@michengai/dsh-codex-ui 0.2.76 → 0.2.78

package/dist/index.d.mts

@@ -4,6 +4,7 @@ type HostRequest = {
   method?: string;
   url?: string;
   headers?: Record<string, string | string[] | undefined>;
+  [Symbol.asyncIterator]?: () => AsyncIterator<Uint8Array | string>;
 };
 /**
  * 判断浏览器请求是否跨站。依赖安装会改写用户配置并拉起子进程，
@@ -14,8 +15,11 @@ type HostRequest = {
 declare function crossSiteRequest(request: HostRequest): boolean;
 /** 把安装错误收成可给浏览器看的文案：我们自己的中文说明保留，带本地路径的底层错误脱敏。 */
 declare function publicDependencyError(error: unknown): string;
+declare class RequestBodyTooLargeError extends Error {}
+/** 有界读取 Node HTTP body；偏好接口只接受很小的 JSON。 */
+declare function readRequestBody(request: HostRequest, maxBytes?: number): Promise<string>;
 declare const inject: string[];
 /** 提供不泄露地址、命令和凭证的连接器目录。 */
 declare function apply(ctx: Context): void;
 //#endregion
-export { apply, crossSiteRequest, inject, publicDependencyError };
+export { RequestBodyTooLargeError, apply, crossSiteRequest, inject, publicDependencyError, readRequestBody };

package/dist/index.mjs

@@ -1,8 +1,9 @@
 import { spawn } from "node:child_process";
-import { readFile, unlink, writeFile } from "node:fs/promises";
+import { mkdir, readFile, rename, rm, unlink, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
-import { resolve, sep } from "node:path";
+import { basename, dirname, join, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
+import { randomUUID } from "node:crypto";
 //#region src/dependencies.ts
 const SUITE_PACKAGE = "@michengai/dsh-codex-suite";
 const SUITE_MEMBER_PACKAGES = [
@@ -468,9 +469,75 @@ function hostServices(ctx) {
 	};
 }
 //#endregion
+//#region src/workspace-preferences.ts
+const WORKSPACE_PREFERENCES_FILE = ".dsh-codex-ui-preferences.json";
+/** Desktop 和普通 DSH Web 共用 Profile；服务换端口或重启后目录仍保持稳定。 */
+function workspacePreferencesPath(profileDir = process.env.DSH_PROFILE_DIR ?? resolve(homedir(), ".dsh", "profiles", "web")) {
+	return resolve(profileDir, WORKSPACE_PREFERENCES_FILE);
+}
+/** 严格校验来自 HTTP 或磁盘的数据，避免损坏配置被静默写回。 */
+function parsePinnedWorkspaceIds(value) {
+	if (!Array.isArray(value) || value.length > 1e3) return void 0;
+	if (!value.every((id) => typeof id === "string" && id.trim() !== "" && id.length <= 256)) return void 0;
+	return [...new Set(value)];
+}
+function parseWorkspacePreferences(value) {
+	if (value === null || typeof value !== "object") return void 0;
+	const record = value;
+	if (record.version !== 1) return void 0;
+	const pinnedWorkspaceIds = parsePinnedWorkspaceIds(record.pinnedWorkspaceIds);
+	return pinnedWorkspaceIds === void 0 ? void 0 : {
+		version: 1,
+		pinnedWorkspaceIds
+	};
+}
+async function readWorkspacePreferences(path = workspacePreferencesPath()) {
+	try {
+		const preferences = parseWorkspacePreferences(JSON.parse(await readFile(path, "utf8")));
+		if (preferences === void 0) throw new Error("置顶偏好文件格式无效。");
+		return {
+			...preferences,
+			exists: true
+		};
+	} catch (error) {
+		if (error.code === "ENOENT") return {
+			version: 1,
+			pinnedWorkspaceIds: [],
+			exists: false
+		};
+		throw error;
+	}
+}
+function temporaryPath(path) {
+	return join(dirname(path), `.${basename(path)}.${process.pid}.${randomUUID()}.tmp`);
+}
+let writeQueue = Promise.resolve();
+/** 串行、原子保存，避免快速拖动排序产生乱序或半截 JSON。 */
+function writeWorkspacePreferences(pinnedWorkspaceIds, path = workspacePreferencesPath()) {
+	const normalized = parsePinnedWorkspaceIds([...pinnedWorkspaceIds]);
+	if (normalized === void 0) return Promise.reject(/* @__PURE__ */ new Error("置顶工作区数据无效。"));
+	const task = writeQueue.catch(() => void 0).then(async () => {
+		await mkdir(dirname(path), { recursive: true });
+		const temporary = temporaryPath(path);
+		try {
+			await writeFile(temporary, `${JSON.stringify({
+				version: 1,
+				pinnedWorkspaceIds: normalized
+			}, void 0, 2)}\n`, "utf8");
+			await rename(temporary, path);
+		} finally {
+			await rm(temporary, { force: true }).catch(() => void 0);
+		}
+	});
+	writeQueue = task;
+	return task;
+}
+//#endregion
 //#region src/index.ts
 const connectorsEndpoint = "/api/michengai/codex-ui/connectors";
 const dependenciesEndpoint = "/api/michengai/codex-ui/dependencies";
+const preferencesEndpoint = "/api/michengai/codex-ui/preferences";
+const maxPreferencesBodyBytes = 32768;
 function headerValue(headers, name) {
 	const value = headers[name];
 	if (typeof value === "string") return value;
@@ -504,6 +571,22 @@ function publicDependencyError(error) {
 	if (/[A-Za-z]:[\\/]|\/(?:home|root|Users|var|tmp)\//.test(message)) return "依赖管理暂不可用，请查看服务端日志。";
 	return message;
 }
+var RequestBodyTooLargeError = class extends Error {};
+/** 有界读取 Node HTTP body；偏好接口只接受很小的 JSON。 */
+async function readRequestBody(request, maxBytes = maxPreferencesBodyBytes) {
+	const declared = Number(headerValue(request.headers ?? {}, "content-length"));
+	if (Number.isFinite(declared) && declared > maxBytes) throw new RequestBodyTooLargeError("请求体过大。");
+	if (request[Symbol.asyncIterator] === void 0) return "";
+	const chunks = [];
+	let length = 0;
+	for await (const chunk of request) {
+		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+		length += buffer.length;
+		if (length > maxBytes) throw new RequestBodyTooLargeError("请求体过大。");
+		chunks.push(buffer);
+	}
+	return Buffer.concat(chunks).toString("utf8");
+}
 const inject = [
 	"webServer",
 	"agents",
@@ -609,12 +692,86 @@ function apply(ctx) {
 				}
 			}
 		});
+		const disposePreferences = host.webServer.register({
+			kind: "exact",
+			path: preferencesEndpoint,
+			handler: async (request, response) => {
+				try {
+					if (request.method === "GET" || request.method === "HEAD") {
+						const preferences = await readWorkspacePreferences();
+						response.writeHead(200, {
+							"content-type": "application/json; charset=utf-8",
+							"cache-control": "no-store"
+						});
+						response.end(request.method === "HEAD" ? void 0 : JSON.stringify(preferences));
+						return;
+					}
+					if (request.method === "PUT") {
+						if (crossSiteRequest(request)) {
+							response.writeHead(403, {
+								"content-type": "application/json; charset=utf-8",
+								"cache-control": "no-store"
+							});
+							response.end(JSON.stringify({ error: "已拒绝跨站请求。" }));
+							return;
+						}
+						const body = JSON.parse(await readRequestBody(request));
+						const pinnedWorkspaceIds = body !== null && typeof body === "object" ? parsePinnedWorkspaceIds(body.pinnedWorkspaceIds) : void 0;
+						if (pinnedWorkspaceIds === void 0) {
+							response.writeHead(400, {
+								"content-type": "application/json; charset=utf-8",
+								"cache-control": "no-store"
+							});
+							response.end(JSON.stringify({ error: "置顶偏好格式无效。" }));
+							return;
+						}
+						await writeWorkspacePreferences(pinnedWorkspaceIds);
+						response.writeHead(200, {
+							"content-type": "application/json; charset=utf-8",
+							"cache-control": "no-store"
+						});
+						response.end(JSON.stringify({
+							version: 1,
+							pinnedWorkspaceIds,
+							exists: true
+						}));
+						return;
+					}
+					response.writeHead(405, { allow: "GET, HEAD, PUT" });
+					response.end();
+				} catch (error) {
+					if (error instanceof RequestBodyTooLargeError) {
+						response.writeHead(413, {
+							"content-type": "application/json; charset=utf-8",
+							"cache-control": "no-store"
+						});
+						response.end(JSON.stringify({ error: "请求体过大。" }));
+						return;
+					}
+					if (error instanceof SyntaxError) {
+						response.writeHead(400, {
+							"content-type": "application/json; charset=utf-8",
+							"cache-control": "no-store"
+						});
+						response.end(JSON.stringify({ error: "置顶偏好格式无效。" }));
+						return;
+					}
+					ctx.logger.warn("preferences endpoint failed: %s", error);
+					response.writeHead(503, {
+						"content-type": "application/json; charset=utf-8",
+						"cache-control": "no-store"
+					});
+					response.end(JSON.stringify({ error: "置顶偏好暂不可用。" }));
+				}
+			}
+		});
 		return () => {
 			disposeDependencyInstaller();
 			disposeConnectors();
 			disposeDependencies();
+			disposePreferences();
 		};
 	}, "michengai-codex-ui: catalogs");
 }
 //#endregion
-export { apply, crossSiteRequest, inject, publicDependencyError };
+export { RequestBodyTooLargeError, apply, crossSiteRequest, inject, publicDependencyError, readRequestBody };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-codex-ui",
-  "version": "0.2.76",
+  "version": "0.2.78",
   "description": "以 Codex 风格重构 DSH Web 侧栏的独立客户端插件",
   "license": "Apache-2.0",
   "publishConfig": {
@@ -51,6 +51,11 @@
       "platform": "web"
     }
   },
+  "scripts": {
+    "build": "tsc --noEmit && tsdown",
+    "typecheck": "tsc --noEmit",
+    "test": "pnpm run typecheck && vitest run tests/client-runtime.integration.spec.ts && tsdown && node tests/run-assertions.mjs"
+  },
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.1 <5.0.0",
     "@deepseek-ai/dsh-client-locale": ">=0.1.0-rc.0 <0.2.0",
@@ -96,10 +101,5 @@
     "tsx": "^4.22.4",
     "typescript": "^6.0.3",
     "vitest": "^4.1.8"
-  },
-  "scripts": {
-    "build": "tsc --noEmit && tsdown",
-    "typecheck": "tsc --noEmit",
-    "test": "pnpm run typecheck && vitest run tests/client-runtime.integration.spec.ts && tsdown && node tests/run-assertions.mjs"
   }
-}
+}