@xbzbing/dsh-git-panel 0.1.1 → 0.3.0

package/lib/host/parser.d.ts

@@ -19,7 +19,14 @@ export declare function parseGraphLog(stdout: string): GraphCommit[];
 export declare function parseRefs(decoration: string): GitRef[];
 /** Parse `git for-each-ref` local/remote branch lines: `name\0shortHash\0track`. */
 export declare function parseBranches(stdout: string): GitBranch[];
-/** Parse `git show --name-status -z` file lines into stats. */
+/** Parse `git for-each-ref` tag lines: `name\0shortHash` per line. */
+export declare function parseTags(stdout: string): GitBranch[];
+/**
+ * Parse `git show --name-status -z` into stats with an explicit state machine:
+ * read a status token, then consume exactly the paths it owns (2 for R/C, 1
+ * otherwise). A malformed token stops the scan rather than silently shifting
+ * every later field, so one bad entry can't corrupt the whole list.
+ */
 export declare function parseNameStatus(stdout: string): GitFileStat[];
 /** Sum `git diff --numstat` output: { insertions, deletions }. Binary rows ("-") skipped. */
 export declare function sumNumstat(stdout: string): {

package/lib/host/types.d.ts

@@ -3,6 +3,8 @@
  * The client half (src/client/rpc.ts) reuses these types directly, so the
  * wire contract has a single definition and cannot drift.
  */
+/** Diff layout: `unified` = single inline column, `split` = side-by-side. */
+export type DiffViewMode = 'unified' | 'split';
 /** Wire request: the browser sends only session identity, never a path. */
 export interface GitSnapshotRequest {
     readonly sessionId: string;
@@ -15,9 +17,6 @@ export type GitSnapshotResult = {
     readonly error: GitFailure;
 };
 export type GitFailure = {
-    readonly code: 'session-not-found';
-    readonly sessionId: string;
-} | {
     readonly code: 'cwd-unavailable';
     readonly sessionId: string;
 } | {
@@ -29,6 +28,8 @@ export type GitFailure = {
     readonly detail: string;
 } | {
     readonly code: 'timeout';
+} | {
+    readonly code: 'cancelled';
 };
 /** Immutable snapshot of one repository's status at `checkedAt`. */
 export interface GitSnapshot {
@@ -49,12 +50,16 @@ export interface GitSnapshot {
     readonly behind: number;
     readonly lastCommit: GitCommit | null;
     readonly changes: readonly GitChange[];
+    /** Working-tree statistics for the changes-page header (single source). */
+    readonly stats: WorktreeStats;
     /** True when the change list was capped at maxChanges. */
     readonly truncated: boolean;
     /** Polling interval the client should use after this snapshot (0 = off). */
     readonly refreshIntervalMs: number;
     /** Whether the input-bar git marker pill should render (user preference). */
     readonly showInputPill: boolean;
+    /** Default diff layout the views open with (user preference). */
+    readonly defaultDiffView: DiffViewMode;
     /** Epoch millis of the snapshot. */
     readonly checkedAt: number;
 }
@@ -114,7 +119,7 @@ export type GitAction = {
 } | {
     readonly kind: 'fetch';
 };
-export type GitErrorCode = 'session-not-found' | 'cwd-unavailable' | 'not-a-git-repo' | 'git-unavailable' | 'invalid-path' | 'invalid-name' | 'git-error' | 'timeout' | 'empty-message' | 'local-changes-block';
+export type GitErrorCode = 'cwd-unavailable' | 'not-a-git-repo' | 'git-unavailable' | 'invalid-path' | 'invalid-name' | 'git-error' | 'timeout' | 'cancelled' | 'empty-message' | 'local-changes-block';
 export type GitActionResult = {
     readonly ok: true;
     readonly snapshot: GitSnapshot;
@@ -153,6 +158,19 @@ export type GitQuery = {
     readonly base: 'commit';
     readonly commit: string;
     readonly context?: number;
+} | {
+    readonly kind: 'file-lines';
+    readonly path: string;
+    readonly base: 'worktree' | 'staged';
+    readonly start: number;
+    readonly end: number;
+} | {
+    readonly kind: 'file-lines';
+    readonly path: string;
+    readonly base: 'commit';
+    readonly commit: string;
+    readonly start: number;
+    readonly end: number;
 } | {
     readonly kind: 'image-diff';
     readonly path: string;
@@ -162,6 +180,12 @@ export type GitQuery = {
     readonly path: string;
     readonly base: 'commit';
     readonly commit: string;
+} | {
+    readonly kind: 'dir-list';
+    readonly path: string;
+} | {
+    readonly kind: 'file-content';
+    readonly path: string;
 } | {
     readonly kind: 'show';
     readonly ref: string;
@@ -176,6 +200,15 @@ export type GitQuery = {
 } | {
     readonly kind: 'worktree-stats';
 };
+/** One entry in a `dir-list` result. */
+export interface DirEntry {
+    readonly name: string;
+    readonly dir: boolean;
+    /** File byte size; absent for directories. */
+    readonly size?: number;
+    /** True when Git excludes an untracked item; absent outside a repository. */
+    readonly ignored?: boolean;
+}
 /** One commit's changed-file line (from --name-status). */
 export interface GitFileStat {
     readonly path: string;
@@ -211,6 +244,12 @@ export type GitQueryResult = {
     readonly kind: 'diff';
     readonly path: string;
     readonly text: string;
+} | {
+    readonly kind: 'file-lines';
+    readonly path: string;
+    readonly start: number;
+    readonly lines: readonly string[];
+    readonly eof: boolean;
 } | {
     /**
      * Old/new images for a binary image diff, as data URLs. The sides mirror
@@ -252,6 +291,23 @@ export type GitQueryResult = {
 } | {
     readonly kind: 'worktree-stats';
     readonly stats: WorktreeStats;
+} | {
+    readonly kind: 'dir-list';
+    readonly path: string;
+    readonly entries: readonly DirEntry[];
+    readonly truncated: boolean;
+} | {
+    readonly kind: 'file-content';
+    readonly path: string;
+    readonly variant: 'text' | 'image' | 'binary';
+    /** text variant: the file's full UTF-8 content. */
+    readonly content?: string;
+    /** text variant: total line count. */
+    readonly lines?: number;
+    /** image variant: a `data:<mime>;base64,…` URL. */
+    readonly dataUrl?: string;
+    /** The file exceeded the byte cap, so no content is returned. */
+    readonly tooLarge?: true;
 };
 export type GitQueryResponse = {
     readonly ok: true;

package/lib/host/validate.d.ts

@@ -0,0 +1,10 @@
+/** A repository-relative path is safe when it stays inside the work tree. */
+export declare function isSafePath(path: string): boolean;
+/**
+ * A ref (branch / tag / commit-ish) is safe as a bare argv element: no leading
+ * `-` (would be parsed as a git option — the `--output=` file-write vector),
+ * no whitespace/control chars, no glob or rev-range metacharacters.
+ */
+export declare function isSafeRev(input: string): boolean;
+/** A branch name for `git checkout`: the ref rules plus no leading slash. */
+export declare function isSafeBranchName(name: string): boolean;

package/lib/host/version.d.ts

@@ -21,9 +21,10 @@ export declare function parseRepository(repository: unknown): {
     repo: string;
 } | undefined;
 /**
- * Compare dotted numeric versions with basic prerelease handling; returns 1
- * when a > b, -1 when a < b, 0 when equal. A release outranks a prerelease
- * sharing the same core (e.g. 0.2.0 > 0.2.0-beta.1).
+ * Compare dotted versions with prerelease handling; returns 1 when a > b, -1
+ * when a < b, 0 when equal. A release outranks a prerelease sharing the same
+ * core (0.2.0 > 0.2.0-beta.1); prerelease identifiers compare dot-segment by
+ * segment, numeric parts numerically (beta.2 > beta.1, 0.2.0-rc.10 > rc.2).
  */
 export declare function compareVersions(a: string, b: string): number;
 /** Local-only view: current version + repository URL, no network access. */
@@ -32,7 +33,8 @@ export declare function readVersionInfo(options?: {
 }): Promise<VersionInfo>;
 /**
  * Query the GitHub releases API for the latest tag and compare it to the
- * bundled version. Failures are reported through `error` instead of throwing.
+ * bundled version. Failures are reported through `error` instead of throwing;
+ * a 5s timeout bounds the call and a 10-minute memo bounds the request rate.
  */
 export declare function checkLatestVersion(options?: {
     manifestPath?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xbzbing/dsh-git-panel",
-  "version": "0.1.1",
+  "version": "0.3.0",
   "description": "DeepSeek Harness (dsh) plugin: an IDE-style Git panel in the Web GUI — branch/history overview, uncommitted changes with commit & amend, diff stats, and a zsh-style branch marker in the input bar.",
   "type": "module",
   "license": "MIT",
@@ -44,8 +44,7 @@
     "test:unit": "node build.mjs && node --test --test-force-exit test/unit/*.test.mjs",
     "test:e2e": "node build.mjs && node test/e2e/setup.mjs && node test/e2e/run.mjs && node test/e2e/run2.mjs",
     "test": "npm run test:unit && npm run test:e2e",
-    "check": "npm run typecheck && npm run test",
-    "prepare": "node build.mjs"
+    "check": "npm run typecheck && npm run test && git diff --exit-code -- lib/"
   },
   "dsh": {
     "bundle": {
@@ -56,7 +55,8 @@
       "inject": [
         "@deepseek-ai/dsh-client-connection",
         "@deepseek-ai/dsh-client-locale",
-        "@deepseek-ai/dsh-client-ui-conversation"
+        "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-client-ui-primitives"
       ]
     }
   },
@@ -76,9 +76,6 @@
     "@deepseek-ai/dsh-typert-protocol": ">=0.1.2-rc.1",
     "@deepseek-ai/schemastery": ">=3.18.4"
   },
-  "dependencies": {
-    "highlight.js": "11.11.1"
-  },
   "devDependencies": {
     "@types/node": "22.10.5",
     "@types/react": "18.3.18",