dsh-mindmap 0.8.3 → 0.10.0

package/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 All notable changes to this project are documented here. Release-specific notes are also published on GitHub Releases.
 
+## [Unreleased]
+
+### Added
+
+- Collapsible subtrees: every node with children shows a small toggle on its connector. Collapsing hides the subtree and reports how many nodes are hidden, which keeps large maps navigable. The state is view-only — the markdown file is untouched and image export still covers the full subtree. Collapsed nodes reset when the document changes, and stale ids are pruned after the AI rewrites the tree.
+
+### Fixed
+
+- 画布拖拽不再吞掉折叠开关等控件的点击。
+- 目录打开/焦点同步：宿主草稿 API 不可读时不再静默放弃；有非空草稿时指令转入剪贴板。
+- Settings now wait for a late-arriving client connection instead of permanently capturing its initial absence. The client also supports direct settings descriptors and the current positional update API, while retaining the legacy envelopes.
+- Canvas dragging remains available horizontally and vertically when the map fits inside the viewport. Native scrolling is used first; bounded offset compensation continues the drag at an edge, and Fit or node focus returns the map to center.
+- Mindmap file access now fails closed when the session working directory is unavailable. Reads are limited during streaming rather than trusting a pre-read size check, and updates use a same-directory temporary file plus atomic replacement to avoid partial writes.
+- Pathological Markdown tables now have row, column, and total-cell limits. PNG export rejects oversized canvas allocations instead of risking a browser crash.
+- Switching sessions clears pending mindmap state and ignores stale directory responses; repeated resize events no longer disable automatic canvas fitting.
+- Writes now require native approval by default. Directory opening and focus synchronization never overwrite a non-empty or unreadable chat draft.
+- The tool guidance no longer implies that a placeholder node needs a trailing space: any list item with no text after the marker becomes a placeholder.
+
 ## [0.8.2] - 2026-09-09
 
 ### Added

package/README.md

@@ -23,9 +23,10 @@ A DeepSeek Harness plugin that turns a plain Markdown file into a live mindmap.
 - **Single-mindmap mode** — two tabs only: 目录 (tree) and 脑图 (the current mindmap); opening another `.md` replaces the previous one.
 - **"What you see is what the AI edits"** — when the visible mindmap differs from the AI's working document, the panel automatically asks the AI to open it, keeping the chat focus in sync.
 - **MarkGrove-style mapping** — heading hierarchy, nested lists (empty items become placeholder nodes), code blocks as leaf nodes, paragraphs promoted to their own nodes (019 block concept), stable structural IDs, and orthogonal connector lines between nodes.
-- **Centered canvas with zoom and pan** — the mindmap opens centered in the canvas (scrollable without edge clipping when larger); a floating zoom bar at the canvas top-right (zoom out / percent / zoom in / fit) applies auto fit-to-view on open (small maps stay at 100%), steps through 25%–300% with a stable view center, and keeps re-fitting as the AI edits — until you zoom manually. Click any node to zoom in on it and its whole subtree, with the node pinned at the left-center of the canvas. The canvas also pans by drag: the **middle button** anywhere (even over a node), the **left button on blank canvas** (the Mac trackpad「click and drag」path), or **Space + left button** when the drag must start on a card. Content follows the pointer 1:1, blank space shows a grab hand, and a 4px threshold separates drag from click — so clicking blank space still clears the selection and clicking a node still focuses it, while a real drag never wipes the selection ring.
+- **Centered canvas with zoom and pan** — the mindmap opens centered in the canvas (scrollable without edge clipping when larger); a floating zoom bar at the canvas top-right (zoom out / percent / zoom in / fit) applies auto fit-to-view on open (small maps stay at 100%), steps through 25%–300% with a stable view center, and keeps re-fitting as the AI edits — until you zoom manually. Click any node to zoom in on it and its whole subtree, with the node pinned at the left-center of the canvas. The canvas also pans by drag: the **middle button** anywhere (even over a node), the **left button on blank canvas** (the Mac trackpad「click and drag」path), or **Space + left button** when the drag must start on a card. Panning works in both directions even when content does not overflow; content follows the pointer 1:1, blank space shows a grab hand, and a 4px threshold separates drag from click — so clicking blank space still clears the selection and clicking a node still focuses it, while a real drag never wipes the selection ring.
+- **Collapsible subtrees** — every node with children carries a small toggle on its connector: collapsing hides the whole subtree and reports how many nodes are hidden, so large maps stay navigable. It is view state only — the markdown file is untouched, image export still covers the full subtree, and switching documents expands everything again.
 - **PNG export** — one click on 导出图片 exports the current mindmap.
-- **Safety** — `mindmap_create` / `mindmap_update` are approval-free by default (files are git-managed) with a `requireApproval` switch as an escape hatch (when on, both write tools ask); the client has **no write path** to the filesystem — every edit goes through the AI tools.
+- **Safety** — `mindmap_create` / `mindmap_update` require native approval by default. Automation can explicitly opt out with `requireApproval: false`; the client has **no write path** to the filesystem — every edit goes through the AI tools.
 
 ## Requirements
 

package/README.zh-CN.md

@@ -23,9 +23,10 @@
 - **单脑图模式**——面板只有「目录」和「脑图」两个 tab，打开新脑图替换旧的那颗。
 - **「所见即所编」焦点同步**——可见脑图与 AI 工作文档不一致时，面板自动让 AI 打开它，聊天焦点始终跟随你的眼睛。
 - **MarkGrove 同款映射与连线**——标题层级挂树、列表缩进（空项 = 占位节点）、代码块叶节点、段落升格为独立节点（019 块概念）、稳定结构 ID、节点间直角折线。
-- **画布居中、缩放与平移**——脑图打开后居中呈现（超出画布时可滚动、无边缘裁剪）；画布右上角浮动缩放条（缩小 / 比例 / 放大 / 适配），打开时自动适配合适比例（小图保持 100%），25%–300% 逐级缩放且视图中心不跳变，AI 编辑后持续自动再适配，直到你手动缩放。点击任意节点即可聚焦：节点滚到画布左侧居中，视图放大到它和整棵子树完整可见（上限 100%）。画布还能拖着走：**中键**随处拖（含节点上）、**空白处左键拖**（Mac 触控板「点按并拖移」）、或 **Space + 左键拖**（必须从节点上起手时）；内容跟手 1:1，空白处呈抓手光标，4px 阈值把拖与点分开——点空白仍取消选中、点节点仍聚焦，真拖不会误清选中圈。
+- **画布居中、缩放与平移**——脑图打开后居中呈现（超出画布时可滚动、无边缘裁剪）；画布右上角浮动缩放条（缩小 / 比例 / 放大 / 适配），打开时自动适配合适比例（小图保持 100%），25%–300% 逐级缩放且视图中心不跳变，AI 编辑后持续自动再适配，直到你手动缩放。点击任意节点即可聚焦：节点滚到画布左侧居中，视图放大到它和整棵子树完整可见（上限 100%）。画布还能拖着走：**中键**随处拖（含节点上）、**空白处左键拖**（Mac 触控板「点按并拖移」）、或 **Space + 左键拖**（必须从节点上起手时）；无论内容是否溢出都可横纵双向拖动，内容跟手 1:1，空白处呈抓手光标，4px 阈值把拖与点分开——点空白仍取消选中、点节点仍聚焦，真拖不会误清选中圈。
+- **子树折叠**——有子节点的节点在连线起点上带一个小开关：折叠后隐藏整棵子树并提示隐藏了多少节点，超大脑图也能逐层看。折叠只是视图状态，不改 markdown 文件，导出图片仍是完整子树；切换文档自动全部展开。
 - **PNG 导出**——面板右上角「导出图片」一键导出当前脑图。
-- **安全**——`mindmap_create`/`mindmap_update` 默认免原生审批（文件受 git 管控），留 `requireApproval` 开关作后悔药（开启后两个写工具都走审批）；客户端**没有任何写文件通道**，一切编辑都经 AI 工具。
+- **安全**——`mindmap_create`/`mindmap_update` 默认进入原生审批；可通过 `requireApproval: false` 为自动化场景明确关闭。客户端**没有任何写文件通道**，一切编辑都经 AI 工具。
 
 ## 环境要求
 

package/client.js

@@ -264,6 +264,11 @@ window.__ModuleLoader__.load({
 			};
 		}
 
+		// 表格网格会按分隔行补齐，单独限额以防小体积输入膨胀成海量单元格。
+		const MAX_TABLE_COLUMNS = 100;
+		const MAX_TABLE_ROWS = 1000;
+		const MAX_TABLE_CELLS = 10000;
+
 		/** 缩进宽度：tab 按 4 空格折算。 */
 		function indentWidth(raw) {
 			let width = 0;
@@ -309,7 +314,8 @@ window.__ModuleLoader__.load({
 			if (node.kind === "code") return data.code || node.topic || "";
 			if (node.kind === "table" && Array.isArray(data.rows) && data.rows.length > 0) {
 				// data.rows 不含分隔行（解析时剔除）；复制时补回，粘回 Markdown 仍是合法表格。
-				const lines = data.rows.map((row) => `| ${row.join(" | ")} |`);
+				const escapeCell = (cell) => String(cell ?? "").replace(/\\/g, "\\\\").replace(/\|/g, "\\|");
+				const lines = data.rows.map((row) => `| ${row.map(escapeCell).join(" | ")} |`);
 				if (data.rows.length > 1) lines.splice(1, 0, `| ${data.rows[0].map(() => "---").join(" | ")} |`);
 				return lines.join("\n");
 			}
@@ -480,30 +486,39 @@ window.__ModuleLoader__.load({
 					// 019 表格块：连续 | 行且第二行为分隔行 → table 节点（003 §5.5，
 					// data.rows 全量保留，单元格不拆子节点）。不满足分隔行条件的 | 行
 					// 按普通段落处理。
-					if (/^\s*\|/.test(line)) {
+					if (/^\s*\|/.test(line) && i + 1 < lineList.length && isTableSeparator(lineList[i + 1])) {
 						const rows = [];
+						let truncated = false;
 						let j = i;
-						for (; j < lineList.length && /^\s*\|/.test(lineList[j]); j++) rows.push(lineList[j]);
-						if (rows.length >= 2 && isTableSeparator(rows[1])) {
+						for (; j < lineList.length && /^\s*\|/.test(lineList[j]); j++) {
+							if (rows.length < MAX_TABLE_ROWS) rows.push(lineList[j]);
+							else truncated = true;
+						}
+						if (rows.length >= 2) {
 							flushParagraph();
 							listStack = [];
 							i = j - 1;
 							// GFM 对齐契约：列数钉死在分隔行。表头与数据行同等待遇：
 							// 少列补空、多列截断——未转义竖线切碎的行顶多内容错位，网格永不参差。
-							const cols = parseTableRow(rows[1]).length;
+							const detectedCols = parseTableRow(rows[1]).length;
+							const cols = Math.min(detectedCols, MAX_TABLE_COLUMNS);
+							if (detectedCols > cols) truncated = true;
+							const maxRows = Math.min(rows.length, Math.max(2, Math.floor(MAX_TABLE_CELLS / cols)));
+							if (rows.length > maxRows) truncated = true;
+							const visibleRows = rows.slice(0, maxRows);
 							const toCols = (cells) => {
 								if (cells.length >= cols) return cells.slice(0, cols);
 								return cells.concat(new Array(cols - cells.length).fill(""));
 							};
-							const header = toCols(parseTableRow(rows[0]));
-							const body = rows.slice(2).map((row) => toCols(parseTableRow(row)));
+							const header = toCols(parseTableRow(visibleRows[0]));
+							const body = visibleRows.slice(2).map((row) => toCols(parseTableRow(row)));
 							const tableRows = [header].concat(body);
 							appendNode({
 								id: idOf("table", tableRows.map((r) => r.join("\u0001")).join("\u0002"), parentPathOf()),
 								kind: "table",
-								topic: `${tableRows.length}×${cols} 表格`,
+								topic: truncated ? `${tableRows.length}×${cols} 表格（已截断）` : `${tableRows.length}×${cols} 表格`,
 								children: [],
-								data: { rows: tableRows },
+								data: { rows: tableRows, truncated },
 							});
 							continue;
 						}
@@ -943,6 +958,75 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 
+		//#region 025 草稿保护：能力探测（宿主是否让插件读到聊天草稿）
+		/**
+		 * 读取当前聊天草稿。宿主契约只保证 setDraft/submit，读取面属可选能力：
+		 * 逐个探测已知形态，读不到返回 null（= 不可知，不等于空草稿）。
+		 */
+		function readDraftText(inputActions) {
+			if (!inputActions) return null;
+			try {
+				if (typeof inputActions.getDraft === "function") return String(inputActions.getDraft() ?? "");
+				if (typeof inputActions.draft === "string") return inputActions.draft;
+				if (typeof inputActions.getState === "function") {
+					const state = inputActions.getState();
+					if (state && typeof state.draft === "string") return state.draft;
+				}
+			} catch {
+				return null;
+			}
+			return null;
+		}
+
+		/**
+		 * 是否因「已有未发送草稿」而放弃自动发送。只有确实读到非空草稿才拦截；
+		 * 读不到时不拦——否则在不暴露草稿的宿主上，点目录文件会完全打不开。
+		 */
+		function draftBlocksAutoSend(inputActions) {
+			const draft = readDraftText(inputActions);
+			return typeof draft === "string" && draft.trim() !== "";
+		}
+		//#endregion
+
+		//#region 025 子树折叠：画布视图态纯函数（不进 markdown 资产，只影响呈现）
+		/** 折叠集合切换：恒返回新集合，React 状态可直接按引用比较。 */
+		function toggleCollapsed(collapsed, id) {
+			const next = new Set(collapsed ?? []);
+			if (next.has(id)) next.delete(id);
+			else next.add(id);
+			return next;
+		}
+
+		/** 子孙节点总数：折叠后用于提示「隐藏了多少节点」。 */
+		function countDescendants(node) {
+			let total = 0;
+			const walk = (n) => {
+				for (const child of n.children ?? []) {
+					total += 1;
+					walk(child);
+				}
+			};
+			if (node) walk(node);
+			return total;
+		}
+
+		/**
+		 * 丢弃当前树里已不存在的折叠 id（AI 改写文档后旧 id 会失效）。
+		 * 没有变化时原样返回入参，避免制造新引用触发多余重渲染。
+		 */
+		function pruneCollapsed(collapsed, tree) {
+			if (!collapsed || collapsed.size === 0) return collapsed;
+			const ids = collectTreeIds(tree);
+			let changed = false;
+			const next = new Set();
+			for (const id of collapsed) {
+				if (ids.has(id)) next.add(id);
+				else changed = true;
+			}
+			return changed ? next : collapsed;
+		}
+		//#endregion
+
 		//#region PNG 导出（SVG 序列化 → canvas → 下载 / 剪贴板）
 		// 019 可变盒高布局：盒高按内容估行数（全量换行的导出形态），表格节点加宽；
 		// 布局契约不变——叶子自上而下占行、父节点垂直居中于其子块。
@@ -954,6 +1038,8 @@ window.__ModuleLoader__.load({
 			// 列盒窄于内距时 cellInner 可能为负，钳到至少容纳一个全角字符；
 			// 测量与渲染必须共用同一钳制值（022 契约）。
 			tableCellMinInner: 12,
+			maxCanvasDimension: 8192,
+			maxCanvasPixels: 16 * 1024 * 1024,
 		};
 
 		function escapeXml(text) {
@@ -1137,8 +1223,19 @@ window.__ModuleLoader__.load({
 			return { svg: parts.join(""), width, height };
 		}
 
+		/** Canvas 分配前的硬上限，避免合法但超长的脑图耗尽浏览器内存。 */
+		function exportCanvasSize(width, height) {
+			const w = Math.max(1, Math.ceil(width));
+			const h = Math.max(1, Math.ceil(height));
+			if (!Number.isFinite(w) || !Number.isFinite(h) || w > EXPORT.maxCanvasDimension || h > EXPORT.maxCanvasDimension || w * h > EXPORT.maxCanvasPixels) {
+				throw new Error("脑图图片过大，请缩小导出范围后重试");
+			}
+			return { width: w, height: h };
+		}
+
 		/** SVG → Image → 白底 canvas（下载 / 剪贴板共用，017 抽出）。 */
 		async function renderSvgToCanvas(svg, width, height) {
+			const size = exportCanvasSize(width, height);
 			const url = `data:image/svg+xml;charset=utf-8,${encodeURIComponent(svg)}`;
 			const img = new Image();
 			await new Promise((resolve, reject) => {
@@ -1147,8 +1244,8 @@ window.__ModuleLoader__.load({
 				img.src = url;
 			});
 			const canvas = document.createElement("canvas");
-			canvas.width = Math.max(1, Math.ceil(width));
-			canvas.height = Math.max(1, Math.ceil(height));
+			canvas.width = size.width;
+			canvas.height = size.height;
 			const ctx2d = canvas.getContext("2d");
 			ctx2d.fillStyle = "#ffffff";
 			ctx2d.fillRect(0, 0, canvas.width, canvas.height);
@@ -1288,7 +1385,11 @@ window.__ModuleLoader__.load({
 			swatchActive: { borderColor: "var(--dsw-alias-state-business-primary)", color: "var(--dsw-alias-label-primary)", boxShadow: "inset 0 0 0 1px var(--dsw-alias-state-business-primary)" },
 			swatchDot: { width: "10px", height: "10px", borderRadius: "50%", flex: "none" },
 			row: { display: "flex", alignItems: "center", minWidth: 0 },
-			childrenColumn: { display: "flex", flexDirection: "column", gap: "8px", marginLeft: "40px", minWidth: 0 },
+			// 025：子列左距 16 + 折叠开关（16 宽 + 左右各 4 外距）= 折叠前的 40，
+			// 连线长度与既有版式保持一致。
+			childrenColumn: { display: "flex", flexDirection: "column", gap: "8px", marginLeft: "16px", minWidth: 0 },
+			// 025 折叠开关：压在连线起点上的小圆钮，叶子节点不渲染。
+			collapseToggle: { flex: "none", width: "16px", height: "16px", margin: "0 4px", padding: 0, borderRadius: "50%", border: "1px solid var(--dsw-alias-border-l2)", background: "var(--dsw-alias-bg-layer-3)", color: "var(--dsw-alias-label-secondary)", font: "inherit", fontSize: "11px", lineHeight: 1, display: "inline-flex", alignItems: "center", justifyContent: "center", cursor: "pointer", zIndex: 1 },
 			// 面板树连线层：正交折线（MarkGrove 的 orthogonalPath 风格），
 			// 覆盖整行、点击穿透、置于节点盒之下。
 			// 016：去掉 CSS width/height 百分比——在 auto-height 的 flex 行内，
@@ -1756,7 +1857,10 @@ window.__ModuleLoader__.load({
 
 		/** 左→右递归树：节点盒 + 右侧子节点列 + 连线层（015 支持折线/曲线两种线型）。 */
 		function TreeRow(props) {
-			const { node, theme, onNodeContextMenu, reveal, selectedId, onCodePanel } = props;
+			const { node, theme, onNodeContextMenu, reveal, selectedId, onCodePanel, collapsed, onToggleCollapse } = props;
+			// 025 折叠：纯视图态——markdown 资产不变，导出仍取完整子树。
+			const hasChildren = Boolean(node.children && node.children.length > 0);
+			const isCollapsed = hasChildren && Boolean(collapsed && collapsed.has(node.id));
 			// 018 生长动画：本节点渐显延迟（新节点盒）与本行连线渐显延迟（有新子节点）。
 			const revealDelay = reveal && reveal.nodes ? reveal.nodes.get(node.id) : undefined;
 			const edgeRevealDelay = reveal && reveal.edges ? reveal.edges.get(node.id) : undefined;
@@ -1793,7 +1897,8 @@ window.__ModuleLoader__.load({
 					const rowRect = rowEl.getBoundingClientRect();
 					const boxRect = boxEl.getBoundingClientRect();
 					const next = [];
-					for (const ref of childRefs.current) {
+					// 折叠时子列未挂载：不量、不画线（ref 回调已置空，这里再兜一层）。
+					for (const ref of isCollapsed ? [] : childRefs.current) {
 						if (!ref) continue;
 						const c = ref.getBoundingClientRect();
 						// 视觉像素 → 行本地坐标（SVG 用户空间 = 本地空间）。
@@ -1871,13 +1976,30 @@ window.__ModuleLoader__.load({
 					} : undefined,
 					children: (0, react_jsx_runtime.jsx)(NodeBox, { node, theme, revealDelay, selectedId, onCodePanel }),
 				}),
-				node.children && node.children.length > 0
-					? (0, react_jsx_runtime.jsx)("div", { style: S.childrenColumn, children: node.children.map((child, idx) => (0, react_jsx_runtime.jsx)("div", {
+				// 025 折叠开关：坐在盒与子列之间的连线起点上（有子节点才出现）。
+				// stopPropagation 保证点它不触发画布的「点节点聚焦 / 点空白取消选中」。
+				hasChildren
+					? (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						"data-mindmap-collapse": "",
+						style: S.collapseToggle,
+						title: isCollapsed ? `展开子树（已隐藏 ${countDescendants(node)} 个节点）` : "折叠子树",
+						"aria-expanded": isCollapsed ? "false" : "true",
+						onClick: (e) => {
+							e.preventDefault();
+							e.stopPropagation();
+							if (onToggleCollapse) onToggleCollapse(node.id);
+						},
+						children: isCollapsed ? "+" : "−",
+					})
+					: null,
+				hasChildren && !isCollapsed
+					? (0, react_jsx_runtime.jsx)("div", { style: S.childrenColumn, "data-mindmap-children": "", children: node.children.map((child, idx) => (0, react_jsx_runtime.jsx)("div", {
 						key: child.id,
 						ref: (el) => {
 							childRefs.current[idx] = el;
 						},
-						children: (0, react_jsx_runtime.jsx)(TreeRow, { node: child, theme, onNodeContextMenu, reveal, selectedId, onCodePanel }),
+						children: (0, react_jsx_runtime.jsx)(TreeRow, { node: child, theme, onNodeContextMenu, reveal, selectedId, onCodePanel, collapsed, onToggleCollapse }),
 					}, child.id)) })
 					: null,
 				] });
@@ -1925,7 +2047,7 @@ window.__ModuleLoader__.load({
 				// 阈值 4px 以内算「点击」：不写 scroll（手抖不挪画布）、不上抓手光标、
 				// 不吞随后的 click——保留点空白取消选中 / 点节点聚焦的既有行为。
 				// 触摸（触屏）不劫持——交给原生滚动，保住惯性。
-				const PAN = { threshold: 4 };
+				const PAN = { threshold: 4, freeRange: 0.5 };
 
 				/** 是否在该指针按下上启动平移。button: 0 左 / 1 中 / 2 右。 */
 				function shouldStartPan(button, options) {
@@ -1947,6 +2069,24 @@ window.__ModuleLoader__.load({
 					};
 				}
 
+				/** 原生滚动到边缘后，用视口半宽/高的有界位移继续保持内容跟手。 */
+				function freePanOffset(start, dx, dy, scrollLeft, scrollTop, viewWidth, viewHeight) {
+					const limitX = Number.isFinite(viewWidth) && viewWidth > 0 ? viewWidth * PAN.freeRange : 0;
+					const limitY = Number.isFinite(viewHeight) && viewHeight > 0 ? viewHeight * PAN.freeRange : 0;
+					const actualLeft = Number.isFinite(scrollLeft) ? scrollLeft : start.scrollLeft;
+					const actualTop = Number.isFinite(scrollTop) ? scrollTop : start.scrollTop;
+					return {
+						x: Math.min(limitX, Math.max(-limitX, start.offsetX + dx + actualLeft - start.scrollLeft)),
+						y: Math.min(limitY, Math.max(-limitY, start.offsetY + dy + actualTop - start.scrollTop)),
+					};
+				}
+
+				/** 按下点是否落在画布内的交互控件上（这类按下不启动平移，留给控件自己）。 */
+				function isCanvasControl(el) {
+					if (!el || typeof el.closest !== "function") return false;
+					return Boolean(el.closest("button, a[href], input, textarea, select, [role='button']"));
+				}
+
 				/** 空格键是否落在可输入元素里（聊天框/输入框与面板同 document，不能抢空格）。 */
 				function isTextEntry(el) {
 					if (!el || typeof el.tagName !== "string") return false;
@@ -2005,6 +2145,9 @@ window.__ModuleLoader__.load({
 							const nodeMenuRef = react.useRef(null);
 							// 019 选中态：点击聚焦的节点下选选中环（002 §6 状态体系）。
 							const [selectedId, setSelectedId] = react.useState(null);
+							// 025 折叠子树：纯视图态（不写回 markdown，导出仍取完整子树）。
+							// 切换文档时全部展开；AI 改写后清掉已消失节点的折叠标记。
+							const [collapsed, setCollapsed] = react.useState(() => new Set());
 							// 019 代码块悬停浮层：{node, anchor}；null = 关闭。延迟关闭（150ms
 							// 宽限）让鼠标能从节点盒移到面板上滚动全文，不闪灭。
 							const [codePanel, setCodePanel] = react.useState(null);
@@ -2026,6 +2169,9 @@ window.__ModuleLoader__.load({
 							// 都要重测一遍（O(n) 强制重排），大树上拖一下会明显顿一下。
 							// 光标与「禁用选中」直接改 DOM style，全程零重渲染。
 							const panRef = react.useRef(null);
+							// 原生滚动没有余量或已到边缘时的有界补偿位移。同样只写 DOM，
+							// 避免平移触发整棵树重渲染。
+							const panOffsetRef = react.useRef({ x: 0, y: 0 });
 							// 021 空格键：按下时左键在节点上也能拖。同样用 ref（按空格不该重渲染）。
 							const spaceRef = react.useRef(false);
 						// 021 拖过就吞掉随后那次 click（保留单击空白取消选中 / 点节点聚焦）。
@@ -2041,6 +2187,7 @@ window.__ModuleLoader__.load({
 								const scroller = scrollRef.current;
 								const content = contentRef.current;
 								if (!scroller || !content) return;
+								resetPanOffset();
 								const rect = content.getBoundingClientRect();
 								if (!(rect.width > 0) || !(rect.height > 0)) return;
 								const committed = committedZoomRef.current;
@@ -2053,7 +2200,9 @@ window.__ModuleLoader__.load({
 									scroller.scrollLeft = 0;
 									scroller.scrollTop = 0;
 									setZoomState(fit);
+									return true;
 								}
+								return false;
 							}
 
 							// 挂载 / 文档切换：清除「用户已手动缩放」标记与熔断计数，
@@ -2062,6 +2211,7 @@ window.__ModuleLoader__.load({
 								userZoomedRef.current = false;
 								lastNaturalRef.current = null;
 								fitStampRef.current = [];
+								setCollapsed((prev) => (prev.size > 0 ? new Set() : prev));
 								const id = requestAnimationFrame(applyFit);
 								return () => cancelAnimationFrame(id);
 							}, [fitKey]);
@@ -2087,6 +2237,7 @@ window.__ModuleLoader__.load({
 											if (Math.abs(w - last.w) <= 2 && Math.abs(h - last.h) <= 2) return;
 										}
 									}
+									if (!applyFit()) return;
 									const now = Date.now();
 									const stamps = fitStampRef.current = fitStampRef.current.filter((t) => now - t < 1500);
 									if (stamps.length >= 5) {
@@ -2094,7 +2245,6 @@ window.__ModuleLoader__.load({
 										return;
 									}
 									stamps.push(now);
-									applyFit();
 								});
 								observer.observe(content);
 								observer.observe(scroller);
@@ -2138,6 +2288,18 @@ window.__ModuleLoader__.load({
 					scroller.style.userSelect = active ? "none" : "";
 				}
 
+				function resetPanOffset() {
+					panOffsetRef.current = { x: 0, y: 0 };
+					const content = contentRef.current;
+					if (content) content.style.transform = "";
+				}
+
+				function applyPanOffset(offset) {
+					const content = contentRef.current;
+					if (!content) return;
+					content.style.transform = offset.x || offset.y ? `translate(${offset.x}px, ${offset.y}px)` : "";
+				}
+
 				function beginPan(e) {
 					// 吞 click 的标记一律在本轮手势的最开头清零，放在所有早退之前：
 					// 否则上轮手势留下的 true 会粘到下一次点击上——例：拖完画布后再
@@ -2146,6 +2308,10 @@ window.__ModuleLoader__.load({
 					const scroller = scrollRef.current;
 					if (!scroller || panRef.current) return;
 					const target = e.target;
+					// 025：画布内的控件（折叠开关等）必须先于平移拿到这次按下。
+					// 否则 setPointerCapture 会把随后的 click 改派到滚动区，按钮
+					// 永远收不到点击——「折叠按钮点了没反应」的根因。
+					if (isCanvasControl(target)) return;
 					const onNode = Boolean(target && typeof target.closest === "function" && target.closest("[data-mindmap-node]"));
 					if (!shouldStartPan(e.button, { onNode, spaceHeld: spaceRef.current, touch: e.pointerType === "touch" })) return;
 					// 中键：掐掉浏览器自动滚动；左键：掐掉拖选文本。
@@ -2156,6 +2322,8 @@ window.__ModuleLoader__.load({
 						y: e.clientY,
 						scrollLeft: scroller.scrollLeft,
 						scrollTop: scroller.scrollTop,
+						offsetX: panOffsetRef.current.x,
+						offsetY: panOffsetRef.current.y,
 						moved: false,
 					};
 					// 不在按下就上抓手光标：普通点击（位移 < 阈值）不该闪一下
@@ -2185,9 +2353,13 @@ window.__ModuleLoader__.load({
 					// 首次越过阈值：这才算拖拽——上抓手光标 + 锁文本选择。
 					if (!pan.moved) applyPanCursor(scroller, true);
 					if (step.moved) pan.moved = true;
-					// 越界交给浏览器钳制（不自己算 scrollWidth，省一次重排）。
+					// 先交给浏览器钳制；到边缘后把未被 scroll 消耗的位移补到内容
+					// transform，上下左右始终可拖，且不读 scrollWidth 造成强制重排。
 					scroller.scrollLeft = step.scrollLeft;
 					scroller.scrollTop = step.scrollTop;
+					const offset = freePanOffset(pan, e.clientX - pan.x, e.clientY - pan.y, scroller.scrollLeft, scroller.scrollTop, scroller.clientWidth, scroller.clientHeight);
+					panOffsetRef.current = offset;
+					applyPanOffset(offset);
 				}
 
 				function endPan() {
@@ -2209,7 +2381,7 @@ window.__ModuleLoader__.load({
 				function setZoom(next, anchorViewport) {
 					const value = clampZoom(next);
 					anchorRef.current = anchorViewport && scrollRef.current
-						? { prevZoom: zoomRef.current, scrollLeft: scrollRef.current.scrollLeft, scrollTop: scrollRef.current.scrollTop }
+						? { prevZoom: zoomRef.current, scrollLeft: scrollRef.current.scrollLeft, scrollTop: scrollRef.current.scrollTop, offsetX: panOffsetRef.current.x, offsetY: panOffsetRef.current.y }
 						: null;
 					zoomRef.current = value;
 					setZoomState(value);
@@ -2230,8 +2402,8 @@ window.__ModuleLoader__.load({
 					anchorRef.current = null;
 					const ratio = anchor.prevZoom > 0 ? zoom / anchor.prevZoom : 1;
 					if (!(ratio > 0) || ratio === 1) return;
-					scroller.scrollLeft = (anchor.scrollLeft + scroller.clientWidth / 2) * ratio - scroller.clientWidth / 2;
-					scroller.scrollTop = (anchor.scrollTop + scroller.clientHeight / 2) * ratio - scroller.clientHeight / 2;
+					scroller.scrollLeft = (anchor.scrollLeft + scroller.clientWidth / 2 - anchor.offsetX) * ratio + anchor.offsetX - scroller.clientWidth / 2;
+					scroller.scrollTop = (anchor.scrollTop + scroller.clientHeight / 2 - anchor.offsetY) * ratio + anchor.offsetY - scroller.clientHeight / 2;
 				}, [zoom]);
 
 				function zoomIn() {
@@ -2296,6 +2468,7 @@ window.__ModuleLoader__.load({
 					focusRef.current = null;
 					const scroller = scrollRef.current;
 					if (!scroller || !focus || !focus.boxEl || !focus.boxEl.isConnected) return;
+					resetPanOffset();
 					const boxRect = focus.boxEl.getBoundingClientRect();
 					const scrollerRect = scroller.getBoundingClientRect();
 					const curX = boxRect.left + boxRect.width / 2 - scrollerRect.left;
@@ -2330,8 +2503,14 @@ window.__ModuleLoader__.load({
 					setNodeMenu(null);
 					// 019：文档内容变化时同步收掉代码浮层（节点对象已失效）。
 					setCodePanel(null);
+					// 025：树重解析后丢弃已消失节点的折叠标记（无变化时保持原引用）。
+					setCollapsed((prev) => pruneCollapsed(prev, node));
 				}, [node]);
 
+				function toggleCollapse(id) {
+					setCollapsed((prev) => toggleCollapsed(prev, id));
+				}
+
 				// 017 右键节点：记录菜单锚点与目标子树（清掉上次的忙碌/错误态）。
 				function onNodeContextMenu(e, target) {
 					setNodeMenuBusy(null);
@@ -2396,7 +2575,7 @@ window.__ModuleLoader__.load({
 						children: 
 						(0, react_jsx_runtime.jsx)("div", { style: S.canvasCenter, children: 
 							(0, react_jsx_runtime.jsx)("div", { ref: contentRef, style: { margin: "auto", zoom }, children: 
-								(0, react_jsx_runtime.jsx)(TreeRow, { node, theme, onNodeContextMenu, reveal, selectedId, onCodePanel: handleCodePanel })
+								(0, react_jsx_runtime.jsx)(TreeRow, { node, theme, onNodeContextMenu, reveal, selectedId, onCodePanel: handleCodePanel, collapsed, onToggleCollapse: toggleCollapse })
 							})
 						})
 					}),
@@ -2623,6 +2802,8 @@ window.__ModuleLoader__.load({
 			const [filledHint, setFilledHint] = react.useState("");
 			// fsTree：nodes = {path → 节点}, expanded = {path → true}, loading = {path → true}。
 			const [fsTree, setFsTree] = react.useState({ nodes: {}, expanded: {}, loading: {}, cwd: null, error: null });
+			// 会话切换时递增，使旧请求的异步回包不能写入新会话的目录树。
+			const treeGenerationRef = react.useRef(0);
 			// 013 右键菜单：{x, y, kind: "root"|"dir", rel}；null = 关闭。
 			const [treeMenu, setTreeMenu] = react.useState(null);
 			// tab 右键菜单：{x, y, path}（path === TREE_TAB 时是「刷新目录树」）。
@@ -2749,10 +2930,24 @@ window.__ModuleLoader__.load({
 			}, [merged]);
 
 			// 013「所见即所编」焦点同步：AI 焦点 = 快照里最新工具结果的文档路径；
-			// 脑图视图激活且其文档 ≠ 焦点时，自动填「用 mindmap_open 打开 <它>」
-			// 并发送，让 AI 跟上用户眼睛看的那颗脑图。
+			// 脑图视图激活且其文档 ≠ 焦点时，仅在草稿为空时自动发送，让 AI
+			// 跟上用户眼睛看的那颗脑图，又不覆盖用户正在编辑的消息。
 			const focusPath = docs.order.length > 0 ? docs.order[docs.order.length - 1] : null;
 			const focusSentRef = react.useRef(null);
+			// 所有这些状态都属于会话，不得让 A 会话的在途打开/目录结果遗留到 B。
+			react.useEffect(() => {
+				setLocalDocs({});
+				setCurrentPath(null);
+				setHiddenPath(null);
+				setView("tree");
+				setOpenTimedOut(false);
+				setTreeMenu(null);
+				setTabMenu(null);
+				setFilledHint("");
+				localErrorBaseRef.current = null;
+				focusSentRef.current = null;
+				prevIdsRef.current = { path: null, ids: null };
+			}, [sessionId]);
 			react.useEffect(() => {
 				if (!open) return; // 面板收起时不自动发消息（014 overlay 形态守卫）
 				if (!sessionId) return;
@@ -2760,14 +2955,9 @@ window.__ModuleLoader__.load({
 				if (!docs.byPath[active]) return; // 本地占位：它的 open 请求已在途
 				if (focusPath === active) return;
 				if (focusSentRef.current === active) return; // 已发过，等 AI 结果追平
-				if (!inputActions || typeof inputActions.setDraft !== "function") return;
 				const rel = fsTree.cwd ? relPathWithin(fsTree.cwd, active, stemOf(active)) : active;
-				try {
-					inputActions.setDraft(`用 mindmap_open 打开 ${rel}`);
-					if (typeof inputActions.submit === "function") inputActions.submit();
+				if (submitChatCommand(`用 mindmap_open 打开 ${rel}`)) {
 					focusSentRef.current = active;
-				} catch {
-					// 发送失败：下次 active/focus 变化会再试；也可手动在聊天里说。
 				}
 			}, [active, focusPath, fsTree.cwd, docs, open]);
 
@@ -2785,11 +2975,28 @@ window.__ModuleLoader__.load({
 			}
 
 			//#region 013 目录树 tab：懒加载树 + 把指令填进聊天输入框
-			// 主路径 = inputActions.setDraft（官方公共面，整串替换草稿）；
-			// 无则降级剪贴板复制 + 面板内提示。
+			// 草稿保护：确实读到非空草稿才让路（改走剪贴板），读不到就按既有
+			// 行为直填直发——宿主不暴露草稿时不能把功能整个卡死。
+			function draftBlocked() {
+				return draftBlocksAutoSend(inputActions);
+			}
+
+			function submitChatCommand(text) {
+				if (draftBlocked()) return false;
+				if (!inputActions || typeof inputActions.setDraft !== "function" || typeof inputActions.submit !== "function") return false;
+				try {
+					inputActions.setDraft(text);
+					inputActions.submit();
+					return true;
+				} catch {
+					return false;
+				}
+			}
+
+			// 手动新建指令同样不覆盖已有草稿；否则填入输入框。
 			function fillDraft(text) {
 				try {
-					if (inputActions && typeof inputActions.setDraft === "function") {
+					if (!draftBlocked() && inputActions && typeof inputActions.setDraft === "function") {
 						inputActions.setDraft(text);
 						setFilledHint("指令已填入聊天输入框");
 						return;
@@ -2822,10 +3029,20 @@ window.__ModuleLoader__.load({
 			// 就位——AI 工具结果到达后同 path 覆盖占位，节点才渲染；随后用户接着
 			// 说即可继续编辑（002 数据流不变：内容只来自 AI 工具结果）。
 			function openMindmap(entry) {
+				const text = `用 mindmap_open 打开 ${relPathWithin(fsTree.cwd, entry.path, entry.name)}`;
+				// 有未发送草稿：不建占位、不抢输入框，改把指令交给用户自己发。
+				if (draftBlocked()) {
+					if (typeof navigator !== "undefined" && navigator.clipboard && typeof navigator.clipboard.writeText === "function") {
+						navigator.clipboard.writeText(text).catch(() => {});
+						setFilledHint("检测到未发送的草稿，已保留；打开指令已复制到剪贴板，粘贴发送即可");
+					} else {
+						setFilledHint(`检测到未发送的草稿，已保留。请手动发送：${text}`);
+					}
+					return;
+				}
 				// 016：记录点击时刻的错误基线（errorByPath 与 latestError 的全部
 				// 事件键）——只有其后新出现的错误才归因本次打开，旧错误不打扰。
 				localErrorBaseRef.current = errorEventKeys(merged);
-				const text = `用 mindmap_open 打开 ${relPathWithin(fsTree.cwd, entry.path, entry.name)}`;
 				// ① 本地占位：脑图 tab 立即切过去、内容为空（op:"local" 触发加载态）；
 				// 新打开的脑图替换旧的那颗（单脑图模式）。
 				setHiddenPath(null);
@@ -2843,19 +3060,7 @@ window.__ModuleLoader__.load({
 					},
 				}));
 				// ② AI 就位：填指令并直接提交（失败降级剪贴板）。
-				let sent = false;
-				if (inputActions && typeof inputActions.setDraft === "function") {
-					try {
-						inputActions.setDraft(text);
-						if (typeof inputActions.submit === "function") {
-							inputActions.submit();
-							sent = true;
-						}
-					} catch {
-						// 落剪贴板降级
-					}
-				}
-				if (sent) {
+				if (submitChatCommand(text)) {
 					// 标记已发，避免焦点同步 effect 对同一路径重复发送。
 					focusSentRef.current = entry.path;
 					setFilledHint(`已让 AI 打开「${entry.name}」，在聊天里继续说就能继续编辑`);
@@ -2881,11 +3086,13 @@ window.__ModuleLoader__.load({
 			// 只读；返回 {path, cwd, entries:[{name,path,isDir,hidden}], truncated}。
 			// 返回 true/false 供调用方决定是否标记展开（失败时不要把目录标成已展开）。
 			async function loadTree(path) {
+				const generation = treeGenerationRef.current;
 				const key = path === undefined || path === null ? "" : path;
 				setFsTree((prev) => ({ ...prev, loading: { ...prev.loading, [key]: true }, error: null }));
 				try {
 					if (!mindmapFace || typeof mindmapFace.listTree !== "function") throw new Error("目录树能力不可用");
 					const listing = await mindmapFace.listTree(sessionId, typeof path === "string" && path ? path : undefined);
+					if (generation !== treeGenerationRef.current) return false;
 					setFsTree((prev) => {
 						const nodes = { ...prev.nodes };
 						nodes[listing.path] = {
@@ -2908,6 +3115,7 @@ window.__ModuleLoader__.load({
 					});
 					return true;
 				} catch (error) {
+					if (generation !== treeGenerationRef.current) return false;
 					setFsTree((prev) => ({ ...prev, loading: { ...prev.loading, [key]: false }, error: String(error?.message ?? error) }));
 					return false;
 				}
@@ -2945,6 +3153,7 @@ window.__ModuleLoader__.load({
 
 			// 首次挂载：拉根目录（会话 cwd）。
 			react.useEffect(() => {
+				treeGenerationRef.current += 1;
 				if (!sessionId) return;
 				setFsTree({ nodes: {}, expanded: {}, loading: {}, cwd: null, error: null });
 				loadTree(undefined);
@@ -3298,7 +3507,12 @@ window.__ModuleLoader__.load({
 		 * namespaces 兜底，两代通吃。
 		 */
 		function settingsNamespacesOf(res) {
-			const value = res?.result?.value;
+			// connection 旧代理包一层 result.value；新版远端直接返回描述符数组。
+			const value = res?.ok === true
+				? res.value
+				: Array.isArray(res) || Array.isArray(res?.value)
+				? (Array.isArray(res) ? res : res.value)
+				: res?.result?.value;
 			if (Array.isArray(value)) return value;
 			const list = value?.namespaces;
 			return Array.isArray(list) ? list : [];
@@ -3358,22 +3572,56 @@ window.__ModuleLoader__.load({
 				return parsed.value;
 			};
 
-			// 015 设置面板：settings namespace（dsh-grafana 同款读写面）。
-			// connection 走 ctx.get 可选查取（动态 ctx 契约）；缺失时设置面板降级提示。
-			const connection = ctx.get("connection");
-			const settingsApi = connection && typeof connection.api === "object" ? connection.api : null;
+			// 015 设置面板：connection/remote 在客户端插件启动后才可能就绪，不能在
+			// apply 时捕获一次 undefined；每次读写前重新查取，服务晚到也能恢复。
+			// 未声明 inject 的服务只能整名走 ctx.get 可选查取。带点号的服务
+			// （remote.settings）同样是独立服务名：先取 remote 再读 .settings 会
+			// 被守卫拒绝（cannot get property "remote.settings" without inject），
+			// 故一律传全名，并对任何守卫异常降级为「服务不可用」。
+			function serviceOf(name) {
+				if (typeof ctx.get !== "function") return null;
+				try {
+					return ctx.get(name) ?? null;
+				} catch {
+					return null;
+				}
+			}
+			function isSettingsApi(value) {
+				try {
+					return Boolean(value) && typeof value.describe === "function" && typeof value.update === "function";
+				} catch {
+					return false;
+				}
+			}
+			function settingsApiOf() {
+				const remote = serviceOf("remote.settings");
+				if (isSettingsApi(remote)) return { kind: "remote", settings: remote };
+				try {
+					const settings = serviceOf("connection")?.api?.settings;
+					if (isSettingsApi(settings)) return { kind: "connection", settings };
+				} catch {
+					// 守卫拒绝或连接形态异常：与服务缺失同样降级处理。
+				}
+				return null;
+			}
 			face.readSettings = async () => {
-				if (!settingsApi || typeof settingsApi.settings?.describe !== "function") return null;
-				const res = await settingsApi.settings.describe({});
+				const api = settingsApiOf();
+				if (!api) return null;
+				const res = api.kind === "remote" ? await api.settings.describe() : await api.settings.describe({});
 				const namespaces = settingsNamespacesOf(res);
 				const ns = namespaces.find((n) => n?.ns === "mindmap");
 				return ns?.value ?? null;
 			};
 			face.updateSettings = async (patch) => {
-				if (!settingsApi || typeof settingsApi.settings?.update !== "function") {
+				const api = settingsApiOf();
+				if (!api) {
 					throw new Error("settings service unavailable");
 				}
-				await settingsApi.settings.update({ ns: "mindmap", patch });
+				if (api.kind === "remote" || api.settings.update.length !== 1) {
+					await api.settings.update("mindmap", patch, undefined);
+				} else {
+					await api.settings.update({ ns: "mindmap", patch });
+				}
 			};
 
 			// 015 设置面板：settings.section（list 槽、root scope）——设置页左栏
@@ -3416,11 +3664,20 @@ window.__ModuleLoader__.load({
 			stemOf,
 			buildExportSvg,
 			measureExportBox,
+			exportCanvasSize,
 			createIdFactory,
 			collectTreeIds,
 			planGrowthReveal,
 			relPathWithin,
 			visibleTreeRows,
+			// 025 草稿保护：宿主草稿读取面的能力探测（供测试）。
+			readDraftText,
+			draftBlocksAutoSend,
+			// 025 子树折叠：视图态纯函数 + 节点行组件（供测试）。
+			toggleCollapsed,
+			countDescendants,
+			pruneCollapsed,
+			TreeRow,
 			// 019 皮肤层与血肉层纯函数（供测试）。
 			resolveToken,
 			resolveNodeStyle,

package/index.js

@@ -9,12 +9,13 @@
 // - 四工具都带 path/name 参数（决策 3：多脑图并存，作用于指定那颗）。
 // - 结果 JSON {ok, op, path, rootTitle, content, renamedFrom?}：content 全文
 //   供模型续编辑，client 用同一份重放面板（工具结果即实时通道，002 第二节）。
-// - requireApproval 配置（决策 6）：默认 false 免审批；置 true 时 mindmap_create
-//   与 mindmap_update 走原生 ask（tools/pre-execute，照 dsh-grafana 的钩子模式）。
+// - requireApproval 配置（决策 6）：默认 true；仅明确关闭时 mindmap_create 与
+//   mindmap_update 可免原生 ask（tools/pre-execute，照 dsh-grafana 的钩子模式）。
 //   015 起经 settings namespace 可在设置面板运行时切换（见 SETTINGS_NAMESPACE/Config）。
 // - 依赖：仅 @deepseek-ai/schemastery（settings schema；发布包正常解析，
 //   link 开发需先 npm i）。工具参数 schema 仍手写 JSON Schema（003 偏差 1）。
-import { access, opendir, readFile, realpath, rename, stat, writeFile } from 'node:fs/promises'
+import { access, open, opendir, realpath, rename, stat, unlink, writeFile } from 'node:fs/promises'
+import { randomUUID } from 'node:crypto'
 import { dirname, isAbsolute, join, relative, resolve as resolvePath, sep } from 'node:path'
 import Schema from '@deepseek-ai/schemastery'
 
@@ -26,7 +27,7 @@ export const inject = ['tools', 'systemPrompt', 'webServer', 'sessions']
 // defaultPanelWidth 供客户端面板取默认宽度（20-80 钳制由客户端执行）。
 export const SETTINGS_NAMESPACE = 'mindmap'
 export const Config = Schema.object({
-  requireApproval: Schema.boolean().default(false).description('Require native DSH approval for every mindmap_create and mindmap_update (including renameRoot). Files are git-managed, so it defaults to off. Hidden from the settings panel; still honored at runtime.'),
+  requireApproval: Schema.boolean().default(true).description('Require native DSH approval for every mindmap_create and mindmap_update (including renameRoot). Enabled by default and hidden from the settings panel; still honored at runtime.'),
   defaultPanelWidth: Schema.number().default(42).description('Default floating-panel width as a percentage of the viewport (clamped 20-80 on the client).'),
   lineStyle: Schema.union(['curve', 'elbow']).default('elbow').description('Connector line style between nodes: curve (bezier) or elbow (orthogonal).'),
   cardStyle: Schema.union(['rounded', 'square']).default('rounded').description('Node card corner style.'),
@@ -51,7 +52,7 @@ Tools:
 - mindmap_get(path): read the current markdown content.
 - mindmap_update(path, content, renameRoot?): write the FULL updated markdown. renameRoot renames the file to match a new root title (fails on name collision); use it only when the user asks to rename the root node.
 
-Markdown mapping (the panel's parser): headings nest by level (H1 are root children, H2 under the previous H1, ...); list items are child nodes nested by 2-space indentation; an EMPTY list item ("- " followed by nothing) renders as a placeholder node — use placeholders for planned-but-unwritten nodes; a fenced code block becomes a leaf node titled "[lang] first line"; plain paragraphs become the note text of the nearest heading.
+Markdown mapping (the panel's parser): headings nest by level (H1 are root children, H2 under the previous H1, ...); list items are child nodes nested by 2-space indentation; a list item with no text after the marker renders as a placeholder node (both "-" and "- " work; no trailing space is required) — use placeholders for planned-but-unwritten nodes; a fenced code block becomes a leaf node titled "[lang] first line"; plain paragraphs become the note text of the nearest heading.
 
 Behavior rules:
 - When the user asks to create a mindmap, call mindmap_create. When the user asks to open, view, show, or switch to an existing mindmap, call mindmap_open (do not use mindmap_get alone). Both operations bring that document to the visible mindmap panel automatically.
@@ -245,17 +246,14 @@ function sanitizeStem(input) {
 
 /**
  * 解析脑图文件路径：相对路径以会话 cwd 为基；结果必须落在 cwd 内（决策 1），
- * 且必须以 .md 结尾。cwd 缺失时仅接受绝对路径。
+ * 且必须以 .md 结尾。cwd 是文件授权边界，缺失时必须失败关闭。
  * @returns 绝对规范化路径。
  */
 async function resolveMindmapPath(cwd, input) {
   if (typeof input !== 'string' || !input.trim()) throw new Error('path is required.')
   const p = input.trim()
   if (!/\.md$/i.test(p)) throw new Error(`mindmap path must end with .md: ${JSON.stringify(p)}.`)
-  if (!cwd) {
-    if (!isAbsolute(p)) throw new Error('The session has no working directory; pass an absolute .md path.')
-    return resolvePath(p)
-  }
+  if (!cwd) throw new Error('The session has no working directory; cannot access a mindmap.')
   const resolved = resolvePath(cwd, p)
   const rel = relative(cwd, resolved)
   // realpath 兜底（#5）：写路径经符号链接越狱是安全敏感操作。
@@ -293,15 +291,53 @@ function byteLength(value) {
 }
 
 /**
- * mindmap_open / mindmap_get 共用的读取路径：先 stat 查文件大小（不为测
- * 大小读全量），超限即拒；不存在时 stat 抛 ENOENT，readFile 的原语义不变。
+ * mindmap_open / mindmap_get 共用的有界读取。句柄打开后持续分块读取，文件在
+ * 初检后增长也不会绕过上限；非常规文件直接拒绝。
  */
 async function readMindmap(path) {
-  const { size } = await stat(path)
-  if (size > MAX_READ_BYTES) {
-    throw new Error(`mindmap size exceeds the ${MAX_READ_BYTES}-byte limit.`)
+  const handle = await open(path, 'r')
+  try {
+    const info = await handle.stat()
+    if (!info.isFile()) throw new Error('mindmap path must be a regular file.')
+    if (info.size > MAX_READ_BYTES) {
+      throw new Error(`mindmap size exceeds the ${MAX_READ_BYTES}-byte limit.`)
+    }
+    const chunks = []
+    let total = 0
+    let position = 0
+    for (;;) {
+      const chunk = Buffer.allocUnsafe(Math.min(64 * 1024, MAX_READ_BYTES + 1 - total))
+      const { bytesRead } = await handle.read(chunk, 0, chunk.length, position)
+      if (bytesRead === 0) break
+      total += bytesRead
+      if (total > MAX_READ_BYTES) {
+        throw new Error(`mindmap size exceeds the ${MAX_READ_BYTES}-byte limit.`)
+      }
+      chunks.push(chunk.subarray(0, bytesRead))
+      position += bytesRead
+    }
+    return Buffer.concat(chunks, total).toString('utf8')
+  } finally {
+    await handle.close()
+  }
+}
+
+/** 同目录临时文件完整落盘后再替换，任何写入失败都保留旧内容。 */
+async function writeMindmap(path, content) {
+  const temp = join(dirname(path), `.${randomUUID()}.mindmap-tmp`)
+  const { mode } = await stat(path)
+  let handle
+  try {
+    handle = await open(temp, 'wx', mode & 0o777)
+    await handle.writeFile(content, 'utf8')
+    await handle.sync()
+    await handle.close()
+    handle = undefined
+    await rename(temp, path)
+  } finally {
+    if (handle) await handle.close().catch(() => {})
+    await unlink(temp).catch(() => {})
   }
-  return readFile(path, 'utf8')
 }
 
 /** 工具结果信封：client 面板与模型共用的唯一载体。 */
@@ -320,7 +356,7 @@ export function apply(ctx, config = {}) {
   // 入口配置作为 settings 组合层的 base：视觉三件套与默认宽度在这里
   // 透传（带 schema 同款默认值），用户设置层仍可在设置面板覆盖。
   const entryConfig = {
-    requireApproval: config.requireApproval === true,
+    requireApproval: config.requireApproval !== false,
     defaultPanelWidth: typeof config.defaultPanelWidth === 'number' ? config.defaultPanelWidth : 42,
     lineStyle: config.lineStyle === 'curve' ? 'curve' : 'elbow',
     cardStyle: config.cardStyle === 'square' ? 'square' : 'rounded',
@@ -344,7 +380,7 @@ export function apply(ctx, config = {}) {
   ctx.systemPrompt.section({ name: 'tool:mindmap', order: 106, text: GUIDANCE })
 
   // 后悔药开关（决策 6）：钩子常驻注册，运行时读 activeConfig().requireApproval
-  // ——设置面板切换立即生效；关闭时直接放行（默认 false 免审批）。
+  // ——设置面板切换立即生效；仅明确关闭时直接放行。
   // 022：create 同为写路径，一并纳入审批（CONTRIBUTING：所有写路径安全敏感）。
   ctx.on('tools/pre-execute', async (exec, next) => {
     const decision = await next()
@@ -479,8 +515,8 @@ export function apply(ctx, config = {}) {
           finalPath = target
         }
       }
-      if (hasContent) await writeFile(finalPath, args.content, 'utf8')
-      const content = hasContent ? args.content : await readFile(finalPath, 'utf8')
+      if (hasContent) await writeMindmap(finalPath, args.content)
+      const content = hasContent ? args.content : await readMindmap(finalPath)
       return buildResult('update', finalPath, { content, ...(renamedFrom ? { renamedFrom } : {}) })
     },
   }))
@@ -540,6 +576,7 @@ export const internals = Object.freeze({
   MAX_CONTENT_BYTES,
   MAX_READ_BYTES,
   readMindmap,
+  writeMindmap,
   sanitizeStem,
   resolveMindmapPath,
   sessionCwd,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-mindmap",
-  "version": "0.8.3",
+  "version": "0.10.0",
   "description": "Mindmap plugin for DeepSeek Harness: a plain markdown file in the working directory IS the mindmap; the chat edits it step by step and the right-side panel follows live.",
   "repository": {
     "type": "git",
@@ -46,7 +46,8 @@
       "inject": [
         "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-cordis-client-runner",
-        "@deepseek-ai/dsh-client-ui-layout"
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-ui-settings-plugins"
       ],
       "platform": "web",
       "immediately": true