@wangxiaocuo/dsh-session-trash 0.6.2 → 0.6.3

package/CHANGELOG.md

@@ -0,0 +1,85 @@
+# Changelog
+
+本文件记录这个插件的所有重要变更。格式参考 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/)，版本号遵循[语义化版本](https://semver.org/lang/zh-CN/)。
+
+## [0.6.3] - 2026-11-11
+
+### Added
+
+- `/state` 的条目新增稳定的 `lastErrorCode`，页面据此把失败原因本地化；`lastError` 保留英文原始诊断，只用作 tooltip。
+- 新增本 CHANGELOG，并把它包含在 npm 包里。
+
+### Changed
+
+- 中文界面不再直接显示 Host 的英文诊断；「在 Finder 中显示」改为平台中性的「在文件管理器中显示」。
+- 英文界面使用正确的单复数（会话数、子会话数、清理/删除数量）。
+- 清理结果区分部分失败与全部失败，失败时使用失败 Toast 并给出数量。
+- 到期倒计时每分钟刷新；条目的数据变少时页码自动收敛。
+- 生成 `/state` 时，同一原始工作区只探测一次，而不是每个条目各探测一次。
+- 未知大小显示为 `—`，不再显示 `0 B`。
+
+### Fixed
+
+- 恢复、永久删除、从索引移除或显示工作区成功后，清除该行残留的旧错误提示。
+- 跨设备复制后源目录删除失败时，HTTP 错误不再返回源路径/回收站绝对路径；错误 `details` 只暴露白名单字段（`code`、`phase`、`sessionId`、`metrics` 等）。
+- 跨设备复制校验现在比较符号链接数量，能发现复制过程中被静默丢弃的符号链接。
+
+### Tests
+
+- 新增 wire 错误脱敏、`lastErrorCode` 映射、工作区探测去重、清理部分失败、行错误清除、未知大小和符号链接校验的回归测试。
+
+## [0.6.2] - 2026-11-11
+
+### Fixed
+
+- 客户端写操作串行化：同一时间只允许一个写请求，行级 pending 状态独立清理，程序化重复点击会被忽略。
+- 写请求 30 秒、`/state` 15 秒硬超时；设置页卸载时取消在途请求，超时显示本地化文案。
+- 后台刷新不再禁用行操作；`ActionMenu` 在变为禁用时自动关闭。
+
+### Tests / CI
+
+- 测试入口改为跨平台的 `test/run-unit.mjs`（不依赖 shell glob）。
+- CI 增加 Windows（Node 22）矩阵，并把单元测试失败输出转成 check annotations。
+- e2e 支持跨平台发现桌面版，Windows 上跳过依赖 POSIX 权限位的清理失败场景。
+
+### Docs
+
+- README 用可核对的验证矩阵替代原先无法验证的跨平台表述。
+
+## [0.6.1] - 2026-11-11
+
+### Fixed
+
+- Host 冒烟测试改为普通 Node 可运行：索引版本断言改为读取 `INDEX_VERSION`，不再硬编码；Cordis 来自 `@deepseek-ai/cordis` devDependency；自己创建并清理临时 `DSH_HOME`。
+
+### Performance
+
+- 批量删除/清理改为批量提交索引：200 条目的永久删除从 400 次索引提交、约 70 MB 写入降到 2 次提交、约 0.4 MB。
+- 启动恢复复用 reconcile 的探测结果，并对成员目录并行探测；单个条目变化时只重写它自己的 `meta.json`。
+
+### Added
+
+- GitHub Actions CI（单元测试、冒烟测试、覆盖率、打包内容检查）。
+
+## [0.6.0] - 2026-11-09
+
+### Added
+
+- 隐藏的 subagent 子会话随父会话一起移入回收站、一起恢复；含子会话的条目显示数量徽章。
+- 生成组合包并以 `@wangxiaocuo/dsh-session-trash` 发布。
+
+### Changed
+
+- **BREAKING**：索引 schema 升级为 v2（条目携带 `members`）；旧版本插件无法读取 v2 索引，会进入保护模式。降级前请先清空回收站。
+
+## [0.5.1] - 2026-11-09
+
+### Added
+
+- 回收站工具栏的「永久删除全部」与二次确认；`missing` 记录只移出索引，不删除会话文件。
+
+[0.6.3]: https://github.com/wangxiaocuo/dsh-session-trash/compare/v0.6.2...v0.6.3
+[0.6.2]: https://github.com/wangxiaocuo/dsh-session-trash/compare/v0.6.1...v0.6.2
+[0.6.1]: https://github.com/wangxiaocuo/dsh-session-trash/compare/v0.6.0...v0.6.1
+[0.6.0]: https://github.com/wangxiaocuo/dsh-session-trash/compare/v0.5.1...v0.6.0
+[0.5.1]: https://github.com/wangxiaocuo/dsh-session-trash/releases/tag/v0.5.1

package/README.en.md

@@ -2,7 +2,7 @@
 
 [简体中文](./README.md) | English
 
-[GitHub](https://github.com/wangxiaocuo/dsh-session-trash) · [npm](https://www.npmjs.com/package/@wangxiaocuo/dsh-session-trash)
+[GitHub](https://github.com/wangxiaocuo/dsh-session-trash) · [npm](https://www.npmjs.com/package/@wangxiaocuo/dsh-session-trash) · [Changelog](./CHANGELOG.md)
 
 A session trash for DeepSeek Harness. Move cold sessions out of the sidebar without deleting their logs, restore them within the retention window, or delete the logs permanently. Built for DSH 0.2.2-rc.1 on Desktop and Web. Host and Client ship in one package, with no build step.
 
@@ -132,7 +132,7 @@ Restore and maintenance refusals include `TRASH_ENTRY_NOT_FOUND`, `TRASH_STATE_I
 
 `/state.stats.cleanup` reports the last cleanup attempt, the next sweep, a pending retry, consecutive failures, and the last run summary.
 
-`/state` entries gain `subagentCount` (hidden children moved along) and `members` (parent first, each with `sessionId`, `origin`, and `sizeBytes`); `sizeBytes`/`fileCount` cover the whole tree. The `entry` returned by `/trash` uses the same shape.
+`/state` entries gain `subagentCount` (hidden children moved along) and `members` (parent first, each with `sessionId`, `origin`, and `sizeBytes`); `sizeBytes`/`fileCount` cover the whole tree. The `entry` returned by `/trash` uses the same shape. Entries also carry `lastErrorCode` (a stable category the page localizes) and `lastError` (the raw English diagnostic, used only as a tooltip).
 
 ## Storage and recovery
 

package/README.md

@@ -2,7 +2,7 @@
 
 简体中文 | [English](./README.en.md)
 
-[GitHub](https://github.com/wangxiaocuo/dsh-session-trash) · [npm](https://www.npmjs.com/package/@wangxiaocuo/dsh-session-trash)
+[GitHub](https://github.com/wangxiaocuo/dsh-session-trash) · [npm](https://www.npmjs.com/package/@wangxiaocuo/dsh-session-trash) · [更新记录](./CHANGELOG.md)
 
 DeepSeek Harness 的会话回收站插件。冷会话可以从侧边栏移出，日志保留在本地；保留期内可以恢复，到期后自动删除日志。面向 DSH 0.2.2-rc.1 的 Desktop 和 Web，Host 和 Client 在同一个包里，不需要构建步骤。
 
@@ -131,7 +131,7 @@ npm 安装的插件在「插件」页打开「会话回收站」的详情，展
 
 `/state` 的 `stats.cleanup` 记录上次清理时间、下次清理时间、重试时间、连续失败次数和上次运行摘要。
 
-`/state` 的条目新增 `subagentCount`（一并移入的隐藏子会话数）和 `members`（父会话在前，含 `sessionId`、`origin`、`sizeBytes`）；`sizeBytes`/`fileCount` 是整棵树的总量。`/trash` 返回的 `entry` 使用同一形状。
+`/state` 的条目新增 `subagentCount`（一并移入的隐藏子会话数）和 `members`（父会话在前，含 `sessionId`、`origin`、`sizeBytes`）；`sizeBytes`/`fileCount` 是整棵树的总量。`/trash` 返回的 `entry` 使用同一形状。条目还带 `lastErrorCode`（稳定的失败分类，供页面本地化）和 `lastError`（英文原始诊断，只作 tooltip）。
 
 ## 数据与恢复
 

package/client.js

@@ -32,6 +32,19 @@ window.__ModuleLoader__.load({
      * Preflight refusals the user can act on themselves. Those keep a visible
      * menu entry that explains the refusal instead of hiding it.
      */
+    /** Host `lastErrorCode` values mapped to owner-facing messages. */
+    const LAST_ERROR_KEYS = {
+      TRASH_COPY_MISSING: 'lastErrorTrashCopyMissing',
+      TRASH_COPY_MISSING_MEMBERS: 'lastErrorTrashCopyMissingMembers',
+      TRASH_OBJECT_MISSING: 'lastErrorTrashObjectMissing',
+      PURGE_FAILED: 'lastErrorPurgeFailed',
+      RESTORE_INVISIBLE: 'lastErrorRestoreInvisible',
+      MOVE_UNSETTLED: 'lastErrorMoveUnsettled',
+      SOURCE_CONFLICT: 'lastErrorSourceConflict',
+      INDEX_WRITE_FAILED: 'lastErrorIndexWriteFailed',
+      IO_ERROR: 'lastErrorIo',
+    }
+
     const MOVE_BLOCKED_KEYS = {
       SESSION_LIVE: { label: 'moveBlockedLive', toast: 'blockedLiveToast' },
       SESSION_ACTIVE: { label: 'moveBlockedActive', toast: 'blockedActiveToast' },
@@ -77,7 +90,8 @@ window.__ModuleLoader__.load({
       retry: '重试',
       cleanupExpired: '清理已过期',
       cleaning: '正在清理…',
-      statsCount: '{count} 个会话',
+      statsCountOne: '{count} 个会话',
+      statsCountOther: '{count} 个会话',
       statsSize: '占用 {size}',
       searchLabel: '搜索回收站',
       searchPlaceholder: '搜索标题、Session ID 或原始工作区',
@@ -127,7 +141,8 @@ window.__ModuleLoader__.load({
       badgeMigration: '需要迁移',
       badgeExpiring: '即将到期',
       badgeExpired: '已过期',
-      badgeSubagents: '含 {count} 个子会话',
+      badgeSubagentsOne: '含 {count} 个子会话',
+      badgeSubagentsOther: '含 {count} 个子会话',
       stateTrashing: '正在移入…',
       stateRestoring: '正在恢复…',
       statePurging: '正在删除…',
@@ -135,7 +150,7 @@ window.__ModuleLoader__.load({
       actionRestoreFor: '恢复「{title}」',
       actionMoreFor: '「{title}」的更多操作',
       actionRestoreOrphan: '恢复为孤儿会话',
-      actionReveal: '在 Finder 中显示',
+      actionReveal: '在文件管理器中显示',
       actionRevealDisabled: '原工作区已不存在',
       actionCopyId: '复制 Session ID',
       actionForget: '从索引移除',
@@ -152,23 +167,37 @@ window.__ModuleLoader__.load({
       purgeAllTitle: '永久删除回收站中的全部 {count} 个会话？',
       purgeAllBody: '此操作不可撤销。附件、图片和搜索索引等衍生物不会被删除。',
       purgeAllConfirm: '全部永久删除',
-      purgeAllDone: '已永久删除 {count} 个会话',
+      purgeAllDoneOne: '已永久删除 {count} 个会话',
+      purgeAllDoneOther: '已永久删除 {count} 个会话',
       purgeAllNone: '回收站中没有可删除的会话',
-      purgeAllPartial: '已永久删除 {removed} 个会话，{failed} 个未能删除',
+      purgeAllPartial: '批量删除完成：成功 {removed} 个，失败 {failed} 个。',
       forgetTitle: '从回收站列表移除这条缺失记录？',
       forgetBody: '不会删除任何文件；仅移除索引中的这条记录。',
       forgetConfirm: '从索引移除',
-      cleanupDone: '已清理 {count} 个过期会话',
+      cleanupDoneOne: '已清理 {count} 个过期会话',
+      cleanupDoneOther: '已清理 {count} 个过期会话',
       cleanupNone: '没有需要清理的过期会话',
-      cleanupFailedBanner: '上次自动清理有 {count} 个会话未能删除。',
-      cleanupErrorBanner: '上次自动清理失败：{message}',
+      cleanupFailedBannerOne: '上次自动清理有 {count} 个会话未能删除。',
+      cleanupFailedBannerOther: '上次自动清理有 {count} 个会话未能删除。',
+      cleanupErrorBanner: '上次自动清理失败，请稍后在本页重试。',
+      cleanupFailed: '清理失败：还有 {failed} 个过期会话没有删除。',
+      cleanupPartial: '已清理 {purged} 个过期会话，{failed} 个没有删除。',
       cleanupRetryAt: '将在 {time} 自动重试。',
       cleanupRetryNow: '立即重试',
       copySuccess: '已复制 Session ID',
       copyFailed: '无法复制 Session ID，请手动复制',
-      revealSuccess: '已在 Finder 中显示原工作区',
+      revealSuccess: '已在文件管理器中显示原工作区',
       revealFailed: '无法打开原工作区',
       lastErrorLabel: '上次错误：{message}',
+      lastErrorTrashCopyMissing: '回收站里的会话副本缺失。',
+      lastErrorTrashCopyMissingMembers: '回收站里的部分子会话副本缺失。',
+      lastErrorTrashObjectMissing: '回收站对象目录缺失。',
+      lastErrorPurgeFailed: '会话日志删除失败。',
+      lastErrorRestoreInvisible: '恢复后会话存储没有识别到该会话。',
+      lastErrorMoveUnsettled: '会话已移动，但会话存储仍报告它存在。',
+      lastErrorSourceConflict: '原会话目录与回收站副本同时存在，两者都已保留。',
+      lastErrorIndexWriteFailed: '回收站索引写入失败。',
+      lastErrorIo: '文件操作失败。',
       footnote: '回收站目录：{path}',
       move: '移入回收站',
       moveBlockedLive: '移入回收站（会话已打开）',
@@ -177,7 +206,8 @@ window.__ModuleLoader__.load({
       undo: '撤销',
       undoFailed: '撤销失败',
       trashSuccess: '已将「{title}」移入回收站',
-      trashSuccessTree: '「{title}」及其 {count} 个子会话已移入回收站',
+      trashSuccessTreeOne: '「{title}」及其 {count} 个子会话已移入回收站',
+      trashSuccessTreeOther: '「{title}」及其 {count} 个子会话已移入回收站',
       blockedLiveToast: '该会话已在本机打开。DSH 目前不会释放已打开的会话，请重启 DSH 后再移入回收站。',
       blockedActiveToast: '该会话还有正在运行的任务或子代理，等它停下来后再移入回收站。',
       blockedDescendantsToast: '该会话包含可见的子会话，只能使用 DSH 自带的「归档」整棵会话树。',
@@ -202,7 +232,7 @@ window.__ModuleLoader__.load({
       errorIndexCorrupt: '回收站索引损坏，已进入保护模式。',
       errorIndexOk: '回收站索引可正常读取，无需重建。',
       errorForgetNotAllowed: '只有文件缺失的记录可以从索引移除。',
-      errorRevealUnavailable: '当前环境无法打开 Finder。',
+      errorRevealUnavailable: '当前环境无法打开文件管理器。',
       errorRevealFailed: '无法打开原工作区。',
       errorIo: '文件操作失败，请稍后重试。',
     }
@@ -215,7 +245,8 @@ window.__ModuleLoader__.load({
       retry: 'Retry',
       cleanupExpired: 'Delete expired',
       cleaning: 'Cleaning…',
-      statsCount: '{count} sessions',
+      statsCountOne: '{count} session',
+      statsCountOther: '{count} sessions',
       statsSize: '{size} used',
       searchLabel: 'Search the trash',
       searchPlaceholder: 'Search title, Session ID, or original workspace',
@@ -265,7 +296,8 @@ window.__ModuleLoader__.load({
       badgeMigration: 'Migration required',
       badgeExpiring: 'Expiring soon',
       badgeExpired: 'Expired',
-      badgeSubagents: '{count} sub-sessions',
+      badgeSubagentsOne: '{count} sub-session',
+      badgeSubagentsOther: '{count} sub-sessions',
       stateTrashing: 'Moving…',
       stateRestoring: 'Restoring…',
       statePurging: 'Deleting…',
@@ -273,7 +305,7 @@ window.__ModuleLoader__.load({
       actionRestoreFor: 'Restore “{title}”',
       actionMoreFor: 'More actions for “{title}”',
       actionRestoreOrphan: 'Restore as orphan',
-      actionReveal: 'Show in Finder',
+      actionReveal: 'Show in file manager',
       actionRevealDisabled: 'The original workspace no longer exists',
       actionCopyId: 'Copy Session ID',
       actionForget: 'Remove from index',
@@ -290,23 +322,37 @@ window.__ModuleLoader__.load({
       purgeAllTitle: 'Permanently delete all {count} sessions in the trash?',
       purgeAllBody: 'This cannot be undone. Attachments, images, and search index rows are not deleted.',
       purgeAllConfirm: 'Delete all permanently',
-      purgeAllDone: 'Permanently deleted {count} sessions',
+      purgeAllDoneOne: 'Permanently deleted {count} session',
+      purgeAllDoneOther: 'Permanently deleted {count} sessions',
       purgeAllNone: 'No sessions to delete',
-      purgeAllPartial: 'Permanently deleted {removed} sessions; {failed} could not be deleted',
+      purgeAllPartial: 'Bulk delete finished: {removed} removed, {failed} failed.',
       forgetTitle: 'Remove this missing record from the trash list?',
       forgetBody: 'No file is deleted; only this index record is removed.',
       forgetConfirm: 'Remove from index',
-      cleanupDone: 'Deleted {count} expired sessions',
+      cleanupDoneOne: 'Deleted {count} expired session',
+      cleanupDoneOther: 'Deleted {count} expired sessions',
       cleanupNone: 'No expired sessions to delete',
-      cleanupFailedBanner: 'The last automatic cleanup could not delete {count} session(s).',
-      cleanupErrorBanner: 'The last automatic cleanup failed: {message}',
+      cleanupFailedBannerOne: 'The last automatic cleanup could not delete {count} expired session.',
+      cleanupFailedBannerOther: 'The last automatic cleanup could not delete {count} expired sessions.',
+      cleanupErrorBanner: 'The last automatic cleanup failed. Retry from this page later.',
+      cleanupFailed: 'Cleanup could not delete {failed} of the expired sessions.',
+      cleanupPartial: 'Cleanup deleted {purged}; {failed} could not be deleted.',
       cleanupRetryAt: 'Next retry: {time}.',
       cleanupRetryNow: 'Retry now',
       copySuccess: 'Session ID copied',
       copyFailed: 'Could not copy the Session ID. Copy it manually.',
-      revealSuccess: 'Revealed the original workspace in Finder',
+      revealSuccess: 'Revealed the original workspace in the file manager',
       revealFailed: 'Could not open the original workspace',
       lastErrorLabel: 'Last error: {message}',
+      lastErrorTrashCopyMissing: 'The stored copy of this session is missing from the trash.',
+      lastErrorTrashCopyMissingMembers: 'Some sub-session copies are missing from the trash.',
+      lastErrorTrashObjectMissing: 'The trash object directory is missing.',
+      lastErrorPurgeFailed: 'The session log could not be deleted.',
+      lastErrorRestoreInvisible: 'Session storage did not report the restored session.',
+      lastErrorMoveUnsettled: 'The session was moved, but session storage still reports it.',
+      lastErrorSourceConflict: 'The original session directory and the trash copy both exist; both were kept.',
+      lastErrorIndexWriteFailed: 'The trash index could not be written.',
+      lastErrorIo: 'A file operation failed.',
       footnote: 'Trash directory: {path}',
       move: 'Move to trash',
       moveBlockedLive: 'Move to trash (session is open)',
@@ -315,7 +361,8 @@ window.__ModuleLoader__.load({
       undo: 'Undo',
       undoFailed: 'Could not undo',
       trashSuccess: 'Moved “{title}” to the trash',
-      trashSuccessTree: '“{title}” and its {count} sub-sessions were moved to the trash',
+      trashSuccessTreeOne: '“{title}” and its single sub-session were moved to the trash',
+      trashSuccessTreeOther: '“{title}” and its {count} sub-sessions were moved to the trash',
       blockedLiveToast: 'This session is open in DSH. DSH does not release opened sessions yet; restart DSH, then move it to the trash.',
       blockedActiveToast: 'This session still has running work; wait for it to stop, then move it to the trash.',
       blockedDescendantsToast: 'This session has visible child sessions; use the built-in Archive action for the whole tree instead.',
@@ -340,7 +387,7 @@ window.__ModuleLoader__.load({
       errorIndexCorrupt: 'The trash index is damaged, so protection mode is on.',
       errorIndexOk: 'The trash index is readable and does not need a rebuild.',
       errorForgetNotAllowed: 'Only records whose log is missing can be removed from the index.',
-      errorRevealUnavailable: 'This environment cannot open Finder.',
+      errorRevealUnavailable: 'This environment cannot open a file manager.',
       errorRevealFailed: 'Could not open the original workspace.',
       errorIo: 'A file operation failed. Try again.',
     }
@@ -359,11 +406,26 @@ window.__ModuleLoader__.load({
     }
 
     /**
-     * @param {number} bytes raw byte count.
-     * @returns {string} a compact human-readable size.
+     * Pick the grammatical singular/plural locale form for a count.
+     *
+     * @param {(key: string) => string} t bound translator.
+     * @param {string} key base locale key (without the One/Other suffix).
+     * @param {number} count item count.
+     * @param {Record<string, unknown>} [values] extra placeholders.
+     * @returns {string} the formatted text.
+     */
+    function countText(t, key, count, values = {}) {
+      const template = t(`${key}${count === 1 ? 'One' : 'Other'}`)
+      return format(template, { ...values, count })
+    }
+
+    /**
+     * @param {number | null | undefined} bytes raw byte count.
+     * @returns {string} a compact human-readable size, or an em dash when unknown.
      */
     function formatBytes(bytes) {
-      if (typeof bytes !== 'number' || !Number.isFinite(bytes) || bytes <= 0) return '0 B'
+      if (typeof bytes !== 'number' || !Number.isFinite(bytes)) return '—'
+      if (bytes <= 0) return '0 B'
       const units = ['B', 'KB', 'MB', 'GB', 'TB']
       let value = bytes
       let unit = 0
@@ -1090,6 +1152,7 @@ window.__ModuleLoader__.load({
         const [rebuilding, setRebuilding] = React.useState(false)
         const [purgingAll, setPurgingAll] = React.useState(false)
         const [announcement, setAnnouncement] = React.useState('')
+        const [clock, setClock] = React.useState(() => Date.now())
         const [query, setQuery] = React.useState('')
         const [filter, setFilter] = React.useState('all')
         const [page, setPage] = React.useState(1)
@@ -1149,6 +1212,19 @@ window.__ModuleLoader__.load({
           })
         }
 
+        /**
+         * @param {string} sessionId row whose owner-facing error is resolved.
+         * @returns {void}
+         */
+        function clearRowError(sessionId) {
+          setRowErrors((previous) => {
+            if (!(sessionId in previous)) return previous
+            const next = { ...previous }
+            delete next[sessionId]
+            return next
+          })
+        }
+
         /**
          * Open an abort scope for one write. It is cancelled by a hard timeout
          * and by the unmount cleanup, so a stuck request can never wedge the
@@ -1283,6 +1359,15 @@ window.__ModuleLoader__.load({
           }
         }, [load])
 
+        // Keep relative expiry text honest on a page left open for a long time.
+        React.useEffect(() => {
+          if (typeof window === 'undefined' || typeof window.setInterval !== 'function') return undefined
+          const handle = window.setInterval(() => setClock(Date.now()), 60_000)
+          return () => {
+            if (typeof window.clearInterval === 'function') window.clearInterval(handle)
+          }
+        }, [])
+
         const data = view.data
         const entries = data !== null && Array.isArray(data.entries) ? [...data.entries] : []
         entries.sort((left, right) => (right.trashedAt ?? 0) - (left.trashedAt ?? 0))
@@ -1323,7 +1408,7 @@ window.__ModuleLoader__.load({
         const corrupt = data !== null && data.index !== undefined && data.index.status === 'corrupt'
         const recovered = data !== null && data.index !== undefined && data.index.status === 'recovered'
         const unindexed = data !== null && data.index !== undefined && typeof data.index.unindexed === 'number' ? data.index.unindexed : 0
-        const now = Date.now()
+        const now = clock
         const normalizedQuery = query.trim().toLowerCase()
 
         /**
@@ -1356,6 +1441,9 @@ window.__ModuleLoader__.load({
         const filteredEntries = entries.filter((entry) => matchesQuery(entry) && matchesFilter(entry))
         const pageCount = Math.max(1, Math.ceil(filteredEntries.length / PAGE_SIZE))
         const currentPage = Math.min(Math.max(1, page), pageCount)
+        React.useEffect(() => {
+          if (page > pageCount) setPage(pageCount)
+        }, [page, pageCount])
         const pageStart = (currentPage - 1) * PAGE_SIZE
         const visibleEntries = filteredEntries.slice(pageStart, pageStart + PAGE_SIZE)
         const filtersActive = normalizedQuery !== '' || filter !== 'all'
@@ -1444,6 +1532,7 @@ window.__ModuleLoader__.load({
               session !== null && session !== undefined && typeof session.title === 'string' && session.title !== ''
                 ? session.title
                 : entry.title
+            clearRowError(entry.sessionId)
             const message = format(t(orphan ? 'restoreOrphanSuccess' : 'restoreSuccess'), { title })
             bumpRevision()
             ctx.contextMenus.notify(message, true)
@@ -1472,6 +1561,7 @@ window.__ModuleLoader__.load({
               fail(entry, describeActionFailure(outcome.status, outcome.payload, t))
               return
             }
+            clearRowError(entry.sessionId)
             const message = format(t('purgeSuccess'), { title: entry.title })
             bumpRevision()
             ctx.contextMenus.notify(message, true)
@@ -1500,6 +1590,7 @@ window.__ModuleLoader__.load({
               fail(entry, describeActionFailure(outcome.status, outcome.payload, t))
               return
             }
+            clearRowError(entry.sessionId)
             bumpRevision()
             ctx.contextMenus.notify(t('forgetSuccess'), true)
             announce(t('forgetSuccess'))
@@ -1527,6 +1618,7 @@ window.__ModuleLoader__.load({
               fail(entry, describeActionFailure(outcome.status, outcome.payload, t))
               return
             }
+            clearRowError(entry.sessionId)
             ctx.contextMenus.notify(t('revealSuccess'), true)
             announce(t('revealSuccess'))
           } finally {
@@ -1563,13 +1655,15 @@ window.__ModuleLoader__.load({
               ctx.contextMenus.notify(describeActionFailure(outcome.status, outcome.payload, t), false)
               return
             }
-            const purged =
-              outcome.payload !== null && outcome.payload !== undefined && typeof outcome.payload.purged === 'number'
-                ? outcome.payload.purged
-                : 0
-            const message = purged > 0 ? format(t('cleanupDone'), { count: purged }) : t('cleanupNone')
+            const payload = outcome.payload
+            const purged = payload !== null && payload !== undefined && typeof payload.purged === 'number' ? payload.purged : 0
+            const failed = payload !== null && payload !== undefined && typeof payload.failed === 'number' ? payload.failed : 0
+            let message
+            if (failed > 0 && purged > 0) message = format(t('cleanupPartial'), { purged, failed })
+            else if (failed > 0) message = format(t('cleanupFailed'), { failed })
+            else message = purged > 0 ? countText(t, 'cleanupDone', purged) : t('cleanupNone')
             bumpRevision()
-            ctx.contextMenus.notify(message, true)
+            ctx.contextMenus.notify(message, failed === 0)
             announce(message)
           } finally {
             endWrite()
@@ -1606,7 +1700,7 @@ window.__ModuleLoader__.load({
               failed > 0
                 ? format(t('purgeAllPartial'), { removed, failed })
                 : removed > 0
-                  ? format(t('purgeAllDone'), { count: removed })
+                  ? countText(t, 'purgeAllDone', removed)
                   : t('purgeAllNone')
             bumpRevision()
             ctx.contextMenus.notify(message, failed === 0)
@@ -1741,7 +1835,7 @@ window.__ModuleLoader__.load({
           if (subagentCount > 0) {
             badges.push({
               key: 'subagents',
-              label: format(t('badgeSubagents'), { count: subagentCount }),
+              label: countText(t, 'badgeSubagents', subagentCount),
               tone: 'info',
             })
           }
@@ -1827,9 +1921,7 @@ window.__ModuleLoader__.load({
           const retryText =
             cleanupRetryAt !== null ? format(t('cleanupRetryAt'), { time: formatDate(cleanupRetryAt, locale, true) }) : ''
           const cleanupMessage =
-            cleanupFailed > 0
-              ? format(t('cleanupFailedBanner'), { count: cleanupFailed })
-              : format(t('cleanupErrorBanner'), { message: cleanupError })
+            cleanupFailed > 0 ? countText(t, 'cleanupFailedBanner', cleanupFailed) : t('cleanupErrorBanner')
           banners.push(
             h(
               'div',
@@ -1837,7 +1929,7 @@ window.__ModuleLoader__.load({
               h(TrashGlyph, { size: 16 }),
               h(
                 'span',
-                { className: 'dsh-trash__bannerText' },
+                { className: 'dsh-trash__bannerText', title: cleanupError ?? undefined },
                 cleanupMessage,
                 retryText === '' ? null : ` ${retryText}`,
               ),
@@ -1882,7 +1974,7 @@ window.__ModuleLoader__.load({
                 h(
                   'span',
                   { className: 'dsh-trash__stats' },
-                  format(t('statsCount'), { count: entries.length }),
+                  countText(t, 'statsCount', entries.length),
                   h('span', { className: 'dsh-trash__dot', 'aria-hidden': true }, '·'),
                   format(t('statsSize'), { size: formatBytes(totalBytes) }),
                   h('span', { className: 'dsh-trash__dot', 'aria-hidden': true }, '·'),
@@ -2047,7 +2139,14 @@ window.__ModuleLoader__.load({
             { className: 'dsh-trash__list', 'aria-label': t('listLabel') },
             visibleEntries.map((entry) => {
               const rowBusy = pendingRows.has(entry.sessionId)
-              const error = rowErrors[entry.sessionId] ?? entry.lastError
+              const rowError = rowErrors[entry.sessionId]
+              const lastErrorCode = typeof entry.lastErrorCode === 'string' ? entry.lastErrorCode : null
+              const lastErrorText =
+                typeof entry.lastError === 'string' && entry.lastError !== ''
+                  ? t(LAST_ERROR_KEYS[lastErrorCode] ?? 'lastErrorIo')
+                  : null
+              const error = rowError ?? lastErrorText
+              const errorTitle = rowError === undefined && typeof entry.lastError === 'string' ? entry.lastError : undefined
               const title = entry.title !== undefined && entry.title !== '' ? entry.title : entry.sessionId
               return h(
                 'li',
@@ -2087,7 +2186,11 @@ window.__ModuleLoader__.load({
                     h('span', null, formatBytes(entry.sizeBytes)),
                   ),
                   error !== null && error !== undefined && error !== ''
-                    ? h('div', { className: 'dsh-trash__rowError', role: 'status' }, format(t('lastErrorLabel'), { message: error }))
+                    ? h(
+                        'div',
+                        { className: 'dsh-trash__rowError', role: 'status', title: errorTitle },
+                        format(t('lastErrorLabel'), { message: error }),
+                      )
                     : null,
                 ),
                 h(
@@ -2252,7 +2355,7 @@ window.__ModuleLoader__.load({
                 : 0
             const message =
               subagentCount > 0
-                ? format(t('trashSuccessTree'), { title, count: subagentCount })
+                ? countText(t, 'trashSuccessTree', subagentCount, { title })
                 : format(t('trashSuccess'), { title })
             ctx.contextMenus.notify(message, true, {
               label: t('undo'),

package/lib/errors.js

@@ -62,16 +62,76 @@ export function statusOf(error) {
   return ERROR_STATUS[code] ?? 500
 }
 
+/**
+ * Detail keys the Host may return to the Client. Anything else - notably raw
+ * filesystem paths or nested error text - stays in the Host log, because the
+ * wire contract promises that the trash root's absolute path is never exposed.
+ */
+const SAFE_DETAIL_KEYS = new Set([
+  'sessionId',
+  'trashId',
+  'code',
+  'phase',
+  'copied',
+  'kind',
+  'targetKind',
+  'expected',
+  'measured',
+  'activity',
+  'descendants',
+  'sessions',
+])
+
+/**
+ * Metrics snapshots are the only nested detail value the Host returns; keep
+ * only their numeric counters so no path can ride along.
+ *
+ * @param {unknown} value candidate metrics object.
+ * @returns {object | undefined} the numeric metrics.
+ */
+function sanitizeMetrics(value) {
+  if (value === null || typeof value !== 'object' || Array.isArray(value)) return undefined
+  const safe = {}
+  for (const key of ['sizeBytes', 'fileCount', 'symlinkCount']) {
+    if (typeof value[key] === 'number') safe[key] = value[key]
+  }
+  return Object.keys(safe).length === 0 ? undefined : safe
+}
+
+/**
+ * @param {unknown} details arbitrary structured context.
+ * @returns {object | undefined} the same context restricted to whitelisted keys.
+ */
+export function sanitizeDetails(details) {
+  if (details === null || typeof details !== 'object' || Array.isArray(details)) return undefined
+  const safe = {}
+  for (const [key, value] of Object.entries(details)) {
+    if (!SAFE_DETAIL_KEYS.has(key)) continue
+    if (key === 'expected' || key === 'measured') {
+      const metrics = sanitizeMetrics(value)
+      if (metrics !== undefined) safe[key] = metrics
+      continue
+    }
+    if (Array.isArray(value)) {
+      safe[key] = value.filter((item) => typeof item === 'string' || typeof item === 'number')
+      continue
+    }
+    if (value === null || ['string', 'number', 'boolean'].includes(typeof value)) safe[key] = value
+  }
+  return Object.keys(safe).length === 0 ? undefined : safe
+}
+
 /**
  * @param {unknown} error arbitrary thrown value.
  * @returns {{ code: string, message: string, details?: object }} the wire error shape.
  */
 export function toWireError(error) {
   if (error instanceof TrashError) {
+    const details = sanitizeDetails(error.details)
     return {
       code: error.code,
       message: error.message,
-      ...(error.details === undefined ? {} : { details: error.details }),
+      ...(details === undefined ? {} : { details }),
     }
   }
   const message = error instanceof Error ? error.message : String(error)

package/lib/fsops.js

@@ -294,6 +294,11 @@ export function metricsMatch(entry, measured) {
   if (entry === null || entry === undefined) return true
   if (typeof entry.sizeBytes === 'number' && entry.sizeBytes !== measured.sizeBytes) return false
   if (typeof entry.fileCount === 'number' && entry.fileCount !== measured.fileCount) return false
+  // A cross-device copy records the symlink count of the source; comparing it
+  // catches a symlink that the copy silently dropped.
+  if (typeof entry.symlinkCount === 'number' && typeof measured.symlinkCount === 'number' && entry.symlinkCount !== measured.symlinkCount) {
+    return false
+  }
   return true
 }
 
@@ -356,10 +361,12 @@ async function copyAcrossDevices(source, destination, expected, rename, copy) {
   try {
     await fs.rm(source, { recursive: true, force: false, maxRetries: 3, retryDelay: 100 })
   } catch (error) {
+    // The paths stay in the Host log; the wire error only carries the error
+    // code and the fact that a verified copy already exists.
     throw new TrashError(
       'IO_ERROR',
       'The session was copied to the destination, but the source could not be removed.',
-      { source, destination, code: errorCode(error) ?? null, copied: true },
+      { code: errorCode(error) ?? null, copied: true },
     )
   }
 }

package/lib/state.js

@@ -5,6 +5,34 @@ import { memberList } from './members.js'
 /** Maximum concurrent filesystem probes while describing entries. */
 const PROBE_CONCURRENCY = 3
 
+/**
+ * Known failure families recorded in `lastError`, in match order. The raw text
+ * stays an English diagnostic for logs and tooltips; the code is what the
+ * Client localizes.
+ */
+const LAST_ERROR_KINDS = [
+  [/^The trash copy of this session is missing\./, 'TRASH_COPY_MISSING'],
+  [/^The trash copy is missing these member sessions:/, 'TRASH_COPY_MISSING_MEMBERS'],
+  [/^The trash object directory is missing\./, 'TRASH_OBJECT_MISSING'],
+  [/^The session log could not be deleted:/, 'PURGE_FAILED'],
+  [/^The restored session (tree )?(is|was) not visible to session storage\./, 'RESTORE_INVISIBLE'],
+  [/^Session storage still reports the moved session tree/, 'MOVE_UNSETTLED'],
+  [/^An original session directory unexpectedly exists/, 'SOURCE_CONFLICT'],
+  [/^The trash index could not be committed/, 'INDEX_WRITE_FAILED'],
+]
+
+/**
+ * @param {unknown} message raw `lastError` text.
+ * @returns {string | null} a stable failure family, or null when none was recorded.
+ */
+export function lastErrorCode(message) {
+  if (typeof message !== 'string' || message === '') return null
+  for (const [pattern, code] of LAST_ERROR_KINDS) {
+    if (pattern.test(message)) return code
+  }
+  return 'IO_ERROR'
+}
+
 /**
  * @param {string | null | undefined} directory candidate workspace directory.
  * @returns {Promise<boolean>} whether the directory exists right now.
@@ -31,7 +59,14 @@ async function directoryExists(directory) {
  * }} deps state inputs.
  * @returns {{ snapshot: () => Promise<object>, describe: (entry: object) => Promise<object> }} the state service.
  */
-export function createStateService({ store, config, trashRootDisplay, nextSweepAt = () => null, cleanup }) {
+export function createStateService({
+  store,
+  config,
+  trashRootDisplay,
+  nextSweepAt = () => null,
+  cleanup,
+  directoryExists: probeDirectory = directoryExists,
+}) {
   /**
    * @returns {object} cleanup diagnostics, or a neutral fallback.
    */
@@ -58,11 +93,17 @@ export function createStateService({ store, config, trashRootDisplay, nextSweepA
 
   /**
    * @param {object} entry committed index entry.
+   * @param {Map<string, Promise<boolean>>} [probeCache] workspace probes already
+   *   started for this snapshot, so entries sharing a cwd probe it once.
    * @returns {Promise<object>} the wire entry.
    */
-  async function describeEntry(entry) {
+  async function describeEntry(entry, probeCache = new Map()) {
     const cwd = typeof entry.originalCwd === 'string' && entry.originalCwd !== '' ? entry.originalCwd : null
-    const workspaceNowExists = cwd === null ? null : await directoryExists(cwd)
+    let workspaceNowExists = null
+    if (cwd !== null) {
+      if (!probeCache.has(cwd)) probeCache.set(cwd, probeDirectory(cwd))
+      workspaceNowExists = await probeCache.get(cwd)
+    }
     const expiresAt =
       typeof entry.trashedAt === 'number' && entry.trashedAt > 0 ? entry.trashedAt + config.retentionDays * 86_400_000 : null
     const trashed = entry.state === 'trashed'
@@ -85,6 +126,7 @@ export function createStateService({ store, config, trashRootDisplay, nextSweepA
       canForget: entry.state === 'missing',
       requiresOrphanRestore: cwd !== null && workspaceNowExists === false,
       lastError: entry.lastError ?? null,
+      lastErrorCode: lastErrorCode(entry.lastError),
       subagentCount: Math.max(0, members.length - 1),
       members: members.map((member) => ({
         sessionId: member.sessionId,
@@ -104,7 +146,8 @@ export function createStateService({ store, config, trashRootDisplay, nextSweepA
      * @returns {Promise<object>} the complete `/state` response body.
      */
     async snapshot() {
-      const entries = await mapLimit(store.entries(), PROBE_CONCURRENCY, (entry) => describeEntry(entry))
+      const probeCache = new Map()
+      const entries = await mapLimit(store.entries(), PROBE_CONCURRENCY, (entry) => describeEntry(entry, probeCache))
       let totalBytes = 0
       let failedEntries = 0
       for (const entry of entries) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wangxiaocuo/dsh-session-trash",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "description": "DeepSeek Harness plugin: move cold sessions into a recoverable trash, restore them within the retention window, or delete their logs permanently.",
   "license": "MIT",
   "author": "wangxiaocuo",
@@ -40,7 +40,8 @@
     "locale/*.json",
     "icon.svg",
     "README.md",
-    "README.en.md"
+    "README.en.md",
+    "CHANGELOG.md"
   ],
   "scripts": {
     "test": "node test/run-unit.mjs",