dsh-recall-plugin 2.4.6 → 2.4.8

package/lib/config.js

@@ -40,7 +40,11 @@ const Config = Schema.object({
   refillDraft: withVolatile(Schema.boolean().default(true).description("\u64A4\u56DE\u540E\u628A\u88AB\u64A4\u56DE\u7684\u6D88\u606F\uFF08\u6587\u672C\u4E0E\u9644\u4EF6\uFF09\u56DE\u586B\u5230\u8F93\u5165\u6846")),
   snapshotEnabled: withVolatile(Schema.boolean().default(true).description("\u542F\u7528\u6D88\u606F\u5FEB\u7167\uFF08\u5173\u95ED\u540E\u4E0D\u518D\u65B0\u5EFA\uFF0C\u5DF2\u6709\u5FEB\u7167\u4ECD\u53EF\u64A4\u56DE\uFF09")),
   archiveOriginal: withVolatile(Schema.boolean().default(true).description("\u64A4\u56DE\u540E\u5F52\u6863\u539F\u4F1A\u8BDD\uFF08\u5173\u95ED\u540E\u539F\u4F1A\u8BDD\u4FDD\u7559\u5728\u5217\u8868\u4E2D\uFF09")),
-  retentionDays: withVolatile(Schema.number().default(0).description("\u6309\u5929\u6570\u4FDD\u7559\u5FEB\u7167\uFF0C\u8D85\u671F\u81EA\u52A8\u5220\u9664\uFF1B0 \u8868\u793A\u4E0D\u542F\u7528"))
+  retentionDays: withVolatile(Schema.number().default(0).description("\u6309\u5929\u6570\u4FDD\u7559\u5FEB\u7167\uFF0C\u8D85\u671F\u81EA\u52A8\u5220\u9664\uFF1B0 \u8868\u793A\u4E0D\u542F\u7528")),
+  // A4：界面语言。union 三值而不是自由字符串——非法配置在加载时响亮失败
+  //（合规清单 #3）；description 保持中文是 v1 明示限制：它由宿主官方设置
+  // 表单在 host 侧渲染，插件无法本地化（自定义配置卡片不受影响，见 README）
+  locale: withVolatile(Schema.union(["auto", "zh", "en"]).default("auto").description("\u754C\u9762\u8BED\u8A00\uFF1Aauto \u8DDF\u968F\u7CFB\u7EDF\uFF0C\u53EF\u9009 zh / en\uFF08\u4FDD\u5B58\u540E\u751F\u6548\uFF09"))
 });
 function isLegacySettingsFace(settings) {
   const svc = settings;
@@ -65,7 +69,8 @@ function resolveSettingsNs(ctx, settings) {
   for (const id of entryIds) {
     if (known.indexOf(id) >= 0) return id;
   }
-  return entryIds.length ? entryIds[0] : null;
+  const first = entryIds[0];
+  return first !== void 0 ? first : null;
 }
 function describeNamespaces(settings) {
   const svc = settings;
@@ -119,7 +124,8 @@ const DEFAULTS = {
   refillDraft: true,
   snapshotEnabled: true,
   archiveOriginal: true,
-  retentionDays: 0
+  retentionDays: 0,
+  locale: "auto"
 };
 function createConfig(raw) {
   const cfg = raw && typeof raw === "object" ? raw : {};
@@ -139,7 +145,8 @@ function createConfig(raw) {
   const archiveOriginal = typeof cfg.archiveOriginal === "boolean" ? cfg.archiveOriginal : true;
   const rawDays = typeof cfg.retentionDays === "number" ? cfg.retentionDays : parseInt(String(cfg.retentionDays == null ? "" : cfg.retentionDays), 10);
   const retentionDays = Number.isFinite(rawDays) ? Math.max(0, rawDays) : 0;
-  return { gcSnaps, gcHours, maxFileBytes, maxSnapshotsPerWorkspace, baseExcludes, refillDraft, snapshotEnabled, archiveOriginal, retentionDays };
+  const locale = cfg.locale === "zh" || cfg.locale === "en" ? cfg.locale : "auto";
+  return { gcSnaps, gcHours, maxFileBytes, maxSnapshotsPerWorkspace, baseExcludes, refillDraft, snapshotEnabled, archiveOriginal, retentionDays, locale };
 }
 export {
   Config,

package/lib/errors.js

@@ -14,6 +14,7 @@ const RECALL_NO_ROOT = "NO_ROOT";
 const RECALL_NO_SESSION = "NO_SESSION";
 const RECALL_PARTIAL_DELETE = "PARTIAL_DELETE";
 const RECALL_UNKNOWN_OP = "UNKNOWN_OP";
+const RECALL_FORMAT_BLOCKED = "FORMAT_BLOCKED";
 const RECALL_UNKNOWN_ENDPOINT = "UNKNOWN_ENDPOINT";
 const RECALL_INDEX_CORRUPT = "INDEX_CORRUPT";
 const ALL_CODES = Object.freeze([
@@ -33,6 +34,7 @@ const ALL_CODES = Object.freeze([
   RECALL_NO_SESSION,
   RECALL_PARTIAL_DELETE,
   RECALL_UNKNOWN_OP,
+  RECALL_FORMAT_BLOCKED,
   RECALL_UNKNOWN_ENDPOINT,
   RECALL_INDEX_CORRUPT
 ]);
@@ -43,6 +45,7 @@ export {
   RECALL_BODY_TOO_LARGE,
   RECALL_EMPTY_PATCH,
   RECALL_ERROR,
+  RECALL_FORMAT_BLOCKED,
   RECALL_INDEX_CORRUPT,
   RECALL_NO_ROOT,
   RECALL_NO_SESSION,

package/lib/exclude-patterns.js

@@ -20,7 +20,8 @@ function buildArtifactRootSegment(root, base, isWin) {
   const pool = isWin ? names.map((n) => n.toLowerCase()) : names;
   for (const seg of segs) {
     const i = pool.indexOf(isWin ? seg.toLowerCase() : seg);
-    if (i >= 0) return names[i];
+    const hit = i >= 0 ? names[i] : void 0;
+    if (hit !== void 0) return hit;
   }
   return null;
 }

package/lib/index.js

@@ -7,6 +7,7 @@ import { createMaintenance } from "./maintenance.js";
 import { createSessionInfo, titleFromEvents, messageTextFromEvents } from "./session-info.js";
 import { createRoutesCore } from "./routes-core.js";
 import { createRoutesManage } from "./routes-manage.js";
+import { createIntentJournal } from "./intent-journal.js";
 import * as dshSettings from "@deepseek-ai/dsh-settings";
 import * as E from "./errors.js";
 const name = "dsh-recall-plugin";
@@ -65,7 +66,7 @@ function apply(ctx, config) {
     const workers = Array.from({ length: Math.min(limit, tasks.length) }, async () => {
       while (index < tasks.length) {
         const task = tasks[index++];
-        await task();
+        if (task) await task();
       }
     });
     await Promise.all(workers);
@@ -215,6 +216,26 @@ function apply(ctx, config) {
     }
     return records;
   }
+  const intentJournal = createIntentJournal({
+    runShell: rt.runShell,
+    writeTextViaShell: rt.writeTextViaShell,
+    scripts: rt.scripts,
+    isWin: rt.isWin,
+    recordError: rt.recordError,
+    workspaceMatchesTag: async (messageId) => {
+      const d = await snaps.diffFor(messageId);
+      return Boolean(d && d.total === 0 && d.changes.length === 0);
+    },
+    resetToSafety: async (store, safetyId, root) => {
+      try {
+        const out = await rt.runShell(rt.scripts.rescueScript(root, store, state.gitExe || "", "snap-" + safetyId), { timeoutMs: 6e5, stdoutMaxBytes: 65536 });
+        return String(out || "").indexOf("RESCUE_OK") >= 0;
+      } catch (error) {
+        return false;
+      }
+    },
+    agentBusy: (root) => agentBusy(null, root)
+  });
   const deps = {
     ctx,
     rt,
@@ -245,14 +266,18 @@ function apply(ctx, config) {
     readSettings: () => readSettings(),
     DEFAULTS,
     rescueRollback,
-    E
+    intentJournal,
+    E,
+    // issue #19 撤回终态事件广播：闭包注入保持 ctx 不解构纪律，routes 域
+    // 不直接持有 ctx；单测可注入桩断言事件名与 payload
+    emitEvent: (event, payload) => ctx.emit(event, payload)
   };
   const endpoints = {
     ...createRoutesCore(deps),
     ...createRoutesManage(deps)
   };
   const handleRecall = async (request) => {
-    const name2 = new URL(request.url).pathname.replace(/^\/api\/recall\/?/, "").split("/")[0];
+    const name2 = new URL(request.url).pathname.replace(/^\/api\/recall\/?/, "").split("/")[0] ?? "";
     const endpoint = endpoints[name2];
     if (!endpoint) {
       return jsonResponse({ ok: false, code: E.RECALL_UNKNOWN_ENDPOINT, message: "unknown endpoint: " + name2 });
@@ -319,10 +344,15 @@ function apply(ctx, config) {
       }
     }
     for (const [cwd, sessionId] of warmupRoots) {
-      Promise.resolve(rt.resolveStore(cwd)).then(() => rt.tryUpgradeToHome(cwd)).then((store) => rt.ensureGit(cwd, store)).then(() => snaps.loadIndex(cwd, sessionId)).then(() => snaps.rebuildOrphans(cwd, sessionId)).then(() => rt.cleanupLegacy(cwd)).catch(() => {
+      Promise.resolve(rt.resolveStore(cwd)).then(() => rt.tryUpgradeToHome(cwd)).then((store) => rt.ensureGit(cwd, store)).then(() => snaps.loadIndex(cwd, sessionId)).then(() => snaps.rebuildOrphans(cwd, sessionId)).then(async () => {
+        const st = state.stores.get(cwd);
+        if (st && await snaps.guardStoreFormat(st)) await intentJournal.recover(st);
+      }).then(() => rt.cleanupLegacy(cwd)).catch(() => {
       });
     }
-  })();
+  })().catch((error) => {
+    console.error("recall warmup skipped:", error);
+  });
 }
 export {
   Config,

package/lib/intent-journal.js

@@ -0,0 +1,108 @@
+const INTENT_VERSION = 1;
+function describeIntent(intent) {
+  return "message=" + intent.messageId + ", phase=" + intent.phase + ", safety=snap-" + intent.safetyId;
+}
+function createIntentJournal(deps) {
+  const handled = /* @__PURE__ */ new Set();
+  function intentFile(store) {
+    return store.dir + (deps.isWin ? "\\" : "/") + "recall-intent.json";
+  }
+  async function readRaw(store) {
+    let raw = "";
+    try {
+      raw = deps.scripts.stripBom(await deps.runShell(deps.scripts.fileReadCmd(intentFile(store)), { timeoutMs: 3e4, stdoutMaxBytes: 65536 })).trim();
+    } catch (error) {
+      return { ok: false, intent: null };
+    }
+    if (!raw) return { ok: true, intent: null };
+    try {
+      const obj = JSON.parse(raw);
+      if (!obj || obj.v !== INTENT_VERSION || obj.op !== "execute" || typeof obj.messageId !== "string" || !obj.messageId || typeof obj.safetyId !== "string" || !obj.safetyId || obj.phase !== "rollback" && obj.phase !== "rescue") {
+        return { ok: true, intent: null };
+      }
+      return {
+        ok: true,
+        intent: {
+          v: INTENT_VERSION,
+          op: "execute",
+          messageId: obj.messageId,
+          root: typeof obj.root === "string" ? obj.root : "",
+          safetyId: obj.safetyId,
+          safetyOk: obj.safetyOk !== false,
+          phase: obj.phase,
+          time: typeof obj.time === "number" ? obj.time : 0
+        }
+      };
+    } catch (error) {
+      return { ok: true, intent: null };
+    }
+  }
+  async function write(store, text) {
+    try {
+      await deps.writeTextViaShell(intentFile(store), text);
+    } catch (error) {
+      deps.recordError("recall intent journal write failed: " + String(error));
+    }
+  }
+  function read(store) {
+    return readRaw(store).then((r) => r.intent);
+  }
+  async function begin(store, root, fields) {
+    const intent = {
+      v: INTENT_VERSION,
+      op: "execute",
+      messageId: fields.messageId,
+      root,
+      safetyId: fields.safetyId,
+      safetyOk: fields.safetyOk,
+      phase: "rollback",
+      time: Date.now()
+    };
+    await write(store, JSON.stringify(intent));
+  }
+  async function advance(store, phase) {
+    const cur = await read(store);
+    if (cur) await write(store, JSON.stringify(Object.assign({}, cur, { phase })));
+  }
+  function clear(store) {
+    return write(store, "");
+  }
+  async function recover(store) {
+    if (handled.has(store.dir)) return false;
+    const got = await readRaw(store);
+    if (!got.ok) return false;
+    const intent = got.intent;
+    if (!intent) {
+      handled.add(store.dir);
+      return false;
+    }
+    if (await deps.workspaceMatchesTag(intent.messageId)) {
+      await clear(store);
+      handled.add(store.dir);
+      return true;
+    }
+    if (!intent.safetyOk) {
+      deps.recordError("recall interrupted rollback detected, no safety snapshot: " + describeIntent(intent) + "\uFF08\u8BB0\u5F55\u4FDD\u7559\u4E8E " + intentFile(store) + "\uFF09");
+      handled.add(store.dir);
+      return true;
+    }
+    if (deps.agentBusy(intent.root)) {
+      deps.recordError("recall interrupted rollback deferred (agent busy): " + describeIntent(intent));
+      return false;
+    }
+    const reset = await deps.resetToSafety(store, intent.safetyId, intent.root);
+    if (!reset) {
+      deps.recordError("recall interrupted rollback rescue failed: " + describeIntent(intent) + "\uFF08\u8BB0\u5F55\u4FDD\u7559\u4E8E " + intentFile(store) + "\uFF09");
+      handled.add(store.dir);
+      return true;
+    }
+    await clear(store);
+    handled.add(store.dir);
+    deps.recordError("recovered interrupted rollback: " + describeIntent(intent) + " \u2014 \u5DE5\u4F5C\u533A\u5DF2\u590D\u4F4D\u5230\u5B89\u5168\u5FEB\u7167");
+    return true;
+  }
+  return { begin, advance, clear, read, file: intentFile, recover };
+}
+export {
+  createIntentJournal
+};

package/lib/maintenance.js

@@ -5,8 +5,9 @@ function selectOverLimitVictims(snapshots, limit) {
   const byRoot = /* @__PURE__ */ new Map();
   for (const [id, s] of snapshots.entries()) {
     if (!s || !s.root) continue;
-    if (!byRoot.has(s.root)) byRoot.set(s.root, []);
-    byRoot.get(s.root).push({ id, time: s.time });
+    const list = byRoot.get(s.root);
+    if (list) list.push({ id, time: s.time });
+    else byRoot.set(s.root, [{ id, time: s.time }]);
   }
   const victims = /* @__PURE__ */ new Map();
   for (const [root, list] of byRoot) {
@@ -37,8 +38,9 @@ function createMaintenance(ctx, rt, snaps, config, deps = {}) {
     const byRoot = /* @__PURE__ */ new Map();
     for (const [id, s] of state.snapshots.entries()) {
       if (!s || s.sessionId !== sessionId) continue;
-      if (!byRoot.has(s.root)) byRoot.set(s.root, []);
-      byRoot.get(s.root).push(id);
+      const list = byRoot.get(s.root);
+      if (list) list.push(id);
+      else byRoot.set(s.root, [id]);
     }
     let purged = 0;
     for (const [root, ids] of byRoot) {
@@ -51,6 +53,7 @@ function createMaintenance(ctx, rt, snaps, config, deps = {}) {
         }
       }
       if (!store || !state.gitExe) continue;
+      if (!await snaps.guardStoreFormat(store)) continue;
       try {
         for (let i = 0; i < ids.length; i += 100) {
           await rt.runShell(S.purgeTagsScript(store, state.gitExe, ids.slice(i, i + 100).map((id) => "snap-" + id)), { timeoutMs: 12e4, stdoutMaxBytes: 4096 });
@@ -99,6 +102,7 @@ function createMaintenance(ctx, rt, snaps, config, deps = {}) {
         }
       }
       if (!store || !state.gitExe) continue;
+      if (!await snaps.guardStoreFormat(store)) continue;
       try {
         for (let i = 0; i < victims.length; i += 100) {
           await rt.runShell(S.purgeTagsScript(store, state.gitExe, victims.slice(i, i + 100).map((v) => "snap-" + v.id)), { timeoutMs: 12e4, stdoutMaxBytes: 4096 });
@@ -127,6 +131,7 @@ function createMaintenance(ctx, rt, snaps, config, deps = {}) {
         }
       }
       if (!store || !state.gitExe) continue;
+      if (!await snaps.guardStoreFormat(store)) continue;
       try {
         for (let i = 0; i < victims.length; i += 100) {
           await rt.runShell(S.purgeTagsScript(store, state.gitExe, victims.slice(i, i + 100).map((v) => "snap-" + v.id)), { timeoutMs: 12e4, stdoutMaxBytes: 4096 });

package/lib/routes-core.js

@@ -1,8 +1,10 @@
 import { ENV_HINTS } from "./diagnostics.js";
 import { parseTreeId } from "./snapshots.js";
 import { buildArtifactRootSegment, buildRootNotice } from "./exclude-patterns.js";
+const RECALL_EVENT_COMPLETE_HOST = "dsh-recall/complete";
+const RECALL_EVENT_FAILED_HOST = "dsh-recall/failed";
 function createRoutesCore(deps) {
-  const { rt, snaps, state, cfg, supported, enqueue, agentBusy, rescueRollback, E } = deps;
+  const { rt, snaps, state, cfg, supported, enqueue, agentBusy, rescueRollback, intentJournal, emitEvent, E } = deps;
   return {
     "init": async (args) => {
       if (!supported) {
@@ -17,15 +19,19 @@ function createRoutesCore(deps) {
         await rt.ensureGit(root, store);
         await snaps.loadIndex(root, sessionId);
         await snaps.rebuildOrphans(root, sessionId);
+        if (store && await snaps.guardStoreFormat(store)) await intentJournal.recover(store);
         rt.cleanupLegacy(root);
         notice = {
           gitMissing: state.gitExe === "",
           homeFallback: store ? !store.home : false
         };
         const artifactSeg = buildArtifactRootSegment(root, cfg.baseExcludes, rt.isWin);
-        if (artifactSeg) notice.buildRootNotice = buildRootNotice(artifactSeg);
+        if (artifactSeg) {
+          notice.buildRootArtifactSeg = artifactSeg;
+          notice.buildRootNotice = buildRootNotice(artifactSeg);
+        }
       }
-      return { ok: Boolean(root), root: root || null, notice, config: { refillDraft: cfg.refillDraft, archiveOriginal: cfg.archiveOriginal } };
+      return { ok: Boolean(root), root: root || null, notice, config: { refillDraft: cfg.refillDraft, archiveOriginal: cfg.archiveOriginal, locale: cfg.locale } };
     },
     "snapshot-info": async (args) => {
       const id = args && args.messageId ? String(args.messageId) : "";
@@ -38,7 +44,9 @@ function createRoutesCore(deps) {
         time: snap ? snap.time : null,
         id,
         ...feedback,
-        notice: artifactSeg ? buildRootNotice(artifactSeg) : void 0
+        // A4：段名与中文 notice 并存下发（client 优先段名本地取词，见 init 同处注释）
+        notice: artifactSeg ? buildRootNotice(artifactSeg) : void 0,
+        artifactSeg: artifactSeg || void 0
       };
     },
     "preview": async (args) => {
@@ -69,6 +77,9 @@ function createRoutesCore(deps) {
         if (!snap) return { ok: false, code: E.RECALL_NO_SNAPSHOT, message: "\u8BE5\u6D88\u606F\u6CA1\u6709\u53EF\u7528\u7684\u9879\u76EE\u5FEB\u7167" };
         const store = state.stores.get(snap.root);
         if (!store) return { ok: false, code: E.RECALL_NO_STORE, message: "\u5FEB\u7167\u5B58\u50A8\u4E0D\u53EF\u7528" };
+        if (!await snaps.guardStoreFormat(store)) {
+          return { ok: false, code: E.RECALL_FORMAT_BLOCKED, message: "\u78C1\u76D8\u683C\u5F0F\u4E0D\u53D7\u652F\u6301\uFF0C\u5DF2\u505C\u6B62\u5199\u5165\uFF1B\u8BE6\u89C1\u300C\u6700\u8FD1\u9519\u8BEF\u300D" };
+        }
         if (agentBusy(sessionId, snap.root)) return { ok: false, code: E.RECALL_AGENT_BUSY, message: "Agent \u6B63\u5728\u8FD0\u884C\u4E2D\uFF0C\u8BF7\u5148\u505C\u6B62\u540E\u518D\u64A4\u56DE" };
         const previewTreeId = args && typeof args.previewTreeId === "string" && args.previewTreeId ? args.previewTreeId : null;
         if (!previewTreeId && args && typeof args.previewTotal === "number") {
@@ -90,12 +101,20 @@ function createRoutesCore(deps) {
         if (previewTreeId && safetyTreeId && safetyTreeId !== previewTreeId) {
           return { ok: false, code: E.RECALL_STALE, message: "\u9884\u89C8\u540E\u9879\u76EE\u6587\u4EF6\u53D1\u751F\u4E86\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u9884\u89C8\u786E\u8BA4" };
         }
+        await intentJournal.begin(store, snap.root, { messageId: id, safetyId, safetyOk });
         const rolled = await snaps.rollbackFor(id);
-        if (rolled.ok) return rolled;
-        return rescueRollback(
+        if (rolled.ok) {
+          await intentJournal.clear(store);
+          return rolled;
+        }
+        await intentJournal.advance(store, "rescue");
+        const rescueResult = await rescueRollback(
           { runShell: rt.runShell, scripts: rt.scripts, gitExe: state.gitExe || "", recordError: rt.recordError },
           { root: snap.root, store, safetyId, safetyOk, rollbackError: rolled.error }
         );
+        await intentJournal.clear(store);
+        if (rescueResult && rescueResult.message) rescueResult.message += "\uFF08\u4E2D\u65AD\u70B9\u8BB0\u5F55\uFF1A" + intentJournal.file(store) + "\uFF09";
+        return rescueResult;
       });
       if (!result.ok) return result;
       const cutSeq = await snaps.resolveCutSeq(sessionId, id);
@@ -142,9 +161,73 @@ function createRoutesCore(deps) {
       if (!store) return { ok: false, code: E.RECALL_NO_STORE, message: "\u5FEB\u7167\u5B58\u50A8\u4E0D\u53EF\u7528" };
       await snaps.recordLineage(root, childId, parentId);
       return { ok: true };
+    },
+    // issue #19：client 撤回终态上报 → cordis 事件广播（dsh-recall/complete
+    // | dsh-recall/failed）。不进串行队列（零 git 操作）、不依赖 store——
+    // lineage-record 的 NO_STORE 早退在这里是缺陷（原会话已归档时解析不到
+    // store 会吞掉事件），端点只做 enrich 与转发。恒 { ok: true }：事件
+    // 发送失败不影响撤回主流程（client 侧 fire-and-forget，连响应都不等）。
+    "notify": async (args) => {
+      const status = args && args.status;
+      const sessionId = args && args.sessionId ? String(args.sessionId) : "";
+      const messageId = args && args.messageId ? String(args.messageId) : "";
+      if (status !== "complete" && status !== "failed" || !sessionId || !messageId) {
+        return { ok: false, code: E.RECALL_BAD_TYPE, message: "\u64A4\u56DE\u4E0A\u62A5\u7F3A\u5C11\u5FC5\u8981\u53C2\u6570" };
+      }
+      const scope = args && args.scope === "session-only" ? "session-only" : "both";
+      const cutSeq = args && typeof args.cutSeq === "number" ? args.cutSeq : null;
+      let root = null;
+      try {
+        root = await rt.resolveRoot(sessionId) || null;
+      } catch {
+        root = null;
+      }
+      let eventName;
+      let payload;
+      if (status === "complete") {
+        eventName = RECALL_EVENT_COMPLETE_HOST;
+        payload = {
+          version: 1,
+          sessionId,
+          childSessionId: args && args.childSessionId ? String(args.childSessionId) : null,
+          scope,
+          cutSeq,
+          messageId,
+          root,
+          count: args && typeof args.count === "number" ? args.count : 0,
+          chatReverted: Boolean(args && args.chatReverted),
+          archiveRequested: Boolean(args && args.archiveRequested),
+          time: Date.now()
+        };
+      } else {
+        eventName = RECALL_EVENT_FAILED_HOST;
+        const code = args && typeof args.code === "string" && args.code ? args.code : void 0;
+        payload = {
+          version: 1,
+          stage: args && args.stage === "fork" ? "fork" : "execute",
+          sessionId,
+          messageId,
+          scope,
+          cutSeq,
+          root,
+          ...code ? { code } : {},
+          error: args && typeof args.error === "string" && args.error ? args.error : "unknown recall failure",
+          time: Date.now()
+        };
+      }
+      queueMicrotask(() => {
+        try {
+          emitEvent(eventName, payload);
+        } catch (error) {
+          rt.recordError("recall event emit failed: " + String(error));
+        }
+      });
+      return { ok: true };
     }
   };
 }
 export {
+  RECALL_EVENT_COMPLETE_HOST,
+  RECALL_EVENT_FAILED_HOST,
   createRoutesCore
 };

package/lib/routes-manage.js

@@ -109,8 +109,9 @@ function createRoutesManage(deps) {
     const byRoot = /* @__PURE__ */ new Map();
     for (const rec of records.values()) {
       if (!match(rec) || !rec.root) continue;
-      if (!byRoot.has(rec.root)) byRoot.set(rec.root, []);
-      byRoot.get(rec.root).push(rec.id);
+      const list = byRoot.get(rec.root);
+      if (list) list.push(rec.id);
+      else byRoot.set(rec.root, [rec.id]);
     }
     let deleted = 0;
     await enqueue(async () => {
@@ -124,6 +125,7 @@ function createRoutesManage(deps) {
           }
         }
         if (!store) continue;
+        if (!await snaps.guardStoreFormat(store)) continue;
         try {
           if (state.gitExe) {
             const tags = rootIds.map((id) => "snap-" + id);
@@ -181,6 +183,10 @@ function createRoutesManage(deps) {
       let clearedStores = 0;
       let failed = 0;
       for (const { store, root } of stores.values()) {
+        if (!await snaps.guardStoreFormat(store)) {
+          failed += 1;
+          continue;
+        }
         try {
           const output = await rt.runShell(rt.scripts.listTagsScript(store, gitExe), { timeoutMs: 12e4, stdoutMaxBytes: 4194304 });
           const tags = rt.scripts.stripBom(output).split(/\r?\n/).map((tag) => tag.trim()).filter((tag) => tag.indexOf("snap-") === 0);
@@ -279,7 +285,9 @@ function createRoutesManage(deps) {
           refillDraft: cfg.refillDraft,
           snapshotEnabled: cfg.snapshotEnabled,
           archiveOriginal: cfg.archiveOriginal,
-          retentionDays: cfg.retentionDays
+          retentionDays: cfg.retentionDays,
+          // A4：界面语言偏好随 values 下发（设置卡片据此渲染下拉并即时切语言）
+          locale: cfg.locale
         },
         overridden,
         envLocks,
@@ -314,6 +322,11 @@ function createRoutesManage(deps) {
         if (!Array.isArray(patch.baseExcludes)) return { ok: false, code: E.RECALL_BAD_TYPE, message: "baseExcludes \u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u6570\u7EC4" };
         clean.baseExcludes = patch.baseExcludes.filter((p) => typeof p === "string" && p.trim());
       }
+      if (patch.locale !== void 0) {
+        const v = String(patch.locale);
+        if (v !== "auto" && v !== "zh" && v !== "en") return { ok: false, code: E.RECALL_BAD_TYPE, message: "\u754C\u9762\u8BED\u8A00\u5FC5\u987B\u662F auto / zh / en \u4E4B\u4E00" };
+        clean.locale = v;
+      }
       if (!Object.keys(clean).length) return { ok: false, code: E.RECALL_EMPTY_PATCH, message: "\u6CA1\u6709\u53EF\u5199\u5165\u7684\u914D\u7F6E\u5B57\u6BB5" };
       let settings = null;
       try {
@@ -378,14 +391,16 @@ function createRoutesManage(deps) {
         return { ok: true, titles: out };
       }
       if (op === "messages") {
-        const reqs = Array.isArray(args && args.requests) ? args.requests.slice(0, 200) : [];
+        const reqsRaw = args && args.requests;
+        const reqs = Array.isArray(reqsRaw) ? reqsRaw.slice(0, 200) : [];
         const bySession = /* @__PURE__ */ new Map();
         for (const r of reqs) {
           const sid = r && r.sessionId ? String(r.sessionId) : null;
           const mid = r && r.messageId ? String(r.messageId) : null;
           if (!sid || !mid) continue;
-          if (!bySession.has(sid)) bySession.set(sid, []);
-          bySession.get(sid).push(mid);
+          const midList = bySession.get(sid);
+          if (midList) midList.push(mid);
+          else bySession.set(sid, [mid]);
         }
         const texts = {};
         await runLimited(Array.from(bySession.entries()).map(([sid, mids]) => async () => {
@@ -492,6 +507,9 @@ function createRoutesManage(deps) {
           }
         }
         if (!store) return { ok: false, code: E.RECALL_NO_SNAPSHOT, message: "\u8BE5\u5FEB\u7167\u4E0D\u5B58\u5728" };
+        if (!await snaps.guardStoreFormat(store)) {
+          return { ok: false, code: E.RECALL_FORMAT_BLOCKED, message: "\u78C1\u76D8\u683C\u5F0F\u4E0D\u53D7\u652F\u6301\uFF0C\u5DF2\u505C\u6B62\u5199\u5165\uFF1B\u8BE6\u89C1\u300C\u6700\u8FD1\u9519\u8BEF\u300D" };
+        }
         const finalStore = store;
         const finalRoot = snapRoot;
         await enqueue(async () => {

package/lib/scripts.posix.js

@@ -363,6 +363,9 @@ function indexReadCmd(dir) {
 function lineageReadCmd(dir) {
   return "cat " + psq(dir + "/lineage.json") + " 2>/dev/null || true";
 }
+function fileReadCmd(file) {
+  return "cat " + psq(file) + " 2>/dev/null || true";
+}
 function legacyRmScript(path) {
   return "rm -rf -- " + psq(path);
 }
@@ -441,6 +444,7 @@ export {
   ensureGitScript,
   excludeDumpScript,
   excludeReadCmd,
+  fileReadCmd,
   fileWriteStdinCmd,
   gcScript,
   indexReadCmd,

package/lib/scripts.pwsh.js

@@ -420,6 +420,9 @@ function indexReadCmd(dir) {
 function lineageReadCmd(dir) {
   return "Get-Content -LiteralPath " + psq(dir + "\\lineage.json") + " -Raw -Encoding UTF8 -ErrorAction SilentlyContinue";
 }
+function fileReadCmd(file) {
+  return "if (Test-Path -LiteralPath " + psq(file) + ") { Get-Content -LiteralPath " + psq(file) + " -Raw -Encoding UTF8 -ErrorAction SilentlyContinue }";
+}
 function legacyRmScript(path) {
   return "Remove-Item -Recurse -Force -LiteralPath " + psq(path) + " -ErrorAction SilentlyContinue";
 }
@@ -525,6 +528,7 @@ export {
   ensureGitScript,
   excludeDumpScript,
   excludeReadCmd,
+  fileReadCmd,
   fileWriteStdinCmd,
   gcScript,
   homeDirScript,