npm - @kenz1117/dsh-engram - Versions diffs - 0.2.0 → 0.3.0 - Mend

@kenz1117/dsh-engram 0.2.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/README.md CHANGED Viewed

@@ -40,9 +40,13 @@ dsh plugin --profile web add @kenz1117/dsh-engram
 | `engram_forget` | 遗忘（软删可恢复） |
 | `engram_review` | 审计单条：来源链、取代链、矛盾、操作日志 |
 | `engram_stats` | 全库统计与信噪比 |
-| `engram_export` | 导出 Markdown/JSON 文件（数据可携带） |
+| `engram_export` | 导出 Markdown / JSON 文件（数据可携带） |
 | `engram_distill` | 蒸馏：同主题簇合并为高层规律（LLM） |
+## Web 管理面板
+宿主带 webServer 的 profile（web 等）自动挂载 `http://127.0.0.1:3080/engram` 管理页（仅本机回环可访问）：统计卡片、按状态/种类/内容过滤、编辑（走取代链）、遗忘/恢复、导出 Markdown/JSON 下载。数据接口在 `/api/engram/*`，写操作校验回环 Origin。headless 等无 webServer 的组合不挂载，其余能力不受影响。
 ## 理解实现
 - **双层分库**：`user.db` 全局共享；`project-<cwd>.db` 按工作目录隔离。

package/lib/index.mjs CHANGED Viewed

@@ -374,6 +374,509 @@ async function ingestPreviousTurn(deps) {
 	};
 }
 //#endregion
+//#region src/page.ts
+/**
+* /engram 管理页：自包含单文件 HTML（内联 CSS/JS，简体中文 UI）。
+* 页面 JS 全部使用 DOM API 构建用户内容节点（不用 innerHTML 拼接，
+* 防记忆内容 XSS）。@module @kenz1117/dsh-engram/page
+*/
+const PAGE_HTML = `<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>dsh-engram 记忆库</title>
+<style>
+  :root { color-scheme: dark; --bg: #14161a; --panel: #1c1f26; --line: #2a2f3a; --text: #e6e8ee; --muted: #8b93a3; --accent: #4f8cff; --ok: #3fb96f; --warn: #d9a13b; --bad: #e05d5d; }
+  * { box-sizing: border-box; }
+  body { margin: 0; background: var(--bg); color: var(--text); font: 14px/1.6 -apple-system, "PingFang SC", "Microsoft YaHei", sans-serif; }
+  header { display: flex; align-items: center; gap: 12px; padding: 14px 20px; border-bottom: 1px solid var(--line); position: sticky; top: 0; background: var(--bg); z-index: 5; }
+  header h1 { font-size: 16px; margin: 0 auto 0 0; }
+  .tabs { display: flex; border: 1px solid var(--line); border-radius: 8px; overflow: hidden; }
+  .tabs button { background: none; border: none; color: var(--muted); padding: 6px 14px; cursor: pointer; font-size: 13px; }
+  .tabs button.on { background: var(--accent); color: #fff; }
+  button.act { background: var(--panel); color: var(--text); border: 1px solid var(--line); border-radius: 8px; padding: 6px 12px; cursor: pointer; font-size: 13px; }
+  button.act:hover { border-color: var(--accent); }
+  main { max-width: 980px; margin: 0 auto; padding: 18px 20px 60px; }
+  .cards { display: grid; grid-template-columns: repeat(5, 1fr); gap: 10px; margin-bottom: 16px; }
+  .card { background: var(--panel); border: 1px solid var(--line); border-radius: 10px; padding: 10px 14px; }
+  .card b { display: block; font-size: 20px; }
+  .card span { color: var(--muted); font-size: 12px; }
+  .filters { display: flex; gap: 8px; margin-bottom: 14px; flex-wrap: wrap; }
+  .filters select, .filters input { background: var(--panel); color: var(--text); border: 1px solid var(--line); border-radius: 8px; padding: 6px 10px; font-size: 13px; }
+  .filters input { flex: 1; min-width: 200px; }
+  .item { background: var(--panel); border: 1px solid var(--line); border-radius: 10px; padding: 12px 14px; margin-bottom: 10px; }
+  .item .row1 { display: flex; gap: 8px; align-items: center; margin-bottom: 6px; flex-wrap: wrap; }
+  .badge { font-size: 11px; padding: 1px 8px; border-radius: 99px; border: 1px solid var(--line); color: var(--muted); }
+  .badge.active { color: var(--ok); border-color: var(--ok); }
+  .badge.archived { color: var(--warn); border-color: var(--warn); }
+  .badge.forgotten { color: var(--bad); border-color: var(--bad); }
+  .content { white-space: pre-wrap; word-break: break-word; }
+  .meta { color: var(--muted); font-size: 12px; margin-top: 6px; display: flex; gap: 14px; flex-wrap: wrap; }
+  .ops { margin-top: 8px; display: flex; gap: 8px; }
+  .ops button { font-size: 12px; padding: 3px 10px; }
+  .bar { height: 4px; border-radius: 2px; background: var(--line); overflow: hidden; width: 90px; display: inline-block; vertical-align: middle; }
+  .bar i { display: block; height: 100%; background: var(--accent); }
+  .pager { display: flex; gap: 10px; align-items: center; justify-content: center; margin-top: 14px; color: var(--muted); }
+  dialog { background: var(--panel); color: var(--text); border: 1px solid var(--line); border-radius: 12px; max-width: 640px; width: 92vw; padding: 18px; }
+  dialog::backdrop { background: rgba(0,0,0,.55); }
+  dialog h3 { margin: 0 0 10px; font-size: 15px; }
+  dialog textarea, dialog input, dialog select { width: 100%; background: var(--bg); color: var(--text); border: 1px solid var(--line); border-radius: 8px; padding: 8px; font: inherit; }
+  dialog .f { margin-bottom: 10px; }
+  dialog label { display: block; color: var(--muted); font-size: 12px; margin-bottom: 4px; }
+  dialog pre { background: var(--bg); border: 1px solid var(--line); border-radius: 8px; padding: 10px; overflow: auto; font-size: 12px; max-height: 320px; white-space: pre-wrap; }
+  .modal-foot { display: flex; gap: 8px; justify-content: flex-end; margin-top: 12px; }
+  .primary { background: var(--accent); border-color: var(--accent); color: #fff; }
+  .empty { text-align: center; color: var(--muted); padding: 40px 0; }
+</style>
+</head>
+<body>
+<header>
+  <h1>dsh-engram 记忆库</h1>
+  <div class="tabs" id="scopeTabs">
+    <button data-scope="user" class="on">用户级</button>
+    <button data-scope="project">项目级</button>
+  </div>
+  <button class="act" id="refresh">刷新</button>
+  <button class="act" id="expMd">导出 MD</button>
+  <button class="act" id="expJson">导出 JSON</button>
+</header>
+<main>
+  <div class="cards" id="cards"></div>
+  <div class="filters">
+    <select id="fStatus">
+      <option value="all">全部状态</option>
+      <option value="active">active</option>
+      <option value="archived">archived</option>
+      <option value="forgotten">forgotten</option>
+    </select>
+    <select id="fKind">
+      <option value="all">全部种类</option>
+      <option value="fact">fact</option>
+      <option value="preference">preference</option>
+      <option value="decision">decision</option>
+      <option value="episode">episode</option>
+      <option value="skill">skill</option>
+    </select>
+    <input id="fQ" placeholder="按内容搜索…">
+  </div>
+  <div id="list"></div>
+  <div class="pager">
+    <button class="act" id="prev">上一页</button>
+    <span id="pageInfo"></span>
+    <button class="act" id="next">下一页</button>
+  </div>
+</main>
+<dialog id="editDlg">
+  <h3>编辑记忆（写入取代链）</h3>
+  <div class="f"><label>内容</label><textarea id="eContent" rows="3"></textarea></div>
+  <div class="f"><label>种类</label>
+    <select id="eKind">
+      <option value="fact">fact</option><option value="preference">preference</option>
+      <option value="decision">decision</option><option value="episode">episode</option>
+      <option value="skill">skill</option>
+    </select>
+  </div>
+  <div class="f"><label>重要性：<span id="eImpV">0.5</span></label>
+    <input type="range" id="eImp" min="0" max="1" step="0.05" value="0.5">
+  </div>
+  <div class="modal-foot">
+    <button class="act" id="eCancel">取消</button>
+    <button class="act primary" id="eSave">保存（旧条目归档）</button>
+  </div>
+</dialog>
+<dialog id="reviewDlg">
+  <h3>记忆审计</h3>
+  <pre id="rBody"></pre>
+  <div class="modal-foot"><button class="act" id="rClose">关闭</button></div>
+</dialog>
+<script>
+(function () {
+  'use strict';
+  var state = { scope: 'user', status: 'all', kind: 'all', q: '', limit: 20, offset: 0, total: 0 };
+  var $ = function (id) { return document.getElementById(id); };
+  function el(tag, cls, text) {
+    var node = document.createElement(tag);
+    if (cls) node.className = cls;
+    if (text !== undefined) node.textContent = text;
+    return node;
+  }
+  function api(path, opts) {
+    return fetch('/api/engram/' + path, opts).then(function (res) {
+      return res.json().then(function (body) {
+        if (!res.ok) throw new Error(body && body.error ? body.error : ('HTTP ' + res.status));
+        return body;
+      });
+    });
+  }
+  function fmtTime(ms) { return new Date(ms).toLocaleString('zh-CN', { hour12: false }); }
+  function bar(v) {
+    var wrap = el('span', 'bar');
+    var fill = el('i');
+    fill.style.width = Math.round(v * 100) + '%';
+    wrap.appendChild(fill);
+    return wrap;
+  }
+  function loadStats() {
+    return api('stats').then(function (data) {
+      var cards = $('cards');
+      cards.textContent = '';
+      data.parts.forEach(function (part) {
+        var s = part.stats;
+        var on = part.scope === state.scope;
+        var card = el('div', 'card');
+        if (on) card.style.borderColor = 'var(--accent)';
+        card.style.cursor = 'pointer';
+        card.appendChild(el('b', undefined, String(s.total)));
+        card.appendChild(el('span', undefined, part.scope + ' · active ' + s.active + ' · 信噪比 ' + Math.round(s.signalRatio * 100) + '%'));
+        card.addEventListener('click', function () { setScope(part.scope); });
+        cards.appendChild(card);
+      });
+    }).catch(function (e) { console.warn(e); });
+  }
+  function loadList() {
+    var qs = 'scope=' + state.scope + '&status=' + state.status + '&kind=' + state.kind
+      + '&limit=' + state.limit + '&offset=' + state.offset
+      + (state.q ? '&q=' + encodeURIComponent(state.q) : '');
+    return api('list?' + qs).then(function (data) {
+      state.total = data.total;
+      var list = $('list');
+      list.textContent = '';
+      if (data.records.length === 0) { list.appendChild(el('div', 'empty', '没有符合条件的记忆')); }
+      data.records.forEach(function (record) {
+        var item = el('div', 'item');
+        var row1 = el('div', 'row1');
+        row1.appendChild(el('span', 'badge ' + record.status, record.status));
+        row1.appendChild(el('span', 'badge', record.kind));
+        row1.appendChild(el('span', 'badge', record.scope));
+        item.appendChild(row1);
+        item.appendChild(el('div', 'content', record.content));
+        var meta = el('div', 'meta');
+        meta.appendChild(el('span', undefined, '重要性 ' + record.importance.toFixed(2) + ' '));
+        meta.appendChild(bar(record.importance));
+        meta.appendChild(el('span', undefined, '置信 ' + record.confidence.toFixed(2) + ' '));
+        meta.appendChild(bar(record.confidence));
+        meta.appendChild(el('span', undefined, '访问 ' + record.accessCount + ' 次'));
+        var source = record.sourceSessionId
+          ? '来源 ' + record.sourceSessionId.slice(0, 16) + '…' + (record.sourceRound === null ? '' : ' 第' + record.sourceRound + '轮')
+          : '显式保存';
+        meta.appendChild(el('span', undefined, source));
+        meta.appendChild(el('span', undefined, fmtTime(record.createdAt)));
+        item.appendChild(meta);
+        var ops = el('div', 'ops');
+        var reviewBtn = el('button', 'act', '详情');
+        reviewBtn.addEventListener('click', function () { openReview(record); });
+        var editBtn = el('button', 'act', '编辑');
+        editBtn.addEventListener('click', function () { openEdit(record); });
+        ops.appendChild(reviewBtn);
+        ops.appendChild(editBtn);
+        if (record.status === 'active') {
+          var forgetBtn = el('button', 'act', '遗忘');
+          forgetBtn.addEventListener('click', function () { post('forget', record, '已遗忘（可恢复）'); });
+          ops.appendChild(forgetBtn);
+        } else {
+          var restoreBtn = el('button', 'act', '恢复');
+          restoreBtn.addEventListener('click', function () { post('restore', record, '已恢复为 active'); });
+          ops.appendChild(restoreBtn);
+        }
+        item.appendChild(ops);
+        list.appendChild(item);
+      });
+      var page = Math.floor(state.offset / state.limit) + 1;
+      var pages = Math.max(1, Math.ceil(state.total / state.limit));
+      $('pageInfo').textContent = '第 ' + page + ' / ' + pages + ' 页 · 共 ' + state.total + ' 条';
+      $('prev').disabled = state.offset === 0;
+      $('next').disabled = state.offset + state.limit >= state.total;
+    }).catch(function (e) {
+      $('list').textContent = '';
+      $('list').appendChild(el('div', 'empty', '加载失败：' + e.message));
+    });
+  }
+  function reload() { loadStats(); loadList(); }
+  function setScope(scope) {
+    state.scope = scope; state.offset = 0;
+    document.querySelectorAll('#scopeTabs button').forEach(function (b) {
+      b.classList.toggle('on', b.dataset.scope === scope);
+    });
+    reload();
+  }
+  function post(route, record, okText) {
+    api(route, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ id: record.id, scope: record.scope }),
+    }).then(function () { reload(); }).catch(function (e) { alert(e.message); });
+  }
+  function openReview(record) {
+    api('review?scope=' + record.scope + '&id=' + encodeURIComponent(record.id)).then(function (view) {
+      var r = view.record;
+      var lines = [
+        '内容: ' + r.content,
+        '属性: kind=' + r.kind + ', status=' + r.status + ', importance=' + r.importance + ', confidence=' + r.confidence + ', 访问 ' + r.accessCount + ' 次',
+        '来源: ' + (r.sourceSessionId ? r.sourceSessionId + (r.sourceRound === null ? '' : ' 第' + r.sourceRound + '轮') + (r.sourceSeq === null ? '' : ' seq ' + r.sourceSeq) : '显式保存'),
+      ];
+      if (view.supersededBy.length) lines.push('被谁取代: ' + view.supersededBy.join(', '));
+      if (view.supersedes.length) lines.push('取代了谁: ' + view.supersedes.join(', '));
+      if (view.contradicts.length) lines.push('矛盾候选: ' + view.contradicts.join(', '));
+      if (view.related.length) lines.push('关联: ' + view.related.join(', '));
+      if (view.operations.length) {
+        lines.push('最近操作:');
+        view.operations.forEach(function (op) {
+          lines.push('  ' + fmtTime(op.at) + ' ' + op.op + (op.detail ? ' ' + op.detail : ''));
+        });
+      }
+      $('rBody').textContent = lines.join('\\n');
+      $('reviewDlg').showModal();
+    }).catch(function (e) { alert(e.message); });
+  }
+  function openEdit(record) {
+    $('eContent').value = record.content;
+    $('eKind').value = record.kind;
+    $('eImp').value = record.importance;
+    $('eImpV').textContent = record.importance.toFixed(2);
+    $('eSave').onclick = function () {
+      api('update', {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({
+          id: record.id, scope: record.scope,
+          content: $('eContent').value, kind: $('eKind').value,
+          importance: Number($('eImp').value),
+        }),
+      }).then(function () { $('editDlg').close(); reload(); })
+        .catch(function (e) { alert(e.message); });
+    };
+    $('editDlg').showModal();
+  }
+  document.querySelectorAll('#scopeTabs button').forEach(function (b) {
+    b.addEventListener('click', function () { setScope(b.dataset.scope); });
+  });
+  $('refresh').addEventListener('click', reload);
+  $('expMd').addEventListener('click', function () { location.href = '/api/engram/export?scope=' + state.scope + '&format=markdown'; });
+  $('expJson').addEventListener('click', function () { location.href = '/api/engram/export?scope=' + state.scope + '&format=json'; });
+  $('fStatus').addEventListener('change', function (e) { state.status = e.target.value; state.offset = 0; loadList(); });
+  $('fKind').addEventListener('change', function (e) { state.kind = e.target.value; state.offset = 0; loadList(); });
+  var qTimer = null;
+  $('fQ').addEventListener('input', function (e) {
+    clearTimeout(qTimer);
+    qTimer = setTimeout(function () { state.q = e.target.value.trim(); state.offset = 0; loadList(); }, 300);
+  });
+  $('prev').addEventListener('click', function () { state.offset = Math.max(0, state.offset - state.limit); loadList(); });
+  $('next').addEventListener('click', function () { state.offset += state.limit; loadList(); });
+  $('eImp').addEventListener('input', function (e) { $('eImpV').textContent = Number(e.target.value).toFixed(2); });
+  $('eCancel').addEventListener('click', function () { $('editDlg').close(); });
+  $('rClose').addEventListener('click', function () { $('reviewDlg').close(); });
+  reload();
+})();
+<\/script>
+</body>
+</html>
+`;
+//#endregion
+//#region src/routes.ts
+/** 回环 peer：IPv4 127/8、IPv6 ::1、IPv4-mapped IPv6。 */
+function isLoopbackPeer(req) {
+	const address = req.socket.remoteAddress;
+	if (address === void 0) return false;
+	return address === "::1" || address.startsWith("127.") || address.startsWith("::ffff:127.");
+}
+/** Host 头必须为回环字面量（防 DNS rebinding：拒绝 `127.0.0.1.attacker.com`）。 */
+function isLoopbackHost(req) {
+	const host = req.headers.host;
+	if (host === void 0 || host === "") return true;
+	const name = host.split(":")[0];
+	return name === "localhost" || name === "::1" || name !== void 0 && /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(name);
+}
+/** 写操作的 Origin 必须为回环（防跨站表单/fetch）。缺失视为放行，由 Content-Type 兜底。 */
+function isLoopbackOrigin(origin) {
+	if (origin === void 0 || origin === "") return true;
+	try {
+		const host = new URL(origin).hostname;
+		return host === "localhost" || host === "::1" || /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(host);
+	} catch {
+		return false;
+	}
+}
+/**
+* 回环守卫：仅放行回环 GET/POST 请求（peer + Host 同时校验）。
+* @returns 是否放行；false = 已拒绝并结束响应。
+*/
+function guardLoopback(req, res) {
+	if (!(req.method === "GET" || req.method === "POST") || !isLoopbackPeer(req) || !isLoopbackHost(req)) {
+		res.writeHead(403, { "content-type": "application/json; charset=utf-8" });
+		res.end(JSON.stringify({ error: "forbidden: loopback only" }));
+		return false;
+	}
+	return true;
+}
+/** 写操作守卫：Origin 回环 + Content-Type JSON。 */
+function guardWrite(req, res) {
+	if (!isLoopbackOrigin(req.headers.origin)) {
+		res.writeHead(403, { "content-type": "application/json; charset=utf-8" });
+		res.end(JSON.stringify({ error: "forbidden: loopback only" }));
+		return false;
+	}
+	if (!(req.headers["content-type"] ?? "").toLowerCase().includes("application/json")) {
+		res.writeHead(415, { "content-type": "application/json; charset=utf-8" });
+		res.end(JSON.stringify({ error: "unsupported content-type" }));
+		return false;
+	}
+	return true;
+}
+/** 读取并解析 JSON body（上限 64 KiB，防坏/恶意 body 拖住 handler）。 */
+async function readJsonBody(req) {
+	let body = "";
+	for await (const chunk of req) {
+		body += String(chunk);
+		if (body.length > 65536) return null;
+	}
+	try {
+		const parsed = JSON.parse(body === "" ? "{}" : body);
+		return parsed !== null && typeof parsed === "object" ? parsed : null;
+	} catch {
+		return null;
+	}
+}
+function json(res, status, body) {
+	res.writeHead(status, { "content-type": "application/json; charset=utf-8" });
+	res.end(JSON.stringify(body));
+}
+/** 从 URL searchParams 收敛 scope（缺省 user）。 */
+function scopeOf$1(raw, fallback) {
+	return raw === "user" || raw === "project" ? raw : fallback;
+}
+/**
+* 注册 /engram 页面与 /api/engram/* 接口（effect 由调用方持有，disposer 可逆）。
+* @param ctx - 携带 webServer 服务的宿主上下文。
+*/
+function registerEngramRoutes(ctx, deps) {
+	ctx.effect(() => ctx.webServer.register({
+		kind: "exact",
+		path: "/engram",
+		handler: async (req, res) => {
+			if (!guardLoopback(req, res)) return;
+			res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+			res.end(PAGE_HTML);
+		}
+	}), "dsh-engram: page route");
+	ctx.effect(() => ctx.webServer.register({
+		kind: "prefix",
+		path: "/api/engram",
+		handler: async (req, res) => {
+			if (!guardLoopback(req, res)) return;
+			const url = new URL(req.url ?? "/", "http://127.0.0.1");
+			const route = url.pathname.slice(12);
+			try {
+				if (req.method === "GET" && route === "stats") {
+					json(res, 200, { parts: await Promise.all(["user", "project"].map(async (scope) => ({
+						scope,
+						stats: await (await deps.openStore(scope)).stats()
+					}))) });
+					return;
+				}
+				if (req.method === "GET" && route === "list") {
+					const scope = scopeOf$1(url.searchParams.get("scope"), "user");
+					const status = url.searchParams.get("status");
+					const kind = url.searchParams.get("kind");
+					const q = url.searchParams.get("q");
+					const limit = Math.min(100, Math.max(1, Number(url.searchParams.get("limit") ?? 20) || 20));
+					const offset = Math.max(0, Number(url.searchParams.get("offset") ?? 0) || 0);
+					const filter = {
+						scope,
+						...status !== null && status !== "" && status !== "all" ? { status } : {},
+						...kind !== null && kind !== "" && kind !== "all" ? { kind } : {},
+						...q !== null && q !== "" ? { q } : {},
+						limit,
+						offset
+					};
+					json(res, 200, await (await deps.openStore(scope)).list(filter));
+					return;
+				}
+				if (req.method === "GET" && route === "review") {
+					const scope = scopeOf$1(url.searchParams.get("scope"), "user");
+					const id = url.searchParams.get("id");
+					if (id === null || id === "") {
+						json(res, 400, { error: "id required" });
+						return;
+					}
+					const view = await (await deps.openStore(scope)).review(id);
+					view === void 0 || view.operations;
+					if (view === void 0) {
+						json(res, 404, { error: `未找到条目 ${id}` });
+						return;
+					}
+					json(res, 200, view);
+					return;
+				}
+				if (req.method === "GET" && route === "export") {
+					const scope = scopeOf$1(url.searchParams.get("scope"), "user");
+					const format = url.searchParams.get("format") === "json" ? "json" : "markdown";
+					const data = await (await deps.openStore(scope)).exportAll();
+					const stamp = (/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-");
+					const body = format === "json" ? JSON.stringify(data, null, 2) : [
+						`# dsh-engram 导出（${scope}）`,
+						"",
+						...data.records.map((record) => `- [${record.status}/${record.kind}] ${record.content}（id=${record.id}，importance ${record.importance}）`),
+						"",
+						"## 关系边",
+						...data.edges.map((edge) => `- ${edge.from} --${edge.type}--> ${edge.to}`),
+						""
+					].join("\n");
+					res.writeHead(200, {
+						"content-type": format === "json" ? "application/json; charset=utf-8" : "text/markdown; charset=utf-8",
+						"content-disposition": `attachment; filename="engram-${scope}-${stamp}.${format}"`
+					});
+					res.end(body);
+					return;
+				}
+				if (req.method === "POST" && (route === "update" || route === "forget" || route === "restore")) {
+					if (!guardWrite(req, res)) return;
+					const body = await readJsonBody(req);
+					if (body === null || typeof body.id !== "string" || body.id === "") {
+						json(res, 400, { error: "id required" });
+						return;
+					}
+					const scope = scopeOf$1(typeof body.scope === "string" ? body.scope : null, "user");
+					const store = await deps.openStore(scope);
+					if (route === "update") {
+						if (typeof body.content !== "string" || body.content.trim() === "") {
+							json(res, 400, { error: "content required" });
+							return;
+						}
+						const old = await store.get(body.id);
+						if (old === void 0) {
+							json(res, 404, { error: `未找到条目 ${body.id}` });
+							return;
+						}
+						json(res, 200, { record: await store.update({
+							id: body.id,
+							scope,
+							kind: typeof body.kind === "string" && [
+								"fact",
+								"preference",
+								"decision",
+								"episode",
+								"skill"
+							].includes(body.kind) ? body.kind : old.kind,
+							content: body.content,
+							...typeof body.importance === "number" && Number.isFinite(body.importance) ? { importance: Math.min(1, Math.max(0, body.importance)) } : {}
+						}) });
+						return;
+					}
+					json(res, 200, { record: route === "forget" ? await store.forget(body.id) : await store.restore(body.id) });
+					return;
+				}
+				json(res, 404, { error: "unknown route" });
+			} catch (error) {
+				json(res, 500, { error: error instanceof Error ? error.message : String(error) });
+			}
+		}
+	}), "dsh-engram: api routes");
+}
+//#endregion
 //#region src/store/sqlite.ts
 /**
 * EngramStore 的 node:sqlite 实现：节点表 + 边表 + FTS5（unicode61 + 中文 2-gram 预切词）
@@ -703,6 +1206,28 @@ async function openEngramStore(path) {
 		async topActive(scope, n) {
 			return sqlTopActive.all(scope, n).map(rowToRecord);
 		},
+		async list(filter) {
+			const conds = ["scope = ?"];
+			const params = [filter.scope];
+			if (filter.status !== void 0) {
+				conds.push("status = ?");
+				params.push(filter.status);
+			}
+			if (filter.kind !== void 0) {
+				conds.push("kind = ?");
+				params.push(filter.kind);
+			}
+			if (filter.q !== void 0 && filter.q !== "") {
+				conds.push("instr(content, ?) > 0");
+				params.push(filter.q);
+			}
+			const where = conds.join(" AND ");
+			const total = db.prepare(`SELECT COUNT(*) AS n FROM nodes WHERE ${where}`).get(...params).n;
+			return {
+				records: db.prepare(`SELECT * FROM nodes WHERE ${where} ORDER BY created_at DESC LIMIT ? OFFSET ?`).all(...params, filter.limit, filter.offset).map(rowToRecord),
+				total
+			};
+		},
 		async review(id) {
 			const row = getRow(id);
 			if (row === void 0) return void 0;
@@ -1549,6 +2074,12 @@ function apply(ctx, config = {}) {
 		routeOverride: resolved.routeOverride,
 		exportDir: `${resolved.dbDir}/exports`
 	})) ctx.tools.register(tool);
+	ctx.inject(["webServer"], (webCtx) => {
+		registerEngramRoutes(webCtx, {
+			openStore,
+			exportDir: `${resolved.dbDir}/exports`
+		});
+	});
 	if (resolved.injectProfile || resolved.ingest !== "off") ctx.on("agent/pre-step", (payload, next) => preStep(ctx, openStore, resolved, embedder, payload, next), { prepend: true });
 	const runDecay = async () => {
 		for (const scope of ["user", "project"]) {

package/package.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "name": "@kenz1117/dsh-engram",
   "description": "Cross-session long-term memory for DeepSeek Harness: dual-scope SQLite memory graph, hybrid retrieval, provenance audit, and a knowledge flywheel.",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "publishConfig": {
     "access": "public"
   },

package/scripts/link-peers.mjs CHANGED Viewed

@@ -28,6 +28,7 @@ const LINKED_PACKAGES = [
   ['@deepseek-ai/dsh-tools', 'packages/core/tools'],
   ['@deepseek-ai/dsh-system-prompt', 'packages/core/system-prompt'],
   ['@deepseek-ai/dsh-session', 'packages/core/session'],
+  ['@deepseek-ai/dsh-host-webserver', 'packages/host/webserver'],
   ['@deepseek-ai/dsh-llm', 'packages/llm/llm'],
   ['@deepseek-ai/dsh-agent', 'packages/core/agent'],
   ['@deepseek-ai/dsh-scope', 'packages/core/scope'],