dsh-claude-style 0.9.0 → 0.9.1

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to `dsh-claude-style` are documented here, newest first.
 
+## [0.9.1] - 2026-09-27
+
+[中文](#cn-0.9.1) | [English](#en-0.9.1)
+
+<h3 id="cn-0.9.1">问题修复</h3>
+
+- 修复 **已归档列表里的会话删不掉**：点「删除」后宿主半边只删存储目录、不动归档记录，存储目录已经不在的会话更是直接被拒——列表那一行永远留着，重载页面后还在。现在删除成功时宿主半边在同一请求里把该会话从归档集合里移除；归档集合里存储目录已消失的条目（幽灵）也按删除成功处理并移出归档集合，浏览器随即重拉一次会话列表基线，已删除的会话不会再靠旧摘要顶在已归档列表或会话树里。旧版宿主半边对目录缺失的会话回 404 时，浏览器同样移除该行。
+
+<h3 id="en-0.9.1">Bug Fixes</h3>
+
+- **Fixed archived sessions refusing to disappear when deleted**: the delete button removed the stored directory while the archive record kept the id, and a session whose directory was already gone was refused outright — the row stayed on the list and survived a page reload. A successful delete now also drops the session from the archive set in the same request, an archive entry whose stored directory has vanished is answered as deleted and leaves the set, and the browser re-pulls the session baseline right after, so a deleted session no longer lingers on the archived list or in the session tree on a stale summary. Against an older host half that still answers 404 for a missing directory, the browser removes the row just the same.
+
+**Full Changelog**: [v0.9.0...v0.9.1](https://github.com/Nwflower/dsh-claude-style/compare/v0.9.0...v0.9.1)
+
 ## [0.9.0] - 2026-09-26
 
 [中文](#cn-0.9.0) | [English](#en-0.9.0)

package/docs/architecture.md

@@ -99,7 +99,7 @@
 
 - **决定**：
   - 宿主半边的私有路由（`/username`、`/usage`、`/session-search`、`/hdsl`、`/hdsl-skin.png`、`POST /session-delete`）处理前先调 `connection.requestRejection(req)`，拒绝即回 401/403；宿主没有该服务时，插件自带的替身只放行回环请求（回环 Host、无跨站标记、Origin 与 Host 一致）。模型文案与字体是公开的静态资产。
-  - 删除会话另加四道：只接受 POST；id 必须符合宿主的会话 id 格式；正在打开的会话拒绝；目录解析后必须留在会话根目录内。删除发生在宿主半边，浏览器只提交一个 id。
+  - 删除会话另加四道：只接受 POST；id 必须符合宿主的会话 id 格式；正在打开的会话拒绝；目录解析后必须留在会话根目录内。删除发生在宿主半边，浏览器只提交一个 id。删除成功时宿主半边同时经 `workspaceRegistry.unarchiveSession` 把该 id 从归档集合里移除；归档集合里存储目录已消失的条目（幽灵）同样按删除成功应答并移出归档集合，否则归档列表会一直留着这行。会话根目录读不了是故障，按 500 应答。
   - 用量汇总只读：第三方插件的账本只读不写，自己的缓存放在 `$DSH_HOME/cache/dsh-claude-style/`。
   - 客户端：来自设置、账号服务、系统或其他插件的字符串只用 `textContent` 或元素属性写入；图标复制节点，不重新解析标记。
 - **理由**：插件路由不在宿主自己的栅栏之内；`dsh web` 绑定 `0.0.0.0` 时局域网可直接访问，而页面能驱动执行 shell 命令的智能体。
@@ -195,7 +195,7 @@
 
 ## D21. 已归档列表跟随宿主的两份客户端数据
 
-- **决定**：侧栏「已归档」是插件自己的平铺列表，订阅宿主 `workspaces.list`（归档集合）与 `sessions.list`（标题、时间、来源），两者都就绪后按宿主「仅已归档」的规则重算：只收已有会话摘要、非子代理、非空白占位的归档会话，按更新时间排序，内容不变时不重建。宿主自带的筛选状态存在 ui-workspace 私有的视图 store 里，不是客户端服务，只能靠点它的菜单改，因此不用。取消归档走 `workspaces.unarchiveSession`；删除走宿主半边的私有路由（D11），失败记录警告。点击已归档行显示宿主的同一条提示：用宿主的 Toast 组件与 `workspace` 文案表里的 `toast.archivedNotOpenable`（宿主的提示通道是私有的）。
+- **决定**：侧栏「已归档」是插件自己的平铺列表，订阅宿主 `workspaces.list`（归档集合）与 `sessions.list`（标题、时间、来源），两者都就绪后按宿主「仅已归档」的规则重算：只收已有会话摘要、非子代理、非空白占位的归档会话，按更新时间排序，内容不变时不重建。宿主自带的筛选状态存在 ui-workspace 私有的视图 store 里，不是客户端服务，只能靠点它的菜单改，因此不用。取消归档走 `workspaces.unarchiveSession`；删除走宿主半边的私有路由（D11），宿主半边在删除目录的同时把 id 移出归档集合，浏览器删除成功后重拉一次会话列表基线，让已删除会话的旧摘要立刻离开投影、不再顶着会话树里的行；其余失败记录警告。点击已归档行显示宿主的同一条提示：用宿主的 Toast 组件与 `workspace` 文案表里的 `toast.archivedNotOpenable`（宿主的提示通道是私有的）。
 - **代价**：宿主「仅已归档」的规则变化时需要同步。
 - **重审条件**：宿主把视图筛选或提示通道开放为客户端服务时改用宿主的。
 

package/host/index.js

@@ -91,7 +91,10 @@ const HDSL_LAYERS = ['process', 'user-env']
  * controller archives and unarchives, and the agent protocol's session delete is
  * the host delegating to an ACP agent that owns the storage. The archived row's
  * delete button therefore comes here, where the stored session directory under
- * the harness home can be removed. The path is also spelled in
+ * the harness home is removed and the id is dropped from the workspace
+ * registry's archive set — the stored-directory miss included, so an archive
+ * entry whose storage is already gone leaves the set instead of pinning its
+ * row to the list. The path is also spelled in
  * src/constants.js (SESSION_DELETE_ROUTE) for the browser half; keep the two in
  * step.
  */
@@ -451,13 +454,37 @@ function readRequestBody(req, limit) {
   })
 }
 
+/**
+ * Drop one id from the workspace registry's archive set, durably.
+ *
+ * The registry is read at request time: it mounts with the workspace domain and
+ * can complete after this plugin. A host without one has no archive set to
+ * update — and no archived list to delete from — while a failing unarchive
+ * propagates: the route answers 500, the row stays, and the next delete
+ * retries through the miss branch.
+ */
+async function unarchiveSession(ctx, sessionId) {
+  const registry = ctx.get?.('workspaceRegistry')
+  if (typeof registry?.unarchiveSession !== 'function') return
+  await registry.unarchiveSession(sessionId)
+}
+
 /**
  * Delete one stored session: the directory named by the id under one of the
- * sessions root's working-directory directories.
+ * sessions root's working-directory directories, and the id's entry in the
+ * workspace registry's archive set.
  *
  * The id never reaches a path unchecked — it must match the harness's own
  * shape, the lookup is by exact name, and the resolved directory must stay
  * inside the sessions root.
+ *
+ * The archive set can name a session whose stored directory is already gone —
+ * an earlier removal took the directory while the registry entry stayed, and
+ * the stale session summary keeps its row on the archived list. The miss
+ * answers success too: the registry's unarchive runs no existence check and
+ * resolves without writing for an id that is not archived, so the entry leaves
+ * the set either way and the row is gone for good instead of coming back on
+ * the next reload.
  */
 async function deleteSession(ctx, req, res) {
   const refused = refusalOf(ctx, req)
@@ -483,34 +510,41 @@ async function deleteSession(ctx, req, res) {
   }
   const root = resolve(sessionsRoot(ctx))
   let dir = null
-  try {
-    for (const entry of readdirSync(root)) {
-      const candidate = join(root, entry, sessionId)
-      let stat
-      try {
-        stat = statSync(candidate)
-      } catch {
-        continue
-      }
-      if (stat.isDirectory()) {
-        dir = candidate
-        break
-      }
+  // The root listing is the storage's own answer, so a failure there is a
+  // fault and propagates to the route's 500 answer; a candidate that stats as
+  // absent is the OS's "not under this entry" — the expected state the scan
+  // moves past.
+  for (const entry of readdirSync(root)) {
+    const candidate = join(root, entry, sessionId)
+    let stat
+    try {
+      stat = statSync(candidate)
+    } catch {
+      continue
     }
-  } catch {
-    dir = null
+    if (stat.isDirectory()) {
+      dir = candidate
+      break
+    }
+  }
+  if (dir === null) {
+    await unarchiveSession(ctx, sessionId)
+    sendJson(res, 200, { ok: true, ghost: true })
+    return
   }
-  if (dir === null || !resolve(dir).startsWith(root + sep)) {
-    sendJson(res, 404, { ok: false, error: 'session not found' })
+  if (!resolve(dir).startsWith(root + sep)) {
+    sendJson(res, 403, { ok: false, error: 'session directory outside the sessions root' })
     return
   }
   try {
     rmSync(dir, { recursive: true, force: true })
   } catch (error) {
+    // A storage fault answers 500 with the OS error — nothing is swallowed.
     sendJson(res, 500, { ok: false, error: String(error?.message ?? error) })
     return
   }
-  sendJson(res, 200, { ok: true })
+  await unarchiveSession(ctx, sessionId)
+  sendJson(res, 200, { ok: true, ghost: false })
 }
 
 /**

package/lib/client.js

@@ -363,8 +363,8 @@ window.__ModuleLoader__.load({
      * The host half's session-deletion route (host/index.js, SESSION_DELETE_PATH).
      * The harness gives the browser half no deletion API of its own, so the
      * archived row's delete button posts the session id here and the host half
-     * removes the stored session directory. Keep the path in step with the host
-     * half.
+     * removes the stored session directory and the id's entry in the workspace
+     * registry's archive set. Keep the path in step with the host half.
      */
     const SESSION_DELETE_ROUTE = '/dsh-claude-style/session-delete'
     /**
@@ -6773,7 +6773,7 @@ window.__ModuleLoader__.load({
     // ============================================================================
     // 构建编号（由 scripts/build.mjs 按产物内容生成） (Build id)
     // ============================================================================
-    var BUILD_ID = '64a08929e6f1'
+    var BUILD_ID = 'ba446e3d486b'
 
     /**
      * The host's access-mode trigger: the button its permission slot renders.
@@ -14393,7 +14393,7 @@ window.__ModuleLoader__.load({
       let items = null
       /** Ids, titles and times of the rows on screen, joined; a list tick that changes none of them leaves the rows alone. */
       let renderedKey
-      /** Rows deleted through the host half: the archive set keeps their ids until the host forgets them. */
+      /** Rows deleted through the host half, hidden while the host's two lists catch up. */
       const deletedIds = {}
       /**
        * The host's workspace and session services, once both are reachable;
@@ -14527,9 +14527,14 @@ window.__ModuleLoader__.load({
        * The harness gives the browser half no deletion API of its own (the
        * workspace controller archives and unarchives; the agent protocol's
        * session delete is the host delegating to an ACP agent that owns the
-       * storage), so the skin's host half removes the session's stored directory
-       * and answers here. The row stays on a refusal — the host refuses a live
-       * session — and the refusal is logged the way an unarchive refusal is.
+       * storage), so the skin's host half removes the session's stored
+       * directory and drops the id from the registry's archive set before it
+       * answers. A stored-directory miss answers success too — an archive
+       * entry whose directory is already gone is the ghost this buries — and
+       * a 404 that still carries the host's own "session not found" JSON is
+       * the same miss from an older host half without that branch: the storage
+       * is gone all the same, so the row leaves too. Every other refusal keeps
+       * the row, logged the way an unarchive refusal is.
        */
       function removeArchived(id) {
         fetch(SESSION_DELETE_ROUTE, {
@@ -14537,15 +14542,36 @@ window.__ModuleLoader__.load({
           credentials: 'same-origin',
           headers: { 'content-type': 'application/json' },
           body: JSON.stringify({ sessionId: id }),
-        }).then(response => response.json()).then(result => {
-          if (result.ok !== true) throw new Error(result.error || 'refused')
-          deletedIds[id] = true
-          refreshItems()
+        }).then(response => response.json().then(result => ({ status: response.status, result }))).then(({ status, result }) => {
+          if (result?.ok === true || (status === 404 && result?.error === 'session not found')) {
+            deletedIds[id] = true
+            refreshItems()
+            refreshSessions()
+            return
+          }
+          throw new Error(result?.error || `HTTP ${status}`)
         }).catch(reason => {
           console.warn('dsh-claude-style: session delete rejected:', reason)
         })
       }
 
+      /**
+       * Re-pull the host's session baseline right after a delete.
+       *
+       * The full list is what the projection prunes by: the host's fresh list
+       * answer no longer carries the removed id, so its stale summary — the
+       * one that kept a deleted session looking alive — leaves `sessions.list`
+       * at this pull instead of at the next reconnect, and the host's own tree
+       * drops the row with it. The pull is the sessions service's single-flight
+       * refresh, so a pull already under way is reused.
+       */
+      function refreshSessions() {
+        if (typeof sessions?.refresh !== 'function') return
+        sessions.refresh().catch(reason => {
+          console.warn('dsh-claude-style: session baseline refresh rejected:', reason)
+        })
+      }
+
       /**
        * Put a conversation back among the live ones. The row leaves this list
        * on the archive set's next tick; a refusal leaves it in place.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-claude-style",
   "description": "Claude Code Desktop theme for DeepSeek Harness (dsh) web GUI — visual & interaction overhaul",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "type": "module",
   "main": "host/index.js",
   "icon": "lib/claude-mark.svg",