dsh-remote 0.8.39 → 0.8.41

package/README.en.md

@@ -39,7 +39,7 @@ The native **"Add workspace"** flow — a centered modal with two tabs, opening
 
 ## Features
 
-![Capabilities at a glance — multi-machine SSH, live alias resolution, the two-tab picker, three-way sync, remote @ completion, a remote DSH Web UI in your local browser, health check & one-click deploy, audit, port forwarding, sidebar editing, self-update, and the 24 rw_* tools](docs/shots/features.png)
+![Capabilities at a glance — multi-machine SSH, live alias resolution, the two-tab picker, three-way sync, remote @ completion, a remote DSH Web UI in your local browser, health check & one-click deploy, audit, port forwarding, sidebar editing, self-update, and the 22 rw_* tools](docs/shots/features.png)
 
 The image above is the overview. What follows is only what the image does not make obvious.
 
@@ -56,10 +56,9 @@ The image above is the overview. What follows is only what the image does not ma
 
 The rest:
 
-- **25 model tools** (listed so they can be copied or searched): `rw_info`, `rw_connect`, `rw_machines`, `rw_pick_workspace`, `rw_list_dir`, `rw_stat`, `rw_read_file`, `rw_write_file`, `rw_edit`, `rw_append`, `rw_mkdir`, `rw_remove`, `rw_move`, `rw_exec`, `rw_search`, `rw_download`, `rw_upload`, `rw_sync`, `rw_push`, `rw_backup`, `rw_backup_list`, `rw_restore`, `rw_forward`, `rw_disconnect`, `rw_deploy_probe`.
-- **Compressed workspace backup / restore** (`rw_backup` / `rw_backup_list` / `rw_restore`) — archive a remote workspace to `.tar.gz` (everything is included by default; pass excludes for `node_modules`, `/build/`, `*.log` and friends). The archive can stay on the remote under `$HOME/.dsh-remote/backups`, be pulled to this machine, or **both**. Before restoring, the archive is verified; **a corrupt archive is refused and the target is left untouched**. `mode=replace` (default) swaps the whole tree, `mode=merge` only overwrites without deleting. The settings page has a **Backup** card too (create / download / restore / delete).
+- **22 model tools** (listed so they can be copied or searched): `rw_info`, `rw_connect`, `rw_machines`, `rw_pick_workspace`, `rw_list_dir`, `rw_stat`, `rw_read_file`, `rw_write_file`, `rw_edit`, `rw_append`, `rw_mkdir`, `rw_remove`, `rw_move`, `rw_exec`, `rw_search`, `rw_download`, `rw_upload`, `rw_sync`, `rw_push`, `rw_forward`, `rw_disconnect`, `rw_deploy_probe`.
 - **Open a remote machine's DSH Web UI locally** (`0.8.36+`) — nothing has to be exposed on the remote: the plugin SSHes out, starts a `dsh web` there that binds **`127.0.0.1` only**, and tunnels its port back to a loopback port on this machine. The URL carries a one-time login token, consumed once by a redirect.
-- **One-click health check & deploy** (`0.8.36+`) — **a failed connection is usually the remote dsh version or environment, not the plugin.** The read-only check reports platform / node / npm / dsh version / **whether the native module can load** / proxy and npm registry, with a suggested fix; "Deploy & verify" installs into a remote **private directory** (no system directory, no PATH change, no replacing the version you use — deleting it is a complete rollback) and verifies step by step. If that still fails, the built-in `dsh-remote-deploy` skill takes over.
+- **One-click health check & deploy** (`0.8.36+`) — **a failed connection is usually the remote dsh version or environment, not the plugin.** The read-only check reports platform / node / npm / dsh version / **whether the native module can load** / proxy and npm registry, with a suggested fix; "Deploy & verify" installs into a remote **private directory** (no system directory, no PATH change, no replacing the version you use — deleting it is a complete rollback) and verifies step by step. The button **no longer requires running the check first** (`0.8.40+`) — the deploy re-checks internally. If that still fails, the built-in `dsh-remote-deploy` skill takes over.
 - **Cross-platform remotes** — all file access is SFTP-protocol-level (no POSIX shell), so Linux/macOS/Windows remotes all work.
 - **Windows remotes** — the platform is auto-detected and commands go through `bash -s` over stdin, so quoting and backslash escaping are never an issue (`config.shell` can pin a path or `native` disables wrapping); `C:\Users\dev` and `/c/Users/dev` are both accepted.
 - **Async long tasks** — `rw_sync`/`rw_push` with `async: true` return a `taskId` with progress/result/cancel.
@@ -264,9 +263,6 @@ Deploying to a product profile is a separate, explicit action (`./sync.sh`) for
 | `webInstallPrefix` | string | `''` | where an automatic deployment installs dsh; empty means `$HOME/.dsh-remote/dsh` (no system directory, no PATH change) |
 | `webInstallVersion` | string | `0.1.5-rc.2` | dsh version an automatic deployment installs; the default is the first that can start the web surface on Linux |
 | `webInstallRegistry` | string | `''` | npm registry for the install; **empty keeps the remote's own config**, so an internal mirror is never overridden |
-| `backupDir` | string | `''` | Where backup archives are written **on the remote**; empty means `$HOME/.dsh-remote/backups` (resolved on the remote, never guessed from this machine's home) |
-| `backupExcludes` | string[] | `[]` | Paths excluded from backups by default (gitignore-style). **Empty by default**: silently omitting directories is how a restore becomes silent data loss |
-| `maxBackupTransferBytes` | int | `2147483648` | Cap (bytes) on moving an archive between this machine and the remote; **the remote archive is never truncated** — this only bounds the optional cross-machine copy. 0 = unlimited |
 
 > The authoritative list is the `Config` schema in `lib/index.js`; this table mirrors it.
 

package/README.md

@@ -39,16 +39,15 @@ DSH 的 Web 界面刻意只监听 `127.0.0.1`（CLI 为安全拒绝 `--host 0.0.
 
 ## 功能
 
-![核心能力总览 — 多机 SSH / 别名实时解析 / 双 tab 选择器 / 三路同步 / 远程 @ 补全 / 远端 DSH 界面挂到本机 / 体检与一键部署 / 安全审计 / 端口转发 / 侧栏编辑 / 自动更新，以及 25 个 rw_* 工具](docs/shots/features.png)
+![核心能力总览 — 多机 SSH / 别名实时解析 / 双 tab 选择器 / 三路同步 / 远程 @ 补全 / 远端 DSH 界面挂到本机 / 体检与一键部署 / 安全审计 / 端口转发 / 侧栏编辑 / 自动更新，以及 22 个 rw_* 工具](docs/shots/features.png)
 
 上图是能力总览；下面只列**上图没说清、但用起来需要知道**的部分。
 
 其余要点：
 
-- **25 个模型工具**（便于复制/检索）：`rw_info`、`rw_connect`、`rw_machines`、`rw_pick_workspace`、`rw_list_dir`、`rw_stat`、`rw_read_file`、`rw_write_file`、`rw_edit`、`rw_append`、`rw_mkdir`、`rw_remove`、`rw_move`、`rw_exec`、`rw_search`、`rw_download`、`rw_upload`、`rw_sync`、`rw_push`、`rw_backup`、`rw_backup_list`、`rw_restore`、`rw_forward`、`rw_disconnect`、`rw_deploy_probe`。
-- **工作区压缩备份 / 恢复**（`rw_backup` / `rw_backup_list` / `rw_restore`）—— 把远程工作区打成 `.tar.gz`（默认全部收录，另可按参数排除 `node_modules`、`/build/`、`*.log` 等）；归档可留在远端 `$HOME/.dsh-remote/backups`，也可拉到本机或**两边都留**。恢复前先校验归档可读，**归档损坏则拒绝执行、目标目录原封不动**；`mode=replace`（默认）整树替换、`mode=merge` 只覆盖不删除。设置页里也有「备份」卡片（新建 / 下载 / 恢复 / 删除）。
+- **22 个模型工具**（便于复制/检索）：`rw_info`、`rw_connect`、`rw_machines`、`rw_pick_workspace`、`rw_list_dir`、`rw_stat`、`rw_read_file`、`rw_write_file`、`rw_edit`、`rw_append`、`rw_mkdir`、`rw_remove`、`rw_move`、`rw_exec`、`rw_search`、`rw_download`、`rw_upload`、`rw_sync`、`rw_push`、`rw_forward`、`rw_disconnect`、`rw_deploy_probe`。
 - **把远端机器的 DSH 界面挂到本机**（`0.8.36+`）—— 不用在远端开任何端口：插件主动 SSH 连过去，在远端**只监听 `127.0.0.1`** 地起一个 `dsh web`，再把端口经隧道搬回本机的一个 loopback 端口。地址带一次性登录令牌，只在本机这次跳转里用一次。
-- **连不上时一键体检与部署**（`0.8.36+`）—— **连不上大多不是插件的问题，而是远端 dsh 的版本或环境不对**。体检（只读）会报出平台/node/npm/dsh 版本、**原生模块能否启动**、代理与 npm 源，并给出修复建议；「部署并验证」把它装到远端**私有目录**（不写系统目录、不改 PATH、不覆盖你在用的版本，删目录即回滚）并逐步校验。失败还能交给内置的 `dsh-remote-deploy` 技能排查。
+- **连不上时一键体检与部署**（`0.8.36+`）—— **连不上大多不是插件的问题，而是远端 dsh 的版本或环境不对**。体检（只读）会报出平台/node/npm/dsh 版本、**原生模块能否启动**、代理与 npm 源，并给出修复建议；「部署并验证」把它装到远端**私有目录**（不写系统目录、不改 PATH、不覆盖你在用的版本，删目录即回滚）并逐步校验。按钮**不再需要先体检**——直接点即可（`0.8.40+`），部署过程自己会重新体检。失败还能交给内置的 `dsh-remote-deploy` 技能排查。
 - **远端跨平台** —— 文件访问走 SFTP 协议层（不依赖 POSIX shell），Linux/macOS/Windows 远端都能列/读/写/搜索/同步。
 - **Windows 主机** —— 自动探测平台并定位 Git Bash，命令经 `bash -s` 走 stdin 执行，不受引号/反斜杠转义困扰（`config.shell` 可指定或设 `native` 关闭）；`C:\Users\dev` 与 `/c/Users/dev` 两种写法都接受。
 - **长任务异步化** —— `rw_sync`/`rw_push` 传 `async: true` 返回 `taskId`，可查询进度/结果/取消。
@@ -246,9 +245,6 @@ scripts/dev-run.sh --status    # 是否在运行
 | `webInstallPrefix` | string | `''` | 自动部署装到远端的哪个目录；留空用 `$HOME/.dsh-remote/dsh`（不写系统目录、不改 PATH） |
 | `webInstallVersion` | string | `0.1.5-rc.2` | 自动部署安装的 dsh 版本；默认值是第一个在 Linux 上能启动 web 的版本 |
 | `webInstallRegistry` | string | `''` | 安装用的 npm 源；**留空沿用远端自己的配置**，不会覆盖内网镜像 |
-| `backupDir` | string | `''` | 备份归档在**远端**的存放目录；留空用 `$HOME/.dsh-remote/backups`（在远端解析，不用本机 home 猜） |
-| `backupExcludes` | string[] | `[]` | 备份默认排除的路径（gitignore 风格）。**默认为空**：静默少打包目录正是「恢复即静默丢数据」的成因 |
-| `maxBackupTransferBytes` | int | `2147483648` | 归档在本机与远端之间搬运的大小上限（字节）；**远端的归档从不截断**，只约束可选的对拷。0 = 不限 |
 
 > 权威清单是 `lib/index.js` 里的 `Config` schema，本表与之一致。
 

package/lib/client.js

@@ -187,45 +187,6 @@ window.__ModuleLoader__.load({
         'settings.modeAuto': '自动',
         'settings.modeOff': '关闭',
         'settings.modeManual': '手动',
-        // ── 工作区备份（rw_backup / rw_restore）────────────────────────────
-        'settings.backup': '工作区备份（.tar.gz）',
-        'settings.backupHint': '把远程工作区打包成 .tar.gz。默认**全部收录**；需要更小的归档时再填排除项。归档可留在远端、拉到本机、或两边都留。',
-        'settings.backupCreate': '立即备份',
-        'settings.backupCreating': '备份中…',
-        'settings.backupExcludes': '排除项（每行一个）',
-        'settings.backupExcludesPlaceholder': 'node_modules\n/build/\n*.log',
-        'settings.backupDest': '存放位置',
-        'settings.backupDestRemote': '仅远端',
-        'settings.backupDestLocal': '仅本机',
-        'settings.backupDestBoth': '两边都留',
-        'settings.backupDirLabel': '远端备份目录：{dir}',
-        'settings.backupDirUnknown': '（无法确定远端备份目录）',
-        'settings.backupNone': '还没有备份。点「立即备份」创建第一个。',
-        'settings.backupCount': '{n} 个备份',
-        'settings.backupWhereRemote': '远端',
-        'settings.backupWhereLocal': '本机',
-        'settings.backupRestore': '恢复',
-        'settings.backupDownload': '下载',
-        'settings.backupUpload': '传回远端',
-        'settings.backupDelete': '删除',
-        'settings.backupVerify': '校验',
-        'settings.backupRestoreConfirm': '要用 {file} 覆盖恢复远程工作区吗？归档里没有的文件会被删除（合并模式不删）。',
-        'settings.backupDeleteConfirm': '删除备份 {file}？此操作不可撤销。',
-        'settings.backupModeReplace': '整树替换',
-        'settings.backupModeMerge': '合并（不删除）',
-        'settings.backupVerified': '校验通过：sha256 {sha}',
-        'settings.backupVerifyMismatch': '校验失败：哈希与记录不一致（归档可能已损坏）',
-        'settings.backupNoSidecar': '无 sidecar（早期归档，元数据未知）',
-        'settings.backupRestored': '已恢复 {file} → {target}',
-        'settings.backupCreated': '已创建 {file}',
-        'settings.backupDownloaded': '已下载到本机：{path}',
-        'settings.backupUploaded': '已传回远端：{path}',
-        'settings.backupDeleted': '已删除 {file}',
-        'settings.backupRefresh': '刷新列表',
-        'settings.backupFailed': '备份操作失败：{msg}',
-        'settings.backupOverCap': '归档超过搬运上限，未传输（可用 maxBackupTransferBytes 放宽）',
-        'settings.backupMachine': '机器',
-        'settings.backupPickMachine': '— 选择机器 —',
         'picker.title': '选择工作目录',
         'picker.close': '关闭 ✕',
         'picker.tabLocal': '本机',
@@ -484,45 +445,6 @@ window.__ModuleLoader__.load({
         'settings.modeAuto': 'Auto',
         'settings.modeOff': 'Off',
         'settings.modeManual': 'Manual',
-        // ── workspace backup (rw_backup / rw_restore) ──────────────────────
-        'settings.backup': 'Workspace backup (.tar.gz)',
-        'settings.backupHint': 'Archive the remote workspace to a .tar.gz. **Everything is included by default**; add excludes only when you want a smaller archive. The archive can stay on the remote, be pulled here, or both.',
-        'settings.backupCreate': 'Back up now',
-        'settings.backupCreating': 'Backing up…',
-        'settings.backupExcludes': 'Excludes (one per line)',
-        'settings.backupExcludesPlaceholder': 'node_modules\n/build/\n*.log',
-        'settings.backupDest': 'Store in',
-        'settings.backupDestRemote': 'Remote only',
-        'settings.backupDestLocal': 'Local only',
-        'settings.backupDestBoth': 'Both',
-        'settings.backupDirLabel': 'Remote backup directory: {dir}',
-        'settings.backupDirUnknown': '(cannot determine the remote backup directory)',
-        'settings.backupNone': 'No backups yet. Click "Back up now" to create the first one.',
-        'settings.backupCount': '{n} backup(s)',
-        'settings.backupWhereRemote': 'Remote',
-        'settings.backupWhereLocal': 'Local',
-        'settings.backupRestore': 'Restore',
-        'settings.backupDownload': 'Download',
-        'settings.backupUpload': 'Upload',
-        'settings.backupDelete': 'Delete',
-        'settings.backupVerify': 'Verify',
-        'settings.backupRestoreConfirm': 'Overwrite the remote workspace with {file}? Files not present in the archive will be removed (merge mode deletes nothing).',
-        'settings.backupDeleteConfirm': 'Delete the backup {file}? This cannot be undone.',
-        'settings.backupModeReplace': 'Replace tree',
-        'settings.backupModeMerge': 'Merge (keep extra)',
-        'settings.backupVerified': 'Verified: sha256 {sha}',
-        'settings.backupVerifyMismatch': 'Verification FAILED: the digest does not match the recorded one (the archive may be corrupt)',
-        'settings.backupNoSidecar': 'No sidecar (older archive; metadata unknown)',
-        'settings.backupRestored': 'Restored {file} → {target}',
-        'settings.backupCreated': 'Created {file}',
-        'settings.backupDownloaded': 'Downloaded locally: {path}',
-        'settings.backupUploaded': 'Uploaded to the remote: {path}',
-        'settings.backupDeleted': 'Deleted {file}',
-        'settings.backupRefresh': 'Refresh list',
-        'settings.backupFailed': 'Backup action failed: {msg}',
-        'settings.backupOverCap': 'The archive is over the transfer cap, so it was not transferred (raise maxBackupTransferBytes to allow it)',
-        'settings.backupMachine': 'Machine',
-        'settings.backupPickMachine': '— choose a machine —',
         'picker.title': 'Select working directory',
         'picker.close': 'Close ✕',
         'picker.tabLocal': 'Local',
@@ -938,21 +860,7 @@ window.__ModuleLoader__.load({
       const [deployBusy, setDeployBusy] = React.useState('')
       const [deployErr, setDeployErr] = React.useState('')
       const [deployOpen, setDeployOpen] = React.useState(false)
-      // ── workspace backup (rw_backup / rw_restore) ──────────────────────────
-      // Machine-scoped like the deploy card: `backupMachine` empty means "this
       // session's machine", which the host resolves from the session binding.
-      const [backupOpen, setBackupOpen] = React.useState(false)
-      const [backupData, setBackupData] = React.useState(null)
-      const [backupBusy, setBackupBusy] = React.useState('')
-      const [backupMsg, setBackupMsg] = React.useState('')
-      const [backupErr, setBackupErr] = React.useState('')
-      const [backupExcludes, setBackupExcludes] = React.useState('')
-      const [backupDest, setBackupDest] = React.useState('remote')
-      // Restore mode is a panel-level choice rather than a per-row prompt: the
-      // two modes differ in whether files absent from the archive are DELETED,
-      // so it is worth showing which one is armed before clicking Restore.
-      const [backupRestoreMode, setBackupRestoreMode] = React.useState('replace')
-      const [backupMachine, setBackupMachine] = React.useState('')
       React.useEffect(() => { ensureChromeCss() }, [])
 
       const testConn = () => {
@@ -1042,43 +950,6 @@ window.__ModuleLoader__.load({
       const refreshForwards = () => api('GET', '/dsh-remote/forwards').then((r) => setForwards(r.forwards || [])).catch(() => {})
       React.useEffect(() => { refreshForwards(); api('GET', '/dsh-remote/audit?limit=30').then((r) => setAuditLines(r.lines || [])).catch(() => {}) }, [])
 
-      // ── 工作区备份 ────────────────────────────────────────────────────────
-      // Reads/writes go through /dsh-remote/backup. The list carries BOTH the
-      // remote archives and any pulled locally, so one refresh answers the panel.
-      const backupQuery = (extra) => {
-        const q = backupMachine ? 'machineId=' + encodeURIComponent(backupMachine) : ''
-        return q ? (extra ? q + '&' + extra : q) : (extra || '')
-      }
-      const refreshBackups = () => api('GET', '/dsh-remote/backup' + (backupQuery('') ? '?' + backupQuery('') : ''))
-        .then((r) => { setBackupData(r); setBackupErr('') })
-        .catch((e) => setBackupErr(String((e && e.message) || e)))
-      React.useEffect(() => { refreshBackups() }, [backupMachine])
-      const backupAction = (action, body) => {
-        setBackupBusy(action); setBackupMsg(''); setBackupErr('')
-        return api('POST', '/dsh-remote/backup', Object.assign({ action }, backupMachine ? { machineId: backupMachine } : {}, body || {}))
-          .then((r) => {
-            if (r) setBackupData(r)
-            if (action === 'create' && r && r.created) {
-              setBackupMsg(tr('settings.backupCreated', { file: r.created.name }) + (r.pullError ? ' — ' + tr('settings.backupOverCap') + ' (' + r.pullError + ')' : ''))
-            } else if (action === 'restore' && r && r.restored) {
-              setBackupMsg(tr('settings.backupRestored', { file: r.restored.file, target: r.restored.target }))
-            } else if (action === 'delete') {
-              setBackupMsg(tr('settings.backupDeleted', { file: body.file }))
-            } else if (action === 'download' && r && r.localPath) {
-              setBackupMsg(tr('settings.backupDownloaded', { path: r.localPath }))
-            } else if (action === 'upload' && r && r.remotePath) {
-              setBackupMsg(tr('settings.backupUploaded', { path: r.remotePath }))
-            } else if (action === 'verify' && r) {
-              setBackupMsg(r.matches === false || r.verified === false
-                ? tr('settings.backupVerifyMismatch')
-                : tr('settings.backupVerified', { sha: String(r.sha256 || '').slice(0, 16) }))
-            }
-            return r
-          })
-          .catch((e) => { setBackupErr(tr('settings.backupFailed', { msg: String((e && e.message) || e) })); return null })
-          .then((r) => { setBackupBusy(''); return r })
-      }
-
       // ── 远程 DSH 界面（issue #46）─────────────────────────────────────────
       // The remote never opens an inbound port; we SSH out and carry the remote
       // loopback web UI back to a local port. One tunnel per machine.
@@ -1437,14 +1308,18 @@ window.__ModuleLoader__.load({
                 ? React.createElement('div', { style: { color: T.ok, marginTop: 4 } }, tr('settings.deployInvestigateStarted') + ' (' + deploy.sessionId + ')')
                 : null,
             ) : null,
-            // The install button only appears when a probe says it is both needed
-            // and possible; clicking it is the explicit consent (confirm: true).
-            deploy && deploy.verdict && deploy.verdict.canAutoInstall && !deploy.verdict.ok
-              ? React.createElement('button', { type: 'button', className: 'dsh-rw-btn dsh-rw-primary', style: { ...primaryBtnS, marginTop: 6 },
-                  disabled: !!deployBusy,
-                  onClick: () => { if (window.confirm(tr('settings.deployConfirm'))) deployAction('install', webAttachMachine, { confirm: true }) } },
-                  deployBusy === 'install' ? tr('settings.deployInstalling') : tr('settings.deployInstall'))
-              : null,
+            // Deploy is ALWAYS available — not hidden behind a prior probe.
+            //
+            // It used to render only when a probe had already run AND reported
+            // something wrong (`deploy.verdict.canAutoInstall && !deploy.verdict.ok`),
+            // which meant a user who only ever saw 体检 could never deploy: the
+            // button that does the work was waiting behind a check they had no
+            // reason to run. The host action re-probes internally anyway, so it is
+            // safe to offer directly; clicking it is the explicit consent.
+            React.createElement('button', { type: 'button', className: 'dsh-rw-btn dsh-rw-primary', style: { ...primaryBtnS, marginTop: 6 },
+              disabled: !!deployBusy || !webAttachMachine,
+              onClick: () => { if (window.confirm(tr('settings.deployConfirm'))) deployAction('install', webAttachMachine, { confirm: true }) } },
+              deployBusy === 'install' ? tr('settings.deployInstalling') : tr('settings.deployInstall')),
             // The AI escape hatch: offered after a failure, and ONLY on click —
             // it costs a model call, so it is never automatic.
             (deployErr || (deploy && deploy.ok === false))
@@ -1460,96 +1335,6 @@ window.__ModuleLoader__.load({
             deployErr ? React.createElement('div', { style: { color: T.danger, fontSize: 12, marginTop: 6, wordBreak: 'break-all' } }, deployErr) : null,
           ) : React.createElement('div', { style: { fontSize: 11, opacity: 0.55 } }, deploy && deploy.verdict ? (deploy.verdict.ok ? tr('settings.deployOk') : tr('settings.deployBlocked')) : ''),
         ),
-        // 工作区备份（rw_backup / rw_backup_list / rw_restore）
-        React.createElement('div', { style: boxS },
-          sectionToggle(backupOpen, setBackupOpen, tr('settings.backup'),
-            backupData ? React.createElement('span', { style: { marginLeft: 'auto', fontSize: 11, opacity: 0.6 } },
-              tr('settings.backupCount', { n: (backupData.entries || []).length + ((backupData.local && backupData.local.entries) || []).length })) : null),
-          backupOpen ? React.createElement(React.Fragment, null,
-            React.createElement('div', { style: { opacity: 0.65, fontSize: 11, lineHeight: 1.5, marginBottom: 6 } }, tr('settings.backupHint')),
-            React.createElement('div', { style: { fontSize: 11, opacity: 0.7, marginBottom: 6, wordBreak: 'break-all' } },
-              backupData && backupData.backupDir ? tr('settings.backupDirLabel', { dir: backupData.backupDir }) : tr('settings.backupDirUnknown')),
-            // Machine selector: empty means "this session's machine", which the
-            // host resolves from the session binding (the panel is reachable from
-            // a local session too, hence an explicit choice is always available).
-            React.createElement('div', { style: { display: 'flex', gap: 6, alignItems: 'center', marginBottom: 6, flexWrap: 'wrap' } },
-              React.createElement('span', { style: { fontSize: 12, opacity: 0.8 } }, tr('settings.backupMachine') + ':'),
-              React.createElement('select', { className: 'dsh-rw-input', value: backupMachine, onChange: (e) => setBackupMachine(e.target.value), style: { ...inputS, maxWidth: 200 } },
-                React.createElement('option', { value: '' }, tr('settings.backupPickMachine')),
-                machines.map((m) => React.createElement('option', { key: m.id, value: m.id }, `${m.name || m.host} (${m.username}@${m.host})`))),
-              React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 10px' },
-                disabled: !!backupBusy, onClick: () => refreshBackups() }, tr('settings.backupRefresh')),
-              // Which restore mode the Restore button will use.
-              React.createElement('span', { style: { fontSize: 12, opacity: 0.8, marginLeft: 4 } }, tr('settings.backupRestore') + ':'),
-              React.createElement('select', {
-                className: 'dsh-rw-input', value: backupRestoreMode,
-                onChange: (e) => setBackupRestoreMode(e.target.value),
-                style: { ...inputS, maxWidth: 170 },
-              },
-                React.createElement('option', { value: 'replace' }, tr('settings.backupModeReplace')),
-                React.createElement('option', { value: 'merge' }, tr('settings.backupModeMerge')))),
-            // Excludes + destination, then the create button.
-            React.createElement('div', { style: { display: 'flex', gap: 8, alignItems: 'flex-start', flexWrap: 'wrap', marginBottom: 6 } },
-              React.createElement('div', { style: { flex: '1 1 260px', minWidth: 220 } },
-                React.createElement('div', { style: { fontSize: 11, opacity: 0.75, marginBottom: 2 } }, tr('settings.backupExcludes')),
-                React.createElement('textarea', {
-                  className: 'dsh-rw-input', value: backupExcludes,
-                  onChange: (e) => setBackupExcludes(e.target.value),
-                  placeholder: tr('settings.backupExcludesPlaceholder'),
-                  rows: 3, style: { ...inputS, width: '100%', fontFamily: 'monospace', resize: 'vertical' },
-                })),
-              React.createElement('div', null,
-                React.createElement('div', { style: { fontSize: 11, opacity: 0.75, marginBottom: 2 } }, tr('settings.backupDest')),
-                React.createElement('select', { className: 'dsh-rw-input', value: backupDest, onChange: (e) => setBackupDest(e.target.value), style: { ...inputS, maxWidth: 160 } },
-                  React.createElement('option', { value: 'remote' }, tr('settings.backupDestRemote')),
-                  React.createElement('option', { value: 'local' }, tr('settings.backupDestLocal')),
-                  React.createElement('option', { value: 'both' }, tr('settings.backupDestBoth'))),
-                React.createElement('button', {
-                  type: 'button', className: 'dsh-rw-btn dsh-rw-primary',
-                  style: { ...primaryBtnS, marginTop: 6, display: 'block' },
-                  disabled: !!backupBusy,
-                  onClick: () => backupAction('create', { excludes: backupExcludes, dest: backupDest }),
-                }, backupBusy === 'create' ? tr('settings.backupCreating') : tr('settings.backupCreate')))),
-            // The list: remote archives then local copies. A sidecar-less archive
-            // is labelled instead of showing invented metadata.
-            (backupData && (backupData.entries || []).length) || (backupData && backupData.local && (backupData.local.entries || []).length)
-              ? React.createElement('div', { style: { maxHeight: 280, overflowY: 'auto' } },
-                  (backupData.entries || []).map((e) => React.createElement('div', { key: 'r-' + e.name, className: 'dsh-rw-row', style: { display: 'flex', gap: 6, alignItems: 'center', padding: '5px 0', borderBottom: '1px solid ' + T.border, fontSize: 12, flexWrap: 'wrap' } },
-                    React.createElement('span', { style: { fontFamily: 'monospace', flex: '1 1 220px', wordBreak: 'break-all' } }, e.name),
-                    React.createElement('span', { style: { opacity: 0.7, minWidth: 60 } }, humanSize(e.bytes)),
-                    React.createElement('span', { style: { opacity: 0.7 } }, e.createdAt || e.mtime || ''),
-                    React.createElement('span', { style: { opacity: 0.55, fontSize: 11 } }, tr('settings.backupWhereRemote')),
-                    e.hasMeta ? null : React.createElement('span', { style: { color: T.warn, fontSize: 11 } }, tr('settings.backupNoSidecar')),
-                    React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 8px' }, disabled: !!backupBusy,
-                      onClick: () => backupAction('verify', { file: e.name }) }, tr('settings.backupVerify')),
-                    React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 8px' }, disabled: !!backupBusy,
-                      onClick: () => backupAction('download', { file: e.name }) }, tr('settings.backupDownload')),
-                    // Restore is destructive, so it asks first and sends the
-                    // explicit confirmation the host requires.
-                    React.createElement('button', { type: 'button', className: 'dsh-rw-btn dsh-rw-primary', style: { ...primaryBtnS, padding: '2px 8px' }, disabled: !!backupBusy,
-                      onClick: () => {
-                        if (!window.confirm(tr('settings.backupRestoreConfirm', { file: e.name }))) return
-                        backupAction('restore', { file: e.name, confirm: true, mode: backupRestoreMode })
-                      } }, tr('settings.backupRestore')),
-                    React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 8px', color: T.dangerText }, disabled: !!backupBusy,
-                      onClick: () => { if (window.confirm(tr('settings.backupDeleteConfirm', { file: e.name }))) backupAction('delete', { file: e.name }) } }, tr('settings.backupDelete')))),
-                  ((backupData.local && backupData.local.entries) || []).map((e) => React.createElement('div', { key: 'l-' + e.name, className: 'dsh-rw-row', style: { display: 'flex', gap: 6, alignItems: 'center', padding: '5px 0', borderBottom: '1px solid ' + T.border, fontSize: 12, opacity: 0.92, flexWrap: 'wrap' } },
-                    React.createElement('span', { style: { fontFamily: 'monospace', flex: '1 1 220px', wordBreak: 'break-all' } }, e.name),
-                    React.createElement('span', { style: { opacity: 0.7, minWidth: 60 } }, humanSize(e.bytes)),
-                    React.createElement('span', { style: { opacity: 0.7 } }, e.createdAt || e.mtime || ''),
-                    React.createElement('span', { style: { opacity: 0.55, fontSize: 11 } }, tr('settings.backupWhereLocal')),
-                    React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 8px' }, disabled: !!backupBusy,
-                      onClick: () => backupAction('verify', { file: e.name, where: 'local' }) }, tr('settings.backupVerify')),
-                    React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 8px' }, disabled: !!backupBusy,
-                      onClick: () => backupAction('upload', { file: e.name }) }, tr('settings.backupUpload')),
-                    React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 8px', color: T.dangerText }, disabled: !!backupBusy,
-                      onClick: () => { if (window.confirm(tr('settings.backupDeleteConfirm', { file: e.name }))) backupAction('delete', { file: e.name, where: 'local' }) } }, tr('settings.backupDelete')))))
-              : React.createElement('div', { style: { opacity: 0.6, fontSize: 12 } }, tr('settings.backupNone')),
-            backupMsg ? React.createElement('div', { style: { marginTop: 6, fontSize: 12, color: T.ok, wordBreak: 'break-all' } }, backupMsg) : null,
-            backupErr ? React.createElement('div', { style: { marginTop: 6, fontSize: 12, color: T.danger, wordBreak: 'break-all' } }, backupErr) : null,
-          ) : backupData ? React.createElement('div', { style: { fontSize: 11, opacity: 0.55 } },
-              tr('settings.backupCount', { n: (backupData.entries || []).length + ((backupData.local && backupData.local.entries) || []).length })) : null,
-        ),
         // 端口转发面板
         React.createElement('div', { style: boxS },
           sectionToggle(fwdOpen, setFwdOpen, tr('settings.forwards')),

package/lib/index.js

@@ -53,13 +53,7 @@ import { loadMachines as _loadMachines, saveMachines as _saveMachines, sanitizeM
 import { registerHttpTransports } from './http-transport.js'
 import { SshPool } from './pool.js'
 import { createFsRoutes } from './routes-fs.js'
-import { createBackupRoutes } from './routes-backup.js'
 import { listDirStructured, removeRemoteTree } from './remote-fs.js'
-import {
-  createBackup, listBackups, restoreBackup, describeCreate, localBackupDirFor, resolveRemoteHome,
-  pullBackup, pushBackup, deleteBackup, listLocalBackups,
-} from './backup.js'
-import { parseExcludes, resolveBackupDir, isSafeArchiveName, formatBytes, DEFAULT_MAX_TRANSFER_BYTES } from './archive.js'
 
 export const name = 'dsh-remote'
 
@@ -198,19 +192,6 @@ export const Config = z.object({
   /** npm registry to install from. Empty uses the remote's own npm config, which
    *  is what an internal mirror needs to stay in effect. */
   webInstallRegistry: z.string().default(''),
-  /** Directory that workspace backups are written to on the REMOTE host. Empty
-   *  means `$HOME/.dsh-remote/backups`, resolved on the remote (so a remote
-   *  $HOME is never guessed from the local machine). */
-  backupDir: z.string().default(''),
-  /** Exclude patterns applied to backups by default (gitignore-ish, one per
-   *  line). Deliberately EMPTY: a backup that silently omits directories is how
-   *  a "restore" turns into silent data loss. Add patterns here (or per call)
-   *  when you want a smaller archive. */
-  backupExcludes: z.array(z.string()).default([]),
-  /** Cap (bytes) on copying an archive between the remote and this machine.
-   *  The archive on the remote is never truncated — this only bounds the
-   *  optional cross-machine transfer. 0 = unlimited. */
-  maxBackupTransferBytes: z.number().step(1).min(0).default(DEFAULT_MAX_TRANSFER_BYTES),
 })
 
 // ── shell / path helpers (pure implementations in lib/paths.js) ───────────
@@ -1297,20 +1278,6 @@ export async function apply(ctx, config) {
     return normalizeRemotePath(b.ws ? joinRemoteRel(b.ws, rel.replace(/\\/g, '/')) : rel)
   }
 
-  // ── backup helpers (shared by the tools and the /dsh-remote/backup routes) ─
-  /** The remote directory backups land in: the configured override, else
-   *  `$HOME/.dsh-remote/backups` resolved ON THE REMOTE (never guessed from the
-   *  local machine, whose home has nothing to do with the remote one). */
-  const backupDirForBinding = async (b) => {
-    const override = String(config.backupDir || '').trim()
-    if (override) return resolveBackupDir('', override)
-    if (!b || !b.pool) return ''
-    const home = await resolveRemoteHome(b.pool)
-    return resolveBackupDir(home, '')
-  }
-  /** Local directory holding archives pulled from one machine. */
-  const localBackupRootFor = (b) => localBackupDirFor(mirrorRootFor(b.host, b.username, b.port))
-
   // ── tools ─────────────────────────────────────────────────────────────────
 
   const textOut = {
@@ -2259,158 +2226,6 @@ export async function apply(ctx, config) {
       },
     }),
 
-    defineTool({
-      name: 'rw_backup',
-      description:
-        'Create a compressed (.tar.gz) backup of the remote workspace (or a subdirectory of it) on the remote host, with an optional copy pulled to this machine. Archives are written under $HOME/.dsh-remote/backups (config backupDir) with a sidecar .meta.json recording the workspace, entry count and sha256. Add exclude patterns when you want a smaller archive — by default EVERYTHING is archived, because silently omitting files is how a restore becomes silent data loss. Use rw_backup_list to see what exists and rw_restore to restore one.',
-      parameters: {
-        path: { type: 'string', description: 'Directory to back up (default and normally: the current remote workspace). Must be the workspace or a subdirectory of it.' },
-        label: { type: 'string', description: 'Optional tag embedded in the archive filename (e.g. "before-refactor").' },
-        excludes: { type: 'string', description: 'Comma- or newline-separated extra exclude patterns (gitignore-ish: node_modules, /build/, *.log). Relative paths inside the workspace.' },
-        dest: { type: 'string', description: 'Where the archive ends up: remote (default), local (pulled here; the remote staging copy is removed), or both.' },
-      },
-      output: textOut,
-      async execute(args, exec) {
-        const b = requireBinding(exec, 'rw_backup')
-        const dir = resolveRemoteArg(b, args.path || '')
-        if (!dir || dir === '/') throw new Error('rw_backup: a directory to back up is required')
-        const root = normalizeRemotePath(b.ws || '')
-        if (root && dir !== root && !dir.startsWith(root.replace(/\/+$/, '') + '/')) {
-          throw new Error(`rw_backup: ${dir} is outside this session's remote workspace (${root}) — backups are limited to the workspace tree`)
-        }
-        // Config defaults first, then this call's own patterns, so a caller can
-        // extend the profile's excludes without restating them.
-        const parsed = parseExcludes([
-          ...(Array.isArray(config.backupExcludes) ? config.backupExcludes : []),
-          ...String(args.excludes || '').split(/[\r\n,]+/),
-        ])
-        const backupDir = await backupDirForBinding(b)
-        if (!backupDir) throw new Error('rw_backup: cannot determine the remote $HOME — set the backupDir config option')
-        const dest = ['remote', 'local', 'both'].includes(String(args.dest)) ? String(args.dest) : 'remote'
-        const result = await createBackup(b.pool, {
-          dir,
-          backupDir,
-          label: args.label ? String(args.label) : '',
-          excludes: parsed.patterns,
-          meta: { host: b.host, username: b.username, port: b.port, label: args.label ? String(args.label) : '' },
-        })
-        if (!result.ok) {
-          audit('backup', `backup ${dir} failed: ${result.error}`, 1, b)
-          throw new Error('rw_backup: ' + result.error)
-        }
-        audit('backup', `backup ${dir} → ${result.archive}`, 0, b)
-        const lines = [describeCreate(result, { dest })]
-        lines.push(`remote archive: ${result.archive}`)
-        if (result.meta && result.meta.excludes && result.meta.excludes.length) lines.push(`excludes: ${result.meta.excludes.join(', ')}`)
-        if (parsed.dropped.length) lines.push(`ignored (no usable pattern): ${parsed.dropped.join(', ')}`)
-        if (dest === 'local' || dest === 'both') {
-          const pulled = await pullBackup(b.pool, {
-            archive: result.archive,
-            localDir: localBackupDirFor(mirrorRootFor(b.host, b.username, b.port)),
-            maxTransferBytes: Number(config.maxBackupTransferBytes) || 0,
-          })
-          if (pulled.ok) {
-            lines.push(`local copy: ${pulled.localPath}`)
-            if (dest === 'local') {
-              const del = await deleteBackup(b.pool, { archive: result.archive })
-              lines.push(del.ok ? 'remote staging copy removed (dest=local)' : `could NOT remove the remote copy: ${del.error || 'unknown error'}`)
-            }
-          } else {
-            lines.push(`local copy FAILED: ${pulled.error}`)
-          }
-        }
-        return { text: lines.join('\n') }
-      },
-    }),
-
-    defineTool({
-      name: 'rw_backup_list',
-      description:
-        "List the compressed backups of this session's remote workspace: name, size, entry count, and when it was taken. Shows both the archives stored on the remote host and any pulled into the local machine. Use the exact `name` with rw_restore.",
-      parameters: {
-        path: { type: 'string', description: "Directory whose backups to list (default: the workspace). Backups are named by workspace, so passing a subdirectory lists that subdirectory's backups." },
-      },
-      output: textOut,
-      async execute(args, exec) {
-        const b = requireBinding(exec, 'rw_backup_list')
-        const backupDir = await backupDirForBinding(b)
-        const remote = backupDir
-          ? await listBackups(b.pool, { dir: backupDir })
-          : { exists: false, dir: '', entries: [], error: '' }
-        const localDir = localBackupDirFor(mirrorRootFor(b.host, b.username, b.port))
-        const local = listLocalBackups(localDir)
-        const fmt = (e) => {
-          const bits = [e.name, formatBytes(e.bytes)]
-          if (e.members != null) bits.push(`${e.members} entries`)
-          if (e.createdAt || e.mtime) bits.push(e.createdAt || e.mtime)
-          if (!e.hasMeta) bits.push('NO SIDECAR (metadata unknown)')
-          return '  ' + bits.join('  |  ')
-        }
-        const lines = []
-        if (!backupDir) {
-          lines.push('(cannot resolve the remote backup directory — set the backupDir config option)')
-        } else if (remote.error) {
-          lines.push(`remote listing failed: ${remote.error}`)
-        } else if (!remote.entries.length) {
-          lines.push(`no backups yet in ${backupDir} (create one with rw_backup)`)
-        } else {
-          lines.push(`${remote.entries.length} remote backup(s) in ${backupDir}:`)
-          lines.push(...remote.entries.map(fmt))
-        }
-        if (local.entries.length) {
-          lines.push('', `${local.entries.length} local copy(ies) in ${localDir}:`)
-          lines.push(...local.entries.map(fmt))
-        }
-        lines.push('', 'restore one with rw_restore(file=<name>).')
-        return { text: lines.join('\n') }
-      },
-    }),
-
-    defineTool({
-      name: 'rw_restore',
-      description:
-        'Restore a workspace from one of its compressed backups (list them with rw_backup_list). The archive is verified BEFORE anything is written; a corrupt or truncated archive is refused and the target is left untouched. mode=replace (default) swaps the target for the archive contents and removes files not present in the archive; mode=merge extracts over the existing tree and deletes nothing. Prefer replace for "give me back exactly the state I archived"; use merge only when the archive is known to be a partial overlay.',
-      parameters: {
-        file: { type: 'string', required: true, description: 'Backup archive filename from rw_backup_list (e.g. proj-abc-2026-10-08T11-22-33.tar.gz).' },
-        target: { type: 'string', description: 'Directory to restore into (default: the current remote workspace). Usually left unset.' },
-        mode: { type: 'string', description: 'replace (default) or merge.' },
-        where: { type: 'string', description: 'Which copy to restore from: remote (default) or local (a pulled copy; it is uploaded back first).' },
-      },
-      output: textOut,
-      async execute(args, exec) {
-        const b = requireBinding(exec, 'rw_restore')
-        const file = String(args.file || '').trim()
-        if (!file) throw new Error('rw_restore: file is required (list them with rw_backup_list)')
-        if (!isSafeArchiveName(file)) throw new Error(`rw_restore: ${file} is not a valid backup filename (expected a plain *.tar.gz basename)`)
-        const target = args.target ? resolveRemoteArg(b, args.target) : (b.ws || '')
-        if (!target || target === '/') throw new Error('rw_restore: no restore target — pick a remote workspace first')
-        const root = normalizeRemotePath(b.ws || '')
-        if (root && target !== root && !target.startsWith(root.replace(/\/+$/, '') + '/')) {
-          throw new Error(`rw_restore: refusing to restore into ${target} — it is outside this session's remote workspace (${root})`)
-        }
-        const mode = args.mode === 'merge' ? 'merge' : 'replace'
-        const backupDir = await backupDirForBinding(b)
-        if (!backupDir) throw new Error('rw_restore: cannot determine the remote backup directory — set the backupDir config option')
-        const where = args.where === 'local' ? 'local' : 'remote'
-        let archive = `${backupDir.replace(/\/+$/, '')}/${file}`
-        if (where === 'local') {
-          const localDir = localBackupDirFor(mirrorRootFor(b.host, b.username, b.port))
-          const up = await pushBackup(b.pool, {
-            localPath: path.join(localDir, file),
-            remoteDir: backupDir,
-            maxTransferBytes: Number(config.maxBackupTransferBytes) || 0,
-          })
-          if (!up.ok) throw new Error('rw_restore: could not upload the local copy — ' + up.error)
-          archive = up.remotePath
-        }
-        const r = await restoreBackup(b.pool, { archive, target, mode })
-        audit('restore', `${mode} restore ${file} → ${target}`, r.ok ? 0 : 1, b)
-        if (!r.ok) throw new Error('rw_restore: ' + (r.error || 'restore failed'))
-        return {
-          text: `${r.mode === 'merge' ? 'Merged into' : 'Replaced'} ${target} from ${file} (${r.members} file(s) now present; the archive was verified before anything was written)${where === 'local' ? ' [from the local copy, uploaded first]' : ''}.`,
-        }
-      },
-    }),
   ]
 
   for (const t of tools) {
@@ -2790,38 +2605,6 @@ export async function apply(ctx, config) {
       sendJson, readBody, resolveRequestBinding, decodeBuf, encodeText, audit, config, mirrorDirFor,
     }),
 
-    ...createBackupRoutes({
-      sendJson,
-      readBody,
-      config,
-      audit,
-      resolveRequestBinding,
-      // The settings panel may act on a machine that is not the current one; the
-      // id is resolved to a real pool so a backup never runs against whichever
-      // machine happened to be active.
-      resolveMachineBinding: async (machineId) => {
-        const m = machines.find((x) => x.id === machineId)
-        if (!m) {
-          const err = new Error(`机器不存在：${machineId}`)
-          err.httpStatus = 404
-          throw err
-        }
-        const target = poolForMachine(identityOf(m))
-        return {
-          pool: target,
-          ws: String(m.workspace || ''),
-          host: m.host,
-          username: m.username,
-          port: Number(m.port) || 22,
-          alias: aliasOf(m),
-          mirrorDir: m.workspace ? mirrorDirFor(m.workspace, m.host, m.username, m.port) : null,
-          bound: false,
-          local: false,
-        }
-      },
-      localRootFor: localBackupRootFor,
-    }),
-
     {
       kind: 'exact',
       path: '/dsh-remote/workspace',