dsh-coding-sidebar 1.0.9 → 1.0.10

package/src/client/locales-tr.ts

@@ -167,6 +167,14 @@ export const tr: Record<string, string> = {
   deleteDescFile: 'Bu dosya kalıcı olarak silinir. Bu işlem geri alınamaz.',
   deleteDescDir: 'Bu dizin ve içeriği kalıcı olarak silinir. Bu işlem geri alınamaz.',
   dismiss: 'Kapat',
+  changesSessionGit: 'Git değişiklikleri',
+  changesSessionLens: 'Oturum değişiklikleri',
+  changesEmpty: 'Bu oturumda dosya işlemi yok',
+  changesCount: '{count} dosya işlemi',
+  changesRedacted: '[MASKELENDİ]',
+  changesBinary: 'İkili dosya — önizleme yok',
+  changesPreviewError: 'Önizleme okunamadı: {message}',
+  changesLens: 'Görünüm',
   exited: 'Terminal süreci sonlandı',
   noSession: 'Kenar çubuğunu kullanmak için bir oturum seçin',
   pluginNotLoaded: 'Eklenti yüklenmedi; sekme kullanılamıyor:',

package/src/client/locales-vi.ts

@@ -167,6 +167,14 @@ export const vi: Record<string, string> = {
   deleteDescFile: 'Thao tác này sẽ xóa vĩnh viễn tệp. Không thể hoàn tác.',
   deleteDescDir: 'Thao tác này sẽ xóa vĩnh viễn thư mục và mọi thứ bên trong. Không thể hoàn tác.',
   dismiss: 'Đóng',
+  changesSessionGit: 'Thay đổi Git',
+  changesSessionLens: 'Thay đổi phiên',
+  changesEmpty: 'Không có thao tác tệp trong phiên này',
+  changesCount: '{count} thao tác tệp',
+  changesRedacted: '[ĐÃ CHE]',
+  changesBinary: 'Tệp nhị phân — không có xem trước',
+  changesPreviewError: 'Lỗi đọc xem trước: {message}',
+  changesLens: 'Chế độ xem',
   exited: 'Tiến trình terminal đã thoát',
   noSession: 'Chọn một phiên để dùng thanh bên',
   pluginNotLoaded: 'Plugin chưa tải, tab tạm không khả dụng:',

package/src/client/locales-zh-HK.ts

@@ -182,6 +182,14 @@ export const zhHK: Record<string, string> = {
   deleteDescFile: '將永久刪除該檔案，此操作無法復原。',
   deleteDescDir: '將永久刪除該目錄及其全部內容，此操作無法復原。',
   dismiss: '關閉',
+  changesSessionGit: 'Git 變動',
+  changesSessionLens: '會話變動',
+  changesEmpty: '本會話尚無檔案操作',
+  changesCount: '{count} 個檔案操作',
+  changesRedacted: '[已脫敏]',
+  changesBinary: '二進位檔案，無法預覽',
+  changesPreviewError: '預覽讀取失敗：{message}',
+  changesLens: 'View',
   exited: '終端程序已退出',
   noSession: '選擇一個工作階段以使用側邊欄',
   pluginNotLoaded: '插件未載入，標籤暫不可用：',

package/src/client/locales-zh-MO.ts

@@ -182,6 +182,14 @@ export const zhMO: Record<string, string> = {
   deleteDescFile: '將永久刪除該檔案，此操作無法復原。',
   deleteDescDir: '將永久刪除該目錄及其全部內容，此操作無法復原。',
   dismiss: '關閉',
+  changesSessionGit: 'Git 變動',
+  changesSessionLens: '會話變動',
+  changesEmpty: '本會話尚無檔案操作',
+  changesCount: '{count} 個檔案操作',
+  changesRedacted: '[已脫敏]',
+  changesBinary: '二進位檔案，無法預覽',
+  changesPreviewError: '預覽讀取失敗：{message}',
+  changesLens: 'View',
   exited: '終端程序已退出',
   noSession: '選擇一個工作階段以使用側邊欄',
   pluginNotLoaded: '插件未載入，標籤暫不可用：',

package/src/client/locales-zh-TW.ts

@@ -182,6 +182,14 @@ export const zhTW: Record<string, string> = {
   deleteDescFile: '將永久刪除該檔案，此操作無法復原。',
   deleteDescDir: '將永久刪除該目錄及其全部內容，此操作無法復原。',
   dismiss: '關閉',
+  changesSessionGit: '偵測 Git 變動',
+  changesSessionLens: '會話變動',
+  changesEmpty: '本會話尚無檔案操作',
+  changesCount: '{count} 個檔案操作',
+  changesRedacted: '[已遮蔽]',
+  changesBinary: '二進位檔案，無法預覽',
+  changesPreviewError: '預覽讀取失敗：{message}',
+  changesLens: 'View',
   exited: '終端程序已退出',
   noSession: '選擇一個工作階段以使用側邊欄',
   pluginNotLoaded: '插件未載入，標籤暫不可用：',

package/src/client/locales.ts

@@ -172,6 +172,14 @@ export const zh = {
   deleteDescFile: '将永久删除该文件，此操作不可撤销。',
   deleteDescDir: '将永久删除该目录及其全部内容，此操作不可撤销。',
   dismiss: '关闭',
+  changesSessionGit: 'Git 变动',
+  changesSessionLens: '会话变动',
+  changesEmpty: '本会话尚无文件操作',
+  changesCount: '{count} 个文件操作',
+  changesRedacted: '[已脱敏]',
+  changesBinary: '二进制文件，无法预览',
+  changesPreviewError: '预览读取失败：{message}',
+  changesLens: '视角',
   exited: '终端进程已退出',
   noSession: '选择一个会话以使用侧边栏',
   pluginNotLoaded: '插件未加载，标签页暂不可用：',
@@ -521,6 +529,14 @@ export const en: Record<keyof typeof zh, string> = {
   deleteDescFile: 'This permanently deletes the file. This cannot be undone.',
   deleteDescDir: 'This permanently deletes the directory and everything inside it. This cannot be undone.',
   dismiss: 'Dismiss',
+  changesSessionGit: 'Git changes',
+  changesSessionLens: 'Session changes',
+  changesEmpty: 'No file operations in this session',
+  changesCount: '{count} file operations',
+  changesRedacted: '[REDACTED]',
+  changesBinary: 'Binary file — no preview',
+  changesPreviewError: 'Preview read failed: {message}',
+  changesLens: 'Lens',
   exited: 'Terminal process exited',
   noSession: 'Select a conversation to use the sidebar',
   pluginNotLoaded: 'Plugin not loaded; tab unavailable:',

package/src/client/redact.ts

@@ -0,0 +1,39 @@
+/**
+ * Secret redaction for the session lens' file preview: heuristic masking of
+ * credential-shaped strings (API keys, bearer tokens, private key blocks,
+ * password assignments) before file content is shown in the sidebar. This
+ * layer applies ONLY to the session lens' preview pane — ordinary file reads
+ * (editor, untracked diff fallback) never pass through it, so ordinary
+ * files' content is untouched.
+ */
+
+/** One redaction rule: a pattern plus the replacement it masks matches to. */
+interface RedactRule {
+  pattern: RegExp
+  replacement: string
+}
+
+/** The heuristics, applied in order; `$1` keeps the leading keyword where the
+ *  rule matches an assignment shape. */
+const RULES: RedactRule[] = [
+  // PEM private key blocks (the whole block is one secret).
+  { pattern: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g, replacement: '[REDACTED PRIVATE KEY]' },
+  // Known token shapes (sk- keys, GitHub tokens, AWS ids, Slack, Google).
+  { pattern: /\b(?:sk-[A-Za-z0-9_-]{16,}|gh[pousr]_[A-Za-z0-9]{16,}|AKIA[0-9A-Z]{16}|xox[abprs]-[A-Za-z0-9-]{10,}|AIza[0-9A-Za-z_-]{30,})\b/g, replacement: '[REDACTED KEY]' },
+  // Authorization headers and bearer tokens.
+  { pattern: /([Aa]uthorization\s*:\s*)[^\n"']{4,}/g, replacement: '$1[REDACTED]' },
+  { pattern: /\b([Bb]earer\s+)[A-Za-z0-9._-]{16,}\b/g, replacement: '$1[REDACTED]' },
+  // Credential assignment shapes (password/secret/token/api-key = value).
+  { pattern: /(\b[A-Za-z_-]*(?:password|passwd|secret|token|apikey|api_key)[A-Za-z_-]*(?:\s*[:=]\s*))['"]?[^\s"',;){]{3,}/gi, replacement: '$1[REDACTED]' },
+]
+
+/**
+ * Mask credential-shaped strings in `text`. Best-effort by design: the goal
+ * is to keep the common accident (a key echoed into a file the model wrote)
+ * out of the sidebar, not to parse every secret format ever shipped.
+ */
+export function redactSecrets(text: string): string {
+  let out = text
+  for (const rule of RULES) out = out.replace(rule.pattern, rule.replacement)
+  return out
+}

package/src/client/sidebar.module.css

@@ -1696,6 +1696,121 @@ body[data-dsh-sidebar-dragging] .panel {
   outline: none;
 }
 
+/* ── The unified changes tab's dual-lens toggle + session lens ─────────── */
+
+.changesLensToggle {
+  flex: none;
+  display: flex;
+  gap: 2px;
+  padding: 2px;
+}
+
+.changesLensTab {
+  flex: 1;
+  height: 24px;
+  border: none;
+  border-radius: 6px;
+  background: transparent;
+  color: var(--dsw-alias-label-secondary);
+  font: var(--dsw-font-xxxs-strong-11);
+  cursor: pointer;
+}
+
+.changesLensTab:hover {
+  background: var(--dsw-alias-interactive-bg-hover);
+}
+
+.changesLensTabActive,
+.changesLensTabActive:hover {
+  background: var(--dsw-alias-interactive-bg-active);
+  color: var(--dsw-alias-label-primary);
+}
+
+.sessionLens {
+  flex: 1;
+  min-height: 0;
+  overflow-y: auto;
+}
+
+.sessionLensBar {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  height: 26px;
+  padding: 0 4px;
+}
+
+.sessionLensCount {
+  flex: 1;
+  min-width: 0;
+  font: var(--dsw-font-xxxs-11);
+  color: var(--dsw-alias-label-tertiary);
+}
+
+.sessionLensEmpty {
+  padding: 16px;
+  font: var(--dsw-font-xxs-12);
+  color: var(--dsw-alias-label-tertiary);
+  text-align: center;
+}
+
+.sessionLensItem {
+  border-bottom: 1px solid var(--dsw-alias-border-l1);
+}
+
+.sessionLensRow {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  width: 100%;
+  box-sizing: border-box;
+  min-height: 30px;
+  padding: 4px 10px;
+  border: none;
+  border-radius: 6px;
+  background: transparent;
+  color: var(--dsw-alias-label-primary);
+  text-align: left;
+  cursor: pointer;
+  outline: none;
+}
+
+.sessionLensRow:hover {
+  background: var(--dsw-alias-interactive-bg-hover);
+}
+
+.sessionLensPath {
+  flex: 1;
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  direction: rtl;
+  text-align: left;
+}
+
+.sessionLensMeta {
+  flex: none;
+  font: var(--dsw-font-xxxs-11);
+  color: var(--dsw-alias-label-tertiary);
+}
+
+.sessionLensPreview {
+  max-height: 260px;
+  overflow: auto;
+  margin: 0 8px 6px;
+  padding: 6px 8px;
+  border: 1px solid var(--dsw-alias-border-l1);
+  border-radius: 6px;
+  background: var(--dsw-alias-bg-layer-1);
+  font-family: var(--ds-font-family-code);
+  font-size: var(--dsw-font-xxxs-11-font-size);
+  line-height: 1.5;
+  color: var(--dsw-alias-label-primary);
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
 /* The "Agent 正在等待 {needle}" wait banner: a warn-toned strip above the
    terminal surface while the model blocks in terminal_wait_for; the needle
    ellipsizes inline and the full text rides the title tooltip. */

package/src/index.ts

@@ -31,6 +31,7 @@ import {
 } from './config.ts'
 import { parentOf, requireAbsolute, listDirectory, rootLabel } from './fs-tree.ts'
 import { removeWorkspaceEntry, renameWorkspaceEntry, writeWorkspaceUpload } from './fs-operations.ts'
+import { sessionFileOps } from './changes-ops.ts'
 import { ensureWorkspacePath, ensureWorkspaceWritePath } from './path-security.ts'
 import { searchFiles } from './fs-search.ts'
 import { extractFrameAncestors } from './browser-probe.ts'
@@ -514,6 +515,18 @@ function buildApi(
     // exists. Kill is fenced to the owning session by the jobs registry.
     'jobs.output': (payload) => jobsApi.output(payload),
     'jobs.kill': (payload) => jobsApi.kill(payload),
+    // The session lens: file operations the model performed in this session,
+    // parsed from the session's own event log (read-only replay — the
+    // model's job_output cursor is never touched). Cold sessions degrade to
+    // an empty list (only live sessions have an in-memory log on this host).
+    'changes.ops': async (payload) => {
+      const sessionId = requireString(payload, 'sessionId')
+      const stored = ctx.sessions.get(sessionId)
+      const events = stored?.snapshotEvents !== undefined
+        ? stored.snapshotEvents() as unknown as Parameters<typeof sessionFileOps>[0]
+        : []
+      return { ops: sessionFileOps(events) }
+    },
     // Subagent live previews: one batch request per refresh; the route folds
     // the newest text/tool activity of every running child in the tree.
     'subagents.live': (payload) => subagentLiveApi.live(payload),