@goodandready/dsh-context-lens 0.1.25 → 0.1.26

package/lib/http.js

@@ -1,114 +0,0 @@
-export function writeJson(res, code, body) {
-  try {
-    res.writeHead(code, {
-      'Content-Type': 'application/json; charset=utf-8',
-      'Cache-Control': 'no-store',
-    });
-    res.end(JSON.stringify(body));
-  } catch {
-    /* socket already closed */
-  }
-}
-
-export function readBody(req, maxBytes = 256 * 1024) {
-  return new Promise((resolve, reject) => {
-    const chunks = [];
-    let size = 0;
-    req.on('data', (c) => {
-      size += c.length;
-      if (size > maxBytes) {
-        req.destroy();
-        reject(new Error('body too large'));
-        return;
-      }
-      chunks.push(c);
-    });
-    req.on('end', () => resolve(Buffer.concat(chunks)));
-    req.on('error', reject);
-  });
-}
-
-export function header(request, name) {
-  const value = request?.headers?.[name.toLowerCase()];
-  return Array.isArray(value) ? value[0] : value;
-}
-
-export function isLoopbackAddress(value) {
-  const address = String(value || '').toLowerCase().replace(/^\[|\]$/g, '');
-  return address === 'localhost' || address === 'localhost.' || address === '::1'
-    || address.startsWith('127.')
-    || address.startsWith('::ffff:127.');
-}
-
-/** Reject cross-site writes while allowing local, LAN, and reverse-proxy UIs. */
-export function isTrustedRequest(request) {
-  const secFetchSite = header(request, 'sec-fetch-site');
-  if (secFetchSite === 'cross-site') {
-    return false;
-  }
-
-  const host = header(request, 'x-forwarded-host') || header(request, 'host');
-  const origin = header(request, 'origin');
-  if (origin) {
-    try {
-      const url = new URL(origin);
-      if (host && url.host.toLowerCase() === host.toLowerCase()) {
-        return true;
-      }
-      if (isLoopbackAddress(url.hostname) && isLoopbackAddress(request?.socket?.remoteAddress)) {
-        return true;
-      }
-      return false;
-    } catch {
-      return false;
-    }
-  }
-
-  const referer = header(request, 'referer');
-  if (referer) {
-    try {
-      const url = new URL(referer);
-      if (host && url.host.toLowerCase() === host.toLowerCase()) {
-        return true;
-      }
-      if (isLoopbackAddress(url.hostname) && isLoopbackAddress(request?.socket?.remoteAddress)) {
-        return true;
-      }
-      return false;
-    } catch {
-      return false;
-    }
-  }
-
-  // Requests without origin/referer (e.g. curl, loopback tests, or internal calls)
-  if (isLoopbackAddress(request?.socket?.remoteAddress)) {
-    return true;
-  }
-
-  if (secFetchSite === 'same-origin' || secFetchSite === 'same-site') {
-    return true;
-  }
-
-  return false;
-}
-
-export const UPDATE_HEADER = 'x-dsh-plugin-update';
-export const ALT_UPDATE_HEADER = 'x-dsh-context-lens-update';
-
-export function isTrustedUpdateRequest(request) {
-  const updHdr = header(request, UPDATE_HEADER) || header(request, ALT_UPDATE_HEADER);
-  if (updHdr !== '1') return false;
-  if (!isLoopbackAddress(request?.socket?.remoteAddress)) return false;
-  const site = header(request, 'sec-fetch-site');
-  if (site !== undefined && site !== 'same-origin') return false;
-  const origin = header(request, 'origin');
-  const host = header(request, 'host');
-  if (origin === undefined || host === undefined) return false;
-  try {
-    const url = new URL(origin);
-    return (url.protocol === 'http:' || url.protocol === 'https:')
-      && isLoopbackAddress(url.hostname) && url.host === host;
-  } catch {
-    return false;
-  }
-}

package/lib/tokens/estimate.js

@@ -1,6 +0,0 @@
-// shared token estimate (~chars/4)
-export function estimateTokens(text) {
-  return Math.ceil((text || '').length / 4);
-}
-
-export default { estimateTokens };

package/lib/tokens/tracker.js

@@ -1,89 +0,0 @@
-// ponytail: in-memory per-process tracker + history, no DB
-import { estimateTokens } from './estimate.js';
-
-let totalOriginal = 0;
-let totalCompressed = 0;
-let calls = 0;
-const history = []; // last 10
-const MAX_HISTORY = 10;
-let defaultBudgetLimit = 100000; // tokens
-let defaultBudgetAlertPercent = 90; // threshold percent for low budget warning
-
-export { estimateTokens };
-
-export function setBudgetLimit(limit) {
-  if (typeof limit === 'number' && limit > 0) {
-    defaultBudgetLimit = limit;
-  }
-}
-
-export function setBudgetAlertPercent(percent) {
-  if (typeof percent === 'number' && percent >= 50 && percent <= 99) {
-    defaultBudgetAlertPercent = percent;
-  }
-}
-
-export function record(originalText, compressedText) {
-  const o = estimateTokens(originalText);
-  const c = estimateTokens(compressedText);
-  const saved = Math.max(0, o - c);
-  // #34: stop counting after budgetLimit (description promised this)
-  if (totalCompressed >= defaultBudgetLimit) {
-    return { originalTokens: o, compressedTokens: c, savedTokens: 0, stopped: true };
-  }
-  totalOriginal += o;
-  totalCompressed += c;
-  calls++;
-  const entry = {
-    id: Date.now() + Math.random().toString(36).slice(2, 6),
-    originalTokens: o,
-    compressedTokens: c,
-    savedTokens: saved,
-    savedPercent: o ? Math.round((1 - c / o) * 100) : 0,
-    timestamp: new Date().toISOString(),
-    preview: (compressedText || '').slice(0, 120)
-  };
-  history.unshift(entry);
-  if (history.length > MAX_HISTORY) history.pop();
-  return { originalTokens: o, compressedTokens: c, savedTokens: saved };
-}
-
-export function getStats(budgetLimitOverride, budgetAlertPercentOverride) {
-  const limit = (typeof budgetLimitOverride === 'number' && budgetLimitOverride > 0)
-    ? budgetLimitOverride
-    : defaultBudgetLimit;
-  const alertPercent = (typeof budgetAlertPercentOverride === 'number' && budgetAlertPercentOverride >= 50 && budgetAlertPercentOverride <= 99)
-    ? budgetAlertPercentOverride
-    : defaultBudgetAlertPercent;
-  const saved = Math.max(0, totalOriginal - totalCompressed);
-  const pct = totalOriginal ? Math.round((1 - totalCompressed / totalOriginal) * 100) : 0;
-  const budgetUsed = totalCompressed;
-  const budgetRemaining = Math.max(0, limit - budgetUsed);
-  const budgetPercent = Math.min(100, Math.round((budgetUsed / limit) * 100));
-  const lowBudget = budgetPercent >= alertPercent;
-  return {
-    totalOriginal,
-    totalCompressed,
-    savedTokens: saved,
-    savedPercent: pct,
-    calls,
-    budgetUsed,
-    budgetRemaining,
-    budgetPercent,
-    lowBudget,
-    budgetLimit: limit,
-    budgetAlertPercent: alertPercent,
-    countingStopped: budgetUsed >= limit
-  };
-}
-
-export function getHistory() {
-  return [...history];
-}
-
-export function reset() {
-  totalOriginal = 0;
-  totalCompressed = 0;
-  calls = 0;
-  history.length = 0;
-}

package/lib/updater.js

@@ -1,237 +0,0 @@
-import { spawn } from 'node:child_process';
-import { existsSync, readFileSync } from 'node:fs';
-import { readFile } from 'node:fs/promises';
-import { homedir } from 'node:os';
-import { basename, dirname, isAbsolute, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { writeJson, isTrustedUpdateRequest } from './http.js';
-
-const VERSION_CACHE_MS = 60_000;
-const UPDATE_TIMEOUT_MS = 120_000;
-
-let latestCache;
-
-function validProfileName(value) {
-  return typeof value === 'string' && value !== '' && value !== '.' && value !== '..'
-    && !value.includes('/') && !value.includes('\\') && !/[\0-\x1f\x7f]/.test(value);
-}
-
-function profileNameFromArgv(argv) {
-  if (!Array.isArray(argv)) return undefined;
-  for (let index = 2; index < argv.length; index += 1) {
-    if (argv[index] === '--profile') return argv[index + 1];
-    if (typeof argv[index] === 'string' && argv[index].startsWith('--profile=')) {
-      return argv[index].slice('--profile='.length);
-    }
-  }
-  return undefined;
-}
-
-function findDshCliEntry() {
-  const value = process.argv[1];
-  if (typeof value !== 'string' || value.length === 0) return undefined;
-  const entry = value.startsWith('file:') ? fileURLToPath(value) : resolve(process.cwd(), value);
-  if (!existsSync(entry)) return undefined;
-  for (let directory = dirname(entry); ; directory = dirname(directory)) {
-    const manifestPath = resolve(directory, 'package.json');
-    if (existsSync(manifestPath)) {
-      try {
-        const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
-        const bin = typeof manifest.bin === 'string'
-          ? manifest.bin
-          : typeof manifest.bin === 'object' && manifest.bin !== null
-            ? manifest.bin.dsh
-            : undefined;
-        if (manifest.name === '@deepseek-ai/dsh' && typeof bin === 'string'
-          && !isAbsolute(bin) && resolve(directory, bin) === resolve(entry)) return entry;
-      } catch {
-        /* continue */
-      }
-    }
-    const parent = dirname(directory);
-    if (parent === directory) return undefined;
-  }
-}
-
-export function detectRuntime() {
-  const profileDir = resolve(process.env.DSH_PROFILE_DIR
-    ?? resolve(homedir(), '.dsh', 'profiles', 'web'));
-  const selected = profileNameFromArgv(process.argv);
-  const profileName = validProfileName(selected)
-    ? selected
-    : validProfileName(basename(profileDir)) ? basename(profileDir) : 'web';
-  const cliEntry = findDshCliEntry();
-  return cliEntry === undefined ? { profileName, profileDir } : { profileName, profileDir, cliEntry };
-}
-
-export function parseSemver(value) {
-  const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(String(value || ''));
-  if (match === null) return undefined;
-  return {
-    core: [Number(match[1]), Number(match[2]), Number(match[3])],
-    prerelease: match[4]?.split('.') ?? [],
-  };
-}
-
-function comparePrerelease(candidateParts, currentParts) {
-  if (candidateParts.length === 0 && currentParts.length > 0) return 1;
-  if (candidateParts.length > 0 && currentParts.length === 0) return -1;
-  if (candidateParts.length === 0 && currentParts.length === 0) return 0;
-
-  const len = Math.max(candidateParts.length, currentParts.length);
-  for (let i = 0; i < len; i += 1) {
-    const a = candidateParts[i];
-    const b = currentParts[i];
-    if (a === undefined) return -1;
-    if (b === undefined) return 1;
-    if (a === b) continue;
-
-    const aNum = /^\d+$/.test(a) ? Number(a) : undefined;
-    const bNum = /^\d+$/.test(b) ? Number(b) : undefined;
-
-    if (aNum !== undefined && bNum !== undefined) {
-      return aNum > bNum ? 1 : -1;
-    }
-    if (aNum !== undefined && bNum === undefined) {
-      return -1;
-    }
-    if (aNum === undefined && bNum !== undefined) {
-      return 1;
-    }
-    return a.localeCompare(b) > 0 ? 1 : -1;
-  }
-  return 0;
-}
-
-export function isNewerVersion(currentValue, candidateValue) {
-  const current = parseSemver(currentValue);
-  const candidate = parseSemver(candidateValue);
-  if (current === undefined || candidate === undefined) return false;
-  for (let index = 0; index < 3; index += 1) {
-    if (candidate.core[index] !== current.core[index]) return candidate.core[index] > current.core[index];
-  }
-  return comparePrerelease(candidate.prerelease, current.prerelease) > 0;
-}
-
-async function fetchLatestVersion(packageName, registry) {
-  if (latestCache?.packageName === packageName && latestCache.registry === registry && Date.now() < latestCache.expiresAt) {
-    return latestCache.version;
-  }
-  try {
-    const reg = registry.replace(/\/+$/, '');
-    const response = await fetch(`${reg}/${encodeURIComponent(packageName)}/latest`, {
-      signal: AbortSignal.timeout(6000),
-    });
-    if (!response.ok) return undefined;
-    const value = await response.json();
-    if (typeof value?.version !== 'string' || !value.version) return undefined;
-    latestCache = { packageName, registry, version: value.version, expiresAt: Date.now() + VERSION_CACHE_MS };
-    return value.version;
-  } catch {
-    return undefined;
-  }
-}
-
-async function readCurrentVersion(manifestUrl) {
-  const value = JSON.parse(await readFile(manifestUrl, 'utf8'));
-  if (typeof value?.version !== 'string' || !value.version) throw new Error('Cannot read current plugin version.');
-  return value.version;
-}
-
-export async function checkUpdateStatus(options, target = detectRuntime()) {
-  const current = await readCurrentVersion(options.manifestUrl);
-  const latest = await fetchLatestVersion(options.packageName, options.registry || 'https://registry.npmjs.org');
-  return {
-    packageName: options.packageName,
-    currentVersion: current,
-    ...(latest === undefined ? {} : { latestVersion: latest }),
-    latestCheckFailed: latest === undefined,
-    updateAvailable: latest !== undefined && isNewerVersion(current, latest),
-    profileName: target.profileName,
-    canAutoUpdate: target.cliEntry !== undefined,
-  };
-}
-
-async function installExact(target, packageSpec, options) {
-  if (target.cliEntry === undefined) throw new Error('Automatic update is unavailable in this runtime.');
-  await new Promise((resolvePromise, reject) => {
-    // Note: per issue #61 / dsh-clinebot#24 / dsh-agent-loop-guard#38, do NOT disable pnpm minimum release age quarantine
-    const child = spawn(process.execPath, [
-      target.cliEntry, 'plugin', '--profile', target.profileName, 'add',
-      packageSpec,
-      `--registry=${options.registry || 'https://registry.npmjs.org/'}`,
-    ], {
-      cwd: target.profileDir,
-      windowsHide: true,
-      stdio: ['ignore', 'pipe', 'pipe'],
-      env: { ...process.env, NO_COLOR: '1' },
-    });
-    let detail = '';
-    child.stdout?.on('data', (chunk) => { detail = (detail + String(chunk)).slice(-4000); });
-    child.stderr?.on('data', (chunk) => { detail = (detail + String(chunk)).slice(-4000); });
-    const timer = setTimeout(() => {
-      child.kill();
-      reject(new Error('Update timed out.'));
-    }, UPDATE_TIMEOUT_MS);
-    child.once('error', (error) => { clearTimeout(timer); reject(error); });
-    child.once('exit', (code) => {
-      clearTimeout(timer);
-      if (code === 0) resolvePromise();
-      else reject(new Error(detail.trim() || `Update exited with code ${String(code)}.`));
-    });
-  });
-}
-
-export function registerPluginUpdater(ctx, options) {
-  if (!ctx?.webServer?.register) return () => {};
-  let installing = false;
-  return ctx.webServer.register({
-    kind: 'exact',
-    path: options.endpoint,
-    handler: async (request, response) => {
-      try {
-        const target = detectRuntime();
-        if (request.method === 'GET' || request.method === 'HEAD') {
-          const payload = await checkUpdateStatus(options, target);
-          writeJson(response, 200, payload);
-          return;
-        }
-        if (request.method !== 'POST') {
-          response.writeHead(405, { Allow: 'GET, HEAD, POST' });
-          response.end();
-          return;
-        }
-        if (!isTrustedUpdateRequest(request)) {
-          writeJson(response, 403, { ok: false, error: 'Rejected non-local or cross-origin update request.' });
-          return;
-        }
-        if (installing) {
-          writeJson(response, 409, { ok: false, error: 'This plugin is already updating.' });
-          return;
-        }
-        installing = true;
-        try {
-          const before = await checkUpdateStatus(options, target);
-          if (before.latestVersion === undefined) {
-            writeJson(response, 503, { ok: false, error: 'The latest version is temporarily unavailable.' });
-            return;
-          }
-          if (!before.updateAvailable) {
-            writeJson(response, 200, before);
-            return;
-          }
-          await installExact(target, `${options.packageName}@${before.latestVersion}`, options);
-          writeJson(response, 200, {
-            ...before,
-            updatedVersion: before.latestVersion,
-            restartRequired: true,
-          });
-        } finally {
-          installing = false;
-        }
-      } catch (error) {
-        writeJson(response, 500, { ok: false, error: String(error?.message || error) });
-      }
-    },
-  });
-}