dsh-rewind-plugin 0.2.0 → 0.2.1

package/lib/types/client/hidden.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Pure computation of the chat rows a rewind hides from the rendered
+ * transcript. Extracted from the client plugin (`src/client/index.ts`) so the
+ * multi-rewind cut logic stays unit-testable without a DOM.
+ *
+ * @module dsh-rewind/client/hidden
+ */
+import type { ChatConversationViewNode } from '@deepseek-ai/dsh-client-runtime/client';
+/** Minimal chat snapshot reader the hiding logic needs. */
+export interface HiddenChat {
+    readonly order: readonly string[];
+    readonly nodes: {
+        get(key: string): ChatConversationViewNode | undefined;
+    };
+}
+/** Extract the rewind target from a command outcome text ("已撤回 seq N..."). */
+export declare function targetOfOutcome(text: string | undefined): number | undefined;
+/**
+ * Anchor seqs that must be hidden from the rendered transcript so the user
+ * sees the conversation as the agent sees it: every EXECUTED `/rewind`
+ * command row (one that appended a marker; preview-only rows stay visible
+ * until a real rewind's range covers them) and every message withdrawn by a
+ * rewind — the target message itself, everything after it, and the (empty,
+ * unrendered) marker.
+ *
+ * The cut span is [min target, max marker] across ALL executed rewinds, not
+ * just the newest one: every rewind withdraws its target and everything after
+ * it, and a later rewind to a LATER point (after new traffic) must not re-show
+ * rows an earlier rewind already cut. Endpoints come from the command nodes:
+ * `sourceEventSeq` is the marker's log seq, and the outcome text carries the
+ * target seq.
+ */
+export declare function hiddenSeqsOf(snap: HiddenChat): Set<number>;

package/lib/types/client/locales.d.ts

@@ -4,11 +4,13 @@ export declare const zh: {
     'button.aria': string;
     'button.title': string;
     'popover.title': string;
-    'popover.target': string;
+    'popover.noText': string;
     'popover.chat': string;
     'popover.chat.hint': string;
     'popover.both': string;
     'popover.both.hint': string;
+    'popover.checking': string;
+    'popover.noChanges': string;
     'popover.cancel': string;
     'popover.impact.loading': string;
     'popover.impact.failed': string;
@@ -30,11 +32,13 @@ export declare const en: {
     'button.aria': string;
     'button.title': string;
     'popover.title': string;
-    'popover.target': string;
+    'popover.noText': string;
     'popover.chat': string;
     'popover.chat.hint': string;
     'popover.both': string;
     'popover.both.hint': string;
+    'popover.checking': string;
+    'popover.noChanges': string;
     'popover.cancel': string;
     'popover.impact.loading': string;
     'popover.impact.failed': string;

package/lib/types/client/styles.d.ts

@@ -25,4 +25,4 @@ export declare const CLASS: {
 /** The ↶ glyph, drawn inline so the bundle stays dependency-free. */
 export declare const REWIND_ICON_SVG: string;
 /** One injected stylesheet (scoped under `.dsh-rewind-*`). */
-export declare const STYLE = "\n.dsh-rewind-btn {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  padding: 6px;\n  border: none;\n  border-radius: 28px;\n  background: transparent;\n  color: var(--dsw-alias-label-tertiary);\n  cursor: pointer;\n}\n.dsh-rewind-btn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.dsh-rewind-popover {\n  position: fixed;\n  z-index: 1000;\n  width: 288px;\n  padding: 12px;\n  border-radius: 12px;\n  background: var(--dsw-specific-surface-1, var(--dsw-alias-surface-1, #1f2127));\n  box-shadow: 0 8px 28px rgba(0, 0, 0, 0.32);\n  font-size: 14px;\n  line-height: 20px;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-popover-title {\n  font-size: 14px;\n  font-weight: 600;\n  line-height: 20px;\n}\n.dsh-rewind-popover-target {\n  margin: 4px 0 10px;\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-all;\n}\n.dsh-rewind-popover-option {\n  display: flex;\n  flex-direction: column;\n  gap: 2px;\n  width: 100%;\n  margin: 0 0 6px;\n  padding: 8px 10px;\n  border: 1px solid transparent;\n  border-radius: 8px;\n  background: transparent;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  cursor: pointer;\n}\n.dsh-rewind-popover-option:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n.dsh-rewind-popover-option-label {\n  font-weight: 500;\n}\n.dsh-rewind-popover-option-hint {\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-popover-impact {\n  margin: 4px 0 10px;\n  padding: 8px 10px;\n  border-radius: 8px;\n  background: var(--dsw-alias-interactive-bg-hover);\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-secondary);\n  white-space: pre-wrap;\n  max-height: 160px;\n  overflow: auto;\n}\n.dsh-rewind-popover-actions {\n  display: flex;\n  justify-content: flex-end;\n  gap: 8px;\n}\n.dsh-rewind-popover-primary,\n.dsh-rewind-popover-ghost {\n  padding: 5px 12px;\n  border: none;\n  border-radius: 8px;\n  font: inherit;\n  font-size: 13px;\n  line-height: 18px;\n  cursor: pointer;\n}\n.dsh-rewind-popover-primary {\n  background: var(--dsw-alias-accent, var(--dsw-accent, #5b8cff));\n  color: var(--dsw-alias-on-accent, #fff);\n}\n.dsh-rewind-popover-primary:disabled {\n  opacity: 0.5;\n  cursor: default;\n}\n.dsh-rewind-popover-ghost {\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-popover-ghost:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.dsh-rewind-guard-hint {\n  position: fixed;\n  z-index: 1000;\n  max-width: min(440px, calc(100vw - 24px));\n  padding: 8px 12px;\n  border-radius: 10px;\n  background: var(--dsw-specific-surface-1, var(--dsw-alias-surface-1, #1f2127));\n  box-shadow: 0 8px 28px rgba(0, 0, 0, 0.32);\n  font-size: 13px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-primary);\n  pointer-events: none;\n}\n";
+export declare const STYLE = "\n.dsh-rewind-btn {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  padding: 6px;\n  border: none;\n  border-radius: 28px;\n  background: transparent;\n  color: var(--dsw-alias-label-tertiary);\n  cursor: pointer;\n}\n.dsh-rewind-btn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.dsh-rewind-popover {\n  position: fixed;\n  z-index: 1000;\n  width: 288px;\n  padding: 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 12px;\n  background: var(--dsw-specific-menu, var(--dsw-alias-bg-layer-3));\n  box-shadow: var(--dsw-shadow-lv3);\n  font-size: 14px;\n  line-height: 20px;\n  color: var(--dsw-alias-label-primary);\n}\n.dsh-rewind-popover-title {\n  font-size: 14px;\n  font-weight: 600;\n  line-height: 20px;\n}\n.dsh-rewind-popover-target {\n  margin: 4px 0 10px;\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n  word-break: break-all;\n}\n.dsh-rewind-popover-option {\n  display: flex;\n  flex-direction: column;\n  gap: 2px;\n  width: 100%;\n  margin: 0 0 6px;\n  padding: 8px 10px;\n  border: 1px solid transparent;\n  border-radius: 8px;\n  background: transparent;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  cursor: pointer;\n}\n.dsh-rewind-popover-option:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n.dsh-rewind-popover-option:disabled {\n  opacity: 0.5;\n  cursor: default;\n}\n.dsh-rewind-popover-option-label {\n  font-weight: 500;\n}\n.dsh-rewind-popover-option-hint {\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-tertiary);\n}\n.dsh-rewind-popover-impact {\n  margin: 4px 0 10px;\n  padding: 8px 10px;\n  border-radius: 8px;\n  background: var(--dsw-alias-interactive-bg-hover);\n  font-size: 12px;\n  line-height: 16px;\n  color: var(--dsw-alias-label-secondary);\n  white-space: pre-wrap;\n  max-height: 160px;\n  overflow: auto;\n}\n.dsh-rewind-popover-actions {\n  display: flex;\n  justify-content: flex-end;\n  gap: 8px;\n}\n.dsh-rewind-popover-primary,\n.dsh-rewind-popover-ghost {\n  padding: 5px 12px;\n  border: none;\n  border-radius: 8px;\n  font: inherit;\n  font-size: 13px;\n  line-height: 18px;\n  cursor: pointer;\n}\n.dsh-rewind-popover-primary {\n  background: var(--dsw-alias-button-primary-fill);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n.dsh-rewind-popover-primary:hover:not(:disabled) {\n  background: var(--dsw-alias-button-primary-hover);\n}\n.dsh-rewind-popover-primary:disabled {\n  opacity: 0.5;\n  cursor: default;\n}\n.dsh-rewind-popover-ghost {\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n}\n.dsh-rewind-popover-ghost:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.dsh-rewind-guard-hint {\n  position: fixed;\n  z-index: 1000;\n  max-width: min(440px, calc(100vw - 24px));\n  padding: 8px 12px;\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 10px;\n  background: var(--dsw-specific-menu, var(--dsw-alias-bg-layer-3));\n  box-shadow: var(--dsw-shadow-lv3);\n  font-size: 13px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-primary);\n  pointer-events: none;\n}\n";

package/lib/types/snapshot.d.ts

@@ -23,7 +23,8 @@
  * Restore semantics (identical to Claude Code): for every path with entries
  * anchored at or after the target message, apply the EARLIEST entry — write
  * the before content back, or delete the file when that entry recorded a
- * creation. Symbolic links are skipped and reported, never written through.
+ * creation. Symlinked and hard-linked paths are skipped and reported, never
+ * written through.
  *
  * @module dsh-rewind/snapshot
  */
@@ -55,6 +56,7 @@ export interface FileImpact {
 export interface RestoreOutcome {
     readonly restored: readonly string[];
     readonly deleted: readonly string[];
+    /** Symlinked or hard-linked paths left untouched. */
     readonly skipped: readonly string[];
     readonly failed: readonly {
         path: string;
@@ -69,7 +71,12 @@ export type DeleteFile = (path: string) => Promise<void>;
  */
 export declare class SnapshotStore {
     readonly root: string;
+    /** Debounce window for the per-commit prune (keeps the readdir+sort off the hot path). */
+    private static readonly PRUNE_INTERVAL_MS;
+    private lastPruneAt;
     constructor(root?: string);
+    /** Absolute path of one session's snapshot directory (id sanitized). */
+    sessionDir(sessionId: string): string;
     /** Absolute path of one anchor group directory. */
     anchorDir(sessionId: string, anchorSeq: number): string;
     /** Commit one before-backup under its turn's anchor group. */
@@ -82,14 +89,21 @@ export declare class SnapshotStore {
      * earlier messages survive.
      */
     entriesAfter(sessionId: string, targetSeq: number): Promise<CheckpointEntry[]>;
+    /**
+     * Per-path EARLIEST committed entry anchored at or after the target — the
+     * single source of truth for both restore and impact preview.
+     */
+    private earliestEntries;
     /** Per-file restore impact for the earliest entry at/after the target. */
     impactsAfter(sessionId: string, targetSeq: number): Promise<FileImpact[]>;
     /**
      * Restore the workspace to the target message's checkpoint: for every path
      * with entries anchored at or after it, apply the EARLIEST entry — write the
      * before content back, or delete the file when it was created after the
-     * target. Symbolic links are skipped (reported, never written through).
-     * Failures are per-file and never abort the pass.
+     * target. Symlinked and hard-linked paths are skipped (reported, never
+     * written through); a restored file's parent directory is created when it
+     * was deleted after the backup. Failures are per-file and never abort the
+     * pass.
      */
     restoreAfter(sessionId: string, targetSeq: number, deleteFile: DeleteFile): Promise<RestoreOutcome>;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-rewind-plugin",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "DeepSeek Harness plugin: in-place conversation rewind in the same session window (Claude Code /rewind semantics) with optional workspace file restore",
   "keywords": [
     "deepseek-harness",
@@ -32,14 +32,15 @@
       "types": "./lib/types/client/index.d.ts",
       "default": "./lib/client.js"
     },
-    "./src/*": "./src/*",
     "./package.json": "./package.json"
   },
   "files": [
     "lib",
     "cordis.patch.yml",
-    "scripts",
     "README.md",
+    "README.zh.md",
+    "docs",
+    "assets",
     "LICENSE"
   ],
   "dsh": {

package/scripts/build.mjs

@@ -1,89 +0,0 @@
-#!/usr/bin/env node
-/**
- * dsh-rewind build — produces the npm-package artifacts under lib/:
- *   lib/index.js  — host half: src/index.ts bundled to plain ESM. Every
- *                   `@deepseek-ai/*` import stays external: the dsh loader
- *                   resolves those from the harness installation, never from
- *                   this package.
- *   lib/client.js — client half: src/client/index.ts bundled to CJS, then
- *                   wrapped in the web boot handoff
- *                   `window.__ModuleLoader__.load({ id, factory })`, the
- *                   closure-factory format every `dsh.client` package's
- *                   `./client` export must use. The client half is fully
- *                   self-contained (plain DOM, no React), so nothing is
- *                   external and the injected `require` is never called.
- *
- * Type checking is a separate step (`npm run typecheck`, tsc --noEmit); this
- * script only transpiles (esbuild) and runs smoke checks: both outputs must
- * parse, and the host half must import with the expected plugin shape.
- */
-import { build } from 'esbuild'
-import { execSync } from 'node:child_process'
-import { mkdir, readFile, rm, writeFile } from 'node:fs/promises'
-import { dirname, join } from 'node:path'
-import { fileURLToPath } from 'node:url'
-
-const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..')
-const pkg = JSON.parse(await readFile(join(ROOT, 'package.json'), 'utf8'))
-
-await mkdir(join(ROOT, 'lib'), { recursive: true })
-
-// ---- type declarations: host (lib/types) + client (lib/types/client) ----
-execSync('npx tsc -p tsconfig.build.json', { cwd: ROOT, stdio: 'inherit' })
-execSync('npx tsc -p tsconfig.client.json', { cwd: ROOT, stdio: 'inherit' })
-
-// ---- host half: bundled TS -> ESM (@deepseek-ai/* stays external) ----
-await build({
-  entryPoints: [join(ROOT, 'src', 'index.ts')],
-  outfile: join(ROOT, 'lib', 'index.js'),
-  format: 'esm',
-  platform: 'node',
-  target: 'es2024',
-  bundle: true,
-  external: ['@deepseek-ai/*'],
-  sourcemap: false,
-})
-
-// ---- client half: bundled TS -> CJS, then wrapped in the loader handoff ----
-await build({
-  entryPoints: [join(ROOT, 'src', 'client', 'index.ts')],
-  outfile: join(ROOT, 'lib', '_client.js'),
-  format: 'cjs',
-  platform: 'browser',
-  target: 'es2020',
-  bundle: true,
-  external: [],
-  sourcemap: false,
-})
-const clientSource = await readFile(join(ROOT, 'lib', '_client.js'), 'utf8')
-await rm(join(ROOT, 'lib', '_client.js'))
-
-const bundle = [
-  '/* dsh-rewind client bundle — generated by scripts/build.mjs from src/client/ */',
-  'window.__ModuleLoader__.load({',
-  `  id: ${JSON.stringify(pkg.name)},`,
-  '  factory: (require) => {',
-  '    var module = { exports: {} };',
-  '    var exports = module.exports;',
-  clientSource.replace(/\s+$/, '\n'),
-  '    return module.exports;',
-  '  }',
-  '});',
-  '',
-].join('\n')
-await writeFile(join(ROOT, 'lib', 'client.js'), bundle)
-
-// ---- smoke checks ----
-const host = await readFile(join(ROOT, 'lib', 'index.js'), 'utf8')
-const exportBlock = host.slice(host.lastIndexOf('export {'))
-for (const needle of ['name', 'inject', 'apply']) {
-  if (!exportBlock.includes(needle)) throw new Error(`host bundle missing export ${needle}`)
-}
-for (const needle of ['window.__ModuleLoader__.load', `id: ${JSON.stringify(pkg.name)}`]) {
-  if (!bundle.includes(needle)) throw new Error(`client bundle missing ${needle}`)
-}
-// Declarations must exist (published tarball carries them).
-for (const dts of ['lib/types/index.d.ts', 'lib/types/client/index.d.ts']) {
-  await readFile(join(ROOT, dts), 'utf8')
-}
-console.log('build ok: lib/index.js (host), lib/client.js (client), lib/types/ (declarations)')

package/scripts/verify-host.mjs

@@ -1,206 +0,0 @@
-#!/usr/bin/env node
-/**
- * Host-half verification: boots the built plugin (`lib/index.js`) on a real
- * cordis context with a real dsh-session, then drives the `/rewind` command
- * handler and the checkpoint pipeline end to end — no model, no UI. Files are
- * real files under a temporary directory, so a restore is verified against
- * actual on-disk content, and the checkpoint store root is overridden to that
- * temporary directory.
- *
- * Run: `npm run build && node scripts/verify-host.mjs`
- *
- * What it proves:
- *  1. the plugin registers a `rewind` command on the ctx;
- *  2. `/rewind` (no args) withdraws the most recent user message;
- *  3. `/rewind @<seq> chat` cuts the surface in-place (log untouched);
- *  4. a successful write through the tools pipeline commits a before-backup
- *     under the turn's anchor seq;
- *  5. a denied call never commits (no phantom entry in the store);
- *  6. relative file paths resolve against the session cwd (fs-tools rule);
- *  7. `/rewind preview @<seq> both` reports the checkpoint impact;
- *  8. `/rewind @<seq> both` restores the real file to its pre-edit content
- *     and deletes files created after the target;
- *  9. a running agent is force-stopped before the rewind (not refused);
- * 10. a cancel that never quiesces aborts the rewind (timeout path).
- */
-import { Context } from '@deepseek-ai/cordis'
-import { FileSystem, FsTargetKey, FsVersion } from '@deepseek-ai/dsh-fs'
-import { createAssistantMessage, createUserMessage } from '@deepseek-ai/dsh-llm'
-import { Session, SessionId } from '@deepseek-ai/dsh-session'
-import { mkdtemp, mkdir, rm, writeFile, readFile } from 'node:fs/promises'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-import { apply as applyRewind } from '../lib/index.js'
-
-const aborted = () => new AbortController().signal
-
-const tmpRoot = await mkdtemp(join(tmpdir(), 'dsh-rewind-verify-'))
-const wsDir = join(tmpRoot, 'ws')
-const snapRoot = join(tmpRoot, 'snapshots')
-await mkdir(wsDir, { recursive: true })
-
-/** Real-filesystem fs double: resolve returns the real display path. */
-class FakeFs extends FileSystem {
-  async resolve(path, opts = {}) {
-    const displayPath = opts?.cwd !== undefined && !path.startsWith('/') ? join(opts.cwd, path) : path
-    return { targetKey: FsTargetKey(displayPath), displayPath }
-  }
-  processPath(target) { return target.displayPath }
-  async readText(target) { return readFile(target.displayPath, 'utf8') }
-  async writeText(target, content) { await writeFile(target.displayPath, content, 'utf8'); return { operation: 'update', version: FsVersion('v'), before: null, after: content } }
-  async stat(target) {
-    try { await readFile(target.displayPath); return { version: FsVersion('v'), type: 'file' } } catch { return undefined }
-  }
-}
-
-const fs = new FakeFs(new Context())
-
-const user = text => createUserMessage({ content: [{ type: 'text', text }], source: { kind: 'user' } })
-const assistant = text => createAssistantMessage({ content: [{ type: 'text', text }], source: { provider: 'test', model: 'test' } })
-
-function buildSession(id, cwd) {
-  const session = Session.create(SessionId(id), undefined,
-    cwd !== undefined
-      ? { version: 0, id: SessionId(id), createdAt: Date.now(), cwd }
-      : undefined)
-  session.append('user/message', user('first question'), { surfaceOp: 'append' })
-  session.append('assistant/message', { turn: 0, step: 0, message: assistant('first answer') }, { surfaceOp: 'append' })
-  session.append('user/message', user('second question'), { surfaceOp: 'append' })
-  session.append('assistant/message', { turn: 1, step: 0, message: assistant('second answer') }, { surfaceOp: 'append' })
-  return session
-}
-
-const session = buildSession('verify-host')
-const agent = { id: session.id, session, status: 'idle' }
-
-const ctx = new Context()
-let registered = null
-ctx.provide('commands', {
-  register: definition => {
-    registered = definition
-    return () => {}
-  },
-})
-ctx.provide('fs', fs)
-applyRewind(ctx, { snapshotDir: snapRoot })
-
-const call = (agentOf, rawInput) => registered.handler({ commandId: Symbol('cid'), agent: agentOf, rawInput, signal: aborted() })
-
-/** Simulate one tracked tool call: before-capture, dispatch writes the file, post-execute commits. */
-async function runWrite(agentOf, callId, filePath, content) {
-  const exec = { callId, name: 'write', arguments: { file_path: filePath, content }, agent: agentOf, signal: aborted() }
-  await ctx.waterfall('tools/execute', exec, async () => {
-    await fs.writeText({ targetKey: FsTargetKey(filePath), displayPath: filePath }, content)
-    return { isError: false, content: [] }
-  })
-  await ctx.waterfall('tools/post-execute', exec, { isError: false, content: [] }, async () => ({ kind: 'accept' }))
-}
-
-let failures = 0
-const check = (name, ok, detail) => {
-  console.log(`${ok ? 'ok  ' : 'FAIL'} ${name}${ok ? '' : ` — ${detail}`}`)
-  if (!ok) failures += 1
-}
-
-// 1. command registered
-check('command registered', typeof registered?.handler === 'function' && registered.name === 'rewind', JSON.stringify(registered))
-
-// 2. bare /rewind (manual, no parameters) withdraws the most recent user
-//    message (seq 2 "second question") and everything after it
-const bareBefore = [...session.surface.nodes]
-const bareResult = await call(agent, '')
-const bareAfter = [...session.surface.nodes]
-check('bare /rewind succeeds', bareResult.kind === 'success', bareResult.text)
-check('bare /rewind withdraws the latest message', bareAfter.length === 3 && bareAfter[0] === 0 && bareAfter[1] === 1 && bareAfter[2] > 3, `before ${JSON.stringify(bareBefore)} -> after ${JSON.stringify(bareAfter)}`)
-check('log stays append-only (5 events)', session.events.length === 5, `events=${session.events.length}`)
-
-// 3. /rewind @<seq> chat (the button's exact call form) cuts the surface on a
-//    fresh session
-const paramSession = buildSession('verify-param')
-const paramAgent = { id: paramSession.id, session: paramSession, status: 'idle' }
-const before = [...paramSession.surface.nodes]
-const chatResult = await call(paramAgent, '@2 chat')
-const after = [...paramSession.surface.nodes]
-check('rewind chat succeeds', chatResult.kind === 'success', chatResult.text)
-check('surface cut to [0,1,marker] (target withdrawn)', after.length === 3 && after[0] === 0 && after[1] === 1 && after[2] > 3, `before ${JSON.stringify(before)} -> after ${JSON.stringify(after)}`)
-check('log stays append-only (5 events)', paramSession.events.length === 5, `events=${paramSession.events.length}`)
-
-// 4. a tracked write commits a before-backup; rewinding both restores the
-//    real file and deletes files created after the target
-{
-  const aPath = join(wsDir, 'a.txt')
-  await writeFile(aPath, 'original content', 'utf8')
-  // The next user message anchors the turn that will edit a.txt (seq 5).
-  session.append('user/message', user('third question'), { surfaceOp: 'append' })
-  const anchorSeq = 5
-  await runWrite(agent, 'c1', aPath, 'rewritten') // before-capture: 'original content'
-  const createdPath = join(wsDir, 'created.txt')
-  await runWrite(agent, 'c2', createdPath, 'new') // file did not exist: before-capture = created
-  await writeFile(aPath, 'v3', 'utf8') // later edit lands after the backups
-
-  const preview = await call(agent, `preview @${anchorSeq} both`)
-  check('preview reports the file impact', preview.kind === 'success' && preview.text.includes(aPath) && preview.text.includes('还原'), preview.text)
-
-  const both = await call(agent, `@${anchorSeq} both`)
-  check('rewind both succeeds', both.kind === 'success' && both.text.includes('还原 1 个文件') && both.text.includes('删除 1 个文件'), both.text)
-  check('modified file restored to pre-edit content', await readFile(aPath, 'utf8') === 'original content', await readFile(aPath, 'utf8'))
-  let createdGone = false
-  try { await readFile(createdPath, 'utf8') } catch { createdGone = true }
-  check('created file deleted', createdGone, `exists=${!createdGone}`)
-}
-
-// 5. a denied call never commits (no phantom entry)
-{
-  const deniedPath = join(wsDir, 'denied.txt')
-  await writeFile(deniedPath, 'x', 'utf8')
-  const exec = { callId: 'c3', name: 'write', arguments: { file_path: deniedPath, content: 'denied write' }, agent, signal: aborted() }
-  await ctx.waterfall('tools/pre-execute', exec, async () => ({ kind: 'deny', reason: 'no' }))
-  await ctx.waterfall('tools/post-execute', exec, { isError: true, error: { message: 'denied', info: { name: 'x', code: 'y' } }, content: [] }, async () => ({ kind: 'accept' }))
-  const preview = await call(agent, 'preview @5 both')
-  check('denied call is not in the impact list', !preview.text.includes(deniedPath), preview.text)
-}
-
-// 6. relative paths resolve against the session cwd (fs-tools rule)
-{
-  const cwdSession = buildSession('verify-cwd', wsDir)
-  const cwdAgent = { id: cwdSession.id, session: cwdSession, status: 'idle' }
-  const relPath = join(wsDir, 'rel.txt')
-  await writeFile(relPath, 'relative original', 'utf8')
-  cwdSession.append('user/message', user('relative question'), { surfaceOp: 'append' })
-  await runWrite(cwdAgent, 'c4', 'rel.txt', 'relative new') // relative path
-
-  const preview = await call(cwdAgent, 'preview @4 both')
-  check('relative path resolved via session cwd', preview.kind === 'success' && preview.text.includes(relPath), preview.text)
-  const both = await call(cwdAgent, '@4 both')
-  check('both restores cwd-resolved file', both.kind === 'success' && await readFile(relPath, 'utf8') === 'relative original', both.text)
-}
-
-// 7. preview on a message with no recorded changes reports none
-{
-  const cleanSession = buildSession('verify-norec')
-  const cleanAgent = { id: cleanSession.id, session: cleanSession, status: 'idle' }
-  const previewResult = await call(cleanAgent, 'preview @2 both')
-  check('preview with no entries reports no changes', previewResult.kind === 'success' && previewResult.text.includes('无需还原文件'), previewResult.text)
-}
-
-// 8. a running agent is force-stopped before the rewind (not refused)
-{
-  const runningSession = buildSession('verify-running')
-  let cancelled = false
-  const running = { id: runningSession.id, session: runningSession, status: 'running', cancel: () => { cancelled = true; running.status = 'idle' } }
-  const runningResult = await call(running, '@2 chat')
-  check('running agent is cancelled first', cancelled === true, `cancelled=${cancelled}`)
-  check('rewind succeeds after stop', runningResult.kind === 'success', runningResult.text)
-}
-
-// 9. a cancel that never quiesces aborts the rewind (timeout path)
-{
-  const stuckSession = buildSession('verify-stuck')
-  const stuck = { id: stuckSession.id, session: stuckSession, status: 'running', cancel: () => {} }
-  const stuckResult = await call(stuck, '@2 chat')
-  check('stuck agent aborts rewind', stuckResult.kind === 'error', stuckResult.text)
-}
-
-await rm(tmpRoot, { recursive: true, force: true })
-console.log(failures === 0 ? '\nverify-host: all checks passed' : `\nverify-host: ${failures} check(s) FAILED`)
-process.exit(failures === 0 ? 0 : 1)