ZiyaZhang
dcf485ac5c
Isolation is restored on the premise the review corrected: a workspace file need not be agent-authored — a read row makes every file in a cloned repository openable — and a same-origin active document was measured driving /api/settings.describe to a 200 with full data. Script-capable documents go back into an opaque origin; the preview's lost localStorage is the known cost, and a separate serving origin is the way to retire it. - confine(): a workspace rooted at a filesystem root has a realpath already ending in the separator, and the doubled prefix 403'd every child. - turnDeliverables(): reset on the turn boundary, not only at a closing assistant, so an interrupted turn cannot spill into the next turn's row; and recognize a mutation by render intent (diff card, or generic with kind 'edit') so str_replace_editor's insert counts. - 405 answers name the methods it allows. - The e2e now cold-seeds a recorded WRITE turn, so the assembled application covers the Produced row, its chip's served URL, and the isolation header. - Agent Note matched to what shipped (the row is in this PR, not deferred); ui-conversation README documents the new destination and the row; the fixture lane's dead-tab quirk and the cold-path listing cost are recorded.
client/ — web-GUI browser half
English | 中文
The browser side of the dsh web GUI: shell kernel, module system, wire consumer, React-free object services, the slot system, and the ui-* feature-plugin roster. Authoring rules live in AGENTS.md; the host half is host/. All product packages, named @deepseek-ai/dsh-client-<name>.
| Package | Role | ctx key / slot |
|---|---|---|
web/ |
Shell kernel: AppWebEntry runs the two-stage boot over the host-pushed entry graph |
(boots the tree) |
modules/ |
Client module system: browser peer of Node's ESM loader as a lazy CJS table under the vendored cordis Loader | (module face) |
web-react/ |
Shell-side React glue: createSlotRenderer + SessionProvider render seats |
(renderer install) |
connection/ |
Wire consumer both ends: browser ctx.connection (shared api client + stream loop) and the node half mounting the /api route with its browser-trust fence |
ctx.connection |
runtime/ |
Client cordis boot and React-free object services: slots, Sessions, Workspaces, per-session bindings | ctx.slots ctx.sessions ctx.workspaces |
hmr/ |
Dev-only hot reload for fetch-arrival client plugins (--dev graphs) |
(dev entry) |
locale/ |
Browser locale preference (zh/en) plus the ns×locale dictionary registry |
ctx.locale |
ui-slots/ |
Slot registry pure core: SlotMap merging, single register API, the four-share props family |
(types + core) |
ui-theme/ |
Theme preference over the --dsw-* token stylesheets (light/dark/system) |
ctx.theme |
ui-primitives/ |
Pure React atoms: icons, Button/Pill/Menu/Modal/Input, markdown family | (component library) |
ui-layout/ |
Shell three-column AppFrame; declares sidebar / conversation / details / conversation.empty |
ctx.layout |
ui-sidebar/ |
Sidebar shell: Workspace/session rail, search, collapse; declares sidebar.workspaces |
(slot host) |
ui-workspace/ |
Shared Workspace picker: browser region + hero picker over the same creation flow | (fills sidebar.workspaces, conversation.hero.workspace) |
ui-conversation/ |
Conversation domain: skeleton, chat view, input dock, per-tool row slots | (slot host) |
ui-trajectory/ |
Trajectory/Waterfall view tabs; the minimal pure-consumer plugin exemplar | (fills conversation.view) |
ui-command/ |
Command surface: session-keyed directory cache, / source, three-kind dispatch |
ctx.command |
ui-slash/ |
Input trigger pipeline: / and @ detection, grouped candidate menu, source roster |
ctx.slash |
ui-skill/ |
/-trigger skill reference source over the skill.list RPC |
(registers into ctx.slash) |
ui-subagent/ |
@-trigger subagent reference source over the sessions snapshot |
(registers into ctx.slash) |
ui-model/ |
Model selection: /model popupSelect + the composer model seat over ModelService |
ctx.models |
ui-question/ |
Web ask_user_question: host half mounts the tool, browser half fills the composer seat |
(fills conversation.composer) |
ui-settings/ |
Settings shell: trigger chrome + modal panel; declares the settings.* slots |
(slot host) |
ui-settings-general/ |
Settings ownerless copy: chrome content + General section skeleton | (fills settings.*) |
ui-models/ |
Models settings nav entry (content column lands in a later phase) | (fills settings.section) |
Feature UI composes only through the slot system (ctx.slots.register) — the slot system standard is the definitive model; the web client architecture note owns the loading chain and object layer.