@civilization/dsh-workspace-files 0.3.1 → 0.3.3

package/lib/index.js

@@ -1,5 +1,5 @@
-import { exec, spawn } from "node:child_process";
-import { isAbsolute, join, relative, resolve } from "node:path";
+import { spawn } from "node:child_process";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
 import Schema from "@deepseek-ai/schemastery";
 import { promises } from "node:fs";
 //#region src/files.ts
@@ -32,7 +32,21 @@ const DEFAULT_IGNORED_DIRS = /* @__PURE__ */ new Set([
 	"tmp",
 	"temp",
 	"logs",
-	".dsh"
+	".dsh",
+	".yarn",
+	".vite",
+	".parcel-cache",
+	".rollup.cache",
+	".tsdown",
+	".svelte-kit",
+	".astro",
+	".mypy_cache",
+	".pytest_cache",
+	".ruff_cache",
+	"bin",
+	"obj",
+	".dart_tool",
+	".gemini"
 ]);
 function isWithin(parent, child) {
 	const rel = relative(parent, child);
@@ -181,6 +195,30 @@ function writeJson(res, status, body) {
 	});
 	res.end(data);
 }
+/**
+* 拒绝工作区之外的目标：files.open 的 path 来自请求体，必须是工作区内的相对/绝对路径，
+* 否则模型或页面脚本可以借宿主进程去打开任意本地路径。
+*/
+function assertInsideWorkspace(cwd, fullPath) {
+	const root = resolve(cwd);
+	const target = resolve(fullPath);
+	const rel = relative(root, target);
+	if (rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute(rel)) throw new Error("Path must stay inside the workspace.");
+}
+/**
+* 启动系统文件管理器/默认应用。spawn 在命令不存在时会 emit 'error'，
+* 没有监听器就会变成未捕获异常拖垮宿主进程，因此这里必须兜住。
+*/
+function launch(command, args) {
+	const child = spawn(command, args, {
+		detached: true,
+		stdio: "ignore"
+	});
+	child.on("error", (err) => {
+		console.warn(`[dsh-workspace-files] failed to launch ${command}:`, err?.message || String(err));
+	});
+	child.unref();
+}
 function resolveCwd(ctx, body) {
 	if (body.cwd?.trim()) return body.cwd.trim();
 	if (body.root?.trim()) return body.root.trim();
@@ -198,20 +236,6 @@ function apply(ctx, config = {}) {
 		maxDepth: typeof config?.maxDepth === "number" && config.maxDepth > 0 ? config.maxDepth : 16,
 		showHidden: Boolean(config?.showHidden)
 	};
-	if (ctx.inject) ctx.inject(["settings"], (scopedCtx) => {
-		try {
-			const scope = scopedCtx.settings?.register(SETTINGS_NS, Config, { base: liveConfig });
-			const applyChange = () => {
-				const current = scope?.get?.();
-				if (typeof current?.maxDepth === "number") liveConfig.maxDepth = current.maxDepth;
-				if (typeof current?.showHidden === "boolean") liveConfig.showHidden = current.showHidden;
-			};
-			applyChange();
-			scope?.watch?.(applyChange);
-		} catch (err) {
-			console.warn("[dsh-workspace-files] failed to register settings scope:", err);
-		}
-	});
 	const webServer = ctx.webServer;
 	if (!webServer) return;
 	const handleRpc = async (req, res, prefix) => {
@@ -261,37 +285,17 @@ function apply(ctx, config = {}) {
 					return;
 				}
 				const fullPath = isAbsolute(rawPath) ? rawPath : resolve(cwd, rawPath);
+				assertInsideWorkspace(cwd, fullPath);
 				const action = body.action || "reveal";
 				const isDirectory = Boolean(body.isDirectory);
 				if (process.platform === "win32") {
 					const winPath = fullPath.replace(/\//g, "\\");
-					if (action === "reveal") {
-						if (isDirectory) spawn("explorer.exe", [winPath], {
-							detached: true,
-							stdio: "ignore"
-						}).unref();
-						else spawn("explorer.exe", [`/select,${winPath}`], {
-							detached: true,
-							stdio: "ignore"
-						}).unref();
-					} else exec(`start "" "${winPath.replace(/"/g, "\\\"")}"`, { windowsHide: true });
+					launch("explorer.exe", action === "reveal" && !isDirectory ? [`/select,${winPath}`] : [winPath]);
 				} else if (process.platform === "darwin") {
-					if (action === "reveal") spawn("open", [isDirectory ? fullPath : "-R", fullPath], {
-						detached: true,
-						stdio: "ignore"
-					}).unref();
-					else spawn("open", [fullPath], {
-						detached: true,
-						stdio: "ignore"
-					}).unref();
-				} else if (action === "reveal") spawn("xdg-open", [isDirectory ? fullPath : resolve(fullPath, "..")], {
-					detached: true,
-					stdio: "ignore"
-				}).unref();
-				else spawn("xdg-open", [fullPath], {
-					detached: true,
-					stdio: "ignore"
-				}).unref();
+					if (action === "reveal") launch("open", [isDirectory ? fullPath : "-R", fullPath]);
+					else launch("open", [fullPath]);
+				} else if (action === "reveal") launch("xdg-open", [isDirectory ? fullPath : resolve(fullPath, "..")]);
+				else launch("xdg-open", [fullPath]);
 				writeJson(res, 200, { ok: true });
 			} catch (err) {
 				writeJson(res, 500, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civilization/dsh-workspace-files",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "Enhanced workspace file tree explorer with fuzzy search and @-mention for DeepSeek Harness.",
   "type": "module",
   "main": "lib/index.js",

package/src/client/icons.tsx

@@ -120,6 +120,30 @@ export function FileGlyphIcon({ filename, size = 14 }: { filename: string; size?
   } else if (ext === 'yml' || ext === 'yaml') {
     color = '#cb171e'
     badge = 'Y'
+  } else if (ext === 'rs') {
+    color = '#dea584'
+    badge = 'RS'
+  } else if (ext === 'go') {
+    color = '#00add8'
+    badge = 'GO'
+  } else if (ext === 'vue') {
+    color = '#41b883'
+    badge = 'V'
+  } else if (ext === 'svelte') {
+    color = '#ff3e00'
+    badge = 'S'
+  } else if (ext === 'toml') {
+    color = '#9c4121'
+    badge = 'T'
+  } else if (ext === 'sql') {
+    color = '#e38c00'
+    badge = 'SQL'
+  } else if (ext === 'sh' || ext === 'bash' || ext === 'zsh' || ext === 'ps1' || ext === 'bat' || ext === 'cmd') {
+    color = '#4eaa25'
+    badge = '>_'
+  } else if (ext === 'lock') {
+    color = 'var(--dsw-alias-label-tertiary, #8c9ba5)'
+    badge = '🔒'
   }
 
   return (
@@ -159,6 +183,21 @@ export function IconTree({ size = 13 }: { size?: number }): JSX.Element {
   )
 }
 
+export function IconChevronRight({ size = 11, className, style }: { size?: number; className?: string; style?: React.CSSProperties }): JSX.Element {
+  return (
+    <svg
+      width={size}
+      height={size}
+      viewBox="0 0 16 16"
+      fill="currentColor"
+      className={className}
+      style={{ display: 'inline-block', verticalAlign: 'middle', flexShrink: 0, ...style }}
+    >
+      <path fillRule="evenodd" d="M6.22 3.22a.75.75 0 0 1 1.06 0l4.25 4.25a.75.75 0 0 1 0 1.06l-4.25 4.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042L9.94 8 6.22 4.28a.75.75 0 0 1 0-1.06z" />
+    </svg>
+  )
+}
+
 export function IconChevronDown({ size = 14 }: { size?: number }): JSX.Element {
   return (
     <svg width={size} height={size} viewBox="0 0 16 16" fill="none" stroke="currentColor" strokeWidth="1.5" strokeLinecap="round" strokeLinejoin="round" style={{ display: 'inline-block', verticalAlign: 'middle', flexShrink: 0 }}>