@lone-wolf-akela/dsh-sandboxie-redirect 0.3.2 → 0.3.4

package/CHANGELOG.md

@@ -3,6 +3,39 @@
 Notable changes per release. The format is loose; the version numbers are what
 the DSH compatibility gate reads.
 
+## 0.3.4 — 2026-10-13
+
+**`sandbox_clear` mode `status` no longer answers in `inspect`'s words**
+
+- `render` gave every action except `clear` the inspect head line, so a status
+  query read `Sandbox copies for <workspace>: 0 found.` — which looks like "this
+  workspace has no copy" when the call says nothing about copies at all. `status`
+  now has its own head, `Session projection state for <workspace>.`, above the
+  projection detail that actually carries the information.
+- `test/tool-execute.mjs` pins the rendered text of all three actions, plus the
+  empty and truncated copy lines, so the wording cannot silently fall through
+  again.
+
+## 0.3.3 — 2026-10-13
+
+**`sandbox_clear` mode `status` never worked**
+
+- `execute` referenced `workspace` in the `status` early return while the
+  `const workspace = …` that names it was declared below, in the same function
+  body. A `const` in its temporal dead zone throws on *any* earlier reference, so
+  `mode: "status"` failed on every call with `ReferenceError: Cannot access
+  'workspace' before initialization`. The declaration now precedes every use,
+  which is also what `status` was always meant to report: the canonical workspace
+  alongside the projection registry's state for the calling session.
+- The defect came in with the 0.2.1 import, so it shipped in 0.3.0, 0.3.1 and
+  0.3.2; `inspect` and `clear` were unaffected, because they use `workspace`
+  after the declaration.
+- New `test/tool-execute.mjs` drives all three modes of the real tool offline
+  (only the harness loader, the Node lookup and `spawnSync` are redirected), so
+  this — and any future runtime failure in a mode nobody exercises by hand — is a
+  failed test rather than a report from a user. It reproduces the
+  `ReferenceError` on the pre-fix source.
+
 ## 0.3.2 — 2026-10-13
 
 **DeepSeek Harness installation lookup**

package/README.md

@@ -94,7 +94,7 @@ The preset carries an icon (two overlapping sheets) in the dropdown and the bott
 
 ### The `sandbox_clear` tool
 
-In-session, `sandbox_clear` inspects or discards this workspace's copy: `mode: "inspect"` reports (file count, size), `mode: "clear"` deletes the copy and its configuration. It works in every permission mode, and can only ever touch boxes Sandboxie attributes to *this* workspace.
+In-session, `sandbox_clear` inspects or discards this workspace's copy: `mode: "inspect"` reports (file count, size), `mode: "clear"` deletes the copy and its configuration. It works in every permission mode, and can only ever touch boxes Sandboxie attributes to *this* workspace. A diagnostic `mode: "status"` reports what the session projection registry holds for the calling session — it separates "the fold never ran" from "the client never got it", so it is the first thing to look at when the title-bar box name is missing (it only actually worked from 0.3.3 on).
 
 ## Notes for users
 

package/README.zh.md

@@ -93,7 +93,7 @@ DSH 的文件工具（读/写/编辑）在盒外运行，仍按「仅工作区
 
 ### sandbox_clear 工具
 
-会话内可用 `sandbox_clear` 查看或清除本工作区的副本：`mode: "inspect"` 仅查看（文件数、占用），`mode: "clear"` 删除副本与配置。任何权限模式下都可用，且只能操作 Sandboxie 认定属于**本工作区**的沙盒。
+会话内可用 `sandbox_clear` 查看或清除本工作区的副本：`mode: "inspect"` 仅查看（文件数、占用），`mode: "clear"` 删除副本与配置。任何权限模式下都可用，且只能操作 Sandboxie 认定属于**本工作区**的沙盒。另有诊断用的 `mode: "status"`：它报告本会话投影登记的状态，用来分辨"投影没被驱动"和"客户端没收到"——标题栏的沙箱名称不显示时先看它（0.3.3 起才真正可用）。
 
 ## 用户注意事项
 

package/lib/tool.mjs

@@ -208,10 +208,18 @@ export async function apply(ctx) {
               (copy) =>
                 `- ${copy.box}: ${copy.files} file(s), ${humanBytes(copy.bytes)}${copy.truncated ? " (counting stopped early)" : ""} at ${copy.root}`
             );
-            const head =
-              value.action === "clear"
-                ? `Cleared ${value.cleared.length} sandbox copy/copies for ${value.workspace}.`
-                : `Sandbox copies for ${value.workspace}: ${value.copies.length} found.`;
+            // Every action gets its OWN head line. `status` used to fall through
+            // to the inspect wording, so a status query answered "N found." —
+            // which reads as "this workspace has no copy" when the call says
+            // nothing about copies at all; the informative part is the note.
+            let head;
+            if (value.action === "clear") {
+              head = `Cleared ${value.cleared.length} sandbox copy/copies for ${value.workspace}.`;
+            } else if (value.action === "status") {
+              head = `Session projection state for ${value.workspace}.`;
+            } else {
+              head = `Sandbox copies for ${value.workspace}: ${value.copies.length} found.`;
+            }
             return [{ type: "text", text: [head, ...lines, value.note].join("\n") }];
           }
         },
@@ -220,6 +228,13 @@ export async function apply(ctx) {
           if (typeof cwd !== "string" || cwd.length === 0) {
             throw new Error("sandbox_clear needs the calling session's workspace, and this caller has none");
           }
+          // Declared before ANY use. It used to sit below the `status` early
+          // return, inside the same function body — a temporal dead zone, so
+          // `mode: "status"` threw `ReferenceError: Cannot access 'workspace'
+          // before initialization` on every single call. test/tool-execute.mjs
+          // drives all three modes, so this class of failure is now a failed
+          // test rather than a bug report from a user.
+          const workspace = naming.canonicalWorkspace(cwd);
           if (args.mode === "status") {
             // Ask the projection registry what it holds for THIS session. The
             // header chip reads that value, so this separates "the fold never
@@ -236,7 +251,8 @@ export async function apply(ctx) {
             }
             log(`status: ${detail}`);
             return Promise.resolve({ action: "status", workspace, copies: [], cleared: [], note: detail });
-          }          const workspace = naming.canonicalWorkspace(cwd);
+          }
+
           const before = copiesFor(host, naming, workspace);
           if (before === null) {
             throw new Error(`cannot read ${host.sandboxIniPath()}, so the sandbox state is unknown; refusing to act`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lone-wolf-akela/dsh-sandboxie-redirect",
-  "version": "0.3.2",
+  "version": "0.3.4",
   "description": "DSH bundle adding a copy-on-write permission preset: shell commands run inside a per-workspace Sandboxie box, so writes outside the workspace land in the box's copy while the real disk is untouched.",
   "type": "module",
   "license": "MIT",
@@ -76,10 +76,11 @@
     }
   },
   "scripts": {
-    "test": "node test/unit.mjs && node test/sbie-locate.mjs && node test/dsh-locate.mjs && node test/host-projection.mjs && node test/validate-patch.mjs",
+    "test": "node test/unit.mjs && node test/sbie-locate.mjs && node test/dsh-locate.mjs && node test/tool-execute.mjs && node test/host-projection.mjs && node test/validate-patch.mjs",
     "test:acceptance": "node test/run-tests.mjs",
     "test:soak": "node test/soak.mjs 30",
     "test:locate": "node test/sbie-locate.mjs && node test/dsh-locate.mjs",
+    "test:tool": "node test/tool-execute.mjs",
     "validate:patch": "node test/validate-patch.mjs",
     "pack:check": "npm pack --dry-run"
   },