@michengai/dsh-codex-ui 0.2.67 → 0.2.69

package/README.md

@@ -12,6 +12,7 @@
 
   [![License: Apache-2.0](https://img.shields.io/badge/License-Apache--2.0-blue.svg)](LICENSE)
   [![npm package](https://img.shields.io/npm/v/%40michengai%2Fdsh-codex-ui.svg?label=npm%20package)](https://www.npmjs.com/package/@michengai/dsh-codex-ui)
+  [![npm downloads](https://img.shields.io/npm/dt/%40michengai%2Fdsh-codex-ui.svg?label=npm%20downloads&v=2)](https://www.npmjs.com/package/@michengai/dsh-codex-ui)
   [![DSH Web Plugin](https://img.shields.io/badge/DSH%20Web-Plugin-0f766e.svg)](https://github.com/MichengAI/dsh-codex-ui)
   [![Node.js 22 or later](https://img.shields.io/badge/Node.js-22%20or%20later-339933.svg?logo=node.js&logoColor=white)](https://nodejs.org/)
 

package/README.zh-CN.md

@@ -12,6 +12,7 @@
 
   [![许可证：Apache-2.0](https://img.shields.io/badge/许可证-Apache--2.0-blue.svg)](LICENSE)
   [![npm package](https://img.shields.io/npm/v/%40michengai%2Fdsh-codex-ui.svg?label=npm%20package)](https://www.npmjs.com/package/@michengai/dsh-codex-ui)
+  [![npm 下载量](https://img.shields.io/npm/dt/%40michengai%2Fdsh-codex-ui.svg?label=npm%20%E4%B8%8B%E8%BD%BD%E9%87%8F&v=2)](https://www.npmjs.com/package/@michengai/dsh-codex-ui)
   [![DSH Web Plugin](https://img.shields.io/badge/DSH%20Web-Plugin-0f766e.svg)](https://github.com/MichengAI/dsh-codex-ui)
   [![Node.js 22 or later](https://img.shields.io/badge/Node.js-22%20or%20later-339933.svg?logo=node.js&logoColor=white)](https://nodejs.org/)
 

package/dist/client.js

@@ -4061,18 +4061,6 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			"workspace.actions": "{name} 的项目操作",
 			"workspace.taskCount": "{count} 个任务",
 			"workspace.edit": "编辑项目",
-			"permission.read-only.title": "请求批准",
-			"permission.read-only.description": "编辑外部文件和使用互联网时始终询问",
-			"permission.read-only.trigger": "请求批准",
-			"permission.workspace-write.title": "帮我批准",
-			"permission.workspace-write.description": "仅对检测到的风险操作请求批准",
-			"permission.workspace-write.trigger": "帮我批准",
-			"permission.danger-full-access.title": "完全访问权限",
-			"permission.danger-full-access.description": "可不受限制地访问互联网和您电脑上的任何文件",
-			"permission.danger-full-access.trigger": "完全访问",
-			"permission.custom.title": "自定义",
-			"permission.custom.description": "使用当前会话的自定义权限预设",
-			"permission.custom.trigger": "自定义",
 			"sessions.close": "关闭",
 			"sessions.cancel": "取消",
 			"sessions.save": "保存",
@@ -4184,18 +4172,6 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 			"workspace.actions": "Project actions for {name}",
 			"workspace.taskCount": "{count} tasks",
 			"workspace.edit": "Edit project",
-			"permission.read-only.title": "Request approval",
-			"permission.read-only.description": "Always ask when editing external files or using the internet",
-			"permission.read-only.trigger": "Request approval",
-			"permission.workspace-write.title": "Help me approve",
-			"permission.workspace-write.description": "Only ask for detected risky operations",
-			"permission.workspace-write.trigger": "Help me approve",
-			"permission.danger-full-access.title": "Full access",
-			"permission.danger-full-access.description": "Unrestricted access to the internet and any files on your computer",
-			"permission.danger-full-access.trigger": "Full access",
-			"permission.custom.title": "Custom",
-			"permission.custom.description": "Use the current session custom permission preset",
-			"permission.custom.trigger": "Custom",
 			"sessions.close": "Close",
 			"sessions.cancel": "Cancel",
 			"sessions.save": "Save",
@@ -4264,120 +4240,39 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 		};
 		//#endregion
 		//#region src/client/permission-i18n.ts
-		const PERMISSION_I18N_STYLE = "[data-dcu-perm-title]{display:block;font-size:14px;line-height:20px;font-weight:500}[data-dcu-perm-desc]{display:block;margin-top:2px;color:var(--dcu-sidebar-secondary,#9ca39f);font-size:12px;line-height:18px;font-weight:400}button[role=menuitem][data-dcu-perm]{align-items:flex-start;height:auto;min-height:44px;padding-top:8px;padding-bottom:8px}button[data-dcu-perm=\"danger-full-access\"],button[data-dcu-perm=\"danger-full-access\"] svg,button[data-dcu-perm=\"danger-full-access\"] [data-dcu-perm-title],button[data-dcu-perm=\"danger-full-access\"] [data-dcu-perm-desc]{color:var(--dsw-alias-state-warn-label,#e3942a)}";
-		const ENGLISH_ALIASES = [
-			["Workspace Write", "workspace-write"],
-			["workspace-write", "workspace-write"],
-			["Read Only", "read-only"],
-			["read-only", "read-only"],
-			["Full access", "danger-full-access"],
-			["Full Access", "danger-full-access"],
-			["danger-full-access", "danger-full-access"],
-			["Custom", "custom"],
-			["custom", "custom"]
-		];
-		const LOCAL_ALIASES = [
-			["帮我批准", "workspace-write"],
-			["Help me approve", "workspace-write"],
-			["请求批准", "read-only"],
-			["Request approval", "read-only"],
-			["完全访问权限", "danger-full-access"],
-			["完全访问", "danger-full-access"],
-			["自定义", "custom"]
+		/**
+		* 官方已负责权限文案及布局；这里只给「完全访问权限」保留醒目的风险提示。
+		*/
+		const PERMISSION_RISK_STYLE = "button[role=menuitem][data-dcu-perm=\"danger-full-access\"],button[role=menuitem][data-dcu-perm=\"danger-full-access\"] *{color:var(--dsw-alias-state-warn-label,#e3942a)}";
+		const FULL_ACCESS_LABELS = [
+			"Full access",
+			"Full Access",
+			"danger-full-access",
+			"完全访问权限",
+			"完全访问"
 		];
-		/** 把宿主刚写上的英文权限名解析成本插件标识；英文优先于旧中文。 */
-		function permissionIdFromLabel(text) {
+		/** 不改动宿主文案，只识别完全访问权限选项以施加风险色。 */
+		function isFullAccessPermission(text) {
 			const normalized = text.trim().replace(/\s+/g, " ");
-			for (const [alias, id] of ENGLISH_ALIASES) if (normalized === alias || normalized.includes(alias)) return id;
-			for (const [alias, id] of LOCAL_ALIASES) if (normalized === alias || normalized.includes(alias)) return id;
-		}
-		/** 把夹在中文确认框里的 Full access 换成当前语言名称。 */
-		function replaceFullAccessLabel(text, localized) {
-			if (localized === "Full access") return text;
-			return text.replaceAll("Full access", ` ${localized} `).replaceAll("Full Access", ` ${localized} `).replace(/ {2,}/g, " ").replace(/ ([？?。，,！!])/g, "$1").trim();
-		}
-		function replaceEmbeddedFullAccess(root, localized) {
-			if (typeof document === "undefined" || localized === "Full access") return 0;
-			const doc = root instanceof Document ? root : root.ownerDocument;
-			if (doc === null) return 0;
-			const walker = doc.createTreeWalker(root, NodeFilter.SHOW_TEXT);
-			let changed = 0;
-			let node = walker.nextNode();
-			while (node !== null) {
-				const value = node.nodeValue;
-				if (value !== null && (value.includes("Full access") || value.includes("Full Access"))) {
-					node.nodeValue = replaceFullAccessLabel(value, localized);
-					changed += 1;
-				}
-				node = walker.nextNode();
-			}
-			return changed;
-		}
-		function permissionCopy(id, t) {
-			return {
-				title: t(`permission.${id}.title`),
-				description: t(`permission.${id}.description`),
-				trigger: t(`permission.${id}.trigger`)
-			};
-		}
-		function leafTextSpans(root) {
-			return [...root.querySelectorAll("span")].filter((span) => span.childElementCount === 0 && (span.textContent ?? "").trim() !== "");
-		}
-		function visibleText(root) {
-			return (root.textContent ?? "").replace(/\s+/g, " ").trim();
-		}
-		function applyCopy(label, copy, asTrigger) {
-			const title = asTrigger ? copy.trigger : copy.title;
-			let titleNode = label.querySelector("[data-dcu-perm-title]");
-			let descNode = label.querySelector("[data-dcu-perm-desc]");
-			if (titleNode === null) {
-				label.textContent = "";
-				titleNode = label.ownerDocument.createElement("span");
-				titleNode.setAttribute("data-dcu-perm-title", "1");
-				label.append(titleNode);
-			}
-			if (titleNode.textContent !== title) titleNode.textContent = title;
-			if (asTrigger) {
-				descNode?.remove();
-				return;
-			}
-			if (descNode === null) {
-				descNode = label.ownerDocument.createElement("span");
-				descNode.setAttribute("data-dcu-perm-desc", "1");
-				label.append(descNode);
-			}
-			if (descNode.textContent !== copy.description) descNode.textContent = copy.description;
+			return FULL_ACCESS_LABELS.some((label) => normalized === label || normalized.includes(label));
 		}
-		/** 把当前文档里的权限选择器改成当前语言的 Codex 文案。 */
-		function localizePermissionMenus(root, t) {
+		function markFullAccessPermissionMenus(root) {
 			let changed = 0;
-			for (const button of root.querySelectorAll("button")) {
-				const menuitem = button.getAttribute("role") === "menuitem";
-				const marked = button.getAttribute("data-dcu-perm");
-				const spans = leafTextSpans(button);
-				const id = permissionIdFromLabel(visibleText(button)) ?? marked ?? void 0;
-				if (id === void 0) continue;
-				const label = button.querySelector("[data-dcu-perm-title]")?.parentElement ?? spans[0];
-				if (label === void 0) continue;
-				const copy = permissionCopy(id, t);
-				const nextTitle = menuitem ? copy.title : copy.trigger;
-				const titleNode = label.querySelector("[data-dcu-perm-title]");
-				const descNode = label.querySelector("[data-dcu-perm-desc]");
-				if (marked === id && titleNode?.textContent === nextTitle && (menuitem ? descNode?.textContent === copy.description : descNode === null)) continue;
-				button.setAttribute("data-dcu-perm", id);
-				applyCopy(label, copy, !menuitem);
+			for (const button of root.querySelectorAll("button[role=\"menuitem\"]")) {
+				if (!isFullAccessPermission((button.textContent ?? "").replace(/\s+/g, " "))) continue;
+				if (button.getAttribute("data-dcu-perm") === "danger-full-access") continue;
+				button.setAttribute("data-dcu-perm", "danger-full-access");
 				changed += 1;
 			}
-			changed += replaceEmbeddedFullAccess(root, t("permission.danger-full-access.trigger"));
 			return changed;
 		}
-		function observePermissionMenus(t) {
+		function observePermissionMenus() {
 			if (typeof document === "undefined") return () => {};
-			const styleId = "dcu-permission-i18n";
+			const styleId = "dcu-permission-risk";
 			if (document.getElementById(styleId) === null) {
 				const style = document.createElement("style");
 				style.id = styleId;
-				style.textContent = PERMISSION_I18N_STYLE;
+				style.textContent = PERMISSION_RISK_STYLE;
 				document.head.append(style);
 			}
 			let applying = false;
@@ -4386,7 +4281,7 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 				if (applying) return;
 				applying = true;
 				try {
-					localizePermissionMenus(document, t);
+					markFullAccessPermissionMenus(document);
 				} finally {
 					applying = false;
 				}
@@ -4796,7 +4691,7 @@ header [data-dcu-title-folder] svg,header [data-dcu-title-more] svg{display:bloc
 				en
 			}), "michengai-codex-ui: dictionaries");
 			const t = ctx.locale.bind(NS);
-			ctx.effect(() => observePermissionMenus((key) => t(key)), "michengai-codex-ui: permission i18n");
+			ctx.effect(() => observePermissionMenus(), "michengai-codex-ui: permission risk highlight");
 			ctx.effect(() => observeSlimSidebar(), "michengai-codex-ui: slim sidebar");
 			ctx.effect(() => observeSettingsNavIcons(), "michengai-codex-ui: settings nav icons");
 			ctx.effect(() => observeConversationHeader(), "michengai-codex-ui: conversation header");

package/dist/index.mjs

@@ -333,16 +333,16 @@ function runDshPlugin(args) {
 /** 并发安装互斥：pnpm 锁文件竞争会触发 EPERM/EBUSY，同一时间只允许一个安装进程。 */
 let installing = false;
 /** 仅允许安装固定依赖，避免把浏览器输入转成任意命令。 */
-async function installDependency(id) {
+async function installDependency(id, requestHotUpdate = requestDesktopHotUpdate) {
 	if (installing) throw new Error("已有依赖安装正在进行，请等待完成后再试。");
 	installing = true;
 	try {
-		return await installDependencyLocked(id);
+		return await installDependencyLocked(id, requestHotUpdate);
 	} finally {
 		installing = false;
 	}
 }
-async function installDependencyLocked(id) {
+async function installDependencyLocked(id, requestHotUpdate) {
 	const dependency = managedDependency(id);
 	if (dependency === void 0) throw new Error("不支持安装该依赖。");
 	const latestVersion = await npmLatestVersion(dependency.packageName);
@@ -356,7 +356,7 @@ async function installDependencyLocked(id) {
 	await ensureLatestReleaseAllowed(target, targetVersion);
 	if (!isOfficialRuntimePackage(target)) await recordDeclaredVersion(target, targetVersion);
 	await recordPendingUpdate(target, targetVersion);
-	if (requestDesktopHotUpdate()) return dependencyStatuses();
+	if (requestHotUpdate()) return dependencyStatuses();
 	try {
 		await runDshPlugin([
 			"add",
@@ -497,7 +497,11 @@ function apply(ctx) {
 							response.end(JSON.stringify({ error: "已拒绝跨站请求。" }));
 							return;
 						}
-						const dependencies = await installDependency(url.searchParams.get("dependency"));
+						let restartAfterResponse = false;
+						const dependencies = await installDependency(url.searchParams.get("dependency"), () => {
+							restartAfterResponse = typeof process.send === "function";
+							return restartAfterResponse;
+						});
 						response.writeHead(200, {
 							"content-type": "application/json; charset=utf-8",
 							"cache-control": "no-store"
@@ -506,6 +510,9 @@ function apply(ctx) {
 							dependencies,
 							restartRequired: true
 						}));
+						if (restartAfterResponse) setTimeout(() => {
+							requestDesktopHotUpdate();
+						}, 150).unref?.();
 						return;
 					}
 					response.writeHead(405);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-codex-ui",
-  "version": "0.2.67",
+  "version": "0.2.69",
   "description": "以 Codex 风格重构 DSH Web 侧栏的独立客户端插件",
   "license": "Apache-2.0",
   "publishConfig": {