[Feature][Desktop] 会话右键菜单、复制深度链接及冷启动会话跳转（参考实现）

[Myoontyee]

建议 / Summary

希望 Desktop 支持会话行右键菜单，并能复制用于重新打开本地会话的深度链接。已经在现有源码模块中实现并验证了一版，提供补丁供维护者评估。

Reference implementation: session-row context menus with local session deep links, complete Markdown copying, and working-directory actions.

已实现的行为

• 在侧栏会话行右键，在鼠标位置打开现有菜单，不切换当前会话；与省略号菜单共用动作。
• 保留置顶、重命名、分叉、归档；新增“复制深度链接”“复制为 Markdown”“复制工作目录”“打开工作目录”。
• 深度链接格式为 dsh://session/<encoded-session-id>，标识本地会话，不上传内容，也不是公开分享链接。
• Desktop 处理冷启动参数、second-instance 和 open-url，暂存最新会话目标，等待页面订阅及本地会话目录就绪后跳转。不存在或已归档的会话提示不可用，不自动创建或取消归档。
• Markdown 来自完整已提交会话日志，包含原始用户消息和助手正文，保留 Markdown 格式及附件说明；不局限于当前屏幕或分页，也不复制推理和工具内部记录。
• 工作目录动作使用会话实际 cwd，包含 worktree 的真实目录。

为什么在现有源码模块中实现

菜单动作使用已有客户端槽位；Markdown 使用现有认证导出路由；会话跳转接入现有导航服务。但 Desktop 冷启动及操作系统协议入口需要主进程和 preload 交付会话目标，仅增加普通插件无法独立补齐这部分。没有增加新包或修改 agent loop。

验证与边界

• 基于 dsh-v0.2.0-rc.2 / 639ed015397290b3745d163aafe02ffee4aa3f84。
• 用户已在实际 Desktop 窗口体验右键菜单。
• 完整 GUI 回归：597 个测试文件通过，9,525 项测试通过、1 项跳过。
• 菜单及快捷键的真实浏览器回归通过；导出路由和全文格式有单元测试。
• 实际 Electron 使用隔离数据目录，验证冷启动参数打开会话 A、第二进程激活同一主进程中的会话 B；尚未将此证据等同于安装后系统协议注册验证。
• 解析器和 IPC 测试覆盖无效链接、非受信页面、订阅释放和本地会话可用性；较慢的 Markdown 请求不会覆盖更新的链接/路径复制意图。

参考补丁与关联讨论

独立代码提交

关联 #7849：同样需要 Desktop 把会话标识从系统激活入口传递到客户端。本实现选择 dsh://session/<id> 路径形式，愿意按维护者决定统一协议格式。

按照当前 CONTRIBUTING 先在 Discussion 提供完整实现。希望维护者评估菜单动作、链接格式及这条 Desktop 到客户端的会话跳转接口。

[Myoontyee]

Integration update — 2026-10-08

The menu and deep-link changes are now integrated onto upstream dsh-v0.2.1-alpha.1. The menu label remains “复制深度链接”. Real Electron smoke checks exercised cold-start session targeting and independently navigable windows sharing one Host. Link-preserving selection copy is a separate addition in #9129; this does not turn local deep links into public sharing links or claim a separate installed-OS-protocol-registration test.

Current integrated source: 9d9544d6fc. The Windows package is an unsigned local custom build, not an official release. The original focused patch link remains useful for reviewing the feature in isolation.

[Myoontyee]

Read-only deep-link access prototype on upstream dsh-v0.2.1-alpha.2.

The existing deep link opens a Desktop window; it does not give an external agent transcript access. This extension adds read_session to the Web/Desktop Host tool scope and an opt-in local MCP endpoint under Application → Session reading interface.

• Accepts an exact session ID or dsh://session/<id>; never fetches an arbitrary user-provided URL.
• Reads committed human/assistant transcript without waking the target, sending messages, or changing its log. Excludes reasoning/tool payloads and edited-away messages; preserves compacted human history.
• Bounded pages with nextOffset plus a fixed throughSeq snapshot.
• External endpoint binds only to 127.0.0.1, uses its own encrypted-at-rest bearer credential, exposes only read_session, rejects browser-origin and unauthenticated requests, and never reveals the Host cookie. The user can disable/revoke it.
• Desktop must be running. Each MCP-capable local client needs one-time configuration. This does not make a local link accessible to arbitrary cloud agents.

Validation: cold-observation pagination/edit filtering tests, real authenticated HTTP MCP calls, rejection of send_session_message, Desktop startup/menu tests, and full type checking. Windows native copy/paste checks also pass for the companion clipboard change.

Implementation: Myoontyee/deepseek-harness@5a3cba9...f320bc9

This is a custom reference implementation, not an upstream release or a claim that the official plugin API already provides this capability.

[Myoontyee]

Follow-up fix for Open in new window: completion reminder dots were held separately in each renderer, so two windows could disagree about the same conversation. The Desktop main process now broadcasts the same unread-completion identities used by the taskbar badge. Newly opened windows receive an initial snapshot, and viewing the completed conversation in a focused product window clears its reminder in every window. Identity changes are broadcast even if the total unread count stays the same; browser-only clients retain their existing local behavior.

Implementation: Myoontyee@42e33ab906 . Verified with two real isolated Electron product windows: the new window immediately inherited a pre-existing reminder, and opening that conversation cleared the dots in both windows. IPC remains restricted to product-window senders.