@lijian-ui/dsh-file-manager 0.2.2 → 0.2.4

package/src/core/types.ts

@@ -1,162 +1,162 @@
-/**
- * Wire vocabulary shared by the host data services and the browser client:
- * the request/response shapes of the /filemgr/* routes and the stable
- * error codes the client maps onto copy. Pure types — no runtime code.
- *
- * The design follows FileManager's right-panel system (Apache-2.0, re-implemented
- * from measured behavior, not copied code): the explorer column is a lazy
- * directory tree, the preview column opens files as tabs, and the SCM tab
- * reads the repository's real working-tree state.
- * @module dsh-filemgr/core/types
- */
-
-/** Envelope every /filemgr JSON response carries. */
-export type PanelEnvelope<T> =
-  | { ok: true; value: T }
-  | { ok: false; error: PanelError }
-
-/** Stable rejection codes (host-authored; the client prefers its own copy by code). */
-export type PanelErrorCode =
-  | 'workspace-unknown'
-  | 'path-outside-root'
-  | 'not-found'
-  | 'is-directory'
-  | 'read-failed'
-  | 'write-conflict'
-  | 'write-failed'
-  | 'search-failed'
-  | 'git-unavailable'
-  | 'git-failed'
-  | 'internal'
-
-/** One rejection with a human-readable host message. */
-export interface PanelError {
-  code: PanelErrorCode
-  message: string
-}
-
-/** One filesystem entry in a directory listing (path is relative to the root). */
-export interface FsEntry {
-  /** Display name (basename). */
-  name: string
-  /** Path relative to the project root, '/' separated; '' is the root itself. */
-  path: string
-  isDir: boolean
-  /** Size in bytes (0 for directories). */
-  size: number
-  /** Last-modified epoch millis (0 for directories). */
-  mtime: number
-}
-
-/** The listing of one directory. */
-export interface DirListing {
-  /** Canonical root path the listing is relative to. */
-  root: string
-  /** Sorted entries (directories first, then files, both case-insensitive alpha). */
-  entries: FsEntry[]
-  /** True when the entry count was capped at MAX_ENTRIES (a giant flat dir). */
-  truncated: boolean
-}
-
-/** The result of reading one file for preview. */
-export interface FileRead {
-  /** Text content (decoded utf-8), or a data URL for image kinds. */
-  content: string
-  /** True when the text was truncated at the preview ceiling. */
-  truncated: boolean
-  /** Total size in bytes. */
-  size: number
-  /** Last-modified epoch millis (the write-conflict base). */
-  mtime: number
-  /** Image dimensions when the file is an image (host decodes via probe). */
-  image?: { width: number; height: number }
-}
-
-/** One filename-search hit. */
-export interface SearchHit {
-  /** Path relative to the root. */
-  path: string
-  /** Display name (basename). */
-  name: string
-  isDir: boolean
-}
-
-/** The filename-search result. */
-export interface SearchView {
-  /** The query the hits were ranked for. */
-  query: string
-  hits: SearchHit[]
-  /** True when the hit cap cut the result stream. */
-  truncated: boolean
-}
-
-/** Working-tree state of one change row. */
-export type GitFileState = 'created' | 'modified' | 'deleted' | 'renamed' | 'conflicted' | 'untracked' | 'unknown'
-
-/** One change row in a git status. */
-export interface GitChangeRow {
-  /** Path relative to the repo root. */
-  path: string
-  /** Original path for renames (old -> new). */
-  oldPath?: string
-  state: GitFileState
-  /** True when the change sits in the index (staged). */
-  staged: boolean
-}
-
-/** The git status view of one repo root. */
-export interface GitStatusView {
-  /** Repo root (git rev-parse --show-toplevel). */
-  root: string
-  /** Current branch name; '' when detached. */
-  branch: string
-  /** Staged changes (index vs HEAD). */
-  staged: GitChangeRow[]
-  /** Unstaged changes (worktree vs index). */
-  unstaged: GitChangeRow[]
-  /** Untracked files (worktree, not in index). */
-  untracked: GitChangeRow[]
-}
-
-/** The result of a stage/unstage/discard batch. */
-export interface GitBatchResult {
-  /** Rows the operation actually changed (post-op status snapshot for these paths). */
-  applied: string[]
-  /** Paths the host refused to touch. */
-  failed: string[]
-}
-
-/** One preview tab identity as persisted. */
-export interface PreviewTabMeta {
-  /** Stable tab id (root + path + type). */
-  id: string
-  /** Display title (basename). */
-  title: string
-  /** Project root the file belongs to. */
-  root: string
-  /** File path relative to the root. */
-  path: string
-  contentType: PreviewContentType
-  /** Whether the tab carries unsaved edits. */
-  dirty?: boolean
-  /** Last write timestamp the tab's content was based on (conflict base). */
-  mtime?: number
-  /** When the tab was last touched (LRU ordering within a scope). */
-  savedAt: number
-}
-
-/** Preview content kinds the panel can render. */
-export type PreviewContentType =
-  | 'markdown'
-  | 'html'
-  | 'code'
-  | 'diff'
-  | 'csv'
-  | 'pdf'
-  | 'word'
-  | 'excel'
-  | 'ppt'
-  | 'image'
-  | 'text'
-  | 'url'
-  | 'unsupported'
+/**
+ * Wire vocabulary shared by the host data services and the browser client:
+ * the request/response shapes of the /filemgr/* routes and the stable
+ * error codes the client maps onto copy. Pure types — no runtime code.
+ *
+ * The design follows FileManager's right-panel system (Apache-2.0, re-implemented
+ * from measured behavior, not copied code): the explorer column is a lazy
+ * directory tree, the preview column opens files as tabs, and the SCM tab
+ * reads the repository's real working-tree state.
+ * @module dsh-filemgr/core/types
+ */
+
+/** Envelope every /filemgr JSON response carries. */
+export type PanelEnvelope<T> =
+  | { ok: true; value: T }
+  | { ok: false; error: PanelError }
+
+/** Stable rejection codes (host-authored; the client prefers its own copy by code). */
+export type PanelErrorCode =
+  | 'workspace-unknown'
+  | 'path-outside-root'
+  | 'not-found'
+  | 'is-directory'
+  | 'read-failed'
+  | 'write-conflict'
+  | 'write-failed'
+  | 'search-failed'
+  | 'git-unavailable'
+  | 'git-failed'
+  | 'internal'
+
+/** One rejection with a human-readable host message. */
+export interface PanelError {
+  code: PanelErrorCode
+  message: string
+}
+
+/** One filesystem entry in a directory listing (path is relative to the root). */
+export interface FsEntry {
+  /** Display name (basename). */
+  name: string
+  /** Path relative to the project root, '/' separated; '' is the root itself. */
+  path: string
+  isDir: boolean
+  /** Size in bytes (0 for directories). */
+  size: number
+  /** Last-modified epoch millis (0 for directories). */
+  mtime: number
+}
+
+/** The listing of one directory. */
+export interface DirListing {
+  /** Canonical root path the listing is relative to. */
+  root: string
+  /** Sorted entries (directories first, then files, both case-insensitive alpha). */
+  entries: FsEntry[]
+  /** True when the entry count was capped at MAX_ENTRIES (a giant flat dir). */
+  truncated: boolean
+}
+
+/** The result of reading one file for preview. */
+export interface FileRead {
+  /** Text content (decoded utf-8), or a data URL for image kinds. */
+  content: string
+  /** True when the text was truncated at the preview ceiling. */
+  truncated: boolean
+  /** Total size in bytes. */
+  size: number
+  /** Last-modified epoch millis (the write-conflict base). */
+  mtime: number
+  /** Image dimensions when the file is an image (host decodes via probe). */
+  image?: { width: number; height: number }
+}
+
+/** One filename-search hit. */
+export interface SearchHit {
+  /** Path relative to the root. */
+  path: string
+  /** Display name (basename). */
+  name: string
+  isDir: boolean
+}
+
+/** The filename-search result. */
+export interface SearchView {
+  /** The query the hits were ranked for. */
+  query: string
+  hits: SearchHit[]
+  /** True when the hit cap cut the result stream. */
+  truncated: boolean
+}
+
+/** Working-tree state of one change row. */
+export type GitFileState = 'created' | 'modified' | 'deleted' | 'renamed' | 'conflicted' | 'untracked' | 'unknown'
+
+/** One change row in a git status. */
+export interface GitChangeRow {
+  /** Path relative to the repo root. */
+  path: string
+  /** Original path for renames (old -> new). */
+  oldPath?: string
+  state: GitFileState
+  /** True when the change sits in the index (staged). */
+  staged: boolean
+}
+
+/** The git status view of one repo root. */
+export interface GitStatusView {
+  /** Repo root (git rev-parse --show-toplevel). */
+  root: string
+  /** Current branch name; '' when detached. */
+  branch: string
+  /** Staged changes (index vs HEAD). */
+  staged: GitChangeRow[]
+  /** Unstaged changes (worktree vs index). */
+  unstaged: GitChangeRow[]
+  /** Untracked files (worktree, not in index). */
+  untracked: GitChangeRow[]
+}
+
+/** The result of a stage/unstage/discard batch. */
+export interface GitBatchResult {
+  /** Rows the operation actually changed (post-op status snapshot for these paths). */
+  applied: string[]
+  /** Paths the host refused to touch. */
+  failed: string[]
+}
+
+/** One preview tab identity as persisted. */
+export interface PreviewTabMeta {
+  /** Stable tab id (root + path + type). */
+  id: string
+  /** Display title (basename). */
+  title: string
+  /** Project root the file belongs to. */
+  root: string
+  /** File path relative to the root. */
+  path: string
+  contentType: PreviewContentType
+  /** Whether the tab carries unsaved edits. */
+  dirty?: boolean
+  /** Last write timestamp the tab's content was based on (conflict base). */
+  mtime?: number
+  /** When the tab was last touched (LRU ordering within a scope). */
+  savedAt: number
+}
+
+/** Preview content kinds the panel can render. */
+export type PreviewContentType =
+  | 'markdown'
+  | 'html'
+  | 'code'
+  | 'diff'
+  | 'csv'
+  | 'pdf'
+  | 'word'
+  | 'excel'
+  | 'ppt'
+  | 'image'
+  | 'text'
+  | 'url'
+  | 'unsupported'

package/src/host/fs-service.ts

@@ -18,7 +18,7 @@
 
 import { open, readdir, readFile, realpath, rename as renameFile, stat, writeFile, rm, mkdir } from 'node:fs/promises'
 import type { Dirent } from 'node:fs'
-import { join, dirname, relative } from 'node:path'
+import { join, dirname, relative, basename } from 'node:path'
 import type { DirListing, FileRead, FsEntry, PanelError, SearchHit, SearchView } from '../core/types.ts'
 import { isPathInside, type GateVerdict, type WorkspaceGate } from './gate.ts'
 
@@ -156,6 +156,12 @@ function mimeByExtension(rel: string): string | undefined {
     png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', gif: 'image/gif',
     webp: 'image/webp', svg: 'image/svg+xml', ico: 'image/x-icon', avif: 'image/avif', bmp: 'image/bmp',
     pdf: 'application/pdf',
+    doc: 'application/msword',
+    docx: 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    xls: 'application/vnd.ms-excel',
+    xlsx: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    ppt: 'application/vnd.ms-powerpoint',
+    pptx: 'application/vnd.openxmlformats-officedocument.presentationml.presentation',
   }
   return byExt[ext]
 }

package/src/host/gate.ts

@@ -1,74 +1,74 @@
-/**
- * Workspace gate for the /filemgr routes: canonicalize the requested
- * project root and require it to be a registered workspace (or a directory
- * inside one). This is the security boundary of the panel's fs/git routes -
- * the browser may only read and mutate files under registered workspace
- * roots, never arbitrary host directories.
- * @module dsh-filemgr/host/gate
- */
-
-import { realpath } from 'node:fs/promises'
-import type { Context } from '@deepseek-ai/cordis'
-import type {} from '@deepseek-ai/dsh-workspace'
-import type { PanelError } from '../core/types.ts'
-
-/** The gate verdict for one project root. */
-export type GateVerdict = { ok: true; canonical: string } | { ok: false; error: PanelError }
-
-/** The workspace-membership check the services run on every request. */
-export type WorkspaceGate = (root: string) => Promise<GateVerdict>
-
-/**
- * Normalize a path for prefix comparison: collapse Windows separators to `/`
- * and drop any trailing slash. On win32 the whole path is also lower-cased so
- * a case-insensitive FS cannot trip the membership check (the drive letter and
- * every segment are compared case-insensitively). On any other platform the
- * path separator and case are left untouched.
- */
-export function normalizeForPrefix(value: string): string {
-  const normalized = value.replaceAll('\\', '/').replace(/\/+$/, '')
-  return process.platform === 'win32' ? normalized.toLowerCase() : normalized
-}
-
-/**
- * The canonical prefix check: child must live inside (or equal) the root.
- * Separator- and case-robust on Windows: `path.join` yields backslashes while
- * git (`rev-parse --show-toplevel`) and the browser (`./x`) yield forward
- * slashes, so both sides are normalized to forward slashes before comparing,
- * and the comparison is case-insensitive on win32 (the FS is case-insensitive).
- */
-export function isPathInside(root: string, child: string): boolean {
-  if (root === '' || child === '') return false
-  const normRoot = normalizeForPrefix(root)
-  const normChild = normalizeForPrefix(child)
-  if (normChild === normRoot) return true
-  return normChild.startsWith(`${normRoot}/`)
-}
-
-/**
- * Production gate: canonicalize the requested root and require it to be a
- * registered workspace path (or a subdirectory of one). The host's workspace
- * registry owns canonicalization, so an unowned path is rejected outright.
- * @param ctx - context carrying the workspace service.
- * @returns the gate.
- */
-export function createWorkspaceGate(ctx: Context): WorkspaceGate {
-  return async (root) => {
-    if (typeof root !== 'string' || root === '') {
-      return { ok: false, error: { code: 'workspace-unknown', message: 'empty project root' } }
-    }
-    let canonical: string
-    try {
-      canonical = await realpath(root)
-    } catch {
-      return { ok: false, error: { code: 'workspace-unknown', message: 'path does not resolve on disk' } }
-    }
-    const workspaces = ctx.workspaceRegistry.list()
-    for (const workspace of workspaces) {
-      if (isPathInside(workspace.path, canonical)) {
-        return { ok: true, canonical }
-      }
-    }
-    return { ok: false, error: { code: 'workspace-unknown', message: 'path is not inside a registered workspace' } }
-  }
+/**
+ * Workspace gate for the /filemgr routes: canonicalize the requested
+ * project root and require it to be a registered workspace (or a directory
+ * inside one). This is the security boundary of the panel's fs/git routes -
+ * the browser may only read and mutate files under registered workspace
+ * roots, never arbitrary host directories.
+ * @module dsh-filemgr/host/gate
+ */
+
+import { realpath } from 'node:fs/promises'
+import type { Context } from '@deepseek-ai/cordis'
+import type {} from '@deepseek-ai/dsh-workspace'
+import type { PanelError } from '../core/types.ts'
+
+/** The gate verdict for one project root. */
+export type GateVerdict = { ok: true; canonical: string } | { ok: false; error: PanelError }
+
+/** The workspace-membership check the services run on every request. */
+export type WorkspaceGate = (root: string) => Promise<GateVerdict>
+
+/**
+ * Normalize a path for prefix comparison: collapse Windows separators to `/`
+ * and drop any trailing slash. On win32 the whole path is also lower-cased so
+ * a case-insensitive FS cannot trip the membership check (the drive letter and
+ * every segment are compared case-insensitively). On any other platform the
+ * path separator and case are left untouched.
+ */
+export function normalizeForPrefix(value: string): string {
+  const normalized = value.replaceAll('\\', '/').replace(/\/+$/, '')
+  return process.platform === 'win32' ? normalized.toLowerCase() : normalized
+}
+
+/**
+ * The canonical prefix check: child must live inside (or equal) the root.
+ * Separator- and case-robust on Windows: `path.join` yields backslashes while
+ * git (`rev-parse --show-toplevel`) and the browser (`./x`) yield forward
+ * slashes, so both sides are normalized to forward slashes before comparing,
+ * and the comparison is case-insensitive on win32 (the FS is case-insensitive).
+ */
+export function isPathInside(root: string, child: string): boolean {
+  if (root === '' || child === '') return false
+  const normRoot = normalizeForPrefix(root)
+  const normChild = normalizeForPrefix(child)
+  if (normChild === normRoot) return true
+  return normChild.startsWith(`${normRoot}/`)
+}
+
+/**
+ * Production gate: canonicalize the requested root and require it to be a
+ * registered workspace path (or a subdirectory of one). The host's workspace
+ * registry owns canonicalization, so an unowned path is rejected outright.
+ * @param ctx - context carrying the workspace service.
+ * @returns the gate.
+ */
+export function createWorkspaceGate(ctx: Context): WorkspaceGate {
+  return async (root) => {
+    if (typeof root !== 'string' || root === '') {
+      return { ok: false, error: { code: 'workspace-unknown', message: 'empty project root' } }
+    }
+    let canonical: string
+    try {
+      canonical = await realpath(root)
+    } catch {
+      return { ok: false, error: { code: 'workspace-unknown', message: 'path does not resolve on disk' } }
+    }
+    const workspaces = ctx.workspaceRegistry.list()
+    for (const workspace of workspaces) {
+      if (isPathInside(workspace.path, canonical)) {
+        return { ok: true, canonical }
+      }
+    }
+    return { ok: false, error: { code: 'workspace-unknown', message: 'path is not inside a registered workspace' } }
+  }
 }