@mzzsfy/dsh-session-manager 0.9.7 → 0.11.0

package/README.md

@@ -2,7 +2,7 @@
 
 DeepSeek Harness 会话生命周期管理插件:自动归档 + 归档面板 + 归档删除 + 回收站还原重挂载。
 
-历史输入浮层、插话撤回与对话分叉已迁至独立插件 `dsh-context-manager`(会话上下文管理);工作区文件夹运行标记见 `dsh-turn-notify`。
+历史输入浮层、插话撤回与对话分叉已迁至独立插件 `dsh-context-manager`(会话上下文管理);工作区文件夹运行标记见 `dsh-turn-notify`;会话列表瘦身(列表投影裁剪与缓存)已迁至 `dsh-bug-perf`。旧设置项 `listSlimEnabled` 不再读取,开关改由 `dsh-bug-perf` 的 `listSlim.enabled` 管理(默认开启)。本包 0.10.0 及更早版本仍带丢失调用方上下文的旧列表包装,必须升级到 0.11.0(本次发布);旧包装与新 `dsh-bug-perf` 同装时仍会绕过宿主鉴权,不能只升级对端包。
 
 ## 功能
 
@@ -78,7 +78,7 @@ DeepSeek Harness 会话生命周期管理插件:自动归档 + 归档面板 +
 npm test
 ```
 
-纯逻辑层(评估状态机 / 删除资格与失败矩阵 / 面板投影 / 归档差分 / 空白判定 / 回收站命令构造)以 `node --test` 覆盖,无外部依赖。路由层测试依赖 peer 包可解析,仓库根未安装依赖时自动 skip,`npm install` 后激活。Windows 真实回收站执行测试仅在本平台执行,其余平台自动 skip。周期评估测试经 `mock.timers` 接管 `setInterval` 与 `Date`(显式传 `now`:接管后虚拟时钟从 epoch 起算,夹具时间戳会全成「未来」),timer 服务以 makeCtx 桩模拟激活与缺失两种形态。
+纯逻辑层(评估状态机 / 删除资格与失败矩阵 / 面板投影 / 归档差分 / 空白判定 / 回收站命令构造)以 `node --test` 覆盖,无外部依赖。路由层测试依赖 peer 包可解析,仓库根未安装依赖时自动 skip(3 个非 skip 用例不受影响,其中 Config 导出契约在 peer 缺失时会失败而非 skip),`npm install` 后激活。Windows 真实回收站执行测试仅在本平台执行,其余平台自动 skip。周期评估测试经 `mock.timers` 接管 `setInterval` 与 `Date`(显式传 `now`:接管后虚拟时钟从 epoch 起算,夹具时间戳会全成「未来」),timer 服务以 makeCtx 桩模拟激活与缺失两种形态。
 
 ## 开发安装(仓库工作副本直挂,不经 npm 发布)
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mzzsfy/dsh-session-manager",
   "description": "会话自动归档与管理:超期自动归档、归档面板、删除进系统回收站、还原后一键重挂载",
-  "version": "0.9.7",
+  "version": "0.11.0",
   "type": "module",
   "main": "src/index.js",
   "exports": {
@@ -10,6 +10,7 @@
     "./package.json": "./package.json"
   },
   "dsh": {
+    "hostMin": "0.2.1-rc.2",
     "bundle": {
       "patch": "./cordis.patch.yml"
     },
@@ -20,12 +21,13 @@
       ]
     },
     "compatibility": {
-      "hostMin": "0.2.1-rc.2",
       "dshReleases": {
         "0.2.0-rc.1": "unknown",
         "0.2.0-rc.2": "unknown",
         "0.2.1-alpha.1": "unknown",
-        "0.2.1-rc.2": "compatible"
+        "0.2.1-rc.2": "compatible",
+        "0.2.1-rc.5": "compatible",
+        "0.2.2-rc.1": "compatible"
       }
     }
   },
@@ -33,6 +35,10 @@
     "test": "node --test \"test/*.test.mjs\"",
     "npmPublish": "npm publish --access public --provenance=false --registry=https://registry.npmjs.org"
   },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
   "license": "MIT",
   "repository": {
     "type": "git",

package/src/client.js

@@ -136,6 +136,11 @@ const STATUS_URL = '/api/session-manager/status'
 // 删除确认链文案:两击行内确认后弹窗强提示,弹窗内确认才发请求。
 // 删除产物不可再生,其他插件(用量统计等)依赖会话产物,删后其会话级数据一并消失
 const DELETE_BUTTON_TITLE = '删除会话产物会影响其他插件的工作(用量统计等依赖会话产物);若无特殊需求,请不要删除。删除需再次行内确认与弹窗确认。'
+// 行操作按钮悬停说明:文案与行为同源维护,由源码契约测试锁定
+const RESTORE_BUTTON_TITLE = '把该会话从归档移回会话列表;恢复后 10 分钟内暂停自动归档,保护「恢复 → 首条消息」窗口,期间发言即恢复正常活跃计时。'
+const REMOUNT_BUTTON_TITLE = '把这条已删除记录对应的会话重新挂回列表:产物仍在原位置时直接挂载,产物已进系统回收站时先还原再挂载。'
+const FORGET_BUTTON_TITLE = '只移除这条已删除记录,不动磁盘上的会话产物;用于产物已手动找回、或不再需要追踪的情况。'
+const MORE_BUTTON_TITLE = '展开该工作区剩余的归档会话;只改变面板显示条数,不改变任何会话的归档状态。'
 const DELETE_DIALOG_TITLE = '确认删除该会话?'
 const DELETE_DIALOG_BODY_PREFIX = '即将删除会话「'
 const DELETE_DIALOG_BODY_SUFFIX = '」。'
@@ -347,7 +352,7 @@ function ArchiveRow(props) {
       ]
     : [
         h('button', { key: 'delete', className: 'sm-btn sm-btn--danger', disabled: busy, title: DELETE_BUTTON_TITLE, onClick: props.onDelete }, '删除'),
-        h('button', { key: 'restore', className: 'sm-btn sm-btn--restore', disabled: busy, onClick: props.onUnarchive }, '恢复'),
+        h('button', { key: 'restore', className: 'sm-btn sm-btn--restore', disabled: busy, title: RESTORE_BUTTON_TITLE, onClick: props.onUnarchive }, '恢复'),
       ]
   return h('div', {
     className: 'sm-row' + (armed ? ' sm-row--armed' : '') + (busy ? ' sm-row--busy' : ''),
@@ -402,8 +407,8 @@ function DeletedRow(props) {
     h('span', { key: 'meta', className: 'sm-row__time', title: new Date(row.deletedAt).toLocaleString() }, fmtTime(row.deletedAt)),
     h('span', { className: 'sm-row__title', title: row.title }, row.title),
     h('div', { className: 'sm-row__actions' },
-      h('button', { key: 'remount', className: 'sm-btn sm-btn--restore', disabled: busy, onClick: props.onRemount }, '重新挂载'),
-      h('button', { key: 'forget', className: 'sm-btn', disabled: busy, onClick: props.onForget }, '移除记录'),
+      h('button', { key: 'remount', className: 'sm-btn sm-btn--restore', disabled: busy, title: REMOUNT_BUTTON_TITLE, onClick: props.onRemount }, '重新挂载'),
+      h('button', { key: 'forget', className: 'sm-btn', disabled: busy, title: FORGET_BUTTON_TITLE, onClick: props.onForget }, '移除记录'),
     ),
     h('span', { className: 'sm-row__path', title: row.path }, '原位置 ' + row.path),
   )
@@ -554,7 +559,7 @@ function SessionManagerApp(props) {
   // 免得数组子节点内无 key 元素随页扩位触发不必要的卸载重挂
   const expandMore = (remaining, onMore) => remaining <= 0
     ? null
-    : h('button', { key: 'more', className: 'sm-more', onClick: onMore }, '展开更多(剩 ' + remaining + ' 条)')
+    : h('button', { key: 'more', className: 'sm-more', title: MORE_BUTTON_TITLE, onClick: onMore }, '展开更多(剩 ' + remaining + ' 条)')
 
   // 主列表(最近归档):固定首页不翻页,尾部「按工作区浏览」入口跳转二级视图看全部
   const recentPage = pageArchiveRows(rows, ARCHIVE_PAGE_SIZE)
@@ -685,29 +690,28 @@ function classifyAutoArchiveInput(committedText, text) {
   return { action: 'post', value }
 }
 
+// 面板状态:数值项取字符串供受控输入
+const configStateOf = (archive) => ({
+  days: String(archive.days),
+  intervalHours: String(archive.intervalHours),
+})
+
 function AutoArchiveConfig() {
   const [state, setState] = useState(null)
   // 已提交值快照:非法输入与保存失败的回滚基准,与编辑中的显示值分离
   const committedRef = React.useRef(null)
   useEffect(() => {
-    api(AUTO_ARCHIVE_URL)
-      .then((payload) => {
-        if (!payload) return
-        const next = { days: String(payload.days), intervalHours: String(payload.intervalHours) }
-        committedRef.current = next
-        setState(next)
-      })
-      .catch((error) => { console.warn('[session-manager] 自动归档配置读取失败', error) })
+    void refresh()
   }, [])
   function refresh() {
     return api(AUTO_ARCHIVE_URL)
-      .then((payload) => {
-        if (!payload) return
-        const next = { days: String(payload.days), intervalHours: String(payload.intervalHours) }
+      .then((archive) => {
+        if (!archive) return
+        const next = configStateOf(archive)
         committedRef.current = next
         setState(next)
       })
-      .catch((error) => { console.warn('[session-manager] 自动归档配置回读失败', error) })
+      .catch((error) => { console.warn('[session-manager] 面板配置回读失败', error) })
   }
   function commit(field, text) {
     const committed = committedRef.current

package/src/index.js

@@ -160,6 +160,21 @@ function readAutoArchivePatch(body) {
   return patch
 }
 
+// settings 双形写(maintain 同构,判定延迟到使用点):legacy 方法面以 register 为准
+// (0.1.7 的 settings.update 名义在场但按命名空间找条目必败,不可作判据);
+// 0.1.7+ 走 configEditor.edit 落 profile 条目(fiber.entry,与命名空间解耦)
+async function persistSettings(ctx, patch) {
+  const settings = ctx.get('settings')
+  if (typeof settings?.register === 'function' && typeof settings?.update === 'function') {
+    await settings.update(NAMESPACE, patch)
+    return
+  }
+  const editor = ctx.get('configEditor')
+  const entry = ctx.fiber?.entry
+  if (!editor || typeof editor.edit !== 'function' || !entry) throw new Error('宿主设置服务不可用')
+  await editor.edit(entry, (current) => ({ ...current, ...patch }))
+}
+
 function readBody(req) {
   const BODY_MAX_BYTES = 64 * 1024
   return new Promise((resolve, reject) => {
@@ -215,6 +230,38 @@ function rejectMethod(req, res, method) {
   return false
 }
 
+// 写路由守卫(全仓同构):浏览器跨站表单可发 text/plain 且载荷为合法 JSON,
+// 仅方法守卫不足以阻断 drive-by 写,补同源比对与 JSON 内容类型双校验。
+// 无 Origin 的非浏览器调用放行(本地 CLI/脚本);无 headers 的直调桩同样放行。
+function rejectCrossOrigin(req, res) {
+  const origin = req.headers ? req.headers.origin : undefined
+  if (!origin) return false
+  let sameOrigin = false
+  try {
+    sameOrigin = new URL(origin).host === req.headers.host
+  } catch {
+    sameOrigin = false
+  }
+  if (sameOrigin) return false
+  sendJson(res, 403, { error: '跨源请求被拒绝' })
+  return true
+}
+
+// 内容类型守卫:浏览器发起的跨站请求(表单/fetch 字符串体)必带 text/plain 等类型,
+// 借此阻断 drive-by 写;完全不带 content-type 的调用(本地 CLI/无头脚本)放行,
+// 与"无 Origin 放行"同口径
+function rejectNonJson(req, res) {
+  const type = req.headers ? req.headers['content-type'] : undefined
+  if (typeof type !== 'string' || type.trim() === '') return false
+  if (type.split(';')[0].trim().toLowerCase() === 'application/json') return false
+  sendJson(res, 415, { error: '仅接受 application/json 请求体' })
+  return true
+}
+
+function guardWrite(req, res) {
+  return rejectCrossOrigin(req, res) || rejectNonJson(req, res)
+}
+
 /** @param {import('@deepseek-ai/cordis').Context} ctx */
 export function apply(ctx, config) {
   let evaluating = false
@@ -445,6 +492,7 @@ export function apply(ctx, config) {
       path: '/api/session-manager/unarchive',
       handler: async (req, res) => {
         if (!rejectMethod(req, res, 'POST')) return
+        if (guardWrite(req, res)) return
         try {
           const sessionId = await requireSessionId(req)
           await removeArchivedId(sessionId)
@@ -459,6 +507,7 @@ export function apply(ctx, config) {
       path: '/api/session-manager/info',
       handler: async (req, res) => {
         if (!rejectMethod(req, res, 'POST')) return
+        if (guardWrite(req, res)) return
         try {
           const sessionId = await requireSessionId(req)
           const header = await findHeader(ctx, sessionId, headerCache)
@@ -493,6 +542,7 @@ export function apply(ctx, config) {
       path: '/api/session-manager/delete',
       handler: async (req, res) => {
         if (!rejectMethod(req, res, 'POST')) return
+        if (guardWrite(req, res)) return
         const sessionId = await requireSessionId(req).catch((error) => {
           respondError(ctx, res, error)
           return undefined
@@ -644,6 +694,7 @@ export function apply(ctx, config) {
             return
           }
           if (!rejectMethod(req, res, 'POST')) return
+          if (guardWrite(req, res)) return
           let body
           try {
             body = JSON.parse(await readBody(req))
@@ -651,19 +702,7 @@ export function apply(ctx, config) {
             throw new Error(MESSAGES.badJsonBody)
           }
           const patch = readAutoArchivePatch(body)
-          // 双形写(maintain 同构,判定延迟到使用点):legacy 方法面以 register 为准
-          // (0.1.7 的 settings.update 名义在场但按命名空间找条目必败,不可作判据);
-          // 0.1.7+ 走 configEditor.edit 落 profile 条目(fiber.entry,与命名空间解耦)。
-          // await 保证回显为新值,persist 失败走 respondError
-          const settings = ctx.get('settings')
-          if (typeof settings?.register === 'function' && typeof settings?.update === 'function') {
-            await settings.update(NAMESPACE, patch)
-          } else {
-            const editor = ctx.get('configEditor')
-            const entry = ctx.fiber?.entry
-            if (!editor || typeof editor.edit !== 'function' || !entry) throw new Error('宿主设置服务不可用')
-            await editor.edit(entry, (current) => ({ ...current, ...patch }))
-          }
+          await persistSettings(ctx, patch)
           const current = readSettings(ctx, config)
           sendJson(res, 200, { days: current.days, intervalHours: current.intervalHours })
         } catch (error) {
@@ -687,6 +726,7 @@ export function apply(ctx, config) {
       path: '/api/session-manager/remount',
       handler: async (req, res) => {
         if (!rejectMethod(req, res, 'POST')) return
+        if (guardWrite(req, res)) return
         try {
           const sessionId = await requireSessionId(req)
           // 移回依据是台账条目,台账域不可用时整个重挂载拒绝:
@@ -730,6 +770,7 @@ export function apply(ctx, config) {
       path: '/api/session-manager/forget',
       handler: async (req, res) => {
         if (!rejectMethod(req, res, 'POST')) return
+        if (guardWrite(req, res)) return
         try {
           await removeLedgerEntry(await requireSessionId(req))
           sendJson(res, 200, { ok: true })

package/test/client-row-actions.test.mjs

@@ -44,3 +44,23 @@ test('源码契约:已删除区保持悬停显现且减弱动效覆盖新选择
   assert.ok(/prefers-reduced-motion: reduce.*\{ \.sm-btn--danger, \.sm-deleted \.sm-row__actions \{ transition:none/.test(CLIENT_SRC),
     '减弱动效未覆盖删除按钮与已删除区过渡')
 })
+
+// Given 归档行与已删除行的操作按钮, When 渲染, Then 每个按钮都带 title 悬停说明
+test('源码契约:行操作按钮都带 title 悬停说明', () => {
+  const buttons = [
+    ['restore', 'RESTORE_BUTTON_TITLE'],
+    ['remount', 'REMOUNT_BUTTON_TITLE'],
+    ['forget', 'FORGET_BUTTON_TITLE'],
+    ['delete', 'DELETE_BUTTON_TITLE'],
+    ['more', 'MORE_BUTTON_TITLE'],
+  ]
+  for (const [key, constant] of buttons) {
+    const pattern = new RegExp("key: '" + key + "'[^\\n]*title: " + constant)
+    assert.ok(pattern.test(CLIENT_SRC), key + ' 按钮缺少 title(' + constant + ')')
+  }
+  for (const constant of ['RESTORE_BUTTON_TITLE', 'REMOUNT_BUTTON_TITLE', 'FORGET_BUTTON_TITLE', 'MORE_BUTTON_TITLE']) {
+    const matched = CLIENT_SRC.match(new RegExp('const ' + constant + " = '([^']+)'"))
+    assert.ok(matched, constant + ' 未定义')
+    assert.ok(matched[1].length >= 20, constant + ' 文案须讲清用途')
+  }
+})

package/test/index.test.mjs

@@ -1888,3 +1888,62 @@ test('0.1.7 形态:settings.configure 在场即关闭原生自动页', skipMissi
   assert.equal(configureCalls.length, 1)
   assert.deepEqual(configureCalls[0].presentation, { auto: false })
 })
+
+// ── 写路由同源 + JSON 守卫回归 ──
+
+// POST 夹具:带 headers 的请求体走 readBody 的 data/end 事件流
+function guardedRequest(routePath, headers, body = { sessionId: 's1' }) {
+  const req = new EventEmitter()
+  req.method = 'POST'
+  req.url = routePath
+  req.headers = headers
+  process.nextTick(() => {
+    req.emit('data', Buffer.from(JSON.stringify(body)))
+    req.emit('end')
+  })
+  return req
+}
+
+test('写路由守卫:跨源 POST 403 / 非 JSON 内容类型 415 / 同源 JSON 正常受理', skipMissingDeps, async () => {
+  // Given 全部写路由(浏览器表单可发 text/plain 且载荷为合法 JSON,仅方法守卫不足)
+  const POST_ROUTES = [
+    '/api/session-manager/unarchive',
+    '/api/session-manager/info',
+    '/api/session-manager/delete',
+    '/api/session-manager/auto-archive',
+    '/api/session-manager/remount',
+    '/api/session-manager/forget',
+  ]
+  const ORIGIN = 'http://127.0.0.1:9291'
+  const sameOrigin = {
+    origin: ORIGIN,
+    host: '127.0.0.1:9291',
+    'content-type': 'application/json; charset=utf-8',
+  }
+
+  for (const routePath of POST_ROUTES) {
+    const { handlers } = makeCtx({ archivedIds: ['s1'], headers: [HEADER], agents: new Map() })
+
+    // When Origin 与 Host 不同 Then 403,且响应为统一拒绝文案
+    const crossOrigin = response()
+    await handlers.get(routePath)(guardedRequest(routePath, { ...sameOrigin, origin: 'http://evil.example' }), crossOrigin)
+    assert.equal(crossOrigin.status, 403, `${routePath} 跨源 POST 必须 403`)
+
+    // When 同源但 content-type: text/plain Then 415(drive-by 表单形态)
+    const textPlain = response()
+    await handlers.get(routePath)(guardedRequest(routePath, { ...sameOrigin, 'content-type': 'text/plain' }), textPlain)
+    assert.equal(textPlain.status, 415, `${routePath} text/plain POST 必须 415`)
+
+    // When 无 Origin(本地 CLI)但带 text/plain Then 仍 415(内容类型守卫独立生效)
+    const cliTextPlain = response()
+    await handlers.get(routePath)(guardedRequest(routePath, { host: '127.0.0.1:9291', 'content-type': 'text/plain' }), cliTextPlain)
+    assert.equal(cliTextPlain.status, 415, `${routePath} 无 Origin 的 text/plain 仍必须 415`)
+  }
+
+  // When 同源 application/json Then 正常受理(unarchive 可幂等成功)
+  const { handlers } = makeCtx({ archivedIds: ['s1'], headers: [HEADER], agents: new Map() })
+  const accepted = response()
+  await handlers.get('/api/session-manager/unarchive')(guardedRequest('/api/session-manager/unarchive', sameOrigin), accepted)
+  assert.equal(accepted.status, 200)
+  assert.deepEqual(accepted.body, { ok: true })
+})