dsh-recall-plugin 2.4.6 → 2.4.7

package/lib/config.js

@@ -40,7 +40,11 @@ const Config = Schema.object({
   refillDraft: withVolatile(Schema.boolean().default(true).description("\u64A4\u56DE\u540E\u628A\u88AB\u64A4\u56DE\u7684\u6D88\u606F\uFF08\u6587\u672C\u4E0E\u9644\u4EF6\uFF09\u56DE\u586B\u5230\u8F93\u5165\u6846")),
   snapshotEnabled: withVolatile(Schema.boolean().default(true).description("\u542F\u7528\u6D88\u606F\u5FEB\u7167\uFF08\u5173\u95ED\u540E\u4E0D\u518D\u65B0\u5EFA\uFF0C\u5DF2\u6709\u5FEB\u7167\u4ECD\u53EF\u64A4\u56DE\uFF09")),
   archiveOriginal: withVolatile(Schema.boolean().default(true).description("\u64A4\u56DE\u540E\u5F52\u6863\u539F\u4F1A\u8BDD\uFF08\u5173\u95ED\u540E\u539F\u4F1A\u8BDD\u4FDD\u7559\u5728\u5217\u8868\u4E2D\uFF09")),
-  retentionDays: withVolatile(Schema.number().default(0).description("\u6309\u5929\u6570\u4FDD\u7559\u5FEB\u7167\uFF0C\u8D85\u671F\u81EA\u52A8\u5220\u9664\uFF1B0 \u8868\u793A\u4E0D\u542F\u7528"))
+  retentionDays: withVolatile(Schema.number().default(0).description("\u6309\u5929\u6570\u4FDD\u7559\u5FEB\u7167\uFF0C\u8D85\u671F\u81EA\u52A8\u5220\u9664\uFF1B0 \u8868\u793A\u4E0D\u542F\u7528")),
+  // A4：界面语言。union 三值而不是自由字符串——非法配置在加载时响亮失败
+  //（合规清单 #3）；description 保持中文是 v1 明示限制：它由宿主官方设置
+  // 表单在 host 侧渲染，插件无法本地化（自定义配置卡片不受影响，见 README）
+  locale: withVolatile(Schema.union(["auto", "zh", "en"]).default("auto").description("\u754C\u9762\u8BED\u8A00\uFF1Aauto \u8DDF\u968F\u7CFB\u7EDF\uFF0C\u53EF\u9009 zh / en\uFF08\u4FDD\u5B58\u540E\u751F\u6548\uFF09"))
 });
 function isLegacySettingsFace(settings) {
   const svc = settings;
@@ -65,7 +69,8 @@ function resolveSettingsNs(ctx, settings) {
   for (const id of entryIds) {
     if (known.indexOf(id) >= 0) return id;
   }
-  return entryIds.length ? entryIds[0] : null;
+  const first = entryIds[0];
+  return first !== void 0 ? first : null;
 }
 function describeNamespaces(settings) {
   const svc = settings;
@@ -119,7 +124,8 @@ const DEFAULTS = {
   refillDraft: true,
   snapshotEnabled: true,
   archiveOriginal: true,
-  retentionDays: 0
+  retentionDays: 0,
+  locale: "auto"
 };
 function createConfig(raw) {
   const cfg = raw && typeof raw === "object" ? raw : {};
@@ -139,7 +145,8 @@ function createConfig(raw) {
   const archiveOriginal = typeof cfg.archiveOriginal === "boolean" ? cfg.archiveOriginal : true;
   const rawDays = typeof cfg.retentionDays === "number" ? cfg.retentionDays : parseInt(String(cfg.retentionDays == null ? "" : cfg.retentionDays), 10);
   const retentionDays = Number.isFinite(rawDays) ? Math.max(0, rawDays) : 0;
-  return { gcSnaps, gcHours, maxFileBytes, maxSnapshotsPerWorkspace, baseExcludes, refillDraft, snapshotEnabled, archiveOriginal, retentionDays };
+  const locale = cfg.locale === "zh" || cfg.locale === "en" ? cfg.locale : "auto";
+  return { gcSnaps, gcHours, maxFileBytes, maxSnapshotsPerWorkspace, baseExcludes, refillDraft, snapshotEnabled, archiveOriginal, retentionDays, locale };
 }
 export {
   Config,

package/lib/errors.js

@@ -14,6 +14,7 @@ const RECALL_NO_ROOT = "NO_ROOT";
 const RECALL_NO_SESSION = "NO_SESSION";
 const RECALL_PARTIAL_DELETE = "PARTIAL_DELETE";
 const RECALL_UNKNOWN_OP = "UNKNOWN_OP";
+const RECALL_FORMAT_BLOCKED = "FORMAT_BLOCKED";
 const RECALL_UNKNOWN_ENDPOINT = "UNKNOWN_ENDPOINT";
 const RECALL_INDEX_CORRUPT = "INDEX_CORRUPT";
 const ALL_CODES = Object.freeze([
@@ -33,6 +34,7 @@ const ALL_CODES = Object.freeze([
   RECALL_NO_SESSION,
   RECALL_PARTIAL_DELETE,
   RECALL_UNKNOWN_OP,
+  RECALL_FORMAT_BLOCKED,
   RECALL_UNKNOWN_ENDPOINT,
   RECALL_INDEX_CORRUPT
 ]);
@@ -43,6 +45,7 @@ export {
   RECALL_BODY_TOO_LARGE,
   RECALL_EMPTY_PATCH,
   RECALL_ERROR,
+  RECALL_FORMAT_BLOCKED,
   RECALL_INDEX_CORRUPT,
   RECALL_NO_ROOT,
   RECALL_NO_SESSION,

package/lib/exclude-patterns.js

@@ -20,7 +20,8 @@ function buildArtifactRootSegment(root, base, isWin) {
   const pool = isWin ? names.map((n) => n.toLowerCase()) : names;
   for (const seg of segs) {
     const i = pool.indexOf(isWin ? seg.toLowerCase() : seg);
-    if (i >= 0) return names[i];
+    const hit = i >= 0 ? names[i] : void 0;
+    if (hit !== void 0) return hit;
   }
   return null;
 }

package/lib/index.js

@@ -7,6 +7,7 @@ import { createMaintenance } from "./maintenance.js";
 import { createSessionInfo, titleFromEvents, messageTextFromEvents } from "./session-info.js";
 import { createRoutesCore } from "./routes-core.js";
 import { createRoutesManage } from "./routes-manage.js";
+import { createIntentJournal } from "./intent-journal.js";
 import * as dshSettings from "@deepseek-ai/dsh-settings";
 import * as E from "./errors.js";
 const name = "dsh-recall-plugin";
@@ -65,7 +66,7 @@ function apply(ctx, config) {
     const workers = Array.from({ length: Math.min(limit, tasks.length) }, async () => {
       while (index < tasks.length) {
         const task = tasks[index++];
-        await task();
+        if (task) await task();
       }
     });
     await Promise.all(workers);
@@ -215,6 +216,26 @@ function apply(ctx, config) {
     }
     return records;
   }
+  const intentJournal = createIntentJournal({
+    runShell: rt.runShell,
+    writeTextViaShell: rt.writeTextViaShell,
+    scripts: rt.scripts,
+    isWin: rt.isWin,
+    recordError: rt.recordError,
+    workspaceMatchesTag: async (messageId) => {
+      const d = await snaps.diffFor(messageId);
+      return Boolean(d && d.total === 0 && d.changes.length === 0);
+    },
+    resetToSafety: async (store, safetyId, root) => {
+      try {
+        const out = await rt.runShell(rt.scripts.rescueScript(root, store, state.gitExe || "", "snap-" + safetyId), { timeoutMs: 6e5, stdoutMaxBytes: 65536 });
+        return String(out || "").indexOf("RESCUE_OK") >= 0;
+      } catch (error) {
+        return false;
+      }
+    },
+    agentBusy: (root) => agentBusy(null, root)
+  });
   const deps = {
     ctx,
     rt,
@@ -245,6 +266,7 @@ function apply(ctx, config) {
     readSettings: () => readSettings(),
     DEFAULTS,
     rescueRollback,
+    intentJournal,
     E
   };
   const endpoints = {
@@ -252,7 +274,7 @@ function apply(ctx, config) {
     ...createRoutesManage(deps)
   };
   const handleRecall = async (request) => {
-    const name2 = new URL(request.url).pathname.replace(/^\/api\/recall\/?/, "").split("/")[0];
+    const name2 = new URL(request.url).pathname.replace(/^\/api\/recall\/?/, "").split("/")[0] ?? "";
     const endpoint = endpoints[name2];
     if (!endpoint) {
       return jsonResponse({ ok: false, code: E.RECALL_UNKNOWN_ENDPOINT, message: "unknown endpoint: " + name2 });
@@ -319,10 +341,15 @@ function apply(ctx, config) {
       }
     }
     for (const [cwd, sessionId] of warmupRoots) {
-      Promise.resolve(rt.resolveStore(cwd)).then(() => rt.tryUpgradeToHome(cwd)).then((store) => rt.ensureGit(cwd, store)).then(() => snaps.loadIndex(cwd, sessionId)).then(() => snaps.rebuildOrphans(cwd, sessionId)).then(() => rt.cleanupLegacy(cwd)).catch(() => {
+      Promise.resolve(rt.resolveStore(cwd)).then(() => rt.tryUpgradeToHome(cwd)).then((store) => rt.ensureGit(cwd, store)).then(() => snaps.loadIndex(cwd, sessionId)).then(() => snaps.rebuildOrphans(cwd, sessionId)).then(async () => {
+        const st = state.stores.get(cwd);
+        if (st && await snaps.guardStoreFormat(st)) await intentJournal.recover(st);
+      }).then(() => rt.cleanupLegacy(cwd)).catch(() => {
       });
     }
-  })();
+  })().catch((error) => {
+    console.error("recall warmup skipped:", error);
+  });
 }
 export {
   Config,

package/lib/intent-journal.js

@@ -0,0 +1,108 @@
+const INTENT_VERSION = 1;
+function describeIntent(intent) {
+  return "message=" + intent.messageId + ", phase=" + intent.phase + ", safety=snap-" + intent.safetyId;
+}
+function createIntentJournal(deps) {
+  const handled = /* @__PURE__ */ new Set();
+  function intentFile(store) {
+    return store.dir + (deps.isWin ? "\\" : "/") + "recall-intent.json";
+  }
+  async function readRaw(store) {
+    let raw = "";
+    try {
+      raw = deps.scripts.stripBom(await deps.runShell(deps.scripts.fileReadCmd(intentFile(store)), { timeoutMs: 3e4, stdoutMaxBytes: 65536 })).trim();
+    } catch (error) {
+      return { ok: false, intent: null };
+    }
+    if (!raw) return { ok: true, intent: null };
+    try {
+      const obj = JSON.parse(raw);
+      if (!obj || obj.v !== INTENT_VERSION || obj.op !== "execute" || typeof obj.messageId !== "string" || !obj.messageId || typeof obj.safetyId !== "string" || !obj.safetyId || obj.phase !== "rollback" && obj.phase !== "rescue") {
+        return { ok: true, intent: null };
+      }
+      return {
+        ok: true,
+        intent: {
+          v: INTENT_VERSION,
+          op: "execute",
+          messageId: obj.messageId,
+          root: typeof obj.root === "string" ? obj.root : "",
+          safetyId: obj.safetyId,
+          safetyOk: obj.safetyOk !== false,
+          phase: obj.phase,
+          time: typeof obj.time === "number" ? obj.time : 0
+        }
+      };
+    } catch (error) {
+      return { ok: true, intent: null };
+    }
+  }
+  async function write(store, text) {
+    try {
+      await deps.writeTextViaShell(intentFile(store), text);
+    } catch (error) {
+      deps.recordError("recall intent journal write failed: " + String(error));
+    }
+  }
+  function read(store) {
+    return readRaw(store).then((r) => r.intent);
+  }
+  async function begin(store, root, fields) {
+    const intent = {
+      v: INTENT_VERSION,
+      op: "execute",
+      messageId: fields.messageId,
+      root,
+      safetyId: fields.safetyId,
+      safetyOk: fields.safetyOk,
+      phase: "rollback",
+      time: Date.now()
+    };
+    await write(store, JSON.stringify(intent));
+  }
+  async function advance(store, phase) {
+    const cur = await read(store);
+    if (cur) await write(store, JSON.stringify(Object.assign({}, cur, { phase })));
+  }
+  function clear(store) {
+    return write(store, "");
+  }
+  async function recover(store) {
+    if (handled.has(store.dir)) return false;
+    const got = await readRaw(store);
+    if (!got.ok) return false;
+    const intent = got.intent;
+    if (!intent) {
+      handled.add(store.dir);
+      return false;
+    }
+    if (await deps.workspaceMatchesTag(intent.messageId)) {
+      await clear(store);
+      handled.add(store.dir);
+      return true;
+    }
+    if (!intent.safetyOk) {
+      deps.recordError("recall interrupted rollback detected, no safety snapshot: " + describeIntent(intent) + "\uFF08\u8BB0\u5F55\u4FDD\u7559\u4E8E " + intentFile(store) + "\uFF09");
+      handled.add(store.dir);
+      return true;
+    }
+    if (deps.agentBusy(intent.root)) {
+      deps.recordError("recall interrupted rollback deferred (agent busy): " + describeIntent(intent));
+      return false;
+    }
+    const reset = await deps.resetToSafety(store, intent.safetyId, intent.root);
+    if (!reset) {
+      deps.recordError("recall interrupted rollback rescue failed: " + describeIntent(intent) + "\uFF08\u8BB0\u5F55\u4FDD\u7559\u4E8E " + intentFile(store) + "\uFF09");
+      handled.add(store.dir);
+      return true;
+    }
+    await clear(store);
+    handled.add(store.dir);
+    deps.recordError("recovered interrupted rollback: " + describeIntent(intent) + " \u2014 \u5DE5\u4F5C\u533A\u5DF2\u590D\u4F4D\u5230\u5B89\u5168\u5FEB\u7167");
+    return true;
+  }
+  return { begin, advance, clear, read, file: intentFile, recover };
+}
+export {
+  createIntentJournal
+};

package/lib/maintenance.js

@@ -5,8 +5,9 @@ function selectOverLimitVictims(snapshots, limit) {
   const byRoot = /* @__PURE__ */ new Map();
   for (const [id, s] of snapshots.entries()) {
     if (!s || !s.root) continue;
-    if (!byRoot.has(s.root)) byRoot.set(s.root, []);
-    byRoot.get(s.root).push({ id, time: s.time });
+    const list = byRoot.get(s.root);
+    if (list) list.push({ id, time: s.time });
+    else byRoot.set(s.root, [{ id, time: s.time }]);
   }
   const victims = /* @__PURE__ */ new Map();
   for (const [root, list] of byRoot) {
@@ -37,8 +38,9 @@ function createMaintenance(ctx, rt, snaps, config, deps = {}) {
     const byRoot = /* @__PURE__ */ new Map();
     for (const [id, s] of state.snapshots.entries()) {
       if (!s || s.sessionId !== sessionId) continue;
-      if (!byRoot.has(s.root)) byRoot.set(s.root, []);
-      byRoot.get(s.root).push(id);
+      const list = byRoot.get(s.root);
+      if (list) list.push(id);
+      else byRoot.set(s.root, [id]);
     }
     let purged = 0;
     for (const [root, ids] of byRoot) {
@@ -51,6 +53,7 @@ function createMaintenance(ctx, rt, snaps, config, deps = {}) {
         }
       }
       if (!store || !state.gitExe) continue;
+      if (!await snaps.guardStoreFormat(store)) continue;
       try {
         for (let i = 0; i < ids.length; i += 100) {
           await rt.runShell(S.purgeTagsScript(store, state.gitExe, ids.slice(i, i + 100).map((id) => "snap-" + id)), { timeoutMs: 12e4, stdoutMaxBytes: 4096 });
@@ -99,6 +102,7 @@ function createMaintenance(ctx, rt, snaps, config, deps = {}) {
         }
       }
       if (!store || !state.gitExe) continue;
+      if (!await snaps.guardStoreFormat(store)) continue;
       try {
         for (let i = 0; i < victims.length; i += 100) {
           await rt.runShell(S.purgeTagsScript(store, state.gitExe, victims.slice(i, i + 100).map((v) => "snap-" + v.id)), { timeoutMs: 12e4, stdoutMaxBytes: 4096 });
@@ -127,6 +131,7 @@ function createMaintenance(ctx, rt, snaps, config, deps = {}) {
         }
       }
       if (!store || !state.gitExe) continue;
+      if (!await snaps.guardStoreFormat(store)) continue;
       try {
         for (let i = 0; i < victims.length; i += 100) {
           await rt.runShell(S.purgeTagsScript(store, state.gitExe, victims.slice(i, i + 100).map((v) => "snap-" + v.id)), { timeoutMs: 12e4, stdoutMaxBytes: 4096 });

package/lib/routes-core.js

@@ -2,7 +2,7 @@ import { ENV_HINTS } from "./diagnostics.js";
 import { parseTreeId } from "./snapshots.js";
 import { buildArtifactRootSegment, buildRootNotice } from "./exclude-patterns.js";
 function createRoutesCore(deps) {
-  const { rt, snaps, state, cfg, supported, enqueue, agentBusy, rescueRollback, E } = deps;
+  const { rt, snaps, state, cfg, supported, enqueue, agentBusy, rescueRollback, intentJournal, E } = deps;
   return {
     "init": async (args) => {
       if (!supported) {
@@ -17,15 +17,19 @@ function createRoutesCore(deps) {
         await rt.ensureGit(root, store);
         await snaps.loadIndex(root, sessionId);
         await snaps.rebuildOrphans(root, sessionId);
+        if (store && await snaps.guardStoreFormat(store)) await intentJournal.recover(store);
         rt.cleanupLegacy(root);
         notice = {
           gitMissing: state.gitExe === "",
           homeFallback: store ? !store.home : false
         };
         const artifactSeg = buildArtifactRootSegment(root, cfg.baseExcludes, rt.isWin);
-        if (artifactSeg) notice.buildRootNotice = buildRootNotice(artifactSeg);
+        if (artifactSeg) {
+          notice.buildRootArtifactSeg = artifactSeg;
+          notice.buildRootNotice = buildRootNotice(artifactSeg);
+        }
       }
-      return { ok: Boolean(root), root: root || null, notice, config: { refillDraft: cfg.refillDraft, archiveOriginal: cfg.archiveOriginal } };
+      return { ok: Boolean(root), root: root || null, notice, config: { refillDraft: cfg.refillDraft, archiveOriginal: cfg.archiveOriginal, locale: cfg.locale } };
     },
     "snapshot-info": async (args) => {
       const id = args && args.messageId ? String(args.messageId) : "";
@@ -38,7 +42,9 @@ function createRoutesCore(deps) {
         time: snap ? snap.time : null,
         id,
         ...feedback,
-        notice: artifactSeg ? buildRootNotice(artifactSeg) : void 0
+        // A4：段名与中文 notice 并存下发（client 优先段名本地取词，见 init 同处注释）
+        notice: artifactSeg ? buildRootNotice(artifactSeg) : void 0,
+        artifactSeg: artifactSeg || void 0
       };
     },
     "preview": async (args) => {
@@ -69,6 +75,9 @@ function createRoutesCore(deps) {
         if (!snap) return { ok: false, code: E.RECALL_NO_SNAPSHOT, message: "\u8BE5\u6D88\u606F\u6CA1\u6709\u53EF\u7528\u7684\u9879\u76EE\u5FEB\u7167" };
         const store = state.stores.get(snap.root);
         if (!store) return { ok: false, code: E.RECALL_NO_STORE, message: "\u5FEB\u7167\u5B58\u50A8\u4E0D\u53EF\u7528" };
+        if (!await snaps.guardStoreFormat(store)) {
+          return { ok: false, code: E.RECALL_FORMAT_BLOCKED, message: "\u78C1\u76D8\u683C\u5F0F\u4E0D\u53D7\u652F\u6301\uFF0C\u5DF2\u505C\u6B62\u5199\u5165\uFF1B\u8BE6\u89C1\u300C\u6700\u8FD1\u9519\u8BEF\u300D" };
+        }
         if (agentBusy(sessionId, snap.root)) return { ok: false, code: E.RECALL_AGENT_BUSY, message: "Agent \u6B63\u5728\u8FD0\u884C\u4E2D\uFF0C\u8BF7\u5148\u505C\u6B62\u540E\u518D\u64A4\u56DE" };
         const previewTreeId = args && typeof args.previewTreeId === "string" && args.previewTreeId ? args.previewTreeId : null;
         if (!previewTreeId && args && typeof args.previewTotal === "number") {
@@ -90,12 +99,20 @@ function createRoutesCore(deps) {
         if (previewTreeId && safetyTreeId && safetyTreeId !== previewTreeId) {
           return { ok: false, code: E.RECALL_STALE, message: "\u9884\u89C8\u540E\u9879\u76EE\u6587\u4EF6\u53D1\u751F\u4E86\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u9884\u89C8\u786E\u8BA4" };
         }
+        await intentJournal.begin(store, snap.root, { messageId: id, safetyId, safetyOk });
         const rolled = await snaps.rollbackFor(id);
-        if (rolled.ok) return rolled;
-        return rescueRollback(
+        if (rolled.ok) {
+          await intentJournal.clear(store);
+          return rolled;
+        }
+        await intentJournal.advance(store, "rescue");
+        const rescueResult = await rescueRollback(
           { runShell: rt.runShell, scripts: rt.scripts, gitExe: state.gitExe || "", recordError: rt.recordError },
           { root: snap.root, store, safetyId, safetyOk, rollbackError: rolled.error }
         );
+        await intentJournal.clear(store);
+        if (rescueResult && rescueResult.message) rescueResult.message += "\uFF08\u4E2D\u65AD\u70B9\u8BB0\u5F55\uFF1A" + intentJournal.file(store) + "\uFF09";
+        return rescueResult;
       });
       if (!result.ok) return result;
       const cutSeq = await snaps.resolveCutSeq(sessionId, id);

package/lib/routes-manage.js

@@ -109,8 +109,9 @@ function createRoutesManage(deps) {
     const byRoot = /* @__PURE__ */ new Map();
     for (const rec of records.values()) {
       if (!match(rec) || !rec.root) continue;
-      if (!byRoot.has(rec.root)) byRoot.set(rec.root, []);
-      byRoot.get(rec.root).push(rec.id);
+      const list = byRoot.get(rec.root);
+      if (list) list.push(rec.id);
+      else byRoot.set(rec.root, [rec.id]);
     }
     let deleted = 0;
     await enqueue(async () => {
@@ -124,6 +125,7 @@ function createRoutesManage(deps) {
           }
         }
         if (!store) continue;
+        if (!await snaps.guardStoreFormat(store)) continue;
         try {
           if (state.gitExe) {
             const tags = rootIds.map((id) => "snap-" + id);
@@ -181,6 +183,10 @@ function createRoutesManage(deps) {
       let clearedStores = 0;
       let failed = 0;
       for (const { store, root } of stores.values()) {
+        if (!await snaps.guardStoreFormat(store)) {
+          failed += 1;
+          continue;
+        }
         try {
           const output = await rt.runShell(rt.scripts.listTagsScript(store, gitExe), { timeoutMs: 12e4, stdoutMaxBytes: 4194304 });
           const tags = rt.scripts.stripBom(output).split(/\r?\n/).map((tag) => tag.trim()).filter((tag) => tag.indexOf("snap-") === 0);
@@ -279,7 +285,9 @@ function createRoutesManage(deps) {
           refillDraft: cfg.refillDraft,
           snapshotEnabled: cfg.snapshotEnabled,
           archiveOriginal: cfg.archiveOriginal,
-          retentionDays: cfg.retentionDays
+          retentionDays: cfg.retentionDays,
+          // A4：界面语言偏好随 values 下发（设置卡片据此渲染下拉并即时切语言）
+          locale: cfg.locale
         },
         overridden,
         envLocks,
@@ -314,6 +322,11 @@ function createRoutesManage(deps) {
         if (!Array.isArray(patch.baseExcludes)) return { ok: false, code: E.RECALL_BAD_TYPE, message: "baseExcludes \u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u6570\u7EC4" };
         clean.baseExcludes = patch.baseExcludes.filter((p) => typeof p === "string" && p.trim());
       }
+      if (patch.locale !== void 0) {
+        const v = String(patch.locale);
+        if (v !== "auto" && v !== "zh" && v !== "en") return { ok: false, code: E.RECALL_BAD_TYPE, message: "\u754C\u9762\u8BED\u8A00\u5FC5\u987B\u662F auto / zh / en \u4E4B\u4E00" };
+        clean.locale = v;
+      }
       if (!Object.keys(clean).length) return { ok: false, code: E.RECALL_EMPTY_PATCH, message: "\u6CA1\u6709\u53EF\u5199\u5165\u7684\u914D\u7F6E\u5B57\u6BB5" };
       let settings = null;
       try {
@@ -378,14 +391,16 @@ function createRoutesManage(deps) {
         return { ok: true, titles: out };
       }
       if (op === "messages") {
-        const reqs = Array.isArray(args && args.requests) ? args.requests.slice(0, 200) : [];
+        const reqsRaw = args && args.requests;
+        const reqs = Array.isArray(reqsRaw) ? reqsRaw.slice(0, 200) : [];
         const bySession = /* @__PURE__ */ new Map();
         for (const r of reqs) {
           const sid = r && r.sessionId ? String(r.sessionId) : null;
           const mid = r && r.messageId ? String(r.messageId) : null;
           if (!sid || !mid) continue;
-          if (!bySession.has(sid)) bySession.set(sid, []);
-          bySession.get(sid).push(mid);
+          const midList = bySession.get(sid);
+          if (midList) midList.push(mid);
+          else bySession.set(sid, [mid]);
         }
         const texts = {};
         await runLimited(Array.from(bySession.entries()).map(([sid, mids]) => async () => {
@@ -492,6 +507,9 @@ function createRoutesManage(deps) {
           }
         }
         if (!store) return { ok: false, code: E.RECALL_NO_SNAPSHOT, message: "\u8BE5\u5FEB\u7167\u4E0D\u5B58\u5728" };
+        if (!await snaps.guardStoreFormat(store)) {
+          return { ok: false, code: E.RECALL_FORMAT_BLOCKED, message: "\u78C1\u76D8\u683C\u5F0F\u4E0D\u53D7\u652F\u6301\uFF0C\u5DF2\u505C\u6B62\u5199\u5165\uFF1B\u8BE6\u89C1\u300C\u6700\u8FD1\u9519\u8BEF\u300D" };
+        }
         const finalStore = store;
         const finalRoot = snapRoot;
         await enqueue(async () => {

package/lib/scripts.posix.js

@@ -363,6 +363,9 @@ function indexReadCmd(dir) {
 function lineageReadCmd(dir) {
   return "cat " + psq(dir + "/lineage.json") + " 2>/dev/null || true";
 }
+function fileReadCmd(file) {
+  return "cat " + psq(file) + " 2>/dev/null || true";
+}
 function legacyRmScript(path) {
   return "rm -rf -- " + psq(path);
 }
@@ -441,6 +444,7 @@ export {
   ensureGitScript,
   excludeDumpScript,
   excludeReadCmd,
+  fileReadCmd,
   fileWriteStdinCmd,
   gcScript,
   indexReadCmd,

package/lib/scripts.pwsh.js

@@ -420,6 +420,9 @@ function indexReadCmd(dir) {
 function lineageReadCmd(dir) {
   return "Get-Content -LiteralPath " + psq(dir + "\\lineage.json") + " -Raw -Encoding UTF8 -ErrorAction SilentlyContinue";
 }
+function fileReadCmd(file) {
+  return "if (Test-Path -LiteralPath " + psq(file) + ") { Get-Content -LiteralPath " + psq(file) + " -Raw -Encoding UTF8 -ErrorAction SilentlyContinue }";
+}
 function legacyRmScript(path) {
   return "Remove-Item -Recurse -Force -LiteralPath " + psq(path) + " -ErrorAction SilentlyContinue";
 }
@@ -525,6 +528,7 @@ export {
   ensureGitScript,
   excludeDumpScript,
   excludeReadCmd,
+  fileReadCmd,
   fileWriteStdinCmd,
   gcScript,
   homeDirScript,

package/lib/snapshots.js

@@ -140,6 +140,20 @@ function parseTagsWithTime(text) {
   }
   return out;
 }
+function judgeStoreFormat(raw, supported) {
+  if (raw === null) return { ok: false, v: null, reason: "unreadable" };
+  const t = String(raw == null ? "" : raw).trim();
+  let v;
+  if (!t) {
+    v = 1;
+  } else {
+    if (!/^\d+$/.test(t)) return { ok: false, v: null, reason: "corrupt" };
+    v = parseInt(t, 10);
+    if (v < 1) return { ok: false, v: null, reason: "corrupt" };
+  }
+  if (v > supported) return { ok: false, v, reason: "future" };
+  return { ok: true, v, reason: t ? "ok" : "absent" };
+}
 function createSnapshots(ctx, rt, config) {
   const sessions = ctx.sessions;
   const state = rt.state;
@@ -149,9 +163,58 @@ function createSnapshots(ctx, rt, config) {
   const FUSE_BACKOFF_BASE_MS = 5 * 60 * 1e3;
   const FUSE_BACKOFF_CAP_MS = 60 * 60 * 1e3;
   const snapFailures = /* @__PURE__ */ new Map();
+  const SUPPORTED_FORMAT = 1;
+  const FORMAT_OK_TTL_MS = 3e4;
+  const formatOkAt = /* @__PURE__ */ new Map();
+  const formatBlockedAt = /* @__PURE__ */ new Map();
+  function formatFile(store) {
+    return store.dir + (rt.isWin ? "\\" : "/") + "format";
+  }
+  async function readFormatRaw(store) {
+    try {
+      return S.stripBom(await rt.runShell(S.fileReadCmd(formatFile(store)), { stdoutMaxBytes: 4096 }));
+    } catch (error) {
+      return null;
+    }
+  }
+  async function storeFormatVerdict(store) {
+    const at = formatOkAt.get(store.dir);
+    if (at !== void 0 && Date.now() - at < FORMAT_OK_TTL_MS) return { ok: true, v: SUPPORTED_FORMAT, reason: "ok" };
+    const verdict = judgeStoreFormat(await readFormatRaw(store), SUPPORTED_FORMAT);
+    if (verdict.ok && verdict.reason === "ok") formatOkAt.set(store.dir, Date.now());
+    return verdict;
+  }
+  function formatBlockedThrottled(store, verdict) {
+    const last = formatBlockedAt.get(store.dir) || 0;
+    if (Date.now() - last < 5 * 60 * 1e3) return;
+    formatBlockedAt.set(store.dir, Date.now());
+    const detail = verdict.reason === "future" ? "\u78C1\u76D8\u683C\u5F0F\u6807\u8BB0\u4E3A v" + verdict.v + "\uFF08\u672C\u63D2\u4EF6\u652F\u6301 v" + SUPPORTED_FORMAT + "\uFF09\uFF1A\u5199\u5165\u5DF2\u6682\u505C\uFF08\u5FEB\u7167/\u64A4\u56DE/\u6E05\u7406\uFF09\uFF0C\u5217\u8868\u4ECD\u53EF\u67E5\u770B\uFF1B\u8BF7\u5347\u7EA7\u63D2\u4EF6" : verdict.reason === "corrupt" ? "\u78C1\u76D8\u683C\u5F0F\u6807\u8BB0\u5185\u5BB9\u975E\u6CD5\uFF08\u5E94\u4E3A " + SUPPORTED_FORMAT + "\uFF09\uFF1A\u5199\u5165\u5DF2\u6682\u505C\uFF08\u5FEB\u7167/\u64A4\u56DE/\u6E05\u7406\uFF09\uFF1B\u8BF7\u68C0\u67E5\u8BE5 store \u76EE\u5F55\u4E0B\u7684 format \u6587\u4EF6" : "\u8BFB\u4E0D\u5230\u5FEB\u7167\u5E93\u7684\u78C1\u76D8\u683C\u5F0F\u6807\u8BB0\uFF08\u73AF\u5883\u672A\u5C31\u7EEA\u6216\u6587\u4EF6\u4E0D\u53EF\u8BFB\uFF09\uFF1A\u672C\u6B21\u5199\u5165\u5DF2\u6682\u505C\uFF0C\u4E0B\u4E00\u6761\u6D88\u606F\u81EA\u52A8\u91CD\u8BD5\uFF1B\u6301\u7EED\u51FA\u73B0\u8BF7\u68C0\u67E5\u8BE5 store \u76EE\u5F55\u6743\u9650";
+    rt.recordError("recall store format blocked: " + detail);
+  }
+  async function guardStoreFormat(store) {
+    const verdict = await storeFormatVerdict(store);
+    if (verdict.ok) return true;
+    formatBlockedThrottled(store, verdict);
+    return false;
+  }
+  async function stampStoreFormat(store, verdict) {
+    if (!verdict.ok || verdict.reason !== "absent") return;
+    try {
+      await rt.writeTextViaShell(formatFile(store), String(SUPPORTED_FORMAT));
+      formatOkAt.set(store.dir, Date.now());
+    } catch (error) {
+      rt.recordError("recall format stamp failed: " + String(error));
+    }
+  }
   async function saveIndex(root, sessionId) {
     const store = state.stores.get(root);
     if (!store) return;
+    const verdict = await storeFormatVerdict(store);
+    if (!verdict.ok) {
+      formatBlockedThrottled(store, verdict);
+      return;
+    }
+    await stampStoreFormat(store, verdict);
     const entries = Array.from(state.snapshots.entries()).filter(([, s]) => s.root === root).map(([id, s]) => {
       const rec = { id, time: s.time, root: s.root, sessionId: s.sessionId };
       const fb = state.snapFeedback.get(id);
@@ -168,6 +231,7 @@ function createSnapshots(ctx, rt, config) {
     if (state.indexLoaded.has(root)) return;
     const store = state.stores.get(root);
     if (!store) return;
+    if (!await guardStoreFormat(store)) return;
     let raw = "";
     let truncated = false;
     try {
@@ -259,6 +323,7 @@ function createSnapshots(ctx, rt, config) {
   async function recordLineage(root, childId, parentId) {
     const store = state.stores.get(root);
     if (!store) return;
+    if (!await guardStoreFormat(store)) return;
     const sep = rt.isWin ? "\\" : "/";
     const existing = await loadLineage(root);
     if (!existing.some((e) => e.childId === childId && e.parentId === parentId)) {
@@ -313,6 +378,7 @@ function createSnapshots(ctx, rt, config) {
     if (buildArtifactRootSegment(root, BASE(), rt.isWin)) return;
     let store = await rt.resolveStore(root);
     store = await rt.tryUpgradeToHome(root);
+    if (!await guardStoreFormat(store)) return;
     const g = await rt.ensureGit(root, store);
     if (!g.ok) {
       setFeedback(messageId, { failed: true, ...buildFeedbackError(g.error || "\u672A\u77E5\u539F\u56E0") });
@@ -336,7 +402,10 @@ function createSnapshots(ctx, rt, config) {
     const keep = rec && (rec.failed || Array.isArray(rec.skipped) && rec.skipped.length);
     if (keep) state.snapFeedback.set(id, rec);
     else state.snapFeedback.delete(id);
-    if (state.snapFeedback.size > 200) state.snapFeedback.delete(state.snapFeedback.keys().next().value);
+    if (state.snapFeedback.size > 200) {
+      const oldest = state.snapFeedback.keys().next().value;
+      if (oldest !== void 0) state.snapFeedback.delete(oldest);
+    }
   }
   async function feedbackFor(sessionId, messageId) {
     const rec = state.snapFeedback.get(String(messageId || ""));
@@ -391,8 +460,8 @@ function createSnapshots(ctx, rt, config) {
       if (!m) {
         return { ok: false, partial: true, error: "\u56DE\u9000\u811A\u672C\u672A\u6B63\u5E38\u5B8C\u6210\uFF08\u5DE5\u4F5C\u533A\u53EF\u80FD\u5904\u4E8E\u534A\u56DE\u9000\u72B6\u6001\uFF09\uFF1A" + text.slice(0, 300) };
       }
-      const deleted = parseInt(m[1], 10);
-      const restored = parseInt(m[2], 10);
+      const deleted = parseInt(m[1] ?? "", 10);
+      const restored = parseInt(m[2] ?? "", 10);
       return { ok: true, count: (Number.isNaN(deleted) ? 0 : deleted) + (Number.isNaN(restored) ? 0 : restored) };
     } catch (error) {
       const re = error;
@@ -461,11 +530,12 @@ function createSnapshots(ctx, rt, config) {
       return [];
     }
   }
-  return { saveIndex, loadIndex, readExclude, writeExclude, rebuildOrphans, captureSnapshot, diffFor, rollbackFor, resolveCutSeq, resolveStaleQueueItemIds, feedbackFor, loadLineage, recordLineage };
+  return { saveIndex, loadIndex, readExclude, writeExclude, rebuildOrphans, captureSnapshot, diffFor, rollbackFor, resolveCutSeq, resolveStaleQueueItemIds, feedbackFor, loadLineage, recordLineage, guardStoreFormat };
 }
 export {
   createSnapshots,
   isSafetySnapshotId,
+  judgeStoreFormat,
   parseChanges,
   parseDiffOutput,
   parseSkipped,