@mzzsfy/dsh-session-manager 0.9.6 → 0.10.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mzzsfy/dsh-session-manager",
   "description": "会话自动归档与管理:超期自动归档、归档面板、删除进系统回收站、还原后一键重挂载",
-  "version": "0.9.6",
+  "version": "0.10.0",
   "type": "module",
   "main": "src/index.js",
   "exports": {
@@ -10,6 +10,7 @@
     "./package.json": "./package.json"
   },
   "dsh": {
+    "hostMin": "0.2.1-rc.2",
     "bundle": {
       "patch": "./cordis.patch.yml"
     },
@@ -22,8 +23,11 @@
     "compatibility": {
       "dshReleases": {
         "0.2.0-rc.1": "unknown",
-        "0.2.0-rc.2": "compatible",
-        "0.2.1-alpha.1": "unknown"
+        "0.2.0-rc.2": "unknown",
+        "0.2.1-alpha.1": "unknown",
+        "0.2.1-rc.2": "compatible",
+        "0.2.1-rc.5": "compatible",
+        "0.2.2-rc.1": "compatible"
       }
     }
   },
@@ -31,6 +35,10 @@
     "test": "node --test \"test/*.test.mjs\"",
     "npmPublish": "npm publish --access public --provenance=false --registry=https://registry.npmjs.org"
   },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
   "license": "MIT",
   "repository": {
     "type": "git",

package/src/client.js

@@ -123,6 +123,20 @@ const CSS = [
   '  border:1px solid var(--dsw-alias-border-l2);',
   '  background:transparent; color:inherit; font:inherit; }',
   '.sm-cfg__field input:focus-visible { outline:2px solid var(--dsw-alias-state-business-primary); outline-offset:0; }',
+  // 列表瘦身开关:原生 checkbox 保语义与可访问性,视觉由 track/thumb 呈现
+  '.sm-switch { display:inline-flex; align-items:center; gap:8px; min-height:28px; cursor:pointer;',
+  '  font:var(--dsw-font-xxs-12, 12px/18px sans-serif); color:var(--dsw-alias-label-caption); }',
+  '.sm-switch input[type="checkbox"] { position:absolute; opacity:0; width:0; height:0; }',
+  '.sm-switch__track { position:relative; flex-shrink:0; width:34px; height:19px; border-radius:999px; box-sizing:border-box;',
+  '  background:transparent; border:1px solid var(--dsw-alias-border-l2); transition:background 0.15s,border-color 0.15s; }',
+  '.sm-switch__thumb { position:absolute; top:50%; left:2px; width:13px; height:13px; border-radius:50%;',
+  '  background:var(--dsw-alias-label-caption); transform:translateY(-50%); transition:left 0.15s,background 0.15s; }',
+  '.sm-switch:hover .sm-switch__track { border-color:var(--dsw-alias-state-business-primary); }',
+  '.sm-switch input[type="checkbox"]:checked + .sm-switch__track { background:var(--dsw-alias-state-business-primary); border-color:var(--dsw-alias-state-business-primary); }',
+  '.sm-switch input[type="checkbox"]:checked + .sm-switch__track .sm-switch__thumb { left:17px; background:#fff; }',
+  '.sm-switch input[type="checkbox"]:focus-visible + .sm-switch__track { outline:2px solid var(--dsw-alias-state-business-primary); outline-offset:2px; }',
+  '.sm-switch:has(input[type="checkbox"]:disabled) { opacity:0.5; cursor:not-allowed; }',
+  '@media (prefers-reduced-motion: reduce) { .sm-switch__track, .sm-switch__thumb { transition:none; } }',
 ].join('\n')
 
 const UNARCHIVE_URL = '/api/session-manager/unarchive'
@@ -136,6 +150,11 @@ const STATUS_URL = '/api/session-manager/status'
 // 删除确认链文案:两击行内确认后弹窗强提示,弹窗内确认才发请求。
 // 删除产物不可再生,其他插件(用量统计等)依赖会话产物,删后其会话级数据一并消失
 const DELETE_BUTTON_TITLE = '删除会话产物会影响其他插件的工作(用量统计等依赖会话产物);若无特殊需求,请不要删除。删除需再次行内确认与弹窗确认。'
+// 行操作按钮悬停说明:文案与行为同源维护,由源码契约测试锁定
+const RESTORE_BUTTON_TITLE = '把该会话从归档移回会话列表;恢复后 10 分钟内暂停自动归档,保护「恢复 → 首条消息」窗口,期间发言即恢复正常活跃计时。'
+const REMOUNT_BUTTON_TITLE = '把这条已删除记录对应的会话重新挂回列表:产物仍在原位置时直接挂载,产物已进系统回收站时先还原再挂载。'
+const FORGET_BUTTON_TITLE = '只移除这条已删除记录,不动磁盘上的会话产物;用于产物已手动找回、或不再需要追踪的情况。'
+const MORE_BUTTON_TITLE = '展开该工作区剩余的归档会话;只改变面板显示条数,不改变任何会话的归档状态。'
 const DELETE_DIALOG_TITLE = '确认删除该会话?'
 const DELETE_DIALOG_BODY_PREFIX = '即将删除会话「'
 const DELETE_DIALOG_BODY_SUFFIX = '」。'
@@ -347,7 +366,7 @@ function ArchiveRow(props) {
       ]
     : [
         h('button', { key: 'delete', className: 'sm-btn sm-btn--danger', disabled: busy, title: DELETE_BUTTON_TITLE, onClick: props.onDelete }, '删除'),
-        h('button', { key: 'restore', className: 'sm-btn sm-btn--restore', disabled: busy, onClick: props.onUnarchive }, '恢复'),
+        h('button', { key: 'restore', className: 'sm-btn sm-btn--restore', disabled: busy, title: RESTORE_BUTTON_TITLE, onClick: props.onUnarchive }, '恢复'),
       ]
   return h('div', {
     className: 'sm-row' + (armed ? ' sm-row--armed' : '') + (busy ? ' sm-row--busy' : ''),
@@ -402,8 +421,8 @@ function DeletedRow(props) {
     h('span', { key: 'meta', className: 'sm-row__time', title: new Date(row.deletedAt).toLocaleString() }, fmtTime(row.deletedAt)),
     h('span', { className: 'sm-row__title', title: row.title }, row.title),
     h('div', { className: 'sm-row__actions' },
-      h('button', { key: 'remount', className: 'sm-btn sm-btn--restore', disabled: busy, onClick: props.onRemount }, '重新挂载'),
-      h('button', { key: 'forget', className: 'sm-btn', disabled: busy, onClick: props.onForget }, '移除记录'),
+      h('button', { key: 'remount', className: 'sm-btn sm-btn--restore', disabled: busy, title: REMOUNT_BUTTON_TITLE, onClick: props.onRemount }, '重新挂载'),
+      h('button', { key: 'forget', className: 'sm-btn', disabled: busy, title: FORGET_BUTTON_TITLE, onClick: props.onForget }, '移除记录'),
     ),
     h('span', { className: 'sm-row__path', title: row.path }, '原位置 ' + row.path),
   )
@@ -554,7 +573,7 @@ function SessionManagerApp(props) {
   // 免得数组子节点内无 key 元素随页扩位触发不必要的卸载重挂
   const expandMore = (remaining, onMore) => remaining <= 0
     ? null
-    : h('button', { key: 'more', className: 'sm-more', onClick: onMore }, '展开更多(剩 ' + remaining + ' 条)')
+    : h('button', { key: 'more', className: 'sm-more', title: MORE_BUTTON_TITLE, onClick: onMore }, '展开更多(剩 ' + remaining + ' 条)')
 
   // 主列表(最近归档):固定首页不翻页,尾部「按工作区浏览」入口跳转二级视图看全部
   const recentPage = pageArchiveRows(rows, ARCHIVE_PAGE_SIZE)
@@ -668,11 +687,13 @@ function SessionManagerApp(props) {
 const ARCHIVE_OVERVIEW_TITLE = '超过阈值天数未活跃的会话自动移入归档;触发时机为新会话创建、插件启动与周期检查;归档会话在本面板管理,可恢复或删除;恢复后 10 分钟内暂停自动归档,期间发言即恢复正常活跃计时。'
 const ARCHIVE_DAYS_TITLE = '会话超过该天数未活跃(产物无更新)即自动归档,空白(无消息)会话不参与归档;0 = 关闭自动归档。仅对产物可读的会话评估,产物不可读的跳过以免误归档,已归档的会话不会重复处理。'
 const ARCHIVE_INTERVAL_TITLE = '周期检查的间隔小时数,到期会话在下一轮检查时归档;0 = 关闭周期检查(新会话创建与插件启动时的检查不受影响);调小最迟等新间隔即可提前触发,调大自下一轮排期起生效。'
+const LIST_SLIM_TITLE = '会话列表瘦身:列表接口原本把每个会话的完整投影快照(上下文请求头、回合大纲等)一并下发,会话多时单次响应数十 MB、服务端重建要数十秒,每次打开页面都重来一遍。开启后只下发列表真正用到的字段并缓存结果,重复打开不再重建,响应体积下降九成以上;被裁掉的字段在会话详情里照旧完整返回。关闭即恢复原始行为,不影响归档、删除等其它功能。'
 
 // 自动归档配置:阈值天数与检查周期小时数,数值语义,失焦或 Enter 单字段即时提交;
 // 值存宿主 settings(与评估逻辑同源,0 = 关闭),非法输入前端拒绝不发包,
 // 服务端失败后回读生效值回滚显示
 const AUTO_ARCHIVE_URL = '/api/session-manager/auto-archive'
+const LIST_SLIM_URL = '/api/session-manager/list-slim'
 
 // 提交判定三态(镜像 core.mjs classifyAutoArchiveInput):noop 值未变 /
 // invalid 非非负整数 / post 可提交;受控输入下显示值随击键同步,提交守卫
@@ -685,29 +706,30 @@ function classifyAutoArchiveInput(committedText, text) {
   return { action: 'post', value }
 }
 
+// 面板状态:数值项取字符串供受控输入,开关项取布尔
+const configStateOf = (archive, slim) => ({
+  days: String(archive.days),
+  intervalHours: String(archive.intervalHours),
+  enabled: slim.enabled !== false,
+})
+
 function AutoArchiveConfig() {
   const [state, setState] = useState(null)
   // 已提交值快照:非法输入与保存失败的回滚基准,与编辑中的显示值分离
   const committedRef = React.useRef(null)
   useEffect(() => {
-    api(AUTO_ARCHIVE_URL)
-      .then((payload) => {
-        if (!payload) return
-        const next = { days: String(payload.days), intervalHours: String(payload.intervalHours) }
-        committedRef.current = next
-        setState(next)
-      })
-      .catch((error) => { console.warn('[session-manager] 自动归档配置读取失败', error) })
+    void refresh()
   }, [])
+  // 两个接口合并成一个面板状态:数值项与开关项一次读齐,提交后各自回读
   function refresh() {
-    return api(AUTO_ARCHIVE_URL)
-      .then((payload) => {
-        if (!payload) return
-        const next = { days: String(payload.days), intervalHours: String(payload.intervalHours) }
+    return Promise.all([api(AUTO_ARCHIVE_URL), api(LIST_SLIM_URL)])
+      .then(([archive, slim]) => {
+        if (!archive || !slim) return
+        const next = configStateOf(archive, slim)
         committedRef.current = next
         setState(next)
       })
-      .catch((error) => { console.warn('[session-manager] 自动归档配置回读失败', error) })
+      .catch((error) => { console.warn('[session-manager] 面板配置回读失败', error) })
   }
   function commit(field, text) {
     const committed = committedRef.current
@@ -735,6 +757,20 @@ function AutoArchiveConfig() {
         void refresh()
       })
   }
+  // 开关提交:布尔值直接落 settings,成功后按回显值收敛,失败回读生效值
+  function commitEnabled(next) {
+    api(LIST_SLIM_URL, { method: 'POST', body: JSON.stringify({ enabled: next }) })
+      .then((payload) => {
+        const saved = payload.enabled !== false
+        committedRef.current = { ...committedRef.current, enabled: saved }
+        setState((prev) => (prev === null ? prev : { ...prev, enabled: saved }))
+        toast(saved ? '会话列表瘦身已开启' : '会话列表瘦身已关闭')
+      })
+      .catch(() => {
+        toast('会话列表瘦身开关保存失败', { kind: 'error' })
+        void refresh()
+      })
+  }
   if (state === null) return null
   const numberInput = (field) => h('input', {
     type: 'number', min: 0, step: 1, value: state[field],
@@ -747,6 +783,16 @@ function AutoArchiveConfig() {
     h('span', { title: ARCHIVE_OVERVIEW_TITLE }, '自动归档'),
     h('label', { className: 'sm-cfg__field', title: ARCHIVE_DAYS_TITLE }, '阈值', numberInput('days'), '天未活跃(0 关闭)'),
     h('label', { className: 'sm-cfg__field', title: ARCHIVE_INTERVAL_TITLE }, '检查周期', numberInput('intervalHours'), '小时(0 关闭)'),
+    h('label', { className: 'sm-switch', title: LIST_SLIM_TITLE },
+      h('input', {
+        type: 'checkbox',
+        checked: state.enabled,
+        'aria-label': '会话列表瘦身',
+        onChange: (event) => commitEnabled(event.target.checked),
+      }),
+      h('span', { className: 'sm-switch__track' }, h('span', { className: 'sm-switch__thumb' })),
+      h('span', { title: LIST_SLIM_TITLE }, '会话列表瘦身'),
+    ),
   )
 }
 

package/src/index.js

@@ -31,13 +31,13 @@ import {
   updatedAtOf,
 } from './core.mjs'
 import { moveToQuarantine, restoreFromQuarantine, trashPath } from './trash.mjs'
+import { installListSlim } from './list-slim.mjs'
 
 export const name = 'dsh-session-manager'
 
 export const inject = ['webServer', 'workspaceRegistry', 'sessionQuery', 'storageDomain', 'agents', 'sessions', 'sessionPersistence']
 
 const NAMESPACE = 'session-manager'
-const WORKSPACE_DOMAIN_NAME = 'workspace'
 
 // 已删除台账域:global 单列表,条目为回收站还原后重挂载所需的最小信息;
 // heldPath 仅回收区降级条目携带(暂存路径,重挂载时移回 path 原位置)
@@ -98,6 +98,8 @@ const SETTINGS_SCHEMA = schemastery.object({
     .description('自动归档阈值天数,0 表示关闭;新会话创建、启动与周期评估时生效'),
   autoArchiveIntervalHours: schemastery.number().min(0).step(1).default(DEFAULT_AUTO_ARCHIVE_INTERVAL_HOURS)
     .description('周期评估间隔小时数,0 表示关闭周期评估;变更经周期 tick 对账,关闭即时暂停、重启用最迟下个 tick 生效'),
+  listSlimEnabled: schemastery.boolean().default(true)
+    .description('会话列表瘦身:裁剪 session/list 的投影并缓存,降低列表响应体积与重建耗时;上游结构变更时自动降级为原行为'),
 })
 
 // 0.1.7 宿主以静态 Config 导出生成设置节表单(maintain 同构);legacy 宿主经
@@ -142,6 +144,7 @@ function readSettings(ctx, config) {
   return {
     days: Number.isInteger(days) && days >= 0 ? days : DEFAULT_AUTO_ARCHIVE_DAYS,
     intervalHours: Number.isInteger(hours) && hours >= 0 ? hours : DEFAULT_AUTO_ARCHIVE_INTERVAL_HOURS,
+    listSlimEnabled: value?.listSlimEnabled !== false,
   }
 }
 
@@ -161,6 +164,21 @@ function readAutoArchivePatch(body) {
   return patch
 }
 
+// settings 双形写(maintain 同构,判定延迟到使用点):legacy 方法面以 register 为准
+// (0.1.7 的 settings.update 名义在场但按命名空间找条目必败,不可作判据);
+// 0.1.7+ 走 configEditor.edit 落 profile 条目(fiber.entry,与命名空间解耦)
+async function persistSettings(ctx, patch) {
+  const settings = ctx.get('settings')
+  if (typeof settings?.register === 'function' && typeof settings?.update === 'function') {
+    await settings.update(NAMESPACE, patch)
+    return
+  }
+  const editor = ctx.get('configEditor')
+  const entry = ctx.fiber?.entry
+  if (!editor || typeof editor.edit !== 'function' || !entry) throw new Error('宿主设置服务不可用')
+  await editor.edit(entry, (current) => ({ ...current, ...patch }))
+}
+
 function readBody(req) {
   const BODY_MAX_BYTES = 64 * 1024
   return new Promise((resolve, reject) => {
@@ -216,9 +234,44 @@ function rejectMethod(req, res, method) {
   return false
 }
 
+// 写路由守卫(全仓同构):浏览器跨站表单可发 text/plain 且载荷为合法 JSON,
+// 仅方法守卫不足以阻断 drive-by 写,补同源比对与 JSON 内容类型双校验。
+// 无 Origin 的非浏览器调用放行(本地 CLI/脚本);无 headers 的直调桩同样放行。
+function rejectCrossOrigin(req, res) {
+  const origin = req.headers ? req.headers.origin : undefined
+  if (!origin) return false
+  let sameOrigin = false
+  try {
+    sameOrigin = new URL(origin).host === req.headers.host
+  } catch {
+    sameOrigin = false
+  }
+  if (sameOrigin) return false
+  sendJson(res, 403, { error: '跨源请求被拒绝' })
+  return true
+}
+
+// 内容类型守卫:浏览器发起的跨站请求(表单/fetch 字符串体)必带 text/plain 等类型,
+// 借此阻断 drive-by 写;完全不带 content-type 的调用(本地 CLI/无头脚本)放行,
+// 与"无 Origin 放行"同口径
+function rejectNonJson(req, res) {
+  const type = req.headers ? req.headers['content-type'] : undefined
+  if (typeof type !== 'string' || type.trim() === '') return false
+  if (type.split(';')[0].trim().toLowerCase() === 'application/json') return false
+  sendJson(res, 415, { error: '仅接受 application/json 请求体' })
+  return true
+}
+
+function guardWrite(req, res) {
+  return rejectCrossOrigin(req, res) || rejectNonJson(req, res)
+}
+
 /** @param {import('@deepseek-ai/cordis').Context} ctx */
 export function apply(ctx, config) {
   let evaluating = false
+  // 列表瘦身:开关从设置实时读取,设置页改动即时生效;装载失败只关闭该能力,
+  // 归档与删除等其它功能不受影响
+  installListSlim(ctx, { isEnabled: () => readSettings(ctx, config).listSlimEnabled })
   // 取消归档全局宽限起点(进程内,重启失效可接受):恢复会话到用户发出首条
   // 消息之间的评估窗口保护,首条消息更新产物 mtime 后由阈值自然接管
   let unarchivedAtMs = 0
@@ -226,9 +279,9 @@ export function apply(ctx, config) {
   const inFlightDeletes = new Set()
 
   // 插件回收区:系统回收站不可用环境的删除降级暂存地,重挂载时移回原位置。
-  // 测试经 env DSH_QUARANTINE_DIR 注入临时目录
+  // 测试经 env DSH_QUARANTINE_DIR 注入临时目录;缺省从宿主 home 派生(DSH_HOME 即 .dsh 根)
   const quarantineDir = process.env.DSH_QUARANTINE_DIR
-    || join(homedir(), '.dsh', 'trash', 'session-manager')
+    || join(process.env.DSH_HOME || join(homedir(), '.dsh'), 'trash', 'session-manager')
 
   // header 查找缓存:归档/删除/重挂载路由共用(inputs 浮层已迁 dsh-context-manager)
   const headerCache = new Map()
@@ -332,27 +385,11 @@ export function apply(ctx, config) {
     evaluateArchives(cwd)
   })
 
-  // 取消归档:直写 workspace 域 global,无官方 API 可用。注册表把域 global 快照到
-  // 进程内 state 且只在自身写路径同步,直写后必须把快照一并改掉:否则注册表后续
-  // 全量写回(含自动归档)与 workspace.list 重连基线都会复活该 id,官方归档的幂等
-  // 判定也会因旧快照静默跳过。合并 durable 与快照再移除,可自愈历史失同步与清理
-  // 半失败(经取消归档重试即补全),代价是快照中的陈旧 id 会随任一次清理重新落盘,
-  // 可经再次取消归档清除。inject 保证注册表就绪,快照缺失即上游形态变更,loud fail;
-  // 域 global 仅支持整体写回,读改写窗口若与注册表两阶段变更交错,理论上可回退其
-  // pendingMutation/workspaceIds 中间态,下次启动 validateStoredState 将 loud fail,
-  // 窗口极窄且域 API 无原子原语可用,属已知取舍(详见 README)。
+  // 取消归档:官方 workspaceRegistry.unarchiveSession(0.2.1-rc.2+ 串行实现,
+  // 未归档 id 幂等不写)写穿 state,无私有直写的读改写窗口与快照失同步问题;
+  // 合并自愈语义随私有写一并退役(开发守则:移除被宿主能力取代的实现)
   async function removeArchivedId(sessionId) {
-    const domain = ctx.storageDomain.get(WORKSPACE_DOMAIN_NAME)
-    if (domain === undefined) throw new Error('workspace 域未打开')
-    const durable = domain.global.get()
-    const cached = ctx.workspaceRegistry.state
-    if (cached === undefined) throw new Error('workspace 注册表快照不可用')
-    const merged = new Set(durable.archivedSessionIds.map(String))
-    for (const id of cached.archivedSessionIds) merged.add(String(id))
-    if (!merged.delete(String(sessionId))) return
-    const next = { ...durable, archivedSessionIds: [...merged] }
-    await domain.global.set(next)
-    ctx.workspaceRegistry.state = next
+    await ctx.workspaceRegistry.unarchiveSession(sessionId)
   }
 
   // 台账记账:trash 成功即记录,路径为回收站「原位置」还原所需。
@@ -462,6 +499,7 @@ export function apply(ctx, config) {
       path: '/api/session-manager/unarchive',
       handler: async (req, res) => {
         if (!rejectMethod(req, res, 'POST')) return
+        if (guardWrite(req, res)) return
         try {
           const sessionId = await requireSessionId(req)
           await removeArchivedId(sessionId)
@@ -476,6 +514,7 @@ export function apply(ctx, config) {
       path: '/api/session-manager/info',
       handler: async (req, res) => {
         if (!rejectMethod(req, res, 'POST')) return
+        if (guardWrite(req, res)) return
         try {
           const sessionId = await requireSessionId(req)
           const header = await findHeader(ctx, sessionId, headerCache)
@@ -510,6 +549,7 @@ export function apply(ctx, config) {
       path: '/api/session-manager/delete',
       handler: async (req, res) => {
         if (!rejectMethod(req, res, 'POST')) return
+        if (guardWrite(req, res)) return
         const sessionId = await requireSessionId(req).catch((error) => {
           respondError(ctx, res, error)
           return undefined
@@ -661,6 +701,7 @@ export function apply(ctx, config) {
             return
           }
           if (!rejectMethod(req, res, 'POST')) return
+          if (guardWrite(req, res)) return
           let body
           try {
             body = JSON.parse(await readBody(req))
@@ -668,19 +709,7 @@ export function apply(ctx, config) {
             throw new Error(MESSAGES.badJsonBody)
           }
           const patch = readAutoArchivePatch(body)
-          // 双形写(maintain 同构,判定延迟到使用点):legacy 方法面以 register 为准
-          // (0.1.7 的 settings.update 名义在场但按命名空间找条目必败,不可作判据);
-          // 0.1.7+ 走 configEditor.edit 落 profile 条目(fiber.entry,与命名空间解耦)。
-          // await 保证回显为新值,persist 失败走 respondError
-          const settings = ctx.get('settings')
-          if (typeof settings?.register === 'function' && typeof settings?.update === 'function') {
-            await settings.update(NAMESPACE, patch)
-          } else {
-            const editor = ctx.get('configEditor')
-            const entry = ctx.fiber?.entry
-            if (!editor || typeof editor.edit !== 'function' || !entry) throw new Error('宿主设置服务不可用')
-            await editor.edit(entry, (current) => ({ ...current, ...patch }))
-          }
+          await persistSettings(ctx, patch)
           const current = readSettings(ctx, config)
           sendJson(res, 200, { days: current.days, intervalHours: current.intervalHours })
         } catch (error) {
@@ -688,6 +717,32 @@ export function apply(ctx, config) {
         }
       },
     },
+    {
+      // 会话列表瘦身开关:读回生效值,写经 settings 落 profile 条目;
+      // 关闭即恢复原始列表语义(不裁剪、不缓存),无需卸载插件
+      path: '/api/session-manager/list-slim',
+      handler: async (req, res) => {
+        try {
+          if (req.method === 'GET') {
+            sendJson(res, 200, { enabled: readSettings(ctx, config).listSlimEnabled })
+            return
+          }
+          if (!rejectMethod(req, res, 'POST')) return
+          if (guardWrite(req, res)) return
+          let body
+          try {
+            body = JSON.parse(await readBody(req))
+          } catch {
+            throw new Error(MESSAGES.badJsonBody)
+          }
+          if (typeof body?.enabled !== 'boolean') throw new Error('列表瘦身开关须为布尔值')
+          await persistSettings(ctx, { listSlimEnabled: body.enabled })
+          sendJson(res, 200, { enabled: readSettings(ctx, config).listSlimEnabled })
+        } catch (error) {
+          respondError(ctx, res, error)
+        }
+      },
+    },
     {
       path: '/api/session-manager/deleted',
       handler: async (req, res) => {
@@ -704,6 +759,7 @@ export function apply(ctx, config) {
       path: '/api/session-manager/remount',
       handler: async (req, res) => {
         if (!rejectMethod(req, res, 'POST')) return
+        if (guardWrite(req, res)) return
         try {
           const sessionId = await requireSessionId(req)
           // 移回依据是台账条目,台账域不可用时整个重挂载拒绝:
@@ -747,6 +803,7 @@ export function apply(ctx, config) {
       path: '/api/session-manager/forget',
       handler: async (req, res) => {
         if (!rejectMethod(req, res, 'POST')) return
+        if (guardWrite(req, res)) return
         try {
           await removeLedgerEntry(await requireSessionId(req))
           sendJson(res, 200, { ok: true })

package/src/list-slim.mjs

@@ -0,0 +1,106 @@
+// 会话列表瘦身:session/list 为每个会话下发完整投影快照,列表行只消费其中少数几项。
+// 本模块在 remote 方法返回前按白名单裁剪并缓存结果。任何失败路径都降级为原行为:
+// 未装载、形状不符、原方法抛错一律透传,不影响本插件的其它功能。
+// sessionController 经 ctx.inject 可选依赖取得,宿主缺该服务时本能力静默关闭。
+
+// 列表行消费的投影;其余键不下发。被裁掉的投影仍由会话详情接口完整返回。
+export const KEEP_PROJECTIONS = ['title', 'sessionListMetadata', 'inbox', 'modelSelection', 'tokenUsage']
+
+// 缓存有效期:会话增删立即失效,TTL 只兜底标题与运行时状态的漂移。
+export const TTL_MS = 15 * 1000
+
+// 启动后预热延迟:让宿主先完成装载,再让出一次列表重建。
+export const WARMUP_DELAY_MS = 10 * 1000
+
+/**
+ * 裁剪一条列表项的投影,只保留白名单里的键。
+ * @param item - 宿主返回的列表项。
+ * @param keep - 保留的投影键。
+ * @returns 投影已裁剪的列表项;形状不符时原样返回。
+ */
+export function slimItem(item, keep = KEEP_PROJECTIONS) {
+  const values = item?.projections?.values
+  if (values === null || typeof values !== 'object' || Array.isArray(values)) return item
+  const picked = {}
+  for (const key of keep) if (key in values) picked[key] = values[key]
+  return { ...item, projections: { ...item.projections, values: picked } }
+}
+
+/**
+ * 给 sessionController.list 装上裁剪与缓存。
+ * @param ctx - 宿主上下文。
+ * @param options - 开关、白名单、缓存有效期与预热延迟。
+ * @returns 是否提交了装载回调;sessionController 缺席时回调不执行,宿主行为不变。
+ */
+export function installListSlim(ctx, options = {}) {
+  const {
+    enabled = true,
+    isEnabled,
+    keep = KEEP_PROJECTIONS,
+    ttlMs = TTL_MS,
+    warmupDelayMs = WARMUP_DELAY_MS,
+  } = options
+  if (!enabled) return false
+  const warn = (message) => ctx.logger?.warn?.('session-manager: 列表瘦身 ' + message)
+  try {
+    ctx.inject(['sessionController'], (scope) => {
+      try {
+        const controller = scope.sessionController
+        const original = controller?.list
+        if (typeof original !== 'function') return
+        let cache
+        let cachedAt = 0
+        let inflight
+
+        const fresh = () => cache !== undefined && Date.now() - cachedAt < ttlMs
+        const invalidate = () => {
+          cachedAt = 0
+        }
+        scope.on('api-session/added', invalidate)
+        scope.on('api-session/removed', invalidate)
+
+        // 只在调用方这一次请求上构建并缓存:不额外探测一次原方法,形状不符仅本次透传
+        controller.list = async (request, signal) => {
+          // 开关每次读取:设置页改动即时生效,无需重载插件
+          if (isEnabled !== undefined && !isEnabled()) return original.call(controller, request, signal)
+          if (fresh()) return cache
+          if (inflight !== undefined) return inflight
+          inflight = Promise.resolve(original.call(controller, request, signal))
+            .then((value) => {
+              if (!Array.isArray(value?.items)) return value
+              cache = { items: value.items.map((item) => slimItem(item, keep)) }
+              cachedAt = Date.now()
+              return cache
+            })
+            .finally(() => {
+              inflight = undefined
+            })
+          return inflight
+        }
+
+        let timer
+        if (warmupDelayMs >= 0) {
+          timer = setTimeout(() => {
+            if (isEnabled !== undefined && !isEnabled()) return
+            if (fresh() || inflight !== undefined) return
+            void controller.list({}, undefined).catch(() => {})
+          }, warmupDelayMs)
+          timer.unref?.()
+        }
+
+        // 卸载恢复原方法:本能力退出不改变宿主的列表语义
+        scope.effect(() => () => {
+          if (timer !== undefined) clearTimeout(timer)
+          controller.list = original
+        })
+        ctx.logger?.info?.(`session-manager: 列表瘦身已启用 (keep=${keep.join(',')} ttl=${ttlMs}ms)`)
+      } catch (error) {
+        warn('装载失败,保持原行为: ' + String(error?.message ?? error))
+      }
+    })
+    return true
+  } catch (error) {
+    warn('未启用: ' + String(error?.message ?? error))
+    return false
+  }
+}

package/test/client-row-actions.test.mjs

@@ -44,3 +44,23 @@ test('源码契约:已删除区保持悬停显现且减弱动效覆盖新选择
   assert.ok(/prefers-reduced-motion: reduce.*\{ \.sm-btn--danger, \.sm-deleted \.sm-row__actions \{ transition:none/.test(CLIENT_SRC),
     '减弱动效未覆盖删除按钮与已删除区过渡')
 })
+
+// Given 归档行与已删除行的操作按钮, When 渲染, Then 每个按钮都带 title 悬停说明
+test('源码契约:行操作按钮都带 title 悬停说明', () => {
+  const buttons = [
+    ['restore', 'RESTORE_BUTTON_TITLE'],
+    ['remount', 'REMOUNT_BUTTON_TITLE'],
+    ['forget', 'FORGET_BUTTON_TITLE'],
+    ['delete', 'DELETE_BUTTON_TITLE'],
+    ['more', 'MORE_BUTTON_TITLE'],
+  ]
+  for (const [key, constant] of buttons) {
+    const pattern = new RegExp("key: '" + key + "'[^\\n]*title: " + constant)
+    assert.ok(pattern.test(CLIENT_SRC), key + ' 按钮缺少 title(' + constant + ')')
+  }
+  for (const constant of ['RESTORE_BUTTON_TITLE', 'REMOUNT_BUTTON_TITLE', 'FORGET_BUTTON_TITLE', 'MORE_BUTTON_TITLE']) {
+    const matched = CLIENT_SRC.match(new RegExp('const ' + constant + " = '([^']+)'"))
+    assert.ok(matched, constant + ' 未定义')
+    assert.ok(matched[1].length >= 20, constant + ' 文案须讲清用途')
+  }
+})

package/test/client-switch.test.mjs

@@ -0,0 +1,49 @@
+// 开关形态守卫:布尔偏好一律 switch(track+thumb),原生 checkbox 视觉隐藏保语义与
+// 可访问性,状态选择器以 input[type="checkbox"] 锚定,防止组合进含其他 input 的 label 时误伤。
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import { readFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import { dirname, join } from 'node:path'
+
+const CLIENT_SOURCE = readFileSync(join(dirname(fileURLToPath(import.meta.url)), '..', 'src', 'client.js'), 'utf8')
+
+test('开关结构:label 包原生 checkbox + track + thumb', () => {
+  assert.match(CLIENT_SOURCE, /className: 'sm-switch'/, '开关 label 存在')
+  assert.match(CLIENT_SOURCE, /type: 'checkbox'/, '原生 checkbox 保语义')
+  assert.match(CLIENT_SOURCE, /className: 'sm-switch__track'/, 'track 存在')
+  assert.match(CLIENT_SOURCE, /className: 'sm-switch__thumb'/, 'thumb 存在')
+})
+
+test('原生 input 被视觉隐藏,不以裸 checkbox 呈现', () => {
+  assert.match(CLIENT_SOURCE, /\.sm-switch input\[type="checkbox"\] \{ position:absolute; opacity:0;/, 'input 视觉隐藏')
+})
+
+test('开关状态选择器以 input[type="checkbox"] 锚定', () => {
+  for (const state of [':checked', ':focus-visible', ':disabled']) {
+    const pattern = new RegExp('\\.sm-switch[^{]*\\' + state + '[^{]*\\{', 'g')
+    const matches = [...CLIENT_SOURCE.matchAll(pattern)].map((match) => match[0])
+    assert.ok(matches.length > 0, state + ' 选择器存在')
+    for (const selector of matches) {
+      assert.match(selector, /input\[type="checkbox"\]/, state + ' 必须以 input[type="checkbox"] 锚定: ' + selector)
+    }
+  }
+})
+
+test('开关样式的 :hover 锚定 label 而非隐藏的 input', () => {
+  assert.match(CLIENT_SOURCE, /\.sm-switch:hover \.sm-switch__track/, 'hover 锚定 label')
+})
+
+test('开关带悬停说明与无障碍标签', () => {
+  assert.match(CLIENT_SOURCE, /className: 'sm-switch', title: LIST_SLIM_TITLE/, 'label 带 title 悬停说明')
+  assert.match(CLIENT_SOURCE, /'aria-label': '会话列表瘦身'/, 'input 带 aria-label')
+  const matched = CLIENT_SOURCE.match(/const LIST_SLIM_TITLE = '([^']+)'/)
+  assert.ok(matched, '说明文案常量存在')
+  assert.ok(matched[1].length >= 40, '说明文案须讲清用途,不少于 40 字')
+})
+
+test('样式类名带本包前缀 sm-', () => {
+  for (const selector of ['.sm-switch {', '.sm-switch__track', '.sm-switch__thumb']) {
+    assert.ok(CLIENT_SOURCE.includes(selector), selector + ' 存在')
+  }
+})

package/test/index.test.mjs

@@ -39,17 +39,26 @@ const GHOST_DIR = path.join(tmpdir(), 'sm-ghost-fixture', 's1')
 const GHOST_PATH = path.join(GHOST_DIR, 'session.jsonl.zstd')
 
 function makeRegistry(initialIds) {
-  // 真实注册表契约:archivedSessionIds 是进程内快照的 getter,官方读路径全部经快照;
-  // archiveSession 归档即入集合(官方幂等判定依据),桩保持同语义
+  // 真实注册表契约(0.2.1-rc.2+):archivedSessionIds 是进程内快照的 getter;
+  // archiveSession 归档即入集合,unarchiveSession 串行移除(未归档 id 幂等不写),
+  // 两个官方入口都写穿 state——快照与持久集由注册表自身保证一致
   const registry = {
     state: { initialized: true, workspaceIds: [], archivedSessionIds: initialIds },
     list: () => [],
     archiveCalls: [],
+    unarchiveCalls: [],
     archiveSession: async (id) => {
       const sid = String(id)
       registry.archiveCalls.push(sid)
       registry.state.archivedSessionIds = [...registry.state.archivedSessionIds, sid]
     },
+    unarchiveSession: async (id) => {
+      const sid = String(id)
+      const next = registry.state.archivedSessionIds.filter((existing) => String(existing) !== sid)
+      if (next.length === registry.state.archivedSessionIds.length) return
+      registry.unarchiveCalls.push(sid)
+      registry.state.archivedSessionIds = next
+    },
   }
   Object.defineProperty(registry, 'archivedSessionIds', {
     get: () => registry.state.archivedSessionIds,
@@ -399,17 +408,17 @@ test('多工作区 detach:首个失败不终止后续,全部失败进日志', sk
   }
 })
 
-test('取消归档:域领先快照时反向合并清理', skipMissingDeps, async () => {
-  const domain = makeDomain(['s1'])
-  const { handlers, registry } = makeCtx({ archivedIds: [], headers: [HEADER], agents: new Map(), domain })
+test('取消归档路由:走官方 unarchiveSession 写穿注册表', skipMissingDeps, async () => {
+  const domain = makeDomain(['s1', 's2'])
+  const { handlers, registry } = makeCtx({ archivedIds: ['s1', 's2'], headers: [HEADER], agents: new Map(), domain })
   const res = response()
   await handlers.get('/api/session-manager/unarchive')(request('s1'), res)
   assert.equal(res.status, 200)
   assert.deepEqual(res.body, { ok: true })
-  // durable 有而快照无:合并后仍完成移除,防漏清理
-  assert.deepEqual(domain.state.archivedSessionIds, [])
-  assert.equal(domain.writes, 1)
-  assert.deepEqual(registry.state.archivedSessionIds, [])
+  // 官方 API 写穿:注册表快照移除,无私有直写路径
+  assert.deepEqual(registry.unarchiveCalls, ['s1'])
+  assert.deepEqual(registry.state.archivedSessionIds, ['s2'])
+  assert.deepEqual(registry.archivedSessionIds, ['s2'])
 })
 
 test('台账 deletedAt 为删除时刻的数值(面板排序依据)', skipMissingDeps, async () => {
@@ -435,52 +444,16 @@ test('台账 deletedAt 为删除时刻的数值(面板排序依据)', skipMissin
   }
 })
 
-test('取消归档路由:从域集合移除目标 id 并写回', skipMissingDeps, async () => {
-  const domain = makeDomain(['s1', 's2'])
-  const { handlers, registry } = makeCtx({ archivedIds: ['s1'], headers: [HEADER], agents: new Map(), domain })
-  const res = response()
-  await handlers.get('/api/session-manager/unarchive')(request('s1'), res)
-  assert.equal(res.status, 200)
-  assert.deepEqual(res.body, { ok: true })
-  assert.deepEqual(domain.state.archivedSessionIds, ['s2'])
-  assert.equal(domain.writes, 1)
-  // 复活守卫:注册表进程内快照必须同步移除,否则官方全量写回与 list 基线会恢复该 id
-  assert.deepEqual(registry.state.archivedSessionIds, ['s2'])
-  assert.deepEqual(registry.archivedSessionIds, ['s2'])
-})
-
-test('取消归档路由:workspace 域未打开时拒绝', skipMissingDeps, async () => {
-  const { handlers } = makeCtx({ archivedIds: ['s1'], headers: [HEADER], agents: new Map(), domain: null })
-  const res = response()
-  await handlers.get('/api/session-manager/unarchive')(request('s1'), res)
-  assert.equal(res.status, 400)
-  assert.equal(res.body.error, 'workspace 域未打开')
-})
-
-test('取消归档路由:未归档 id 幂等跳过,不产生写回', skipMissingDeps, async () => {
-  const domain = makeDomain(['s1'])
-  const { handlers, registry } = makeCtx({ archivedIds: ['s1'], headers: [HEADER], agents: new Map(), domain })
+test('取消归档路由:未归档 id 幂等,注册表零写', skipMissingDeps, async () => {
+  const { handlers, registry } = makeCtx({ archivedIds: ['s1'], headers: [HEADER], agents: new Map() })
   const res = response()
   await handlers.get('/api/session-manager/unarchive')(request('s9'), res)
   assert.equal(res.status, 200)
   assert.deepEqual(res.body, { ok: true })
-  assert.deepEqual(domain.state.archivedSessionIds, ['s1'])
-  assert.equal(domain.writes, 0)
+  assert.deepEqual(registry.unarchiveCalls, [])
   assert.deepEqual(registry.state.archivedSessionIds, ['s1'])
 })
 
-test('取消归档路由:快照领先域时补全清理(重试路径)', skipMissingDeps, async () => {
-  const domain = makeDomain([])
-  const { handlers, registry } = makeCtx({ archivedIds: ['s1'], headers: [HEADER], agents: new Map(), domain })
-  const res = response()
-  await handlers.get('/api/session-manager/unarchive')(request('s1'), res)
-  assert.equal(res.status, 200)
-  assert.deepEqual(res.body, { ok: true })
-  assert.deepEqual(domain.state.archivedSessionIds, [])
-  assert.equal(domain.writes, 1)
-  assert.deepEqual(registry.state.archivedSessionIds, [])
-})
-
 test('取消归档宽限:恢复后 graceMs 内同进程评估暂停,不秒归档', skipMissingDeps, async () => {
   const dir = await mkdtemp(path.join(tmpdir(), 'sm-grace-'))
   try {
@@ -1077,7 +1050,7 @@ test('删除成功:trash 目标为会话目录,台账记录目录路径', skipMi
   try {
     const domain = makeDomain(['s1'])
     const workspace = makeWorkspace('C:\\x', ['s1'])
-    const { handlers, ledger } = makeCtx({
+    const { handlers, ledger, registry } = makeCtx({
       archivedIds: ['s1'],
       headers: [HEADER],
       agents: IDLE_S1,
@@ -1097,7 +1070,8 @@ test('删除成功:trash 目标为会话目录,台账记录目录路径', skipMi
     assert.equal(ledger.state.deleted.length, 1)
     assert.equal(ledger.state.deleted[0].sessionId, 's1')
     assert.equal(ledger.state.deleted[0].path, artifact.locatedDir)
-    assert.deepEqual(domain.state.archivedSessionIds, [])
+    // 取消归档走官方 unarchiveSession:注册表快照为事实源,域不再被插件直写
+    assert.deepEqual(registry.state.archivedSessionIds, [])
     assert.deepEqual(workspace.sessionIds, [])
   } finally {
     await artifact.cleanup()
@@ -1251,17 +1225,18 @@ test('删除:产物已缺失时运行中守卫仍然生效', skipMissingDeps, as
   assert.equal(res.body.error, MESSAGES.running)
 })
 
-test('删除:产物已缺失且清理半失败时聚合失败点', skipMissingDeps, async () => {
+test('删除:产物已缺失且归档清理半失败时聚合失败点', skipMissingDeps, async () => {
   const workspace = makeWorkspace('C:\\x', ['s1'], { detachError: new Error('detach boom') })
-  const { handlers, logger } = makeCtx({
-    archivedIds: [],
+  const { handlers, logger, registry } = makeCtx({
+    archivedIds: ['s1'],
     headers: [HEADER],
     agents: IDLE_S1,
-    domain: null,
     sessionPersistence: { locate: (header) => header.id === 's1' ? { path: GHOST_PATH } : undefined },
     ledger: makeLedgerDomain([{ sessionId: 's1', path: GHOST_DIR, deletedAt: 1 }]),
     workspaces: [workspace],
   })
+  // 官方取消归档半失败:注入 unarchiveSession 抛错
+  registry.unarchiveSession = async () => { throw new Error('unarchive boom') }
   const res = response()
   await withTrashStub(async () => {}, async () => {
     await handlers.get('/api/session-manager/delete')(request('s1'), res)
@@ -1323,16 +1298,16 @@ test('归档评估:超期运行中会话零产物 IO(早退,core 过滤为第二
   assert.deepEqual(registry.archiveCalls, [])
 })
 
-test('删除:workspace 域未打开时归档清理失败,响应 partial 且台账已记录', skipMissingDeps, async () => {
+test('删除:取消归档半失败时响应 partial 且台账已记录', skipMissingDeps, async () => {
   const artifact = await makeLocatedArtifact()
   try {
-    const { handlers, ledger } = makeCtx({
+    const { handlers, ledger, registry } = makeCtx({
       archivedIds: ['s1'],
       headers: [HEADER],
       agents: IDLE_S1,
-      domain: null,
       sessionPersistence: { locate: (header) => header.id === 's1' ? { path: artifact.locatedPath } : undefined },
     })
+    registry.unarchiveSession = async () => { throw new Error('unarchive boom') }
     const res = response()
     await withTrashStub(async () => {}, async () => {
       await handlers.get('/api/session-manager/delete')(request('s1'), res)
@@ -1383,12 +1358,10 @@ test('删除:detach 与台账同时失败时,partial 消息聚合两个失败点
 test('台账域打开失败:删除其余成功仍响应 partial', skipMissingDeps, async () => {
   const artifact = await makeLocatedArtifact()
   try {
-    const domain = makeDomain(['s1'])
-    const { handlers } = makeCtx({
+    const { handlers, registry } = makeCtx({
       archivedIds: ['s1'],
       headers: [HEADER],
       agents: IDLE_S1,
-      domain,
       sessionPersistence: { locate: (header) => header.id === 's1' ? { path: artifact.locatedPath } : undefined },
       openRejected: new Error('ledger down'),
     })
@@ -1399,8 +1372,8 @@ test('台账域打开失败:删除其余成功仍响应 partial', skipMissingDep
     assert.equal(res.status, 200)
     assert.equal(res.body.partial, true)
     assert.equal(res.body.message, '已移入回收站,但重挂载记录失败')
-    // 台账失败不阻断删除主链路:归档清理照常完成
-    assert.deepEqual(domain.state.archivedSessionIds, [])
+    // 台账失败不阻断删除主链路:归档清理经官方 API 照常完成
+    assert.deepEqual(registry.state.archivedSessionIds, [])
   } finally {
     await artifact.cleanup()
   }
@@ -1915,3 +1888,82 @@ test('0.1.7 形态:settings.configure 在场即关闭原生自动页', skipMissi
   assert.equal(configureCalls.length, 1)
   assert.deepEqual(configureCalls[0].presentation, { auto: false })
 })
+
+// ── 写路由同源 + JSON 守卫回归 ──
+
+// POST 夹具:带 headers 的请求体走 readBody 的 data/end 事件流
+function guardedRequest(routePath, headers, body = { sessionId: 's1' }) {
+  const req = new EventEmitter()
+  req.method = 'POST'
+  req.url = routePath
+  req.headers = headers
+  process.nextTick(() => {
+    req.emit('data', Buffer.from(JSON.stringify(body)))
+    req.emit('end')
+  })
+  return req
+}
+
+test('写路由守卫:跨源 POST 403 / 非 JSON 内容类型 415 / 同源 JSON 正常受理', skipMissingDeps, async () => {
+  // Given 全部写路由(浏览器表单可发 text/plain 且载荷为合法 JSON,仅方法守卫不足)
+  const POST_ROUTES = [
+    '/api/session-manager/unarchive',
+    '/api/session-manager/info',
+    '/api/session-manager/delete',
+    '/api/session-manager/auto-archive',
+    '/api/session-manager/remount',
+    '/api/session-manager/forget',
+  ]
+  const ORIGIN = 'http://127.0.0.1:9291'
+  const sameOrigin = {
+    origin: ORIGIN,
+    host: '127.0.0.1:9291',
+    'content-type': 'application/json; charset=utf-8',
+  }
+
+  for (const routePath of POST_ROUTES) {
+    const { handlers } = makeCtx({ archivedIds: ['s1'], headers: [HEADER], agents: new Map() })
+
+    // When Origin 与 Host 不同 Then 403,且响应为统一拒绝文案
+    const crossOrigin = response()
+    await handlers.get(routePath)(guardedRequest(routePath, { ...sameOrigin, origin: 'http://evil.example' }), crossOrigin)
+    assert.equal(crossOrigin.status, 403, `${routePath} 跨源 POST 必须 403`)
+
+    // When 同源但 content-type: text/plain Then 415(drive-by 表单形态)
+    const textPlain = response()
+    await handlers.get(routePath)(guardedRequest(routePath, { ...sameOrigin, 'content-type': 'text/plain' }), textPlain)
+    assert.equal(textPlain.status, 415, `${routePath} text/plain POST 必须 415`)
+
+    // When 无 Origin(本地 CLI)但带 text/plain Then 仍 415(内容类型守卫独立生效)
+    const cliTextPlain = response()
+    await handlers.get(routePath)(guardedRequest(routePath, { host: '127.0.0.1:9291', 'content-type': 'text/plain' }), cliTextPlain)
+    assert.equal(cliTextPlain.status, 415, `${routePath} 无 Origin 的 text/plain 仍必须 415`)
+  }
+
+  // When 同源 application/json Then 正常受理(unarchive 可幂等成功)
+  const { handlers } = makeCtx({ archivedIds: ['s1'], headers: [HEADER], agents: new Map() })
+  const accepted = response()
+  await handlers.get('/api/session-manager/unarchive')(guardedRequest('/api/session-manager/unarchive', sameOrigin), accepted)
+  assert.equal(accepted.status, 200)
+  assert.deepEqual(accepted.body, { ok: true })
+})
+
+test('列表瘦身开关:GET 回显默认开启,POST 持久,GET 反映新值', skipMissingDeps, async () => {
+  const { handlers } = makeCtx({ archivedIds: [], headers: [{ id: 's1', cwd: 'C:\\x', createdAt: 0 }], agents: new Map() })
+  const initial = response()
+  await handlers.get('/api/session-manager/list-slim')(getRequest2('/api/session-manager/list-slim', 'GET'), initial)
+  assert.deepEqual(initial.body, { enabled: true }, '未配置时默认开启')
+  const off = await postJson(handlers, '/api/session-manager/list-slim', { enabled: false })
+  assert.deepEqual(off.body, { enabled: false })
+  const reread = response()
+  await handlers.get('/api/session-manager/list-slim')(getRequest2('/api/session-manager/list-slim', 'GET'), reread)
+  assert.deepEqual(reread.body, { enabled: false }, 'settings 持久化开关')
+})
+
+test('列表瘦身开关:非布尔载荷一律 400', skipMissingDeps, async () => {
+  const { handlers } = makeCtx({ archivedIds: [], headers: [{ id: 's1', cwd: 'C:\\x', createdAt: 0 }], agents: new Map() })
+  for (const payload of [{ enabled: 'yes' }, { enabled: 1 }, {}, { enabled: null }]) {
+    const rejected = await postJson(handlers, '/api/session-manager/list-slim', payload)
+    assert.equal(rejected.status, 400, JSON.stringify(payload))
+  }
+})

package/test/list-slim.test.mjs

@@ -0,0 +1,174 @@
+// 列表瘦身的契约:只裁白名单、命中缓存不重建、增删事件失效、任何异常回落到原行为。
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import { installListSlim, slimItem } from '../src/list-slim.mjs'
+
+/** 一条带完整投影的列表项。 */
+const item = (id, values) => ({ sessionId: id, updatedAt: 1, projections: { kind: 'cached', asOfSeq: 1, values } })
+
+/** 造一个只实现本模块用到表面的上下文(inject 立即回调,等价于服务已就绪)。 */
+function makeContext(list, { withController = true } = {}) {
+  const handlers = new Map()
+  const disposers = []
+  const controller = withController ? { list } : undefined
+  const ctx = {
+    get: (name) => (name === 'sessionController' ? controller : undefined),
+    on: (event, handler) => handlers.set(event, handler),
+    logger: { info() {}, warn() {} },
+    inject: (deps, callback) => {
+      callback({
+        sessionController: controller,
+        on: (event, handler) => handlers.set(event, handler),
+        effect: (factory) => {
+          disposers.push(factory())
+        },
+      })
+    },
+  }
+  return { ctx, controller, handlers, disposers }
+}
+
+const sample = () => [
+  item('a', { title: 'A', sessionListMetadata: { blank: false }, contextHeaders: [{ pad: 'x'.repeat(64) }] }),
+  item('b', { title: 'B', inbox: { 'next-turn': [], 'next-step': [] } }),
+]
+
+test('裁剪只保留白名单里的投影', () => {
+  const slim = slimItem(sample()[0], ['title'])
+  assert.deepEqual(Object.keys(slim.projections.values), ['title'])
+  assert.equal(slim.projections.kind, 'cached')
+  assert.equal(slim.sessionId, 'a')
+})
+
+test('形状不符的条目原样返回', () => {
+  const bare = { sessionId: 'c' }
+  assert.equal(slimItem(bare, ['title']), bare)
+  assert.equal(slimItem({ projections: { values: null } }, ['title']).projections.values, null)
+  const array = { projections: { values: ['x'] } }
+  assert.equal(slimItem(array, ['title']), array)
+})
+
+test('开关关闭时不接管 controller.list', async () => {
+  const original = async () => ({ items: sample() })
+  const { ctx, controller } = makeContext(original)
+  assert.equal(installListSlim(ctx, { enabled: false }), false)
+  assert.equal(controller.list, original)
+})
+
+test('宿主没有 sessionController 时不接管任何方法', () => {
+  const { ctx } = makeContext(undefined, { withController: false })
+  installListSlim(ctx)
+  assert.equal(ctx.get('sessionController'), undefined)
+})
+
+test('controller 缺 list 方法时静默放弃', () => {
+  const { ctx, controller } = makeContext(undefined)
+  installListSlim(ctx)
+  assert.equal(controller.list, undefined)
+})
+
+test('第二次调用命中缓存,不重建', async () => {
+  let built = 0
+  const { ctx, controller } = makeContext(async () => {
+    built += 1
+    return { items: sample() }
+  })
+  installListSlim(ctx, { warmupDelayMs: -1 })
+  await controller.list({}, undefined)
+  const value = await controller.list({}, undefined)
+  assert.equal(built, 1)
+  assert.equal(value.items[0].projections.values.contextHeaders, undefined)
+})
+
+test('过期后重建', async () => {
+  let built = 0
+  const { ctx, controller } = makeContext(async () => {
+    built += 1
+    return { items: sample() }
+  })
+  installListSlim(ctx, { ttlMs: 0, warmupDelayMs: -1 })
+  await controller.list({}, undefined)
+  await controller.list({}, undefined)
+  assert.equal(built, 2)
+})
+
+test('会话增删让缓存失效', async () => {
+  let built = 0
+  const { ctx, controller, handlers } = makeContext(async () => {
+    built += 1
+    return { items: sample() }
+  })
+  installListSlim(ctx, { warmupDelayMs: -1 })
+  await controller.list({}, undefined)
+  handlers.get('api-session/added')()
+  await controller.list({}, undefined)
+  assert.equal(built, 2)
+  handlers.get('api-session/removed')()
+  await controller.list({}, undefined)
+  assert.equal(built, 3)
+})
+
+test('并发请求只触发一次重建', async () => {
+  let built = 0
+  const { ctx, controller } = makeContext(async () => {
+    built += 1
+    return { items: sample() }
+  })
+  installListSlim(ctx, { warmupDelayMs: -1 })
+  await Promise.all([controller.list({}, undefined), controller.list({}, undefined), controller.list({}, undefined)])
+  assert.equal(built, 1)
+})
+
+test('原方法抛错时错误照旧透传给调用方', async () => {
+  const { ctx, controller } = makeContext(async () => {
+    throw new Error('宿主故障')
+  })
+  installListSlim(ctx, { warmupDelayMs: -1 })
+  await assert.rejects(() => controller.list({}, undefined), /宿主故障/)
+})
+
+test('响应形状不符时原样透传,不缓存', async () => {
+  let built = 0
+  const { ctx, controller } = makeContext(async () => {
+    built += 1
+    return { sessions: sample() }
+  })
+  installListSlim(ctx, { warmupDelayMs: -1 })
+  const first = await controller.list({}, undefined)
+  const second = await controller.list({}, undefined)
+  assert.deepEqual(Object.keys(first), ['sessions'])
+  assert.equal(built, 2)
+  assert.notEqual(second, first)
+})
+
+test('把调用方 request 原样交给原方法', async () => {
+  const seen = []
+  const { ctx, controller } = makeContext(async (request) => {
+    seen.push(request)
+    return { items: sample() }
+  })
+  installListSlim(ctx, { warmupDelayMs: -1 })
+  const request = { cursor: 'abc' }
+  await controller.list(request, undefined)
+  assert.equal(seen[0], request)
+})
+
+test('预热在延迟后构建一次', async () => {
+  let built = 0
+  const { ctx } = makeContext(async () => {
+    built += 1
+    return { items: sample() }
+  })
+  installListSlim(ctx, { warmupDelayMs: 0 })
+  await new Promise((resolve) => setTimeout(resolve, 20))
+  assert.equal(built, 1)
+})
+
+test('卸载时恢复原方法', async () => {
+  const original = async () => ({ items: sample() })
+  const { ctx, controller, disposers } = makeContext(original)
+  installListSlim(ctx, { warmupDelayMs: -1 })
+  assert.notEqual(controller.list, original)
+  for (const dispose of disposers) dispose()
+  assert.equal(controller.list, original)
+})