@furongjun1999/dsh-memory 0.5.0 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (156) hide show
  1. package/README.md +572 -465
  2. package/docs/README.md +1 -0
  3. package/docs/eval/DSH/346/227/245/345/277/227/347/264/242/345/274/225v2_/345/217/202/350/200/203dsh-TUI_v1.0.md +248 -0
  4. package/docs/eval/DSH/346/227/245/345/277/227/347/264/242/345/274/225/346/225/210/346/236/234/351/252/214/350/257/201_v1.0.md +209 -0
  5. package/docs/eval/DSH/347/253/257/347/274/272/351/231/267/344/270/223/351/241/271_v1.0.md +254 -0
  6. package/docs/eval/P1b2_/350/257/273/351/235/242/344/273/243/351/231/205/344/277/256/345/244/215_v1.0.md +124 -0
  7. package/docs/eval/bench_lingshu_self/bench_self.py +140 -0
  8. package/docs/eval/bench_lingshu_self/self_bench_result.json +404 -0
  9. package/docs/eval/bench_lingshu_self//347/201/265/346/236/242/350/207/252/345/272/223/347/253/257/345/210/260/347/253/257/346/243/200/347/264/242/345/256/236/346/265/213_v1.0.md +38 -0
  10. package/docs/eval//344/270/215/345/217/257/351/235/240/346/200/247/350/220/275/345/234/260_P0_v1.0.md +185 -0
  11. package/docs/eval//345/217/221/345/270/20306_/344/270/200/351/224/256/351/205/215/347/275/256/344/270/216DSH0172_v1.0.md +171 -0
  12. package/docs/eval//346/225/205/351/232/234/346/263/250/345/205/245/345/256/236/346/265/213_v1.0.md +422 -0
  13. package/docs/eval//347/253/257/345/210/260/347/253/257LoCoMoQA/345/220/214/345/217/243/345/276/204/345/257/271/347/205/247_v1.0.md +100 -0
  14. package/docs/eval//347/253/257/345/210/260/347/253/257/345/271/262/346/211/260/346/261/240/350/257/204/346/265/213_/347/241/256/345/256/232/346/200/247/350/243/201/345/206/263vsLLM_judge_v1.1.md +197 -0
  15. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v1.md +156 -0
  16. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v10.md +210 -0
  17. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v11.md +227 -0
  18. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v12.md +203 -0
  19. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v13.md +233 -0
  20. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v14.md +191 -0
  21. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v15.md +213 -0
  22. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v16.md +214 -0
  23. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v17.md +199 -0
  24. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v18.md +183 -0
  25. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v19.md +207 -0
  26. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v2.md +156 -0
  27. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v3.md +152 -0
  28. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v4.md +128 -0
  29. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v5.md +114 -0
  30. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v6.md +192 -0
  31. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v7.md +187 -0
  32. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v8.md +207 -0
  33. package/docs/eval//347/274/272/351/231/267/346/214/226/346/216/230_/350/207/252/344/270/273/350/277/255/344/273/243_v9.md +203 -0
  34. package/docs/hive//345/256/211/345/205/250/345/256/241/350/256/241/345/256/236/351/224/232_v0.1.md +202 -0
  35. package/docs/hive//350/234/202/345/267/242/345/217/214/345/256/236/344/276/213/344/272/222/351/252/214_/350/256/276/350/256/241/345/256/232/347/250/277.md +19 -3
  36. package/docs/images/lingshu-moonlight-covenant-poster-preview.jpg +0 -0
  37. package/docs/images/lingshu-moonlight-covenant-poster.png +0 -0
  38. package/docs/mdcg//345/212/237/350/203/275/350/260/203/347/224/250/346/230/240/345/260/204/350/241/250_v0.1.md +40 -40
  39. package/docs/theory//344/270/215/345/217/257/351/235/240/345/256/232/347/220/206/344/270/216/345/244/261/346/225/210/344/274/230/345/205/210/346/241/206/346/236/266_v0.3.md +365 -0
  40. package/docs//344/270/215/345/217/257/351/235/240/346/200/247/347/220/206/350/256/272_v0.1.md +343 -0
  41. package/dsh/cordis-patch-profile-web.example.yml +35 -0
  42. package/lib/bridge.d.ts +9 -0
  43. package/lib/bridge.js +35 -0
  44. package/lib/cli.d.ts +3 -0
  45. package/lib/cli.js +66 -0
  46. package/lib/index.js +7 -1
  47. package/lib/init.d.ts +88 -0
  48. package/lib/init.js +287 -0
  49. package/lib/lib/roleplay_web.js +530 -443
  50. package/lib/lib/token_store.d.ts +7 -1
  51. package/lib/lib/token_store.js +12 -3
  52. package/md_cg/audit.py +12 -1
  53. package/md_cg/backfill.py +16 -15
  54. package/md_cg/backfill_bucket_zh.py +35 -0
  55. package/md_cg/bench_e2e_judge.py +532 -0
  56. package/md_cg/bench_e2e_locomo_qa.py +368 -0
  57. package/md_cg/bench_e2e_qa.py +256 -0
  58. package/md_cg/branches.py +18 -2
  59. package/md_cg/ccgc.py +3 -2
  60. package/md_cg/chain.py +19 -4
  61. package/md_cg/consolidate.py +7 -6
  62. package/md_cg/crosscheck.py +4 -3
  63. package/md_cg/crypto.py +439 -437
  64. package/md_cg/datapath.py +395 -335
  65. package/md_cg/evidence.py +8 -3
  66. package/md_cg/export.py +3 -1
  67. package/md_cg/forgetting.py +2 -2
  68. package/md_cg/fsutil.py +48 -0
  69. package/md_cg/hotcache.py +255 -238
  70. package/md_cg/interop.py +161 -22
  71. package/md_cg/judgment_manifest.py +177 -0
  72. package/md_cg/links.py +655 -622
  73. package/md_cg/mcp_server.py +282 -31
  74. package/md_cg/mdcg.py +702 -126
  75. package/md_cg/mdcos.py +454 -68
  76. package/md_cg/mreview/govern.py +5 -4
  77. package/md_cg/postings.py +4 -2
  78. package/md_cg/readcache.py +76 -18
  79. package/md_cg/reconcile.py +228 -0
  80. package/md_cg/review_cli.py +215 -0
  81. package/md_cg/routing.py +28 -0
  82. package/md_cg/run_tests.py +211 -0
  83. package/md_cg/scrub.py +862 -852
  84. package/md_cg/security.py +385 -275
  85. package/md_cg/selfreport.py +3 -2
  86. package/md_cg/signer.py +565 -562
  87. package/md_cg/sources.py +3 -2
  88. package/md_cg/stg.py +6 -0
  89. package/md_cg/sustain.py +1168 -1138
  90. package/md_cg/test_access_hints.py +147 -0
  91. package/md_cg/test_branch_discard_tombstone.py +136 -0
  92. package/md_cg/test_branches.py +259 -249
  93. package/md_cg/test_chain_read_isolate.py +168 -0
  94. package/md_cg/test_datapath_device_name.py +203 -0
  95. package/md_cg/test_emit_negtail_cache.py +156 -0
  96. package/md_cg/test_en_pipeline.py +186 -166
  97. package/md_cg/test_govern_directread.py +421 -0
  98. package/md_cg/test_i32_hotcache_env_key.py +218 -0
  99. package/md_cg/test_identity_attribution.py +228 -147
  100. package/md_cg/test_index_crossprocess_reload.py +301 -0
  101. package/md_cg/test_index_durability.py +238 -224
  102. package/md_cg/test_interop.py +4 -2
  103. package/md_cg/test_interop_judgment.py +228 -0
  104. package/md_cg/test_issue39_utf8_stdio.py +273 -0
  105. package/md_cg/test_links_concurrent_write.py +188 -0
  106. package/md_cg/test_merge_upsert.py +168 -0
  107. package/md_cg/test_n123_derive_expiry_chain.py +205 -0
  108. package/md_cg/test_n130_verify_falsified_protect.py +185 -0
  109. package/md_cg/test_n131_merge_gate.py +205 -0
  110. package/md_cg/test_none_id_write_guard.py +165 -0
  111. package/md_cg/test_p1x_ref_root.py +160 -0
  112. package/md_cg/test_p27_docindex.py +774 -765
  113. package/md_cg/test_p2_mcp.py +3 -0
  114. package/md_cg/test_p32_backfill.py +304 -298
  115. package/md_cg/test_p39_verify_flow.py +90 -50
  116. package/md_cg/test_p47_session_view.py +60 -25
  117. package/md_cg/test_propose_tail_index.py +157 -0
  118. package/md_cg/test_read_scope_b27.py +277 -0
  119. package/md_cg/test_readcache_default_on.py +168 -0
  120. package/md_cg/test_readcache_precise_inval.py +270 -0
  121. package/md_cg/test_readcache_prodpath.py +55 -7
  122. package/md_cg/test_reconcile_v0.py +294 -0
  123. package/md_cg/test_retr_s1.py +6 -2
  124. package/md_cg/test_retr_s1b.py +67 -0
  125. package/md_cg/test_retr_s7.py +8 -0
  126. package/md_cg/test_retr_s9_entity_ctx.py +181 -175
  127. package/md_cg/test_retr_score_once.py +208 -0
  128. package/md_cg/test_review_cli_attribution.py +177 -0
  129. package/md_cg/test_review_cli_visibility.py +235 -0
  130. package/md_cg/test_review_onepass.py +170 -0
  131. package/md_cg/test_rrf_graph_seed_cache.py +154 -0
  132. package/md_cg/test_security_audit.py +155 -0
  133. package/md_cg/test_security_audit_b26.py +161 -0
  134. package/md_cg/test_security_audit_v21.py +250 -0
  135. package/md_cg/test_semantic_canonical.py +255 -241
  136. package/md_cg/test_session_isolation.py +168 -0
  137. package/md_cg/test_snapshot_autoclose.py +187 -0
  138. package/md_cg/test_tail_watermark_race.py +208 -0
  139. package/md_cg/test_tenant_env_override_warn.py +139 -0
  140. package/md_cg/test_tenant_registry_corrupt_warn.py +151 -0
  141. package/md_cg/test_v14_fixes.py +415 -397
  142. package/md_cg/test_verify_dirty_reconcile.py +157 -0
  143. package/md_cg/theory.py +276 -273
  144. package/md_cg/tokens.py +734 -677
  145. package/md_cg/units.py +3 -2
  146. package/md_cg/vision_evidence.py +4 -3
  147. package/md_cg/whitebox_kb/wisdom/code_solidified.json +6195 -6195
  148. package/md_cg/whitebox_kb/wisdom/multilang_ir.py +128 -124
  149. package/md_cg/writepipe.py +554 -550
  150. package/package.json +11 -2
  151. package/src/bridge.ts +434 -401
  152. package/src/cli.ts +65 -0
  153. package/src/index.ts +526 -518
  154. package/src/init.ts +347 -0
  155. package/src/lib/roleplay_web.ts +1019 -932
  156. package/src/lib/token_store.ts +202 -192
@@ -1,932 +1,1019 @@
1
- // @ts-nocheck
2
- // @ts-nocheck
3
- // @ts-nocheck
4
- /**
5
- * dsh-memory 扩展:角色扮演网页(同源挂载到 webServer /roleplay 前缀)。
6
- *
7
- * 职责边界(三层拆分后):
8
- * · 大脑(mdcg):角色定义 / 对话转录显式落认知图(md_cg = 唯一真源)——
9
- * 转录、历史、翻译、落图全部不依赖「身体」,始终可用。
10
- * · 身体(可选 capability 后端):生成能力 roleplay_chat / role_create /
11
- * role_import 属「身」,主仓默认不挂载;未挂载时这些接口 **fail-closed**
12
- * 返回明确原因(不编造回复)。启用见 config.capability(dsh/cordis.yml.example)。
13
- */
14
- import { join, dirname } from 'node:path';
15
- import { readFileSync, mkdirSync, appendFileSync, existsSync, writeFileSync, renameSync } from 'node:fs';
16
- const HTML = `<!doctype html>
17
- <html lang="zh-CN">
18
- <head>
19
- <meta charset="utf-8">
20
- <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
21
- <title>灵枢 · 角色扮演</title>
22
- <style>
23
- :root { --bg:#12141a; --card:#1c2029; --line:#2a3040; --txt:#e8eaf0; --sub:#9aa3b5; --accent:#7c8cff; --accent2:#5ad1a8; }
24
- * { box-sizing:border-box; margin:0; padding:0; }
25
- body { background:var(--bg); color:var(--txt); font-family:"PingFang SC","Noto Sans SC",system-ui,sans-serif; height:100vh; height:100dvh; display:flex; flex-direction:column; overflow:hidden; }
26
- header { flex:none; padding:14px 18px; border-bottom:1px solid var(--line); display:flex; align-items:center; gap:12px; }
27
- header h1 { font-size:17px; font-weight:600; }
28
- header .badge { font-size:11px; color:var(--accent2); border:1px solid var(--accent2); padding:2px 8px; border-radius:999px; }
29
- #roles { margin-left:auto; display:flex; gap:8px; align-items:center; }
30
- #roles select { background:var(--card); color:var(--txt); border:1px solid var(--line); border-radius:8px; padding:6px 10px; font-size:13px; }
31
- #roles button { background:var(--card); color:var(--accent); border:1px solid var(--line); border-radius:8px; padding:6px 10px; font-size:13px; cursor:pointer; }
32
- #roles button:hover { border-color:var(--accent); }
33
- main { flex:1; min-height:0; overflow-y:auto; padding:16px 18px; display:flex; flex-direction:column; gap:12px; }
34
- .msg { max-width:78%; padding:10px 14px; border-radius:14px; line-height:1.65; font-size:14px; white-space:pre-wrap; word-break:break-word; }
35
- .user { align-self:flex-end; background:var(--accent); color:#0b0d14; border-bottom-right-radius:4px; }
36
- .bot { align-self:flex-start; background:var(--card); border:1px solid var(--line); border-bottom-left-radius:4px; }
37
- .bot .route { display:block; font-size:10px; color:var(--sub); margin-top:6px; }
38
- .typing { color:var(--sub); font-size:13px; padding:6px 14px 4px; display:none; flex:none; }
39
- footer { flex:none; margin:4px 12px calc(env(safe-area-inset-bottom, 0px) + 24px); background:var(--card); border:1px solid var(--line); border-radius:16px; padding:10px; display:flex; gap:8px; align-items:flex-end; box-shadow:0 8px 28px rgba(0,0,0,.4); }
40
- footer.typing-center { position:fixed; top:45%; left:12px; right:12px; transform:translateY(-50%); z-index:100; margin:0; }
41
- footer textarea { flex:1; background:var(--bg); border:1px solid var(--line); color:var(--txt); border-radius:12px; padding:12px 14px; font-size:15px; line-height:1.55; outline:none; resize:none; min-height:46px; max-height:140px; font-family:inherit; }
42
- footer textarea:focus { border-color:var(--accent); }
43
- footer button { background:var(--accent); border:none; color:#0b0d14; border-radius:12px; padding:13px 20px; font-size:15px; font-weight:600; cursor:pointer; flex:none; }
44
- footer button:disabled { opacity:.5; cursor:wait; }
45
- #newrole { position:fixed; inset:0; background:rgba(0,0,0,.6); display:none; align-items:center; justify-content:center; z-index:10; }
46
- #newrole .box { background:var(--card); border:1px solid var(--line); border-radius:14px; padding:20px; width:min(420px,90vw); display:flex; flex-direction:column; gap:10px; }
47
- #newrole h3 { font-size:15px; }
48
- #newrole input, #newrole textarea { background:var(--bg); border:1px solid var(--line); color:var(--txt); border-radius:8px; padding:8px 10px; font-size:13px; font-family:inherit; }
49
- #newrole textarea { height:80px; resize:vertical; }
50
- #newrole .row { display:flex; gap:8px; justify-content:flex-end; }
51
- #newrole .row button { padding:6px 14px; border-radius:8px; font-size:13px; cursor:pointer; border:1px solid var(--line); background:var(--card); color:var(--txt); }
52
- #newrole .row .ok { background:var(--accent); color:#0b0d14; border-color:var(--accent); font-weight:600; }
53
- #transpanel { position:fixed; inset:0; background:rgba(0,0,0,.6); display:none; align-items:center; justify-content:center; z-index:20; }
54
- #transpanel .box { background:var(--card); border:1px solid var(--line); border-radius:14px; padding:20px; width:min(480px,92vw); max-height:80vh; overflow-y:auto; display:flex; flex-direction:column; gap:10px; }
55
- #transpanel h3 { font-size:15px; }
56
- #transpanel .mode-row { display:flex; flex-direction:column; gap:6px; font-size:13px; color:var(--txt); }
57
- #transpanel .mode-row label { display:flex; gap:6px; align-items:flex-start; line-height:1.5; }
58
- #transpanel .tp-row { display:flex; gap:6px; align-items:center; }
59
- #transpanel .tp-row input { flex:1; background:var(--bg); border:1px solid var(--line); color:var(--txt); border-radius:8px; padding:7px 9px; font-size:13px; font-family:inherit; min-width:0; }
60
- #transpanel .tp-row .tp-note { flex:1.2; }
61
- #transpanel .tp-row .tp-del { flex:none; background:none; border:none; color:var(--sub); font-size:16px; cursor:pointer; padding:4px 6px; }
62
- #transpanel .row button { padding:7px 14px; border-radius:8px; font-size:13px; cursor:pointer; border:1px solid var(--line); background:var(--card); color:var(--txt); }
63
- #transpanel .row .ok { background:var(--accent); color:#0b0d14; border-color:var(--accent); font-weight:600; }
64
- /* —— 年龄确认(NSFW 门控)—— */
65
- #agegate { position:fixed; inset:0; background:rgba(0,0,0,.72); display:none; align-items:center; justify-content:center; z-index:100; }
66
- #agegate .box { background:var(--card); border:1px solid var(--line); border-radius:14px; padding:22px; width:min(460px,90vw); display:flex; flex-direction:column; gap:12px; }
67
- #agegate h3 { font-size:15px; color:var(--accent2); }
68
- #agegate .warn { font-size:13px; line-height:1.7; color:var(--txt); }
69
- #agegate .warn b { color:#ff9a9a; }
70
- #agegate .row { display:flex; gap:8px; justify-content:flex-end; }
71
- #agegate .row button { padding:8px 16px; border-radius:8px; font-size:13px; cursor:pointer; border:1px solid var(--line); background:var(--card); color:var(--txt); }
72
- #agegate .row .ok { background:var(--accent); color:#0b0d14; border-color:var(--accent); font-weight:600; }
73
- /* —— 角色详情 / 三导入 —— */
74
- #roledetail { position:fixed; inset:0; background:rgba(0,0,0,.6); display:none; align-items:center; justify-content:center; z-index:30; }
75
- #roledetail .box { background:var(--card); border:1px solid var(--line); border-radius:14px; padding:20px; width:min(520px,94vw); max-height:82vh; overflow-y:auto; display:flex; flex-direction:column; gap:10px; }
76
- #roledetail h3 { font-size:15px; }
77
- #roledetail .meta input, #roledetail .meta textarea { width:100%; background:var(--bg); border:1px solid var(--line); color:var(--txt); border-radius:8px; padding:8px 10px; font-size:13px; font-family:inherit; }
78
- #roledetail .meta textarea { height:56px; resize:vertical; }
79
- #roledetail .tabs { display:flex; gap:6px; }
80
- #roledetail .tabs button { flex:1; padding:7px 0; border-radius:8px; font-size:13px; cursor:pointer; border:1px solid var(--line); background:var(--card); color:var(--sub); }
81
- #roledetail .tabs button.on { background:var(--accent); color:#0b0d14; border-color:var(--accent); font-weight:600; }
82
- #rd_items { display:flex; flex-direction:column; gap:8px; max-height:36vh; overflow-y:auto; }
83
- #rd_items .rd-row { display:flex; flex-direction:column; gap:4px; background:var(--bg); border:1px solid var(--line); border-radius:8px; padding:8px 10px; }
84
- #rd_items .rd-row textarea { background:transparent; border:none; color:var(--txt); font-size:13px; font-family:inherit; resize:vertical; min-height:40px; outline:none; }
85
- #rd_items .rd-row .rd-sub { display:flex; gap:6px; }
86
- #rd_items .rd-row .rd-sub input { flex:1; background:var(--bg); border:1px solid var(--line); color:var(--txt); border-radius:6px; padding:4px 8px; font-size:12px; font-family:inherit; }
87
- #rd_items .rd-row .rd-sub .rd-del { flex:none; background:none; border:none; color:var(--sub); font-size:14px; cursor:pointer; }
88
- #roledetail .row { display:flex; gap:8px; justify-content:flex-end; margin-top:6px; }
89
- #roledetail .row button { padding:7px 14px; border-radius:8px; font-size:13px; cursor:pointer; border:1px solid var(--line); background:var(--card); color:var(--txt); }
90
- #roledetail .row .ok { background:var(--accent); color:#0b0d14; border-color:var(--accent); font-weight:600; }
91
- #rd_nsfw { display:flex; align-items:center; gap:8px; font-size:12px; color:var(--sub); }
92
- #rd_nsfw input { accent-color:var(--accent); }
93
- .hint { color:var(--sub); font-size:12px; text-align:center; padding:6px; }
94
- </style>
95
- </head>
96
- <body>
97
- <header>
98
- <h1>灵枢 · 角色扮演</h1><span class="badge">白箱 · 扮演论 v3.3</span>
99
- <div id="roles">
100
- <select id="roleSel"></select>
101
- <button onclick="showNewRole()">+ 新角色</button>
102
- <button onclick="openRoleDetail()">⚙ 详情</button>
103
- <button onclick="openTrans()">🌐 翻译</button>
104
- </div>
105
- </header>
106
- <main id="chat"><div class="hint">选择角色,开始对话。角色回应由灵枢角色扮演引擎生成(白箱优先,LLM 续答)。</div></main>
107
- <div class="typing" id="typing">正在思考…</div>
108
- <footer>
109
- <textarea id="input" rows="1" placeholder="说点什么…(Enter 发送,Shift+Enter 换行)"></textarea>
110
- <button id="send" onclick="send()">发送</button>
111
- </footer>
112
- <div id="newrole">
113
- <div class="box">
114
- <h3>创建新角色</h3>
115
- <input id="nr_id" placeholder="角色 ID(英文/拼音,如 naxiaoda)">
116
- <input id="nr_name" placeholder="角色名(如 纳西妲)">
117
- <input id="nr_scenario" placeholder="人设场景(一句话描述性格与背景)">
118
- <input id="nr_first" placeholder="开场白(可选)">
119
- <div class="row"><button onclick="closeNewRole()">取消</button><button class="ok" onclick="createRole()">创建</button></div>
120
- </div>
121
- </div>
122
- <div id="transpanel">
123
- <div class="box">
124
- <h3>🌐 自定义翻译(<span id="tp_role">-</span>)</h3>
125
- <div class="mode-row">
126
- <label><input type="radio" name="tpmode" value="input_only"> 仅输入翻译(现实词 → 扮演词给角色)</label>
127
- <label><input type="radio" name="tpmode" value="bidirectional"> 双向翻译(输入现实→扮演;角色回复扮演→现实)</label>
128
- </div>
129
- <div id="tp_rows"></div>
130
- <div class="row" style="margin-top:8px">
131
- <button onclick="addTransRow()">+ 添加词对</button>
132
- <button class="ok" onclick="saveTrans()">保存</button>
133
- <button onclick="closeTrans()">关闭</button>
134
- </div>
135
- <div class="hint">现实词会按表替换成扮演词交给角色(引擎自动);双向模式再把角色回复中的扮演词翻译回现实词。长词优先匹配。</div>
136
- </div>
137
- </div>
138
- <div id="agegate">
139
- <div class="box">
140
- <h3>⛔ 成人内容确认</h3>
141
- <div class="warn">本页面提供角色扮演内容,部分角色/对话可能包含<b>成人向(NSFW)</b>内容。<br><br>
142
- 依据国家法律法规与灵枢协议(对人类的保护):<br>
143
- ① 仅限<b>已满 18 周岁</b>的用户使用成人向内容;<br>
144
- ② 仅限<b>个人对话场景</b>(本页面为本地一对一,不公开);<br>
145
- ③ 灵枢<b>拒绝一切涉及未成年人的性内容</b>——此类请求会被直接拒绝并记录。<br><br>
146
- 点击「我已满 18 周岁」表示你确认符合上述条件。</div>
147
- <div class="row"><button onclick="closeAgeGate()">退出</button><button class="ok" onclick="confirmAge()">我已满 18 周岁</button></div>
148
- </div>
149
- </div>
150
- <div id="roledetail">
151
- <div class="box">
152
- <h3>角色详情 · <span id="rd_role">-</span></h3>
153
- <div class="meta">
154
- <input id="rd_name" placeholder="角色名">
155
- <textarea id="rd_scenario" placeholder="人设场景(一句话描述性格与背景)"></textarea>
156
- <textarea id="rd_first" placeholder="开场白(可选)"></textarea>
157
- </div>
158
- <div class="tabs">
159
- <button id="tab-memory" class="on" onclick="rdTab('memory')">记忆</button>
160
- <button id="tab-anchor" onclick="rdTab('anchor')">锚点</button>
161
- <button id="tab-values" onclick="rdTab('values')">价值观</button>
162
- </div>
163
- <div id="rd_items"></div>
164
- <div class="row" style="margin-top:4px">
165
- <button onclick="rdAddItem()">+ 添加条目</button>
166
- <label id="rd_nsfw"><input type="checkbox" id="rd_nsfw_chk"> 成人向(NSFW)角色</label>
167
- </div>
168
- <div class="row">
169
- <button onclick="closeRoleDetail()">关闭</button>
170
- <button class="ok" onclick="saveRoleDetail()">保存</button>
171
- </div>
172
- <div class="hint">记忆=背景设定;锚点=不可遗忘的自我核心;价值观=扮演的立场准则(带条件)。保存后立即生效(引擎每次重读角色 meta)。</div>
173
- </div>
174
- </div>
175
- <script>
176
- const $ = (id) => document.getElementById(id);
177
- // P1 修复(GPT 审查·XSS):innerHTML 拼接角色/翻译内容必须转义——
178
- // 否则保存 </textarea><script>… 之类内容会在角色详情页执行脚本
179
- function esc(s) {
180
- return String(s == null ? '' : s).replace(/[&<>"']/g, (c) => ({
181
- '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;',
182
- })[c]);
183
- }
184
- // P1 完善(会话隔离):浏览器客户端实例 ID(localStorage 持久化)——
185
- // 服务端按 x-client-id 隔离 session 与转录;多浏览器/多设备互不串线
186
- let CLIENT_ID = '';
187
- try {
188
- CLIENT_ID = localStorage.getItem('lingshu_client_id');
189
- if (!CLIENT_ID) {
190
- CLIENT_ID = 'c' + Math.random().toString(36).slice(2) + Date.now().toString(36);
191
- localStorage.setItem('lingshu_client_id', CLIENT_ID);
192
- }
193
- } catch (e) { /* localStorage 不可用(隐私模式)→ 空,服务端落 shared */ }
194
- function apiHeaders(extra) {
195
- const h = { 'Content-Type': 'application/json' };
196
- if (CLIENT_ID) h['x-client-id'] = CLIENT_ID;
197
- return Object.assign(h, extra || {});
198
- }
199
- // —— 内容分级:年龄门控 + NSFW 检测(法律与协议保护)——
200
- // 国家法律:涉未成年人性内容一律拒绝;成人内容仅限满 18 岁 + 个人对话场景。
201
- const AGE_KEY = 'lingshu_roleplay_age_confirmed';
202
- const NSFW_WORDS = ['做爱','性交','性行为','口交','肛交','高潮','自慰','射精','色情','裸体','脱光','爱抚','挑逗','性器官','插入','内射','强暴'];
203
- const MINOR_WORDS = ['未成年','儿童','小孩','小女孩','小男孩','幼女','萝莉','幼童','初中生','小学生','14岁','13岁','12岁','学生妹','女童','男童'];
204
- function hasAgeConfirm() { try { return localStorage.getItem(AGE_KEY) === '1'; } catch (e) { return false; } }
205
- function showAgeGate() { $('agegate').style.display = 'flex'; }
206
- function closeAgeGate() { $('agegate').style.display = 'none'; }
207
- function confirmAge() {
208
- try { localStorage.setItem(AGE_KEY, '1'); } catch (e) { /* 忽略 */ }
209
- closeAgeGate();
210
- }
211
- // 首次进入:要求年龄确认(NSFW 门控前置)
212
- if (!hasAgeConfirm()) showAgeGate();
213
- // 服务端也会硬拦截;前端先做温和提示(未成年+性 = 直接拒绝)
214
- function nsfwCheck(text) {
215
- const nsfw = NSFW_WORDS.some(w => text.includes(w));
216
- const minor = MINOR_WORDS.some(w => text.includes(w));
217
- if (minor && nsfw) {
218
- return { refuse: true, msg: '⛔ 已拒绝:涉及未成年人的性内容违反国家法律与灵枢协议(未成年人保护)。灵枢不提供任何涉及未成年人的性扮演内容。' };
219
- }
220
- if (nsfw && !hasAgeConfirm()) {
221
- showAgeGate();
222
- return { refuse: true, msg: '⛔ 成人向内容需确认年龄:请点击「我已满 18 周岁」后再继续(个人对话场景)。' };
223
- }
224
- return { refuse: false };
225
- }
226
- let roles = [];
227
- async function refreshRoles() {
228
- const r = await fetch('/roleplay/api/roles').then(x => x.json());
229
- roles = r.roles || [];
230
- const sel = $('roleSel');
231
- sel.innerHTML = '';
232
- roles.forEach(x => { const o = document.createElement('option'); o.value = x.id; o.textContent = x.name || x.id; sel.appendChild(o); });
233
- if (roles.length && !sel.value) sel.value = roles[0].id;
234
- if (roles.length) await loadHistory(sel.value);
235
- }
236
- function addMsg(text, who, route, memories) {
237
- const d = document.createElement('div');
238
- d.className = 'msg ' + who;
239
- d.textContent = text;
240
- const meta = [];
241
- if (route) meta.push('route: ' + route);
242
- if (typeof memories === 'number') meta.push('记忆召回: ' + memories);
243
- if (meta.length) { const r = document.createElement('span'); r.className = 'route'; r.textContent = meta.join(' · '); d.appendChild(r); }
244
- $('chat').appendChild(d);
245
- $('chat').scrollTop = $('chat').scrollHeight;
246
- }
247
- // 加载角色历史对话(无限上下文:本地完整转录 JSONL,按客户端实例隔离)
248
- async function loadHistory(roleId) {
249
- const chatEl = $('chat');
250
- chatEl.innerHTML = '';
251
- try {
252
- const r = await fetch('/roleplay/api/history?role_id=' + encodeURIComponent(roleId), { headers: apiHeaders() }).then(x => x.json());
253
- const h = r.history || [];
254
- if (!h.length) {
255
- const hint = document.createElement('div');
256
- hint.className = 'hint';
257
- hint.textContent = '与「' + ($('roleSel').selectedOptions[0] ? $('roleSel').selectedOptions[0].textContent : roleId) + '」的新对话从这里开始。';
258
- chatEl.appendChild(hint);
259
- return;
260
- }
261
- h.forEach(e => addMsg(e.text, e.role === 'user' ? 'user' : 'bot', e.route, e.memories));
262
- } catch (e) {
263
- const hint = document.createElement('div');
264
- hint.className = 'hint';
265
- hint.textContent = '历史加载失败:' + e;
266
- chatEl.appendChild(hint);
267
- }
268
- }
269
- async function send() {
270
- const input = $('input'); const text = input.value.trim();
271
- if (!text) return;
272
- // 内容分级检查(前端提示;服务端有硬拦截)
273
- const gate = nsfwCheck(text);
274
- if (gate.refuse) { addMsg(gate.msg, 'bot'); return; }
275
- input.value = ''; addMsg(text, 'user');
276
- const role = $('roleSel').value;
277
- const btn = $('send'); btn.disabled = true; $('typing').style.display = 'block';
278
- try {
279
- const r = await fetch('/roleplay/api/chat', { method:'POST', headers: apiHeaders(), body: JSON.stringify({ role_id: role, message: text }) }).then(x => x.json());
280
- addMsg(r.reply || '(无回应:' + (r.error || '未知错误') + ')', 'bot', r.route, r.memories);
281
- } catch (e) { addMsg('网络错误:' + e, 'bot'); }
282
- btn.disabled = false; $('typing').style.display = 'none';
283
- // 保持输入状态:重新聚焦并居中,键盘不收起(连续对话)
284
- try { input.focus(); } catch (e) { /* 忽略 */ }
285
- }
286
- function showNewRole() { $('newrole').style.display = 'flex'; }
287
- function closeNewRole() { $('newrole').style.display = 'none'; }
288
- // —— 角色详情 / 三导入(记忆·锚点·价值观)——
289
- let rdKind = 'memory';
290
- let rdItems = [];
291
- function openRoleDetail() {
292
- const role = $('roleSel').value;
293
- if (!role) { alert('请先选择角色'); return; }
294
- $('rd_role').textContent = role;
295
- const meta = (roles.find(x => x.id === role)) || {};
296
- $('rd_name').value = meta.name || '';
297
- $('rd_scenario').value = meta.scenario || '';
298
- $('rd_first').value = meta.first_mes || '';
299
- rdTab('memory');
300
- $('roledetail').style.display = 'flex';
301
- }
302
- function closeRoleDetail() { $('roledetail').style.display = 'none'; }
303
- function rdTab(kind) {
304
- rdKind = kind;
305
- ['memory','anchor','values'].forEach(k => $('tab-' + k).classList.toggle('on', k === kind));
306
- loadRoleDetailItems();
307
- }
308
- async function loadRoleDetailItems() {
309
- const role = $('rd_role').textContent;
310
- const r = await fetch('/roleplay/api/roles/' + encodeURIComponent(role) + '/items?kind=' + rdKind).then(x => x.json());
311
- rdItems = r.items || [];
312
- const box = $('rd_items');
313
- box.innerHTML = '';
314
- rdItems.forEach((it, i) => rdRenderRow(box, it, i));
315
- if (!rdItems.length) rdAddItem();
316
- }
317
- function rdRenderRow(box, it, i) {
318
- const row = document.createElement('div');
319
- row.className = 'rd-row';
320
- // P1 修复(GPT 审查·XSS):it.content/it.importance/it.tags 来自用户/文件,须转义
321
- row.innerHTML =
322
- '<textarea placeholder="内容(该' + (rdKind === 'memory' ? '记忆' : rdKind === 'anchor' ? '锚点' : '价值观') + '的文本)">' + esc(it.content || '') + '</textarea>' +
323
- '<div class="rd-sub">' +
324
- '<input class="rd-imp" type="number" step="0.1" min="0" max="1" placeholder="重要性" value="' + esc(it.importance != null ? it.importance : '0.6') + '">' +
325
- '<input class="rd-tags" placeholder="标签(逗号分隔)" value="' + esc((it.tags || []).join(',')) + '">' +
326
- '<button class="rd-del" onclick="this.parentNode.parentNode.remove()">✕</button>' +
327
- '</div>';
328
- box.appendChild(row);
329
- }
330
- function rdAddItem() { rdRenderRow($('rd_items'), {}, rdItems.length); }
331
- async function saveRoleDetail() {
332
- const role = $('rd_role').textContent;
333
- const name = $('rd_name').value.trim();
334
- const scenario = $('rd_scenario').value.trim();
335
- const first_mes = $('rd_first').value.trim();
336
- const nsfw = $('rd_nsfw_chk').checked;
337
- // 基础 meta(name/scenario/first_mes + nsfw 标记)
338
- await fetch('/roleplay/api/roles/' + encodeURIComponent(role) + '/meta', {
339
- method: 'POST', headers: { 'Content-Type': 'application/json' },
340
- body: JSON.stringify({ name, scenario, first_mes, nsfw }),
341
- });
342
- // 当前页签的条目
343
- const items = [];
344
- document.querySelectorAll('#rd_items .rd-row').forEach(row => {
345
- const content = row.querySelector('textarea').value.trim();
346
- const imp = parseFloat(row.querySelector('.rd-imp').value) || 0.6;
347
- const tags = row.querySelector('.rd-tags').value.split(/[,,]/).map(s => s.trim()).filter(Boolean);
348
- if (content) items.push({ content, importance: imp, tags });
349
- });
350
- const r = await fetch('/roleplay/api/roles/' + encodeURIComponent(role) + '/import', {
351
- method: 'POST', headers: { 'Content-Type': 'application/json' },
352
- body: JSON.stringify({ kind: rdKind, items }),
353
- }).then(x => x.json());
354
- addMsg('角色「' + role + '」已保存:' + name + ' · ' + rdKind + ' ' + items.length + ' 条' + (nsfw ? ' · NSFW' : ''), 'bot');
355
- closeRoleDetail();
356
- await refreshRoles();
357
- }
358
- // —— 自定义翻译面板 ——
359
- let transMode = 'input_only';
360
- async function openTrans() {
361
- const role = $('roleSel').value || 'protocol-guide';
362
- $('tp_role').textContent = role;
363
- try {
364
- const r = await fetch('/roleplay/api/translate?role_id=' + encodeURIComponent(role)).then(x => x.json());
365
- transMode = r.mode || 'input_only';
366
- $('tp_rows').innerHTML = '';
367
- (r.pairs || []).forEach(p => addTransRow(p.real, p.virtual, p.note));
368
- if (!(r.pairs || []).length) addTransRow();
369
- } catch (e) { alert('翻译配置加载失败:' + e); return; }
370
- const radios = document.querySelectorAll('input[name="tpmode"]');
371
- radios.forEach(x => { x.checked = (x.value === transMode); });
372
- $('transpanel').style.display = 'flex';
373
- }
374
- function closeTrans() { $('transpanel').style.display = 'none'; }
375
- function addTransRow(real, virtual, note) {
376
- const row = document.createElement('div');
377
- row.className = 'tp-row';
378
- // P1 修复(GPT 审查·XSS):real/virtual/note 来自文件/导入,须转义
379
- row.innerHTML =
380
- '<input class="tp-real" placeholder="现实词(如:手机)" value="' + esc(real || '') + '">' +
381
- '<span>→</span>' +
382
- '<input class="tp-virtual" placeholder="扮演词(如:神之眼终端)" value="' + esc(virtual || '') + '">' +
383
- '<input class="tp-note" placeholder="备注(可选)" value="' + esc(note || '') + '">' +
384
- '<button class="tp-del" onclick="this.parentNode.remove()">✕</button>';
385
- $('tp_rows').appendChild(row);
386
- }
387
- async function saveTrans() {
388
- const role = $('roleSel').value || 'protocol-guide';
389
- const pairs = [];
390
- document.querySelectorAll('#tp_rows .tp-row').forEach(row => {
391
- const real = row.querySelector('.tp-real').value.trim();
392
- const virtual = row.querySelector('.tp-virtual').value.trim();
393
- const note = row.querySelector('.tp-note').value.trim();
394
- if (real && virtual) pairs.push({ real, virtual, note });
395
- });
396
- const mode = (document.querySelector('input[name="tpmode"]:checked') || {}).value || 'input_only';
397
- const r = await fetch('/roleplay/api/translate', {
398
- method: 'POST', headers: { 'Content-Type': 'application/json' },
399
- body: JSON.stringify({ role_id: role, pairs, mode }),
400
- }).then(x => x.json());
401
- if (r.ok) {
402
- transMode = r.mode;
403
- closeTrans();
404
- addMsg('翻译配置已保存:' + r.pairs.length + ' 组词对 · ' + (r.mode === 'bidirectional' ? '双向翻译' : '仅输入翻译'), 'bot');
405
- } else alert(r.error || '保存失败');
406
- }
407
- async function createRole() {
408
- const body = { role_id: $('nr_id').value.trim(), name: $('nr_name').value.trim(), scenario: $('nr_scenario').value.trim(), first_mes: $('nr_first').value.trim() };
409
- if (!body.role_id) { alert('需要角色 ID'); return; }
410
- const r = await fetch('/roleplay/api/roles', { method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify(body) }).then(x => x.json());
411
- if (r.ok) { closeNewRole(); await refreshRoles(); addMsg('角色「' + (body.name || body.role_id) + '」已创建,可以开始对话了', 'bot'); }
412
- else alert(r.error || '创建失败');
413
- }
414
- var input = document.getElementById('input');
415
- var chat = document.getElementById('chat');
416
- var footer = document.querySelector('footer');
417
- input.addEventListener('keydown', function (e) {
418
- if (e.key === 'Enter' && !e.shiftKey) { e.preventDefault(); send(); }
419
- });
420
- refreshRoles();
421
- // 切换角色 → 加载该角色的历史对话
422
- $('roleSel').addEventListener('change', function () { loadHistory(this.value); });
423
-
424
- // —— 输入框随内容自动增高(上限 140px)——
425
- input.addEventListener('input', function () {
426
- input.style.height = 'auto';
427
- input.style.height = Math.min(input.scrollHeight, 140) + 'px';
428
- });
429
- // —— 聚焦时输入框自动居中(不依赖 WebView 键盘行为):悬浮到屏幕 45% 高度,
430
- // 键盘在上抬多少都不会遮住;失焦/发送后恢复原位 ——
431
- function setTypingCenter(on) {
432
- if (!footer) return;
433
- footer.classList.toggle('typing-center', on);
434
- setTimeout(function () {
435
- if (chat) chat.scrollTop = chat.scrollHeight;
436
- }, 60);
437
- }
438
- input.addEventListener('focus', function () { setTypingCenter(true); });
439
- input.addEventListener('blur', function () { setTypingCenter(false); });
440
- window.addEventListener('resize', function () { if (chat) chat.scrollTop = chat.scrollHeight; });
441
- </script>
442
- </body>
443
- </html>`;
444
- /** 在 webServer 上挂载 /roleplay 前缀路由(页面 + API)。失败不影响插件主体。
445
- *
446
- * @param capability 「身体」能力后端桥(可选);为 null 时生成接口 fail-closed。
447
- * @param mdcg 大脑客户端(认知图,唯一真源);为 null 时落图静默跳过。
448
- */
449
- export async function installRoleplayWeb(ctx, capability, config, disposers, mdcg: any = null) {
450
- // 身体能力后端未接入时的统一提示(fail-closed:不编造回复)。
451
- const CAP_ABSENT_MSG = '角色生成能力未接入:该能力属「身体」(AEIS 能力库),'
452
- + '主仓已剥离,仅保留转录/历史/翻译/落图。'
453
- + '如需启用,在配置中打开 capability.enabled 并给出 capability.args。';
454
- const capReady = () => !!(capability && typeof capability.isReady === 'function' && capability.isReady());
455
- try {
456
- // 注意:不能直接读 ctx.webServer——Cordis 未声明 inject 的属性访问会抛
457
- // "cannot get property without inject";ctx.get() 安全返回 undefined。
458
- const webServer = ctx.get('webServer');
459
- if (!webServer) {
460
- ctx.logger.warn('dsh-memory: webServer 服务不可用,跳过角色扮演网页挂载');
461
- return;
462
- }
463
- // 认知图落图(显式调用 md_cg;md_cg = 唯一真源,AEIS 仅负责生成)。
464
- // 显式映射:MdcgClient.writeTranscript / writeRole → MCP mdcg_remember
465
- // 见 docs/功能调用映射表_v0.1.md。落图失败不影响对话主流程。
466
- const toGraph = async (label, fn) => {
467
- if (!mdcg || !mdcg.isReady())
468
- return;
469
- try {
470
- await fn(mdcg);
471
- }
472
- catch (err) {
473
- ctx.logger.warn(`dsh-memory: 角色扮演落图失败(${label}):${String(err)}`);
474
- }
475
- };
476
- // P1 修复(GPT 审查):
477
- // ① 请求体大小限制(此前 for-await 无限累加,恶意请求可制造内存压力)
478
- const readBody = async (req, maxBytes = 1_000_000) => {
479
- let body = '';
480
- let size = 0;
481
- for await (const chunk of req) {
482
- size += chunk.length;
483
- if (size > maxBytes) {
484
- const err = new Error('请求体过大(>1MB)');
485
- err.status = 413;
486
- throw err;
487
- }
488
- body += chunk;
489
- }
490
- return body;
491
- };
492
- // ② 编辑鉴权:README 声称「编辑需 ROLEPLAY_EDIT_KEY」——此前代码未实现。
493
- // 配置了 ROLEPLAY_EDIT_KEY 环境变量则写操作(meta/import/translate/创建角色)
494
- // 必须带 x-edit-key 头;未配置时保持本地开发默认开放(README 已如实说明)。
495
- const EDIT_KEY = process.env.ROLEPLAY_EDIT_KEY || '';
496
- const requireEditKey = (req) => {
497
- if (!EDIT_KEY)
498
- return true;
499
- const h = (req.headers && req.headers['x-edit-key']) || '';
500
- return h === EDIT_KEY;
501
- };
502
- const roleDataDir = join(dirname(config.dbPath), 'roleplay_data');
503
- try {
504
- mkdirSync(join(roleDataDir, 'roleplay'), { recursive: true });
505
- }
506
- catch { /* 忽略 */ }
507
- // 完整对话转录(JSONL,按角色 + 客户端实例持久化;认知图只落图摘要节点,
508
- // 完整原文在此。注意 history 接口只读这里,不读认知图)
509
- const transcriptsDir = join(roleDataDir, 'transcripts');
510
- try {
511
- mkdirSync(transcriptsDir, { recursive: true });
512
- }
513
- catch { /* 忽略 */ }
514
- const transcriptFile = (roleId, clientId) => join(transcriptsDir, `${roleId.replace(/[^\w.-]/g, '_')}__${clientId}.jsonl`);
515
- const readTranscript = (roleId, clientId = 'shared') => {
516
- const f = transcriptFile(roleId, clientId);
517
- if (!existsSync(f))
518
- return [];
519
- const out = [];
520
- for (const line of readFileSync(f, 'utf8').split('\n')) {
521
- if (!line.trim())
522
- continue;
523
- try {
524
- out.push(JSON.parse(line));
525
- }
526
- catch { /* 跳过坏行 */ }
527
- }
528
- return out;
529
- };
530
- const appendTranscript = (roleId, entry, clientId = 'shared') => {
531
- try {
532
- appendFileSync(transcriptFile(roleId, clientId), JSON.stringify(entry) + '\n');
533
- }
534
- catch { /* 忽略 */ }
535
- };
536
- // 稳定会话:角色+固定会话 id,让引擎的会话上下文与记忆标签跨轮连续(无限上下文)
537
- // P1 完善(GPT 审查·会话隔离):开源无身份认证,但必须做客户端实例隔离——
538
- // 此前所有用户共用 session `web-main:<role>` + 同一转录文件,多浏览器/多设备
539
- // 对话互相串线、看到彼此历史。现在按浏览器客户端生成的 client_id(x-client-id
540
- // 头,localStorage 持久化)隔离 session 与转录文件;无 header 的旧客户端落 shared。
541
- const clientIdOf = (req) => {
542
- const h = (req.headers && req.headers['x-client-id']) || '';
543
- return /^[A-Za-z0-9_-]{1,64}$/.test(h) ? h : 'shared';
544
- };
545
- const sessionFor = (roleId, clientId) => `web-${clientId}:${roleId}`;
546
- // —— 自定义翻译(现实词 ↔ 扮演词)——
547
- // 翻译表写入角色 meta(_roles.json):引擎每次 roleplay_chat 都新建引擎并重读
548
- // meta,因此写入立即生效(输入翻译 real→virtual + LLM 沉浸注入块都会应用)。
549
- // P1 完善(GPT 审查·meta 嵌套格式):读取归一化——文件可能是根格式
550
- // {r:{...}} 或嵌套格式 {meta:{r:{...}}}(外部 AEIS 可能用嵌套),统一返回
551
- // 「角色字典」视角;写入保持原顶层结构(嵌套则写回 meta 内),读写一致——
552
- // 此前读兼容嵌套但写永远写根,保存成功但列表读旧值。
553
- const roleMetaFile = join(roleDataDir, 'roleplay', '_roles.json');
554
- const readRoleMeta = () => {
555
- try {
556
- const raw = JSON.parse(readFileSync(roleMetaFile, 'utf8'));
557
- if (raw && typeof raw === 'object'
558
- && raw.meta && typeof raw.meta === 'object')
559
- return raw.meta; // 嵌套格式 → meta 内角色字典
560
- return raw;
561
- }
562
- catch {
563
- return {};
564
- }
565
- };
566
- const writeRoleMeta = (flat) => {
567
- try {
568
- let raw;
569
- try {
570
- raw = JSON.parse(readFileSync(roleMetaFile, 'utf8'));
571
- }
572
- catch {
573
- raw = {};
574
- }
575
- // 保持原顶层结构:原文件嵌套 {meta:{...}} → 写回 meta 内;根格式 → 写根
576
- const out = (raw && typeof raw === 'object'
577
- && raw.meta && typeof raw.meta === 'object')
578
- ? { ...raw, meta: flat } : flat;
579
- const tmp = roleMetaFile + '.tmp';
580
- writeFileSync(tmp, JSON.stringify(out, null, 2), 'utf8');
581
- renameSync(tmp, roleMetaFile);
582
- }
583
- catch (e) {
584
- ctx.logger.warn(`dsh-memory: 角色 meta 写入失败: ${String((e && e.message) || e)}`);
585
- }
586
- };
587
- // 翻译模式(双向/仅输入)由网页层持久化
588
- const transSettingsFile = join(transcriptsDir, 'translate_settings.json');
589
- const readTransSettings = () => {
590
- try {
591
- return JSON.parse(readFileSync(transSettingsFile, 'utf8'));
592
- }
593
- catch {
594
- return {};
595
- }
596
- };
597
- const writeTransSettings = (s) => {
598
- try {
599
- writeFileSync(transSettingsFile, JSON.stringify(s, null, 2), 'utf8');
600
- }
601
- catch { /* 忽略 */ }
602
- };
603
- const getTranslations = (roleId) => {
604
- const meta = readRoleMeta();
605
- const t = (meta[roleId] && meta[roleId].translations) || [];
606
- return Array.isArray(t) ? t : [];
607
- };
608
- const setTranslations = (roleId, pairs) => {
609
- const meta = readRoleMeta();
610
- if (!meta[roleId])
611
- meta[roleId] = { created_at: Date.now() / 1000, name: roleId };
612
- meta[roleId].translations = pairs;
613
- writeRoleMeta(meta);
614
- };
615
- // 可逆替换(长词优先,与灵枢 translate_input/translate_output 同逻辑)
616
- const applyTranslate = (text, pairs, dir) => {
617
- if (!text || !pairs.length)
618
- return text;
619
- const key = dir === 'out' ? 'virtual' : 'real';
620
- const rep = dir === 'out' ? 'real' : 'virtual';
621
- const sorted = pairs
622
- .filter((p) => p[key] && p[rep])
623
- .sort((a, b) => (b[key] || '').length - (a[key] || '').length);
624
- let out = text;
625
- for (const p of sorted)
626
- out = out.split(p[key]).join(p[rep]);
627
- return out;
628
- };
629
- const handler = async (req, res) => {
630
- const url = new URL(req.url ?? '/', 'http://x');
631
- try {
632
- const isPage = url.pathname === '/roleplay' || url.pathname === '/roleplay/';
633
- if (req.method === 'GET' && isPage) {
634
- res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
635
- res.end(HTML);
636
- return;
637
- }
638
- if (req.method === 'GET' && url.pathname === '/roleplay/api/roles') {
639
- const rolesFile = join(roleDataDir, 'roleplay', '_roles.json');
640
- let roles = [];
641
- try {
642
- const raw = JSON.parse(readFileSync(rolesFile, 'utf8'));
643
- const meta = raw.meta && typeof raw.meta === 'object' ? raw.meta : raw;
644
- roles = Object.entries(meta)
645
- .filter(([k]) => k !== 'created_at' && k !== 'updated_at')
646
- .map(([id, m]) => ({ id, name: (m && m.name) || id, scenario: (m && m.scenario) || '', first_mes: (m && m.first_mes) || '' }));
647
- }
648
- catch { /* 文件尚不存在 */ }
649
- res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
650
- res.end(JSON.stringify({ roles }));
651
- return;
652
- }
653
- // —— 三导入(记忆/锚点/价值观):items 副本存 _roles.json + role_import 真导入引擎 ——
654
- const rdItemsFile = (roleId, kind) => `${kind}_items`;
655
- const getRoleItems = (roleId, kind) => {
656
- const meta = readRoleMeta();
657
- const arr = (meta[roleId] && meta[roleId][rdItemsFile(roleId, kind)]) || [];
658
- return Array.isArray(arr) ? arr : [];
659
- };
660
- if (req.method === 'GET' && url.pathname.startsWith('/roleplay/api/roles/') && url.pathname.endsWith('/items')) {
661
- const role = decodeURIComponent(url.pathname.split('/')[4]);
662
- const kind = url.searchParams.get('kind') || 'memory';
663
- res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
664
- res.end(JSON.stringify({ items: getRoleItems(role, kind) }));
665
- return;
666
- }
667
- if (req.method === 'POST' && url.pathname.startsWith('/roleplay/api/roles/') && url.pathname.endsWith('/import')) {
668
- // P1 修复(GPT 审查):写操作鉴权(ROLEPLAY_EDIT_KEY)+ 请求体大小限制
669
- if (!requireEditKey(req)) {
670
- res.writeHead(403, { 'Content-Type': 'application/json; charset=utf-8' });
671
- res.end(JSON.stringify({ ok: false, error: '缺少编辑密钥(x-edit-key 头)' }));
672
- return;
673
- }
674
- let body;
675
- try {
676
- body = await readBody(req);
677
- }
678
- catch (e) {
679
- res.writeHead(e.status || 400, { 'Content-Type': 'application/json; charset=utf-8' });
680
- res.end(JSON.stringify({ ok: false, error: String((e && e.message) || e) }));
681
- return;
682
- }
683
- const p = JSON.parse(body);
684
- const role = decodeURIComponent(url.pathname.split('/')[4]);
685
- const kind = p.kind || 'memory';
686
- const items = (Array.isArray(p.items) ? p.items : []).filter((x) => x && x.content);
687
- // 副本(网页层读取用)
688
- const meta = readRoleMeta();
689
- if (!meta[role])
690
- meta[role] = { created_at: Date.now() / 1000, name: role };
691
- meta[role][rdItemsFile(role, kind)] = items;
692
- writeRoleMeta(meta);
693
- // 真导入引擎(记忆→知识层/锚点→SELF no_forget/价值观→STRUCTURE 带条件)
694
- let impResult = null;
695
- if (items.length) {
696
- if (!capReady()) {
697
- impResult = { error: CAP_ABSENT_MSG };
698
- }
699
- else {
700
- try {
701
- impResult = await capability.callTool('role_import', {
702
- role_id: role, kind, items, data_dir: roleDataDir,
703
- });
704
- }
705
- catch (e) {
706
- impResult = { error: String((e && e.message) || e) };
707
- }
708
- }
709
- }
710
- // 导入项显式落认知图:memory→knowledge / anchors→self / values→structural。
711
- // 显式映射:MdcgClient.write → MCP mdcg_remember(gated=false 直写)。
712
- // ⚠️ anchors→self 层需 designer 权限(recorder 的 layers_allow 不含 self)。
713
- const layerForKind = { memory: 'knowledge', anchors: 'self', values: 'structural' }[kind] || 'knowledge';
714
- void toGraph(`import-${kind}`, (g) => Promise.all(items.map((it, i) => g.write(
715
- typeof it === 'string' ? it : (it.text || it.content || JSON.stringify(it)),
716
- { node_id: `roleplay_${role}_${kind}_${i}`, layer: layerForKind,
717
- tags: ['roleplay', `role:${role}`, `roleplay:${kind}`], importance: 0.6 },
718
- ))));
719
- res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
720
- // P1 修复(GPT 审查):引擎导入失败不得返回 ok:true(前端会显示「已保存」)
721
- const importOk = !(impResult && (impResult.error || impResult.isError));
722
- res.end(JSON.stringify({ ok: importOk, kind, items, import: impResult }));
723
- return;
724
- }
725
- if (req.method === 'POST' && url.pathname.startsWith('/roleplay/api/roles/') && url.pathname.endsWith('/meta')) {
726
- // P1 修复(GPT 审查):写操作鉴权(ROLEPLAY_EDIT_KEY)+ 请求体大小限制
727
- if (!requireEditKey(req)) {
728
- res.writeHead(403, { 'Content-Type': 'application/json; charset=utf-8' });
729
- res.end(JSON.stringify({ ok: false, error: '缺少编辑密钥(x-edit-key 头)' }));
730
- return;
731
- }
732
- let body;
733
- try {
734
- body = await readBody(req);
735
- }
736
- catch (e) {
737
- res.writeHead(e.status || 400, { 'Content-Type': 'application/json; charset=utf-8' });
738
- res.end(JSON.stringify({ ok: false, error: String((e && e.message) || e) }));
739
- return;
740
- }
741
- const p = JSON.parse(body);
742
- const role = decodeURIComponent(url.pathname.split('/')[4]);
743
- const meta = readRoleMeta();
744
- if (!meta[role])
745
- meta[role] = { created_at: Date.now() / 1000 };
746
- if (typeof p.name === 'string')
747
- meta[role].name = p.name;
748
- if (typeof p.scenario === 'string')
749
- meta[role].scenario = p.scenario;
750
- if (typeof p.first_mes === 'string')
751
- meta[role].first_mes = p.first_mes;
752
- if (typeof p.nsfw === 'boolean')
753
- meta[role].nsfw = p.nsfw;
754
- writeRoleMeta(meta);
755
- res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
756
- res.end(JSON.stringify({ ok: true }));
757
- return;
758
- }
759
- if (req.method === 'POST' && url.pathname === '/roleplay/api/chat') {
760
- // P1 修复(GPT 审查):对话接口加请求体大小限制(用户聊天不需编辑密钥)
761
- let body;
762
- try {
763
- body = await readBody(req);
764
- }
765
- catch (e) {
766
- res.writeHead(e.status || 400, { 'Content-Type': 'application/json; charset=utf-8' });
767
- res.end(JSON.stringify({ ok: false, error: String((e && e.message) || e) }));
768
- return;
769
- }
770
- const p = JSON.parse(body);
771
- const role = p.role_id || 'protocol-guide';
772
- // P1 完善(会话隔离):按客户端实例隔离 session 与转录
773
- const cid = clientIdOf(req);
774
- // —— 服务端内容分级硬拦截(不依赖前端,法律与协议保护)——
775
- // 未成年 + 性 = 一律拒绝(国家法律 + 未成年人保护);NSFW 词提示年龄确认
776
- const NSFW_WORDS = ['做爱', '性交', '性行为', '口交', '肛交', '高潮', '自慰', '射精', '色情', '裸体', '脱光', '爱抚', '挑逗', '性器官', '插入', '内射', '强暴'];
777
- const MINOR_WORDS = ['未成年', '儿童', '小孩', '小女孩', '小男孩', '幼女', '萝莉', '幼童', '初中生', '小学生', '14岁', '13岁', '12岁', '学生妹', '女童', '男童'];
778
- const hasNsfw = NSFW_WORDS.some(w => p.message.includes(w));
779
- const hasMinor = MINOR_WORDS.some(w => p.message.includes(w));
780
- if (hasMinor && hasNsfw) {
781
- res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
782
- res.end(JSON.stringify({ reply: '⛔ 已拒绝:涉及未成年人的性内容违反国家法律与灵枢协议(未成年人保护)。灵枢不提供任何涉及未成年人的性扮演内容。', route: 'refused', refused: 'minor_nsfw' }));
783
- return;
784
- }
785
- appendTranscript(role, { time: Date.now(), role: 'user', text: p.message }, cid);
786
- void toGraph('user-turn', (g) => g.writeTranscript(role, cid, 'user', p.message));
787
- if (!capReady()) {
788
- res.writeHead(503, { 'Content-Type': 'application/json; charset=utf-8' });
789
- res.end(JSON.stringify({ reply: '', route: 'unavailable', error: CAP_ABSENT_MSG }));
790
- return;
791
- }
792
- const r = await capability.callTool('roleplay_chat', {
793
- message: p.message, role_id: role, session_id: sessionFor(role, cid), data_dir: roleDataDir,
794
- });
795
- const text = typeof r === 'string' ? r : (r?.content?.[0]?.text ?? JSON.stringify(r));
796
- let parsed;
797
- try {
798
- parsed = JSON.parse(text);
799
- }
800
- catch {
801
- parsed = { reply: text, route: 'raw' };
802
- }
803
- let replyText = parsed.reply ?? '';
804
- // 双向翻译模式:把角色的扮演词翻译回现实词(输入翻译由引擎自动执行 real→virtual)
805
- const settings = readTransSettings();
806
- if ((settings[role] && settings[role].mode) === 'bidirectional') {
807
- replyText = applyTranslate(replyText, getTranslations(role), 'out');
808
- }
809
- appendTranscript(role, { time: Date.now(), role: 'bot', text: replyText, route: parsed.route ?? '', memories: parsed.memories ?? undefined }, cid);
810
- void toGraph('assistant-turn', (g) => g.writeTranscript(role, cid, 'assistant', replyText, { route: parsed.route ?? '' }));
811
- res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
812
- res.end(JSON.stringify({ reply: replyText, route: parsed.route ?? '', memories: parsed.memories ?? undefined, error: parsed.error ?? undefined }));
813
- return;
814
- }
815
- if (req.method === 'GET' && url.pathname === '/roleplay/api/translate') {
816
- const role = url.searchParams.get('role_id') || 'protocol-guide';
817
- const settings = readTransSettings();
818
- res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
819
- res.end(JSON.stringify({ pairs: getTranslations(role), mode: (settings[role] && settings[role].mode) || 'input_only' }));
820
- return;
821
- }
822
- if (req.method === 'POST' && url.pathname === '/roleplay/api/translate') {
823
- // P1 修复(GPT 审查):写操作鉴权(ROLEPLAY_EDIT_KEY)+ 请求体大小限制
824
- if (!requireEditKey(req)) {
825
- res.writeHead(403, { 'Content-Type': 'application/json; charset=utf-8' });
826
- res.end(JSON.stringify({ ok: false, error: '缺少编辑密钥(x-edit-key 头)' }));
827
- return;
828
- }
829
- let body;
830
- try {
831
- body = await readBody(req);
832
- }
833
- catch (e) {
834
- res.writeHead(e.status || 400, { 'Content-Type': 'application/json; charset=utf-8' });
835
- res.end(JSON.stringify({ ok: false, error: String((e && e.message) || e) }));
836
- return;
837
- }
838
- const p = JSON.parse(body);
839
- const role = p.role_id || 'protocol-guide';
840
- const pairs = (Array.isArray(p.pairs) ? p.pairs : [])
841
- .map((x) => ({ real: String(x.real || '').trim(), virtual: String(x.virtual || '').trim(), note: String(x.note || '').trim() }))
842
- .filter((x) => x.real && x.virtual);
843
- setTranslations(role, pairs);
844
- const settings = readTransSettings();
845
- settings[role] = { mode: p.mode === 'bidirectional' ? 'bidirectional' : 'input_only' };
846
- writeTransSettings(settings);
847
- res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
848
- res.end(JSON.stringify({ ok: true, pairs, mode: settings[role].mode }));
849
- return;
850
- }
851
- if (req.method === 'GET' && url.pathname === '/roleplay/api/history') {
852
- const role = url.searchParams.get('role_id') || 'protocol-guide';
853
- // P1 完善(会话隔离):按客户端实例读各自转录
854
- res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
855
- res.end(JSON.stringify({ history: readTranscript(role, clientIdOf(req)) }));
856
- return;
857
- }
858
- if (req.method === 'POST' && url.pathname === '/roleplay/api/roles') {
859
- // P1 修复(GPT 审查):写操作鉴权(ROLEPLAY_EDIT_KEY)+ 请求体大小限制
860
- if (!requireEditKey(req)) {
861
- res.writeHead(403, { 'Content-Type': 'application/json; charset=utf-8' });
862
- res.end(JSON.stringify({ ok: false, error: '缺少编辑密钥(x-edit-key 头)' }));
863
- return;
864
- }
865
- let body;
866
- try {
867
- body = await readBody(req);
868
- }
869
- catch (e) {
870
- res.writeHead(e.status || 400, { 'Content-Type': 'application/json; charset=utf-8' });
871
- res.end(JSON.stringify({ ok: false, error: String((e && e.message) || e) }));
872
- return;
873
- }
874
- const p = JSON.parse(body);
875
- if (!capReady()) {
876
- res.writeHead(503, { 'Content-Type': 'application/json; charset=utf-8' });
877
- res.end(JSON.stringify({ ok: false, error: CAP_ABSENT_MSG }));
878
- return;
879
- }
880
- const r = await capability.callTool('role_create', {
881
- role_id: p.role_id, name: p.name || '', scenario: p.scenario || '', first_mes: p.first_mes || '', data_dir: roleDataDir,
882
- });
883
- void toGraph('role-create', (g) => g.writeRole(p.role_id, JSON.stringify({ name: p.name || '', scenario: p.scenario || '', first_mes: p.first_mes || '' })));
884
- res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
885
- res.end(JSON.stringify({ ok: true, result: r }));
886
- return;
887
- }
888
- res.writeHead(404, { 'Content-Type': 'application/json; charset=utf-8' });
889
- res.end(JSON.stringify({ error: 'not found' }));
890
- }
891
- catch (e) {
892
- res.writeHead(500, { 'Content-Type': 'application/json; charset=utf-8' });
893
- res.end(JSON.stringify({ error: String((e && e.message) || e) }));
894
- }
895
- };
896
- disposers.push(webServer.register({ kind: 'prefix', path: '/roleplay', handler }));
897
- // 在 GUI 首页注入浮动入口按钮(APP 内置页面内一键进入角色扮演,右上角)
898
- // issue #8:按钮可隐藏(roleplayEntryButton=false 不注入)+ 可拖动
899
- // (pointer 拖拽,位置记忆在 localStorage;移动 >6px 视为拖动,否则放行点击跳转)
900
- if (config.roleplayEntryButton) {
901
- disposers.push(webServer.tapIndex((html) => {
902
- if (html.includes('href="/roleplay"'))
903
- return html;
904
- const btn = '<a id="dshm-rp" href="/roleplay" style="position:fixed;top:12px;right:14px;z-index:999999;background:#7c8cff;color:#0b0d14;border-radius:999px;padding:9px 15px;font:600 13px/1 system-ui,sans-serif;text-decoration:none;box-shadow:0 4px 14px rgba(0,0,0,.45);touch-action:none;user-select:none;cursor:grab">🎭 角色扮演</a>' +
905
- '<script>(function(){var b=document.getElementById("dshm-rp");if(!b)return;' +
906
- 'try{var p=JSON.parse(localStorage.getItem("dshm_rlp")||"null");' +
907
- 'if(p&&p.l!=null){b.style.right="auto";b.style.left=p.l+"px";b.style.top=p.t+"px";}}catch(e){}' +
908
- 'var sx=0,sy=0,sl=0,st=0,drag=false;' +
909
- 'b.addEventListener("pointerdown",function(e){sx=e.clientX;sy=e.clientY;' +
910
- 'var r=b.getBoundingClientRect();sl=r.left;st=r.top;drag=false;' +
911
- 'try{b.setPointerCapture(e.pointerId);}catch(err){}});' +
912
- 'b.addEventListener("pointermove",function(e){' +
913
- 'if(e.buttons===0||!drag&&!sx&&!sy)return;' +
914
- 'var dx=e.clientX-sx,dy=e.clientY-sy;' +
915
- 'if(!drag&&Math.sqrt(dx*dx+dy*dy)>6){drag=true;b.style.right="auto";b.style.cursor="grabbing";}' +
916
- 'if(drag){var L=Math.max(4,Math.min(window.innerWidth-b.offsetWidth-4,sl+dx)),' +
917
- 'T=Math.max(4,Math.min(window.innerHeight-b.offsetHeight-4,st+dy));' +
918
- 'b.style.left=L+"px";b.style.top=T+"px";e.preventDefault();}});' +
919
- 'b.addEventListener("pointerup",function(e){' +
920
- 'if(drag){e.preventDefault();' +
921
- 'try{var r=b.getBoundingClientRect();' +
922
- 'localStorage.setItem("dshm_rlp",JSON.stringify({l:r.left,t:r.top}));}catch(err){}}' +
923
- 'drag=false;sx=0;sy=0;});})();</script>';
924
- return html.replace('</body>', `${btn}\n</body>`);
925
- }));
926
- }
927
- ctx.logger.info(`dsh-memory: 角色扮演网页已挂载 /roleplay(data_dir=${roleDataDir},入口按钮=${config.roleplayEntryButton ? '显示(可拖动)' : '隐藏'})`);
928
- }
929
- catch (err) {
930
- ctx.logger.warn(`dsh-memory: 角色扮演网页挂载失败(不影响其他功能): ${String(err && err.message || err)}`);
931
- }
932
- }
1
+ // @ts-nocheck
2
+ // @ts-nocheck
3
+ // @ts-nocheck
4
+ /**
5
+ * dsh-memory 扩展:角色扮演网页(同源挂载到 webServer /roleplay 前缀)。
6
+ *
7
+ * 职责边界(三层拆分后):
8
+ * · 大脑(mdcg):角色定义 / 对话转录显式落认知图(md_cg = 唯一真源)——
9
+ * 转录、历史、翻译、落图全部不依赖「身体」,始终可用。
10
+ * · 身体(可选 capability 后端):生成能力 roleplay_chat / role_create /
11
+ * role_import 属「身」,主仓默认不挂载;未挂载时这些接口 **fail-closed**
12
+ * 返回明确原因(不编造回复)。启用见 config.capability(dsh/cordis.yml.example)。
13
+ */
14
+ import { join, dirname } from 'node:path';
15
+ import { readFileSync, mkdirSync, appendFileSync, existsSync, writeFileSync, renameSync } from 'node:fs';
16
+ const HTML = `<!doctype html>
17
+ <html lang="zh-CN">
18
+ <head>
19
+ <meta charset="utf-8">
20
+ <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
21
+ <title>灵枢 · 角色扮演</title>
22
+ <style>
23
+ :root { --bg:#12141a; --card:#1c2029; --line:#2a3040; --txt:#e8eaf0; --sub:#9aa3b5; --accent:#7c8cff; --accent2:#5ad1a8; }
24
+ * { box-sizing:border-box; margin:0; padding:0; }
25
+ body { background:var(--bg); color:var(--txt); font-family:"PingFang SC","Noto Sans SC",system-ui,sans-serif; height:100vh; height:100dvh; display:flex; flex-direction:column; overflow:hidden; }
26
+ header { flex:none; padding:14px 18px; border-bottom:1px solid var(--line); display:flex; align-items:center; gap:12px; }
27
+ header h1 { font-size:17px; font-weight:600; }
28
+ header .badge { font-size:11px; color:var(--accent2); border:1px solid var(--accent2); padding:2px 8px; border-radius:999px; }
29
+ #roles { margin-left:auto; display:flex; gap:8px; align-items:center; }
30
+ #roles select { background:var(--card); color:var(--txt); border:1px solid var(--line); border-radius:8px; padding:6px 10px; font-size:13px; }
31
+ #roles button { background:var(--card); color:var(--accent); border:1px solid var(--line); border-radius:8px; padding:6px 10px; font-size:13px; cursor:pointer; }
32
+ #roles button:hover { border-color:var(--accent); }
33
+ main { flex:1; min-height:0; overflow-y:auto; padding:16px 18px; display:flex; flex-direction:column; gap:12px; }
34
+ .msg { max-width:78%; padding:10px 14px; border-radius:14px; line-height:1.65; font-size:14px; white-space:pre-wrap; word-break:break-word; }
35
+ .user { align-self:flex-end; background:var(--accent); color:#0b0d14; border-bottom-right-radius:4px; }
36
+ .bot { align-self:flex-start; background:var(--card); border:1px solid var(--line); border-bottom-left-radius:4px; }
37
+ .bot .route { display:block; font-size:10px; color:var(--sub); margin-top:6px; }
38
+ .typing { color:var(--sub); font-size:13px; padding:6px 14px 4px; display:none; flex:none; }
39
+ footer { flex:none; margin:4px 12px calc(env(safe-area-inset-bottom, 0px) + 24px); background:var(--card); border:1px solid var(--line); border-radius:16px; padding:10px; display:flex; gap:8px; align-items:flex-end; box-shadow:0 8px 28px rgba(0,0,0,.4); }
40
+ footer.typing-center { position:fixed; top:45%; left:12px; right:12px; transform:translateY(-50%); z-index:100; margin:0; }
41
+ footer textarea { flex:1; background:var(--bg); border:1px solid var(--line); color:var(--txt); border-radius:12px; padding:12px 14px; font-size:15px; line-height:1.55; outline:none; resize:none; min-height:46px; max-height:140px; font-family:inherit; }
42
+ footer textarea:focus { border-color:var(--accent); }
43
+ footer button { background:var(--accent); border:none; color:#0b0d14; border-radius:12px; padding:13px 20px; font-size:15px; font-weight:600; cursor:pointer; flex:none; }
44
+ footer button:disabled { opacity:.5; cursor:wait; }
45
+ #newrole { position:fixed; inset:0; background:rgba(0,0,0,.6); display:none; align-items:center; justify-content:center; z-index:10; }
46
+ #newrole .box { background:var(--card); border:1px solid var(--line); border-radius:14px; padding:20px; width:min(420px,90vw); display:flex; flex-direction:column; gap:10px; }
47
+ #newrole h3 { font-size:15px; }
48
+ #newrole input, #newrole textarea { background:var(--bg); border:1px solid var(--line); color:var(--txt); border-radius:8px; padding:8px 10px; font-size:13px; font-family:inherit; }
49
+ #newrole textarea { height:80px; resize:vertical; }
50
+ #newrole .row { display:flex; gap:8px; justify-content:flex-end; }
51
+ #newrole .row button { padding:6px 14px; border-radius:8px; font-size:13px; cursor:pointer; border:1px solid var(--line); background:var(--card); color:var(--txt); }
52
+ #newrole .row .ok { background:var(--accent); color:#0b0d14; border-color:var(--accent); font-weight:600; }
53
+ #transpanel { position:fixed; inset:0; background:rgba(0,0,0,.6); display:none; align-items:center; justify-content:center; z-index:20; }
54
+ #transpanel .box { background:var(--card); border:1px solid var(--line); border-radius:14px; padding:20px; width:min(480px,92vw); max-height:80vh; overflow-y:auto; display:flex; flex-direction:column; gap:10px; }
55
+ #transpanel h3 { font-size:15px; }
56
+ #transpanel .mode-row { display:flex; flex-direction:column; gap:6px; font-size:13px; color:var(--txt); }
57
+ #transpanel .mode-row label { display:flex; gap:6px; align-items:flex-start; line-height:1.5; }
58
+ #transpanel .tp-row { display:flex; gap:6px; align-items:center; }
59
+ #transpanel .tp-row input { flex:1; background:var(--bg); border:1px solid var(--line); color:var(--txt); border-radius:8px; padding:7px 9px; font-size:13px; font-family:inherit; min-width:0; }
60
+ #transpanel .tp-row .tp-note { flex:1.2; }
61
+ #transpanel .tp-row .tp-del { flex:none; background:none; border:none; color:var(--sub); font-size:16px; cursor:pointer; padding:4px 6px; }
62
+ #transpanel .row button { padding:7px 14px; border-radius:8px; font-size:13px; cursor:pointer; border:1px solid var(--line); background:var(--card); color:var(--txt); }
63
+ #transpanel .row .ok { background:var(--accent); color:#0b0d14; border-color:var(--accent); font-weight:600; }
64
+ /* —— 年龄确认(NSFW 门控)—— */
65
+ #agegate { position:fixed; inset:0; background:rgba(0,0,0,.72); display:none; align-items:center; justify-content:center; z-index:100; }
66
+ #agegate .box { background:var(--card); border:1px solid var(--line); border-radius:14px; padding:22px; width:min(460px,90vw); display:flex; flex-direction:column; gap:12px; }
67
+ #agegate h3 { font-size:15px; color:var(--accent2); }
68
+ #agegate .warn { font-size:13px; line-height:1.7; color:var(--txt); }
69
+ #agegate .warn b { color:#ff9a9a; }
70
+ #agegate .row { display:flex; gap:8px; justify-content:flex-end; }
71
+ #agegate .row button { padding:8px 16px; border-radius:8px; font-size:13px; cursor:pointer; border:1px solid var(--line); background:var(--card); color:var(--txt); }
72
+ #agegate .row .ok { background:var(--accent); color:#0b0d14; border-color:var(--accent); font-weight:600; }
73
+ /* —— 角色详情 / 三导入 —— */
74
+ #roledetail { position:fixed; inset:0; background:rgba(0,0,0,.6); display:none; align-items:center; justify-content:center; z-index:30; }
75
+ #roledetail .box { background:var(--card); border:1px solid var(--line); border-radius:14px; padding:20px; width:min(520px,94vw); max-height:82vh; overflow-y:auto; display:flex; flex-direction:column; gap:10px; }
76
+ #roledetail h3 { font-size:15px; }
77
+ #roledetail .meta input, #roledetail .meta textarea { width:100%; background:var(--bg); border:1px solid var(--line); color:var(--txt); border-radius:8px; padding:8px 10px; font-size:13px; font-family:inherit; }
78
+ #roledetail .meta textarea { height:56px; resize:vertical; }
79
+ #roledetail .tabs { display:flex; gap:6px; }
80
+ #roledetail .tabs button { flex:1; padding:7px 0; border-radius:8px; font-size:13px; cursor:pointer; border:1px solid var(--line); background:var(--card); color:var(--sub); }
81
+ #roledetail .tabs button.on { background:var(--accent); color:#0b0d14; border-color:var(--accent); font-weight:600; }
82
+ #rd_items { display:flex; flex-direction:column; gap:8px; max-height:36vh; overflow-y:auto; }
83
+ #rd_items .rd-row { display:flex; flex-direction:column; gap:4px; background:var(--bg); border:1px solid var(--line); border-radius:8px; padding:8px 10px; }
84
+ #rd_items .rd-row textarea { background:transparent; border:none; color:var(--txt); font-size:13px; font-family:inherit; resize:vertical; min-height:40px; outline:none; }
85
+ #rd_items .rd-row .rd-sub { display:flex; gap:6px; }
86
+ #rd_items .rd-row .rd-sub input { flex:1; background:var(--bg); border:1px solid var(--line); color:var(--txt); border-radius:6px; padding:4px 8px; font-size:12px; font-family:inherit; }
87
+ #rd_items .rd-row .rd-sub .rd-del { flex:none; background:none; border:none; color:var(--sub); font-size:14px; cursor:pointer; }
88
+ #roledetail .row { display:flex; gap:8px; justify-content:flex-end; margin-top:6px; }
89
+ #roledetail .row button { padding:7px 14px; border-radius:8px; font-size:13px; cursor:pointer; border:1px solid var(--line); background:var(--card); color:var(--txt); }
90
+ #roledetail .row .ok { background:var(--accent); color:#0b0d14; border-color:var(--accent); font-weight:600; }
91
+ #rd_nsfw { display:flex; align-items:center; gap:8px; font-size:12px; color:var(--sub); }
92
+ #rd_nsfw input { accent-color:var(--accent); }
93
+ .hint { color:var(--sub); font-size:12px; text-align:center; padding:6px; }
94
+ </style>
95
+ </head>
96
+ <body>
97
+ <header>
98
+ <h1>灵枢 · 角色扮演</h1><span class="badge">白箱 · 扮演论 v3.3</span>
99
+ <div id="roles">
100
+ <select id="roleSel"></select>
101
+ <button onclick="showNewRole()">+ 新角色</button>
102
+ <button onclick="openRoleDetail()">⚙ 详情</button>
103
+ <button onclick="openTrans()">🌐 翻译</button>
104
+ <button onclick="setEditKey()" title="编辑密钥:服务端 ROLEPLAY_EDIT_KEY 的值(创建/保存角色与翻译需要;留空清除)">🔑</button>
105
+ </div>
106
+ </header>
107
+ <main id="chat"><div class="hint">选择角色,开始对话。角色回应由灵枢角色扮演引擎生成(白箱优先,LLM 续答)。</div></main>
108
+ <div class="typing" id="typing">正在思考…</div>
109
+ <footer>
110
+ <textarea id="input" rows="1" placeholder="说点什么…(Enter 发送,Shift+Enter 换行)"></textarea>
111
+ <button id="send" onclick="send()">发送</button>
112
+ </footer>
113
+ <div id="newrole">
114
+ <div class="box">
115
+ <h3>创建新角色</h3>
116
+ <input id="nr_id" placeholder="角色 ID(英文/拼音,如 naxiaoda)">
117
+ <input id="nr_name" placeholder="角色名(如 纳西妲)">
118
+ <input id="nr_scenario" placeholder="人设场景(一句话描述性格与背景)">
119
+ <input id="nr_first" placeholder="开场白(可选)">
120
+ <div class="row"><button onclick="closeNewRole()">取消</button><button class="ok" onclick="createRole()">创建</button></div>
121
+ </div>
122
+ </div>
123
+ <div id="transpanel">
124
+ <div class="box">
125
+ <h3>🌐 自定义翻译(<span id="tp_role">-</span>)</h3>
126
+ <div class="mode-row">
127
+ <label><input type="radio" name="tpmode" value="input_only"> 仅输入翻译(现实词 → 扮演词给角色)</label>
128
+ <label><input type="radio" name="tpmode" value="bidirectional"> 双向翻译(输入现实→扮演;角色回复扮演→现实)</label>
129
+ </div>
130
+ <div id="tp_rows"></div>
131
+ <div class="row" style="margin-top:8px">
132
+ <button onclick="addTransRow()">+ 添加词对</button>
133
+ <button class="ok" onclick="saveTrans()">保存</button>
134
+ <button onclick="closeTrans()">关闭</button>
135
+ </div>
136
+ <div class="hint">现实词会按表替换成扮演词交给角色(引擎自动);双向模式再把角色回复中的扮演词翻译回现实词。长词优先匹配。</div>
137
+ </div>
138
+ </div>
139
+ <div id="agegate">
140
+ <div class="box">
141
+ <h3>⛔ 成人内容确认</h3>
142
+ <div class="warn">本页面提供角色扮演内容,部分角色/对话可能包含<b>成人向(NSFW)</b>内容。<br><br>
143
+ 依据国家法律法规与灵枢协议(对人类的保护):<br>
144
+ ① 仅限<b>已满 18 周岁</b>的用户使用成人向内容;<br>
145
+ ② 仅限<b>个人对话场景</b>(本页面为本地一对一,不公开);<br>
146
+ ③ 灵枢<b>拒绝一切涉及未成年人的性内容</b>——此类请求会被直接拒绝并记录。<br><br>
147
+ 点击「我已满 18 周岁」表示你确认符合上述条件。</div>
148
+ <div class="row"><button onclick="closeAgeGate()">退出</button><button class="ok" onclick="confirmAge()">我已满 18 周岁</button></div>
149
+ </div>
150
+ </div>
151
+ <div id="roledetail">
152
+ <div class="box">
153
+ <h3>角色详情 · <span id="rd_role">-</span></h3>
154
+ <div class="meta">
155
+ <input id="rd_name" placeholder="角色名">
156
+ <textarea id="rd_scenario" placeholder="人设场景(一句话描述性格与背景)"></textarea>
157
+ <textarea id="rd_first" placeholder="开场白(可选)"></textarea>
158
+ </div>
159
+ <div class="tabs">
160
+ <button id="tab-memory" class="on" onclick="rdTab('memory')">记忆</button>
161
+ <button id="tab-anchor" onclick="rdTab('anchor')">锚点</button>
162
+ <button id="tab-values" onclick="rdTab('values')">价值观</button>
163
+ </div>
164
+ <div id="rd_items"></div>
165
+ <div class="row" style="margin-top:4px">
166
+ <button onclick="rdAddItem()">+ 添加条目</button>
167
+ <label id="rd_nsfw"><input type="checkbox" id="rd_nsfw_chk"> 成人向(NSFW)角色</label>
168
+ </div>
169
+ <div class="row">
170
+ <button onclick="closeRoleDetail()">关闭</button>
171
+ <button class="ok" onclick="saveRoleDetail()">保存</button>
172
+ </div>
173
+ <div class="hint">记忆=背景设定;锚点=不可遗忘的自我核心;价值观=扮演的立场准则(带条件)。保存后立即生效(引擎每次重读角色 meta)。</div>
174
+ </div>
175
+ </div>
176
+ <script>
177
+ const $ = (id) => document.getElementById(id);
178
+ // P1 修复(GPT 审查·XSS):innerHTML 拼接角色/翻译内容必须转义——
179
+ // 否则保存 </textarea><script>… 之类内容会在角色详情页执行脚本
180
+ function esc(s) {
181
+ return String(s == null ? '' : s).replace(/[&<>"']/g, (c) => ({
182
+ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;',
183
+ })[c]);
184
+ }
185
+ // P1 完善(会话隔离):浏览器客户端实例 ID(localStorage 持久化)——
186
+ // 服务端按 x-client-id 隔离 session 与转录;多浏览器/多设备互不串线
187
+ let CLIENT_ID = '';
188
+ try {
189
+ CLIENT_ID = localStorage.getItem('lingshu_client_id');
190
+ if (!CLIENT_ID) {
191
+ CLIENT_ID = 'c' + Math.random().toString(36).slice(2) + Date.now().toString(36);
192
+ localStorage.setItem('lingshu_client_id', CLIENT_ID);
193
+ }
194
+ } catch (e) { /* localStorage 不可用(隐私模式)→ 空,服务端落 shared */ }
195
+ // V22 修复(缺陷 src/lib/roleplay_web.ts:338):编辑密钥携带途径——
196
+ // 服务端写操作 fail-closed 要求 x-edit-key 头(P1-2),但此前页面既无输入
197
+ // 密钥的途径、写 POST 又全用裸 headers → 全部编辑恒 403 不可用。现在
198
+ // 🔑 按钮(setEditKey → prompt)把密钥存 localStorage,apiHeaders 统一注入。
199
+ const EDIT_KEY_STORE = 'lingshu_edit_key';
200
+ function editKey() {
201
+ try { return localStorage.getItem(EDIT_KEY_STORE) || ''; } catch (e) { return ''; }
202
+ }
203
+ function setEditKey() {
204
+ const k = prompt('编辑密钥(服务端环境变量 ROLEPLAY_EDIT_KEY 的值;留空清除):', editKey());
205
+ if (k === null) return; // 取消不动
206
+ try {
207
+ if (k.trim()) localStorage.setItem(EDIT_KEY_STORE, k.trim());
208
+ else localStorage.removeItem(EDIT_KEY_STORE);
209
+ } catch (e) { /* localStorage 不可用 → 忽略 */ }
210
+ }
211
+ function apiHeaders(extra) {
212
+ const h = { 'Content-Type': 'application/json' };
213
+ if (CLIENT_ID) h['x-client-id'] = CLIENT_ID;
214
+ const ek = editKey();
215
+ if (ek) h['x-edit-key'] = ek; // V22:写操作鉴权头(无则服务端 403)
216
+ return Object.assign(h, extra || {});
217
+ }
218
+ // —— 内容分级:年龄门控 + NSFW 检测(法律与协议保护)——
219
+ // 国家法律:涉未成年人性内容一律拒绝;成人内容仅限满 18 岁 + 个人对话场景。
220
+ const AGE_KEY = 'lingshu_roleplay_age_confirmed';
221
+ const NSFW_WORDS = ['做爱','性交','性行为','口交','肛交','高潮','自慰','射精','色情','裸体','脱光','爱抚','挑逗','性器官','插入','内射','强暴'];
222
+ const MINOR_WORDS = ['未成年','儿童','小孩','小女孩','小男孩','幼女','萝莉','幼童','初中生','小学生','14岁','13岁','12岁','学生妹','女童','男童'];
223
+ function hasAgeConfirm() { try { return localStorage.getItem(AGE_KEY) === '1'; } catch (e) { return false; } }
224
+ function showAgeGate() { $('agegate').style.display = 'flex'; }
225
+ function closeAgeGate() { $('agegate').style.display = 'none'; }
226
+ function confirmAge() {
227
+ try { localStorage.setItem(AGE_KEY, '1'); } catch (e) { /* 忽略 */ }
228
+ closeAgeGate();
229
+ }
230
+ // 首次进入:要求年龄确认(NSFW 门控前置)
231
+ if (!hasAgeConfirm()) showAgeGate();
232
+ // 服务端也会硬拦截;前端先做温和提示(未成年+性 = 直接拒绝)
233
+ function nsfwCheck(text) {
234
+ const nsfw = NSFW_WORDS.some(w => text.includes(w));
235
+ const minor = MINOR_WORDS.some(w => text.includes(w));
236
+ if (minor && nsfw) {
237
+ return { refuse: true, msg: '⛔ 已拒绝:涉及未成年人的性内容违反国家法律与灵枢协议(未成年人保护)。灵枢不提供任何涉及未成年人的性扮演内容。' };
238
+ }
239
+ if (nsfw && !hasAgeConfirm()) {
240
+ showAgeGate();
241
+ return { refuse: true, msg: '⛔ 成人向内容需确认年龄:请点击「我已满 18 周岁」后再继续(个人对话场景)。' };
242
+ }
243
+ return { refuse: false };
244
+ }
245
+ let roles = [];
246
+ async function refreshRoles() {
247
+ const r = await fetch('/roleplay/api/roles').then(x => x.json());
248
+ roles = r.roles || [];
249
+ const sel = $('roleSel');
250
+ sel.innerHTML = '';
251
+ roles.forEach(x => { const o = document.createElement('option'); o.value = x.id; o.textContent = x.name || x.id; sel.appendChild(o); });
252
+ if (roles.length && !sel.value) sel.value = roles[0].id;
253
+ if (roles.length) await loadHistory(sel.value);
254
+ }
255
+ function addMsg(text, who, route, memories) {
256
+ const d = document.createElement('div');
257
+ d.className = 'msg ' + who;
258
+ d.textContent = text;
259
+ const meta = [];
260
+ if (route) meta.push('route: ' + route);
261
+ if (typeof memories === 'number') meta.push('记忆召回: ' + memories);
262
+ if (meta.length) { const r = document.createElement('span'); r.className = 'route'; r.textContent = meta.join(' · '); d.appendChild(r); }
263
+ $('chat').appendChild(d);
264
+ $('chat').scrollTop = $('chat').scrollHeight;
265
+ }
266
+ // 加载角色历史对话(无限上下文:本地完整转录 JSONL,按客户端实例隔离)
267
+ async function loadHistory(roleId) {
268
+ const chatEl = $('chat');
269
+ chatEl.innerHTML = '';
270
+ try {
271
+ const r = await fetch('/roleplay/api/history?role_id=' + encodeURIComponent(roleId), { headers: apiHeaders() }).then(x => x.json());
272
+ const h = r.history || [];
273
+ if (!h.length) {
274
+ const hint = document.createElement('div');
275
+ hint.className = 'hint';
276
+ hint.textContent = '与「' + ($('roleSel').selectedOptions[0] ? $('roleSel').selectedOptions[0].textContent : roleId) + '」的新对话从这里开始。';
277
+ chatEl.appendChild(hint);
278
+ return;
279
+ }
280
+ h.forEach(e => addMsg(e.text, e.role === 'user' ? 'user' : 'bot', e.route, e.memories));
281
+ } catch (e) {
282
+ const hint = document.createElement('div');
283
+ hint.className = 'hint';
284
+ hint.textContent = '历史加载失败:' + e;
285
+ chatEl.appendChild(hint);
286
+ }
287
+ }
288
+ async function send() {
289
+ const input = $('input'); const text = input.value.trim();
290
+ if (!text) return;
291
+ // 内容分级检查(前端提示;服务端有硬拦截)
292
+ const gate = nsfwCheck(text);
293
+ if (gate.refuse) { addMsg(gate.msg, 'bot'); return; }
294
+ input.value = ''; addMsg(text, 'user');
295
+ const role = $('roleSel').value;
296
+ const btn = $('send'); btn.disabled = true; $('typing').style.display = 'block';
297
+ try {
298
+ const r = await fetch('/roleplay/api/chat', { method:'POST', headers: apiHeaders(), body: JSON.stringify({ role_id: role, message: text }) }).then(x => x.json());
299
+ addMsg(r.reply || '(无回应:' + (r.error || '未知错误') + ')', 'bot', r.route, r.memories);
300
+ } catch (e) { addMsg('网络错误:' + e, 'bot'); }
301
+ btn.disabled = false; $('typing').style.display = 'none';
302
+ // 保持输入状态:重新聚焦并居中,键盘不收起(连续对话)
303
+ try { input.focus(); } catch (e) { /* 忽略 */ }
304
+ }
305
+ function showNewRole() { $('newrole').style.display = 'flex'; }
306
+ function closeNewRole() { $('newrole').style.display = 'none'; }
307
+ // —— 角色详情 / 三导入(记忆·锚点·价值观)——
308
+ let rdKind = 'memory';
309
+ let rdItems = [];
310
+ function openRoleDetail() {
311
+ const role = $('roleSel').value;
312
+ if (!role) { alert('请先选择角色'); return; }
313
+ $('rd_role').textContent = role;
314
+ const meta = (roles.find(x => x.id === role)) || {};
315
+ $('rd_name').value = meta.name || '';
316
+ $('rd_scenario').value = meta.scenario || '';
317
+ $('rd_first').value = meta.first_mes || '';
318
+ rdTab('memory');
319
+ $('roledetail').style.display = 'flex';
320
+ }
321
+ function closeRoleDetail() { $('roledetail').style.display = 'none'; }
322
+ function rdTab(kind) {
323
+ rdKind = kind;
324
+ ['memory','anchor','values'].forEach(k => $('tab-' + k).classList.toggle('on', k === kind));
325
+ loadRoleDetailItems();
326
+ }
327
+ async function loadRoleDetailItems() {
328
+ const role = $('rd_role').textContent;
329
+ const r = await fetch('/roleplay/api/roles/' + encodeURIComponent(role) + '/items?kind=' + rdKind).then(x => x.json());
330
+ rdItems = r.items || [];
331
+ const box = $('rd_items');
332
+ box.innerHTML = '';
333
+ rdItems.forEach((it, i) => rdRenderRow(box, it, i));
334
+ if (!rdItems.length) rdAddItem();
335
+ }
336
+ function rdRenderRow(box, it, i) {
337
+ const row = document.createElement('div');
338
+ row.className = 'rd-row';
339
+ // P1 修复(GPT 审查·XSS):it.content/it.importance/it.tags 来自用户/文件,须转义
340
+ row.innerHTML =
341
+ '<textarea placeholder="内容(该' + (rdKind === 'memory' ? '记忆' : rdKind === 'anchor' ? '锚点' : '价值观') + '的文本)">' + esc(it.content || '') + '</textarea>' +
342
+ '<div class="rd-sub">' +
343
+ '<input class="rd-imp" type="number" step="0.1" min="0" max="1" placeholder="重要性" value="' + esc(it.importance != null ? it.importance : '0.6') + '">' +
344
+ '<input class="rd-tags" placeholder="标签(逗号分隔)" value="' + esc((it.tags || []).join(',')) + '">' +
345
+ '<button class="rd-del" onclick="this.parentNode.parentNode.remove()">✕</button>' +
346
+ '</div>';
347
+ box.appendChild(row);
348
+ }
349
+ function rdAddItem() { rdRenderRow($('rd_items'), {}, rdItems.length); }
350
+ async function saveRoleDetail() {
351
+ const role = $('rd_role').textContent;
352
+ const name = $('rd_name').value.trim();
353
+ const scenario = $('rd_scenario').value.trim();
354
+ const first_mes = $('rd_first').value.trim();
355
+ const nsfw = $('rd_nsfw_chk').checked;
356
+ // V22 修复(缺陷 :338):此前 meta POST ①裸 headers(无 x-edit-key → 恒 403)
357
+ // ②响应完全不检查(fetch 对 403 不 reject)→ 无条件「已保存」= 虚假成功
358
+ // (服务端 403 在写盘之前 return,数据从未落盘)。现在统一走 apiHeaders()
359
+ // 并逐段检查 ok:任一失败 alert 服务端原因并中止,绝不报「已保存」。
360
+ let m;
361
+ try {
362
+ m = await fetch('/roleplay/api/roles/' + encodeURIComponent(role) + '/meta', {
363
+ method: 'POST', headers: apiHeaders(),
364
+ body: JSON.stringify({ name, scenario, first_mes, nsfw }),
365
+ }).then(x => x.json());
366
+ } catch (e) { m = { ok: false, error: '网络错误:' + e }; }
367
+ if (!m || !m.ok) { alert((m && m.error) || '保存失败(角色信息)'); return; }
368
+ // 当前页签的条目
369
+ const items = [];
370
+ document.querySelectorAll('#rd_items .rd-row').forEach(row => {
371
+ const content = row.querySelector('textarea').value.trim();
372
+ const imp = parseFloat(row.querySelector('.rd-imp').value) || 0.6;
373
+ const tags = row.querySelector('.rd-tags').value.split(/[,,]/).map(s => s.trim()).filter(Boolean);
374
+ if (content) items.push({ content, importance: imp, tags });
375
+ });
376
+ let r;
377
+ try {
378
+ r = await fetch('/roleplay/api/roles/' + encodeURIComponent(role) + '/import', {
379
+ method: 'POST', headers: apiHeaders(),
380
+ body: JSON.stringify({ kind: rdKind, items }),
381
+ }).then(x => x.json());
382
+ } catch (e) { r = { ok: false, error: '网络错误:' + e }; }
383
+ if (!r || !r.ok) { alert((r && r.error) || '保存失败(' + rdKind + ')'); return; }
384
+ addMsg('角色「' + role + '」已保存:' + name + ' · ' + rdKind + ' ' + items.length + ' 条' + (nsfw ? ' · NSFW' : ''), 'bot');
385
+ closeRoleDetail();
386
+ await refreshRoles();
387
+ }
388
+ // —— 自定义翻译面板 ——
389
+ let transMode = 'input_only';
390
+ async function openTrans() {
391
+ const role = $('roleSel').value || 'protocol-guide';
392
+ $('tp_role').textContent = role;
393
+ try {
394
+ const r = await fetch('/roleplay/api/translate?role_id=' + encodeURIComponent(role)).then(x => x.json());
395
+ transMode = r.mode || 'input_only';
396
+ $('tp_rows').innerHTML = '';
397
+ (r.pairs || []).forEach(p => addTransRow(p.real, p.virtual, p.note));
398
+ if (!(r.pairs || []).length) addTransRow();
399
+ } catch (e) { alert('翻译配置加载失败:' + e); return; }
400
+ const radios = document.querySelectorAll('input[name="tpmode"]');
401
+ radios.forEach(x => { x.checked = (x.value === transMode); });
402
+ $('transpanel').style.display = 'flex';
403
+ }
404
+ function closeTrans() { $('transpanel').style.display = 'none'; }
405
+ function addTransRow(real, virtual, note) {
406
+ const row = document.createElement('div');
407
+ row.className = 'tp-row';
408
+ // P1 修复(GPT 审查·XSS):real/virtual/note 来自文件/导入,须转义
409
+ row.innerHTML =
410
+ '<input class="tp-real" placeholder="现实词(如:手机)" value="' + esc(real || '') + '">' +
411
+ '<span>→</span>' +
412
+ '<input class="tp-virtual" placeholder="扮演词(如:神之眼终端)" value="' + esc(virtual || '') + '">' +
413
+ '<input class="tp-note" placeholder="备注(可选)" value="' + esc(note || '') + '">' +
414
+ '<button class="tp-del" onclick="this.parentNode.remove()">✕</button>';
415
+ $('tp_rows').appendChild(row);
416
+ }
417
+ async function saveTrans() {
418
+ const role = $('roleSel').value || 'protocol-guide';
419
+ const pairs = [];
420
+ document.querySelectorAll('#tp_rows .tp-row').forEach(row => {
421
+ const real = row.querySelector('.tp-real').value.trim();
422
+ const virtual = row.querySelector('.tp-virtual').value.trim();
423
+ const note = row.querySelector('.tp-note').value.trim();
424
+ if (real && virtual) pairs.push({ real, virtual, note });
425
+ });
426
+ const mode = (document.querySelector('input[name="tpmode"]:checked') || {}).value || 'input_only';
427
+ const r = await fetch('/roleplay/api/translate', {
428
+ method: 'POST', headers: apiHeaders(),
429
+ body: JSON.stringify({ role_id: role, pairs, mode }),
430
+ }).then(x => x.json());
431
+ if (r.ok) {
432
+ transMode = r.mode;
433
+ closeTrans();
434
+ addMsg('翻译配置已保存:' + r.pairs.length + ' 组词对 · ' + (r.mode === 'bidirectional' ? '双向翻译' : '仅输入翻译'), 'bot');
435
+ } else alert((r.error || '保存失败') + (editKey() ? '' : '(可点右上角 🔑 输入编辑密钥)'));
436
+ }
437
+ async function createRole() {
438
+ const body = { role_id: $('nr_id').value.trim(), name: $('nr_name').value.trim(), scenario: $('nr_scenario').value.trim(), first_mes: $('nr_first').value.trim() };
439
+ if (!body.role_id) { alert('需要角色 ID'); return; }
440
+ const r = await fetch('/roleplay/api/roles', { method:'POST', headers: apiHeaders(), body: JSON.stringify(body) }).then(x => x.json());
441
+ if (r.ok) { closeNewRole(); await refreshRoles(); addMsg('角色「' + (body.name || body.role_id) + '」已创建,可以开始对话了', 'bot'); }
442
+ else alert((r.error || '创建失败') + (editKey() ? '' : '(可点右上角 🔑 输入编辑密钥)'));
443
+ }
444
+ var input = document.getElementById('input');
445
+ var chat = document.getElementById('chat');
446
+ var footer = document.querySelector('footer');
447
+ input.addEventListener('keydown', function (e) {
448
+ if (e.key === 'Enter' && !e.shiftKey) { e.preventDefault(); send(); }
449
+ });
450
+ refreshRoles();
451
+ // 切换角色 → 加载该角色的历史对话
452
+ $('roleSel').addEventListener('change', function () { loadHistory(this.value); });
453
+
454
+ // —— 输入框随内容自动增高(上限 140px)——
455
+ input.addEventListener('input', function () {
456
+ input.style.height = 'auto';
457
+ input.style.height = Math.min(input.scrollHeight, 140) + 'px';
458
+ });
459
+ // —— 聚焦时输入框自动居中(不依赖 WebView 键盘行为):悬浮到屏幕 45% 高度,
460
+ // 键盘在上抬多少都不会遮住;失焦/发送后恢复原位 ——
461
+ function setTypingCenter(on) {
462
+ if (!footer) return;
463
+ footer.classList.toggle('typing-center', on);
464
+ setTimeout(function () {
465
+ if (chat) chat.scrollTop = chat.scrollHeight;
466
+ }, 60);
467
+ }
468
+ input.addEventListener('focus', function () { setTypingCenter(true); });
469
+ input.addEventListener('blur', function () { setTypingCenter(false); });
470
+ window.addEventListener('resize', function () { if (chat) chat.scrollTop = chat.scrollHeight; });
471
+ </script>
472
+ </body>
473
+ </html>`;
474
+ /** 在 webServer 上挂载 /roleplay 前缀路由(页面 + API)。失败不影响插件主体。
475
+ *
476
+ * @param capability 「身体」能力后端桥(可选);为 null 时生成接口 fail-closed。
477
+ * @param mdcg 大脑客户端(认知图,唯一真源);为 null 时落图静默跳过。
478
+ */
479
+ export async function installRoleplayWeb(ctx, capability, config, disposers, mdcg: any = null) {
480
+ // 身体能力后端未接入时的统一提示(fail-closed:不编造回复)。
481
+ const CAP_ABSENT_MSG = '角色生成能力未接入:该能力属「身体」(AEIS 能力库),'
482
+ + '主仓已剥离,仅保留转录/历史/翻译/落图。'
483
+ + '如需启用,在配置中打开 capability.enabled 并给出 capability.args。';
484
+ const capReady = () => !!(capability && typeof capability.isReady === 'function' && capability.isReady());
485
+ try {
486
+ // 注意:不能直接读 ctx.webServer——Cordis 未声明 inject 的属性访问会抛
487
+ // "cannot get property without inject";ctx.get() 安全返回 undefined。
488
+ const webServer = ctx.get('webServer');
489
+ if (!webServer) {
490
+ ctx.logger.warn('dsh-memory: webServer 服务不可用,跳过角色扮演网页挂载');
491
+ return;
492
+ }
493
+ // 认知图落图(显式调用 md_cg;md_cg = 唯一真源,AEIS 仅负责生成)。
494
+ // 显式映射:MdcgClient.writeTranscript / writeRole → MCP mdcg_remember
495
+ // 见 docs/功能调用映射表_v0.1.md。落图失败不影响对话主流程。
496
+ const toGraph = async (label, fn) => {
497
+ if (!mdcg || !mdcg.isReady())
498
+ return;
499
+ try {
500
+ await fn(mdcg);
501
+ }
502
+ catch (err) {
503
+ ctx.logger.warn(`dsh-memory: 角色扮演落图失败(${label}):${String(err)}`);
504
+ }
505
+ };
506
+ // P1 修复(GPT 审查):
507
+ // ① 请求体大小限制(此前 for-await 无限累加,恶意请求可制造内存压力)
508
+ const readBody = async (req, maxBytes = 1_000_000) => {
509
+ // P2-12(批次 30):Buffer 收集后统一 utf-8 解码——旧写法
510
+ // body += chunk 在多字节字符跨 chunk 时产生替换符截断。
511
+ const chunks = [];
512
+ let size = 0;
513
+ for await (const chunk of req) {
514
+ size += chunk.length;
515
+ if (size > maxBytes) {
516
+ const err = new Error('请求体过大(>1MB)');
517
+ err.status = 413;
518
+ throw err;
519
+ }
520
+ chunks.push(chunk);
521
+ }
522
+ return Buffer.concat(chunks).toString('utf8');
523
+ };
524
+ // ② 编辑鉴权(P1-2,批次 26 外部审查报告):fail-closed——未配置
525
+ // ROLEPLAY_EDIT_KEY 时**拒绝全部写操作**(旧语义「未配置=开放」是
526
+ // 本地开发便利,但网页面板是唯一对浏览器开放的面,默认无鉴权 =
527
+ // 任意来源可改写角色数据)。403 文案引导配置:设 ROLEPLAY_EDIT_KEY
528
+ // 并在请求带 x-edit-key 头即可恢复编辑。
529
+ const EDIT_KEY = process.env.ROLEPLAY_EDIT_KEY || '';
530
+ const requireEditKey = (req) => {
531
+ if (!EDIT_KEY)
532
+ return false; // P1-2:未配置 = 拒绝(fail-closed)
533
+ const h = (req.headers && req.headers['x-edit-key']) || '';
534
+ return h === EDIT_KEY;
535
+ };
536
+ // V21-1(批次 34,外部报告):真分支此前误写自调用(无限递归 → 配了
537
+ // key 反而 500 且泄露内部异常文本)。两分支都是终止文案:已配置 =
538
+ // 「缺 x-edit-key 头」;未配置 = 「服务端需配置」引导。
539
+ const editKeyHint = () => EDIT_KEY
540
+ ? '缺少编辑密钥(x-edit-key 头)'
541
+ : '编辑未开放:服务端需配置环境变量 ROLEPLAY_EDIT_KEY,请求需带 x-edit-key 头(P1-2 fail-closed)';
542
+ const roleDataDir = join(dirname(config.dbPath), 'roleplay_data');
543
+ try {
544
+ mkdirSync(join(roleDataDir, 'roleplay'), { recursive: true });
545
+ }
546
+ catch { /* 忽略 */ }
547
+ // 完整对话转录(JSONL,按角色 + 客户端实例持久化;认知图只落图摘要节点,
548
+ // 完整原文在此。注意 history 接口只读这里,不读认知图)
549
+ const transcriptsDir = join(roleDataDir, 'transcripts');
550
+ try {
551
+ mkdirSync(transcriptsDir, { recursive: true });
552
+ }
553
+ catch { /* 忽略 */ }
554
+ const transcriptFile = (roleId, clientId) => join(transcriptsDir, `${roleId.replace(/[^\w.-]/g, '_')}__${clientId}.jsonl`);
555
+ const TRANSCRIPT_TAIL_MAX = 500; // P2-9(批次 31):返回最近 500 条
556
+ const readTranscript = (roleId, clientId = 'shared') => {
557
+ const f = transcriptFile(roleId, clientId);
558
+ if (!existsSync(f))
559
+ return [];
560
+ const out = [];
561
+ for (const line of readFileSync(f, 'utf8').split('\n')) {
562
+ if (!line.trim())
563
+ continue;
564
+ try {
565
+ out.push(JSON.parse(line));
566
+ }
567
+ catch { /* 跳过坏行 */ }
568
+ }
569
+ // P2-9:无上限返回会让响应体随会话长度线性增长——只回最近尾部。
570
+ return out.length > TRANSCRIPT_TAIL_MAX
571
+ ? out.slice(out.length - TRANSCRIPT_TAIL_MAX) : out;
572
+ };
573
+ const appendTranscript = (roleId, entry, clientId = 'shared') => {
574
+ try {
575
+ appendFileSync(transcriptFile(roleId, clientId), JSON.stringify(entry) + '\n');
576
+ }
577
+ catch { /* 忽略 */ }
578
+ };
579
+ // 稳定会话:角色+固定会话 id,让引擎的会话上下文与记忆标签跨轮连续(无限上下文)
580
+ // P1 完善(GPT 审查·会话隔离):开源无身份认证,但必须做客户端实例隔离——
581
+ // 此前所有用户共用 session `web-main:<role>` + 同一转录文件,多浏览器/多设备
582
+ // 对话互相串线、看到彼此历史。现在按浏览器客户端生成的 client_id(x-client-id
583
+ // 头,localStorage 持久化)隔离 session 与转录文件;无 header 的旧客户端落 shared。
584
+ const clientIdOf = (req) => {
585
+ const h = (req.headers && req.headers['x-client-id']) || '';
586
+ return /^[A-Za-z0-9_-]{1,64}$/.test(h) ? h : 'shared';
587
+ };
588
+ const sessionFor = (roleId, clientId) => `web-${clientId}:${roleId}`;
589
+ // —— 自定义翻译(现实词 ↔ 扮演词)——
590
+ // 翻译表写入角色 meta(_roles.json):引擎每次 roleplay_chat 都新建引擎并重读
591
+ // meta,因此写入立即生效(输入翻译 real→virtual + LLM 沉浸注入块都会应用)。
592
+ // P1 完善(GPT 审查·meta 嵌套格式):读取归一化——文件可能是根格式
593
+ // {r:{...}} 或嵌套格式 {meta:{r:{...}}}(外部 AEIS 可能用嵌套),统一返回
594
+ // 「角色字典」视角;写入保持原顶层结构(嵌套则写回 meta 内),读写一致——
595
+ // 此前读兼容嵌套但写永远写根,保存成功但列表读旧值。
596
+ const roleMetaFile = join(roleDataDir, 'roleplay', '_roles.json');
597
+ // P1-3(批次 26 外部审查报告):角色 id 白名单——role 从 URL 提取后
598
+ // 直接作 meta 对象键,`__proto__` 键会劫持 Object.prototype(污染插件
599
+ // 与 DSH 宿主共享的同进程对象)。白名单字符集 + 显式拒绝危险键。
600
+ const _BAD_ROLE_IDS = new Set(['__proto__', 'constructor', 'prototype']);
601
+ const validRoleId = (role) => typeof role === 'string'
602
+ && /^[A-Za-z0-9_.-]{1,64}$/.test(role)
603
+ && !_BAD_ROLE_IDS.has(role);
604
+ // meta 字典统一 null 原型——即使存量文件已被写入危险键,
605
+ // meta['__proto__'] 也只是普通 own 属性,不再劫持原型链。
606
+ const toNullProto = (o) => (o && typeof o === 'object')
607
+ ? Object.assign(Object.create(null), o)
608
+ : o;
609
+ const readRoleMeta = () => {
610
+ try {
611
+ const raw = JSON.parse(readFileSync(roleMetaFile, 'utf8'));
612
+ if (raw && typeof raw === 'object'
613
+ && raw.meta && typeof raw.meta === 'object')
614
+ return toNullProto(raw.meta); // 嵌套格式 → meta 内角色字典
615
+ return toNullProto(raw);
616
+ }
617
+ catch {
618
+ return Object.create(null);
619
+ }
620
+ };
621
+ const writeRoleMeta = (flat) => {
622
+ try {
623
+ let raw;
624
+ try {
625
+ raw = JSON.parse(readFileSync(roleMetaFile, 'utf8'));
626
+ }
627
+ catch {
628
+ raw = {};
629
+ }
630
+ // 保持原顶层结构:原文件嵌套 {meta:{...}} → 写回 meta 内;根格式 → 写根
631
+ const out = (raw && typeof raw === 'object'
632
+ && raw.meta && typeof raw.meta === 'object')
633
+ ? { ...raw, meta: flat } : flat;
634
+ const tmp = roleMetaFile + '.tmp';
635
+ writeFileSync(tmp, JSON.stringify(out, null, 2), 'utf8');
636
+ renameSync(tmp, roleMetaFile);
637
+ }
638
+ catch (e) {
639
+ ctx.logger.warn(`dsh-memory: 角色 meta 写入失败: ${String((e && e.message) || e)}`);
640
+ }
641
+ };
642
+ // 翻译模式(双向/仅输入)由网页层持久化
643
+ const transSettingsFile = join(transcriptsDir, 'translate_settings.json');
644
+ const readTransSettings = () => {
645
+ try {
646
+ return JSON.parse(readFileSync(transSettingsFile, 'utf8'));
647
+ }
648
+ catch {
649
+ return {};
650
+ }
651
+ };
652
+ const writeTransSettings = (s) => {
653
+ // P2-10(批次 31):tmp+rename 原子写(与 writeRoleMeta 同款)——
654
+ // 直接 writeFileSync 并发/中断会写坏 JSON,后续读静默丢配置。
655
+ try {
656
+ const tmp = transSettingsFile + '.tmp';
657
+ writeFileSync(tmp, JSON.stringify(s, null, 2), 'utf8');
658
+ renameSync(tmp, transSettingsFile);
659
+ }
660
+ catch { /* 忽略 */ }
661
+ };
662
+ const getTranslations = (roleId) => {
663
+ const meta = readRoleMeta();
664
+ const t = (meta[roleId] && meta[roleId].translations) || [];
665
+ return Array.isArray(t) ? t : [];
666
+ };
667
+ const setTranslations = (roleId, pairs) => {
668
+ if (!validRoleId(roleId))
669
+ return; // P1-3:非法角色 id 拒写(防原型污染)
670
+ const meta = readRoleMeta();
671
+ if (!meta[roleId])
672
+ meta[roleId] = { created_at: Date.now() / 1000, name: roleId };
673
+ meta[roleId].translations = pairs;
674
+ writeRoleMeta(meta);
675
+ };
676
+ // 可逆替换(长词优先,与灵枢 translate_input/translate_output 同逻辑)
677
+ const applyTranslate = (text, pairs, dir) => {
678
+ if (!text || !pairs.length)
679
+ return text;
680
+ const key = dir === 'out' ? 'virtual' : 'real';
681
+ const rep = dir === 'out' ? 'real' : 'virtual';
682
+ const sorted = pairs
683
+ .filter((p) => p[key] && p[rep])
684
+ .sort((a, b) => (b[key] || '').length - (a[key] || '').length);
685
+ let out = text;
686
+ for (const p of sorted)
687
+ out = out.split(p[key]).join(p[rep]);
688
+ return out;
689
+ };
690
+ const handler = async (req, res) => {
691
+ const url = new URL(req.url ?? '/', 'http://x');
692
+ try {
693
+ const isPage = url.pathname === '/roleplay' || url.pathname === '/roleplay/';
694
+ if (req.method === 'GET' && isPage) {
695
+ res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
696
+ res.end(HTML);
697
+ return;
698
+ }
699
+ if (req.method === 'GET' && url.pathname === '/roleplay/api/roles') {
700
+ const rolesFile = join(roleDataDir, 'roleplay', '_roles.json');
701
+ let roles = [];
702
+ try {
703
+ const raw = JSON.parse(readFileSync(rolesFile, 'utf8'));
704
+ const meta = raw.meta && typeof raw.meta === 'object' ? raw.meta : raw;
705
+ roles = Object.entries(meta)
706
+ .filter(([k]) => k !== 'created_at' && k !== 'updated_at')
707
+ .map(([id, m]) => ({ id, name: (m && m.name) || id, scenario: (m && m.scenario) || '', first_mes: (m && m.first_mes) || '' }));
708
+ }
709
+ catch { /* 文件尚不存在 */ }
710
+ res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
711
+ res.end(JSON.stringify({ roles }));
712
+ return;
713
+ }
714
+ // —— 三导入(记忆/锚点/价值观):items 副本存 _roles.json + role_import 真导入引擎 ——
715
+ const rdItemsFile = (roleId, kind) => `${kind}_items`;
716
+ const getRoleItems = (roleId, kind) => {
717
+ const meta = readRoleMeta();
718
+ const arr = (meta[roleId] && meta[roleId][rdItemsFile(roleId, kind)]) || [];
719
+ return Array.isArray(arr) ? arr : [];
720
+ };
721
+ if (req.method === 'GET' && url.pathname.startsWith('/roleplay/api/roles/') && url.pathname.endsWith('/items')) {
722
+ const role = decodeURIComponent(url.pathname.split('/')[4]);
723
+ const kind = url.searchParams.get('kind') || 'memory';
724
+ res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
725
+ res.end(JSON.stringify({ items: getRoleItems(role, kind) }));
726
+ return;
727
+ }
728
+ if (req.method === 'POST' && url.pathname.startsWith('/roleplay/api/roles/') && url.pathname.endsWith('/import')) {
729
+ // P1 修复(GPT 审查):写操作鉴权(ROLEPLAY_EDIT_KEY)+ 请求体大小限制
730
+ if (!requireEditKey(req)) {
731
+ res.writeHead(403, { 'Content-Type': 'application/json; charset=utf-8' });
732
+ res.end(JSON.stringify({ ok: false, error: editKeyHint() }));
733
+ return;
734
+ }
735
+ let body;
736
+ try {
737
+ body = await readBody(req);
738
+ }
739
+ catch (e) {
740
+ res.writeHead(e.status || 400, { 'Content-Type': 'application/json; charset=utf-8' });
741
+ res.end(JSON.stringify({ ok: false, error: String((e && e.message) || e) }));
742
+ return;
743
+ }
744
+ const p = JSON.parse(body);
745
+ const role = decodeURIComponent(url.pathname.split('/')[4]);
746
+ const kind = p.kind || 'memory';
747
+ const items = (Array.isArray(p.items) ? p.items : []).filter((x) => x && x.content);
748
+ // 副本(网页层读取用)
749
+ const meta = readRoleMeta();
750
+ if (!meta[role])
751
+ meta[role] = { created_at: Date.now() / 1000, name: role };
752
+ meta[role][rdItemsFile(role, kind)] = items;
753
+ writeRoleMeta(meta);
754
+ // 真导入引擎(记忆→知识层/锚点→SELF no_forget/价值观→STRUCTURE 带条件)
755
+ let impResult = null;
756
+ if (items.length) {
757
+ if (!capReady()) {
758
+ impResult = { error: CAP_ABSENT_MSG };
759
+ }
760
+ else {
761
+ try {
762
+ impResult = await capability.callTool('role_import', {
763
+ role_id: role, kind, items, data_dir: roleDataDir,
764
+ });
765
+ }
766
+ catch (e) {
767
+ impResult = { error: String((e && e.message) || e) };
768
+ }
769
+ }
770
+ }
771
+ // 导入项显式落认知图:memory→knowledge / anchors→self / values→structural。
772
+ // 显式映射:MdcgClient.write → MCP mdcg_remember(gated=false 直写)。
773
+ // ⚠️ anchors→self 层需 designer 权限(recorder 的 layers_allow 不含 self)。
774
+ const layerForKind = { memory: 'knowledge', anchors: 'self', values: 'structural' }[kind] || 'knowledge';
775
+ void toGraph(`import-${kind}`, (g) => Promise.all(items.map((it, i) => g.write(
776
+ typeof it === 'string' ? it : (it.text || it.content || JSON.stringify(it)),
777
+ { node_id: `roleplay_${role}_${kind}_${i}`, layer: layerForKind,
778
+ tags: ['roleplay', `role:${role}`, `roleplay:${kind}`], importance: 0.6 },
779
+ ))));
780
+ res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
781
+ // P1 修复(GPT 审查):引擎导入失败不得返回 ok:true(前端会显示「已保存」)
782
+ const importOk = !(impResult && (impResult.error || impResult.isError));
783
+ res.end(JSON.stringify({ ok: importOk, kind, items, import: impResult }));
784
+ return;
785
+ }
786
+ if (req.method === 'POST' && url.pathname.startsWith('/roleplay/api/roles/') && url.pathname.endsWith('/meta')) {
787
+ // P1 修复(GPT 审查):写操作鉴权(ROLEPLAY_EDIT_KEY)+ 请求体大小限制
788
+ if (!requireEditKey(req)) {
789
+ res.writeHead(403, { 'Content-Type': 'application/json; charset=utf-8' });
790
+ res.end(JSON.stringify({ ok: false, error: editKeyHint() }));
791
+ return;
792
+ }
793
+ let body;
794
+ try {
795
+ body = await readBody(req);
796
+ }
797
+ catch (e) {
798
+ res.writeHead(e.status || 400, { 'Content-Type': 'application/json; charset=utf-8' });
799
+ res.end(JSON.stringify({ ok: false, error: String((e && e.message) || e) }));
800
+ return;
801
+ }
802
+ const p = JSON.parse(body);
803
+ const role = decodeURIComponent(url.pathname.split('/')[4]);
804
+ if (!validRoleId(role)) {
805
+ // P1-3:__proto__/constructor/prototype 及越界字符拒绝
806
+ res.writeHead(400, { 'Content-Type': 'application/json; charset=utf-8' });
807
+ res.end(JSON.stringify({ ok: false, error: '非法角色 id(白名单 ^[A-Za-z0-9_.-]{1,64}$)' }));
808
+ return;
809
+ }
810
+ // P2-11(批次 30 注记):本读改写段为同步执行(中间无
811
+ // await)——node 单 tick 内不会交错;若未来在此段引入
812
+ // await,须先加写队列/文件锁(并发丢更新防线)。
813
+ const meta = readRoleMeta();
814
+ if (!meta[role])
815
+ meta[role] = { created_at: Date.now() / 1000 };
816
+ if (typeof p.name === 'string')
817
+ meta[role].name = p.name;
818
+ if (typeof p.scenario === 'string')
819
+ meta[role].scenario = p.scenario;
820
+ if (typeof p.first_mes === 'string')
821
+ meta[role].first_mes = p.first_mes;
822
+ if (typeof p.nsfw === 'boolean')
823
+ meta[role].nsfw = p.nsfw;
824
+ writeRoleMeta(meta);
825
+ res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
826
+ res.end(JSON.stringify({ ok: true }));
827
+ return;
828
+ }
829
+ if (req.method === 'POST' && url.pathname === '/roleplay/api/chat') {
830
+ // P1 修复(GPT 审查):对话接口加请求体大小限制(用户聊天不需编辑密钥)
831
+ let body;
832
+ try {
833
+ body = await readBody(req);
834
+ }
835
+ catch (e) {
836
+ res.writeHead(e.status || 400, { 'Content-Type': 'application/json; charset=utf-8' });
837
+ res.end(JSON.stringify({ ok: false, error: String((e && e.message) || e) }));
838
+ return;
839
+ }
840
+ const p = JSON.parse(body);
841
+ const role = p.role_id || 'protocol-guide';
842
+ // P2-23(批次 30):chat 的 role_id 进 node_id 模板——
843
+ // 纵深防御:与 /meta 同款白名单(当前模板前缀使穿越
844
+ // 不可达,但模板改动即破——入口统一卡死)
845
+ if (!validRoleId(role)) {
846
+ res.writeHead(400, { 'Content-Type': 'application/json; charset=utf-8' });
847
+ res.end(JSON.stringify({ ok: false, error: '非法角色 id(白名单 ^[A-Za-z0-9_.-]{1,64}$)' }));
848
+ return;
849
+ }
850
+ // P1 完善(会话隔离):按客户端实例隔离 session 与转录
851
+ const cid = clientIdOf(req);
852
+ // —— 服务端内容分级硬拦截(不依赖前端,法律与协议保护)——
853
+ // 未成年 + 性 = 一律拒绝(国家法律 + 未成年人保护);NSFW 词提示年龄确认
854
+ const NSFW_WORDS = ['做爱', '性交', '性行为', '口交', '肛交', '高潮', '自慰', '射精', '色情', '裸体', '脱光', '爱抚', '挑逗', '性器官', '插入', '内射', '强暴'];
855
+ const MINOR_WORDS = ['未成年', '儿童', '小孩', '小女孩', '小男孩', '幼女', '萝莉', '幼童', '初中生', '小学生', '14岁', '13岁', '12岁', '学生妹', '女童', '男童'];
856
+ const hasNsfw = NSFW_WORDS.some(w => p.message.includes(w));
857
+ const hasMinor = MINOR_WORDS.some(w => p.message.includes(w));
858
+ if (hasMinor && hasNsfw) {
859
+ res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
860
+ res.end(JSON.stringify({ reply: '⛔ 已拒绝:涉及未成年人的性内容违反国家法律与灵枢协议(未成年人保护)。灵枢不提供任何涉及未成年人的性扮演内容。', route: 'refused', refused: 'minor_nsfw' }));
861
+ return;
862
+ }
863
+ appendTranscript(role, { time: Date.now(), role: 'user', text: p.message }, cid);
864
+ void toGraph('user-turn', (g) => g.writeTranscript(role, cid, 'user', p.message));
865
+ if (!capReady()) {
866
+ res.writeHead(503, { 'Content-Type': 'application/json; charset=utf-8' });
867
+ res.end(JSON.stringify({ reply: '', route: 'unavailable', error: CAP_ABSENT_MSG }));
868
+ return;
869
+ }
870
+ const r = await capability.callTool('roleplay_chat', {
871
+ message: p.message, role_id: role, session_id: sessionFor(role, cid), data_dir: roleDataDir,
872
+ });
873
+ const text = typeof r === 'string' ? r : (r?.content?.[0]?.text ?? JSON.stringify(r));
874
+ let parsed;
875
+ try {
876
+ parsed = JSON.parse(text);
877
+ }
878
+ catch {
879
+ parsed = { reply: text, route: 'raw' };
880
+ }
881
+ let replyText = parsed.reply ?? '';
882
+ // 双向翻译模式:把角色的扮演词翻译回现实词(输入翻译由引擎自动执行 real→virtual)
883
+ const settings = readTransSettings();
884
+ if ((settings[role] && settings[role].mode) === 'bidirectional') {
885
+ replyText = applyTranslate(replyText, getTranslations(role), 'out');
886
+ }
887
+ appendTranscript(role, { time: Date.now(), role: 'bot', text: replyText, route: parsed.route ?? '', memories: parsed.memories ?? undefined }, cid);
888
+ void toGraph('assistant-turn', (g) => g.writeTranscript(role, cid, 'assistant', replyText, { route: parsed.route ?? '' }));
889
+ res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
890
+ res.end(JSON.stringify({ reply: replyText, route: parsed.route ?? '', memories: parsed.memories ?? undefined, error: parsed.error ?? undefined }));
891
+ return;
892
+ }
893
+ if (req.method === 'GET' && url.pathname === '/roleplay/api/translate') {
894
+ const role = url.searchParams.get('role_id') || 'protocol-guide';
895
+ const settings = readTransSettings();
896
+ res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
897
+ res.end(JSON.stringify({ pairs: getTranslations(role), mode: (settings[role] && settings[role].mode) || 'input_only' }));
898
+ return;
899
+ }
900
+ if (req.method === 'POST' && url.pathname === '/roleplay/api/translate') {
901
+ // P1 修复(GPT 审查):写操作鉴权(ROLEPLAY_EDIT_KEY)+ 请求体大小限制
902
+ if (!requireEditKey(req)) {
903
+ res.writeHead(403, { 'Content-Type': 'application/json; charset=utf-8' });
904
+ res.end(JSON.stringify({ ok: false, error: editKeyHint() }));
905
+ return;
906
+ }
907
+ let body;
908
+ try {
909
+ body = await readBody(req);
910
+ }
911
+ catch (e) {
912
+ res.writeHead(e.status || 400, { 'Content-Type': 'application/json; charset=utf-8' });
913
+ res.end(JSON.stringify({ ok: false, error: String((e && e.message) || e) }));
914
+ return;
915
+ }
916
+ const p = JSON.parse(body);
917
+ const role = p.role_id || 'protocol-guide';
918
+ // P1-3 补卡(translate POST):与 /meta、/chat 同款白名单——
919
+ // 此前不校验即 setTranslations(内部白名单不匹配**静默 return**,
920
+ // 中文 id 词对永不落盘)+ settings[role] 直接键赋值('__proto__'
921
+ // 走原型 setter 连 mode 都丢),却仍回 ok:true = 虚假成功。
922
+ if (!validRoleId(role)) {
923
+ res.writeHead(400, { 'Content-Type': 'application/json; charset=utf-8' });
924
+ res.end(JSON.stringify({ ok: false, error: '非法角色 id(白名单 ^[A-Za-z0-9_.-]{1,64}$)' }));
925
+ return;
926
+ }
927
+ const pairs = (Array.isArray(p.pairs) ? p.pairs : [])
928
+ .map((x) => ({ real: String(x.real || '').trim(), virtual: String(x.virtual || '').trim(), note: String(x.note || '').trim() }))
929
+ .filter((x) => x.real && x.virtual);
930
+ setTranslations(role, pairs);
931
+ const settings = readTransSettings();
932
+ settings[role] = { mode: p.mode === 'bidirectional' ? 'bidirectional' : 'input_only' };
933
+ writeTransSettings(settings);
934
+ res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
935
+ res.end(JSON.stringify({ ok: true, pairs, mode: settings[role].mode }));
936
+ return;
937
+ }
938
+ if (req.method === 'GET' && url.pathname === '/roleplay/api/history') {
939
+ const role = url.searchParams.get('role_id') || 'protocol-guide';
940
+ // P1 完善(会话隔离):按客户端实例读各自转录
941
+ res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
942
+ res.end(JSON.stringify({ history: readTranscript(role, clientIdOf(req)) }));
943
+ return;
944
+ }
945
+ if (req.method === 'POST' && url.pathname === '/roleplay/api/roles') {
946
+ // P1 修复(GPT 审查):写操作鉴权(ROLEPLAY_EDIT_KEY)+ 请求体大小限制
947
+ if (!requireEditKey(req)) {
948
+ res.writeHead(403, { 'Content-Type': 'application/json; charset=utf-8' });
949
+ res.end(JSON.stringify({ ok: false, error: editKeyHint() }));
950
+ return;
951
+ }
952
+ let body;
953
+ try {
954
+ body = await readBody(req);
955
+ }
956
+ catch (e) {
957
+ res.writeHead(e.status || 400, { 'Content-Type': 'application/json; charset=utf-8' });
958
+ res.end(JSON.stringify({ ok: false, error: String((e && e.message) || e) }));
959
+ return;
960
+ }
961
+ const p = JSON.parse(body);
962
+ if (!capReady()) {
963
+ res.writeHead(503, { 'Content-Type': 'application/json; charset=utf-8' });
964
+ res.end(JSON.stringify({ ok: false, error: CAP_ABSENT_MSG }));
965
+ return;
966
+ }
967
+ const r = await capability.callTool('role_create', {
968
+ role_id: p.role_id, name: p.name || '', scenario: p.scenario || '', first_mes: p.first_mes || '', data_dir: roleDataDir,
969
+ });
970
+ void toGraph('role-create', (g) => g.writeRole(p.role_id, JSON.stringify({ name: p.name || '', scenario: p.scenario || '', first_mes: p.first_mes || '' })));
971
+ res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
972
+ res.end(JSON.stringify({ ok: true, result: r }));
973
+ return;
974
+ }
975
+ res.writeHead(404, { 'Content-Type': 'application/json; charset=utf-8' });
976
+ res.end(JSON.stringify({ error: 'not found' }));
977
+ }
978
+ catch (e) {
979
+ res.writeHead(500, { 'Content-Type': 'application/json; charset=utf-8' });
980
+ res.end(JSON.stringify({ error: String((e && e.message) || e) }));
981
+ }
982
+ };
983
+ disposers.push(webServer.register({ kind: 'prefix', path: '/roleplay', handler }));
984
+ // 在 GUI 首页注入浮动入口按钮(APP 内置页面内一键进入角色扮演,右上角)
985
+ // issue #8:按钮可隐藏(roleplayEntryButton=false 不注入)+ 可拖动
986
+ // (pointer 拖拽,位置记忆在 localStorage;移动 >6px 视为拖动,否则放行点击跳转)
987
+ if (config.roleplayEntryButton) {
988
+ disposers.push(webServer.tapIndex((html) => {
989
+ if (html.includes('href="/roleplay"'))
990
+ return html;
991
+ const btn = '<a id="dshm-rp" href="/roleplay" style="position:fixed;top:12px;right:14px;z-index:999999;background:#7c8cff;color:#0b0d14;border-radius:999px;padding:9px 15px;font:600 13px/1 system-ui,sans-serif;text-decoration:none;box-shadow:0 4px 14px rgba(0,0,0,.45);touch-action:none;user-select:none;cursor:grab">🎭 角色扮演</a>' +
992
+ '<script>(function(){var b=document.getElementById("dshm-rp");if(!b)return;' +
993
+ 'try{var p=JSON.parse(localStorage.getItem("dshm_rlp")||"null");' +
994
+ 'if(p&&p.l!=null){b.style.right="auto";b.style.left=p.l+"px";b.style.top=p.t+"px";}}catch(e){}' +
995
+ 'var sx=0,sy=0,sl=0,st=0,drag=false;' +
996
+ 'b.addEventListener("pointerdown",function(e){sx=e.clientX;sy=e.clientY;' +
997
+ 'var r=b.getBoundingClientRect();sl=r.left;st=r.top;drag=false;' +
998
+ 'try{b.setPointerCapture(e.pointerId);}catch(err){}});' +
999
+ 'b.addEventListener("pointermove",function(e){' +
1000
+ 'if(e.buttons===0||!drag&&!sx&&!sy)return;' +
1001
+ 'var dx=e.clientX-sx,dy=e.clientY-sy;' +
1002
+ 'if(!drag&&Math.sqrt(dx*dx+dy*dy)>6){drag=true;b.style.right="auto";b.style.cursor="grabbing";}' +
1003
+ 'if(drag){var L=Math.max(4,Math.min(window.innerWidth-b.offsetWidth-4,sl+dx)),' +
1004
+ 'T=Math.max(4,Math.min(window.innerHeight-b.offsetHeight-4,st+dy));' +
1005
+ 'b.style.left=L+"px";b.style.top=T+"px";e.preventDefault();}});' +
1006
+ 'b.addEventListener("pointerup",function(e){' +
1007
+ 'if(drag){e.preventDefault();' +
1008
+ 'try{var r=b.getBoundingClientRect();' +
1009
+ 'localStorage.setItem("dshm_rlp",JSON.stringify({l:r.left,t:r.top}));}catch(err){}}' +
1010
+ 'drag=false;sx=0;sy=0;});})();</script>';
1011
+ return html.replace('</body>', `${btn}\n</body>`);
1012
+ }));
1013
+ }
1014
+ ctx.logger.info(`dsh-memory: 角色扮演网页已挂载 /roleplay(data_dir=${roleDataDir},入口按钮=${config.roleplayEntryButton ? '显示(可拖动)' : '隐藏'})`);
1015
+ }
1016
+ catch (err) {
1017
+ ctx.logger.warn(`dsh-memory: 角色扮演网页挂载失败(不影响其他功能): ${String(err && err.message || err)}`);
1018
+ }
1019
+ }