dsh-vscode-mode 0.19.2 → 0.20.1

package/src/reviewEvidence.ts

@@ -0,0 +1,70 @@
+/** Raw UTF-8 evidence and patch correspondence; never reconstructs a historical file from disk. @author ddj 2026年10月27号 */
+import { createHash } from 'node:crypto'
+import { reviewBlocks } from './shared/reviewRegions.js'
+import type { OfficialDiff } from './shared/review.js'
+
+export interface RawReviewFile { present: boolean; bytes: string; hash: string }
+export interface ReviewEvidence { before: RawReviewFile; after: RawReviewFile }
+export interface RawReviewBlock { id: string; before: string; after: string; offset: number }
+
+/** @public @author ddj 2026年10月27号 @param bytes File bytes, or null for confirmed absence. @returns Existence-sensitive immutable digest and base64. */
+export function rawReviewFile(bytes: Uint8Array | null): RawReviewFile {
+  const payload = bytes === null ? Buffer.alloc(0) : Buffer.from(bytes)
+  return { present: bytes !== null, bytes: payload.toString('base64'), hash: createHash('sha256')
+    .update(bytes === null ? 'absent:' : 'present:').update(payload).digest('hex') }
+}
+
+/** @private @author ddj 2026年10月27号 @param file Persisted raw image. @returns UTF-8 storage text preserving BOM and terminators. @throws Binary, invalid encoding or corrupt hash. */
+function rawText(file: RawReviewFile): string {
+  const bytes = Buffer.from(file.bytes, 'base64')
+  if (bytes.length > 8 * 1024 * 1024 || bytes.includes(0)) throw new Error('回滚证据不是受支持的 UTF-8 文本')
+  if (rawReviewFile(file.present ? bytes : null).hash !== file.hash) throw new Error('回滚证据哈希不匹配')
+  // ignoreBOM=true retains the BOM codepoint, allowing byte-identical writeText.
+  const text = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes)
+  if (!Buffer.from(text, 'utf8').equals(bytes)) throw new Error('回滚证据无法字节往返')
+  return text
+}
+
+/** @private @author ddj 2026年10月27号 @param text Storage text. @returns Physical lines, retaining each original line ending and excluding BOM. */
+function rawLines(text: string): string[] {
+  const body = text.replace(/^\uFEFF/, '')
+  return body.match(/[^\r\n]*(?:\r\n|\n|\r|$)/g)?.filter((line, index, lines) => line !== '' || index !== lines.length - 1) ?? []
+}
+
+/** @private @author ddj 2026年10月27号 @param lines Physical storage lines. @returns Official logical-line comparison basis. */
+function logical(lines: string[]): string[] { return lines.map((line) => line.replace(/(?:\r\n|\r|\n)$/, '')) }
+
+/** @public @author ddj 2026年10月27号 @param diff Official source. @param evidence Independent raw captures. @returns Exact raw segments only when every official hunk reproduces the entire captured result. @throws Incomplete chain, coarse patch or mismatched context/content. */
+export function evidenceBlocks(diff: OfficialDiff, evidence: ReviewEvidence): RawReviewBlock[] {
+  if (diff.kind !== 'text' || diff.coarse) throw new Error('该官方差异没有可靠文本基线')
+  if (diff.before !== evidence.before.present || diff.after !== evidence.after.present) throw new Error('文件存在性证据不一致')
+  const beforeText = rawText(evidence.before), afterText = rawText(evidence.after)
+  const before = rawLines(beforeText), after = rawLines(afterText)
+  const expected = logical(before)
+  let delta = 0
+  for (const hunk of diff.hunks) {
+    const old = hunk.lines.filter((line) => line[0] === ' ' || line[0] === '-').map((line) => line.slice(1))
+    const next = hunk.lines.filter((line) => line[0] === ' ' || line[0] === '+').map((line) => line.slice(1))
+    if (old.length !== hunk.oldLines || next.length !== hunk.newLines) throw new Error('官方差异行数不一致')
+    const position = Math.max(0, hunk.oldStart - 1) + delta
+    if (JSON.stringify(expected.slice(position, position + old.length)) !== JSON.stringify(old)) throw new Error('原始基线与官方上下文不一致')
+    expected.splice(position, old.length, ...next)
+    delta += next.length - old.length
+  }
+  if (JSON.stringify(expected) !== JSON.stringify(logical(after))) throw new Error('采集链未覆盖全部官方变更')
+  if (!diff.hunks.length && beforeText !== afterText) throw new Error('官方没有提供可撤销的变更块')
+  const blocks = reviewBlocks(diff)
+  const segments = blocks.map((block) => ({ id: block.id,
+    before: before.slice(block.oldStart - 1, block.oldStart - 1 + block.oldLines.length).join(''),
+    after: after.slice(block.newStart - 1, block.newStart - 1 + block.newLines.length).join(''),
+    offset: (afterText.startsWith('\uFEFF') ? 1 : 0) + after.slice(0, block.newStart - 1).join('').length }))
+  let reversed = afterText
+  for (const segment of [...segments].reverse()) reversed = reversed.slice(0, segment.offset) + segment.before + reversed.slice(segment.offset + segment.after.length)
+  if (reversed !== beforeText) throw new Error('官方变更外的 BOM、行尾或末尾换行发生变化，证据不足')
+  return segments
+}
+
+/** @public @author ddj 2026年10月27号 @param evidence Raw original images. @returns Exact before and after UTF-8 storage text for guarded writes. */
+export function evidenceText(evidence: ReviewEvidence): { before: string; after: string } {
+  return { before: rawText(evidence.before), after: rawText(evidence.after) }
+}

package/src/reviewRpc.ts

@@ -0,0 +1,42 @@
+/** Session-scoped official review RPC. @author ddj 2026年10月26号 */
+import type { RpcHandlerMap } from './shared/rpc.js'
+import { decideReview, reviewDetail, reviewPage } from './reviewDb.js'
+import { undoReview } from './reviewUndo.js'
+import { bucketOf, cwdOfSession, sessionOf } from './registry.js'
+import type { Registry } from './registry.js'
+import type { Ctx } from './store.js'
+
+/** @public @author ddj 2026年10月26号 @param ctx Host. @param registry Workspace cache. @returns Handlers resolving workspace from the live authenticated session, never caller cwd. */
+export function reviewHandlers(ctx: Ctx, registry: Registry): Partial<RpcHandlerMap> {
+  /** @private @author ddj 2026年10月26号 @param sessionId Request scope. @returns Migrated workspace, or explicit failure without fallback. */
+  async function workspace(sessionId: string): Promise<string> {
+    const session = sessionOf(ctx, sessionId)
+    const cwd = cwdOfSession(ctx, session)
+    if (!session || !cwd) throw new Error('会话不存在或没有工作区')
+    await bucketOf(registry, ctx, cwd)
+    return cwd
+  }
+  return {
+    'edrv.review.list': async (args) => {
+      const cwd = await workspace(args.sessionId)
+      return { ok: true, page: reviewPage(cwd, args.cursor, args.history, args.path) }
+    },
+    'edrv.review.detail': async (args) => {
+      const cwd = await workspace(args.sessionId)
+      const detail = reviewDetail(cwd, args.id)
+      return detail ? { ok: true, detail } : { ok: false, error: '官方审查记录不存在' }
+    },
+    'edrv.review.decide': async (args) => {
+      const cwd = await workspace(args.sessionId)
+      try {
+        const result = args.decision === 'rejected'
+          ? await undoReview(ctx, sessionOf(ctx, args.sessionId), cwd, args)
+          : decideReview(cwd, args)
+        return { ok: true, ...result }
+      } catch (error) {
+        // Guard failures are review results, not transport failures: preserve their reason.
+        return { ok: false, error: error instanceof Error ? error.message : String(error) }
+      }
+    },
+  }
+}

package/src/reviewUndo.ts

@@ -0,0 +1,104 @@
+/** Guarded official undo with a durable write-intent journal. @author ddj 2026年10月27号 */
+import { changeBlocks, reviewDb, reviewDetail } from './reviewDb.js'
+import { evidenceBlocks, evidenceText, rawReviewFile } from './reviewEvidence.js'
+import type { ReviewEvidence } from './reviewEvidence.js'
+import type { DecideReview } from './shared/review.js'
+import type { Ctx, Session } from './store.js'
+import { policyOf, resolveTarget } from './store.js'
+
+type OperationRow = { request: string; state: string; result: string | null; evidence: string }
+interface UndoJournal { before: string; after: string }
+const writes = new Map<string, Promise<unknown>>()
+
+/** @public @author ddj 2026年10月27号 @param ctx Host capability. @param session Authenticated caller. @param cwd Workspace. @param request Frozen file/block version. @returns Durable decision; retries reconcile disk hashes and never blindly repeat a write. @throws Missing evidence, stale state, policy or uncertain write failure. */
+export async function undoReview(ctx: Ctx, session: Session, cwd: string, request: DecideReview): Promise<{ revision: number }> {
+  const detail = reviewDetail(cwd, request.id)
+  const key = JSON.stringify([cwd, detail?.item.currentPath ?? request.id])
+  const prior = writes.get(key) ?? Promise.resolve()
+  const operation = prior.catch(() => undefined).then(() => runUndo(ctx, session, cwd, request))
+  writes.set(key, operation)
+  try { return await operation }
+  finally { if (writes.get(key) === operation) writes.delete(key) }
+}
+
+/** @private @author ddj 2026年10月27号 @param ctx Host. @param session Caller. @param cwd Workspace. @param request Frozen decision. @returns Serialized guarded mutation and journal reconciliation. @throws Conflicting bytes or decisions. */
+async function runUndo(ctx: Ctx, session: Session, cwd: string, request: DecideReview): Promise<{ revision: number }> {
+  const db = reviewDb(cwd)
+  const encoded = JSON.stringify(request)
+  if (!request.operationId || request.operationId.length > 128) throw new Error('operationId 无效')
+  const prior = db.prepare('SELECT * FROM review_ops WHERE operation_id=?').get(request.operationId) as OperationRow | undefined
+  if (prior && prior.request !== encoded) throw new Error('operationId 已用于其他请求')
+  if (prior?.state === 'committed') return JSON.parse(prior.result!)
+  const detail = reviewDetail(cwd, request.id)
+  if (!detail || !detail.item.current || detail.item.seq !== request.seq || detail.item.revision !== request.revision
+    || detail.item.decision !== 'pending') throw new Error('审查版本冲突，请刷新后重试')
+  const fs = ctx.get('fs')
+  if (!fs?.readBytes || !fs?.writeText || !fs?.stat) throw new Error('后端缺少受控回滚能力')
+  const target = await resolveTarget(ctx, session, detail.item.currentPath)
+  const info = await fs.stat(target)
+  if (!info || info.type !== 'file' || !info.version) throw new Error('文件不存在或缺少版本守卫，不能安全 Undo')
+  const bytes = await fs.readBytes(target, undefined, 8 * 1024 * 1024)
+  const current = rawReviewFile(bytes)
+  const observed = await fs.stat(target)
+  if (observed?.version !== info.version) throw new Error('文件在回滚读取期间变化，未修改文件')
+  if (prior) {
+    const journal = JSON.parse(prior.evidence) as UndoJournal
+    if (current.hash === journal.after) return finishUndo(cwd, request)
+    if (current.hash !== journal.before) throw new Error('上次 Undo 状态不确定：磁盘既非写前也非写后，禁止重复执行')
+  }
+  const unresolved = db.prepare("SELECT operation_id FROM review_ops WHERE state='prepared' AND json_extract(request,'$.id')=? AND operation_id<>?")
+    .get(request.id, request.operationId)
+  if (unresolved) throw new Error('存在未核对的 Undo，请使用原操作重试，不能创建另一项写入')
+  const row = db.prepare('SELECT payload FROM review_evidence WHERE file_id=?').get(request.id) as { payload: string } | undefined
+  if (!row) throw new Error('该历史记录缺少可信原始字节证据，不能 Undo；差异仍可展示和 Keep')
+  const evidence = JSON.parse(row.payload) as ReviewEvidence
+  const segments = evidenceBlocks(detail.diff, evidence)
+  const texts = evidenceText(evidence)
+  if (!evidence.before.present || !evidence.after.present) throw new Error('当前后端未提供受控原子删除/重建能力')
+  const selected = detail.blocks.filter((block) => block.decision === 'pending' && (request.scope !== 'hunk' || block.id === request.blockId))
+  if (!selected.length) throw new Error('差异块不存在或已处理')
+  // Build the expected disk version by removing only previously rejected blocks.
+  const rejected = new Set(detail.blocks.filter((block) => block.decision === 'rejected').map((block) => block.id))
+  const expected = reverseBlocks(texts.after, segments, rejected)
+  if (rawReviewFile(Buffer.from(expected)).hash !== current.hash) throw new Error('当前文件已被后续编辑，版本与回滚证据冲突，未修改文件')
+  const undo = new Set([...rejected, ...selected.map((block) => block.id)])
+  const next = reverseBlocks(texts.after, segments, undo)
+  const journal = { before: current.hash, after: rawReviewFile(Buffer.from(next)).hash }
+  const latest = reviewDetail(cwd, request.id)
+  if (!latest?.item.current || latest.item.revision !== request.revision || latest.item.decision !== 'pending') {
+    throw new Error('审查版本在回滚校验期间变化，未修改文件')
+  }
+  db.prepare("INSERT INTO review_ops VALUES(?,?,'prepared',NULL,?) ON CONFLICT(operation_id) DO NOTHING")
+    .run(request.operationId, encoded, JSON.stringify(journal))
+  // Provider checks the exact observation inside its atomic mutation critical section.
+  await fs.writeText(target, next, { kind: 'replaceIfVersion', version: info.version }, undefined, policyOf(ctx, session))
+  const written = rawReviewFile(await fs.readBytes(target, undefined, 8 * 1024 * 1024))
+  if (written.hash !== journal.after) throw new Error('Undo 写后内容不确定，请保留原操作重试核对')
+  return finishUndo(cwd, request)
+}
+
+/** @private @author ddj 2026年10月27号 @param text Captured result. @param segments Validated raw ranges. @param rejected Blocks to reverse. @returns Raw storage text preserving unselected blocks. */
+function reverseBlocks(text: string, segments: ReturnType<typeof evidenceBlocks>, rejected: Set<string>): string {
+  let result = text
+  for (const segment of [...segments].reverse()) {
+    if (!rejected.has(segment.id)) continue
+    result = result.slice(0, segment.offset) + segment.before + result.slice(segment.offset + segment.after.length)
+  }
+  return result
+}
+
+/** @private @author ddj 2026年10月27号 @param cwd Workspace. @param request Frozen action. @returns Transactionally committed status, or a retryable prepared journal if the database fails. */
+function finishUndo(cwd: string, request: DecideReview): { revision: number } {
+  const db = reviewDb(cwd)
+  db.exec('BEGIN IMMEDIATE')
+  try {
+    const updated = db.prepare("UPDATE review_files SET revision=revision+1 WHERE id=? AND seq=? AND revision=? AND current=1 AND decision='pending'")
+      .run(request.id, request.seq, request.revision)
+    if (updated.changes !== 1) throw new Error('审查版本冲突，请核对已执行 Undo')
+    changeBlocks(db, request)
+    const result = { revision: request.revision + 1 }
+    db.prepare("UPDATE review_ops SET state='committed',result=? WHERE operation_id=?").run(JSON.stringify(result), request.operationId)
+    db.exec('COMMIT')
+    return result
+  } catch (error) { if (db.isTransaction) db.exec('ROLLBACK'); throw error }
+}

package/src/rpc.ts

@@ -23,6 +23,7 @@ import { cp, mkdir, readFile, rename, rm, stat, writeFile, readdir } from 'node:
 import { basename, dirname, join } from 'node:path'
 import { archiveEntryFor, markDecision, recordResolved, reconstructOriginal } from './model.js'
 import { clearRevertState, listArchives, pageArchives, readArchives, revertState, setRevertState, startReverts } from './archiveDb.js'
+import { hasOfficial } from './reviewDb.js'
 import { log } from './log.js'
 import type { Registry } from './registry.js'
 import { bucketOf, cwdOfSession, sessionOf } from './registry.js'
@@ -57,6 +58,7 @@ import { patchHasPerfConfig, patchInsertPerfConfig, patchRemovePerfConfig, perfC
 import type { FileVersions } from './fileVersions.js'
 import { settingsDocPath } from './settingsDocPath.js'
 import { createTextPages } from './textPages.js'
+import { reviewHandlers } from './reviewRpc.js'
 
 /** Process-local cursor signer; reads must stay on the Host filesystem capability. */
 const readTextPage = createTextPages()
@@ -239,17 +241,8 @@ async function afterManualSave(
 ): Promise<void> {
   // 手动保存后目录树可能变化（新建/删除文件）：父目录+祖先进失效，后台自愈。
   invalidateIndex(ctx, sc.cwd, path)
-  const bucket = await bucketOf(registry, ctx, sc.cwd)
-  let changed = false
-  for (const rec of bucket.values()) {
-    if (rec.path === path && rec.superseded !== true) { rec.superseded = true; rec.at = new Date().toISOString(); changed = true }
-  }
-  if (changed) {
-    const done: DiffRecord[] = []
-    for (const rec of bucket.values()) if (rec.path === path && rec.superseded) done.push(rec)
-    if (done.length) await archiveRecords(ctx, sc.session, sc.cwd, bucket, done, '被手动编辑覆盖')
-    else await saveBucket(ctx, sc.cwd, bucket, sc.session, { upserts: [...bucket.values()].filter((rec) => rec.path === path), removed: [] })
-  }
+  // Editing disk is not a review decision. Keep all historical pending records;
+  // location checks may report conflict but must not silently accept or archive them.
 }
 
 /**
@@ -288,6 +281,10 @@ async function applyDecisions(
       results.push({ callId: item.callId, ok: false, error: '记录不存在' })
       continue
     }
+    if (hasOfficial(cwd, record.path)) {
+      results.push({ callId: item.callId, ok: false, error: '该文件已有官方审查记录；旧工具记录禁止决策或回滚，请使用官方审查入口' })
+      continue
+    }
     if (record.archived) {
       results.push({ callId: item.callId, ok: false, error: '记录已归档，无法重复决策' })
       continue
@@ -364,8 +361,8 @@ async function applyDecisions(
       // #endregion
       grouped.delete(index)
       try {
-        if (outcome.ok || outcome.stale === true) setRevertState(cwd, record.callId, scope, hunkIndex, 'applied')
-        else if (outcome.error === '找不到该差异块' || outcome.error === '回滚失败：文件不存在'
+        if (outcome.ok) setRevertState(cwd, record.callId, scope, hunkIndex, 'applied')
+        else if (outcome.stale === true || outcome.error === '找不到该差异块' || outcome.error === '回滚失败：文件不存在'
           || outcome.error === '回滚失败：文件过大，无法安全定位') {
           clearRevertState(cwd, record.callId, scope, hunkIndex)
         }
@@ -375,11 +372,8 @@ async function applyDecisions(
         continue
       }
       if (!outcome.ok) {
-        if (scope !== 'hunk' || outcome.stale !== true) {
-          results.push({ callId: item.callId, ok: false, error: outcome.error })
-          continue
-        }
-        revertedStale = true
+        results.push({ callId: item.callId, ok: false, error: outcome.error || '差异已偏移，未修改文件，保留待处理' })
+        continue
       }
     }
     const wasResolved = recordResolved(record)
@@ -595,6 +589,7 @@ export function buildHandlers(
     ...((svnHandlers ?? {}) as RpcHandlerMap),
     // edrv.dap.* 由 createDapRpc 提供（调试会话单例），这里并入。
     ...((dapHandlers ?? {}) as RpcHandlerMap),
+    ...(reviewHandlers(ctx, registry) as RpcHandlerMap),
     'edrv.list': async (args) => {
       // #region debug log
       const start = performance.now()
@@ -945,6 +940,7 @@ export function buildHandlers(
       if (!fs) return { ok: false, error: '缺少 fs' }
       const batch = args.batch
       const bucket = await bucketOf(registry, ctx, sc.cwd)
+      if (hasOfficial(sc.cwd, args.path)) return { ok: false, error: '该文件已有官方审查记录，禁止使用旧版批次回滚覆盖当前文件' }
       try {
         let affected: DiffRecord[] = []
         let beforeRec: DiffRecord | null = null

package/src/shared/review.ts

@@ -0,0 +1,95 @@
+/** Official facts are immutable; review decisions never imply a disk version. @author ddj 2026年10月26号 */
+export interface ChangedFile {
+  path: string
+  display: string
+  added: number
+  deleted: number
+  binary?: true
+  oversized?: true
+}
+export interface ReviewHunk {
+  oldStart: number
+  oldLines: number
+  newStart: number
+  newLines: number
+  lines: string[]
+}
+export type OfficialDiff = { kind: 'text'; path: string; display: string; before: boolean; after: boolean; hunks: ReviewHunk[]; coarse: boolean }
+  | { kind: 'binary' | 'oversized'; path: string; display: string }
+export interface OfficialSummary {
+  turn: number
+  cwd: string
+  files: ChangedFile[]
+  total: number
+  added: number
+  deleted: number
+  snapshot?: { before: string; after: string }
+}
+export interface ReviewSnapshot {
+  sourceKind: 'official'
+  sessionId: string
+  turn: number
+  seq: number
+  capturedAt: string
+  summary: OfficialSummary
+  files: { identity: string; diff: OfficialDiff }[]
+}
+export type ReviewDecision = 'pending' | 'accepted' | 'rejected'
+export type ReviewFileDecision = ReviewDecision | 'mixed'
+export interface ReviewItem {
+  id: string
+  sessionId: string
+  turn: number
+  seq: number
+  path: string
+  currentPath: string
+  display: string
+  added: number
+  deleted: number
+  kind: OfficialDiff['kind']
+  decision: ReviewFileDecision
+  revision: number
+  current: boolean
+}
+export interface ReviewDetail {
+  item: ReviewItem
+  diff: OfficialDiff
+  capturedAt: string
+  blocks: import('./reviewRegions.js').ReviewBlockState[]
+  capability: { keep: boolean; undo: boolean; reason: string }
+}
+export interface CaptureGap {
+  sessionId: string
+  turn: number
+  seq: number
+  error: string
+}
+export interface ReviewFile {
+  sourceKind: 'official'
+  path: string
+  label: string
+  pending: number
+}
+export interface ReviewOverview {
+  files: ReviewFile[]
+  /** Every official identity, including decided files: never revive legacy actions for them. */
+  coveredPaths: string[]
+}
+export interface ReviewPage {
+  overview?: ReviewOverview
+  items: ReviewItem[]
+  pending: number
+  nextCursor: number | null
+  gaps: CaptureGap[]
+}
+export interface ReviewRequest { sessionId: string }
+export interface DecideReview extends ReviewRequest {
+  id: string
+  seq: number
+  revision: number
+  operationId: string
+  scope?: 'file' | 'hunk'
+  blockId?: string
+  decision: 'accepted' | 'rejected'
+}
+export type ReviewResult<T> = ({ ok: true } & T) | { ok: false; error: string }

package/src/shared/reviewRegions.ts

@@ -0,0 +1,74 @@
+/** Official patch parsing shared by review decisions and editor display. @author ddj 2026年10月27号 */
+import type { OfficialDiff, ReviewDecision } from './review.js'
+
+export interface ReviewBlock {
+  id: string
+  hunkIndex: number
+  oldStart: number
+  newStart: number
+  oldLines: string[]
+  newLines: string[]
+  contextBefore: string[]
+  contextAfter: string[]
+}
+export interface ReviewBlockState { id: string; decision: ReviewDecision }
+export interface ReviewRegion extends ReviewBlock {
+  sourceKind: 'official'
+  recordId: string
+  idx: number
+  status: ReviewDecision
+  stale: boolean
+  start?: number
+  end?: number
+}
+
+/** @public @author ddj 2026年10月27号 @param diff Immutable official patch. @returns Contiguous change runs with stable source-coordinate identities. */
+export function reviewBlocks(diff: OfficialDiff): ReviewBlock[] {
+  if (diff.kind !== 'text') return []
+  const blocks: ReviewBlock[] = []
+  for (const [hunkIndex, hunk] of diff.hunks.entries()) {
+    let oldLine = hunk.oldStart, newLine = hunk.newStart
+    let before: string[] = []
+    let current: ReviewBlock | undefined
+    for (const line of hunk.lines) {
+      const marker = line[0], text = line.slice(1)
+      if (marker === ' ') {
+        if (current) { current.contextAfter.push(text); current = undefined }
+        else if (blocks.at(-1)?.hunkIndex === hunkIndex) blocks.at(-1)!.contextAfter.push(text)
+        before.push(text); oldLine++; newLine++
+        continue
+      }
+      if (marker !== '+' && marker !== '-') continue
+      if (!current) {
+        current = { id: `${hunkIndex}:${oldLine}:${newLine}`, hunkIndex, oldStart: oldLine, newStart: newLine,
+          oldLines: [], newLines: [], contextBefore: before.slice(-3), contextAfter: [] }
+        blocks.push(current); before = []
+      }
+      if (marker === '-') { current.oldLines.push(text); oldLine++ }
+      else { current.newLines.push(text); newLine++ }
+    }
+  }
+  return blocks
+}
+
+/** @public @author ddj 2026年10月27号 @param diff Source patch. @param recordId Official record, not a tool call. @param states Persisted per-block decisions. @param content Current editor text; null has no current-file location. @returns Regions only located by unique full contextual matches, never by guessed history line numbers. */
+export function reviewRegions(diff: OfficialDiff, recordId: string, states: ReviewBlockState[], content: string | null): ReviewRegion[] {
+  const lines = content === null ? null : content.replace(/^\uFEFF/, '').replace(/\r\n/g, '\n').split('\n')
+  return reviewBlocks(diff).map((block, idx) => {
+    const status = states.find((state) => state.id === block.id)?.decision ?? 'pending'
+    const region: ReviewRegion = { ...block, sourceKind: 'official', recordId, idx, status, stale: true }
+    if (!lines) return region
+    const pattern = [...block.contextBefore, ...block.newLines, ...block.contextAfter]
+    if (!pattern.length) return region
+    const matches: number[] = []
+    for (let offset = 0; offset + pattern.length <= lines.length; offset++) {
+      if (pattern.every((text, index) => lines[offset + index] === text)) matches.push(offset)
+      if (matches.length > 1) break
+    }
+    if (matches.length !== 1) return region
+    region.start = matches[0] + block.contextBefore.length + 1
+    region.end = region.start + block.newLines.length
+    region.stale = false
+    return region
+  })
+}

package/src/shared/rpc.ts

@@ -25,6 +25,7 @@ import { DAP_ACTIONS } from './dap.js'
 import { appUrl } from './appUrl.js'
 import type { LoggerLevel } from './logger.js'
 import type { SvnViewRequest, SvnViewPayload } from './svnExplorer.js'
+import type { DecideReview, ReviewDetail, ReviewPage, ReviewRequest } from './review.js'
 
 /** webServer 精确路由。 */
 export const RPC_PATH = '/edrv/rpc'
@@ -368,6 +369,9 @@ export interface UiStatePatchInput {
 
 /** 每个方法的请求参数（sessionId 为公共可选字段）。 */
 export interface RpcRequestMap {
+  'edrv.review.list': ReviewRequest & { cursor?: number; history?: boolean; path?: string }
+  'edrv.review.detail': ReviewRequest & { id: string }
+  'edrv.review.decide': DecideReview
   'edrv.list': { sessionId?: string; callIds?: string[]; skipStale?: boolean }
   'edrv.accept': { sessionId?: string; callId: string; scope?: RpcScope; hunkIndex?: number }
   'edrv.reject': { sessionId?: string; callId: string; scope?: RpcScope; hunkIndex?: number }
@@ -537,6 +541,9 @@ export type RpcMethod = keyof RpcRequestMap
 
 /** 每个方法成功（ok:true）时的附加载荷。 */
 export interface RpcOkMap {
+  'edrv.review.list': { page: ReviewPage }
+  'edrv.review.detail': { detail: ReviewDetail }
+  'edrv.review.decide': { revision: number }
   'edrv.list': { records: RecordView[] }
   'edrv.accept': { record: RecordView }
   'edrv.reject': { record: RecordView }

package/src/store.ts

@@ -221,10 +221,10 @@ export async function readForCache(ctx: Ctx, session: Session, cache: Map<string
  */
 export async function recordIsStale(ctx: Ctx, session: Session, cache: Map<string, ReadState>, rec: DiffRecord): Promise<boolean> {
   if (rec.superseded === true) return true
-  if (!Array.isArray(rec.hunks) || !rec.hunks.length) return true
+  if (!Array.isArray(rec.hunks) || !rec.hunks.length) { rec.conflict = true; return false }
   const state = await readForCache(ctx, session, cache, rec.path)
   if (state.kind === 'unavailable') return false
-  if (state.kind === 'missing') return true
+  if (state.kind === 'missing') { rec.conflict = true; return false }
   if (rec.create === true) return false
   const pending = rec.hunks.map((_, idx) => ({ idx, hunk: preciseHunk(rec, idx), status: rec.decisions.perHunk[idx] ?? rec.decisions.call }))
     .filter((item) => item.status === 'pending' && item.hunk && !isNoopHunk(item.hunk))