@memtensor/memos-local-openclaw-plugin 1.0.2 → 1.0.4-beta.0

package/dist/viewer/server.js

@@ -38,6 +38,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ViewerServer = void 0;
 const node_http_1 = __importDefault(require("node:http"));
+const node_os_1 = __importDefault(require("node:os"));
 const node_crypto_1 = __importDefault(require("node:crypto"));
 const node_child_process_1 = require("node:child_process");
 const node_fs_1 = __importDefault(require("node:fs"));
@@ -50,6 +51,10 @@ const vector_1 = require("../storage/vector");
 const task_processor_1 = require("../ingest/task-processor");
 const engine_1 = require("../recall/engine");
 const evolver_1 = require("../skill/evolver");
+const config_1 = require("../config");
+const connector_1 = require("../client/connector");
+const hub_1 = require("../client/hub");
+const skill_sync_1 = require("../client/skill-sync");
 const html_1 = require("./html");
 const uuid_1 = require("uuid");
 function normalizeTimestamp(ts) {
@@ -224,7 +229,7 @@ class ViewerServer {
             if (p === "/api/memories" && req.method === "GET")
                 this.serveMemories(res, url);
             else if (p === "/api/stats")
-                this.serveStats(res);
+                this.serveStats(res, url);
             else if (p === "/api/metrics")
                 this.serveMetrics(res, url);
             else if (p === "/api/tool-metrics")
@@ -269,6 +274,74 @@ class ViewerServer {
                 this.serveLogs(res, url);
             else if (p === "/api/log-tools" && req.method === "GET")
                 this.serveLogTools(res);
+            else if (p === "/api/sharing/status" && req.method === "GET")
+                this.serveSharingStatus(res);
+            else if (p === "/api/sharing/pending-users" && req.method === "GET")
+                this.serveSharingPendingUsers(res);
+            else if (p === "/api/sharing/approve-user" && req.method === "POST")
+                this.handleSharingApproveUser(req, res);
+            else if (p === "/api/sharing/reject-user" && req.method === "POST")
+                this.handleSharingRejectUser(req, res);
+            else if (p === "/api/sharing/search/memories" && req.method === "POST")
+                this.handleSharingMemorySearch(req, res);
+            else if (p === "/api/sharing/memories/list" && req.method === "GET")
+                this.serveSharingMemoryList(res, url);
+            else if (p === "/api/sharing/tasks/list" && req.method === "GET")
+                this.serveSharingTaskList(res, url);
+            else if (p === "/api/sharing/skills/list" && req.method === "GET")
+                this.serveSharingSkillList(res, url);
+            else if (p === "/api/sharing/memory-detail" && req.method === "POST")
+                this.handleSharingMemoryDetail(req, res);
+            else if (p === "/api/sharing/search/skills" && req.method === "GET")
+                this.serveSharingSkillSearch(res, url);
+            else if (p === "/api/sharing/tasks/share" && req.method === "POST")
+                this.handleSharingTaskShare(req, res);
+            else if (p === "/api/sharing/tasks/unshare" && req.method === "POST")
+                this.handleSharingTaskUnshare(req, res);
+            else if (p === "/api/sharing/update-username" && req.method === "POST")
+                this.handleUpdateUsername(req, res);
+            else if (p === "/api/sharing/test-hub" && req.method === "POST")
+                this.handleTestHubConnection(req, res);
+            else if (p === "/api/sharing/memories/share" && req.method === "POST")
+                this.handleSharingMemoryShare(req, res);
+            else if (p === "/api/sharing/memories/unshare" && req.method === "POST")
+                this.handleSharingMemoryUnshare(req, res);
+            else if (p === "/api/sharing/skills/pull" && req.method === "POST")
+                this.handleSharingSkillPull(req, res);
+            else if (p === "/api/sharing/skills/share" && req.method === "POST")
+                this.handleSharingSkillShare(req, res);
+            else if (p === "/api/sharing/skills/unshare" && req.method === "POST")
+                this.handleSharingSkillUnshare(req, res);
+            else if (p === "/api/sharing/groups" && req.method === "GET")
+                this.serveSharingGroups(res);
+            else if (p === "/api/sharing/groups" && req.method === "POST")
+                this.handleSharingGroupCreate(req, res);
+            else if (p.match(/^\/api\/sharing\/groups\/[^/]+$/) && req.method === "PUT")
+                this.handleSharingGroupUpdate(req, res, p);
+            else if (p.match(/^\/api\/sharing\/groups\/[^/]+$/) && req.method === "DELETE")
+                this.handleSharingGroupDelete(res, p);
+            else if (p.match(/^\/api\/sharing\/groups\/[^/]+\/members$/) && req.method === "GET")
+                this.serveSharingGroupMembers(res, p);
+            else if (p.match(/^\/api\/sharing\/groups\/[^/]+\/members$/) && req.method === "POST")
+                this.handleSharingGroupAddMember(req, res, p);
+            else if (p.match(/^\/api\/sharing\/groups\/[^/]+\/members$/) && req.method === "DELETE")
+                this.handleSharingGroupRemoveMember(req, res, p);
+            else if (p === "/api/sharing/users" && req.method === "GET")
+                this.serveSharingUsers(res);
+            else if (p === "/api/admin/shared-tasks" && req.method === "GET")
+                this.serveAdminSharedTasks(res);
+            else if (p.match(/^\/api\/admin\/shared-tasks\/[^/]+$/) && req.method === "DELETE")
+                this.handleAdminDeleteTask(res, p);
+            else if (p === "/api/admin/shared-skills" && req.method === "GET")
+                this.serveAdminSharedSkills(res);
+            else if (p.match(/^\/api\/admin\/shared-skills\/[^/]+$/) && req.method === "DELETE")
+                this.handleAdminDeleteSkill(res, p);
+            else if (p === "/api/admin/shared-memories" && req.method === "GET")
+                this.serveAdminSharedMemories(res);
+            else if (p.match(/^\/api\/admin\/shared-memories\/[^/]+$/) && req.method === "DELETE")
+                this.handleAdminDeleteMemory(res, p);
+            else if (p === "/api/local-ips" && req.method === "GET")
+                this.serveLocalIPs(res);
             else if (p === "/api/config" && req.method === "GET")
                 this.serveConfig(res);
             else if (p === "/api/config" && req.method === "PUT")
@@ -454,15 +527,28 @@ class ViewerServer {
         const totalRow = db.prepare("SELECT COUNT(*) as count FROM chunks" + where).get(...params);
         const rawMemories = db.prepare("SELECT * FROM chunks" + where + ` ORDER BY created_at ${sortBy} LIMIT ? OFFSET ?`).all(...params, limit, offset);
         const findMergeSources = db.prepare("SELECT id, summary, role FROM chunks WHERE dedup_target = ? AND (dedup_status = 'merged' OR dedup_status = 'duplicate')");
-        const memories = rawMemories.map((m) => {
-            if (m.role === "user" && m.content) {
-                m = { ...m, content: (0, capture_1.stripInboundMetadata)(m.content) };
+        const chunkIds = rawMemories.map((m) => m.id);
+        const sharingMap = new Map();
+        if (chunkIds.length > 0) {
+            try {
+                const placeholders = chunkIds.map(() => "?").join(",");
+                const sharedRows = db.prepare(`SELECT source_chunk_id, visibility, group_id FROM hub_memories WHERE source_chunk_id IN (${placeholders})`).all(...chunkIds);
+                for (const r of sharedRows)
+                    sharingMap.set(r.source_chunk_id, r);
+            }
+            catch {
             }
-            if (m.merge_count > 0) {
+        }
+        const memories = rawMemories.map((m) => {
+            const out = m.role === "user" && m.content ? { ...m, content: (0, capture_1.stripInboundMetadata)(m.content) } : { ...m };
+            if (out.merge_count > 0) {
                 const sources = findMergeSources.all(m.id);
-                m.merge_sources = sources;
+                out.merge_sources = sources;
             }
-            return m;
+            const shared = sharingMap.get(m.id);
+            out.sharingVisibility = shared?.visibility ?? null;
+            out.sharingGroupId = shared?.group_id ?? null;
+            return out;
         });
         this.store.recordViewerEvent("list");
         this.jsonResponse(res, {
@@ -527,6 +613,7 @@ class ViewerServer {
         }));
         const db = this.store.db;
         const meta = db.prepare("SELECT skill_status, skill_reason FROM tasks WHERE id = ?").get(taskId);
+        const sharedTask = db.prepare("SELECT visibility, group_id FROM hub_tasks WHERE source_task_id = ? ORDER BY updated_at DESC LIMIT 1").get(taskId);
         this.jsonResponse(res, {
             id: task.id,
             sessionKey: task.sessionKey,
@@ -539,9 +626,11 @@ class ViewerServer {
             skillStatus: meta?.skill_status ?? null,
             skillReason: meta?.skill_reason ?? null,
             skillLinks,
+            sharingVisibility: sharedTask?.visibility ?? null,
+            sharingGroupId: sharedTask?.group_id ?? null,
         });
     }
-    serveStats(res) {
+    serveStats(res, url) {
         const emptyStats = {
             totalMemories: 0, totalSessions: 0, totalEmbeddings: 0, totalSkills: 0,
             embeddingProvider: this.embedder?.provider ?? "none",
@@ -553,6 +642,7 @@ class ViewerServer {
             this.jsonResponse(res, emptyStats);
             return;
         }
+        const ownerFilter = url?.searchParams.get("owner") ?? "";
         try {
             const db = this.store.db;
             const total = db.prepare("SELECT COUNT(*) as count FROM chunks").get();
@@ -571,7 +661,12 @@ class ViewerServer {
                 embCount = db.prepare("SELECT COUNT(*) as count FROM embeddings").get().count;
             }
             catch { /* table may not exist */ }
-            const sessionList = db.prepare("SELECT session_key, COUNT(*) as count, MIN(created_at) as earliest, MAX(created_at) as latest FROM chunks GROUP BY session_key ORDER BY latest DESC").all();
+            const sessionQuery = ownerFilter
+                ? "SELECT session_key, COUNT(*) as count, MIN(created_at) as earliest, MAX(created_at) as latest FROM chunks WHERE owner = ? GROUP BY session_key ORDER BY latest DESC"
+                : "SELECT session_key, COUNT(*) as count, MIN(created_at) as earliest, MAX(created_at) as latest FROM chunks GROUP BY session_key ORDER BY latest DESC";
+            const sessionList = (ownerFilter
+                ? db.prepare(sessionQuery).all(ownerFilter)
+                : db.prepare(sessionQuery).all());
             let skillCount = 0;
             try {
                 skillCount = db.prepare("SELECT COUNT(*) as count FROM skills").get().count;
@@ -733,8 +828,10 @@ class ViewerServer {
         const versions = this.store.getSkillVersions(skillId);
         const relatedTasks = this.store.getTasksBySkill(skillId);
         const files = node_fs_1.default.existsSync(skill.dirPath) ? this.walkDir(skill.dirPath, skill.dirPath) : [];
+        const db = this.store.db;
+        const sharedSkill = db.prepare("SELECT visibility, group_id FROM hub_skills WHERE source_skill_id = ? ORDER BY updated_at DESC LIMIT 1").get(skillId);
         this.jsonResponse(res, {
-            skill,
+            skill: { ...skill, sharingVisibility: sharedSkill?.visibility ?? null, sharingGroupId: sharedSkill?.group_id ?? null },
             versions: versions.map(v => ({
                 id: v.id,
                 version: v.version,
@@ -843,7 +940,7 @@ class ViewerServer {
     handleSkillVisibility(req, res, urlPath) {
         const segments = urlPath.split("/");
         const skillId = segments[segments.length - 2];
-        this.readBody(req, (body) => {
+        this.readBody(req, async (body) => {
             try {
                 const parsed = JSON.parse(body);
                 const visibility = parsed.visibility;
@@ -859,7 +956,47 @@ class ViewerServer {
                     return;
                 }
                 this.store.setSkillVisibility(skillId, visibility);
-                this.jsonResponse(res, { ok: true, skillId, visibility });
+                let hubSynced = false;
+                const sharing = this.ctx?.config?.sharing;
+                if (sharing?.enabled && this.ctx) {
+                    try {
+                        const hubClient = await this.resolveHubClientAware();
+                        if (visibility === "public") {
+                            const bundle = (0, skill_sync_1.buildSkillBundleForHub)(this.store, skillId);
+                            const response = await (0, hub_1.hubRequestJson)(hubClient.hubUrl, hubClient.userToken, "/api/v1/hub/skills/publish", {
+                                method: "POST",
+                                body: JSON.stringify({ visibility: "public", groupId: null, metadata: bundle.metadata, bundle: bundle.bundle }),
+                            });
+                            if (hubClient.userId) {
+                                const existing = this.store.getHubSkillBySource(hubClient.userId, skillId);
+                                this.store.upsertHubSkill({
+                                    id: response?.skillId ?? existing?.id ?? node_crypto_1.default.randomUUID(),
+                                    sourceSkillId: skillId, sourceUserId: hubClient.userId,
+                                    name: skill.name, description: skill.description, version: skill.version,
+                                    groupId: null, visibility: "public",
+                                    bundle: JSON.stringify(bundle.bundle), qualityScore: skill.qualityScore,
+                                    createdAt: existing?.createdAt ?? Date.now(), updatedAt: Date.now(),
+                                });
+                            }
+                            hubSynced = true;
+                            this.log.info(`Skill "${skill.name}" published to Hub`);
+                        }
+                        else {
+                            await (0, hub_1.hubRequestJson)(hubClient.hubUrl, hubClient.userToken, "/api/v1/hub/skills/unpublish", {
+                                method: "POST",
+                                body: JSON.stringify({ sourceSkillId: skillId }),
+                            });
+                            if (hubClient.userId)
+                                this.store.deleteHubSkillBySource(hubClient.userId, skillId);
+                            hubSynced = true;
+                            this.log.info(`Skill "${skill.name}" unpublished from Hub`);
+                        }
+                    }
+                    catch (hubErr) {
+                        this.log.warn(`Hub sync failed for skill visibility change: ${hubErr}`);
+                    }
+                }
+                this.jsonResponse(res, { ok: true, skillId, visibility, hubSynced });
             }
             catch (err) {
                 const errMsg = err instanceof Error ? `${err.name}: ${err.message}` : String(err);
@@ -1070,6 +1207,824 @@ class ViewerServer {
         const home = process.env.HOME || process.env.USERPROFILE || "";
         return node_path_1.default.join(home, ".openclaw", "openclaw.json");
     }
+    getPluginEntryConfig(raw) {
+        const entries = raw?.plugins?.entries ?? {};
+        return entries["memos-local-openclaw-plugin"]?.config
+            ?? entries["memos-lite-openclaw-plugin"]?.config
+            ?? entries["memos-lite"]?.config
+            ?? {};
+    }
+    getResolvedViewerConfig(raw) {
+        const pluginCfg = this.getPluginEntryConfig(raw);
+        const stateDir = this.ctx?.stateDir ?? this.getOpenClawHome();
+        return (0, config_1.resolveConfig)(pluginCfg, stateDir);
+    }
+    hasUsableEmbeddingProvider(cfg) {
+        const embedding = cfg.embedding;
+        if (!embedding?.provider)
+            return false;
+        if (embedding.provider === "openclaw") {
+            return !!(this.ctx?.openclawAPI) && embedding.capabilities?.hostEmbedding === true;
+        }
+        return true;
+    }
+    hasUsableSummarizerProvider(cfg) {
+        const summarizer = cfg.summarizer;
+        if (!summarizer?.provider)
+            return false;
+        if (summarizer.provider === "openclaw") {
+            return !!(this.ctx?.openclawAPI) && summarizer.capabilities?.hostCompletion === true;
+        }
+        return true;
+    }
+    async serveSharingStatus(res) {
+        const sharing = this.ctx?.config?.sharing;
+        const persisted = this.store.getClientHubConnection();
+        const resolvedHubUrl = sharing?.client?.hubAddress ? (0, hub_1.normalizeHubUrl)(sharing.client.hubAddress) : persisted?.hubUrl ?? null;
+        const hasClientConfig = Boolean((sharing?.client?.hubAddress && sharing?.client?.userToken) ||
+            (persisted?.hubUrl && persisted?.userToken));
+        const base = {
+            enabled: Boolean(sharing?.enabled),
+            role: sharing?.role ?? null,
+            clientConfigured: hasClientConfig,
+            hubUrl: resolvedHubUrl,
+            connection: { connected: false, user: null, hubUrl: undefined, teamName: null, apiVersion: null },
+            admin: { canManageUsers: false, rejectSupported: false },
+        };
+        if (!this.ctx || !sharing?.enabled) {
+            this.jsonResponse(res, base);
+            return;
+        }
+        // Hub 模式下，本机就是管理者，直接赋予 admin 权限
+        if (sharing.role === "hub") {
+            base.admin.canManageUsers = true;
+            base.admin.rejectSupported = true;
+            base.connection.connected = true;
+            base.connection.hubUrl = resolvedHubUrl ?? undefined;
+            // 通过 hub API 获取 admin 用户的真实信息（含分组）
+            let adminUser = { username: "hub-admin", role: "admin", groups: [] };
+            try {
+                const hub = this.resolveHubConnection();
+                if (hub) {
+                    const me = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, "/api/v1/hub/me", { method: "GET" });
+                    if (me) {
+                        adminUser = {
+                            id: me.id,
+                            username: me.username ?? "hub-admin",
+                            role: me.role ?? "admin",
+                            groups: Array.isArray(me.groups) ? me.groups : [],
+                        };
+                    }
+                }
+            }
+            catch { /* fallback to default */ }
+            base.connection.user = adminUser;
+            // Fetch team info from own hub
+            try {
+                const selfUrl = resolvedHubUrl || `http://localhost:${sharing.hub?.port ?? 21816}`;
+                const info = await fetch(`${selfUrl}/api/v1/hub/info`).then(r => r.ok ? r.json() : null).catch(() => null);
+                base.connection.teamName = info?.teamName ?? sharing.hub?.teamName ?? null;
+                base.connection.apiVersion = info?.apiVersion ?? null;
+            }
+            catch { /* ignore */ }
+            this.jsonResponse(res, base);
+            return;
+        }
+        if (!hasClientConfig) {
+            this.jsonResponse(res, base);
+            return;
+        }
+        try {
+            const status = await (0, connector_1.getHubStatus)(this.store, this.ctx.config);
+            const output = { ...base, connection: { ...base.connection, ...status } };
+            if (status.connected && status.hubUrl) {
+                try {
+                    const info = await fetch(`${status.hubUrl}/api/v1/hub/info`).then((r) => (r.ok ? r.json() : null)).catch(() => null);
+                    output.connection.teamName = info?.teamName ?? null;
+                    output.connection.apiVersion = info?.apiVersion ?? null;
+                }
+                catch { }
+            }
+            output.admin.canManageUsers = status.connected && status.user?.role === "admin";
+            output.admin.rejectSupported = output.admin.canManageUsers;
+            this.jsonResponse(res, output);
+        }
+        catch (err) {
+            this.jsonResponse(res, { ...base, error: String(err) });
+        }
+    }
+    async serveSharingPendingUsers(res) {
+        if (!this.ctx)
+            return this.jsonResponse(res, { users: [], error: "sharing_unavailable" });
+        try {
+            const hub = this.resolveHubConnection();
+            if (!hub)
+                return this.jsonResponse(res, { users: [], error: "not_configured" });
+            const data = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, "/api/v1/hub/admin/pending-users", { method: "GET" });
+            this.jsonResponse(res, { users: Array.isArray(data?.users) ? data.users : [] });
+        }
+        catch (err) {
+            this.jsonResponse(res, { users: [], error: String(err) });
+        }
+    }
+    handleSharingApproveUser(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { ok: false, error: "sharing_unavailable" });
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const hub = this.resolveHubConnection();
+                if (!hub)
+                    return this.jsonResponse(res, { ok: false, error: "not_configured" });
+                const result = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, "/api/v1/hub/admin/approve-user", {
+                    method: "POST",
+                    body: JSON.stringify({ userId: parsed.userId, username: parsed.username }),
+                });
+                this.jsonResponse(res, { ok: true, result });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    handleSharingRejectUser(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { ok: false, error: "sharing_unavailable" });
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const hub = this.resolveHubConnection();
+                if (!hub)
+                    return this.jsonResponse(res, { ok: false, error: "not_configured" });
+                const result = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, "/api/v1/hub/admin/reject-user", {
+                    method: "POST",
+                    body: JSON.stringify({ userId: parsed.userId }),
+                });
+                this.jsonResponse(res, { ok: true, result });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    async serveSharingMemoryList(res, url) {
+        if (!this.ctx)
+            return this.jsonResponse(res, { memories: [], error: "sharing_unavailable" });
+        try {
+            const limit = Number(url.searchParams.get("limit") || 40);
+            const data = await (0, hub_1.hubListMemories)(this.store, this.ctx, { limit });
+            this.jsonResponse(res, { memories: Array.isArray(data?.memories) ? data.memories : [] });
+        }
+        catch (err) {
+            this.jsonResponse(res, { memories: [], error: String(err) });
+        }
+    }
+    async serveSharingTaskList(res, url) {
+        if (!this.ctx)
+            return this.jsonResponse(res, { tasks: [], error: "sharing_unavailable" });
+        try {
+            const limit = Number(url.searchParams.get("limit") || 40);
+            const data = await (0, hub_1.hubListTasks)(this.store, this.ctx, { limit });
+            this.jsonResponse(res, { tasks: Array.isArray(data?.tasks) ? data.tasks : [] });
+        }
+        catch (err) {
+            this.jsonResponse(res, { tasks: [], error: String(err) });
+        }
+    }
+    async serveSharingSkillList(res, url) {
+        if (!this.ctx)
+            return this.jsonResponse(res, { skills: [], error: "sharing_unavailable" });
+        try {
+            const limit = Number(url.searchParams.get("limit") || 40);
+            const data = await (0, hub_1.hubListSkills)(this.store, this.ctx, { limit });
+            this.jsonResponse(res, { skills: Array.isArray(data?.skills) ? data.skills : [] });
+        }
+        catch (err) {
+            this.jsonResponse(res, { skills: [], error: String(err) });
+        }
+    }
+    handleSharingMemorySearch(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { local: { hits: [], meta: {} }, hub: { hits: [], meta: { totalCandidates: 0, searchedGroups: [], includedPublic: false } }, error: "sharing_unavailable" });
+            const emptyHub = { hits: [], meta: { totalCandidates: 0, searchedGroups: [], includedPublic: false } };
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const query = String(parsed.query || "");
+                const role = typeof parsed.role === "string" ? parsed.role : undefined;
+                const maxResults = typeof parsed.maxResults === "number" ? parsed.maxResults : 10;
+                const scope = parsed.scope === "group" || parsed.scope === "all" ? parsed.scope : "local";
+                const local = this.searchLocalViewerMemories(query, { role, maxResults });
+                if (scope === "local") {
+                    return this.jsonResponse(res, { local: { hits: local.hits, meta: local.meta }, hub: emptyHub });
+                }
+                try {
+                    const hub = await (0, hub_1.hubSearchMemories)(this.store, this.ctx, { query, maxResults, scope });
+                    this.jsonResponse(res, { local: { hits: local.hits, meta: local.meta }, hub });
+                }
+                catch (err) {
+                    this.jsonResponse(res, { local: { hits: local.hits, meta: local.meta }, hub: emptyHub, error: String(err) });
+                }
+            }
+            catch (err) {
+                this.jsonResponse(res, { local: { hits: [], meta: {} }, hub: emptyHub, error: String(err) });
+            }
+        });
+    }
+    handleSharingMemoryDetail(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { error: "sharing_unavailable" });
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const detail = await (0, hub_1.hubGetMemoryDetail)(this.store, this.ctx, { remoteHitId: String(parsed.remoteHitId || "") });
+                this.jsonResponse(res, detail);
+            }
+            catch (err) {
+                this.jsonResponse(res, { error: String(err) });
+            }
+        });
+    }
+    async serveSharingSkillSearch(res, url) {
+        if (!this.ctx)
+            return this.jsonResponse(res, { local: { hits: [] }, hub: { hits: [] }, error: "sharing_unavailable" });
+        try {
+            const query = String(url.searchParams.get("query") || "");
+            const scope = url.searchParams.get("scope") === "group" || url.searchParams.get("scope") === "all" ? url.searchParams.get("scope") : "local";
+            const recall = new engine_1.RecallEngine(this.store, this.embedder, this.ctx);
+            const localHits = await recall.searchSkills(query, "mix", "agent:main");
+            if (scope === "local") {
+                return this.jsonResponse(res, { local: { hits: localHits }, hub: { hits: [] } });
+            }
+            try {
+                const hub = await (0, hub_1.hubSearchSkills)(this.store, this.ctx, { query, maxResults: Number(url.searchParams.get("maxResults") || 20) });
+                this.jsonResponse(res, { local: { hits: localHits }, hub });
+            }
+            catch (err) {
+                this.jsonResponse(res, { local: { hits: localHits }, hub: { hits: [] }, error: String(err) });
+            }
+        }
+        catch (err) {
+            this.jsonResponse(res, { local: { hits: [] }, hub: { hits: [] }, error: String(err) });
+        }
+    }
+    searchLocalViewerMemories(query, options) {
+        const db = this.store.db;
+        const role = options?.role;
+        const maxResults = options?.maxResults ?? 10;
+        const params = [];
+        let rows = [];
+        try {
+            let sql = "SELECT c.* FROM chunks_fts f JOIN chunks c ON f.rowid = c.rowid WHERE chunks_fts MATCH ?";
+            params.push(query);
+            if (role) {
+                sql += " AND c.role = ?";
+                params.push(role);
+            }
+            sql += " ORDER BY rank LIMIT ?";
+            params.push(maxResults);
+            rows = db.prepare(sql).all(...params);
+        }
+        catch {
+            const likeParams = [`%${query}%`, `%${query}%`];
+            let sql = "SELECT * FROM chunks WHERE (content LIKE ? OR summary LIKE ?)";
+            if (role) {
+                sql += " AND role = ?";
+                likeParams.push(role);
+            }
+            sql += " ORDER BY created_at DESC LIMIT ?";
+            likeParams.push(maxResults);
+            rows = db.prepare(sql).all(...likeParams);
+        }
+        const hits = rows.map((row, idx) => ({
+            id: row.id,
+            summary: row.summary || row.content?.slice(0, 120) || "",
+            excerpt: row.content || "",
+            score: Math.max(0.3, 1 - idx * 0.1),
+            role: row.role,
+            ref: { sessionKey: row.session_key, chunkId: row.id, turnId: row.turn_id, seq: row.seq },
+            taskId: row.task_id ?? null,
+            skillId: row.skill_id ?? null,
+        }));
+        return { hits, meta: { total: hits.length, usedMaxResults: maxResults } };
+    }
+    handleSharingTaskShare(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { ok: false, error: "sharing_unavailable" });
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const taskId = String(parsed.taskId || "");
+                const visibility = parsed.visibility === "group" ? "group" : "public";
+                const groupId = typeof parsed.groupId === "string" ? parsed.groupId : undefined;
+                const task = this.store.getTask(taskId);
+                if (!task)
+                    return this.jsonResponse(res, { ok: false, error: "task_not_found" });
+                const chunks = this.store.getChunksByTask(taskId);
+                if (chunks.length === 0)
+                    return this.jsonResponse(res, { ok: false, error: "no_chunks" });
+                const hubClient = await this.resolveHubClientAware();
+                const response = await (0, hub_1.hubRequestJson)(hubClient.hubUrl, hubClient.userToken, "/api/v1/hub/tasks/share", {
+                    method: "POST",
+                    body: JSON.stringify({
+                        task: {
+                            id: task.id,
+                            sourceTaskId: task.id,
+                            title: task.title,
+                            summary: task.summary,
+                            groupId: visibility === "group" ? groupId ?? null : null,
+                            visibility,
+                            createdAt: task.startedAt ?? Date.now(),
+                            updatedAt: task.updatedAt ?? Date.now(),
+                        },
+                        chunks: chunks.map((chunk) => ({
+                            id: chunk.id,
+                            hubTaskId: task.id,
+                            sourceTaskId: task.id,
+                            sourceChunkId: chunk.id,
+                            role: chunk.role,
+                            content: chunk.content,
+                            summary: chunk.summary,
+                            kind: chunk.kind,
+                            createdAt: chunk.createdAt,
+                        })),
+                    }),
+                });
+                const hubUserId = hubClient.userId;
+                if (hubUserId) {
+                    this.store.upsertHubTask({
+                        id: task.id,
+                        sourceTaskId: task.id,
+                        sourceUserId: hubUserId,
+                        title: task.title,
+                        summary: task.summary,
+                        groupId: visibility === "group" ? groupId ?? null : null,
+                        visibility,
+                        createdAt: task.startedAt ?? Date.now(),
+                        updatedAt: task.updatedAt ?? Date.now(),
+                    });
+                }
+                this.jsonResponse(res, { ok: true, taskId, visibility, response });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    handleSharingTaskUnshare(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { ok: false, error: "sharing_unavailable" });
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const taskId = String(parsed.taskId || "");
+                const task = this.store.getTask(taskId);
+                if (!task)
+                    return this.jsonResponse(res, { ok: false, error: "task_not_found" });
+                const hubClient = await this.resolveHubClientAware();
+                await (0, hub_1.hubRequestJson)(hubClient.hubUrl, hubClient.userToken, "/api/v1/hub/tasks/unshare", {
+                    method: "POST",
+                    body: JSON.stringify({ sourceTaskId: task.id }),
+                });
+                const hubUserId = hubClient.userId;
+                if (hubUserId)
+                    this.store.deleteHubTaskBySource(hubUserId, task.id);
+                this.jsonResponse(res, { ok: true, taskId });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    handleSharingMemoryShare(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { ok: false, error: "sharing_unavailable" });
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const chunkId = String(parsed.chunkId || "");
+                const visibility = parsed.visibility === "group" ? "group" : "public";
+                const groupId = typeof parsed.groupId === "string" ? parsed.groupId : undefined;
+                const db = this.store.db;
+                const chunk = db.prepare("SELECT * FROM chunks WHERE id = ?").get(chunkId);
+                if (!chunk)
+                    return this.jsonResponse(res, { ok: false, error: "memory_not_found" });
+                const hubClient = await this.resolveHubClientAware();
+                const response = await (0, hub_1.hubRequestJson)(hubClient.hubUrl, hubClient.userToken, "/api/v1/hub/memories/share", {
+                    method: "POST",
+                    body: JSON.stringify({
+                        memory: {
+                            sourceChunkId: chunk.id,
+                            role: chunk.role,
+                            content: chunk.content,
+                            summary: chunk.summary,
+                            kind: chunk.kind,
+                            groupId: visibility === "group" ? groupId ?? null : null,
+                            visibility,
+                        },
+                    }),
+                });
+                const hubUserId = hubClient.userId;
+                if (hubUserId) {
+                    const now = Date.now();
+                    const existing = this.store.getHubMemoryBySource(hubUserId, chunk.id);
+                    this.store.upsertHubMemory({
+                        id: response?.memoryId ?? existing?.id ?? node_crypto_1.default.randomUUID(),
+                        sourceChunkId: chunk.id,
+                        sourceUserId: hubUserId,
+                        role: chunk.role,
+                        content: chunk.content,
+                        summary: chunk.summary ?? "",
+                        kind: chunk.kind,
+                        groupId: visibility === "group" ? groupId ?? null : null,
+                        visibility,
+                        createdAt: existing?.createdAt ?? now,
+                        updatedAt: now,
+                    });
+                }
+                this.jsonResponse(res, { ok: true, chunkId, visibility, response });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    handleSharingMemoryUnshare(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { ok: false, error: "sharing_unavailable" });
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const chunkId = String(parsed.chunkId || "");
+                const hubClient = await this.resolveHubClientAware();
+                await (0, hub_1.hubRequestJson)(hubClient.hubUrl, hubClient.userToken, "/api/v1/hub/memories/unshare", {
+                    method: "POST",
+                    body: JSON.stringify({ sourceChunkId: chunkId }),
+                });
+                const hubUserId = hubClient.userId;
+                if (hubUserId)
+                    this.store.deleteHubMemoryBySource(hubUserId, chunkId);
+                this.jsonResponse(res, { ok: true, chunkId });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    handleSharingSkillPull(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { ok: false, error: "sharing_unavailable" });
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const skillId = String(parsed.skillId || "");
+                const payload = await (0, skill_sync_1.fetchHubSkillBundle)(this.store, this.ctx, { skillId });
+                const restored = (0, skill_sync_1.restoreSkillBundleFromHub)(this.store, this.ctx, payload);
+                this.jsonResponse(res, { ok: true, pulled: true, hubSkillId: skillId, ...restored });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    handleSharingSkillShare(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { ok: false, error: "sharing_unavailable" });
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const skillId = String(parsed.skillId || "");
+                const visibility = parsed.visibility === "group" ? "group" : "public";
+                const groupId = parsed.groupId ? String(parsed.groupId) : null;
+                const skill = this.store.getSkill(skillId);
+                if (!skill)
+                    return this.jsonResponse(res, { ok: false, error: "skill_not_found" });
+                const bundle = (0, skill_sync_1.buildSkillBundleForHub)(this.store, skillId);
+                const hubClient = await this.resolveHubClientAware();
+                const response = await (0, hub_1.hubRequestJson)(hubClient.hubUrl, hubClient.userToken, "/api/v1/hub/skills/publish", {
+                    method: "POST",
+                    body: JSON.stringify({
+                        visibility,
+                        groupId: visibility === "group" ? groupId : null,
+                        metadata: bundle.metadata,
+                        bundle: bundle.bundle,
+                    }),
+                });
+                const hubUserId = hubClient.userId;
+                if (hubUserId) {
+                    const existing = this.store.getHubSkillBySource(hubUserId, skillId);
+                    this.store.upsertHubSkill({
+                        id: response?.skillId ?? existing?.id ?? node_crypto_1.default.randomUUID(),
+                        sourceSkillId: skillId,
+                        sourceUserId: hubUserId,
+                        name: skill.name,
+                        description: skill.description,
+                        version: skill.version,
+                        groupId: visibility === "group" ? groupId : null,
+                        visibility,
+                        bundle: JSON.stringify(bundle.bundle),
+                        qualityScore: skill.qualityScore,
+                        createdAt: existing?.createdAt ?? Date.now(),
+                        updatedAt: Date.now(),
+                    });
+                }
+                this.jsonResponse(res, { ok: true, skillId, visibility, response });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    handleSharingSkillUnshare(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { ok: false, error: "sharing_unavailable" });
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const skillId = String(parsed.skillId || "");
+                const skill = this.store.getSkill(skillId);
+                if (!skill)
+                    return this.jsonResponse(res, { ok: false, error: "skill_not_found" });
+                const hubClient = await this.resolveHubClientAware();
+                await (0, hub_1.hubRequestJson)(hubClient.hubUrl, hubClient.userToken, "/api/v1/hub/skills/unpublish", {
+                    method: "POST",
+                    body: JSON.stringify({ sourceSkillId: skill.id }),
+                });
+                const hubUserId = hubClient.userId;
+                if (hubUserId)
+                    this.store.deleteHubSkillBySource(hubUserId, skill.id);
+                this.jsonResponse(res, { ok: true, skillId });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    resolveHubConnection() {
+        if (!this.ctx)
+            return null;
+        // Hub 模式：连接自己，用 bootstrap admin token
+        const sharing = this.ctx.config.sharing;
+        if (sharing?.role === "hub") {
+            const hubPort = sharing.hub?.port ?? 18800;
+            const hubUrl = `http://127.0.0.1:${hubPort}`;
+            try {
+                const authPath = node_path_1.default.join(this.dataDir, "hub-auth.json");
+                const authData = JSON.parse(node_fs_1.default.readFileSync(authPath, "utf8"));
+                const adminToken = authData?.bootstrapAdminToken;
+                if (adminToken)
+                    return { hubUrl, userToken: adminToken };
+            }
+            catch {
+                // hub-auth.json 不存在或读取失败，fall through
+            }
+        }
+        // Client 模式：用配置的 hubAddress + userToken
+        const conn = this.store.getClientHubConnection();
+        const hubUrl = conn?.hubUrl || this.ctx.config.sharing?.client?.hubAddress || "";
+        const userToken = conn?.userToken || this.ctx.config.sharing?.client?.userToken || "";
+        if (!hubUrl || !userToken)
+            return null;
+        return { hubUrl: (0, hub_1.normalizeHubUrl)(hubUrl), userToken };
+    }
+    /** resolveHubClient 的 viewer 版本：hub 模式下使用 bootstrap admin 身份 */
+    async resolveHubClientAware() {
+        if (!this.ctx)
+            throw new Error("sharing_unavailable");
+        const sharing = this.ctx.config.sharing;
+        if (sharing?.role === "hub") {
+            const hub = this.resolveHubConnection();
+            if (hub) {
+                const me = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, "/api/v1/hub/me", { method: "GET" });
+                return {
+                    hubUrl: hub.hubUrl,
+                    userToken: hub.userToken,
+                    userId: String(me.id),
+                    username: String(me.username ?? "hub-admin"),
+                    role: String(me.role ?? "admin"),
+                };
+            }
+        }
+        return (0, hub_1.resolveHubClient)(this.store, this.ctx);
+    }
+    extractGroupId(path) {
+        const m = path.match(/\/api\/sharing\/groups\/([^/]+)/);
+        return m ? decodeURIComponent(m[1]) : "";
+    }
+    async serveSharingGroups(res) {
+        const hub = this.resolveHubConnection();
+        if (!hub)
+            return this.jsonResponse(res, { groups: [], error: "not_configured" });
+        try {
+            const data = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, "/api/v1/hub/groups", { method: "GET" });
+            this.jsonResponse(res, { groups: Array.isArray(data?.groups) ? data.groups : [] });
+        }
+        catch (err) {
+            this.jsonResponse(res, { groups: [], error: String(err) });
+        }
+    }
+    handleSharingGroupCreate(req, res) {
+        this.readBody(req, async (body) => {
+            const hub = this.resolveHubConnection();
+            if (!hub)
+                return this.jsonResponse(res, { ok: false, error: "not_configured" });
+            try {
+                const parsed = JSON.parse(body || "{}");
+                const data = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, "/api/v1/hub/groups", {
+                    method: "POST",
+                    body: JSON.stringify({ name: parsed.name, description: parsed.description }),
+                });
+                this.jsonResponse(res, { ok: true, ...data });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    handleSharingGroupUpdate(req, res, p) {
+        this.readBody(req, async (body) => {
+            const hub = this.resolveHubConnection();
+            if (!hub)
+                return this.jsonResponse(res, { ok: false, error: "not_configured" });
+            const groupId = this.extractGroupId(p);
+            try {
+                const parsed = JSON.parse(body || "{}");
+                await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, `/api/v1/hub/groups/${encodeURIComponent(groupId)}`, {
+                    method: "PUT",
+                    body: JSON.stringify({ name: parsed.name, description: parsed.description }),
+                });
+                this.jsonResponse(res, { ok: true });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    async handleSharingGroupDelete(res, p) {
+        const hub = this.resolveHubConnection();
+        if (!hub)
+            return this.jsonResponse(res, { ok: false, error: "not_configured" });
+        const groupId = this.extractGroupId(p);
+        try {
+            await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, `/api/v1/hub/groups/${encodeURIComponent(groupId)}`, { method: "DELETE" });
+            this.jsonResponse(res, { ok: true });
+        }
+        catch (err) {
+            this.jsonResponse(res, { ok: false, error: String(err) });
+        }
+    }
+    async serveSharingGroupMembers(res, p) {
+        const hub = this.resolveHubConnection();
+        if (!hub)
+            return this.jsonResponse(res, { members: [], error: "not_configured" });
+        const groupId = this.extractGroupId(p);
+        try {
+            const data = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, `/api/v1/hub/groups/${encodeURIComponent(groupId)}`, { method: "GET" });
+            this.jsonResponse(res, { members: Array.isArray(data?.members) ? data.members : [] });
+        }
+        catch (err) {
+            this.jsonResponse(res, { members: [], error: String(err) });
+        }
+    }
+    handleSharingGroupAddMember(req, res, p) {
+        this.readBody(req, async (body) => {
+            const hub = this.resolveHubConnection();
+            if (!hub)
+                return this.jsonResponse(res, { ok: false, error: "not_configured" });
+            const groupId = this.extractGroupId(p);
+            try {
+                const parsed = JSON.parse(body || "{}");
+                await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, `/api/v1/hub/groups/${encodeURIComponent(groupId)}/members`, {
+                    method: "POST",
+                    body: JSON.stringify({ userId: parsed.userId }),
+                });
+                this.jsonResponse(res, { ok: true });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    handleSharingGroupRemoveMember(req, res, p) {
+        this.readBody(req, async (body) => {
+            const hub = this.resolveHubConnection();
+            if (!hub)
+                return this.jsonResponse(res, { ok: false, error: "not_configured" });
+            const groupId = this.extractGroupId(p);
+            try {
+                const parsed = JSON.parse(body || "{}");
+                await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, `/api/v1/hub/groups/${encodeURIComponent(groupId)}/members`, {
+                    method: "DELETE",
+                    body: JSON.stringify({ userId: parsed.userId }),
+                });
+                this.jsonResponse(res, { ok: true });
+            }
+            catch (err) {
+                this.jsonResponse(res, { ok: false, error: String(err) });
+            }
+        });
+    }
+    async serveSharingUsers(res) {
+        const hub = this.resolveHubConnection();
+        if (!hub)
+            return this.jsonResponse(res, { users: [], error: "not_configured" });
+        try {
+            const data = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, "/api/v1/hub/admin/users", { method: "GET" });
+            this.jsonResponse(res, { users: Array.isArray(data?.users) ? data.users : [] });
+        }
+        catch (err) {
+            this.jsonResponse(res, { users: [], error: String(err) });
+        }
+    }
+    // ─── Admin management endpoints (Hub-side data) ───
+    async serveAdminSharedTasks(res) {
+        const hub = this.resolveHubConnection();
+        if (!hub)
+            return this.jsonResponse(res, { tasks: [], error: "not_configured" });
+        try {
+            const data = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, "/api/v1/hub/admin/shared-tasks", { method: "GET" });
+            this.jsonResponse(res, { tasks: Array.isArray(data?.tasks) ? data.tasks : [] });
+        }
+        catch (err) {
+            this.jsonResponse(res, { tasks: [], error: String(err) });
+        }
+    }
+    async handleAdminDeleteTask(res, p) {
+        const hub = this.resolveHubConnection();
+        if (!hub)
+            return this.jsonResponse(res, { ok: false, error: "not_configured" });
+        const taskId = decodeURIComponent(p.replace("/api/admin/shared-tasks/", ""));
+        try {
+            await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, `/api/v1/hub/admin/shared-tasks/${encodeURIComponent(taskId)}`, { method: "DELETE" });
+            this.jsonResponse(res, { ok: true });
+        }
+        catch (err) {
+            this.jsonResponse(res, { ok: false, error: String(err) });
+        }
+    }
+    async serveAdminSharedSkills(res) {
+        const hub = this.resolveHubConnection();
+        if (!hub)
+            return this.jsonResponse(res, { skills: [], error: "not_configured" });
+        try {
+            const data = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, "/api/v1/hub/admin/shared-skills", { method: "GET" });
+            this.jsonResponse(res, { skills: Array.isArray(data?.skills) ? data.skills : [] });
+        }
+        catch (err) {
+            this.jsonResponse(res, { skills: [], error: String(err) });
+        }
+    }
+    async handleAdminDeleteSkill(res, p) {
+        const hub = this.resolveHubConnection();
+        if (!hub)
+            return this.jsonResponse(res, { ok: false, error: "not_configured" });
+        const skillId = decodeURIComponent(p.replace("/api/admin/shared-skills/", ""));
+        try {
+            await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, `/api/v1/hub/admin/shared-skills/${encodeURIComponent(skillId)}`, { method: "DELETE" });
+            this.jsonResponse(res, { ok: true });
+        }
+        catch (err) {
+            this.jsonResponse(res, { ok: false, error: String(err) });
+        }
+    }
+    async serveAdminSharedMemories(res) {
+        const hub = this.resolveHubConnection();
+        if (!hub)
+            return this.jsonResponse(res, { memories: [], error: "not_configured" });
+        try {
+            const data = await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, "/api/v1/hub/admin/shared-memories", { method: "GET" });
+            this.jsonResponse(res, { memories: Array.isArray(data?.memories) ? data.memories : [] });
+        }
+        catch (err) {
+            this.jsonResponse(res, { memories: [], error: String(err) });
+        }
+    }
+    async handleAdminDeleteMemory(res, p) {
+        const hub = this.resolveHubConnection();
+        if (!hub)
+            return this.jsonResponse(res, { ok: false, error: "not_configured" });
+        const memoryId = decodeURIComponent(p.replace("/api/admin/shared-memories/", ""));
+        try {
+            await (0, hub_1.hubRequestJson)(hub.hubUrl, hub.userToken, `/api/v1/hub/admin/shared-memories/${encodeURIComponent(memoryId)}`, { method: "DELETE" });
+            this.jsonResponse(res, { ok: true });
+        }
+        catch (err) {
+            this.jsonResponse(res, { ok: false, error: String(err) });
+        }
+    }
+    serveLocalIPs(res) {
+        const nets = node_os_1.default.networkInterfaces();
+        const ips = [];
+        for (const name of Object.keys(nets)) {
+            for (const net of nets[name] ?? []) {
+                if (net.family === "IPv4" && !net.internal) {
+                    ips.push(net.address);
+                }
+            }
+        }
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ ips }));
+    }
     serveConfig(res) {
         try {
             const cfgPath = this.getOpenClawConfigPath();
@@ -1090,7 +2045,10 @@ class ViewerServer {
                 ?? entries["memos-lite-openclaw-plugin"]
                 ?? entries["memos-lite"]
                 ?? {};
-            if (pluginEntry.viewerPort == null && topEntry.viewerPort) {
+            if (pluginEntry.viewerPort != null) {
+                result.viewerPort = pluginEntry.viewerPort;
+            }
+            else if (topEntry.viewerPort) {
                 result.viewerPort = topEntry.viewerPort;
             }
             this.jsonResponse(res, result);
@@ -1136,6 +2094,15 @@ class ViewerServer {
                     config.viewerPort = newCfg.viewerPort;
                 if (newCfg.telemetry !== undefined)
                     config.telemetry = newCfg.telemetry;
+                if (newCfg.sharing !== undefined) {
+                    const existing = config.sharing || {};
+                    const merged = { ...existing, ...newCfg.sharing };
+                    // Deep-merge capabilities so new keys don't wipe existing ones
+                    if (newCfg.sharing.capabilities && existing.capabilities) {
+                        merged.capabilities = { ...existing.capabilities, ...newCfg.sharing.capabilities };
+                    }
+                    config.sharing = merged;
+                }
                 node_fs_1.default.mkdirSync(node_path_1.default.dirname(cfgPath), { recursive: true });
                 node_fs_1.default.writeFileSync(cfgPath, JSON.stringify(raw, null, 2), "utf-8");
                 this.log.info("Plugin config updated via Viewer");
@@ -1148,6 +2115,89 @@ class ViewerServer {
             }
         });
     }
+    handleUpdateUsername(req, res) {
+        this.readBody(req, async (body) => {
+            if (!this.ctx)
+                return this.jsonResponse(res, { error: "sharing_unavailable" });
+            try {
+                const { username } = JSON.parse(body || "{}");
+                if (!username || typeof username !== "string" || username.trim().length < 2 || username.trim().length > 32) {
+                    return this.jsonResponse(res, { error: "invalid_username" }, 400);
+                }
+                const trimmed = username.trim();
+                const hubClient = await this.resolveHubClientAware();
+                const result = await (0, hub_1.hubRequestJson)(hubClient.hubUrl, hubClient.userToken, "/api/v1/hub/me/update-profile", {
+                    method: "POST",
+                    body: JSON.stringify({ username: trimmed }),
+                });
+                if (result.ok && result.userToken) {
+                    const sharing = this.ctx.config.sharing;
+                    if (sharing?.role === "hub") {
+                        try {
+                            const authPath = node_path_1.default.join(this.dataDir, "hub-auth.json");
+                            const authData = JSON.parse(node_fs_1.default.readFileSync(authPath, "utf8"));
+                            authData.bootstrapAdminToken = result.userToken;
+                            node_fs_1.default.writeFileSync(authPath, JSON.stringify(authData, null, 2), "utf-8");
+                            this.log.info("hub-auth.json updated with new admin token after username change");
+                        }
+                        catch (e) {
+                            this.log.warn(`Failed to update hub-auth.json: ${e}`);
+                        }
+                    }
+                    else {
+                        const persisted = this.store.getClientHubConnection();
+                        if (persisted) {
+                            this.store.setClientHubConnection({
+                                ...persisted,
+                                username: result.username,
+                                userToken: result.userToken,
+                            });
+                        }
+                    }
+                }
+                this.jsonResponse(res, result);
+            }
+            catch (err) {
+                const msg = String(err?.message || err);
+                if (msg.includes("409") || msg.includes("username_taken")) {
+                    return this.jsonResponse(res, { error: "username_taken" }, 409);
+                }
+                this.jsonResponse(res, { error: msg }, 500);
+            }
+        });
+    }
+    handleTestHubConnection(req, res) {
+        this.readBody(req, async (body) => {
+            try {
+                const { hubUrl } = JSON.parse(body);
+                if (!hubUrl) {
+                    this.jsonResponse(res, { ok: false, error: "hubUrl is required" });
+                    return;
+                }
+                const url = hubUrl.replace(/\/+$/, "") + "/api/v1/hub/info";
+                const ctrl = new AbortController();
+                const timeout = setTimeout(() => ctrl.abort(), 8000);
+                try {
+                    const r = await fetch(url, { signal: ctrl.signal });
+                    clearTimeout(timeout);
+                    if (!r.ok) {
+                        this.jsonResponse(res, { ok: false, error: `HTTP ${r.status}` });
+                        return;
+                    }
+                    const info = await r.json();
+                    this.jsonResponse(res, { ok: true, teamName: info.teamName || "", apiVersion: info.apiVersion || "" });
+                }
+                catch (e) {
+                    clearTimeout(timeout);
+                    const msg = e instanceof Error ? e.message : String(e);
+                    this.jsonResponse(res, { ok: false, error: msg.includes("abort") ? "Connection timeout (8s)" : msg });
+                }
+            }
+            catch (e) {
+                this.jsonResponse(res, { ok: false, error: String(e) });
+            }
+        });
+    }
     handleTestModel(req, res) {
         this.readBody(req, async (body) => {
             try {
@@ -1260,36 +2310,133 @@ class ViewerServer {
         req.on("data", (chunk) => { body += chunk.toString(); });
         req.on("end", () => {
             try {
-                const { packageSpec } = JSON.parse(body);
-                if (!packageSpec || typeof packageSpec !== "string") {
+                const { packageSpec: rawSpec } = JSON.parse(body);
+                if (!rawSpec || typeof rawSpec !== "string") {
                     res.writeHead(400, { "Content-Type": "application/json" });
                     res.end(JSON.stringify({ ok: false, error: "Missing packageSpec" }));
                     return;
                 }
+                const packageSpec = rawSpec.trim().replace(/^(?:npx\s+)?openclaw\s+plugins\s+install\s+/i, "");
                 const allowed = /^@[\w-]+\/[\w.-]+(@[\w.-]+)?$/;
+                this.log.info(`update-install: received packageSpec="${packageSpec}" (len=${packageSpec.length})`);
                 if (!allowed.test(packageSpec)) {
+                    this.log.warn(`update-install: rejected packageSpec="${packageSpec}" — does not match ${allowed}`);
                     res.writeHead(400, { "Content-Type": "application/json" });
-                    res.end(JSON.stringify({ ok: false, error: "Invalid package spec" }));
+                    res.end(JSON.stringify({ ok: false, error: `Invalid package spec: "${packageSpec}"` }));
                     return;
                 }
-                this.log.info(`update-install: installing ${packageSpec}...`);
-                (0, node_child_process_1.exec)(`npx openclaw plugins install ${packageSpec}`, { timeout: 120_000 }, (err, stdout, stderr) => {
-                    if (err) {
-                        this.log.warn(`update-install failed: ${err.message}\n${stderr}`);
-                        this.jsonResponse(res, { ok: false, error: stderr || err.message });
+                const pkgPath = this.findPluginPackageJson();
+                const pluginName = pkgPath
+                    ? (() => { try {
+                        return JSON.parse(node_fs_1.default.readFileSync(pkgPath, "utf-8")).name;
+                    }
+                    catch {
+                        return null;
+                    } })()
+                    : null;
+                const shortName = pluginName?.replace(/^@[\w-]+\//, "") ?? "memos-local-openclaw-plugin";
+                const extDir = node_path_1.default.join(node_os_1.default.homedir(), ".openclaw", "extensions", shortName);
+                const tmpDir = node_path_1.default.join(node_os_1.default.tmpdir(), `openclaw-update-${Date.now()}`);
+                // Download via npm pack, extract, and replace extension dir.
+                // Does NOT touch openclaw.json → no config watcher SIGUSR1.
+                this.log.info(`update-install: downloading ${packageSpec} via npm pack...`);
+                node_fs_1.default.mkdirSync(tmpDir, { recursive: true });
+                (0, node_child_process_1.exec)(`npm pack ${packageSpec} --pack-destination ${tmpDir}`, { timeout: 60_000 }, (packErr, packOut) => {
+                    if (packErr) {
+                        this.log.warn(`update-install: npm pack failed: ${packErr.message}`);
+                        this.jsonResponse(res, { ok: false, error: `Download failed: ${packErr.message}` });
+                        try {
+                            node_fs_1.default.rmSync(tmpDir, { recursive: true, force: true });
+                        }
+                        catch { }
                         return;
                     }
-                    this.log.info(`update-install success: ${stdout}`);
-                    this.jsonResponse(res, { ok: true, output: stdout });
-                    this.log.info(`update-install: restarting gateway...`);
-                    setTimeout(() => {
-                        (0, node_child_process_1.exec)("npx openclaw gateway restart", { timeout: 30_000 }, (restartErr) => {
-                            if (restartErr)
-                                this.log.warn(`gateway restart failed: ${restartErr.message}`);
-                            else
-                                this.log.info("gateway restart initiated");
+                    const tgzFile = packOut.trim().split("\n").pop();
+                    const tgzPath = node_path_1.default.join(tmpDir, tgzFile);
+                    this.log.info(`update-install: downloaded ${tgzFile}, extracting...`);
+                    const extractDir = node_path_1.default.join(tmpDir, "extract");
+                    node_fs_1.default.mkdirSync(extractDir, { recursive: true });
+                    (0, node_child_process_1.exec)(`tar -xzf ${tgzPath} -C ${extractDir}`, { timeout: 30_000 }, (tarErr) => {
+                        if (tarErr) {
+                            this.log.warn(`update-install: tar extract failed: ${tarErr.message}`);
+                            this.jsonResponse(res, { ok: false, error: `Extract failed: ${tarErr.message}` });
+                            try {
+                                node_fs_1.default.rmSync(tmpDir, { recursive: true, force: true });
+                            }
+                            catch { }
+                            return;
+                        }
+                        // npm pack extracts to a "package" subdirectory
+                        const srcDir = node_path_1.default.join(extractDir, "package");
+                        if (!node_fs_1.default.existsSync(srcDir)) {
+                            this.jsonResponse(res, { ok: false, error: "Extracted package has no 'package' dir" });
+                            try {
+                                node_fs_1.default.rmSync(tmpDir, { recursive: true, force: true });
+                            }
+                            catch { }
+                            return;
+                        }
+                        // Replace extension directory
+                        this.log.info(`update-install: replacing ${extDir}...`);
+                        try {
+                            node_fs_1.default.rmSync(extDir, { recursive: true, force: true });
+                        }
+                        catch { }
+                        node_fs_1.default.mkdirSync(node_path_1.default.dirname(extDir), { recursive: true });
+                        node_fs_1.default.renameSync(srcDir, extDir);
+                        // Install dependencies
+                        this.log.info(`update-install: installing dependencies...`);
+                        (0, node_child_process_1.exec)(`cd ${extDir} && npm install --omit=dev --ignore-scripts`, { timeout: 120_000 }, (npmErr, npmOut, npmStderr) => {
+                            if (npmErr) {
+                                try {
+                                    node_fs_1.default.rmSync(tmpDir, { recursive: true, force: true });
+                                }
+                                catch { }
+                                this.log.warn(`update-install: npm install failed: ${npmErr.message}`);
+                                this.jsonResponse(res, { ok: false, error: `Dependency install failed: ${npmStderr || npmErr.message}` });
+                                return;
+                            }
+                            // Rebuild native modules (do not swallow errors)
+                            (0, node_child_process_1.exec)(`cd ${extDir} && npm rebuild better-sqlite3`, { timeout: 60_000 }, (rebuildErr, rebuildOut, rebuildStderr) => {
+                                if (rebuildErr) {
+                                    this.log.warn(`update-install: better-sqlite3 rebuild failed: ${rebuildErr.message}`);
+                                    const stderr = String(rebuildStderr || "").trim();
+                                    if (stderr)
+                                        this.log.warn(`update-install: rebuild stderr: ${stderr.slice(0, 500)}`);
+                                    // Continue so postinstall.cjs can run (it will try rebuild again and show user guidance)
+                                }
+                                // Run postinstall.cjs: legacy cleanup, skill install, version marker, and optional sqlite re-check
+                                this.log.info(`update-install: running postinstall...`);
+                                (0, node_child_process_1.exec)(`cd ${extDir} && node scripts/postinstall.cjs`, { timeout: 180_000 }, (postErr, postOut, postStderr) => {
+                                    try {
+                                        node_fs_1.default.rmSync(tmpDir, { recursive: true, force: true });
+                                    }
+                                    catch { }
+                                    if (postErr) {
+                                        this.log.warn(`update-install: postinstall failed: ${postErr.message}`);
+                                        const postStderrStr = String(postStderr || "").trim();
+                                        if (postStderrStr)
+                                            this.log.warn(`update-install: postinstall stderr: ${postStderrStr.slice(0, 500)}`);
+                                        // Still report success; plugin is updated, user can run postinstall manually if needed
+                                    }
+                                    // Read new version
+                                    let newVersion = "unknown";
+                                    try {
+                                        const newPkg = JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(extDir, "package.json"), "utf-8"));
+                                        newVersion = newPkg.version ?? newVersion;
+                                    }
+                                    catch { }
+                                    this.log.info(`update-install: success! Updated to ${newVersion}`);
+                                    this.jsonResponse(res, { ok: true, version: newVersion });
+                                    // Trigger Gateway restart after response is sent
+                                    setTimeout(() => {
+                                        this.log.info(`update-install: triggering gateway restart...`);
+                                        process.kill(process.pid, "SIGUSR1");
+                                    }, 500);
+                                });
+                            });
                         });
-                    }, 1000);
+                    });
                 });
             }
             catch (e) {
@@ -2362,8 +3509,8 @@ class ViewerServer {
         req.on("data", (chunk) => { body += chunk.toString(); });
         req.on("end", () => cb(body));
     }
-    jsonResponse(res, data) {
-        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
+    jsonResponse(res, data, statusCode = 200) {
+        res.writeHead(statusCode, { "Content-Type": "application/json; charset=utf-8" });
         res.end(JSON.stringify(data));
     }
 }