dsh-tiddlywiki 0.16.11 → 0.16.13

package/src/host/http.ts

@@ -0,0 +1,57 @@
+/**
+ * Shared node:http helpers for the DSH webserver routes (routes.ts, admin.ts).
+ *
+ * One implementation of body reading + JSON response writing so the route
+ * layers cannot drift (they previously carried two/three copies).
+ *
+ * @module dsh-tiddlywiki/host/http
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http'
+
+/** Default cap for small JSON bodies (note/restart/config…). */
+export const MAX_JSON_BODY_BYTES = 2 * 1024 * 1024
+
+/** Cap for the /api passthrough body (tiddler content can be large). */
+export const MAX_PROXY_BODY_BYTES = 16 * 1024 * 1024
+
+/** Cap for uploaded file bodies (/tw proxy, /upload). */
+export const MAX_UPLOAD_BYTES = 64 * 1024 * 1024
+
+function readBodyStream(req: IncomingMessage, limit: number, encoding: true): Promise<string>
+function readBodyStream(req: IncomingMessage, limit: number, encoding: false): Promise<Buffer>
+function readBodyStream(req: IncomingMessage, limit: number, encoding: boolean): Promise<string | Buffer> {
+  return new Promise((resolveP, rejectP) => {
+    let size = 0
+    const chunks: Buffer[] = []
+    req.on('data', (chunk: Buffer) => {
+      size += chunk.length
+      if (size > limit) {
+        rejectP(new Error('body too large'))
+        req.destroy()
+        return
+      }
+      chunks.push(chunk)
+    })
+    req.on('end', () => {
+      const buf = Buffer.concat(chunks)
+      resolveP(encoding ? buf.toString('utf8') : buf)
+    })
+    req.on('error', rejectP)
+  })
+}
+
+/** Read a JSON (utf8) request body up to `limit` bytes (default MAX_JSON_BODY_BYTES). */
+export function readBody(req: IncomingMessage, limit = MAX_JSON_BODY_BYTES): Promise<string> {
+  return readBodyStream(req, limit, true)
+}
+
+/** Read a raw (binary-safe) request body up to `limit` bytes (default MAX_UPLOAD_BYTES). */
+export function readBodyBuffer(req: IncomingMessage, limit = MAX_UPLOAD_BYTES): Promise<Buffer> {
+  return readBodyStream(req, limit, false)
+}
+
+/** Write a JSON response (no-store, utf-8). */
+export function json(res: ServerResponse, payload: unknown, status = 200): void {
+  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })
+  res.end(JSON.stringify(payload))
+}

package/src/host/routes.ts

@@ -27,21 +27,13 @@ import type { WikiServer } from './wiki.ts'
 import type { GitFace } from './git.ts'
 import { PATH_PREFIX, TW_PROXY_PREFIX, TW_PROXY_PATH } from './wiki.ts'
 import { writeSessionSummary, type SessionQueryFace } from './session-summary.ts'
+import { readBody, readBodyBuffer, json, MAX_PROXY_BODY_BYTES, MAX_UPLOAD_BYTES } from './http.ts'
 
 export { writeSessionSummary, SESSION_SUMMARY_PREFIX } from './session-summary.ts'
 export type { SessionQueryFace, SessionSummaryResult } from './session-summary.ts'
 
 export const ROUTE_PREFIX = PATH_PREFIX
 
-/** Max JSON body for note/restart. */
-const MAX_BODY_BYTES = 2 * 1024 * 1024
-
-/** Max passthrough body (tiddler content can be large). */
-const MAX_PROXY_BODY_BYTES = 16 * 1024 * 1024
-
-/** Max uploaded file body. */
-const MAX_UPLOAD_BYTES = 64 * 1024 * 1024
-
 /** Tiddler type for quick-notes: Markdown, so the uploaded images/links and
  *  any Markdown in the note actually render in TW (a type-less tiddler is
  *  treated as plain wiki text and shows raw `![..]`/`[..]` instead). */
@@ -196,43 +188,6 @@ export interface RouteDeps {
   sendToAgentToken: () => string
 }
 
-function readBody(req: IncomingMessage, limit = MAX_BODY_BYTES): Promise<string> {
-  return new Promise((resolveP, rejectP) => {
-    let size = 0
-    const chunks: Buffer[] = []
-    req.on('data', (chunk: Buffer) => {
-      size += chunk.length
-      if (size > limit) {
-        rejectP(new Error('body too large'))
-        req.destroy()
-        return
-      }
-      chunks.push(chunk)
-    })
-    req.on('end', () => resolveP(Buffer.concat(chunks).toString('utf8')))
-    req.on('error', rejectP)
-  })
-}
-
-/** Read a raw (binary-safe) request body up to `limit` bytes. */
-function readBodyBuffer(req: IncomingMessage, limit = MAX_UPLOAD_BYTES): Promise<Buffer> {
-  return new Promise((resolveP, rejectP) => {
-    let size = 0
-    const chunks: Buffer[] = []
-    req.on('data', (chunk: Buffer) => {
-      size += chunk.length
-      if (size > limit) {
-        rejectP(new Error('file too large'))
-        req.destroy()
-        return
-      }
-      chunks.push(chunk)
-    })
-    req.on('end', () => resolveP(Buffer.concat(chunks)))
-    req.on('error', rejectP)
-  })
-}
-
 /** Header names forwarded to the upstream TW service by the proxy routes. */
 const FORWARD_HEADER_NAMES = [
   'accept', 'accept-encoding', 'content-type', 'cookie', 'authorization',
@@ -269,12 +224,6 @@ function sanitizeUploadName(input: unknown): string {
   return name
 }
 
-function json(res: ServerResponse, payload: unknown, status = 200): void {
-  const body = JSON.stringify(payload)
-  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })
-  res.end(body)
-}
-
 function pad(n: number): string {
   return n < 10 ? `0${n}` : String(n)
 }
@@ -443,6 +392,26 @@ export function registerRoutes(ctx: { webServer: WebServerFace }, deps: RouteDep
     }
   }
 
+  /**
+   * Shared gate for the TW-side send-to-agent routes: feature switch
+   * (`ui.sendToAgent.enabled`) then, when a shared token is configured, the
+   * `x-send-to-agent-token` header must match. Returns false after writing the
+   * error response — the caller just does `if (!guard(...)) return`.
+   */
+  const guardSendToAgent = (req: IncomingMessage, res: ServerResponse): boolean => {
+    if (!deps.sendToAgentEnabled()) {
+      json(res, { ok: false, error: 'send-to-agent is disabled' }, 403)
+      return false
+    }
+    const token = deps.sendToAgentToken().trim()
+    if (token.length === 0) return true
+    const got = req.headers['x-send-to-agent-token']
+    const value = typeof got === 'string' ? got : Array.isArray(got) ? got[0] ?? '' : ''
+    if (value === token) return true
+    json(res, { ok: false, error: 'unauthorized' }, 401)
+    return false
+  }
+
   /**
    * GET /dsh-tiddlywiki/agent/modes — available "工作模式" (Agent presets) for
    * the TW picker: id/name/description per preset plus the deployment default.
@@ -450,19 +419,7 @@ export function registerRoutes(ctx: { webServer: WebServerFace }, deps: RouteDep
    */
   const handleAgentModes = async (req: IncomingMessage, res: ServerResponse): Promise<void> => {
     try {
-      if (!deps.sendToAgentEnabled()) {
-        json(res, { ok: false, error: 'send-to-agent is disabled' }, 403)
-        return
-      }
-      const token = deps.sendToAgentToken().trim()
-      if (token.length > 0) {
-        const got = req.headers['x-send-to-agent-token']
-        const value = typeof got === 'string' ? got : Array.isArray(got) ? got[0] ?? '' : ''
-        if (value !== token) {
-          json(res, { ok: false, error: 'unauthorized' }, 401)
-          return
-        }
-      }
+      if (!guardSendToAgent(req, res)) return
       const ap = deps.getAgentPresets()
       if (ap === undefined) {
         json(res, { ok: false, error: 'agent presets service unavailable' }, 503)
@@ -516,19 +473,7 @@ export function registerRoutes(ctx: { webServer: WebServerFace }, deps: RouteDep
    */
   const handleAgentSend = async (req: IncomingMessage, res: ServerResponse): Promise<void> => {
     try {
-      if (!deps.sendToAgentEnabled()) {
-        json(res, { ok: false, error: 'send-to-agent is disabled' }, 403)
-        return
-      }
-      const token = deps.sendToAgentToken().trim()
-      if (token.length > 0) {
-        const got = req.headers['x-send-to-agent-token']
-        const value = typeof got === 'string' ? got : Array.isArray(got) ? got[0] ?? '' : ''
-        if (value !== token) {
-          json(res, { ok: false, error: 'unauthorized' }, 401)
-          return
-        }
-      }
+      if (!guardSendToAgent(req, res)) return
       const body = JSON.parse(await readBody(req)) as { sessionId?: unknown; text?: unknown }
       const sessionId = typeof body.sessionId === 'string' && body.sessionId.trim().length > 0 ? body.sessionId.trim() : ''
       const text = typeof body.text === 'string' && body.text.trim().length > 0 ? body.text.trim() : ''
@@ -574,19 +519,7 @@ export function registerRoutes(ctx: { webServer: WebServerFace }, deps: RouteDep
    */
   const handleAgentCreate = async (req: IncomingMessage, res: ServerResponse): Promise<void> => {
     try {
-      if (!deps.sendToAgentEnabled()) {
-        json(res, { ok: false, error: 'send-to-agent is disabled' }, 403)
-        return
-      }
-      const token = deps.sendToAgentToken().trim()
-      if (token.length > 0) {
-        const got = req.headers['x-send-to-agent-token']
-        const value = typeof got === 'string' ? got : Array.isArray(got) ? got[0] ?? '' : ''
-        if (value !== token) {
-          json(res, { ok: false, error: 'unauthorized' }, 401)
-          return
-        }
-      }
+      if (!guardSendToAgent(req, res)) return
       const body = JSON.parse(await readBody(req)) as { cwd?: unknown; mode?: unknown; permission?: unknown }
       const cwd = typeof body.cwd === 'string' ? body.cwd.trim() : ''
       const mode = typeof body.mode === 'string' && body.mode.trim().length > 0 ? body.mode.trim() : undefined
@@ -781,7 +714,7 @@ export function registerRoutes(ctx: { webServer: WebServerFace }, deps: RouteDep
         text: t.text ?? '',
         tags: t.tags ?? [],
         type: t.type ?? 'text/vnd.tiddlywiki',
-        modified: typeof t.modified === 'string' ? (t.modified as string) : null,
+        modified: typeof t.modified === 'string' ? t.modified : null,
         fields,
       })
     } catch (err) {

package/src/host/seeds.ts

@@ -18,8 +18,8 @@
  *   - `remove` — optional seeds only: delete the seeded tiddlers + markers,
  *     returning the wiki to the "never seeded" state.
  *
- * Registry: doc-note / send-to-agent / home-index / all-articles /
- * menubar-theme / tw-web-host.
+ * Registry: doc-note / send-to-agent / render-route / home-index /
+ * all-articles / menubar-theme / tw-web-host.
  *
  * @module dsh-tiddlywiki/host/seeds
  */
@@ -93,182 +93,129 @@ const removedDetail = (id: string, removed: string[]): SeedRunResult => ({
     : '本就不存在，无需移除',
 })
 
+/** Metadata shared by every seed and echoed in its status/result objects. */
+interface SeedMeta {
+  id: string
+  title: string
+  description: string
+  core: boolean
+}
+
+type SeedWriter = (client: TiddlyWebClient, opts?: { force?: boolean }) => Promise<boolean>
+type SeedUnseeder = (client: TiddlyWebClient) => Promise<{ removed: string[] }>
+
+/**
+ * Define a seed from a small spec, killing the id/title/description
+ * triplication and the try/catch boilerplate every registry entry used to
+ * repeat by hand:
+ *   - `presentTitle` → default check: is that tiddler present?
+ *   - `check`        → custom presence check (overrides presentTitle).
+ *   - `write`        → built-in content writer; true = (re)written this call.
+ *   - `run`          → custom runner (overrides the standard write wrapper;
+ *                      e.g. tw-web-host honors a user-chosen host value).
+ *   - `unseed`       → remove the seeded tiddlers + markers (removable seeds).
+ */
+function defineSeed(meta: SeedMeta, impl: {
+  presentTitle?: string
+  check?: (ctx: SeedContext) => Promise<SeedStatus>
+  write?: SeedWriter
+  run?: (ctx: SeedContext, force: boolean) => Promise<SeedRunResult>
+  unseed?: SeedUnseeder
+}): SeedDef {
+  const { id, title, description, core } = meta
+  const removable = !core
+  const check: SeedDef['check'] = impl.check ?? (async (ctx) => {
+    const present = await presentOf(ctx, impl.presentTitle ?? '')
+    return { id, title, description, present, removable, detail: present ? '已存在' : '缺失' }
+  })
+  const run: SeedDef['run'] = impl.run ?? (async (ctx, force) => {
+    try {
+      const wrote = await impl.write!(ctx.client, { force })
+      return { id, ok: true, wrote, detail: wrote ? (force ? '已重新初始化' : '已写入') : (force ? '内容已是最新（未重写）' : '已存在，跳过') }
+    } catch (err) {
+      return { id, ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
+    }
+  })
+  const remove: SeedDef['remove'] = impl.unseed === undefined ? undefined : async (ctx) => {
+    try {
+      return removedDetail(id, (await impl.unseed!(ctx.client)).removed)
+    } catch (err) {
+      return { id, ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
+    }
+  }
+  return { id, title, description, core, check, run, ...(remove === undefined ? {} : { remove }) }
+}
+
 /** The full registry, in display order. */
 export const SEED_DEFS: SeedDef[] = [
-  {
-    id: 'doc-note',
-    title: '插件说明笔记',
-    description: '「dsh-tiddlywiki 插件说明」——新 wiki 首启自动写入的入门说明（ONE-SHOT，用户可改可删）。',
-    core: false,
-    check: async (ctx) => {
-      const present = await presentOf(ctx, DOC_NOTE_TITLE)
-      return { id: 'doc-note', title: '插件说明笔记', description: '「dsh-tiddlywiki 插件说明」——新 wiki 首启自动写入的入门说明（ONE-SHOT，用户可改可删）。', present, removable: true, detail: present ? '已存在' : '缺失' }
-    },
-    run: async (ctx, force) => {
-      try {
-        const wrote = await seedDocNote(ctx.client, { force })
-        return { id: 'doc-note', ok: true, wrote, detail: wrote ? (force ? '已重新初始化' : '已写入') : (force ? '内容已是最新（未重写）' : '已存在，跳过') }
-      } catch (err) {
-        return { id: 'doc-note', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
-      }
-    },
-    remove: async (ctx) => {
-      try {
-        return removedDetail('doc-note', (await unseedDocNote(ctx.client)).removed)
-      } catch (err) {
-        return { id: 'doc-note', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
-      }
-    },
-  },
-  {
-    id: 'send-to-agent',
-    title: '「发送给 Agent」按钮',
-    description: 'TW 笔记工具栏「发送给 Agent」按钮插件（$:/plugins/dsh/send-to-agent）——把笔记一键注入 DSH 会话。',
-    core: true,
-    check: async (ctx) => {
-      const present = await presentOf(ctx, SEND_TO_AGENT_PLUGIN_TITLE)
-      return { id: 'send-to-agent', title: '「发送给 Agent」按钮', description: 'TW 笔记工具栏「发送给 Agent」按钮插件（$:/plugins/dsh/send-to-agent）——把笔记一键注入 DSH 会话。', present, removable: false, detail: present ? '已存在' : '缺失' }
-    },
-    run: async (ctx, force) => {
-      try {
-        const wrote = await seedSendToAgent(ctx.client, { force })
-        return { id: 'send-to-agent', ok: true, wrote, detail: wrote ? (force ? '已重新初始化' : '已写入') : (force ? '内容已是最新（未重写）' : '已存在，跳过') }
-      } catch (err) {
-        return { id: 'send-to-agent', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
-      }
-    },
-  },
-  {
-    id: 'render-route',
-    title: '原生渲染路由（/render）',
-    description: 'TW 服务端路由插件（$:/plugins/dsh/render，server-routes/render.js）——把 wiki 文本在运行中的 TW 里原生渲染成 HTML 片段，回复流工具卡与 wiki 链接跳转依赖它。seed 写入后需重启 TW 使路由生效。',
-    core: true,
-    check: async (ctx) => {
-      const present = await presentOf(ctx, RENDER_PLUGIN_TITLE)
-      return { id: 'render-route', title: '原生渲染路由（/render）', description: 'TW 服务端路由插件（$:/plugins/dsh/render，server-routes/render.js）——把 wiki 文本在运行中的 TW 里原生渲染成 HTML 片段，回复流工具卡与 wiki 链接跳转依赖它。seed 写入后需重启 TW 使路由生效。', present, removable: false, detail: present ? '已存在' : '缺失' }
-    },
-    run: async (ctx, force) => {
-      try {
-        const wrote = await seedRenderRoute(ctx.client, { force })
-        return { id: 'render-route', ok: true, wrote, detail: wrote ? (force ? '已重新初始化' : '已写入') : (force ? '内容已是最新（未重写）' : '已存在，跳过') }
-      } catch (err) {
-        return { id: 'render-route', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
-      }
-    },
-  },
-  {
-    id: 'home-index',
-    title: '首页（主页 / 所有标签 / 标签笔记）',
-    description: '默认主页：四象限待办 + 「所有标签」「所有文章」入口；所有标签：标签统计 + Agent 区块（纯 Agent / Agent+人工）；标签笔记：按标签浏览。系统提示承诺的首页由这里 seed，主页同时写入 $:/DefaultTiddlers。',
-    core: false,
-    check: async (ctx) => {
-      const missing: string[] = []
-      for (const item of HOME_INDEX_ITEMS) {
-        if (!(await presentOf(ctx, item.title))) missing.push(item.title)
-      }
-      return { id: 'home-index', title: '首页（主页 / 所有标签 / 标签笔记）', description: '默认主页：四象限待办 + 「所有标签」「所有文章」入口；所有标签：标签统计 + Agent 区块（纯 Agent / Agent+人工）；标签笔记：按标签浏览。系统提示承诺的首页由这里 seed，主页同时写入 $:/DefaultTiddlers。', present: missing.length === 0, removable: true, detail: missing.length === 0 ? '已存在' : `缺失：${missing.join('、')}` }
-    },
-    run: async (ctx, force) => {
-      try {
-        const wrote = await seedHomeIndex(ctx.client, { force })
-        return { id: 'home-index', ok: true, wrote, detail: wrote ? (force ? '已重新初始化' : '已写入') : (force ? '内容已是最新（未重写）' : '已存在，跳过') }
-      } catch (err) {
-        return { id: 'home-index', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
-      }
-    },
-    remove: async (ctx) => {
-      try {
-        return removedDetail('home-index', (await unseedHomeIndex(ctx.client)).removed)
-      } catch (err) {
-        return { id: 'home-index', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
-      }
-    },
-  },
-  {
-    id: 'all-articles',
-    title: '所有文章（两列分页总览）',
-    description: '「所有文章」——全部条目分两列（🤖 Agent 撰写 / 👤 人工·人类）各自分页展示。每页条数取插件设置 ui.allArticles.pageSize（默认 10）。',
-    core: false,
-    check: async (ctx) => {
-      const present = await presentOf(ctx, ALL_ARTICLES_TITLE)
-      return { id: 'all-articles', title: '所有文章（两列分页总览）', description: '「所有文章」——全部条目分两列（🤖 Agent 撰写 / 👤 人工·人类）各自分页展示。每页条数取插件设置 ui.allArticles.pageSize（默认 10）。', present, removable: true, detail: present ? '已存在' : '缺失' }
-    },
-    run: async (ctx, force) => {
-      try {
-        const wrote = await seedAllArticles(ctx.client, { force })
-        return { id: 'all-articles', ok: true, wrote, detail: wrote ? (force ? '已重新初始化' : '已写入') : (force ? '内容已是最新（未重写）' : '已存在，跳过') }
-      } catch (err) {
-        return { id: 'all-articles', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
-      }
-    },
-    remove: async (ctx) => {
-      try {
-        return removedDetail('all-articles', (await unseedAllArticles(ctx.client)).removed)
-      } catch (err) {
-        return { id: 'all-articles', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
-      }
-    },
-  },
-  {
-    id: 'menubar-theme',
-    title: 'menubar 顶栏主题自适应',
-    description: '样式表覆盖（$:/plugins/dsh-tiddlywiki/menubar-theme，tag $:/tags/Stylesheet）——把 tiddlywiki/menubar 顶栏从「默认色映射的蓝色」改为跟随当前 palette 的 background/foreground，随 DSH 主题切换（$:/palette 翻转）自动换色。',
-    core: false,
-    check: async (ctx) => {
-      const present = await presentOf(ctx, MENUBAR_THEME_TIDDLER)
-      return { id: 'menubar-theme', title: 'menubar 顶栏主题自适应', description: '样式表覆盖（$:/plugins/dsh-tiddlywiki/menubar-theme，tag $:/tags/Stylesheet）——把 tiddlywiki/menubar 顶栏从「默认色映射的蓝色」改为跟随当前 palette 的 background/foreground，随 DSH 主题切换（$:/palette 翻转）自动换色。', present, removable: true, detail: present ? '已存在' : '缺失' }
-    },
-    run: async (ctx, force) => {
-      try {
-        const wrote = await seedMenubarTheme(ctx.client, { force })
-        return { id: 'menubar-theme', ok: true, wrote, detail: wrote ? (force ? '已重新初始化' : '已写入') : (force ? '内容已是最新（未重写）' : '已存在，跳过') }
-      } catch (err) {
-        return { id: 'menubar-theme', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
-      }
-    },
-    remove: async (ctx) => {
-      try {
-        return removedDetail('menubar-theme', (await unseedMenubarTheme(ctx.client)).removed)
-      } catch (err) {
-        return { id: 'menubar-theme', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
-      }
-    },
-  },
-  {
-    id: 'tw-web-host',
-    title: 'TW 前端 API 基址（同源代理）',
-    description: '把 $:/config/tiddlyweb/host 指向 DSH 同源代理，嵌入式 TW 才能经 DSH origin 访问（远程访问模式的前提）。',
-    core: true,
-    check: async (ctx) => {
-      let current: string | undefined
-      try {
-        current = (await ctx.client.get(TW_WEB_HOST_TIDDLER))?.text?.trim()
-      } catch {
-        current = undefined
-      }
-      const ok = current === TW_PROXY_PATH
-      return { id: 'tw-web-host', title: 'TW 前端 API 基址（同源代理）', description: '把 $:/config/tiddlyweb/host 指向 DSH 同源代理，嵌入式 TW 才能经 DSH origin 访问（远程访问模式的前提）。', present: ok, removable: false, detail: ok ? `已指向 ${TW_PROXY_PATH}` : `当前：${current ?? '（缺失）'}，应为 ${TW_PROXY_PATH}` }
+  defineSeed(
+    { id: 'doc-note', title: '插件说明笔记', description: '「dsh-tiddlywiki 插件说明」——新 wiki 首启自动写入的入门说明（ONE-SHOT，用户可改可删）。', core: false },
+    { presentTitle: DOC_NOTE_TITLE, write: seedDocNote, unseed: unseedDocNote },
+  ),
+  defineSeed(
+    { id: 'send-to-agent', title: '「发送给 Agent」按钮', description: 'TW 笔记工具栏「发送给 Agent」按钮插件（$:/plugins/dsh/send-to-agent）——把笔记一键注入 DSH 会话。', core: true },
+    { presentTitle: SEND_TO_AGENT_PLUGIN_TITLE, write: seedSendToAgent },
+  ),
+  defineSeed(
+    { id: 'render-route', title: '原生渲染路由（/render）', description: 'TW 服务端路由插件（$:/plugins/dsh/render，server-routes/render.js）——把 wiki 文本在运行中的 TW 里原生渲染成 HTML 片段，回复流工具卡与 wiki 链接跳转依赖它。seed 写入后需重启 TW 使路由生效。', core: true },
+    { presentTitle: RENDER_PLUGIN_TITLE, write: seedRenderRoute },
+  ),
+  defineSeed(
+    { id: 'home-index', title: '首页（主页 / 所有标签 / 标签笔记）', description: '默认主页：四象限待办 + 「所有标签」「所有文章」入口；所有标签：标签统计 + Agent 区块（纯 Agent / Agent+人工）；标签笔记：按标签浏览。系统提示承诺的首页由这里 seed，主页同时写入 $:/DefaultTiddlers。', core: false },
+    {
+      check: async (ctx) => {
+        const missing: string[] = []
+        for (const item of HOME_INDEX_ITEMS) {
+          if (!(await presentOf(ctx, item.title))) missing.push(item.title)
+        }
+        return { id: 'home-index', title: '首页（主页 / 所有标签 / 标签笔记）', description: '默认主页：四象限待办 + 「所有标签」「所有文章」入口；所有标签：标签统计 + Agent 区块（纯 Agent / Agent+人工）；标签笔记：按标签浏览。系统提示承诺的首页由这里 seed，主页同时写入 $:/DefaultTiddlers。', present: missing.length === 0, removable: true, detail: missing.length === 0 ? '已存在' : `缺失：${missing.join('、')}` }
+      },
+      write: seedHomeIndex,
+      unseed: unseedHomeIndex,
     },
-    run: async (ctx, force) => {
-      try {
+  ),
+  defineSeed(
+    { id: 'all-articles', title: '所有文章（两列分页总览）', description: '「所有文章」——全部条目分两列（🤖 Agent 撰写 / 👤 人工·人类）各自分页展示。每页条数取插件设置 ui.allArticles.pageSize（默认 10）。', core: false },
+    { presentTitle: ALL_ARTICLES_TITLE, write: seedAllArticles, unseed: unseedAllArticles },
+  ),
+  defineSeed(
+    { id: 'menubar-theme', title: 'menubar 顶栏主题自适应', description: '样式表覆盖（$:/plugins/dsh-tiddlywiki/menubar-theme，tag $:/tags/Stylesheet）——把 tiddlywiki/menubar 顶栏从「默认色映射的蓝色」改为跟随当前 palette 的 background/foreground，随 DSH 主题切换（$:/palette 翻转）自动换色。', core: false },
+    { presentTitle: MENUBAR_THEME_TIDDLER, write: seedMenubarTheme, unseed: unseedMenubarTheme },
+  ),
+  defineSeed(
+    { id: 'tw-web-host', title: 'TW 前端 API 基址（同源代理）', description: '把 $:/config/tiddlyweb/host 指向 DSH 同源代理，嵌入式 TW 才能经 DSH origin 访问（远程访问模式的前提）。', core: true },
+    {
+      check: async (ctx) => {
         let current: string | undefined
         try {
           current = (await ctx.client.get(TW_WEB_HOST_TIDDLER))?.text?.trim()
         } catch {
           current = undefined
         }
-        // Non-force keeps the ensure semantics: write only when missing or still
-        // the legacy default (a user override pointing elsewhere is honored).
-        if (!force && current !== undefined && current !== TW_WEB_HOST_DEFAULT) {
-          return { id: 'tw-web-host', ok: true, wrote: false, detail: '已指向自定义基址，未覆盖' }
+        const ok = current === TW_PROXY_PATH
+        return { id: 'tw-web-host', title: 'TW 前端 API 基址（同源代理）', description: '把 $:/config/tiddlyweb/host 指向 DSH 同源代理，嵌入式 TW 才能经 DSH origin 访问（远程访问模式的前提）。', present: ok, removable: false, detail: ok ? `已指向 ${TW_PROXY_PATH}` : `当前：${current ?? '（缺失）'}，应为 ${TW_PROXY_PATH}` }
+      },
+      run: async (ctx, force) => {
+        try {
+          let current: string | undefined
+          try {
+            current = (await ctx.client.get(TW_WEB_HOST_TIDDLER))?.text?.trim()
+          } catch {
+            current = undefined
+          }
+          // Non-force keeps the ensure semantics: write only when missing or still
+          // the legacy default (a user override pointing elsewhere is honored).
+          if (!force && current !== undefined && current !== TW_WEB_HOST_DEFAULT) {
+            return { id: 'tw-web-host', ok: true, wrote: false, detail: '已指向自定义基址，未覆盖' }
+          }
+          await ctx.client.put({ title: TW_WEB_HOST_TIDDLER, text: TW_PROXY_PATH, type: 'text/plain', tags: [] })
+          return { id: 'tw-web-host', ok: true, wrote: true, detail: force ? '已重新初始化（强制写回代理基址）' : '已写入代理基址' }
+        } catch (err) {
+          return { id: 'tw-web-host', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
         }
-        await ctx.client.put({ title: TW_WEB_HOST_TIDDLER, text: TW_PROXY_PATH, type: 'text/plain', tags: [] })
-        return { id: 'tw-web-host', ok: true, wrote: true, detail: force ? '已重新初始化（强制写回代理基址）' : '已写入代理基址' }
-      } catch (err) {
-        return { id: 'tw-web-host', ok: false, wrote: false, error: err instanceof Error ? err.message : String(err) }
-      }
+      },
     },
-  },
+  ),
 ]
 
 /** Check every seed, returning statuses in registry order. */

package/src/host/session-summary.ts

@@ -105,9 +105,24 @@ function collectDescendantIds(nodes: SessionLineageNode[] | undefined, out: stri
   }
 }
 
+/**
+ * 汇总条目会直接写进 `[[标题]]` wikitext——标题既要能安全渲染、又不能制造死链。
+ * 会话日志里常混入模型的示例/残缺写法（`#…`、`#标题`、带反引号的截断链接、
+ * 控制字符等），这类收进来会被 TW 渲染成「佚失条目」；一律过滤。
+ */
+function isPlausibleTitle(title: string): boolean {
+  if (title.length === 0 || title.length > 300) return false
+  if (title.trim().length === 0) return false
+  if (/[\u0000-\u001f\u007f]/.test(title)) return false // 控制字符 / 换行
+  if (/[\]|`#]/.test(title)) return false // 会破坏 [[…]] 链接语法
+  if (title.startsWith('…') || title === '标题') return false // 占位 / 示例写法
+  return true
+}
+
 /** 记录一篇笔记的触达；同标题合并（时间取最新、detail 取最新、subagent 取 AND）。 */
 function record(map: Map<string, NoteEntry>, entry: NoteEntry): void {
   if (entry.title.startsWith('$:/')) return
+  if (!isPlausibleTitle(entry.title)) return
   const prev = map.get(entry.title)
   if (prev !== undefined) {
     prev.time = Math.max(prev.time, entry.time)
@@ -120,7 +135,9 @@ function record(map: Map<string, NoteEntry>, entry: NoteEntry): void {
 
 /** 扫助手回复文本里的 `/dsh-tiddlywiki/tw/#标题` 引用链接 → 读取。 */
 function scanRefs(text: string, time: number, subagent: boolean, collected: Collected): void {
-  const re = /\/dsh-tiddlywiki\/tw\/#([^)\s\]]+)/g
+  // 只认到下一个 `)` / 空白 / `]` / `#` 为止——`#` 会截断后续碎片（模型示例常写成
+  // `#…` 或 `#标题`，这些由 isPlausibleTitle 在 record 时过滤）。
+  const re = /\/dsh-tiddlywiki\/tw\/#([^#)\s\]]+)/g
   let m: RegExpExecArray | null
   while ((m = re.exec(text)) !== null) {
     const raw = m[1] ?? ''
@@ -221,27 +238,30 @@ interface TitleState {
   snippet?: string
 }
 
-/** 逐个查询每篇笔记的当前状态（404 → 不存在/已删除）。 */
+/** 并发（8 路）查询每篇笔记的当前状态（404 → 不存在/已删除）。 */
 async function enrichTitles(client: TiddlyWebClient, titles: string[]): Promise<Map<string, TitleState>> {
   const out = new Map<string, TitleState>()
-  for (const title of titles) {
+  const enquire = async (title: string): Promise<[string, TitleState]> => {
     try {
       const t = await client.get(title)
-      if (t === undefined) {
-        out.set(title, { exists: false, tags: [] })
-      } else {
-        const flat = typeof t.text === 'string' ? t.text.replace(/\s+/g, ' ').trim() : ''
-        out.set(title, {
-          exists: true,
-          tags: t.tags ?? [],
-          modified: typeof t.modified === 'string' ? t.modified : undefined,
-          snippet: flat.length > 48 ? `${flat.slice(0, 48)}…` : flat,
-        })
-      }
+      if (t === undefined) return [title, { exists: false, tags: [] }]
+      const flat = typeof t.text === 'string' ? t.text.replace(/\s+/g, ' ').trim() : ''
+      return [title, {
+        exists: true,
+        tags: t.tags ?? [],
+        modified: typeof t.modified === 'string' ? t.modified : undefined,
+        snippet: flat.length > 48 ? `${flat.slice(0, 48)}…` : flat,
+      }]
     } catch {
-      out.set(title, { exists: false, tags: [] })
+      return [title, { exists: false, tags: [] }]
     }
   }
+  // Bounded batches: parallel within a batch, insertion order preserved across
+  // batches (Map order = the caller's title order, same as the old sequential).
+  for (let i = 0; i < titles.length; i += 8) {
+    const batch = titles.slice(i, i + 8)
+    for (const [title, state] of await Promise.all(batch.map(enquire))) out.set(title, state)
+  }
   return out
 }