@xbzbing/dsh-git-panel 0.1.1 → 0.2.0

package/lib/host/parser.d.ts

@@ -19,7 +19,14 @@ export declare function parseGraphLog(stdout: string): GraphCommit[];
 export declare function parseRefs(decoration: string): GitRef[];
 /** Parse `git for-each-ref` local/remote branch lines: `name\0shortHash\0track`. */
 export declare function parseBranches(stdout: string): GitBranch[];
-/** Parse `git show --name-status -z` file lines into stats. */
+/** Parse `git for-each-ref` tag lines: `name\0shortHash` per line. */
+export declare function parseTags(stdout: string): GitBranch[];
+/**
+ * Parse `git show --name-status -z` into stats with an explicit state machine:
+ * read a status token, then consume exactly the paths it owns (2 for R/C, 1
+ * otherwise). A malformed token stops the scan rather than silently shifting
+ * every later field, so one bad entry can't corrupt the whole list.
+ */
 export declare function parseNameStatus(stdout: string): GitFileStat[];
 /** Sum `git diff --numstat` output: { insertions, deletions }. Binary rows ("-") skipped. */
 export declare function sumNumstat(stdout: string): {

package/lib/host/types.d.ts

@@ -15,9 +15,6 @@ export type GitSnapshotResult = {
     readonly error: GitFailure;
 };
 export type GitFailure = {
-    readonly code: 'session-not-found';
-    readonly sessionId: string;
-} | {
     readonly code: 'cwd-unavailable';
     readonly sessionId: string;
 } | {
@@ -29,6 +26,8 @@ export type GitFailure = {
     readonly detail: string;
 } | {
     readonly code: 'timeout';
+} | {
+    readonly code: 'cancelled';
 };
 /** Immutable snapshot of one repository's status at `checkedAt`. */
 export interface GitSnapshot {
@@ -49,6 +48,8 @@ export interface GitSnapshot {
     readonly behind: number;
     readonly lastCommit: GitCommit | null;
     readonly changes: readonly GitChange[];
+    /** Working-tree statistics for the changes-page header (single source). */
+    readonly stats: WorktreeStats;
     /** True when the change list was capped at maxChanges. */
     readonly truncated: boolean;
     /** Polling interval the client should use after this snapshot (0 = off). */
@@ -114,7 +115,7 @@ export type GitAction = {
 } | {
     readonly kind: 'fetch';
 };
-export type GitErrorCode = 'session-not-found' | 'cwd-unavailable' | 'not-a-git-repo' | 'git-unavailable' | 'invalid-path' | 'invalid-name' | 'git-error' | 'timeout' | 'empty-message' | 'local-changes-block';
+export type GitErrorCode = 'cwd-unavailable' | 'not-a-git-repo' | 'git-unavailable' | 'invalid-path' | 'invalid-name' | 'git-error' | 'timeout' | 'cancelled' | 'empty-message' | 'local-changes-block';
 export type GitActionResult = {
     readonly ok: true;
     readonly snapshot: GitSnapshot;
@@ -153,6 +154,19 @@ export type GitQuery = {
     readonly base: 'commit';
     readonly commit: string;
     readonly context?: number;
+} | {
+    readonly kind: 'file-lines';
+    readonly path: string;
+    readonly base: 'worktree' | 'staged';
+    readonly start: number;
+    readonly end: number;
+} | {
+    readonly kind: 'file-lines';
+    readonly path: string;
+    readonly base: 'commit';
+    readonly commit: string;
+    readonly start: number;
+    readonly end: number;
 } | {
     readonly kind: 'image-diff';
     readonly path: string;
@@ -211,6 +225,12 @@ export type GitQueryResult = {
     readonly kind: 'diff';
     readonly path: string;
     readonly text: string;
+} | {
+    readonly kind: 'file-lines';
+    readonly path: string;
+    readonly start: number;
+    readonly lines: readonly string[];
+    readonly eof: boolean;
 } | {
     /**
      * Old/new images for a binary image diff, as data URLs. The sides mirror

package/lib/host/validate.d.ts

@@ -0,0 +1,10 @@
+/** A repository-relative path is safe when it stays inside the work tree. */
+export declare function isSafePath(path: string): boolean;
+/**
+ * A ref (branch / tag / commit-ish) is safe as a bare argv element: no leading
+ * `-` (would be parsed as a git option — the `--output=` file-write vector),
+ * no whitespace/control chars, no glob or rev-range metacharacters.
+ */
+export declare function isSafeRev(input: string): boolean;
+/** A branch name for `git checkout`: the ref rules plus no leading slash. */
+export declare function isSafeBranchName(name: string): boolean;

package/lib/host/version.d.ts

@@ -21,9 +21,10 @@ export declare function parseRepository(repository: unknown): {
     repo: string;
 } | undefined;
 /**
- * Compare dotted numeric versions with basic prerelease handling; returns 1
- * when a > b, -1 when a < b, 0 when equal. A release outranks a prerelease
- * sharing the same core (e.g. 0.2.0 > 0.2.0-beta.1).
+ * Compare dotted versions with prerelease handling; returns 1 when a > b, -1
+ * when a < b, 0 when equal. A release outranks a prerelease sharing the same
+ * core (0.2.0 > 0.2.0-beta.1); prerelease identifiers compare dot-segment by
+ * segment, numeric parts numerically (beta.2 > beta.1, 0.2.0-rc.10 > rc.2).
  */
 export declare function compareVersions(a: string, b: string): number;
 /** Local-only view: current version + repository URL, no network access. */
@@ -32,7 +33,8 @@ export declare function readVersionInfo(options?: {
 }): Promise<VersionInfo>;
 /**
  * Query the GitHub releases API for the latest tag and compare it to the
- * bundled version. Failures are reported through `error` instead of throwing.
+ * bundled version. Failures are reported through `error` instead of throwing;
+ * a 5s timeout bounds the call and a 10-minute memo bounds the request rate.
  */
 export declare function checkLatestVersion(options?: {
     manifestPath?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xbzbing/dsh-git-panel",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "DeepSeek Harness (dsh) plugin: an IDE-style Git panel in the Web GUI — branch/history overview, uncommitted changes with commit & amend, diff stats, and a zsh-style branch marker in the input bar.",
   "type": "module",
   "license": "MIT",
@@ -44,7 +44,7 @@
     "test:unit": "node build.mjs && node --test --test-force-exit test/unit/*.test.mjs",
     "test:e2e": "node build.mjs && node test/e2e/setup.mjs && node test/e2e/run.mjs && node test/e2e/run2.mjs",
     "test": "npm run test:unit && npm run test:e2e",
-    "check": "npm run typecheck && npm run test",
+    "check": "npm run typecheck && npm run test && git diff --exit-code -- lib/",
     "prepare": "node build.mjs"
   },
   "dsh": {