@lmzhen/dsh-evolution-skill-history 0.15.2 → 0.16.0

package/README.md

@@ -40,7 +40,11 @@ The row is **inert without a web server** (`ctx.get('webServer')`, not a declare
 
 **Preview** renders one version as a document, support files included (the body route above). Inside the diff view, **Source / Rendered** switches between the exact window the host computed and the same two sides rendered as Markdown — removed first, added second, each under a tinted edge. Block level on purpose: line-level interleaving of two rendered documents is a different, much larger problem, and the source view stays one click away. Only one row is expanded at a time (`expanded: {v, kind}`), and each kind keeps its own lazily-filled cache.
 
-While nothing is selected the pane says so — a line pointing at the left column, or the empty listing when no skill has a history yet.
+While nothing is selected the pane says so — a line pointing at the left column, or the empty listing when no skill has a history yet. **Reading and empty are different states** (E7, 2026-09-30): until the
+first list read lands the column says it is reading, and a FAILED read lands on the empty listing plus the error sentence instead of a spinner that never stops.
+
+A removed support file now shows up too: its removal is recorded as its own entry (see evolution-core's note),
+so the file's chain ends with a `support file removed` row whose undo restores the bytes.
 
 **The panel owns no rule and no arithmetic.** The host reports every row with its whole verdict — `undoable` (evolution-core's `entryTarget` classification against the live bytes), `actionKind` (a closed vocabulary key), `age` (a bucket plus a count), `charsDelta`, `summary` — **and the row's cells**: `evolution-core`'s `skill-row-cells.ts` decides what the row says, in which order and in which slot (`lead` / `meta` / `aside`), and the host ships that list with the row, because a browser half cannot import core at runtime. This half substitutes words from its locale dictionary and renders by slot, so a decision fact (`aside`) can no longer be eaten by the browser's ellipsis. The time, the action words and the sentences are therefore localized; the facts are computed once, host-side, so the panel and the slash commands cannot drift.
 

package/lib/client.js

@@ -850,6 +850,7 @@ window.__ModuleLoader__.load({
 		*/
 		function SkillHistoryPanel(face) {
 			const [skills, setSkills] = (0, react.useState)([]);
+			const [skillsLoaded, setSkillsLoaded] = (0, react.useState)(false);
 			const [selected, setSelected] = (0, react.useState)(void 0);
 			const [payload, setPayload] = (0, react.useState)(void 0);
 			const [noteText, setNoteText] = (0, react.useState)(void 0);
@@ -870,7 +871,9 @@ window.__ModuleLoader__.load({
 			};
 			/** Read the skills again, keeping the sentence: a re-read is not an answer to anything. */
 			const reloadSkills = () => {
-				face.loadSkills().then(setSkills).catch(failed);
+				face.loadSkills().then(setSkills).catch(failed).finally(() => {
+					setSkillsLoaded(true);
+				});
 			};
 			/**
 			* Show one skill's chains, keeping the sentence. A re-read that FAILS reports through the caller's
@@ -1028,9 +1031,9 @@ window.__ModuleLoader__.load({
 					}
 				})));
 			};
-			return (0, react.createElement)("div", { className: "evo-hist-root" }, (0, react.createElement)("aside", { className: "evo-hist-aside" }, searchField(face, query, setQuery), (0, react.createElement)("div", { className: "evo-hist-list" }, skills.length === 0 ? emptyState(face.t("empty.skills")) : visible.length === 0 ? emptyState(face.t("search.none")) : visible.map((skill) => skillLine(face, skill, skill.name === selected, () => {
+			return (0, react.createElement)("div", { className: "evo-hist-root" }, (0, react.createElement)("aside", { className: "evo-hist-aside" }, searchField(face, query, setQuery), (0, react.createElement)("div", { className: "evo-hist-list" }, skills.length === 0 ? emptyState(face.t(skillsLoaded ? "empty.skills" : "loading")) : visible.length === 0 ? emptyState(face.t("search.none")) : visible.map((skill) => skillLine(face, skill, skill.name === selected, () => {
 				open(skill.name);
-			})))), (0, react.createElement)("div", { className: "evo-hist-main" }, panelHead(face, refresh), notice(noteText, noteError), selected === void 0 ? [emptyState(face.t(skills.length === 0 ? "empty.skills" : "empty.pick")), (0, react.createElement)("p", {
+			})))), (0, react.createElement)("div", { className: "evo-hist-main" }, panelHead(face, refresh), notice(noteText, noteError), selected === void 0 ? [emptyState(face.t(skills.length === 0 ? skillsLoaded ? "empty.skills" : "loading" : "empty.pick")), (0, react.createElement)("p", {
 				key: "hint",
 				className: "evo-hist-hint"
 			}, face.t("hint"))] : loaded ? null : emptyState(face.t("loading")), loaded ? (0, react.createElement)("div", null, group(face.t("group.content"), payload.content, void 0), group(face.t("group.support"), payload.support, face.t("group.support.note")), payload.content.length === 0 && payload.support.length === 0 ? (0, react.createElement)("p", { className: "evo-hist-hint" }, face.t("empty.versions")) : null) : null));

package/lib/index.js

@@ -1,4 +1,4 @@
-import { contentHash, displayBodyOf, elapsedSince, errorText, latestVersionAt, partitionVersions, skillRowCells, textDiffFacts, versionActionKind, versionRowCells } from "@lmzhen/dsh-evolution-core";
+import { contentHash, displayBodyOf, elapsedSince, errorText, isLoopbackRequest, latestVersionAt, partitionVersions, readJsonObject, skillRowCells, textDiffFacts, versionActionKind, versionRowCells, writeJson } from "@lmzhen/dsh-evolution-core";
 //#region lib/types/routes.js
 /**
 * The skill-history HTTP surface: six loopback routes over the curator's read/write seam (five reads plus the one write).
@@ -22,89 +22,6 @@ const SKILL_HISTORY_ROUTES = {
 * deployment may store: a long skill arrives as its head plus `truncated`, so the reader is told.
 */
 const MAX_BODY_CHARS = 2e4;
-function header(request, name) {
-	const value = request.headers[name];
-	return typeof value === "string" ? value : void 0;
-}
-/** IPv4 127/8 predicate (four decimal octets, first == 127). */
-function isIPv4Loopback(value) {
-	const parts = value.split(".");
-	return parts.length === 4 && parts[0] === "127" && parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255);
-}
-/** Whether a socket remote address names the loopback range (127/8, ::1, IPv4-mapped). */
-function isLoopbackAddress(address) {
-	if (address === void 0) return false;
-	const normalized = address.toLowerCase();
-	if (normalized === "::1") return true;
-	if (normalized.startsWith("::ffff:")) return isIPv4Loopback(normalized.slice(7));
-	return isIPv4Loopback(normalized);
-}
-/** Whether a hostname names the loopback authority (localhost, [::1], 127/8). */
-function isLoopbackHostname(hostname) {
-	if (hostname === "localhost" || hostname === "[::1]") return true;
-	return isIPv4Loopback(hostname);
-}
-/**
-* Whether one request may enter these routes.
-*
-* The same fence the platform puts on its own /api bridge, kept local because the canonical
-* implementation (packages/client/connection/src/api-request-trust.ts) is not part of that package's
-* published surface. Rules, in order: the SOCKET must be loopback (authoritative — X-Forwarded-For is
-* never trusted), the Host header must name a loopback authority (DNS-rebinding defense), an explicit
-* cross-site marker is refused, and an attached Origin must be exactly this authority.
-* @param request - the request to judge.
-* @returns true when the request may proceed.
-*/
-function isLoopbackRequest(request) {
-	if (!isLoopbackAddress(request.socket?.remoteAddress)) return false;
-	const host = header(request, "host");
-	if (host === void 0) return false;
-	let hostUrl;
-	try {
-		hostUrl = new URL("http://" + host);
-	} catch {
-		return false;
-	}
-	if (!isLoopbackHostname(hostUrl.hostname)) return false;
-	if (header(request, "sec-fetch-site") === "cross-site") return false;
-	const origin = header(request, "origin");
-	if (origin === void 0) return true;
-	try {
-		return new URL(origin).host === hostUrl.host;
-	} catch {
-		return false;
-	}
-}
-/** Write one JSON response. The routes own their response lifecycle, so every path ends here. */
-function writeJson(res, status, value) {
-	const body = JSON.stringify(value);
-	res.writeHead(status, {
-		"content-type": "application/json; charset=utf-8",
-		"content-length": Buffer.byteLength(body)
-	});
-	res.end(body);
-}
-/**
-* Read one JSON request body, bounded.
-* @param req - the request.
-* @returns the parsed value, or null when the body is oversized, empty, or not JSON.
-*/
-async function readJsonBody(req) {
-	const chunks = [];
-	let size = 0;
-	for await (const chunk of req) {
-		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-		size += buffer.byteLength;
-		if (size > 65536) return null;
-		chunks.push(buffer);
-	}
-	if (size === 0) return null;
-	try {
-		return JSON.parse(Buffer.concat(chunks).toString("utf8"));
-	} catch {
-		return null;
-	}
-}
 /**
 * Build the four routes over the curator seam.
 * @param services - the host services the handlers read.
@@ -323,8 +240,7 @@ function makeSkillHistoryRoutes(services) {
 			path: SKILL_HISTORY_ROUTES.undo,
 			handler: async (req, res) => {
 				if (!guard(req, res, "POST")) return;
-				const body = await readJsonBody(req);
-				const payload = body !== null && typeof body === "object" && !Array.isArray(body) ? body : null;
+				const payload = await readJsonObject(req);
 				const name = typeof payload?.name === "string" ? payload.name.trim() : "";
 				if (name === "") {
 					writeJson(res, 400, {

package/lib/types/routes.d.ts

@@ -6,7 +6,6 @@
  * curator.undo. The panel never writes the skill tree itself.
  * @module @lmzhen/dsh-evolution-skill-history/routes
  */
-import type { IncomingMessage, ServerResponse } from 'node:http';
 import type { Context } from '@deepseek-ai/cordis';
 import type { WebRoute } from '@deepseek-ai/dsh-host-webserver';
 /** Route paths. The client bundle mirrors these literals; a spec asserts the two sides agree. */
@@ -18,40 +17,11 @@ export declare const SKILL_HISTORY_ROUTES: {
     readonly undo: "/api/dsh-evolution/skill-history/undo";
     readonly health: "/api/dsh-evolution/skill-history/health";
 };
-/** Largest request body these routes accept (the undo payload is a name and a number). */
-export declare const MAX_REQUEST_BODY_BYTES: number;
 /**
  * How much of one version's body the read route hands back. A bound on the ANSWER, not on what the
  * deployment may store: a long skill arrives as its head plus `truncated`, so the reader is told.
  */
 export declare const MAX_BODY_CHARS = 20000;
-/** The request facts the trust fence reads: a Node request, or the same fields in a spec fixture. */
-export interface FenceRequest {
-    readonly headers: Record<string, string | string[] | undefined>;
-    readonly socket?: {
-        readonly remoteAddress?: string | undefined;
-    } | undefined;
-}
-/**
- * Whether one request may enter these routes.
- *
- * The same fence the platform puts on its own /api bridge, kept local because the canonical
- * implementation (packages/client/connection/src/api-request-trust.ts) is not part of that package's
- * published surface. Rules, in order: the SOCKET must be loopback (authoritative — X-Forwarded-For is
- * never trusted), the Host header must name a loopback authority (DNS-rebinding defense), an explicit
- * cross-site marker is refused, and an attached Origin must be exactly this authority.
- * @param request - the request to judge.
- * @returns true when the request may proceed.
- */
-export declare function isLoopbackRequest(request: FenceRequest): boolean;
-/** Write one JSON response. The routes own their response lifecycle, so every path ends here. */
-export declare function writeJson(res: ServerResponse, status: number, value: unknown): void;
-/**
- * Read one JSON request body, bounded.
- * @param req - the request.
- * @returns the parsed value, or null when the body is oversized, empty, or not JSON.
- */
-export declare function readJsonBody(req: IncomingMessage): Promise<unknown>;
 /** The curator surface the routes read: history() and the library listing, undo() as the only write. */
 export type CuratorFace = Pick<Context['evolutionCurator'], 'history' | 'undo' | 'skills'>;
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lmzhen/dsh-evolution-skill-history",
   "description": "Web surface for skill content history: loopback host routes plus the sidebar panel (community build)",
-  "version": "0.15.2",
+  "version": "0.16.0",
   "publishConfig": {
     "access": "public"
   },
@@ -30,23 +30,23 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@lmzhen/dsh-evolution-core": "^0.15.2"
+    "@lmzhen/dsh-evolution-core": "^0.16.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/dsh-host-webserver": "^0.1.5-rc.2",
     "react": "^18.2.0",
-    "@lmzhen/dsh-evolution-curator": "^0.15.2"
+    "@lmzhen/dsh-evolution-curator": "^0.16.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/dsh-host-webserver": "^0.1.5-rc.2",
     "@types/react": "~18.3.1",
     "react": "^18.2.0",
-    "@lmzhen/dsh-evolution-core": "^0.15.2",
-    "@lmzhen/dsh-evolution-curator": "^0.15.2",
-    "@lmzhen/dsh-evolution-io": "^0.15.2",
-    "@lmzhen/dsh-evolution-io-node": "^0.15.2"
+    "@lmzhen/dsh-evolution-core": "^0.16.0",
+    "@lmzhen/dsh-evolution-curator": "^0.16.0",
+    "@lmzhen/dsh-evolution-io": "^0.16.0",
+    "@lmzhen/dsh-evolution-io-node": "^0.16.0"
   },
   "dsh": {
     "client": {