@lyhue1991/dsh-soup 0.6.0 → 0.7.0

package/lib/client/explorer-view.js

@@ -20,7 +20,7 @@ export function createExplorerView(ctx) {
   var uploadTargetDir = null
   var DETAILS_MIN = 300
   var DETAILS_MAX = 520
-  var DETAILS_DEFAULT = 360
+  var DETAILS_DEFAULT = 300
   function clampW(w) { return Math.max(DETAILS_MIN, Math.min(DETAILS_MAX, w)) }
 
   // Hook 规则安全兜底：宿主未注入 useSessions 时也必须调用恰好一个 hook，

package/lib/client/html-preview.js

@@ -7,6 +7,13 @@
 const ASSET_MAX_BYTES = 4 * 1024 * 1024
 const TOTAL_MAX_BYTES = 32 * 1024 * 1024
 const MAX_ASSETS = 64
+const IMAGE_MAX_COUNT = 64
+/** Same whitelist as the host inline-image route (host/file-view.js IMAGE_MIME). */
+const IMAGE_DATA_MIME = {
+  png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', gif: 'image/gif',
+  webp: 'image/webp', svg: 'image/svg+xml', bmp: 'image/bmp', ico: 'image/x-icon',
+}
+const CSS_URL_RE = /url\(\s*('([^']*)'|"([^"]*)"|([^)'"]*))\s*\)/gi
 
 function base64ToText(data) {
   const raw = atob(data)
@@ -27,6 +34,21 @@ function assetPath(reference) {
   return cut === -1 ? String(reference || '') : String(reference || '').slice(0, cut)
 }
 
+function imageMimeOf(reference) {
+  const match = /\.([A-Za-z0-9]+)$/.exec(assetPath(reference))
+  return match ? IMAGE_DATA_MIME[match[1].toLowerCase()] : undefined
+}
+
+function relativeKey(reference) {
+  const out = []
+  for (const segment of String(reference || '').split('/')) {
+    if (segment === '' || segment === '.') continue
+    if (segment === '..') out.pop()
+    else out.push(segment)
+  }
+  return out.join('/')
+}
+
 /** Preserve legacy WeChat document compatibility in every rendering mode. */
 export function prepareHtmlText(text) {
   let next = String(text || '')
@@ -100,7 +122,104 @@ export async function packHtmlPreview({ text, rootPath, sessionId, rpc, signal }
       assets.push({ kind, reference, text: assetText })
     } catch { /* malformed UTF-8 dependency is skipped */ }
   }
-  return { html: source, assets }
+
+  // ------------------------------------------------------------------
+  // 相对路径图片内联为 data URL。srcdoc iframe 的文档 base URL 继承宿主
+  // 应用页面，`article_files/img.jpg` 之类的相对 <img> 会被解析到应用自身
+  // 路由而 404；且沙箱（无 allow-same-origin）发出的子资源请求 Origin 为
+  // opaque，无法走 /api/dsh-soup/img 的同源校验。因此与 script/css 同路：
+  // 经 read-related（限定文档目录内）读出后内联，彻底不依赖网络解析。
+  // ------------------------------------------------------------------
+  const imageCache = new Map()
+  function loadImage(reference) {
+    let bare = assetPath(reference)
+    try { bare = decodeURIComponent(bare) } catch { /* keep raw path */ }
+    if (!imageMimeOf(bare)) return Promise.resolve(null)
+    const key = relativeKey(bare)
+    let entry = imageCache.get(key)
+    if (!entry) {
+      if (imageCache.size >= IMAGE_MAX_COUNT) return Promise.resolve(null)
+      entry = Promise.resolve(rpc('read-related', { path: rootPath, relativePath: bare, sessionId }))
+        .then((response) => {
+          if (!response?.ok || response.size > ASSET_MAX_BYTES) return null
+          const bytes = Math.ceil(response.data.length * 3 / 4)
+          if (total + bytes > TOTAL_MAX_BYTES) return null
+          total += bytes
+          return { url: 'data:' + imageMimeOf(bare) + ';base64,' + response.data, bytes }
+        })
+        .catch(() => null)
+      imageCache.set(key, entry)
+    }
+    return entry
+  }
+
+  let mutated = false
+  await Promise.all(
+    Array.from(template.content.querySelectorAll('img[src],source[src],video[poster],input[type="image"][src]'))
+      .map(async (element) => {
+        const attribute = element.localName === 'video' ? 'poster' : 'src'
+        const reference = element.getAttribute(attribute) || ''
+        if (!relativeReference(reference) || !imageMimeOf(reference)) return
+        signal.throwIfAborted?.()
+        const image = await loadImage(reference)
+        if (image) { element.setAttribute(attribute, image.url); mutated = true }
+      }),
+  )
+
+  // 响应式图片：srcset 是「url 描述符, url 描述符」列表，逐候选改写。
+  for (const element of template.content.querySelectorAll('img[srcset],source[srcset]')) {
+    signal.throwIfAborted?.()
+    const value = element.getAttribute('srcset') || ''
+    if (!value) continue
+    const parts = await Promise.all(value.split(',').map(async (part) => {
+      const trimmed = part.trim()
+      if (!trimmed) return part
+      const cut = trimmed.search(/\s/)
+      const url = cut === -1 ? trimmed : trimmed.slice(0, cut)
+      const rest = cut === -1 ? '' : trimmed.slice(cut)
+      if (!relativeReference(url)) return part
+      const image = await loadImage(url)
+      return image ? image.url + rest : part
+    }))
+    const next = parts.join(',')
+    if (next !== value) { element.setAttribute('srcset', next); mutated = true }
+  }
+
+  // 内联 <style> 与 style 属性里的相对 url(...) 背景图（仅图片扩展名）。
+  async function rewriteCssUrls(text) {
+    if (!text || String(text).indexOf('url(') === -1) return text
+    const refs = new Set()
+    for (const match of String(text).matchAll(CSS_URL_RE)) {
+      const raw = match[2] !== undefined ? match[2] : match[3] !== undefined ? match[3] : match[4]
+      const reference = String(raw || '').trim()
+      if (reference && relativeReference(reference) && imageMimeOf(reference)) refs.add(reference)
+    }
+    if (!refs.size) return text
+    const resolved = new Map()
+    for (const reference of refs) {
+      const image = await loadImage(reference)
+      if (image) resolved.set(reference, image.url)
+    }
+    if (!resolved.size) return text
+    return String(text).replace(CSS_URL_RE, (match, quote, single, double, bare) => {
+      const url = resolved.get(String(single !== undefined ? single : double !== undefined ? double : bare).trim())
+      return url ? 'url(' + url + ')' : match
+    })
+  }
+  for (const element of template.content.querySelectorAll('style')) {
+    signal.throwIfAborted?.()
+    const next = await rewriteCssUrls(element.textContent)
+    if (next !== element.textContent) { element.textContent = next; mutated = true }
+  }
+  for (const element of template.content.querySelectorAll('[style]')) {
+    signal.throwIfAborted?.()
+    const next = await rewriteCssUrls(element.getAttribute('style'))
+    if (next !== element.getAttribute('style')) { element.setAttribute('style', next); mutated = true }
+  }
+
+  // 图片已直接写入模板；仅在发生内联时回传序列化结果，
+  // 纯外链文档保持原始 srcDoc 上下文不变。
+  return { html: mutated ? template.innerHTML : source, assets }
 }
 
 /** Build the React component while retaining DSH runtime dependencies at the caller boundary. */

package/lib/client/preview-renderers.js

@@ -8,7 +8,6 @@
  * 编辑动作）由 main 经工厂参数注入；纯辅助函数同时导出供 main 复用。
  */
 
-import { hostBase } from './rpc.js'
 import { CODE_LANG_BY_EXT } from './file-icons.js'
 import { ICON_REFRESH, FILE_ICON_EDIT, FILE_ICON_PREVIEW } from './styles.js'
 
@@ -264,13 +263,16 @@ export function createPreviewRenderers(ctx) {
   var CSV_MAX_COLS = 64
 
   // ------------------------------------------------------------------
-  // Markdown 相对图片 → dsh-soup 同源 img 端点绝对 URL。
-  // 预览 markdown 时，DSH 的 MarkdownText 渲染器「禁相对链接/相对资源」，
-  // `![x](view.jpg)` 这类相对路径图片会被直接丢弃。因此把 src 改写成
-  // 本插件同名端点（GET /api/dsh-soup/img）的同源绝对地址，交给 <img>
-  // 从磁盘内联加载。绝对（http/https/data 等）与根相对路径放行不处理。
+  // Markdown 相对图片 → 官方 /api/file 文件路由词汇表（pathImages）。
+  // DSH 的 MarkdownText 渲染器只放行 http/https/mailto URL 与
+  // pathImages/fileImages 词汇表改写结果：桌面端 WebView 的页面基址是
+  // 自定义协议 dsh-app://app，把 src 改写成自家 img 端点会被
+  // sanitizeUrl 直接丢弃（alt 文本兜底）；浏览器打开时才是 http。
+  // 因此改为向 MarkdownText 提供 pathImages 词汇表：相对路径以预览
+  // 文件所在目录为基解析成绝对路径，经官方 api/file 路由（浏览器为
+  // http 同源、桌面为 dsh-app://app/api/file，均在官方白名单内，
+  // 鉴权 cookie 由协议转发器注入）返回给 <img> 加载。
   // ------------------------------------------------------------------
-  var MD_IMG_RE = /!\[([^\]]*)\]\(([^)\s]+)(?:\s+["'][^"']*["'])?\)/g
   function posixResolve(dir, rel) {
     var combined = (String(dir || '/').replace(/\/+$/, '') || '/') + '/' + String(rel)
     var out = []
@@ -281,17 +283,24 @@ export function createPreviewRenderers(ctx) {
     })
     return '/' + out.join('/')
   }
-  function imgUrl(absPath) {
-    return hostBase() + '/api/dsh-soup/img?p=' + encodeURIComponent(absPath)
-  }
-  function absolutizeMarkdownImages(text, baseDir) {
-    if (!text) return text
-    var dir = baseDir || '/'
-    return text.replace(MD_IMG_RE, function (m0, alt, src) {
-      var s = String(src || '').trim()
-      if (/^(?:[a-z][a-z0-9+.-]*:|#|\/)/i.test(s)) return m0
-      return '![' + alt + '](' + imgUrl(posixResolve(dir, s)) + ')'
-    })
+  /** pathImages.resolve：本地路径 → 官方 api/file URL；非本地路径返回 undefined。 */
+  function localPathImageUrl(baseDir, value) {
+    var raw = String(value || '')
+    // 与 DSH localPathMediaUrl 同规：剥离 ?# 后缀，URL 转义解码一次。
+    var bare = raw.split(/[?#]/)[0]
+    var decoded
+    try { decoded = decodeURIComponent(bare) } catch (e) { return undefined }
+    if (!decoded || /[\u0000-\u001f\u007f]/.test(decoded)) return undefined
+    // 协议 URL（http/https/data 等）与 UNC 路径不属于本地路径词汇表，
+    // 留给官方 imageSource 处理；Windows 盘符路径按官方例外放行。
+    if (/^[a-z][a-z\d+.-]*:/i.test(decoded) && !/^[a-z]:[\\/]/i.test(decoded)) return undefined
+    if (/^[/\\]{2}/.test(decoded)) return undefined
+    var abs = decoded.charAt(0) === '/' || /^[a-z]:[\\/]/i.test(decoded)
+      ? decoded
+      : posixResolve(baseDir || '/', decoded)
+    try {
+      return new URL('api/file?path=' + encodeURIComponent(abs), document.baseURI).href
+    } catch (e) { return undefined }
   }
 
   var MarkdownRenderBoundary = React.Component
@@ -403,7 +412,11 @@ export function createPreviewRenderers(ctx) {
     if (MarkdownText) {
       // Keep the original MarkdownText source contract visible for host integrations.
       // create(MarkdownText, { text: md })
-      var md = props.baseDir ? absolutizeMarkdownImages(text, props.baseDir) : text
+      // 相对图片经 pathImages 词汇表交给官方 api/file 路由（见 localPathImageUrl 注释）。
+      var pathImages = props.baseDir
+        ? { resolve: function (value) { return localPathImageUrl(props.baseDir, value) } }
+        : undefined
+      var md = text
       var lines = String(md || '').split(/\r?\n/)
       var chunks = []
       var normal = []
@@ -411,7 +424,7 @@ export function createPreviewRenderers(ctx) {
       function pushNormal() {
         if (!normal.length) return
         var value = normal.join('\n')
-        if (value.trim() !== '') chunks.push(create(MarkdownRenderBoundary, { key: 'md-' + chunks.length, text: value }, create(MarkdownText, { text: value })))
+        if (value.trim() !== '') chunks.push(create(MarkdownRenderBoundary, { key: 'md-' + chunks.length, text: value }, create(MarkdownText, { text: value, pathImages: pathImages })))
         normal = []
       }
       function pushTable(headerLine) {
@@ -421,7 +434,7 @@ export function createPreviewRenderers(ctx) {
         }
         var headers = splitRow(headerLine)
         var renderCell = function (cell, key) {
-          return create(MarkdownRenderBoundary, { key: key, text: cell }, create(MarkdownText, { text: cell }))
+          return create(MarkdownRenderBoundary, { key: key, text: cell }, create(MarkdownText, { text: cell, pathImages: pathImages }))
         }
         var head = create('tr', null, headers.map(function (cell, hi) {
           return create('th', { key: hi, className: 'dfv-th' }, renderCell(cell, 'th-' + hi))
@@ -808,7 +821,7 @@ export function createPreviewRenderers(ctx) {
   return {
     codeMirrorLanguage: codeMirrorLanguage,
     jsonColorNodes: jsonColorNodes,
-    absolutizeMarkdownImages: absolutizeMarkdownImages,
+    localPathImageUrl: localPathImageUrl,
     TextEditor: TextEditor,
     MarkdownPreview: MarkdownPreview,
     PdfPreview: PdfPreview,

package/lib/client.js

@@ -30734,6 +30734,18 @@
   var ASSET_MAX_BYTES = 4 * 1024 * 1024;
   var TOTAL_MAX_BYTES = 32 * 1024 * 1024;
   var MAX_ASSETS = 64;
+  var IMAGE_MAX_COUNT = 64;
+  var IMAGE_DATA_MIME = {
+    png: "image/png",
+    jpg: "image/jpeg",
+    jpeg: "image/jpeg",
+    gif: "image/gif",
+    webp: "image/webp",
+    svg: "image/svg+xml",
+    bmp: "image/bmp",
+    ico: "image/x-icon"
+  };
+  var CSS_URL_RE = /url\(\s*('([^']*)'|"([^"]*)"|([^)'"]*))\s*\)/gi;
   function base64ToText(data2) {
     const raw = atob(data2);
     const bytes = new Uint8Array(raw.length);
@@ -30747,6 +30759,19 @@
     const cut = String(reference || "").search(/[?#]/);
     return cut === -1 ? String(reference || "") : String(reference || "").slice(0, cut);
   }
+  function imageMimeOf(reference) {
+    const match = /\.([A-Za-z0-9]+)$/.exec(assetPath(reference));
+    return match ? IMAGE_DATA_MIME[match[1].toLowerCase()] : void 0;
+  }
+  function relativeKey(reference) {
+    const out = [];
+    for (const segment of String(reference || "").split("/")) {
+      if (segment === "" || segment === ".") continue;
+      if (segment === "..") out.pop();
+      else out.push(segment);
+    }
+    return out.join("/");
+  }
   function prepareHtmlText(text) {
     let next = String(text || "");
     if (next.includes("js_content") || next.includes("data-src=")) {
@@ -30814,7 +30839,100 @@
       } catch {
       }
     }
-    return { html: source, assets };
+    const imageCache = /* @__PURE__ */ new Map();
+    function loadImage(reference) {
+      let bare = assetPath(reference);
+      try {
+        bare = decodeURIComponent(bare);
+      } catch {
+      }
+      if (!imageMimeOf(bare)) return Promise.resolve(null);
+      const key = relativeKey(bare);
+      let entry = imageCache.get(key);
+      if (!entry) {
+        if (imageCache.size >= IMAGE_MAX_COUNT) return Promise.resolve(null);
+        entry = Promise.resolve(rpc("read-related", { path: rootPath, relativePath: bare, sessionId })).then((response) => {
+          if (!response?.ok || response.size > ASSET_MAX_BYTES) return null;
+          const bytes = Math.ceil(response.data.length * 3 / 4);
+          if (total + bytes > TOTAL_MAX_BYTES) return null;
+          total += bytes;
+          return { url: "data:" + imageMimeOf(bare) + ";base64," + response.data, bytes };
+        }).catch(() => null);
+        imageCache.set(key, entry);
+      }
+      return entry;
+    }
+    let mutated = false;
+    await Promise.all(
+      Array.from(template.content.querySelectorAll('img[src],source[src],video[poster],input[type="image"][src]')).map(async (element) => {
+        const attribute = element.localName === "video" ? "poster" : "src";
+        const reference = element.getAttribute(attribute) || "";
+        if (!relativeReference(reference) || !imageMimeOf(reference)) return;
+        signal.throwIfAborted?.();
+        const image = await loadImage(reference);
+        if (image) {
+          element.setAttribute(attribute, image.url);
+          mutated = true;
+        }
+      })
+    );
+    for (const element of template.content.querySelectorAll("img[srcset],source[srcset]")) {
+      signal.throwIfAborted?.();
+      const value = element.getAttribute("srcset") || "";
+      if (!value) continue;
+      const parts = await Promise.all(value.split(",").map(async (part) => {
+        const trimmed = part.trim();
+        if (!trimmed) return part;
+        const cut = trimmed.search(/\s/);
+        const url = cut === -1 ? trimmed : trimmed.slice(0, cut);
+        const rest = cut === -1 ? "" : trimmed.slice(cut);
+        if (!relativeReference(url)) return part;
+        const image = await loadImage(url);
+        return image ? image.url + rest : part;
+      }));
+      const next = parts.join(",");
+      if (next !== value) {
+        element.setAttribute("srcset", next);
+        mutated = true;
+      }
+    }
+    async function rewriteCssUrls(text2) {
+      if (!text2 || String(text2).indexOf("url(") === -1) return text2;
+      const refs = /* @__PURE__ */ new Set();
+      for (const match of String(text2).matchAll(CSS_URL_RE)) {
+        const raw = match[2] !== void 0 ? match[2] : match[3] !== void 0 ? match[3] : match[4];
+        const reference = String(raw || "").trim();
+        if (reference && relativeReference(reference) && imageMimeOf(reference)) refs.add(reference);
+      }
+      if (!refs.size) return text2;
+      const resolved = /* @__PURE__ */ new Map();
+      for (const reference of refs) {
+        const image = await loadImage(reference);
+        if (image) resolved.set(reference, image.url);
+      }
+      if (!resolved.size) return text2;
+      return String(text2).replace(CSS_URL_RE, (match, quote, single, double, bare) => {
+        const url = resolved.get(String(single !== void 0 ? single : double !== void 0 ? double : bare).trim());
+        return url ? "url(" + url + ")" : match;
+      });
+    }
+    for (const element of template.content.querySelectorAll("style")) {
+      signal.throwIfAborted?.();
+      const next = await rewriteCssUrls(element.textContent);
+      if (next !== element.textContent) {
+        element.textContent = next;
+        mutated = true;
+      }
+    }
+    for (const element of template.content.querySelectorAll("[style]")) {
+      signal.throwIfAborted?.();
+      const next = await rewriteCssUrls(element.getAttribute("style"));
+      if (next !== element.getAttribute("style")) {
+        element.setAttribute("style", next);
+        mutated = true;
+      }
+    }
+    return { html: mutated ? template.innerHTML : source, assets };
   }
   function createHtmlPreview({ React, create, rpc, translate }) {
     return function HtmlPreview(props) {
@@ -31639,7 +31757,6 @@
     }
     var CSV_MAX_ROWS = 500;
     var CSV_MAX_COLS = 64;
-    var MD_IMG_RE = /!\[([^\]]*)\]\(([^)\s]+)(?:\s+["'][^"']*["'])?\)/g;
     function posixResolve(dir, rel) {
       var combined = (String(dir || "/").replace(/\/+$/, "") || "/") + "/" + String(rel);
       var out = [];
@@ -31653,17 +31770,24 @@
       });
       return "/" + out.join("/");
     }
-    function imgUrl(absPath) {
-      return hostBase() + "/api/dsh-soup/img?p=" + encodeURIComponent(absPath);
-    }
-    function absolutizeMarkdownImages(text, baseDir) {
-      if (!text) return text;
-      var dir = baseDir || "/";
-      return text.replace(MD_IMG_RE, function(m0, alt, src) {
-        var s = String(src || "").trim();
-        if (/^(?:[a-z][a-z0-9+.-]*:|#|\/)/i.test(s)) return m0;
-        return "![" + alt + "](" + imgUrl(posixResolve(dir, s)) + ")";
-      });
+    function localPathImageUrl(baseDir, value) {
+      var raw = String(value || "");
+      var bare = raw.split(/[?#]/)[0];
+      var decoded;
+      try {
+        decoded = decodeURIComponent(bare);
+      } catch (e) {
+        return void 0;
+      }
+      if (!decoded || /[\u0000-\u001f\u007f]/.test(decoded)) return void 0;
+      if (/^[a-z][a-z\d+.-]*:/i.test(decoded) && !/^[a-z]:[\\/]/i.test(decoded)) return void 0;
+      if (/^[/\\]{2}/.test(decoded)) return void 0;
+      var abs = decoded.charAt(0) === "/" || /^[a-z]:[\\/]/i.test(decoded) ? decoded : posixResolve(baseDir || "/", decoded);
+      try {
+        return new URL("api/file?path=" + encodeURIComponent(abs), document.baseURI).href;
+      } catch (e) {
+        return void 0;
+      }
     }
     var MarkdownRenderBoundary = React.Component ? class MarkdownRenderBoundary extends React.Component {
       constructor(props) {
@@ -31785,7 +31909,7 @@
         let pushNormal = function() {
           if (!normal.length) return;
           var value = normal.join("\n");
-          if (value.trim() !== "") chunks.push(create(MarkdownRenderBoundary, { key: "md-" + chunks.length, text: value }, create(MarkdownText, { text: value })));
+          if (value.trim() !== "") chunks.push(create(MarkdownRenderBoundary, { key: "md-" + chunks.length, text: value }, create(MarkdownText, { text: value, pathImages })));
           normal = [];
         }, pushTable = function(headerLine) {
           var splitRow = function(value) {
@@ -31796,7 +31920,7 @@
           };
           var headers = splitRow(headerLine);
           var renderCell = function(cell, key) {
-            return create(MarkdownRenderBoundary, { key, text: cell }, create(MarkdownText, { text: cell }));
+            return create(MarkdownRenderBoundary, { key, text: cell }, create(MarkdownText, { text: cell, pathImages }));
           };
           var head = create("tr", null, headers.map(function(cell, hi) {
             return create("th", { key: hi, className: "dfv-th" }, renderCell(cell, "th-" + hi));
@@ -31824,7 +31948,10 @@
             )
           ));
         };
-        var md = props.baseDir ? absolutizeMarkdownImages(text, props.baseDir) : text;
+        var pathImages = props.baseDir ? { resolve: function(value) {
+          return localPathImageUrl(props.baseDir, value);
+        } } : void 0;
+        var md = text;
         var lines = String(md || "").split(/\r?\n/);
         var chunks = [];
         var normal = [];
@@ -32234,7 +32361,7 @@
     return {
       codeMirrorLanguage,
       jsonColorNodes,
-      absolutizeMarkdownImages,
+      localPathImageUrl,
       TextEditor,
       MarkdownPreview,
       PdfPreview,
@@ -33807,7 +33934,7 @@
     var uploadTargetDir = null;
     var DETAILS_MIN = 300;
     var DETAILS_MAX = 520;
-    var DETAILS_DEFAULT = 360;
+    var DETAILS_DEFAULT = 300;
     function clampW(w) {
       return Math.max(DETAILS_MIN, Math.min(DETAILS_MAX, w));
     }

package/lib/client.main.js

@@ -17,7 +17,7 @@ import { createExplorerView } from './client/explorer-view.js'
  * 布局：注册进 shell 原生的 `details` 右列（并列网格，非悬浮），
  * 有 Session log 时在它右侧放 📁；空白新会话则在输入框上方、
  * workspace/preset 控件行的右端提供同一入口。
- * 宽度对齐宿主 details 合同：默认 360px、可拖 300–520px（直接改写 shell 网格
+ * 宽度对齐宿主 details 合同：默认 300px、可拖 300–520px（直接改写 shell 网格
  * 的 details 轨，并用 MutationObserver 在 shell 重渲染后维持宽度）。
  *
  * 与宿主通信：走同源 HTTP 路由 `/api/dsh-soup`（POST JSON），

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@lyhue1991/dsh-soup",
   "description": "dsh 体验增强四件套 = Jupyter风格SideBar + 中央文件预览Tab + 多行GoalBar + 实时Token流速徽标",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "type": "module",
   "main": "lib/index.js",
   "scripts": {
     "build": "esbuild lib/client.entry.js --bundle --format=iife --platform=browser --target=es2020 --outfile=lib/client.js",
     "prepublishOnly": "npm run build",
-    "test": "npm run build && node --test test/client-goal.spec.mjs test/host.spec.mjs"
+    "test": "npm run build && node --test test/client-goal.spec.mjs test/html-preview.spec.mjs test/host.spec.mjs"
   },
   "exports": {
     ".": "./lib/index.js",
@@ -31,7 +31,8 @@
     "@lezer/highlight": "^1.0.0"
   },
   "devDependencies": {
-    "esbuild": "^0.25.12"
+    "esbuild": "^0.25.12",
+    "jsdom": "^27.0.1"
   },
   "dsh": {
     "bundle": {