@chance722/dsh-inbox 0.2.3 → 0.2.5

package/lib/index.js

@@ -3,7 +3,7 @@ import { defineTool as defineTool2 } from "@deepseek-ai/dsh-tools";
 
 // src/shared/constants.ts
 var PACKAGE_NAME = "@chance722/dsh-inbox";
-var VERSION = true ? "0.2.3" : "0.0.0-dev";
+var VERSION = true ? "0.2.5" : "0.0.0-dev";
 var DEFAULT_USER_AGENT = "dsh-inbox";
 
 // src/shared/vocabulary.ts
@@ -749,6 +749,7 @@ var KEY_BLOCK = /<Key>([\s\S]*?)<\/Key>/i;
 var LAST_MODIFIED = /<LastModified>([\s\S]*?)<\/LastModified>/i;
 var SIZE = /<Size>([\s\S]*?)<\/Size>/i;
 var CONTENTS = /<Contents>[\s\S]*?<\/Contents>/gi;
+var COMMON_PREFIX = /<CommonPrefixes>[\s\S]*?<Prefix>([\s\S]*?)<\/Prefix>[\s\S]*?<\/CommonPrefixes>/gi;
 function decode(value) {
   return value.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&amp;/g, "&").trim();
 }
@@ -768,15 +769,15 @@ function parseListing(xml) {
   }
   return objects;
 }
-async function listPrefix(config, prefix, deps) {
+async function listPrefix(config, prefix, deps, extra = {}) {
   const sign = signer(config);
-  const v2 = sign(config, deps, "GET", "", { "list-type": "2", prefix });
+  const v2 = sign(config, deps, "GET", "", { "list-type": "2", prefix, ...extra });
   const first = await deps.fetch(v2.url, { method: "GET", headers: v2.headers });
   if (first.ok) return parseListing(await first.text());
   const refusal2 = await refused(first, "\u5217\u5BF9\u8C61");
   if (first.status < 500) {
     if (config.signatureVersion?.toLowerCase() !== "v2" && first.status === 401) {
-      const minimal = signRequestV4Minimal(config, deps, "GET", "", { "list-type": "2", prefix });
+      const minimal = signRequestV4Minimal(config, deps, "GET", "", { "list-type": "2", prefix, ...extra });
       const retry = await deps.fetch(minimal.url, { method: "GET", headers: minimal.headers });
       if (retry.ok) return parseListing(await retry.text());
       throw new Error(
@@ -786,7 +787,7 @@ async function listPrefix(config, prefix, deps) {
     }
     throw refusal2;
   }
-  const v1 = sign(config, deps, "GET", "", { prefix });
+  const v1 = sign(config, deps, "GET", "", { prefix, ...extra });
   const second = await deps.fetch(v1.url, { method: "GET", headers: v1.headers });
   if (!second.ok) {
     throw new Error(`${await refused(second, "\u5217\u5BF9\u8C61\uFF08V1 \u56DE\u9000\uFF09").then((e) => e.message)}
@@ -794,6 +795,27 @@ async function listPrefix(config, prefix, deps) {
   }
   return parseListing(await second.text());
 }
+async function listTopLevel(config, deps) {
+  const sign = signer(config);
+  const v2 = sign(config, deps, "GET", "", { "list-type": "2", delimiter: "/", "max-keys": "100" });
+  const first = await deps.fetch(v2.url, { method: "GET", headers: v2.headers });
+  if (first.ok) return parsePrefixes(await first.text());
+  if (first.status >= 500) {
+    const v1 = sign(config, deps, "GET", "", { delimiter: "/", "max-keys": "100" });
+    const second = await deps.fetch(v1.url, { method: "GET", headers: v1.headers });
+    if (second.ok) return parsePrefixes(await second.text());
+  }
+  return [];
+}
+function parsePrefixes(xml) {
+  const prefixes = [];
+  for (const match of xml.matchAll(COMMON_PREFIX)) {
+    const value = decode(match[1] ?? "");
+    if (value.length === 0) continue;
+    prefixes.push(value.replace(/\/$/, ""));
+  }
+  return prefixes;
+}
 async function readObject(config, key, deps) {
   const signed = signer(config)(config, deps, "GET", key);
   const response = await deps.fetch(signed.url, { method: "GET", headers: signed.headers });
@@ -978,6 +1000,7 @@ var DEFAULT_SETTINGS = {
   protocol: "webdav",
   baseUrl: "",
   directory: "/inbox",
+  adoptForeignRoots: false,
   username: "",
   endpoint: "",
   bucket: "",
@@ -991,6 +1014,7 @@ var WebdavSettingsSchema = z.object({
   protocol: z.union(["webdav", "s3"]).default("webdav"),
   baseUrl: z.string().default(""),
   directory: z.string().default("/inbox"),
+  adoptForeignRoots: z.boolean().default(false),
   username: z.string().default(""),
   endpoint: z.string().default(""),
   bucket: z.string().default(""),
@@ -1062,6 +1086,7 @@ async function saveWebdav(ctx, vault, base, patch) {
     const directory = patch.directory.trim();
     config.directory = directory.startsWith("/") ? directory : `/${directory}`;
   }
+  if (patch.adoptForeignRoots !== void 0) config.adoptForeignRoots = patch.adoptForeignRoots;
   if (patch.username !== void 0) config.username = patch.username.trim();
   if (patch.endpoint !== void 0) config.endpoint = normalizeUrl(patch.endpoint);
   if (patch.bucket !== void 0) config.bucket = patch.bucket.trim();
@@ -1137,7 +1162,7 @@ function isNewer(entry, lastPullAt) {
   if (Number.isNaN(seen) || Number.isNaN(remote)) return true;
   return remote > seen;
 }
-async function ingestFrom(vault, source, attachments, syncRoot3 = syncRootFor(void 0)) {
+async function ingestFrom(vault, source, attachments, syncRoot3 = syncRootFor(void 0), elsewhere = { roots: [] }) {
   const lastPullAt = vault.global.sync.lastPullAt;
   let entries;
   try {
@@ -1153,7 +1178,10 @@ async function ingestFrom(vault, source, attachments, syncRoot3 = syncRootFor(vo
   let skippedSync = 0;
   let skippedOlder = 0;
   let skippedForeign = 0;
-  const foreignSyncRoots = /* @__PURE__ */ new Set();
+  let remoteRecords = 0;
+  let remoteAttachments = 0;
+  const foreignSyncRoots = new Set(elsewhere.roots);
+  let foreignRecords = elsewhere.records ?? 0;
   let newestSuccess;
   const failures = [];
   for (const entry of entries) {
@@ -1162,11 +1190,20 @@ async function ingestFrom(vault, source, attachments, syncRoot3 = syncRootFor(vo
       skipped += 1;
       skippedForeign += 1;
       foreignSyncRoots.add(prefix);
+      const parts = entry.path.split("/").filter((part) => part.length > 0);
+      if ((parts[parts.length - 2] ?? "") === "items" && (parts[parts.length - 1] ?? "").endsWith(".json")) {
+        foreignRecords += 1;
+      }
       continue;
     }
     if (prefix !== void 0) {
       skipped += 1;
       skippedSync += 1;
+      const parts = entry.path.split("/").filter((part) => part.length > 0);
+      const folder = parts[parts.length - 2] ?? "";
+      const name3 = parts[parts.length - 1] ?? "";
+      if (folder === "items" && name3.endsWith(".json")) remoteRecords += 1;
+      else if (folder === "attachments" && !name3.endsWith(".meta.json")) remoteAttachments += 1;
       continue;
     }
     if (!isNewer(entry, lastPullAt)) {
@@ -1232,8 +1269,11 @@ async function ingestFrom(vault, source, attachments, syncRoot3 = syncRootFor(vo
     skippedSync,
     skippedOlder,
     skippedForeign,
+    remoteRecords,
+    remoteAttachments,
     syncRoot: syncRoot3,
     ...foreignSyncRoots.size === 0 ? {} : { foreignSyncRoots: [...foreignSyncRoots] },
+    ...foreignRecords === 0 ? {} : { foreignRecords },
     listed,
     lastPullAt: cursor,
     ...failures.length === 0 ? {} : { reason: failures.slice(0, 3).join("\uFF1B") }
@@ -1267,7 +1307,7 @@ async function pullRemote(vault, config, deps) {
     syncRootFor(config.directory)
   );
 }
-async function pullS3(vault, config, prefix, deps) {
+async function pullS3(vault, config, directory, deps) {
   if (config.endpoint.trim().length === 0 || config.bucket.trim().length === 0) {
     return {
       status: "unconfigured",
@@ -1278,20 +1318,44 @@ async function pullS3(vault, config, prefix, deps) {
       listed: 0
     };
   }
+  const scope = syncDirectory(directory);
   return ingestFrom(
     vault,
     {
-      list: async () => (await listPrefix(config, prefix, deps)).map((object) => ({
+      list: async () => (await listPrefix(config, `${scope}/`, deps)).map((object) => ({
         path: object.key,
         ...object.lastModified === void 0 ? {} : { lastModified: object.lastModified }
       })),
       read: async (entry) => readObject(config, entry.path, deps)
     },
     deps.attachments,
-    // S3 is handed the prefix by its caller — that prefix *is* the sync root.
-    prefix
+    // The vault's own tree, resolved by the same rule the writer uses.
+    syncRootFor(directory),
+    await s3RootsElsewhere(config, deps, scope)
   );
 }
+var PROBE_CANDIDATES = 5;
+async function s3RootsElsewhere(config, deps, scope) {
+  try {
+    const tops = await listTopLevel(config, deps);
+    const found = [];
+    let records = 0;
+    for (const top of tops.slice(0, PROBE_CANDIDATES)) {
+      if (top === scope || top.startsWith(`${scope}/`)) continue;
+      for (const probe2 of [`${top}/sync/items/`, `${top}/items/`]) {
+        const inside = await listPrefix(config, probe2, deps, { "max-keys": "1000" });
+        if (inside.length > 0) {
+          found.push(probe2.replace(/\/items\/$/, ""));
+          records += inside.filter((object) => object.key.endsWith(".json")).length;
+          break;
+        }
+      }
+    }
+    return found.length === 0 ? { roots: [] } : { roots: found, records };
+  } catch {
+    return { roots: [] };
+  }
+}
 
 // src/host/remote/merge.ts
 import { admitEncodedFile as admitEncodedFile2, admitEncodedImages as admitEncodedImages2 } from "@deepseek-ai/dsh-attachment";
@@ -1339,13 +1403,15 @@ function wins(remote, local) {
 async function mergeOnce(vault, tree, prefix, admit) {
   const failures = [];
   let merged = 0;
+  let added = 0;
+  let deletions = 0;
   let kept = 0;
   let attachments = 0;
   let objects;
   try {
     objects = await tree.list(`${prefix}/items/`);
   } catch (error) {
-    return { merged: 0, kept: 0, attachments: 0, failures: [`\u5217\u8FDC\u7AEF\u540C\u6B65\u76EE\u5F55\u5931\u8D25\uFF1A${reasonOf(error)}`] };
+    return { merged: 0, added: 0, deletions: 0, kept: 0, attachments: 0, failures: [`\u5217\u8FDC\u7AEF\u540C\u6B65\u76EE\u5F55\u5931\u8D25\uFF1A${reasonOf(error)}`] };
   }
   const wanted = /* @__PURE__ */ new Map();
   const bytesAt = /* @__PURE__ */ new Map();
@@ -1375,6 +1441,8 @@ async function mergeOnce(vault, tree, prefix, admit) {
       }
       await vault.import(remote);
       merged += 1;
+      if (local === void 0) added += 1;
+      if (remote.deletedAt !== void 0) deletions += 1;
       for (const attachmentId of remote.attachmentIds) {
         if (vault.getAttachment(attachmentId) === void 0) {
           wanted.set(attachmentId, remote.id);
@@ -1409,7 +1477,7 @@ async function mergeOnce(vault, tree, prefix, admit) {
       failures.push(`\u9644\u4EF6 ${attachmentId}\uFF1A${reasonOf(error)}`);
     }
   }
-  return { merged, kept, attachments, failures };
+  return { merged, added, deletions, kept, attachments, failures };
 }
 function extensionOfName(path) {
   return /\.([A-Za-z0-9]{1,8})$/.exec(nameOf2(path))?.[1]?.toLowerCase() ?? "bin";
@@ -1417,15 +1485,27 @@ function extensionOfName(path) {
 function reasonOf(error) {
   return error instanceof Error ? error.message : String(error);
 }
-async function mergeRemote(ctx, vault, attachments) {
+async function mergeRemote(ctx, vault, attachments, extraRoots = []) {
   const settings = readSettings(ctx);
   const prefix = syncRoot(settings);
   try {
     const tree = settings.protocol === "s3" ? await s3Tree(ctx, settings) : await webdavTree(ctx, settings);
-    if (tree === void 0) return { merged: 0, kept: 0, attachments: 0, failures: [] };
-    return await mergeOnce(vault, tree, prefix, admitWith(attachments));
+    if (tree === void 0) return { merged: 0, added: 0, deletions: 0, kept: 0, attachments: 0, failures: [] };
+    const admit = admitWith(attachments);
+    const outcome = await mergeOnce(vault, tree, prefix, admit);
+    for (const root of extraRoots) {
+      if (root === prefix) continue;
+      const extra = await mergeOnce(vault, tree, root, admit);
+      outcome.merged += extra.merged;
+      outcome.added += extra.added;
+      outcome.deletions += extra.deletions;
+      outcome.kept += extra.kept;
+      outcome.attachments += extra.attachments;
+      outcome.failures.push(...extra.failures);
+    }
+    return outcome;
   } catch (error) {
-    return { merged: 0, kept: 0, attachments: 0, failures: [reasonOf(error)] };
+    return { merged: 0, added: 0, deletions: 0, kept: 0, attachments: 0, failures: [reasonOf(error)] };
   }
 }
 function admitWith(store) {
@@ -1524,11 +1604,16 @@ async function runPull(ctx, vault, attachments) {
 }
 async function withMerge(ctx, vault, attachments, pulled) {
   if (pulled.status !== "ok" || attachments === void 0) return pulled;
-  const outcome = await mergeRemote(ctx, vault, attachments);
+  const settings = readSettings(ctx);
+  const extraRoots = settings.adoptForeignRoots ? pulled.foreignSyncRoots ?? [] : [];
+  const outcome = await mergeRemote(ctx, vault, attachments, extraRoots);
   const troubles = [...pulled.failed > 0 && pulled.reason !== void 0 ? [pulled.reason] : [], ...outcome.failures];
   return {
     ...pulled,
     merged: outcome.merged,
+    added: outcome.added,
+    deletions: outcome.deletions,
+    kept: outcome.kept,
     attachments: outcome.attachments,
     failed: pulled.failed + outcome.failures.length,
     ...troubles.length === 0 ? {} : { reason: troubles.slice(0, 3).join("\uFF1B") }
@@ -1577,7 +1662,10 @@ async function pullDropFolder(ctx, vault, attachments) {
         signatureVersion: settings.signatureVersion,
         userAgent: activeUserAgent(settings)
       },
-      settings.directory.replace(/^\//, ""),
+      // The configured directory, not a pre-trimmed string: `/`, `''` and
+      // "unset" all mean the default, and the ingest resolves the vault's own
+      // root from the same rule the writer uses.
+      settings.directory,
       {
         fetch: s3Fetch,
         accessKeyId: settings.accessKeyId,
@@ -3102,6 +3190,9 @@ async function handleWebdav(ctx, vault, payload) {
     if (typeof request.protocol === "string") patch.protocol = request.protocol;
     if (typeof request.baseUrl === "string") patch.baseUrl = request.baseUrl;
     if (typeof request.directory === "string") patch.directory = request.directory;
+    if (typeof request.adoptForeignRoots === "boolean") {
+      patch.adoptForeignRoots = request.adoptForeignRoots;
+    }
     if (typeof request.username === "string") patch.username = request.username;
     if (typeof request.password === "string") patch.password = request.password;
     if (typeof request.endpoint === "string") patch.endpoint = request.endpoint;

package/lib/types/client/messages.d.ts

@@ -129,6 +129,9 @@ export declare const zh: {
     'settings.region': string;
     'settings.bucketAddress': string;
     'settings.bucketDir': string;
+    'settings.adoptForeign': string;
+    'settings.adoptForeignHint': string;
+    'settings.directoryPlaceholder': string;
     'settings.dirS3.lead': string;
     'settings.dirS3.mid': string;
     'settings.dirS3.tail': string;
@@ -176,17 +179,19 @@ export declare const zh: {
     'sync.pushUnconfigured': string;
     'sync.pushFailed': string;
     'sync.pushUnknown': string;
-    'sync.pushUpToDate': string;
-    'sync.pushDone': string;
     'sync.pushPartial': string;
     'sync.pullNoAddress': string;
     'sync.pullFailed': string;
-    'sync.pullNothingNew': string;
-    'sync.pullMerged': string;
-    'sync.pullAttachments': string;
-    'sync.pullDone': string;
-    'sync.pullSkipWhy': string;
+    'sync.detailPushedIdle': string;
+    'sync.detailPushed': string;
+    'sync.detailPulled': string;
+    'sync.detailAdded': string;
+    'sync.detailDeleted': string;
     'sync.pullForeignSync': string;
+    'sync.detailForeign': string;
+    'sync.shortPushed': string;
+    'sync.shortPulled': string;
+    'sync.shortIdle': string;
     'sync.pullFailures': string;
     'sync.thisPage': string;
     'settings.status': string;
@@ -253,10 +258,14 @@ export declare const zh: {
     'manual.5.auto.body': string;
     'manual.5.manual.label': string;
     'manual.5.manual.body': string;
+    'manual.5.twoMachines.label': string;
+    'manual.5.twoMachines.body': string;
     'manual.5.delete.label': string;
     'manual.5.delete.body': string;
-    'manual.5.conflict.label': string;
-    'manual.5.conflict.body': string;
+    'manual.5.merge.label': string;
+    'manual.5.merge.body': string;
+    'manual.5.cloud.label': string;
+    'manual.5.cloud.body': string;
     'manual.6.title': string;
     'manual.6.query.label': string;
     'manual.6.query.body': string;
@@ -389,6 +398,9 @@ export declare const MESSAGES: {
         'settings.region': string;
         'settings.bucketAddress': string;
         'settings.bucketDir': string;
+        'settings.adoptForeign': string;
+        'settings.adoptForeignHint': string;
+        'settings.directoryPlaceholder': string;
         'settings.dirS3.lead': string;
         'settings.dirS3.mid': string;
         'settings.dirS3.tail': string;
@@ -436,17 +448,19 @@ export declare const MESSAGES: {
         'sync.pushUnconfigured': string;
         'sync.pushFailed': string;
         'sync.pushUnknown': string;
-        'sync.pushUpToDate': string;
-        'sync.pushDone': string;
         'sync.pushPartial': string;
         'sync.pullNoAddress': string;
         'sync.pullFailed': string;
-        'sync.pullNothingNew': string;
-        'sync.pullMerged': string;
-        'sync.pullAttachments': string;
-        'sync.pullDone': string;
-        'sync.pullSkipWhy': string;
+        'sync.detailPushedIdle': string;
+        'sync.detailPushed': string;
+        'sync.detailPulled': string;
+        'sync.detailAdded': string;
+        'sync.detailDeleted': string;
         'sync.pullForeignSync': string;
+        'sync.detailForeign': string;
+        'sync.shortPushed': string;
+        'sync.shortPulled': string;
+        'sync.shortIdle': string;
         'sync.pullFailures': string;
         'sync.thisPage': string;
         'settings.status': string;
@@ -513,10 +527,14 @@ export declare const MESSAGES: {
         'manual.5.auto.body': string;
         'manual.5.manual.label': string;
         'manual.5.manual.body': string;
+        'manual.5.twoMachines.label': string;
+        'manual.5.twoMachines.body': string;
         'manual.5.delete.label': string;
         'manual.5.delete.body': string;
-        'manual.5.conflict.label': string;
-        'manual.5.conflict.body': string;
+        'manual.5.merge.label': string;
+        'manual.5.merge.body': string;
+        'manual.5.cloud.label': string;
+        'manual.5.cloud.body': string;
         'manual.6.title': string;
         'manual.6.query.label': string;
         'manual.6.query.body': string;

package/lib/types/host/remote/merge.d.ts

@@ -42,6 +42,23 @@ export interface SyncTree {
 export interface MergeOutcome {
     /** Records that were new here, or overwritten because the remote was newer. */
     merged: number;
+    /**
+     * How many of {@link merged} arrived as deletions.
+     *
+     * A deleted record travels as an ordinary record with deletedAt set, so a
+     * merge that brings deletions looks exactly like one that brings updates until
+     * somebody opens the recycle bin (measured 2026-09-21: 19 merged — 6 new
+     * records and 13 tombstones, and the bin went from empty to thirteen).
+     */
+    deletions: number;
+    /**
+     * How many of {@link merged} were ids this vault did not have at all.
+     *
+     * "19 records came over" and "the vault grew by 6" are both true at once, and
+     * the reader who just watched a number expects them to match (asked
+     * 2026-09-21, after merging an abandoned tree whose copies mostly overlapped).
+     */
+    added: number;
     /** Records the remote had and this machine already had, newer or equal. */
     kept: number;
     /** Attachment objects pulled down (bytes plus their row). */
@@ -76,5 +93,13 @@ export declare function mergeOnce(vault: Vault, tree: SyncTree, prefix: string,
  * @param attachments - where attachment bytes go.
  * @returns the counts and the lines worth showing; never throws.
  */
-export declare function mergeRemote(ctx: Context, vault: Vault, attachments: AttachmentStore): Promise<MergeOutcome>;
+export declare function mergeRemote(ctx: Context, vault: Vault, attachments: AttachmentStore, 
+/**
+ * Further sync trees to merge, on top of this machine's own.
+ *
+ * The pull hands over the trees it found elsewhere in the bucket (a machine
+ * that used to sync under another directory leaves one behind). Each is read
+ * exactly like our own: per record, `id` + `updatedAt` decides.
+ */
+extraRoots?: readonly string[]): Promise<MergeOutcome>;
 export {};

package/lib/types/host/remote/pull.d.ts

@@ -45,7 +45,16 @@ export interface RemoteSource {
  */
 export declare function ingestFrom(vault: Vault, source: RemoteSource, attachments: AttachmentStore, 
 /** This machine's own sync root; anything else under `sync/` is a stranger. */
-syncRoot?: string): Promise<PullResult>;
+syncRoot?: string, 
+/**
+ * Sync roots found **outside** the listed scope, from a protocol-specific
+ * probe. A listing scoped to our directory cannot see them, and without them
+ * "the other machine's records never arrived" has no explanation to show.
+ */
+elsewhere?: {
+    roots: readonly string[];
+    records?: number;
+}): Promise<PullResult>;
 /** What the user configures for WebDAV. */
 export interface WebdavConfig {
     baseUrl: string;
@@ -56,7 +65,20 @@ export interface WebdavConfig {
 export declare function pullRemote(vault: Vault, config: WebdavConfig, deps: WebdavDeps & {
     attachments: AttachmentStore;
 }): Promise<PullResult>;
-/** Pull over S3. */
-export declare function pullS3(vault: Vault, config: S3Config, prefix: string, deps: S3Deps & {
+/**
+ * Pull over S3.
+ *
+ * @param directory - the configured directory, exactly as the settings hold it.
+ *   `/`, an empty string and "never set" all mean the default; the listing is
+ *   scoped to it and the vault's own tree is `<directory>/sync`.
+ *
+ * This used to be handed the sync root as the *listing* prefix, and to treat
+ * that same string as "ours": with S3 every object the vault had uploaded
+ * therefore answered to a prefix that was not ours, so the panel reported
+ * 「自己的同步对象 0 项」 and warned about another machine's directory — which was
+ * this machine's own (measured 2026-09-21, a bucket holding both `sync/…` from
+ * the older build and `inbox/sync/…` from this one).
+ */
+export declare function pullS3(vault: Vault, config: S3Config, directory: string | undefined, deps: S3Deps & {
     attachments: AttachmentStore;
 }): Promise<PullResult>;

package/lib/types/host/s3/client.d.ts

@@ -173,7 +173,31 @@ export declare function parseListing(xml: string): RemoteObject[];
  * @param deps - credentials, fetch, clock.
  * @returns the objects found.
  */
-export declare function listPrefix(config: S3Config, prefix: string, deps: S3Deps): Promise<RemoteObject[]>;
+export declare function listPrefix(config: S3Config, prefix: string, deps: S3Deps, 
+/** Extra query parameters, e.g. `{ delimiter: '/', 'max-keys': '1' }`. */
+extra?: Record<string, string>): Promise<RemoteObject[]>;
+/**
+ * The top-level folders a bucket has.
+ *
+ * `delimiter=/` collapses everything below the first slash into
+ * `<CommonPrefixes>`, which is the cheap way to ask "what else lives up here?" —
+ * one request, however many objects the bucket holds. It is what makes "another
+ * machine synced into a different directory" visible: that machine's records are
+ * not under our directory, so a listing scoped to ours can never see them, and
+ * the silence looks exactly like "nothing new" (asked 2026-09-21).
+ *
+ * @param config - endpoint, bucket, region.
+ * @param deps - credentials, fetch, clock.
+ * @returns folder names without the trailing slash, e.g. `['inbox', 'sync']`.
+ */
+export declare function listTopLevel(config: S3Config, deps: S3Deps): Promise<string[]>;
+/**
+ * Read the folder names out of a `delimiter=/` listing.
+ *
+ * @param xml - the response body.
+ * @returns each prefix without its trailing slash.
+ */
+export declare function parsePrefixes(xml: string): string[];
 /** Fetch one object's bytes, with its content type when the server sends one. */
 export declare function readObject(config: S3Config, key: string, deps: S3Deps): Promise<{
     bytes: Uint8Array;

package/lib/types/host/webdav/config.d.ts

@@ -28,6 +28,7 @@ export declare const WebdavSettingsSchema: z<Schemastery.ObjectS<{
     protocol: z<"webdav" | "s3", "webdav" | "s3">;
     baseUrl: z<string, string>;
     directory: z<string, string>;
+    adoptForeignRoots: z<boolean, boolean>;
     username: z<string, string>;
     endpoint: z<string, string>;
     bucket: z<string, string>;
@@ -40,6 +41,7 @@ export declare const WebdavSettingsSchema: z<Schemastery.ObjectS<{
     protocol: z<"webdav" | "s3", "webdav" | "s3">;
     baseUrl: z<string, string>;
     directory: z<string, string>;
+    adoptForeignRoots: z<boolean, boolean>;
     username: z<string, string>;
     endpoint: z<string, string>;
     bucket: z<string, string>;
@@ -75,6 +77,8 @@ export interface WebdavPatch {
     protocol?: string;
     baseUrl?: string;
     directory?: string;
+    /** Merge other sync trees in the same bucket, not just this directory's. */
+    adoptForeignRoots?: boolean;
     username?: string;
     /** Empty string clears the stored password; undefined leaves it. */
     password?: string;

package/lib/types/shared/panel-wire.d.ts

@@ -48,6 +48,8 @@ export interface WebdavRequest {
     protocol?: RemoteProtocol;
     baseUrl?: string;
     directory?: string;
+    /** Merge other sync trees in the same bucket, not just this directory's. */
+    adoptForeignRoots?: boolean;
     username?: string;
     /** Empty string clears the stored password; absent leaves it alone. */
     password?: string;
@@ -82,6 +84,18 @@ export interface WebdavSettings {
     baseUrl: string;
     /** Folder under the base URL; the convention every device drops into. */
     directory: string;
+    /**
+     * Also merge `…/sync` trees found **outside** the configured directory.
+     *
+     * Off by default, because the directory is what tells two vaults apart and a
+     * bucket can be shared. On, this is what a person means by "it is all my
+     * cloud drive": a machine that used to sync somewhere else leaves its records
+     * behind, and they come back (asked 2026-09-21, 19 records). Merging settles
+     * per record by `id` + `updatedAt`, so an older tree cannot overwrite a newer
+     * copy — but it *can* bring back a record that was purged here, because a
+     * purge leaves nothing local to outrank it.
+     */
+    adoptForeignRoots: boolean;
     username: string;
     /** S3: endpoint host, e.g. `https://s3.cstcloud.cn`. */
     endpoint: string;
@@ -159,8 +173,21 @@ export interface PullResult {
      * than the local copy). Only the merge half of a pull can produce these.
      */
     merged?: number;
+    /** How many of {@link merged} were ids this vault did not have at all. */
+    added?: number;
+    /** How many of {@link merged} were deletions (they land in the recycle bin). */
+    deletions?: number;
     /** Attachment objects the merge had to fetch and admit locally. */
     attachments?: number;
+    /**
+     * Records the cloud holds that this vault **already had** (same id, not older).
+     *
+     * This is the answer to "why is the cloud's copy not coming over?": it is the
+     * same record, and the merge settles per record by `id` + `updatedAt` rather
+     * than by which machine uploaded it — a record this machine pushed comes back
+     * with the timestamp it left with, so it is kept, not re-filed.
+     */
+    kept?: number;
     failed: number;
     /** Files the server listed but we skipped as already-seen. */
     skipped: number;
@@ -180,8 +207,17 @@ export interface PullResult {
     skippedForeign?: number;
     /** Those other prefixes, e.g. `['inbox/sync']`; the panel warns about them. */
     foreignSyncRoots?: string[];
+    /** How many `items/*.json` records those other prefixes hold together. */
+    foreignRecords?: number;
     /** This machine's own sync root, so the warning can name both sides. */
     syncRoot?: string;
+    /**
+     * How many **records** the cloud holds, as opposed to how many objects that
+     * takes: `items/<id>.json` files under this machine's own sync root.
+     */
+    remoteRecords?: number;
+    /** How many attachments the cloud holds (`attachments/<id>.<ext>`, no descriptors). */
+    remoteAttachments?: number;
     /** How many entries the remote listed at all: distinguishes "empty folder"
      * from "everything already ingested". */
     listed: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chance722/dsh-inbox",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "private": false,
   "description": "Personal paste inbox for DeepSeek Harness (dsh): capture, classify, browse and retrieve.",
   "keywords": [
@@ -64,7 +64,10 @@
     "build": "node scripts/build.mjs && tsc -p tsconfig.build.json",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build",
+    "dev:status": "node scripts/dev.mjs status",
+    "dev:local": "node scripts/dev.mjs local",
+    "dev:npm": "node scripts/dev.mjs npm"
   },
   "dependencies": {
     "lucide-react": "^1.47.0",