dsh-vscode-mode 0.11.0 → 0.13.0

package/assets/shell/dsh-open.cs

@@ -1,182 +1,98 @@
-// dsh-open.cs — DSH 文件编辑 shell launcher（Windows 资源管理器右键菜单入口）。
-// 由 dsh-vscode-mode 设置页一键注册时经 csc 编译为 WinExe（无控制台闪窗）。
-// 流程：读 dsh-open.ini base → TcpClient 探测（1s 超时，未运行弹 MessageBox）
-//       → 投递待打开请求到 host（edrv.external.handoff）：有已打开 DSH 页面时由其就地
-//       执行打开规则（不重复开页）；2s 未领取（页面刚关/后台节流）则取回请求并回退打开新页。
-// 深链契约见插件 src/shared/externalOpen.ts（edrvOpen/edrvPaths/edrvLine/edrvColumn）。
-// 作者 ddj 2026-09-08
+// Windows C# 5 launcher; shared producer owns private queue validation and ACK handling.
+// @author ddj 2026-09-28
 using System;
 using System.Collections.Generic;
 using System.Diagnostics;
 using System.IO;
-using System.Net;
-using System.Net.Sockets;
 using System.Text;
-using System.Threading;
-using System.Web.Script.Serialization;
 using System.Windows.Forms;
 
 internal static class DshOpen
 {
-    private const string DefaultBase = "http://127.0.0.1:3080";
-    private const int MaxPaths = 20;
-
+    /// <summary>Run the configured producer and report unconfirmed opens. @author ddj 2026-09-28</summary>
+    /// <param name="args">Paths supplied by Explorer.</param>
+    /// <returns>Zero only when the producer confirms an ACK (or no paths were supplied).</returns>
     [STAThread]
-    private static void Main(string[] args)
+    private static int Main(string[] args)
     {
-        string baseUrl = ReadBase();
-        if (!ServerAlive(baseUrl))
+        if (args.Length == 0) return 0;
+        try { return Run(args); }
+        catch (Exception error)
         {
-            MessageBox.Show(
-                "DSH Web UI 未运行（" + baseUrl + "）。\n请先启动 DSH，再使用「在 DSH 文件编辑中打开」。",
-                "DSH 文件编辑",
-                MessageBoxButtons.OK,
-                MessageBoxIcon.Information);
-            return;
+            MessageBox.Show(error.Message, "DSH 文件编辑", MessageBoxButtons.OK, MessageBoxIcon.Warning);
+            return 1;
         }
-        List<string> paths = CollectPaths(args);
-        if (paths.Count == 0) return;
-        if (HandoffAndConfirm(baseUrl, paths)) return;
-        OpenUrl(BuildUrl(baseUrl, paths));
     }
 
-    /// <summary>把参数解析为绝对路径清单（上限 MaxPaths，非法项跳过）。</summary>
-    private static List<string> CollectPaths(string[] args)
+    /// <summary>Read installed metadata and wait for the queue producer. @author ddj 2026-09-28</summary>
+    /// <param name="paths">Paths to open.</param><returns>Confirmed producer exit status.</returns>
+    private static int Run(string[] paths)
     {
-        var paths = new List<string>();
-        foreach (string raw in args)
+        string folder = AppDomain.CurrentDomain.BaseDirectory;
+        string ini = Path.Combine(folder, "dsh-open.ini");
+        Dictionary<string, string> config = ReadIni(ini);
+        string executable = RequiredPath(config, "node");
+        string helper = RequiredPath(config, "helper");
+        string mode;
+        if (!config.TryGetValue("nodeMode", out mode) || (mode != "node" && mode != "electron"))
+            throw new InvalidDataException("Missing nodeMode in DSH bridge configuration.");
+        var arguments = new StringBuilder(Quote(helper) + " --config " + Quote(ini) + " --");
+        foreach (string path in paths) arguments.Append(" " + Quote(Path.GetFullPath(path)));
+        var start = new ProcessStartInfo(executable, arguments.ToString());
+        start.UseShellExecute = false;
+        start.CreateNoWindow = true;
+        start.RedirectStandardError = true;
+        if (mode == "electron") start.EnvironmentVariables["ELECTRON_RUN_AS_NODE"] = "1";
+        else start.EnvironmentVariables.Remove("ELECTRON_RUN_AS_NODE");
+        using (Process child = Process.Start(start))
         {
-            if (paths.Count >= MaxPaths) break;
-            string path;
-            try { path = Path.GetFullPath(raw); }
-            catch (Exception) { continue; }
-            if (!string.IsNullOrEmpty(path)) paths.Add(path);
+            string error = child.StandardError.ReadToEnd();
+            child.WaitForExit();
+            if (child.ExitCode != 0) throw new IOException(string.IsNullOrWhiteSpace(error) ? "DSH OPEN was not confirmed." : error);
+            return 0;
         }
-        return paths;
-    }
-
-    /// <summary>投递待打开请求；返回 true = 已确认由既有 DSH 页面执行（无需开新页）。</summary>
-    private static bool HandoffAndConfirm(string baseUrl, List<string> paths)
-    {
-        string resp = PostRpc(baseUrl, "edrv.external.handoff", "{\"paths\":" + JsonArrayOf(paths) + "}");
-        var data = ParseJson(resp);
-        if (data == null || ToInt(data, "clients") <= 0) return false;
-        Thread.Sleep(2000);
-        string token = data.ContainsKey("token") ? data["token"] as string : null;
-        string state = PostRpc(baseUrl, "edrv.external.pendingState",
-            "{\"token\":" + JsonString(token) + ",\"take\":true}");
-        var st = ParseJson(state);
-        return st != null && ToBool(st, "delivered");
     }
 
-    private static void OpenUrl(string url)
+    /// <summary>Read an existing INI; missing metadata fails closed. @author ddj 2026-09-28</summary>
+    /// <param name="file">Installed config path.</param><returns>Case-insensitive values.</returns>
+    private static Dictionary<string, string> ReadIni(string file)
     {
-        Process.Start(new ProcessStartInfo(url) { UseShellExecute = true });
-    }
-
-    /// <summary>POST /edrv/rpc；失败返回 null（回退开新页，不阻塞）。</summary>
-    private static string PostRpc(string baseUrl, string method, string argsJson)
-    {
-        try
+        var values = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase);
+        foreach (string line in File.ReadAllLines(file, Encoding.UTF8))
         {
-            HttpWebRequest req = (HttpWebRequest)WebRequest.Create(baseUrl.TrimEnd('/') + "/edrv/rpc");
-            req.Method = "POST";
-            req.ContentType = "application/json";
-            req.Timeout = 4000;
-            byte[] body = Encoding.UTF8.GetBytes("{\"method\":\"" + method + "\",\"args\":" + argsJson + "}");
-            req.ContentLength = body.Length;
-            using (Stream stream = req.GetRequestStream()) stream.Write(body, 0, body.Length);
-            using (WebResponse res = req.GetResponse())
-            using (StreamReader reader = new StreamReader(res.GetResponseStream(), Encoding.UTF8))
-                return reader.ReadToEnd();
+            int equal = line.IndexOf('=');
+            if (equal > 0) values[line.Substring(0, equal).Trim()] = line.Substring(equal + 1).Trim();
         }
-        catch (Exception) { return null; }
+        return values;
     }
 
-    /// <summary>宽松 JSON 解析（失败返回 null）。</summary>
-    private static Dictionary<string, object> ParseJson(string json)
+    /// <summary>Require a fully qualified existing file. @author ddj 2026-09-28</summary>
+    /// <param name="config">INI values.</param><param name="key">Metadata key.</param><returns>Validated path.</returns>
+    private static string RequiredPath(Dictionary<string, string> config, string key)
     {
-        if (string.IsNullOrEmpty(json)) return null;
-        try { return new JavaScriptSerializer().Deserialize<Dictionary<string, object>>(json); }
-        catch (Exception) { return null; }
-    }
-
-    private static int ToInt(Dictionary<string, object> data, string key)
-    {
-        object value;
-        return data.TryGetValue(key, out value) ? Convert.ToInt32(value) : 0;
-    }
-
-    private static bool ToBool(Dictionary<string, object> data, string key)
-    {
-        object value;
-        return data.TryGetValue(key, out value) && Convert.ToBoolean(value);
-    }
-
-    private static string JsonString(string value)
-    {
-        return "\"" + (value ?? string.Empty).Replace("\\", "\\\\").Replace("\"", "\\\"") + "\"";
-    }
-
-    private static string JsonArrayOf(List<string> items)
-    {
-        var parts = new List<string>();
-        foreach (string item in items) parts.Add(JsonString(item));
-        return "[" + string.Join(",", parts.ToArray()) + "]";
-    }
-
-    /// <summary>读取同目录 dsh-open.ini 的 base= 行；缺失或非法回退默认地址。</summary>
-    private static string ReadBase()
-    {
-        try
-        {
-            string ini = Path.Combine(AppDomain.CurrentDomain.BaseDirectory, "dsh-open.ini");
-            if (!File.Exists(ini)) return DefaultBase;
-            foreach (string line in File.ReadAllLines(ini, Encoding.UTF8))
-            {
-                string trimmed = line.Trim();
-                if (trimmed.StartsWith("base=", StringComparison.OrdinalIgnoreCase) && trimmed.Length > 5)
-                {
-                    string value = trimmed.Substring(5).Trim();
-                    if (value.Length > 0) return value;
-                }
-            }
-        }
-        catch (Exception) { /* ini 读取失败按默认地址 */ }
-        return DefaultBase;
-    }
-
-    /// <summary>TcpClient 探测 base 地址对应端口是否可达（1s 超时）。</summary>
-    private static bool ServerAlive(string baseUrl)
-    {
-        try
-        {
-            Uri uri = new Uri(baseUrl);
-            int port = uri.IsDefaultPort
-                ? (string.Equals(uri.Scheme, "https", StringComparison.OrdinalIgnoreCase) ? 443 : 80)
-                : uri.Port;
-            using (TcpClient client = new TcpClient())
-            {
-                if (!client.ConnectAsync(uri.Host, port).Wait(1000)) return false;
-                return client.Connected;
-            }
-        }
-        catch (Exception) { return false; }
+        string value;
+        if (!config.TryGetValue(key, out value) || !Path.IsPathRooted(value) ||
+            !string.Equals(Path.GetFullPath(value), value, StringComparison.OrdinalIgnoreCase) || !File.Exists(value))
+            throw new InvalidDataException("Missing absolute " + key + " in DSH bridge configuration.");
+        if (key == "node" && !string.Equals(Path.GetExtension(value), ".exe", StringComparison.OrdinalIgnoreCase))
+            throw new InvalidDataException("DSH requires a stored Node or Electron executable, not a command shim.");
+        return value;
     }
 
-    /// <summary>把路径清单编码合并为一个深链 URL（空清单 → null）。</summary>
-    private static string BuildUrl(string baseUrl, List<string> paths)
+    /// <summary>Quote Windows argv with backslash-before-quote handling. @author ddj 2026-09-28</summary>
+    /// <param name="value">Literal argument.</param><returns>One command-line argument.</returns>
+    private static string Quote(string value)
     {
-        StringBuilder url = new StringBuilder(baseUrl.TrimEnd('/') + "/?edrvOpen=1");
-        int count = 0;
-        foreach (string path in paths)
+        var result = new StringBuilder("\"");
+        int slashes = 0;
+        foreach (char ch in value)
         {
-            if (count >= MaxPaths) break;
-            if (string.IsNullOrEmpty(path)) continue;
-            url.Append(count == 0 ? "&edrvPaths=" : ",");
-            url.Append(Uri.EscapeDataString(path));
-            count++;
+            if (ch == '\\') { slashes++; continue; }
+            result.Append('\\', ch == '"' ? slashes * 2 + 1 : slashes);
+            result.Append(ch);
+            slashes = 0;
         }
-        return count == 0 ? null : url.ToString();
+        result.Append('\\', slashes * 2);
+        return result.Append('"').ToString();
     }
 }

package/assets/shell/dsh-open.mjs

@@ -0,0 +1,241 @@
+#!/usr/bin/env node
+// Shared OPEN REQUEST/ACK producer. No HTTP/RPC or browser credentials.
+import { constants } from 'node:fs';
+import { lstat, open, readFile, realpath, rename, unlink } from 'node:fs/promises';
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+const MAX_BYTES = 64 * 1024;
+const TTL = 60_000;
+
+/** @author ddj 2026-09-28 @param {string} file INI path @returns {Promise<object>} Validated bridge metadata. */
+export async function readConfig(file) {
+  if (!isAbsolute(file)) throw new Error('Bridge configuration must be an absolute path.');
+  const stat = await lstat(file);
+  if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_BYTES) throw new Error('Invalid bridge configuration.');
+  const config = Object.create(null);
+  for (const line of (await readFile(file, 'utf8')).split(/\r?\n/)) {
+    const match = /^\s*([a-zA-Z]+)\s*=(.*)$/.exec(line);
+    if (match) config[match[1].toLowerCase()] = match[2].trim();
+  }
+  for (const key of ['profile', 'inbox']) {
+    if (!config[key] || !isAbsolute(config[key]) || config[key].length > 8192) throw new Error('Missing absolute ' + key + ' in bridge configuration.');
+  }
+  if (!['desktop', 'web'].includes(config.mode)) throw new Error('Bridge mode must be desktop or web.');
+  if (config.mode === 'web') webTarget(config.base);
+  return config;
+}
+
+/** @author ddj 2026-09-28 @param {string} value Selected base URL @returns {string} Safe, unchanged wake target. */
+export function webTarget(value) {
+  const url = new URL(value);
+  if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.search || url.hash) {
+    throw new Error('Invalid selected Web base URL.');
+  }
+  return value;
+}
+
+/** @author ddj 2026-09-28 @param {string} path Filesystem path @returns {Promise<void>} Reject linked ancestors. */
+async function noLinks(path) {
+  let cursor = resolve(path);
+  while (true) {
+    const info = await lstat(cursor);
+    if (info.isSymbolicLink()) throw new Error('Linked bridge paths are not allowed: ' + cursor);
+    const parent = dirname(cursor);
+    if (parent === cursor) break;
+    cursor = parent;
+  }
+  const physical = await realpath(path);
+  const equal = process.platform === 'win32'
+    ? physical.toLowerCase() === resolve(path).toLowerCase()
+    : physical === resolve(path);
+  if (!equal) throw new Error('Bridge path escapes its physical location.');
+}
+
+/** @author ddj 2026-09-28 @param {string} path Private directory or file @returns {Promise<void>} Validate Windows owner and ACL. */
+async function windowsAcl(path) {
+  const script = "$ErrorActionPreference='Stop'; $p=$env:DSH_OPEN_CHECK; " +
+    "$sid=[Security.Principal.WindowsIdentity]::GetCurrent().User; " +
+    "if([IO.Directory]::Exists($p)) { $a=[IO.Directory]::GetAccessControl($p);$f=[IO.DirectoryInfo]::new($p) } " +
+    "else { $a=[IO.File]::GetAccessControl($p);$f=[IO.FileInfo]::new($p) }; " +
+    "if ($a.GetOwner([Security.Principal.SecurityIdentifier]).Value -ne $sid.Value) { exit 4 }; " +
+    "$rules=$a.GetAccessRules($true,$true,[Security.Principal.SecurityIdentifier]); $allow=$false; " +
+    "foreach($r in $rules) { if($r.AccessControlType -eq 'Allow' -and $r.FileSystemRights -ne 0) { " +
+    "if($r.IdentityReference.Value -ne $sid.Value) { exit 5 }; $allow=$true } }; " +
+    "if(-not $allow) { exit 6 }; " +
+    "while($null -ne $f) { if(($f.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { exit 7 }; " +
+    "if($f -is [IO.FileInfo]) { $f=$f.Directory } else { $f=$f.Parent } }";
+  const executable = join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+  await runProcess(executable, ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(script, 'utf16le').toString('base64')], {
+    env: { ...process.env, DSH_OPEN_CHECK: path }, windowsHide: true,
+  });
+}
+
+/** @author ddj 2026-09-28 @param {string} path Queue entry @param {boolean} directory Expected kind @returns {Promise<void>} Enforce current-user-only access. */
+export async function privatePath(path, directory = true) {
+  await noLinks(path);
+  const stat = await lstat(path);
+  if (directory ? !stat.isDirectory() : !stat.isFile() || stat.nlink !== 1) throw new Error('Invalid bridge entry type.');
+  if (!directory && stat.size > MAX_BYTES) throw new Error('Bridge entry exceeds 64 KiB.');
+  if (process.platform === 'win32') return windowsAcl(path);
+  if (stat.uid !== process.getuid() || (stat.mode & 0o777) !== (directory ? 0o700 : 0o600)) {
+    throw new Error('Bridge entry is not private to the current user: ' + path);
+  }
+}
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @returns {Promise<void>} Validate existing host-owned queue; never create directories. */
+async function checkQueue(config) {
+  await privatePath(config.inbox);
+  await privatePath(join(config.inbox, 'requests'));
+  await privatePath(join(config.inbox, 'acks'));
+}
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @param {string[]} paths Absolute inputs @param {object} position Optional line/column @returns {object} Validated request. */
+export function makeRequest(config, paths, position = {}) {
+  if (!config.profile || !isAbsolute(config.profile)) throw new Error('Missing absolute profile.');
+  if (!paths.length || paths.length > 20) throw new Error('Open requires between 1 and 20 paths.');
+  if (paths.some(path => typeof path !== 'string' || !isAbsolute(path) || path.length > 8192 || /[\u0000-\u001f]/.test(path))) {
+    throw new Error('Open paths must be absolute and at most 8192 characters.');
+  }
+  const request = { version: 1, requestId: randomUUID(), profile: config.profile, paths, createdAt: Date.now() };
+  for (const key of ['line', 'column']) {
+    if (position[key] === undefined) continue;
+    if (!Number.isSafeInteger(position[key]) || position[key] <= 0) throw new Error('Invalid ' + key + '.');
+    request[key] = position[key];
+  }
+  if (Buffer.byteLength(JSON.stringify(request)) > MAX_BYTES) throw new Error('Open request exceeds 64 KiB.');
+  return request;
+}
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @param {object} request Validated request @returns {Promise<void>} Exclusively publish an atomic JSON file. */
+async function publish(config, request) {
+  const folder = join(config.inbox, 'requests');
+  const temp = join(folder, request.requestId + '.tmp');
+  const target = join(folder, request.requestId + '.json');
+  await checkQueue(config);
+  let owned = false;
+  try {
+    const handle = await open(temp, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL, 0o600);
+    owned = true;
+    try { await handle.writeFile(JSON.stringify(request), 'utf8'); await handle.sync(); }
+    finally { await handle.close(); }
+    await privatePath(temp, false);
+    await checkQueue(config);
+    // UUID + exclusive temporary creation prevents competing producers sharing this destination.
+    try { await lstat(target); throw new Error('Request ID already exists.'); }
+    catch (error) { if (error.code !== 'ENOENT') throw error; }
+    await rename(temp, target);
+    owned = false;
+  } finally {
+    if (owned) await unlink(temp).catch(() => {});
+  }
+}
+
+/** @author ddj 2026-09-28 @param {object} ack Untrusted receipt @param {object} request Submitted request @param {number} now Clock @returns {boolean} Matching, fresh success only. */
+export function validAck(ack, request, now = Date.now()) {
+  if (!ack || typeof ack !== 'object' || Array.isArray(ack)) return false;
+  const keys = ['version', 'requestId', 'profile', 'success', 'error', 'createdAt'];
+  if (Object.keys(ack).some(key => !keys.includes(key)) || (ack.error !== undefined && typeof ack.error !== 'string')) return false;
+  return ack.version === 1 && ack.requestId === request.requestId &&
+    ack.profile === request.profile && typeof ack.success === 'boolean' && Number.isSafeInteger(ack.createdAt) &&
+    ack.createdAt >= request.createdAt && ack.createdAt <= now + 5000 && now - ack.createdAt <= TTL;
+}
+
+/** @author ddj 2026-09-28 @param {number} ms Poll delay @returns {Promise<void>} Nonblocking timer. */
+function pause(ms) { return new Promise(resolveWait => setTimeout(resolveWait, ms)); }
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @param {object} request Submitted request @param {number} timeout Maximum ACK wait @param {Function} cancelWake Cancel deferred activation @returns {Promise<object>} Confirmed receipt, or throw. */
+async function waitAck(config, request, timeout, cancelWake) {
+  const file = join(config.inbox, 'acks', request.requestId + '.json');
+  const deadline = request.createdAt + Math.min(timeout, TTL);
+  while (Date.now() < deadline) {
+    try {
+      const stat = await lstat(file);
+      cancelWake();
+      if (stat.size > MAX_BYTES) throw new Error('ACK exceeds 64 KiB.');
+      await checkQueue(config);
+      await privatePath(file, false);
+      const handle = await open(file, constants.O_RDONLY | (constants.O_NOFOLLOW || 0));
+      let ack;
+      try {
+        const current = await handle.stat();
+        if (!current.isFile() || current.size > MAX_BYTES || current.nlink !== 1 || current.ino !== stat.ino || current.dev !== stat.dev) {
+          throw new Error('Invalid or replaced ACK file.');
+        }
+        const buffer = Buffer.alloc(MAX_BYTES + 1);
+        const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0);
+        if (bytesRead > MAX_BYTES) throw new Error('ACK exceeds 64 KiB.');
+        ack = JSON.parse(buffer.subarray(0, bytesRead).toString('utf8'));
+      } finally { await handle.close(); }
+      if (!validAck(ack, request)) throw new Error('Invalid or mismatched OPEN ACK.');
+      if (!ack.success) throw new Error(typeof ack.error === 'string' ? ack.error : 'DSH rejected the open request.');
+      return ack;
+    } catch (error) { if (error.code !== 'ENOENT') throw error; }
+    await pause(100);
+  }
+  throw new Error('Timed out waiting for DSH OPEN ACK; opening was not confirmed.');
+}
+
+/** @author ddj 2026-09-28 @param {string} executable Program @param {string[]} args Arguments @param {object} options Spawn options @returns {Promise<void>} Require a successful process exit. */
+function runProcess(executable, args, options = {}) {
+  return new Promise((resolveExit, reject) => {
+    const child = spawn(executable, args, { stdio: 'ignore', timeout: 10_000, ...options });
+    child.once('error', reject);
+    child.once('exit', code => code === 0 ? resolveExit() : reject(new Error('Bridge process failed (' + code + ').')));
+  });
+}
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @returns {Promise<void>} Wake only the official desktop URI or selected Web base. */
+async function wake(config) {
+  const target = config.mode === 'desktop' ? 'dsh://open' : webTarget(config.base);
+  if (process.platform === 'win32') {
+    const executable = join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+    const script = "$ErrorActionPreference='Stop';$s=[Diagnostics.ProcessStartInfo]::new($env:DSH_OPEN_WAKE);" +
+      "$s.UseShellExecute=$true;$s.WindowStyle=[Diagnostics.ProcessWindowStyle]::Normal;[Diagnostics.Process]::Start($s)|Out-Null";
+    await runProcess(executable, ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(script, 'utf16le').toString('base64')], {
+      env: { ...process.env, DSH_OPEN_WAKE: target }, windowsHide: true,
+    });
+  } else {
+    await runProcess(process.platform === 'darwin' ? '/usr/bin/open' : 'xdg-open', [target]);
+  }
+}
+
+/** @author ddj 2026-09-28 @param {object} config Bridge metadata @param {string[]} paths Absolute inputs @param {object} options Position, timeout, activation callback @returns {Promise<object>} Confirmed ACK. */
+export async function sendOpen(config, paths, options = {}) {
+  const request = makeRequest(config, paths, options);
+  await publish(config, request);
+  // Give an already running client a chance to finish without opening another Web tab.
+  const activate = options.activate || wake;
+  const timer = setTimeout(() => { Promise.resolve(activate(config)).catch(() => {}); }, 700);
+  try { return await waitAck(config, request, options.timeout ?? TTL, () => clearTimeout(timer)); }
+  finally { clearTimeout(timer); }
+}
+
+/** @author ddj 2026-09-28 @param {string[]} args CLI arguments @returns {Promise<void>} Run producer and expose errors through exit status. */
+async function main(args) {
+  let configFile = join(dirname(fileURLToPath(import.meta.url)), 'dsh-open.ini');
+  const options = {};
+  let unity = false;
+  let index = 0;
+  for (; index < args.length; index++) {
+    const arg = args[index];
+    if (arg === '--') { index++; break; }
+    if (arg === '--config') configFile = args[++index];
+    else if (arg === '--line' || arg === '--column') options[arg.slice(2)] = Number(args[++index]);
+    else if (arg === '--no-wake') unity = true;
+    else throw new Error('Unknown launcher option: ' + arg);
+  }
+  const paths = args.slice(index).map(path => resolve(path));
+  if (!paths.length) return;
+  const config = await readConfig(configFile);
+  if (unity) options.activate = async value => {
+    process.stdout.write('DSH_WAKE:' + (value.mode === 'desktop' ? 'dsh://open' : webTarget(value.base)) + '\n');
+  };
+  await sendOpen(config, paths, options);
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  main(process.argv.slice(2)).catch(error => { console.error('DSH OPEN: ' + error.message); process.exitCode = 1; });
+}

package/assets/shell/dsh-open.ps1

@@ -1,52 +1,33 @@
-# dsh-open.ps1 — DSH 文件编辑 shell launcher（csc 不可用时的降级版，轻微控制台闪窗）。
-# 行为与 dsh-open.cs 一致：读 dsh-open.ini base → 探测端口 → 投递待打开请求（有已打开
-# DSH 页面时由其就地执行，2s 未领取取回并回退开新页）。
-# 由 dsh-vscode-mode 设置页一键注册写入 HKCU\...\shell\DSHEditor\command。
-# 作者 ddj 2026-09-08
-param([string[]]$Path)
+# Windows fallback launcher. The shared helper validates the private queue and waits for ACK.
+# @author ddj 2026-09-28
+param([Parameter(ValueFromRemainingArguments = $true)][string[]]$Path)
 $ErrorActionPreference = 'Stop'
-$base = 'http://127.0.0.1:3080'
-$ini = Join-Path $PSScriptRoot 'dsh-open.ini'
-if (Test-Path $ini) {
-    foreach ($line in Get-Content $ini) {
-        if ($line -match '^\s*base\s*=\s*(.+?)\s*$') { $base = $Matches[1]; break }
-    }
-}
-
-$alive = $false
+if (-not $Path -or $Path.Count -eq 0) { exit 0 }
 try {
-    $uri = [Uri]$base
-    $port = if ($uri.IsDefaultPort) { if ($uri.Scheme -ieq 'https') { 443 } else { 80 } } else { $uri.Port }
-    $client = New-Object Net.Sockets.TcpClient
-    $alive = $client.ConnectAsync($uri.Host, $port).Wait(1000) -and $client.Connected
-    $client.Close()
-} catch { $alive = $false }
-
-if (-not $alive) {
+    $ini = Join-Path $PSScriptRoot 'dsh-open.ini'
+    $config = @{}
+    foreach ($line in [IO.File]::ReadAllLines($ini)) {
+        $equal = $line.IndexOf('=')
+        if ($equal -gt 0) { $config[$line.Substring(0, $equal).Trim()] = $line.Substring($equal + 1).Trim() }
+    }
+    foreach ($key in @('node', 'helper')) {
+        $value = $config[$key]
+        if (-not $value -or -not [IO.Path]::IsPathRooted($value) -or
+            [IO.Path]::GetFullPath($value) -ine $value -or -not [IO.File]::Exists($value)) {
+            throw "Missing absolute $key in DSH bridge configuration."
+        }
+    }
+    if ([IO.Path]::GetExtension($config.node) -ine '.exe') { throw 'A stored Node or Electron executable is required.' }
+    if ($config.nodeMode -notin @('node', 'electron')) { throw 'Missing nodeMode in DSH bridge configuration.' }
+    if ($config.nodeMode -eq 'electron') { $env:ELECTRON_RUN_AS_NODE = '1' }
+    else { Remove-Item Env:ELECTRON_RUN_AS_NODE -ErrorAction SilentlyContinue }
+    $absolute = @($Path | ForEach-Object { [IO.Path]::GetFullPath($_) })
+    & $config.node $config.helper --config $ini -- @absolute
+    if ($LASTEXITCODE -ne 0) { throw 'DSH OPEN was not confirmed. See the producer error above.' }
+    exit 0
+} catch {
+    [Console]::Error.WriteLine($_.Exception.Message)
     Add-Type -AssemblyName System.Windows.Forms
-    [System.Windows.Forms.MessageBox]::Show(
-        "DSH Web UI 未运行（$base）。`n请先启动 DSH，再使用「在 DSH 文件编辑中打开」。",
-        'DSH 文件编辑') | Out-Null
+    [System.Windows.Forms.MessageBox]::Show($_.Exception.Message, 'DSH 文件编辑') | Out-Null
     exit 1
 }
-
-$paths = @($Path | Where-Object { $_ } | ForEach-Object { [IO.Path]::GetFullPath($_) })
-if (-not $paths -or $paths.Count -eq 0) { exit 0 }
-
-# 复用已有页面：投递待打开请求，clients>0 表示有页面在（2s 后确认领取，未领取取回回退）
-$handoff = $null
-try {
-    $rpcBase = $base.TrimEnd('/') + '/edrv/rpc'
-    $body = @{ method = 'edrv.external.handoff'; args = @{ paths = $paths } } | ConvertTo-Json -Depth 4 -Compress
-    $handoff = Invoke-RestMethod -Uri $rpcBase -Method Post -ContentType 'application/json' -Body $body -TimeoutSec 4
-    if ($handoff.clients -gt 0) {
-        Start-Sleep -Milliseconds 2000
-        $stateBody = @{ method = 'edrv.external.pendingState'; args = @{ token = $handoff.token; take = $true } } | ConvertTo-Json -Depth 4 -Compress
-        $state = Invoke-RestMethod -Uri $rpcBase -Method Post -ContentType 'application/json' -Body $stateBody -TimeoutSec 4
-        if ($state.delivered) { exit 0 }
-    }
-} catch { # 移交失败回退开新页
-}
-
-$encoded = @($paths | ForEach-Object { [Uri]::EscapeDataString($_) }) -join ','
-Start-Process ($base.TrimEnd('/') + '/?edrvOpen=1&edrvPaths=' + $encoded)