dsh-multi-chat 1.0.2 → 1.0.4

package/package.json

@@ -1,108 +1,139 @@
-{
-  "name": "dsh-multi-chat",
-  "version": "1.0.2",
-  "description": "DSH 多窗口墙：在官方 DeepSeek Harness Web 界面里以多窗口网格并排运行、监控多个对话实例，一屏盯住所有 Agent 的实时进度；内置带口令认证的局域网网关，手机/平板也能看。",
-  "license": "MIT",
-  "type": "module",
-  "main": "./lib/index.js",
-  "types": "./lib/types/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./lib/types/index.d.ts",
-      "default": "./lib/index.js"
-    },
-    "./client": {
-      "types": "./lib/types/client/index.d.ts",
-      "default": "./lib/client.js"
-    },
-    "./invariant": {
-      "types": "./lib/types/invariant.d.ts",
-      "default": "./lib/invariant.js"
-    },
-    "./package.json": "./package.json"
-  },
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "platform": "web",
-      "inject": [
-        "@deepseek-ai/dsh-client-runtime",
-        "@deepseek-ai/dsh-client-locale",
-        "@deepseek-ai/dsh-client-ui-layout",
-        "@deepseek-ai/dsh-client-ui-sidebar",
-        "@deepseek-ai/dsh-client-ui-primitives"
-      ]
-    },
-    "marketplace": {
-      "profiles": [
-        "web"
-      ],
-      "requiresRestart": true,
-      "manualSteps": false,
-      "requiresBuildApproval": false
-    }
-  },
-  "bin": {
-    "dsh-multi-chat": "bin/dsh-multi-chat.mjs"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/daetz-coder/dsh-multi-chat.git"
-  },
-  "homepage": "https://github.com/daetz-coder/dsh-multi-chat#readme",
-  "bugs": {
-    "url": "https://github.com/daetz-coder/dsh-multi-chat/issues"
-  },
-  "keywords": [
-    "dsh",
-    "deepseek-harness",
-    "deepseek",
-    "multi-chat",
-    "multi-conversation",
-    "multi-window",
-    "multi-agent",
-    "client-plugin",
-    "gateway",
-    "phone-access"
-  ],
-  "files": [
-    "bin/",
-    "scripts/",
-    "patches/",
-    "assets/",
-    "lib/",
-    "src/",
-    "cordis.patch.yml",
-    "README.md",
-    "README.zh.md",
-    "LICENSE"
-  ],
-  "scripts": {
-    "build": "tsc -b tsconfig.json && tsdown",
-    "clean": "rm -rf lib",
-    "test": "vitest run"
-  },
-  "devDependencies": {
-    "@testing-library/dom": "^10.4.1",
-    "@testing-library/react": "^16.3.2",
-    "@types/node": "^26.2.0",
-    "@types/react": "^18.3.31",
-    "@types/react-dom": "^18.3.7",
-    "jsdom": "^29.1.1",
-    "lightningcss": "^1.33.0",
-    "react": "^18.3.1",
-    "react-dom": "^18.3.1",
-    "tsdown": "^0.11.13",
-    "typescript": "^5.9.3",
-    "vite-tsconfig-paths": "^6.1.1",
-    "vitest": "^2.1.9"
-  },
-  "engines": {
-    "node": ">=20"
-  },
-  "dependencies": {
-    "clsx": "^2.1.1"
-  }
-}
+{
+  "name": "dsh-multi-chat",
+  "version": "1.0.4",
+  "description": "DSH 多窗口墙：在官方 DeepSeek Harness Web 界面里以多窗口网格并排运行、监控多个对话实例，一屏盯住所有 Agent 的实时进度；内置带口令认证的局域网网关，手机/平板也能看。",
+  "license": "MIT",
+  "type": "module",
+  "main": "./lib/index.js",
+  "types": "./lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./invariant": {
+      "types": "./lib/types/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-ui-sidebar"
+      ]
+    },
+    "marketplace": {
+      "profiles": [
+        "web"
+      ],
+      "requiresRestart": true,
+      "manualSteps": false,
+      "requiresBuildApproval": false
+    }
+  },
+  "bin": {
+    "dsh-multi-chat": "bin/dsh-multi-chat.mjs"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/daetz-coder/dsh-multi-chat.git"
+  },
+  "homepage": "https://github.com/daetz-coder/dsh-multi-chat#readme",
+  "bugs": {
+    "url": "https://github.com/daetz-coder/dsh-multi-chat/issues"
+  },
+  "keywords": [
+    "dsh",
+    "deepseek-harness",
+    "deepseek",
+    "multi-chat",
+    "multi-conversation",
+    "multi-window",
+    "multi-agent",
+    "client-plugin",
+    "gateway",
+    "phone-access"
+  ],
+  "files": [
+    "bin/",
+    "scripts/",
+    "patches/",
+    "assets/",
+    "lib/",
+    "src/",
+    "cordis.patch.yml",
+    "README.md",
+    "README.zh.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -b tsconfig.json && tsdown && npm run check:platform",
+    "clean": "rm -rf lib",
+    "test": "npm run build && vitest run",
+    "check:platform": "node scripts/check-platform-contract.mjs",
+    "check:platform:against": "node scripts/check-platform-contract.mjs --against",
+    "sync:platform": "node scripts/check-platform-contract.mjs --sync"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.4",
+    "@deepseek-ai/dsh-client-locale": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-store": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-layout": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-invariants": "0.1.7-rc.1",
+    "@deepseek-ai/dsh-util-workspace-path": "0.1.7-rc.1",
+    "@deepseek-ai/schemastery": "3.18.4",
+    "@shikijs/langs": "^4.4.3",
+    "@testing-library/dom": "^10.4.1",
+    "@testing-library/react": "^16.3.2",
+    "@types/node": "^26.2.0",
+    "@types/react": "^18.3.31",
+    "@types/react-dom": "^18.3.7",
+    "anser": "^2.3.5",
+    "clsx": "^2.1.1",
+    "diff": "^9.0.0",
+    "immer": "^10.2.0",
+    "jsdom": "^29.1.1",
+    "katex": "^0.18.9",
+    "lightningcss": "^1.33.0",
+    "mdast-util-from-markdown": "^2.0.3",
+    "mdast-util-gfm": "^3.1.0",
+    "mdast-util-math": "^3.0.0",
+    "micromark-core-commonmark": "^2.0.4",
+    "micromark-extension-gfm": "^3.0.0",
+    "micromark-extension-math": "^3.1.0",
+    "micromark-factory-space": "^2.1.0",
+    "micromark-util-character": "^2.1.1",
+    "micromark-util-classify-character": "^2.0.1",
+    "micromark-util-sanitize-uri": "^2.0.1",
+    "micromark-util-symbol": "^2.0.1",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "shiki": "^4.4.3",
+    "simple-icons": "^16.33.0",
+    "tsdown": "^0.11.13",
+    "typescript": "^5.9.3",
+    "vitest": "^2.1.9",
+    "zustand": "^4.4.7"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}

package/scripts/check-platform-contract.mjs

@@ -0,0 +1,171 @@
+#!/usr/bin/env node
+/**
+ * Platform-contract guard for the plugin's browser half.
+ *
+ * A client plugin bundle is NOT loaded by Node or Vite — it is a factory handed
+ * to `window.__ModuleLoader__`, and every `require(spec)` inside it is resolved
+ * against the shell's module table. That table has exactly two sources:
+ *
+ *   1. the platform SEED TABLE — a fixed set of specifiers the web shell
+ *      hardcodes into its own Vite bundle, and
+ *   2. boot-graph package rows — other plugins' bundles.
+ *
+ * A plugin can only rely on (1): it cannot conjure another package's row. So a
+ * require() of anything outside the seed table throws at materialization time
+ * with "missed the module table", and the boot is fail-closed — the whole web
+ * UI stops on its "Failed to load plugins" card.
+ *
+ * That is exactly how v1.0.3 broke: it required
+ * `@deepseek-ai/dsh-client-runtime/client`, a package upstream has since
+ * deleted. Nothing in the build noticed, because the type came from a local
+ * unversioned checkout of the harness monorepo.
+ *
+ * This script closes that hole: it reads the seed table from
+ * platform-seeds.json (the same file tsdown.config.ts builds its externals
+ * list from) and fails if the built bundle requires anything else.
+ *
+ * Usage:
+ *   node scripts/check-platform-contract.mjs                    # check lib/client.js
+ *   node scripts/check-platform-contract.mjs --against <dsh>    # + diff vs an installed DSH
+ *   node scripts/check-platform-contract.mjs --sync <dsh>       # rewrite platform-seeds.json from an installed DSH
+ */
+import { readFileSync, writeFileSync, existsSync, readdirSync, statSync } from 'node:fs'
+import { join, dirname } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = dirname(dirname(fileURLToPath(import.meta.url)))
+const SEEDS_FILE = join(ROOT, 'platform-seeds.json')
+const BUNDLE = join(ROOT, 'lib', 'client.js')
+
+/** Every module specifier a built bundle asks the loader for, in source order. */
+function requiredSpecifiers(code) {
+  const found = []
+  for (const m of code.matchAll(/\brequire(?:\.async)?\(\s*["']([^"']+)["']\s*\)/g)) {
+    const spec = m[1]
+    // Relative chunk requests are package-local code the loader serves itself.
+    if (!spec.startsWith('./') && !spec.startsWith('../')) found.push(spec)
+  }
+  return [...new Set(found)]
+}
+
+/** Locate the web shell bundle inside an installed DSH package directory. */
+function findShellBundle(dshRoot) {
+  const hits = []
+  const walk = (dir, depth) => {
+    if (depth > 6 || hits.length > 0) return
+    let entries
+    try { entries = readdirSync(dir) } catch { return }
+    for (const name of entries) {
+      const full = join(dir, name)
+      let st
+      try { st = statSync(full) } catch { continue }
+      if (st.isDirectory()) walk(full, depth + 1)
+      else if (/^index-[\w-]+\.js$/.test(name) && full.includes('dsh-web-frontend')) hits.push(full)
+    }
+  }
+  walk(dshRoot, 0)
+  if (hits.length === 0) throw new Error(`no dsh-web-frontend shell bundle found under ${dshRoot}`)
+  return hits[0]
+}
+
+/**
+ * Read the seed table out of the minified shell.
+ * The shell writes it as `staticModules: <fn>()`, where `<fn>` returns the table
+ * object literal. Both shapes seen in the wild: `function iE(){return{...}}` on
+ * 0.1.7-rc.1 and `function by(){return{...}}` on 0.1.5-rc.2.
+ */
+function extractSeeds(shellCode) {
+  const call = /staticModules\s*:\s*([A-Za-z_$][\w$]*)\s*\(\s*\)/.exec(shellCode)
+  if (call === null) throw new Error('shell has no `staticModules: <fn>()` — the boot protocol changed; update this extractor')
+  const fn = call[1]
+  const body = new RegExp(`function\\s+${fn}\\s*\\(\\)\\s*\\{\\s*return\\s*\\{([^}]*)\\}`).exec(shellCode)
+  if (body === null) throw new Error(`could not read the body of seed-table function "${fn}"`)
+  const seeds = []
+  for (const m of body[1].matchAll(/(?:"((?:[^"\\]|\\.)+)"|([A-Za-z_$][\w$]*))\s*:/g)) {
+    seeds.push(m[1] !== undefined ? JSON.parse(`"${m[1]}"`) : m[2])
+  }
+  return seeds
+}
+
+/** Bare (non-`node:`) specifiers the node half imports; those resolve by normal Node rules. */
+function nodeHalfSpecifiers() {
+  const file = join(ROOT, 'lib', 'index.js')
+  if (!existsSync(file)) return []
+  const specs = []
+  // Anchored to the start of a line so a `from "..."` inside a string literal
+  // (error messages, URLs) is not mistaken for an import statement.
+  for (const m of readFileSync(file, 'utf8').matchAll(/^import\s+(?:[^"'\n]*?from\s+)?["']([^"']+)["']/gm)) {
+    if (!m[1].startsWith('.') && !m[1].startsWith('node:')) specs.push(m[1])
+  }
+  return [...new Set(specs)]
+}
+
+const die = (msg) => { console.error(`\n✗ platform-contract: ${msg}\n`); process.exit(1) }
+
+const argv = process.argv.slice(2)
+const flag = (name) => {
+  const i = argv.indexOf(name)
+  if (i === -1) return undefined
+  const value = argv[i + 1]
+  if (value === undefined || value.startsWith('--')) die(`${name} needs a path argument`)
+  return value
+}
+const syncTo = flag('--sync')
+const against = flag('--against')
+
+// --sync: adopt the seed table of an installed DSH as this repo's contract.
+if (syncTo !== undefined) {
+  if (!existsSync(syncTo)) die(`--sync path does not exist: ${syncTo}`)
+  const seeds = extractSeeds(readFileSync(findShellBundle(syncTo), 'utf8'))
+  const prev = JSON.parse(readFileSync(SEEDS_FILE, 'utf8'))
+  const version = (() => {
+    try { return JSON.parse(readFileSync(join(syncTo, 'package.json'), 'utf8')).version } catch { return undefined }
+  })()
+  const verified = [...new Set([...(prev.verifiedAgainst ?? []), ...(version === undefined ? [] : [version])])]
+  writeFileSync(SEEDS_FILE, `${JSON.stringify({ ...prev, verifiedAgainst: verified, seeds }, null, 2)}\n`)
+  console.log(`✓ platform-seeds.json updated from ${syncTo}${version === undefined ? '' : ` (dsh ${version})`}`)
+  console.log(`  seeds: ${seeds.join(', ')}`)
+  process.exit(0)
+}
+
+const { seeds, verifiedAgainst } = JSON.parse(readFileSync(SEEDS_FILE, 'utf8'))
+const seedSet = new Set(seeds)
+
+// --against: report drift between the pinned contract and a real installation.
+if (against !== undefined) {
+  if (!existsSync(against)) die(`--against path does not exist: ${against}`)
+  const live = extractSeeds(readFileSync(findShellBundle(against), 'utf8'))
+  const liveSet = new Set(live)
+  const missing = seeds.filter((s) => !liveSet.has(s))
+  const added = live.filter((s) => !seedSet.has(s))
+  if (missing.length > 0 || added.length > 0) {
+    console.error(`\n✗ platform-contract drift against ${against}`)
+    if (missing.length > 0) console.error(`  required but absent upstream: ${missing.join(', ')}`)
+    if (added.length > 0) console.error(`  new upstream seeds (run --sync to adopt): ${added.join(', ')}`)
+    console.error()
+    process.exit(1)
+  }
+  console.log(`✓ seed table matches ${against}`)
+  for (const spec of nodeHalfSpecifiers()) {
+    const ok = existsSync(join(against, 'node_modules', ...spec.split('/')))
+    if (!ok) die(`node half imports "${spec}" but it is not installed under ${against}`)
+  }
+}
+
+if (!existsSync(BUNDLE)) die(`built bundle missing: ${BUNDLE} (run the build first)`)
+const required = requiredSpecifiers(readFileSync(BUNDLE, 'utf8'))
+const offenders = required.filter((spec) => !seedSet.has(spec))
+
+console.log(`platform-contract: lib/client.js requires ${required.length} external module(s)`)
+console.log(`  pinned seed table (verified against dsh ${verifiedAgainst.join(', ')}): ${seeds.length} entries`)
+for (const spec of required) console.log(`  ${seedSet.has(spec) ? '✓' : '✗'} ${spec}`)
+
+if (offenders.length > 0) {
+  die(
+    `lib/client.js requires module(s) the platform does not seed: ${offenders.join(', ')}\n` +
+    `  A plugin bundle cannot reach these — the boot will fail with "missed the module table"\n` +
+    `  and take the whole web UI down. Either import a seed-table package instead, or,\n` +
+    `  if upstream genuinely added one, adopt it: npm run sync:platform -- <path-to-installed-dsh>`,
+  )
+}
+console.log('✓ every required module is a platform seed word')

package/src/client/WallToggle.tsx

@@ -1,52 +1,52 @@
-/**
- * WallToggle: the sidebar-foot shortcut. Clicking it opens the wall view —
- * the `conversation.view` ring switches to the 'multi-wall' entry, which the
- * header renders as the "多窗口" tab. The click is a plain user-equivalent
- * activation: it finds the header's view-ring tab for this plugin's label and
- * clicks it, so the official view-ring state machine (the chat store's active
- * view field) performs the switch. No store is declared: the ring decides
- * what renders, so this row owns no state.
- *
- * Session-scoped by design: the view ring (and its header tabs) only renders
- * with an active session, so the shortcut is inert on the empty-hero screen —
- * the user first opens or creates a session (the official flow), after which
- * the tab is present and the click lands.
- */
-import { IconFullscreenOutline16 } from '@deepseek-ai/dsh-client-ui-primitives'
-import type { PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots'
-import css from './WallToggle.module.css'
-
-/** Composed props: sidebar column state + locale. */
-export type WallToggleProps =
-  & PropsRuntime<'sidebar.footer.action'>
-  & PropsLocale<'multiWall'>
-
-/**
- * Render the wall shortcut row (icon; label only in the wide column).
- * @param props - composed slot props.
- * @returns the shortcut row.
- */
-export function WallToggle({ wide, t }: WallToggleProps) {
-  return (
-    <button
-      type="button"
-      className={css.row}
-      aria-label={t('toggle.aria')}
-      title={t('toggle')}
-      onClick={() => {
-        // The official view ring renders the active entry through
-        // `only: <active id>`; the only sanctioned way to move it is the
-        // header tab's click handler (actions.setView). Trigger that same
-        // element instead of reaching into the chat store from the root
-        // scope. No tab (no active session) is a no-op.
-        const label = t('view.multiWall')
-        const tab = Array.from(document.querySelectorAll<HTMLButtonElement>('[role="tab"]'))
-          .find(el => el.textContent?.trim() === label)
-        tab?.click()
-      }}
-    >
-      <IconFullscreenOutline16 size={wide ? 16 : 18} />
-      {wide && <span className={css.label}>{t('toggle')}</span>}
-    </button>
-  )
-}
+/**
+ * WallToggle: the sidebar-foot shortcut. Clicking it opens the wall view —
+ * the `conversation.view` ring switches to the 'multi-wall' entry, which the
+ * header renders as the "多窗口" tab. The click is a plain user-equivalent
+ * activation: it finds the header's view-ring tab for this plugin's label and
+ * clicks it, so the official view-ring state machine (the chat store's active
+ * view field) performs the switch. No store is declared: the ring decides
+ * what renders, so this row owns no state.
+ *
+ * Session-scoped by design: the view ring (and its header tabs) only renders
+ * with an active session, so the shortcut is inert on the empty-hero screen —
+ * the user first opens or creates a session (the official flow), after which
+ * the tab is present and the click lands.
+ */
+import { IconFullscreenOutlineRegular } from '@deepseek-ai/dsh-client-ui-primitives'
+import type { PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots'
+import css from './WallToggle.module.css'
+
+/** Composed props: sidebar column state + locale. */
+export type WallToggleProps =
+  & PropsRuntime<'sidebar.footer.action'>
+  & PropsLocale<'multiWall'>
+
+/**
+ * Render the wall shortcut row (icon; label only in the wide column).
+ * @param props - composed slot props.
+ * @returns the shortcut row.
+ */
+export function WallToggle({ wide, t }: WallToggleProps) {
+  return (
+    <button
+      type="button"
+      className={css.row}
+      aria-label={t('toggle.aria')}
+      title={t('toggle')}
+      onClick={() => {
+        // The official view ring renders the active entry through
+        // `only: <active id>`; the only sanctioned way to move it is the
+        // header tab's click handler (actions.setView). Trigger that same
+        // element instead of reaching into the chat store from the root
+        // scope. No tab (no active session) is a no-op.
+        const label = t('view.multiWall')
+        const tab = Array.from(document.querySelectorAll<HTMLButtonElement>('[role="tab"]'))
+          .find(el => el.textContent?.trim() === label)
+        tab?.click()
+      }}
+    >
+      <IconFullscreenOutlineRegular size={wide ? 16 : 18} />
+      {wide && <span className={css.label}>{t('toggle')}</span>}
+    </button>
+  )
+}