dsh-recall-plugin 2.3.24 → 2.4.2

package/CHANGELOG.md

@@ -2,6 +2,36 @@
 
 本文件格式遵循 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/)，版本号遵循语义化版本。
 
+## [2.4.2] - 2026-09-23
+
+### 修复
+
+- **CI 单测缺 `@deepseek-ai/schemastery` 致 4 个测试文件收集失败**：`src/host/config.ts` 在运行时裸导入 `@deepseek-ai/schemastery`（Config schema 本体），但它此前只是 peerDependency——本机靠工作区 junction 解析所以本地全绿，CI `npm ci --legacy-peer-deps` 不装 peer 即 `ERR_MODULE_NOT_FOUND`。M2 起 manage-list/manage-list-stale/manage-usage/settings-bridge 四个单测文件经 routes-manage/config 链传递依赖 config.ts，而 0.1.7 适配批次（M1 起）当天才首次推送过 CI，问题首次暴露。修复＝schemastery 入 devDependencies（`^3.18.3`，与 `.volatile()` feature-detect 的下限对齐；peer 声明 `^3.18.1` 不动）。**对 2.4.1 已发布包零影响**：生产环境 schemastery 由宿主 dsh 提供，此缺包只影响 CI/裸克隆环境的单测。AGENTS.md junction 约定同步更新（schemastery 不再需要 junction；npm install 会修剪 dsh-settings junction，已记录重建方法）。
+
+### 变更
+
+- **兼容声明同步 dsh 0.1.7-alpha.2（零破坏核验，无代码改动）**：本版为体验/稳健性版本，插件消费面经全树内容级 diff 实证零破坏——`updateQueue`/`readAttachment`/`QueueAction`（含 `{kind:'remove'}`）签名行逐字一致，`conversation.chat.node` 与 `ConversationNode`/`records` 槽位契约字节未变，`__ModuleLoader__.load({id, factory})` 注册形态与 `plugins.bundle.config` 在位，fork 实现与切点校验未动；`dsh-session`/`dsh-shell`/`dsh-pwsh-local`/`dsh-sandbox-policy`/`dsh-host-webserver`/`dsh-client-connection`/`dsh-agent{,-loop}` 与整个 cordis vendor 栈（含 `cordis-plugin-loader`）字节级未变，改动全部落在官方 UI/工具层（滚动跟随、历史分页 Turn 对齐、本地回声记账、队列消息重编辑、持久 pwsh 等待修复、工具结果 token 预算）。门禁：`test:probe` 46/46、`npm test` 430/430、`verify:host` 装配断言全过、`typecheck` 通过。同步项：`dshReleases` 补 `0.1.7-alpha.2: compatible`（peer 范围 `>=0.1.7-alpha.1 <0.1.8` 天然覆盖）、`docs/reference/` 镜像按 `dsh-v0.1.7-alpha.2` tag 重拉（13 文件零差异）、`docs/dsh-contract.md` 与 compat-audit 头部版本字段同步，评估实证见 `docs/upgrade-assessments/dsh-0.1.7-alpha.2.md`。已知观察项（不阻塞）：`dsh-tool-jobs` 唤醒次数上限默认放开（`maxConsecutiveWakes` 无默认值）使 P0-1 `agentBusy` 守卫的 idle 窗口概率上升，留实弹观察。
+
+## [2.4.1] - 2026-09-23
+
+### 修复
+
+- **无快照的残骸仓库现在能被 gc 回收（issue #18）**：快照在 `git add` 与打 tag 之间失败会留下一批无 tag 可达的 blob，而 `.git/index` 仍逐条指着它们——`git prune`/`git gc --prune=now` 以 refs **+ 暂存 index** 为可达根，`git fsck --unreachable` 也报 0 个不可达（实测 5000 条 index + 0 ref 时输出 0 行），于是这类仓库一个对象都回收不掉，实测单工作区残留 78.4 MB 一根毛不减（POSIX 侧同结论）。修复＝两套模板的 `gcScript` 在 `gc` 之前加条件块：`for-each-ref --count=1 refs` 为空**且** `ls-files` 非空（= 没有可回退快照的纯残骸）时先 `read-tree --empty` 清 index 再 gc。为什么条件必须两条：有 tag 时 index 是 diff/rollback 依赖的「当前清单」，绝不能清；而 index 本身是可重建缓存，snapshot/diff/rollback 三处开头都先 `add -A`。修复后实测同一残骸库 78.4 MB → 0（残留 1 个空树对象），有 tag 的仓库 gc 后 refs/index/tag 可解析性原样，win32 与 Git for Windows bash 双侧 6/6 通过。
+- **posix oversize 的 find 括号写错，超大文件剔除在 Linux/macOS 上静默全废**：`find` 的 `(`/`)` 被写成 `"\("`/`"\)"` 放进数组元素——引号内是数据，bash 不剥反斜杠，find 收到两字符 token 直接报 `paths must precede expression` 退出 1；报错被 `2>/dev/null` 吞、管道零输出、xargs 空跑、`|| true` 兜底，整条剔除 100% 静默空转（比优化前更糟：连原有的慢扫都没有，且零报错）。修复＝括号改单字符数据 `'('`/`')'`，并加外层 `-type d` 限定让 prune 只剪目录（否则与排除目录同名的大文件 `dist`/`target` 会被 `-name` 一并剪掉；pwsh 侧只对 `EnumerateDirectories` 判名，两侧同语义）。契约单测同步改钉修复后的形态。
+- **pwsh `gcScript` 漏查 `$LASTEXITCODE`，gc 快速失败被误报成功**：pwsh 对原生命令非零退出不抛（EAP 不作用于 native），`git gc` 失败（磁盘满/锁冲突/杀软锁 pack）后脚本继续写 `gc.stamp`、输出 `GC_OK`、以 0 退出；`runShell` 只看进程退出码，于是 maintenance 把失败记成成功、推进完整 gcHours 周期——上条退避修复在 Windows（PS 5.1 与 pwsh 7 实测同结论）对快速失败完全失效，`gc.stamp` 这份跨重启的节流凭据也是假的。修复＝gc 之后显式 `if ($LASTEXITCODE -ne 0) { throw ... }`（同 `rescueScript`/`diffScript` 既有写法）；posix 版有 `set -e`，天然正确。契约单测新增「gc 失败必须可见」断言。
+- **gc 失败后走退避重试，不再推进完整 gcHours 周期（快照仓库 GB 级膨胀的根因）**：实测一台重度机器上单工作区影子仓库积到 **3.35 GB loose 对象、in-pack 恒 0**——定期 gc 从未成功完成过。机制：`runGc` 失败（超时/磁盘/杀软）也把 `gcLastAt` 推进到此刻，等于失败一次就放弃整个 gcHours（默认 24h）周期；期间对象继续堆积，下一次 gc 只会更重、更容易超时，「失败→整天不重试→更重→更易失败」滚雪球，对象库永远压不进 pack。修复：失败只把 `gcLastAt` 回拨到「此刻 − gcHours + GC_RETRY_BACKOFF_MS（30 分钟）」，退避窗口后自动重试；成功维持原有「推进到此刻」语义；退避期间 gcCount 条数门槛照常生效，不会退化成「每条消息都重试」。`runGc` / `runGcAll` 两路径同修。新增 `tests/unit/maintenance-gc-backoff.test.js` 4 例钉住成功/失败/节流三条语义。
+- **超大文件扫描（oversize）跳过被排除的大目录子树（两平台）**：原先 .NET 手动栈 / `find` 全工作树递归，`node_modules/`、`target/` 等已排除目录照样被逐文件 stat——一个 11943 个文件、10.96 GB 的 Rust `target/` 让每条消息的快照都多付一次全树扫描（I/O 风暴实测可拖垮宿主全部 HTTP 接口）。修复：把 exclude 表里 basename 形式（无通配、无内部斜杠、非 `!` 反选）的 pattern 按 gitignore 语义转为「任意层级同名目录整棵跳过」（pwsh 压栈过滤 HashSet；posix 转 `( -type d ( -name A -o -name B ) ) -prune -o` 前缀）；复杂 pattern 不参与跳过、回退全扫该子树——多扫不漏检，fail-open 语义不变。
+- **`package-layout` 单测兼容 npm 11+ 的 `pack --json` 输出形状**：新版输出 `{<包名>: {...}}`（旧版为数组 `[{...}]`），原解析取错层导致 `files` 恒空、两断言恒红。两种形状都取首个条目。
+
+### 变更
+
+- **settings 旧面注册接线拆出为 `src/host/settings-bridge.ts`，并补上 CI 可跑的回归单测（防盲区）**：c3cc8a7（旧面注册 entry 先解 volatile ref）此前只有依赖本机 dsh 的 `verify:host` 与 M5-5 降级实弹能覆盖——它恰恰是从全部 M1–M4 门禁漏出、被实弹才抓到的缺陷类。接线本体（两代面分派 + installSettingsSection/installSection/register 三条旧面路径 + 新面 volatile 热更挂接）移入新模块并把 `dshSettings` 改为参数注入（模块不 import 私有 peer，生产路径不变：`index.ts` 裸导入后传入），`tests/unit/settings-bridge.test.js` 新增接线级 5 例：带 `{ get() }` ref 的假 config 走三条旧面注册路径时，收到的 entry（含 register 的 `base` 与卸载回退 source）必须是解过 ref 的普通值、新面挂 volatile-update 原样重读入口 config、接线抛错走 skip 记录。变异验证：临时还原回归形态（entry 不解 ref）三条路径测试全红。`index.ts` 有效行数 329 → 298（棘轮下降）。曾评估 verify-host 旧面 pass 直接喂 ref 形态 config 的替代方案——实测 cordis 的 config 校验入口先抛 `expected number but got object`（真实现场的 ref 化发生在 loader 校验之后的私有路径），无法在不假红的前提下复刻，故单测为该回归的唯一 CI 防线。
+- **适配 dsh 0.1.7-alpha.1 的两处破坏性接缝（双分支共存，老版本行为不变）**：0.1.7 把插件依赖的两个接缝整体换代，本插件在同一次发布里同时支持旧线与新线——① **shell 执行接缝**：`ShellExecutor` 删除 `run`/`start` 抽象方法，改为 `resolve(request)` + `execute(spec)` → `ShellExecution.result()`；旧调用在 linux/darwin 上会抛 `shell.run is not a function`（建仓/快照/diff/回退/gc/索引读写全链失败、撤回不可用），win32 上则被方言探针的 catch 折成「误判 bash」走自建直连通道（功能侥幸可用但打误导日志）。修复＝`runViaExecutor` 按**运行时方法探测**分流（`run` 优先 → `execute` 兜底），两分支共用同一 spec 构造与同一失败分级，并把 0.1.7 新增的 `exitCode === null`（准备期超时/信号终止）单独归类成「命令准备期超时」而不是不可读的 `exit null`。② **settings 接缝**：`dsh-settings` 导出面只剩 `SettingsForms`（`installSettingsSection`/`installSection`/`register` 全树移除），插件原三分支在 0.1.7 上**静默 no-op**（namespace 不注册、热更失效、设置卡片读不到覆盖字段、保存与恢复默认必失败）；新面按 **profile 条目 id**（本机实测为 `recall`）经 `describe`/`update`/`replace` 读写，可写字段必须在 schema 上标 `.volatile()`（schemastery ≥3.18.3 才有，插件 feature-detect），热更经 loader 提交引用后派发的 `loader/volatile-update` 驱动，取值多一层 Volatile 解包。分流判据取「旧注册入口是否缺席」——只看 `describe`/`update` 是函数分不了流（旧面同样有），误判会让 0.1.6 上的卡片失联。探针按新实现重钉（shell 接缝、settings 面、volatile 热更与 `Fiber.entry` 形状），`verify:host` 桩升级为两个 pass（含「只给新面（无 `installSection`）也必须装配成功」——这正是本轮换代被自家桩掩盖的根因），compat-audit 新增 I38/I39，镜像与兼容声明同步到 0.1.7-alpha.1。
+- **「立即 gc」起按磁盘枚举覆盖全部快照仓库，并回收空仓目录（issue #18）**：`runGcAll` 原先只遍历内存缓存（启动预热与历次操作认识过的工作区），会话已删、或从未在本进程 init 过的仓库在磁盘上有、内存里没有——那些恰好是 issue #18 的 GB 级残骸，此前完全不被 gc 覆盖。修复＝注入 `dumpStores`（一条 shell 枚举容器子目录与降级候选目录）后取「内存 ∪ 磁盘」并按 git-dir 去重逐仓 gc；gc 之后追加**空仓目录回收**：仅当 index.json 明确解析为空数组、磁盘无 `snap-*` tag、内存无对应快照三条全中时，用 `legacyRmScript` 把整个 store 目录删掉（不可逆，删前 `console.error` 留痕；entries 为 null 即索引缺失/损坏的隔离现场一律不删）。实测（真实 store 目录、win32 pwsh）：残骸仓库对象 202 → 1 后目录被删，有 tag 的仓库目录与 tag 原样。
+- **工作区根自身是构建产物目录时不再建快照（issue #18）**：`baseExcludes` 是相对工作区 root 的 gitignore 模式，永远匹配不到 root 自己——在 `…/src-tauri/target/debug`、`dist` 这类目录里开会话时，整个构建产物目录会被全量快照（实测 7000 个产物条目里只有 root 下恰好同名的 `build/` 子树 2000 条被排除，root 整体照进），单会话即可积出 GB 级对象库，且这类目录没有回退价值。新增 `src/host/exclude-patterns.js` 判定「root 的任一路径段命中目录形态排除项」（win32 大小写不敏感、POSIX 敏感；看任一段而非 basename——最坏形态 `target/debug` 的 basename 是 `debug`，不在表里），命中的工作区在 `captureSnapshot` 于 `resolveStore` **之前**直接返回：不建快照、连空仓库都不建、不写 feedback（设计行为而非失败）。可见性：`init` 的 `notice.buildRootNotice` 与 `snapshot-info` 的 `notice` 下发同一句提示（含命中的路径段名、给出出口、≤140 字符），client 会话内说明一次并在近消息上节流 toast，避免「撤回按钮凭空不出现」。逃生口复用排除表本身（设置页删掉 `target/` 即恢复，无需新配置项）。存量残骸的整目录清理（含会话已删、内存里没有的仓库）留待后续按需实施。
+- **`baseExcludes` 默认表加宽：编译产物目录与常见二进制/压缩包默认不进快照**：原先默认仅 `.git`、`node_modules/` 与两种存储目录名，`maxFileBytes` 只挡单个大文件、挡不住 `target/` 这类上万小文件整体 GB 级的构建产物——它们既拖慢每次快照的 `add`/遍历，也直接喂大对象库（上条实测的 3.35 GB loose 即由此而来）。新增 `target/`、`dist/`、`build/`、`out/`、`coverage/`、`.next/`、`.nuxt/`、`.output/`、`.cache/`、`.gradle/` 与 `*.exe`、`*.dll`、`*.pdb`、`*.so`、`*.dylib`、`*.msi`、`*.zip`、`*.7z`、`*.rar`、`*.tar`、`*.tar.gz`、`*.iso`。排除只作用于新增暂存（已有命中条目由 excludeSync 的清理循环在下次快照移出），仍可在设置页「基础排除表」逐条删改。
+- **单次 gc 超时 10 分钟 → 30 分钟（`GC_TIMEOUT_MS`）**：GB 级 loose 对象库的单次 repack 可超 10 分钟，被杀的 gc 永远完不成；gc 与快照同在串行队列，加长只影响维护节奏。
+
 ## [2.3.24] - 2026-09-18
 
 ### 新增

package/README.en.md

@@ -7,7 +7,7 @@
 ![Platform](https://img.shields.io/badge/platform-Windows%20%7C%20Linux%20%7C%20macOS-blue)
 ![Build](https://img.shields.io/badge/pure%20JS-green)
 
-[![DSH](https://img.shields.io/badge/DSH-0.1.6--alpha.2-blue)](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.6-alpha.2)
+[![DSH](https://img.shields.io/badge/DSH-0.1.7--alpha.2-blue)](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.7-alpha.2)
 ![DSH](https://img.shields.io/badge/DSH-Desktop-blue)
 ---
 Under any message you've sent, click "↶ Recall" — **your workspace files and the conversation history roll back to just before that message was sent**.
@@ -45,7 +45,7 @@ Files and conversation roll back together: the workspace is first snapshotted in
 
 Abilities with a version in parentheses require that version or later; the rest have no special version requirement.
 
-- **Files + conversation, rolled back together**: recalling isn't just about chat history — files the agent modified go back to their original state too; immune to your project's `.gitattributes` conversion, with byte-level fidelity for line endings and binary content (2.1.1+).
+- **Files + conversation, rolled back together**: recalling isn't just about chat history — files the agent modified go back to their original state too; immune to your project's `.gitattributes` conversion, with byte-level fidelity for line endings and binary content (2.1.1+).
 - **Just want a fresh conversation? Leave the files alone** (2.3.24+): the confirmation panel offers a recall-scope choice — the default "Roll back files & conversation" behaves as before; picking "Conversation only" keeps your project files byte-for-byte untouched (no safety snapshot either) and rewinds only the conversation, ideal when you dislike the reply but want to keep the file changes.
 - **Never touches your project's own git, and keeps it clean**: snapshots live in an independent shadow git repository — branches, staging area, and uncommitted changes are untouched; storage stays under `$DSH_HOME` regardless of the session's sandbox permission (workspace-write / read-only sessions work as usual), falling back to an in-project `.dsh-recall-snapshots` only when home itself is unwritable.
 - **See the list before you act — and change your mind as often as you like**: recall first shows the list of files that will change (modified / restored / deleted); nothing runs until you confirm. After a recall you can recall again to an even earlier point, and files overwritten during a recall always remain recoverable (up to 500 snapshots per workspace by default).
@@ -69,7 +69,7 @@ Boundaries accepted by design and edge cases not yet covered — worth checking
 
 ## Installation
 
-Prerequisites: git CLI (without it the recall button won't appear and a notice shows at the top of the page — DSH itself keeps running); PowerShell 5.1 / 7 on Windows, bash + git on Linux/macOS; DSH `0.1.2-alpha.1` through `0.1.6-alpha.2` (peerDependencies open a window per minor line: `>=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7`, consistent with the `dsh.compatibility.dshReleases` declaration; each line is anchored at its first verified version with an exclusive upper bound at the next minor, so later prereleases/releases within a verified line are admitted without touching the peer declaration, while unverified new minor lines (e.g. 0.1.7) remain blocked). `0.1.1-rc.2` and earlier are no longer declared supported: their client runtime lacks the `sessions`/`workspaces`/`uiWorkspace` services, so the plugin UI silently fails to render.
+Prerequisites: git CLI (without it the recall button won't appear and a notice shows at the top of the page — DSH itself keeps running); PowerShell 5.1 / 7 on Windows, bash + git on Linux/macOS; DSH `0.1.2-alpha.1` through `0.1.7-alpha.2` (peerDependencies open a window per minor line: `>=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7 || >=0.1.7-alpha.1 <0.1.8`, consistent with the `dsh.compatibility.dshReleases` declaration; each line is anchored at its first verified version with an exclusive upper bound at the next minor, so later prereleases/releases within a verified line are admitted without touching the peer declaration, while unverified new minor lines remain blocked). **0.1.7-alpha.1 is a breaking release** (`ShellExecutor.run`/`start` became `execute().result()`, and the settings surface became `SettingsForms`, addressed by profile entry id with `.volatile()` marked fields), and the plugin ships **both seams side by side**: the same release keeps working on every 0.1.2–0.1.6 line and on 0.1.7, with unchanged behaviour on older DSH versions. `0.1.1-rc.2` and earlier are no longer declared supported: their client runtime lacks the `sessions`/`workspaces`/`uiWorkspace` services, so the plugin UI silently fails to render.
 
 - Official DSH plugin command: install and auto-mount into the web profile
 ```powershell
@@ -108,7 +108,7 @@ All options can be edited visually in the "**Settings → Plugin Config → Reca
 | `maxFileBytes` | 104857600 (100MB) | Files larger than this are neither snapshotted nor touched by recalls |
 | `maxSnapshotsPerWorkspace` | 500 | Maximum snapshots kept per workspace; oldest pruned beyond the cap. 0 = unlimited |
 | `retentionDays` | 0 | Keep snapshots for this many days; older ones are deleted. 0 = disabled (works independently of the cap) |
-| `baseExcludes` | `.git`, `node_modules/`, `.dsh-recall-snapshots/`, `dsh-recall-snapshots/` | Base exclusion list (gitignore syntax, lower priority than exclude.txt) |
+| `baseExcludes` | `.git`, `node_modules/`, `.dsh-recall-snapshots/`, `dsh-recall-snapshots/`, `target/`, `dist/`, `build/`, `out/`, `coverage/`, `.next/`, `.nuxt/`, `.output/`, `.cache/`, `.gradle/`, `*.exe`, `*.dll`, `*.pdb`, `*.so`, `*.dylib`, `*.msi`, `*.zip`, `*.7z`, `*.rar`, `*.tar`, `*.tar.gz`, `*.iso` | Base exclusion list (gitignore syntax, lower priority than exclude.txt); excluded large directories are skipped as whole subtrees during snapshot scans. Directory-form entries (e.g. `target/`) mean one more thing: **when a path segment of the workspace root itself matches, snapshots are disabled for that workspace** — patterns are relative to the root, so they can never exclude the root itself (i.e. a session opened inside a build-output directory), and such directories have no rollback value anyway; remove the entry to re-enable |
 | `refillDraft` | true | Refill the recalled message (text and attachments) into the input box after a recall |
 | `snapshotEnabled` | true | Master snapshot switch (off = no new snapshots; existing snapshots remain recallable) |
 | `archiveOriginal` | true | Archive the original session after a recall (off = the original session stays in the session list) |
@@ -165,9 +165,9 @@ Note: all source lives in `src/` (host in `src/host/`, browser side in `src/clie
 
 ### Tests
 
-- `npm test`: pure-logic unit tests (vitest, 28 files / 361 cases, no DSH dependency, runs identically in CI and locally) — config parsing, snapshot parsers, rescue orchestration, error classification, script-template same-name-export contract, client pure functions, published-package layout, snapshot index persistence, storage caps and retention, etc.;
-- `npm run test:probe`: official-API field probes (requires a local dsh installation; **must run after any dsh upgrade**) — pins fields like `renderMessageImages`/`node`/`cwd`, `atSeq`/`increaseTitle` of `sessions.fork`, `listSessions` record shape, `AgentRegistry`, and goes red on violation;
-- `npm run verify:host`: assembly gate (requires a local dsh installation) — boots the plugin with a real cordis context, asserting inject declarations, endpoint registration, Config schema, and teardown cleanliness, catching assembly regressions before release;
+- `npm test`: pure-logic unit tests (vitest, 34 files / 425 cases, no DSH dependency, runs identically in CI and locally) — config parsing, snapshot parsers, rescue orchestration, error classification, script-template same-name-export contract, shell execution dual-channel split and failure grading, settings bridge across both generations, client pure functions, published-package layout, snapshot index persistence, storage caps and retention, etc.;
+- `npm run test:probe`: official-API field probes (requires a local dsh installation; **must run after any dsh upgrade**) — pins fields like `renderMessageImages`/`node`/`cwd`, `atSeq`/`increaseTitle` and the fork-cut anchors of `sessions.fork`, `listSessions` record shape, `AgentRegistry`, the shell execution seam (`execute`/`ShellExecution.result`), the settings surface (`SettingsForms`/profile entry id/volatile gate) plus `loader/volatile-update` and the `Fiber.entry` shape, and goes red on violation;
+- `npm run verify:host`: assembly gate (requires a local dsh installation) — boots the plugin with a real cordis context in two passes (legacy settings stub and a modern-face-only stub), asserting inject declarations, endpoint registration, Config schema, teardown cleanliness and settings-face dispatch, catching assembly regressions before release;
 - `npm run build`: full host+client build (mandatory after any `src/` change); `npm run check:dsh`: dsh version inspection (pre-release).
 - CI (GitHub Actions) runs `npm ci --legacy-peer-deps` + `npm run typecheck` + `npm test` + unified artifact-freshness check (`npm run build && git diff --exit-code lib/`; probes and the assembly gate only run on machines with dsh).
 

package/README.md

@@ -5,7 +5,7 @@
 [![npm version](https://img.shields.io/npm/v/dsh-recall-plugin?style=flat-square&label=npm&color=3178C6)](https://www.npmjs.com/package/dsh-recall-plugin)
 [![npm downloads](https://img.shields.io/npm/dm/dsh-recall-plugin?style=flat-square&label=downloads&color=1F883D)](https://www.npmjs.com/package/dsh-recall-plugin)
 ![License](https://img.shields.io/badge/license-MIT-blue)
-[![DSH](https://img.shields.io/badge/DSH-0.1.6--alpha.2-blue)](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.6-alpha.2)
+[![DSH](https://img.shields.io/badge/DSH-0.1.7--alpha.2-blue)](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.7-alpha.2)
 ---
 在任意一条你发过的消息下方点「↶ 撤回」——**工作区文件和对话历史一起回到那条消息发出之前的状态**。
 ---
@@ -43,7 +43,7 @@
 
 带括号版本号的能力需要该版本或更高；其余无特殊版本要求。
 
-- **文件 + 对话，整段回退**：撤回的不只是聊天记录，agent 改过的文件也一并回到原样；不受项目 `.gitattributes` 转换影响，换行与二进制内容字节级保真（2.1.1+）。
+- **文件 + 对话，整段回退**：撤回的不只是聊天记录，agent 改过的文件也一并回到原样；不受项目 `.gitattributes` 转换影响，换行与二进制内容字节级保真（2.1.1+）。
 - **只想重来对话？文件可以不动**（2.3.24+）：确认面板里可二选一撤回范围——默认「回退文件与对话」同现状；选「仅撤回对话」则项目文件一个字节都不动（也不打安全快照），只有对话回退，适合对生成结果不满意、但文件改动恰是想要的场景。
 - **不碰你项目自己的 git，目录保持干净**：快照存在独立的影子 git 仓库里，分支、暂存区、未提交改动统统不受影响；存储默认落在 `$DSH_HOME` 下，与会话的沙箱权限无关（workspace-write / read-only 照常工作），仅当 home 不可写才降级到项目内 `.dsh-recall-snapshots`。
 - **先看清单再动手，可反复后悔**：撤回前展示将变更的文件清单（修改 / 恢复 / 删除），确认后才执行；撤回后还能再撤到更早，被覆盖的文件一直找得回来（默认每工作区保留 500 条）。
@@ -67,7 +67,7 @@
 
 ## 安装
 
-前置：git CLI（未装时撤回按钮不出现，页面顶部会提示安装 git，不影响 DSH 运行）；Windows 上 PowerShell 5.1 / 7 均可，Linux/macOS 需 bash + git；DSH `0.1.2-alpha.1` 至 `0.1.6-alpha.2`（peerDependencies 为按 minor 版本线开窗 `>=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7`，与 `dsh.compatibility.dshReleases` 声明一致；每条线以首个核验版本为下限、开一条上界到下一 minor 的区间，同线内后续 prerelease/正式版自动放行、无需改 peer 声明，未验证的新 minor 线（如 0.1.7）仍被拦截）。`0.1.1-rc.2` 及更早不再声明支持：那条线的客户端运行时没有 `sessions`/`workspaces`/`uiWorkspace` 服务，插件 UI 会静默不渲染。
+前置：git CLI（未装时撤回按钮不出现，页面顶部会提示安装 git，不影响 DSH 运行）；Windows 上 PowerShell 5.1 / 7 均可，Linux/macOS 需 bash + git；DSH `0.1.2-alpha.1` 至 `0.1.7-alpha.2`（peerDependencies 为按 minor 版本线开窗 `>=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7 || >=0.1.7-alpha.1 <0.1.8`，与 `dsh.compatibility.dshReleases` 声明一致；每条线以首个核验版本为下限、开一条上界到下一 minor 的区间，同线内后续 prerelease/正式版自动放行、无需改 peer 声明，未核验的新 minor 线仍被拦截）。**0.1.7-alpha.1 是破坏性版本**（`ShellExecutor` 的 `run`/`start` 换成 `execute().result()`；settings 面换成 `SettingsForms`、按 profile 条目 id 寻址并要求字段标 `.volatile()`），插件已做**双分支共存适配**——同一次发布同时兼容 0.1.2–0.1.6 各线段与 0.1.7，老版本 DSH 上的行为不变。`0.1.1-rc.2` 及更早不再声明支持：那条线的客户端运行时没有 `sessions`/`workspaces`/`uiWorkspace` 服务，插件 UI 会静默不渲染。
 
 
 - DSH 官方插件命令：安装并自动挂载进 web profile
@@ -111,7 +111,7 @@ dsh plugin --profile web remove dsh-recall-plugin
 | `maxFileBytes` | 104857600（100MB） | 超过该大小的文件不进快照、不被回退触碰 |
 | `maxSnapshotsPerWorkspace` | 500 | 每个工作区保留的最大快照数，超限自动删除最旧的；0 = 不限制 |
 | `retentionDays` | 0 | 按天数保留快照，超期自动删除；0 = 不启用（与条数上限各自独立生效） |
-| `baseExcludes` | `.git`、`node_modules/`、`.dsh-recall-snapshots/`、`dsh-recall-snapshots/` | 基础排除表（gitignore 语法，优先级低于 exclude.txt） |
+| `baseExcludes` | `.git`、`node_modules/`、`.dsh-recall-snapshots/`、`dsh-recall-snapshots/`、`target/`、`dist/`、`build/`、`out/`、`coverage/`、`.next/`、`.nuxt/`、`.output/`、`.cache/`、`.gradle/`、`*.exe`、`*.dll`、`*.pdb`、`*.so`、`*.dylib`、`*.msi`、`*.zip`、`*.7z`、`*.rar`、`*.tar`、`*.tar.gz`、`*.iso` | 基础排除表（gitignore 语法，优先级低于 exclude.txt）；被排除的大目录整棵子树不进快照扫描。其中「目录形态」项（如 `target/`）另有一层含义：**工作区根自身的路径段命中时，该工作区不启用快照**——在构建产物目录里开会话时排除表本来就管不到它自己（模式是相对该 root 的），这类目录也没有回退价值；删掉对应项即恢复 |
 | `refillDraft` | true | 撤回后把被撤回的消息（文本与附件）回填到输入框 |
 | `snapshotEnabled` | true | 快照总开关（关闭只冻结新建，已有快照仍可撤回） |
 | `archiveOriginal` | true | 撤回后归档原会话（关闭后原会话保留在会话列表中） |
@@ -168,9 +168,9 @@ pnpm install
 
 ### 测试
 
-- `npm test`：纯逻辑单测（vitest，28 个文件 361 例，无 DSH 依赖，CI 与本地同跑）——配置解析、快照解析器、救援编排、错误分类、脚本模板同名导出契约、客户端纯函数、发布包内容布局、快照索引持久化、存储上限与保留天数等；
-- `npm run test:probe`：官方 API 字段探针（依赖本机 dsh 安装；dsh 升级后本地必跑）——钉住 `renderMessageImages`/`node`/`cwd`、`sessions.fork` 的 `atSeq`/`increaseTitle`、`listSessions` 记录结构、`AgentRegistry` 等字段，违反即红；
-- `npm run verify:host`：装配门禁（依赖本机 dsh 安装）——用真实 cordis 起插件，断言 inject 声明、端点注册、Config schema、卸载清理，装配回归发版前即可拦截；
+- `npm test`：纯逻辑单测（vitest，34 个文件 425 例，无 DSH 依赖，CI 与本地同跑）——配置解析、快照解析器、救援编排、错误分类、脚本模板同名导出契约、执行通道双分支与失败分级、settings 双代桥接、客户端纯函数、发布包内容布局、快照索引持久化、存储上限与保留天数等；
+- `npm run test:probe`：官方 API 字段探针（依赖本机 dsh 安装；dsh 升级后本地必跑）——钉住 `renderMessageImages`/`node`/`cwd`、`sessions.fork` 的 `atSeq`/`increaseTitle` 与切点锚点、`listSessions` 记录结构、`AgentRegistry`、shell 执行接缝（`execute`/`ShellExecution.result`）、settings 面（`SettingsForms`/profile 条目 id/volatile 门槛）与 `loader/volatile-update`/`Fiber.entry` 形状等字段，违反即红；
+- `npm run verify:host`：装配门禁（依赖本机 dsh 安装）——用真实 cordis 起插件跑两个 pass（旧面桩 + 只给新面的桩），断言 inject 声明、端点注册、Config schema、卸载清理与 settings 面分派，装配回归发版前即可拦截；
 - `npm run build`：host+client 全量打包（改任何 `src/` 后必跑）；`npm run check:dsh`：dsh 版本巡检（发布前）。
 - CI（GitHub Actions）跑 `npm ci --legacy-peer-deps` + `npm run typecheck` + `npm test` + 产物新鲜度统一校验（`npm run build && git diff --exit-code lib/`；探针与装配门禁只在有 dsh 的机器跑）。
 

package/cordis.patch.yml

@@ -17,4 +17,7 @@
         gcHours: 24            # 距上次 gc 超过多少小时触发（与条数先到先触发）
         maxFileBytes: 104857600  # 超过该大小的文件不进快照、不被回退触碰
         refillDraft: true      # 撤回后把被撤回的消息文本回填到输入框
-        # baseExcludes: ['.git', 'node_modules/', '.dsh-recall-snapshots/']  # 基础排除表（gitignore 语法）
+        # baseExcludes 默认不在此列出：默认表随插件 schema 下发，在设置页
+        # 「基础排除表」增删即可。若要在这里覆盖，必须重述完整表——patch 按行
+        # 替换 config，写半张表会取消其余默认排除（如漏掉 dsh-recall-snapshots/
+        # 会在 root=HOME 时把快照库自身吞进快照）。

package/lib/client.js

@@ -362,6 +362,9 @@
         if (notice && notice.homeFallback) {
           showNotice("home", "home \u76EE\u5F55\u4E0D\u53EF\u5199\uFF0C\u5FEB\u7167\u5DF2\u964D\u7EA7\u5B58\u50A8\u5230\u9879\u76EE\u5185 .dsh-recall-snapshots \u76EE\u5F55\u3002");
         }
+        if (notice && notice.buildRootNotice) {
+          showNotice("buildRoot", String(notice.buildRootNotice).slice(0, 140));
+        }
       }).catch(() => {
         initMap.delete(sessionId);
       });
@@ -759,6 +762,10 @@
               if (recent) showThrottledToast("\u5FEB\u7167\u5931\u8D25\uFF1A" + String(res.error || "\u672A\u77E5\u539F\u56E0").slice(0, 140));
               return;
             }
+            if (res && res.notice) {
+              if (recent) showThrottledToast(String(res.notice).slice(0, 140));
+              return;
+            }
             if (recent && attempts < MAX_ATTEMPTS) timer = setTimeout(schedule, RETRY_MS);
           }).catch(() => {
             if (alive && recent && attempts < MAX_ATTEMPTS) timer = setTimeout(schedule, RETRY_MS);

package/lib/config.js

@@ -1,20 +1,115 @@
 import Schema from "@deepseek-ai/schemastery";
+const BASE_EXCLUDES = [
+  ".git",
+  "node_modules/",
+  ".dsh-recall-snapshots/",
+  "dsh-recall-snapshots/",
+  "target/",
+  "dist/",
+  "build/",
+  "out/",
+  "coverage/",
+  ".next/",
+  ".nuxt/",
+  ".output/",
+  ".cache/",
+  ".gradle/",
+  "*.exe",
+  "*.dll",
+  "*.pdb",
+  "*.so",
+  "*.dylib",
+  "*.msi",
+  "*.zip",
+  "*.7z",
+  "*.rar",
+  "*.tar",
+  "*.tar.gz",
+  "*.iso"
+];
+function withVolatile(field) {
+  const schema = field;
+  return typeof schema.volatile === "function" ? schema.volatile() : field;
+}
 const Config = Schema.object({
-  gcSnaps: Schema.number().default(50).description("\u6BCF\u79EF\u7D2F\u591A\u5C11\u6761\u5FEB\u7167\u89E6\u53D1\u4E00\u6B21 git gc"),
-  gcHours: Schema.number().default(24).description("\u8DDD\u4E0A\u6B21 gc \u8D85\u8FC7\u591A\u5C11\u5C0F\u65F6\u89E6\u53D1\uFF08\u4E0E\u6761\u6570\u5148\u5230\u5148\u89E6\u53D1\uFF09"),
-  maxFileBytes: Schema.number().default(104857600).description("\u8D85\u8FC7\u8BE5\u5B57\u8282\u6570\u7684\u6587\u4EF6\u4E0D\u8FDB\u5FEB\u7167\u3001\u4E0D\u88AB\u56DE\u9000\u89E6\u78B0"),
-  maxSnapshotsPerWorkspace: Schema.number().default(500).description("\u6BCF\u4E2A\u5DE5\u4F5C\u533A\u4FDD\u7559\u7684\u6700\u5927\u5FEB\u7167\u6570\uFF0C\u8D85\u9650\u5220\u9664\u6700\u65E7\u7684"),
-  // 排除表必须同时覆盖两种存储目录名：降级存储是项目内 .dsh-recall-snapshots/，
-  // 而 home 存储目录名是 dsh-recall-snapshots/（无点）——工作区 root 恰为
-  // HOME 时（容器 root=/root 等）它落在工作区内，漏排除会让 git add -A
-  // 把影子仓库自己吞进去、快照全部失败（issue #6）
-  baseExcludes: Schema.array(Schema.string()).default([".git", "node_modules/", ".dsh-recall-snapshots/", "dsh-recall-snapshots/"]).description("\u57FA\u7840\u6392\u9664\u8868\uFF08gitignore \u8BED\u6CD5\uFF0C\u4F18\u5148\u7EA7\u4F4E\u4E8E exclude.txt\uFF09"),
-  refillDraft: Schema.boolean().default(true).description("\u64A4\u56DE\u540E\u628A\u88AB\u64A4\u56DE\u7684\u6D88\u606F\uFF08\u6587\u672C\u4E0E\u9644\u4EF6\uFF09\u56DE\u586B\u5230\u8F93\u5165\u6846"),
-  snapshotEnabled: Schema.boolean().default(true).description("\u542F\u7528\u6D88\u606F\u5FEB\u7167\uFF08\u5173\u95ED\u540E\u4E0D\u518D\u65B0\u5EFA\uFF0C\u5DF2\u6709\u5FEB\u7167\u4ECD\u53EF\u64A4\u56DE\uFF09"),
-  archiveOriginal: Schema.boolean().default(true).description("\u64A4\u56DE\u540E\u5F52\u6863\u539F\u4F1A\u8BDD\uFF08\u5173\u95ED\u540E\u539F\u4F1A\u8BDD\u4FDD\u7559\u5728\u5217\u8868\u4E2D\uFF09"),
-  retentionDays: Schema.number().default(0).description("\u6309\u5929\u6570\u4FDD\u7559\u5FEB\u7167\uFF0C\u8D85\u671F\u81EA\u52A8\u5220\u9664\uFF1B0 \u8868\u793A\u4E0D\u542F\u7528")
+  gcSnaps: withVolatile(Schema.number().default(50).description("\u6BCF\u79EF\u7D2F\u591A\u5C11\u6761\u5FEB\u7167\u89E6\u53D1\u4E00\u6B21 git gc")),
+  gcHours: withVolatile(Schema.number().default(24).description("\u8DDD\u4E0A\u6B21 gc \u8D85\u8FC7\u591A\u5C11\u5C0F\u65F6\u89E6\u53D1\uFF08\u4E0E\u6761\u6570\u5148\u5230\u5148\u89E6\u53D1\uFF09")),
+  maxFileBytes: withVolatile(Schema.number().default(104857600).description("\u8D85\u8FC7\u8BE5\u5B57\u8282\u6570\u7684\u6587\u4EF6\u4E0D\u8FDB\u5FEB\u7167\u3001\u4E0D\u88AB\u56DE\u9000\u89E6\u78B0")),
+  maxSnapshotsPerWorkspace: withVolatile(Schema.number().default(500).description("\u6BCF\u4E2A\u5DE5\u4F5C\u533A\u4FDD\u7559\u7684\u6700\u5927\u5FEB\u7167\u6570\uFF0C\u8D85\u9650\u5220\u9664\u6700\u65E7\u7684")),
+  baseExcludes: withVolatile(Schema.array(Schema.string()).default(BASE_EXCLUDES).description("\u57FA\u7840\u6392\u9664\u8868\uFF08gitignore \u8BED\u6CD5\uFF0C\u4F18\u5148\u7EA7\u4F4E\u4E8E exclude.txt\uFF09")),
+  refillDraft: withVolatile(Schema.boolean().default(true).description("\u64A4\u56DE\u540E\u628A\u88AB\u64A4\u56DE\u7684\u6D88\u606F\uFF08\u6587\u672C\u4E0E\u9644\u4EF6\uFF09\u56DE\u586B\u5230\u8F93\u5165\u6846")),
+  snapshotEnabled: withVolatile(Schema.boolean().default(true).description("\u542F\u7528\u6D88\u606F\u5FEB\u7167\uFF08\u5173\u95ED\u540E\u4E0D\u518D\u65B0\u5EFA\uFF0C\u5DF2\u6709\u5FEB\u7167\u4ECD\u53EF\u64A4\u56DE\uFF09")),
+  archiveOriginal: withVolatile(Schema.boolean().default(true).description("\u64A4\u56DE\u540E\u5F52\u6863\u539F\u4F1A\u8BDD\uFF08\u5173\u95ED\u540E\u539F\u4F1A\u8BDD\u4FDD\u7559\u5728\u5217\u8868\u4E2D\uFF09")),
+  retentionDays: withVolatile(Schema.number().default(0).description("\u6309\u5929\u6570\u4FDD\u7559\u5FEB\u7167\uFF0C\u8D85\u671F\u81EA\u52A8\u5220\u9664\uFF1B0 \u8868\u793A\u4E0D\u542F\u7528"))
 });
-const BASE_EXCLUDES = [".git", "node_modules/", ".dsh-recall-snapshots/", "dsh-recall-snapshots/"];
+function isLegacySettingsFace(settings) {
+  const svc = settings;
+  if (!svc) return false;
+  return typeof svc.installSection === "function" || typeof svc.register === "function";
+}
+const LEGACY_SETTINGS_NS = "dsh-recall";
+function resolveSettingsNs(ctx, settings) {
+  const entry = ctx && ctx.fiber ? ctx.fiber.entry : null;
+  const entryIds = [];
+  for (const candidate of [entry && entry.options ? entry.options.id : null, entry ? entry.id : null]) {
+    if (typeof candidate === "string" && candidate && entryIds.indexOf(candidate) < 0) entryIds.push(candidate);
+  }
+  const known = describeNamespaces(settings);
+  if (isLegacySettingsFace(settings)) {
+    if (known.indexOf(LEGACY_SETTINGS_NS) >= 0) return LEGACY_SETTINGS_NS;
+    for (const id of entryIds) {
+      if (known.indexOf(id) >= 0) return id;
+    }
+    return LEGACY_SETTINGS_NS;
+  }
+  for (const id of entryIds) {
+    if (known.indexOf(id) >= 0) return id;
+  }
+  return entryIds.length ? entryIds[0] : null;
+}
+function describeNamespaces(settings) {
+  const svc = settings;
+  if (!svc || typeof svc.describe !== "function") return [];
+  try {
+    const list = svc.describe();
+    const out = [];
+    for (const row of Array.isArray(list) ? list : []) {
+      const ns = row && row.ns;
+      if (typeof ns === "string" && ns) out.push(ns);
+    }
+    return out;
+  } catch (error) {
+    return [];
+  }
+}
+function unwrapConfig(raw) {
+  const source = raw && typeof raw === "object" ? raw : {};
+  const out = {};
+  for (const key of Object.keys(source)) out[key] = unwrapOnce(source[key]);
+  return out;
+}
+function unwrapOnce(value) {
+  if (isVolatileRef(value)) return value.get();
+  if (Array.isArray(value)) return value.map((item) => isVolatileRef(item) ? item.get() : item);
+  if (isPlainObject(value)) {
+    const out = {};
+    const entries = value;
+    for (const key of Object.keys(entries)) {
+      const item = entries[key];
+      out[key] = isVolatileRef(item) ? item.get() : item;
+    }
+    return out;
+  }
+  return value;
+}
+function isVolatileRef(value) {
+  return Boolean(value) && typeof value.get === "function";
+}
+function isPlainObject(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
 const DEFAULTS = {
   gcSnaps: 50,
   gcHours: 24,
@@ -49,5 +144,10 @@ function createConfig(raw) {
 export {
   Config,
   DEFAULTS,
-  createConfig
+  LEGACY_SETTINGS_NS,
+  createConfig,
+  isLegacySettingsFace,
+  resolveSettingsNs,
+  unwrapConfig,
+  withVolatile
 };

package/lib/exclude-patterns.js

@@ -0,0 +1,34 @@
+const NON_NAME_CHARS = /[*?[\]\\/]/;
+function dirNamePatterns(base) {
+  if (!Array.isArray(base)) return [];
+  const out = [];
+  for (const raw of base) {
+    if (typeof raw !== "string") continue;
+    const t = raw.trim();
+    if (!t || t.charAt(0) === "#" || t.charAt(0) === "!") continue;
+    const name = t.replace(/\/+$/, "");
+    if (!name || NON_NAME_CHARS.test(name)) continue;
+    out.push(name);
+  }
+  return out;
+}
+function buildArtifactRootSegment(root, base, isWin) {
+  const names = dirNamePatterns(base);
+  if (!names.length || typeof root !== "string" || !root) return null;
+  const parts = root.split(/[\\/]+/).filter((s) => s.length > 0);
+  const segs = isWin && /^[a-zA-Z]:$/.test(parts[0] || "") ? parts.slice(1) : parts;
+  const pool = isWin ? names.map((n) => n.toLowerCase()) : names;
+  for (const seg of segs) {
+    const i = pool.indexOf(isWin ? seg.toLowerCase() : seg);
+    if (i >= 0) return names[i];
+  }
+  return null;
+}
+function buildRootNotice(segment) {
+  return "\u5F53\u524D\u5DE5\u4F5C\u533A\u4F4D\u4E8E\u6784\u5EFA\u4EA7\u7269\u76EE\u5F55\uFF08\u8DEF\u5F84\u6BB5 " + segment + "\uFF09\uFF0C\u5DF2\u8DF3\u8FC7\u9879\u76EE\u5FEB\u7167\uFF1B\u5982\u9700\u5728\u6B64\u76EE\u5F55\u4F7F\u7528\u64A4\u56DE\uFF0C\u8BF7\u5728\u63D2\u4EF6\u8BBE\u7F6E\u91CC\u4ECE\u300C\u57FA\u7840\u6392\u9664\u8868\u300D\u79FB\u9664\u8BE5\u9879\u3002";
+}
+export {
+  buildArtifactRootSegment,
+  buildRootNotice,
+  dirNamePatterns
+};

package/lib/index.js

@@ -1,4 +1,5 @@
-import { createConfig, Config, DEFAULTS } from "./config.js";
+import { createConfig, Config, DEFAULTS, unwrapConfig } from "./config.js";
+import { installSettingsNamespace } from "./settings-bridge.js";
 import { parseStoresDump, parseExcludeDump } from "./dump-parse.js";
 import { createRuntime } from "./store.js";
 import { createSnapshots, rescueRollback } from "./snapshots.js";
@@ -11,14 +12,14 @@ import * as E from "./errors.js";
 const name = "dsh-recall-plugin";
 const inject = ["shell", "sessions", "agents"];
 function apply(ctx, config) {
-  const cfg = createConfig(config);
+  const cfg = createConfig(unwrapConfig(config));
   const rt = createRuntime(ctx, cfg);
   const snaps = createSnapshots(ctx, rt, cfg);
-  const maint = createMaintenance(ctx, rt, snaps, cfg);
+  const maint = createMaintenance(ctx, rt, snaps, cfg, { dumpStores });
   const state = rt.state;
   let readSettings = () => config;
   function applyResolvedConfig(resolved) {
-    Object.assign(cfg, createConfig(resolved && typeof resolved === "object" ? resolved : {}));
+    Object.assign(cfg, createConfig(unwrapConfig(resolved)));
   }
   const settingsHooks = {
     setSource: (fn) => {
@@ -26,29 +27,14 @@ function apply(ctx, config) {
     },
     onChange: () => applyResolvedConfig(readSettings())
   };
-  try {
-    if (typeof dshSettings.installSettingsSection === "function") {
-      dshSettings.installSettingsSection(ctx, "dsh-recall", Config, config, settingsHooks);
-    } else if (typeof ctx.inject === "function") {
-      ctx.inject(["settings"], (settingsCtx) => {
-        const settingsService = settingsCtx.settings;
-        if (typeof settingsService.installSection === "function") {
-          settingsService.installSection(ctx, "dsh-recall", Config, config, settingsHooks);
-        } else if (typeof settingsService.register === "function") {
-          const scope = settingsService.register("dsh-recall", Config, { base: config });
-          settingsHooks.setSource(() => scope.get());
-          settingsHooks.onChange();
-          scope.watch(() => settingsHooks.onChange());
-          settingsCtx.effect(() => () => {
-            settingsHooks.setSource(() => config);
-            settingsHooks.onChange();
-          });
-        }
-      });
-    }
-  } catch (error) {
-    rt.recordError("recall settings namespace skipped: " + String(error));
-  }
+  installSettingsNamespace({
+    ctx,
+    dshSettings,
+    config,
+    settingsHooks,
+    applyResolvedConfig,
+    recordError: (message) => rt.recordError(message)
+  });
   const supported = process.platform === "win32" || process.platform === "linux" || process.platform === "darwin";
   const MAX_BODY_BYTES = 1048576;
   const listCache = { at: 0, items: null, stale: false, refreshing: null };

package/lib/maintenance.js

@@ -1,3 +1,5 @@
+const GC_RETRY_BACKOFF_MS = 18e5;
+const GC_TIMEOUT_MS = 18e5;
 function selectOverLimitVictims(snapshots, limit) {
   if (!limit || limit <= 0) return /* @__PURE__ */ new Map();
   const byRoot = /* @__PURE__ */ new Map();
@@ -27,7 +29,7 @@ function selectExpiredVictims(snapshots, retentionDays, now) {
   }
   return byRoot;
 }
-function createMaintenance(ctx, rt, snaps, config) {
+function createMaintenance(ctx, rt, snaps, config, deps = {}) {
   const sessions = ctx.sessions;
   const state = rt.state;
   const S = rt.scripts;
@@ -150,20 +152,80 @@ function createMaintenance(ctx, rt, snaps, config) {
     state.gcCount.set(store.git, count);
     if (!force && count < config.gcSnaps && now - last < config.gcHours * 36e5) return false;
     state.gcCount.set(store.git, 0);
+    let ok = false;
     try {
       await sweepDeletedSessions();
       await enforceLimits();
       await enforceRetention();
-      await rt.runShell(S.gcScript(store, state.gitExe), { timeoutMs: 6e5, stdoutMaxBytes: 4096 });
+      await rt.runShell(S.gcScript(store, state.gitExe), { timeoutMs: GC_TIMEOUT_MS, stdoutMaxBytes: 4096 });
+      ok = true;
     } catch (error) {
       rt.recordError("recall maintenance failed: " + String(error));
     }
-    state.gcLastAt.set(store.git, Date.now());
+    state.gcLastAt.set(store.git, ok ? Date.now() : Date.now() - config.gcHours * 36e5 + GC_RETRY_BACKOFF_MS);
     return true;
   }
+  async function dumpDiskStores() {
+    if (typeof deps.dumpStores !== "function") return /* @__PURE__ */ new Map();
+    try {
+      return await deps.dumpStores();
+    } catch (error) {
+      rt.recordError("recall disk store dump failed: " + String(error));
+      return /* @__PURE__ */ new Map();
+    }
+  }
+  function mergeStores(disk) {
+    const byGit = /* @__PURE__ */ new Map();
+    for (const store of state.stores.values()) {
+      if (store && store.git) byGit.set(store.git, store);
+    }
+    for (const dir of disk.keys()) {
+      if (!dir) continue;
+      const store = rt.storeFromDir(dir, false);
+      if (store && store.git && !byGit.has(store.git)) byGit.set(store.git, store);
+    }
+    return Array.from(byGit.values());
+  }
+  function memorySnapshotCount(dir, root) {
+    let n = 0;
+    for (const snap of state.snapshots.values()) {
+      if (!snap) continue;
+      const owner = state.stores.get(snap.root);
+      if (owner && owner.dir === dir || root && snap.root === root) n++;
+    }
+    return n;
+  }
+  async function reapEmptyStores(disk) {
+    if (!state.gitExe) return 0;
+    let removed = 0;
+    for (const [dir, info] of disk) {
+      if (!dir || !info) continue;
+      if (!Array.isArray(info.entries) || info.entries.length) continue;
+      if (memorySnapshotCount(dir, info.root) > 0) continue;
+      const store = rt.storeFromDir(dir, false);
+      try {
+        const tags = S.stripBom(await rt.runShell(S.listTagsScript(store, state.gitExe), { timeoutMs: 6e4, stdoutMaxBytes: 4096 }));
+        if (String(tags).trim()) continue;
+        await rt.runShell(S.legacyRmScript(dir), { timeoutMs: 12e4, stdoutMaxBytes: 4096 });
+        for (const [root, st] of state.stores.entries()) {
+          if (st && st.dir === dir) state.stores.delete(root);
+        }
+        state.gcLastAt.delete(store.git);
+        state.gcCount.delete(store.git);
+        if (info.root) state.indexLoaded.delete(info.root);
+        console.error("recall reaped empty store:", dir);
+        removed++;
+      } catch (error) {
+        rt.recordError("recall reap store failed for " + dir + ": " + String(error));
+      }
+    }
+    return removed;
+  }
   async function runGcAll() {
-    const stores = Array.from(new Set(Array.from(state.stores.values()).filter((s) => Boolean(s))));
-    if (!stores.length || !state.gitExe) return false;
+    if (!state.gitExe) return false;
+    const disk = await dumpDiskStores();
+    const stores = mergeStores(disk);
+    if (!stores.length) return false;
     try {
       await sweepDeletedSessions();
     } catch (error) {
@@ -182,14 +244,16 @@ function createMaintenance(ctx, rt, snaps, config) {
     let done = 0;
     for (const store of stores) {
       try {
-        await rt.runShell(S.gcScript(store, state.gitExe), { timeoutMs: 6e5, stdoutMaxBytes: 4096 });
+        await rt.runShell(S.gcScript(store, state.gitExe), { timeoutMs: GC_TIMEOUT_MS, stdoutMaxBytes: 4096 });
         done++;
+        state.gcLastAt.set(store.git, Date.now());
       } catch (error) {
         rt.recordError("recall gc failed for " + (store && store.git) + ": " + String(error));
+        state.gcLastAt.set(store.git, Date.now() - config.gcHours * 36e5 + GC_RETRY_BACKOFF_MS);
       }
-      state.gcLastAt.set(store.git, Date.now());
       state.gcCount.set(store.git, 0);
     }
+    await reapEmptyStores(disk);
     return true;
   }
   async function maybeMaintain(sessionId) {

package/lib/routes-core.js

@@ -1,5 +1,6 @@
 import { ENV_HINTS } from "./diagnostics.js";
 import { parseTreeId } from "./snapshots.js";
+import { buildArtifactRootSegment, buildRootNotice } from "./exclude-patterns.js";
 function createRoutesCore(deps) {
   const { rt, snaps, state, cfg, supported, enqueue, agentBusy, rescueRollback, E } = deps;
   return {
@@ -21,6 +22,8 @@ function createRoutesCore(deps) {
           gitMissing: state.gitExe === "",
           homeFallback: store ? !store.home : false
         };
+        const artifactSeg = buildArtifactRootSegment(root, cfg.baseExcludes, rt.isWin);
+        if (artifactSeg) notice.buildRootNotice = buildRootNotice(artifactSeg);
       }
       return { ok: Boolean(root), root: root || null, notice, config: { refillDraft: cfg.refillDraft, archiveOriginal: cfg.archiveOriginal } };
     },
@@ -28,7 +31,15 @@ function createRoutesCore(deps) {
       const id = args && args.messageId ? String(args.messageId) : "";
       const snap = state.snapshots.get(id);
       const feedback = await snaps.feedbackFor(args ? args.sessionId : null, id);
-      return { has: Boolean(snap), time: snap ? snap.time : null, id, ...feedback };
+      const sroot = await rt.resolveRoot(args && args.sessionId ? String(args.sessionId) : null);
+      const artifactSeg = sroot ? buildArtifactRootSegment(sroot, cfg.baseExcludes, rt.isWin) : null;
+      return {
+        has: Boolean(snap),
+        time: snap ? snap.time : null,
+        id,
+        ...feedback,
+        notice: artifactSeg ? buildRootNotice(artifactSeg) : void 0
+      };
     },
     "preview": async (args) => {
       const id = args && args.messageId ? String(args.messageId) : "";

package/lib/routes-manage.js

@@ -1,5 +1,6 @@
 import { isSafetySnapshotId } from "./snapshots.js";
 import { parseExcludeDump } from "./dump-parse.js";
+import { resolveSettingsNs } from "./config.js";
 function createRoutesManage(deps) {
   const {
     ctx,
@@ -246,6 +247,9 @@ function createRoutesManage(deps) {
     },
     // 设置页「插件配置」卡片读配置：resolved 全量值 + 用户已覆盖字段 + env
     // 锁定字段（环境变量优先级最高）+ 可写性（只读 provider 禁存）。
+    // ns 不写死：0.1.7 的 settings ns 是 profile entry id（本机实测 'recall'），
+    // ≤0.1.6 才是注册出来的 namespace 'dsh-recall'——统一由 resolveSettingsNs
+    // 按 describe 交集解析（解析不到时按「无覆盖」读，卡片仍展示 resolved 值）。
     "config-get": async () => {
       const envLocks = {
         gcSnaps: Boolean(process.env && process.env.DSH_RECALL_GC_SNAPS),
@@ -257,7 +261,8 @@ function createRoutesManage(deps) {
         const settings = ctx.get("settings");
         if (settings && typeof settings.describe === "function") {
           const list = settings.describe();
-          const ours = (Array.isArray(list) ? list : []).find((d) => d && d.ns === "dsh-recall");
+          const ns = resolveSettingsNs(ctx, settings);
+          const ours = ns ? (Array.isArray(list) ? list : []).find((d) => d && d.ns === ns) : null;
           if (ours && ours.user && typeof ours.user === "object") overridden = ours.user;
           writable = settings.writable !== false;
         }
@@ -282,7 +287,10 @@ function createRoutesManage(deps) {
       };
     },
     // 设置页「插件配置」卡片存配置：白名单字段 + 类型清洗后经 settings.update
-    // 写进用户层，watch 链路把新值热更新进 cfg，无需重启。
+    // 写进用户层（旧面）或 profile entry（新面），热更链路把新值更新进 cfg，
+    // 无需重启。ns 取解析结果——未解析到时与「服务不可用」同一出口：文案保留
+    // 「按 id: recall 覆盖配置」的逃生口（改 profile 的 cordis.patch.yml 仍是
+    // 任何版本下都能生效的兜底路径）。
     "config-set": async (args) => {
       const patch = args && args.patch && typeof args.patch === "object" ? args.patch : {};
       const clean = {};
@@ -313,11 +321,12 @@ function createRoutesManage(deps) {
       } catch (error) {
         settings = null;
       }
-      if (!settings || typeof settings.update !== "function") {
+      const ns = settings ? resolveSettingsNs(ctx, settings) : null;
+      if (!settings || !ns || typeof settings.update !== "function") {
         return { ok: false, code: E.RECALL_SETTINGS_UNAVAILABLE, message: "\u8BBE\u7F6E\u670D\u52A1\u4E0D\u53EF\u7528\uFF1A\u8BF7\u5728 profile \u7684 cordis.patch.yml \u6309 id: recall \u8986\u76D6\u914D\u7F6E" };
       }
       try {
-        await settings.update("dsh-recall", clean);
+        await settings.update(ns, clean);
       } catch (error) {
         const se = error;
         return { ok: false, code: E.RECALL_SETTINGS_WRITE_FAILED, message: "\u914D\u7F6E\u5199\u5165\u5931\u8D25\uFF1A" + String(se && se.message ? se.message : error) };
@@ -548,14 +557,15 @@ function createRoutesManage(deps) {
       } catch (error) {
         settings = null;
       }
-      if (!settings || typeof settings.update !== "function") {
+      const ns = settings ? resolveSettingsNs(ctx, settings) : null;
+      if (!settings || !ns || typeof settings.update !== "function") {
         return { ok: false, code: E.RECALL_SETTINGS_UNAVAILABLE, message: "\u8BBE\u7F6E\u670D\u52A1\u4E0D\u53EF\u7528\uFF1A\u8BF7\u5728 profile \u7684 cordis.patch.yml \u6309 id: recall \u8986\u76D6\u914D\u7F6E" };
       }
       try {
         if (typeof settings.replace === "function") {
-          await settings.replace("dsh-recall", {});
+          await settings.replace(ns, {});
         } else {
-          await settings.update("dsh-recall", Object.assign({}, DEFAULTS, { baseExcludes: DEFAULTS.baseExcludes.slice() }));
+          await settings.update(ns, Object.assign({}, DEFAULTS, { baseExcludes: DEFAULTS.baseExcludes.slice() }));
         }
       } catch (error) {
         const re = error;

package/lib/scripts.posix.js

@@ -20,7 +20,19 @@ function dropGitlinksBlock() {
 }
 function oversizeBlock(maxBytes) {
   return [
-    'find "$root" -type f -size +' + String(maxBytes || MAX_FILE_BYTES) + "c -print0 2>/dev/null | while IFS= read -r -d '' f; do",
+    "oversize_args=()",
+    'while IFS= read -r line || [ -n "$line" ]; do',
+    "  t=${line%$'\\r'}",
+    '  t="${t#"${t%%[![:space:]]*}"}"; t="${t%"${t##*[![:space:]]}"}"',
+    '  if [ -z "$t" ]; then continue; fi',
+    '  case "$t" in \\#* | \\!*) continue ;; esac',
+    '  t="${t%/}"',
+    '  case "$t" in *\\** | *\\?* | *\\[* | */*) continue ;; esac',
+    '  if [ ${#oversize_args[@]} -eq 0 ]; then oversize_args+=(-name "$t"); else oversize_args+=(-o -name "$t"); fi',
+    'done <<< "$new_exc"',
+    "oversize_prune=()",
+    "if [ ${#oversize_args[@]} -gt 0 ]; then oversize_prune=('(' -type d '(' \"${oversize_args[@]}\" ')' ')' -prune -o); fi",
+    'find "$root" "${oversize_prune[@]}" -type f -size +' + String(maxBytes || MAX_FILE_BYTES) + "c -print0 2>/dev/null | while IFS= read -r -d '' f; do",
     `  printf '%s\\0' "\${f#"$root"/}"`,
     'done | xargs -0 "$git" --literal-pathspecs --git-dir="$g" update-index --force-remove -- 2>/dev/null || true'
   ].join("\n");
@@ -277,6 +289,9 @@ function gcScript(store, gitExe) {
     "set -e",
     "git=" + psq(gitExe),
     "g=" + psq(store.git),
+    'if [ -z "$("$git" --git-dir="$g" for-each-ref --count=1 refs)" ] && [ -n "$("$git" --git-dir="$g" ls-files)" ]; then',
+    '  "$git" --git-dir="$g" read-tree --empty',
+    "fi",
     '"$git" --git-dir="$g" gc --quiet --prune=now',
     'date +%s > "$g/gc.stamp"',
     "echo GC_OK"

package/lib/scripts.pwsh.js

@@ -19,6 +19,13 @@ function dropGitlinksBlock() {
 }
 function oversizeBlock(maxBytes) {
   return [
+    "$oversizeSkip = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)",
+    "foreach ($p in $lines) {",
+    '  $t = "$p".Trim()',
+    "  if (-not $t -or $t.StartsWith('#') -or $t.StartsWith('!')) { continue }",
+    "  $t = $t -replace '/$', ''",
+    "  if ($t -notmatch '[*?\\[\\]/\\\\]') { [void]$oversizeSkip.Add($t) }",
+    "}",
     "$oversizeStack = [System.Collections.Generic.Stack[string]]::new()",
     "$oversizeStack.Push($root)",
     "$oversizeRel = [System.Collections.Generic.List[string]]::new()",
@@ -31,7 +38,9 @@ function oversizeBlock(maxBytes) {
     "        $oversizeRel.Add($f.FullName.Substring($root.Length + 1).Replace('\\','/'))",
     "      }",
     "    }",
-    "    foreach ($d in $di.EnumerateDirectories()) { $oversizeStack.Push($d.FullName) }",
+    "    foreach ($d in $di.EnumerateDirectories()) {",
+    "      if (-not $oversizeSkip.Contains($d.Name)) { $oversizeStack.Push($d.FullName) }",
+    "    }",
     "  } catch {}",
     "}",
     "for ($i = 0; $i -lt $oversizeRel.Count; $i += 100) {",
@@ -306,7 +315,11 @@ function gcScript(store, gitExe) {
     "$ErrorActionPreference = 'Stop'",
     "$git = " + psq(gitExe),
     "$g = " + psq(store.git),
+    "$gcRefs = & $git --git-dir=$g for-each-ref --count=1 refs",
+    "$gcFiles = & $git --git-dir=$g ls-files",
+    "if (-not $gcRefs -and $gcFiles) { & $git --git-dir=$g read-tree --empty }",
     "& $git --git-dir=$g gc --quiet --prune=now",
+    'if ($LASTEXITCODE -ne 0) { throw ("git gc failed (exit " + $LASTEXITCODE + ")") }',
     "Set-Content -LiteralPath (Join-Path $g 'gc.stamp') -Value ([DateTimeOffset]::UtcNow.ToUnixTimeSeconds().ToString()) -Encoding ascii",
     "Write-Output 'GC_OK'"
   ].join("\n");

package/lib/settings-bridge.js

@@ -0,0 +1,43 @@
+import { Config, LEGACY_SETTINGS_NS, isLegacySettingsFace, resolveSettingsNs, unwrapConfig } from "./config.js";
+function newSettingsNs(ctx, settings) {
+  if (!settings) return null;
+  if (isLegacySettingsFace(settings)) return null;
+  if (typeof settings.describe !== "function" || typeof settings.update !== "function") return null;
+  try {
+    return resolveSettingsNs(ctx, settings);
+  } catch (error) {
+    return null;
+  }
+}
+function installSettingsNamespace(deps) {
+  const { ctx, dshSettings, config, settingsHooks, applyResolvedConfig, recordError } = deps;
+  try {
+    const legacyEntry = unwrapConfig(config);
+    if (typeof dshSettings.installSettingsSection === "function") {
+      dshSettings.installSettingsSection(ctx, LEGACY_SETTINGS_NS, Config, legacyEntry, settingsHooks);
+    } else if (typeof ctx.inject === "function") {
+      ctx.inject(["settings"], (settingsCtx) => {
+        const settingsService = settingsCtx.settings;
+        if (newSettingsNs(ctx, settingsService)) {
+          ctx.on("loader/volatile-update", () => applyResolvedConfig(config));
+        } else if (typeof settingsService.installSection === "function") {
+          settingsService.installSection(ctx, LEGACY_SETTINGS_NS, Config, legacyEntry, settingsHooks);
+        } else if (typeof settingsService.register === "function") {
+          const scope = settingsService.register(LEGACY_SETTINGS_NS, Config, { base: legacyEntry });
+          settingsHooks.setSource(() => scope.get());
+          settingsHooks.onChange();
+          scope.watch(() => settingsHooks.onChange());
+          settingsCtx.effect(() => () => {
+            settingsHooks.setSource(() => legacyEntry);
+            settingsHooks.onChange();
+          });
+        }
+      });
+    }
+  } catch (error) {
+    recordError("recall settings namespace skipped: " + String(error));
+  }
+}
+export {
+  installSettingsNamespace
+};

package/lib/snapshots.js

@@ -1,5 +1,6 @@
 import * as E from "./errors.js";
 import { buildFeedbackError } from "./diagnostics.js";
+import { buildArtifactRootSegment } from "./exclude-patterns.js";
 function parseSkipped(out) {
   const skipped = [];
   for (const line of String(out || "").split(/\r?\n/)) {
@@ -309,6 +310,7 @@ function createSnapshots(ctx, rt, config) {
     if (!root) return;
     const fused = snapFailures.get(root);
     if (fused && Date.now() < fused.skipUntil) return;
+    if (buildArtifactRootSegment(root, BASE(), rt.isWin)) return;
     let store = await rt.resolveStore(root);
     store = await rt.tryUpgradeToHome(root);
     const g = await rt.ensureGit(root, store);

package/lib/store.js

@@ -128,6 +128,14 @@ async function runViaSpawn(spawn, req) {
     }
   });
 }
+async function runViaExecutor(shell, spec) {
+  if (typeof shell.run === "function") return await shell.run(spec);
+  if (typeof shell.execute === "function") {
+    const handle = await shell.execute(spec);
+    return await handle.result();
+  }
+  throw new Error("recall: ctx.shell \u672A\u63D0\u4F9B run \u4E5F\u672A\u63D0\u4F9B execute\uFF0C\u65E0\u6CD5\u6267\u884C\u547D\u4EE4\uFF08dsh \u6267\u884C\u63A5\u7F1D\u4E0D\u517C\u5BB9\uFF09");
+}
 function createRuntime(ctx, config, deps) {
   const shell = ctx.shell;
   const sessions = ctx.sessions;
@@ -198,7 +206,7 @@ function createRuntime(ctx, config, deps) {
         let res = null;
         try {
           const sp = ctx.get("sandboxPolicy");
-          res = await shell.run(shell.resolve({
+          res = await runViaExecutor(shell, shell.resolve({
             command: SHELL_PROBE_COMMAND,
             timeoutMs: 3e4,
             stdoutMaxBytes: 4096,
@@ -250,9 +258,12 @@ function createRuntime(ctx, config, deps) {
       ...opts && opts.stdin !== void 0 ? { stdin: opts.stdin } : {},
       sandboxPolicy: { mode: "danger-full-access", workspaceRoot }
     });
-    const res = await shell.run(spec);
+    const res = await runViaExecutor(shell, spec);
     if (res && res.exitCode !== 0) {
-      await throwShellFailure(command, res && res.stderr && res.stderr.text || "", res.exitCode);
+      const stderr = res && res.stderr && res.stderr.text || "";
+      const timedOut = res.timedOut === true || res.exitCode === null && !String(stderr).trim();
+      const detail = timedOut ? "\u547D\u4EE4\u51C6\u5907\u671F\u8D85\u65F6\uFF08" + String(timeoutMs) + "ms\uFF0C\u6267\u884C\u5668\u672A\u4EA7\u51FA\u8F93\u51FA\uFF09" : stderr;
+      await throwShellFailure(command, detail, res.exitCode);
     }
     return {
       text: res && res.stdout && res.stdout.text || "",
@@ -504,6 +515,7 @@ export {
   judgeShellDialect,
   parseCleanupResult,
   resolvePosixHomeBase,
+  runViaExecutor,
   runViaSpawn,
   scrubChildEnv,
   selectPosixHomeBase

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-recall-plugin",
-  "version": "2.3.24",
+  "version": "2.4.2",
   "description": "在 DSH 中撤回自己发过的消息：工作区文件与对话历史一起回到那条消息发出之前，消息的文本与附件自动放回输入框，改完即可重发。文件走独立影子 git 快照（不碰项目自身的 git），对话走官方 sessions.fork，原会话归档可找回。",
   "type": "module",
   "repository": {
@@ -58,18 +58,20 @@
         "0.1.5-rc.1": "compatible",
         "0.1.5-rc.2": "compatible",
         "0.1.6-alpha.1": "compatible",
-        "0.1.6-alpha.2": "compatible"
+        "0.1.6-alpha.2": "compatible",
+        "0.1.7-alpha.1": "compatible",
+        "0.1.7-alpha.2": "compatible"
       }
     }
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7",
-    "@deepseek-ai/dsh-sandbox-policy": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7",
-    "@deepseek-ai/dsh-session": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7",
-    "@deepseek-ai/dsh-session-query": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7",
-    "@deepseek-ai/dsh-settings": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7",
-    "@deepseek-ai/dsh-shell": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7 || >=0.1.7-alpha.1 <0.1.8",
+    "@deepseek-ai/dsh-sandbox-policy": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7 || >=0.1.7-alpha.1 <0.1.8",
+    "@deepseek-ai/dsh-session": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7 || >=0.1.7-alpha.1 <0.1.8",
+    "@deepseek-ai/dsh-session-query": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7 || >=0.1.7-alpha.1 <0.1.8",
+    "@deepseek-ai/dsh-settings": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7 || >=0.1.7-alpha.1 <0.1.8",
+    "@deepseek-ai/dsh-shell": ">=0.1.2-alpha.1 <0.1.3 || >=0.1.3-alpha.1 <0.1.4 || >=0.1.5-alpha.1 <0.1.6 || >=0.1.6-alpha.1 <0.1.7 || >=0.1.7-alpha.1 <0.1.8",
     "@deepseek-ai/schemastery": "^3.18.1",
     "react": "^18.2.0"
   },
@@ -80,6 +82,7 @@
   },
   "license": "MIT",
   "devDependencies": {
+    "@deepseek-ai/schemastery": "^3.18.4",
     "@types/node": "^20.19.43",
     "@types/react": "^18.3.31",
     "esbuild": "^0.28.1",