dsh-conversation-recycle-bin 0.3.11 → 0.3.13

package/lib/host/paths.js

@@ -9,8 +9,12 @@
  * Session directories are discovered by scanning `<DSH_HOME>/sessions/<slug>/`
  * instead of re-implementing the slug encoding: the slug is a Host implementation
  * detail, while the session id directory name is part of the durable identity.
+ * The same encoding is reconstructed only by crash recovery (`recoverSessionLog`
+ * in `host/api.js`), where the moved log header is the sole remaining source of
+ * its original cwd and there is no directory left to scan.
  */
-import { cp, mkdir, readdir, readFile, rename, rm, stat } from 'node:fs/promises'
+import { createReadStream } from 'node:fs'
+import { cp, mkdir, open, readdir, readFile, rename, rm, stat } from 'node:fs/promises'
 import { homedir } from 'node:os'
 import { dirname, join, resolve } from 'node:path'
 
@@ -62,6 +66,137 @@ export function decodeSessionSegment(name) {
   return String(name).replace(/~([0-9A-Fa-f]{4})/g, (_, hex) => String.fromCharCode(Number.parseInt(hex, 16)))
 }
 
+/**
+ * The Host's project-directory key for a session cwd.
+ *
+ * Recovery needs the exact directory a moved log came from, and the log itself
+ * is the only place its cwd still exists. This mirrors
+ * `@deepseek-ai/dsh-session-persistence-jsonl`'s `projectKey` (separators and
+ * drive colons become `-`, unsafe code units escape as `~XXXX`, bounded to
+ * 251 chars) so a reconstructed path is byte-identical to the original one.
+ */
+export function projectKey(cwd) {
+  if (typeof cwd !== 'string' || cwd.length === 0) throw new Error('cannot encode an empty project path')
+  let readable = ''
+  let separatorRun = false
+  for (let i = 0; i < cwd.length; i += 1) {
+    const code = cwd.charCodeAt(i)
+    const ch = String.fromCharCode(code)
+    if (ch === '/' || ch === '\\' || ch === ':') {
+      if (!separatorRun) readable += '-'
+      separatorRun = true
+    } else if (ch !== '~' && /^[A-Za-z0-9._-]$/.test(ch)) {
+      readable += ch
+      separatorRun = false
+    } else {
+      readable += `~${code.toString(16).toUpperCase().padStart(4, '0')}`
+      separatorRun = false
+    }
+  }
+  return `--${(readable.replace(/^-+/, '') || 'root').slice(0, 251)}--`
+}
+
+/** The Host's path encoding for one session id; ids normally need no escaping. */
+export function encodeSessionSegment(sessionId) {
+  const raw = String(sessionId ?? '')
+  if (raw.length === 0) throw new Error('cannot encode an empty session id')
+  if (raw === '.') return '~002E'
+  if (raw === '..') return '~002E~002E'
+  let out = ''
+  for (let i = 0; i < raw.length; i += 1) {
+    const code = raw.charCodeAt(i)
+    const ch = String.fromCharCode(code)
+    if (ch !== '~' && /^[A-Za-z0-9._-]$/.test(ch)) out += ch
+    else out += `~${code.toString(16).toUpperCase().padStart(4, '0')}`
+  }
+  return out
+}
+
+const SESSION_HEADER_BYTE_LIMIT = 256 * 1024
+
+/** Read the first line of a plain `.jsonl` log without loading the whole file. */
+async function readFirstLine(file) {
+  let handle
+  try {
+    handle = await open(file, 'r')
+    const buffer = Buffer.alloc(64 * 1024)
+    const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0)
+    const text = buffer.subarray(0, bytesRead).toString('utf8')
+    const newline = text.indexOf('\n')
+    return newline === -1 ? text : text.slice(0, newline)
+  } finally {
+    await handle?.close().catch(() => {})
+  }
+}
+
+/**
+ * Read the first line of a zstd-compressed log, stopping after the header.
+ *
+ * `node:zlib` only gained zstd in Node 22.15; this package declares Node >=20,
+ * so the codec is loaded lazily and an older runtime simply fails recovery
+ * (the caller keeps refusing) instead of failing to import the plugin.
+ */
+async function readZstdFirstLine(file) {
+  const zlib = await import('node:zlib')
+  const createDecoder = zlib.createZstdDecompress
+  if (typeof createDecoder !== 'function') throw new Error('zstd decompression is unavailable on this Node runtime')
+  return new Promise((resolve, reject) => {
+    const decoder = createDecoder()
+    const input = createReadStream(file)
+    let text = ''
+    let settled = false
+    const finish = (error, value) => {
+      if (settled) return
+      settled = true
+      input.destroy()
+      decoder.destroy()
+      if (error !== undefined) reject(error)
+      else resolve(value)
+    }
+    input.on('error', (error) => finish(error))
+    decoder.on('error', (error) => finish(error))
+    decoder.on('data', (chunk) => {
+      text += chunk.toString('utf8')
+      const newline = text.indexOf('\n')
+      if (newline !== -1) finish(undefined, text.slice(0, newline))
+      else if (text.length > SESSION_HEADER_BYTE_LIMIT) finish(new Error('session header is too large'))
+    })
+    decoder.on('end', () => finish(undefined, text.split('\n')[0]))
+    input.pipe(decoder)
+  })
+}
+
+/**
+ * The `cwd` recorded in a session log's first header line, or null when the
+ * directory has no readable log. Used only to reconstruct the original path of
+ * a log a crashed hard delete already moved into the recycle bin.
+ */
+export async function readSessionLogCwd(sessionDir) {
+  let names = []
+  try {
+    names = (await readdir(sessionDir)).filter((name) => /\.jsonl(?:\.zstd)?$/u.test(name))
+  } catch {
+    return null
+  }
+  const ranked = names.sort((left, right) => {
+    const rank = (name) => (name.includes('v4') ? 0 : name.endsWith('.zstd') ? 1 : 2)
+    return rank(left) - rank(right)
+  })
+  for (const name of ranked) {
+    try {
+      const file = join(sessionDir, name)
+      const line = name.endsWith('.zstd') ? await readZstdFirstLine(file) : await readFirstLine(file)
+      const parsed = JSON.parse(line)
+      if (parsed !== null && typeof parsed === 'object' && typeof parsed.cwd === 'string' && parsed.cwd !== '') {
+        return parsed.cwd
+      }
+    } catch {
+      // Try the next generation/log file.
+    }
+  }
+  return null
+}
+
 /** Find `<sessionsRoot>/<slug>/<sessionId>`; null when the session has no log. */
 export async function findSessionDir(sessionsRoot, sessionId) {
   let dirents

package/lib/version.js

@@ -1,8 +1,8 @@
-/**
- * Single source of truth for the Host-reported plugin version.
- *
- * `package.json` stays authoritative for the package itself; this module is
- * asserted against it by `test/manifest.test.mjs` so the two can never drift
- * (they did: the constant stayed at 0.1.0 while the package reached 0.1.4).
- */
-export const PLUGIN_VERSION = '0.3.11'
+/**
+ * Single source of truth for the Host-reported plugin version.
+ *
+ * `package.json` stays authoritative for the package itself; this module is
+ * asserted against it by `test/manifest.test.mjs` so the two can never drift
+ * (they did: the constant stayed at 0.1.0 while the package reached 0.1.4).
+ */
+export const PLUGIN_VERSION = '0.3.13'

package/package.json

@@ -1,81 +1,81 @@
-{
-  "name": "dsh-conversation-recycle-bin",
-  "version": "0.3.11",
-  "description": "DSH conversation deletion with an optional, previewed cascade into conversation-associated memory: soft delete + recycle bin, audit trail, batch rate limits and per-session rollback. 删除对话（可选一并删除关联记忆）：软删除与回收站、审计留痕、批量限流、失败回滚。",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/HERO476/dsh-conversation-recycle-bin.git"
-  },
-  "homepage": "https://github.com/HERO476/dsh-conversation-recycle-bin#readme",
-  "bugs": {
-    "url": "https://github.com/HERO476/dsh-conversation-recycle-bin/issues"
-  },
-  "author": "HERO476",
-  "type": "module",
-  "main": "lib/index.js",
-  "exports": {
-    ".": "./lib/index.js",
-    "./client": "./client.js",
-    "./cordis.patch.yml": "./cordis.patch.yml",
-    "./package.json": "./package.json",
-    "./icon": "./icon.svg"
-  },
-  "files": [
-    "lib",
-    "client.js",
-    "cordis.patch.yml",
-    "config.schema.json",
-    "icon.svg",
-    "README.md",
-    "INSTALL.md",
-    "CHANGELOG.md",
-    "AUDIT-2026-10-17-desktop-web.md",
-    "LICENSE"
-  ],
-  "engines": {
-    "node": ">=20",
-    "dsh": ">=0.2.1-rc.2"
-  },
-  "optionalDependencies": {
-    "nodemailer": "^10.1.2"
-  },
-  "license": "MIT",
-  "keywords": [
-    "dsh",
-    "dsh-plugin",
-    "deepseek-harness",
-    "conversation",
-    "delete",
-    "session",
-    "memory",
-    "recycle-bin",
-    "audit"
-  ],
-  "icon": "./icon.svg",
-  "meta": {
-    "title": "删除对话",
-    "description": "删除对话并可选择一并删除该对话的关联记忆；支持软删除、回收站、审计、批量限流与失败回滚。"
-  },
-  "scripts": {
-    "test": "node test/manifest.test.mjs && node test/client-module.test.mjs && node test/core.test.mjs && node test/retention.test.mjs && node test/cascade.test.mjs && node test/memory.test.mjs && node test/trash-audit.test.mjs && node test/feedback.test.mjs && node test/api.test.mjs",
-    "check": "node scripts/check-syntax.mjs && node test/manifest.test.mjs"
-  },
-  "dsh": {
-    "manifestVersion": 1,
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "platform": "web",
-      "immediately": true,
-      "inject": [
-        "@deepseek-ai/dsh-client-locale",
-        "@deepseek-ai/dsh-client-connection",
-        "@deepseek-ai/dsh-client-ui-renderer",
-        "@deepseek-ai/dsh-client-ui-workspace",
-        "@deepseek-ai/dsh-client-ui-conversation",
-        "@deepseek-ai/dsh-client-ui-settings"
-      ]
-    }
-  }
-}
+{
+  "name": "dsh-conversation-recycle-bin",
+  "version": "0.3.13",
+  "description": "DSH conversation deletion with an optional, previewed cascade into conversation-associated memory: soft delete + recycle bin, audit trail, batch rate limits and per-session rollback. 删除对话（可选一并删除关联记忆）：软删除与回收站、审计留痕、批量限流、失败回滚。",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/HERO476/dsh-conversation-recycle-bin.git"
+  },
+  "homepage": "https://github.com/HERO476/dsh-conversation-recycle-bin#readme",
+  "bugs": {
+    "url": "https://github.com/HERO476/dsh-conversation-recycle-bin/issues"
+  },
+  "author": "HERO476",
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json",
+    "./icon": "./icon.svg"
+  },
+  "files": [
+    "lib",
+    "client.js",
+    "cordis.patch.yml",
+    "config.schema.json",
+    "icon.svg",
+    "README.md",
+    "INSTALL.md",
+    "CHANGELOG.md",
+    "AUDIT-2026-10-17-desktop-web.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20",
+    "dsh": ">=0.2.1-rc.2"
+  },
+  "optionalDependencies": {
+    "nodemailer": "^10.1.2"
+  },
+  "license": "MIT",
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "conversation",
+    "delete",
+    "session",
+    "memory",
+    "recycle-bin",
+    "audit"
+  ],
+  "icon": "./icon.svg",
+  "meta": {
+    "title": "删除对话",
+    "description": "删除对话并可选择一并删除该对话的关联记忆；支持软删除、回收站、审计、批量限流与失败回滚。"
+  },
+  "scripts": {
+    "test": "node test/manifest.test.mjs && node test/client-module.test.mjs && node test/core.test.mjs && node test/retention.test.mjs && node test/cascade.test.mjs && node test/memory.test.mjs && node test/trash-audit.test.mjs && node test/feedback.test.mjs && node test/api.test.mjs",
+    "check": "node scripts/check-syntax.mjs && node test/manifest.test.mjs"
+  },
+  "dsh": {
+    "manifestVersion": 1,
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-ui-workspace",
+        "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-client-ui-settings"
+      ]
+    }
+  }
+}