dsh-session-manager 0.7.5 → 0.7.6

package/CHANGELOG.md

@@ -2,6 +2,17 @@
 
 All notable changes to this project will be documented in this file.
 
+## 0.7.6 — 2026-11-13
+
+- Fix conditional React hooks in the session header and move dialog (#49).
+- Open sessions from their titles in the management panel and remove the redundant Open button (#54).
+- Display Migrate preset as an icon button with a hover description, accessible label, and active state, matching the other row actions.
+- Use the shared DSH tooltip for session row priority badges instead of the browser's native title tooltip.
+- Stream session headers from first Zstd frames larger than 1 MiB, whether compressed or decompressed, without buffering the entire frame output. Preserve the header-line size limit and validate the complete first frame and its checksum before accepting the header (#53).
+- Delete projection checkpoints through the host storage queue for single, batch, and cascaded subagent deletion. Prevent delayed writes from recreating deleted lifecycle records, and remove matching entries from the retained legacy cache with locking and atomic replacement. Report cleanup failures without hiding successful session deletion (#50, #55).
+- Add regression tests and an optional integration test using the exact DSH `0.2.2-rc.1` cache and storage packages.
+- Manually verified with the official DSH Desktop `0.2.2-rc.1`.
+
 ## 0.7.5 — 2026-10-22
 
 - **fix(security)**: Enforce centralized API authentication on all `/session-manager/api/*` routes using DSH official `ctx.connection.admit(req)`. Enforce strict Owner-only authorization (`peer.principal.kind === "owner"`), reject untrusted, unauthenticated, empty, or non-owner requests before body reading and database queries, and fail closed with HTTP 503 (`auth-unavailable`) if connection service is missing or unready, preventing unauthorized access across public tunnels, reverse proxies, and local networks (#43).

package/README.md

@@ -12,13 +12,14 @@ English | [中文](README.zh.md)
 
 DeepSeek Harness session and workspace manager —— Workspaces: archive and visibility. Sessions: move, migrate presets, delete, favorite, review later, prioritize, tag, and annotate. Batch operations.
 
-Verified with the official DSH Desktop client; see [5 Compatibility](#5-compatibility) for the current verification scope. Both environments share the same plugin Host/client functionality; environment-specific installation notes are documented below.
+The Web UI and Desktop app share the same plugin Host/client functionality; environment-specific installation notes are documented below.
 
 ## 1 Features
 
 ### 1.1 Session lifecycle management
 
 - **Delete** is irreversible and always asks for confirmation. Subagent sessions and transient blank placeholders (no persisted artifact) cannot be deleted.
+- **Projection cache cleanup (DSH 0.2.2-rc.1)**: session deletion also removes its checkpoint and retained legacy cache entry, including cascaded subagents and batch deletion. Delayed writes from the deleted lifecycle are blocked. Cleanup failures are reported as warnings; they do not undo session deletion.
 - **Archive / Unarchive** moves a session in and out of the active list without touching its disk content.
 - **Move to workspace** keeps history, title, archive state and derived-session relationships intact, rewrites the session's `cwd` to the target workspace, synchronizes the runtime `workingDirectory` projection for active agents, and updates the live writer's header in place so any pending tool calls keep landing on the new path. When the session's `cwd` already equals the target workspace path but its membership was never recorded, only the missing membership is repaired: no `cwd` rewrite, no artifact rewrite or move, and no session restart.
 - **Migrate Agent preset** rewrites the latest `agent-preset/selected` event (or the session header if no such event exists) so a session whose preset was renamed or removed can resume. Message history is never altered.
@@ -70,7 +71,7 @@ The right side of the title area exposes actions for the **current session**: **
 
 ### 2.2 Sessions and workspaces management entry and interface
 
-Open **Sessions & Workspaces** from the bottom of DSH's sidebar to browse all sessions and workspaces: the session management tab supports switching workspaces, searching by title / ID / notes / tags, applying filters and sorting, and running **Open / Archive / Unarchive / Tags / Notes / Move / Migrate preset / Delete** on any session row; the workspace management tab supports searching, sorting, bulk actions, and visibility toggling.
+Open **Sessions & Workspaces** from the bottom of DSH's sidebar to browse all sessions and workspaces. Click a session title to open it; there is no separate Open button. Row actions, including **Migrate preset**, use icons with hover descriptions and accessible labels. The session tab supports switching workspaces, searching by title / ID / notes / tags, filtering, and sorting; the workspace tab supports searching, sorting, bulk actions, and visibility toggling.
 
 ### 2.3 Bulk management
 
@@ -142,12 +143,11 @@ After changing plugin dependencies, `package.json`, bundle configuration, or oth
 
 ## 5 Compatibility
 
-The table below lists verified version combinations between DeepSeek Harness (DSH) and `dsh-session-manager`.
+The table below lists compatible version combinations between DeepSeek Harness (DSH) and `dsh-session-manager`.
 
-> **Verification note**: From version 0.6.3 onwards, this plugin is verified with the official DSH Desktop client only (the Web UI shares the same Host/client codebase but is no longer covered by the verification matrix).
-
-| DeepSeek Harness (DSH) | dsh-session-manager | Verified Environment |
+| DeepSeek Harness (DSH) | dsh-session-manager | Environment |
 | :--- | :--- | :--- |
+| **v0.2.2-rc.1** | `0.7.6` | Desktop |
 | **v0.2.1-rc.2** | `0.7.5`, `0.7.4`, `0.7.3`, `0.7.2` | Desktop |
 | **v0.2.0-rc.2** | `0.7.1`, `0.7.0`, `0.6.4`, `0.6.3`, `0.6.2`, `0.5.4` | Desktop |
 | **v0.1.7-rc.2** | `0.5.3` | Desktop / Web UI |
@@ -159,8 +159,6 @@ The table below lists verified version combinations between DeepSeek Harness (DS
 | **v0.1.2-rc.1** | `0.4.0` | Web UI |
 | **v0.1.0-rc.7** | `0.1.2`, `0.1.1`, `0.1.0` | Web UI |
 
-The version combinations above have been tested with either the official Web UI or Desktop app. Other version combinations may also work but have not been individually verified.
-
 When using a standalone DSH CLI/runtime, Node.js 22.15+ (22.x) or 24+ is required for built-in Zstd support. The official Desktop app ships and manages its matching runtime separately.
 
 This is a Cordis plugin and declares `cordis: ">=4.0.0-rc <5"` as its peer dependency.

package/README.zh.md

@@ -12,13 +12,14 @@
 
 DSH 会话与工作区管理——工作区：归档与显示。会话：跨工作区移动、预设迁移、删除；收藏、待回看、优先级、标签、备注。批量操作。
 
-已在官方 DSH Desktop 客户端完成实际测试，当前验证范围见「5 兼容性」；两种环境共用本插件的 Host 与客户端功能，具体安装方式见下文。
+Web UI 与 Desktop 共用本插件的 Host 与客户端功能，具体安装方式见下文。
 
 ## 1 功能
 
 ### 1.1 会话生命周期管理
 
 - **删除**：不可逆操作，UI 始终要求二次确认。subagent 会话和尚未落盘的空白会话占位不能删除。
+- **投影缓存清理（DSH 0.2.2-rc.1）**：删除会话时同时清理其 checkpoint 与旧版聚合缓存条目，覆盖批量删除和级联子智能体删除，并阻止已删生命周期的延迟写回。清理失败会返回警告，不会撤销已完成的会话删除。
 - **归档 / 移出归档**：把会话移出或移回主列表，不删除磁盘内容。
 - **移动至工作区**：跨工作区移动时保留历史、标题、归档状态和派生会话关系，同时把 `cwd` 重写为目标工作区，实时同步活动 Agent 的运行时 `workingDirectory` 投影，并就地更新 live writer 的 header，使挂起的工具调用继续落到新路径。若会话的 `cwd` 本来就等于目标工作区、只是归属未登记，则只补全归属记录，不改写 `cwd`、不重写或移动工件、不重启会话。
 - **迁移 Agent 预设**：原预设被改名或删除导致会话无法恢复时，可修复该会话。迁移会就地重写最后一条 `agent-preset/selected` 事件（若从未记录则修改会话 header），不改动历史消息。
@@ -68,7 +69,7 @@ DSH 会话与工作区管理——工作区：归档与显示。会话：跨工
 
 ### 2.2 会话与工作区管理入口与界面
 
-从 DSH 侧边栏底部进入 **会话与工作区**，可浏览全部会话与工作区：会话管理页支持切换工作区、按标题 / ID / 备注 / 标签搜索、应用筛选与排序，并对每条会话执行 **打开 / 归档 / 移出归档 / 标签 / 备注 / 移动 / 迁移预设 / 删除** 操作；工作区管理页支持搜索、排序、批量处理与显示开关切换。
+从 DSH 侧边栏底部进入 **会话与工作区**，可浏览全部会话与工作区。点击会话名称即可打开会话，不再提供独立的「打开」按钮。行操作（含 **迁移预设**）统一使用图标，并提供悬停提示与无障碍名称。会话管理页支持切换工作区、按标题 / ID / 备注 / 标签搜索、筛选与排序；工作区管理页支持搜索、排序、批量处理与显示开关切换。
 
 ### 2.3 批量管理入口
 
@@ -140,12 +141,11 @@ dsh plugin --profile web add <本仓库路径>
 
 ## 5 兼容性
 
-下表列出 DeepSeek Harness（DSH）与 `dsh-session-manager` 已验证的版本组合。
+下表列出 DeepSeek Harness（DSH）与 `dsh-session-manager` 的兼容版本组合。
 
-> **版本验证说明**：自 0.6.3 起，本插件仅在官方 DSH Desktop 客户端上进行验证（Web UI 与本插件共用同一套 Host / 客户端代码，但不再纳入常规验证范围）。
-
-| DeepSeek Harness (DSH) | dsh-session-manager | 验证环境 |
+| DeepSeek Harness (DSH) | dsh-session-manager | 环境 |
 | :--- | :--- | :--- |
+| **v0.2.2-rc.1** | `0.7.6` | Desktop |
 | **v0.2.1-rc.2** | `0.7.5`, `0.7.4`, `0.7.3`, `0.7.2` | Desktop |
 | **v0.2.0-rc.2** | `0.7.1`, `0.7.0`, `0.6.4`, `0.6.3`, `0.6.2`, `0.5.4` | Desktop |
 | **v0.1.7-rc.2** | `0.5.3` | Desktop / Web UI |
@@ -157,8 +157,6 @@ dsh plugin --profile web add <本仓库路径>
 | **v0.1.2-rc.1** | `0.4.0` | Web UI |
 | **v0.1.0-rc.7** | `0.1.2`, `0.1.1`, `0.1.0` | Web UI |
 
-以上版本组合已在官方 Web UI 或 Desktop 客户端中完成测试。其他版本组合可能同样兼容，但未逐一验证。
-
 使用独立 DSH CLI / runtime 时，需要 Node.js 22.15+（22.x）或 24+，以提供内置 Zstd 支持。官方 Desktop 客户端单独携带并管理与其版本匹配的 runtime。
 
 本插件是 Cordis 插件，peer dependency 为 `cordis: ">=4.0.0-rc <5"`。

package/lib/client.js

@@ -728,7 +728,7 @@ function isTopmostDialog(z) {
       ".sm-rowCurrent{border-color:var(--dsw-alias-state-business-primary,var(--dsw-alias-label-secondary))}",
       ".sm-rowMain{min-width:0;display:flex;flex-direction:column;gap:2px;flex:1 1 280px}",
       ".sm-rowTitle{color:var(--dsw-alias-label-primary);font-size:13px;line-height:20px;display:flex;align-items:center;gap:6px;min-width:0}",
-      ".sm-rowTitle>span:first-child{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}",
+      ".sm-rowTitle>span:first-child{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.sm-rowTitleButton{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;border:0;padding:0;background:transparent;color:inherit;font:inherit;text-align:left;cursor:pointer}.sm-rowTitleButton:hover{text-decoration:underline}",
       ".sm-rowMeta{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:16px;white-space:nowrap;text-overflow:ellipsis;overflow:hidden}",
       ".sm-rowActions{display:flex;gap:4px;flex:none;flex-wrap:wrap;justify-content:flex-end}",
       ".sm-badge{flex:none;border-radius:999px;padding:0 6px;font-size:10px;line-height:16px}",
@@ -2585,6 +2585,20 @@ function isTopmostDialog(z) {
       );
     }
 
+    function PresetIcon() {
+      return h("svg", {
+        viewBox: "0 0 24 24", width: 14, height: 14,
+        fill: "none", stroke: "currentColor", strokeWidth: "1.5",
+        strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true",
+        style: { display: "block" }
+      },
+        h("path", { d: "M3 6h3m4 0h11M3 12h11m4 0h3M3 18h5m4 0h9" }),
+        h("circle", { cx: 8, cy: 6, r: 2 }),
+        h("circle", { cx: 16, cy: 12, r: 2 }),
+        h("circle", { cx: 10, cy: 18, r: 2 })
+      );
+    }
+
     function HeaderEllipsisIcon(props = {}) {
       const size = props.size || 14;
       return h("svg", {
@@ -3019,7 +3033,9 @@ function isTopmostDialog(z) {
           h("div", { className: "sm-bulkResultList" },
             group.map((item, i) => h("div", { key: (item.sessionId || i) + "-" + i, className: "sm-bulkResultItem", title: item.sessionId || "" },
               h("div", { className: "sm-bulkResultItemTitle" }, item.displayTitle || item.sessionId || "—"),
-              reasonClass && (item.reason || item.error) ? h("div", { className: reasonClass }, item.reason || item.error) : null
+              reasonClass && (item.reason || item.error) ? h("div", { className: reasonClass }, item.reason || item.error) : null,
+              Array.isArray(item.warnings) && item.warnings.length > 0
+                ? h("div", { className: "sm-warn", role: "status" }, item.warnings.filter(warning => typeof warning === "string").join("\n")) : null
             ))
           )
         );
@@ -3661,6 +3677,7 @@ function isTopmostDialog(z) {
           window.removeEventListener("click", clickHandler, true);
         };
       }, [open, zIndex]);
+      const floatingCoords = useFloatingPosition(props.anchor, open, { placement: "bottom-end", dialogWidth: 360, dialogHeight: 320 });
       if (!open) return null;
 
       const isSame = Boolean(selectedWorkspaceId && currentWorkspaceId && selectedWorkspaceId === currentWorkspaceId);
@@ -3694,7 +3711,6 @@ function isTopmostDialog(z) {
           onConfirm(selectedWorkspaceId);
         }
       };
-      const floatingCoords = useFloatingPosition(props.anchor, open, { placement: "bottom-end", dialogWidth: 360, dialogHeight: 320 });
       const topPx = floatingCoords ? floatingCoords.top : (props.anchor && typeof props.anchor.top === "number" ? props.anchor.top : null);
       const leftPx = floatingCoords ? floatingCoords.left : (props.anchor && typeof props.anchor.left === "number" ? props.anchor.left : null);
       const isCentered = Boolean(floatingCoords && floatingCoords.centered);
@@ -3927,7 +3943,7 @@ function isTopmostDialog(z) {
       ));
     }
 
-    const CURRENT_VERSION = "0.7.5";
+    const CURRENT_VERSION = "0.7.6";
 
     function compareSemver(v1, v2) {
       if (typeof v1 !== "string" || typeof v2 !== "string") return 0;
@@ -5125,6 +5141,15 @@ function isTopmostDialog(z) {
         const mark = annotationOf(annotations, s.id);
         const isSelected = selectedIds.has(s.id);
         const isWsArchived = isSessionWorkspaceArchived(s);
+        const openRow = () => {
+          if (isArchived) {
+            if (isWsArchived) {
+              if (typeof window !== "undefined" && typeof window.alert === "function") window.alert(t("error.workspaceArchived"));
+              return;
+            }
+            runRow(s.id, async () => { await onUnarchive(s.id); await onOpen(s.id); });
+          } else onOpen(s.id);
+        };
         const checkbox = (selectedIds.size === 0 && !selectModeEnabled)
           ? null
           : h("label", { className: "sm-bulkRowCheckbox", onClick: (e) => e.stopPropagation() },
@@ -5144,7 +5169,7 @@ function isTopmostDialog(z) {
           h("div", { className: "sm-rowCheckboxSlot" + ((selectedIds.size > 0 || selectModeEnabled) ? " sm-rowCheckboxSlot-visible" : "") }, checkbox),
           h("div", { className: "sm-rowMain" },
             h("div", { className: "sm-rowTitle" },
-              h("span", null, s.blank ? t("panel.session.new") : (s.displayTitle || s.id)),
+              h("button", { type: "button", className: "sm-rowTitleButton", title: t("row.open"), "aria-label": t("row.open") + ": " + (s.blank ? t("panel.session.new") : (s.displayTitle || s.id)), disabled: busy || bulkBusy, onClick: openRow }, s.blank ? t("panel.session.new") : (s.displayTitle || s.id)),
               isWsArchived ? h("span", { className: "sm-badge sm-badgeWorkspaceArchived" }, t("panel.workspaceArchived")) : null,
               isArchived ? h("span", { className: "sm-badge sm-badgeArchived" }, t("panel.archived")) : null,
               s.running ? h("span", { className: "sm-badge sm-badgeRunning" }, t("panel.running")) : null,
@@ -5152,14 +5177,13 @@ function isTopmostDialog(z) {
             ),
             h("div", { className: "sm-rowSecondary" },
               h("div", { className: "sm-rowBadges" },
-                h("span", { className: "sm-priorityBadge sm-priority-" + (mark.priority ?? 3), title: t("marks.priority." + (mark.priority ?? 3)) }, "P" + (mark.priority ?? 3)),
+                renderTip(t("marks.priority." + (mark.priority ?? 3)), h("span", { className: "sm-priorityBadge sm-priority-" + (mark.priority ?? 3), "aria-label": t("marks.priority." + (mark.priority ?? 3)) }, "P" + (mark.priority ?? 3))),
                 mark.tags.slice(0, 2).map(tag => h("button", { key: tag, type: "button", className: "sm-tagChip", title: tag, onClick: () => setTagFilter("tag:" + tag.toLowerCase()) }, tag)),
                 mark.tags.length > 2 ? h("span", { title: mark.tags.join(", ") }, "+" + (mark.tags.length - 2)) : null,
                 mark.note ? h("button", { type: "button", className: "sm-noteBadge", title: t("marks.note.exists"), onClick: () => { setAnnotationAnchor(null); setAnnotationFor(current => current?.id === s.id ? null : s); } }, "✎") : null
               ),
               h("div", { className: "sm-rowMeta" }, shortPath(s.cwd) + (s.cwd ? " · " : "") + formatRelative(s.updatedAt, now)),
               h("div", { className: "sm-rowActions" },
-                h("button", { type: "button", className: "sm-rowBtn", disabled: busy, onClick: () => { if (isArchived) { if (isWsArchived) { if (typeof window !== "undefined" && typeof window.alert === "function") { window.alert(t("error.workspaceArchived")); } return; } /* DSH refuses to surface an archived session as the current view: clicking "Open" on an archived row flashes an empty chat panel and bounces back to "no session selected". Unarchive first, then open. (issue #17.4) */ runRow(s.id, async () => { await onUnarchive(s.id); await onOpen(s.id); }); } else { onOpen(s.id); } } }, t("row.open")),
                 renderTip(t(isArchived ? "row.unarchive" : "row.archive"), h("button", {
                   type: "button",
                   className: "sm-rowBtn sm-rowBtnIcon" + (isArchived ? " sm-rowBtnActive" : ""),
@@ -5192,7 +5216,16 @@ function isTopmostDialog(z) {
                   h("span", { className: "sm-headerBtnIcon" }, HeaderMoveIcon()),
                   h("span", { className: "sm-rowBtnLabel" }, t("row.move"))
                 )),
-                h("button", { type: "button", className: "sm-rowBtn", disabled: busy, onClick: () => { if (migrateFor && migrateFor.id === s.id) setMigrateFor(null); else setMigrateFor(s); } }, t("row.migrate")),
+                renderTip(t("row.migrate"), h("button", {
+                  type: "button",
+                  className: "sm-rowBtn sm-rowBtnIcon" + (migrateFor && migrateFor.id === s.id ? " sm-rowBtnActive" : ""),
+                  disabled: busy,
+                  "aria-label": t("row.migrate") + ": " + (s.displayTitle || s.id),
+                  onClick: () => { if (migrateFor && migrateFor.id === s.id) setMigrateFor(null); else setMigrateFor(s); }
+                },
+                  h("span", { className: "sm-headerBtnIcon" }, PresetIcon()),
+                  h("span", { className: "sm-rowBtnLabel" }, t("row.migrate"))
+                )),
                 renderTip(t("row.delete"), h("button", {
                   type: "button",
                   className: "sm-rowBtn sm-rowBtnDanger sm-rowBtnIcon" + (confirmFor && confirmFor.id === s.id ? " sm-rowBtnActive" : ""),
@@ -6089,16 +6122,15 @@ function isTopmostDialog(z) {
       // <div data-slot-error="…" />, taking every title-bar button down
       // and leaving 移动 / 删除 with no click target. Compute the value
       // here once per render, then reuse the captured const in handlers.
+      const sessionsSnapshot = useSessions ? useSessions((s) => s) : null;
       const displayTitle = (() => {
         const fallback = props.displayTitle;
         if (fallback && fallback !== sessionId) return fallback;
-        const list = useSessions ? useSessions((s) => s) : null;
-        const found = list ? list.byId[sessionId] : null;
+        const found = sessionsSnapshot ? sessionsSnapshot.byId[sessionId] : null;
         return (found && found.displayTitle) || "";
       })();
       const currentWorkspaceId = (() => {
-        const list = useSessions ? useSessions((s) => s) : null;
-        const found = list ? list.byId[sessionId] : null;
+        const found = sessionsSnapshot ? sessionsSnapshot.byId[sessionId] : null;
         return (found && found.workspaceId) || props.workspaceId || "";
       })();
       const annotations = useAnnotations();

package/lib/compat/projection-cache-delete.js

@@ -0,0 +1,110 @@
+import * as fs from "node:fs/promises";
+import { join } from "node:path";
+import { randomBytes } from "node:crypto";
+import { setTimeout as delay } from "node:timers/promises";
+import { assertSessionId, replaceSessionFile } from "../session-files.js";
+
+// rc.1 cache.write() may await sessions.flush() before reaching table.put().
+// A queue barrier alone cannot drain such a delayed writer. Keep a lifecycle
+// tombstone at the table entry point: queued puts precede delete(), later puts
+// of the deleted lifecycle are ignored. A recreated id with a new identity is
+// independent. The guard lives with the table (including across plugin reloads).
+const guards = new WeakMap();
+const lifecycleKey = identity => Number.isSafeInteger(identity?.createdAt)
+  ? JSON.stringify([identity.createdAt, identity.cwd ?? null, identity.isSeeded ?? false])
+  : undefined;
+export function beginProjectionCacheDeletion(cache, id, header) {
+  assertSessionId(id);
+  const table = typeof cache?.requireTable === "function" ? cache.requireTable() : cache?.table;
+  if (!table || !["get", "put", "delete"].every(key => typeof table[key] === "function")) return undefined;
+  let guard = guards.get(table);
+  if (!guard) {
+    const removed = new Map();
+    const put = table.put;
+    table.put = function(key, record) {
+      if (removed.get(key)?.has(lifecycleKey(record?.identity))) return Promise.resolve();
+      return put.call(this, key, record);
+    };
+    guard = { removed };
+    guards.set(table, guard);
+  }
+  const identity = table.get(id)?.identity;
+  const stamps = [header, identity].map(lifecycleKey).filter(key => key !== undefined);
+  if (!stamps.length && (header || identity)) throw new Error("无法确认投影缓存的会话生命周期");
+  const previous = guard.removed.get(id);
+  const blocked = new Set([...(previous ?? []), ...stamps]);
+  guard.removed.set(id, blocked);
+  return {
+    remove: () => table.delete(id),
+    legacyRetained: table.host?.unit?.descriptor?.layout === "per-record",
+    legacyManaged: Boolean(table.host?.unit?.descriptor) && table.host.unit.descriptor.layout !== "per-record",
+    rollback() {
+      if (guard.removed.get(id) !== blocked) return;
+      if (previous) guard.removed.set(id, previous); else guard.removed.delete(id);
+    }
+  };
+}
+
+async function regular(path, directory = false) {
+  const info = await fs.lstat(path);
+  if (info.isSymbolicLink() || !(directory ? info.isDirectory() : info.isFile())) {
+    throw new Error("投影缓存路径不是安全的普通" + (directory ? "目录" : "文件") + ": " + path);
+  }
+}
+
+export async function assertProjectionCachePath(home, id) {
+  assertSessionId(id);
+  const paths = [home, join(home, "storages"), join(home, "storages", "session_projcache"),
+    join(home, "storages", "session_projcache", "sessions"), join(home, "storages", "session_projcache", "sessions", `${id}.json`)];
+  for (let i = 0; i < paths.length; i++) {
+    try { await regular(paths[i], i < paths.length - 1); }
+    catch (error) { if (error.code === "ENOENT") return; throw error; }
+  }
+}
+
+/** rc.1 bootstraps but never writes its retained legacy unit. Serialize our
+ * read/modify/publish across deletes and processes; preserve its stamp/schema
+ * and every unrelated table/record. Unknown shapes fail without publication.
+ */
+export async function removeLegacyProjectionCache(home, id) {
+  assertSessionId(id);
+  const root = join(home, "storages");
+  const path = join(root, "session_projcache.json");
+  try {
+    await regular(home, true);
+    await regular(root, true);
+    await regular(path);
+  } catch (error) { if (error.code === "ENOENT") return; throw error; }
+  const lockPath = join(root, "session_projcache.session-manager.lock");
+  const token = randomBytes(16).toString("hex");
+  const deadline = Date.now() + 3000;
+  let lock;
+  while (!lock) {
+    try { lock = await fs.open(lockPath, "wx", 0o600); }
+    catch (error) {
+      if (error.code !== "EEXIST") throw error;
+      if (Date.now() >= deadline) throw new Error("投影缓存清理锁正被占用: " + lockPath);
+      await delay(25);
+    }
+  }
+  let stamped = false;
+  try {
+    await lock.writeFile(token);
+    stamped = true;
+    await regular(root, true);
+    await regular(path);
+    const document = JSON.parse(await fs.readFile(path, "utf8"));
+    const records = document?.tables?.sessions;
+    if (document?.unit?.name !== "session_projcache" || ![3, 4, 5, 6, 7].includes(document.unit.version)
+      || !records || typeof records !== "object" || Array.isArray(records)) {
+      throw new Error("未知的旧版投影缓存格式，未修改文件");
+    }
+    if (!Object.hasOwn(records, id)) return;
+    delete records[id];
+    const result = await replaceSessionFile(path, JSON.stringify(document) + "\n");
+    if (result.backupPath) throw new Error("旧版投影缓存已更新，但备份清理失败: " + result.backupPath);
+  } finally {
+    await lock.close();
+    if (!stamped || await fs.readFile(lockPath, "utf8").catch(() => undefined) === token) await fs.rm(lockPath, { force: true });
+  }
+}

package/lib/compat/zstd-frames.js

@@ -12,8 +12,10 @@
  *
  * @module dsh-session-manager/compat/zstd-frames
  */
-import { zstdDecompress } from "node:zlib";
+import { zstdDecompress, createZstdDecompress } from "node:zlib";
 import { promisify } from "node:util";
+import { Readable } from "node:stream";
+import { pipeline } from "node:stream/promises";
 
 const zstdDecompressAsync = promisify(zstdDecompress);
 const ZSTD_MAGIC = 0xfd2fb528;
@@ -76,6 +78,81 @@ export async function decompressZstdFrame(frame, options) {
   return zstdDecompressAsync(frame, options);
 }
 
+export function decompressZstdFirstLine(frame, limit) {
+  return new Promise((resolve, reject) => {
+    const stream = createZstdDecompress();
+    const chunks = [];
+    let size = 0;
+    let settled = false;
+    let lineFound = false;
+    const finish = (error, value) => {
+      if (settled) return;
+      settled = true;
+      stream.destroy();
+      if (error) reject(error); else resolve(value);
+    };
+    stream.on("error", error => finish(error));
+    stream.on("end", () => lineFound
+      ? finish(null, Buffer.concat(chunks, size))
+      : finish(new Error("会话头行不完整或超过大小限制")));
+    stream.on("data", chunk => {
+      if (lineFound) return;
+      const newline = chunk.indexOf(10);
+      const part = newline < 0 ? chunk : chunk.subarray(0, newline + 1);
+      size += part.length;
+      if (size > limit) return finish(new Error("会话头行不完整或超过大小限制"));
+      chunks.push(part);
+      if (newline >= 0) lineFound = true;
+    });
+    if (Buffer.isBuffer(frame)) stream.end(frame);
+    else pipeline(Readable.from(frame), stream).catch(error => finish(error));
+  });
+}
+
+/** Feed exactly the first complete frame, with bounded reads even for huge batches.
+ * Keep consuming after the first line to validate the frame/checksum before discovery.
+ */
+export async function* firstZstdFrameChunks(handle) {
+  let position = 0;
+  const exact = async size => {
+    const bytes = Buffer.alloc(size);
+    let offset = 0;
+    while (offset < size) {
+      const { bytesRead } = await handle.read(bytes, offset, size - offset, position);
+      if (!bytesRead) throw new Error("会话日志存在截断的 Zstd 帧");
+      offset += bytesRead;
+      position += bytesRead;
+    }
+    return bytes;
+  };
+  const prefix = await exact(5);
+  if (prefix.readUInt32LE(0) !== ZSTD_MAGIC) throw new Error("corrupt Zstandard session log: invalid frame magic");
+  const descriptor = prefix[4];
+  if (descriptor & 0x18) throw new Error("corrupt Zstandard session log: reserved frame-header bit");
+  yield prefix;
+  const sizeFlag = descriptor >>> 6;
+  const singleSegment = Boolean(descriptor & 0x20);
+  const dictionaryFlag = descriptor & 3;
+  const headerSize = (singleSegment ? 0 : 1) + (dictionaryFlag === 3 ? 4 : dictionaryFlag)
+    + (sizeFlag === 0 ? (singleSegment ? 1 : 0) : 1 << sizeFlag);
+  if (headerSize) yield await exact(headerSize);
+  for (;;) {
+    const header = await exact(3);
+    const block = header.readUIntLE(0, 3);
+    const type = (block >>> 1) & 3;
+    if (type === 3) throw new Error("corrupt Zstandard session log: reserved block type");
+    yield header;
+    let remaining = type === 1 ? 1 : block >>> 3;
+    while (remaining) {
+      const count = Math.min(remaining, 64 * 1024);
+      yield await exact(count);
+      remaining -= count;
+    }
+    if (block & 1) break;
+  }
+  if (descriptor & 4) yield await exact(4);
+}
+
 export async function decompressAllZstdFrames(buffer) {
   const scan = scanZstdFrames(buffer);
   if (scan.frames.length === 0) {

package/lib/index.js

@@ -29,6 +29,7 @@ import { randomBytes } from "node:crypto";
 import { createAnnotationStore } from "./annotation-store.js";
 import { createWorkspaceArchiveStore, assertWorkspaceId } from "./workspace-archive-store.js";
 import { createDshAdapter, getService, normalizeSessionHeader, compareSemver, detectPluginSource, isHmrActive, resolveProfileDir } from "./compat/dsh-adapter.js";
+import { assertProjectionCachePath, beginProjectionCacheDeletion, removeLegacyProjectionCache } from "./compat/projection-cache-delete.js";
 import { ARTIFACT_NAMES, assertSessionId, assertSessionDirectory, candidateSessionDirs, encodeFsSessionSegment, decodeFsSessionSegment, encodeProjectSegment, encodeSessionSegment, parseSessionGenerationFromFilename, readSessionHeader, readSessionFile, writeTempFile, replaceSessionFile } from "./session-files.js";
 
 export const name = "dsh-session-manager";
@@ -386,7 +387,7 @@ function verifyInstalledPackage(profileDir, expectedVersion) {
 
 export function apply(ctx) {
   try {
-    const buildId = "dsh-session-manager v0.7.5 (workspace-archive)";
+    const buildId = "dsh-session-manager v0.7.6 (workspace-archive)";
     if (typeof ctx?.logger?.info === "function") ctx.logger.info(buildId);
     else if (typeof console !== "undefined" && console?.info) console.info(buildId);
   } catch (_) { /* ignore logging failures */ }
@@ -2058,11 +2059,20 @@ ${rest}`, "utf8");
       await assertAndStopActiveSession(sessionId, true);
     }
 
+    let projectionDeletion;
+    let artifactsDeleted = false;
     try {
       // Resolve/validate before cancelling the agent or changing registry state.
       let dir = await sessionDirOf(sessionId);
       const session = ctx.sessions?.get?.(sessionId);
       let agent = safeGetAgent(sessionId);
+      try {
+        await assertProjectionCachePath(dirname(adapter.homePath("storages")), sessionId);
+        const artifact = await readSessionArtifact(sessionId, undefined, { headerOnly: true });
+        projectionDeletion = beginProjectionCacheDeletion(adapter.projectionCache, sessionId, session?.header ?? artifact?.meta);
+      } catch (error) {
+        cleanupWarnings.push("投影缓存回写防护不可用: " + safeErrorMessage(error));
+      }
 
       if (agent !== void 0) {
         // Stop any running turn (disposed-kind suppresses re-wake).
@@ -2123,6 +2133,29 @@ ${rest}`, "utf8");
         await assertSessionDirectory(adapter.homePath("sessions"), dir, sessionId);
         await rm(dir, { recursive: true, force: true });
       }
+      artifactsDeleted = true;
+
+      // Use the host queue to remove both its in-memory row and durable record.
+      // Tombstones installed before disposal also stop writes still awaiting flush.
+      try {
+        await assertProjectionCachePath(dirname(adapter.homePath("storages")), sessionId);
+        if (projectionDeletion) await projectionDeletion.remove();
+        else {
+          const file = adapter.homePath("storages", "session_projcache", "sessions", `${sessionId}.json`);
+          if (existsSync(file)) throw new Error("宿主投影缓存删除接口不可用，缓存尚未清理");
+        }
+      } catch (error) {
+        cleanupWarnings.push("会话已删除，但投影缓存清理失败: " + safeErrorMessage(error));
+      }
+      try {
+        if (projectionDeletion?.legacyRetained) await removeLegacyProjectionCache(dirname(adapter.homePath("storages")), sessionId);
+        else if (!projectionDeletion?.legacyManaged && existsSync(adapter.homePath("storages", "session_projcache.json"))) {
+          throw new Error("无法确认旧版缓存已停止写入，未修改文件");
+        }
+      }
+      catch (error) {
+        cleanupWarnings.push("会话已删除，但旧版投影缓存清理失败: " + safeErrorMessage(error));
+      }
 
       try {
         await annotations().remove(sessionId);
@@ -2152,6 +2185,7 @@ ${rest}`, "utf8");
         subagentCount: deletedSubagentIds.length
       };
     } catch (parentErr) {
+      if (!artifactsDeleted) projectionDeletion?.rollback();
       const err = deletedSubagentIds.length > 0
         ? new Error(`删除主会话 '${sessionId}' 失败: ${safeErrorMessage(parentErr)}`)
         : parentErr;
@@ -2743,7 +2777,7 @@ ${rest}`, "utf8");
           return send(res, 200, { ok: true, result });
         }
         if (req.method === "GET" && path === "/update/check") {
-          const currentVersion = adapter.pluginVersion() || "0.7.5";
+          const currentVersion = adapter.pluginVersion() || "0.7.6";
           const runningVersion = currentVersion;
           let installedVersion = runningVersion;
           const profileDir = resolveProfileDir(adapter, ctx);
@@ -2927,7 +2961,7 @@ ${rest}`, "utf8");
           };
           setActiveTask(taskRecord);
 
-          const currentVersion = adapter.pluginVersion() || "0.7.5";
+          const currentVersion = adapter.pluginVersion() || "0.7.6";
           let installedVersion = currentVersion;
           if (profileDir) {
             const pkgFile = join(profileDir, "node_modules", "dsh-session-manager", "package.json");
@@ -3457,7 +3491,7 @@ ${rest}`, "utf8");
         }
         if (req.method === "GET" && path === "/update/status") {
           const profileDir = resolveProfileDir(adapter, ctx);
-          const currentVersion = adapter.pluginVersion() || "0.7.5";
+          const currentVersion = adapter.pluginVersion() || "0.7.6";
           let installedVersion = currentVersion;
           if (profileDir) {
             const diskCheck = verifyInstalledPackage(profileDir);

package/lib/session-files.js

@@ -1,7 +1,7 @@
 import { randomBytes } from "node:crypto";
 import * as fs from "node:fs/promises";
 import { basename, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { decompressAllZstdFrames, decompressZstdFrame, scanZstdFrames } from "./compat/zstd-frames.js";
+import { decompressAllZstdFrames, decompressZstdFirstLine, firstZstdFrameChunks } from "./compat/zstd-frames.js";
 
 /**
  * Filenames tried in this order to locate a session's durable artifact.
@@ -190,20 +190,17 @@ export async function readSessionHeader(path) {
   await assertRegularFile(path);
   const handle = await fs.open(path, "r");
   try {
+    if (path.endsWith(".zstd")) {
+      const decoded = await decompressZstdFirstLine(firstZstdFrameChunks(handle), MAX_HEADER_BYTES);
+      return parseHeader(decoded.toString("utf8"));
+    }
     let buffer = Buffer.alloc(0);
     while (buffer.length < MAX_HEADER_BYTES) {
       const chunk = Buffer.alloc(Math.min(64 * 1024, MAX_HEADER_BYTES - buffer.length));
       const { bytesRead } = await handle.read(chunk, 0, chunk.length, buffer.length);
       if (bytesRead === 0) break;
       buffer = Buffer.concat([buffer, chunk.subarray(0, bytesRead)]);
-      if (path.endsWith(".zstd")) {
-        const { frames } = scanZstdFrames(buffer, 1);
-        if (frames.length) {
-          const frame = frames[0];
-          const decoded = await decompressZstdFrame(buffer.subarray(frame.start, frame.end), { maxOutputLength: MAX_HEADER_BYTES });
-          return parseHeader(decoded.toString("utf8"));
-        }
-      } else if (buffer.includes(10)) {
+      if (buffer.includes(10)) {
         return parseHeader(buffer.toString("utf8"));
       }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-session-manager",
-  "version": "0.7.5",
+  "version": "0.7.6",
   "description": "DeepSeek Harness session and workspace manager —— Workspaces: archive and visibility. Sessions: move, migrate presets, delete, favorite, review later, prioritize, tag, and annotate. Batch operations. | DSH 会话与工作区管理——工作区：归档与显示。会话：跨工作区移动、预设迁移、删除；收藏、待回看、优先级、标签、备注。批量操作。",
   "license": "MIT",
   "keywords": [