Atlas Zeng
5e416eccef
* feat(mermaid): 新增 mermaid 懒加载 chunk（构建链四处同步 + mermaid 依赖） tsdown CHUNKS / bundle-route CHUNK_NAMES / chunk-loader ChunkName / package.json files 同步注册 mermaid chunk；mermaid ^11.16.1 进依赖与 lockfile；chunk 构建注入 uuid 浏览器入口别名，绕开 node:crypto 纯度门。 * feat(mermaid): Markdown 预览安全渲染 mermaid 图表 + 点击放大弹窗 - splitMermaidBlocks 纯函数按 fence 切块，无 mermaid 文件零行为变化； - mermaid.initialize 走 securityLevel strict + htmlLabels:false，不应用 bindFunctions（静态图）；渲染 SVG 经 mermaid-sanitize 二次清洗： 删 foreignObject/script/外来 HTML 元素、剥 @*/on* 属性、移除全部 href/xlink:href，仅接受 SVG 根，解析失败返回空串； - 点击图表弹出放大弹窗（滚轮缩放/拖拽平移/快捷键，借鉴 PR #75 交互， 基于已清洗 SVG 克隆重写，不新增攻击面）； - 深浅色跟随重渲、失败回退错误条 + 原码、CodeBlock 同款 chrome。 * test(mermaid): splitter/sanitize 单测 + chunk 清单同步 + 挂载冒烟 diagram.md - mermaid-blocks.spec 10 例 fence 切块语义； - mermaid-sanitize.spec 8 例 XSS（foreignObject/on*/@*/href/xlink:href/ script/外来元素/畸形 XML/非 SVG 根）； - bundle-route / chunk-artifact / manifest-consistency 清单加入 mermaid （chunk-artifact 补 addEventListener stub）； - 挂载冒烟新增 diagram.md：client-mermaid.js 往返、SVG 节点文字、 点击弹窗 Esc 关闭、preview 模式编辑器隐藏。 * docs(mermaid): 安全渲染设计文档 + lazy-chunks 表 + README 双语更新 设计文档记录基线决策（PR #99 架构 + PR #75 点击放大）、安全模型 （strict/htmlLabels/清洗/href 剥离/无 bindFunctions）、验证与取舍。 * fix(mermaid): sanitizer 属性名大小写归一，堵住混合大小写属性绕过（CR P1） XML 属性名保留大小写，而输出会经 HTML 解析归一化（dangerouslySetInnerHTML）， oNload/HREF/xlink:HREF 这类混合大小写属性此前会漏过清洗。比较前先 toLowerCase()，按原名删除；新增混合大小写事件/链接属性回归用例。 * fix(mermaid): sanitizer 元素黑名单大小写归一，堵住混合大小写元素绕过（CR P1） XML 元素名保留大小写，querySelectorAll('script') 等选择器匹配不到 <sCrIpT>/<foreignobject>，而输出经 HTML 解析会被归一化为 SVG script/foreignObject（可执行/可注入 HTML）。改为遍历全部元素按 localName.toLowerCase() 命中小写黑名单后整节点删除；新增混合大小写 script/foreignObject/外来 HTML 元素回归用例（jsdom 实证：旧选择器 命中 0，新逻辑命中 2）。 * fix(mermaid): 单次 Markdown 解析 + 占位交换（CR P1）+ CommonMark fence 规则（CR P2） P1（跨 fence 语义）：弃用逐块 MarkdownText 拆分，改为整篇文档单次 MarkdownText 渲染，布局后把 language-mermaid 代码块交换为 MermaidDiagram （React 管理的 .md-code-block 宿主保留在树中、display:contents 抑制盒子， 协调安全；块不再 mermaid 时还原原 children）。新增 tests/mermaid-markdown.spec.tsx 与 e2e 跨 fence 引用链接断言。 P2（fence 匹配）：支持 3+ 反引号与波浪号开 fence；闭 fence 须同字符且 长度不小于开 fence；反引号 info string 含反引号不视为开 fence；修复 带缩进开 fence 的 info 提取。blocks 单测 +3 例。
174 lines
5.4 KiB
JSON
174 lines
5.4 KiB
JSON
{
|
|
"name": "dsh-better-sidebar",
|
|
"version": "0.13.0",
|
|
"description": "DSH web plugin: a VSCode-like right sidebar (explorer / editor / terminal / git / browser), isolated per conversation session. Exposes a service for other plugins to register sidebar tabs and file viewers.",
|
|
"type": "module",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/omdsh-dev/DSH-better-sidebar"
|
|
},
|
|
"publishConfig": {
|
|
"access": "public"
|
|
},
|
|
"main": "lib/index.js",
|
|
"types": "lib/types/index.d.ts",
|
|
"exports": {
|
|
".": {
|
|
"types": "./lib/types/index.d.ts",
|
|
"default": "./lib/index.js"
|
|
},
|
|
"./invariant": {
|
|
"types": "./lib/types/invariant.d.ts",
|
|
"default": "./lib/invariant.js"
|
|
},
|
|
"./client": {
|
|
"types": "./lib/types/client/index.d.ts",
|
|
"default": "./lib/client.js"
|
|
},
|
|
"./client/service": {
|
|
"types": "./lib/types/client/service.d.ts",
|
|
"default": "./lib/client.js"
|
|
},
|
|
"./client/api": {
|
|
"types": "./lib/types/client/service.d.ts",
|
|
"default": "./lib/client.js"
|
|
},
|
|
"./src/*": "./src/*",
|
|
"./package.json": "./package.json"
|
|
},
|
|
"engines": {
|
|
"node": ">=20"
|
|
},
|
|
"dsh": {
|
|
"bundle": {
|
|
"patch": "./cordis.patch.yml"
|
|
},
|
|
"client": {
|
|
"inject": [
|
|
"@deepseek-ai/dsh-client-runtime",
|
|
"@deepseek-ai/dsh-client-locale",
|
|
"@deepseek-ai/dsh-client-ui-slots",
|
|
"@deepseek-ai/dsh-client-ui-conversation"
|
|
],
|
|
"platform": "web"
|
|
}
|
|
},
|
|
"files": [
|
|
"lib/index.js",
|
|
"lib/invariant.js",
|
|
"lib/client.js",
|
|
"lib/client-registry.js",
|
|
"lib/client-terminal.js",
|
|
"lib/client-editor.js",
|
|
"lib/client-mermaid.js",
|
|
"lib/types/**/*.d.ts",
|
|
"src",
|
|
"scripts/install.sh",
|
|
"scripts/install.ps1",
|
|
"cordis.patch.yml",
|
|
"README.md",
|
|
"README_EN.md",
|
|
"LICENSE"
|
|
],
|
|
"scripts": {
|
|
"build": "rm -rf lib && tsc -p tsconfig.build.json && tsdown",
|
|
"prepublishOnly": "pnpm build",
|
|
"typecheck": "tsc --noEmit",
|
|
"bundle": "tsdown",
|
|
"watch": "tsdown --watch",
|
|
"prepare": "tsdown",
|
|
"test": "vitest run",
|
|
"test:mount": "bash scripts/e2e-mount.sh",
|
|
"check:consumer-types": "bash scripts/check-consumer-types.sh"
|
|
},
|
|
"license": "MIT",
|
|
"peerDependencies": {
|
|
"@deepseek-ai/cordis": "^4.0.1",
|
|
"@deepseek-ai/dsh-agent": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-locale": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-runtime": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-schema-form": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-ui-settings": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-web-react": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-host-webserver": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-invariants": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-llm": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-session": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-settings": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-tools": "^0.1.0-rc.6",
|
|
"cordis": "^4.0.0-rc.7",
|
|
"react": "^18.2.0",
|
|
"react-dom": "^18.2.0"
|
|
},
|
|
"peerDependenciesMeta": {
|
|
"cordis": {
|
|
"optional": true
|
|
}
|
|
},
|
|
"dependencies": {
|
|
"@codemirror/commands": "^6.10.4",
|
|
"@codemirror/lang-cpp": "^6.0.3",
|
|
"@codemirror/lang-css": "^6.3.1",
|
|
"@codemirror/lang-go": "^6.0.1",
|
|
"@codemirror/lang-html": "^6.4.12",
|
|
"@codemirror/lang-java": "^6.0.2",
|
|
"@codemirror/lang-javascript": "^6.2.5",
|
|
"@codemirror/lang-json": "^6.0.2",
|
|
"@codemirror/lang-markdown": "^6.5.2",
|
|
"@codemirror/lang-php": "^6.0.2",
|
|
"@codemirror/lang-python": "^6.2.1",
|
|
"@codemirror/lang-rust": "^6.0.2",
|
|
"@codemirror/lang-sql": "^6.10.0",
|
|
"@codemirror/lang-xml": "^6.1.0",
|
|
"@codemirror/lang-yaml": "^6.1.3",
|
|
"@codemirror/language": "^6.12.4",
|
|
"@codemirror/legacy-modes": "^6.5.3",
|
|
"@codemirror/search": "^6.7.1",
|
|
"@codemirror/state": "^6.7.1",
|
|
"@codemirror/view": "^6.43.8",
|
|
"@lezer/highlight": "^1.2.3",
|
|
"clsx": "^2.1.1",
|
|
"mermaid": "^11.16.1",
|
|
"node-pty": "^1.1.0",
|
|
"rxjs": "^7.8.2",
|
|
"schemastery": "^3.18.0",
|
|
"ws": "^8.18.0"
|
|
},
|
|
"devDependencies": {
|
|
"@cordisjs/plugin-loader": "^1.0.0-rc.5",
|
|
"@deepseek-ai/dsh-agent": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-locale": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-runtime": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-schema-form": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-ui-settings": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-client-web-react": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-host-webserver": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-invariants": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-llm": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-session": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-settings": "^0.1.0-rc.6",
|
|
"@deepseek-ai/dsh-tools": "^0.1.0-rc.6",
|
|
"@playwright/test": "^1.62.1",
|
|
"@types/node": "^24.0.0",
|
|
"@types/react": "~18.3.1",
|
|
"@types/react-dom": "~18.3.1",
|
|
"@types/ws": "^8.5.10",
|
|
"@xterm/addon-fit": "^0.11.0",
|
|
"@xterm/xterm": "^5.5.0",
|
|
"cordis": "^4.0.0-rc.7",
|
|
"jsdom": "^29.1.1",
|
|
"lightningcss": "^1.32.0",
|
|
"react": "^18.2.0",
|
|
"react-dom": "18.2.0",
|
|
"tsdown": "^0.22.2",
|
|
"typescript": "^5.6.0",
|
|
"vitest": "^4.1.8"
|
|
}
|
|
}
|