@avantf/dsh-mem 0.8.1 → 0.10.0

package/lib/client.js

@@ -29,34 +29,25 @@ window.__ModuleLoader__.load({
 		let react = require("react");
 		react = __toESM(react, 1);
 		//#region \0dsh-css:src/client/pages.module.css.mjs
-		const css = ".HvfIsq_section{color:var(--dsw-alias-label-primary);width:100%;max-width:var(--dsh-chat-content-width);flex-direction:column;gap:12px;margin:0 auto;display:flex}.HvfIsq_headbar{z-index:4;border-bottom:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-base);flex-wrap:wrap;align-items:flex-end;gap:8px;padding-bottom:8px;display:flex;position:sticky;top:0}.HvfIsq_warn{color:var(--dsw-alias-state-warn-label);background:color-mix(in srgb, var(--dsw-alias-state-warn-primary) 16%, transparent);border-radius:9px;margin-left:6px;padding:0 6px;font-size:11px;line-height:16px;display:inline-block}.HvfIsq_search{width:100%;color:var(--dsw-alias-label-tertiary);align-items:center;display:flex;position:relative}.HvfIsq_searchField{flex:260px;width:auto}.HvfIsq_searchPanel{border:.5px solid var(--dsw-alias-state-business-primary);background:color-mix(in srgb, var(--dsw-alias-state-business-primary) 7%, transparent);border-radius:10px;flex-direction:column;gap:8px;padding:10px;display:flex}.HvfIsq_searchTitle{color:var(--dsw-alias-label-primary);flex-wrap:wrap;align-items:baseline;gap:6px;font-size:13px;font-weight:600;display:flex}.HvfIsq_searchQuery{color:var(--dsw-alias-label-tertiary);font-size:12px;font-weight:400}.HvfIsq_select{border:.5px solid var(--dsw-alias-border-l4);background:var(--dsw-alias-bg-layer-1);height:28px;color:var(--dsw-alias-label-primary);font:inherit;border-radius:8px;outline:none;padding:0 8px;font-size:12px}.HvfIsq_select:focus-visible{border-color:var(--dsw-alias-state-business-primary);box-shadow:0 0 0 2px color-mix(in srgb, var(--dsw-alias-state-business-primary) 18%, transparent)}.HvfIsq_search>svg{pointer-events:none;position:absolute;left:12px}.HvfIsq_search input{border:.5px solid var(--dsw-alias-border-l4);background:var(--dsw-alias-bg-layer-1);width:100%;height:36px;color:var(--dsw-alias-label-primary);font:inherit;border-radius:10px;outline:none;padding:0 34px 0 36px;font-size:13px}.HvfIsq_search input::placeholder{color:var(--dsw-alias-label-tertiary)}.HvfIsq_search input:focus-visible{border-color:var(--dsw-alias-state-business-primary);box-shadow:0 0 0 2px color-mix(in srgb, var(--dsw-alias-state-business-primary) 18%, transparent)}.HvfIsq_clear{width:20px;height:20px;color:var(--dsw-alias-label-tertiary);font:inherit;cursor:pointer;background:0 0;border:0;border-radius:50%;justify-content:center;align-items:center;padding:0;font-size:16px;line-height:1;display:inline-flex;position:absolute;top:50%;right:8px;transform:translateY(-50%)}.HvfIsq_clear:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover)}.HvfIsq_clear:focus-visible{outline:2px solid var(--dsw-alias-state-business-primary);outline-offset:1px}.HvfIsq_status{color:var(--dsw-alias-label-tertiary);font-size:12px}.HvfIsq_error{color:var(--dsw-alias-label-error);white-space:pre-wrap;font-size:12px}.HvfIsq_list{flex-direction:column;gap:8px;margin:0;padding:0;list-style:none;display:flex}.HvfIsq_item{border:.5px solid var(--dsw-alias-border-l4);background:var(--dsw-alias-bg-layer-1);border-radius:10px;padding:8px 10px;font-size:13px;line-height:1.5}.HvfIsq_meta{color:var(--dsw-alias-label-tertiary);margin-top:2px;font-size:12px;display:block}.HvfIsq_detail{flex-direction:column;gap:4px;display:flex}.HvfIsq_more{border:.5px solid var(--dsw-alias-border-l3);height:28px;color:var(--dsw-alias-label-primary);font:inherit;cursor:pointer;background:0 0;border-radius:14px;justify-content:center;align-self:flex-start;align-items:center;gap:4px;padding:0 12px;font-size:12px;line-height:18px;display:inline-flex}.HvfIsq_more:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.HvfIsq_more:disabled{cursor:not-allowed;opacity:.4}.HvfIsq_toolbar{flex-wrap:wrap;align-items:flex-end;gap:8px;display:flex}.HvfIsq_form{flex-direction:column;gap:8px;display:flex}.HvfIsq_row{flex-wrap:wrap;align-items:center;gap:6px;margin-top:6px;display:flex}.HvfIsq_btn{border:.5px solid var(--dsw-alias-border-l3);height:24px;color:var(--dsw-alias-label-primary);font:inherit;cursor:pointer;background:0 0;border-radius:12px;justify-content:center;align-items:center;gap:4px;padding:0 10px;font-size:12px;line-height:16px;display:inline-flex}.HvfIsq_btn:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.HvfIsq_btn:disabled{cursor:not-allowed;opacity:.4}.HvfIsq_btnActive{border-color:var(--dsw-alias-state-business-primary);color:var(--dsw-alias-state-business-primary)}.HvfIsq_btnDanger{color:var(--dsw-alias-label-error)}.HvfIsq_fieldHead{justify-content:space-between;align-items:center;gap:8px;display:flex}.HvfIsq_fieldHead>*+*{flex:none}.HvfIsq_field{color:var(--dsw-alias-label-tertiary);flex-direction:column;flex:auto;gap:4px;min-width:120px;font-size:12px;display:flex}.HvfIsq_input{border:.5px solid var(--dsw-alias-border-l4);background:var(--dsw-alias-bg-layer-1);height:28px;color:var(--dsw-alias-label-primary);font:inherit;border-radius:8px;outline:none;min-width:0;padding:0 8px;font-size:12px}.HvfIsq_input:focus-visible{border-color:var(--dsw-alias-state-business-primary);box-shadow:0 0 0 2px color-mix(in srgb, var(--dsw-alias-state-business-primary) 18%, transparent)}.HvfIsq_textarea{border:.5px solid var(--dsw-alias-border-l4);background:var(--dsw-alias-bg-layer-1);width:100%;color:var(--dsw-alias-label-primary);font:inherit;resize:vertical;box-sizing:border-box;border-radius:8px;outline:none;margin-top:6px;padding:6px 8px;font-size:12px;line-height:1.5}.HvfIsq_textarea:focus-visible{border-color:var(--dsw-alias-state-business-primary);box-shadow:0 0 0 2px color-mix(in srgb, var(--dsw-alias-state-business-primary) 18%, transparent)}.HvfIsq_groupHead{color:var(--dsw-alias-label-secondary);margin:4px 0 2px;font-size:12px;font-weight:600}.HvfIsq_badge{color:var(--dsw-alias-label-tertiary);margin-bottom:2px;font-size:11px;display:inline-block}.HvfIsq_chunkBox{border:.5px solid var(--dsw-alias-border-l4);border-radius:8px;margin-top:6px;padding:6px 8px;font-size:12px;line-height:1.5}.HvfIsq_picker{border:.5px solid var(--dsw-alias-border-l4);background:var(--dsw-alias-bg-layer-1);border-radius:10px;flex-direction:column;gap:8px;padding:8px 10px;display:flex}.HvfIsq_pickerHead{flex-direction:column;gap:2px;display:flex}.HvfIsq_pickerPath{overflow-wrap:anywhere;font-family:ui-monospace,monospace;font-size:12px}.HvfIsq_pickerList{border:.5px solid var(--dsw-alias-border-l4);border-radius:8px;flex-direction:column;gap:1px;max-height:260px;margin:0;padding:0;list-style:none;display:flex;overflow:auto}.HvfIsq_pickerEntry{width:100%;color:inherit;font:inherit;text-align:left;cursor:pointer;background:0 0;border:0;padding:4px 8px;font-size:12px;display:block}.HvfIsq_pickerEntry:hover:not(:disabled){background:color-mix(in srgb, currentColor 8%, transparent)}.HvfIsq_pickerDisabled{opacity:.45;cursor:default}.HvfIsq_hintWarn{color:var(--dsw-alias-state-warn-label)}";
-		const tagId = "@avantf/dsh-mem/pages.module.css";
-		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
+		const css$1 = ".HvfIsq_section{color:var(--dsw-alias-label-primary);width:100%;max-width:var(--dsh-chat-content-width);flex-direction:column;gap:12px;margin:0 auto;display:flex}.HvfIsq_stickyTop{z-index:4;border-bottom:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-base);flex-direction:column;gap:8px;padding-bottom:8px;display:flex;position:sticky;top:0}.HvfIsq_headbar{flex-wrap:wrap;align-items:flex-end;gap:8px;display:flex}.HvfIsq_warn{color:var(--dsw-alias-state-warn-label);background:color-mix(in srgb, var(--dsw-alias-state-warn-primary) 16%, transparent);border-radius:9px;margin-left:6px;padding:0 6px;font-size:11px;line-height:16px;display:inline-block}.HvfIsq_search{width:100%;color:var(--dsw-alias-label-tertiary);align-items:center;display:flex;position:relative}.HvfIsq_searchField{flex:260px;width:auto}.HvfIsq_edit{margin-top:6px}.HvfIsq_search>svg{pointer-events:none;position:absolute;left:12px}.HvfIsq_search input{border:.5px solid var(--dsw-alias-border-l4);border-radius:var(--dsw-radius-md);background:var(--dsw-alias-bg-layer-1);width:100%;height:36px;color:var(--dsw-alias-label-primary);font:inherit;outline:none;padding:0 34px 0 36px;font-size:13px}.HvfIsq_search input::placeholder{color:var(--dsw-alias-label-tertiary)}.HvfIsq_search input:focus-visible{border-color:var(--dsw-focus-ring-color,var(--dsw-alias-state-business-primary));box-shadow:0 0 0 2px color-mix(in srgb, var(--dsw-focus-ring-color,var(--dsw-alias-state-business-primary)) 18%, transparent)}.HvfIsq_search>button{position:absolute;top:50%;right:8px;transform:translateY(-50%)}.HvfIsq_detail{flex-direction:column;gap:4px;display:flex}.HvfIsq_more{align-self:flex-start}.HvfIsq_toolbar{flex-wrap:wrap;align-items:flex-end;gap:8px;display:flex}.HvfIsq_form{flex-direction:column;gap:8px;display:flex}.HvfIsq_row{flex-wrap:wrap;align-items:center;gap:6px;margin-top:6px;display:flex}.HvfIsq_fieldHead{justify-content:space-between;align-items:center;gap:8px;display:flex}.HvfIsq_fieldHead>*+*{flex:none}.HvfIsq_field{color:var(--dsw-alias-label-tertiary);flex-direction:column;flex:auto;gap:4px;min-width:120px;font-size:12px;display:flex}.HvfIsq_groupHead{color:var(--dsw-alias-label-secondary);margin:4px 0 2px;font-size:12px;font-weight:600}.HvfIsq_chunkBox{border:.5px solid var(--dsw-alias-border-l4);border-radius:8px;margin-top:6px;padding:6px 8px;font-size:12px;line-height:1.5}.HvfIsq_picker{border:.5px solid var(--dsw-alias-border-l4);background:var(--dsw-alias-bg-layer-1);border-radius:10px;flex-direction:column;gap:8px;padding:8px 10px;display:flex}.HvfIsq_pickerHead{flex-direction:column;gap:2px;display:flex}.HvfIsq_pickerPath{overflow-wrap:anywhere;font-family:ui-monospace,monospace;font-size:12px}.HvfIsq_pickerList{border:.5px solid var(--dsw-alias-border-l4);border-radius:8px;flex-direction:column;gap:1px;max-height:260px;margin:0;padding:0;list-style:none;display:flex;overflow:auto}.HvfIsq_pickerEntry{width:100%;color:inherit;font:inherit;text-align:left;cursor:pointer;background:0 0;border:0;padding:4px 8px;font-size:12px;display:block}.HvfIsq_pickerEntry:hover:not(:disabled){background:color-mix(in srgb, currentColor 8%, transparent)}.HvfIsq_pickerDisabled{opacity:.45;cursor:default}.HvfIsq_hintWarn{color:var(--dsw-alias-state-warn-label)}";
+		const tagId$1 = "@avantf/dsh-mem/pages.module.css";
+		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId$1) + "]") === null) {
 			const tag = document.createElement("style");
 			tag.dataset.plugin = "@avantf/dsh-mem";
-			tag.dataset.pluginCss = tagId;
-			tag.textContent = css;
+			tag.dataset.pluginCss = tagId$1;
+			tag.textContent = css$1;
 			document.head.appendChild(tag);
 		}
 		var pages_module_css_default = {
-			"badge": "HvfIsq_badge",
-			"btn": "HvfIsq_btn",
-			"btnActive": "HvfIsq_btnActive",
-			"btnDanger": "HvfIsq_btnDanger",
 			"chunkBox": "HvfIsq_chunkBox",
-			"clear": "HvfIsq_clear",
 			"detail": "HvfIsq_detail",
-			"error": "HvfIsq_error",
+			"edit": "HvfIsq_edit",
 			"field": "HvfIsq_field",
 			"fieldHead": "HvfIsq_fieldHead",
 			"form": "HvfIsq_form",
 			"groupHead": "HvfIsq_groupHead",
 			"headbar": "HvfIsq_headbar",
 			"hintWarn": "HvfIsq_hintWarn",
-			"input": "HvfIsq_input",
-			"item": "HvfIsq_item",
-			"list": "HvfIsq_list",
-			"meta": "HvfIsq_meta",
 			"more": "HvfIsq_more",
 			"picker": "HvfIsq_picker",
 			"pickerDisabled": "HvfIsq_pickerDisabled",
@@ -67,13 +58,8 @@ window.__ModuleLoader__.load({
 			"row": "HvfIsq_row",
 			"search": "HvfIsq_search",
 			"searchField": "HvfIsq_searchField",
-			"searchPanel": "HvfIsq_searchPanel",
-			"searchQuery": "HvfIsq_searchQuery",
-			"searchTitle": "HvfIsq_searchTitle",
 			"section": "HvfIsq_section",
-			"select": "HvfIsq_select",
-			"status": "HvfIsq_status",
-			"textarea": "HvfIsq_textarea",
+			"stickyTop": "HvfIsq_stickyTop",
 			"toolbar": "HvfIsq_toolbar",
 			"warn": "HvfIsq_warn"
 		};
@@ -4174,11 +4160,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				content: optionalText.optional(),
 				fact_id: count.optional(),
 				kind: optionalText.optional(),
-				ttl_days: count.optional(),
 				reason: optionalText.optional(),
 				source_ref: optionalText.optional(),
 				event_date: optionalText.optional(),
-				valid_until: optionalText.optional(),
 				title: optionalText.optional(),
 				retitle: bool.optional(),
 				relations: array(object({
@@ -4328,6 +4312,86 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			return violations && violations.length > 0 ? violations.join("；") : "";
 		}
 		//#endregion
+		//#region ../contract/lib/time.js
+		/**
+		* The ONE place a stored timestamp turns into a string a human (or a model) reads.
+		*
+		* ── THE BUG THIS MODULE EXISTS FOR ───────────────────────────────────────────────────────────────
+		*
+		* `facts.created_at` / `updated_at` / `archived_at` (and `contradiction_log.detected_at`, and the
+		* retrieval-health stamp) are written by SQLite's `DEFAULT CURRENT_TIMESTAMP`, which is **UTC**, and
+		* `store/memory.ts` used to hand the raw text up to every surface. Two consequences, both reported as
+		* "记忆时间显示不对":
+		*
+		*  1. the UI printed `2026-10-28 11:58:48` as if it were a local wall clock (Asia/Shanghai really
+		*     meant `19:58:48`), because a zone-less string cannot say otherwise;
+		*  2. the MODEL received the same zone-less string next to `event_date`, which is a calendar DATE
+		*     with no time and no zone. Two different kinds of value, one shape — the model had to guess
+		*     which one it was looking at, and it cannot.
+		*
+		* ── THE SPLIT THIS MODULE ENFORCES ───────────────────────────────────────────────────────────────
+		*
+		* Storage stays UTC and stays byte-identical (`facts_io` export/import/snapshot is a compatibility
+		* surface and is deliberately NOT routed through here). The fix is in the two DISPLAY faces:
+		*
+		*  - {@link formatOffsetIso} — the MODEL face (`mem_recall` hits, `mem_admin list/detail/
+		*    contradictions`, `mem_admin stats`, the CLI and MCP that print those payloads): an ISO-8601
+		*    instant **with an explicit offset**, e.g. `2026-10-28T19:58:48+08:00`, rendered in the host's
+		*    local zone. The offset is part of the string, so the model needs no conversion and the value is
+		*    never ambiguous again — while `event_date` stays `2026-10-28`, a calendar date with no zone.
+		*  - {@link formatLocalHuman} — the HUMAN face (the 记忆 tab): `2026-10-28 19:58`, the same instant,
+		*    local, to the minute.
+		*
+		* Both read the input through the SAME parser ({@link parseUtcTs}) and the same instant, so the two
+		* faces cannot disagree. The UI deliberately formats the model face's OWN string rather than
+		* re-deriving one from the raw column: the input it gets already carries an offset, `parseUtcTs`
+		* leaves an explicit offset alone, and there is therefore exactly ONE parse rule and ONE pair of
+		* renderers in the repository — not a second opinion in the browser.
+		*
+		* Dependency-free on purpose: this module is reachable from the DSH client bundle through the
+		* `@avantf/mem-contract/time` subpath (the bundle must not pull in the tool schemas / zod). It has no
+		* DSH host and no DB, so the engine, the CLI and the MCP face can all use it.
+		*
+		* @module contract/time
+		*/
+		/** Two-digit, zero-padded — the only formatting primitive the two renderers share. */
+		function pad2(value) {
+			return String(value).padStart(2, "0");
+		}
+		/**
+		* `'YYYY-MM-DD HH:MM:SS'` (SQLite UTC) or ISO → epoch ms; null/garbage → null.
+		*
+		* A stamp with NO zone designator is read as UTC, not as local time. `Date.parse` treats a zone-less
+		* ISO string as LOCAL, and everything in this store is written in UTC (`CURRENT_TIMESTAMP`, and
+		* {@link formatUtcTs}), so handing one over as-is would shift every quota window and every decay
+		* measurement by the host's UTC offset — a fact reinforced at 23:00 UTC+8 would look reinforced 8
+		* hours earlier, and the 24h cap would open or close at the wrong moment. An explicit `Z` or
+		* `±HH:MM` is left alone (that is what makes a `formatOffsetIso` output safe to feed back in).
+		*/
+		function parseUtcTs(ts) {
+			if (ts === null || ts === void 0 || ts === "") return null;
+			const iso = ts.includes("T") ? ts : ts.replace(" ", "T");
+			const zoned = /(?:Z|[+-]\d{2}:?\d{2})$/i.test(iso) ? iso : `${iso}Z`;
+			const ms = Date.parse(zoned);
+			return Number.isFinite(ms) ? ms : null;
+		}
+		/**
+		* The HUMAN face: the same instant as local wall-clock text to the minute (`2026-10-28 19:58`).
+		*
+		* Seconds are deliberately dropped: the list/detail lines and the health line are read at a glance,
+		* and `HH:MM` is the whole useful resolution there. `null` for an absent/unreadable value (same
+		* contract as {@link formatOffsetIso}), so a caller prints its own 「未知」/`—` placeholder.
+		*
+		* NOT for `event_date` / `valid_from`: those are calendar dates the CALLER wrote (`2026-10-28`), with
+		* no time and no zone. Running one through here would invent a midnight in the host's zone.
+		*/
+		function formatLocalHuman(ts) {
+			const ms = parseUtcTs(ts);
+			if (ms === null) return null;
+			const at = new Date(ms);
+			return `${String(at.getFullYear())}-${pad2(at.getMonth() + 1)}-${pad2(at.getDate())} ${pad2(at.getHours())}:${pad2(at.getMinutes())}`;
+		}
+		//#endregion
 		//#region src/client/summarize.ts
 		/**
 		* Short, page-friendly rendering of a tool result — never a JSON wall.
@@ -4383,31 +4447,135 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		//#endregion
 		//#region src/client/paging.ts
 		/**
-		* Page merging for the fact list.
+		* Page merging for the tab's ONE list.
 		*
 		* Kept out of `client/index.ts` so it can be tested without a DOM (the same reason `summarize.ts`
 		* lives on its own): this is where page drift is handled, and page drift is the kind of bug that
 		* only shows up as a React key warning plus a row nobody can scroll to.
 		*
+		* There used to be TWO helpers here — one keyed by `fact_id` for the admin list and one by `ref_id` for
+		* a time window's results — because the tab kept two lists. It keeps one now (`ListState`), so there is
+		* one merge: the row's React key is the identity, and both sources are appended through it.
+		*
 		* @module client/paging
 		*/
 		/**
-		* Append one page of facts, dropping ids already present.
+		* Append one page of list rows, dropping keys already present.
+		*
+		* Both sources page by `OFFSET` over `created_at DESC`, and `created_at` has second precision: a fact
+		* written (or archived) between two requests shifts every later row by one, so the next page repeats a
+		* row that is already on screen. The duplicate is not cosmetic — it is a React key collision
+		* (`key={row.key}`) and a row that can never be scrolled to.
 		*
-		* `admin.list` pages by `OFFSET` over `created_at DESC`, and `created_at` has second precision: a
-		* fact written (or archived) between two requests shifts every later row by one, so the next page
-		* repeats a row that is already on screen. The duplicate is not cosmetic — it is a React key
-		* collision (`key={fact_id}`) and a row that can never be scrolled to.
+		* A fact-shaped row's `key` is `fact:<id>`, so this stays exactly as strict as the two helpers it
+		* replaced; a relation path row is keyed by its position and cannot collide with one.
 		*/
-		function mergePage(previous, page) {
-			return mergeById(previous, page, (row) => row.fact_id);
-		}
-		/** Append the rows whose id is not already loaded, preserving order; identity when nothing is new. */
-		function mergeById(previous, page, idOf) {
-			const seen = new Set(previous.map(idOf));
-			const added = page.filter((row) => !seen.has(idOf(row)));
+		function mergeRows(previous, page) {
+			const seen = new Set(previous.map((row) => row.key));
+			const added = page.filter((row) => !seen.has(row.key));
 			return added.length === 0 ? previous : [...previous, ...added];
 		}
+		/**
+		* Fold the pages of a WALKED window into the list's rows (REVIEW-2026-10-27 P1-1).
+		*
+		* The walk in `runTimeWindow` requests page after page from `offset` 0, and the drift the merge above
+		* guards against happens BETWEEN those requests just as it does between two scroll-triggered pages: a
+		* fact written while page 2 is in flight shifts the window, so page 3 repeats a row of page 2. Collecting
+		* the raw hits and mapping them once (what the walk did) therefore duplicated a row inside the FIRST
+		* render — a duplicate React key, a card that cannot be scrolled to, and a `total - rows.length` that
+		* under-reports. Folding through {@link mergeRows} makes the walk and the continuation the same rule.
+		*
+		* Note what this does NOT touch: the host-handed offsets (`nextOffset`) still advance by the page's own
+		* length, never by the de-duplicated row count — the cursor follows the HOST's paging, the rows follow
+		* what is actually on screen.
+		*/
+		function mergeRowPages(pages) {
+			return pages.reduce((rows, page) => mergeRows(rows, [...page]), []);
+		}
+		/**
+		* Append ONE continuation page of a walked time window (`loadSearchPage`), and decide whether the window
+		* still has a page to fetch (REVIEW-2026-10-27 P1-2).
+		*
+		* `truncated` is the host's own rule — `offset + hits.length < total` — and NOT "did the row count grow".
+		* A page whose rows are all already on screen (extreme, but real: many facts inserted at the top between
+		* two requests shift every later row) adds nothing to `rows`, yet the anchor has moved, so claiming "no
+		* more rows" there stops the window for good while half of it is still unread.
+		*
+		* The one case that DOES stop is a page with no rows at all: the anchor cannot advance
+		* (`offset + 0 === offset`), so keeping `truncated` true would re-ask the same offset on every scroll.
+		* That is the empty page the host answers with when it has nothing more, not a repeated page.
+		*/
+		function appendWindowPage(previous, page) {
+			const nextOffset = page.offset + page.rows.length;
+			return {
+				rows: mergeRows(previous.rows, page.rows),
+				nextOffset,
+				truncated: page.rows.length > 0 && nextOffset < page.total
+			};
+		}
+		//#endregion
+		//#region src/client/time_filter.ts
+		/**
+		* The three time axes, with the labels the toolbar shows. The axis is REQUIRED by the contract (D1)
+		* and the three do not substitute for one another, so the control never defaults to "any time".
+		*/
+		const TIME_AXES = [
+			{
+				value: "created",
+				label: "入库时间"
+			},
+			{
+				value: "updated",
+				label: "修改时间"
+			},
+			{
+				value: "event",
+				label: "事件时间"
+			}
+		];
+		/** The panel-facing name of one axis (same list as {@link TIME_AXES}). */
+		function axisLabel(field) {
+			const axis = TIME_AXES.find((entry) => entry.value === field);
+			return axis === void 0 ? String(field) : axis.label;
+		}
+		/**
+		* Build the `time` argument from the controls. `undefined` = no time condition at all.
+		*
+		* In `on` mode the range inputs are IGNORED (the contract refuses `on` together with `from`/`to`,
+		* so a stale value in the hidden inputs must never leak into a request). Values are the native
+		* `YYYY-MM-DD` a date input produces; they are passed through untouched — the engine owns the
+		* grammar, including the timezone reading of a date without an offset.
+		*/
+		function buildTimeFilter(field, mode, on, from, to) {
+			if (mode === "on") {
+				const day = on.trim();
+				return day === "" ? void 0 : {
+					field,
+					on: day
+				};
+			}
+			const lower = from.trim();
+			const upper = to.trim();
+			if (lower === "" && upper === "") return void 0;
+			return {
+				field,
+				...lower === "" ? {} : { from: lower },
+				...upper === "" ? {} : { to: upper }
+			};
+		}
+		/**
+		* The panel's one-line statement of the window the visible results were narrowed to.
+		*
+		* WHY THE PANEL NEEDS IT: a time-filtered answer is shorter than the list, and without a line naming
+		* the window, "fewer rows than expected" is indistinguishable from a broken query. It is rendered
+		* from the filter the RESULTS were fetched with (not from the live controls), so editing a date
+		* input cannot relabel results that were fetched with the previous window.
+		*/
+		function timeFilterLabel(time) {
+			const axis = axisLabel(time.field);
+			if (time.on !== void 0) return `${axis} ${time.on}`;
+			return `${axis} ${time.from ?? "最早"} ~ ${time.to ?? "现在"}`;
+		}
 		//#endregion
 		//#region src/client/wire.ts
 		/**
@@ -4473,6 +4641,199 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			if (!/404|not found/iu.test(text)) return text;
 			return `宿主可能没有注册这个接口（旧版本 / 未重启）：客户端会随页面刷新，宿主只在 dsh web 启动时加载一次，所以 dsh web 很可能还在跑旧的宿主代码。重启 dsh web 后再试。（原始错误：${text}）`;
 		}
+		/**
+		* The nearest element that actually scrolls `node`, at or above it.
+		*
+		* The criterion is the computed `overflow-y` (`auto`/`scroll`) AND "it really overflows"
+		* (`scrollHeight > clientHeight`): a host's wrapper elements are `overflow-y:auto` long before their
+		* content is taller than they are, and binding to one of those would listen to an element that never
+		* emits a scroll. A `null` result is therefore honest — nothing here scrolls — and the listener falls
+		* back to `window` (see {@link createAutoLoadMore}).
+		*
+		* `node` ITSELF is considered first. A panel normally passes its root (the scrollport is an ancestor:
+		* the host's conversation scroll body), but a list that owns its scroller — a virtualized list whose
+		* `getScrollElement()` is its own container — passes that container, which is the very element
+		* scroll events fire on. Scroll events do not bubble between scrollers, so getting THIS element (not
+		* some ancestor) is what makes such a list work.
+		*/
+		function scrollParentOf(node) {
+			let current = node;
+			while (current !== null) {
+				const overflowY = computedOverflowY(current);
+				if ((overflowY === "auto" || overflowY === "scroll") && current.scrollHeight > current.clientHeight) return current;
+				current = current.parentElement;
+			}
+			return null;
+		}
+		/**
+		* The computed `overflow-y` of `element`, read off ITS OWN document's view.
+		*
+		* Not the bare `getComputedStyle` global: this module also runs under a test double or inside a
+		* detached document, and both need the style to come from somewhere explicit. An element with no
+		* view (no document, or a document without a window) reports `''` — "not a scrollport", the safe
+		* answer.
+		*/
+		function computedOverflowY(element) {
+			const view = element.ownerDocument?.defaultView;
+			if (view === null || view === void 0) return "";
+			return view.getComputedStyle(element).overflowY;
+		}
+		/**
+		* Where to listen: the scrollport when one was found, else `window`.
+		*
+		* The `window` fallback is the case the seat's own history taught: a panel can be mounted in a
+		* document whose scrollport is the page itself. Listening there costs nothing, but the POSITION check
+		* still needs a scrollport, so nothing fires until an ancestor with its own scrollbar appears (or the
+		* caller drives {@link AutoLoadMore.recheck}). `null` only in a host without a `window` at all.
+		*/
+		function scrollEventSource(scroller) {
+			if (scroller !== null) return scroller;
+			const view = globalThis["window"];
+			if (view === null || view === void 0 || typeof view !== "object") return null;
+			const candidate = view;
+			if (typeof candidate.addEventListener !== "function") return null;
+			if (typeof candidate.removeEventListener !== "function") return null;
+			return view;
+		}
+		/**
+		* The host's animation-frame pair, read off `globalThis` (`lib.dom` is not in this package's types, and
+		* a node host has neither function — the controller then checks synchronously, its pre-rAF behaviour).
+		*/
+		function animationFrames() {
+			const host = globalThis;
+			const candidate = host;
+			if (typeof candidate.requestAnimationFrame !== "function") return null;
+			if (typeof candidate.cancelAnimationFrame !== "function") return null;
+			return host;
+		}
+		/**
+		* Build the controller: listen for scroll (passive + one rAF per burst), check once immediately, and
+		* stay silent while `isEnabled()` is false.
+		*
+		* The immediate first check is not an optimisation: the first page of a short list does not fill the
+		* scrollport, so waiting for a scroll event means waiting forever.
+		*
+		* @param options - see {@link AutoLoadMoreOptions}. Read at creation: `scrollParentOf` runs once, so a
+		* panel that later gets its own scroller must dispose and recreate the controller.
+		*/
+		function createAutoLoadMore(options) {
+			const marginPx = options.marginPx ?? 300;
+			let scroller = scrollParentOf(options.target);
+			let source = scrollEventSource(scroller);
+			const frames = animationFrames();
+			let onLoadMore = options.onLoadMore;
+			let version = options.version ?? 0;
+			let disposed = false;
+			let queued = false;
+			let frame = null;
+			/** Bumped whenever a queued frame is superseded, so a callback the host still runs is a no-op. */
+			let generation = 0;
+			/** Move the listener onto `next`: the window fallback may be holding it, and a stale element listener
+			*  would keep listening on a node that no longer scrolls. */
+			const bind = (next) => {
+				if (next === scroller) return;
+				source?.removeEventListener("scroll", onScroll);
+				scroller = next;
+				source = scrollEventSource(next);
+				source?.addEventListener("scroll", onScroll, { passive: true });
+			};
+			const check = () => {
+				frame = null;
+				queued = false;
+				if (disposed || onLoadMore === null) return;
+				if (scroller === null) {
+					const found = scrollParentOf(options.target);
+					if (found === null) return;
+					bind(found);
+				}
+				if (scroller === null) return;
+				if (!options.isEnabled()) return;
+				if (scroller.scrollTop + scroller.clientHeight >= scroller.scrollHeight - marginPx) onLoadMore();
+			};
+			/**
+			* Drop the queued frame, if there is one, and make any callback already handed to the host inert.
+			*
+			* Called before a SYNC check (`recheck`/`setVersion`): the frame a scroll just scheduled reads the
+			* same position, so leaving it scheduled asks for the same page twice — the second `onLoadMore`
+			* arrives after the caller's own guard may already have cleared. The generation bump is belt and
+			* braces: a host (or a test) that runs a cancelled callback anyway must not ask again.
+			*/
+			const cancelQueued = () => {
+				if (frame !== null && frames !== null) frames.cancelAnimationFrame(frame);
+				frame = null;
+				queued = false;
+				generation += 1;
+			};
+			const onScroll = () => {
+				if (disposed || queued) return;
+				queued = true;
+				if (frames === null) check();
+				else {
+					const scheduled = generation;
+					frame = frames.requestAnimationFrame(() => {
+						if (scheduled !== generation) return;
+						check();
+					});
+				}
+			};
+			source?.addEventListener("scroll", onScroll, { passive: true });
+			check();
+			return {
+				recheck() {
+					if (disposed) return;
+					cancelQueued();
+					check();
+				},
+				setVersion(next) {
+					if (disposed || next === version) return false;
+					version = next;
+					cancelQueued();
+					check();
+					return true;
+				},
+				dispose() {
+					if (disposed) return;
+					disposed = true;
+					onLoadMore = null;
+					source?.removeEventListener("scroll", onScroll);
+					if (frame !== null && frames !== null) frames.cancelAnimationFrame(frame);
+					frame = null;
+					queued = false;
+				}
+			};
+		}
+		//#endregion
+		//#region \0dsh-css:../../../base/src/client/controls.module.css.mjs
+		const css = ".-GlBVa_button{box-sizing:border-box;border-radius:var(--dsw-radius-md);color:var(--dsw-alias-label-primary);font:inherit;cursor:pointer;background:0 0;border:none;justify-content:center;align-items:center;gap:4px;padding:0 14px;font-size:14px;line-height:22px;display:inline-flex}.-GlBVa_button:disabled{cursor:not-allowed;opacity:.4}.-GlBVa_md{height:36px}.-GlBVa_sm{border-radius:var(--dsw-radius-sm);height:28px;padding:0 10px;font-size:12px;line-height:18px}.-GlBVa_primary{background:var(--dsw-alias-button-primary-fill);color:var(--dsw-alias-label-primary-foreground)}.-GlBVa_outline{box-shadow:inset 0 0 0 var(--dsh-hairline-width,.5px) var(--dsw-alias-border-l3);background:0 0;border:.5px solid #0000}.-GlBVa_danger{color:var(--dsw-alias-state-error-primary)}.-GlBVa_active{background:var(--dsw-alias-button-ghost-active-fill);box-shadow:inset 0 0 0 var(--dsh-hairline-width,.5px) var(--dsw-alias-button-ghost-active-border);color:var(--dsw-alias-label-primary)}@media (hover:hover){.-GlBVa_primary:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover)}.-GlBVa_ghost:hover:not(:disabled),.-GlBVa_outline:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.-GlBVa_danger:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover-danger)}.-GlBVa_active:hover:not(:disabled){background:var(--dsw-alias-button-ghost-active-hover)}}.-GlBVa_ghost:active:not(:disabled){background:var(--dsw-alias-interactive-bg-active)}.-GlBVa_badge{border-radius:var(--dsw-radius-xs);background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-secondary);align-items:center;gap:4px;padding:0 6px;font-size:11px;line-height:18px;display:inline-flex}.-GlBVa_list{flex-direction:column;gap:8px;margin:0;padding:0;list-style:none;display:flex}.-GlBVa_item{border:.5px solid var(--dsw-alias-settings-card-stroke);border-radius:var(--dsw-radius-md);background:var(--dsw-alias-settings-card-fill);color:var(--dsw-alias-label-primary);padding:10px 12px;font-size:13px;line-height:20px}.-GlBVa_meta{color:var(--dsw-alias-label-tertiary);margin-top:2px;font-size:12px;line-height:18px;display:block}.-GlBVa_status{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:18px}.-GlBVa_error{color:var(--dsw-alias-state-error-primary);white-space:pre-wrap;font-size:12px;line-height:18px}.-GlBVa_input,.-GlBVa_textarea,.-GlBVa_select,.-GlBVa_dateInput{box-sizing:border-box;border:.5px solid var(--dsw-alias-border-l4);border-radius:var(--dsw-radius-md);background:var(--dsw-alias-bg-layer-1);min-width:0;color:var(--dsw-alias-label-primary);font:inherit;padding:0 10px;font-size:14px;line-height:22px}.-GlBVa_input,.-GlBVa_select,.-GlBVa_dateInput{height:32px}.-GlBVa_input:focus-visible,.-GlBVa_textarea:focus-visible,.-GlBVa_select:focus-visible,.-GlBVa_dateInput:focus-visible{border-color:var(--dsw-alias-state-business-primary)}.-GlBVa_input::placeholder{color:var(--dsw-alias-label-dimmed)}.-GlBVa_input:disabled,.-GlBVa_textarea:disabled,.-GlBVa_select:disabled,.-GlBVa_dateInput:disabled{opacity:.6;cursor:default}.-GlBVa_textarea{resize:vertical;width:100%;padding:6px 10px}.-GlBVa_select{cursor:pointer}.-GlBVa_dateInput{font-variant-numeric:tabular-nums;padding:0 8px}.-GlBVa_clear{width:20px;height:20px;color:var(--dsw-alias-label-tertiary);font:inherit;cursor:pointer;background:0 0;border:none;border-radius:999px;justify-content:center;align-items:center;padding:0;font-size:14px;line-height:1;display:inline-flex}@media (hover:hover){.-GlBVa_clear:hover{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}}";
+		const tagId = "@avantf/dsh-mem/controls.module.css";
+		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
+			const tag = document.createElement("style");
+			tag.dataset.plugin = "@avantf/dsh-mem";
+			tag.dataset.pluginCss = tagId;
+			tag.textContent = css;
+			document.head.appendChild(tag);
+		}
+		var controls_module_css_default = {
+			"active": "-GlBVa_active",
+			"badge": "-GlBVa_badge",
+			"button": "-GlBVa_button",
+			"clear": "-GlBVa_clear",
+			"danger": "-GlBVa_danger",
+			"dateInput": "-GlBVa_dateInput",
+			"error": "-GlBVa_error",
+			"ghost": "-GlBVa_ghost",
+			"input": "-GlBVa_input",
+			"item": "-GlBVa_item",
+			"list": "-GlBVa_list",
+			"md": "-GlBVa_md",
+			"meta": "-GlBVa_meta",
+			"outline": "-GlBVa_outline",
+			"primary": "-GlBVa_primary",
+			"select": "-GlBVa_select",
+			"sm": "-GlBVa_sm",
+			"status": "-GlBVa_status",
+			"textarea": "-GlBVa_textarea"
+		};
 		//#endregion
 		//#region src/client/index.ts
 		/**
@@ -4492,7 +4853,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		* 2. Every remote call is normalized and surfaced: the raw response is logged
 		*    (prefixed `[avantf-mem]`) and rendered as an explicit status/error line, so
 		*    an empty result is never indistinguishable from a failed call.
-		* 3. Full DESIGN §12 surface: the tab does CRUD (edit/archive/restore/feedback) + fact detail
+		* 3. Full DESIGN §12 surface: the tab does CRUD (edit/archive/restore) + fact detail
 		*    (entities/triples) + open contradictions. Generation stays external (Plan A) — no answer
 		*    synthesis.
 		*
@@ -4501,20 +4862,52 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		* resolved from the platform module table.
 		*/
 		const h = react.createElement;
+		/**
+		* The panel's compact button, composed ONCE: the shared control geometry from the family base
+		* (`controls` is `@avantf/dsh-plugin-base/internal/controls.module.css`, hashed into this bundle at
+		* build time) + the outline variant. Every 按钮 in the panel used to carry its own copy of these
+		* numbers; the sizes/radius/hover now come from the base, so the 记忆 tab and the other family
+		* panels cannot drift apart.
+		*/
+		const BTN = `${controls_module_css_default.button} ${controls_module_css_default.sm} ${controls_module_css_default.outline}`;
+		/**
+		* Every timestamp the 记忆 tab prints goes through here: local wall-clock text to the minute
+		* (`2026-10-28 19:58`), or the caller's placeholder when the host sent nothing readable.
+		*
+		* This is a PLACEHOLDER policy, not a formatter — the formatting itself is
+		* `formatLocalHuman` from `@avantf/mem-contract/time`, the same module the host renders the model
+		* face with. The value arriving here is an instant WITH an offset (the host's `created_at` etc.), so
+		* `Date.parse` inside that one renderer is unambiguous; nothing in this file parses a time itself.
+		*
+		* A calendar date (`event_date` / `valid_from`) must NOT come through here: it has no time and no
+		* zone, and rendering it would invent a midnight in the viewer's zone.
+		*/
+		const localTime = (ts, fallback = "—") => formatLocalHuman(ts) ?? fallback;
 		const NOT_MOUNTED = "avantfMem Remote 未挂载：本插件自带的 typert contribution 挂载失败（详见控制台错误），暂时无法读取数据。";
 		/** One 记忆 tab; the host `admin` list default is the same. */
 		const MEMORY_PAGE_SIZE = 50;
-		/** The exact page default; fuzzy is fixed at five by the engine. */
+		/**
+		* The page size of a KEYWORD search; fuzzy is fixed at five by the engine.
+		*
+		* A pure time window sends no `limit` at all: it is walked by `offset` instead (`runTimeWindow`), so
+		* the host's own window page applies and no client constant can cut a day's history short.
+		*/
 		const SEARCH_LIMIT = 10;
 		/**
+		* How many pages one time-window search may walk before the panel stops.
+		*
+		* A wall against a host that never reports `remaining: 0` (or never returns rows): 200 pages of 50 is
+		* 10 000 facts, far beyond any hand-readable window. Stopping early is visible — the panel prints how
+		* many rows are still unseen.
+		*/
+		const SEARCH_PAGES_MAX = 200;
+		/**
 		* How many `admin.detail` calls one search answer may trigger, to give its results the list's action
 		* row (status / pin state / full text). A hard cap so a large exact page or a wide relation answer
 		* cannot turn one keystroke into an unbounded fan-out; anything past the cap keeps the id-only
-		* actions (详情 / 编辑 when the excerpt is complete / 归档 / 反馈), which still work.
+		* actions (详情 / 编辑 when the excerpt is complete / 归档), which still work.
 		*/
 		const SEARCH_FACT_LOOKUPS_MAX = 20;
-		/** How close (px) the list's end must come to the scrollport before the next page loads. */
-		const AUTO_LOAD_MARGIN_PX = 300;
 		/**
 		* The wire revision the host last reported, and whether its absence/mismatch was logged.
 		*
@@ -4587,67 +4980,57 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				isCurrent: (seq) => seq === ref.current
 			}), []);
 		}
-		/** The element that actually scrolls this panel, walking up to it (the conversation's scroll body). */
-		function scrollParentOf(node) {
-			let current = node?.parentElement ?? null;
-			while (current !== null) {
-				const overflowY = getComputedStyle(current).overflowY;
-				if ((overflowY === "auto" || overflowY === "scroll") && current.scrollHeight > current.clientHeight) return current;
-				current = current.parentElement;
-			}
-			return null;
-		}
 		/**
 		* Call `onLoadMore` when the user scrolls near the end of the panel.
 		*
-		* A scroll listener, not an `IntersectionObserver`, for the three reasons this seat makes an
-		* observer the wrong tool:
+		* The behaviour itself now lives in the base — `createAutoLoadMore` on
+		* `@avantf/dsh-plugin-base/internal` — and this function is only its React half: refs for the two
+		* values the controller reads live (`onLoadMore`, `enabled`), one effect that owns the controller's
+		* lifetime, and the two effects that drive the checks React knows about. Why the kit is in the base:
+		* mission pages its lists the same way, and the DOM detail (walking up to the element that really
+		* scrolls, the passive listener with its rAF throttle, the window fallback) must exist ONCE. The base
+		* has no React peer, so the kit is plain DOM and each plugin keeps this thin wrapper.
 		*
-		* 1. **`rootMargin` cannot prefetch here.** The panel does not own a scrollport — the conversation's
-		*    `.scrollBody` does, and an ancestor's clip rect is NOT expanded by `rootMargin` (only the
-		*    intersection root's is). The promised look-ahead simply never happened.
-		* 2. **An observer only reports threshold CHANGES.** One page that failed to load left the sentinel
-		*    visible, so no new callback arrived and auto-load stayed dead until something else moved it.
-		*    A scroll listener is level-triggered: the next scroll event tries again.
-		* 3. **The scrollport is found, not assumed.** `scrollParentOf` walks up to whatever element really
-		*    scrolls, so this keeps working if the panel ever gets its own scroller.
+		* The two facts this wrapper is responsible for keeping (the kit cannot see them by itself):
 		*
-		* `version` re-checks after a page lands: a page that does not fill the scrollport produces no
-		* scroll event, and without the re-check loading would stop after the first page.
+		*  - **`version` re-checks after a page lands.** A page that does not fill the scrollport produces no
+		*    scroll event; without the re-check loading would stop after the first page.
+		*  - **`enabled` flipping back on retries once.** That is how a page that landed (or a list that
+		*    gained a continuation) keeps loading while the user sits still.
+		*
+		* Both are one effect on purpose: a page landing changes `rows.length` AND clears `loading`, so the
+		* two reasons arrive in the SAME commit — and two checks would send the next page twice. The kit's
+		* `setVersion` reports whether it already checked, which is what keeps it at one.
+		*
+		* The observer-vs-listener reasoning and the margin live in the kit's own doc (one copy).
 		*/
 		function useLoadMoreOnScroll(rootRef, enabled, onLoadMore, version) {
 			const latest = react.useRef(onLoadMore);
 			latest.current = onLoadMore;
 			const enabledRef = react.useRef(enabled);
 			enabledRef.current = enabled;
-			const checkRef = react.useRef(() => {});
+			const controllerRef = react.useRef(null);
 			react.useEffect(() => {
 				const root = rootRef.current;
 				if (root === null) return void 0;
-				const scroller = scrollParentOf(root);
-				const target = scroller ?? window;
-				let queued = false;
-				const check = () => {
-					queued = false;
-					if (!enabledRef.current || scroller === null) return;
-					if (scroller.scrollTop + scroller.clientHeight >= scroller.scrollHeight - AUTO_LOAD_MARGIN_PX) latest.current();
-				};
-				checkRef.current = check;
-				const onScroll = () => {
-					if (queued) return;
-					queued = true;
-					if (typeof requestAnimationFrame === "function") requestAnimationFrame(check);
-					else check();
-				};
-				target.addEventListener("scroll", onScroll, { passive: true });
-				check();
+				const controller = createAutoLoadMore({
+					target: root,
+					isEnabled: () => enabledRef.current,
+					onLoadMore: () => {
+						latest.current();
+					},
+					version
+				});
+				controllerRef.current = controller;
 				return () => {
-					checkRef.current = () => {};
-					target.removeEventListener("scroll", onScroll);
+					controllerRef.current = null;
+					controller.dispose();
 				};
 			}, [rootRef]);
 			react.useEffect(() => {
-				checkRef.current();
+				const controller = controllerRef.current;
+				if (controller === null) return;
+				if (!controller.setVersion(version)) controller.recheck();
 			}, [version, enabled]);
 		}
 		/**
@@ -4675,7 +5058,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		function Btn(props) {
 			return h("button", {
 				type: "button",
-				className: props.danger ? `${pages_module_css_default.btn} ${pages_module_css_default.btnDanger}` : pages_module_css_default.btn,
+				className: props.danger ? `${BTN} ${controls_module_css_default.danger}` : BTN,
 				disabled: props.disabled === true,
 				onClick: props.onClick
 			}, props.label);
@@ -4700,7 +5083,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			});
 			const complete = draft.subject.trim() !== "" && draft.predicate.trim() !== "" && draft.object.trim() !== "";
 			const field = (slot, label) => h("input", {
-				className: pages_module_css_default.input,
+				className: controls_module_css_default.input,
 				value: draft[slot],
 				placeholder: label,
 				"aria-label": `关系${label}`,
@@ -4712,9 +5095,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					}));
 				}
 			});
-			return h("div", { className: pages_module_css_default.detail }, h("div", { className: pages_module_css_default.meta }, "声明的显式关系（仅 note；图上的 source=explicit）："), relations.length === 0 ? h("div", { className: pages_module_css_default.status }, "当前没有显式关系。") : h("ul", { className: pages_module_css_default.list }, relations.map((relation, index) => h("li", {
+			return h("div", { className: pages_module_css_default.detail }, h("div", { className: controls_module_css_default.meta }, "声明的显式关系（仅 note；图上的 source=explicit）："), relations.length === 0 ? h("div", { className: controls_module_css_default.status }, "当前没有显式关系。") : h("ul", { className: controls_module_css_default.list }, relations.map((relation, index) => h("li", {
 				key: `relation-${String(index)}`,
-				className: pages_module_css_default.item
+				className: controls_module_css_default.item
 			}, `${relation.subject} —${relation.predicate}→ ${relation.object}`, h("div", { className: pages_module_css_default.row }, h(Btn, {
 				label: "删除",
 				danger: true,
@@ -4743,6 +5126,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				}
 			})));
 		}
+		/** A list with nothing in it: the list view before its first page, and a search that was cleared. */
+		const EMPTY_LIST = {
+			rows: [],
+			total: void 0,
+			truncated: false,
+			nextOffset: 0,
+			loading: false,
+			error: void 0
+		};
 		/**
 		* The detail body of one fact — the SAME view under an admin list row and under the search results
 		* (the search view used to hide the list, which is why its 「详情」 button appeared to do nothing).
@@ -4752,7 +5144,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		*/
 		function FactDetailView(props) {
 			const fact = props.fact;
-			return h("div", { className: pages_module_css_default.meta }, `标题：${fact.title ?? "（无标题）"}`, h("br"), `创建于 ${fact.created_at} / 更新于 ${fact.updated_at ?? "—"}`, h("br"), `实体：${(fact.entities ?? []).join("、") || "（无）"}`, h("br"), `三元组：${(fact.triples ?? []).map((t) => `${t.subj} —${t.pred}→ ${t.obj}（${t.confidence.toFixed(2)}）`).join("；") || "（无）"}`, h("br"), `检索次数：${String(fact.retrieval_count ?? 0)}${fact.supersedes_id ? ` · 修订自 #${String(fact.supersedes_id)}` : ""} · 被断言 ${String(fact.assert_count ?? 1)} 次`, h("br"), `有效期：${fact.valid_from ?? "未知"} → ${fact.valid_to ?? (fact.status === "active" ? "仍在有效" : "未知")}` + (fact.superseded_by === null || fact.superseded_by === void 0 ? "" : ` · 被 #${String(fact.superseded_by)} 取代`), h("br"), `来源：${(fact.sources ?? []).length === 0 ? "（未记录）" : (fact.sources ?? []).map((s) => `${s.kind}:${s.ref}`).join("；")}`, h("br"), `关系：${(fact.relations ?? []).length === 0 ? "（无）" : (fact.relations ?? []).map((r) => `${r.subject} —${r.predicate}→ ${r.object}`).join("；")}`, fact.kind === "note" && fact.status === "active" ? h(RelationEditor, {
+			return h("div", { className: controls_module_css_default.meta }, `标题：${fact.title ?? "（无标题）"}`, h("br"), `创建于 ${localTime(fact.created_at)} / 更新于 ${localTime(fact.updated_at)}`, h("br"), `实体：${(fact.entities ?? []).join("、") || "（无）"}`, h("br"), `三元组：${(fact.triples ?? []).map((t) => `${t.subj} —${t.pred}→ ${t.obj}（${t.confidence.toFixed(2)}）`).join("；") || "（无）"}`, h("br"), `检索次数：${String(fact.retrieval_count ?? 0)}${fact.supersedes_id ? ` · 修订自 #${String(fact.supersedes_id)}` : ""} · 被断言 ${String(fact.assert_count ?? 1)} 次`, h("br"), `事件时间：${fact.valid_from ?? "未知"}` + (fact.superseded_by === null || fact.superseded_by === void 0 ? "" : ` · 被 #${String(fact.superseded_by)} 取代`), h("br"), `来源：${(fact.sources ?? []).length === 0 ? "（未记录）" : (fact.sources ?? []).map((s) => `${s.kind}:${s.ref}`).join("；")}`, h("br"), `关系：${(fact.relations ?? []).length === 0 ? "（无）" : (fact.relations ?? []).map((r) => `${r.subject} —${r.predicate}→ ${r.object}`).join("；")}`, fact.kind === "note" && fact.status === "active" ? h(RelationEditor, {
 				fact,
 				disabled: props.disabled,
 				onSave: (relations) => {
@@ -4760,78 +5152,265 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				}
 			}) : null);
 		}
+		/**
+		* An `admin.list` row, in the unified shape.
+		*
+		* The meta line is the list's own (trust, retention, counts); a search answer's row states what THAT
+		* answer can honestly say instead (see the four builders below), which is why this text belongs to the
+		* row and not to the renderer.
+		*/
+		function listRow(f) {
+			return {
+				kind: "fact",
+				key: `fact:${String(f.fact_id)}`,
+				fact_id: f.fact_id,
+				title: f.title ?? (f.kind === "journal" ? "（无标题）" : void 0),
+				text: f.content,
+				truncated: false,
+				meta: `#${String(f.fact_id)} · ${f.kind} · trust ${f.trust_score.toFixed(2)}` + (f.pinned === true ? " · 永久" : typeof f.remaining_days === "number" ? ` · 剩余 ≈${String(Math.ceil(f.remaining_days))} 活跃日` : "") + ` · ${localTime(f.created_at)}` + (f.status === "archived" && f.archive_reason ? ` · 归档原因 ${f.archive_reason}` : "") + (f.status === "archived" && f.pinned === true ? " · 永久保留（不会被清理）" : ""),
+				action: {
+					fact_id: f.fact_id,
+					status: f.status,
+					content: f.content,
+					pinned: f.pinned === true
+				},
+				fromSearch: false
+			};
+		}
+		/** A keyword (`exact`/`fuzzy`) hit: the one result shape that carries a relevance score. */
+		function hitRow(hit, action) {
+			return {
+				kind: "fact",
+				key: `fact:${String(hit.ref_id)}`,
+				fact_id: hit.ref_id,
+				title: hit.title,
+				text: hit.text,
+				truncated: hit.truncated === true,
+				meta: `#${String(hit.ref_id)} · score ${hit.score.toFixed(2)} · ${hit.source_ref}` + (hit.valid_from === void 0 ? "" : ` · ${hit.valid_from}`),
+				action,
+				fromSearch: true
+			};
+		}
+		/** One row of a fact-level AND page (`mode:"facts"`) — a fact, not a ranked hit: no score. */
+		function factPageRow(entry, action) {
+			return {
+				kind: "fact",
+				key: `fact:${String(entry.fact_id)}`,
+				fact_id: entry.fact_id,
+				title: entry.title,
+				text: entry.content,
+				truncated: entry.truncated === true,
+				meta: `#${String(entry.fact_id)} · ${entry.memory_kind} · ${entry.status} · ${entry.event_date ?? localTime(entry.created_at)}` + (entry.source_ref === void 0 ? "" : ` · ${entry.source_ref}`),
+				action,
+				fromSearch: true
+			};
+		}
+		/** One evidence fact of a relation answer — again a fact, not a ranked hit: no score. */
+		function evidenceRow(entry, action) {
+			return {
+				kind: "fact",
+				key: `fact:${String(entry.fact_id)}`,
+				fact_id: entry.fact_id,
+				title: entry.title,
+				text: entry.text,
+				truncated: entry.truncated === true,
+				meta: `#${String(entry.fact_id)} · ${entry.memory_kind} · ${localTime(entry.created_at)}`,
+				action,
+				fromSearch: true
+			};
+		}
+		/** A relation answer's path: the ONE row body that is not a fact, still a row of the same list. */
+		function pathRow(path, index) {
+			return {
+				kind: "path",
+				key: `path:${String(index)}`,
+				path
+			};
+		}
+		/**
+		* The ONE list renderer of the 记忆 tab: the admin list and every search answer draw through it.
+		*
+		* It owns the parts that used to be written twice — the row body, the 「加载更多（还有 N 条）」 control at
+		* the end, the empty state and the error line — and it reads ONE state ({@link ListState}), so the list
+		* and a result set cannot disagree about whether more rows exist, why the last page failed, or whether
+		* scrolling should load.
+		*
+		* The rows arrive already normalized (`listRow` / `hitRow` / `factPageRow` / `evidenceRow` / `pathRow`):
+		* a fact row carries its text, meta line and resolved action set, so this component never needs to know
+		* which face it came from. The row actions themselves come from the panel (`actionRow`), which is where
+		* the ONE action builder lives (`factButtons`).
+		*/
+		function FactList(props) {
+			const state = props.state;
+			const remaining = state.total === void 0 ? 0 : Math.max(state.total - state.rows.length, 0);
+			return h("div", null, props.note === void 0 ? null : h("div", { className: controls_module_css_default.status }, props.note), state.error === void 0 ? null : h("div", { className: controls_module_css_default.error }, `错误：${state.error}`), state.rows.length === 0 ? state.error === void 0 ? h("div", { className: controls_module_css_default.status }, state.loading ? props.loadingText : props.emptyText) : null : h("ul", { className: controls_module_css_default.list }, state.rows.map((row) => h("li", {
+				key: row.key,
+				className: controls_module_css_default.item
+			}, row.kind === "path" ? [h("div", { key: "route" }, [row.path.start.name, ...row.path.edges.flatMap((edge) => [edge.predicate, edge.object])].join(" → ")), h("span", {
+				key: "meta",
+				className: controls_module_css_default.meta
+			}, `${String(row.path.hops)} 跳 · #${row.path.edges.map((edge) => String(edge.fact_id)).join(" / ")} · 置信度 ${row.path.confidence.toFixed(2)}`)] : [
+				row.title === void 0 ? null : h("div", {
+					key: "title",
+					className: controls_module_css_default.meta
+				}, `标题：${row.title}`),
+				props.editing?.id === row.fact_id ? h("textarea", {
+					key: "edit",
+					className: `${controls_module_css_default.textarea} ${pages_module_css_default.edit}`,
+					value: props.editing.text,
+					rows: 3,
+					onChange: (e) => {
+						props.onEdit({
+							id: row.fact_id,
+							text: e.target.value
+						});
+					}
+				}) : row.text,
+				row.truncated ? h("span", {
+					key: "cut",
+					className: controls_module_css_default.meta
+				}, "（已截断）") : null,
+				h("span", {
+					key: "meta",
+					className: controls_module_css_default.meta
+				}, row.meta),
+				h("div", {
+					key: "actions",
+					className: pages_module_css_default.row
+				}, props.actionRow(row.action, row.fromSearch)),
+				props.detail?.id === row.fact_id ? h(FactDetailView, {
+					key: "detail",
+					fact: props.detail.data,
+					disabled: props.busy,
+					onSaveRelations: props.onSaveRelations
+				}) : null
+			]))), state.truncated ? h("button", {
+				type: "button",
+				className: `${BTN} ${pages_module_css_default.more}`,
+				disabled: state.loading,
+				onClick: props.onLoadMore
+			}, state.loading ? "加载中…" : state.total === void 0 ? "加载更多" : `加载更多（还有 ${String(remaining)} 条）`) : null);
+		}
 		function MemoryPanel(props) {
 			const [statusFilter, setStatusFilter] = react.useState("active");
-			const [rows, setRows] = react.useState([]);
-			const [total, setTotal] = react.useState();
-			const [truncated, setTruncated] = react.useState(false);
 			/**
-			* How many rows the HOST has handed over — the pagination anchor. It is not `rows.length`:
-			* appends are de-duplicated (a row inserted between two page requests shifts the window and
-			* repeats one row), and using the de-duplicated length as the next offset would re-request it.
+			* The list the panel renders — the ONE list state (see {@link ListState}). `admin.list` fills it
+			* while no search is applied; `recall.search` fills it while one is.
 			*/
-			const [nextOffset, setNextOffset] = react.useState(0);
+			const [list, setList] = react.useState({
+				...EMPTY_LIST,
+				loading: props.remote !== void 0
+			});
+			/** The search the visible rows came from (`null` = the list view). See {@link AppliedSearch}. */
+			const [applied, setApplied] = react.useState(null);
+			/** Everything that is NOT the list: a mutation's message, a detail/health/conflict failure. */
 			const [error, setError] = react.useState();
 			const [notice, setNotice] = react.useState();
-			const [loading, setLoading] = react.useState(props.remote !== void 0);
+			/** A mutation in flight: the panel's buttons and the row actions obey it. */
+			const [busy, setBusy] = react.useState(false);
 			const [editing, setEditing] = react.useState(null);
 			const [detail, setDetail] = react.useState(null);
 			const [contradictions, setContradictions] = react.useState(null);
 			const [health, setHealth] = react.useState(null);
 			const [searchText, setSearchText] = react.useState("");
 			const [searchKind, setSearchKind] = react.useState("all");
-			const [searchHits, setSearchHits] = react.useState(null);
-			const [searchRelation, setSearchRelation] = react.useState(null);
-			const [searchFactPage, setSearchFactPage] = react.useState(null);
+			const [timeField, setTimeField] = react.useState("created");
+			const [timeMode, setTimeMode] = react.useState("on");
+			const [timeOn, setTimeOn] = react.useState("");
+			const [timeFrom, setTimeFrom] = react.useState("");
+			const [timeTo, setTimeTo] = react.useState("");
 			/**
-			* What the CURRENT search results need so their action row can match an admin list row:
+			* What a search result needs so its action row can match an admin list row:
 			* status (归档 vs 恢复), pin state (永久 vs 解除) and the FULL content (a hit's `text` may be
 			* truncated by the output budget, and editing a truncated excerpt would corrupt the fact).
 			* Read through `admin.detail` — one call per result, bounded by {@link SEARCH_FACT_LOOKUPS_MAX}.
 			*/
 			const [searchFacts, setSearchFacts] = react.useState({});
+			/** The query is on its way: the title line and the 搜索 button say so. */
 			const [searching, setSearching] = react.useState(false);
 			const detailGuard = useSeqGuard();
 			const contradictionGuard = useSeqGuard();
 			const healthGuard = useSeqGuard();
-			const searchGuard = useSeqGuard();
+			/**
+			* The list's guard — and the search's: both write the SAME state now, so one guard is what keeps a
+			* late page from overwriting a newer one. It matters most on the scroll path, which calls `loadMore()`
+			* with no user action: a page requested for 活动 can land after the user switched to 归档 (appending
+			* active rows to the archived list) or after a search replaced the rows.
+			*/
 			const listGuard = useSeqGuard();
 			/**
-			* Load one page and append it (offset 0 replaces the list). Resolves once the
-			* page settled, so callers can order their own state updates after the refresh.
+			* The action-state guard: a `loadSearchFacts` reply belongs to the SEARCH that asked for it, not to the
+			* page request that happened to carry it. `listGuard` cannot serve here — every page begins a new one,
+			* so a continuation page would drop the lookups the previous page had in flight (their rows are on
+			* screen, so their actions must land). ONE generation per search; the generation is kept in a ref
+			* because `loadSearchPage` asks for it long after `runSearch` began it.
 			*/
-			const load = react.useCallback(async (offset, status) => {
+			const searchFactsGuard = useSeqGuard();
+			const searchFactsSeq = react.useRef(0);
+			/**
+			* The re-entrancy wall of `loadMore`, as a REF (REVIEW-2026-10-27 P2-1).
+			*
+			* `list.loading` is React state: two checks in the same tick (the scroll controller's queued frame plus
+			* a re-check, or the end-of-list button and a scroll) both read the value from the render that is
+			* already committed and would send the same page twice. `listGuard` then throws away the older reply,
+			* but the RPC has been made. Set on entry, cleared in `finally`, so the wall is visible synchronously.
+			*/
+			const loadingMoreRef = react.useRef(false);
+			/**
+			* Load one page of the ADMIN list into the unified state (offset 0 replaces it), resolving once it
+			* settled so callers can order their own updates after the refresh.
+			*/
+			const loadListPage = react.useCallback(async (offset) => {
 				if (props.remote === void 0) return;
 				const seq = listGuard.begin();
-				setLoading(true);
-				if (offset === 0) setError(void 0);
-				const outcome = await callRemote(`admin.list(status=${status}, offset=${String(offset)})`, props.remote.admin({
+				setList((previous) => ({
+					...previous,
+					loading: true
+				}));
+				const outcome = await callRemote(`admin.list(status=${statusFilter}, offset=${String(offset)})`, props.remote.admin({
 					action: "list",
-					status,
+					status: statusFilter,
 					limit: MEMORY_PAGE_SIZE,
 					offset
 				}));
 				if (!listGuard.isCurrent(seq)) return;
-				if (outcome.ok) {
+				setList((previous) => {
+					if (!outcome.ok) return offset === 0 ? {
+						...EMPTY_LIST,
+						error: outcome.error
+					} : {
+						...previous,
+						loading: false,
+						error: outcome.error
+					};
 					const page = outcome.value?.facts ?? [];
-					setRows((previous) => offset === 0 ? page : mergePage(previous, page));
-					setNextOffset(offset + page.length);
-					setTotal(outcome.value?.total);
-					setTruncated(outcome.value?.truncated === true);
-				} else {
-					if (offset === 0) {
-						setRows([]);
-						setNextOffset(0);
-						setTotal(void 0);
-						setTruncated(false);
-					}
-					setError(outcome.error);
-				}
-				setLoading(false);
-			}, [listGuard, props.remote]);
+					const rows = page.map(listRow);
+					return {
+						rows: offset === 0 ? rows : mergeRows(previous.rows, rows),
+						total: outcome.value?.total,
+						truncated: outcome.value?.truncated === true,
+						nextOffset: offset + page.length,
+						loading: false,
+						error: void 0
+					};
+				});
+			}, [
+				listGuard,
+				props.remote,
+				statusFilter
+			]);
+			/**
+			* The list view's source: `admin.list`, page 0.
+			*
+			* It runs on mount, on a status switch and when a search is cleared — and NEVER while a search owns
+			* the list, or an admin page would overwrite the rows the search put on screen. `applied` decides the
+			* source here exactly as it does for the next page.
+			*/
+			const listView = applied === null;
 			react.useEffect(() => {
-				load(0, statusFilter);
-			}, [load, statusFilter]);
+				if (!listView) return;
+				loadListPage(0);
+			}, [listView, loadListPage]);
 			/**
 			* Resolve the state of the facts a search answer points at (`admin.detail`, one call each).
 			*
@@ -4839,15 +5418,21 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			* know the id and an excerpt, and would have to guess 「归档/恢复」 and 「永久/解除」 — two labels
 			* whose opposite is a different operation. Results are bounded (search is a fixed shortlist, and
 			* relation evidence is the paths' facts), deduplicated, and dropped if a newer search started.
+			*
+			* A CONTINUATION page calls it too (REVIEW-2026-10-27 P2-2): without that, every row a scroll brought
+			* in kept the id-only action set until the query was run again. The lookup is per page, so the bound
+			* above still holds — one page can resolve at most {@link SEARCH_FACT_LOOKUPS_MAX} of its rows and the
+			* rest keep the id-only actions (详情 / 编辑 / 归档), exactly like the first page's overflow.
+			* The record is MERGED, so an append never drops what the first page resolved.
+			*
+			* The guard is the SEARCH's, not the page request's (`searchFactsGuard`): a page landing while the
+			* previous page's lookups are still in flight must not throw them away — those facts are on screen.
 			*/
 			const loadSearchFacts = (seq, ids) => {
 				const remote = props.remote;
 				if (remote === void 0) return;
 				const unique = [...new Set(ids)].slice(0, SEARCH_FACT_LOOKUPS_MAX);
-				if (unique.length === 0) {
-					setSearchFacts({});
-					return;
-				}
+				if (unique.length === 0) return;
 				Promise.all(unique.map(async (id) => ({
 					id,
 					outcome: await callRemote(`admin.detail(${String(id)})`, remote.admin({
@@ -4855,7 +5440,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						fact_id: id
 					}))
 				}))).then((results) => {
-					if (!searchGuard.isCurrent(seq)) return;
+					if (!searchFactsGuard.isCurrent(seq)) return;
 					const next = {};
 					for (const { id, outcome } of results) {
 						if (!outcome.ok) continue;
@@ -4867,104 +5452,319 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							content: value.content
 						};
 					}
-					setSearchFacts(next);
+					setSearchFacts((previous) => ({
+						...previous,
+						...next
+					}));
 				});
 			};
-			/** Search memory through the same `recall` remote the model tool uses. */
+			/**
+			* Walk a pure time window page by page and hand back every row in it.
+			*
+			* The request sends NO `limit`: the host pages a window at its own default (`mode:"time"`, 50 rows)
+			* and says how much is left in `remaining`. The panel shows the WHOLE window — "what happened that
+			* day" is the question, and answering it with the first 50 of 286 rows would hide most of the day.
+			* Walking `offset` (never a client-side `limit`) is what reconciles the two: 286 facts arrive as six
+			* pages, which is exactly what `offset` is for, and the host's cap stays untouched.
+			*
+			* `null` rows means a newer search took over (`listGuard`); the caller must then stop without touching
+			* the list. `error` is reported with whatever rows were already collected, so a failure on page 3
+			* still shows pages 1-2 rather than nothing.
+			*
+			* The rows are de-duplicated ACROSS pages (see the loop's note): a walk is one render of the whole
+			* window, so a row repeated because the offset drifted would be a duplicate React key on the very
+			* first paint, not just on a later scroll.
+			*
+			* A walk that stops early is RESUMABLE: it hands back the host-handed `nextOffset` it reached and the
+			* window's `total`, and the unified list state keeps `truncated = nextOffset < total` so `loadMore()`
+			* continues from there on the next scroll instead of leaving 「还有 K 条未显示」 as a dead end.
+			*/
+			const runTimeWindow = async (remote, seq, time) => {
+				const pages = [];
+				let total = null;
+				let offset = 0;
+				for (let page = 0; page < SEARCH_PAGES_MAX; page++) {
+					const outcome = await callRemote(`recall.search(time, offset=${String(offset)}${searchKind === "all" ? "" : `, kind=${searchKind}`})`, remote.recall({
+						action: "search",
+						...searchKind === "all" ? {} : { kind: searchKind },
+						time,
+						offset
+					}));
+					if (!listGuard.isCurrent(seq)) return {
+						rows: null,
+						total: null,
+						nextOffset: offset
+					};
+					if (!outcome.ok) return {
+						rows: mergeRowPages(pages),
+						total,
+						nextOffset: offset,
+						error: outcome.error
+					};
+					const value = outcome.value;
+					if (value.mode !== "time") break;
+					pages.push(value.hits.map((hit) => hitRow(hit, actionFact(hit.ref_id, hit.text, hit.truncated === true))));
+					total = value.total;
+					offset = value.offset + value.hits.length;
+					const remaining = typeof value.remaining === "number" ? value.remaining : Math.max(0, value.total - offset);
+					if (value.hits.length === 0 || remaining <= 0) break;
+				}
+				return {
+					rows: mergeRowPages(pages),
+					total,
+					nextOffset: offset
+				};
+			};
+			/**
+			* Search memory through the same `recall` remote the model tool uses, and put the answer into the
+			* ONE list state (the result set REPLACES the list's rows; `clearSearch` puts the list back).
+			*/
 			const runSearch = async () => {
-				if (props.remote === void 0) return;
+				const remote = props.remote;
+				if (remote === void 0) return;
 				const query = searchText.trim();
-				if (query === "") {
-					searchGuard.begin();
-					setSearchHits(null);
-					setSearchRelation(null);
-					setSearchFactPage(null);
-					setSearchFacts({});
-					setSearching(false);
-					setError(void 0);
+				const time = buildTimeFilter(timeField, timeMode, timeOn, timeFrom, timeTo);
+				if (query === "" && time === void 0) {
+					if (applied !== null || searchText !== "") clearSearch();
 					return;
 				}
-				const seq = searchGuard.begin();
+				const seq = listGuard.begin();
+				const factsSeq = searchFactsGuard.begin();
+				searchFactsSeq.current = factsSeq;
 				setSearching(true);
 				setError(void 0);
-				const outcome = await callRemote(`recall.search(${query}${searchKind === "all" ? "" : `, kind=${searchKind}`})`, props.remote.recall({
+				setSearchFacts({});
+				setApplied({
+					query,
+					time: time ?? null,
+					kind: searchKind,
+					mode: query === "" ? "time" : "hits"
+				});
+				setList({
+					...EMPTY_LIST,
+					loading: true
+				});
+				if (query === "" && time !== void 0) {
+					const walked = await runTimeWindow(remote, seq, time);
+					if (!listGuard.isCurrent(seq)) return;
+					const rows = walked.rows ?? [];
+					setList({
+						rows,
+						total: walked.total ?? void 0,
+						truncated: walked.total !== null && walked.nextOffset < walked.total,
+						nextOffset: walked.nextOffset,
+						loading: false,
+						error: walked.error
+					});
+					loadSearchFacts(factsSeq, rows.flatMap((row) => row.kind === "fact" ? [row.fact_id] : []));
+					setSearching(false);
+					return;
+				}
+				const outcome = await callRemote(`recall.search(${query}${searchKind === "all" ? "" : `, kind=${searchKind}`})`, remote.recall({
 					action: "search",
 					query,
 					limit: SEARCH_LIMIT,
-					...searchKind === "all" ? {} : { kind: searchKind }
+					...searchKind === "all" ? {} : { kind: searchKind },
+					...time === void 0 ? {} : { time }
 				}));
-				if (!searchGuard.isCurrent(seq)) return;
+				if (!listGuard.isCurrent(seq)) return;
 				const value = outcome.ok ? outcome.value : void 0;
 				if (value !== void 0 && value.mode === "relation") {
-					setSearchRelation({
-						paths: value.paths,
-						evidence: value.evidence
+					setApplied((current) => current === null ? null : {
+						...current,
+						mode: "relation"
+					});
+					const rows = [...value.paths.map(pathRow), ...value.evidence.map((entry) => evidenceRow(entry, actionFact(entry.fact_id, entry.text, entry.truncated === true)))];
+					setList({
+						rows,
+						total: void 0,
+						truncated: false,
+						nextOffset: rows.length,
+						loading: false,
+						error: void 0
 					});
-					setSearchHits(null);
-					setSearchFactPage(null);
-					loadSearchFacts(seq, value.evidence.map((entry) => entry.fact_id));
+					loadSearchFacts(factsSeq, value.evidence.map((entry) => entry.fact_id));
 				} else if (value !== void 0 && value.mode === "facts") {
-					setSearchFactPage(value.facts);
-					setSearchHits(null);
-					setSearchRelation(null);
-					loadSearchFacts(seq, value.facts.map((entry) => entry.fact_id));
+					setApplied((current) => current === null ? null : {
+						...current,
+						mode: "facts"
+					});
+					const rows = value.facts.map((entry) => factPageRow(entry, actionFact(entry.fact_id, entry.content, entry.truncated === true)));
+					setList({
+						rows,
+						total: void 0,
+						truncated: false,
+						nextOffset: rows.length,
+						loading: false,
+						error: void 0
+					});
+					loadSearchFacts(factsSeq, value.facts.map((entry) => entry.fact_id));
 				} else if (value !== void 0) {
-					setSearchHits(value.hits);
-					setSearchRelation(null);
-					setSearchFactPage(null);
-					loadSearchFacts(seq, value.hits.map((hit) => hit.ref_id));
-				} else {
-					setSearchHits([]);
-					setSearchRelation(null);
-					setSearchFactPage(null);
-					setSearchFacts({});
-					if (!outcome.ok) setError(outcome.error);
-				}
+					setApplied((current) => current === null ? null : {
+						...current,
+						mode: "hits"
+					});
+					const rows = value.hits.map((hit) => hitRow(hit, actionFact(hit.ref_id, hit.text, hit.truncated === true)));
+					setList({
+						rows,
+						total: void 0,
+						truncated: false,
+						nextOffset: rows.length,
+						loading: false,
+						error: void 0
+					});
+					loadSearchFacts(factsSeq, value.hits.map((hit) => hit.ref_id));
+				} else setList({
+					...EMPTY_LIST,
+					error: outcome.ok ? void 0 : outcome.error
+				});
 				setSearching(false);
 			};
-			/** Clear the query and the search result view (never the memory rows themselves). */
+			/**
+			* Fetch the NEXT page of the window whose rows are on screen, and APPEND it to the same state.
+			*
+			* `runTimeWindow` normally walks a window to its end in one user action, so this is the path for the
+			* case it could not finish: a page that failed (the rows before it stay, and so does the shortfall
+			* line) or the `SEARCH_PAGES_MAX` wall. Without it the panel would print 「还有 K 条未显示」 and stop
+			* there — the rows would be named but unreachable.
+			*
+			* The question is NOT rebuilt from the live controls: it is the one the visible rows were fetched with
+			* (`applied.time` + `applied.kind` + the empty query). A date edited after the search must not change
+			* what page 2 means, or the list would concatenate two different windows. `offset` is the host-handed
+			* count from the list state, so a page that repeated a row (page drift) cannot shift what comes next.
+			*
+			* `listGuard` is the re-entry wall: this request becomes the newest one, and a search or a clear that
+			* starts while it is in flight drops its reply. `loadingMoreRef` (in `loadMore`) is the burst wall —
+			* one page in flight.
+			*/
+			const loadSearchPage = async (offset) => {
+				const remote = props.remote;
+				const search = applied;
+				if (remote === void 0 || search === null || search.time === null) return;
+				const seq = listGuard.begin();
+				setList((previous) => ({
+					...previous,
+					loading: true
+				}));
+				const outcome = await callRemote(`recall.search(time, offset=${String(offset)}${search.kind === "all" ? "" : `, kind=${search.kind}`})`, remote.recall({
+					action: "search",
+					...search.kind === "all" ? {} : { kind: search.kind },
+					time: search.time,
+					offset
+				}));
+				if (!listGuard.isCurrent(seq)) return;
+				if (!outcome.ok) {
+					setList((previous) => ({
+						...previous,
+						loading: false,
+						error: outcome.error
+					}));
+					return;
+				}
+				const value = outcome.value;
+				if (value.mode !== "time") {
+					setList((previous) => ({
+						...previous,
+						loading: false,
+						truncated: false
+					}));
+					return;
+				}
+				const pageRows = value.hits.map((hit) => hitRow(hit, actionFact(hit.ref_id, hit.text, hit.truncated === true)));
+				setList((previous) => ({
+					...previous,
+					...appendWindowPage(previous, {
+						rows: pageRows,
+						offset: value.offset,
+						total: value.total
+					}),
+					total: value.total,
+					loading: false,
+					error: void 0
+				}));
+				loadSearchFacts(searchFactsSeq.current, value.hits.map((hit) => hit.ref_id));
+			};
+			/**
+			* Load the next page of WHATEVER owns the list.
+			*
+			* The single paging entry: the end-of-list button and the scroll controller both call it, so there is
+			* no "button version" and "scroll version" to diverge. The source is decided by `applied` — the search
+			* the visible rows came from — and only a time window has a next page, because a keyword / fact-level /
+			* relation answer is a shortlist whose offset the host does not page.
+			*
+			* Two walls, and both are needed: `loadingMoreRef` is synchronous (two checks in ONE tick — a queued
+			* scroll frame and a re-check — must not send the same page twice), `list.loading` is the committed
+			* state (a page started elsewhere, e.g. the refresh after a mutation, is already in flight).
+			*/
+			const loadMore = async () => {
+				if (props.remote === void 0 || loadingMoreRef.current || list.loading || !list.truncated) return;
+				loadingMoreRef.current = true;
+				try {
+					if (applied === null) {
+						await loadListPage(list.nextOffset);
+						return;
+					}
+					if (applied.mode !== "time") return;
+					await loadSearchPage(list.nextOffset);
+				} finally {
+					loadingMoreRef.current = false;
+				}
+			};
+			/** Clear the query, the time window and the result view; the list view comes back on its own. */
 			const clearSearch = () => {
-				searchGuard.begin();
+				listGuard.begin();
+				searchFactsGuard.begin();
 				setSearchText("");
-				setSearchHits(null);
-				setSearchRelation(null);
-				setSearchFactPage(null);
+				setTimeOn("");
+				setTimeFrom("");
+				setTimeTo("");
+				setApplied(null);
 				setSearchFacts({});
 				setSearching(false);
+				setEditing(null);
+				setDetail(null);
 				setError(void 0);
+				setList({
+					...EMPTY_LIST,
+					loading: props.remote !== void 0
+				});
 			};
-			/** Switch the status tab: clear the other tab's page immediately, and drop its in-flight page. */
+			/** Switch the status tab: drop the other tab's page immediately, and its in-flight page too. */
 			const switchStatus = (next) => {
 				if (next === statusFilter) return;
 				listGuard.begin();
-				setRows([]);
-				setNextOffset(0);
-				setTotal(void 0);
-				setTruncated(false);
+				if (listView) setList({
+					...EMPTY_LIST,
+					loading: props.remote !== void 0
+				});
 				setDetail(null);
 				setEditing(null);
 				contradictionGuard.begin();
 				setContradictions(null);
 				setStatusFilter(next);
 			};
-			/** Run one mutation, refresh page 0, then surface the mutation's own outcome. */
+			/**
+			* Re-read whatever the list is SHOWING: the admin page, or nothing while a search owns it.
+			*
+			* A search result set is re-read by the query that produced it (`factButtons`' `fromSearch`), so
+			* refreshing the admin list underneath it would be a page nobody is looking at — and, now that both
+			* sources write ONE state, it would overwrite the rows on screen.
+			*/
+			const refreshVisible = react.useCallback(() => listView ? loadListPage(0) : Promise.resolve(), [listView, loadListPage]);
+			/** Run one mutation, re-read the visible list, then surface the mutation's own outcome. */
 			const mutate = react.useCallback((label, call, opts) => {
 				const remote = props.remote;
 				if (remote === void 0) return;
 				runRemoteAction({
-					setLoading,
+					setLoading: setBusy,
 					setNotice,
 					setError
 				}, label, call(remote), {
 					summarize: opts?.summarize,
-					refreshFirst: () => load(0, statusFilter),
+					refreshFirst: refreshVisible,
 					after: opts?.after
 				});
-			}, [
-				props.remote,
-				load,
-				statusFilter
-			]);
+			}, [props.remote, refreshVisible]);
 			/**
 			* Read one fact's detail. Kept separate from the toggle because a relation mutation changes the
 			* detail it was performed in: the panel stays open and re-reads it, instead of leaving a stale
@@ -5021,13 +5821,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				} });
 			};
 			/**
-			* The per-fact action buttons — ONE implementation for the admin list and the search results.
+			* The per-fact action buttons — ONE implementation for the admin list and every result shape.
 			*
-			* The regression this replaced: the actions were written inline in the list row, so when
-			* `searchActive` hid the list, a hit's 「详情」 had nowhere to render and there was no way to
-			* edit/archive/feedback a fact found by search. `fromSearch` only decides what happens AFTER the
-			* write: a search view must re-run the query (its results are the thing on screen), while the
-			* list refresh (`mutate`'s `refreshFirst`) stays the same in both cases.
+			* The regression this replaced: the actions were written inline in the list row, so when a search
+			* owned the view, a hit's 「详情」 had nowhere to render and there was no way to edit/archive
+			* a fact found by search.
+			*
+			* `fromSearch` only decides what happens AFTER the write: a result set is what is on screen, so it
+			* re-runs the query, while a list row is re-read by `mutate`'s `refreshVisible`.
 			*
 			* A field the caller does not know is `undefined` and its button is OMITTED — never shown with a
 			* guessed label (「恢复」 on an active fact or 「永久记忆」 on a pinned one is a different write).
@@ -5044,7 +5845,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				if (editing?.id === fact.fact_id) return [h(Btn, {
 					key: "save",
 					label: "保存",
-					disabled: loading || editing.text.trim().length === 0,
+					disabled: busy || editing.text.trim().length === 0,
 					onClick: () => {
 						const text = editing.text.trim();
 						setEditing(null);
@@ -5057,7 +5858,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				}), h(Btn, {
 					key: "cancel",
 					label: "取消",
-					disabled: loading,
+					disabled: busy,
 					onClick: () => {
 						setEditing(null);
 					}
@@ -5067,7 +5868,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					h(Btn, {
 						key: "detail",
 						label: detail?.id === fact.fact_id ? "收起详情" : "详情",
-						disabled: loading,
+						disabled: busy,
 						onClick: () => {
 							showDetail(fact.fact_id);
 						}
@@ -5075,7 +5876,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					fact.status === "active" && content !== void 0 ? h(Btn, {
 						key: "edit",
 						label: "编辑",
-						disabled: loading,
+						disabled: busy,
 						onClick: () => {
 							setEditing({
 								id: fact.fact_id,
@@ -5084,32 +5885,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							setDetail(null);
 						}
 					}) : null,
-					fact.status === "active" ? h(Btn, {
-						key: "helpful",
-						label: "有用 +1",
-						disabled: loading,
-						onClick: () => {
-							run(`反馈有用 #${String(fact.fact_id)}`, (remote) => remote.remember({
-								action: "helpful",
-								fact_id: fact.fact_id
-							}));
-						}
-					}) : null,
-					fact.status === "active" ? h(Btn, {
-						key: "unhelpful",
-						label: "没用 −1",
-						disabled: loading,
-						onClick: () => {
-							run(`反馈没用 #${String(fact.fact_id)}`, (remote) => remote.remember({
-								action: "unhelpful",
-								fact_id: fact.fact_id
-							}));
-						}
-					}) : null,
 					fact.status === "active" ? h(Btn, {
 						key: "archive",
 						label: "归档",
-						disabled: loading,
+						disabled: busy,
 						onClick: () => {
 							run(`归档 #${String(fact.fact_id)}`, (remote) => remote.admin({
 								action: "archive",
@@ -5120,7 +5899,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					}) : h(Btn, {
 						key: "restore",
 						label: "恢复",
-						disabled: loading,
+						disabled: busy,
 						onClick: () => {
 							run(`恢复 #${String(fact.fact_id)}`, (remote) => remote.admin({
 								action: "restore",
@@ -5131,7 +5910,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					fact.status === "active" && fact.pinned !== void 0 ? fact.pinned ? h(Btn, {
 						key: "unpin",
 						label: "解除永久",
-						disabled: loading,
+						disabled: busy,
 						onClick: () => {
 							run(`解除永久 #${String(fact.fact_id)}`, (remote) => remote.admin({
 								action: "unpin",
@@ -5141,7 +5920,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					}) : h(Btn, {
 						key: "pin",
 						label: "永久记忆",
-						disabled: loading,
+						disabled: busy,
 						onClick: () => {
 							run(`固化永久 #${String(fact.fact_id)}`, (remote) => remote.admin({
 								action: "pin",
@@ -5223,8 +6002,59 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					} else setError(outcome.error);
 				});
 			};
-			const shown = rows.length;
-			const summary = total === void 0 ? `已显示 ${String(shown)} 条` : `共 ${String(total)} 条${statusFilter === "active" ? "活动" : "归档"}事实，已显示 ${String(shown)} 条` + (truncated ? "（继续滚动自动加载）" : "");
+			const shown = list.rows.length;
+			/**
+			* The NAME of the answer on screen, for the unified info line (see {@link metaLine}).
+			*
+			* It says which KIND of answer the rows are (a fact-level AND page is not a hit list, and a
+			* relation answer is structure), plus the memory layer it was fetched with — `applied`, never the
+			* live selector. `null` for a pure time window: there the WINDOW is the question, so naming it
+			* twice would only repeat the line's first piece.
+			*/
+			const answerTitle = applied === null ? null : searching ? "搜索中…" : applied.mode === "time" ? null : applied.mode === "facts" ? `多实体事实：${String(shown)} 条${applied.kind === "all" ? "" : `（${applied.kind}）`}` : applied.mode === "relation" ? `关系结果：${String(list.rows.filter((row) => row.kind === "path").length)} 条路径 · 证据 ${String(list.rows.filter((row) => row.kind === "fact").length)} 条${applied.kind === "all" ? "" : `（${applied.kind}）`}` : `搜索结果：${String(shown)} 条${applied.kind === "all" ? "" : `（${applied.kind}）`}${applied.query === "" ? "" : `“${applied.query}”`}`;
+			/**
+			* How many rows the SOURCE holds and how many are on screen — the count piece of the info line.
+			*
+			* `list.total` is only set when the source counts its rows (`admin.list`'s own `total`, or a walked
+			* time window's), so a RANKED keyword page / fact-level page / relation answer prints no count here:
+			* labelling a ten-row shortlist with a corpus-wide number would claim a completeness it lacks.
+			*
+			* The 「继续滚动自动加载」 hint appears only when scrolling really loads (the same `truncated` the
+			* pager and the scroll hook read), and 「正在加载…」 says when a page is on its way, so a shortfall
+			* never reads as a dead end.
+			*/
+			const countText = list.total === void 0 ? applied === null ? `已显示 ${String(shown)} 条` : null : applied === null ? `共 ${String(list.total)} 条${statusFilter === "active" ? "活动" : "归档"}事实，已显示 ${String(shown)} 条` + (list.truncated ? "（继续滚动自动加载）" : "") : `共 ${String(list.total)} 条，已显示 ${String(shown)} 条` + (list.total > shown ? `，还有 ${String(list.total - shown)} 条未显示` : "") + (list.loading ? "（正在加载…）" : list.truncated ? "（继续滚动自动加载）" : "");
+			/**
+			* THE top information line of the 记忆 tab — ONE line, in ONE place, for the list and for every
+			* search answer.
+			*
+			* It used to be TWO interfaces' worth: the list had this sentence in the sticky bar, while a search
+			* wrapped the SAME rows in `css.searchPanel` with three blocks of its own (`css.searchTitle`,
+			* `css.searchWindow` and a second count line). Two renderings of one fact is what made a search look
+			* like a separate screen. The composition below is the fix: the pieces are joined in a fixed order,
+			* and a source that cannot state a piece omits it.
+			*
+			*   时间窗口：…  ·  <answer name>  ·  共 N 条，已显示 M 条[，还有 K 条未显示]  （继续滚动自动加载）
+			*
+			* The window is the one the VISIBLE rows were narrowed to (`applied.time`, never the live draft).
+			*/
+			const metaLine = [
+				applied === null || applied.time === null ? null : `时间窗口：${timeFilterLabel(applied.time)}`,
+				answerTitle,
+				countText
+			].filter((part) => part !== null).join(" · ");
+			/** The list view before its first page has nothing to count yet: say what is happening instead. */
+			const statusLine = applied === null && list.loading && shown === 0 ? "读取中…" : metaLine;
+			/** What the list says when its source returned nothing at all. */
+			const emptyText = listView ? statusFilter === "active" ? "当前没有活动的事实。可在对话里让 agent 用 mem_remember 写入。" : "当前没有归档的事实。" : applied?.mode === "facts" ? "没有同时提到这些实体的事实。" : applied?.mode === "relation" ? "没有关系路径。" : "没有命中。";
+			/** What it says while the source's first page is on its way. */
+			const loadingText = listView ? "读取中…" : "正在检索记忆…";
+			/**
+			* A relation answer's paths and its evidence are two groups of the SAME list. When the graph found no
+			* path but the evidence facts are still there, the sentence is printed above the rows instead of
+			* being dropped along with the (empty) path group.
+			*/
+			const listNote = applied?.mode === "relation" && shown > 0 && list.rows.every((row) => row.kind === "fact") ? "没有关系路径。" : void 0;
 			/** Bring the panel's top into view — used when a block opens below the sticky bar. */
 			const rootRef = react.useRef(null);
 			const reveal = () => {
@@ -5233,38 +6063,67 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			react.useEffect(() => {
 				reveal();
 			}, []);
-			/** Whether the search view owns the panel (the admin list must not compete with it). */
-			const searchActive = searching || searchHits !== null || searchRelation !== null || searchFactPage !== null;
-			/** Load the next page once the list's end is within reach of the scrollport. */
-			const maybeLoadMore = () => {
-				if (searchActive || !truncated || loading || props.remote === void 0) return;
-				load(nextOffset, statusFilter);
-			};
-			useLoadMoreOnScroll(rootRef, truncated && !loading, maybeLoadMore, rows.length);
+			/** The window the CONTROLS currently describe (`undefined` = no time condition). */
+			const timeCondition = buildTimeFilter(timeField, timeMode, timeOn, timeFrom, timeTo);
+			/**
+			* The ONE scroll loader.
+			*
+			* Its `enabled` and its `version` come from the unified list state, and its callback is the same
+			* `loadMore()` the end-of-list button calls — there is no second hook, no second enabled rule and no
+			* separate "continue the results" path, which is where the two views used to diverge. `version` is the
+			* row count, so a page that lands re-checks (a short page may not fill the scrollport, and then no
+			* scroll event would ever come).
+			*
+			* `list.error === undefined` is part of the gate on purpose: the hook retries once whenever `enabled`
+			* flips back on, so an unreported page failure would re-fire the same request on every round trip.
+			* A failure is a STATE, not a retry trigger — the end-of-list button (still rendered, because
+			* `truncated` is unchanged) is how the user asks again, and the next successful refresh re-arms the
+			* loader.
+			*/
+			useLoadMoreOnScroll(rootRef, list.truncated && !list.loading && list.error === void 0, () => {
+				loadMore();
+			}, shown);
+			/**
+			* The rows the renderer gets: a SEARCH row re-reads its action state HERE.
+			*
+			* `hitRow` / `evidenceRow` / `factPageRow` take an {@link ActionFact} as an argument, so a row carries
+			* a SNAPSHOT of `searchFacts` from the moment it was built — and the lookups (`loadSearchFacts`) answer
+			* AFTER the rows exist. Without this the panel would render every result with the fallback set
+			* (`status:'active'`, pin state unknown) for the life of the result set: 「归档」 on an archived fact,
+			* and no 「永久记忆」 at all — the exact guess the lookups exist to avoid. The pre-unification view read
+			* `searchFacts` at render for the same reason; the unified row shape moved that read into the fetch
+			* handler, so it is restored once, here, for every search row at once.
+			*
+			* A list row needs no derivation: `admin.list` already hands over every action field.
+			*/
+			const rows = list.rows.map((row) => row.kind === "fact" && row.fromSearch ? {
+				...row,
+				action: actionFact(row.fact_id, row.text, row.truncated)
+			} : row);
 			return h("div", {
 				className: pages_module_css_default.section,
 				ref: rootRef
-			}, props.remote === void 0 ? h("div", { className: pages_module_css_default.error }, NOT_MOUNTED) : null, props.remote === void 0 ? null : h("div", { className: pages_module_css_default.headbar }, h("button", {
+			}, props.remote === void 0 ? h("div", { className: controls_module_css_default.error }, NOT_MOUNTED) : null, props.remote === void 0 ? null : h("div", { className: pages_module_css_default.stickyTop }, h("div", { className: pages_module_css_default.headbar }, h("button", {
 				type: "button",
-				className: statusFilter === "active" ? `${pages_module_css_default.btn} ${pages_module_css_default.btnActive}` : pages_module_css_default.btn,
+				className: statusFilter === "active" ? `${BTN} ${controls_module_css_default.active}` : BTN,
 				onClick: () => {
 					switchStatus("active");
 				}
 			}, "活动"), h("button", {
 				type: "button",
-				className: statusFilter === "archived" ? `${pages_module_css_default.btn} ${pages_module_css_default.btnActive}` : pages_module_css_default.btn,
+				className: statusFilter === "archived" ? `${BTN} ${controls_module_css_default.active}` : BTN,
 				onClick: () => {
 					switchStatus("archived");
 				}
 			}, "归档"), h(Btn, {
 				label: "立即维护",
-				disabled: loading,
+				disabled: busy,
 				onClick: () => {
 					mutate("生命周期维护", (remote) => remote.admin({ action: "maintenance" }));
 				}
 			}), h(Btn, {
 				label: contradictions === null ? "查看未处理矛盾" : "收起矛盾",
-				disabled: loading,
+				disabled: busy,
 				onClick: () => {
 					const opening = contradictions === null;
 					loadContradictions();
@@ -5272,13 +6131,13 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				}
 			}), h(Btn, {
 				label: health === null ? "查看检索健康度" : "收起检索健康度",
-				disabled: loading,
+				disabled: busy,
 				onClick: () => {
 					const opening = health === null;
 					loadHealth();
 					if (opening) reveal();
 				}
-			}), h("div", { className: pages_module_css_default.status }, loading && shown === 0 ? "读取中…" : summary)), props.remote === void 0 ? null : h("div", { className: pages_module_css_default.toolbar }, h("div", { className: `${pages_module_css_default.search} ${pages_module_css_default.searchField}` }, h("input", {
+			}), h("div", { className: controls_module_css_default.meta }, statusLine)), props.remote === void 0 ? null : h("div", { className: pages_module_css_default.toolbar }, h("div", { className: `${pages_module_css_default.search} ${pages_module_css_default.searchField}` }, h("input", {
 				value: searchText,
 				placeholder: "搜索记忆…（Enter）",
 				"aria-label": "搜索记忆",
@@ -5291,120 +6150,115 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 						runSearch();
 					}
 				}
-			}), searchText !== "" || searchHits !== null || searchFactPage !== null || searchRelation !== null ? h("button", {
+			}), searchText !== "" || timeCondition !== void 0 || applied !== null ? h("button", {
 				type: "button",
-				className: pages_module_css_default.clear,
+				className: controls_module_css_default.clear,
 				"aria-label": "清除搜索",
 				title: "清除搜索",
 				onClick: clearSearch
 			}, "×") : null), h("select", {
-				className: pages_module_css_default.select,
+				className: controls_module_css_default.select,
 				value: searchKind,
 				"aria-label": "记忆层",
 				onChange: (e) => {
 					setSearchKind(e.target.value);
 				}
-			}, h("option", { value: "all" }, "全部"), h("option", { value: "journal" }, "journal"), h("option", { value: "note" }, "note"))), searchActive ? h("div", { className: pages_module_css_default.searchPanel }, h("div", { className: pages_module_css_default.searchTitle }, searching ? "搜索中…" : searchFactPage !== null ? `多实体事实：${String(searchFactPage.length)} 条${searchKind === "all" ? "" : `（${searchKind}）`}` : searchRelation !== null ? `关系结果：${String(searchRelation.paths.length)} 条路径${searchKind === "all" ? "" : `（${searchKind}）`}` : `搜索结果：${String(searchHits?.length ?? 0)} 条${searchKind === "all" ? "" : `（${searchKind}）`}`, searchText.trim() === "" ? null : h("span", { className: pages_module_css_default.searchQuery }, `“${searchText.trim()}”`)), searchFactPage !== null ? h("div", null, searchFactPage.length === 0 ? h("div", { className: pages_module_css_default.status }, "没有同时提到这些实体的事实。") : h("ul", { className: pages_module_css_default.list }, searchFactPage.map((entry) => h("li", {
-				key: `facts-${String(entry.fact_id)}`,
-				className: pages_module_css_default.item
-			}, entry.title === void 0 ? null : h("div", { className: pages_module_css_default.meta }, `标题：${entry.title}`), editing?.id === entry.fact_id ? h("textarea", {
-				className: pages_module_css_default.textarea,
-				value: editing.text,
-				rows: 3,
+			}, h("option", { value: "all" }, "全部"), h("option", { value: "journal" }, "journal"), h("option", { value: "note" }, "note")), h("select", {
+				className: controls_module_css_default.select,
+				value: timeField,
+				"aria-label": "时间轴",
+				title: "时间轴：created=入库时间 · updated=修改时间 · event=事件发生时间",
 				onChange: (e) => {
-					setEditing({
-						id: entry.fact_id,
-						text: e.target.value
-					});
+					setTimeField(e.target.value);
 				}
-			}) : entry.content, entry.truncated === true ? h("span", { className: pages_module_css_default.meta }, "（已截断）") : null, h("span", { className: pages_module_css_default.meta }, `#${String(entry.fact_id)} · ${entry.memory_kind} · ${entry.status} · ${entry.event_date ?? entry.created_at}` + (entry.source_ref === void 0 ? "" : ` · ${entry.source_ref}`)), h("div", { className: pages_module_css_default.row }, factButtons(actionFact(entry.fact_id, entry.content, entry.truncated === true), true)), detail?.id === entry.fact_id ? h(FactDetailView, {
-				fact: detail.data,
-				disabled: loading,
-				onSaveRelations: saveRelations
-			}) : null)))) : searchRelation !== null ? h("div", null, searchRelation.paths.length === 0 ? h("div", { className: pages_module_css_default.status }, "没有关系路径。") : h("ul", { className: pages_module_css_default.list }, searchRelation.paths.map((path, index) => h("li", {
-				key: `relation-path-${String(index)}`,
-				className: pages_module_css_default.item
-			}, [path.start.name, ...path.edges.flatMap((edge) => [edge.predicate, edge.object])].join(" → "), h("span", { className: pages_module_css_default.meta }, `${String(path.hops)} 跳 · #${path.edges.map((edge) => String(edge.fact_id)).join(" / ")} · 置信度 ${path.confidence.toFixed(2)}`)))), searchRelation.evidence.length === 0 ? null : h("div", null, h("div", { className: pages_module_css_default.meta }, "证据事实："), h("ul", { className: pages_module_css_default.list }, searchRelation.evidence.map((entry) => h("li", {
-				key: `relation-evidence-${String(entry.fact_id)}`,
-				className: pages_module_css_default.item
-			}, entry.title === void 0 ? null : h("div", { className: pages_module_css_default.meta }, `标题：${entry.title}`), editing?.id === entry.fact_id ? h("textarea", {
-				className: pages_module_css_default.textarea,
-				value: editing.text,
-				rows: 3,
+			}, TIME_AXES.map((axis) => h("option", {
+				key: axis.value,
+				value: axis.value
+			}, axis.label))), h("select", {
+				className: controls_module_css_default.select,
+				value: timeMode,
+				"aria-label": "时间范围形态",
+				title: "单日 = 这一整天；区间 = from~to（to 当天也包含）",
 				onChange: (e) => {
-					setEditing({
-						id: entry.fact_id,
-						text: e.target.value
-					});
+					setTimeMode(e.target.value);
 				}
-			}) : entry.text, entry.truncated === true ? h("span", { className: pages_module_css_default.meta }, "（已截断）") : null, h("span", { className: pages_module_css_default.meta }, `#${String(entry.fact_id)} · ${entry.memory_kind} · ${entry.created_at}`), h("div", { className: pages_module_css_default.row }, factButtons(actionFact(entry.fact_id, entry.text, entry.truncated === true), true)), detail?.id === entry.fact_id ? h(FactDetailView, {
-				fact: detail.data,
-				disabled: loading,
-				onSaveRelations: saveRelations
-			}) : null))))) : searchHits === null || searchHits.length === 0 ? h("div", { className: pages_module_css_default.status }, searching ? "正在检索记忆…" : "没有命中。") : h("ul", { className: pages_module_css_default.list }, searchHits.map((hit) => h("li", {
-				key: hit.ref_id,
-				className: pages_module_css_default.item
-			}, hit.title === void 0 ? null : h("div", { className: pages_module_css_default.meta }, `标题：${hit.title}`), editing?.id === hit.ref_id ? h("textarea", {
-				className: pages_module_css_default.textarea,
-				value: editing.text,
-				rows: 3,
+			}, h("option", { value: "on" }, "单日"), h("option", { value: "range" }, "区间")), timeMode === "on" ? h("input", {
+				type: "date",
+				className: controls_module_css_default.dateInput,
+				value: timeOn,
+				"aria-label": "单日日期",
+				title: "这一整天（本地时区）",
 				onChange: (e) => {
-					setEditing({
-						id: hit.ref_id,
-						text: e.target.value
-					});
+					setTimeOn(e.target.value);
+				}
+			}) : [
+				h("input", {
+					key: "from",
+					type: "date",
+					className: controls_module_css_default.dateInput,
+					value: timeFrom,
+					"aria-label": "起始日期",
+					title: "起始日（包含；留空 = 不限起点）",
+					onChange: (e) => {
+						setTimeFrom(e.target.value);
+					}
+				}),
+				h("span", {
+					key: "sep",
+					className: controls_module_css_default.status
+				}, "~"),
+				h("input", {
+					key: "to",
+					type: "date",
+					className: controls_module_css_default.dateInput,
+					value: timeTo,
+					"aria-label": "结束日期",
+					title: "结束日（包含当天；留空 = 不限终点）",
+					onChange: (e) => {
+						setTimeTo(e.target.value);
+					}
+				})
+			], h(Btn, {
+				label: searching ? "搜索中…" : "搜索",
+				disabled: searching,
+				onClick: () => {
+					runSearch();
 				}
-			}) : hit.text, hit.truncated === true ? h("span", { className: pages_module_css_default.meta }, "（已截断）") : null, h("span", { className: pages_module_css_default.meta }, `#${String(hit.ref_id)} · score ${hit.score.toFixed(2)} · ${hit.source_ref}` + (hit.valid_from === void 0 ? "" : ` · ${hit.valid_from}`)), h("div", { className: pages_module_css_default.row }, factButtons(actionFact(hit.ref_id, hit.text, hit.truncated === true), true)), detail?.id === hit.ref_id ? h(FactDetailView, {
-				fact: detail.data,
-				disabled: loading,
-				onSaveRelations: saveRelations
-			}) : null)))) : null, error !== void 0 ? h("div", { className: pages_module_css_default.error }, `错误：${error}`) : null, notice !== void 0 ? h("div", { className: pages_module_css_default.status }, notice) : null, props.remote !== void 0 && !searchActive && !loading && error === void 0 && shown === 0 ? h("div", { className: pages_module_css_default.status }, statusFilter === "active" ? "当前没有活动的事实。可在对话里让 agent 用 mem_remember 写入。" : "当前没有归档的事实。") : null, health !== null ? h(HealthBlock, { stats: health }) : null, contradictions !== null ? contradictions.length === 0 ? h("div", { className: pages_module_css_default.status }, "没有未处理的矛盾。") : h("ul", { className: pages_module_css_default.list }, contradictions.map((c) => h("li", {
+			}))), error !== void 0 ? h("div", { className: controls_module_css_default.error }, `错误：${error}`) : null, notice !== void 0 ? h("div", { className: controls_module_css_default.status }, notice) : null, health !== null ? h(HealthBlock, { stats: health }) : null, contradictions !== null ? contradictions.length === 0 ? h("div", { className: controls_module_css_default.status }, "没有未处理的矛盾。") : h("ul", { className: controls_module_css_default.list }, contradictions.map((c) => h("li", {
 				key: c.contradiction_id,
-				className: pages_module_css_default.item
-			}, `#${String(c.fact_a)}「${c.content_a}」 ↔ #${String(c.fact_b)}「${c.content_b}」`, h("span", { className: pages_module_css_default.meta }, `score ${c.score.toFixed(2)} · ${c.detected_at ?? ""}`), props.remote !== void 0 ? h("div", { className: pages_module_css_default.row }, h(Btn, {
+				className: controls_module_css_default.item
+			}, `#${String(c.fact_a)}「${c.content_a}」 ↔ #${String(c.fact_b)}「${c.content_b}」`, h("span", { className: controls_module_css_default.meta }, `score ${c.score.toFixed(2)} · ${localTime(c.detected_at, "")}`), props.remote !== void 0 ? h("div", { className: pages_module_css_default.row }, h(Btn, {
 				label: `判 #${String(c.fact_a)} 错`,
 				danger: true,
-				disabled: loading,
+				disabled: busy,
 				onClick: () => resolveConflict(c, "true_positive", c.fact_a)
 			}), h(Btn, {
 				label: `判 #${String(c.fact_b)} 错`,
 				danger: true,
-				disabled: loading,
+				disabled: busy,
 				onClick: () => resolveConflict(c, "true_positive", c.fact_b)
 			}), h(Btn, {
 				label: "误报（两条都对）",
-				disabled: loading,
+				disabled: busy,
 				onClick: () => resolveConflict(c, "false_positive")
-			})) : null))) : null, searchActive ? null : h("ul", { className: pages_module_css_default.list }, rows.map((f) => h("li", {
-				key: f.fact_id,
-				className: pages_module_css_default.item
-			}, f.title === null || f.title === void 0 ? f.kind === "journal" ? h("div", { className: pages_module_css_default.meta }, "标题：（无标题）") : null : h("div", { className: pages_module_css_default.meta }, `标题：${f.title}`), editing?.id === f.fact_id ? h("textarea", {
-				className: pages_module_css_default.textarea,
-				value: editing.text,
-				rows: 3,
-				onChange: (e) => {
-					setEditing({
-						id: f.fact_id,
-						text: e.target.value
-					});
-				}
-			}) : f.content, h("span", { className: pages_module_css_default.meta }, `#${String(f.fact_id)} · ${f.kind} · trust ${f.trust_score.toFixed(2)}` + (f.pinned === true ? " · 永久" : typeof f.remaining_days === "number" ? ` · 剩余 ≈${String(Math.ceil(f.remaining_days))} 活跃日` : "") + ` · 有用 ${String(f.helpful_count)} · ${f.created_at}` + (f.status === "archived" && f.archive_reason ? ` · 归档原因 ${f.archive_reason}` : "") + (f.status === "archived" && f.pinned === true ? " · 永久保留（不会被清理）" : "")), h("div", { className: pages_module_css_default.row }, factButtons({
-				fact_id: f.fact_id,
-				status: f.status,
-				content: f.content,
-				pinned: f.pinned === true
-			}, false)), detail?.id === f.fact_id ? h(FactDetailView, {
-				fact: detail.data,
-				disabled: loading,
-				onSaveRelations: saveRelations
-			}) : null))), searchActive || !truncated ? null : h("button", {
-				type: "button",
-				className: pages_module_css_default.more,
-				disabled: loading,
-				onClick: () => {
-					load(nextOffset, statusFilter);
+			})) : null))) : null, h(FactList, {
+				state: {
+					...list,
+					rows
+				},
+				note: listNote,
+				emptyText,
+				loadingText,
+				busy,
+				editing,
+				onEdit: setEditing,
+				detail,
+				actionRow: factButtons,
+				onSaveRelations: saveRelations,
+				onLoadMore: () => {
+					loadMore();
 				}
-			}, loading ? "加载中…" : total === void 0 ? "加载更多" : `加载更多（还有 ${String(Math.max(total - shown, 0))} 条）`));
+			}));
 		}
 		/**
 		* Retrieval health (DESIGN §20): the numbers that say whether retrieval is actually working —
@@ -5413,14 +6267,14 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		*/
 		function HealthBlock(props) {
 			const r = props.stats.retrieval;
-			if (r === void 0) return h("div", { className: pages_module_css_default.status }, "检索健康度不可用。");
+			if (r === void 0) return h("div", { className: controls_module_css_default.status }, "检索健康度不可用。");
 			const vectors = props.stats.vectors;
 			const pendingVectors = vectors === void 0 ? 0 : vectors.stale + vectors.space_stale;
 			const wal = props.stats.wal;
 			const pct = (v) => `${String(Math.round(v * 100))}%`;
 			const kinds = Object.entries(r.by_kind).map(([kind, v]) => `${kind} ${String(v.queries)} 次（空 ${String(v.zero_results)}）`).join(" · ");
 			const truncated = r.embedding_truncated + r.output_truncated;
-			return h("div", { className: pages_module_css_default.detail }, pendingVectors === 0 ? null : h("div", { className: pages_module_css_default.status }, `⚠ 向量空间待迁移：${String(pendingVectors)} 条 ACTIVE 向量来自旧嵌入空间（宽度不符 ${String(vectors?.stale ?? 0)} · 其他表示 ${String(vectors?.space_stale ?? 0)}）——语义腿对它们失效，正在后台分批重算；手动入口 \`avantf-mem vectors --fix\``), wal?.warning === null || wal?.warning === void 0 ? null : h("div", { className: pages_module_css_default.status }, `⚠ ${wal.warning}（当前 ${String(wal.bytes)} 字节）`), h("div", { className: pages_module_css_default.status }, `检索 ${String(r.queries)} 次 · 空结果 ${pct(r.zero_result_rate)} · 平均 ${r.avg_latency_ms.toFixed(1)}ms · 峰值 ${r.max_latency_ms.toFixed(1)}ms`), h("div", { className: pages_module_css_default.meta }, `语义腿在线 ${pct(r.semantic_live_rate)} · 平均命中 ${String(r.avg_results_per_query)} 条`), kinds === "" ? null : h("div", { className: pages_module_css_default.meta }, kinds), props.stats.sources === void 0 && props.stats.validity === void 0 ? null : h("div", { className: pages_module_css_default.meta }, `来源覆盖 ${props.stats.sources === void 0 ? "—" : pct(props.stats.sources.coverage)}（${String(props.stats.sources?.facts_with_source ?? 0)}/${String(props.stats.sources?.active ?? 0)}） · 事件时间覆盖 ${props.stats.validity === void 0 ? "—" : pct(props.stats.validity.coverage)}（${String(props.stats.validity?.facts_with_valid_from ?? 0)}/${String(props.stats.validity?.active ?? 0)}）`), h("div", { className: pages_module_css_default.meta }, truncated === 0 ? "未被任何预算截断。" : `截断：嵌入 ${String(r.embedding_truncated)} · 输出 ${String(r.output_truncated)}${r.output_truncated > 0 ? "（调大 retrieval.max_output_tokens 或用 max_tokens 参数）" : ""}`), r.updated_at === null ? null : h("div", { className: pages_module_css_default.meta }, `更新于 ${r.updated_at}`));
+			return h("div", { className: pages_module_css_default.detail }, pendingVectors === 0 ? null : h("div", { className: controls_module_css_default.status }, `⚠ 向量空间待迁移：${String(pendingVectors)} 条 ACTIVE 向量来自旧嵌入空间（宽度不符 ${String(vectors?.stale ?? 0)} · 其他表示 ${String(vectors?.space_stale ?? 0)}）——语义腿对它们失效，正在后台分批重算；手动入口 \`avantf-mem vectors --fix\``), wal?.warning === null || wal?.warning === void 0 ? null : h("div", { className: controls_module_css_default.status }, `⚠ ${wal.warning}（当前 ${String(wal.bytes)} 字节）`), h("div", { className: controls_module_css_default.status }, `检索 ${String(r.queries)} 次 · 空结果 ${pct(r.zero_result_rate)} · 平均 ${r.avg_latency_ms.toFixed(1)}ms · 峰值 ${r.max_latency_ms.toFixed(1)}ms`), h("div", { className: controls_module_css_default.meta }, `语义腿在线 ${pct(r.semantic_live_rate)} · 平均命中 ${String(r.avg_results_per_query)} 条`), kinds === "" ? null : h("div", { className: controls_module_css_default.meta }, kinds), props.stats.sources === void 0 && props.stats.validity === void 0 ? null : h("div", { className: controls_module_css_default.meta }, `来源覆盖 ${props.stats.sources === void 0 ? "—" : pct(props.stats.sources.coverage)}（${String(props.stats.sources?.facts_with_source ?? 0)}/${String(props.stats.sources?.active ?? 0)}） · 事件时间覆盖 ${props.stats.validity === void 0 ? "—" : pct(props.stats.validity.coverage)}（${String(props.stats.validity?.facts_with_valid_from ?? 0)}/${String(props.stats.validity?.active ?? 0)}）`), h("div", { className: controls_module_css_default.meta }, truncated === 0 ? "未被任何预算截断。" : `截断：嵌入 ${String(r.embedding_truncated)} · 输出 ${String(r.output_truncated)}${r.output_truncated > 0 ? "（调大 retrieval.max_output_tokens 或用 max_tokens 参数）" : ""}`), r.updated_at === null ? null : h("div", { className: controls_module_css_default.meta }, `更新于 ${localTime(r.updated_at)}`));
 		}
 		/** Client cordis-plugin name shown in boot diagnostics. */
 		const name = "avantf-mem-client";