dsh-manage-session 0.5.4 → 0.5.7

package/lib/index.js

@@ -1,6 +1,6 @@
 import { createRequire } from "node:module";
 import z from "@deepseek-ai/schemastery";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { appendFileSync, copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { basename, dirname, join, relative, resolve, sep } from "node:path";
 import zlib from "node:zlib";
@@ -11,7 +11,8 @@ const DEFAULT_CONFIG = {
 	enabled: true,
 	historyFiles: true,
 	healthCheck: true,
-	search: true
+	search: true,
+	directDelete: false
 };
 /** host 半身注册的设置命名空间（与 src/index.ts 保持一致）。 */
 const STEWARD_SETTINGS_NAMESPACE = "session-steward";
@@ -29,7 +30,9 @@ const SWITCH_DEFAULT_CONFIG = {
 	autoSync: true,
 	syncIntervalMs: 3e4,
 	archiveKeep: 2,
-	indexDir: ""
+	indexDir: "",
+	corpusSource: "native",
+	drsBaseUrl: ""
 };
 //#endregion
 //#region src/host/history/archive-source.ts
@@ -1383,6 +1386,59 @@ function setFavoriteState(sessionId, favorite, searchPaths) {
 	}
 }
 //#endregion
+//#region src/host/history/tombstones.ts
+/**
+* 退场墓碑台账（2026-10-20 用户定标）：任何 purge 成功路径都往
+* `~/.dsh-switch-search/retired-tombstones.jsonl` 追加一行
+* `{sessionId, retiredAt, source}`，作为离线清残脚本
+* （scripts/cleanup-retired.mjs）的驱动清单。
+*
+* 为什么需要：宿主 `registry.deleteSession` 与 `purgeHistory` 各自覆盖 4 处
+* 实体（转录目录/projcache/workspace.json 两处 id），但任一路径中途失败、
+* 索引联动（onPurged）进程崩溃、或 collector 同步轮未跑，都会留下残行/残
+* 目录。墓碑 = 「这个 id 已被判退场」的持久凭证，DSH 关闭后脚本据此兜底
+* 清扫，不靠现场推断。
+*
+* 纪律：
+* - **append-only、best-effort**：写台账失败绝不影响删除结果返回（try/catch
+*   吞错并 log），台账是副账不是主账；
+* - 每行一个 JSON（JSONL），读侧跳过畸形行——半行（进程崩在 append 中间）
+*   不致命；
+* - 幂等消费：脚本按 id 集合去重，重复墓碑无害；台账只增不删（体积可忽略，
+*   每行 ~120B）。
+*/
+/** 台账文件名（固定；脚本以默认路径发现）。 */
+const TOMBSTONE_FILE = "retired-tombstones.jsonl";
+/** 默认台账目录 = 索引缺省落点（与 rebuild.ts 的 ~/.dsh-switch-search 同根）。 */
+function defaultTombstoneDir() {
+	return join(homedir(), ".dsh-switch-search");
+}
+/**
+* 追加一批墓碑（一次 purge 成功的 id 集）。best-effort：目录不可建/盘不可写
+* 只经 `log` 报一行，绝不抛——删除动作的成败判定先于本调用完成。
+* @returns 实际写出的行数（0 = 静默失败或空入参）。
+*/
+function appendRetiredTombstones(sessionIds, opts) {
+	const ids = [...new Set(sessionIds.filter((id) => typeof id === "string" && id !== ""))];
+	if (ids.length === 0) return 0;
+	const dir = opts.dir ?? defaultTombstoneDir();
+	const now = opts.now ?? (() => /* @__PURE__ */ new Date());
+	try {
+		mkdirSync(dir, { recursive: true });
+		const stamp = now().toISOString();
+		const lines = ids.map((id) => JSON.stringify({
+			sessionId: id,
+			retiredAt: stamp,
+			source: opts.source
+		}) + "\n");
+		appendFileSync(join(dir, TOMBSTONE_FILE), lines.join(""), "utf8");
+		return lines.length;
+	} catch (err) {
+		opts.log?.(`tombstone append failed (deletion itself succeeded): ${String(err instanceof Error ? err.message : err)}`);
+		return 0;
+	}
+}
+//#endregion
 //#region src/host/settings-bridge.ts
 /**
 * Legacy 设置桥（宿主半身，≤0.1.5 专用）：老宿主的服务端 settings 服务保留
@@ -1407,7 +1463,8 @@ const StewardNsSchema = z.object({
 	enabled: z.boolean().default(true),
 	historyFiles: z.boolean().default(true),
 	healthCheck: z.boolean().default(true),
-	search: z.boolean().default(true)
+	search: z.boolean().default(true),
+	directDelete: z.boolean().default(false)
 });
 /** 搜索命名空间 schema（同上；存储键与 config.ts 承诺一致）。 */
 const SwitchNsSchema = z.object({
@@ -1491,7 +1548,8 @@ const FIELD_VALIDATORS = {
 		enabled: asBoolean,
 		historyFiles: asBoolean,
 		healthCheck: asBoolean,
-		search: asBoolean
+		search: asBoolean,
+		directDelete: asBoolean
 	},
 	[SWITCH_SEARCH_SETTINGS_NAMESPACE]: {
 		enabled: asBoolean,
@@ -1558,6 +1616,17 @@ function describeNamespaces(state) {
 		[SWITCH_SEARCH_SETTINGS_NAMESPACE]: {}
 	};
 }
+function bridgeOverlay(state) {
+	const { bridge } = state;
+	if (bridge === void 0) return {
+		steward: {},
+		search: {}
+	};
+	return {
+		steward: bridge.get("session-steward") ?? {},
+		search: bridge.get("switch-search") ?? {}
+	};
+}
 /** describe 响应。 */
 function settingsDescribe(state) {
 	return {
@@ -3176,7 +3245,7 @@ var SwitchIndexEngine = class {
 	upsertSession(input) {
 		const db = this.requireDb();
 		const documents = buildIndexDocuments(input.sessionId, input.events);
-		this.withWriteTx(() => {
+		return this.withWriteTx(() => {
 			this.deleteSessionFts(db, input.sessionId);
 			db.prepare("DELETE FROM docs WHERE session_id = ?").run(input.sessionId);
 			const insertDoc = db.prepare(`
@@ -3199,9 +3268,37 @@ var SwitchIndexEngine = class {
           updated_at = excluded.updated_at,
           indexed_at = excluded.indexed_at
       `).run(input.sessionId, input.version, input.title ?? "", input.cwd ?? "", input.updatedAt ?? 0, Date.now(), input.archived === true ? 1 : 0);
+			return documents.length;
 		});
 	}
 	/**
+	* 该会话是否已有正文（issue #1:hollow 行判据）。
+	* LIMIT 1 探测命中 docs_session 索引,每轮 poll 对每个未变更会话的开销可忽略。
+	*/
+	hasSessionDocs(sessionId) {
+		return this.requireDb().prepare("SELECT 1 FROM docs WHERE session_id = ? LIMIT 1").get(sessionId) !== void 0;
+	}
+	/**
+	* 「有表头无正文」的会话 id（升序）—— hollow 体检面。补录后仍 hollow 的行
+	* 包含无可索引文本的真空会话（合法终态,见 sync 的 confirmedEmpty 缓存）。
+	*/
+	listHollowSessions() {
+		return this.requireDb().prepare(`
+      SELECT s.session_id FROM sessions s
+      WHERE NOT EXISTS (SELECT 1 FROM docs d WHERE d.session_id = s.session_id)
+      ORDER BY s.session_id
+    `).all().map((row) => row.session_id);
+	}
+	/**
+	* `PRAGMA integrity_check` 首行：'ok' 或损坏报告串。swap 后完整性闸门用。
+	*/
+	integrityCheck() {
+		const row = this.requireDb().prepare("PRAGMA integrity_check").get();
+		if (row === void 0) return "no result";
+		const first = Object.values(row)[0];
+		return String(first ?? "no result");
+	}
+	/**
 	* Write an archived session's header row without any document content.
 	*
 	* @deprecated 旧"归档即软删"语义的遗物,合并包 R1 已改为归档保留 docs;仅剩
@@ -3289,6 +3386,65 @@ var SwitchIndexEngine = class {
       `).run(input.sessionId, input.version, input.title ?? "", Date.now(), input.archived === true ? 1 : 0);
 		});
 	}
+	/**
+	* Insert or replace one session from corpus-source documents (T7.1 DRS
+	* 语料源):docs 已由语料源抽好(surface 字符串),切分仍由本引擎重算。
+	* 与 importSessionDocs 的三点差异,均为检索排序/水印所需:cwd 与
+	* updated_at 直写(日期过滤/时间排序键);标题空串保留旧行(upsertSession
+	* 同款 CASE——DRS 对老会话可能给不出标题,不能抹掉既有精修);归档旗标
+	* 冲突时不动(翻转仍归 setArchived)。
+	* @returns 落库 docs 数(0 = 该会话无可索引文本,合法终态)。
+	*/
+	upsertSessionDocs(input) {
+		const db = this.requireDb();
+		return this.withWriteTx(() => {
+			this.deleteSessionFts(db, input.sessionId);
+			db.prepare("DELETE FROM docs WHERE session_id = ?").run(input.sessionId);
+			const insertDoc = db.prepare(`
+        INSERT INTO docs (session_id, seq, type, surface, time, text, index_text)
+        VALUES (?, ?, ?, ?, ?, ?, ?)
+      `);
+			const insertFts = db.prepare("INSERT INTO docs_fts (rowid, index_text) VALUES (?, ?)");
+			for (const doc of input.docs) {
+				const indexText = segmentForIndex(doc.text);
+				const result = insertDoc.run(input.sessionId, doc.seq, doc.type, doc.surface, doc.time, doc.text, indexText);
+				insertFts.run(Number(result.lastInsertRowid), indexText);
+			}
+			db.prepare(`
+        INSERT INTO sessions (session_id, version, title, cwd, updated_at, indexed_at, archived)
+        VALUES (?, ?, ?, ?, ?, ?, ?)
+        ON CONFLICT(session_id) DO UPDATE SET
+          version = excluded.version,
+          title = CASE WHEN excluded.title != '' THEN excluded.title ELSE sessions.title END,
+          cwd = excluded.cwd,
+          updated_at = excluded.updated_at,
+          indexed_at = excluded.indexed_at
+      `).run(input.sessionId, input.version, input.title ?? "", input.cwd ?? "", input.updatedAt ?? 0, Date.now(), input.archived === true ? 1 : 0);
+			return input.docs.length;
+		});
+	}
+	/**
+	* 会话头直写（DRS 直连时代的同步轮专用，T7.3）：只维护 sessions 元数据
+	* （水位/标题/目录/末时间/归档），**不碰 docs/docs_fts**——内容检索
+	* 已直连 dsh-reference-session-collector（op=search&group=session），本地正文索引
+	* 退役，存量 docs 行自然老化不再新增。空标题保留旧行（同 upsertSessionDocs）。
+	*/
+	upsertSessionHead(input) {
+		const db = this.requireDb();
+		this.withWriteTx(() => {
+			db.prepare(`
+        INSERT INTO sessions (session_id, version, title, cwd, updated_at, indexed_at, archived)
+        VALUES (?, ?, ?, ?, ?, ?, ?)
+        ON CONFLICT(session_id) DO UPDATE SET
+          version = excluded.version,
+          title = CASE WHEN excluded.title != '' THEN excluded.title ELSE sessions.title END,
+          cwd = excluded.cwd,
+          updated_at = excluded.updated_at,
+          indexed_at = excluded.indexed_at,
+          archived = excluded.archived
+      `).run(input.sessionId, input.version, input.title ?? "", input.cwd ?? "", input.updatedAt ?? 0, Date.now(), input.archived === true ? 1 : 0);
+		});
+	}
 	/** Remove one session and its documents entirely. */
 	removeSession(sessionId) {
 		const db = this.requireDb();
@@ -3435,34 +3591,46 @@ const TITLE_CHUNK = 50;
 * One watermark syncer bound to one open engine. `poll()` is re-entrant-safe:
 * overlapping calls collapse into the running pass.
 */
-var SwitchWatermarkSync = class {
+var SwitchWatermarkSync = class SwitchWatermarkSync {
 	engine;
 	sessionQuery;
 	readArchiveSource;
 	log;
 	readSessionFromFile;
 	readProjectionTitle;
+	drsSource;
 	running;
+	/**
+	* 本进程已确认「重读过且产出仍为 0 docs」的会话（键 id@version）。
+	* 无可索引文本是合法终态——没有这份缓存,hollow 补录判据会把真空会话
+	* 每轮完整重读一次（热循环）。宿主重启后缓存归零,最多各重读一次。
+	*/
+	confirmedEmpty = /* @__PURE__ */ new Set();
+	static emptyKey(sessionId, version) {
+		return `${sessionId}@${String(version)}`;
+	}
 	state = {
 		state: "idle",
 		lastSyncAt: 0,
 		indexed: 0,
 		total: 0,
 		updated: 0,
-		failures: []
+		failures: [],
+		hollow: 0
 	};
 	/**
 	* @param readSessionFromFile - 可选的**文件级兜底读取器**（管家 health 侧的
 	* 多帧 zstd 读取器）：sessionQuery.readSession 对某些会话（典型:归档会话,
 	* 或服务面退化）失败时改读转录文件。返回 undefined 表示文件也不可用。
 	*/
-	constructor(engine, sessionQuery, readArchiveSource, log, readSessionFromFile, readProjectionTitle) {
+	constructor(engine, sessionQuery, readArchiveSource, log, readSessionFromFile, readProjectionTitle, drsSource) {
 		this.engine = engine;
 		this.sessionQuery = sessionQuery;
 		this.readArchiveSource = readArchiveSource;
 		this.log = log;
 		this.readSessionFromFile = readSessionFromFile;
 		this.readProjectionTitle = readProjectionTitle;
+		this.drsSource = drsSource;
 	}
 	/**
 	* 读取一个会话的日志:服务面优先,失败落文件兜底。两条路都失败时抛最后
@@ -3516,6 +3684,11 @@ var SwitchWatermarkSync = class {
 		this.state.state = "syncing";
 		const passStart = Date.now();
 		try {
+			if (this.drsSource !== void 0) try {
+				return await this.runDrsPass(passStart);
+			} catch (drsError) {
+				this.log?.(`DRS corpus pass failed, falling back to native sessionQuery: ${String(drsError instanceof Error ? drsError.message : drsError)}`);
+			}
 			const records = await this.sessionQuery.listSessions();
 			this.state.total = records.length;
 			const archiveSource = this.readArchiveSource?.();
@@ -3527,11 +3700,12 @@ var SwitchWatermarkSync = class {
 			for (const record of records) {
 				const header = record.header;
 				const existing = this.engine.getSession(header.id);
-				if (existing !== void 0 && existing.version === header.version) continue;
+				const emptyKey = SwitchWatermarkSync.emptyKey(header.id, header.version);
+				if (existing !== void 0 && existing.version === header.version && (this.confirmedEmpty.has(emptyKey) || this.engine.hasSessionDocs(header.id))) continue;
 				changedIds.push(header.id);
 				try {
 					const log = await this.readSessionLog(header);
-					this.engine.upsertSession({
+					if (this.engine.upsertSession({
 						sessionId: header.id,
 						version: header.version,
 						cwd: log.session.cwd ?? header.cwd ?? "",
@@ -3539,7 +3713,8 @@ var SwitchWatermarkSync = class {
 						title: extractTitleFromEvents(log.events),
 						events: log.events,
 						archived: archivedSet.has(header.id)
-					});
+					}) === 0) this.confirmedEmpty.add(emptyKey);
+					else this.confirmedEmpty.delete(emptyKey);
 					updated += 1;
 				} catch (err) {
 					failures.push({
@@ -3549,13 +3724,14 @@ var SwitchWatermarkSync = class {
 				}
 			}
 			for (const archivedId of archivedSet) {
-				if (this.engine.getSession(archivedId) !== void 0) continue;
+				const existingArchived = this.engine.getSession(archivedId);
+				if (existingArchived !== void 0 && (this.confirmedEmpty.has(SwitchWatermarkSync.emptyKey(archivedId, existingArchived.version)) || this.engine.hasSessionDocs(archivedId))) continue;
 				try {
 					const log = await this.readSessionLog({
 						id: archivedId,
 						version: -1
 					});
-					this.engine.upsertSession({
+					const produced = this.engine.upsertSession({
 						sessionId: archivedId,
 						version: log.session.version,
 						cwd: log.session.cwd ?? "",
@@ -3564,6 +3740,9 @@ var SwitchWatermarkSync = class {
 						events: log.events,
 						archived: true
 					});
+					const archivedKey = SwitchWatermarkSync.emptyKey(archivedId, log.session.version);
+					if (produced === 0) this.confirmedEmpty.add(archivedKey);
+					else this.confirmedEmpty.delete(archivedKey);
 					updated += 1;
 				} catch (err) {
 					failures.push({
@@ -3596,10 +3775,11 @@ var SwitchWatermarkSync = class {
 			this.state.updated = updated;
 			this.state.failures = failures;
 			this.state.indexed = this.engine.countSessions();
+			this.state.hollow = this.engine.listHollowSessions().length;
 			this.state.lastSyncAt = Date.now();
 			this.state.state = "idle";
 			this.state.error = void 0;
-			this.log?.(`sync pass: scanned=${this.state.total} updated=${updated} archived=${archivedSet.size} failures=${failures.length} indexed=${this.state.indexed} duration=${Date.now() - passStart}ms driver=${this.engine.driverLabel}`);
+			this.log?.(`sync pass: scanned=${this.state.total} updated=${updated} archived=${archivedSet.size} failures=${failures.length} indexed=${this.state.indexed} hollow=${this.state.hollow} duration=${Date.now() - passStart}ms driver=${this.engine.driverLabel}`);
 		} catch (err) {
 			this.state.state = "error";
 			this.state.error = String(err instanceof Error ? err.message : err);
@@ -3608,6 +3788,55 @@ var SwitchWatermarkSync = class {
 		return this.snapshot();
 	}
 	/**
+	* DRS 语料轮(T7.1):语料头从 DRS `op=sessions` 分页拉取,水位
+	* diff(version=artifact_mtime_ms)后按会话 `op=session&fields=search`
+	* 取检索臂 docs 直插引擎(upsertSessionDocs)。归档集合改用 DRS 行的
+	* archived 旗标(DRS sync 本就只读跟随 workspace.json,同源);标题直接
+	* 采 DRS 行(投影侧同一 extractTitleFromEvents 视界),不再走快照精修。
+	* 每会话失败隔离语义与原生轮一致;无可索引文本仍进 confirmedEmpty 缓存。
+	*/
+	async runDrsPass(passStart) {
+		const source = this.drsSource;
+		if (source === void 0) throw new Error("DRS corpus source unavailable");
+		const heads = await source.listSessions();
+		this.state.total = heads.length;
+		const archivedSet = new Set(heads.filter((head) => head.archived).map((head) => head.sessionId));
+		this.engine.setArchived(archivedSet);
+		const failures = [];
+		let updated = 0;
+		for (const head of heads) {
+			const existing = this.engine.getSession(head.sessionId);
+			if (existing !== void 0 && existing.version === head.version) continue;
+			try {
+				this.engine.upsertSessionHead({
+					sessionId: head.sessionId,
+					version: head.version,
+					title: head.title,
+					cwd: head.cwd,
+					updatedAt: head.updatedAt,
+					archived: head.archived
+				});
+				updated += 1;
+			} catch (err) {
+				failures.push({
+					sessionId: head.sessionId,
+					error: `drs: ${String(err instanceof Error ? err.message : err)}`
+				});
+			}
+		}
+		const corpusIds = new Set(heads.map((head) => head.sessionId));
+		for (const indexed of this.engine.listIndexedSessions()) if (!corpusIds.has(indexed.sessionId) && !archivedSet.has(indexed.sessionId)) this.engine.removeSession(indexed.sessionId);
+		this.state.updated = updated;
+		this.state.failures = failures;
+		this.state.indexed = this.engine.countSessions();
+		this.state.hollow = this.engine.listHollowSessions().length;
+		this.state.lastSyncAt = Date.now();
+		this.state.state = "idle";
+		this.state.error = void 0;
+		this.log?.(`sync pass(DRS): scanned=${this.state.total} updated=${updated} archived=${archivedSet.size} failures=${failures.length} indexed=${this.state.indexed} hollow=${this.state.hollow} duration=${Date.now() - passStart}ms driver=${this.engine.driverLabel}`);
+		return this.snapshot();
+	}
+	/**
 	* Fold latest titles for changed sessions into the index header rows.
 	*
 	* beta.4 教训:整批一次调用,任何一个坏 id（典型:归档 id）让整个 promise
@@ -3769,6 +3998,145 @@ function detectSteward() {
 	return probePeer(STEWARD_PACKAGE);
 }
 //#endregion
+//#region src/host/index/drs-source.ts
+/**
+* DRS 语料源:dsh-reference-session-collector 投影库的 HTTP 只读客户端(T7.1)。
+*
+* 语料契约 = DRS 单条 fenced 路由 `GET /api/dsh-reference-session-collector`:
+* - `op=sessions&offset=&limit=` → `{ok, total, rows:[sessions 行]}`(分页);
+* - `op=session&session=<id>&fields=search` → `{ok, session, rows:[检索臂]}`。
+*
+* 字段对照(T7.0,DRS wire snake → steward 引擎列):
+*   sessions.version ← artifact_mtime_ms(水位代理:日志重写必 bump mtime);
+*   sessions.updated_at ← last_time_ms;title/cwd/archived ← 同名列;
+*   docs.type ← kind;docs.surface ← on_surface(1='current'/0='shadowed');
+*   docs.time ← time;docs.text ← search_text;index_text 由本引擎
+*   segmentForIndex 重算(自有切分面不动)。
+*
+* 自调用信任面:DRS 的 Host 门是精确匹配(trustedHosts 全小写比对),本客户
+* 端可带 hostHeader 显式回显首个 trustedHosts 条目,规避「条目省略端口而
+* URL 带端口」的精确匹配失配;loopback + 无 trustedHosts 的老宿主天然放行。
+*/
+/** DRS API 路径(与 dsh-reference-session-collector 的 DRS_API_PATH 字面一致;不跨包 import)。 */
+const DRS_API_PATH = "/api/dsh-reference-session-collector";
+/**
+* 基址解析:显式配置 > 首个 trustedHosts 条目(补 http:// 前缀)>
+* `http://127.0.0.1:8080`(宿主默认口;trustedHosts 缺席的老线 DRS 门本就放行)。
+*/
+function resolveDrsBaseUrl(explicit, trustedHosts) {
+	const trimmed = explicit?.trim() ?? "";
+	const pick = trimmed !== "" ? trimmed : trustedHosts?.find((entry) => entry.trim() !== "")?.trim();
+	if (pick === void 0 || pick === "") return "http://127.0.0.1:8080";
+	return /^https?:\/\//u.test(pick) ? pick : `http://${pick}`;
+}
+var DrsCorpusSource = class DrsCorpusSource {
+	options;
+	fetchImpl;
+	constructor(options) {
+		this.options = options;
+		this.fetchImpl = options.fetchImpl ?? fetch;
+	}
+	/** 一个 GET 的 JSON 包络(ok!==true 或非 2xx 一律抛,由调用方回退 native)。 */
+	async getJson(query, atHost) {
+		const url = `${(atHost !== void 0 && atHost !== "" ? `http://${atHost}` : this.options.baseUrl).replace(/\/+$/u, "")}${DRS_API_PATH}${query}`;
+		let response;
+		try {
+			response = await this.fetchImpl(url, { headers: {
+				accept: "application/json",
+				...this.options.hostHeader === void 0 ? {} : { host: this.options.hostHeader }
+			} });
+		} catch (err) {
+			throw new Error(`DRS ${query}: ${String(err instanceof Error ? err.message : err)}`);
+		}
+		if (!response.ok) throw new Error(`DRS ${query} → HTTP ${String(response.status)}`);
+		const body = await response.json();
+		if (typeof body !== "object" || body === null) throw new Error(`DRS ${query}: 响应非 JSON 对象`);
+		const record = body;
+		if (record["ok"] !== true) throw new Error(`DRS ${query}: ok=false(${String(record["error"] ?? "unknown")})`);
+		return record;
+	}
+	static headOf(row, fallbackId) {
+		return {
+			sessionId: String(row["session_id"] ?? fallbackId),
+			version: Number(row["artifact_mtime_ms"] ?? 0),
+			title: String(row["title"] ?? ""),
+			cwd: String(row["cwd"] ?? ""),
+			updatedAt: Number(row["last_time_ms"] ?? 0),
+			archived: Number(row["archived"] ?? 0) === 1
+		};
+	}
+	/** 全量语料头(内部翻页;rows 空或凑满 total 即止)。 */
+	async listSessions() {
+		const heads = [];
+		let offset = 0;
+		for (;;) {
+			const page = await this.getJson(`?op=sessions&offset=${String(offset)}&limit=${String(500)}`);
+			const rows = Array.isArray(page["rows"]) ? page["rows"] : [];
+			for (const row of rows) {
+				const head = DrsCorpusSource.headOf(row, "");
+				if (head.sessionId !== "") heads.push(head);
+			}
+			offset += rows.length;
+			const total = Number(page["total"] ?? heads.length);
+			if (rows.length === 0 || offset >= total) break;
+		}
+		return heads;
+	}
+	/** 一个会话的检索臂 docs；DRS 无此会话（session:null）返回 undefined。 */
+	async readSession(sessionId) {
+		const body = await this.getJson(`?op=session&session=${encodeURIComponent(sessionId)}&fields=search`);
+		if (body["session"] === null || body["session"] === void 0) return void 0;
+		return {
+			head: DrsCorpusSource.headOf(body["session"], sessionId),
+			docs: (Array.isArray(body["rows"]) ? body["rows"] : []).map((row) => ({
+				seq: Number(row["seq"] ?? 0),
+				type: String(row["kind"] ?? ""),
+				surface: Number(row["on_surface"] ?? 1) === 1 ? "current" : "shadowed",
+				time: Number(row["time"] ?? 0),
+				text: String(row["search_text"] ?? "")
+			}))
+		};
+	}
+	/**
+	* 分组内容搜索直连臂（op=search&group=session，DRS surface.searchGrouped 同构）：
+	* 会话分组/加权/过滤/锚定节选全部在 DRS 侧完成，本方法只搬 wire →
+	* 引擎命中形状（SwitchSearchHit 字段同名）。失败（网络/非 2xx/包络）直抛，
+	* 调用侧按硬依赖语义显式报错——**不回退本地索引**。
+	*/
+	async searchGrouped(request) {
+		const params = new URLSearchParams();
+		params.set("op", "search");
+		params.set("group", "session");
+		params.set("q", request.query);
+		if (request.kinds !== void 0 && request.kinds.length > 0) params.set("kinds", request.kinds.join(","));
+		if (request.archived !== void 0) params.set("archived", request.archived);
+		if (request.from !== void 0) params.set("from", String(request.from));
+		if (request.to !== void 0) params.set("to", String(request.to));
+		if (request.sortBy === "time") params.set("sort", "time");
+		if (request.limit !== void 0) params.set("limit", String(request.limit));
+		if (request.expand === true) params.set("expand", "1");
+		const body = await this.getJson(`?${params.toString()}`, request.atHost);
+		return (Array.isArray(body["hits"]) ? body["hits"] : []).map((row) => ({
+			sessionId: String(row["session_id"] ?? ""),
+			title: String(row["title"] ?? ""),
+			seq: Number(row["seq"] ?? 0),
+			type: String(row["type"] ?? ""),
+			time: Number(row["time"] ?? 0),
+			updatedAt: Number(row["updated_at"] ?? 0),
+			snippet: String(row["snippet"] ?? "")
+		}));
+	}
+	/** 可性探针（op=status）：硬依赖预检/降级提示用；失败返回 false。 */
+	async probe(atHost) {
+		try {
+			await this.getJson("?op=status", atHost);
+			return true;
+		} catch {
+			return false;
+		}
+	}
+};
+//#endregion
 //#region src/host/index/rebuild.ts
 /**
 * Non-destructive index rebuild ("整理索引") for the independent index.
@@ -3831,6 +4199,63 @@ async function listArchives(layout) {
 }
 /** Sessions per batched transaction (one fsync checkpoint per chunk). */
 const REBUILD_CHUNK = 50;
+/**
+* 主文件旁的 WAL sidecar（`-wal`/`-shm`）随主文件一并迁走；无目的地时
+* （孤儿残留）直接 force rm。rename 失败降级删除——sidecar 清理永远不能
+* 阻断 swap 本身。
+*/
+async function moveOrDeleteSidecars(basePath, destBasePath) {
+	for (const suffix of ["-wal", "-shm"]) {
+		const src = basePath + suffix;
+		if (!existsSync(src)) continue;
+		if (destBasePath !== null) try {
+			await rename(src, destBasePath + suffix);
+			continue;
+		} catch {}
+		await rm(src, { force: true }).catch(() => {});
+	}
+}
+/**
+* The swap window: synchronous renames only; queries fail only inside it.
+*
+* issue #1 评论的损坏根因：只搬主文件时,旧库残留的 -wal/-shm 会被同名顶替
+* 的新库当自己的 WAL 重放,页号错配 → malformed。因此 sidecar 必须随主文件
+* 一并迁 archive（干净 close 本会 checkpoint 自删,这里是异常关闭的兜底）。
+* swap 后跑 integrity_check：非 ok 则把损坏库改名 .corrupt、从刚落的 archive
+* 回滚重开,并抛错让调用方置 error（把「索引损坏」降级为「回到上次快照」）。
+* 导出供测试直接驱动 swap 窗口（多连接场景在 Windows 上 rename 必 EBUSY,
+* 无法经 rebuildIndex 全链路确定性复现）。
+*/
+async function swapShadowIntoActive(activeEngine, layout, log) {
+	const activePath = join(layout.dir, layout.active);
+	const buildingPath = join(layout.dir, layout.building);
+	let archivePath = null;
+	if (existsSync(activePath)) {
+		activeEngine.close();
+		archivePath = join(layout.dir, `${layout.archivePrefix}${Date.now()}.sqlite`);
+		await rename(activePath, archivePath);
+		await moveOrDeleteSidecars(activePath, archivePath);
+	} else await moveOrDeleteSidecars(activePath, null);
+	await rename(buildingPath, activePath);
+	await activeEngine.open();
+	const integrity = activeEngine.integrityCheck();
+	if (integrity === "ok") return;
+	log?.(`post-swap integrity FAILED (${integrity}); rolling back to the newest archive`);
+	activeEngine.close();
+	const corruptBase = join(layout.dir, `index.corrupt-${Date.now()}.sqlite`);
+	try {
+		await rename(activePath, corruptBase);
+		await moveOrDeleteSidecars(activePath, corruptBase);
+		if (archivePath !== null) {
+			await rename(archivePath, activePath);
+			for (const suffix of ["-wal", "-shm"]) if (existsSync(archivePath + suffix)) await rename(archivePath + suffix, activePath + suffix).catch(() => {});
+			await activeEngine.open();
+		}
+	} catch (rollbackErr) {
+		log?.(`swap rollback itself failed: ${String(rollbackErr instanceof Error ? rollbackErr.message : rollbackErr)}`);
+	}
+	throw new Error(`switch-search: post-swap integrity check failed: ${integrity}`);
+}
 async function rebuildIndex(activeEngine, layout, sessionQuery, keepArchives, onProgress, archiveSource, hooks) {
 	const startedMs = Date.now();
 	let docsWritten = 0;
@@ -3934,13 +4359,7 @@ async function rebuildIndex(activeEngine, layout, sessionQuery, keepArchives, on
 		state.state = "swapping";
 		emit();
 		hooks?.log?.(`rebuild shadow complete: ${state.done} sessions, ~${docsWritten} docs, ${state.failures.length} failures; swapping`);
-		const activePath = join(layout.dir, layout.active);
-		if (existsSync(activePath)) {
-			activeEngine.close();
-			await rename(activePath, join(layout.dir, `${layout.archivePrefix}${Date.now()}.sqlite`));
-		}
-		await rename(buildingPath, activePath);
-		await activeEngine.open();
+		await swapShadowIntoActive(activeEngine, layout, hooks?.log);
 		await pruneArchives(layout, keepArchives);
 		state.finishedAt = Date.now();
 		state.state = "idle";
@@ -3955,8 +4374,9 @@ async function rebuildIndex(activeEngine, layout, sessionQuery, keepArchives, on
 	}
 	return state;
 }
-/** Import doc-level records into the shadow file and swap it in (same swap path). */
-async function importIntoIndex(activeEngine, layout, records, keepArchives) {
+/** Import doc-level records into the shadow file and swap it in (same swap path).
+* @param log - 可选日志汇（空 docs 记录告警,issue #1 写入侧可观测）。 */
+async function importIntoIndex(activeEngine, layout, records, keepArchives, log) {
 	const state = {
 		state: "building",
 		done: 0,
@@ -3974,6 +4394,7 @@ async function importIntoIndex(activeEngine, layout, records, keepArchives) {
 		try {
 			for (const record of records) {
 				try {
+					if (record.docs.length === 0) log?.(`snapshot import: session ${record.sessionId} has zero docs (hollow header, sync will backfill)`);
 					shadow.importSessionDocs({
 						sessionId: record.sessionId,
 						version: record.version,
@@ -3996,13 +4417,7 @@ async function importIntoIndex(activeEngine, layout, records, keepArchives) {
 			throw error;
 		}
 		state.state = "swapping";
-		const activePath = join(layout.dir, layout.active);
-		if (existsSync(activePath)) {
-			activeEngine.close();
-			await rename(activePath, join(layout.dir, `${layout.archivePrefix}${Date.now()}.sqlite`));
-		}
-		await rename(buildingPath, activePath);
-		await activeEngine.open();
+		await swapShadowIntoActive(activeEngine, layout, log);
 		await pruneArchives(layout, keepArchives);
 		state.finishedAt = Date.now();
 		state.state = "idle";
@@ -4013,11 +4428,14 @@ async function importIntoIndex(activeEngine, layout, records, keepArchives) {
 	}
 	return state;
 }
-/** Remove the oldest archives beyond the retention bound. */
+/** Remove the oldest archives beyond the retention bound (sidecars too). */
 async function pruneArchives(layout, keep) {
 	const archives = await listArchives(layout);
 	const excess = archives.length - Math.max(0, keep);
-	for (let i = 0; i < excess; i += 1) await unlink(join(layout.dir, archives[i])).catch(() => {});
+	for (let i = 0; i < excess; i += 1) {
+		await unlink(join(layout.dir, archives[i])).catch(() => {});
+		await moveOrDeleteSidecars(join(layout.dir, archives[i]), null);
+	}
 }
 /**
 * Resolve the index directory that hosts the independent index files:
@@ -4144,11 +4562,14 @@ const Config = z.object({
 	historyFiles: withVolatile(z.boolean().default(true)),
 	healthCheck: withVolatile(z.boolean().default(true)),
 	search: withVolatile(z.boolean().default(true)),
+	directDelete: withVolatile(z.boolean().default(false)),
 	defaultMode: withVolatile(z.union(["title", "content"]).default("title")),
 	autoSync: withVolatile(z.boolean().default(true)),
 	syncIntervalMs: withVolatile(z.number().default(3e4)),
 	archiveKeep: withVolatile(z.number().default(2)),
-	indexDir: withVolatile(z.string().default(""))
+	indexDir: withVolatile(z.string().default("")),
+	corpusSource: withVolatile(z.union(["native", "drs"]).default("drs")),
+	drsBaseUrl: withVolatile(z.string().default(""))
 });
 /** 单次请求体的上限（防御无界读取）。 */
 const MAX_BODY_BYTES = 16 << 20;
@@ -4341,7 +4762,7 @@ async function listSessions(srt) {
 * `sortBy: 'time'` orders by session recency (`updatedAt`), anything else by
 * relevance; the host orders before truncating so the page is honest.
 */
-async function contentSearch(srt, payload) {
+async function contentSearch(srt, payload, requestHost = "") {
 	const record = payload;
 	const query = typeof record?.query === "string" ? record.query.trim() : "";
 	if (query === "") return {
@@ -4357,39 +4778,38 @@ async function contentSearch(srt, payload) {
 	let types;
 	if (Array.isArray(record?.types) && record.types.length > 0) types = record.types.filter((entry) => entry === "all" || entry === "user" || entry === "reply" || entry === "tool");
 	else types = ["user", "reply"];
-	const index = srt.index;
-	if (index.engine.isOpen === false) return {
-		ok: false,
-		error: "独立索引未就绪：请在面板或设置中先建立索引（整理索引）"
-	};
+	const kinds = resolveTypes(types);
 	try {
 		return {
 			ok: true,
-			items: index.engine.search({
+			items: await srt.drsSource.searchGrouped({
 				query,
-				types,
-				limit,
-				sortBy,
+				kinds,
 				archived,
-				from: fromMs,
-				to: toMs
+				sortBy,
+				limit,
+				...record?.expand === true ? { expand: true } : {},
+				...requestHost === "" ? {} : { atHost: requestHost },
+				...fromMs === void 0 ? {} : { from: fromMs },
+				...toMs === void 0 ? {} : { to: toMs }
 			})
 		};
 	} catch (err) {
 		return {
 			ok: false,
-			error: String(err instanceof Error ? err.message : err)
+			error: `dsh-reference-session-collector 搜索面不可用（硬依赖）：${String(err instanceof Error ? err.message : err)}`
 		};
 	}
 }
 /** search-status: probe the independent index readiness and progress. */
-async function searchStatus(srt) {
+async function searchStatus(srt, requestHost = "") {
 	const index = srt.index;
 	const sync = index.sync.snapshot();
+	const drsUp = await srt.drsSource.probe(requestHost);
 	return {
 		ok: true,
-		available: index.engine.isOpen && index.engine.countSessions() > 0,
-		reason: index.engine.isOpen ? void 0 : "not-open",
+		available: drsUp,
+		reason: drsUp ? void 0 : "drs-unavailable",
 		indexing: sync.state === "syncing",
 		archivedSessions: index.engine.countArchived(),
 		archive: index.archiveReader.diagnostics(),
@@ -4411,6 +4831,7 @@ async function indexStatus(srt) {
 		driver: index.engine.driverLabel,
 		archive: index.archiveReader.diagnostics(),
 		dir: index.layout.dir,
+		directDelete: srt.config().directDelete === true,
 		archives: await listArchives(index.layout).catch(() => []),
 		sync: {
 			...sync,
@@ -4525,7 +4946,7 @@ async function indexImport(srt, text) {
 	};
 	const config = srt.config();
 	const keepArchives = Math.max(0, config.archiveKeep ?? SWITCH_DEFAULT_CONFIG.archiveKeep);
-	importIntoIndex(index.engine, index.layout, parsed.records, keepArchives).then((state) => {
+	importIntoIndex(index.engine, index.layout, parsed.records, keepArchives, srt.log).then((state) => {
 		index.rebuild = state;
 	}).catch((err) => {
 		index.rebuild = {
@@ -4554,10 +4975,10 @@ async function indexImport(srt, text) {
 	};
 }
 /** JSON 面的搜索子域方法分发（index-export/import 走原始体，在路由层特判）。 */
-async function handleIndexMethod(method, payload, srt) {
+async function handleIndexMethod(method, payload, srt, requestHost = "") {
 	if (method === "list-sessions") return await listSessions(srt);
-	if (method === "content-search") return await contentSearch(srt, payload);
-	if (method === "search-status") return await searchStatus(srt);
+	if (method === "content-search") return await contentSearch(srt, payload, requestHost);
+	if (method === "search-status") return await searchStatus(srt, requestHost);
 	if (method === "index-status") return await indexStatus(srt);
 	if (method === "index-rebuild") return await indexRebuild(srt);
 	return {
@@ -4616,7 +5037,8 @@ function configSnapshotProjection(config) {
 			enabled: config.enabled,
 			historyFiles: config.historyFiles,
 			healthCheck: config.healthCheck,
-			search: config.search
+			search: config.search,
+			directDelete: config.directDelete
 		},
 		[SWITCH_SEARCH_SETTINGS_NAMESPACE]: {
 			enabled: config.enabled,
@@ -4733,6 +5155,11 @@ async function handleMethod(method, payload, runtime) {
 				});
 			}
 			runtime.index?.onPurged(succeeded);
+			appendRetiredTombstones(succeeded, {
+				...runtime.tombstoneDir === void 0 ? {} : { dir: runtime.tombstoneDir() },
+				source: "steward-purge-memory",
+				log: runtime.log
+			});
 			return {
 				ok: true,
 				purged: succeeded.length,
@@ -4747,7 +5174,13 @@ async function handleMethod(method, payload, runtime) {
 		});
 		if (result.ok && ids !== void 0) {
 			const failed = new Set((result.failures ?? []).map((f) => f.sessionId));
-			runtime.index?.onPurged(ids.filter((id) => !failed.has(id)));
+			const gone = ids.filter((id) => !failed.has(id));
+			runtime.index?.onPurged(gone);
+			appendRetiredTombstones(gone, {
+				...runtime.tombstoneDir === void 0 ? {} : { dir: runtime.tombstoneDir() },
+				source: "steward-purge-fallback",
+				log: runtime.log
+			});
 		}
 		return result;
 	}
@@ -4926,17 +5359,27 @@ async function handleMethod(method, payload, runtime) {
 * @param config - 组合条目（0.1.7：`.volatile()` 字段为 live ref）。
 */
 function apply(ctx, config = {}) {
-	const current = () => ({
-		enabled: readVolatileValue(config.enabled) ?? DEFAULT_CONFIG.enabled,
-		historyFiles: readVolatileValue(config.historyFiles) ?? DEFAULT_CONFIG.historyFiles,
-		healthCheck: readVolatileValue(config.healthCheck) ?? DEFAULT_CONFIG.healthCheck,
-		search: readVolatileValue(config.search) ?? DEFAULT_CONFIG.search,
-		defaultMode: readVolatileValue(config.defaultMode) ?? SWITCH_DEFAULT_CONFIG.defaultMode,
-		autoSync: readVolatileValue(config.autoSync) ?? SWITCH_DEFAULT_CONFIG.autoSync,
-		syncIntervalMs: readVolatileValue(config.syncIntervalMs) ?? SWITCH_DEFAULT_CONFIG.syncIntervalMs,
-		archiveKeep: readVolatileValue(config.archiveKeep) ?? SWITCH_DEFAULT_CONFIG.archiveKeep,
-		indexDir: readVolatileValue(config.indexDir) ?? SWITCH_DEFAULT_CONFIG.indexDir
-	});
+	const current = () => {
+		const { steward, search } = bridgeOverlay(settingsBridge);
+		const bool = (doc, key, v) => typeof doc[key] === "boolean" ? doc[key] : v;
+		const num = (doc, key, v) => typeof doc[key] === "number" && Number.isFinite(doc[key]) ? doc[key] : v;
+		const str = (doc, key, v) => typeof doc[key] === "string" ? doc[key] : v;
+		const mode = (v) => search["defaultMode"] === "title" || search["defaultMode"] === "content" ? search["defaultMode"] : v;
+		return {
+			enabled: bool(steward, "enabled", readVolatileValue(config.enabled) ?? DEFAULT_CONFIG.enabled),
+			historyFiles: bool(steward, "historyFiles", readVolatileValue(config.historyFiles) ?? DEFAULT_CONFIG.historyFiles),
+			healthCheck: bool(steward, "healthCheck", readVolatileValue(config.healthCheck) ?? DEFAULT_CONFIG.healthCheck),
+			search: bool(steward, "search", readVolatileValue(config.search) ?? DEFAULT_CONFIG.search),
+			directDelete: bool(steward, "directDelete", readVolatileValue(config.directDelete) ?? DEFAULT_CONFIG.directDelete),
+			defaultMode: mode(readVolatileValue(config.defaultMode) ?? SWITCH_DEFAULT_CONFIG.defaultMode),
+			autoSync: bool(search, "autoSync", readVolatileValue(config.autoSync) ?? SWITCH_DEFAULT_CONFIG.autoSync),
+			syncIntervalMs: num(search, "syncIntervalMs", readVolatileValue(config.syncIntervalMs) ?? SWITCH_DEFAULT_CONFIG.syncIntervalMs),
+			archiveKeep: num(search, "archiveKeep", readVolatileValue(config.archiveKeep) ?? SWITCH_DEFAULT_CONFIG.archiveKeep),
+			indexDir: str(search, "indexDir", readVolatileValue(config.indexDir) ?? SWITCH_DEFAULT_CONFIG.indexDir),
+			corpusSource: readVolatileValue(config.corpusSource) ?? SWITCH_DEFAULT_CONFIG.corpusSource,
+			drsBaseUrl: str(search, "drsBaseUrl", readVolatileValue(config.drsBaseUrl) ?? SWITCH_DEFAULT_CONFIG.drsBaseUrl)
+		};
+	};
 	const log = (message) => {
 		try {
 			ctx.logger?.info?.(`[session-steward] ${message}`);
@@ -4974,9 +5417,10 @@ function apply(ctx, config = {}) {
 		}
 	};
 	const registry = () => ctx.get("workspaceRegistry");
+	const settingsBridge = installLegacySettingsBridge(ctx);
 	const runtime = {
 		config: () => current(),
-		settingsBridge: installLegacySettingsBridge(ctx),
+		settingsBridge,
 		dshHome: resolvedHome,
 		registry,
 		projectionStateFor,
@@ -5008,6 +5452,10 @@ function apply(ctx, config = {}) {
 					log(`index onPurged failed: ${String(err instanceof Error ? err.message : err)}`);
 				}
 			}
+		},
+		tombstoneDir: () => {
+			const dir = current().indexDir;
+			return dir !== "" ? dir : defaultTombstoneDir();
 		}
 	};
 	const initial = current();
@@ -5051,6 +5499,12 @@ function apply(ctx, config = {}) {
 			return "";
 		}
 	};
+	const trustedHosts = webRuntime?.trustedHosts;
+	const drsSource = new DrsCorpusSource({
+		baseUrl: resolveDrsBaseUrl(initial.drsBaseUrl, trustedHosts),
+		hostHeader: trustedHosts !== void 0 && trustedHosts.length > 0 ? trustedHosts[0] : void 0,
+		log
+	});
 	const indexState = {
 		engine,
 		archiveReader,
@@ -5061,7 +5515,7 @@ function apply(ctx, config = {}) {
 				return sessionQuery.readSession(sessionId);
 			},
 			readTitleSnapshots: sessionQuery === void 0 ? void 0 : (ids) => sessionQuery.readTitleSnapshots(ids)
-		}, () => ({ archivedSessionIds: archiveReader.read().ids }), log, readSessionFromFile, readProjectionTitle),
+		}, () => ({ archivedSessionIds: archiveReader.read().ids }), log, readSessionFromFile, readProjectionTitle, initial.corpusSource === "native" ? void 0 : drsSource),
 		layout: indexLayout,
 		rebuild: {
 			state: "idle",
@@ -5075,6 +5529,7 @@ function apply(ctx, config = {}) {
 	const srt = {
 		sessionQuery,
 		index: indexState,
+		drsSource,
 		config: () => current(),
 		registry: () => ({ archivedSessionIds: archiveReader.read().ids }),
 		log,
@@ -5227,7 +5682,7 @@ function apply(ctx, config = {}) {
 					writeJson(res, 200, await indexImport(srt, text));
 					return;
 				}
-				writeJson(res, 200, await handleIndexMethod(method, await readJsonBody(req), srt));
+				writeJson(res, 200, await handleIndexMethod(method, await readJsonBody(req), srt, String(req.headers.host ?? "")));
 			} catch (err) {
 				writeJson(res, 400, {
 					ok: false,
@@ -5238,4 +5693,4 @@ function apply(ctx, config = {}) {
 	}), "dsh-manage-session: /switch-search/api route");
 }
 //#endregion
-export { Config, DEFAULT_CONFIG, DEFAULT_INDEX_LAYOUT, HEALTH_METHODS, HISTORY_METHODS, HealthCache, INDEX_METHODS, SOURCE_MIGRATE_BACKUP_SUFFIX, STEWARD_API_PREFIX, STEWARD_SETTINGS_NAMESPACE, SWITCH_API_PREFIX, SWITCH_DEFAULT_CONFIG, SwitchIndexEngine, SwitchWatermarkSync, V4_HOST_MIN, apply, archiveArchiveFile, archiveHistory, assessRepair, backupFilesIn, buildProjectionOwnerIndex, buildSessionReport, classifyGenerationFilename, countCorpus, createArchiveSource, createAttributor, decodeSessionLogBytes, decodeSessionLogFile, detectSteward, dirSize, discoverSessions, editWorkspaceDocument, exportSnapshot, extractTitleFromEvents, findSession, findSessionLog, firstLosslessViolation, gateColdRead, gateGeneration, gateLogIntegrity, gateLosslessJson, gateProjectionCache, gateSourceKind, generationLogFilename, handleIndexMethod, handleMethod, importIntoIndex, indexSessionDirs, inject, isLossless, isMigrationStagingFilename, isSafeChild, isSourceMigrateBackupName, latestArtifactMtime, listHistory, locateSessionUsage, methodEnabled, migrateLegacySource, migrateSessionSourceKind, parseGenerationLogFilename, parseSnapshot, prescribe, probePeer, projCacheRootFor, pruneArchiveFile, pruneHistory, purgeHistory, quarantineProjectionCache, readArchiveSet, readProjectionCache, readSessionGenerations, readSourceKindFacts, readTailFacts, rebuildIndex, recoverIndex, scanSessions, scanZstdFrames, sessionPriority, sessionsRootFor };
+export { Config, DEFAULT_CONFIG, DEFAULT_INDEX_LAYOUT, HEALTH_METHODS, HISTORY_METHODS, HealthCache, INDEX_METHODS, SOURCE_MIGRATE_BACKUP_SUFFIX, STEWARD_API_PREFIX, STEWARD_SETTINGS_NAMESPACE, SWITCH_API_PREFIX, SWITCH_DEFAULT_CONFIG, SwitchIndexEngine, SwitchWatermarkSync, V4_HOST_MIN, apply, archiveArchiveFile, archiveHistory, assessRepair, backupFilesIn, buildProjectionOwnerIndex, buildSessionReport, classifyGenerationFilename, countCorpus, createArchiveSource, createAttributor, decodeSessionLogBytes, decodeSessionLogFile, detectSteward, dirSize, discoverSessions, editWorkspaceDocument, exportSnapshot, extractTitleFromEvents, findSession, findSessionLog, firstLosslessViolation, gateColdRead, gateGeneration, gateLogIntegrity, gateLosslessJson, gateProjectionCache, gateSourceKind, generationLogFilename, handleIndexMethod, handleMethod, importIntoIndex, indexSessionDirs, inject, isLossless, isMigrationStagingFilename, isSafeChild, isSourceMigrateBackupName, latestArtifactMtime, listHistory, locateSessionUsage, methodEnabled, migrateLegacySource, migrateSessionSourceKind, parseGenerationLogFilename, parseSnapshot, prescribe, probePeer, projCacheRootFor, pruneArchiveFile, pruneHistory, purgeHistory, quarantineProjectionCache, readArchiveSet, readProjectionCache, readSessionGenerations, readSourceKindFacts, readTailFacts, rebuildIndex, recoverIndex, scanSessions, scanZstdFrames, sessionPriority, sessionsRootFor, swapShadowIntoActive };