@co0ontty/wand 4.105.1 → 4.106.0

package/dist/retention.js

@@ -1,6 +1,6 @@
-import { AI_TEAM_ACTIVE_RUN_STATUSES } from "./ai-team-types.js";
 import { isArchiveBlocked } from "./archive-policy.js";
 import { cleanupWorktreeSync } from "./git-worktree.js";
+import { createRetentionProtection } from "./retention-protection.js";
 import { defaultTaskRetention, taskRetentionWindows } from "./task-retention.js";
 import { parseTimestampMs as timestamp } from "./time-utils.js";
 /** Backward-compatible exports for consumers of the historical default windows. */
@@ -48,12 +48,16 @@ export function runRetentionSweep(deps, now = Date.now()) {
     };
     const taskWindows = taskRetentionWindows(typeof deps.taskRetention === "function" ? deps.taskRetention() : deps.taskRetention);
     const snapshots = deps.sessions.listSlim();
+    // Eligibility is fixed from the pre-mutation snapshot, so a task archived in this pass cannot be purged in it.
+    const protection = createRetentionProtection(deps.storage, snapshots, taskWindows.archivedMs, now);
+    const purgedSessionIds = new Set();
+    const archivedSessionIds = new Set();
     for (const session of snapshots) {
         // 真正还在处理的会话不能归档或杀掉。空闲 PTY 壳不算。
         if (isArchiveBlocked(session))
             continue;
         if (session.archived) {
-            if (taskWindows.archivedMs === null)
+            if (!protection.canPurgeSession(session.id) || taskWindows.archivedMs === null)
                 continue;
             const archivedAt = timestamp(session.archivedAt);
             if (archivedAt === null) {
@@ -66,29 +70,15 @@ export function runRetentionSweep(deps, now = Date.now()) {
             }
             if (now - archivedAt < taskWindows.archivedMs)
                 continue;
-            try {
-                deps.sessions.delete(session.id);
-                result.purgedSessions += 1;
-            }
-            catch { /* best-effort: a session may disappear between the read and the purge */ }
+            purgeRetentionSession(deps, session, purgedSessionIds, result);
             continue;
         }
-        if (taskWindows.idleMs === null)
+        if (taskWindows.idleMs === null || !protection.canArchiveSession(session.id))
             continue;
         const reference = timestamp(session.endedAt ?? session.startedAt);
         if (reference === null || now - reference < taskWindows.idleMs)
             continue;
-        if (isIdleLivePty(session)) {
-            try {
-                deps.sessions.stop(session.id);
-            }
-            catch { /* shell may already be gone */ }
-        }
-        try {
-            deps.sessions.setArchived(session.id, true);
-            result.archivedSessions += 1;
-        }
-        catch { /* best-effort */ }
+        archiveRetentionSession(deps, session, archivedSessionIds, result);
     }
     const sessionsByTask = new Map();
     for (const session of snapshots) {
@@ -101,21 +91,16 @@ export function runRetentionSweep(deps, now = Date.now()) {
         else
             sessionsByTask.set(taskId, [session]);
     }
-    const activeTeamTaskIds = new Set(deps.storage.listAiTeamRuns({ statuses: AI_TEAM_ACTIVE_RUN_STATUSES }).map(run => run.taskId));
-    for (const task of deps.storage.listWandTasks()) {
+    for (const task of protection.tasks) {
         const bound = task.workspaceTaskId ? sessionsByTask.get(task.workspaceTaskId) ?? [] : [];
-        const running = bound.some((session) => isArchiveBlocked(session))
-            || activeTeamTaskIds.has(task.id) || (!!task.workspaceTaskId && activeTeamTaskIds.has(task.workspaceTaskId));
         if (task.status === "archived") {
-            if (running || taskWindows.archivedMs === null)
-                continue;
             const archivedAt = timestamp(task.archivedAt);
             if (archivedAt === null) {
-                // 历史归档行（归档时间尚未落库）：补写时间戳，给用户留出恢复窗口。
+                // 只补时间戳；状态未变，不会把升级前归档标记为可自动删除。
                 deps.storage.updateWandTask(task.id, { status: "archived" });
                 continue;
             }
-            if (now - archivedAt < taskWindows.archivedMs)
+            if (!protection.canPurgeTask(task.id))
                 continue;
             const container = task.workspaceTaskId ? deps.storage.getWorkspaceTask(task.workspaceTaskId) : null;
             if (container?.worktree) {
@@ -128,7 +113,7 @@ export function runRetentionSweep(deps, now = Date.now()) {
             result.purgedTasks += 1;
             continue;
         }
-        if (running || task.status === "doing" || taskWindows.idleMs === null)
+        if (taskWindows.idleMs === null || !protection.canArchiveTask(task))
             continue;
         const lastActivity = taskLastActivity(deps.storage, task, bound);
         if (lastActivity === null || now - lastActivity < taskWindows.idleMs)
@@ -136,76 +121,73 @@ export function runRetentionSweep(deps, now = Date.now()) {
         deps.storage.updateWandTask(task.id, { status: "archived" });
         result.archivedTasks += 1;
     }
-    sweepTeamRuns(deps, taskWindows, snapshots, now, result);
+    sweepTeamRuns(deps, protection, taskWindows, snapshots, purgedSessionIds, archivedSessionIds, now, result);
     return result;
 }
-function sweepTeamRuns(deps, windows, snapshots, now, result) {
+function archiveRetentionSession(deps, session, archivedSessionIds, result) {
+    if (session.archived || archivedSessionIds.has(session.id))
+        return;
+    if (isIdleLivePty(session)) {
+        try {
+            deps.sessions.stop(session.id);
+        }
+        catch { /* shell may already be gone */ }
+    }
+    try {
+        deps.sessions.setArchived(session.id, true);
+        session.archived = true;
+        archivedSessionIds.add(session.id);
+        result.archivedSessions += 1;
+    }
+    catch { /* best-effort */ }
+}
+function purgeRetentionSession(deps, session, purgedSessionIds, result) {
+    if (purgedSessionIds.has(session.id))
+        return;
+    if (isIdleLivePty(session)) {
+        try {
+            deps.sessions.stop(session.id);
+        }
+        catch { /* already gone */ }
+    }
+    try {
+        deps.sessions.delete(session.id);
+        purgedSessionIds.add(session.id);
+        result.purgedSessions += 1;
+    }
+    catch { /* best-effort: a session may disappear between the read and the purge */ }
+}
+function sweepTeamRuns(deps, protection, windows, snapshots, purgedSessionIds, archivedSessionIds, now, result) {
     const sessionById = new Map(snapshots.map((session) => [session.id, session]));
-    for (const run of deps.storage.listAiTeamRuns()) {
-        if (run.status === "running")
-            continue;
-        const linked = teamRunSessionIds(deps.storage, run.id, run.chatSessionId);
-        if (linked.some((id) => {
-            const session = sessionById.get(id);
-            return session ? isRetentionBusy(session) : false;
-        }))
+    for (const run of protection.runs) {
+        if (!protection.canPurgeRun(run.id) && !protection.canArchiveRun(run.id))
             continue;
+        const linked = protection.teamSessionIds.get(run.id) ?? [];
         const activity = teamRunActivity(run.updatedAt, linked, sessionById);
         if (activity === null)
             continue;
-        if (windows.archivedMs !== null && now - activity >= windows.archivedMs) {
+        if (protection.canPurgeRun(run.id) && windows.archivedMs !== null && now - activity >= windows.archivedMs) {
             for (const id of linked) {
                 const session = sessionById.get(id);
-                if (!session || isRetentionBusy(session))
+                if (!session || !protection.canPurgeSession(id))
                     continue;
-                if (isIdleLivePty(session)) {
-                    try {
-                        deps.sessions.stop(id);
-                    }
-                    catch { /* already gone */ }
-                }
-                try {
-                    deps.sessions.delete(id);
-                    result.purgedSessions += 1;
-                    sessionById.delete(id);
-                }
-                catch { /* already gone */ }
+                purgeRetentionSession(deps, session, purgedSessionIds, result);
+                sessionById.delete(id);
             }
             deps.storage.deleteAiTeamRun(run.id);
             result.purgedTeamRuns += 1;
             continue;
         }
-        if (windows.idleMs === null || now - activity < windows.idleMs)
+        if (!protection.canArchiveRun(run.id) || windows.idleMs === null || now - activity < windows.idleMs)
             continue;
         for (const id of linked) {
             const session = sessionById.get(id);
-            if (!session || session.archived || isRetentionBusy(session))
+            if (!session || !protection.canArchiveSession(id))
                 continue;
-            if (isIdleLivePty(session)) {
-                try {
-                    deps.sessions.stop(id);
-                }
-                catch { /* already gone */ }
-            }
-            try {
-                deps.sessions.setArchived(id, true);
-                session.archived = true;
-                result.archivedSessions += 1;
-            }
-            catch { /* best-effort */ }
+            archiveRetentionSession(deps, session, archivedSessionIds, result);
         }
     }
 }
-function teamRunSessionIds(storage, runId, chatSessionId) {
-    const ids = new Set();
-    if (chatSessionId)
-        ids.add(chatSessionId);
-    for (const step of storage.listAiTeamSteps(runId)) {
-        if (step.sessionId)
-            ids.add(step.sessionId);
-    }
-    return [...ids];
-}
 function teamRunActivity(updatedAt, sessionIds, sessionById) {
     const times = [];
     const updated = timestamp(updatedAt);

package/dist/server-employee-routes.js

@@ -308,7 +308,7 @@ export function registerSiliconEmployeeRoutes(app, deps) {
             res.setHeader("Cache-Control", "no-store");
             const employeeId = req.params.id;
             const query = typeof req.query.q === "string" ? req.query.q : "";
-            res.json({ employeeId, entries: storage.listEmployeeKnowledge(employeeId, query),
+            res.json({ employeeId, entries: storage.listEmployeeKnowledge(employeeId, query, EMPLOYEE_KNOWLEDGE_MAX_ENTRIES),
                 total: storage.countEmployeeKnowledge(employeeId), maxEntries: EMPLOYEE_KNOWLEDGE_MAX_ENTRIES });
         }
         catch (error) {

package/dist/server-file-routes.js

@@ -2,6 +2,7 @@ import crypto from "node:crypto";
 import { exec } from "node:child_process";
 import { lstat, mkdir, readdir, readFile, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import path from "node:path";
+import { homedir } from "node:os";
 import process from "node:process";
 import { promisify } from "node:util";
 import { getErrorMessage } from "./error-utils.js";
@@ -12,10 +13,46 @@ import { parseBoundedInteger } from "./request-limits.js";
 import { runGitRawAsync } from "./git-utils.js";
 import { parseStoredPathList, recordRecentPath } from "./recent-paths.js";
 import { streamFileWithRange } from "./http-file-stream.js";
+import { HTML_PREVIEW_CSP } from "./html-preview-policy.js";
 const execAsync = promisify(exec);
 const DIRECTORY_MAX_ITEMS = 200;
 const MAX_TEXT_PREVIEW_SIZE = 512 * 1024;
 const MAX_TEXT_WRITE_SIZE = 1024 * 1024;
+/** Query/root values are already decoded filesystem names; whitespace may be
+ * literal. Home expansion must not apply the folder input's trimming policy. */
+function resolveReadPath(value) {
+    return path.resolve(value.startsWith("~/") ? path.join(homedir(), value.slice(2)) : value);
+}
+/** Editor links may end in :line:column, but those characters are legal in
+ * filenames. Read the exact file first; writes never use this fallback. */
+async function readableFilePath(input, allowDirectory = false) {
+    const fallback = input.replace(/:\d+(?::\d+)?$/, "");
+    if (fallback === input)
+        return input;
+    try {
+        const exact = await stat(input);
+        if (exact.isFile() || (allowDirectory && exact.isDirectory()))
+            return input;
+    }
+    catch (error) {
+        if (!["ENOENT", "ENOTDIR"].includes(error.code || ""))
+            throw error;
+    }
+    if (isBlockedFolderPath(fallback))
+        return input;
+    try {
+        if ((await stat(fallback)).isFile())
+            return fallback;
+    }
+    catch (error) {
+        if (!["ENOENT", "ENOTDIR"].includes(error.code || ""))
+            throw error;
+    }
+    return input;
+}
+function readableFileExtension(filePath) {
+    return path.extname(filePath.replace(/:\d+(?::\d+)?$/, "")).toLowerCase();
+}
 export function registerFileRoutes(app, deps) {
     const { storage, defaultCwd } = deps;
     // Resolve relative artifacts against the stored source session, never a client-supplied cwd.
@@ -26,15 +63,17 @@ export function registerFileRoutes(app, deps) {
             return;
         }
         const relative = typeof req.query.path === "string" ? req.query.path : "";
-        if (!relative || path.isAbsolute(relative) || /[\u0000-\u001f]/.test(relative) || /^[a-z][a-z\d+.-]*:/i.test(relative)) {
+        const editorLocation = /^[^/:]+:\d+(?::\d+)?$/.test(relative);
+        if (!relative || path.isAbsolute(relative) || /[\u0000-\u001f]/.test(relative) || (/^[a-z][a-z\d+.-]*:/i.test(relative) && !editorLocation)) {
             res.status(400).json({ error: "文件相对路径无效。" });
             return;
         }
-        const resolved = path.resolve(session.cwd, relative);
+        let resolved = path.resolve(session.cwd, relative);
         if (!isPathWithinBase(resolved, path.resolve(session.cwd)) || isBlockedFolderPath(resolved)) {
             res.status(403).json({ error: "文件路径超出会话目录。" });
             return;
         }
+        resolved = await readableFilePath(resolved, relative.endsWith("/"));
         const canonical = await realpath(resolved).catch(() => null);
         const base = await realpath(session.cwd).catch(() => null);
         if (canonical && base && (!isPathWithinBase(canonical, base) || isBlockedFolderPath(canonical))) {
@@ -42,11 +81,22 @@ export function registerFileRoutes(app, deps) {
             return;
         }
         if (req.query.mode === "preview") {
-            if (!/\.html?$/i.test(resolved)) {
+            if (!relative.endsWith("/") && !/\.html?(?::\d+(?::\d+)?)?$/i.test(resolved)) {
                 res.status(400).json({ error: "目标不是 HTML 文件。" });
                 return;
             }
-            res.redirect(307, "/api/local-file/" + Buffer.from(resolved).toString("base64url") + "/");
+            const search = typeof req.query.search === "string" ? req.query.search : "";
+            if (search && (!search.startsWith("?") || /[\u0000-\u0020#]/.test(search) || search.length > 8192)) {
+                res.status(400).json({ error: "预览参数无效。" });
+                return;
+            }
+            res.redirect(307, "/api/local-file/" + Buffer.from(resolved).toString("base64url") + "/" + search);
+        }
+        else if (relative.endsWith("/") && req.query.mode === "download") {
+            res.redirect(307, "/api/local-file/" + Buffer.from(resolved).toString("base64url") + "/?__wand_file_action=download");
+        }
+        else if (req.query.mode === "metadata") {
+            res.redirect(307, "/api/file-preview?path=" + encodeURIComponent(resolved));
         }
         else {
             res.redirect(307, "/api/file-raw?path=" + encodeURIComponent(resolved) + (req.query.mode === "download" ? "&download=1" : ""));
@@ -123,19 +173,20 @@ export function registerFileRoutes(app, deps) {
             res.status(400).json({ error: "Missing path parameter" });
             return;
         }
-        const resolvedPath = path.resolve(filePath);
+        let resolvedPath = resolveReadPath(filePath);
         if (isBlockedFolderPath(resolvedPath)) {
             res.status(403).json({ error: "Access denied" });
             return;
         }
         try {
+            resolvedPath = await readableFilePath(resolvedPath);
             const fileStat = await stat(resolvedPath);
             if (fileStat.isDirectory()) {
                 res.status(400).json({ error: "Cannot preview a directory" });
                 return;
             }
-            const ext = path.extname(filePath).toLowerCase();
-            const baseName = path.basename(filePath);
+            const ext = readableFileExtension(resolvedPath);
+            const baseName = path.basename(resolvedPath);
             const kind = classifyFile(ext, baseName);
             const mime = mimeForExt(ext);
             if (kind !== "text") {
@@ -153,6 +204,7 @@ export function registerFileRoutes(app, deps) {
             if (fileStat.size > MAX_TEXT_PREVIEW_SIZE) {
                 res.status(413).json({
                     error: "文件太大，无法在线预览（限 512 KB）。",
+                    path: resolvedPath,
                     truncated: true,
                     size: fileStat.size,
                     maxSize: MAX_TEXT_PREVIEW_SIZE,
@@ -212,7 +264,7 @@ export function registerFileRoutes(app, deps) {
                 res.status(400).json({ error: "目标不是普通文件。" });
                 return;
             }
-            const ext = path.extname(resolvedPath).toLowerCase();
+            const ext = readableFileExtension(resolvedPath);
             const baseName = path.basename(resolvedPath);
             if (classifyFile(ext, baseName) !== "text") {
                 res.status(415).json({ error: "仅支持编辑文本类文件。" });
@@ -377,19 +429,20 @@ export function registerFileRoutes(app, deps) {
             res.status(400).json({ error: "Missing path parameter" });
             return;
         }
-        const resolvedPath = path.resolve(filePath);
+        let resolvedPath = resolveReadPath(filePath);
         if (isBlockedFolderPath(resolvedPath)) {
             res.status(403).json({ error: "Access denied" });
             return;
         }
         try {
+            resolvedPath = await readableFilePath(resolvedPath);
             const fileStat = await stat(resolvedPath);
             if (!fileStat.isFile()) {
                 res.status(400).json({ error: "Not a regular file" });
                 return;
             }
-            const ext = path.extname(filePath).toLowerCase();
-            const baseName = path.basename(filePath);
+            const ext = path.extname(resolvedPath).toLowerCase();
+            const baseName = path.basename(resolvedPath);
             const kind = classifyFile(ext, baseName);
             const cap = RAW_MAX_BYTES_BY_KIND[kind] ?? RAW_MAX_BYTES_BY_KIND.binary;
             // Inline responses are previews and stay size-bounded. Explicit downloads are
@@ -413,7 +466,7 @@ export function registerFileRoutes(app, deps) {
                 headers: {
                     "Cache-Control": "private, max-age=60",
                     "X-Content-Type-Options": "nosniff",
-                    ...(/\.html?$/i.test(ext) ? { "Content-Security-Policy": "sandbox allow-scripts; connect-src 'none'; form-action 'none'; frame-src 'none'; object-src 'none'; base-uri 'none'" } : {}),
+                    ...(/\.html?$/i.test(ext) ? { "Content-Security-Policy": HTML_PREVIEW_CSP } : {}),
                 },
                 readErrorMessage: "Failed to read file",
             });
@@ -430,6 +483,11 @@ export function registerFileRoutes(app, deps) {
             res.status(405).json({ error: "本地文件预览只支持 GET。" });
             return;
         }
+        if (req.originalUrl.split("?")[0] === req.baseUrl) {
+            const search = req.originalUrl.includes("?") ? req.originalUrl.slice(req.originalUrl.indexOf("?")) : "";
+            res.redirect(307, req.baseUrl + "/" + search);
+            return;
+        }
         const encodedRoot = String(req.params.encodedRoot ?? "");
         if (!/^[A-Za-z0-9_-]*$/.test(encodedRoot)) {
             res.status(400).json({ error: "本地预览路径格式无效。" });
@@ -447,7 +505,7 @@ export function registerFileRoutes(app, deps) {
             res.status(400).json({ error: "缺少本地预览路径。" });
             return;
         }
-        const requestedRoot = normalizeFolderPath(rootPath);
+        let requestedRoot = resolveReadPath(rootPath);
         if (isBlockedFolderPath(requestedRoot)) {
             res.status(403).json({ error: "访问被拒绝：无法访问系统敏感目录。" });
             return;
@@ -462,9 +520,10 @@ export function registerFileRoutes(app, deps) {
         }
         relativePath = relativePath.replace(/^\/+/, "");
         try {
+            requestedRoot = await readableFilePath(requestedRoot, true);
             const rootStat = await stat(requestedRoot);
             const baseRoot = rootStat.isFile() ? path.dirname(requestedRoot) : requestedRoot;
-            const requested = relativePath.trim() || (rootStat.isFile() ? path.basename(requestedRoot) : "index.html");
+            const requested = relativePath || (rootStat.isFile() ? path.basename(requestedRoot) : "index.html");
             const resolvedPath = path.resolve(baseRoot, requested);
             if (!isPathWithinBase(resolvedPath, baseRoot) || isBlockedFolderPath(resolvedPath)) {
                 res.status(403).json({ error: "访问被拒绝：路径越界。" });
@@ -473,6 +532,11 @@ export function registerFileRoutes(app, deps) {
             let fileStat = await stat(resolvedPath);
             let filePath = resolvedPath;
             if (fileStat.isDirectory()) {
+                if (!req.originalUrl.split("?")[0].endsWith("/")) {
+                    const search = req.originalUrl.includes("?") ? req.originalUrl.slice(req.originalUrl.indexOf("?")) : "";
+                    res.redirect(307, req.originalUrl.split("?")[0] + "/" + search);
+                    return;
+                }
                 filePath = path.join(resolvedPath, "index.html");
                 fileStat = await stat(filePath);
             }
@@ -486,7 +550,11 @@ export function registerFileRoutes(app, deps) {
                 res.status(403).json({ error: "访问被拒绝：资源链接目标越界。" });
                 return;
             }
-            const ext = path.extname(filePath).toLowerCase();
+            if (req.query.__wand_file_action === "metadata" || req.query.__wand_file_action === "download") {
+                res.redirect(307, (req.query.__wand_file_action === "metadata" ? "/api/file-preview?path=" : "/api/file-raw?download=1&path=") + encodeURIComponent(filePath));
+                return;
+            }
+            const ext = readableFileExtension(filePath);
             const baseName = path.basename(filePath);
             const encodedName = encodeURIComponent(baseName);
             streamFileWithRange(req, res, {
@@ -498,7 +566,7 @@ export function registerFileRoutes(app, deps) {
                     "Cache-Control": "private, no-cache",
                     "X-Content-Type-Options": "nosniff",
                     // Even opening the artifact directly must not grant the Wand origin.
-                    ...(/\.html?$/i.test(ext) ? { "Content-Security-Policy": "sandbox allow-scripts; connect-src 'none'; form-action 'none'; frame-src 'none'; object-src 'none'; base-uri 'none'" } : {}),
+                    ...(/\.html?$/i.test(ext) ? { "Content-Security-Policy": HTML_PREVIEW_CSP } : {}),
                 },
                 readErrorMessage: "读取本地文件失败。",
             });

package/dist/server-knowledge-routes.d.ts

@@ -0,0 +1,4 @@
+import type { Express } from "express";
+import type { WandStorage } from "./storage.js";
+/** Mounted after requireAuth and the sessions scope guard. No capability/credential DTOs. */
+export declare function registerKnowledgeRoutes(app: Express, storage: WandStorage): void;

package/dist/server-knowledge-routes.js

@@ -0,0 +1,61 @@
+import { KnowledgeError } from "./knowledge-types.js";
+function fields(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new KnowledgeError("请求必须包含知识库归属。");
+    return value;
+}
+function namespace(value) {
+    const data = fields(value);
+    if (data.scope !== "personal" && data.scope !== "project")
+        throw new KnowledgeError("请选择个人或项目知识库。");
+    if (typeof data.ownerId !== "string" || !data.ownerId.trim() || data.ownerId.length > 200)
+        throw new KnowledgeError("请选择员工或项目。");
+    return { scope: data.scope, ownerId: data.ownerId };
+}
+function documentInput(value) {
+    const data = fields(value);
+    if (typeof data.content !== "string" || typeof data.title !== "string" || typeof data.folder !== "string") {
+        throw new KnowledgeError("正文、标题和目录必须是文字。");
+    }
+    return { content: data.content, title: data.title, folder: data.folder };
+}
+function revision(value) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1)
+        throw new KnowledgeError("请先读取文档的最新版本。");
+    return value;
+}
+/** Mounted after requireAuth and the sessions scope guard. No capability/credential DTOs. */
+export function registerKnowledgeRoutes(app, storage) {
+    const handle = (fn) => (req, res) => {
+        res.setHeader("Cache-Control", "no-store");
+        try {
+            res.json(fn(req));
+        }
+        catch (error) {
+            if (error instanceof KnowledgeError)
+                res.status(error.status).json({ error: error.message });
+            else
+                res.status(500).json({ error: "知识库暂时不可用，请稍后重试。" });
+        }
+    };
+    app.get("/api/knowledge/owners", handle(() => storage.knowledgeOwners()));
+    app.get("/api/knowledge", handle(req => {
+        const { scope, ownerId } = namespace(req.query);
+        if (req.query.q !== undefined && typeof req.query.q !== "string")
+            throw new KnowledgeError("搜索内容必须是文字。");
+        return storage.readKnowledgeLibrary(scope, ownerId, req.query.q);
+    }));
+    app.post("/api/knowledge", handle(req => {
+        const { scope, ownerId } = namespace(req.body);
+        return storage.createKnowledgeDocument(scope, ownerId, documentInput(req.body));
+    }));
+    app.patch("/api/knowledge/:id", handle(req => {
+        const { scope, ownerId } = namespace(req.body);
+        return { entry: storage.updateKnowledgeDocument(scope, ownerId, String(req.params.id), revision(req.body.revision), documentInput(req.body)) };
+    }));
+    app.delete("/api/knowledge/:id", handle(req => {
+        const { scope, ownerId } = namespace(req.body);
+        storage.deleteKnowledgeDocument(scope, ownerId, String(req.params.id), revision(req.body.revision));
+        return { ok: true };
+    }));
+}

package/dist/server-local-preview-routes.js

@@ -1,6 +1,7 @@
 import http from "node:http";
 import { getErrorMessage } from "./error-utils.js";
 import { asyncRoute } from "./express-async.js";
+import { HTML_PREVIEW_CSP } from "./html-preview-policy.js";
 const MAX_PORT = 65535;
 const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
 /** URL 里可能写 `localhost` / `[::1]`，建立连接前规范成裸主机名。 */
@@ -51,13 +52,12 @@ export function parseLocalPreviewTarget(rawHost, rawPort, rawPath) {
     };
 }
 function proxyLocation(value, target) {
-    if (value.startsWith("/")) {
-        return `/api/local-preview/${target.hostname}/${target.port}${value}`;
-    }
     try {
-        const url = new URL(value);
-        if (url.hostname === target.hostname && url.port === String(target.port)) {
-            return `/api/local-preview/${target.hostname}/${target.port}${url.pathname}${url.search}`;
+        const host = target.hostname.includes(":") ? `[${target.hostname}]` : target.hostname;
+        const url = new URL(value, `http://${host}:${target.port}${target.path}`);
+        const hostname = NORMALIZED_LOOPBACK_HOSTNAMES[url.hostname] ?? url.hostname;
+        if (url.protocol === "http:" && !url.username && !url.password && hostname === target.hostname && (url.port || "80") === String(target.port)) {
+            return `/api/local-preview/${target.hostname}/${target.port}${url.pathname}${url.search}${url.hash}`;
         }
     }
     catch {
@@ -77,6 +77,11 @@ export function registerLocalPreviewRoutes(app, dependencies) {
             res.status(400).json({ error: "只允许预览本机（localhost）HTTP 服务。" });
             return;
         }
+        if (req.originalUrl.split("?")[0] === req.baseUrl) {
+            const search = req.originalUrl.includes("?") ? req.originalUrl.slice(req.originalUrl.indexOf("?")) : "";
+            res.redirect(307, req.baseUrl + "/" + search);
+            return;
+        }
         const headers = {};
         for (const [key, value] of Object.entries(req.headers)) {
             if (FILTERED_REQUEST_HEADERS.has(key) || value === undefined)
@@ -96,12 +101,26 @@ export function registerLocalPreviewRoutes(app, dependencies) {
                     method: req.method,
                     headers,
                 }, resolve);
+                const cancel = () => proxyReq.destroy();
+                req.once("aborted", cancel);
+                res.once("close", cancel);
+                proxyReq.once("close", () => {
+                    req.off("aborted", cancel);
+                    res.off("close", cancel);
+                });
+                proxyReq.setTimeout(15_000, () => {
+                    const error = new Error("本地服务响应超时。");
+                    error.code = "ETIMEDOUT";
+                    proxyReq.destroy(error);
+                });
                 proxyReq.once("error", reject);
                 req.once("error", reject);
                 req.pipe(proxyReq);
             });
         }
         catch (error) {
+            if (res.destroyed)
+                return;
             if (!res.headersSent) {
                 const code = error.code;
                 const message = code === "ECONNREFUSED"
@@ -124,6 +143,9 @@ export function registerLocalPreviewRoutes(app, dependencies) {
             }
             res.setHeader(key, value);
         }
+        res.setHeader("Content-Security-Policy", HTML_PREVIEW_CSP);
+        res.setHeader("X-Content-Type-Options", "nosniff");
+        res.setHeader("Referrer-Policy", "no-referrer");
         if (req.method === "HEAD" || !upstream.statusCode) {
             upstream.destroy();
             res.end();

package/dist/server-pi-defaults-routes.d.ts

@@ -18,6 +18,6 @@ export interface PiDefaultsRouteDeps {
  * 之前只有「在某个会话里改一次，顺带成为新会话默认」这一条隐式路径，用户在设置页
  * 找不到它；而会话里的写入又只能表达会话本身的选择。这里给出显式入口，语义与
  * `StructuredSessionManager.setPiSettings` 写回默认的那一段保持一致（字段级合并、
- * 资源必须真实存在、不可表达的值直接拒绝）。
+ * 新增资源必须真实存在、不可表达的值直接拒绝）。
  */
 export declare function registerPiDefaultsRoutes(app: Express, deps: PiDefaultsRouteDeps): void;