[taoking]

概览

本 PR 是 v0.3.0 的纯 Archive Viewer 体验迭代，不修改 Archive schema，也不新增微信消息协议。

• 为 Archive 增加私有、可删除重建的 FTS5 派生搜索索引；中文子串优先使用 trigram，并提供 LIKE 兼容回退。
• 搜索和日期跳转可定位到消息附近，并以稳定 source cursor 双向翻页。
• 增加当前会话的月份日历导航、消息计数和快速月份切换。
• 增加文本/媒体/会话右键操作、⌘F/⌘E/⌘J 快捷键、搜索结果高亮与分页。
• 将引用回复呈现为安全的发送者与内容摘要；新导入和既有 Archive 都不会在普通 Viewer、搜索或会话导出中显示微信内部 XML 元数据。
• 保持 Archive 只读和 source-independent：搜索、日期和媒体操作均只使用 WeChatArchive。
• 补充 10,000 条合成消息游标测试、同秒排序、时区、搜索索引权限/失效/取消/隐私字段测试。

隐私

搜索索引仅保存在本机 Application Support，目录 0700、数据库 0600；不保存来源数据库、原始行、原始 SQLite 值或任何密钥。删除索引不会影响 Archive。

验证

• swift build PASS
• swift test 143 passed / 0 failed / 2 opt-in skipped
• git diff --check PASS
• GitHub Actions macOS build and test PASS

范围

本 PR 不包含新的微信消息类型、增量备份、云同步或 Archive schema 变更。

[taoking]

Pushed fixes for all 8 review findings in fc0360a:

Correctness / concurrency (high priority):

• Quoted-message XML boundary now ends at the first matching close tag, not the last — a reply containing the same tag substring (e.g. </msg>) was previously getting silently truncated.
• ArchiveMessageSearchService.indexURL is now a stateless computed property instead of mutable state written from a background task and read from the MainActor — removes the data race, and as a side effect lets prepareIndex() actually reach its corrupt-index rebuild path (previously the reuse-check error escaped uncaught there, so a corrupted cached index failed identically on every launch instead of self-healing).

Correctness (medium):

• Sidebar "打开" context-menu button was a no-op; now wired up.
• jumpToMessage no longer does a redundant O(n) existence scan before messageWindow, which already checks existence via a cheap indexed lookup.
• "复制文字、发送者和时间" no longer offered on outgoing messages (was copying a "消息" placeholder instead of a real name).

Perf / cleanup (low):

• Search-result avatars now resolved once per result set instead of per render.
• Deduplicated the two identical snippet() implementations into ArchiveTextSnippetBuilder.

Added regression tests for the XML truncation bug and for prepareIndex() actually rebuilding (not just search() falling back) on a corrupt index. Full suite: 143 tests passing, 2 skipped (opt-in real-archive tests).