dsh-session-curator 0.1.2 → 0.2.0

package/lib/host/trash.js

@@ -3,11 +3,41 @@
  *
  * 这个文件里每一条顺序都是踩过事故之后定下来的，动之前先读注释；回归测试在
  * `scripts/smoke.mjs` 的"软删除语义（临时 DSH_HOME）"那一段。
+ *
+ * ── `__trash.json`（回收站条目的元数据）──────────────────────────────────
+ * 位置：`<DSH_HOME>/storages/session-manager/trash/<sessionId>/__trash.json`，
+ * 与会话自己的文件（`session.jsonl` 等）**同级同搬** —— 所以"恢复"就是把整个目录搬回
+ * `<DSH_HOME>/sessions/<slug>/<sessionId>/`，元数据跟着回去，搬完再删掉它。
+ *
+ * **v1**（当前，`TRASH_META_VERSION = 1`）的字段：
+ *
+ * | 字段 | 类型 | 说明 |
+ * | --- | --- | --- |
+ * | `version` | `number` | 写这份文件的 schema 版本。**最早那一版没有这个字段**（插件还叫 `dsh-session-manager` 的时代），读的时候按 v1 处理 |
+ * | `sessionId` | `string` | 会话 id；与目录名一致，冗余存一份便于人眼排错 |
+ * | `slug` | `string` | 原目录 `<DSH_HOME>/sessions/<slug>/`。**恢复的关键字段**：缺失或不是非空字符串就恢复不了，界面会按 `restorable: false` 显示"无法恢复（缺元数据）" |
+ * | `title` | `string \| null` | 删除时的标题（只用于展示） |
+ * | `cwd` | `string \| null` | 原工作区路径；恢复时拿它去 `resolveByPath()` 把会话挂回去 |
+ * | `workspaceId` | `string \| null` | 原工作区 id（展示 / 分组用，恢复**不**依赖它） |
+ * | `workspaceTitle` | `string \| null` | 原工作区标题（同上） |
+ * | `wasArchived` | `boolean` | 删除前是否已经在归档集合里；恢复时照原样还原。老条目没有这个字段，按 `false` 处理 |
+ * | `deletedAt` | `number` | 删除时间（`Date.now()`）。`0` 或缺失 = 认不出删除时间的老条目，**永远不算过期**，只能逐条永久删除（见 `retention.ts`） |
+ *
+ * **版本约定：加字段不升版**。
+ *   1. 读方必须容忍**缺字段**（老条目、以及将来加了字段之后的新条目），逐字段给默认值 ——
+ *      正因为如此，"新增一个可选字段"**不需要**动 `version`。
+ *   2. 只有**不兼容**的改动（改字段含义、挪位置、不重写就读不对）才 `+1`，并且必须同时
+ *      `readTrashMeta()` 里补一段迁移：把老版本升成新版本，再往下走。
+ *   3. 读到**比自己新**的 `version` 一律**拒绝**（`readTrashMeta()` 抛错，逐项失败里带原因），
+ *      绝不按旧语义硬猜 —— 猜错的代价是"把一个会话恢复进错误的目录"。
  */
 import { existsSync, promises as fsp } from "node:fs";
 import { join } from "node:path";
 import { messageOf, moveDir } from "./fs-utils.js";
 import { META_FILE, PROJ_FILE, projCacheFile, sessionsRoot, trashRoot } from "./paths.js";
+import { isExpired, retentionCutoff } from "./retention.js";
+/** `__trash.json` 当前版本（字段表与版本约定见文件头）。 */
+export const TRASH_META_VERSION = 1;
 /**
  * 软删除：把会话**藏起来**（进归档集合）+ 移出工作区记账 + 搬到回收站（含投影缓存）。
  *
@@ -84,8 +114,9 @@ export async function trashSessions(host, ids) {
                 // 缓存搬不动不影响会话本身
             }
         }
-        await fsp.writeFile(join(target, META_FILE), JSON.stringify({
-            version: 1,
+        // 写入侧就用 `TrashMeta` 这个类型：schema 改了却忘了改字段表，tsc 当场就红。
+        const meta = {
+            version: TRASH_META_VERSION,
             sessionId,
             slug: info.slug,
             title: projection.title,
@@ -96,10 +127,50 @@ export async function trashSessions(host, ids) {
             // 一律按"没归档过"处理，也就是恢复成普通会话）。
             wasArchived,
             deletedAt: Date.now()
-        }, null, 2), "utf8");
+        };
+        await fsp.writeFile(join(target, META_FILE), JSON.stringify(meta, null, 2), "utf8");
         return steps;
     });
 }
+/**
+ * 读一条回收站元数据（字段表与版本约定见文件头）。
+ *
+ * 三种结果：
+ *   - 文件不在 / 不是 JSON 对象 / JSON 坏了 → `null`。与"没有元数据"同义：恢复不了，
+ *     但列表仍然要能显示它（`listTrash()` 会给它 `deletedAt: 0` / `restorable: false`）。
+ *   - `version` 缺失（最早那一版写下的）或 ≤ 当前 → 原样返回，字段由调用方逐个校验。
+ *   - `version` **比当前新** → 抛错。语义不可猜，宁可不恢复，也不能把一个会话按旧规则
+ *     塞进错误的目录（错误信息会出现在批量操作的逐项失败里）。
+ *
+ * 迁移放哪：将来真的升到 v2 时，在这里加一段"把 v1 读成 v2 形状"的转换，
+ * 然后再 `return`；`version` 的**当前**值只认 `TRASH_META_VERSION`。
+ */
+export async function readTrashMeta(dir) {
+    let line;
+    try {
+        line = await fsp.readFile(join(dir, META_FILE), "utf8");
+    }
+    catch {
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+        return null;
+    // 跨 JSON 边界的一次收窄（AGENTS.md §5 允许的那种）：上面已经证明它是个对象。
+    const meta = parsed;
+    // `version` 缺失 = 最早那版（插件还叫 `dsh-session-manager` 的时代）写下的，按 v1 处理。
+    const written = typeof meta.version === "number" ? meta.version : TRASH_META_VERSION;
+    if (written > TRASH_META_VERSION) {
+        throw new Error(`这条回收站元数据是更新版本的插件写的（version ${written}，本插件只认到 ${TRASH_META_VERSION}）：先升级插件，再恢复`);
+    }
+    return meta;
+}
 /**
  * 从回收站恢复；尽力把会话重新挂回原工作区，并把归档状态还原成删除前的样子。
  *
@@ -115,13 +186,8 @@ export async function restoreSessions(host, ids) {
         const source = join(trashRoot(), sessionId);
         if (!existsSync(source))
             throw new Error("回收站里没有这个会话");
-        let meta = null;
-        try {
-            meta = JSON.parse(await fsp.readFile(join(source, META_FILE), "utf8"));
-        }
-        catch {
-            meta = null;
-        }
+        // 版本比插件新时这里会抛（原因进逐项失败），别的坏情况一律回 null。
+        const meta = await readTrashMeta(source);
         if (typeof meta?.slug !== "string" || meta.slug === "") {
             throw new Error("缺少回收站元数据，无法确定原目录");
         }
@@ -174,6 +240,29 @@ export async function restoreSessions(host, ids) {
  * 界面上又找不到它）。
  */
 export async function purgeSessions(host, ids) {
+    return purgeEach(host, ids);
+}
+/**
+ * 「清理 N 天前」：**按时间**批量永久删除。
+ *
+ * 只认回收站目录里的条目（`purgeEach()` 会再查一次 `existsSync`），并且必须先把
+ * `deletedAt` 早于截止时间的条目挑出来 —— 挑的规则与预览共用
+ * `retention.ts` 的 `isExpired()`，所以"预览到的那批"就是"真删的那批"。
+ *
+ * 为什么这里不做静默后台清理：这是**永久删除**，本插件唯一不可撤销的动作。它只能由用户
+ * 在界面上点一次、看过预览、再过一道确认弹窗之后发生（客户端侧见配置页的保留策略一行）。
+ */
+export async function purgeOlderThan(host, days) {
+    const cutoff = retentionCutoff(days);
+    const rows = await host.listTrash();
+    return purgeEach(host, rows.filter((row) => isExpired(row, cutoff)).map((row) => row.sessionId));
+}
+/**
+ * 逐项永久删除的**唯一**实现（`purge` 与 `purge-older-than` 都走它）。
+ *
+ * 顺序不能改：先 `unarchiveSession` 再 `rm`（理由见上面的注释）。
+ */
+async function purgeEach(host, ids) {
     return host.each(ids, async (sessionId) => {
         const target = join(trashRoot(), sessionId);
         if (!existsSync(target))

package/lib/index.js

@@ -16,7 +16,7 @@
  * `ctx.connection.fetch.register`）：信任检查与会话鉴权由 Connection 的 `/api`
  * 前缀路由先做完，所以插件自己不需要任何鉴权代码。
  *
- * 源码在 `src/`（TypeScript），`lib/` 是构建产物（`npm run build`），DSH 加载的是后者。
+ * 源码在 `src/`（TypeScript），`lib/` 是构建产物（`pnpm run build`），DSH 加载的是后者。
  */
 import { SessionManager } from "./host/session-manager.js";
 import { registerRoutes } from "./host/routes.js";
@@ -30,5 +30,9 @@ export function apply(ctx) {
     const manager = new SessionManager(ctx);
     registerRoutes(ctx, manager);
 }
-// 纯函数，给 `scripts/smoke.mjs` 直接单测（插件运行时用不到）。
+// 纯函数 / 纯工具，给 `scripts/smoke.mjs` 直接单测（插件运行时用不到）。
 export { compareVersions } from "./host/update.js";
+export { dirStats, forgetDirStats } from "./host/fs-utils.js";
+export { isExpired, retentionCutoff } from "./host/retention.js";
+// `open` 的路径校验单独导出：自检要直接断言那道判据，不必真的去调系统 shell。
+export { insideRoot } from "./host/open.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-session-curator",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "DeepSeek Harness plugin: soft-delete sessions to a recoverable trash and manage archived/pinned ones, grouped by their original workspace folder. | DSH 插件：会话软删除到可恢复的回收站，并按原来的工作区文件夹管理已归档 / 已置顶会话。",
   "type": "module",
   "main": "lib/index.js",
@@ -100,17 +100,9 @@
       "optional": true
     }
   },
-  "scripts": {
-    "build": "node scripts/build.mjs",
-    "typecheck": "tsc -p tsconfig.host.json && tsc -p tsconfig.client.json",
-    "test": "npm run build && node scripts/client.mjs && node scripts/smoke.mjs && node scripts/activation.mjs",
-    "check": "npm run typecheck && node --check lib/index.js && node --check lib/client.js && node --check scripts/client.mjs",
-    "prepublishOnly": "npm test"
-  },
   "files": [
     "lib",
     "locale",
-    "scripts",
     "cordis.patch.yml",
     "icon.svg",
     "LICENSE",
@@ -120,6 +112,17 @@
   "devDependencies": {
     "@types/node": "^26.6.5",
     "esbuild": "^0.28.2",
+    "prettier": "^3.9.10",
     "typescript": "^5.9.3"
+  },
+  "scripts": {
+    "build": "node scripts/build.mjs",
+    "typecheck": "tsc -p tsconfig.host.json && tsc -p tsconfig.client.json",
+    "test": "pnpm run build && node scripts/artifact.mjs && node scripts/client.mjs && node scripts/smoke.mjs && node scripts/activation.mjs",
+    "check": "pnpm run typecheck && pnpm run format:check && node --check lib/index.js && node --check lib/client.js && node --check scripts/artifact.mjs && node --check scripts/check-profile.mjs && node --check scripts/client.mjs",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "release": "node scripts/release.mjs",
+    "check:profile": "node scripts/check-profile.mjs"
   }
-}
+}

package/scripts/activation.mjs

@@ -1,358 +0,0 @@
-/**
- * 宿主半区**激活**自检 —— 对着真实 DSH 运行时的 cordis 跑一遍（不需要 DSH 在跑）。
- *
- * 为什么除了 `smoke.mjs` 还要这个：`smoke.mjs` 用的是**假 ctx**（服务直接挂在根上），
- * 它测得出"登记了什么路由"，但复现不了这次的 405 事故 —— 那个事故要求服务**各自挂在
- * 自己的兄弟 fiber 上**（Loader 挂 profile 条目就是这样），此时 cordis 的服务调用带
- * shadow（`Context[symbols.shadow]` 指向提供者作用域），于是
- * `ctx.connection.rpc.handle()` 会拿 **Connection 自己的 ctx** 去
- * `owner.webServer.register(...)`，抛
- *
- *     cannot get property "webServer" without inject
- *     （@deepseek-ai/dsh-client-connection/lib/index.js:656）
- *
- * 插件 fiber 直接 `failed`、一条路由都没挂上，客户端每个 POST 落到 SPA 静态兜底，
- * 被回 **HTTP 405** —— 就是 `transport failure for /session-manager/trash: HTTP 405`。
- *
- * 本脚本从 `app.asar` 里抽出真实的 `@deepseek-ai/cordis` + `@deepseek-ai/cosmokit`，
- * 用**逐字照抄**的 Connection（`rpc` / `fetch` / `createSharedFetchHandler` /
- * `endpointFromPath` / `assertChannel` / `assertFetchRoute`）搭出同样的兄弟拓扑，然后：
- *   1. 载入本插件的宿主半区，断言 fiber 变 **ACTIVE**（FAILED 直接判失败）；
- *   2. 断言 8 条 `/api/session-curator/*` 精确路由都登记上了；
- *   3. 用真 `Request` 走一遍共享处理器（等价于宿主 `/api` 栅栏之后的路径），要 200 + 合法信封；
- *   4. 登记一条"永远不该被碰到"的 webServer —— 谁把实现改回 `rpc.handle()` 就会撞上它；
- *   5. dispose 插件，断言 8 条路由全部释放。
- *
- * 用法：`node scripts/activation.mjs`
- *   找不到 `app.asar` 时打印 SKIP 并以 0 退出；可用 `$env:DSH_APP_ASAR` 指定路径。
- */
-import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
-import { existsSync, readdirSync, readFileSync, realpathSync, statSync } from "node:fs";
-import { createRequire } from "node:module";
-import { tmpdir } from "node:os";
-import { dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
-import { pathToFileURL } from "node:url";
-
-// ── 找 app.asar ──────────────────────────────────────────────────────────
-function findArchive() {
-	const configured = process.env.DSH_APP_ASAR;
-	if (typeof configured === "string" && configured.trim() !== "") {
-		const path = resolve(configured.trim());
-		if (!existsSync(path)) throw new Error(`$DSH_APP_ASAR 指向的文件不存在：${path}`);
-		return path;
-	}
-	const candidates = [
-		"C:/Soft/DeepSeek Harness/resources/app.asar",
-		join(process.env.LOCALAPPDATA ?? "", "Programs/DeepSeek Harness/resources/app.asar"),
-		join(process.env.PROGRAMFILES ?? "", "DeepSeek Harness/resources/app.asar")
-	];
-	return candidates.find((path) => existsSync(path));
-}
-
-/** 最小 asar 读取器：Chromium pickle 头 + JSON 目录 + 顺序拼接的文件体。 */
-async function readArchive(path) {
-	const buffer = await readFile(path);
-	const headerSize = buffer.readUInt32LE(4);
-	const jsonLength = buffer.readUInt32LE(12);
-	const header = JSON.parse(buffer.subarray(16, 16 + jsonLength).toString("utf8"));
-	const dataStart = 8 + headerSize;
-	const files = [];
-	(function walk(node, prefix) {
-		for (const [name, entry] of Object.entries(node.files ?? {})) {
-			const target = prefix === "" ? name : `${prefix}/${name}`;
-			if (entry.files) walk(entry, target);
-			else files.push({ path: target, offset: Number(entry.offset), size: entry.size });
-		}
-	})(header, "");
-	return {
-		files,
-		read(file) {
-			return buffer.subarray(dataStart + file.offset, dataStart + file.offset + file.size);
-		}
-	};
-}
-
-/** 把运行时的 cordis + cosmokit 抽到一个临时 node_modules 里（每次覆盖，避免陈旧）。 */
-async function extractRuntime(archivePath) {
-	const archive = await readArchive(archivePath);
-	const root = join(tmpdir(), "dsh-session-curator-activation");
-	const modules = join(root, "node_modules");
-	await rm(modules, { recursive: true, force: true });
-	let extracted = 0;
-	for (const file of archive.files) {
-		const match = /^dsh\/node_modules\/(@deepseek-ai\/(?:cordis|cosmokit))(\/.*)?$/.exec(file.path);
-		if (match === null) continue;
-		const [, packageName, rest = ""] = match;
-		const wanted = rest === "" || rest === "/package.json" || rest.startsWith("/lib/");
-		if (!wanted) continue;
-		const target = join(modules, packageName, rest.replace(/^\//, ""));
-		await mkdir(dirname(target), { recursive: true });
-		await writeFile(target, archive.read(file));
-		extracted += 1;
-	}
-	if (extracted === 0) throw new Error("app.asar 里没有找到 @deepseek-ai/cordis —— 布局变了？");
-	return join(modules, "@deepseek-ai/cordis/lib/index.js");
-}
-
-// ── 逐字照抄 @deepseek-ai/dsh-client-connection 的判定与注册代码 ─────────
-const CHANNEL_PATTERN = /^\/[A-Za-z0-9._~-]+$/;
-const ENDPOINT_SEGMENT_PATTERN = /^[A-Za-z0-9_$.-]+$/;
-
-function endpointFromPath(channel, pathname) {
-	if (!pathname.startsWith(`${channel}/`)) return undefined;
-	const endpoint = pathname.slice(channel.length + 1);
-	if (endpoint.split("/").some((segment) => segment === "" || segment === "." || segment === ".." || !ENDPOINT_SEGMENT_PATTERN.test(segment))) return undefined;
-	return endpoint;
-}
-
-function assertChannel(channel) {
-	if (!CHANNEL_PATTERN.test(channel) || channel === "/api") throw new Error(`connection: invalid or reserved RPC channel ${JSON.stringify(channel)}`);
-}
-
-function assertFetchRoute(route) {
-	if (endpointFromPath("/api", route.path) === undefined) throw new Error(`connection: invalid exact Fetch route ${JSON.stringify(route.path)}`);
-	if (route.methods.length === 0) throw new Error(`connection: exact Fetch route ${JSON.stringify(route.path)} declares no methods`);
-	if (new Set(route.methods).size !== route.methods.length) throw new Error(`connection: exact Fetch route ${JSON.stringify(route.path)} repeats a method`);
-}
-
-const ENDPOINTS = ["snapshot", "archive", "unarchive", "pin", "unpin", "trash", "restore", "purge", "check-update"];
-const CHANNEL = "/api";
-const PREFIX = "session-curator";
-const ROUTE_PREFIX = `${CHANNEL}/${PREFIX}`;
-
-const checks = [];
-function check(label, condition, detail) {
-	checks.push({ label, ok: Boolean(condition) });
-	console.log(`${condition ? "  ok  " : " FAIL "} ${label}${detail === undefined ? "" : `  — ${detail}`}`);
-}
-
-// ── 跑 ───────────────────────────────────────────────────────────────────
-const archivePath = findArchive();
-if (archivePath === undefined) {
-	console.log("SKIP: 找不到 app.asar（用 $env:DSH_APP_ASAR 指定 DSH 的 resources/app.asar 后重跑）");
-	process.exit(0);
-}
-
-console.log(`runtime: ${archivePath}`);
-const cordisEntry = await extractRuntime(archivePath);
-const { Context, Service } = await import(pathToFileURL(cordisEntry).href);
-
-/** 故意抛错：这个插件不该再碰 webServer（老实现才会）。 */
-class WebServer extends Service {
-	constructor(ctx) {
-		super(ctx, "webServer");
-	}
-	register(route) {
-		throw new Error(`webserver.register 不该被本插件调用：${route.path}`);
-	}
-}
-
-/** verbatim: dsh-client-connection/lib/index.js `HostConnectionService`。 */
-class Connection extends Service {
-	fetchRoutes = new Map();
-	constructor(ctx) {
-		super(ctx, "connection");
-	}
-	get rpc() {
-		const owner = this.ctx;
-		return {
-			handle: (channel, handler) => this.register(owner, channel, handler),
-			intercept: (channel, matches, handler) => this.registerInterceptor(owner, channel, matches, handler)
-		};
-	}
-	get fetch() {
-		const owner = this.ctx;
-		return { register: (route) => this.registerFetchRoute(owner, route) };
-	}
-	register(owner, channel) {
-		assertChannel(channel);
-		const route = { kind: "prefix", path: channel, handler: async () => {} };
-		return owner.effect(() => owner.webServer.register(route), `client-connection: ${channel} rpc channel`);
-	}
-	registerInterceptor() {
-		throw new Error("intercept 未实现（本插件不用）");
-	}
-	registerFetchRoute(owner, route) {
-		assertFetchRoute(route);
-		const registered = { methods: new Set(route.methods), requestBody: route.requestBody, fetch: route.fetch };
-		return owner.effect(() => {
-			if (this.fetchRoutes.has(route.path)) throw new Error(`connection: exact Fetch route ${JSON.stringify(route.path)} is already registered`);
-			this.fetchRoutes.set(route.path, registered);
-			return () => {
-				this.fetchRoutes.delete(route.path);
-			};
-		}, `client-connection: ${route.path} Fetch route`);
-	}
-	createSharedFetchHandler(channel) {
-		return {
-			requestBodyMode: ({ method, url }) => {
-				const route = this.fetchRoutes.get(url.pathname);
-				return route?.methods.has(method) === true ? route.requestBody : "buffered";
-			},
-			fetch: (request) => {
-				const pathname = new URL(request.url).pathname;
-				const route = this.fetchRoutes.get(pathname);
-				if (route?.methods.has(request.method) === true) return route.fetch(request);
-				return Promise.resolve(new Response("not found", { status: 404 }));
-			}
-		};
-	}
-}
-
-class WorkspaceRegistry extends Service {
-	constructor(ctx) {
-		super(ctx, "workspaceRegistry");
-	}
-	list() {
-		return [];
-	}
-	get archivedSessionIds() {
-		return [];
-	}
-	get pinnedSessionIds() {
-		return [];
-	}
-}
-
-// 兄弟拓扑：Loader 挂 profile 条目就是每个服务一条自己的 fiber。
-const root = new Context();
-let connection;
-root.plugin({ name: "webserver", apply: (ctx) => void new WebServer(ctx) });
-root.plugin({
-	name: "connection",
-	apply: (ctx) => {
-		connection = new Connection(ctx);
-	}
-});
-root.plugin({ name: "workspace-registry", apply: (ctx) => void new WorkspaceRegistry(ctx) });
-
-const plugin = await import(pathToFileURL(process.argv[2] === undefined ? join(import.meta.dirname, "../lib/index.js") : resolve(process.argv[2])).href);
-const fiber = root.plugin(plugin);
-let failure;
-try {
-	await fiber.await();
-} catch (error) {
-	failure = error;
-}
-
-check("host half activates (fiber ACTIVE)", fiber.state === 2, failure === undefined ? `state=${fiber.state}` : `state=${fiber.state}: ${failure.message}`);
-check(
-	"registers one exact /api route per endpoint",
-	ENDPOINTS.every((endpoint) => connection.fetchRoutes.has(`${ROUTE_PREFIX}/${endpoint}`)),
-	[...connection.fetchRoutes.keys()].join(", ")
-);
-
-const shared = connection.createSharedFetchHandler("/api");
-const rpcId = "activation-probe";
-const response = await shared.fetch(new Request(`http://127.0.0.1:19387${ROUTE_PREFIX}/snapshot`, {
-	method: "POST",
-	headers: { "content-type": "application/json" },
-	body: JSON.stringify({ type: "client-request", rpcId, method: `${PREFIX}/snapshot`, payload: {} })
-}));
-const text = await response.text();
-let envelope;
-try {
-	envelope = JSON.parse(text);
-} catch {
-	// 路由没挂上时这里拿到的是 Connection 的纯文本 404，别让它盖掉上面的 FAIL 列表。
-	envelope = { type: "unparsable", result: { ok: false, error: { message: text.slice(0, 80) } } };
-}
-check("POST /api/session-curator/snapshot answers 200 + Connection envelope", response.status === 200 && envelope.type === "server-response" && envelope.rpcId === rpcId, `status=${response.status} type=${envelope.type} ok=${envelope.result?.ok}${envelope.result?.ok === false ? ` error=${JSON.stringify(envelope.result.error)}` : ""}`);
-check("snapshot value carries the documented shape", envelope.result?.ok === true && ["dshHome", "trashDir", "sessionsDir", "archived", "pinned", "trashed", "totals"].every((key) => key in (envelope.result.value ?? {})));
-
-const unregistered = await shared.fetch(new Request("http://127.0.0.1:19387/api/not-ours", { method: "POST" }));
-check("an unregistered /api path is left to Connection (404)", unregistered.status === 404, `status=${unregistered.status}`);
-
-await fiber.dispose();
-await fiber.await().catch(() => {});
-check("disposing the host half releases every route", connection.fetchRoutes.size === 0, `${connection.fetchRoutes.size} left`);
-
-// ── manifest 元数据：插件管理页卡片上的图标与标题/描述 ───────────────────
-// 逐条复刻 @deepseek-ai/dsh-app-boot 的 `lib/types/package-meta.js`（readPluginMeta /
-// iconOf）：locale 文件**必须能被 Node 解析器按 exports 找到**，图标是 manifest 相对路径、
-// 只能是 SVG/PNG/JPEG/WebP、realpath 之后仍在 manifest 目录内、且 ≤ 256 KiB。
-const ICON_MEDIA_TYPES = new Map([[".svg", "image/svg+xml"], [".png", "image/png"], [".jpg", "image/jpeg"], [".jpeg", "image/jpeg"], [".webp", "image/webp"]]);
-const MAX_ICON_BYTES = 256 * 1024;
-
-/** 极简标签配对：够验证我们自己的手写 SVG（跳过注释、自闭合、XML 声明）。 */
-function tagsBalanced(source) {
-	const text = source.replace(/<!--[\s\S]*?-->/gu, "");
-	const stack = [];
-	const pattern = /<\s*(\/?)\s*([A-Za-z][\w:.-]*)((?:[^>"']|"[^"]*"|'[^']*')*?)(\/?)\s*>/gu;
-	let match;
-	while ((match = pattern.exec(text)) !== null) {
-		const [, closing, name] = match;
-		// 自闭合看原始匹配的结尾，别信那个可选捕获组：属性组会把 `/` 一起吃掉。
-		if (/\/\s*>$/u.test(match[0]) || name.startsWith("?")) continue;
-		if (closing === "/") {
-			if (stack.pop() !== name) return false;
-		} else {
-			stack.push(name);
-		}
-	}
-	return stack.length === 0;
-}
-check("the SVG tag checker itself detects imbalance", tagsBalanced("<svg><path/></svg>") === true && tagsBalanced("<svg><path></svg>") === false && tagsBalanced("<svg><path>x</svg>") === false);
-
-const pluginDir = resolve(import.meta.dirname, "..");
-// 用 self-reference 解析：不需要插件已经装进 profile，走的是同一张 exports 表。
-const pluginRequire = createRequire(join(pluginDir, "package.json"));
-// 包名从自己的 manifest 读：将来改名（发布到 npm 前一定要改）自检不会跟着烂。
-const PACKAGE_NAME = JSON.parse(readFileSync(join(pluginDir, "package.json"), "utf8")).name;
-let manifest;
-let manifestPath;
-try {
-	manifestPath = pluginRequire.resolve(`${PACKAGE_NAME}/package.json`);
-	manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
-} catch (error) {
-	manifestPath = undefined;
-	check("package.json is reachable through its own exports map", false, String(error?.code ?? error));
-}
-if (manifestPath !== undefined) {
-	check("package.json is reachable through its own exports map", true);
-	check("the manifest exports locale JSON for the metadata reader", (() => {
-		try {
-			return pluginRequire.resolve(`${PACKAGE_NAME}/locale/en.json`).endsWith("en.json");
-		} catch {
-			return false;
-		}
-	})());
-
-	// 本地化 title / description（app-boot 读取 locale/ 目录下每个 *.json 的 meta）。
-	const englishPath = pluginRequire.resolve(`${PACKAGE_NAME}/locale/en.json`);
-	const dictionaries = new Map();
-	for (const name of readdirSync(dirname(englishPath))) {
-		if (!name.endsWith(".json")) continue;
-		const id = name.slice(0, -5).toLowerCase();
-		const parsed = JSON.parse(readFileSync(pluginRequire.resolve(`${PACKAGE_NAME}/locale/${name}`), "utf8"));
-		dictionaries.set(id, parsed.meta ?? {});
-	}
-	check("every locale file carries meta.title and meta.description", [...dictionaries].every(([, meta]) => typeof meta.title === "string" && meta.title !== "" && typeof meta.description === "string" && meta.description !== ""), [...dictionaries].map(([id, meta]) => `${id}:${meta.title}`).join(", "));
-	const title = { en: manifest.name, ...Object.fromEntries([...dictionaries].filter(([, meta]) => meta.title !== undefined).map(([id, meta]) => [id, meta.title])) };
-	const description = { en: manifest.description ?? "", ...Object.fromEntries([...dictionaries].filter(([, meta]) => meta.description !== undefined).map(([id, meta]) => [id, meta.description])) };
-	check("the plugin card gets a real (non-package-name) title in both languages", title.en !== manifest.name && typeof title.zh === "string" && title.zh !== "", JSON.stringify(title));
-	check("the plugin card gets a description in both languages", typeof description.en === "string" && description.en !== "" && typeof description.zh === "string" && description.zh !== "");
-
-	// 图标：路径规则 + 体积 + 内容。
-	const icon = manifest.icon;
-	check("the manifest declares a manifest-relative SVG icon", typeof icon === "string" && !isAbsolute(icon) && ICON_MEDIA_TYPES.get(extname(icon).toLowerCase()) === "image/svg+xml", JSON.stringify(icon));
-	if (typeof icon === "string") {
-		const iconFile = realpathSync(resolve(dirname(manifestPath), icon));
-		const local = relative(realpathSync(dirname(manifestPath)), iconFile);
-		const size = statSync(iconFile).size;
-		check("the icon stays inside the manifest directory, is a regular file and fits 256 KiB", !local.startsWith("..") && !isAbsolute(local) && statSync(iconFile).isFile() && size <= MAX_ICON_BYTES, `${size} B`);
-		const svg = readFileSync(iconFile, "utf8");
-		// 注释不算数：只有真正会被渲染的部分才需要自带着色。
-		const shapes = svg.replace(/<!--[\s\S]*?-->/gu, "");
-		check("the icon is well-formed SVG with its own colours (it renders through <img>)", svg.trimStart().startsWith("<svg") && svg.trimEnd().endsWith("</svg>") && tagsBalanced(svg) && !shapes.includes("currentColor"), `${svg.length} chars`);
-		check("the icon uses the same square canvas as DSH's own plugin artwork", /viewBox="0 0 36 36"/u.test(svg) && /width="36"/u.test(svg) && /height="36"/u.test(svg));
-		// 只量几何属性（别去扫 xmlns 里的 2000、也别把 #324DE2 读成 324）。
-		const geometryAttributes = [...shapes.matchAll(/\b(?:d|viewBox|x|y|x1|y1|x2|y2|width|height|rx)="([^"]*)"/gu)];
-		const coordinates = geometryAttributes.flatMap((match) => [...match[1].matchAll(/-?\d+(?:\.\d+)?/gu)].map((number) => Number(number[0])));
-		check("every coordinate stays inside the 36×36 canvas", coordinates.length > 0 && coordinates.every((value) => value >= 0 && value <= 36), `${coordinates.length} numbers, max=${Math.max(...coordinates)}`);
-	}
-}
-
-const failed = checks.filter((entry) => !entry.ok);
-console.log(`\n${checks.length - failed.length}/${checks.length} checks passed`);
-process.exit(failed.length === 0 ? 0 : 1);