@michengai/dsh-archive-manager 1.0.1 → 1.0.2

package/CHANGELOG.md

@@ -6,12 +6,14 @@ Published release notes are retained below; new versions are added without remov
 
 ## Unreleased
 
+## 1.0.2 - 2026-09-21
+
+- Fix legacy session repair incorrectly rejecting Windows short and extended paths while retaining protection against directory links.
+
 ## 1.0.1 - 2026-09-21
 
-- Migrate source code to strict TypeScript. Generated `lib` files are no longer tracked by Git and are rebuilt by `prepack`; published JavaScript entry points and runtime modules remain unchanged.
-- Restore callable snapshot guards at the host navigation boundary and preserve previous turn-count semantics for malformed log payloads, skipping non-object events.
-- Crop the personal filename strip from both screenshots, ship smaller WebP assets and DSH support badges, and remove the unused menu screenshot.
-- Check all 11 runtime modules before packaging and build before standalone compatibility tests. Release notes are generated from the bilingual changelogs for GitHub Releases; the stale standalone notes file is no longer included in npm packages.
+- Fix navigation errors and incorrect turn counts when session data is malformed.
+- Remove personal information from documentation screenshots and reduce package size.
 
 ## 1.0.0 - 2026-09-21
 

package/CHANGELOG.zh-CN.md

@@ -6,12 +6,14 @@
 
 ## Unreleased
 
+## 1.0.2 - 2026-09-21
+
+- 修复 Windows 短路径和扩展路径导致旧会话修复被误拦截的问题，保留目录链接安全防护。
+
 ## 1.0.1 - 2026-09-21
 
-- 源码迁移为严格 TypeScript；生成的 `lib` 不再进入 Git，由 `prepack` 自动重建。npm 包的 JavaScript 入口和运行模块保持不变。
-- 恢复宿主导航边界的快照可调用判断；轮次统计保留旧版畸形载荷语义，跳过非对象事件，避免整行详情读取失败。
-- 裁掉两张截图底部的个人文件名条，发布体积更小的 WebP 图片和 DSH 支持徽章，移除未使用的菜单截图。
-- 打包前检查全部 11 个运行模块，独立兼容测试先构建。GitHub 发行说明由双语更新日志生成；npm 包不再包含容易过期的独立发行说明文件。
+- 修复会话数据异常时的导航报错和轮次统计问题。
+- 移除文档截图中的个人信息，缩小安装包体积。
 
 ## 1.0.0 - 2026-09-21
 

package/lib/session-repair.js

@@ -1,7 +1,7 @@
 import { record } from "./contracts.js";
 import { createHash, randomUUID } from "node:crypto";
-import { lstat, readFile, readdir, open, link, unlink, realpath, rename } from "node:fs/promises";
-import { join, resolve, basename } from "node:path";
+import { lstat, readFile, readdir, open, link, unlink, rename } from "node:fs/promises";
+import { join, resolve, basename, dirname } from "node:path";
 import * as zlib from "node:zlib";
 import { classifySessionError } from "./archive-discovery.js";
 const LIMIT = 32 * 1024 * 1024;
@@ -58,9 +58,20 @@ async function regularFile(path) {
   const stat = await lstat(path);
   if (!stat.isFile() || stat.isSymbolicLink() || stat.size > LIMIT) throw new Error("\u5DE5\u4EF6\u4E0D\u662F\u53EF\u5B89\u5168\u5904\u7406\u7684\u5E38\u89C4\u65E5\u5FD7\u6587\u4EF6");
 }
+async function regularDirectory(directory) {
+  let current = resolve(directory);
+  while (true) {
+    const parent = dirname(current);
+    if (parent === current) return;
+    const stat = await lstat(current);
+    if (stat.isSymbolicLink()) throw new Error("\u4F1A\u8BDD\u76EE\u5F55\u5B58\u5728\u94FE\u63A5\u91CD\u5B9A\u5411\uFF0C\u9700\u4EBA\u5DE5\u5904\u7406");
+    if (!stat.isDirectory()) throw new Error("\u4F1A\u8BDD\u8DEF\u5F84\u4E0D\u662F\u5E38\u89C4\u76EE\u5F55\uFF0C\u9700\u4EBA\u5DE5\u5904\u7406");
+    current = parent;
+  }
+}
 async function prepareAutomationRepair({ directory, target, sessionId, format }) {
   if (!format || format.currentVersion !== 3 || typeof format.createRestore !== "function") throw new Error("\u5F53\u524D\u5BBF\u4E3B\u4E0D\u652F\u6301\u6B64\u4FEE\u590D\uFF0C\u8BF7\u5347\u7EA7 DSH \u540E\u91CD\u8BD5");
-  if (resolve(await realpath(directory)).toLowerCase() !== resolve(directory).toLowerCase()) throw new Error("\u4F1A\u8BDD\u76EE\u5F55\u5B58\u5728\u94FE\u63A5\u91CD\u5B9A\u5411\uFF0C\u9700\u4EBA\u5DE5\u5904\u7406");
+  await regularDirectory(directory);
   const names = (await readdir(directory)).filter((name) => /^session(?:\.v[1-9][0-9]*)?\.jsonl(?:\.zstd)?$/.test(name));
   const sources = names.filter((name) => /^session\.jsonl(?:\.zstd)?$/.test(name));
   if (sources.length !== 1 || names.some((name) => name !== sources[0] && name !== basename(target))) throw new Error("\u53D1\u73B0\u591A\u4E2A\u6216\u975E\u65E7\u7248\u65E5\u5FD7\u5DE5\u4EF6\uFF0C\u8BF7\u5148\u68C0\u67E5\u4EE3\u9645\u72B6\u6001");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-archive-manager",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "NPM-installable DSH Web plugin for managing archived sessions.",
   "type": "module",
   "packageManager": "pnpm@11.22.0",