@feng0531/dsh-vcs 0.3.12

package/docs/RELEASING.md

@@ -0,0 +1,65 @@
+# 发布清单
+
+当前包名 @feng0531/dsh-vcs；正式发布统一走 GitHub Actions，不在本地 npm publish。公开下载不改变非商业许可证。
+
+## GitHub + npm 联合发布
+
+在 GitHub 仓库 Settings → Secrets and variables → Actions 添加 NPM_AUTOMATION_TOKEN。该令牌必须有 @feng0531/dsh-vcs 发布权限，并满足 npm 的 2FA 策略（需要时启用 bypass 2FA）；名字叫 AUTOMATION_TOKEN 不会自动赋予权限。不要在聊天、源码或日志中公开值。
+
+对应标签 CI 全绿及人工验收后，从 main 手动运行 Publish GitHub and npm 工作流，填写已有版本标签。构建、验证和打包步骤不注入 npm 凭据；仅 npm 发布步骤使用 NODE_AUTH_TOKEN: ${{ secrets.NPM_AUTOMATION_TOKEN }}，且禁用生命周期脚本。同一 tgz 先发布 npm，再作为 GitHub 正式 Release 附件上传并附 SHA-256。
+
+两平台不支持原子事务：npm 失败则不发布 GitHub；npm 成功而 GitHub 失败时，重跑仅在已发布 npm integrity 与当前包完全一致时继续，否则拒绝覆盖。GitHub 已存在 Release 时也拒绝覆盖，需先检查现场。新版本不移动旧标签。
+
+## 1. 公开发布前的决定
+
+- [x] 仓库地址已确认：https://github.com/f-e-n-g-0531/dsh-vcs 。
+- [x] 正式采用 [非商业源码公开许可证 1.0](<../LICENSE>)，禁止商用，允许非商业修改和分发。
+- [ ] 每次发布检查源码权属及第三方声明；商业另行授权须覆盖全部有关权利人。
+- [ ] 确认安全报告渠道、维护责任与支持范围。
+- [ ] 审查待公开文件和 Git 历史，排除个人路径、令牌、用户数据、私人记录和敏感图片。
+
+## 2. 干净环境验证
+
+使用 Node.js 22 或更新版本，在干净检出目录中执行：
+
+    npm ci && npm run check
+    npm run verify:package
+    npm run test:install
+    npm pack --dry-run
+    npm pack
+
+确认锁文件安装、构建和测试成功，记录失败与跳过项。完整 Git / SVN 测试需要 git、svn、svnadmin。npm pack 的 prepack 会执行 check；审查包内容是否包含客户端、编辑器、CSS、worker、宿主入口、适配器、语言文件与插件 patch。
+
+构建会复制 Monaco 的许可证与第三方声明进入分发资源；仍应核查最终包中的声明及其他依赖义务。排除测试数据、依赖目录与私人材料。
+
+Git 来源安装依赖 prepare 构建，需要另行验证生命周期和构建依赖。pnpm 可能需要 allowBuilds 审批；拒绝脚本的环境应优先使用已构建 tgz，不应直接关闭安全策略。
+
+## 3. 安装与真实页面验收
+
+    dsh plugin --profile web add <absolute-tgz>
+
+替换为包的绝对路径，必要时加引号。先确认目标 profile 和宿主兼容性；安装改变运行配置，不是无副作用检查。
+
+**宿主重启只能由用户执行。** 用户重启后刷新现有 DSH Web 地址，在真实 Session 中验证：
+
+- [ ] 插件入口可见；顶部单仓库下拉，无额外仓库左栏。
+- [ ] 当前 / 上级仓库、一层子目录发现，以及明确相对子目录的定向发现。
+- [ ] Git 三模式、SVN BASE 与属性；新增、删除、重命名、未跟踪和冲突提示。
+- [ ] UTF-8、GBK、带 BOM 的 UTF-16；二进制与超大文件提示。
+- [ ] 并排 / 行内、空白选项、换行、导航、主题和编辑器加载失败降级。
+- [ ] Session / 仓库切换与重新发现不展示过期内容；预览不修改工作区或暂存区。
+- [ ] 发现授权过期后的手动重新发现，以及取消请求的实际反馈。
+
+记录宿主和浏览器版本、步骤及已知限制。自动化测试通过不等于这些项目已完成；未执行时明确写“未验收”，不补写成功结论。
+
+## 4. 标签 CI 与发布工作流
+
+普通分支 push、PR 和日常脚本修改不触发 CI；只有维护者主动推送版本标签（`vX.Y.Z`）才触发 Windows/Linux 测试矩阵。完成本地检查后，确认包版本并执行 `git tag vX.Y.Z`、`git push origin vX.Y.Z`（替换成真实版本，标签须指向包含新 CI 规则的提交）。不要移动已经发布的标签。等待该标签的 CI 全部通过并完成真实页面验收后再进行发布。在 Actions 手动运行 Release workflow 并填写已有 tag：工作流验证版本、重新构建与测试、检查包并生成 SHA256SUMS.txt，随后先发布 npm 再公开 GitHub Release。手动触发即授权两平台正式发布。未通过的真实页面验收不得勾选完成。
+
+CI 会严格校验标签为 `vX.Y.Z` 且与包版本相同。联合发布会检查同一标签、同一提交的最新 CI 必须成功；未运行、失败或尚在运行时拒绝创建草稿。这不替代真实 DSH 页面人工验收。
+
+## 5. 分发
+
+确认完整附带许可证及第三方声明，不把本项目标记为标准开源软件。在已确认的仓库中按实际验证结果编写发布说明，附审核过的 tgz 和校验值，注明兼容环境与未验证事项。是否打 tag / 创建 GitHub Release 由维护者决定；不为本次整理虚构日期、历史版本或功能变更。
+
+相关约定见 [README](<../README.md>)、[贡献指南](<../CONTRIBUTING.md>)、[变更记录](<../CHANGELOG.md>) 和 [安全说明](<../SECURITY.md>)。

package/icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64"><rect x="7" y="8" width="50" height="48" rx="10" fill="#4176e6"/><path d="M32 14v36M15 25h10m-5-5v10m20 9h10" stroke="white" stroke-width="4" stroke-linecap="round"/></svg>

package/index.mjs

@@ -0,0 +1,160 @@
+import { readFile } from 'node:fs/promises';
+import * as adapter from './vcs.mjs';
+
+export const name = 'dsh-vcs';
+export const inject = ['connection', 'webServer', 'sessions', 'sessionPersistence'];
+export const RPC_CHANNEL = '/vcs-rpc';
+const ASSETS = ['editor.js', 'editor.css', 'editor.worker.js'];
+const failure = (code, message) => ({ ok: false, error: { code, message, details: {} } });
+const invalid = (message) => Object.assign(new Error(message), { code: 'vcs/invalid-request' });
+
+/** Authoritative Session lookup: never accept a browser-provided directory. */
+export async function resolveSessionCwd(ctx, sessionId, signal) {
+  if (typeof sessionId !== 'string' || !sessionId || sessionId.length > 256 || /[\/\\\0]/.test(sessionId)) {
+    throw invalid('A valid sessionId is required.');
+  }
+  signal?.throwIfAborted();
+  const live = ctx.sessions.get(sessionId);
+  const header = live?.header ?? (await ctx.sessionPersistence.stat(sessionId, { signal }))?.header;
+  if (!header?.cwd) throw Object.assign(new Error('The Session has no available working directory.'), { code: 'vcs/session-unavailable' });
+  return header.cwd;
+}
+
+const rediscover = () => Object.assign(new Error('Repository authorization is missing, expired, or changed. Rediscover repositories for this Session and retry.'), { code: 'vcs/rediscover-required' });
+
+function validatePayload(endpoint, payload) {
+  if (!payload || typeof payload !== 'object' || Array.isArray(payload)) throw invalid('An object payload is required.');
+  const fields = endpoint === 'vcs/repositories' ? ['sessionId', 'subdirectory'] : ['sessionId', 'repositoryId', 'mode', ...(endpoint === 'vcs/compare' ? ['id'] : [])];
+  if (Object.keys(payload).some(key => !fields.includes(key))) throw invalid('Only Session-addressed repository requests are supported; unknown payload field.');
+  if (endpoint === 'vcs/repositories') {
+    if (payload.subdirectory !== undefined) {
+      const dir = payload.subdirectory;
+      if (typeof dir !== 'string' || !dir || dir.length > 4096 || /[\0:]/.test(dir) || /^[\/\\]/.test(dir) || dir.split(/[\/\\]/).includes('..')) throw invalid('subdirectory must be a relative path within the Session directory.');
+    }
+  } else {
+    if (typeof payload.repositoryId !== 'string' || !payload.repositoryId || payload.repositoryId.length > 1024) throw invalid('A discovered repositoryId is required.');
+    if (!['all', 'unstaged', 'staged'].includes(payload.mode ?? 'all')) throw invalid('Unsupported comparison mode.');
+    if (endpoint === 'vcs/compare' && (typeof payload.id !== 'string' || !payload.id || payload.id.length > 32768)) throw invalid('A change id is required.');
+  }
+}
+
+/** Limit active adapter operations and retain only bounded, short-lived discovery grants. */
+export function createHandler(ctx, api = adapter, maxActive = 4, { now = Date.now, ttlMs = 5 * 60_000, maxSessions = 32, maxRepositories = 512 } = {}) {
+  let active = 0;
+  const sessions = new Map();
+  function current(sessionId, cwd) {
+    for (const [id, entry] of sessions) if (entry.expiresAt <= now()) sessions.delete(id);
+    const entry = sessions.get(sessionId);
+    if (entry && entry.cwd !== cwd) { sessions.delete(sessionId); return undefined; }
+    return entry;
+  }
+  async function assertCurrent(sessionId, cwd, entry, signal) {
+    const latest = await resolveSessionCwd(ctx, sessionId, signal);
+    signal?.throwIfAborted();
+    if (current(sessionId, latest) !== entry || latest !== cwd) throw rediscover();
+  }
+  return async (endpoint, payload, signal) => {
+    if (!['vcs/repositories', 'vcs/status', 'vcs/compare'].includes(endpoint)) return failure('vcs/not-found', 'Unknown VCS endpoint.');
+    if (active >= maxActive) return failure('vcs/busy', 'Too many VCS requests. Please retry.');
+    active++;
+    try {
+      signal?.throwIfAborted();
+      validatePayload(endpoint, payload);
+      const cwd = await resolveSessionCwd(ctx, payload.sessionId, signal);
+      signal?.throwIfAborted();
+      let entry = current(payload.sessionId, cwd);
+      if (endpoint === 'vcs/repositories') {
+        if (!entry) {
+          while (sessions.size >= maxSessions) sessions.delete(sessions.keys().next().value);
+          entry = { cwd, repositories: new Map(), expiresAt: now() + ttlMs, scanSequence: 0, fullScanSequence: 0 };
+          sessions.set(payload.sessionId, entry);
+        }
+        const targeted = payload.subdirectory !== undefined;
+        const sequence = ++entry.scanSequence;
+        if (!targeted) entry.fullScanSequence = sequence;
+        const fullSequence = entry.fullScanSequence;
+        const result = await api.discoverRepositories(cwd, { signal, subdirectory: payload.subdirectory, maxDepth: 1, shallow: true });
+        // A stale scan must never recreate/replace a grant invalidated by a cwd change or eviction.
+        await assertCurrent(payload.sessionId, cwd, entry, signal);
+        // Full scans replace grants. Never let an older full scan erase a newer scan,
+        // or an older targeted scan resurrect grants after a new full scan begins.
+        if ((!targeted && sequence !== entry.scanSequence) || (targeted && fullSequence !== entry.fullScanSequence)) throw rediscover();
+        const grants = targeted ? new Map(entry.repositories) : new Map();
+        let truncated = !!result.truncated;
+        const warnings = [...result.warnings];
+        const repositories = [];
+        for (const repository of result.repositories) {
+          if (!grants.has(repository.id) && grants.size >= maxRepositories) { truncated = true; continue; }
+          grants.set(repository.id, { ...repository });
+          repositories.push({ ...repository });
+        }
+        if (repositories.length !== result.repositories.length) warnings.push('Repository authorization limit reached; use a new Session or narrow its working directory.');
+        entry.repositories = grants;
+        entry.expiresAt = now() + ttlMs;
+        return { ok: true, value: { cwd, repositories, truncated, warnings } };
+      }
+      const repository = entry?.repositories.get(payload.repositoryId);
+      if (!repository) throw rediscover();
+      const mode = payload.mode ?? 'all';
+      if (repository.type === 'svn' && mode !== 'all') throw invalid('SVN supports only all mode.');
+      // Both adapter operations revalidate the canonical root; comparison also validates
+      // the change ID against fresh status, so do not duplicate a full status scan here.
+      const value = endpoint === 'vcs/status'
+        ? { cwd, repository: { ...repository }, changes: await api.listChanges({ ...repository }, mode), mode }
+        : await api.getComparison({ ...repository }, { mode, id: payload.id });
+      await assertCurrent(payload.sessionId, cwd, entry, signal);
+      if (entry.repositories.get(payload.repositoryId) !== repository) throw rediscover();
+      return { ok: true, value };
+    } catch (error) {
+      if (signal?.aborted || error?.name === 'AbortError') return failure('vcs/cancelled', 'The request was cancelled.');
+      return failure(typeof error?.code === 'string' && error.code.startsWith('vcs/') ? error.code : 'vcs/operation-failed', error instanceof Error ? error.message : String(error));
+    } finally { active--; }
+  };
+}
+
+/** Three fixed authenticated assets; URL input never enters a filesystem path. */
+export function registerAssets(ctx, load = filename => readFile(new URL('./dist/' + filename, import.meta.url))) {
+  for (const filename of ASSETS) {
+    ctx.connection.fetch.register({
+      path: '/api/vcs-assets/' + filename,
+      methods: ['GET', 'HEAD'],
+      requestBody: 'buffered',
+      async fetch(request) {
+        try {
+          const bytes = await load(filename);
+          return new Response(request.method === 'HEAD' ? null : bytes, { headers: {
+            'Content-Type': filename.endsWith('.css') ? 'text/css; charset=utf-8' : 'text/javascript; charset=utf-8',
+            'Content-Length': String(bytes.byteLength),
+            'Cache-Control': 'private, no-cache',
+            'X-Content-Type-Options': 'nosniff',
+          } });
+        } catch { return new Response('VCS editor assets unavailable. Build the plugin first.', { status: 503 }); }
+      },
+    });
+  }
+}
+
+/** Dedicated static routes avoid dependence on the shared /api dispatcher. */
+export function registerDirectAssets(ctx, load = filename => readFile(new URL('./dist/' + filename, import.meta.url))) {
+  for (const filename of ASSETS) ctx.effect(() => ctx.webServer.register({
+    kind: 'exact', path: '/vcs-assets/' + filename,
+    async handler(req, res) {
+      const admission = ctx.connection.admit(req);
+      if ('rejection' in admission) { res.writeHead(admission.rejection); res.end(admission.rejection === 401 ? 'unauthorized' : 'forbidden'); return; }
+      if (!['GET', 'HEAD'].includes(req.method)) { res.writeHead(405, {Allow:'GET, HEAD'}); res.end(); return; }
+      try {
+        const bytes = await load(filename);
+        res.writeHead(200, {'Content-Type': filename.endsWith('.css') ? 'text/css; charset=utf-8' : 'text/javascript; charset=utf-8', 'Content-Length': String(bytes.byteLength), 'Cache-Control':'private, no-cache', 'X-Content-Type-Options':'nosniff'});
+        res.end(req.method === 'HEAD' ? undefined : bytes);
+      } catch { res.writeHead(503, {'Content-Type':'text/plain; charset=utf-8'}); res.end('VCS editor assets unavailable.'); }
+    }
+  }));
+}
+
+export function apply(ctx) {
+  // Pass the plugin owner explicitly: the nested rpc getter can retain the
+  // connection service context, which does not inject webServer.
+  ctx.connection.register(ctx, RPC_CHANNEL, createHandler(ctx));
+  registerAssets(ctx);
+  registerDirectAssets(ctx);
+}

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "VCS changes",
+    "description": "Read-only Git / SVN changes and side-by-side diff"
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "VCS 变更",
+    "description": "Git / SVN 只读变更列表与左右对比"
+  }
+}

package/package.json

@@ -0,0 +1,81 @@
+{
+  "name": "@feng0531/dsh-vcs",
+  "version": "0.3.12",
+  "private": false,
+  "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org/" },
+  "type": "module",
+  "description": "Read-only Git and SVN change preview for DSH",
+  "exports": {
+    ".": "./index.mjs",
+    "./client": "./dist/client.js",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
+  },
+  "files": [
+    "index.mjs",
+    "vcs.mjs",
+    "dist",
+    "locale",
+    "icon.svg",
+    "cordis.patch.yml",
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md",
+    "docs/RELEASING.md"
+  ],
+  "icon": "./icon.svg",
+  "scripts": {
+    "build": "node build.mjs",
+    "test": "node --test test/*.test.mjs",
+    "check": "npm run build && npm test",
+    "prepare": "npm run build",
+    "prepack": "npm run check",
+    "verify:package": "node scripts/verify-package.mjs",
+    "test:install": "node scripts/test-install.mjs"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh": "0.1.7-rc.2"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh": { "optional": true }
+  },
+  "dependencies": {
+    "fast-xml-parser": "^5.0.0"
+  },
+  "devDependencies": {
+    "esbuild": "^0.25.0",
+    "monaco-editor": "^0.52.2",
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-conversation"
+      ]
+    }
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/f-e-n-g-0531/dsh-vcs.git"
+  },
+  "homepage": "https://github.com/f-e-n-g-0531/dsh-vcs#readme",
+  "bugs": {
+    "url": "https://github.com/f-e-n-g-0531/dsh-vcs/issues"
+  },
+  "license": "SEE LICENSE IN LICENSE",
+  "keywords": [
+    "deepseek-harness",
+    "dsh-plugin",
+    "git",
+    "svn",
+    "diff"
+  ]
+}