Address PR review: author attribution, refs chips, scan gate

- Attribute the plugin to Microbiosis (redmingwei account does not exist; gh api returns 404, so the old link was dead). Unified across both root indexes, plugin.json and both plugin READMEs.
- Drop the unused refs chip row: the server never sends a per-commit refs field, so refsHtml() always returned an empty string and .row-refs / .ref-chip.is-head were dead code. Branches/tags still render in the detail panels via .ref-chip.is-tag.
- Gate the whole-machine scan fallback on config.repos.length === 0 as well, so users who declared repos explicitly never trigger a drive-root scan.
- Correct docs: 200 commits is a fixed client page size, not a repos.json setting; client timeout is 35s default and 60s for graph requests; expand Data & access into read / discovery / write / network sections.

Author: Microbiosis

README.md

@@ -63,7 +63,7 @@ The MiniMax Code Agent communicates through the host MCP client. Business reques
 | [Token Usage Board](plugins/yanhy2000/mcode-usage-monitor/) | Watch local Token usage, output speed, and cache hit rate in near real time; filter by time range, model, and session | [yanhy2000](https://github.com/yanhy2000) |
 | [Model Manager](plugins/ocoomber/openrouter-model-manager/) | Browse, search, and enable/disable models in your `~/.minimax/config.yaml` with instant save, bulk actions, one-click undo, and automatic backups | [ocoomber](https://github.com/ocoomber) |
 | [Self-drive Route Planner](plugins/hanzijie/self-drive-route-planner/) | **Official plugin** for planning driving routes with place search, route alternatives, demo mode, and Xiaohongshu 3:4 itinerary cards | [HanZijie](https://github.com/HanZijie) |
-| [Git Commit Tree](plugins/microbiosis/git-tree/) | Inspect a local Git repo's commit history with a swim-lane graph, branches/tags, commit detail, and per-file change stats; persisted filter preferences and optional auto-refresh | [redmingwei](https://github.com/redmingwei) |
+| [Git Commit Tree](plugins/microbiosis/git-tree/) | Inspect a local Git repo's commit history with a swim-lane graph, branches/tags, commit detail, and per-file change stats; persisted filter preferences and optional auto-refresh | [Microbiosis](https://github.com/Microbiosis) |
 
 <details>
 <summary>Preview: Token Usage Board</summary>

README.zh-CN.md

@@ -64,7 +64,7 @@ MiniMax Code Agent 通过宿主 MCP 客户端与 MiniApp 协作。业务请求
 | [Token 用量看板](plugins/yanhy2000/mcode-usage-monitor/README.zh-CN.md) | 近实时查看本机 Token 用量、输出速度与缓存命中率，可按时间范围、模型和会话筛选 | [yanhy2000](https://github.com/yanhy2000) |
 | [模型管理器](plugins/ocoomber/openrouter-model-manager/README.zh-CN.md) | 浏览、搜索并启用/停用 `~/.minimax/config.yaml` 中的模型，支持即时保存、批量操作、一键撤销和自动备份 | [ocoomber](https://github.com/ocoomber) |
 | [自驾规划](plugins/hanzijie/self-drive-route-planner/README.zh-CN.md) | 【官方插件】规划自驾路线、地点搜索、候选算路与小红书 3:4 行程图；支持演示模式 | [HanZijie](https://github.com/HanZijie) |
-| [Git 提交树](plugins/microbiosis/git-tree/README.zh-CN.md) | 查看本机 Git 仓库的提交历史：泳道提交图、分支/标签、提交详情与文件改动统计，支持筛选偏好持久化与可选自动刷新 | [redmingwei](https://github.com/redmingwei) |
+| [Git 提交树](plugins/microbiosis/git-tree/README.zh-CN.md) | 查看本机 Git 仓库的提交历史：泳道提交图、分支/标签、提交详情与文件改动统计，支持筛选偏好持久化与可选自动刷新 | [Microbiosis](https://github.com/Microbiosis) |
 
 <details>
 <summary>预览：Token 用量看板</summary>

plugins/microbiosis/git-tree/.minimax-plugin/plugin.json

@@ -4,7 +4,7 @@
   "displayName": "Git 提交树",
   "version": "1.1.0",
   "description": "查看本机 git 仓库的提交历史：泳道提交图、分支/标签、提交详情与文件改动统计。",
-  "author": "redmingwei",
+  "author": "Microbiosis",
   "icon": "icon.png",
   "category": "Other",
   "exampleQueries": [

plugins/microbiosis/git-tree/README.md

@@ -4,7 +4,7 @@
 
 Inspect a local Git repository's commit history from MiniMax Code: swim-lane commit graph, branches and tags, commit detail and per-file change stats, with optional auto-refresh and persisted filter preferences.
 
-Author: Microbiosis · Version: 1.1.0
+Author: [Microbiosis](https://github.com/Microbiosis) · Version: `1.1.0`
 
 ![Git commit tree preview](docs/preview.jpg)
 
@@ -18,7 +18,7 @@ Copy this directory into the active MiniMax Code data directory under `plugins/`
 
 Keep the hidden `.minimax-plugin/` directory. Restart MiniMax Code with Mini App support, confirm the plugin is recognized, then open "Git 提交树" — either from the plugin list or by asking the assistant.
 
-The page loads the first 200 commits of the active repo (configurable via `repos.json`). Use the ref dropdown to filter by branch or tag, the search box to match commit subjects, the author box to match authors, and the "Auto refresh" dropdown to keep the view in sync with new pushes.
+The page loads the first 200 commits of the active repo. 200 is a fixed page size on the client, not a setting in `repos.json`; narrow the result set with the ref dropdown (branch or tag), the search box (commit subject), and the author box, or use "Auto refresh" to keep the view in sync with new pushes.
 
 ## What it shows
 
@@ -27,8 +27,8 @@ The page loads the first 200 commits of the active repo (configurable via `repos
 | Stats grid | `git rev-list --all --count`, `for-each-ref`, `tag --list`, `status --porcelain` | Total commits, branches, tags, working-tree changes |
 | Worktree chips | `git status --porcelain` | Current branch + the first 6 changed paths |
 | Commit graph | `git log --topo-order` + custom lane algorithm (ported from `zai-org/ZCode`) | Single SVG canvas: paths, dots, selection ring, hover highlight |
-| Commit rows | `git log` + `git tag --contains` | 4-column grid (refs + subject / date / author / hash); refs chip with `is-head` and `is-tag` styling |
-| Inline detail (toggle) | server-side `/api/commit` | Subject, refs, file changes table, body — appears below the list and can be collapsed |
+| Commit rows | `git log` + `git tag --contains` | 4-column grid (subject / date / author / hash) |
+| Inline detail (toggle) | server-side `/api/commit` | Subject, branches/tags chips, file changes table, body — appears below the list and can be collapsed |
 | Right detail (always on) | server-side `/api/commit` | Same payload as inline; selection and inline are independent |
 
 ## Data sources & caching
@@ -39,7 +39,7 @@ The page loads the first 200 commits of the active repo (configurable via `repos
 - **Commit detail**: `git show -s` + `git show --numstat` + `branch --contains` + `tag --contains`, cached **60 s** per `(repo, sha)`. The client mirrors this cache for 60 s as well, so re-clicking a row is free.
 - **Tags for graph**: `git log --all --simplify-by-decoration --format=%H %D`, cached 60 s per repo.
 - **Compression**: API responses ≥ 256 bytes are gzipped when the client advertises `Accept-Encoding: gzip`.
-- **Timeouts**: quick reads (for-each-ref, tag --list, contains checks) 10 s; medium reads (log -n 1, status, git show) 15 s; heavy reads (log --topo-order --all, rev-list --all --count) 30 s. Client `api()` caps at 35 s with `AbortController`.
+- **Timeouts**: quick reads (for-each-ref, tag --list, contains checks) 10 s; medium reads (log -n 1, status, git show) 15 s; heavy reads (log --topo-order --all, rev-list --all --count) 30 s. Client `api()` caps at 35 s by default and 60 s for graph requests, using `AbortController`.
 
 ## Preferences
 
@@ -68,7 +68,19 @@ No build step.
 
 ## Data & access
 
-Every read is a local `git` invocation against a repository you declared in `repos.json` or one the scanner found on this machine. Nothing is uploaded, and the plugin makes no outbound network requests. The only write is `<dataDir>/prefs.json`, which stores just the filter and theme keys listed under Preferences.
+**What the plugin reads.** Every read is a local `git` invocation against a repository you declared in `repos.json` or one the scanner found on this machine. Git reads `.git` internals and working-tree metadata (for example `git status`) inside those repositories only.
+
+**How repositories are discovered.** Discovery enumerates *directory names* and checks each candidate for a `.git` entry; it never reads the contents of files it is not already pointed at. The scan surface is wider than `repos.json`:
+
+- Your home development directories (`~/Code`, `~/Projects`, `~/repos`, `~/workspace`, `~/src`, `~/source`, `~/dev`, `~/work`, `~/Documents`, `~/git`), plus the plugin root and process cwd walk-up.
+- On Windows, the root of every mounted drive letter (`A:\` … `Z:\`), which includes mapped network drives. System directories are filtered out.
+- On macOS and Linux, the parent of your home directory (`/Users`, `/home`), which lists the *names* of other local user accounts' home directories.
+
+This only runs when neither `repos.json` nor the walk-up produced a scan base.
+
+**What the plugin writes.** The only write is `<dataDir>/prefs.json`, which stores just the filter and theme keys listed under Preferences.
+
+**Network.** Nothing is uploaded, and the plugin makes no outbound network requests.
 
 ## Tested environment
 

plugins/microbiosis/git-tree/README.zh-CN.md

@@ -4,7 +4,7 @@
 
 在 MiniMax Code 里查看本机 Git 仓库的提交历史：泳道提交图、分支与标签、提交详情和文件改动统计,支持自动刷新与筛选偏好持久化。
 
-作者:Microbiosis · 版本:`1.1.0`
+作者:[Microbiosis](https://github.com/Microbiosis) · 版本:`1.1.0`
 
 ![Git 提交树预览](docs/preview.jpg)
 
@@ -18,7 +18,7 @@
 
 保留 `.minimax-plugin/` 隐藏目录。重新启动支持 Mini App 的 MiniMax Code,确认插件已被识别并启用,然后打开「Git 提交树」,或在对话中请求打开它。
 
-页面默认加载当前仓库最近 200 条提交(可在 `repos.json` 中配置)。通过引用下拉过滤分支或标签,用搜索框匹配提交信息,用作者框匹配作者,用「自动刷新」下拉保持视图与新推送同步。
+页面默认加载当前仓库最近 200 条提交。200 是客户端固定分页大小,不是 `repos.json` 里的配置项;可用引用下拉(分支或标签)、搜索框(提交信息)和作者框收窄结果,或用「自动刷新」下拉保持视图与新推送同步。
 
 ## 页面分区
 
@@ -27,8 +27,8 @@
 | 统计卡片 | `git rev-list --all --count`、`for-each-ref`、`tag --list`、`status --porcelain` | 提交总数、分支数、标签数、工作区改动数 |
 | 工作区条 | `git status --porcelain` | 当前分支 + 前 6 个改动路径 chip |
 | 提交图 | `git log --topo-order` + 自定义泳道算法(移植自 `zai-org/ZCode`) | 单 SVG canvas:path、dot、选中环、悬停高亮 |
-| 提交行 | `git log` + `git tag --contains` | 4 列网格(refs+subject / date / author / hash);refs chip 用 `is-head`、`is-tag` 区分边框色 |
-| 行内详情(可折叠) | 服务端 `/api/commit` | 标题、refs、文件改动表、body — 出现在列表下方,可折叠 |
+| 提交行 | `git log` + `git tag --contains` | 4 列网格(subject / date / author / hash) |
+| 行内详情(可折叠) | 服务端 `/api/commit` | 标题、分支/标签 chip、文件改动表、body — 出现在列表下方,可折叠 |
 | 右侧详情(常驻) | 服务端 `/api/commit` | 同上行内;选中态与行内互相独立 |
 
 ## 数据源与缓存
@@ -39,7 +39,7 @@
 - **提交详情**:`git show -s` + `git show --numstat` + `branch --contains` + `tag --contains`,按 `(repo, sha)` 缓存 **60 秒**。客户端镜像同一缓存,重复点同一条提交零成本。
 - **图的标签**:`git log --all --simplify-by-decoration --format=%H %D`,按仓库缓存 60 秒。
 - **响应压缩**:API 响应 ≥ 256 字节且客户端带 `Accept-Encoding: gzip` 时自动 gzip。
-- **超时分级**:快速读(`for-each-ref`、`tag --list`、`--contains`)10 秒;中速读(`log -n 1`、`status`、`git show`)15 秒;重量级读(`log --topo-order --all`、`rev-list --all --count`)30 秒。客户端 `api()` 用 `AbortController` 兜底 35 秒。
+- **超时分级**:快速读(`for-each-ref`、`tag --list`、`--contains`)10 秒;中速读(`log -n 1`、`status`、`git show`)15 秒;重量级读(`log --topo-order --all`、`rev-list --all --count`)30 秒。客户端 `api()` 默认用 `AbortController` 兜底 35 秒,提交图请求放宽到 60 秒。
 
 ## 偏好持久化
 
@@ -68,7 +68,19 @@
 
 ## 数据与访问
 
-所有读取都是对本机仓库的本地 `git` 命令调用,仓库来自你在 `repos.json` 中声明的路径或扫描器在本机发现的目录。不上传任何数据,插件不发起任何对外网络请求。唯一的写入是 `<dataDir>/prefs.json`,只保存「偏好持久化」一节列出的筛选与主题字段。
+**读取范围**。所有读取都是对本机仓库的本地 `git` 命令调用,仓库来自你在 `repos.json` 中声明的路径或扫描器在本机发现的目录。`git` 只读取这些仓库内部的 `.git` 数据和工作区元数据(例如 `git status`)。
+
+**仓库发现方式**。发现逻辑只枚举*目录名*并检查候选目录里是否存在 `.git` 条目,不会读取无关文件的内容。扫描面比 `repos.json` 更宽:
+
+- 你的主目录下的开发目录(`~/Code`、`~/Projects`、`~/repos`、`~/workspace`、`~/src`、`~/source`、`~/dev`、`~/work`、`~/Documents`、`~/git`),以及从插件根和工作目录向上查找。
+- Windows 上每个已挂载盘符的根目录(`A:\` 到 `Z:\`),其中包含映射的网络驱动器;系统目录会被过滤掉。
+- macOS 与 Linux 上主目录的父目录(`/Users`、`/home`),这会列出本机其他用户账户的*目录名*。
+
+只有在 `repos.json` 与向上查找都没有产出任何扫描基址时,才会执行上述扫描。
+
+**写入范围**。唯一的写入是 `<dataDir>/prefs.json`,只保存「偏好持久化」一节列出的筛选与主题字段。
+
+**网络**。不上传任何数据,插件不发起任何对外网络请求。
 
 ## 测试环境
 

plugins/microbiosis/git-tree/miniapp/client/index.html

@@ -422,13 +422,6 @@
         padding-right: 8px;
       }
 
-      .row-refs {
-        display: inline-flex;
-        align-items: center;
-        gap: 4px;
-        flex: none;
-      }
-
       .ref-chip {
         display: inline-flex;
         align-items: center;
@@ -447,12 +440,6 @@
         white-space: nowrap;
       }
 
-      .ref-chip.is-head {
-        border-color: var(--git-lane-0);
-        background: var(--mcode-surface-hover);
-        color: var(--mcode-text);
-      }
-
       .ref-chip.is-tag {
         border-color: var(--git-lane-2);
         color: var(--git-lane-2);
@@ -1205,24 +1192,9 @@ <h2>提交历史</h2>
           return 'lane-color-' + (((laneIndex % 4) + 4) % 4);
         }
 
-        function refsHtml(commit) {
-          if (!commit || !commit.refs || commit.refs.length === 0) return '';
-          return commit.refs.slice(0, 4).map(function (ref) {
-            var kindClass = ref.kind === 'head' ? ' is-head' : ref.kind === 'tag' ? ' is-tag' : '';
-            var icon =
-              ref.kind === 'tag'
-                ? '<svg width="9" height="9" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" aria-hidden="true" focusable="false"><path d="M2 3.5h10l2 2v6.5H2Zm0 0v8.5"/><circle cx="6" cy="6.5" r="1.4" fill="currentColor" stroke="none"/></svg>'
-                : ref.kind === 'head'
-                  ? '<svg width="9" height="9" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" aria-hidden="true" focusable="false"><circle cx="5" cy="13" r="1.4"/><path d="M5 11.6V3l7 3-7 3"/></svg>'
-                  : '';
-            return '<span class="ref-chip' + kindClass + '" title="' + esc(ref.kind + ': ' + ref.name) + '">' + icon + esc(ref.name) + '</span>';
-          }).join('');
-        }
-
         function rowHtml(commit, index) {
           var selected = state.selectedSha === commit.sha;
           var hoverClass = state.hoveredSha && state.hoveredSha !== commit.sha ? ' is-dimmed' : '';
-          var refs = refsHtml(commit);
           var mergeIcon = commit.merge
             ? '<svg class="merge-icon" width="11" height="11" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" aria-hidden="true" focusable="false"><circle cx="3" cy="3" r="1.6"/><circle cx="3" cy="13" r="1.6"/><circle cx="11" cy="6" r="1.6"/><path d="M3 4.6v6.8M4.6 13h0M11 7.6v3.5a1.6 1.6 0 0 1-1.6 1.6H7.4"/></svg>'
             : '';
@@ -1232,7 +1204,6 @@ <h2>提交历史</h2>
             '" data-sha="' + esc(commit.sha) + '" data-index="' + index + '">' +
             '<span class="row-graph-spacer" aria-hidden="true"></span>' +
             '<span class="row-subject-cell">' +
-            (refs ? '<span class="row-refs">' + refs + '</span>' : '') +
             '<span class="row-subject" title="' + esc(commit.subject || '') + '">' + esc(commit.subject || '（无提交信息）') + '</span>' +
             mergeIcon +
             '</span>' +

plugins/microbiosis/git-tree/miniapp/node/server.mjs

@@ -304,10 +304,14 @@ async function buildRegistry(pluginRoot) {
   // drive root. This lets a fresh install on a brand-new host surface
   // projects without any manual configuration.
   //
+  // The `config.repos.length === 0` half of the gate matters: without it a
+  // user who listed their repos explicitly would still get a whole-disk
+  // scan, which is far more file access than they asked for.
+  //
   // On Windows the per-entry filter below drops system hives (`Program
   // Files`, `Users`, `Windows`, …) so widening to drive roots cannot
   // accidentally recurse into %ProgramFiles% or %SystemRoot%.
-  if (scanBases.size === 0) {
+  if (scanBases.size === 0 && config.repos.length === 0) {
     for (const base of discoverDefaultScanBases()) {
       scanBases.add(resolve(base));
     }