@ran-sh/dsh-crew 1.1.1 → 1.2.0-rc.4

package/official-web-bridge/overlay-entry.mjs

@@ -0,0 +1,59 @@
+// UI-only overlay host. No process lifecycle, installer or profile mutations.
+import { localRequestCore, originAuthorityMatches } from '../src/local-request-guard.mjs';
+import { readFileSync } from 'node:fs';
+
+const PREFIX = '/_dsh/dsh-crew';
+const BACKEND = 'http://127.0.0.1:3210';
+const REVISION = JSON.parse(readFileSync(new URL('./package.json', import.meta.url), 'utf8')).dshCrewFrontendRevision ?? null;
+
+function trusted(req) {
+  return localRequestCore(req) && (req.headers.origin === undefined
+    || originAuthorityMatches(req.headers.origin, req.headers.host));
+}
+
+function send(res, status, body) {
+  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' });
+  res.end(JSON.stringify(body));
+}
+
+export function registerFrontend(ctx, { fetchImpl = globalThis.fetch } = {}) {
+  return ctx.inject(['webServer'], ({ webServer }) => {
+    const disposers = [];
+    disposers.push(webServer.register({ kind: 'exact', path: `${PREFIX}/bridge-status`, handler(req, res) {
+      if (!trusted(req)) return send(res, 403, { ok: false, code: 'LOCAL_SAME_ORIGIN_ONLY' });
+      send(res, 200, { ok: true, surface: 'official-bridge', ui_role: 'quick-controls', frontend_revision: REVISION, full_control_plane_url: `${BACKEND}/` });
+    } }));
+    for (const suffix of ['/quick-config', '/quick-status']) {
+      disposers.push(webServer.register({ kind: 'exact', path: `${PREFIX}${suffix}`, async handler(req, res) {
+        if (!trusted(req)) return send(res, 403, { ok: false, code: 'LOCAL_SAME_ORIGIN_ONLY' });
+        const method = req.method ?? 'GET';
+        if (method !== 'GET' && !(suffix === '/quick-config' && method === 'POST')) return send(res, 405, { ok: false, code: 'METHOD_NOT_ALLOWED' });
+        try {
+          const identityResponse = await fetchImpl(`${BACKEND}${PREFIX}/runtime`, { signal: AbortSignal.timeout(2500) });
+          const identity = await identityResponse.json();
+          if (!identityResponse.ok || identity.ok !== true || identity.service !== 'dsh-crew-hub'
+            || identity.profile !== 'dsh-crew' || identity.execution_plane !== 'hub-3210'
+            || identity.listen_port !== 3210 || identity.protocol_version !== 1) throw new Error('incompatible backend');
+          const chunks = [];
+          let size = 0;
+          if (method === 'POST') for await (const chunk of req) {
+            size += chunk.length;
+            if (size > 64 * 1024) return send(res, 413, { ok: false, code: 'BODY_TOO_LARGE' });
+            chunks.push(Buffer.from(chunk));
+          }
+          const response = await fetchImpl(`${BACKEND}${PREFIX}${suffix}`, {
+            method, headers: { 'content-type': 'application/json' },
+            ...(method === 'POST' ? { body: Buffer.concat(chunks) } : {}),
+            signal: AbortSignal.timeout(5000),
+          });
+          send(res, response.status, await response.json());
+        } catch {
+          send(res, 503, { ok: false, ready: false, code: 'CREW_BACKEND_UNAVAILABLE' });
+        }
+      } }));
+    }
+    return () => { for (const dispose of disposers) dispose?.(); };
+  });
+}
+
+export function apply(ctx) { registerFrontend(ctx); }

package/package.json

@@ -1,12 +1,16 @@
 {
   "name": "@ran-sh/dsh-crew",
-  "version": "1.1.1",
+  "version": "1.2.0-rc.4",
   "type": "module",
   "main": "./src/hub/entry.mjs",
   "bin": {
     "dsh-crew": "bin/dsh-crew.mjs"
   },
   "description": "DeepSeek Harness plugin: dispatch work to DSH agents from Claude Code / Codex, as native subagents with live progress",
+  "dshCrew": {
+    "payloadSchema": 2,
+    "windowsSupervisorHandoff": 1
+  },
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
@@ -22,7 +26,7 @@
   },
   "scripts": {
     "mcp": "node src/server.mjs",
-    "build:client": "tsdown src/client/entry.tsx src/client/quick-entry.tsx --format cjs --platform browser --target es2022 --tsconfig tsconfig.client.json --deps.never-bundle react --deps.never-bundle react/jsx-runtime --deps.never-bundle react-dom --deps.never-bundle react-dom/client --out-dir .client-build --clean --logLevel warn && node scripts/build-client.mjs",
+    "build:client": "tsdown src/client/entry.tsx --format cjs --platform browser --target es2022 --tsconfig tsconfig.client.json --deps.never-bundle react --deps.never-bundle react/jsx-runtime --deps.never-bundle react-dom --deps.never-bundle react-dom/client --out-dir .client-build --clean --logLevel warn && tsdown src/client/quick-entry.tsx --format cjs --platform browser --target es2022 --tsconfig tsconfig.client.json --deps.never-bundle react --deps.never-bundle react/jsx-runtime --deps.never-bundle react-dom --deps.never-bundle react-dom/client --out-dir .client-build --no-clean --logLevel warn && node scripts/build-client.mjs",
     "verify:npm-install": "node scripts/verify-npm-install.mjs",
     "verify:npm-install:official": "node scripts/verify-npm-install.mjs --with-official-dsh",
     "verify:official-bridge": "node scripts/verify-official-bridge-e2e.mjs --diagnostic-only"
@@ -212,7 +216,6 @@
     "cordis.patch.yml",
     "worker.cordis.yml",
     ".claude-plugin",
-    ".mcp.json",
     "README.md",
     "README.*.md",
     "docs/job-contracts.md",

package/scripts/build-client.mjs

@@ -24,6 +24,8 @@ for (const expected of [fullEntry, quickEntry]) {
 }
 
 function wrap(source, id) {
+  // The host resolves package modules, not discarded tsdown shared chunks.
+  if (/require\(["']\.\.?\//.test(source)) throw new Error(`client ${id} depends on an unshipped relative chunk`);
   return [
     `window.__ModuleLoader__.load({ id: ${JSON.stringify(id)}, factory: (require) => {`,
     'var module = { exports: {} }; var exports = module.exports;',

package/scripts/setup.mjs

@@ -220,7 +220,7 @@ export async function setupInstall({
 
   if (dryRun) mark(log, true, 'Codex Desktop integration (dry-run)');
   else {
-    const r = installer.installCodex ? installer.installCodex({ home }) : realInstaller.installCodex({ home });
+    const r = installer.installCodex ? installer.installCodex({ home, root }) : realInstaller.installCodex({ home, root });
     mark(log, r.ok !== false, r.ok === false ? `Codex Desktop integration failed: ${(r.actions ?? []).join('; ')}` : 'Codex Desktop integration');
     if (r.ok === false) return { ok: false, error: 'Codex integration failed' };
   }
@@ -252,7 +252,7 @@ export async function setupInstall({
   if (commandExists('claude')) {
     if (dryRun) mark(log, true, 'Claude Code integration (dry-run)');
     else {
-      const r = installer.installClaudeCode ? await installer.installClaudeCode({ home }) : await realInstaller.installClaudeCode({ home });
+      const r = installer.installClaudeCode ? await installer.installClaudeCode({ home, root }) : await realInstaller.installClaudeCode({ home, root });
       const ok = r.ok !== false;
       mark(log, ok, ok ? 'Claude Code integration' : 'Claude Code integration failed');
       if (!ok) return { ok: false, error: 'Claude Code integration failed' };
@@ -333,12 +333,13 @@ export async function setupUninstall({
 
 export async function setupStatus({ log = console.log, root = ROOT, home = homedir(), installer = realInstaller } = {}) {
   const st = installer.installStatus ? installer.installStatus({ home, root }) : realInstaller.installStatus({ home, root });
-  const claude = st?.claude?.installed ? 'installed' : 'not installed';
-  const codex = st?.codex?.installed ? 'installed' : 'not installed';
-  const zcode = st?.zcode?.installed ? 'installed' : 'not installed';
+  const integrationLabel = (entry) => !entry?.installed ? 'not installed' : entry.ready === true ? 'installed' : 'needs repair';
+  const claude = integrationLabel(st?.claude);
+  const codex = integrationLabel(st?.codex);
+  const zcode = integrationLabel(st?.zcode);
   const startupState = installer.windowsStartupStatus
-    ? installer.windowsStartupStatus({ home })
-    : realInstaller.windowsStartupStatus({ home });
+    ? installer.windowsStartupStatus({ home, root })
+    : realInstaller.windowsStartupStatus({ home, root });
   const windowsStartup = !startupState.supported ? 'not supported'
     : startupState.ready ? 'installed' : startupState.installed ? 'needs repair' : 'not installed';
   // Crew status reads ONLY the dedicated Crew profile under the Crew DSH_HOME;

package/scripts/verify-crew-ui-polish.mjs

@@ -0,0 +1,145 @@
+// Isolated browser acceptance of the shipped modules. All HTTP requests are
+// intercepted: no real Crew configuration or host browser profile is accessed.
+import assert from 'node:assert/strict';
+import { createRequire } from 'node:module';
+import { readFileSync, mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+const { chromium } = require(process.env.CREW_PLAYWRIGHT_MODULE || 'playwright');
+const root = dirname(dirname(fileURLToPath(import.meta.url)));
+const output = mkdtempSync(join(tmpdir(), 'crew-ui-polish-'));
+const browser = await chromium.launch({ headless: true,
+  ...(process.env.CREW_BROWSER_EXE ? { executablePath: process.env.CREW_BROWSER_EXE } : {}),
+});
+const errors = [];
+const results = [];
+const baseConfig = {
+  subagents_enabled: true, collaboration_mode: 'balanced', main_agent_mode: 'direct-allowed',
+  flash_state: 'auto', pro_state: 'auto', isolation: 'worktree', max_parallel: 16,
+  default_timeout_seconds: 1800,
+  default_tier: 'flash', default_effort: 'max', mode: 'auto',
+  vision_enabled: true, imagegen_enabled: false, vision_provider: 'example', imagegen_provider: 'example',
+  flash_model_priority: [
+    { provider: 'example-provider', model: 'long-model-name-for-responsive-layout-check' },
+    { provider: 'example-provider', model: 'second-model' },
+  ], pro_model_priority: [],
+};
+
+async function mount(surface, locale = 'zh') {
+  const page = await browser.newPage({ viewport: { width: 1000, height: 1000 } });
+  page.on('pageerror', error => errors.push(error.message));
+  let config = structuredClone(baseConfig);
+  const patches = [];
+  await page.route('**/*', async route => {
+    const request = route.request();
+    const url = new URL(request.url());
+    if (url.origin !== 'http://127.0.0.1:41790') return route.abort();
+    if (url.pathname === '/') return route.fulfill({ contentType: 'text/html', body:
+      '<!doctype html><html><head><meta charset="utf-8"><style>body{margin:0;background:#f6f7f9;color:#20252b;font-family:Arial,sans-serif}main{max-width:760px;margin:24px auto;padding:20px;background:white;border-radius:16px}@media(prefers-color-scheme:dark){body{background:#16191d;color:#e5e7eb}main{background:#20242a}}</style></head><body><main id="root"></main></body></html>' });
+    const suffix = url.pathname.replace('/_dsh/dsh-crew', '');
+    let body = { ok: true };
+    if (suffix === '/bridge-status') body = surface === 'quick' ? { ok: true, surface: 'official-bridge' } : { ok: false };
+    else if (suffix === '/runtime') body = { ok: true, service: 'dsh-crew-hub', profile: 'dsh-crew', listen_port: 3210, execution_plane: 'hub-3210', runtime_version: 'test', protocol_version: 1 };
+    else if (suffix === '/quick-config' && request.method() === 'POST') {
+      const patch = request.postDataJSON(); patches.push(patch); config = { ...config, ...patch }; body = { ok: true, config };
+    } else if (suffix === '/quick-status' || suffix === '/config') body = { ok: true, config };
+    else if (suffix === '/jobs') body = { ok: true, jobs: [] };
+    else if (suffix === '/install/status') body = { ok: true, status: { codex: { ready: true, installed: true }, claude: { ready: true, installed: true }, zcode: { ready: true, installed: true } } };
+    else if (suffix === '/model-catalog' || suffix === '/providers') body = { ok: true, providers: [], records: [] };
+    return route.fulfill({ contentType: 'application/json', body: JSON.stringify(body) });
+  });
+  await page.goto('http://127.0.0.1:41790/');
+  await page.waitForLoadState('networkidle');
+  await page.addScriptTag({ content: readFileSync(join(root, 'node_modules/react/umd/react.development.js'), 'utf8') });
+  await page.addScriptTag({ content: readFileSync(join(root, 'node_modules/react-dom/umd/react-dom.development.js'), 'utf8') });
+  await page.evaluate(locale => {
+    const ctx = {
+      on: () => () => {}, locale: { getLocale: () => ({ active: locale }) },
+      slots: { inject: (_name, callback) => callback(), register: (_meta, render) => { window.crewRoot.render(render()); return () => {}; } },
+    };
+    window.crewRoot = window.ReactDOM.createRoot(document.getElementById('root'));
+    window.__ModuleLoader__ = { load({ factory }) {
+      const jsx = (tag, props, key) => window.React.createElement(tag, { ...props, ...(key === undefined ? {} : { key }) });
+      factory(id => {
+        if (id === 'react') return window.React;
+        if (id === 'react-dom' || id === 'react-dom/client') return window.ReactDOM;
+        if (id === 'react/jsx-runtime') return { jsx, jsxs: jsx, Fragment: window.React.Fragment };
+        throw Error('Unexpected fixture dependency: ' + id);
+      }).apply(ctx);
+    } };
+  }, locale);
+  await page.addScriptTag({ content: readFileSync(join(root, surface === 'quick' ? 'official-web-bridge/lib/client.js' : 'lib/client.js'), 'utf8') });
+  try { await page.locator('.crew-panel-header').waitFor({ timeout: 10000 }); }
+  catch (error) {
+    console.error(JSON.stringify({ surface, errors, body: (await page.locator('body').innerText()).slice(0, 1600) }));
+    throw error;
+  }
+  return { page, patches };
+}
+
+try {
+  const { page, patches } = await mount('quick');
+  await page.getByRole('link', { name: '打开 3210 后台 →' }).waitFor();
+  assert.equal(await page.getByRole('link', { name: '打开 3210 后台 →' }).getAttribute('href'), 'http://127.0.0.1:3210/');
+  await page.screenshot({ path: join(output, '3080-quick.png'), fullPage: true });
+  const worker = page.locator('details.crew-quick-group').filter({ has: page.locator('summary strong', { hasText: 'Worker / Flash' }) });
+  await worker.getByRole('button', { name: '下移 long-model-name-for-responsive-layout-check' }).click();
+  await page.waitForFunction(() => document.querySelector('.crew-quick-list li .crew-quick-model-name')?.textContent === 'second-model');
+  assert.equal(patches.at(-1).flash_model_priority[0].model, 'second-model');
+  await worker.getByRole('button', { name: '从优先级移除 second-model' }).click();
+  await worker.locator('li').first().waitFor();
+  await worker.locator('.crew-quick-add > summary').click();
+  await worker.getByRole('textbox', { name: 'Worker / Flash Provider', exact: true }).fill('added-provider');
+  await worker.getByRole('textbox', { name: 'Worker / Flash 模型', exact: true }).fill('added-model');
+  await worker.getByRole('button', { name: '+ 添加模型', exact: true }).click();
+  await worker.getByText('added-model', { exact: true }).waitFor();
+  assert.equal(patches.at(-1).flash_model_priority.at(-1).model, 'added-model');
+  const reviewer = page.locator('details.crew-quick-group').filter({ has: page.locator('summary strong', { hasText: 'Reviewer / Pro' }) });
+  await reviewer.locator(':scope > summary').click();
+  await reviewer.locator('.crew-quick-add > summary').click();
+  await reviewer.getByRole('textbox', { name: 'Reviewer / Pro Provider', exact: true }).fill('review-provider');
+  await reviewer.getByRole('textbox', { name: 'Reviewer / Pro 模型', exact: true }).fill('review-model');
+  await reviewer.getByRole('button', { name: '+ 添加模型', exact: true }).click();
+  await reviewer.getByText('review-model', { exact: true }).waitFor();
+  await page.waitForFunction(() => !document.querySelector('input[type=checkbox]').disabled);
+  assert.notEqual(await reviewer.getAttribute('open'), null, 'Pro stays expanded after save rerenders');
+  const multimodal = page.locator('details.crew-quick-group').filter({ has: page.locator('summary strong', { hasText: '多模态' }) });
+  await multimodal.locator(':scope > summary').click();
+  await page.getByRole('checkbox', { name: '启用子 Agent' }).uncheck();
+  await page.waitForFunction(() => !document.querySelector('input[type=checkbox]').disabled);
+  assert.equal(patches.at(-1).subagents_enabled, false);
+  assert.notEqual(await reviewer.getAttribute('open'), null, 'Pro stays expanded after other settings change');
+  assert.notEqual(await multimodal.getAttribute('open'), null, 'Multimodal stays expanded after other settings change');
+  await worker.locator(':scope > summary').click();
+  assert.equal(await worker.getAttribute('open'), null);
+  await page.setViewportSize({ width: 420, height: 900 });
+  await worker.locator(':scope > summary').click();
+  assert.equal(await page.evaluate(() => document.documentElement.scrollWidth <= innerWidth), true);
+  await page.screenshot({ path: join(output, '3080-narrow.png'), fullPage: true });
+  await page.emulateMedia({ colorScheme: 'dark' });
+  await page.screenshot({ path: join(output, '3080-dark.png'), fullPage: true });
+  results.push('quick: reorder/remove/add/toggle/collapse; Pro and multimodal stay open across save rerenders; narrow/dark');
+  await page.close();
+
+  const { page: backend } = await mount('full');
+  const backLink = backend.getByRole('link', { name: '打开 3080 官方界面 →' });
+  assert.equal(await backLink.getAttribute('href'), 'http://127.0.0.1:3080/');
+  await backend.getByRole('button', { name: '全部折叠', exact: true }).click();
+  await backend.screenshot({ path: join(output, '3210-backend.png'), fullPage: true });
+  await backend.getByRole('button', { name: '全部展开', exact: true }).click();
+  assert.equal(await backend.locator('.crew-section-trigger[aria-expanded=false]').count(), 0);
+  await backend.getByRole('button', { name: '全部折叠', exact: true }).click();
+  await backend.setViewportSize({ width: 420, height: 900 });
+  assert.equal(await backend.evaluate(() => document.documentElement.scrollWidth <= innerWidth), true);
+  await backend.screenshot({ path: join(output, '3210-narrow.png'), fullPage: true });
+  results.push('backend: reciprocal link/expand all/collapse all/narrow');
+  await backend.close();
+  const { page: english } = await mount('quick', 'en');
+  await english.getByRole('button', { name: 'Move down long-model-name-for-responsive-layout-check' }).waitFor();
+  await english.close();
+  assert.deepEqual(errors, []);
+  console.log(JSON.stringify({ ok: true, results, consoleErrors: errors, screenshots: output }));
+} finally { await browser.close(); }

package/scripts/verify-history-ui.mjs

@@ -0,0 +1,97 @@
+// Full browser -> HTTP handler -> controller -> executor -> real TEMP files.
+// Supervisor process control is simulated; never addresses real 3080/3210.
+import assert from 'node:assert/strict';
+import { createRequire } from 'node:module';
+import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync, rmSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { tmpdir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { Readable } from 'node:stream';
+import { createHistoryService } from '../src/history/service.mjs';
+import { registerHistoryHttp } from '../src/history/http.mjs';
+import { runHistoryOperation } from '../src/history/operation.mjs';
+
+const require = createRequire(import.meta.url);
+const { chromium } = require(process.env.CREW_PLAYWRIGHT_MODULE || 'playwright');
+const repo = dirname(dirname(fileURLToPath(import.meta.url)));
+const root = mkdtempSync(join(tmpdir(), 'crew-history-e2e-'));
+const output = mkdtempSync(join(tmpdir(), 'crew-history-ui-shots-'));
+mkdirSync(join(root, 'harness/storages'), { recursive: true });
+mkdirSync(join(root, 'harness/sessions/example/session-test'), { recursive: true });
+const file = join(root, 'harness/sessions/example/session-test/session.jsonl');
+writeFileSync(file, 'DISPOSABLE TEST CONVERSATION');
+writeFileSync(join(root, 'harness/storages/workspace.json'), JSON.stringify({ unit: { name: 'workspace', version: 2 }, global: { initialized: true, workspaceIds: ['test-workspace'], archivedSessionIds: [] }, tables: { workspaces: { 'test-workspace': { path: '/example/project', title: 'Disposable workspace', createdAt: '2026-01-01T00:00:00Z', updatedAt: '2026-01-01T00:00:00Z', sessionIds: ['session-test'] } } } }));
+const errors = []; let stopped = false; let operationPromise;
+const pause = ms => new Promise(resolve => setTimeout(resolve, ms));
+const service = createHistoryService({ crewRoot: root, runtimeId: 'test', agents: { list: () => [], create: async () => ({}) },
+  persistence: { supportsRawArtifacts: true, listSnapshots: async () => existsSync(file) ? [{ header: { id: 'session-test', createdAt: 1767225600000 }, revision: 'r1' }] : [], locate: () => ({ kind: 'jsonl', path: file }) },
+  launch: async id => { operationPromise = pause(200).then(() => runHistoryOperation({ crewRoot: root, id,
+    acquire: () => ({ ok: true }), release: () => ({ ok: true }), checkFence: () => service.fencedCheck(), assertStopped: () => stopped,
+    supervisor: { stopOwnedBackend: async () => { stopped = true; await pause(150); return { ok: true }; }, startOwnedBackend: async () => { await pause(150); stopped = false; return { ok: true }; } }, verifyRunning: async () => !stopped,
+  })); operationPromise.catch(error => errors.push(error.message)); },
+});
+let historyHandler;
+registerHistoryHttp({ register: route => { historyHandler = route.handler; return () => {}; } }, service);
+const browser = await chromium.launch({ headless: true, ...(process.env.CREW_BROWSER_EXE ? { executablePath: process.env.CREW_BROWSER_EXE } : {}) });
+try {
+  const page = await browser.newPage({ viewport: { width: 1100, height: 1100 } });
+  page.on('pageerror', error => errors.push(error.message));
+  page.on('dialog', dialog => dialog.accept());
+  await page.route('**/*', async route => {
+    const request = route.request(); const url = new URL(request.url());
+    if (url.origin !== 'http://127.0.0.1:41791') return route.abort();
+    if (url.pathname === '/') return route.fulfill({ contentType: 'text/html', body: '<html><head><meta charset="utf-8"></head><body style="font:14px Arial;background:#f5f6f8"><main id="root" style="padding:24px;max-width:800px;margin:auto;background:white"></main></body></html>' });
+    if (url.pathname.includes('/history/')) {
+      if (stopped) return route.abort();
+      const req = Readable.from([Buffer.from(request.postData() ?? '{}')]);
+      Object.assign(req, { url: url.pathname, method: request.method(), headers: { host: url.host, origin: url.origin }, socket: { remoteAddress: '127.0.0.1' } });
+      let status, body;
+      await historyHandler(req, { writeHead: n => { status = n; }, end: s => { body = s; } });
+      return route.fulfill({ status, contentType: 'application/json', body });
+    }
+    const suffix = url.pathname.split('/').pop(); let body = { ok: true };
+    if (suffix === 'runtime') body = { ok: true, service: 'dsh-crew-hub', profile: 'dsh-crew', listen_port: 3210 };
+    if (suffix === 'bridge-status') body = { ok: false };
+    if (suffix === 'config') body = { ok: true, config: { flash_model_priority: [], pro_model_priority: [], default_timeout_seconds: 1800 } };
+    if (suffix === 'status') body = { ok: true, status: {} };
+    return route.fulfill({ contentType: 'application/json', body: JSON.stringify(body) });
+  });
+  await page.goto('http://127.0.0.1:41791/'); await page.waitForLoadState('networkidle');
+  await page.addScriptTag({ content: readFileSync(join(repo, 'node_modules/react/umd/react.development.js'), 'utf8') });
+  await page.addScriptTag({ content: readFileSync(join(repo, 'node_modules/react-dom/umd/react-dom.development.js'), 'utf8') });
+  await page.evaluate(() => {
+    const root = window.ReactDOM.createRoot(document.getElementById('root'));
+    const ctx = { on: () => () => {}, locale: { getLocale: () => ({ active: 'zh' }) }, slots: { inject: (_n, callback) => callback(), register: (_meta, render) => { root.render(render()); return () => {}; } } };
+    window.__ModuleLoader__ = { load({ factory }) { const jsx = (tag, props, key) => window.React.createElement(tag, { ...props, ...(key === undefined ? {} : { key }) }); factory(id => {
+      if (id === 'react') return window.React;
+      if (id === 'react-dom' || id === 'react-dom/client') return window.ReactDOM;
+      if (id === 'react/jsx-runtime') return { jsx, jsxs: jsx, Fragment: window.React.Fragment };
+      throw Error('Unexpected dependency');
+    }).apply(ctx); } };
+  });
+  await page.addScriptTag({ content: readFileSync(join(repo, 'lib/client.js'), 'utf8') });
+  await page.getByText('工作区与会话清理', { exact: true }).click();
+  const preview = page.getByRole('button', { name: '预览清理范围', exact: true });
+  await preview.click();
+  await page.getByText('1 个工作区 · 1 个会话', { exact: true }).first().waitFor();
+  const confirm = page.getByRole('button', { name: '确认执行', exact: true });
+  assert.equal(await confirm.isEnabled(), false);
+  await page.getByRole('checkbox', { name: '我已确认范围，并同意短暂重启 3210' }).check();
+  await page.screenshot({ path: join(output, 'preview.png'), fullPage: true });
+  await confirm.click(); await page.getByRole('button', { name: '恢复', exact: true }).waitFor({ timeout: 15000 }); await operationPromise;
+  assert.equal(existsSync(file), false);
+  await page.getByRole('button', { name: '恢复', exact: true }).click();
+  await page.waitForFunction(() => [...document.querySelectorAll('[role=status]')].some(el => el.textContent === '已完成'));
+  await operationPromise; assert.equal(readFileSync(file, 'utf8'), 'DISPOSABLE TEST CONVERSATION');
+  await page.getByRole('combobox', { name: '操作', exact: true }).selectOption('delete');
+  await page.getByRole('combobox', { name: '时间范围', exact: true }).selectOption('before');
+  await page.getByLabel('创建时间早于', { exact: true }).fill('2027-01-01T00:00');
+  await preview.click(); await page.getByRole('checkbox', { name: '我已确认范围，并同意短暂重启 3210' }).check();
+  assert.equal(await confirm.isEnabled(), false);
+  await page.getByLabel('删除确认：请输入 DELETE', { exact: true }).fill('DELETE'); await confirm.click();
+  await page.waitForFunction(() => [...document.querySelectorAll('[role=status]')].some(el => el.textContent === '已完成'));
+  await operationPromise; assert.equal(existsSync(file), false); assert.deepEqual(service.archives(), []);
+  await page.screenshot({ path: join(output, 'completed.png'), fullPage: true });
+  assert.deepEqual(errors, []);
+  console.log(JSON.stringify({ ok: true, flows: ['archive all', 'restore', 'delete before date', 'confirmation guards', 'reconnect'], screenshots: output }));
+} finally { await browser.close(); service.dispose(); rmSync(root, { recursive: true, force: true }); }

package/scripts/verify-npm-install.mjs

@@ -35,7 +35,6 @@ export function resolveNpmInvocation({
   return { command: nodePath, argsPrefix: [npmCli] };
 }
 
-const npmInvocation = resolveNpmInvocation();
 
 /**
  * The candidate version is derived from the candidate package manifest at the
@@ -231,6 +230,7 @@ export async function auditOfficialDshCohort({
 }
 
 function run(args, cwd = root) {
+  const npmInvocation = resolveNpmInvocation();
   const result = spawnSync(npmInvocation.command, [...npmInvocation.argsPrefix, ...args], {
     cwd,
     encoding: 'utf8',

package/src/client/history-panel.tsx

@@ -0,0 +1,108 @@
+import { useEffect, useState } from 'react';
+
+const API = '/_dsh/dsh-crew/history/';
+const pending = (phase?: string) => !!phase && !['IDLE', 'DONE', 'FAILED', 'ROLLED_BACK'].includes(phase);
+const copy = {
+  zh: {
+    title: '工作区与会话清理', intro: '仅影响 3210 的工作区记录与会话日志；不删除项目文件、附件或 3080 数据。',
+    operation: '操作', archive: '归档（可恢复）', delete: '删除（不可恢复）', scope: '时间范围', all: '全部', before: '指定时间之前',
+    time: '创建时间早于', timeHint: '按本机时区选择，严格按创建时间筛选；包含新会话的工作区会保留。',
+    preview: '预览清理范围', confirm: '确认执行', acknowledgement: '删除确认：请输入 DELETE', idle: '会短暂停止并重启 3210；请先结束或关闭所有正在使用的 3210 会话。',
+    consent: '我已确认范围，并同意短暂重启 3210', restore: '恢复', archives: '已归档批次', empty: '暂无可恢复的归档',
+    working: '维护中，正在等待 3210 重新连接…', refresh: '刷新页面与工作区列表', recover: '恢复未完成的维护',
+    recovery: '维护尚未完成，请使用恢复按钮；若 3210 无法连接，在终端运行 dsh-crew history recover。',
+    cancelQueued: '取消尚未开始的维护', cancelQueuedHint: '仅取消尚未开始的维护，不清理任何数据；如果操作已开始，请等待完成。',
+    count: (w: number, s: number) => `${w} 个工作区 · ${s} 个会话`, confirmRestore: '恢复这一批归档？将短暂重启 3210，不会覆盖冲突数据。',
+    phase: { IDLE: '就绪', QUEUED: '已提交', STOPPING: '停止后台', APPLYING: '处理数据', STARTING: '启动后台', VERIFYING: '验证结果', DONE: '已完成', FAILED: '未执行成功', ROLLED_BACK: '已回滚', RECOVERY_REQUIRED: '需要恢复' },
+  },
+  en: {
+    title: 'Workspace & session cleanup', intro: 'Only 3210 workspace records and session logs. Project files, attachments and 3080 data are untouched.',
+    operation: 'Action', archive: 'Archive (restorable)', delete: 'Delete (permanent)', scope: 'Time range', all: 'All', before: 'Before a date',
+    time: 'Created before', timeHint: 'Local timezone; strict creation-time cutoff. Workspaces with newer sessions are kept.',
+    preview: 'Preview cleanup', confirm: 'Confirm operation', acknowledgement: 'Type DELETE to confirm deletion', idle: '3210 will briefly stop and restart. End or close all active 3210 conversations first.',
+    consent: 'I reviewed the scope and agree to restart 3210', restore: 'Restore', archives: 'Archived batches', empty: 'No restorable archives',
+    working: 'Maintenance in progress; waiting for 3210 to reconnect…', refresh: 'Reload page and workspace list', recover: 'Recover unfinished maintenance',
+    recovery: 'Maintenance is unfinished. Use recovery; if 3210 is unreachable, run dsh-crew history recover in a terminal.',
+    cancelQueued: 'Cancel unstarted maintenance', cancelQueuedHint: 'Cancel only if maintenance has not started. No data is cleaned; if already running, wait for completion.',
+    count: (w: number, s: number) => `${w} workspaces · ${s} sessions`, confirmRestore: 'Restore this archive? 3210 will briefly restart; conflicting data will not be overwritten.',
+    phase: { IDLE: 'Ready', QUEUED: 'Queued', STOPPING: 'Stopping backend', APPLYING: 'Processing data', STARTING: 'Starting backend', VERIFYING: 'Verifying', DONE: 'Completed', FAILED: 'Failed', ROLLED_BACK: 'Rolled back', RECOVERY_REQUIRED: 'Recovery required' },
+  },
+};
+
+export function HistoryPanel({ locale }: { locale: string }) {
+  const t = copy[locale === 'zh' ? 'zh' : 'en'];
+  const [open, setOpen] = useState(false);
+  const [operation, setOperation] = useState('archive');
+  const [scope, setScope] = useState('all');
+  const [before, setBefore] = useState('');
+  const [preview, setPreview] = useState<any>(null);
+  const [status, setStatus] = useState<any>({ phase: 'IDLE' });
+  const [archives, setArchives] = useState<any[]>([]);
+  const [busy, setBusy] = useState(false);
+  const [consent, setConsent] = useState(false);
+  const [ack, setAck] = useState('');
+  const [notice, setNotice] = useState('');
+  const [connected, setConnected] = useState(false);
+  const locked = busy || pending(status.phase);
+  const invalidate = () => { setPreview(null); setConsent(false); setAck(''); };
+
+  async function request(action: string, body?: unknown) {
+    const res = await fetch(API + action, { cache: 'no-store', ...(body === undefined ? {} : { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body) }) });
+    const data = await res.json();
+    if (!res.ok || !data.ok) throw Error(data.code ?? `HTTP ${res.status}`);
+    return data;
+  }
+  useEffect(() => {
+    if (!open) return;
+    let disposed = false;
+    const poll = async () => {
+      try {
+        const [s, a] = await Promise.all([request('status'), request('archives')]);
+        if (!disposed) { setStatus(s.status); setArchives(a.archives); setConnected(true); }
+      } catch { if (!disposed) setConnected(false); }
+    };
+    void poll(); const timer = setInterval(poll, 2500);
+    return () => { disposed = true; clearInterval(timer); };
+  }, [open]);
+
+  async function act(action: string, body: any) {
+    setBusy(true); setNotice('');
+    try {
+      const result = await request(action, body);
+      if (result.preview) { setPreview(result.preview); setConsent(false); setAck(''); }
+      if (result.status) { setStatus(result.status); setPreview(null); }
+    } catch (error: any) { setNotice(String(error.message)); setPreview(null); }
+    finally { setBusy(false); }
+  }
+  const style = { border: '1px solid rgba(128,128,128,.25)', borderRadius: 8, padding: '7px 10px', color: 'inherit', background: 'transparent', font: 'inherit' };
+  return <details style={{ border: '1px solid rgba(128,128,128,.24)', borderRadius: 10, padding: '10px 13px' }} onToggle={e => setOpen(e.currentTarget.open)}>
+    <summary style={{ cursor: 'pointer', fontWeight: 650 }}>{t.title}</summary>
+    {open && <div style={{ display: 'flex', flexDirection: 'column', gap: 10, marginTop: 12 }}>
+      <p style={{ margin: 0, opacity: .75 }}>{t.intro}</p>
+      <div style={{ display: 'flex', gap: 12, flexWrap: 'wrap' }}>
+        <label>{t.operation} <select style={style} value={operation} disabled={locked} onChange={e => { setOperation(e.target.value); invalidate(); }}><option value="archive">{t.archive}</option><option value="delete">{t.delete}</option></select></label>
+        <label>{t.scope} <select style={style} value={scope} disabled={locked} onChange={e => { setScope(e.target.value); invalidate(); }}><option value="all">{t.all}</option><option value="before">{t.before}</option></select></label>
+      </div>
+      {scope === 'before' && <label>{t.time} <input type="datetime-local" style={style} value={before} disabled={locked} onChange={e => { setBefore(e.target.value); invalidate(); }} /></label>}
+      <div style={{ fontSize: 11.5, opacity: .7 }}>{t.timeHint}</div>
+      <button type="button" style={style} disabled={locked || !connected || (scope === 'before' && !Number.isFinite(new Date(before).getTime()))} onClick={() => void act('preview', { operation, scope, ...(scope === 'before' ? { before: new Date(before).toISOString() } : {}) })}>{t.preview}</button>
+      {preview && <div style={{ ...style, display: 'flex', flexDirection: 'column', gap: 9 }}>
+        <strong>{t.count(preview.counts.workspaces, preview.counts.sessions)}</strong>
+        {preview.before && <span>{t.time}: {new Date(preview.before).toLocaleString()}</span>}
+        <details><summary>{t.preview}</summary><ul>{preview.items?.map((item: any) => <li key={item.id}>{item.title} <small>{item.id}</small></li>)}</ul><div style={{ overflowWrap: 'anywhere', fontSize: 11 }}>{preview.sessionIds?.slice(0, 100).join(', ')}{preview.sessionIds?.length > 100 ? ' …' : ''}</div></details>
+        {!preview.executable && <div role="alert">{preview.blockedReason}</div>}
+        <div>{t.idle}</div>
+        <label><input type="checkbox" checked={consent} disabled={locked} onChange={e => setConsent(e.target.checked)} /> {t.consent}</label>
+        {operation === 'delete' && <label>{t.acknowledgement} <input style={style} value={ack} disabled={locked} onChange={e => setAck(e.target.value)} /></label>}
+        <button type="button" style={style} disabled={locked || !consent || !preview.executable || (operation === 'delete' && ack !== 'DELETE')} onClick={() => void act('execute', { planId: preview.planId, confirm: true, acknowledgement: ack })}>{t.confirm}</button>
+      </div>}
+      <div role="status" aria-live="polite">{(t.phase as any)[status.phase] ?? status.phase}{status.code ? ` · ${status.code}` : ''}{notice ? ` · ${notice}` : ''}</div>
+      {!connected && <div role="status">{pending(status.phase) ? t.working : '3210 history API unavailable'}<p>{t.recovery}</p></div>}
+      {['RECOVERY_REQUIRED', 'QUEUED'].includes(status.phase) && <div><p>{status.phase === 'QUEUED' ? t.cancelQueuedHint : t.recovery}</p><button type="button" style={style} disabled={busy} onClick={() => { if (window.confirm(status.phase === 'QUEUED' ? t.cancelQueuedHint : t.recovery)) void act('recover', { confirm: true }); }}>{status.phase === 'QUEUED' ? t.cancelQueued : t.recover}</button></div>}
+      {['DONE', 'ROLLED_BACK'].includes(status.phase) && <button type="button" style={style} onClick={() => window.location.reload()}>{t.refresh}</button>}
+      <strong>{t.archives}</strong>
+      {archives.length === 0 && <span style={{ opacity: .6 }}>{t.empty}</span>}
+      {archives.map(a => <div key={a.id} style={{ ...style, display: 'flex', gap: 8, flexWrap: 'wrap', alignItems: 'center' }}><span style={{ flex: 1 }}>{a.invalid ? `${a.id} · ${a.code}` : `${new Date(a.createdAt).toLocaleString()} · ${t.count(a.workspaces, a.sessions)}`}</span><button type="button" style={style} disabled={locked || a.invalid} onClick={() => { if (window.confirm(t.confirmRestore)) void act('restore', { archiveId: a.id, confirm: true }); }}>{t.restore}</button></div>)}
+    </div>}
+  </details>;
+}

package/src/client/host-readiness.mjs

@@ -1,10 +1,15 @@
+import { isCompleteRuntimeIdentity, isExactNativeCrewIdentity, sameCompleteRuntimeIdentity } from '../runtime-identity-contract.mjs';
+
 export const READINESS_STATES = Object.freeze({
   READY: 'READY',
   DEGRADED: 'DEGRADED',
   UNAVAILABLE: 'UNAVAILABLE',
   UNKNOWN: 'UNKNOWN',
+  NOT_APPLICABLE: 'NOT_APPLICABLE',
 });
 
+const MAX_RUNTIME_SNAPSHOT_AGE_MS = 5 * 60 * 1000;
+
 function componentState(status, keys, { aligned = false } = {}) {
   if (status === undefined || status === null || typeof status !== 'object') return READINESS_STATES.UNKNOWN;
   if (status.installed === false) return READINESS_STATES.UNAVAILABLE;
@@ -18,10 +23,15 @@ function componentState(status, keys, { aligned = false } = {}) {
 function runtimeState(runtime, readinessSnapshot) {
   if (readinessSnapshot && typeof readinessSnapshot === 'object') {
     const identity = readinessSnapshot.runtime;
-    if (!(identity?.execution_plane === 'hub-3210' && identity.profile === 'dsh-crew'
-      && Number(identity.listen_port) === 3210 && typeof identity.runtime_id === 'string' && identity.runtime_id.trim())) {
+    if (!isExactNativeCrewIdentity(identity)) {
       return READINESS_STATES.UNAVAILABLE;
     }
+    if (runtime && (!isCompleteRuntimeIdentity(runtime) || !sameCompleteRuntimeIdentity(runtime, identity))) {
+      return READINESS_STATES.UNKNOWN;
+    }
+    if (!Number.isFinite(readinessSnapshot.captured_at)) return READINESS_STATES.UNKNOWN;
+    if (readinessSnapshot.captured_at > Date.now() + 30_000) return READINESS_STATES.UNKNOWN;
+    if (Date.now() - readinessSnapshot.captured_at > MAX_RUNTIME_SNAPSHOT_AGE_MS) return READINESS_STATES.DEGRADED;
     const row = Array.isArray(readinessSnapshot.readiness_matrix?.rows)
       ? readinessSnapshot.readiness_matrix.rows.find((entry) => entry?.id === 'hub_compatibility') : undefined;
     if (row?.status === 'PASS') return READINESS_STATES.READY;
@@ -31,9 +41,8 @@ function runtimeState(runtime, readinessSnapshot) {
   }
   if (runtime === undefined) return READINESS_STATES.UNKNOWN;
   if (runtime === null) return READINESS_STATES.UNAVAILABLE;
-  return runtime?.ok === true && runtime.service === 'dsh-crew-hub'
-    ? READINESS_STATES.READY
-    : READINESS_STATES.DEGRADED;
+  const exactIdentity = runtime?.ok === true && isExactNativeCrewIdentity(runtime);
+  return exactIdentity ? READINESS_STATES.READY : READINESS_STATES.UNKNOWN;
 }
 
 function bridgeState(surface) {
@@ -41,7 +50,7 @@ function bridgeState(surface) {
   // absence must never degrade Crew readiness: on the native 3210 control
   // plane the bridge is simply not part of the picture.
   if (surface === 'official-bridge') return READINESS_STATES.READY;
-  if (surface === 'native-crew-harness') return READINESS_STATES.UNKNOWN;
+  if (surface === 'native-crew-harness') return READINESS_STATES.NOT_APPLICABLE;
   return READINESS_STATES.UNKNOWN;
 }