dsh-file-activity 0.4.7 → 0.5.0

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 本文件记录 dsh-file-activity 的所有版本变更。格式遵循 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/)，版本号遵循 [语义化版本](https://semver.org/lang/zh-CN/)。
 
+## [0.5.0] - 2026-08-26
+
+### 变更
+
+- feat(file-activity): bash 命令文件操作识别（rm/touch/mv/cp/tee/重定向）+ 0 值计数徽标过滤
+- docs+test: 全面审查修复——文档同步补全 + mermaid 测试增强
+
 ## [0.4.7] - 2026-08-25
 
 ### 变更

package/README.md

@@ -36,6 +36,9 @@
 
 ## 安装
 
+> 💡 **npm 安装（普通用户推荐）**：`dsh plugin --profile web add dsh-file-activity`——无需克隆本仓库；以下 link 方式供本仓库开发者使用。
+
+
 前置：已安装 `dsh-better-sidebar`（v0.12+，推荐 v0.14）。
 
 ```sh

package/lib/bash-ops.js

@@ -0,0 +1,99 @@
+import { homedir } from 'node:os'
+import { isAbsolute, join, normalize, resolve } from 'node:path'
+
+/**
+ * bash-ops.js — command → file-operation mapping for the bash intent parser
+ * (see bash-parse.js for the segment/token layer).
+ *
+ * Conservative by design: only unambiguous commands map to ops; paths the
+ * parser cannot resolve statically (option-argument pairs, `-t` relocations,
+ * sed without -i, unknown commands) contribute nothing.
+ */
+/** Options of a command that consume the following argument (never a path). */
+function optionArgsOf(cmd) {
+  if (cmd === 'touch') return new Set(['-d', '-t', '-r', '--date', '--time', '--reference'])
+  return new Set()
+}
+
+/**
+ * Path arguments with options stripped: `-rf` / `--force` / `--` are skipped;
+ * options listed in `optionArgs` consume their following argument too.
+ */
+export function positionalArgs(args, optionArgs) {
+  const paths = []
+  let afterDashDash = false
+  for (let i = 0; i < args.length; i += 1) {
+    const token = args[i]
+    if (!afterDashDash && token.text === '--') {
+      afterDashDash = true
+      continue
+    }
+    if (!afterDashDash && token.text.startsWith('-') && token.text !== '-') {
+      if (optionArgs.has(token.text)) i += 1
+      continue
+    }
+    paths.push(token)
+  }
+  return paths
+}
+
+/**
+ * -t / --target-directory variants (cp/mv/install) relocate sources into a
+ * directory; statically resolving the real destination is unreliable, so the
+ * whole segment is skipped (conservative: never record a wrong path).
+ */
+function hasTargetDirOption(cmd, args) {
+  if (cmd !== 'mv' && cmd !== 'cp' && cmd !== 'install') return false
+  return args.some((token) => token.text === '-t' || token.text === '--target-directory')
+}
+
+/** Dispatch one segment's command to the matching file-op mapping. */
+export function pushCommandOps(ops, cmd, args, cwd) {
+  if (hasTargetDirOption(cmd, args)) return
+  const optionArgs = optionArgsOf(cmd)
+  const paths = positionalArgs(args, optionArgs)
+  if (cmd === 'rm') return pushAll(ops, 'delete', paths, cwd)
+  if (cmd === 'touch' || cmd === 'tee') return pushAll(ops, 'write', paths, cwd)
+  if (cmd === 'mv') return pushMv(ops, paths, cwd)
+  if (cmd === 'cp' || cmd === 'install') return pushLast(ops, paths, cwd)
+  if (cmd === 'sed' && hasInPlace(args)) pushLast(ops, positionalArgs(args, optionArgs), cwd)
+}
+
+/** All positional paths get the same op (rm / touch / tee). */
+function pushAll(ops, op, paths, cwd) {
+  for (const token of paths) pushOp(ops, op, token, cwd)
+}
+
+/** Only the last path is the write destination (cp / install). */
+function pushLast(ops, paths, cwd) {
+  if (paths.length === 0) return
+  pushOp(ops, 'write', paths[paths.length - 1], cwd)
+}
+
+/** mv: all but the last are sources (delete), the last is the destination. */
+function pushMv(ops, paths, cwd) {
+  if (paths.length === 0) return
+  for (let i = 0; i < paths.length - 1; i += 1) pushOp(ops, 'delete', paths[i], cwd)
+  pushOp(ops, 'write', paths[paths.length - 1], cwd)
+}
+
+/** sed writes files only with -i / --in-place (also -i.bak style). */
+function hasInPlace(args) {
+  return args.some((token) => /^-i($|[A-Za-z0-9_.])/.test(token.text) || token.text === '--in-place')
+}
+
+export function pushOp(ops, op, token, cwd) {
+  const path = resolveSafe(token, cwd)
+  if (path !== '') ops.push({ op, path })
+}
+
+/** Resolve a token to an absolute path; '' when unsafe or unusable. */
+export function resolveSafe(token, cwd) {
+  if (!token.safe || token.text === '') return ''
+  let path = token.text
+  if (path === '~') return homedir()
+  if (path.startsWith('~/')) path = join(homedir(), path.slice(2))
+  if (path.includes('\0')) return ''
+  const abs = isAbsolute(path) ? normalize(path) : resolve(cwd, path)
+  return normalize(abs)
+}

package/lib/bash-parse.js

@@ -0,0 +1,262 @@
+/**
+ * Lightweight static parser for bash command text → file-touch intents.
+ *
+ * Feeds the `tools/pre-execute` observer (index.js): a bash tool call carries
+ * the exact command string, and we resolve the file operations it is about to
+ * perform. Conservative by design — 宁可漏报也不误报:
+ *
+ *  - only well-known commands with unambiguous file effects are recognized
+ *    (rm → delete; touch / cp / install / tee / sed -i / `> file` → write;
+ *    mv → source delete + destination write) — see bash-ops.js;
+ *  - paths containing variables ($…), command substitution ($(…), `…`),
+ *    globs (* ? [ {) or fd redirections (2>&1) are skipped;
+ *  - unknown commands contribute nothing (only their `>` redirects count);
+ *  - relative paths resolve against the base dir (workdir / session cwd),
+ *    and `cd <dir>` segments update the base for the following segments.
+ *
+ * The returned operations are applied through the regular record pipeline
+ * ('write' is classified create/modify by the known-file registry, 'delete'
+ * removes the file from stats), so the view stays consistent with the disk.
+ */
+import { pushCommandOps, positionalArgs, resolveSafe, pushOp } from './bash-ops.js'
+
+/** Prefix wrappers that do not touch files themselves. */
+const PREFIX_CMDS = new Set(['sudo', 'nohup', 'command', 'time', 'env'])
+
+/** Parse one bash command into [{ op: 'write'|'delete', path }] (deduped). */
+export function parseBashFileOps(command, baseDir) {
+  const ops = []
+  let cwd = baseDir
+  for (const segment of splitSegments(command)) {
+    const tokens = tokenize(segment)
+    const start = commandStartOf(tokens)
+    if (start < 0) continue
+    const cmd = basenameOf(tokens[start].text)
+    const args = tokens.slice(start + 1)
+    if (cmd === 'cd') {
+      const target = cdTargetOf(args)
+      if (target !== '') cwd = resolveSafe({ text: target, safe: true }, cwd)
+      continue
+    }
+    pushCommandOps(ops, cmd, args, cwd)
+    pushRedirectOps(ops, tokens, cwd)
+  }
+  return dedupeOps(ops)
+}
+
+// ── quoting pre-pass ───────────────────────────────────────────────────────
+
+/**
+ * Per-char quote state: 0 = unquoted, 1 = single-quoted, 2 = double-quoted,
+ * -1 = the quote character itself (kept in segment text, stripped by
+ * tokenize). Escape handling: outside quotes and inside double quotes a
+ * backslash makes the next char literal; inside single quotes backslash is
+ * literal (bash). The output array has one entry per input character.
+ */
+function quoteMarks(text) {
+  const marks = []
+  let quote = 0
+  let i = 0
+  while (i < text.length) {
+    const step = quoteStep(text, i, quote)
+    marks.push(...step.marks)
+    quote = step.quote
+    i += step.advance
+  }
+  return marks
+}
+
+/** One character's quote transition: { marks, quote, advance }. */
+function quoteStep(text, i, quote) {
+  const ch = text[i]
+  if (ch === '\\' && quote !== 1 && i + 1 < text.length) return { marks: [quote, quote], quote, advance: 2 }
+  if (quote !== 0 && ch === quoteCharOf(quote)) return { marks: [-1], quote: 0, advance: 1 }
+  if (quote === 0 && isQuoteChar(ch)) return { marks: [-1], quote: quoteOf(ch), advance: 1 }
+  return { marks: [quote], quote, advance: 1 }
+}
+
+function quoteCharOf(quote) {
+  return quote === 1 ? "'" : '"'
+}
+
+function quoteOf(ch) {
+  return ch === "'" ? 1 : 2
+}
+
+function isQuoteChar(ch) {
+  return ch === "'" || ch === '"'
+}
+
+// ── segment splitting ──────────────────────────────────────────────────────
+
+/**
+ * Split a command on the top-level separators && || ; | & and newlines.
+ * Quoted separators never split; a bare `&` (background marker) splits only
+ * when followed by whitespace/end — `2>&1` stays one word.
+ */
+export function splitSegments(command) {
+  const marks = quoteMarks(command)
+  const segments = []
+  let current = ''
+  for (let i = 0; i < command.length; i += 1) {
+    if (marks[i] !== 0 || !isSeparator(command, i)) {
+      current += command[i]
+      continue
+    }
+    flushSegment(segments, current)
+    current = ''
+    i += separatorLength(command, i) - 1
+  }
+  flushSegment(segments, current)
+  return segments
+}
+
+function isSeparator(command, i) {
+  const ch = command[i]
+  if (ch === '&') return command[i + 1] === '&' || i + 1 >= command.length || /\s/.test(command[i + 1])
+  return ch === '|' || ch === ';' || ch === '\n' || ch === '\r'
+}
+
+function separatorLength(command, i) {
+  return command[i] === '&' && command[i + 1] === '&' ? 2 : 1
+}
+
+function flushSegment(segments, current) {
+  const trimmed = current.trim()
+  if (trimmed !== '') segments.push(trimmed)
+}
+
+// ── tokenizing ─────────────────────────────────────────────────────────────
+
+/**
+ * Split one segment into words. Tokens keep their quoted content (quotes
+ * stripped) and a `safe` flag: false when the word contains variables /
+ * command substitution / globs — such paths must never be recorded.
+ */
+export function tokenize(segment) {
+  const marks = quoteMarks(segment)
+  const tokens = []
+  let current = ''
+  let safe = true
+  const push = () => {
+    if (current !== '') {
+      tokens.push({ text: current, safe })
+      current = ''
+      safe = true
+    }
+  }
+  for (let i = 0; i < segment.length; i += 1) {
+    const ch = segment[i]
+    if (marks[i] === -1) continue // quote characters are stripped
+    if (marks[i] === 0 && /\s/.test(ch)) {
+      push()
+      continue
+    }
+    if (isEscape(segment, i, marks[i])) {
+      current += segment[i + 1]
+      i += 1
+      continue
+    }
+    if (isUnsafeChar(ch, marks[i])) {
+      safe = false
+      current += ch
+      continue
+    }
+    current += ch
+  }
+  push()
+  return tokens
+}
+
+/** Backslash escapes the next char outside quotes and inside double quotes. */
+function isEscape(segment, i, quote) {
+  if (segment[i] !== '\\' || quote === 1) return false
+  return i + 1 < segment.length
+}
+
+/** `$` expands everywhere except single quotes; globs only outside quotes. */
+function isUnsafeChar(ch, quote) {
+  if (ch === '$') return quote !== 1
+  if (quote !== 0) return false
+  return ch === '`' || ch === '*' || ch === '?' || ch === '[' || ch === '{'
+}
+
+// ── command head ───────────────────────────────────────────────────────────
+
+/** Index of the first real command token (skipping VAR=x and wrappers). */
+function findStartOf(tokens, index) {
+  while (index < tokens.length) {
+    const token = tokens[index]
+    if (isAssignment(token.text) || PREFIX_CMDS.has(basenameOf(token.text))) {
+      index += 1
+      continue
+    }
+    return index
+  }
+  return -1
+}
+
+function commandStartOf(tokens) {
+  const start = findStartOf(tokens, 0)
+  if (start < 0) return -1
+  if (basenameOf(tokens[start].text) === 'env') {
+    // env VAR=value cmd: assignments after env are skipped too.
+    return findStartOf(tokens, start + 1)
+  }
+  return start
+}
+
+function isAssignment(text) {
+  const eq = text.indexOf('=')
+  if (eq <= 0) return false
+  return /^[A-Za-z_][A-Za-z0-9_]*=/.test(text)
+}
+
+function basenameOf(text) {
+  const slash = text.lastIndexOf('/')
+  return slash === -1 ? text : text.slice(slash + 1)
+}
+
+// ── paths & redirects ──────────────────────────────────────────────────────
+
+/** `> file` / `>> file` / `2> file` redirects write the target file. */
+function pushRedirectOps(ops, tokens, cwd) {
+  for (let i = 0; i < tokens.length; i += 1) {
+    const match = /^(\d*)>{1,2}(.*)$/.exec(tokens[i].text)
+    if (match === null) continue
+    const target = redirectTarget(tokens, i, match[2])
+    if (target === null) continue
+    pushOp(ops, 'write', { text: target.text, safe: target.safe }, cwd)
+  }
+}
+
+/** The file a redirect writes; null when it is an fd / /dev/null / missing. */
+function redirectTarget(tokens, i, inline) {
+  if (inline !== '') return usable(inline, tokens[i].safe) ? { text: inline, safe: tokens[i].safe } : null
+  const next = tokens[i + 1]
+  if (next === undefined || !next.safe) return null
+  return usable(next.text, true) ? { text: next.text, safe: true } : null
+}
+
+function usable(text, safe) {
+  if (!safe || text === '') return false
+  return !text.startsWith('&') && !text.startsWith('/dev/')
+}
+
+/** `cd` target: the first positional argument ('' when missing/unsafe). */
+function cdTargetOf(args) {
+  const paths = positionalArgs(args)
+  if (paths.length === 0) return ''
+  return paths[0].safe ? paths[0].text : ''
+}
+
+/** Dedupe by op+path, keeping the first occurrence. */
+function dedupeOps(ops) {
+  const seen = new Set()
+  return ops.filter((op) => {
+    const key = `${op.op}\u0000${op.path}`
+    if (seen.has(key)) return false
+    seen.add(key)
+    return true
+  })
+}

package/lib/client.js

@@ -70,6 +70,7 @@ window.__ModuleLoader__.load({
       read: () => (isZh() ? '读取' : 'read'),
       create: () => (isZh() ? '新增' : 'create'),
       modify: () => (isZh() ? '修改' : 'modify'),
+      delete: () => (isZh() ? '删除' : 'delete'),
       readShort: () => (isZh() ? '读' : 'R'),
       createShort: () => (isZh() ? '增' : 'C'),
       modifyShort: () => (isZh() ? '改' : 'M'),
@@ -479,6 +480,7 @@ window.__ModuleLoader__.load({
 .dfa-op-create { color:var(--dsw-alias-state-success-primary); background:color-mix(in srgb, var(--dsw-alias-state-success-primary) 14%, transparent); }
 .dfa-op-modify { color:var(--dsw-alias-state-warn-primary); background:color-mix(in srgb, var(--dsw-alias-state-warn-primary) 16%, transparent); }
 .dfa-op-read { color:var(--dsw-alias-accent); background:color-mix(in srgb, var(--dsw-alias-accent) 12%, transparent); }
+.dfa-op-delete { color:var(--dsw-alias-state-danger-primary); background:color-mix(in srgb, var(--dsw-alias-state-danger-primary) 14%, transparent); }
 .dfa-counts { flex:none; display:flex; align-items:center; gap:3px; }
 .dfa-count { flex:none; display:inline-flex; align-items:center; justify-content:center; height:15px; padding:0 4px; border-radius:4px;
   font:var(--dsw-font-xxxs-strong-11); }
@@ -511,8 +513,8 @@ window.__ModuleLoader__.load({
 `
 
         // ── row rendering helpers (recent list & stats tree) ──────────────────
-    const opClass = (op) => (op === 'create' ? 'dfa-op-create' : op === 'modify' ? 'dfa-op-modify' : 'dfa-op-read')
-    const opLabel = (op) => (op === 'create' ? strings.create() : op === 'modify' ? strings.modify() : strings.read())
+    const opClass = (op) => (op === 'create' ? 'dfa-op-create' : op === 'modify' ? 'dfa-op-modify' : op === 'delete' ? 'dfa-op-delete' : 'dfa-op-read')
+    const opLabel = (op) => (op === 'create' ? strings.create() : op === 'modify' ? strings.modify() : op === 'delete' ? strings.delete() : strings.read())
 
     /** Tooltip for a stats file row: absolute path + created / last-seen times. */
     const fileTitle = (abs, firstSeen, lastSeen) => {
@@ -522,13 +524,17 @@ window.__ModuleLoader__.load({
       return times.length > 0 ? `${abs}\n${times.join(' · ')}` : abs
     }
 
-    /** Three colored count pills for a file/dir node (read/create/modify). */
-    const countPills = (node) =>
-      createElement('span', { className: 'dfa-counts', style: { paddingLeft: '6px' } },
-        createElement('span', { className: 'dfa-count dfa-count-read' }, `${strings.readShort()} ${node.read}`),
-        createElement('span', { className: 'dfa-count dfa-count-create' }, `${strings.createShort()} ${node.create}`),
-        createElement('span', { className: 'dfa-count dfa-count-modify' }, `${strings.modifyShort()} ${node.modify}`),
-      )
+    /** Count pills for a file/dir node — only actions that actually happened are
+     *  shown (a zero count renders no pill; all-zero nodes render no pill group,
+     *  keeping untouched files visually quiet). */
+    const countPills = (node) => {
+      const pills = []
+      if (node.read > 0) pills.push(createElement('span', { className: 'dfa-count dfa-count-read' }, `${strings.readShort()} ${node.read}`))
+      if (node.create > 0) pills.push(createElement('span', { className: 'dfa-count dfa-count-create' }, `${strings.createShort()} ${node.create}`))
+      if (node.modify > 0) pills.push(createElement('span', { className: 'dfa-count dfa-count-modify' }, `${strings.modifyShort()} ${node.modify}`))
+      if (pills.length === 0) return null
+      return createElement('span', { className: 'dfa-counts', style: { paddingLeft: '6px' } }, ...pills)
+    }
 
     /** A stats-tree file row: icon + name + count pills + relative time. */
     const fileRow = (file, depth, onOpen) =>

package/lib/index.js

@@ -5,6 +5,8 @@
  *  - agent tool file operations arrive as `fs/observed` events (read / write /
  *    edit / str_replace_editor / read_image ...), with the tool execution as
  *    the actor (name + parsed arguments + owning agent).
+ *  - bash tool calls carry file-touching commands (rm/touch/mv/…): the
+ *    `tools/pre-execute` observer parses them and records the intents.
  *  - sidebar operations (files opened / saved through the better-sidebar
  *    explorer & editor) are reported by our client half through the
  *    `/file-activity/api/record` route.
@@ -17,16 +19,52 @@ import { createApiHandler } from './api-route.js'
 import { createMediaHandler } from './media-route.js'
 import { createFsObserver } from './observer.js'
 import { createStore } from './store.js'
+import { parseBashFileOps } from './bash-parse.js'
+import { sessionCwdOf } from './http.js'
 
 export const name = 'dsh-file-activity'
 
 export const inject = ['webServer', 'sessions', 'webRuntime']
 
+/** 观察型监听：只读取 bash 命令隐含的文件操作并上报，不拦截（返回 next()）。 */
+function observeBashIntents(exec, ctx, store) {
+  const sessionId = bashSessionOf(exec)
+  const command = bashCommandOf(exec)
+  if (sessionId === '' || command === '') return
+  const baseDir = bashBaseDirOf(exec, ctx, sessionId)
+  for (const touched of parseBashFileOps(command, baseDir)) {
+    store.record(sessionId, touched.path, touched.op, Date.now())
+  }
+}
+
+/** 会话 id：仅 bash 工具、agent id 非空时返回。 */
+function bashSessionOf(exec) {
+  if (exec?.name !== 'bash') return ''
+  const id = exec.agent?.id
+  return typeof id === 'string' && id !== '' ? id : ''
+}
+
+/** 命令文本：仅非空字符串时返回。 */
+function bashCommandOf(exec) {
+  const command = exec.arguments?.command
+  return typeof command === 'string' && command !== '' ? command : ''
+}
+
+/** 相对路径基准：workdir 参数优先，否则会话 cwd。 */
+function bashBaseDirOf(exec, ctx, sessionId) {
+  const workdir = exec.arguments?.workdir
+  return typeof workdir === 'string' && workdir !== '' ? workdir : sessionCwdOf(ctx, sessionId)
+}
+
 export function apply(ctx) {
   const store = createStore(ctx)
 
   // ── agent-side file operations ──────────────────────────────────────────
   ctx.on('fs/observed', createFsObserver(store.record))
+  ctx.on('tools/pre-execute', (exec, next) => {
+    observeBashIntents(exec, ctx, store)
+    return next()
+  })
 
   // ── routes ──────────────────────────────────────────────────────────────
   const fence = (request) => isTrustedApiRequest(request, ctx.webRuntime.trustedHosts)

package/lib/parts/i18n.part.js

@@ -22,6 +22,7 @@
       read: () => (isZh() ? '读取' : 'read'),
       create: () => (isZh() ? '新增' : 'create'),
       modify: () => (isZh() ? '修改' : 'modify'),
+      delete: () => (isZh() ? '删除' : 'delete'),
       readShort: () => (isZh() ? '读' : 'R'),
       createShort: () => (isZh() ? '增' : 'C'),
       modifyShort: () => (isZh() ? '改' : 'M'),

package/lib/parts/rows.part.js

@@ -1,6 +1,6 @@
     // ── row rendering helpers (recent list & stats tree) ──────────────────
-    const opClass = (op) => (op === 'create' ? 'dfa-op-create' : op === 'modify' ? 'dfa-op-modify' : 'dfa-op-read')
-    const opLabel = (op) => (op === 'create' ? strings.create() : op === 'modify' ? strings.modify() : strings.read())
+    const opClass = (op) => (op === 'create' ? 'dfa-op-create' : op === 'modify' ? 'dfa-op-modify' : op === 'delete' ? 'dfa-op-delete' : 'dfa-op-read')
+    const opLabel = (op) => (op === 'create' ? strings.create() : op === 'modify' ? strings.modify() : op === 'delete' ? strings.delete() : strings.read())
 
     /** Tooltip for a stats file row: absolute path + created / last-seen times. */
     const fileTitle = (abs, firstSeen, lastSeen) => {
@@ -10,13 +10,17 @@
       return times.length > 0 ? `${abs}\n${times.join(' · ')}` : abs
     }
 
-    /** Three colored count pills for a file/dir node (read/create/modify). */
-    const countPills = (node) =>
-      createElement('span', { className: 'dfa-counts', style: { paddingLeft: '6px' } },
-        createElement('span', { className: 'dfa-count dfa-count-read' }, `${strings.readShort()} ${node.read}`),
-        createElement('span', { className: 'dfa-count dfa-count-create' }, `${strings.createShort()} ${node.create}`),
-        createElement('span', { className: 'dfa-count dfa-count-modify' }, `${strings.modifyShort()} ${node.modify}`),
-      )
+    /** Count pills for a file/dir node — only actions that actually happened are
+     *  shown (a zero count renders no pill; all-zero nodes render no pill group,
+     *  keeping untouched files visually quiet). */
+    const countPills = (node) => {
+      const pills = []
+      if (node.read > 0) pills.push(createElement('span', { className: 'dfa-count dfa-count-read' }, `${strings.readShort()} ${node.read}`))
+      if (node.create > 0) pills.push(createElement('span', { className: 'dfa-count dfa-count-create' }, `${strings.createShort()} ${node.create}`))
+      if (node.modify > 0) pills.push(createElement('span', { className: 'dfa-count dfa-count-modify' }, `${strings.modifyShort()} ${node.modify}`))
+      if (pills.length === 0) return null
+      return createElement('span', { className: 'dfa-counts', style: { paddingLeft: '6px' } }, ...pills)
+    }
 
     /** A stats-tree file row: icon + name + count pills + relative time. */
     const fileRow = (file, depth, onOpen) =>

package/lib/parts/styles.part.js

@@ -44,6 +44,7 @@
 .dfa-op-create { color:var(--dsw-alias-state-success-primary); background:color-mix(in srgb, var(--dsw-alias-state-success-primary) 14%, transparent); }
 .dfa-op-modify { color:var(--dsw-alias-state-warn-primary); background:color-mix(in srgb, var(--dsw-alias-state-warn-primary) 16%, transparent); }
 .dfa-op-read { color:var(--dsw-alias-accent); background:color-mix(in srgb, var(--dsw-alias-accent) 12%, transparent); }
+.dfa-op-delete { color:var(--dsw-alias-state-danger-primary); background:color-mix(in srgb, var(--dsw-alias-state-danger-primary) 14%, transparent); }
 .dfa-counts { flex:none; display:flex; align-items:center; gap:3px; }
 .dfa-count { flex:none; display:inline-flex; align-items:center; justify-content:center; height:15px; padding:0 4px; border-radius:4px;
   font:var(--dsw-font-xxxs-strong-11); }

package/lib/state.js

@@ -35,12 +35,13 @@ export async function loadState(file) {
   return createState()
 }
 
-/** Map a raw operation kind (tool name or client op) to 'read' | 'write' | 'edit'. */
+/** Map a raw operation kind (tool name or client op) to 'read' | 'write' | 'edit' | 'delete'. */
 export function mapOp(op) {
   switch (op) {
     case 'write': return 'write'
     case 'edit':
     case 'str_replace_editor': return 'edit'
+    case 'delete': return 'delete'
     case 'read':
     case 'read_image':
     default: return 'read'
@@ -51,28 +52,43 @@ export function mapOp(op) {
  * Fold one observed operation into the state.
  * 'write' is classified create vs modify through the per-session known-file
  * registry (first contact = create, later writes = modify); edits are always
- * modifies. Each file's counters also track firstSeen (first contact time,
- * i.e. creation time) and lastSeen (most recent activity time).
+ * modifies. 'delete' removes the file from stats entirely (disk state is the
+ * truth: the file no longer exists) and records a single delete history entry.
+ * Each file's counters also track firstSeen (first contact time, i.e.
+ * creation time) and lastSeen (most recent activity time).
  * Returns true when a record was produced.
  */
 export function applyRecord(state, sessionId, path, op, time) {
   if (!isValidRecordTarget(sessionId, path)) return false
   const session = state.sessions[sessionId] ?? (state.sessions[sessionId] = { known: {}, counts: {}, recent: [] })
   const timestamp = typeof time === 'number' ? time : Date.now()
+  if (op === 'delete') return applyDelete(session, path, timestamp)
   const firstSeen = typeof session.known[path] === 'number' ? session.known[path] : timestamp
   const finalOp = classifyOp(op, session.known[path])
   session.known[path] = firstSeen
   const counts = session.counts[path] ?? (session.counts[path] = { read: 0, create: 0, modify: 0 })
   bumpCount(counts, finalOp, firstSeen, timestamp)
-  // Newest-first LRU history: revisiting a path moves it to the front
-  // instead of appending a duplicate; cap at RECENT_LIMIT entries.
-  const existing = session.recent.findIndex((entry) => entry.path === path)
-  if (existing !== -1) session.recent.splice(existing, 1)
-  session.recent.unshift({ path, op: finalOp, time: timestamp })
-  if (session.recent.length > RECENT_LIMIT) session.recent.length = RECENT_LIMIT
+  pushRecent(session.recent, path, finalOp, timestamp)
   return true
 }
 
+/** 'delete': the file no longer exists on disk — drop it from stats and the
+ *  known-file registry, and record a single delete history entry. */
+function applyDelete(session, path, timestamp) {
+  delete session.counts[path]
+  delete session.known[path]
+  pushRecent(session.recent, path, 'delete', timestamp)
+  return true
+}
+
+/** Newest-first LRU history: one entry per path, cap at RECENT_LIMIT. */
+function pushRecent(recent, path, op, time) {
+  const existing = recent.findIndex((entry) => entry.path === path)
+  if (existing !== -1) recent.splice(existing, 1)
+  recent.unshift({ path, op, time })
+  if (recent.length > RECENT_LIMIT) recent.length = RECENT_LIMIT
+}
+
 /** A record target is valid when both ids are non-empty strings (no NUL). */
 function isValidRecordTarget(sessionId, path) {
   return typeof sessionId === 'string' && sessionId !== ''
@@ -135,6 +151,8 @@ export function isRecordedPath(state, sessionId, path) {
   const session = state.sessions[sessionId]
   if (session === undefined) return false
   if (session.counts !== undefined && typeof session.counts[path] === 'object' && session.counts[path] !== null) return true
-  if (Array.isArray(session.recent)) return session.recent.some((entry) => entry.path === path)
+  // Deleted files no longer exist on disk — a delete history entry must not
+  // authorize media preview for them.
+  if (Array.isArray(session.recent)) return session.recent.some((entry) => entry.path === path && entry.op !== 'delete')
   return false
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-file-activity",
-  "version": "0.4.7",
+  "version": "0.5.0",
   "description": "DSH 侧边栏文件活动插件：按 LRU 记录文件读取/新增/修改事件（最近访问），按绝对路径树形统计（文件统计），点击文件浮窗预览（代码高亮/Markdown/图片/PDF）。DSH web plugin: file activity tracker — LRU recent-access list plus per-file read/create/modify counts in a folder tree, with floating preview.",
   "type": "module",
   "main": "lib/index.js",
@@ -57,4 +57,4 @@
     }
   },
   "license": "MIT"
-}
+}