll")] public static extern bool IsWindowVisible(IntPtr hwnd);
+    [DllImport("user32.dll")] public static extern bool IsIconic(IntPtr hwnd);
+    [DllImport("user32.dll")] public static extern bool ShowWindow(IntPtr hwnd, int cmd);
+    [DllImport("user32.dll")] public static extern bool SetForegroundWindow(IntPtr hwnd);
+    [DllImport("user32.dll")] public static extern bool BringWindowToTop(IntPtr hwnd);
+    [DllImport("user32.dll")] public static extern IntPtr GetForegroundWindow();
+    [DllImport("user32.dll")] public static extern uint GetWindowThreadProcessId(IntPtr hwnd, IntPtr pid);
+    [DllImport("user32.dll")] public static extern bool AttachThreadInput(uint attach, uint attachTo, bool attachFlag);
+    [DllImport("user32.dll")] public static extern bool SetWindowPos(IntPtr hwnd, IntPtr insertAfter, int x, int y, int cx, int cy, uint flags);
+    [DllImport("user32.dll")] public static extern void keybd_event(byte virtualKey, byte scanCode, uint flags, UIntPtr extraInfo);
+    [DllImport("kernel32.dll")] public static extern uint GetCurrentThreadId();
+
+    /// <summary>VK_MENU (ALT). A synthetic tap makes Windows treat the focus change as user-driven.</summary>
+    public const byte VK_MENU = 0x12;
+
+    /// <summary>KEYEVENTF_KEYUP.</summary>
+    public const uint KEYEVENTF_KEYUP = 0x0002;
+
+    /// <summary>HWND_TOPMOST: keep the window above non-topmost windows.</summary>
+    public static readonly IntPtr HWND_TOPMOST = new IntPtr(-1);
+
+    /// <summary>HWND_NOTOPMOST: return the window to the normal band.</summary>
+    public static readonly IntPtr HWND_NOTOPMOST = new IntPtr(-2);
+
+    /// <summary>SWP_NOSIZE | SWP_NOMOVE | SWP_SHOWWINDOW.</summary>
+    public const uint SWP_KEEP = 0x0001 | 0x0002 | 0x0040;
+}

package/lib/index.js

@@ -0,0 +1,423 @@
+/**
+ * dsh-users-open-source-workspace — 「云端备份」的宿主半边（打开本地工作区目录）。
+ *
+ * 干什么：受理 `POST /dsh-users-open-source/open-workspace`，在系统文件管理器里打开
+ * **用户当前正在用的那个工作区目录**。
+ *
+ * 目录怎么定的（按可靠性排序，任何一步都只从 DSH 自己的账本里取路径）：
+ *   1. 客户端递来的 sessionId 命中的工作区（最准，但客户端不一定拿得到 id）；
+ *   2. 最近有写入的会话目录 → 反解它所属的 workspace bucket（`$DSH_HOME/sessions/<bucket>/`）
+ *      → 匹配已注册工作区。当前正在跑的会话日志一直在写，所以这一条能顶住 id 缺失；
+ *   3. 注册表里的第一个工作区。
+ * 客户端永远只能递 sessionId，**路径不由客户端决定**，所以不存在「递个路径就打开任意目录」。
+ *
+ * 为什么是**独立的包**（而不是 dsh-users-open-source 包里的第二个 entry）：
+ *   dsh-users-open-source 带 `dsh.client` 客户端半边，`dsh-client-modules` 按「模块最近的
+ *   package.json」判定来源包 —— 同包内再挂第二个 loader 入口，无论 name 写包内子路径
+ *   （loader 解析不了，报 failed to import）还是写 file: URL（被算成第二个 Loader 源，
+ *   `package dsh-users-open-source resolves from multiple active Loader sources`，启动崩），
+ *   都走不通。独立成包后 entry name 就是包名，两边都干净。
+ *   顺带：宿主的「云端备份」按钮改用本条路由，所以它不必等 dsh web 重启。
+ *
+ * @module dsh-users-open-source-workspace
+ */
+import { existsSync } from 'node:fs'
+import { readdir, readFile, stat } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+/** 插件名（= 包名 = cordis loader 行 id）。 */
+export const name = 'dsh-users-open-source-workspace'
+/** 依赖宿主 webServer（挂路由）与 subprocess（起文件管理器）。 */
+export const inject = ['webServer', 'subprocess']
+
+/** 路由路径（客户端只认这一个口）。 */
+const OPEN_PATH = '/dsh-users-open-source/open-workspace'
+
+/** 本文件所在目录（`open-folder.ps1` 与 `focus.cs` 都放在这里）。 */
+const HERE = dirname(fileURLToPath(import.meta.url))
+
+/**
+ * 系统自带 PowerShell 的绝对路径（不走 PATH：DSH 给子进程的 PATH 可能是清理过的）。
+ * @returns {string} powershell.exe 的绝对路径。
+ */
+function powershellPath() {
+  const root = typeof process.env.SystemRoot === 'string' && process.env.SystemRoot !== ''
+    ? process.env.SystemRoot
+    : 'C:\\Windows'
+  return `${root}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`
+}
+
+/**
+ * 解析 DSH home（与内核 `dshHomePath()` 同优先级：$DSH_HOME 优先，否则 ~/.dsh）。
+ * @returns {string} 绝对的 DSH home 路径。
+ */
+function dshHome() {
+  const configured = process.env.DSH_HOME
+  if (typeof configured === 'string' && configured.trim() !== '') return configured.trim()
+  return join(homedir(), '.dsh')
+}
+
+/**
+ * 写一个 JSON 响应。
+ * @param {import('node:http').ServerResponse} res - 响应对象。
+ * @param {number} status - HTTP 状态码。
+ * @param {unknown} payload - 要序列化的值。
+ */
+function sendJson(res, status, payload) {
+  const body = Buffer.from(JSON.stringify(payload), 'utf8')
+  res.writeHead(status, {
+    'content-type': 'application/json; charset=utf-8',
+    'cache-control': 'no-store',
+    'content-length': String(body.length)
+  })
+  res.end(body)
+}
+
+/**
+ * 读取请求体并解析 JSON，带大小上限。
+ * @param {import('node:http').IncomingMessage} req - 请求对象。
+ * @param {number} [limit] - 最大字节数。
+ * @returns {Promise<Record<string, unknown>>} 解析后的对象。
+ */
+function readJsonBody(req, limit = 8192) {
+  return new Promise((resolve, reject) => {
+    const chunks = []
+    let size = 0
+    req.on('data', (chunk) => {
+      size += chunk.length
+      if (size > limit) {
+        reject(new Error('body too large'))
+        req.destroy()
+        return
+      }
+      chunks.push(chunk)
+    })
+    req.on('end', () => {
+      const text = Buffer.concat(chunks).toString('utf8')
+      if (text.trim() === '') {
+        resolve({})
+        return
+      }
+      try {
+        const parsed = JSON.parse(text)
+        resolve(parsed !== null && typeof parsed === 'object' ? parsed : {})
+      } catch (error) {
+        reject(new Error(`invalid JSON body: ${String(error && error.message)}`))
+      }
+    })
+    req.on('error', reject)
+  })
+}
+
+/**
+ * 在系统文件管理器里打开一个目录。
+ *
+ * Windows：走包内的 `open-folder.ps1`。**不能**直接 spawn `explorer.exe` ——
+ * DSH 以隐藏方式启动插件的子进程，explorer 派生出来的窗口会带着 `visible=false`
+ * （实测：窗口存在、COM 能枚举到，但就是看不见），后台进程直接调
+ * SetForegroundWindow 也会被 Windows 拒绝。脚本里用
+ * Shell.Application.Explore + AttachThreadInput/ShowWindow/SetForegroundWindow
+ * 把窗口真正显出来并顶到前台。
+ *
+ * 其它平台：直接用系统自带的打开器，目录走 argv，不经 shell。
+ * @param {import('@deepseek-ai/cordis').Context} ctx - 宿主上下文。
+ * @param {string} directory - 要打开的绝对目录。
+ * @returns {string} 实际用的方式（写进日志与响应）。
+ */
+function openInFileManager(ctx, directory) {
+  if (process.platform === 'win32') {
+    const script = join(HERE, 'open-folder.ps1')
+    if (process.env.DSH_NET_SPEED_DRY_OPEN === '1') return 'powershell:open-folder.ps1'
+    const handle = ctx.subprocess.spawn({
+      argv: [
+        powershellPath(),
+        '-NoProfile',
+        '-NonInteractive',
+        '-ExecutionPolicy',
+        'Bypass',
+        '-File',
+        script,
+        directory
+      ],
+      cwd: directory,
+      stdio: { stdin: 'ignore', stdout: 'ignore', stderr: 'ignore' },
+      graceMs: 20000
+    })
+    void handle.done.catch(() => {})
+    return 'powershell:open-folder.ps1'
+  }
+
+  const command = process.platform === 'darwin' ? '/usr/bin/open' : '/usr/bin/xdg-open'
+  if (process.env.DSH_NET_SPEED_DRY_OPEN === '1') return command
+  const handle = ctx.subprocess.spawn({
+    argv: [command, directory],
+    cwd: directory,
+    stdio: { stdin: 'ignore', stdout: 'ignore', stderr: 'ignore' },
+    graceMs: 3000
+  })
+  void handle.done.catch(() => {})
+  return command
+}
+
+/**
+ * 把一个工作区路径编码成 DSH 的会话分桶目录名。
+ *
+ * 观察到的规则：`D:\work\my-project` → `--D-work-my-project--`（`:` 与 `\` `/` 都变 `-`，
+ * 原有的 `-` 保留，两端各包 `--`）。用于把会话目录反查回工作区。
+ * @param {string} path - 工作区绝对路径。
+ * @returns {string} 分桶目录名。
+ */
+function encodeWorkspaceBucket(path) {
+  return `--${path.replace(/[:\\/]/g, '-')}--`
+}
+
+/**
+ * 读一个会话目录里最新的文件写入时间。
+ * @param {string} directory - 会话目录。
+ * @returns {Promise<number>} 最新 mtime（毫秒），读不到时 0。
+ */
+async function newestWriteIn(directory) {
+  let newest = 0
+  let entries = []
+  try {
+    entries = await readdir(directory, { withFileTypes: true })
+  } catch {
+    return 0
+  }
+  for (const entry of entries) {
+    if (!entry.isFile()) continue
+    try {
+      const info = await stat(join(directory, entry.name))
+      if (info.mtimeMs > newest) newest = info.mtimeMs
+    } catch {
+      /* 单个文件读不到不影响整体判断 */
+    }
+  }
+  return newest
+}
+
+/**
+ * 两个路径是否指同一个目录（Windows 大小写不敏感、容忍尾部分隔符）。
+ * @param {unknown} a - 路径一。
+ * @param {unknown} b - 路径二。
+ * @returns {boolean} 相同则 true。
+ */
+function samePath(a, b) {
+  if (typeof a !== 'string' || typeof b !== 'string') return false
+  const norm = (value) => value.replace(/[\\/]+$/, '').replace(/\//g, '\\').toLowerCase()
+  return norm(a) === norm(b)
+}
+
+/**
+ * 在一份 JSON 里找第一个非空 `cwd` 字符串。
+ * 投影缓存的结构随内核版本会变，所以不写死层级，只限深度。
+ * @param {unknown} value - 任意 JSON 值。
+ * @param {number} [depth] - 递归深度上限。
+ * @returns {string} 命中的 cwd，或空串。
+ */
+function findCwdDeep(value, depth = 0) {
+  if (depth > 5 || value === null || typeof value !== 'object') return ''
+  if (Array.isArray(value)) {
+    for (const item of value) {
+      const hit = findCwdDeep(item, depth + 1)
+      if (hit !== '') return hit
+    }
+    return ''
+  }
+  const record = value
+  if (typeof record.cwd === 'string' && record.cwd !== '') return record.cwd
+  for (const item of Object.values(record)) {
+    const hit = findCwdDeep(item, depth + 1)
+    if (hit !== '') return hit
+  }
+  return ''
+}
+
+/**
+ * 线索 1：会话日志分桶 —— 当前会话一直在写，最新 mtime 的桶就是它。
+ * @param {object[]} workspaces - 已注册工作区。
+ * @returns {Promise<{path:string,title:string,source:'recent'}|null>} 命中结果。
+ */
+async function recentFromSessionBuckets(workspaces) {
+  const root = join(dshHome(), 'sessions')
+  let buckets = []
+  try {
+    buckets = await readdir(root, { withFileTypes: true })
+  } catch {
+    return null
+  }
+  let best = null
+  for (const bucket of buckets) {
+    if (!bucket.isDirectory()) continue
+    const bucketDir = join(root, bucket.name)
+    let sessions = []
+    try {
+      sessions = await readdir(bucketDir, { withFileTypes: true })
+    } catch {
+      continue
+    }
+    for (const session of sessions) {
+      if (!session.isDirectory()) continue
+      const mtime = await newestWriteIn(join(bucketDir, session.name))
+      if (mtime > 0 && (best === null || mtime > best.mtime)) {
+        best = { bucket: bucket.name, mtime }
+      }
+    }
+  }
+  if (best === null) return null
+  const hit = workspaces.find((workspace) => {
+    const path = workspace === null || workspace === undefined ? undefined : workspace.path
+    return typeof path === 'string' && encodeWorkspaceBucket(path) === best.bucket
+  })
+  if (hit === undefined || hit === null || typeof hit.path !== 'string') return null
+  return { path: hit.path, title: String(hit.title ?? ''), source: 'recent' }
+}
+
+/**
+ * 线索 2：会话投影缓存 —— 最新那个文件里带着明确的 cwd。
+ * @param {object[]} workspaces - 已注册工作区。
+ * @returns {Promise<{path:string,title:string,source:'recent'}|null>} 命中结果。
+ */
+async function recentFromProjectionCache(workspaces) {
+  const dir = join(dshHome(), 'storages', 'session_projcache', 'sessions')
+  let entries = []
+  try {
+    entries = await readdir(dir, { withFileTypes: true })
+  } catch {
+    return null
+  }
+  let best = null
+  for (const entry of entries) {
+    if (!entry.isFile() || !entry.name.endsWith('.json')) continue
+    const file = join(dir, entry.name)
+    try {
+      const info = await stat(file)
+      if (best === null || info.mtimeMs > best.mtime) best = { file, mtime: info.mtimeMs }
+    } catch {
+      /* 单个文件读不到不影响整体判断 */
+    }
+  }
+  if (best === null) return null
+  let cwd = ''
+  try {
+    cwd = findCwdDeep(JSON.parse(await readFile(best.file, 'utf8')))
+  } catch {
+    return null
+  }
+  if (cwd === '') return null
+  const hit = workspaces.find((workspace) => {
+    const path = workspace === null || workspace === undefined ? undefined : workspace.path
+    return samePath(path, cwd)
+  })
+  if (hit !== undefined && hit !== null && typeof hit.path === 'string') {
+    return { path: hit.path, title: String(hit.title ?? ''), source: 'recent' }
+  }
+  // 缓存里的目录不在注册表里也认（他可能刚加进来还没入库）
+  if (existsSync(cwd)) return { path: cwd, title: '', source: 'recent' }
+  return null
+}
+
+/**
+ * 找"用户当前正在用"的工作区（客户端拿不到 sessionId 时的救命绳）。
+ *
+ * 三条线索依次尝试，任一命中即返回：
+ *   1. 会话日志分桶（当前会话一直在写，最新的桶就是它）；
+ *   2. 会话投影缓存（文件里带明确的 cwd）；
+ *   3. 注册表里 updatedAt 最新的工作区。
+ * 全落空时返回 null，调用方退到"注册表里第一个工作区"。
+ * @param {import('@deepseek-ai/cordis').Context} ctx - 宿主上下文。
+ * @param {object[]} workspaces - 已注册工作区。
+ * @returns {Promise<{path:string,title:string,source:'recent'}|null>} 命中结果。
+ */
+async function findRecentlyActiveWorkspace(ctx, workspaces) {
+  const fromBuckets = await recentFromSessionBuckets(workspaces)
+  if (fromBuckets !== null) return fromBuckets
+
+  const fromCache = await recentFromProjectionCache(workspaces)
+  if (fromCache !== null) return fromCache
+
+  let newest = null
+  for (const workspace of workspaces) {
+    if (workspace === null || workspace === undefined) continue
+    const stamp = typeof workspace.updatedAt === 'string' ? workspace.updatedAt : ''
+    if (stamp === '') continue
+    if (newest === null || stamp > newest.stamp) newest = { workspace, stamp }
+  }
+  if (newest !== null && typeof newest.workspace.path === 'string') {
+    return { path: newest.workspace.path, title: String(newest.workspace.title ?? ''), source: 'recent' }
+  }
+  return null
+}
+
+/**
+ * 定出要打开的工作区目录（三步兜底，见模块头）。
+ * @param {import('@deepseek-ai/cordis').Context} ctx - 宿主上下文。
+ * @param {string} sessionId - 客户端报的当前会话 id（可为空）。
+ * @returns {Promise<{path:string,title:string,source:'session'|'recent'|'first'}|null>} 结果。
+ */
+async function resolveWorkspaceDirectory(ctx, sessionId) {
+  const registry = ctx.get('workspaceRegistry')
+  if (registry === undefined || typeof registry.list !== 'function') return null
+  let workspaces = []
+  try {
+    workspaces = registry.list()
+  } catch {
+    return null
+  }
+  if (!Array.isArray(workspaces) || workspaces.length === 0) return null
+
+  if (sessionId !== '') {
+    const hit = workspaces.find((workspace) => {
+      const ids = workspace === null || workspace === undefined ? undefined : workspace.sessionIds
+      return Array.isArray(ids) ? ids.includes(sessionId) : false
+    })
+    if (hit !== undefined && hit !== null && typeof hit.path === 'string') {
+      return { path: hit.path, title: String(hit.title ?? ''), source: 'session' }
+    }
+  }
+
+  const recent = await findRecentlyActiveWorkspace(ctx, workspaces)
+  if (recent !== null) return recent
+
+  const first = workspaces[0]
+  if (first === undefined || first === null || typeof first.path !== 'string') return null
+  return { path: first.path, title: String(first.title ?? ''), source: 'first' }
+}
+
+/**
+ * 插件入口：挂上「打开工作区目录」这一条路由。
+ * @param {import('@deepseek-ai/cordis').Context} ctx - 宿主上下文。
+ * @returns {void}
+ */
+export function apply(ctx) {
+  ctx.effect(() => ctx.webServer.register({
+    kind: 'exact',
+    path: OPEN_PATH,
+    handler: async (req, res) => {
+      if (req.method !== 'POST') {
+        sendJson(res, 405, { ok: false, error: 'POST only' })
+        return
+      }
+      try {
+        const body = await readJsonBody(req)
+        const sessionId = typeof body.sessionId === 'string' ? body.sessionId : ''
+        const target = await resolveWorkspaceDirectory(ctx, sessionId)
+        if (target === null) {
+          sendJson(res, 200, { ok: false, error: 'no-workspace' })
+          return
+        }
+        if (!existsSync(target.path)) {
+          sendJson(res, 200, { ok: false, error: 'workspace-missing', path: target.path })
+          return
+        }
+        const command = openInFileManager(ctx, target.path)
+        ctx.logger.info(`net-speed-open: 打开工作区目录 ${target.path}（${target.source} / ${command}）`)
+        sendJson(res, 200, { ok: true, path: target.path, title: target.title, source: target.source, command })
+      } catch (error) {
+        sendJson(res, 500, { ok: false, error: String((error && error.message) || error) })
+      }
+    }
+  }), 'net-speed-open: /open-workspace')
+}

package/lib/open-folder.ps1

@@ -0,0 +1,56 @@
+# Opens a folder in Explorer and makes the window actually visible, then lets go.
+#
+# Why this exists: DSH starts plugin subprocesses hidden, so an explorer window spawned from
+# here is created with visible = false - it exists (COM enumerates it) but the user cannot
+# see it. Showing it once and handing it the foreground once is the whole job.
+#
+# Deliberately NOT done here: HWND_TOPMOST, and a loop of SetForegroundWindow calls. Those
+# keep the window glued on top for seconds and fight the app the user was just using, which
+# feels like being hijacked ("did I just get a virus?"). If the other window takes the focus
+# back, the folder window simply stays in the taskbar like any normal window.
+# A synthetic ALT tap was also tried and made things worse - do not add keybd_event back.
+#
+# ASCII only on purpose: PowerShell 5.1 reads script files as ANSI unless they carry a BOM.
+param([Parameter(Mandatory = $true)][string]$Path)
+
+$ErrorActionPreference = 'Stop'
+Add-Type -Path (Join-Path $PSScriptRoot 'focus.cs')
+
+$leaf = Split-Path -Leaf $Path
+$shell = New-Object -ComObject Shell.Application
+$shell.Explore($Path)
+Start-Sleep -Milliseconds 1200
+
+$script:target = [IntPtr]::Zero
+$callback = [FolderFocus+EnumProc] {
+    param($hwnd, $lparam)
+    $cls = New-Object System.Text.StringBuilder 256
+    [void][FolderFocus]::GetClassName($hwnd, $cls, 256)
+    if ($cls.ToString() -ne 'CabinetWClass') { return $true }
+    $title = New-Object System.Text.StringBuilder 512
+    [void][FolderFocus]::GetWindowText($hwnd, $title, 512)
+    if ($title.ToString() -like "$leaf*") {
+        $script:target = $hwnd
+        return $false
+    }
+    return $true
+}
+[void][FolderFocus]::EnumWindows($callback, [IntPtr]::Zero)
+
+if ($script:target -eq [IntPtr]::Zero) {
+    Write-Output "no-window:$leaf"
+    exit 0
+}
+
+# One shot: make it visible, bring it forward, give it the foreground. Then stop.
+$foreground = [FolderFocus]::GetForegroundWindow()
+$foregroundThread = [FolderFocus]::GetWindowThreadProcessId($foreground, [IntPtr]::Zero)
+$myThread = [FolderFocus]::GetCurrentThreadId()
+[void][FolderFocus]::AttachThreadInput($myThread, $foregroundThread, $true)
+[void][FolderFocus]::ShowWindow($script:target, 5)   # SW_SHOW
+[void][FolderFocus]::ShowWindow($script:target, 9)   # SW_RESTORE
+[void][FolderFocus]::BringWindowToTop($script:target)
+$focused = [FolderFocus]::SetForegroundWindow($script:target)
+[void][FolderFocus]::AttachThreadInput($myThread, $foregroundThread, $false)
+
+Write-Output ("shown:{0}:{1}" -f $leaf, $focused)

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "dsh-users-open-source-workspace",
+  "version": "0.1.0",
+  "description": "dsh-users-open-source 的伴生包：受理 POST /dsh-users-open-source/open-workspace，在系统文件管理器里打开用户当前工作区目录（设置页「开源用户」里那颗「云端备份」按钮）。目录只从 DSH 自己的工作区账本里取，客户端只能递 sessionId；Windows 上用包内 PowerShell 脚本打开并显形（DSH 以隐藏方式启动子进程，直接 spawn explorer.exe 只会得到一个 visible=false 的隐身窗口）。它不是独立 bundle —— loader entry 由 dsh-users-open-source 的 cordis.patch.yml 插入。",
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "workspace",
+    "open-folder",
+    "explorer"
+  ],
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": {
+      "default": "./lib/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "tests",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=22.13.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/KAIROSLLL/dsh-users-open-source.git",
+    "directory": "packages/dsh-users-open-source-workspace"
+  },
+  "homepage": "https://github.com/KAIROSLLL/dsh-users-open-source#readme",
+  "bugs": {
+    "url": "https://github.com/KAIROSLLL/dsh-users-open-source/issues"
+  },
+  "license": "MIT",
+  "scripts": {
+    "test": "node tests/smoke.mjs"
+  }
+}

package/tests/smoke.mjs

@@ -0,0 +1,238 @@
+/**
+ * dsh-users-open-source-workspace 冒烟测试：不需要 DSH 运行时，node 直接跑。
+ *
+ * 覆盖：路由注册、sessionId 命中工作区、以及三条"当前工作区"兜底线索
+ * （会话日志分桶 → 投影缓存 cwd → updatedAt 最新）与各种失败分支。
+ *
+ * 用法：node tests/smoke.mjs
+ */
+import { strict as assert } from 'node:assert'
+import { createServer } from 'node:http'
+import { mkdir, rm, writeFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+
+/** 测试期间把 DSH home 指到临时目录，别污染真身。 */
+process.env.DSH_HOME = join(tmpdir(), 'dsh-users-open-source-ws-smoke')
+/** 只解析、不真的弹资源管理器。 */
+process.env.DSH_NET_SPEED_DRY_OPEN = '1'
+
+const mod = await import(new URL('../lib/index.js', import.meta.url).href)
+
+/** 收集失败，最后统一决定退出码。 */
+const failures = []
+
+/**
+ * 跑一个测试用例，失败不中断。
+ * @param {string} title - 用例名。
+ * @param {() => Promise<void>|void} body - 用例体。
+ * @returns {Promise<void>} 结束。
+ */
+async function test(title, body) {
+  try {
+    await body()
+    console.log(`  ✓ ${title}`)
+  } catch (error) {
+    failures.push(`${title}: ${String((error && error.stack) || error)}`)
+    console.log(`  ✗ ${title}`)
+  }
+}
+
+/** 路由表：path → handler。 */
+const routes = new Map()
+/** effect 清理函数。 */
+const disposers = []
+const logs = []
+/** 假的宿主服务表。 */
+const services = {}
+
+const ctx = {
+  get: (name) => services[name],
+  logger: {
+    info: (message) => logs.push(`[info] ${message}`),
+    warn: (message) => logs.push(`[warn] ${message}`)
+  },
+  effect: (factory) => {
+    const dispose = factory()
+    if (typeof dispose === 'function') disposers.push(dispose)
+    return () => {}
+  },
+  webServer: {
+    register: (route) => {
+      routes.set(route.path, route.handler)
+      return () => routes.delete(route.path)
+    }
+  },
+  subprocess: {
+    spawn: () => ({ done: Promise.resolve({ exitCode: 0, signal: null }) })
+  }
+}
+
+const home = process.env.DSH_HOME
+
+await test('模块导出 name / inject / apply', () => {
+  assert.equal(mod.name, 'dsh-users-open-source-workspace')
+  assert.deepEqual(Array.from(mod.inject), ['webServer', 'subprocess'])
+  assert.equal(typeof mod.apply, 'function')
+})
+
+await test('apply() 挂上 /dsh-users-open-source/open-workspace', () => {
+  mod.apply(ctx)
+  assert.deepEqual(Array.from(routes.keys()), ['/dsh-users-open-source/open-workspace'])
+})
+
+/** 把路由挂到一个真 HTTP 口上，方便用 fetch 打。 */
+const bridge = createServer((req, res) => {
+  const url = new URL(typeof req.url === 'string' ? req.url : '/', 'http://127.0.0.1')
+  const handler = routes.get(url.pathname)
+  if (handler === undefined) {
+    res.writeHead(404, { 'content-type': 'text/plain' })
+    res.end('no route')
+    return
+  }
+  Promise.resolve(handler(req, res)).catch(() => {
+    try {
+      res.destroy()
+    } catch {
+      /* 忽略 */
+    }
+  })
+})
+await new Promise((resolve) => bridge.listen(0, '127.0.0.1', resolve))
+const base = `http://127.0.0.1:${bridge.address().port}`
+
+/**
+ * 打一个接口。
+ * @param {string} path - 路径。
+ * @param {object} [init] - fetch 选项。
+ * @returns {Promise<{status:number, body:any}>} 状态码与 JSON。
+ */
+async function call(path, init) {
+  const res = await fetch(base + path, init)
+  let body = null
+  try {
+    body = await res.json()
+  } catch {
+    body = null
+  }
+  return { status: res.status, body }
+}
+
+/**
+ * 发一个 JSON POST。
+ * @param {string} path - 路径。
+ * @param {object} payload - 请求体。
+ * @returns {Promise<{status:number, body:any}>} 结果。
+ */
+function open(payload) {
+  return call('/dsh-users-open-source/open-workspace', {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify(payload ?? {})
+  })
+}
+
+/** 一个"真实存在"的工作区目录。 */
+const wsDir = join(tmpdir(), 'dsh-ns-ws-a')
+/** 另一个"真实存在"的工作区目录。 */
+const otherDir = join(tmpdir(), 'dsh-ns-ws-b')
+
+await test('sessionId 命中工作区（最准的一条）', async () => {
+  await mkdir(wsDir, { recursive: true })
+  await mkdir(otherDir, { recursive: true })
+  services.workspaceRegistry = {
+    list: () => [
+      { id: 'w-a', path: wsDir, title: 'A', sessionIds: ['session-a'], updatedAt: '2026-01-01T00:00:00.000Z' },
+      { id: 'w-b', path: otherDir, title: 'B', sessionIds: ['session-b'], updatedAt: '2026-01-02T00:00:00.000Z' }
+    ]
+  }
+  const result = await open({ sessionId: 'session-a' })
+  assert.equal(result.status, 200)
+  assert.equal(result.body.ok, true, JSON.stringify(result.body))
+  assert.equal(result.body.path, wsDir)
+  assert.equal(result.body.source, 'session')
+})
+
+await test('线索 1：会话日志分桶（客户端没给 id 时）', async () => {
+  const bucket = `--${wsDir.replace(/[:\\/]/g, '-')}--`
+  const sessionDir = join(home, 'sessions', bucket, 'session-recent')
+  await mkdir(sessionDir, { recursive: true })
+  await writeFile(join(sessionDir, 'session.v4.jsonl.zstd'), 'x')
+  const result = await open({ sessionId: 'session-unknown' })
+  assert.equal(result.body.ok, true, JSON.stringify(result.body))
+  assert.equal(result.body.path, wsDir)
+  assert.equal(result.body.source, 'recent')
+  await rm(join(home, 'sessions'), { recursive: true, force: true })
+})
+
+await test('线索 2：会话投影缓存里的 cwd', async () => {
+  const cacheDir = join(home, 'storages', 'session_projcache', 'sessions')
+  await mkdir(cacheDir, { recursive: true })
+  await writeFile(
+    join(cacheDir, 'session-x.json'),
+    JSON.stringify({ record: { header: { cwd: otherDir }, rows: {} } })
+  )
+  const result = await open({ sessionId: 'session-unknown' })
+  assert.equal(result.body.ok, true, JSON.stringify(result.body))
+  assert.equal(result.body.path, otherDir)
+  assert.equal(result.body.source, 'recent')
+  await rm(join(home, 'storages'), { recursive: true, force: true })
+})
+
+await test('线索 3：updatedAt 最新的工作区', async () => {
+  const result = await open({ sessionId: 'session-unknown' })
+  assert.equal(result.body.ok, true, JSON.stringify(result.body))
+  assert.equal(result.body.path, otherDir, 'updatedAt 更新的是 B')
+  assert.equal(result.body.source, 'recent')
+})
+
+await test('三条线索都落空时退到第一个工作区', async () => {
+  services.workspaceRegistry = {
+    list: () => [
+      { id: 'w-a', path: wsDir, title: 'A', sessionIds: [] },
+      { id: 'w-b', path: otherDir, title: 'B', sessionIds: [] }
+    ]
+  }
+  const result = await open({})
+  assert.equal(result.body.path, wsDir)
+  assert.equal(result.body.source, 'first')
+})
+
+await test('工作区目录不在了 → workspace-missing', async () => {
+  services.workspaceRegistry = {
+    list: () => [{ id: 'w-x', path: join(tmpdir(), 'dsh-ns-definitely-missing'), title: 'X', sessionIds: [] }]
+  }
+  const result = await open({})
+  assert.equal(result.body.ok, false)
+  assert.equal(result.body.error, 'workspace-missing')
+})
+
+await test('一个工作区都没有 → no-workspace；GET → 405', async () => {
+  services.workspaceRegistry = { list: () => [] }
+  const none = await open({})
+  assert.equal(none.body.ok, false)
+  assert.equal(none.body.error, 'no-workspace')
+
+  const wrongMethod = await call('/dsh-users-open-source/open-workspace')
+  assert.equal(wrongMethod.status, 405)
+})
+
+// 收尾
+for (const dispose of disposers) {
+  try {
+    dispose()
+  } catch {
+    /* 忽略 */
+  }
+}
+bridge.close()
+await rm(home, { recursive: true, force: true })
+
+console.log('')
+if (failures.length > 0) {
+  console.error(`✗ ${failures.length} 个用例失败：`)
+  for (const failure of failures) console.error(`\n--- ${failure}`)
+  process.exit(1)
+}
+console.log(`✓ 全部用例通过（宿主日志 ${logs.length} 条）`)
+for (const line of logs) console.log(`    ${line}`)