dsh-archived-chats 1.0.4 → 1.0.6

package/README.md

@@ -116,7 +116,11 @@ The eight fixed screenshots below come from an isolated Simplified Chinese light
 | Architecture | [Maintainer architecture](docs/ARCHITECTURE.en.md) | [维护者架构](docs/ARCHITECTURE.md) |
 | Release history | [GitHub Releases](https://github.com/Ultronen/dsh-archived-chats/releases) | [GitHub Releases](https://github.com/Ultronen/dsh-archived-chats/releases) |
 
-See also [Security](SECURITY.md), [Contributing](CONTRIBUTING.md), and [Discussions](https://github.com/Ultronen/dsh-archived-chats/discussions).
+See also [Support](SUPPORT.md), [Security](SECURITY.md), [Contributing](CONTRIBUTING.md), [Code of Conduct](CODE_OF_CONDUCT.md), and [Discussions](https://github.com/Ultronen/dsh-archived-chats/discussions).
+
+## Project status
+
+Session Archive is actively maintained. The latest stable npm release receives fixes and security updates; older releases should be upgraded before reporting a problem. Reproducible bug reports and focused pull requests are welcome. Maintenance is performed as availability permits, so no fixed response or release schedule is promised.
 
 ## Development
 

package/README.zh-CN.md

@@ -116,7 +116,11 @@ dsh plugin --profile web update dsh-archived-chats
 | 架构说明 | [Maintainer architecture](docs/ARCHITECTURE.en.md) | [维护者架构](docs/ARCHITECTURE.md) |
 | 版本历史 | [GitHub Releases](https://github.com/Ultronen/dsh-archived-chats/releases) | [GitHub Releases](https://github.com/Ultronen/dsh-archived-chats/releases) |
 
-另见 [安全说明](SECURITY.md)、[贡献指南](CONTRIBUTING.md)和[问题交流](https://github.com/Ultronen/dsh-archived-chats/discussions)。
+另见 [支持说明](SUPPORT.md)、[安全说明](SECURITY.md)、[贡献指南](CONTRIBUTING.md)、[行为准则](CODE_OF_CONDUCT.md)和[问题交流](https://github.com/Ultronen/dsh-archived-chats/discussions)。
+
+## 项目状态
+
+Session Archive 目前处于积极维护状态。最新 npm 稳定版会接收缺陷修复与安全更新；报告问题前请先从旧版本升级。欢迎可复现的缺陷报告和目标集中的 Pull Request。项目按维护者的可用时间推进，不承诺固定响应或发布时间。
 
 ## 开发
 

package/docs/ARCHITECTURE.en.md

@@ -68,7 +68,7 @@ Metadata and recycle catalogs are versioned. Writes serialize and atomically rep
 
 The stats route measures session directories with concurrency four, skips symbolic links, and caches results for 30 seconds. A measurement failure marks only that row unavailable; list and mutation actions continue. Delete invalidates the affected cache row.
 
-Insights joins session measurement with a stream-verified snapshot inventory and counts repeated snapshot attachments only from validated SHA-256 descriptors. The browser keeps totals in summary cards and presents session/snapshot inventories only in bounded searchable dialogs. retention.json uses an exact version-one schema; saving never runs cleanup. Preview issues a five-minute single-use token/nonce and apply revalidates inside the lifecycle queue; recycle candidates still delegate to recycle purge. Lineage uses only durable parentSession edges, caps real nodes at 5,000, never rewrites headers, and resolves titles for at most 100 untitled active source nodes already included in the focused tree.
+Insights joins session measurement with a stream-verified snapshot inventory and counts repeated snapshot attachments only from validated SHA-256 descriptors. The browser keeps totals in summary cards and presents session/snapshot inventories only in bounded searchable dialogs. retention.json uses an exact version-one schema; saving never runs cleanup. Preview issues a five-minute single-use token/nonce and apply revalidates inside the lifecycle queue; recycle candidates still delegate to recycle purge. Lineage uses only durable parentSession edges, never rewrites headers, and resolves titles for at most 100 untitled active source nodes already included in the focused tree. Its 5,000-node cap bounds the PROJECTED graph, not the Host's store: `focusIds` narrows the output to archived and recycled chats plus their explaining context, so a store of 100,000 sessions with 25 archived projects 25 nodes. Header fields are coerced per node rather than validated whole-graph — an unanticipated `origin` value, an absent `createdAt`, a changed numeric type each degrade that node to a value the public LineageNode already allows, and only an unusable identity drops a row. A projection that rejected the whole graph for one unrecognized header let a Host-side change disable the panel with no plugin change at all; malformed workspace and recycle entries are skipped for the same reason.
 
 ## Preview and full-text search
 

package/docs/ARCHITECTURE.md

@@ -68,7 +68,7 @@ $DSH_HOME/plugin-data/archived-chats/snapshots/
 
 stats 路由以并发 4 测量会话目录，跳过符号链接，结果缓存 30 秒。测量失败只标记当前行不可用，不阻塞列表和其他操作；删除会使对应缓存失效。
 
-insights 将会话目录测量与流式校验的快照清单分账，重复附件只按快照内已验证 SHA-256 统计；浏览器只在摘要卡片中显示总量，会话目录和快照明细通过有界、可搜索弹窗按需呈现。retention.json 使用精确 version 1 schema；保存策略不执行清理。preview 生成五分钟、单次使用的 token/nonce，apply 在生命周期队列内重检候选，回收站候选仍委托 recycle purge。lineage 只用持久化 parentSession 建树，最多 5,000 个真实节点，不修改会话头；对已经进入聚焦关系树但没有安全标题的活动来源节点，最多按需读取 100 个标题事件。
+insights 将会话目录测量与流式校验的快照清单分账，重复附件只按快照内已验证 SHA-256 统计；浏览器只在摘要卡片中显示总量，会话目录和快照明细通过有界、可搜索弹窗按需呈现。retention.json 使用精确 version 1 schema；保存策略不执行清理。preview 生成五分钟、单次使用的 token/nonce，apply 在生命周期队列内重检候选，回收站候选仍委托 recycle purge。lineage 只用持久化 parentSession 建树，不修改会话头；对已经进入聚焦关系树但没有安全标题的活动来源节点，最多按需读取 100 个标题事件。其 5,000 节点上限约束的是**实际投影出的**关系图，而不是 Host 的会话库：`focusIds` 已把输出收窄为归档与回收聊天加上解释它们所需的上下文，因此 100,000 个会话、25 条归档只投影 25 个节点。会话头字段按节点逐项收敛而不是整图校验——未预期的 `origin` 取值、缺失的 `createdAt`、变化的数值类型，各自只把该节点降级为公开 LineageNode 已允许的取值，只有身份不可用才丢弃该行。为一个不认识的会话头拒绝整张图，会让 Host 侧的变化在插件毫无改动的情况下直接停用该面板；畸形的工作区与回收记录出于同样理由被跳过。
 
 ## 预览和全文搜索
 

package/lib/index.js

@@ -518,7 +518,10 @@ async function resolveLineageContextTitles(graph, persistence) {
  * Delete and unarchive invalidate their ids.
  */
 async function listArchived(ctx, registry, persistence, titleCache, metadataStore, pendingStore, trashStore) {
-    const archivedIds = registry.archivedSessionIds.map(String);
+    // The archive set is Host state. A repeated id there is meaningless to every
+    // consumer here, and would otherwise list one chat twice or fail a reader
+    // that treats its own row set as unique.
+    const archivedIds = [...new Set(registry.archivedSessionIds.map(String))];
     if (archivedIds.length === 0) {
         const metadata = await metadataStore.getMany([]);
         const trash = await trashStore.load();
@@ -818,7 +821,7 @@ function registerRoutes(ctx, webServer, registry, persistence, titleCache, metad
         try { headers = await persistence.list(); } catch { /* Rows remain measurable as unavailable. */ }
         const headerById = new Map((Array.isArray(headers) ? headers : []).map((header) => [String(header.id), header]));
         const workspaces = registry.list();
-        return registry.archivedSessionIds.map(String).filter((id) => !pending.has(id)).map((id) => {
+        return [...new Set(registry.archivedSessionIds.map(String))].filter((id) => !pending.has(id)).map((id) => {
             const record = trash.records.get(id);
             const header = headerById.get(id) ?? ctx.get('sessions')?.get(id)?.header;
             const workspace = record?.workspace ?? workspaces.find((item) => workspaceSessionIds(item).includes(id));
@@ -1373,7 +1376,14 @@ function registerRoutes(ctx, webServer, registry, persistence, titleCache, metad
                     res.destroy?.();
                     return;
                 }
-                const status = error.status ?? (error instanceof SyntaxError || error instanceof TypeError ? 400 : 500);
+                // Selection parsing attaches its own 400/413, so anything arriving
+                // without a status is an internal failure. Reporting those as
+                // `invalid-export-request` blamed the caller for a bug here and
+                // left nothing in the log to diagnose it.
+                const status = error.status ?? 500;
+                if (status >= 500) {
+                    ctx.logger.warn(`archived-chats: export failed: ${String(error?.code ?? error?.name ?? 'Error')}`);
+                }
                 sendText(res, status, status === 413
                     ? 'request-too-large'
                     : (status === 400 ? 'invalid-export-request' : 'export-failed'));

package/lib/lineage.js

@@ -65,13 +65,25 @@ export function projectLineage({
     || !(trashRecords instanceof Map) || !(titles instanceof Map) || !Array.isArray(workspaces)
     || (focusIds !== undefined && (!Array.isArray(focusIds)
       || focusIds.some((id) => typeof id !== 'string' || id === '')))) throw invalid();
-  if (headers.length > maxNodes) throw new LineageError('lineage-limit-exceeded', 'lineage exceeds the node limit', 413);
+
+  /**
+   * The node limit bounds the graph this projection RETURNS, not how many
+   * sessions the Host happens to store. `focusIds` already narrows the output to
+   * the archived and recycled chats plus the context that explains them, so a
+   * store of 100,000 sessions with 25 archived projects 25 nodes. Counting the
+   * input instead refused that outright, and the measured cost of the wide input
+   * it was guarding against is milliseconds.
+   */
+  const withinLimit = (count) => {
+    if (count > maxNodes) throw new LineageError('lineage-limit-exceeded', 'lineage exceeds the node limit', 413);
+    return count;
+  };
 
   const archived = new Set((Array.isArray(archivedIds) ? archivedIds : []).map(String));
   const trashed = new Set([...trashRecords.keys()].map(String));
   const workspaceBySession = new Map();
   for (const workspace of workspaces) {
-    if (workspace === null || typeof workspace !== 'object') throw invalid();
+    if (workspace === null || typeof workspace !== 'object') continue;
     const safe = {
       id: typeof workspace.id === 'string' ? workspace.id : null,
       title: typeof workspace.title === 'string' ? workspace.title : null,
@@ -82,25 +94,24 @@ export function projectLineage({
   const nodes = new Map();
   const order = [];
   for (const header of headers) {
-    if (header === null || typeof header !== 'object' || Array.isArray(header)
-      || typeof header.id !== 'string' || header.id === '' || nodes.has(header.id)
-      || !Number.isSafeInteger(header.createdAt) || header.createdAt < 0
-      || (header.parentSession !== undefined && (typeof header.parentSession !== 'string' || header.parentSession === ''))
-      || (header.seedLength !== undefined && (!Number.isSafeInteger(header.seedLength) || header.seedLength < 0))
-      || (header.origin !== undefined && header.origin !== 'subagent')
-      || (header.delegationDepth !== undefined && (!Number.isSafeInteger(header.delegationDepth) || header.delegationDepth < 0))) {
-      throw invalid();
-    }
+    // Headers are the Host's data, so every field here is a forward-compatibility
+    // surface: a new `origin` value, an absent timestamp, a changed numeric type.
+    // Each one degrades that single node's detail to a value the public
+    // LineageNode already allows. Only an unusable identity drops the row, and a
+    // duplicate id keeps the first. One unrecognized session must never cost the
+    // whole graph — this projection was the only surface that failed that way.
+    if (header === null || typeof header !== 'object' || Array.isArray(header)) continue;
+    if (typeof header.id !== 'string' || header.id === '' || nodes.has(header.id)) continue;
     const id = header.id;
     const cachedTitle = titles.get(id);
     const node = {
       id,
-      parentSession: header.parentSession ?? null,
-      seedLength: header.seedLength ?? null,
-      origin: header.origin ?? null,
-      delegationDepth: header.delegationDepth ?? 0,
+      parentSession: typeof header.parentSession === 'string' && header.parentSession !== '' ? header.parentSession : null,
+      seedLength: Number.isSafeInteger(header.seedLength) && header.seedLength >= 0 ? header.seedLength : null,
+      origin: header.origin === 'subagent' ? 'subagent' : null,
+      delegationDepth: Number.isSafeInteger(header.delegationDepth) && header.delegationDepth >= 0 ? header.delegationDepth : 0,
       title: typeof cachedTitle === 'string' ? cachedTitle : (typeof header.title === 'string' ? header.title : null),
-      createdAt: header.createdAt,
+      createdAt: Number.isSafeInteger(header.createdAt) && header.createdAt >= 0 ? header.createdAt : null,
       workspace: { ...(workspaceBySession.get(id) ?? { id: null, title: null }) },
       status: trashed.has(id) ? 'trash' : archived.has(id) ? 'archived' : 'active',
       children: [],
@@ -112,8 +123,7 @@ export function projectLineage({
   for (const [key, record] of trashRecords) {
     const id = String(key);
     if (nodes.has(id)) continue;
-    if (record === null || typeof record !== 'object' || String(record.sessionId) !== id) throw invalid();
-    if (nodes.size >= maxNodes) throw new LineageError('lineage-limit-exceeded', 'lineage exceeds the node limit', 413);
+    if (record === null || typeof record !== 'object' || String(record.sessionId) !== id) continue;
     const workspace = record.workspace;
     nodes.set(id, {
       id,
@@ -232,6 +242,7 @@ export function projectLineage({
         current = parent;
       }
     }
+    withinLimit(included.size);
     return {
       roots: cloneForest(roots, included),
       diagnostics: diagnostics.filter((item) => included.has(item.sessionId)).map((item) => ({ ...item })),
@@ -239,6 +250,7 @@ export function projectLineage({
     };
   }
 
+  withinLimit(nodes.size + missingNodes.size);
   return {
     roots: cloneForest(roots),
     diagnostics: diagnostics.map((item) => ({ ...item })),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-archived-chats",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "description": "DeepSeek Harness 会话档案：按工作区浏览和全文搜索归档聊天，原生只读预览对话、工具活动和已存储图片，管理标签备注与 ZIP 备份恢复；保留历史版本并恢复为副本，提供可撤销回收站、空间分账、保留策略和来源与分支。所有数据留在本机。 Session Archive for DeepSeek Harness: browse and full-text search archived chats; natively preview conversations, tool activity, and stored images read-only; manage tags, notes, and ZIP backup restore; retain local History with restore-as-copy, an undoable Recycle Bin, storage accounting, retention policies, and Origins & Branches. All data stays local.",
   "license": "MIT",
   "author": "Ultronen",
@@ -77,6 +77,9 @@
     "cordis.patch.yml"
   ],
   "dsh": {
+    "engines": {
+      "dsh": ">=0.1.0-rc.7"
+    },
     "bundle": {
       "patch": "./cordis.patch.yml"
     },