dsh-remote 0.8.40 → 0.8.41

package/README.en.md

@@ -39,7 +39,7 @@ The native **"Add workspace"** flow — a centered modal with two tabs, opening
 
 ## Features
 
-![Capabilities at a glance — multi-machine SSH, live alias resolution, the two-tab picker, three-way sync, remote @ completion, a remote DSH Web UI in your local browser, health check & one-click deploy, audit, port forwarding, sidebar editing, self-update, and the 24 rw_* tools](docs/shots/features.png)
+![Capabilities at a glance — multi-machine SSH, live alias resolution, the two-tab picker, three-way sync, remote @ completion, a remote DSH Web UI in your local browser, health check & one-click deploy, audit, port forwarding, sidebar editing, self-update, and the 22 rw_* tools](docs/shots/features.png)
 
 The image above is the overview. What follows is only what the image does not make obvious.
 
@@ -56,8 +56,7 @@ The image above is the overview. What follows is only what the image does not ma
 
 The rest:
 
-- **25 model tools** (listed so they can be copied or searched): `rw_info`, `rw_connect`, `rw_machines`, `rw_pick_workspace`, `rw_list_dir`, `rw_stat`, `rw_read_file`, `rw_write_file`, `rw_edit`, `rw_append`, `rw_mkdir`, `rw_remove`, `rw_move`, `rw_exec`, `rw_search`, `rw_download`, `rw_upload`, `rw_sync`, `rw_push`, `rw_backup`, `rw_backup_list`, `rw_restore`, `rw_forward`, `rw_disconnect`, `rw_deploy_probe`.
-- **Workspace backup / restore (two buttons, nothing to configure)** — the settings page offers just **Back up** and **Restore**: backing up archives **every remote workspace in the sidebar into ONE** `.tar.gz`, and restoring brings them all back from the point in time you pick. Dependency/build directories (`node_modules`, `.git`, `dist`, `build`, `target`, `__pycache__`, `.venv` … both top-level and nested) are excluded automatically. The model can do the same through `rw_backup` / `rw_backup_list` / `rw_restore`. **The archive is verified before anything is written — a corrupt or truncated archive is refused and nothing is touched**; each workspace's previous contents are moved aside first and restored automatically if the swap fails.
+- **22 model tools** (listed so they can be copied or searched): `rw_info`, `rw_connect`, `rw_machines`, `rw_pick_workspace`, `rw_list_dir`, `rw_stat`, `rw_read_file`, `rw_write_file`, `rw_edit`, `rw_append`, `rw_mkdir`, `rw_remove`, `rw_move`, `rw_exec`, `rw_search`, `rw_download`, `rw_upload`, `rw_sync`, `rw_push`, `rw_forward`, `rw_disconnect`, `rw_deploy_probe`.
 - **Open a remote machine's DSH Web UI locally** (`0.8.36+`) — nothing has to be exposed on the remote: the plugin SSHes out, starts a `dsh web` there that binds **`127.0.0.1` only**, and tunnels its port back to a loopback port on this machine. The URL carries a one-time login token, consumed once by a redirect.
 - **One-click health check & deploy** (`0.8.36+`) — **a failed connection is usually the remote dsh version or environment, not the plugin.** The read-only check reports platform / node / npm / dsh version / **whether the native module can load** / proxy and npm registry, with a suggested fix; "Deploy & verify" installs into a remote **private directory** (no system directory, no PATH change, no replacing the version you use — deleting it is a complete rollback) and verifies step by step. The button **no longer requires running the check first** (`0.8.40+`) — the deploy re-checks internally. If that still fails, the built-in `dsh-remote-deploy` skill takes over.
 - **Cross-platform remotes** — all file access is SFTP-protocol-level (no POSIX shell), so Linux/macOS/Windows remotes all work.
@@ -264,9 +263,6 @@ Deploying to a product profile is a separate, explicit action (`./sync.sh`) for
 | `webInstallPrefix` | string | `''` | where an automatic deployment installs dsh; empty means `$HOME/.dsh-remote/dsh` (no system directory, no PATH change) |
 | `webInstallVersion` | string | `0.1.5-rc.2` | dsh version an automatic deployment installs; the default is the first that can start the web surface on Linux |
 | `webInstallRegistry` | string | `''` | npm registry for the install; **empty keeps the remote's own config**, so an internal mirror is never overridden |
-| `backupDir` | string | `''` | Where backup archives are written **on the remote**; empty means `$HOME/.dsh-remote/backups` (resolved on the remote, never guessed from this machine's home) |
-| `backupExcludes` | string[] | `[]` | Extra paths excluded **on top of the built-in set** (gitignore-style). No longer surfaced in the UI; the built-in set covers `node_modules`/`.git`/`dist`/`build`/`target`/`__pycache__`/`.venv` and friends, top-level and nested |
-| `maxBackupTransferBytes` | int | `2147483648` | Cap (bytes) on moving an archive between this machine and the remote; **the remote archive is never truncated** — this only bounds the optional cross-machine copy. 0 = unlimited |
 
 > The authoritative list is the `Config` schema in `lib/index.js`; this table mirrors it.
 

package/README.md

@@ -39,14 +39,13 @@ DSH 的 Web 界面刻意只监听 `127.0.0.1`（CLI 为安全拒绝 `--host 0.0.
 
 ## 功能
 
-![核心能力总览 — 多机 SSH / 别名实时解析 / 双 tab 选择器 / 三路同步 / 远程 @ 补全 / 远端 DSH 界面挂到本机 / 体检与一键部署 / 安全审计 / 端口转发 / 侧栏编辑 / 自动更新，以及 25 个 rw_* 工具](docs/shots/features.png)
+![核心能力总览 — 多机 SSH / 别名实时解析 / 双 tab 选择器 / 三路同步 / 远程 @ 补全 / 远端 DSH 界面挂到本机 / 体检与一键部署 / 安全审计 / 端口转发 / 侧栏编辑 / 自动更新，以及 22 个 rw_* 工具](docs/shots/features.png)
 
 上图是能力总览；下面只列**上图没说清、但用起来需要知道**的部分。
 
 其余要点：
 
-- **25 个模型工具**（便于复制/检索）：`rw_info`、`rw_connect`、`rw_machines`、`rw_pick_workspace`、`rw_list_dir`、`rw_stat`、`rw_read_file`、`rw_write_file`、`rw_edit`、`rw_append`、`rw_mkdir`、`rw_remove`、`rw_move`、`rw_exec`、`rw_search`、`rw_download`、`rw_upload`、`rw_sync`、`rw_push`、`rw_backup`、`rw_backup_list`、`rw_restore`、`rw_forward`、`rw_disconnect`、`rw_deploy_probe`。
-- **工作区备份 / 恢复（一个按钮就够）** —— 设置页里只有「备份」和「恢复」两个按钮：**备份**把侧边栏里的所有远程工作区打包成**一个** `.tar.gz`，**恢复**用选中的那个时间点把全部工作区还原。依赖/构建目录（`node_modules`、`.git`、`dist`、`build`、`target`、`__pycache__`、`.venv`… 顶层与嵌套）自动排除，不需要你配置。模型侧仍可用 `rw_backup` / `rw_backup_list` / `rw_restore` 做同样的事。**恢复前先校验归档可读，归档损坏或截断就拒绝执行、目标一个字节都不动**；每个工作区的旧目录会先移到一旁，换入失败会自动还原。
+- **22 个模型工具**（便于复制/检索）：`rw_info`、`rw_connect`、`rw_machines`、`rw_pick_workspace`、`rw_list_dir`、`rw_stat`、`rw_read_file`、`rw_write_file`、`rw_edit`、`rw_append`、`rw_mkdir`、`rw_remove`、`rw_move`、`rw_exec`、`rw_search`、`rw_download`、`rw_upload`、`rw_sync`、`rw_push`、`rw_forward`、`rw_disconnect`、`rw_deploy_probe`。
 - **把远端机器的 DSH 界面挂到本机**（`0.8.36+`）—— 不用在远端开任何端口：插件主动 SSH 连过去，在远端**只监听 `127.0.0.1`** 地起一个 `dsh web`，再把端口经隧道搬回本机的一个 loopback 端口。地址带一次性登录令牌，只在本机这次跳转里用一次。
 - **连不上时一键体检与部署**（`0.8.36+`）—— **连不上大多不是插件的问题，而是远端 dsh 的版本或环境不对**。体检（只读）会报出平台/node/npm/dsh 版本、**原生模块能否启动**、代理与 npm 源，并给出修复建议；「部署并验证」把它装到远端**私有目录**（不写系统目录、不改 PATH、不覆盖你在用的版本，删目录即回滚）并逐步校验。按钮**不再需要先体检**——直接点即可（`0.8.40+`），部署过程自己会重新体检。失败还能交给内置的 `dsh-remote-deploy` 技能排查。
 - **远端跨平台** —— 文件访问走 SFTP 协议层（不依赖 POSIX shell），Linux/macOS/Windows 远端都能列/读/写/搜索/同步。
@@ -246,9 +245,6 @@ scripts/dev-run.sh --status    # 是否在运行
 | `webInstallPrefix` | string | `''` | 自动部署装到远端的哪个目录；留空用 `$HOME/.dsh-remote/dsh`（不写系统目录、不改 PATH） |
 | `webInstallVersion` | string | `0.1.5-rc.2` | 自动部署安装的 dsh 版本；默认值是第一个在 Linux 上能启动 web 的版本 |
 | `webInstallRegistry` | string | `''` | 安装用的 npm 源；**留空沿用远端自己的配置**，不会覆盖内网镜像 |
-| `backupDir` | string | `''` | 备份归档在**远端**的存放目录；留空用 `$HOME/.dsh-remote/backups`（在远端解析，不用本机 home 猜） |
-| `backupExcludes` | string[] | `[]` | 在**内置排除集之外**额外排除的路径（gitignore 风格）。设置页不再暴露此项；内置集已覆盖 `node_modules`/`.git`/`dist`/`build`/`target`/`__pycache__`/`.venv` 等（顶层与嵌套） |
-| `maxBackupTransferBytes` | int | `2147483648` | 归档在本机与远端之间搬运的大小上限（字节）；**远端的归档从不截断**，只约束可选的对拷。0 = 不限 |
 
 > 权威清单是 `lib/index.js` 里的 `Config` schema，本表与之一致。
 

package/lib/client.js

@@ -187,33 +187,6 @@ window.__ModuleLoader__.load({
         'settings.modeAuto': '自动',
         'settings.modeOff': '关闭',
         'settings.modeManual': '手动',
-        // ── 工作区备份（rw_backup / rw_restore）────────────────────────────
-        'settings.backup': '工作区备份',
-        'settings.backupHint': '一键把侧边栏里的所有远程工作区打包成一个 .tar.gz；恢复时用同一个归档把全部工作区还原。依赖/构建目录（node_modules、.git、dist、build…）会自动排除。',
-        'settings.backupCreate': '备份',
-        'settings.backupCreating': '备份中…',
-        'settings.backupRestore': '恢复',
-        'settings.backupRestoring': '恢复中…',
-        'settings.backupPickOne': '— 选择要恢复的备份时间点 —',
-        'settings.backupCovers': '本次将备份 {n} 个工作区：',
-        'settings.backupDirLabel': '远端备份目录：{dir}',
-        'settings.backupNone': '还没有备份。点「备份」创建第一个。',
-        'settings.backupCount': '{n} 个备份',
-        'settings.backupEntries': '{n} 个条目',
-        'settings.backupDownload': '下载到本机',
-        'settings.backupDelete': '删除',
-        'settings.backupVerify': '校验',
-        'settings.backupRestoreConfirm': '要用 {file} 恢复全部工作区吗？归档里没有的文件会被删除（原目录会先移到一旁，换入失败会自动还原）。',
-        'settings.backupDeleteConfirm': '删除备份 {file}？此操作不可撤销。',
-        'settings.backupVerified': '校验通过：sha256 {sha}',
-        'settings.backupVerifyMismatch': '校验失败：哈希与记录不一致（归档可能已损坏）',
-        'settings.backupRestored': '已从 {file} 恢复：{target}',
-        'settings.backupCreatedN': '已备份 {n} 个工作区 → {file}',
-        'settings.backupDownloaded': '已下载到本机：{path}',
-        'settings.backupDeleted': '已删除 {file}',
-        'settings.backupFailed': '备份操作失败：{msg}',
-        'settings.backupMachine': '机器',
-        'settings.backupPickMachine': '— 选择机器 —',
         'picker.title': '选择工作目录',
         'picker.close': '关闭 ✕',
         'picker.tabLocal': '本机',
@@ -472,33 +445,6 @@ window.__ModuleLoader__.load({
         'settings.modeAuto': 'Auto',
         'settings.modeOff': 'Off',
         'settings.modeManual': 'Manual',
-        // ── workspace backup (rw_backup / rw_restore) ──────────────────────
-        'settings.backup': 'Workspace backup',
-        'settings.backupHint': 'One click archives every remote workspace in the sidebar into a single .tar.gz; restore brings them all back from that archive. Dependency/build directories (node_modules, .git, dist, build…) are excluded automatically.',
-        'settings.backupCreate': 'Back up',
-        'settings.backupCreating': 'Backing up…',
-        'settings.backupRestore': 'Restore',
-        'settings.backupRestoring': 'Restoring…',
-        'settings.backupPickOne': '— choose a backup point in time —',
-        'settings.backupCovers': 'This will back up {n} workspace(s):',
-        'settings.backupDirLabel': 'Remote backup directory: {dir}',
-        'settings.backupNone': 'No backups yet. Click "Back up" to create the first one.',
-        'settings.backupCount': '{n} backup(s)',
-        'settings.backupEntries': '{n} entries',
-        'settings.backupDownload': 'Download',
-        'settings.backupDelete': 'Delete',
-        'settings.backupVerify': 'Verify',
-        'settings.backupRestoreConfirm': 'Restore ALL workspaces from {file}? Files not present in the archive will be removed (each target is moved aside first, and restored automatically if the swap fails).',
-        'settings.backupDeleteConfirm': 'Delete the backup {file}? This cannot be undone.',
-        'settings.backupVerified': 'Verified: sha256 {sha}',
-        'settings.backupVerifyMismatch': 'Verification FAILED: the digest does not match the recorded one (the archive may be corrupt)',
-        'settings.backupRestored': 'Restored from {file}: {target}',
-        'settings.backupCreatedN': 'Backed up {n} workspace(s) → {file}',
-        'settings.backupDownloaded': 'Downloaded locally: {path}',
-        'settings.backupDeleted': 'Deleted {file}',
-        'settings.backupFailed': 'Backup action failed: {msg}',
-        'settings.backupMachine': 'Machine',
-        'settings.backupPickMachine': '— choose a machine —',
         'picker.title': 'Select working directory',
         'picker.close': 'Close ✕',
         'picker.tabLocal': 'Local',
@@ -914,19 +860,7 @@ window.__ModuleLoader__.load({
       const [deployBusy, setDeployBusy] = React.useState('')
       const [deployErr, setDeployErr] = React.useState('')
       const [deployOpen, setDeployOpen] = React.useState(false)
-      // ── workspace backup (rw_backup / rw_restore) ──────────────────────────
-      // Machine-scoped like the deploy card: `backupMachine` empty means "this
       // session's machine", which the host resolves from the session binding.
-      const [backupOpen, setBackupOpen] = React.useState(false)
-      const [backupData, setBackupData] = React.useState(null)
-      const [backupBusy, setBackupBusy] = React.useState('')
-      const [backupMsg, setBackupMsg] = React.useState('')
-      const [backupErr, setBackupErr] = React.useState('')
-      // `backupPick` is the archive the Restore/Verify/Delete buttons act on. A
-      // timestamp picker replaced the old per-row buttons: restoring is the rare
-      // action, and one selector is all it needs.
-      const [backupPick, setBackupPick] = React.useState('')
-      const [backupMachine, setBackupMachine] = React.useState('')
       React.useEffect(() => { ensureChromeCss() }, [])
 
       const testConn = () => {
@@ -1016,49 +950,6 @@ window.__ModuleLoader__.load({
       const refreshForwards = () => api('GET', '/dsh-remote/forwards').then((r) => setForwards(r.forwards || [])).catch(() => {})
       React.useEffect(() => { refreshForwards(); api('GET', '/dsh-remote/audit?limit=30').then((r) => setAuditLines(r.lines || [])).catch(() => {}) }, [])
 
-      // ── 工作区备份 ────────────────────────────────────────────────────────
-      // Reads/writes go through /dsh-remote/backup. The list carries BOTH the
-      // remote archives and any pulled locally, so one refresh answers the panel.
-      const backupQuery = (extra) => {
-        const q = backupMachine ? 'machineId=' + encodeURIComponent(backupMachine) : ''
-        return q ? (extra ? q + '&' + extra : q) : (extra || '')
-      }
-      const refreshBackups = () => api('GET', '/dsh-remote/backup' + (backupQuery('') ? '?' + backupQuery('') : ''))
-        .then((r) => { setBackupData(r); setBackupErr('') })
-        .catch((e) => setBackupErr(String((e && e.message) || e)))
-      React.useEffect(() => { refreshBackups() }, [backupMachine])
-      const backupAction = (action, body) => {
-        setBackupBusy(action); setBackupMsg(''); setBackupErr('')
-        return api('POST', '/dsh-remote/backup', Object.assign({ action }, backupMachine ? { machineId: backupMachine } : {}, body || {}))
-          .then((r) => {
-            if (r) {
-              setBackupData(r)
-              // Keep the picker pointing at something real after a list refresh
-              // (a delete/restore changes the set): prefer the current choice,
-              // else the newest archive.
-              const names = (r.entries || []).map((e) => e.name)
-              setBackupPick((cur) => (cur && names.includes(cur) ? cur : (names[0] || '')))
-            }
-            if (action === 'create' && r && r.created) {
-              setBackupMsg(tr('settings.backupCreatedN', { n: (r.created.workspaces || []).length, file: r.created.name }))
-            } else if (action === 'restore' && r && r.restored) {
-              setBackupMsg(tr('settings.backupRestored', { file: r.restored.file, target: (r.restored.targets || []).join('、') })
-                + (r.warning ? ' — ' + r.warning : ''))
-            } else if (action === 'delete') {
-              setBackupMsg(tr('settings.backupDeleted', { file: body.file }))
-            } else if (action === 'download' && r && (r.localPath || (r.restored && r.restored.file))) {
-              setBackupMsg(tr('settings.backupDownloaded', { path: r.localPath || body.file }))
-            } else if (action === 'verify' && r) {
-              setBackupMsg(r.matches === false || r.verified === false
-                ? tr('settings.backupVerifyMismatch')
-                : tr('settings.backupVerified', { sha: String(r.sha256 || '').slice(0, 16) }))
-            }
-            return r
-          })
-          .catch((e) => { setBackupErr(tr('settings.backupFailed', { msg: String((e && e.message) || e) })); return null })
-          .then((r) => { setBackupBusy(''); return r })
-      }
-
       // ── 远程 DSH 界面（issue #46）─────────────────────────────────────────
       // The remote never opens an inbound port; we SSH out and carry the remote
       // loopback web UI back to a local port. One tunnel per machine.
@@ -1444,80 +1335,6 @@ window.__ModuleLoader__.load({
             deployErr ? React.createElement('div', { style: { color: T.danger, fontSize: 12, marginTop: 6, wordBreak: 'break-all' } }, deployErr) : null,
           ) : React.createElement('div', { style: { fontSize: 11, opacity: 0.55 } }, deploy && deploy.verdict ? (deploy.verdict.ok ? tr('settings.deployOk') : tr('settings.deployBlocked')) : ''),
         ),
-        // 工作区备份（rw_backup / rw_backup_list / rw_restore）
-        //
-        // TWO buttons and a timestamp picker on purpose. The first version exposed
-        // excludes / destination / per-archive verify-download-upload-delete, which
-        // turned "keep a copy of my workspaces" into a configuration exercise.
-        // Everything that needed deciding now lives in code (the exclude set) or
-        // is derived (which workspaces = whatever the sidebar shows).
-        React.createElement('div', { style: boxS },
-          sectionToggle(backupOpen, setBackupOpen, tr('settings.backup'),
-            backupData ? React.createElement('span', { style: { marginLeft: 'auto', fontSize: 11, opacity: 0.6 } },
-              tr('settings.backupCount', { n: (backupData.entries || []).length })) : null),
-          backupOpen ? React.createElement(React.Fragment, null,
-            React.createElement('div', { style: { opacity: 0.65, fontSize: 11, lineHeight: 1.5, marginBottom: 6 } }, tr('settings.backupHint')),
-            // Say exactly what will be included, before the click.
-            backupData && (backupData.covers || []).length
-              ? React.createElement('div', { style: { fontSize: 11, opacity: 0.8, marginBottom: 6, wordBreak: 'break-all' } },
-                  tr('settings.backupCovers', { n: (backupData.covers || []).length }) + ' ' + (backupData.covers || []).join('、'))
-              : null,
-            backupData && backupData.backupDir
-              ? React.createElement('div', { style: { fontSize: 11, opacity: 0.6, marginBottom: 8, wordBreak: 'break-all' } },
-                  tr('settings.backupDirLabel', { dir: backupData.backupDir }))
-              : null,
-            // Machine selector: empty means "this session's machine". Kept because
-            // the panel is reachable from a local session, where there is no
-            // session binding to resolve.
-            React.createElement('div', { style: { display: 'flex', gap: 6, alignItems: 'center', marginBottom: 8, flexWrap: 'wrap' } },
-              React.createElement('span', { style: { fontSize: 12, opacity: 0.8 } }, tr('settings.backupMachine') + ':'),
-              React.createElement('select', { className: 'dsh-rw-input', value: backupMachine, onChange: (e) => setBackupMachine(e.target.value), style: { ...inputS, maxWidth: 220 } },
-                React.createElement('option', { value: '' }, tr('settings.backupPickMachine')),
-                machines.map((m) => React.createElement('option', { key: m.id, value: m.id }, `${m.name || m.host} (${m.username}@${m.host})`)))),
-            // ── the two buttons ───────────────────────────────────────────────
-            React.createElement('div', { style: { display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap' } },
-              React.createElement('button', {
-                type: 'button', className: 'dsh-rw-btn dsh-rw-primary', style: { ...primaryBtnS },
-                disabled: !!backupBusy,
-                onClick: () => backupAction('create'),
-              }, backupBusy === 'create' ? tr('settings.backupCreating') : tr('settings.backupCreate')),
-              React.createElement('select', {
-                className: 'dsh-rw-input',
-                value: backupPick,
-                onChange: (e) => setBackupPick(e.target.value),
-                style: { ...inputS, flex: '1 1 260px', minWidth: 200, maxWidth: 380 },
-              },
-                React.createElement('option', { value: '' }, tr('settings.backupPickOne')),
-                (backupData && backupData.entries ? backupData.entries : []).map((e, i) => React.createElement('option', { key: e.name, value: e.name },
-                  `${e.createdAt ? e.createdAt.replace('T', ' ').slice(0, 19) : e.mtime || ''}  ·  ${humanSize(e.bytes)}  ·  ${tr('settings.backupEntries', { n: e.members == null ? '?' : e.members })}  ·  ${e.name}`))),
-              React.createElement('button', {
-                type: 'button', className: 'dsh-rw-btn',
-                style: { ...buttonS },
-                disabled: !!backupBusy || !backupPick,
-                onClick: () => {
-                  if (!window.confirm(tr('settings.backupRestoreConfirm', { file: backupPick }))) return
-                  backupAction('restore', { file: backupPick, confirm: true })
-                },
-              }, backupBusy === 'restore' ? tr('settings.backupRestoring') : tr('settings.backupRestore'))),
-            // Housekeeping stays available but out of the way: verify and delete
-            // whatever the picker has selected.
-            backupPick
-              ? React.createElement('div', { style: { marginTop: 6, display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap' } },
-                  React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 10px' }, disabled: !!backupBusy,
-                    onClick: () => backupAction('verify', { file: backupPick }) }, tr('settings.backupVerify')),
-                  React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 10px' }, disabled: !!backupBusy,
-                    onClick: () => backupAction('download', { file: backupPick }) }, tr('settings.backupDownload')),
-                  React.createElement('button', { type: 'button', className: 'dsh-rw-btn', style: { ...buttonS, padding: '2px 10px', color: T.dangerText }, disabled: !!backupBusy,
-                    onClick: () => { if (window.confirm(tr('settings.backupDeleteConfirm', { file: backupPick }))) backupAction('delete', { file: backupPick }) } }, tr('settings.backupDelete')))
-              : null,
-            backupMsg ? React.createElement('div', { style: { marginTop: 8, fontSize: 12, color: T.ok, wordBreak: 'break-all' } }, backupMsg) : null,
-            backupErr ? React.createElement('div', { style: { marginTop: 8, fontSize: 12, color: T.danger, wordBreak: 'break-all' } }, backupErr) : null,
-            !backupData || !(backupData.entries || []).length
-              ? React.createElement('div', { style: { marginTop: 8, opacity: 0.6, fontSize: 12 } }, tr('settings.backupNone'))
-              : null,
-          ) : backupData ? React.createElement('div', { style: { fontSize: 11, opacity: 0.55 } },
-              tr('settings.backupCount', { n: (backupData.entries || []).length })) : null,
-        ),
         // 端口转发面板
         React.createElement('div', { style: boxS },
           sectionToggle(fwdOpen, setFwdOpen, tr('settings.forwards')),

package/lib/index.js

@@ -53,13 +53,7 @@ import { loadMachines as _loadMachines, saveMachines as _saveMachines, sanitizeM
 import { registerHttpTransports } from './http-transport.js'
 import { SshPool } from './pool.js'
 import { createFsRoutes } from './routes-fs.js'
-import { createBackupRoutes } from './routes-backup.js'
 import { listDirStructured, removeRemoteTree } from './remote-fs.js'
-import {
-  createBackup, listBackups, restoreBackup, describeCreate, localBackupDirFor, resolveRemoteHome,
-  pullBackup, pushBackup, deleteBackup, listLocalBackups,
-} from './backup.js'
-import { parseExcludes, resolveBackupDir, isSafeArchiveName, formatBytes, DEFAULT_MAX_TRANSFER_BYTES } from './archive.js'
 
 export const name = 'dsh-remote'
 
@@ -198,19 +192,6 @@ export const Config = z.object({
   /** npm registry to install from. Empty uses the remote's own npm config, which
    *  is what an internal mirror needs to stay in effect. */
   webInstallRegistry: z.string().default(''),
-  /** Directory that workspace backups are written to on the REMOTE host. Empty
-   *  means `$HOME/.dsh-remote/backups`, resolved on the remote (so a remote
-   *  $HOME is never guessed from the local machine). */
-  backupDir: z.string().default(''),
-  /** Exclude patterns applied to backups by default (gitignore-ish, one per
-   *  line). Deliberately EMPTY: a backup that silently omits directories is how
-   *  a "restore" turns into silent data loss. Add patterns here (or per call)
-   *  when you want a smaller archive. */
-  backupExcludes: z.array(z.string()).default([]),
-  /** Cap (bytes) on copying an archive between the remote and this machine.
-   *  The archive on the remote is never truncated — this only bounds the
-   *  optional cross-machine transfer. 0 = unlimited. */
-  maxBackupTransferBytes: z.number().step(1).min(0).default(DEFAULT_MAX_TRANSFER_BYTES),
 })
 
 // ── shell / path helpers (pure implementations in lib/paths.js) ───────────
@@ -1297,74 +1278,6 @@ export async function apply(ctx, config) {
     return normalizeRemotePath(b.ws ? joinRemoteRel(b.ws, rel.replace(/\\/g, '/')) : rel)
   }
 
-  // ── backup helpers (shared by the tools and the /dsh-remote/backup routes) ─
-  /** The remote directory backups land in: the configured override, else
-   *  `$HOME/.dsh-remote/backups` resolved ON THE REMOTE (never guessed from the
-   *  local machine, whose home has nothing to do with the remote one). */
-  const backupDirForBinding = async (b) => {
-    const override = String(config.backupDir || '').trim()
-    if (override) return resolveBackupDir('', override)
-    if (!b || !b.pool) return ''
-    const home = await resolveRemoteHome(b.pool)
-    return resolveBackupDir(home, '')
-  }
-  /** Local directory holding archives pulled from one machine. */
-  const localBackupRootFor = (b) => localBackupDirFor(mirrorRootFor(b.host, b.username, b.port))
-
-  /**
-   * Every REMOTE workspace the sidebar knows about for one machine.
-   *
-   * "Back up all my workspaces" has to mean what the user sees in the sidebar, so
-   * this walks the mirror registry rather than the machine's recent-workspaces
-   * list: each mirror dir carries `.dsh-remote-meta.json` with the remote origin,
-   * which is authoritative and survives the sidebar's own storage being reset.
-   * The machine's remembered workspaces are unioned in as a fallback for
-   * workspaces that have never been mirrored on this machine.
-   *
-   * @param {{host: string, username: string, port: number}} machine
-   * @returns {string[]} absolute REMOTE directory paths, de-duplicated.
-   */
-  const remoteWorkspacesFor = (machine) => {
-    const out = new Set()
-    const host = String((machine && machine.host) || '')
-    const username = String((machine && machine.username) || '')
-    const port = Number((machine && machine.port) || 22)
-    if (!host) return []
-    // 1) Mirror dirs for THIS machine (the sidebar's remote entries).
-    try {
-      const hostDir = mirrorRootFor(host, username, port)
-      if (existsSync(hostDir)) {
-        for (const entry of readdirSync(hostDir)) {
-          const metaPath = path.join(hostDir, entry, '.dsh-remote-meta.json')
-          if (!existsSync(metaPath)) continue
-          try {
-            const meta = JSON.parse(readFileSync(metaPath, 'utf8'))
-            if (!meta || !meta.remotePath) continue
-            // Only mirrors that unambiguously belong to this machine.
-            if (String(meta.host || '') !== host) continue
-            if (Number(meta.port || 22) !== port) continue
-            if (username && String(meta.username || '') !== username) continue
-            out.add(normalizeRemotePath(meta.remotePath))
-          } catch { /* unreadable meta → not a usable workspace */ }
-        }
-      }
-    } catch { /* registry unreadable */ }
-    // 2) Workspaces the registry remembers for this machine, even if unmirrored.
-    const rec = machines.find((m) => m.host === host
-      && Number(m.port || 22) === port
-      && (!username || m.username === username))
-    const remembered = [rec && rec.workspace, ...((rec && rec.recentWorkspaces) || [])]
-    for (const p of remembered) {
-      const norm = p ? normalizeRemotePath(String(p)) : ''
-      if (norm && norm !== '/') out.add(norm)
-    }
-    // 3) The mirror the calling session is bound to, if any (a session can be
-    //    bound to a workspace the registry has not recorded yet).
-    const bound = wsPath()
-    if (bound) out.add(normalizeRemotePath(bound))
-    return [...out]
-  }
-
   // ── tools ─────────────────────────────────────────────────────────────────
 
   const textOut = {
@@ -2313,158 +2226,6 @@ export async function apply(ctx, config) {
       },
     }),
 
-    defineTool({
-      name: 'rw_backup',
-      description:
-        'Create a compressed (.tar.gz) backup of the remote workspace (or a subdirectory of it) on the remote host, with an optional copy pulled to this machine. Archives are written under $HOME/.dsh-remote/backups (config backupDir) with a sidecar .meta.json recording the workspace, entry count and sha256. Add exclude patterns when you want a smaller archive — by default EVERYTHING is archived, because silently omitting files is how a restore becomes silent data loss. Use rw_backup_list to see what exists and rw_restore to restore one.',
-      parameters: {
-        path: { type: 'string', description: 'Directory to back up (default and normally: the current remote workspace). Must be the workspace or a subdirectory of it.' },
-        label: { type: 'string', description: 'Optional tag embedded in the archive filename (e.g. "before-refactor").' },
-        excludes: { type: 'string', description: 'Comma- or newline-separated extra exclude patterns (gitignore-ish: node_modules, /build/, *.log). Relative paths inside the workspace.' },
-        dest: { type: 'string', description: 'Where the archive ends up: remote (default), local (pulled here; the remote staging copy is removed), or both.' },
-      },
-      output: textOut,
-      async execute(args, exec) {
-        const b = requireBinding(exec, 'rw_backup')
-        const dir = resolveRemoteArg(b, args.path || '')
-        if (!dir || dir === '/') throw new Error('rw_backup: a directory to back up is required')
-        const root = normalizeRemotePath(b.ws || '')
-        if (root && dir !== root && !dir.startsWith(root.replace(/\/+$/, '') + '/')) {
-          throw new Error(`rw_backup: ${dir} is outside this session's remote workspace (${root}) — backups are limited to the workspace tree`)
-        }
-        // Config defaults first, then this call's own patterns, so a caller can
-        // extend the profile's excludes without restating them.
-        const parsed = parseExcludes([
-          ...(Array.isArray(config.backupExcludes) ? config.backupExcludes : []),
-          ...String(args.excludes || '').split(/[\r\n,]+/),
-        ])
-        const backupDir = await backupDirForBinding(b)
-        if (!backupDir) throw new Error('rw_backup: cannot determine the remote $HOME — set the backupDir config option')
-        const dest = ['remote', 'local', 'both'].includes(String(args.dest)) ? String(args.dest) : 'remote'
-        const result = await createBackup(b.pool, {
-          dir,
-          backupDir,
-          label: args.label ? String(args.label) : '',
-          excludes: parsed.patterns,
-          meta: { host: b.host, username: b.username, port: b.port, label: args.label ? String(args.label) : '' },
-        })
-        if (!result.ok) {
-          audit('backup', `backup ${dir} failed: ${result.error}`, 1, b)
-          throw new Error('rw_backup: ' + result.error)
-        }
-        audit('backup', `backup ${dir} → ${result.archive}`, 0, b)
-        const lines = [describeCreate(result, { dest })]
-        lines.push(`remote archive: ${result.archive}`)
-        if (result.meta && result.meta.excludes && result.meta.excludes.length) lines.push(`excludes: ${result.meta.excludes.join(', ')}`)
-        if (parsed.dropped.length) lines.push(`ignored (no usable pattern): ${parsed.dropped.join(', ')}`)
-        if (dest === 'local' || dest === 'both') {
-          const pulled = await pullBackup(b.pool, {
-            archive: result.archive,
-            localDir: localBackupDirFor(mirrorRootFor(b.host, b.username, b.port)),
-            maxTransferBytes: Number(config.maxBackupTransferBytes) || 0,
-          })
-          if (pulled.ok) {
-            lines.push(`local copy: ${pulled.localPath}`)
-            if (dest === 'local') {
-              const del = await deleteBackup(b.pool, { archive: result.archive })
-              lines.push(del.ok ? 'remote staging copy removed (dest=local)' : `could NOT remove the remote copy: ${del.error || 'unknown error'}`)
-            }
-          } else {
-            lines.push(`local copy FAILED: ${pulled.error}`)
-          }
-        }
-        return { text: lines.join('\n') }
-      },
-    }),
-
-    defineTool({
-      name: 'rw_backup_list',
-      description:
-        "List the compressed backups of this session's remote workspace: name, size, entry count, and when it was taken. Shows both the archives stored on the remote host and any pulled into the local machine. Use the exact `name` with rw_restore.",
-      parameters: {
-        path: { type: 'string', description: "Directory whose backups to list (default: the workspace). Backups are named by workspace, so passing a subdirectory lists that subdirectory's backups." },
-      },
-      output: textOut,
-      async execute(args, exec) {
-        const b = requireBinding(exec, 'rw_backup_list')
-        const backupDir = await backupDirForBinding(b)
-        const remote = backupDir
-          ? await listBackups(b.pool, { dir: backupDir })
-          : { exists: false, dir: '', entries: [], error: '' }
-        const localDir = localBackupDirFor(mirrorRootFor(b.host, b.username, b.port))
-        const local = listLocalBackups(localDir)
-        const fmt = (e) => {
-          const bits = [e.name, formatBytes(e.bytes)]
-          if (e.members != null) bits.push(`${e.members} entries`)
-          if (e.createdAt || e.mtime) bits.push(e.createdAt || e.mtime)
-          if (!e.hasMeta) bits.push('NO SIDECAR (metadata unknown)')
-          return '  ' + bits.join('  |  ')
-        }
-        const lines = []
-        if (!backupDir) {
-          lines.push('(cannot resolve the remote backup directory — set the backupDir config option)')
-        } else if (remote.error) {
-          lines.push(`remote listing failed: ${remote.error}`)
-        } else if (!remote.entries.length) {
-          lines.push(`no backups yet in ${backupDir} (create one with rw_backup)`)
-        } else {
-          lines.push(`${remote.entries.length} remote backup(s) in ${backupDir}:`)
-          lines.push(...remote.entries.map(fmt))
-        }
-        if (local.entries.length) {
-          lines.push('', `${local.entries.length} local copy(ies) in ${localDir}:`)
-          lines.push(...local.entries.map(fmt))
-        }
-        lines.push('', 'restore one with rw_restore(file=<name>).')
-        return { text: lines.join('\n') }
-      },
-    }),
-
-    defineTool({
-      name: 'rw_restore',
-      description:
-        'Restore a workspace from one of its compressed backups (list them with rw_backup_list). The archive is verified BEFORE anything is written; a corrupt or truncated archive is refused and the target is left untouched. mode=replace (default) swaps the target for the archive contents and removes files not present in the archive; mode=merge extracts over the existing tree and deletes nothing. Prefer replace for "give me back exactly the state I archived"; use merge only when the archive is known to be a partial overlay.',
-      parameters: {
-        file: { type: 'string', required: true, description: 'Backup archive filename from rw_backup_list (e.g. proj-abc-2026-10-08T11-22-33.tar.gz).' },
-        target: { type: 'string', description: 'Directory to restore into (default: the current remote workspace). Usually left unset.' },
-        mode: { type: 'string', description: 'replace (default) or merge.' },
-        where: { type: 'string', description: 'Which copy to restore from: remote (default) or local (a pulled copy; it is uploaded back first).' },
-      },
-      output: textOut,
-      async execute(args, exec) {
-        const b = requireBinding(exec, 'rw_restore')
-        const file = String(args.file || '').trim()
-        if (!file) throw new Error('rw_restore: file is required (list them with rw_backup_list)')
-        if (!isSafeArchiveName(file)) throw new Error(`rw_restore: ${file} is not a valid backup filename (expected a plain *.tar.gz basename)`)
-        const target = args.target ? resolveRemoteArg(b, args.target) : (b.ws || '')
-        if (!target || target === '/') throw new Error('rw_restore: no restore target — pick a remote workspace first')
-        const root = normalizeRemotePath(b.ws || '')
-        if (root && target !== root && !target.startsWith(root.replace(/\/+$/, '') + '/')) {
-          throw new Error(`rw_restore: refusing to restore into ${target} — it is outside this session's remote workspace (${root})`)
-        }
-        const mode = args.mode === 'merge' ? 'merge' : 'replace'
-        const backupDir = await backupDirForBinding(b)
-        if (!backupDir) throw new Error('rw_restore: cannot determine the remote backup directory — set the backupDir config option')
-        const where = args.where === 'local' ? 'local' : 'remote'
-        let archive = `${backupDir.replace(/\/+$/, '')}/${file}`
-        if (where === 'local') {
-          const localDir = localBackupDirFor(mirrorRootFor(b.host, b.username, b.port))
-          const up = await pushBackup(b.pool, {
-            localPath: path.join(localDir, file),
-            remoteDir: backupDir,
-            maxTransferBytes: Number(config.maxBackupTransferBytes) || 0,
-          })
-          if (!up.ok) throw new Error('rw_restore: could not upload the local copy — ' + up.error)
-          archive = up.remotePath
-        }
-        const r = await restoreBackup(b.pool, { archive, target, mode })
-        audit('restore', `${mode} restore ${file} → ${target}`, r.ok ? 0 : 1, b)
-        if (!r.ok) throw new Error('rw_restore: ' + (r.error || 'restore failed'))
-        return {
-          text: `${r.mode === 'merge' ? 'Merged into' : 'Replaced'} ${target} from ${file} (${r.members} file(s) now present; the archive was verified before anything was written)${where === 'local' ? ' [from the local copy, uploaded first]' : ''}.`,
-        }
-      },
-    }),
   ]
 
   for (const t of tools) {
@@ -2844,41 +2605,6 @@ export async function apply(ctx, config) {
       sendJson, readBody, resolveRequestBinding, decodeBuf, encodeText, audit, config, mirrorDirFor,
     }),
 
-    ...createBackupRoutes({
-      sendJson,
-      readBody,
-      config,
-      audit,
-      resolveRequestBinding,
-      // The settings panel may act on a machine that is not the current one; the
-      // id is resolved to a real pool so a backup never runs against whichever
-      // machine happened to be active.
-      resolveMachineBinding: async (machineId) => {
-        const m = machines.find((x) => x.id === machineId)
-        if (!m) {
-          const err = new Error(`机器不存在：${machineId}`)
-          err.httpStatus = 404
-          throw err
-        }
-        const target = poolForMachine(identityOf(m))
-        return {
-          pool: target,
-          ws: String(m.workspace || ''),
-          host: m.host,
-          username: m.username,
-          port: Number(m.port) || 22,
-          alias: aliasOf(m),
-          mirrorDir: m.workspace ? mirrorDirFor(m.workspace, m.host, m.username, m.port) : null,
-          bound: false,
-          local: false,
-        }
-      },
-      localRootFor: localBackupRootFor,
-      // "Back up all my workspaces" means what the SIDEBAR shows, so the route
-      // asks the same collection the panel displays.
-      workspacesFor: (b) => remoteWorkspacesFor({ host: b.host, username: b.username, port: b.port }),
-    }),
-
     {
       kind: 'exact',
       path: '/dsh-remote/workspace',

package/lib/paths.js

@@ -203,8 +203,16 @@ export function relPathUnder(root, p) {
 }
 
 export function truncate(s, max) {
-  if (s.length <= max) return s
-  return s.slice(0, max) + `\n…[truncated: ${s.length - max} more chars]`
+  // A missing/NaN cap is a CONFIG BUG (measured: a bare `new SshPool({...})`
+  // with no maxOutputChars turned EVERY exec result into a 29-char truncation
+  // marker — `'x'.length <= undefined` is false, so the "cap" branch always ran
+  // and `s.length - undefined` printed NaN — silently destroying every remote
+  // output, including the web-attach startup token). A bad cap must disable
+  // truncation, not destroy the string.
+  const limit = Number(max)
+  if (!Number.isFinite(limit) || limit <= 0) return s
+  if (s.length <= limit) return s
+  return s.slice(0, limit) + `\n…[truncated: ${s.length - limit} more chars]`
 }
 
 /** 32-bit string hash rendered in base36 (short, collision-safe enough). */