apes-sidebar

765 Commits 6 Branches 43 Tags

2 Commits

Include renames

Author	SHA1	Message	Date
Menghuan1918	5c95002641	perf(sidebar): fs.tree 22.8ms→3.8ms + 删除工作区路径检测（放开权限）+ 树展开状态按会话用户实测反馈： 1) `/sidebar/api/fs.tree` 性能极差 —— 先测后改（10k 条目目录、热缓存、中位数）： - 冷调用 cap=1000：22.76ms → 3.77ms；TTL 内重复：≈23ms → 0.000ms - 改法：opendir for-await → readdir(withFileTypes) 一次取回；只为 cap 条建行（slice + 定长数组）；路径用字符串拼接而非 path.join；排序弃 localeCompare （14.6ms/10k → 0.35ms）改小写比较 + 原名码点兜底；新增 1.5s 目录级缓存（键绝对路径\0cap，上限 512），由 fs.write/rename/remove/mkdir/upload 与 fs-watch 的变更通知显式失效 - 契约逐字不变；新增 tests/fs-tree.spec.ts 6 例 + fs-watch 失效用例（判别性验证） 2) 删除工作区路径检测（默认不检测、放开权限）： - path-security 变纯词法解析（realpath/包含性判定删除）、fs-operations 去 fence 分支、所有 fs 路由不再读 fence、403 分支消失、config 删 workspaceFence 字段（schemastery 容忍未知键，旧 profile 不会加载失败）、settings 开关删除 - ⚠️ 安全影响：插件 fs 路由（tree/read/write/rename/remove/mkdir/媒体/HTML/ upload/archive）现在可读写宿主用户可访问的任意路径，只受 OS 权限约束；指南 §8.1 已加醒目声明 - 死代码清理：FenceErrorNotice 组件 + EditorHost 分支 + 4 个词条（settingsFence、 fenceErrorReason、fenceDisableAction）+ isOutsideWorkspace 助手 + TreePanel 的 store prop + 相关 CSS 块 3) 批量列举路由 `fs.trees`（单层失败只在该层带 error）+ 客户端批量加载：挂载/刷新时的 N+1 请求变为 1 个（8 个展开目录：9 → 1，探针断言） refreshTick 不再先清缓存（旧行保留到新答案；失败保留旧行 + warn 提示） 4) 修复「关闭文件后返回文件树，展开状态被重置」：原生承载面的展开集合原来存在每个 tab 的记录里（drop 即丢），改为每会话状态的投影（ensure 从会话态读、toggleExpanded 写回会话态、registerNativeSurface 用 attachStore 订阅）；同一会话多 tab 共享、不同会话隔离；revealed 保持 per-tab 验证：typecheck / lint / test（136 文件 / 1484 通过 / 9 跳过）/ build 全绿； DSH_CMD='npx -y --package @deepseek-ai/dsh@0.1.7-rc.1 dsh' pnpm test:mount 7/7 通过；版本镜像同步（dsh.plugin.json + SIDEBAR_SERVICE_VERSION）	2026-09-28 20:37:56 +08:00
Menghuan1918	6586e3e2d3	feat: adapt to DSH 0.1.7-alpha.1 and yield the read-only previews DSH 0.1.7-alpha.1 is 1299 commits past 0.1.6-alpha.2 and rewrites four contracts this plugin was built on. The peer floor moves to ^0.1.7-alpha.1 (semver's prerelease rule means ^0.1.6-alpha.2 can never match a 0.1.7 prerelease); 0.1.6-alpha.2 and earlier stay on v0.19.1. Released as 0.21.0-alpha.1 (dist-tag alpha). Hard breaks: - dsh-settings was rewritten: register(ns, schema) is gone, a form is addressed by the plugin row's Loader entry id and read from the module's exported Config. The preferences are merged into Config and marked volatile — which requires DSH's own schemastery, because only that build wraps a volatile field in the cosmokit reference the loader's volatile commit walks. With the public package a settings write reports success and revision 1 while the effective value never changes. - ui-primitives renamed its whole icon family (IconXxx14/16 -> IconXxxRegular/Medium): 26 imported symbols, 17 files. The failing mode is render-time, not load-time. Five call sites that relied on the old 14px default now pass size={14} explicitly. - Session format v4 rejects source.kind === 'plugin'; the side-chat boundary injection now writes plugin:dsh-better-sidebar, the same kind DSH's own v3->v4 migration produces, so historical threads survive. Tool results moved to role 'tool' with top-level content/isError; all four parsers accept both shapes. - The client session snapshot dropped subagentsByParent/jobsBySession and the on-demand subagent-catalog observation API. The Tasks page reads projectionsBySession and a new jobs.list route. Yields and convergence: - The read-only previews go to DSH's documentpreview (Office->PDF, a spreadsheet worker, zoom, per-directory refresh); editor.canOpen refuses those 26 extensions. Markdown, HTML (with its sandbox switches) and the editable code buffer stay. - The host browser kind is desktop-profile-only now, so the web e2e lanes expect no browser entry and assert its absence. - Link takeover claims only urlTarget links and passes the rest to the host, fixing a regression from the 0.1.6 round: the fallback pointed at a 'browser' type the plugin no longer registers, so http links in its own markdown did nothing. Also fixed, found along the way: - The file tree refreshes live (new directory watch over the plugin's own socket), since the plugin owns the `files` kind. - ctx.sessions.list has no `current` field at either tag; the three readers were dead. They now use ctx.sidebarRight.mounted. - package.json.files was missing lib/client-locale.js. - Two genuinely dead call sites: sessions.openSubagent/open/ refreshSubagents do not exist on the current baseline, so the topology click, the jump-back and the retry were all no-ops. - The test harness window shim lacked addEventListener, which the 0.1.7 primitives call at module-evaluation time; and the e2e token exchange needs Playwright's request stack, not Node's fetch.	2026-09-22 17:09:08 +08:00

Author

SHA1

Message

Date

Menghuan1918

5c95002641

perf(sidebar): fs.tree 22.8ms→3.8ms + 删除工作区路径检测（放开权限）+ 树展开状态按会话

用户实测反馈：

1) `/sidebar/api/fs.tree` 性能极差 —— 先测后改（10k 条目目录、热缓存、中位数）：
   - 冷调用 cap=1000：22.76ms → **3.77ms**；TTL 内重复：≈23ms → **0.000ms**
   - 改法：opendir for-await → readdir(withFileTypes) 一次取回；只为 cap 条建行
     （slice + 定长数组）；路径用字符串拼接而非 path.join；排序弃 localeCompare
     （14.6ms/10k → 0.35ms）改小写比较 + 原名码点兜底；新增 1.5s 目录级缓存
     （键 绝对路径\0cap，上限 512），由 fs.write/rename/remove/mkdir/upload 与
     fs-watch 的变更通知显式失效
   - 契约逐字不变；新增 tests/fs-tree.spec.ts 6 例 + fs-watch 失效用例（判别性验证）

2) 删除工作区路径检测（默认不检测、放开权限）：
   - path-security 变纯词法解析（realpath/包含性判定删除）、fs-operations 去 fence
     分支、所有 fs 路由不再读 fence、403 分支消失、config 删 workspaceFence 字段
     （schemastery 容忍未知键，旧 profile 不会加载失败）、settings 开关删除
   - ⚠️ 安全影响：插件 fs 路由（tree/read/write/rename/remove/mkdir/媒体/HTML/
     upload/archive）现在可读写宿主用户可访问的任意路径，只受 OS 权限约束；
     指南 §8.1 已加醒目声明
   - 死代码清理：FenceErrorNotice 组件 + EditorHost 分支 + 4 个词条（settingsFence*、
     fenceErrorReason、fenceDisableAction）+ isOutsideWorkspace* 助手 + TreePanel 的
     store prop + 相关 CSS 块

3) 批量列举路由 `fs.trees`（单层失败只在该层带 error）+ 客户端批量加载：
   挂载/刷新时的 N+1 请求变为 1 个（8 个展开目录：9 → 1，探针断言）
   refreshTick 不再先清缓存（旧行保留到新答案；失败保留旧行 + warn 提示）

4) 修复「关闭文件后返回文件树，展开状态被重置」：
   原生承载面的展开集合原来存在每个 tab 的记录里（drop 即丢），改为**每会话状态**
   的投影（ensure 从会话态读、toggleExpanded 写回会话态、registerNativeSurface 用
   attachStore 订阅）；同一会话多 tab 共享、不同会话隔离；revealed 保持 per-tab

验证：typecheck / lint / test（136 文件 / 1484 通过 / 9 跳过）/ build 全绿；
DSH_CMD='npx -y --package @deepseek-ai/dsh@0.1.7-rc.1 dsh' pnpm test:mount 7/7 通过；
版本镜像同步（dsh.plugin.json + SIDEBAR_SERVICE_VERSION）

2026-09-28 20:37:56 +08:00

Menghuan1918

6586e3e2d3

feat: adapt to DSH 0.1.7-alpha.1 and yield the read-only previews

DSH 0.1.7-alpha.1 is 1299 commits past 0.1.6-alpha.2 and rewrites four
contracts this plugin was built on. The peer floor moves to
^0.1.7-alpha.1 (semver's prerelease rule means ^0.1.6-alpha.2 can never
match a 0.1.7 prerelease); 0.1.6-alpha.2 and earlier stay on v0.19.1.
Released as 0.21.0-alpha.1 (dist-tag alpha).

Hard breaks:
- dsh-settings was rewritten: register(ns, schema) is gone, a form is
  addressed by the plugin row's Loader entry id and read from the
  module's exported Config. The preferences are merged into Config and
  marked volatile — which requires DSH's own schemastery, because only
  that build wraps a volatile field in the cosmokit reference the
  loader's volatile commit walks. With the public package a settings
  write reports success and revision 1 while the effective value never
  changes.
- ui-primitives renamed its whole icon family (IconXxx14/16 ->
  IconXxxRegular/Medium): 26 imported symbols, 17 files. The failing
  mode is render-time, not load-time. Five call sites that relied on the
  old 14px default now pass size={14} explicitly.
- Session format v4 rejects source.kind === 'plugin'; the side-chat
  boundary injection now writes plugin:dsh-better-sidebar, the same kind
  DSH's own v3->v4 migration produces, so historical threads survive.
  Tool results moved to role 'tool' with top-level content/isError; all
  four parsers accept both shapes.
- The client session snapshot dropped subagentsByParent/jobsBySession
  and the on-demand subagent-catalog observation API. The Tasks page
  reads projectionsBySession and a new jobs.list route.

Yields and convergence:
- The read-only previews go to DSH's documentpreview (Office->PDF, a
  spreadsheet worker, zoom, per-directory refresh); editor.canOpen
  refuses those 26 extensions. Markdown, HTML (with its sandbox
  switches) and the editable code buffer stay.
- The host browser kind is desktop-profile-only now, so the web e2e
  lanes expect no browser entry and assert its absence.
- Link takeover claims only urlTarget links and passes the rest to the
  host, fixing a regression from the 0.1.6 round: the fallback pointed
  at a 'browser' type the plugin no longer registers, so http links in
  its own markdown did nothing.

Also fixed, found along the way:
- The file tree refreshes live (new directory watch over the plugin's
  own socket), since the plugin owns the `files` kind.
- ctx.sessions.list has no `current` field at either tag; the three
  readers were dead. They now use ctx.sidebarRight.mounted.
- package.json.files was missing lib/client-locale.js.
- Two genuinely dead call sites: sessions.openSubagent/open/
  refreshSubagents do not exist on the current baseline, so the
  topology click, the jump-back and the retry were all no-ops.
- The test harness window shim lacked addEventListener, which the 0.1.7
  primitives call at module-evaluation time; and the e2e token exchange
  needs Playwright's request stack, not Node's fetch.

2026-09-22 17:09:08 +08:00