@deepseek-ai/dsh-api-workspace-files 0.1.7-rc.1 → 0.1.7-rc.2

package/README.i18n.yaml

@@ -1,6 +1,67 @@
-# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
-# side as of the last confirmed-consistent state. Both languages carry equal authority;
-# after editing either side, bring the other along and re-record with:
+# Bilingual-pair consistency record for README.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/api/workspace-files/README.md
-README.md: 0345887e58975b9ef2764144ded20a4f25e8f04d
-README.zh.md: 572b83ec37696ee32ba9c3e1e0babdf696afe903
+/:
+  en: f83c75aa73ae21dd
+  zh: e8873aafd23a8038
+/deepseek-ai-dsh-api-workspace-files:
+  en: d2885c72d12d9924
+  zh: e111f03d02383229
+/deepseek-ai-dsh-api-workspace-files/summary:
+  en: 27c562441286bdbf
+  zh: 205dfac32c96873b
+/deepseek-ai-dsh-api-workspace-files/table-of-contents:
+  en: d152484eb41ac6b4
+  zh: 09388d293f9be9cb
+/deepseek-ai-dsh-api-workspace-files/use-this-package:
+  en: 874054ed5e950973
+  zh: e8b55d62939c4c2f
+/deepseek-ai-dsh-api-workspace-files/use-this-package/addressing-and-paths:
+  en: b9565cfa7a1da451
+  zh: fc4078a58322fc7f
+/deepseek-ai-dsh-api-workspace-files/use-this-package/pages:
+  en: 9cd68b8be3390c80
+  zh: 26049ce447f00452
+/deepseek-ai-dsh-api-workspace-files/use-this-package/binary-reads:
+  en: 93ca9e832fbfd632
+  zh: 69412adba259c6f8
+/deepseek-ai-dsh-api-workspace-files/use-this-package/file-read-and-directory-checks:
+  en: aa85c7754557a22f
+  zh: c576d06749fbe0a5
+/deepseek-ai-dsh-api-workspace-files/use-this-package/the-change-feed:
+  en: 8bd2d820a512d461
+  zh: 0614ddd842ae7526
+/deepseek-ai-dsh-api-workspace-files/use-this-package/configuration:
+  en: e606e8b22ac6e0d0
+  zh: 13a7214448036d7b
+/deepseek-ai-dsh-api-workspace-files/use-this-package/failures:
+  en: c53d597c8f255e69
+  zh: 1e00318f9a34f3bb
+/deepseek-ai-dsh-api-workspace-files/use-this-package/client-file-resources:
+  en: 9b4bf7a30016f856
+  zh: 30127a6ada65e715
+/deepseek-ai-dsh-api-workspace-files/understand-the-implementation:
+  en: 42b15ac6321706aa
+  zh: ce1d25bffb6948cd
+/deepseek-ai-dsh-api-workspace-files/understand-the-implementation/design-concept:
+  en: c3a8852c33dcc0e9
+  zh: d24fd47da7faaa29
+/deepseek-ai-dsh-api-workspace-files/understand-the-implementation/source-map:
+  en: 2394243d582bb452
+  zh: 763e56ca827efa0d
+/deepseek-ai-dsh-api-workspace-files/further-exploration:
+  en: 71f00fb919d12181
+  zh: 1e3819cd90dfca31
+/deepseek-ai-dsh-api-workspace-files/model-experience:
+  en: 37b4264c8301323f
+  zh: 74ea89b3383ff7da
+/deepseek-ai-dsh-api-workspace-files/model-experience/kv-cache-effect:
+  en: ca75c51c89c2c9b0
+  zh: 03126f3b1aac5859
+/deepseek-ai-dsh-api-workspace-files/known-limitations-and-deferred-work:
+  en: ee05e55f5d16f253
+  zh: 0c937eeac8fa3f08
+/deepseek-ai-dsh-api-workspace-files/known-limitations-and-deferred-work/dev-note:
+  en: e67f633dc6fe7773
+  zh: e88aeb617ffb74ea

package/README.md

@@ -51,7 +51,7 @@ Pass the required options object as `{}` for a complete file under `maxFileBytes
 
 ### File-read and directory checks
 
-File reads and directory listing first use `lstat` to reject a missing path, a final symlink, or the wrong file kind. File operations then resolve and read through the composed filesystem without an additional workspace-containment check. Directory listing and watching require the resolved directory to remain inside the workspace root. The configured page, window, complete-file, and listing caps still apply. Text pages additionally reject invalid UTF-8 and NUL bytes; byte reads do not decode content. An empty read or listing path is a `gateway/bad-request`.
+Every operation first uses `lstat` to reject a missing path or the wrong file kind; the file-reading operations also refuse a final symlink, even one pointing back inside the workspace. `list` instead follows a final link — a directory symlink on any platform, including a Windows junction — and requires it to resolve to a directory inside the workspace root, so a linked directory lists like its target; `changes` confines the watched directory the same way. File operations then resolve and read through the composed filesystem without an additional workspace-containment check. The configured page, window, complete-file, and listing caps still apply. Text pages additionally reject invalid UTF-8 and NUL bytes; byte reads do not decode content. An empty read or listing path is a `gateway/bad-request`.
 
 ### The change feed
 

package/README.zh.md

@@ -51,7 +51,7 @@ kind: "package-reference"
 
 ### 文件读取与目录检查
 
-文件读取和目录列举先通过 `lstat` 拒绝不存在的路径、末端符号链接或错误的文件类型。文件操作随后通过组合文件系统解析和读取，不做额外的工作区包含检查。目录列举和监听要求解析后的目录仍位于工作区内。配置的分页、窗口、完整文件和目录列举上限仍然适用。文本页还拒绝无效 UTF-8 与 NUL 字节；字节读取不解码内容。读取或列举的空路径是 `gateway/bad-request`。
+每项操作都先通过 `lstat` 拒绝不存在的路径或错误的文件类型；读取文件的操作还拒绝末端符号链接，包括指回工作区内的链接。`list` 改为跟随末端链接——任何平台上的目录符号链接，包括 Windows 目录联接——要求它解析为工作区内的目录，因此被链接的目录与其目标一样可列举；`changes` 也以同样方式把被监听的目录限制在工作区内。文件操作随后通过组合文件系统解析和读取，不做额外的工作区包含检查。配置的分页、窗口、完整文件和目录列举上限仍然适用。文本页还拒绝无效 UTF-8 与 NUL 字节；字节读取不解码内容。读取或列举的空路径是 `gateway/bad-request`。
 
 ### 变更流
 

package/lib/index.js

@@ -493,11 +493,17 @@ let WorkspaceFiles = (() => {
 		*/
 		async list(workspaceFileScope, path, signal) {
 			const { root, workspaceRoot, entry } = await this.inspect(workspaceFileScope, path, signal);
-			if (entry.type !== "directory") throw new RemoteError("workspace-file/not-directory", `"${path}" is a ${entry.type}`, {
+			if (entry.type !== "directory" && entry.type !== "symlink") throw new RemoteError("workspace-file/not-directory", `"${path}" is a ${entry.type}`, {
 				path,
 				kind: entry.type
 			});
 			const target = await this.confine(root, workspaceRoot, path, signal);
+			if (entry.type === "symlink") {
+				if ((await this.ctx.fs.stat(target, signal))?.type !== "directory") throw new RemoteError("workspace-file/not-directory", `"${path}" does not resolve to a directory`, {
+					path,
+					kind: "symlink"
+				});
+			}
 			const children = await this.ctx.fs.listDir(target, signal);
 			return {
 				path: workspacePathOf(this.ctx.fs.fileUrl(root), this.ctx.fs.fileUrl(target)),

package/lib/typert.host.js

@@ -161,7 +161,7 @@ export const TYPERT = {
         typeSymbol: '@deepseek-ai/dsh-api-workspace-files/types#WorkspaceFileWatchFrame',
         create: _deepseek_ai_dsh_api_workspace_files_workspaceFiles_changes_result$schema,
       },
-      sourceLocation: {"file":"packages/api/workspace-files/src/index.ts","line":331,"column":3},
+      sourceLocation: {"file":"packages/api/workspace-files/src/index.ts","line":340,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-workspace-files#workspaceFiles/list',

package/lib/typert.remote-client.js

@@ -158,7 +158,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@deepseek-ai/dsh-api-workspace-files/types#WorkspaceFileWatchFrame',
         create: _deepseek_ai_dsh_api_workspace_files_workspaceFiles_changes_result$schema,
       },
-      sourceLocation: {"file":"packages/api/workspace-files/src/index.ts","line":331,"column":3},
+      sourceLocation: {"file":"packages/api/workspace-files/src/index.ts","line":340,"column":3},
     },
     {
       id: '@deepseek-ai/dsh-api-workspace-files#workspaceFiles/list',

package/lib/types/index.js

@@ -261,10 +261,19 @@ let WorkspaceFiles = (() => {
          */
         async list(workspaceFileScope, path, signal) {
             const { root, workspaceRoot, entry } = await this.inspect(workspaceFileScope, path, signal);
-            if (entry.type !== 'directory') {
+            // A final link — a Windows junction or a symlink — is listed through the
+            // directory it resolves to, matching the child type `listDir` reports for
+            // that entry; `read` keeps its own no-follow gate on the final component.
+            if (entry.type !== 'directory' && entry.type !== 'symlink') {
                 throw new RemoteError('workspace-file/not-directory', `"${path}" is a ${entry.type}`, { path, kind: entry.type });
             }
             const target = await this.confine(root, workspaceRoot, path, signal);
+            if (entry.type === 'symlink') {
+                const info = await this.ctx.fs.stat(target, signal);
+                if (info?.type !== 'directory') {
+                    throw new RemoteError('workspace-file/not-directory', `"${path}" does not resolve to a directory`, { path, kind: 'symlink' });
+                }
+            }
             const children = await this.ctx.fs.listDir(target, signal);
             return {
                 path: workspacePathOf(this.ctx.fs.fileUrl(root), this.ctx.fs.fileUrl(target)),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-api-workspace-files",
   "description": "Workspace file service and Client resource provider: bounded reads, directory listing, and live metadata over the workspaceFiles Remote namespace",
-  "version": "0.1.7-rc.1",
+  "version": "0.1.7-rc.2",
   "publishConfig": {
     "access": "public"
   },
@@ -49,25 +49,25 @@
   "license": "MIT",
   "dependencies": {
     "zod": "^4.4.3",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.7-rc.1",
     "@deepseek-ai/schemastery": "~3.18.4",
-    "@deepseek-ai/dsh-deque": "0.1.7-rc.1"
+    "@deepseek-ai/dsh-deque": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.7-rc.2"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "~4.0.4"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-api-gateway": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-client-connection": "0.1.7-rc.1",
     "@deepseek-ai/cordis": "~4.0.4",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-client-resources": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-fs": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-remote-mock": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-session": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-session-persistence": "0.1.7-rc.1",
-    "@deepseek-ai/dsh-util-workspace-path": "0.1.7-rc.1"
+    "@deepseek-ai/dsh-client-resources": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-api-gateway": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-fs": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-remote-mock": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-session-persistence": "0.1.7-rc.2",
+    "@deepseek-ai/dsh-util-workspace-path": "0.1.7-rc.2"
   },
   "files": [
     "lib/index.js",