@wisdoverse/dsh-inline-media-viewer 1.0.1 → 1.0.2

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 1.0.2
+
+- Make the settings navigation and all setting copy react live to DSH's
+  English/Chinese UI language through the standard locale slot contract.
+- Add a dependency-free client registration test for both locale dictionaries
+  and the settings locale namespace.
+
 ## 1.0.1
 
 - Publish the plugin as `@wisdoverse/dsh-inline-media-viewer` for one-command
@@ -8,22 +15,22 @@
   documentation with the scoped package name.
 
 ## 1.0.0
-
-- **Initial public release.** Inline image/video/audio previews in the
-  conversation tail (`conversation.chat.turnTail` projection): any media
-  path or media URL mentioned in a chat turn renders inline under that
-  turn.
-- **Workspace-confined local reads** — a path renders only when it
-  resolves inside the calling session's workspace root (`realpath` +
-  containment; no symlink escapes).
-- **Configurable ComfyUI proxy** — media URLs on the local aliases
-  (`127.0.0.1`/`localhost` on port 8188) or on the configured server
-  address are fetched server-side from the configured origin, with
-  redirects refused, a 20 s timeout, and a 48 MiB cap.
-- **Settings page** (媒体预览 / Media preview): auto-render toggle,
-  per-turn cap (1–30), max media height (160–1200 px), ComfyUI server
-  address — persisted through the DSH settings document (loopback
-  writes).
-- **Pure helpers** in a dependency-free `lib.js` with a zero-dependency
-  unit test runner (`node test.mjs`), plus README, SECURITY, and MIT
+
+- **Initial public release.** Inline image/video/audio previews in the
+  conversation tail (`conversation.chat.turnTail` projection): any media
+  path or media URL mentioned in a chat turn renders inline under that
+  turn.
+- **Workspace-confined local reads** — a path renders only when it
+  resolves inside the calling session's workspace root (`realpath` +
+  containment; no symlink escapes).
+- **Configurable ComfyUI proxy** — media URLs on the local aliases
+  (`127.0.0.1`/`localhost` on port 8188) or on the configured server
+  address are fetched server-side from the configured origin, with
+  redirects refused, a 20 s timeout, and a 48 MiB cap.
+- **Settings page** (媒体预览 / Media preview): auto-render toggle,
+  per-turn cap (1–30), max media height (160–1200 px), ComfyUI server
+  address — persisted through the DSH settings document (loopback
+  writes).
+- **Pure helpers** in a dependency-free `lib.js` with a zero-dependency
+  unit test runner (`node test.mjs`), plus README, SECURITY, and MIT
   LICENSE.

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2025 Wisdoverse
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2025 Wisdoverse
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -97,6 +97,9 @@ through [`cordis.patch.yml`](cordis.patch.yml).
 
 Open **Settings → 媒体预览 / Media preview**.
 
+The navigation label and all setting copy follow DSH's active UI language and
+switch live between English and Chinese.
+
 | Setting | Default | Allowed values |
 | --- | --- | --- |
 | Auto-render detected media | On | On / off |

package/README.zh-CN.md

@@ -95,6 +95,8 @@ dsh plugin --profile web add @wisdoverse/dsh-inline-media-viewer
 
 打开 **设置 → 媒体预览 / Media preview**。
 
+导航名称和全部设置文案会跟随 DSH 当前界面语言，在中文与英文之间实时切换。
+
 | 设置项 | 默认值 | 可选范围 |
 | --- | --- | --- |
 | 自动渲染检测到的媒体 | 开启 | 开启 / 关闭 |

package/SECURITY.md

@@ -1,67 +1,67 @@
-# Security
-
-This plugin renders media in a user's chat. It is a **local trust helper**, not
-a security boundary: the conversation content it renders is produced by the
-same session that views it. What shipping standards demand here is that the
-plugin *cannot be turned into a wider primitive* — no arbitrary local file
-exfiltration, no arbitrary SSRF, no unbounded memory use.
-
-## Local file reads
-
-- Only the session's workspace root is readable: `realpath(cwd)` + containment
-  check (`isInside`) against the resolved target. Symlink escapes, `..`
-  traversal, and out-of-workspace paths are rejected.
-- Only known media extensions are accepted (MIME map in `lib.js`).
-- Size cap: 48 MiB per file.
-- The client must supply a valid session id; the workspace root is taken from
-  that session's header, never from client input.
-
-## Remote (ComfyUI) proxy
-
-- The fetch target is always the **configured ComfyUI origin** (default
-  `http://127.0.0.1:8188`, `comfyUrl` in the `inline-media` settings
-  namespace) — never the source host. Chat content can therefore only
-  select a path/query on a server the user configured, not an arbitrary
-  host.
-- A source URL is accepted only when its host:port is a local alias
-  (`127.0.0.1` / `localhost` on port 8188) **or** matches the configured
-  origin; everything else is rejected before any network I/O.
-- The configured address is validated to a bare `http(s)://host[:port]`
-  origin: credentials, paths, queries, hashes, and odd hostnames are
-  rejected. A non-empty invalid value fails remote reads with an explicit
-  error instead of silently retargeting; an empty value uses the built-in
-  default.
-- Settings writes are loopback-only (see below), so only the local user
-  can point the proxy at another host — a remote viewer cannot retarget it.
-- `redirect: "error"` — redirects are refused.
-- 20 s timeout, 48 MiB response cap, and the response MIME must be
-  image/video/audio.
-
-## Transport
-
-- The media channel `/inline-media/read` is registered with the DSH
-  connection service (`authority: "trusted-host"`), so it runs under the same
-  browser-trust fence and session gating as DSH's own RPC surface.
-- The client renderer never receives file system paths back — only `data:`
-  URLs — so a hostile session cannot use the channel as a file oracle for
-  paths the UI already knows.
-
-## Settings
-
-- Values are normalized client-side and validated server-side against the
-  schema (autoRender boolean; displayCap 1–30; imageMaxPx 160–1200;
-  comfyUrl string ≤ 512 chars, parsed to a bare origin at use time).
-- The settings service only writes back for **loopback** connections; remote
-  browsers are read-only, so a remote viewer cannot persist state.
-
-## Known limitations
-
-- Remote (non-loopback) browsers cannot persist settings by design (DSH
-  settings writes are loopback-only).
-- ComfyUI on a non-standard host/port: set the server address in the settings
-  page. The proxy fetches only from that configured origin, so it must be
-  reachable from the DSH host process — plain `http://` for a local install,
-  `https://` behind a TLS-terminating proxy. The loopback aliases
-  (`127.0.0.1`/`localhost` on port 8188) are always accepted as source
-  origins; editing `COMFY_HOSTS`/`COMFY_PORTS` is deliberate code surgery,
-  not a configuration surface.
+# Security
+
+This plugin renders media in a user's chat. It is a **local trust helper**, not
+a security boundary: the conversation content it renders is produced by the
+same session that views it. What shipping standards demand here is that the
+plugin *cannot be turned into a wider primitive* — no arbitrary local file
+exfiltration, no arbitrary SSRF, no unbounded memory use.
+
+## Local file reads
+
+- Only the session's workspace root is readable: `realpath(cwd)` + containment
+  check (`isInside`) against the resolved target. Symlink escapes, `..`
+  traversal, and out-of-workspace paths are rejected.
+- Only known media extensions are accepted (MIME map in `lib.js`).
+- Size cap: 48 MiB per file.
+- The client must supply a valid session id; the workspace root is taken from
+  that session's header, never from client input.
+
+## Remote (ComfyUI) proxy
+
+- The fetch target is always the **configured ComfyUI origin** (default
+  `http://127.0.0.1:8188`, `comfyUrl` in the `inline-media` settings
+  namespace) — never the source host. Chat content can therefore only
+  select a path/query on a server the user configured, not an arbitrary
+  host.
+- A source URL is accepted only when its host:port is a local alias
+  (`127.0.0.1` / `localhost` on port 8188) **or** matches the configured
+  origin; everything else is rejected before any network I/O.
+- The configured address is validated to a bare `http(s)://host[:port]`
+  origin: credentials, paths, queries, hashes, and odd hostnames are
+  rejected. A non-empty invalid value fails remote reads with an explicit
+  error instead of silently retargeting; an empty value uses the built-in
+  default.
+- Settings writes are loopback-only (see below), so only the local user
+  can point the proxy at another host — a remote viewer cannot retarget it.
+- `redirect: "error"` — redirects are refused.
+- 20 s timeout, 48 MiB response cap, and the response MIME must be
+  image/video/audio.
+
+## Transport
+
+- The media channel `/inline-media/read` is registered with the DSH
+  connection service (`authority: "trusted-host"`), so it runs under the same
+  browser-trust fence and session gating as DSH's own RPC surface.
+- The client renderer never receives file system paths back — only `data:`
+  URLs — so a hostile session cannot use the channel as a file oracle for
+  paths the UI already knows.
+
+## Settings
+
+- Values are normalized client-side and validated server-side against the
+  schema (autoRender boolean; displayCap 1–30; imageMaxPx 160–1200;
+  comfyUrl string ≤ 512 chars, parsed to a bare origin at use time).
+- The settings service only writes back for **loopback** connections; remote
+  browsers are read-only, so a remote viewer cannot persist state.
+
+## Known limitations
+
+- Remote (non-loopback) browsers cannot persist settings by design (DSH
+  settings writes are loopback-only).
+- ComfyUI on a non-standard host/port: set the server address in the settings
+  page. The proxy fetches only from that configured origin, so it must be
+  reachable from the DSH host process — plain `http://` for a local install,
+  `https://` behind a TLS-terminating proxy. The loopback aliases
+  (`127.0.0.1`/`localhost` on port 8188) are always accepted as source
+  origins; editing `COMFY_HOSTS`/`COMFY_PORTS` is deliberate code surgery,
+  not a configuration surface.