chat(p1): sidecar GC级联清理完整化，预留加密算法迁移协议

Author: steve02081504

src/public/locales/zh-CN.json

@@ -712,6 +712,7 @@
 			"msgPrefixSticker": "贴纸",
 			"membersEmpty": "（暂无成员）",
 			"channelEncryptionNone": "访问控制私密（推荐）",
+			"unknownEncryptionScheme": "该频道使用了不支持的加密方案，请升级客户端",
 			"channelEncryptionMailbox": "高隐私模式（端到端加密）",
 			"channelEncryptionEnableWarning": "开启高隐私模式后，消息内容将端到端加密，超级节点无法读取内容。历史消息不受影响，成员列表对节点仍可见。是否继续？",
 			"channelEncryptionDisableWarning": "关闭高隐私模式后，新消息将不再加密，超级节点可读取频道内容。是否继续？",

src/public/parts/shells/chat/src/chat/dag.mjs

@@ -686,6 +686,25 @@ export async function appendEncryptedMailboxBatch(username, chatId, body) {
 	})
 }
 
+/**
+ * 记录私密频道加密方案迁移（硬切换预留，供客户端按版本协商）。
+ * @param {string} username 用户名
+ * @param {string} chatId 群组 ID
+ * @param {{ channelId: string, newScheme: string, newVersion?: number, sender?: string }} body 迁移参数
+ * @returns {Promise<object>} `appendEvent` 返回的签名事件对象
+ */
+export async function appendChannelCryptoMigrate(username, chatId, body) {
+	const { channelId, newScheme, newVersion, sender = 'local' } = body
+	if (!channelId || !newScheme) throw new Error('channelId and newScheme required')
+	return appendEvent(username, chatId, {
+		type: 'channel_crypto_migrate',
+		channelId,
+		sender,
+		timestamp: Date.now(),
+		content: { channelId, newScheme, newVersion: newVersion ?? 1 },
+	})
+}
+
 /**
  * 记录群主或其代理节点的活跃心跳。
  * @param {string} username 用户名
@@ -949,6 +968,8 @@ export async function pruneChannelMessagesJsonl(username, chatId, channelId, kee
 	const kept = n ? lines.slice(-n) : []
 	await mkdir(dirname(path), { recursive: true })
 	await writeFile(path, kept.map(l => JSON.stringify(l)).join('\n') + (kept.length ? '\n' : ''), 'utf8')
+	const keepIds = new Set(kept.map(l => String(l.content?.chatLogEntryId || l.eventId || '')).filter(Boolean))
+	await pruneSidecarsNotInSet(username, chatId, channelId, keepIds)
 }
 
 /**

src/public/parts/shells/chat/src/chat/session.mjs

@@ -6,6 +6,8 @@
 
 import { Buffer } from 'node:buffer'
 import fs from 'node:fs'
+import { readdir, stat } from 'node:fs/promises'
+import { join } from 'node:path'
 import { inspect } from 'node:util'
 
 import { loadJsonFile, saveJsonFile } from '../../../../../../scripts/json_loader.mjs'
@@ -21,10 +23,10 @@ import { unlockAchievement } from '../../../achievements/src/api.mjs'
 import { addfile, getfile } from '../files.mjs'
 import { generateDiff, createBufferedSyncPreviewUpdater } from '../stream.mjs'
 
-import { deleteLogContextSidecar, hydrateLogContextFromSidecar, persistLogContextSidecar } from './context_sidecar.mjs'
+import { deleteLogContextSidecar, hydrateLogContextFromSidecar, persistLogContextSidecar, pruneSidecarsNotInSet } from './context_sidecar.mjs'
 import { appendEvent, deleteChatData, ensureChat, getDefaultChannelId, getState, isValidChannelId, listChannelMessages } from './dag.mjs'
 import { syncChatLogEntryToDag, mirrorDeleteToDag, mirrorEditToDag } from './dagSync.mjs'
-import { chatJsonPath, chatsRoot } from './paths.mjs'
+import { chatDir, chatJsonPath, chatsRoot } from './paths.mjs'
 import { createCharRpcDispatcher } from './rpcDispatcher.mjs'
 import { broadcastEvent as broadcastGroupEvent, bufferStreamChunk, finishStreamBuffer } from './websocket.mjs'
 
@@ -617,6 +619,44 @@ async function updateChatSummary(groupId, chatMetadata) {
 	saveShellData(username, 'chat', 'chat_summaries_cache')
 }
 
+/**
+ * 按当前 chatLog 对齐各频道 context sidecar：删除已不存在条目对应的缓存文件。
+ * @param {string} username 所有者
+ * @param {string} groupId 群 ID
+ * @param {chatLogEntry_t[]} chatLog 当前内存中的日志条目
+ * @returns {Promise<void>}
+ */
+async function reconcileContextSidecarsWithChatLog(username, groupId, chatLog) {
+	if (!username || !groupId || !Array.isArray(chatLog)) return
+	const byCh = new Map()
+	for (const entry of chatLog) {
+		if (!entry?.id) continue
+		const ch = isValidChannelId(entry.extension?.groupChannelId)
+			? entry.extension.groupChannelId
+			: 'default'
+		if (!byCh.has(ch)) byCh.set(ch, new Set())
+		byCh.get(ch).add(entry.id)
+	}
+	const ctxRoot = join(chatDir(username, groupId), 'context_cache')
+	let names = []
+	try {
+		names = await readdir(ctxRoot)
+	}
+	catch {
+		return
+	}
+	const channels = new Set(byCh.keys())
+	for (const name of names) 
+		try {
+			if ((await stat(join(ctxRoot, name))).isDirectory())
+				channels.add(name)
+		}
+		catch { /* ignore */ }
+	
+	for (const ch of channels)
+		await pruneSidecarsNotInSet(username, groupId, ch, byCh.get(ch) ?? new Set())
+}
+
 /**
  * 从 DAG default 频道行构造 chatLog 条目。
  * @param {object} line DAG 消息事件行
@@ -699,6 +739,8 @@ async function hydrateChatLogFromDag(username, groupId, chatMetadata) {
 	chatMetadata.timeLineIndex = 0
 	if (chatMetadata.chatLog.length)
 		chatMetadata.LastTimeSlice = chatMetadata.chatLog[chatMetadata.chatLog.length - 1].timeSlice
+
+	await reconcileContextSidecarsWithChatLog(username, groupId, chatMetadata.chatLog)
 }
 
 /**
@@ -1451,7 +1493,7 @@ async function executeGeneration(groupId, request, stream, placeholderEntry, cha
 			}
 			catch { /* ignore */ }
 			const idx = chatMetadata.chatLog.findIndex(e => e.id === entryId)
-			if (idx !== -1) await deleteMessage(groupId, idx)
+			if (idx !== -1) await deleteMessage(groupId, null, idx)
 			return
 		}
 
@@ -1900,6 +1942,18 @@ export async function deleteChat(chatids, username) {
 		try {
 			const jsonPath = chatJsonPath(username, groupId)
 			if (fs.existsSync(jsonPath)) await fs.promises.unlink(jsonPath)
+			try {
+				const ctxRoot = join(chatDir(username, groupId), 'context_cache')
+				const names = await readdir(ctxRoot)
+				for (const name of names) 
+					try {
+						if ((await stat(join(ctxRoot, name))).isDirectory())
+							await pruneSidecarsNotInSet(username, groupId, name, new Set())
+					}
+					catch { /* ignore */ }
+				
+			}
+			catch { /* ignore */ }
 			await deleteChatData(username, groupId)
 			chatMetadatas.delete(groupId)
 			delete summariesCache[groupId]
@@ -2017,6 +2071,7 @@ export async function deleteMessage(groupId, channelId, index) {
 
 	const owner = chatMetadatas.get(groupId)?.username
 	await mirrorDeleteToDag(groupId, entry, owner)
+	await reconcileContextSidecarsWithChatLog(chatMetadata.username, groupId, chatMetadata.chatLog)
 }
 
 /**

src/public/parts/shells/chat/src/endpoints.mjs

@@ -476,7 +476,26 @@ export function setEndpoints(router) {
 	router.post('/api/parts/shells\\:chat/groups/:groupId/mailbox-batch', authenticate, async (req, res) => {
 		const { username } = await getUserByReq(req)
 		const { groupId } = req.params
-		const out = await appendEncryptedMailboxBatch(username, groupId, req.body || {})
+		const body = req.body || {}
+		const { channelId } = body
+		if (!channelId)
+			return res.status(400).json({ error: 'channelId required' })
+		const { state } = await getState(username, groupId)
+		const chMeta = state.channels.get(String(channelId))
+		const scheme = chMeta?.encryptionScheme ?? 'none'
+		const requiredVersion = typeof chMeta?.encryptionVersion === 'number' && Number.isFinite(chMeta.encryptionVersion)
+			? Math.max(1, Math.floor(chMeta.encryptionVersion))
+			: 1
+		if (scheme !== 'mailbox-ecdh') {
+			const unknownScheme = scheme !== 'none' && scheme !== 'mailbox-ecdh'
+			return res.status(409).json({
+				error: 'ENCRYPTION_SCHEME_MISMATCH',
+				currentScheme: scheme,
+				requiredVersion,
+				...unknownScheme ? { messageKey: 'chat.group.unknownEncryptionScheme' } : {},
+			})
+		}
+		const out = await appendEncryptedMailboxBatch(username, groupId, body)
 		res.status(200).json({ event: out })
 	})
 

src/scripts/p2p/constants.mjs

@@ -33,6 +33,7 @@ export const AUTHZ_EVENT_TYPES = new Set([
 	'role_revoke',
 	'channel_create',
 	'channel_update',
+	'channel_crypto_migrate',
 	'channel_delete',
 	'channel_permission_update',  // 频道级角色 allow/deny 覆写
 	'list_item_update',

src/scripts/p2p/materialized_state.mjs

@@ -181,6 +181,21 @@ export function foldAuthzEvent(state, event) {
 			}
 			break
 		}
+		case 'channel_crypto_migrate': {
+			const id = c.channelId || event.channelId
+			const cur = id ? state.channels.get(id) : null
+			if (cur && id) {
+				const ver = c.newVersion != null && Number.isFinite(Number(c.newVersion))
+					? Math.max(1, Math.floor(Number(c.newVersion)))
+					: 1
+				state.channels.set(id, {
+					...cur,
+					encryptionScheme: String(c.newScheme || cur.encryptionScheme || 'none'),
+					encryptionVersion: ver,
+				})
+			}
+			break
+		}
 		case 'channel_permission_update': {
 			// content: { channelId, roleId, allow?: Record<string,boolean>, deny?: Record<string,boolean> }
 			// 若 allow/deny 均缺省则清除该角色的频道覆写