@goodandready/dsh-kanban 0.2.22 → 0.2.23

package/lib/client.js

@@ -487,6 +487,7 @@ window.__ModuleLoader__.load({
         case 'cross-site': return 'error.crossSite'
         case 'model-not-selected': return 'error.modelNotSelected'
         case 'start-failed': return 'error.startFailed'
+        case 'timeout': return 'error.timeout'
         default: return 'error.unknown'
       }
     }
@@ -549,15 +550,54 @@ window.__ModuleLoader__.load({
       neighboursFor, tasksOf, sortTasks, packInfo, groupByAssignee, applyToEach, recallLaunch, rememberLaunch, stillOffered,
       cardRef, taskRef, cardStatus, facetLabel, boardTitle,
       columnTitle, planLine, stateLabel, isCollapsed,
-      agoText, exactAt, shortDate, syncLine, readableOn, tagStyle, priorityColor, renderBlocks, renderSpans, matchesFilters, anySelected, toggleValue, normalizeBoard, errorKey,
+      agoText, exactAt, shortDate, syncLine, readableOn, tagStyle, priorityColor, renderBlocks, renderSpans, matchesFilters, anySelected, toggleValue, normalizeBoard, errorKey, api, createTimeoutSignal,
       chipSessionId, matchesQuery, splitFullName, repoOption, openSession, COLUMN_ORDER,
     }
 
 
+    function createTimeoutSignal(ms) {
+      const sig = typeof AbortSignal !== 'undefined' ? AbortSignal : (typeof globalThis !== 'undefined' ? globalThis.AbortSignal : undefined)
+      if (sig && typeof sig.timeout === 'function') {
+        return sig.timeout(ms)
+      }
+      const ctrl = typeof AbortController !== 'undefined' ? AbortController : (typeof globalThis !== 'undefined' ? globalThis.AbortController : undefined)
+      if (ctrl) {
+        const c = new ctrl()
+        setTimeout(() => c.abort(new Error('TimeoutError')), ms)
+        return c.signal
+      }
+      return undefined
+    }
+
     async function api(path, options) {
-      const res = await fetch('/dsh-kanban' + path, Object.assign({
+      const timeoutMs = (options && options.timeout) || 20000
+      let timeoutSignal
+      try {
+        if (!options?.signal) {
+          timeoutSignal = createTimeoutSignal(timeoutMs)
+        }
+      } catch (_) {}
+
+      const fetchOpts = Object.assign({
         headers: { 'Content-Type': 'application/json' },
-      }, options))
+      }, options)
+      if (timeoutSignal && !fetchOpts.signal) {
+        fetchOpts.signal = timeoutSignal
+      }
+
+      let res
+      try {
+        res = await fetch('/dsh-kanban' + path, fetchOpts)
+      } catch (err) {
+        if (err && (err.name === 'TimeoutError' || (!options?.signal && err.name === 'AbortError'))) {
+          const timeoutErr = new Error('timeout')
+          timeoutErr.key = 'error.timeout'
+          timeoutErr.name = 'TimeoutError'
+          throw timeoutErr
+        }
+        throw err
+      }
+
       let payload = null
       try { payload = await res.json() } catch { payload = null }
       if (!res.ok) {
@@ -1220,6 +1260,7 @@ window.__ModuleLoader__.load({
       'error.issueNotFound': 'Issue not found.',
       'error.titleRequired': 'A title is required.',
       'error.crossSite': 'Request rejected as cross-site.',
+      'error.timeout': 'Request timed out. Please try again.',
       'error.unknown': 'Request failed.',
     }
 
@@ -1611,6 +1652,7 @@ window.__ModuleLoader__.load({
       'error.issueNotFound': '没有找到 issue。',
       'error.titleRequired': '标题不能为空。',
       'error.crossSite': '请求被判定为跨站而拒绝。',
+      'error.timeout': '请求超时，请重试。',
       'error.unknown': '请求失败。',
     }
 

package/lib/updater.js

@@ -47,7 +47,7 @@ export function isTrustedUpdateRequest(request) {
   const remote = request.socket?.remoteAddress
   if (!isLoopback(remote) && !isPrivateLan(remote)) return false
   const site = header(request, 'sec-fetch-site')
-  if (site !== undefined && site !== 'same-origin') return false
+  if (!site || (site !== 'same-origin' && site !== 'same-site' && site !== 'none')) return false
   const origin = header(request, 'origin')
   const host = header(request, 'host')
   if (origin === undefined || host === undefined) return false

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-kanban",
-  "version": "0.2.22",
+  "version": "0.2.23",
   "description": "Visual Kanban board for DeepSeek Harness: Gitea and GitHub-backed tasks, workflow columns, and a dedicated agent session per task.",
   "type": "module",
   "main": "lib/index.js",