dsh-code-server-app 0.3.59 → 0.3.63

package/lib/index.js

@@ -51,6 +51,22 @@ import {
   writeBridgeConfig,
 } from './bridge.mjs';
 import { bridgeEndpointPath, startBridgeListener } from './bridge-ipc.mjs';
+// FIM(幽灵)补全(实验性):**注册一个自己的 LLM 适配器**而不是直连 —— 见 lib/fim-adapter.mjs 顶部。
+import {
+  clampDebounce,
+  compileGlobList,
+  createApiKeyResolver,
+  createFimAdapterClass,
+  createFimBudget,
+  createFimStats,
+  encodeFimRequest,
+  FIM_MAX_TOKENS,
+  FIM_MODEL,
+  FIM_PROVIDER,
+  loadFimBase,
+  matchDisabledGlob,
+  toSingleLine,
+} from './fim-adapter.mjs';
 import { registerEditorPrompt, registerEditorTools, setPromptLiveProbe } from './bridge-tools.mjs';
 import { deliverEditorPrompt } from './bridge-session.mjs';
 import { dshEntry, dshRequire } from './dsh-resolve.mjs';
@@ -120,6 +136,25 @@ export const Config = z.object({
    *  诊断、活动选区),并让编辑器里的动作能驱动 DSH。关闭后不写 bridge.json、不注册编辑器工具,
    *  扩展会休眠(它读不到配置就不做任何事)。安全模型见 lib/bridge.mjs 顶部。 */
   editorBridge: z.boolean().default(true),
+  /** fim=false(默认):**实验性**的 FIM(幽灵)补全。开启后宿主的编辑器桥多一条**有界的模型调用**
+   *  路由(`POST /complete`),编辑器里的内联补全(灰字)由它供给;宿主为此注册一个自己的 LLM
+   *  适配器路由 `dshcs-fim`(走 Completions API 的 `/beta/completions`)。
+   *
+   *  为什么默认关、为什么叫实验性:①它会把**光标附近的代码**发给模型(桥的其余部分是只读状态,
+   *  不外发内容);②模型在"不该补的位置"会硬凑(实测 2/2 复现),需要编辑器侧判据兜;
+   *  ③这条调用**不进 DSH 的 token 计量**(一次性调用不是 loop 请求,不写会话日志),
+   *  用量只在扩展状态栏与设置卡里可见。安全模型见 lib/fim-adapter.mjs 顶部。 */
+  fim: z.boolean().default(false),
+  /** 停顿多久才发一次补全请求(毫秒)。太小 ⇒ 打字过程中反复触发;太大 ⇒ 失去"补全"的意义。
+   *  取值在消费处夹到 [100, 3000](clampDebounce),设置里填什么都不至于打到链路上。 */
+  fimDebounceMs: z.number().default(250),
+  /** 是否允许多行补全(true 默认)。false ⇒ 宿主只回第一行(空首行 = 这次不补)。
+   *  关掉它是最省心的安全阀:实测模型在"不该补的位置"会硬凑,多行会把这种噪声放大。 */
+  fimMultiline: z.boolean().default(true),
+  /** 按 glob 禁用补全的文件(分号 / 逗号 / 空白 / 换行分隔;空 = 不禁用)。
+   *  语义:`*` 不跨目录、`**` 跨目录、不含 `/` 的模式只匹配文件名、`/` 结尾视作 `/**`。
+   *  两侧都会判:扩展侧先判(不发请求),宿主侧再判(防线在服务端)。 */
+  fimDisableGlobs: z.string().default(''),
 });
 
 const DEFAULT_CONFIG = {
@@ -136,6 +171,12 @@ const DEFAULT_CONFIG = {
   readyTimeoutMs: 60000,
   /** 编辑器桥(0.3.0):见 Config.editorBridge。行配置与设置文档都可关;设置卡片暂不提供行。 */
   editorBridge: true,
+  /** FIM 补全(实验性,0.3.61):见 Config.fim。默认关。 */
+  fim: false,
+  /** FIM 的三个子项(0.3.62):停顿毫秒数 / 是否多行 / 按 glob 禁用。见 Config 里的说明。 */
+  fimDebounceMs: 250,
+  fimMultiline: true,
+  fimDisableGlobs: '',
 };
 
 const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '::1']);
@@ -615,6 +656,10 @@ function readEndpoint(config) {
   }
 }
 
+/** 仅测试用:最近一次 apply() 装好的桥分发器(消费方是文件末尾的 bridgeRequestForTests)。
+ *  运行时代码**不读它** —— 它存在的唯一目的是让回归不必经过命名管道,原因见那个函数的注释。 */
+let activeBridgeDispatch = null;
+
 export async function apply(ctx, config) {
   const cfg = { ...DEFAULT_CONFIG, ...(config ?? {}) };
 
@@ -632,6 +677,12 @@ export async function apply(ctx, config) {
   let fullscreenOnOpen = true; // 客户端"打开标签即全屏右侧栏"(0.2.9)
   /** 编辑器桥开关(0.3.0):行配置 cfg.editorBridge 是种子,设置文档里可改并实时生效。 */
   let bridgeSetting = cfg.editorBridge !== false;
+  /** FIM 补全开关(实验性,0.3.61):行配置 cfg.fim 是种子,设置文档里可改并实时生效。默认关。 */
+  let fimSetting = cfg.fim === true;
+  /** FIM 的三个子项(0.3.62):停顿毫秒数 / 是否多行 / 按 glob 禁用(原始文本,消费时解析)。 */
+  let fimDebounceMs = clampDebounce(cfg.fimDebounceMs);
+  let fimMultiline = cfg.fimMultiline !== false;
+  let fimDisableGlobs = typeof cfg.fimDisableGlobs === 'string' ? cfg.fimDisableGlobs : '';
   if (settingsSvc !== undefined && typeof settingsSvc.register === 'function') {
     try {
       const scope = settingsSvc.register(SETTINGS_NS, Config);
@@ -645,6 +696,10 @@ export async function apply(ctx, config) {
           : DEFAULT_CLAIM_EXTENSIONS;
         fullscreenOnOpen = resolved && typeof resolved.fullscreenOnOpen === 'boolean' ? resolved.fullscreenOnOpen : true;
         bridgeSetting = resolved && typeof resolved.editorBridge === 'boolean' ? resolved.editorBridge : bridgeSetting;
+        fimSetting = resolved && typeof resolved.fim === 'boolean' ? resolved.fim : fimSetting;
+        fimDebounceMs = clampDebounce(resolved && resolved.fimDebounceMs !== undefined ? resolved.fimDebounceMs : fimDebounceMs);
+        fimMultiline = resolved && typeof resolved.fimMultiline === 'boolean' ? resolved.fimMultiline : fimMultiline;
+        fimDisableGlobs = resolved && typeof resolved.fimDisableGlobs === 'string' ? resolved.fimDisableGlobs : fimDisableGlobs;
       }
       scope.watch((next) => {
         if (next != null && (next.serve === 'dsh' || next.serve === 'loopback')) {
@@ -671,6 +726,36 @@ export async function apply(ctx, config) {
             }
           }
         }
+        // FIM(实验性):开 → 注册我们自己的 LLM 适配器路由(编辑器补全要靠它);
+        // 关 → 注销。翻转立刻生效,不需要重启宿主(扩展侧下一趟 /sync 就会看到 enabled 变了)。
+        if (next != null && typeof next.fim === 'boolean') {
+          if (next.fim !== fimSetting) {
+            fimSetting = next.fim;
+            console.log(`[code-server] fim updated: ${fimSetting}(实验性 FIM 补全)`);
+            void ensureFimAdapter();
+          }
+        }
+        // FIM 的三个子项(0.3.62):都**即时生效**,不需要重启宿主 —— 扩展每趟 /sync 都会拿到新值
+        // (停顿与 glob 是扩展侧行为,多行由宿主在返回前裁)。改动只打一行日志,便于事后对齐现场。
+        if (next != null && next.fimDebounceMs !== undefined) {
+          const clamped = clampDebounce(next.fimDebounceMs);
+          if (clamped !== fimDebounceMs) {
+            fimDebounceMs = clamped;
+            console.log(`[code-server] fimDebounceMs updated: ${fimDebounceMs}ms`);
+          }
+        }
+        if (next != null && typeof next.fimMultiline === 'boolean') {
+          if (next.fimMultiline !== fimMultiline) {
+            fimMultiline = next.fimMultiline;
+            console.log(`[code-server] fimMultiline updated: ${fimMultiline}`);
+          }
+        }
+        if (next != null && typeof next.fimDisableGlobs === 'string') {
+          if (next.fimDisableGlobs !== fimDisableGlobs) {
+            fimDisableGlobs = next.fimDisableGlobs;
+            console.log(`[code-server] fimDisableGlobs updated: ${compileGlobList(fimDisableGlobs).length} 条`);
+          }
+        }
         if (next != null && typeof next.keepResident === 'boolean') {
           keepResident = next.keepResident;
           console.log(`[code-server] keepResident updated: ${keepResident}`);
@@ -1055,7 +1140,9 @@ export async function apply(ctx, config) {
   /** 桥的路由(后缀 → Fetch 风格 handler)。做成函数而非常量:handler 声明在文件后段,
    *  函数声明会提升,而常量在挂载时可能还在 TDZ。
    *
-   *  **四条路由全部只读**:/health 探活、/sync 上报状态+取事件、/old 取写前原文、/event 上报意图
+   *  **四条只读路由 + 一条有界的模型调用**(0.3.61 起):/health 探活、/sync 上报状态+取事件、
+   *  /old 取写前原文、/event 上报意图;/complete 是**唯一的例外** —— 它把光标前后的两段文本
+   *  交给模型换回一段补全文本(实验性 FIM,设置里默认关;安全不变量见 handleBridgeComplete)。
    *  (请宿主打开对话框等)。提问与授权**不在这里** —— 它们走 DSH 同源的
    *  `/api/code-server/ask/{send,approve}`,调用方是 DSH 页面里的插件客户端(client 半部),
    *  吃 DSH 自己的 cookie/Origin 校验。 */
@@ -1065,6 +1152,7 @@ export async function apply(ctx, config) {
       { suffix: '/sync', methods: ['POST'], fetch: handleBridgeSync },
       { suffix: '/old', methods: ['GET'], fetch: handleBridgeOld },
       { suffix: '/event', methods: ['POST'], fetch: handleBridgeEvent },
+      { suffix: '/complete', methods: ['POST'], fetch: handleBridgeComplete },
     ];
   }
 
@@ -1108,6 +1196,11 @@ export async function apply(ctx, config) {
     return route.fetch(request);
   }
 
+  // 仅测试用:把分发器交给模块级钩子(见 bridgeRequestForTests)。沙箱里**连接**命名管道 EPERM
+  // ⇒ 走 IPC 的用例会全体 SKIP,"本地全绿"里就没有桥的状态码断言了(0.3.63 的 /complete 403
+  // 就是这么假绿到 runner 才红的)。有了它,断言在任何机器上都能真跑。
+  activeBridgeDispatch = dispatchBridge;
+
   /** 桥是否启用(行配置为种子,设置文档里可实时改)。 */
   function bridgeEnabled() {
     return bridgeSetting !== false;
@@ -1117,6 +1210,10 @@ export async function apply(ctx, config) {
    *  所以在 IDE 从未启动的部署里它也只是一段空注册,不产生任何提示词开销。 */
   setPromptLiveProbe(() => bridgeMeta !== null);
   bridgePromptDispose = registerEditorPrompt(ctx);
+  // FIM(实验性)的适配器注册**不在这里**:它的状态声明(fimStats/fimAdapterDispose…)在文件后段,
+  // 这里调用会撞 `Cannot access 'fimAdapterDispose' before initialization`(TDZ)——
+  // async 函数声明会提升,但它读的 `let` 还没初始化,异常会直接把整个插件加载打挂
+  // (与 0.3.6 的 `ctx.systemPrompt` 事故同一类)。真正的调用点在 FIM 运行时声明之后。
   if (bridgePromptDispose === null && bridgeEnabled()) {
     console.warn('[code-server] 编辑器桥:systemPrompt 服务不可用,提示词段落未注册(工具仍可用)');
   }
@@ -1930,6 +2027,172 @@ export async function apply(ctx, config) {
     return jsonResponse({ ok: false, error: reason }, 503);
   }
 
+  // ---------------------------------------------------------------- FIM(幽灵)补全(实验性,0.3.61)
+
+  /** 用量与调用计数:这是**唯一**的可见处(状态栏 + 设置卡)。一次性插件调用不是 loop 请求、
+   *  不写会话日志 ⇒ DSH 的 token-meter 看不到它(见 lib/fim-adapter.mjs 顶部"计量会落在哪")。 */
+  const fimStats = createFimStats();
+  /** 速率/并发闸:这条链路由击键触发,任何一处无界都会变成"打字时把宿主/账号打满"。 */
+  const fimBudget = createFimBudget();
+  /** 已注册的适配器句柄(null = 未注册)。 */
+  let fimAdapterDispose = null;
+  /** 消息构造器(从 DSH 解析;拿不到就不启用 —— 手搓 message 对象容易缺字段,不值得赌)。 */
+  let fimCreateUserMessage = null;
+  /** 不可用的原因(状态栏与设置卡要能说清"为什么没反应")。 */
+  let fimUnavailable = '未启用';
+
+  /**
+   * 按设置注册/注销适配器路由。
+   *
+   * 为什么是**适配器**而不是直连 fetch:这样这条调用仍然走 DSH 的 LLM 服务 —— 取消、超时、
+   * 终态 chunk、稳定错误码都按服务契约走(见 lib/fim-adapter.mjs 顶部)。解析不到 llm 服务或
+   * LlmAdapter 时**不报错、只是不可用**:FIM 是可选能力,不该让插件在缺服务的部署里出问题。
+   */
+  async function ensureFimAdapter() {
+    if (fimAdapterDispose !== null) {
+      try { fimAdapterDispose(); } catch { /* 已被 fiber 回收 */ }
+      fimAdapterDispose = null;
+    }
+    if (!fimSetting) {
+      fimUnavailable = '设置里未开启';
+      return false;
+    }
+    const llm = (() => { try { return ctx.get('llm'); } catch { return undefined; } })();
+    if (llm === undefined || llm === null || typeof llm.registerAdapter !== 'function') {
+      fimUnavailable = '这个 DSH 没有 llm 服务';
+      console.warn('[code-server] FIM 补全:ctx.llm 不可用,补全保持关闭');
+      return false;
+    }
+    const base = await loadFimBase();
+    if (base === null || base.createUserMessage === null) {
+      fimUnavailable = '解析不到 @deepseek-ai/dsh-llm 的 LlmAdapter/createUserMessage';
+      console.warn(`[code-server] FIM 补全:${fimUnavailable};补全保持关闭`);
+      return false;
+    }
+    try {
+      const Adapter = createFimAdapterClass(base.Base, {
+        resolveApiKey: createApiKeyResolver(ctx),
+        attributionHeaders: base.attributionHeaders,
+        assertUsableApiKey: base.assertUsableApiKey,
+        log: (message) => console.log(`[code-server] FIM:${message}`),
+      });
+      const handle = llm.registerAdapter([FIM_PROVIDER], new Adapter());
+      fimAdapterDispose = typeof handle === 'function' ? handle : () => {};
+      fimCreateUserMessage = base.createUserMessage;
+      fimUnavailable = null;
+      console.log(`[code-server] FIM 补全(实验性)已注册适配器路由:${FIM_PROVIDER}/${FIM_MODEL}`);
+      return true;
+    } catch (error) {
+      fimUnavailable = error && error.message ? error.message : String(error);
+      console.warn(`[code-server] FIM 补全:注册适配器失败(${fimUnavailable})`);
+      return false;
+    }
+  }
+
+  /** 给客户端(/sync)看的快照:开关状态 + 可用性 + 用量。 */
+  function fimSnapshot() {
+    const stats = fimStats.snapshot();
+    const budget = fimBudget.snapshot();
+    return {
+      enabled: fimSetting,
+      available: fimSetting && fimAdapterDispose !== null,
+      reason: fimUnavailable,
+      provider: FIM_PROVIDER,
+      model: FIM_MODEL,
+      inflight: budget.inflight,
+      callsLastMinute: budget.callsLastMinute,
+      // 三个子项(0.3.62):扩展侧靠这些值决定"等多久、要不要接受多行、这个文件要不要跳过"。
+      debounceMs: fimDebounceMs,
+      multiline: fimMultiline,
+      disableGlobs: compileGlobList(fimDisableGlobs),
+      ...stats,
+    };
+  }
+
+  /**
+   * `POST /complete` —— 桥的**第五条路由**,也是唯一一条**会发起模型调用**的路由。
+   *
+   * 安全不变量(比前四条多三条,别放宽):
+   *   (a) **只有设置里开了 FIM 才存在** —— 没开一律 403,且不会发出任何网络请求;
+   *   (b) **不写文件、不执行命令** —— 输入是两个字符串,输出是一段文本 + 用量;
+   *   (c) **有界** —— body 上限、前后缀窗口(适配器侧再裁一遍)、速率/并发闸、单次 4s 超时。
+   * 即:桥令牌泄露时,攻击面是"替用户花一点补全的 token 并读到一段补全文本",
+   * 而不是任意文件写 / 任意命令执行 —— 与前四条保持同一量级。
+   */
+  async function handleBridgeComplete(request) {
+    const denied = bridgeRejection(request);
+    if (denied !== null) return denied;
+    if (!fimSetting) return jsonResponse({ ok: false, error: 'fim-disabled' }, 403);
+    if (fimAdapterDispose === null || fimCreateUserMessage === null) {
+      return jsonResponse({ ok: false, error: 'fim-unavailable', reason: fimUnavailable }, 503);
+    }
+    let body;
+    try {
+      body = await readJsonBody(request);
+    } catch {
+      return jsonResponse({ ok: false, error: '请求体不是合法 JSON' }, 400);
+    }
+    if (!bodyWithinLimit(body)) return jsonResponse({ ok: false, error: '请求体过大' }, 413);
+    const prompt = typeof body.prompt === 'string' ? body.prompt : null;
+    const suffix = typeof body.suffix === 'string' ? body.suffix : null;
+    if (prompt === null || suffix === null) return jsonResponse({ ok: false, error: '缺少 prompt/suffix' }, 400);
+    // 按 glob 禁用(0.3.62):扩展侧先判过一遍,这里是**服务端那道**——令牌泄露也只能换来"被拒",
+    // 不会替用户在已禁用的大文件/无关目录上烧 token。
+    const blocked = matchDisabledGlob(typeof body.path === 'string' ? body.path : '', compileGlobList(fimDisableGlobs));
+    if (blocked !== null) return jsonResponse({ ok: false, error: 'disabled-by-glob', glob: blocked }, 403);
+    const gate = fimBudget.acquire();
+    if (gate !== 'ok') return jsonResponse({ ok: false, error: gate }, gate === 'busy' ? 409 : 429);
+    const started = Date.now();
+    try {
+      const llm = ctx.get('llm');
+      const message = fimCreateUserMessage({
+        content: [{ type: 'text', text: encodeFimRequest({ prompt, suffix, language: body.language, path: body.path }) }],
+      });
+      let text = '';
+      let usage = null;
+      let failure = null;
+      for await (const chunk of llm.stream({
+        provider: FIM_PROVIDER,
+        model: FIM_MODEL,
+        messages: [message],
+        maxTokens: FIM_MAX_TOKENS,
+        temperature: 0,
+      })) {
+        if (chunk === null || typeof chunk !== 'object') continue;
+        if (chunk.type === 'text-delta' && typeof chunk.text === 'string') text += chunk.text;
+        else if (chunk.type === 'usage') usage = chunk.usage ?? usage;
+        else if (chunk.type === 'finish') {
+          const kind = chunk.reason?.kind;
+          if (kind !== 'stop' && kind !== 'max-tokens') {
+            failure = chunk.reason?.failure ?? { code: String(kind ?? 'error'), message: '补全未正常结束' };
+          }
+        }
+      }
+      const ms = Date.now() - started;
+      if (failure !== null) {
+        fimStats.recordFailure(failure.code, ms);
+        return jsonResponse({ ok: false, error: failure.code, reason: failure.message, ms }, 502);
+      }
+      // "允许多行"关掉时**在返回前裁**(0.3.62):扩展侧拿到的就是最终形态,缓存里也不会存多行;
+      // 首行是空白 ⇒ 返回空串,扩展据此当作"这次不补"(与"模型没给出东西"同一处理)。
+      const finalText = fimMultiline ? text : toSingleLine(text);
+      fimStats.recordOk(usage, ms);
+      return jsonResponse({ ok: true, text: finalText, usage, ms });
+    } catch (error) {
+      const ms = Date.now() - started;
+      const message = error && error.message ? error.message : String(error);
+      fimStats.recordFailure(error && error.code ? error.code : 'ERROR', ms);
+      console.warn(`[code-server] FIM 补全失败:${message}`);
+      return jsonResponse({ ok: false, error: error && error.code ? error.code : 'ERROR', reason: message, ms }, 502);
+    } finally {
+      fimBudget.release();
+    }
+  }
+
+  // FIM 运行时的声明都已执行到这里 ⇒ 现在才能安全调用(见前面那段 TDZ 说明)。
+  // **不阻塞启动**(void):它是可选能力,解析不到就只是"补全不可用",不该拖慢插件激活。
+  void ensureFimAdapter();
+
   async function handleBridgeHealth() {
     // 无鉴权:只回一句"桥活着吗",不含任何编辑器数据(便于重启后一眼确认)。
     // 注意:bridge=true 只表示"配置已就绪",**不代表扩展在跑**(见 README 已知限制)。
@@ -2022,6 +2285,9 @@ export async function apply(ctx, config) {
       askDialog: askDialogLive(),
       // 诊断用:请求过对话框但客户端没响应(浏览器缓存旧 bundle?)。
       askDialogRequested: askDialog.open,
+      // FIM(实验性)状态与用量:扩展据此决定要不要注册内联补全 provider,并把用量显示在状态栏。
+      // **必须每趟都带**(它是唯一能让用户看到"补全花了多少"的地方 —— 这条调用不进 DSH 的计量)。
+      fim: fimSnapshot(),
     });
   }
 
@@ -2262,3 +2528,30 @@ export async function apply(ctx, config) {
 
   console.log(`[code-server] static plugin loaded (serve=${requestedServe()} host=${cfg.host} port=${cfg.port === 0 ? '0=随机' : cfg.port})`);
 }
+
+/**
+ * 仅测试用:把一次桥请求交给**当前实例**的桥分发器,不经过命名管道 / unix socket。
+ *
+ * 为什么需要这条钩子(2026-09-22,0.3.63 CI 红 #2 的根治):本机沙箱里**连接**命名管道会 EPERM
+ * (监听允许、连接不允许),于是 scripts/test-bridge-routes.mjs 里所有走 IPC 的用例在本机一律
+ * SKIP —— "本地 pass=30" 里**不含**桥的状态码断言,`/complete` 的 403 就是这么在本地假绿、
+ * 推到 runner 才红的。传输可以是本机的,断言不能是本机的:有了它,那些断言在任何机器上都真跑。
+ *
+ * 与真实传输**同构**(逐字段对照 nodeRouteFromFetch):同一个 dispatchBridge、body 同样收成
+ * Buffer、Response 同样摊平成 {status, headers, text}。缺的只有 socket 本身 —— 所以它**不能**
+ * 替代"监听口能起来"这条验证,那一条仍由真实运行的 IPC 覆盖(test-bridge-routes 里那条
+ * 「桥走本机 IPC」的用例走的还是真端点)。
+ */
+export async function bridgeRequestForTests({ path, method = 'GET', headers = {}, body = '' } = {}) {
+  if (activeBridgeDispatch === null) throw new Error('bridgeRequestForTests: 还没有 apply() 过,拿不到桥分发器');
+  const response = await activeBridgeDispatch(
+    new URL(path, 'http://127.0.0.1'),
+    String(method).toUpperCase(),
+    // 与 Node 的 IncomingMessage.headers 同形(键全小写):guard 读 origin 与令牌头就靠它。
+    Object.fromEntries(Object.entries(headers).map(([k, v]) => [String(k).toLowerCase(), v])),
+    Buffer.from(body ?? '', 'utf8'),
+  );
+  const flat = {};
+  response.headers.forEach((value, key) => { flat[key] = value; });
+  return { status: response.status, headers: flat, text: await response.text() };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-code-server-app",
-  "version": "0.3.59",
+  "version": "0.3.63",
   "description": "VS Code (from a code-server release) inside DSH: a right-sidebar tab driven by the plugin's own launcher over the in-process VS Code server (lib/launcher.mjs), plus an editor bridge (assets/extensions/dshcs-editor-bridge) that gives the agent what only the editor knows (unsaved buffers, language-server diagnostics, the active selection) and lets editor gestures drive the session. The bridge is completely read-only: all four of its routes (/health, /sync, /old, /event) are reads. Asking DSH from the editor opens a floating dialog inside the DSH page (draggable, resizable, bottom-right): the plugin's client half sends the question as user input (POST /api/code-server/ask/send) and renders that session's new content with DSH's own Markdown renderer - the same @deepseek-ai/dsh-client-ui-primitives instance the UI uses, required from the page's module table, so typography, highlighting and math match the interface and a renderer version mismatch is impossible. Thinking appears as collapsed rows and approval requests (writing outside the workspace / running commands) can be answered in place: whole-plugin write route POST /api/code-server/ask/approve, constrained to pending in-process requests and the outcomes allowed-once/rejected; dialog-first for 5 minutes, handed back to the official card the moment the dialog closes, never auto-approved. There is no build step anywhere: lib/client.js (client half including the dialog panel) and the extension are committed hand-written source, devDependencies holds a single test-only entry, and the published package carries no frontend bundle. Also: the tab claims DSH file addresses (dsh-resource://file/**) by file type (setting claimExtensions), so produced-file chips, delivered-file previews and inline prose mentions open in the workbench; the IDE is a resident surface moved with Element.moveBefore instead of being remounted, so switching sidebar tabs does not reload it; opening the tab switches the right sidebar to fullscreen by default (setting fullscreenOnOpen); a workspace switch re-navigates the workbench with the new ?folder= without restarting the IDE process. Requires a DSH with the right-sidebar services (sidebarRightTabs/sidebarRight, >= 0.1.5-alpha.1); older DSH versions only get an upgrade notice on the settings page. Two serving modes: loopback port (default) or same-origin mount on DSH's own webServer (/code-server, protected by ctx.connection.requestRejection). The diff the bridge opens always has the real pre-write text on the left, taken from result.value.before in tools/post-execute into a bounded snapshot cache and fetched by opaque key over the read-only GET /old, so files that are not open in the editor work too. No code-server Node layer, no argon2, no C++ toolchain.",
   "homepage": "https://github.com/jinsiyu/dsh-code-server-app",
   "repository": {
@@ -48,6 +48,7 @@
     "lib/dsh-resolve.mjs",
     "lib/child-node.mjs",
     "lib/edit-snapshot.mjs",
+    "lib/fim-adapter.mjs",
     "lib/launcher.mjs",
     "lib/serve-dsh.mjs",
     "lib/vendor.js",
@@ -63,6 +64,8 @@
     "vendor/VENDOR.json",
     "cordis.patch.yml",
     "LICENSE",
+    "LICENSE-Apache-2.0.txt",
+    "THIRD_PARTY_NOTICES.md",
     "README.md",
     "README.en.md"
   ],
@@ -79,7 +82,7 @@
     "@jinsiyu/dshcs-ssh2": "1.17.0",
     "@jinsiyu/dshcs-vscode-fs-copyfile": "2.0.0",
     "@jinsiyu/dshcs-vscode-proxy-agent": "0.44.0",
-    "@jinsiyu/dshcs-vscode-server": "4.137.0",
+    "@jinsiyu/dshcs-vscode-server": "4.138.0",
     "@microsoft/1ds-core-js": "3.2.13",
     "@microsoft/1ds-post-js": "3.2.13",
     "@vscode/iconv-lite-umd": "0.7.1",
@@ -87,16 +90,16 @@
     "@vscode/sandbox-runtime": "0.0.1",
     "@vscode/tree-sitter-wasm": "0.3.1",
     "@vscode/vscode-languagedetection": "1.0.23",
-    "@xterm/addon-clipboard": "0.3.0-beta.302",
-    "@xterm/addon-image": "0.10.0-beta.300",
-    "@xterm/addon-ligatures": "0.11.0-beta.300",
-    "@xterm/addon-progress": "0.3.0-beta.300",
-    "@xterm/addon-search": "0.17.0-beta.300",
-    "@xterm/addon-serialize": "0.15.0-beta.300",
-    "@xterm/addon-unicode11": "0.10.0-beta.300",
-    "@xterm/addon-webgl": "0.20.0-beta.299",
-    "@xterm/headless": "6.1.0-beta.302",
-    "@xterm/xterm": "6.1.0-beta.303",
+    "@xterm/addon-clipboard": "0.3.0-beta.303",
+    "@xterm/addon-image": "0.10.0-beta.301",
+    "@xterm/addon-ligatures": "0.11.0-beta.301",
+    "@xterm/addon-progress": "0.3.0-beta.301",
+    "@xterm/addon-search": "0.17.0-beta.301",
+    "@xterm/addon-serialize": "0.15.0-beta.301",
+    "@xterm/addon-unicode11": "0.10.0-beta.301",
+    "@xterm/addon-webgl": "0.20.0-beta.300",
+    "@xterm/headless": "6.1.0-beta.303",
+    "@xterm/xterm": "6.1.0-beta.304",
     "bindings": "1.5.0",
     "cookie": "0.7.2",
     "detect-libc": "2.1.2",
@@ -104,12 +107,12 @@
     "http-proxy-agent": "7.0.0",
     "https-proxy-agent": "7.0.2",
     "jschardet": "3.1.4",
+    "katex": "0.16.22",
     "minimist": "1.2.8",
     "mkdirp": "1.0.4",
     "node-addon-api": "6.1.0",
     "tar": "7.5.22",
-    "tas-client": "0.4.3",
-    "tslib": "2.8.1",
+    "tas-client": "0.4.6",
     "typescript": "6.0.3",
     "uuid": "14.0.2",
     "vscode-oniguruma": "1.7.0",

package/vendor/VENDOR.json

@@ -1,12 +1,12 @@
 {
-  "codeServerVersion": "4.137.0",
-  "vscodeVersion": "1.137.0",
-  "productPath": "stable-b11dabdaca0d3369986975be285db92c8795cea5",
+  "codeServerVersion": "4.138.0",
+  "vscodeVersion": "1.138.0",
+  "productPath": "stable-59c988c744a240b05b039f57b856a5312f19d5b1",
   "layout": "vscode-only",
-  "preparedAt": "2026-09-20T15:36:43.387Z",
+  "preparedAt": "2026-09-22T02:29:14.118Z",
   "source": "registry",
   "node": "v24.20.0",
   "platform": "linux",
   "arch": "x64",
-  "sizeMB": 197.9
+  "sizeMB": 198.3
 }