dsh-session-rollover 0.0.0-stage → 1.2.0

package/docs/r3-validation.md

@@ -0,0 +1,59 @@
+# R3 修复与验证记录
+
+本轮按“先修分卷数据与状态一致性 → 补齐界面 → 调整样式”完成 1.1.0，基于原 c43b01d 的需求/页面分析落实。工作于 2026-11-06 开始，跨日完成验证。
+
+## 已修复的问题
+
+| 领域 | 修复后的行为 | 证据 |
+| --- | --- | --- |
+| 轮次/时机 | 按真实用户消息计数，排除宿主内部上下文；第十条消息回合结束后仅分一次 | 服务端回归、真实宿主日志与 UI |
+| marker/换段 | system Handoff 和内部上下文不误降 manual；forceAuto 仍等待压缩结束 | 来源/压缩互斥回归 |
+| 快照 | todos/jobs 同刻捕获，人读与 JSON 一致；多 active、原文约束、文件线索保留 | 接线回归、真实首条卡片/剪贴板逐字段比较 |
+| 预算/失败 | 1500 字符及完整首条消息 16 KiB 硬闸；初次+两次重试持久化；建卷前存储预检 | 超限、重启、目录碰撞回归 |
+| 卷序/命名 | 真卷序与重名后缀分离；用户标题保留；超 9 名称后缀不嵌套；第九卷可转独立新簇 | 命名与上限回归 |
+| 恢复 | 索引丢失/损坏/合法但缺项均可补齐；废弃卷不参与重建；显式恢复写入不被覆盖 | 多种重启夹具 |
+| 提交后异常 | 辅助状态写盘异常不会把成功翻成失败后再次创建；degraded 可见 | 异常注入回归 |
+| 模型 | 继承失败通过公开默认模型服务回落并提示 | 接线夹具；真实宿主正常继承 |
+| UI | 标题状态、列表徽标、会话操作、首条摘要、JSON 展开/复制、来源导航、归档开关 | 真实宿主浏览器 |
+| 输入保护 | 公开 conversation.blocks 禁用输入；允许写入/恢复只读双向生效、刷新持久化 | 浏览器 contenteditable/ARIA 检查、阻塞释放回归 |
+| 样式 | 摘要三行预览/展开、长文本、原生 dialog、防裁切、深色主题、旧宿主窄徽标 | 浏览器与截图复核 |
+| 文档/入口 | README/架构说明更新；生成式 client；保留根入口与旧子路径 | 构建检查、包导出测试与实际打包导入 |
+
+旧版只覆盖提示的前端已扩展为独立 `src/client/`；保持根 client.js 的宿主加载方式。未改宿主核心，也未修改相邻 R2 仓库源码。
+
+## 自动化验证
+
+- Node.js 24.22.1 内置测试：**86/86 通过**；旧基线 67 项基础上增加 19 项回归。support 模块不计入测试数。
+- `npm run build:check` 检查生成入口与源文件一致。
+- 实际 `npm pack` 后解压，**28 个入口/源码模块导入通过**，必需发布文件齐全，清单不含运行 profile、认证信息或测试产物。
+- 原型浏览器：**14 项检查通过**，包含多入口回溯、双向只读/刷新、摘要/JSON 展开和复制、展开后滚动、快照不随任务续跑变化、37% 进度一致及重置。
+
+机器结果：[真实宿主](./live-host-validation.json)、[原型](./prototype-validation.json)。打包与单元测试应在发布前再次使用上方命令复验。
+
+## 真实宿主验证范围
+
+使用本机已安装的 DeepSeek Harness，以独立 `DSH_HOME` 和 `r3-review` Web profile 启动，旁挂 R2/R3；模型请求接入本地 OpenAI 兼容夹具，不使用生产密钥。
+
+实际过程发送十条用户消息，其中宿主还产生多条 `runtime-context` / `skill-catalog` / `time-context` user/message；统计结果仍为旧卷 10、新卷 0，只产生一个接续卷。新卷首条交接含 8 项待办、当前第 4 步，夹具通过真实 `todo_write` 完成第 4 步并启动第 5 步，右侧 R2 更新到 4/8、50%；历史 JSON 保持第 4 步时的原始快照。
+
+后续在同一对已生成会话上继续浏览器复验，并重启宿主复验恢复：卡片/剪贴板与后端逐字段一致、来源跳转留在旧卷、readonly/可写双向设置跨刷新、contenteditable 真正禁用、旧宿主 leading 徽标回退，以及通过系统色彩偏好触发的宿主真实深色主题。最终浏览器记录无页面/控制台错误和失败资源请求。
+
+中途测试暴露并修复了两个夹具没有覆盖的宿主差异：内部 user/message 来源不能当人类发言；输入组件子槽不能被普通包装/重复声明。因此最终改用公开 `conversation.blocks`，并为释放与其他阻塞原因共存增加测试。
+
+![真实宿主分卷与 R2 续接](./screenshots/host-rollover.png)
+
+![归档只读](./screenshots/host-archived.png)
+
+![真实深色主题](./screenshots/host-dark.png)
+
+## 原型同步
+
+仓库 [r3-demo.html](./r3-demo.html) 修复原 R3 页面的演示状态：统一旧卷 ID、多入口共享状态、双向只读持久化、真实摘要/JSON 展开、全部继承任务来源标识、任务续跑不篡改历史、清除状态后重置。3/8 进度与当前 R2 `Math.floor` 口径统一为 37%。旧八段注入默认关闭，仅作为兼容示意。
+
+用户原路径的 HTML 已同步为验证版，覆盖前比对原始哈希并保留同目录 `v0.1.before-r3-fix.html` 备份。原型仍是固定数据、单次分卷演示，不作为真实模型运行证据。
+
+## 验收边界
+
+本轮已完成代码修复、隔离宿主 Web 与固定模型工具接续验证；未据此重新宣称全部历史 AC 或 Bot 群端验收通过。生产模型输出质量、真实后台进程跨卷运行及 Bot 群消息端仍需在对应目标环境验收；后台任务当前仅传句柄/状态，不迁移进程。
+
+宿主会话和多个 JSON 文件不是原子数据库事务；存储异常已预检、补偿、恢复并暴露降级，但不能保证断电/多文件同时损坏时零损失。索引恢复依赖宿主仍保留交接消息和有效来源。测试进程已使用独立 profile，用户默认 profile/凭据未参与修改。

package/index.js

@@ -0,0 +1,2 @@
+// 稳定的服务端包入口；实现位于 server 层，默认与具名导出保持兼容。
+export {default, SessionRolloverPlugin} from './src/server/plugin.mjs';

package/locale/en.json

@@ -0,0 +1,7 @@
+{
+  "meta": {
+    "title": "dsh-session-rollover",
+    "description": "Split long conversations into volumes with todo handoff snapshots, source navigation and read-only archives in DSH Web and desktop.",
+    "detail": "docs/DETAIL.md"
+  }
+}

package/locale/zh.json

@@ -0,0 +1,7 @@
+{
+  "meta": {
+    "title": "dsh-session-rollover",
+    "description": "长会话自动分卷，携带待办交接快照继续工作；支持来源回溯、归档只读和 Web / 桌面客户端。",
+    "detail": "docs/DETAIL.zh-CN.md"
+  }
+}

package/marketplace/Oak-liuhj__dsh-session-rollover.yml

@@ -0,0 +1,7 @@
+url: https://github.com/Oak-liuhj/dsh-session-rollover
+name: Oak-liuhj/dsh-session-rollover
+category: session
+description:
+  en: 'Split long DSH conversations into volumes with todo handoff snapshots, source navigation and read-only archives.'
+  zh: '长会话自动分卷，携带待办交接快照继续工作，支持来源回溯与归档只读。'
+icon: https://raw.githubusercontent.com/Oak-liuhj/dsh-session-rollover/main/assets/icon.png

package/marketplace/SUBMISSION.md

@@ -0,0 +1,37 @@
+# 市场投稿材料
+
+## 投稿记录
+
+2026-11-09 已提交首次上架 PR：[awesome-dsh-plugin/awesome-dsh-plugin#13453](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/13453)。
+
+- 插件版本：`1.1.1`，投稿时已发布源码提交为 `541321a91e77942ba23bcc19267b2d5a8a79ccbf`。
+- 投稿分支：`Oak-liuhj:codex/add-dsh-session-rollover`。
+- 唯一新增文件：`data/plugins/Oak-liuhj__dsh-session-rollover.yml`。
+- 校验与审核的实时状态以 PR 页面为准。提交 PR 不等于市场已收录；正式收录还需维护者合并及目录后续构建。
+
+## npm 发布记录
+
+2026-11-11 **13:51（北京时间）**，`dsh-session-rollover@1.1.1` 已正式发布到 [npm](https://www.npmjs.com/package/dsh-session-rollover/v/1.1.1)。npm 发布账号为 `oak-ai`，插件作者与 GitHub 仓库所有者为 `Oak-liuhj`。
+
+- npm 官方源与腾讯镜像的 `latest` 均已确认为 `1.1.1`。
+- 下载的 tgz 与审核通过的原包一致，SHA1 为 `cbe802fe44f8ae14da3eebc8d6a92e3468609ab5`，SHA512 integrity 也已核对。
+- 两个源均已通过按包名隔离安装；已验证服务端入口导入、挂载补丁、预构建客户端、图标、双语资源及许可证文件。
+- 用户可在「填入插件 npm 包名」中输入 `dsh-session-rollover`；CLI 桌面 profile 示例为 `dsh plugin --profile desktop add dsh-session-rollover`。
+
+本次验证未改动生产 DSH profile；正式版本发布与市场目录收录分别核实，npm 的 `0.0.0-stage` 占位版本不作为发布成功依据。
+
+## 投稿规则与材料
+
+投稿目录为 [awesome-dsh-plugin/awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin)，市场应用代码仓库 `dsh-market/dsh-market` 不是插件条目的投稿目标。规则来源：[contributing.md](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/blob/main/contributing.md)（核对于 2026-11-07）。
+
+仅新增 `data/plugins/Oak-liuhj__dsh-session-rollover.yml`，内容使用本目录同名文件；不手改自动生成的 README，不增加 npm/version/tags 等非目录字段。
+
+建议 PR 标题：`Add Oak-liuhj/dsh-session-rollover`
+
+建议 PR 正文：
+
+> Adds a community DSH session plugin that splits long conversations at safe turn boundaries, carries todo handoff snapshots and provides source navigation and read-only archives. The repository includes a DSH bundle patch, prebuilt client, English/Chinese metadata and details, a PNG icon, screenshots and both license notices. Verified against DSH 0.2.1-rc.5 with automated regression tests and an isolated local-model fixture; Bot group channels are not fully validated.
+
+提交前确认公开 main 分支或安装目标包含 `client.js`、图标和截图；仓库 topic 包含 `dsh-plugin`，创建满一天。仓库创建时间核对为 2026-11-06 06:45:34 UTC，最早满一天时间为北京时间 **2026-11-07 14:45:34**。npm 发布可选，未发布 npm 时使用 GitHub 安装源。
+
+本目录的 YAML 已通过上述 PR 提交。市场收录、npm 发布和 GitHub Release 是独立状态；首次市场投稿未包含 npm 发布，后续 npm 发布见上方记录。本记录不表示已创建 GitHub Release。

package/package.json

@@ -1,6 +1,105 @@
 {
   "name": "dsh-session-rollover",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.2.0",
+  "type": "module",
+  "description": "DSH 会话分卷与续接：自动分卷、待办交接快照、来源回溯和归档只读，支持 Web 与桌面客户端。",
+  "main": "index.js",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./src/*": "./src/*",
+    "./package.json": "./package.json",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./assets/icon.png"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "src/",
+    "scripts/",
+    "assets/",
+    "locale/",
+    "screenshots.json",
+    "cordis.patch.yml",
+    "README.md",
+    "CHANGELOG.md",
+    "NOTICE",
+    "LICENSE",
+    "LICENSE.upstream",
+    "docs/DETAIL.md",
+    "docs/DETAIL.zh-CN.md",
+    "docs/PUBLISHING.md",
+    "docs/architecture.md",
+    "docs/r3-validation.md",
+    "docs/marketplace-validation.md",
+    "docs/screenshots/host-rollover.png",
+    "docs/screenshots/host-archived.png",
+    "docs/screenshots/host-dark.png",
+    "docs/screenshots/help-light.png",
+    "docs/screenshots/help-dark.png",
+    "marketplace/",
+    "compatibility/",
+    "docs/COMPATIBILITY.md",
+    "docs/r3-demo.html",
+    "docs/screenshots/prototype-fixed.png",
+    "docs/live-host-validation.json",
+    "docs/prototype-validation.json",
+    "docs/DEVELOPMENT.md"
+  ],
+  "scripts": {
+    "build": "node scripts/build-client.mjs",
+    "build:check": "node scripts/build-client.mjs --check",
+    "pretest": "npm run build",
+    "prepack": "npm run build && node scripts/check-release.mjs",
+    "test": "node --test \"test/**/*.test.mjs\"",
+    "check:release": "npm run build:check && node scripts/check-release.mjs",
+    "check:dsh": "node scripts/check-dsh-compatibility.mjs",
+    "check:package": "npm run check:release && node scripts/check-package.mjs"
+  },
+  "dsh": {
+    "manifestVersion": 1,
+    "verifiedDsh": "0.2.1-rc.5",
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-client-ui-workspace"
+      ]
+    }
+  },
+  "dsBot": {
+    "min": "0.2.6",
+    "verified": "0.2.6"
+  },
+  "license": "(Apache-2.0 AND MIT)",
+  "author": "Oak-liuhj",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Oak-liuhj/dsh-session-rollover.git"
+  },
+  "homepage": "https://github.com/Oak-liuhj/dsh-session-rollover#readme",
+  "bugs": {
+    "url": "https://github.com/Oak-liuhj/dsh-session-rollover/issues"
+  },
+  "keywords": [
+    "dsh-plugin",
+    "deepseek-harness",
+    "dsh",
+    "session",
+    "rollover",
+    "handoff",
+    "productivity"
+  ],
+  "icon": "assets/icon.png",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "engines": {
+    "dsh": "0.2.1-rc.5 || 0.2.2-rc.1"
+  }
+}

package/screenshots.json

@@ -0,0 +1,6 @@
+[
+  "docs/screenshots/host-rollover.png",
+  "docs/screenshots/host-archived.png",
+  "docs/screenshots/host-dark.png",
+  "docs/screenshots/help-light.png"
+]

package/scripts/build-client.mjs

@@ -0,0 +1,12 @@
+/** 无构建依赖：将独立 UI factory 嵌入 ModuleLoader 模板，保留既有 toast API。 */
+import {readFileSync, writeFileSync} from 'node:fs';
+const root = new URL('../', import.meta.url);
+const template = readFileSync(new URL('src/client/toast-client.js', root), 'utf8');
+const ui = readFileSync(new URL('src/client/rollover-ui.js', root), 'utf8').replace('export function createRolloverUI', 'function createRolloverUI');
+const {version} = JSON.parse(readFileSync(new URL('package.json', root), 'utf8'));
+const output = `// Generated by npm run build; edit src/client/. Version ${version}.\n` + template.replace('            function apply(ctx) {',
+    ui + '\n            function apply(ctx) {\n                try { createRolloverUI(require("react")).apply(ctx); } catch (e) { debug(e); }');
+const path = new URL('client.js', root);
+if (process.argv.includes('--check')) {
+    if (readFileSync(path, 'utf8') !== output) throw new Error('client.js is stale; run npm run build');
+} else writeFileSync(path, output);

package/scripts/check-dsh-compatibility.mjs

@@ -0,0 +1,44 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import {tmpdir} from 'node:os';
+import {registryJSON, publishedTargets, checkPackage} from './dsh-contracts.mjs';
+const policy = JSON.parse(await fs.readFile(new URL('../compatibility/policy.json', import.meta.url), 'utf8'));
+const args = process.argv.slice(2);
+const list = args.includes('--list');
+const target = args.find(value => !value.startsWith('--')) ?? 'latest';
+const metadata = await registryJSON(policy.registry + encodeURIComponent(policy.package));
+const versions = publishedTargets(metadata, policy.baseline);
+if (!versions.length || versions.length > 200) throw new Error('DSH compatibility matrix requires baseline maintenance');
+if (list) {
+    // 超出 GitHub matrix 上限时明确失败，要求维护者调整基线，不静默漏掉新版本。
+    console.log(JSON.stringify({version: versions}));
+} else {
+    const selected = target === 'all' ? versions : [metadata['dist-tags']?.[target] ?? target];
+    const directory = await fs.mkdtemp(path.join(tmpdir(), 'dsh-contracts-'));
+    const report = {level: 'public-declaration-smoke', runtimeVerified: false,
+        checkedAt: new Date().toISOString(), baseline: policy.baseline, targets: []};
+    try {
+        for (const version of selected) {
+            const results = [];
+            for (const contract of policy.contracts) {
+                try { results.push(await checkPackage(contract, version, policy, directory)); }
+                catch (error) { results.push({package: contract.package, version, error: String(error.message)}); }
+            }
+            const passed = results.every(result => !result.error && !result.missing?.length);
+            report.targets.push({version, passed, packages: results});
+            console.log(`${version}: ${passed ? 'PASS' : 'FAIL'} (public declarations; not runtime verification)`);
+            for (const result of results.filter(r => r.error || r.missing?.length)) console.error(JSON.stringify(result));
+        }
+        report.passed = report.targets.every(target => target.passed);
+        const output = process.env.DSH_COMPATIBILITY_REPORT ?? path.resolve('out/dsh-compatibility.json');
+        await fs.mkdir(path.dirname(output), {recursive: true});
+        await fs.writeFile(output, JSON.stringify(report, null, 2) + '\n');
+        if (!report.passed) process.exitCode = 1;
+    } finally {
+        // 只删除 mkdtemp 创建并持有的独立目录。
+        if (path.dirname(path.resolve(directory)) !== path.resolve(tmpdir()) || !path.basename(directory).startsWith('dsh-contracts-')) {
+            throw new Error('Refusing cleanup outside the owned temporary directory');
+        }
+        await fs.rm(directory, {recursive: true, force: true});
+    }
+}

package/scripts/check-package.mjs

@@ -0,0 +1,51 @@
+/** 校验真正交付的 tgz：隔离安装、稳定导出、清单和预构建浏览器入口；不接触 DSH profile。 */
+import assert from 'node:assert/strict';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import {tmpdir} from 'node:os';
+import {execFile} from 'node:child_process';
+import {promisify} from 'node:util';
+import {pathToFileURL, fileURLToPath} from 'node:url';
+import {createHash} from 'node:crypto';
+const run = promisify(execFile);
+const root = fileURLToPath(new URL('../', import.meta.url));
+const npm = process.env.npm_execpath;
+assert.ok(npm && path.basename(npm) === 'npm-cli.js', 'Run this check with npm run check:package');
+const owned = await fs.mkdtemp(path.join(tmpdir(), 'dsh-rollover-package-'));
+const output = path.join(root, 'out');
+try {
+    // 调用方已完成 build:check 和发布检查；这里禁用生命周期，确保检查同一份构建产物。
+    const packed = JSON.parse((await run(process.execPath, [npm, 'pack', '--json', '--ignore-scripts', '--pack-destination', owned],
+        {cwd: root, windowsHide: true, maxBuffer: 4 * 1024 * 1024})).stdout)[0];
+    const archive = path.join(owned, path.basename(packed.filename));
+    const install = path.join(owned, 'install');
+    await fs.mkdir(install);
+    await fs.writeFile(path.join(install, 'package.json'), '{"name":"dsh-rollover-package-check","private":true}\n');
+    await run(process.execPath, [npm, 'install', archive, '--ignore-scripts', '--no-audit', '--no-fund', '--package-lock=false'],
+        {cwd: install, windowsHide: true, maxBuffer: 4 * 1024 * 1024});
+    const installed = path.join(install, 'node_modules', 'dsh-session-rollover');
+    const manifest = JSON.parse(await fs.readFile(path.join(installed, 'package.json'), 'utf8'));
+    const entry = await import(pathToFileURL(path.join(installed, manifest.main)).href);
+    assert.equal(entry.default, entry.SessionRolloverPlugin);
+    assert.equal(typeof entry.default, 'function');
+    const files = packed.files.map(file => file.path);
+    for (const required of ['client.js', 'src/server/compatibility.mjs', 'compatibility/policy.json', 'docs/COMPATIBILITY.md']) {
+        assert.ok(files.includes(required), `Missing packed resource: ${required}`);
+    }
+    // 从安装后的目录重新校验全部面板资源和 ModuleLoader，避免只检查源码目录。
+    await run(process.execPath, [path.join(installed, 'scripts/check-release.mjs')], {cwd: installed, windowsHide: true});
+    const bytes = await fs.readFile(archive);
+    await fs.mkdir(output, {recursive: true});
+    await fs.copyFile(archive, path.join(output, packed.filename));
+    const report = {passed: true, level: 'isolated-package-install', runtimeVerified: false,
+        checkedAt: new Date().toISOString(), platform: process.platform, node: process.version,
+        name: manifest.name, version: manifest.version, files: files.length,
+        sha256: createHash('sha256').update(bytes).digest('hex'), artifact: packed.filename};
+    await fs.writeFile(path.join(output, 'package-verification.json'), JSON.stringify(report, null, 2) + '\n');
+    console.log(`Package PASS: ${manifest.name}@${manifest.version}; isolated install, exports, client and resources (${files.length} files).`);
+} finally {
+    if (path.dirname(path.resolve(owned)) !== path.resolve(tmpdir()) || !path.basename(owned).startsWith('dsh-rollover-package-')) {
+        throw new Error('Refusing cleanup outside the owned temporary directory');
+    }
+    await fs.rm(owned, {recursive: true, force: true});
+}

package/scripts/check-release.mjs

@@ -0,0 +1,76 @@
+/** 只读离线发布校验。YAML 校验限定为本项目固定模板，不作为通用解析器。 */
+import assert from 'node:assert/strict';
+import {readFile, stat, realpath} from 'node:fs/promises';
+import {fileURLToPath, pathToFileURL} from 'node:url';
+import path from 'node:path';
+import vm from 'node:vm';
+
+const root = await realpath(fileURLToPath(new URL('../', import.meta.url)));
+const pkg = JSON.parse(await readFile(path.join(root, 'package.json'), 'utf8'));
+const repo = 'https://github.com/Oak-liuhj/dsh-session-rollover';
+async function localFile(relative) {
+    assert.equal(typeof relative, 'string');
+    assert.ok(!path.isAbsolute(relative) && !relative.split(/[\\/]/).includes('..'), `Unsafe resource: ${relative}`);
+    const file = await realpath(path.resolve(root, relative));
+    assert.ok(file.startsWith(root + path.sep), `Resource escapes package: ${relative}`);
+    assert.ok((await stat(file)).isFile());
+    return file;
+}
+assert.equal(pkg.name, 'dsh-session-rollover');
+assert.match(pkg.version, /^\d+\.\d+\.\d+$/);
+assert.equal(pkg.author, 'Oak-liuhj');
+assert.equal(pkg.license, '(Apache-2.0 AND MIT)');
+assert.equal(pkg.repository.url, 'git+' + repo + '.git');
+assert.equal(pkg.bugs.url, repo + '/issues');
+assert.ok(pkg.keywords.includes('dsh-plugin'));
+assert.equal(pkg.dsh.manifestVersion, 1);
+assert.equal(pkg.dsh.client.platform, 'web');
+const compatibility = JSON.parse(await readFile(await localFile('compatibility/policy.json'), 'utf8'));
+assert.equal(compatibility.baseline, pkg.dsh.verifiedDsh);
+assert.ok(compatibility.verifiedRuntimeVersions.includes(compatibility.baseline));
+assert.ok(compatibility.verifiedRuntimeVersions.every(version => /^\d+\.\d+\.\d+(?:-[\w.-]+)?$/.test(version)));
+assert.equal(pkg.engines.dsh, compatibility.verifiedRuntimeVersions.join(' || '));
+for (const version of compatibility.verifiedRuntimeVersions.filter(version => version !== compatibility.baseline)) {
+    const evidence = JSON.parse(await readFile(await localFile(`compatibility/runtime-${version}.json`), 'utf8'));
+    assert.equal(evidence.passed, true);
+    assert.equal(evidence.runtimeVerified, true);
+    assert.equal(evidence.dsh, version);
+    assert.equal(evidence.plugin, pkg.version);
+}
+await localFile('docs/COMPATIBILITY.md');
+assert.deepEqual(Object.keys(pkg.dependencies ?? {}), []);
+assert.equal(pkg.scripts.prepare, undefined);
+assert.equal(pkg.scripts.postinstall, undefined);
+
+const patch = await readFile(await localFile(pkg.dsh.bundle.patch), 'utf8');
+assert.match(patch, /- insert:\s+\n?\s*- id: session-rollover\s+name: 'dsh-session-rollover'/);
+for (const lang of ['zh', 'en']) {
+    const {meta} = JSON.parse(await readFile(await localFile(pkg.exports['./locale/*.json'].replace('*', lang)), 'utf8'));
+    for (const key of ['title', 'description', 'detail']) assert.ok(meta[key]?.trim());
+    await localFile(meta.detail);
+}
+const icon = await readFile(await localFile(pkg.icon));
+assert.deepEqual([...icon.subarray(0, 8)], [137, 80, 78, 71, 13, 10, 26, 10]);
+assert.ok(icon.length <= 256 * 1024);
+assert.equal(icon.readUInt32BE(16), icon.readUInt32BE(20));
+const shots = JSON.parse(await readFile(await localFile('screenshots.json'), 'utf8'));
+assert.ok(Array.isArray(shots) && shots.length >= 1 && shots.length <= 8);
+for (const shot of shots) { assert.match(shot, /\.(png|jpe?g|webp)$/i); await localFile(shot); }
+
+const entry = await readFile(await localFile('marketplace/Oak-liuhj__dsh-session-rollover.yml'), 'utf8');
+assert.deepEqual(entry.split(/\r?\n/).filter(line => /^\w/.test(line)).map(line => line.split(':')[0]).sort(),
+    ['category', 'description', 'icon', 'name', 'url']);
+for (const line of [`url: ${repo}`, 'name: Oak-liuhj/dsh-session-rollover', 'category: session',
+    `icon: https://raw.githubusercontent.com/Oak-liuhj/dsh-session-rollover/main/${pkg.icon}`]) assert.ok(entry.split(/\r?\n/).includes(line));
+assert.match(entry, /^  en: '[^'\n]+\.'$/m);
+assert.match(entry, /^  zh: '[^'\n]+。'$/m);
+for (const file of ['README.md', 'CHANGELOG.md', 'LICENSE', 'LICENSE.upstream', 'NOTICE']) await localFile(file);
+const server = await import(pathToFileURL(await localFile(pkg.main)).href);
+assert.equal(typeof server.default, 'function');
+let moduleInfo;
+const client = await readFile(await localFile('client.js'), 'utf8');
+vm.runInNewContext(client, {window: {__ModuleLoader__: {load: value => { moduleInfo = value; }}}});
+assert.equal(moduleInfo.id, pkg.name, 'Client ModuleLoader id must match public package');
+assert.equal(typeof moduleInfo.factory, 'function');
+assert.ok(client.includes(`Version ${pkg.version}.`));
+console.log(`Release format PASS: ${pkg.name}@${pkg.version}; bundle, locales, PNG, ${shots.length} screenshots, catalog and runtime entries.`);

package/scripts/dsh-contracts.mjs

@@ -0,0 +1,69 @@
+/** 检查 npm 公共声明中的依赖面；不执行上游包，不把声明扫描当作真实宿主验收。 */
+import assert from 'node:assert/strict';
+import {createHash} from 'node:crypto';
+import {execFile} from 'node:child_process';
+import {promisify} from 'node:util';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+const run = promisify(execFile);
+
+export async function registryJSON(url) {
+    const response = await fetch(url, {signal: AbortSignal.timeout(30000)});
+    assert.equal(response.status, 200, `Registry unavailable: ${url} (${response.status})`);
+    return response.json();
+}
+
+/** 按官方发布时刻枚举基线之后的每个版本，包含 alpha/rc 和后续补丁。 */
+export function publishedTargets(metadata, baseline) {
+    const since = Date.parse(metadata.time?.[baseline]);
+    assert.ok(Number.isFinite(since), 'Missing baseline publication time');
+    const versions = Object.keys(metadata.versions ?? {});
+    assert.ok(versions.includes(baseline), 'Missing baseline package version');
+    for (const version of versions) {
+        assert.match(version, /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/);
+        assert.ok(Number.isFinite(Date.parse(metadata.time?.[version])), `Missing publication time: ${version}`);
+    }
+    return versions.filter(version => Date.parse(metadata.time?.[version]) >= since)
+        .sort((a, b) => Date.parse(metadata.time[a]) - Date.parse(metadata.time[b]));
+}
+
+export function inspectDeclarations(text, contract) {
+    // 去除注释，避免已删除的方法只在弃用说明中出现时误判通过。
+    const source = text.replace(/\/\*[\s\S]*?\*\/|\/\/[^\r\n]*/g, '');
+    const missing = [];
+    for (const method of contract.methods ?? []) {
+        assert.match(method, /^\w+$/);
+        if (!new RegExp(`\\b${method}\\s*(?:<[^;{}]*?>\\s*)?\\(`).test(source)) missing.push(method + '()');
+    }
+    for (const token of contract.tokens ?? []) if (!source.includes(token)) missing.push(token);
+    for (const group of contract.alternatives ?? []) {
+        if (!group.some(token => source.includes(token))) missing.push(group.join(' | '));
+    }
+    return missing;
+}
+
+export async function checkPackage(contract, version, policy, directory) {
+    const metadata = await registryJSON(policy.registry + encodeURIComponent(contract.package) + '/' + encodeURIComponent(version));
+    assert.equal(metadata.version, version);
+    assert.equal(new URL(metadata.dist.tarball).hostname, new URL(policy.registry).hostname);
+    assert.match(metadata.dist.integrity, /^sha512-[A-Za-z0-9+/=]+$/);
+    const response = await fetch(metadata.dist.tarball, {signal: AbortSignal.timeout(30000)});
+    assert.equal(response.status, 200);
+    const archive = Buffer.from(await response.arrayBuffer());
+    assert.equal('sha512-' + createHash('sha512').update(archive).digest('base64'), metadata.dist.integrity);
+    const file = path.join(directory, contract.package.replace(/[^\w-]/g, '_') + '.tgz');
+    await fs.writeFile(file, archive);
+    const {stdout} = await run('tar', ['-tzf', file], {windowsHide: true, maxBuffer: 4 * 1024 * 1024});
+    const declarations = stdout.split(/\r?\n/).filter(name => /^package\/lib\/.*\.d\.ts$/.test(name));
+    assert.ok(declarations.length > 0, 'Missing public type declarations');
+    let text = '';
+    for (let offset = 0; offset < declarations.length; offset += 40) {
+        const names = declarations.slice(offset, offset + 40);
+        assert.ok(names.every(name => !name.split('/').includes('..') && !name.includes('\\')));
+        // 只读 tar stdout，不把上游归档解压到任何宿主目录。
+        text += (await run('tar', ['-xOf', file, ...names], {windowsHide: true, maxBuffer: 16 * 1024 * 1024})).stdout + '\n';
+    }
+    return {package: contract.package, version, integrity: metadata.dist.integrity,
+        declarations: declarations.length,
+        missing: inspectDeclarations(text, {...contract, ...contract.versionOverrides?.[version]})};
+}

package/src/application/handoff-message.mjs

@@ -0,0 +1,53 @@
+// 交接消息排版与模式检测输入转换；不访问宿主或文件系统。
+import {todosMarkdown} from '../domain/handoff.mjs';
+import {textOf} from '../domain/summary.mjs';
+
+/** 事件 → 分段检测用的 {text} 列表（只读文本，不猜结构）。
+ *  宿主真实事件把用户正文放在 data.content[].text（user/message、assistant/message），
+ *  只有测试夹具用扁平 {text}；三种形态都读，否则 markers 在真机恒 false（AC-R3-9 实拍发现的缺陷）。 */
+export function eventsToMessages(events) {
+    return events.map((e) => {
+        const type = e.type ?? e.kind;
+        const source = e.data?.source ?? e.source;
+        return {type, text: textOf(e), internal: textOf(e).startsWith('【分卷交接】') ||
+            (type === 'user/message' && !!source?.kind && source.kind !== 'user')};
+    });
+}
+
+/**
+ * 注入正文（新会话首条 user/message）。刻意不含 "[Checkpoint N]"/"[Handoff · part N]" 形态：
+ * 那是模式检测的降级信号，自己写进去会让下一轮 auto 误降 manual（S9 三路线要求的 auto 直通）。
+ * cluster_id / parent_session_id 两行是重建对账标记（rebuildFromTitles 的 markers 来源）。
+ */
+export function renderHandoffMessage(payload, {volume = null, at = null} = {}) {
+    const lines = [];
+    lines.push(`【分卷交接】${volume ? `进入第 ${volume} 卷` : '进入新卷'} ← 会话 ${payload.from_session_id ?? '(未知)'}`);
+    lines.push('rollover: v1');
+    lines.push(`cluster_id: ${payload.cluster?.cluster_id ?? payload.cluster?.degraded_link ?? 'unknown'}`);
+    lines.push(`parent_session_id: ${payload.from_session_id ?? 'unknown'}`);
+    if (at) lines.push(`at: ${at}`);
+    lines.push('');
+    const segs = Object.entries(payload.summary);
+    const covered = (kw) => segs.some(([name]) => name.includes(kw)); // 八段摘要已覆盖的块不再重复贴
+    segs.forEach(([name, text], i) => {
+        lines.push(`## ${i + 1}. ${name}`, String(text), '');
+    });
+    lines.push('## 待办（旧卷最后一次投影）', todosMarkdown(Array.isArray(payload.todos) ? payload.todos : []), '');
+    const cs = payload.current_step;
+    if (cs && typeof cs === 'object') {
+        const items = Array.isArray(payload.todos) ? payload.todos : [];
+        const cur = items[cs.index - 1];
+        lines.push(`## 当前进度`, `第 ${cs.index} 步进行中${cur ? `：${cur.content}` : ''}`, '');
+    } else {
+        lines.push('## 当前进度', String(cs ?? '尚未开始'), '');
+    }
+    const jobs = payload.open_jobs ?? [];
+    if (!covered('在跑')) {
+        lines.push('## 在跑 / 未收尾任务', jobs.length ? jobs.map((j) => `- ${j.id} \`${j.command ?? ''}\` status=${j.status}${j.recoverable ? '' : '（需重跑）'}`).join('\n') : '无', '');
+    }
+    if (!covered('约束')) lines.push('## 约束（原文）', (payload.constraints ?? []).map((c) => `- ${c}`).join('\n'), '');
+    const files = payload.changed_files ?? [];
+    if (!covered('改动文件')) lines.push('## 改动文件', files.length ? files.map((f) => `- ${f.path}${f.deleted ? '（已删除）' : ''}${f.note ? ` — ${f.note}` : ''}`).join('\n') : '无', '');
+    lines.push('## 交接快照 JSON', '```json', JSON.stringify(payload), '```');
+    return lines.join('\n');
+}