@stardustlc/dsh-dream 0.5.1 → 0.7.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.7.0（2026-10-02）
+
+- 设置页可直接采纳、驳回、重新送审、标记待复核和处理冲突；页面操作记录为 human，模型工具继续记录为 model。保留 revision 校验，失败时保留填写内容。
+- 展开关联来源可查看核验状态、摘要、记录时间、会话序号和来源校验值；读到来源不等同于证明结论正确。
+- 项目经验可在面板查看 AGENTS.md 差异后应用，预览绑定经验版本与文件哈希，10 分钟失效。写入记录提供确认回滚，管理块外的人工内容保留。
+- 新增独立使用反馈（有用 / 不适用及场景备注），不自动采纳、变更状态或提高证据数量；并发校验、重复请求幂等，明细保留最近 20 次，历史在事件流中。
+- 写操作使用 DSH 0.2.0-rc.2 的认证 Connection 通道，并检查 JSON、来源和请求大小；旧宿主保留对话命令入口。修复真实宿主内部请求地址引起的正常操作拒绝。
+- 窄窗口打开 Dream 时把宿主设置导航改为顶部横向导航，避免面板被压成单字列。详见 [验收范围](docs/validation/0.7.0.md)。
+
+## 0.6.0（2026-09-30）
+
+- **经验来源核验**：工具读取实际会话记录或工作目录内的本地产物，核对项目、角色、记录序号、引用和哈希；伪造 read 或无法定位的来源降为 claimed，并给出原因。新经验先进入候选；读到用户纠正不再自动冒充用户采纳。
+- **完整审阅**：补充证据保持状态并检查 revision；双向冲突与 prefer/drop/merge 在同一事件中原子保存，校验失败零写入；支持已驳回经验重新送审。平台条件参与检索，Windows 任务不会取到 Linux 专用经验。
+- **桥接预览 / 应用 / 回滚**：预览返回差异和文件状态，新文件允许 null 哈希；应用先持久化恢复记录再原子替换目标，中断或最终审计失败后仍有可用 backupId。处理目标链接、并发修改、BOM、CRLF 与回滚后保留人工追加内容。
+- **面板操作**：日记 / 经验 / 写入记录分开，行动建议直接可见、证据与例外按需展开；冲突选择显示经验标题并要求处理依据。公开编号经过脱敏仍可唯一定位；回滚编号、完整命令和复制按钮能使用。保留正常 Unix 目标路径，路径中的密钥继续脱敏。修复筛选 Escape 误关宿主设置；窄窗单列显示，日记频次标为“常见教训”。
+- **验证范围**：全量回归、8 进程并发、官方前端加载器和 18 插件同载契约检查；实际 Web 宿主使用隔离的合成资料进行操作验收。详细结果与限制见 [0.6.0 验收记录](docs/validation/0.6.0.md)。零新增运行时依赖，旧日志不重写。
+
+## 0.5.2（2026-09-29）
+
+- **修复窄窗不折叠**：经验区块的两栏布局在容器 ≤620px 时本应折叠为单列，但折叠规则排在基础规则之前、同特异性被覆盖，导致 620px 窄窗下仍挤成两列（长条件文字被压成多行）。现把该断点块移到样式表末尾。
+- 断点按**容器宽度**（≤620px）触发，不是视口宽度：因此 125% 缩放在 1024px 视口下仍是两列，150% 缩放（容器折算 617px）折叠为单列——这是预期行为，与窄窗一致。
+- 实测（离线夹具渲染，620 / 125% / 150% / 1280px 四档）：单列 554px / 两列无溢出 / 单列 617px / 两列无溢出，均无横向滚动；`node --check`、官方加载器回归与全量 204 项（203 通过 + 1 默认跳过）通过。
 ## 0.5.1（2026-09-29）
 
 - **修复两个已发布缺陷**（0.5.0 起）：① 日记文件开头有 UTF-8 BOM 时整份日记被读空；② 心境聚合用普通对象做映射，`__proto__` 键被吞、`constructor` 等键会把计数变成字符串（`"function Object()…1"`）。现在 BOM 会被剥离，聚合用无原型对象后返回普通副本，并新增 `skippedLines` 让坏行可诊断。

package/README.en.md

@@ -4,13 +4,29 @@
 
 # dsh-dream
 
+## 0.7.0 update (2026-10-02)
+
+- Direct review buttons, conflict resolution with a required reason, and expandable source records. UI decisions record `human`; model tools still record `model`. Revision conflicts preserve entered text.
+- Project lessons can preview the exact AGENTS.md changes, apply the approved preview, and roll back the managed block while preserving manual content outside it. Previews expire after ten minutes and check both lesson revision and file hash. Lessons without a project directory keep the project-chat preview command.
+- Separate useful / not-applicable feedback with optional context, idempotent retries, and the latest twenty details. Feedback does not automatically accept, reject, validate, or add evidence to a lesson.
+- Mutations use Harness 0.2.0-rc.2's authenticated Connection Fetch carrier. Read-only endpoints and command fallbacks remain. A Dream-scoped narrow-window layout prevents the settings navigation from squeezing the content into single-character columns.
+- See [0.7.0 validation](docs/validation/0.7.0.md) for browser, automatic-test and native Desktop boundaries.
+
+## 0.6.0 update (2026-09-30)
+
+- **Source verification and review**: reads actual session records or bounded project artifacts. Unverifiable claims stay claimed with a reason. New lessons start as candidates, including user corrections.
+- **Recoverable bridging**: preview / apply / rollback with durable recovery records written before the target. Handles missing-file null hashes, linked paths, CRLF rollback and concurrent edits.
+- **Complete review**: verified evidence attachment, atomic conflict resolution (prefer/drop/merge), reopening rejected lessons, and stable public references.
+- **Usable panel**: separate Journal / Lessons / Write log views, prominent action text, a conflict form with named lessons and a required reason, and copyable rollback commands.
+- See [0.6.0 validation](docs/validation/0.6.0.md) and [CHANGELOG](CHANGELOG.md).
+
 ## 0.4.1 update (2026-09-29)
 
 - **Fixes a Desktop boot failure**: the front-end module id now matches the scoped package name (it used to register as `dsh-dream`, so the host retried the bundle and threw `duplicate factory registration`, ending in `1 entry did not activate`). No journal or config migration.
 
 ## 0.5.1 update (2026-09-29)
 
-- **Fixes**: a leading UTF-8 BOM used to hide the whole journal; mood keys such as `__proto__`/`constructor` corrupted counts. **Retrieval discipline**: candidates and evidence-free lessons are not injected by default, version checks need package context, and the budget packs by rank. **Evidence discipline**: lessons backed by read evidence start usable; model-claimed only stays candidate.
+- **Fixes**: a leading UTF-8 BOM used to hide the whole journal; mood keys such as `__proto__`/`constructor` corrupted counts. **Retrieval discipline**: candidates and evidence-free lessons are not injected by default, version checks need package context, and the budget packs by rank. **Historical evidence policy**: read evidence used to promote lessons directly; 0.6.0 replaces this with independent source verification and review.
 - 204 tests (203 passing, 1 opt-in concurrency stress test skipped); L1 acceptance 9/9. Known limit: reads/writes still grow with history on very large libraries.
 
 ## 0.5.0 update (2026-09-29)
@@ -20,6 +36,7 @@
 - **Masking and scope guarantees**: every new write path runs through `mask.ts` when `maskSecrets` is on; evidence stores only masked one-line summaries plus locators — never hidden reasoning, system prompts, tool arguments or result bodies. Lessons are scoped to a project or global; with an unknown project `dream_context` returns global lessons only and never scans across projects.
 - **Compatibility**: the old journal and the six existing tools (dream_digest / dream_save / dream_journal / dream_recall / dream_bridge / dream_health) keep their behaviour and output fields only grow. No migration is required and no old data is rewritten.
 - **New read-only "Lessons" block** in the panel: state (candidate / usable / disputed / stale / rejected), applicability, scope, applicability details (package / versions / platform) and exceptions (only when non-empty), evidence summary and last-validated time. Candidates and disputed lessons are visually distinct, and an empty knowledge store has its own empty state. When the event log is truncated or has bad lines the block shows a notice and says events.jsonl was left untouched. The panel still has no write actions.
+- **Two more read-only blocks (M2)**: "To review" (candidate / disputed / stale lessons plus why each is held back, using the retrieval layer's Chinese skipped-reason labels) and "Write log" (bridge application records from <journalDir>/bridge/: target, time, lessonId@revision, before/after hashes, rollbackable and why). Every lesson gets a "copy review command"; bridgeable (usable) lessons get a "copy preview command"; if the clipboard fails it falls back to selectable text. The panel still has no write methods.
 
 ## 0.4.0 update (2026-09-29)
 
@@ -31,7 +48,7 @@ Humans consolidate memories by replaying the day during sleep — dsh-dream give
 
 ## Compatibility
 
-Validation host: Harness `0.2.0-rc.1` built from official sources (commit `407e65c8`) with Node `24.16.0` on 2026-09-29. The 18-plugin joint load was re-run before the 0.5.0 release: contracts `ok`, **99 tools / 35 skills**, no failing plugins (`suite-0.2.6-compat.json`), with this plugin passing 204/169 tests in that run (the 0.4.1 baseline of 112 also passed). The plugin registers 9 tools (the 6 original tools plus M1's dream_learn / dream_context / dream_review) and the `dream-protocol` skill, with tool schemas and health-check contracts passing. No live ports or external services were exercised in this round; the panel is reachable on loopback only.
+Validation host: Harness 0.2.0-rc.1 built from official sources (commit 407e65c8, with local host fixes), Node 24.16.0. Version 0.6.0 is exercised in a real Web host with an isolated profile. Web validation does not certify the native Desktop installer; see the validation record for exact scope. The full scoped client identity remains compatible with the Desktop module loader. Registers 9 tools and dream-protocol with zero runtime dependencies.
 
 Reads v0/v1/v2/v3/v4 plaintext JSONL and multi-frame zstd, legacy packed chunks and embedded streams. Only the newest canonical file is selected per session. PTC child calls retain tool names without double counting; system prompts, reasoning, tool arguments and result bodies are excluded.
 
@@ -50,18 +67,18 @@ Restart the web service afterwards. The dream journal lives at `~/.dsh/.dsh-drea
 
 ## Dream journal panel (0.4.0+)
 
-Once installed, DSH's **Settings →「梦境日记」(Dream journal)** grows a read-only panel (Web profile only; headless hosts keep the tools and the skill without a settings page).
+Once installed, DSH's **Settings →「梦境日记」(Dream journal)** provides Journal, Lessons and Write log views. From 0.7.0, reviews and feedback run through the authenticated Connection carrier in Harness 0.2.0-rc.2. Headless hosts keep the tools and skill without a settings page.
 
 - **What it shows**: totals, a mood-square strip (never empty for a single dream, wraps when there are many) and the lessons board at the top; below that, a card timeline, newest first, with timestamp, mood, reflection body and lessons. Reflections are expanded by default and collapse to 4 lines with a show-more control beyond 4 lines or 220 characters.
-- **Lessons board**: ranked by occurrences, ties broken by most recent occurrence, and each row shows when it was last seen (today / yesterday / N days ago; if the stats omit it, the panel falls back to the loaded page and says so); tied ranks get no medal colors, and counts do not imply importance. Lessons seen 3 or more times are marked as bridge candidates, with one line noting that whether they are written into AGENTS.md is decided by dream_bridge; lessons with count 1 carry no progress or KPI decoration. Lessons are trimmed and merged case-insensitively (the earliest spelling is kept); the same lesson written twice in one dream counts twice; near-duplicates with different wording, punctuation or full/half-width forms are not merged. The ledger shows the top 10 — the same default set dream_bridge writes into AGENTS.md.
+- **Lessons board**: ranked by journal occurrences and recency; 3 or more occurrences are labelled common lessons. Frequency does not establish correctness, importance or bridge eligibility. Technical lessons need their own sources, review and a write preview.
 - **Search**: filters by keyword across reflections and lessons, case-insensitively. Mood distribution and the lessons board are computed over the full journal; the timeline is paged by search and limit (latest 50 by default).
 - **Filtering and older dreams**: from 8 dreams on, a Filter menu appears (by mood, or only dreams with lessons; it applies to the loaded window and says so). When 50 dreams are loaded and more exist, the footer offers "show older dreams", which fetches up to the 500-dream route cap in one go.
-- **Read-only**: the panel only reads from the plugin's own GET /_dsh/dsh-dream/journal (loopback-only; non-GET → 405, non-local Host → 403). There is no write action; saving, listing and recalling dreams still happen in chat via dream_save / dream_journal / dream_recall, and the panel never modifies the journal file.
+- **Journal reads**: GET /_dsh/dsh-dream/journal is loopback-only; non-GET → 405, non-local Host → 403. Saving, listing and recalling dreams still happen in chat via dream_save / dream_journal / dream_recall. Panel reviews update knowledge events; previews do not write files.
 - **Data file**: the panel renders the journal itself — ~/.dsh/.dsh-dream/dreams.jsonl by default ($DSH_HOME/.dsh-dream/dreams.jsonl; an explicit journalDir wins). The storage format is unchanged: one JSON object per line, safe to remove or read with dream_journal.
-- **Privacy**: the panel performs no second-pass masking — masking only happens when a dream is written (maskSecrets), and the panel shows exactly what is already in the file. It does not upload, export or make any network request. The privacy mode at the top blurs reflections and lessons in one click, but it is a display-layer effect only (the DOM still holds plaintext), not encryption. Review the journal before sharing your screen or the JSONL.
+- **Privacy**: read-only routes mask text again while preserving validated lesson, evidence and backup references for commands. The UI reads local same-origin routes and does not upload to third-party services. Privacy blur is a display effect; DOM text and local logs remain plaintext.
 - **Before the first dream**: the panel shows an empty state pointing you to ask the agent to「做个梦」; a single dream renders as one card, with neither the mood strip nor the lessons board left empty and no misleading charts.
-- **Lessons block (M1)**: a read-only "Lessons" block shows each technical lesson's state (candidate / usable / disputed / stale / rejected), applicability, scope, applicability details and exceptions (exceptions render only when non-empty), evidence summary and last-validated time. Candidates and disputed lessons get distinct colours and borders, and the empty state is separate from the dream empty state. When the event log is truncated or has bad lines, a notice appears saying events.jsonl was left untouched. Data comes from the read-only GET /_dsh/dsh-dream/knowledge route (loopback only; non-GET → 405, non-local Host → 403). There are no accept / edit / delete buttons — use `dream_review` to review.
-- **Roadmap**: record bridge status via a sidecar (which lessons were written into which AGENTS.md, and when). Not in this release — v1 reads no AGENTS.md and adds no state file.
+- **Lessons view**: usable lessons and the review queue appear separately; rejected history is optional. Review buttons save directly with revision checks. Conflict resolution requires a reason. Source records can be expanded; useful / not-applicable feedback is recorded independently of review and validation. Command fallbacks remain available.
+- **Write log and rollback**: `dream_bridge apply` appends an application record with the target, time, lesson revisions, hashes and original managed block. The panel provides a confirmed rollback action while the current block still matches. Text outside the managed block remains intact; externally changed blocks are not overwritten.
 
 ## Tools
 
@@ -71,13 +88,21 @@ Once installed, DSH's **Settings →「梦境日记」(Dream journal)** grows a
 | `dream_save` | Write a reflection + 1-5 lessons + mood to the permanent journal | `reflection` required |
 | `dream_journal` | List dreams, newest first | `limit` |
 | `dream_recall` | Keyword search across the journal | `query` required |
-| `dream_bridge` | Merge top lessons into AGENTS.md (idempotent marker block) — dreams become long-term memory | `path` required |
+| `dream_bridge` | Bridge accepted, scope-matched lessons into AGENTS.md (`preview` / `apply` / `rollback`; omitting `mode` keeps the legacy direct write with a deprecation notice) | `mode` optional; `path` / `lessonIds` / `maxLessons` / `expectedSha256` / `previewId` / `projectId` |
 | `dream_health` | Self-check: sessions dir / dream count / config summary | — |
 | `dream_learn` | Submit a candidate technical lesson with evidence (validate / mask / dedupe / scope; evidence-free input stays a candidate) | `kind`, `title`, `action`, `when` required; `evidence` optional (defaults to `[]`) |
-| `dream_context` | Retrieve a few applicable lessons before a task (read-only; candidates are held out by default) | `query` required; `projectId` / `workspaceRoot` / `limit` / `maxChars` / `packageName` / `packageVersion` / `includeCandidates` optional |
-| `dream_review` | Review and transition state: accept / reject / mark stale / mark disputed / attach evidence | `action`, `lessonId`, `expectedRevision` required |
+| `dream_context` | Retrieve a few applicable lessons before a task (read-only; candidates are held out by default) | `query` required; `projectId` / `workspaceRoot` / `limit` / `maxChars` / `packageName` / `packageVersion` / `platform` / `includeCandidates` optional |
+| `dream_review` | Review and transition state: accept / reject / mark stale / mark disputed / resolve conflicts / attach evidence / reopen | `action`, `lessonId`, `expectedRevision` required |
+
+Conflict review requires resolution (prefer / drop / merge), affectedIds and note. All parties are validated and updated in one event; invalid groups write nothing. attach-evidence verifies sources without promoting the lesson, and reopen returns a rejected lesson to candidate.
+
+`dream_bridge` now has three explicit modes:
+
+- `preview` (read-only): returns the real diff, selected lessons and skipped reasons — zero writes;
+- `apply`: requires the preview’s `expectedSha256` (null for a missing file); also pass `previewId` to bind the preview; a concurrent edit returns `conflict` with zero writes. It only replaces the Dream managed block (`<!-- dsh-dream:start/end -->`), preserving text outside the block, BOM and line endings, first fsyncs a pending recovery record, then atomically replaces the target and records applied;
+- `rollback`: locates the record by backupId and rolls back only while the current managed block still equals that apply result, preserving later manual additions outside it.
 
-`dream_bridge` merges the most frequent dream lessons into a target `AGENTS.md` behind idempotent marker blocks; `dream_journal` also reports mood distribution and top lessons.
+Omitting `mode` keeps the 0.5.x direct write and returns a deprecation notice; new flows should use `preview → apply`. Only `usable`, scope-matched (or explicit global with review.decision accepted) lessons can be bridged — frequency is no longer an admission criterion — and everything written is masked via `mask.ts`. The panel's "Write log" shows these records and whether they are rollbackable.
 
 The bundled `dream-protocol` skill teaches the agent when and how to dream (and the journaling discipline: patterns only, never secrets).
 
@@ -85,8 +110,8 @@ The bundled `dream-protocol` skill teaches the agent when and how to dream (and
 
 The dream journal holds subjective reflections; technical lessons that should be reused go to `<journalDir>/knowledge/`:
 
-- **Candidate → evidence → review**: `dream_learn` stores "when / action / exceptions / scope" together with evidence as a candidate. `verification: read` means the original record was actually read; `claimed` only means the model asserts it (it does not count toward independent support). Use `dream_review` to accept, reject, mark stale or disputed, or attach new evidence — every mutation carries `expectedRevision` and stale writes are rejected. When the evidence is `kind: "user-correction"` with `verification: "read"`, the lesson starts as `usable` and `review` records `actor: "user"` / `decision: "accepted"` — a user decision outranks model inference; all other evidence starts as `candidate`, and claimed evidence neither counts toward independent support nor overrides a user correction.
-- **Budgeted retrieval**: `dream_context` returns at most 5 items / 3000 characters by default (hard caps 20 items / 20000 characters). Items are packed whole by rank and packing stops at the first item that does not fit (`skipped: budget-stop`); `title / when / action / exceptions` are never truncated, and no half item is ever returned. Candidates and evidence-free non-usable items are held out of task advice by default (`includeCandidates: false`, reported as `candidate-hold` / `no-evidence`); pass `includeCandidates: true` only when explicitly reviewing candidates, and note that candidates rank after usable lessons and must not be treated as verified. Rejected, stale and unresolved disputed lessons are not injected; `applicability.versions` only counts when the package is identified (explicit `packageName` or a package name in the query).
+- **Candidate → verified source → review**: dream_learn creates candidates. Session evidence needs sessionId, recordSeq and a matching quote (summary is used if omitted); the plugin checks project, role, record and text, then computes sourceHash. User corrections must come from actual user messages. Local artifacts require artifactPath with a real path inside the execution working directory. Failed verification becomes claimed with verificationReason and contributes no independent support. Reading a source is not user acceptance; tool reviews record actor:model. attach-evidence preserves state, and every review checks expectedRevision.
+- **Budgeted retrieval**: `dream_context` returns at most 5 items / 3000 characters by default (hard caps 20 items / 20000 characters). Items are packed whole by rank and packing stops at the first item that does not fit (`skipped: budget-stop`); `title / when / action / exceptions` are never truncated, and no half item is ever returned. Candidates and evidence-free non-usable items are held out of task advice by default (`includeCandidates: false`, reported as `candidate-hold` / `no-evidence`); pass `includeCandidates: true` only when explicitly reviewing candidates, and note that candidates rank after usable lessons and must not be treated as verified. Rejected, stale and unresolved disputed lessons are not injected. An explicit platform wins, otherwise unambiguous task text or the host platform is used; mismatches report platform-mismatch; `applicability.versions` only counts when the package is identified (explicit `packageName` or a package name in the query).
 - **Frequency is not reliability**: resubmitting the same evidence is idempotent; never grind counts by calling `dream_save` / `dream_learn` repeatedly. Repeated occurrences within one session count as a single independent source.
 - **Recoverable storage**: `events.jsonl` is the authoritative append-only event log, `evidence.jsonl` appends evidence and `index.json` is a disposable derived index. Rebuilding the index deletes no source files. When the directory does not exist, the read route returns an empty result and never creates anything.
 - **Removing it**: delete `<journalDir>/knowledge/` to clear lesson memory. The old `dreams.jsonl` journal is unaffected, and older plugin versions can still read it.

package/README.md

@@ -2,13 +2,28 @@
 
 # dsh-dream
 
+## 0.7.0 更新（2026-10-02）
+
+- 设置页直接采纳、驳回、标记待复核和处理冲突；关联来源可展开查看。页面审阅记录为人工操作，模型调用仍记录为模型。
+- 带项目目录的经验可预览实际规则差异后应用，并在写入记录确认回滚。旧预览不能覆盖已变化的经验或文件；块外手工内容保留。
+- 独立记录“这次有用 / 这次不适用”和场景备注，不自动改变审阅状态。失败时保留输入，重复反馈请求不会重复计数。
+- 窄窗口使用顶部横向设置导航；写操作通过官方 DSH 0.2.0-rc.2 认证通道。验收范围见 [0.7.0 记录](docs/validation/0.7.0.md)。
+
+## 0.6.0 更新（2026-09-30）
+
+- **来源核验与独立审阅**：插件实际读取会话记录或项目内产物核对来源；无法核对时降为 claimed 并说明原因。新经验先进入候选，用户纠正原文也需要单独审阅。
+- **可靠写入**：AGENTS.md 支持预览、应用、回滚；先持久化恢复记录再写目标文件，中断后仍能恢复。修复新文件 null 哈希、路径链接、CRLF 回滚和并发修改保护。
+- **完整审阅**：补充证据、双向冲突、prefer/drop/merge 原子处理、驳回后重新送审；公开编号在面板与命令间保持一致，敏感正文仍脱敏。
+- **更易操作**：日记 / 经验 / 写入记录分开；卡片直接显示“怎么做”，冲突表单要求选择经验和处理依据，写入记录可复制回滚命令；支持窄窗与筛选 Escape。
+- 验证记录见 [0.6.0 验收](docs/validation/0.6.0.md)，历史变更见 [CHANGELOG](CHANGELOG.md)。
+
 ## 0.4.1 更新（2026-09-29）
 
 - **修复 Desktop 启动失败**：前端模块注册 ID 现与 scoped 包名一致（此前注册成 `dsh-dream`，宿主会重试加载并抛 `duplicate factory registration`，导致 `1 entry did not activate`）。日记数据与配置不变，无迁移。
 
 ## 0.5.1 更新（2026-09-29）
 
-- **修复**：日记 BOM 导致读空、心境键（`__proto__`/`constructor`）污染计数；**检索纪律**：候选与无证据经验默认不注入、版本判定需要包名上下文、预算按排名整条装入；**证据纪律**：读到来源（read）即为可用，模型自我判断（claimed）停在候选。
+- **修复**：日记 BOM 导致读空、心境键（`__proto__`/`constructor`）污染计数；**检索纪律**：候选与无证据经验默认不注入、版本判定需要包名上下文、预算按排名整条装入；**历史证据策略**：当时 read 可直接成为 usable；0.6.0 已改为实际核验来源并独立审阅。
 - 全量 **204 项 / 203 通过 / 1 默认跳过**；L1 七场景断言 9/9。已知限制：知识库很大时读/写仍随历史线性增长，本版不承诺大库性能。
 
 ## 0.5.0 更新（2026-09-29）
@@ -18,6 +33,7 @@
 - **脱敏与范围承诺**：所有新写盘路径在 `maskSecrets` 开启时先过 `mask.ts`；证据只保存已脱敏摘要和定位信息，不保存隐藏推理、系统提示、工具参数 / 结果正文。经验按项目或全局范围保存，未知当前项目时 `dream_context` 只返回全局经验，绝不跨项目扫描。
 - **兼容性**：旧日记与六个既有工具（dream_digest / dream_save / dream_journal / dream_recall / dream_bridge / dream_health）行为不变、输出字段只增不减；升级不需要迁移，也不会改写旧数据。
 - **只读面板新增「经验」区块**：展示状态（候选 / 可用 / 有冲突 / 待复核 / 已驳回）、适用条件、范围、适用（package / versions / platform）与例外、证据摘要与最近核验时间；候选与有冲突有明确视觉区分，没有经验时是独立空态；知识日志被截断或有坏行时显示「events.jsonl 未改动」提示。面板仍然没有任何写操作。
+- **面板新增两个只读区块（M2）**：「待核实」（candidate / disputed / stale + 被扣下的原因，来自检索层 skipped reason 的中文映射）与「写入记录」（<journalDir>/bridge/ 的应用记录：目标、时间、lessonId@revision、前后哈希、可否回滚及原因）；每条经验给「复制审阅命令」，可桥接（usable）经验给「复制预览命令」，剪贴板不可用时回退为可选中文本。面板仍无写方法。
 
 ## 0.4.0 更新（2026-09-29）
 
@@ -31,7 +47,7 @@
 
 ## 兼容性
 
-验证宿主：官方源码构建的 Harness `0.2.0-rc.1`（commit `407e65c8`）+ Node `24.16.0`（2026-09-29）。18 插件同载复验已在 0.5.0 发布前完成：契约 `ok`、共 **99 个工具 / 35 个技能**、无失败插件（`suite-0.2.6-compat.json`），当次本插件 169/169 项测试通过（0.4.1 基线 112 项同样全过）。本插件注册 9 个工具（6 个既有工具 + M1 的 dream_learn / dream_context / dream_review）与 `dream-protocol` 技能，工具 schema 与健康检查契约通过。本轮未启用真实端口与外部服务；面板仅在本机回环地址下可达。
+验证宿主：官方源码构建的 Harness 0.2.0-rc.1（commit 407e65c8，含本地宿主修补）+ Node 24.16.0。0.6.0 在隔离 profile 的实际 Web 宿主中验收；Web 验收不等同于原生 Desktop 安装器验收，具体范围见验收记录。保持完整 scoped 前端模块身份，兼容 Desktop 的模块加载契约。本插件注册 9 个工具与 dream-protocol 技能；零运行时依赖。
 
 支持 v0/v1/v2/v3/v4 的普通 JSONL 与多帧 zstd、旧 packed-chunk 行及内嵌 stream；升级留下多代文件时只读取每个会话的最新规范文件。PTC 子工具调用保留工具名且不重复计数，不提取系统提示、推理、工具参数或结果正文。
 
@@ -57,18 +73,19 @@ dsh plugin --profile web remove @stardustlc/dsh-dream
 
 ## 梦境日记面板（0.4.0+）
 
-装好后，DSH 的「设置 → 梦境日记」里会多出一节**只读**面板（Web profile 专用；headless 宿主没有设置页，工具与技能照常可用）。
+装好后，DSH 的「设置 → 梦境日记」提供日记、经验与写入记录。0.7.0 起可以直接审阅和反馈；写操作使用 DSH 0.2.0-rc.2 的认证 Connection 通道。headless 宿主没有设置页，工具与技能照常可用。
 
 - **看什么**：顶部是梦境总数、心境方块序列（单条时不空，多条时自动换行）与教训榜；下面是卡片式时间线，按时间倒序，逐条显示时间、心境、反思正文与教训列表。反思正文默认展开，超过 4 行或 220 字时折叠为 4 行并给出「展开全文」。
-- **教训榜**：按出现次数排序，同次数按最近出现时间排序，并在每条上显示最近一次出现（今天 / 昨天 / N 天前；统计缺失时按当前页现算并注明「本页内最近」）；并列名次不加奖牌色；次数不代表重要度。出现 ≥3 次的教训标「桥接候选」，旁边一行说明「是否写入 AGENTS.md 由 dream_bridge 决定」；次数为 1 的教训不显示进度或 KPI。统计前会去掉每条教训的首尾空白并按全小写合并（原样保留最早出现的写法）；同一场梦里把同一条教训写两遍会算两次；措辞不同（含标点、全角半角差异）的教训不会自动合并。账本最多显示前 10 条，这也是 dream_bridge 默认写入 AGENTS.md 的条数。
+- **教训榜**：按日记出现次数与最近时间排序，≥3 次标为“常见教训”；频率不代表正确性、重要度或桥接资格。技术经验必须另行提交来源、审阅，再预览写入规则。
 - **搜索**：按关键词过滤，命中反思与教训，不区分大小写。心境分布与教训榜基于**全量日记**，时间线按搜索与条数上限（默认最近 50 场）展示。
 - **筛选与更早的梦**：≥8 场时出现「筛选 ▾」（按心境、只看有教训的梦，作用于已加载窗口并在弹层注明）；加载满 50 场且总梦数更多时，页脚提供「显示更早的梦」，点击后一次拉满到 500 场（路由上限）。
-- **只读**：面板只从插件自己的 GET /_dsh/dsh-dream/journal 读取数据（仅回环地址可达；非 GET → 405，非本机 Host → 403），没有任何写操作。记梦、翻梦、忆梦仍在对话里通过 dream_save / dream_journal / dream_recall 完成，面板不会修改你的日记文件。
+- **日记读取**：GET /_dsh/dsh-dream/journal 仅回环地址可达；非 GET → 405，非本机 Host → 403。记梦、翻梦、忆梦仍通过 dream_save / dream_journal / dream_recall 完成。面板审阅只更新经验事件，预览本身不写文件。
 - **数据文件**：面板读的就是梦境日记本身，默认 ~/.dsh/.dsh-dream/dreams.jsonl（$DSH_HOME/.dsh-dream/dreams.jsonl；配置了 journalDir 时以配置为准）。存储格式不变，仍是每行一条 JSON 的 JSONL，可直接删除或用 dream_journal 读取。
-- **隐私**：面板不做二次脱敏——脱敏只发生在入梦写盘时（maskSecrets），面板原样显示文件里已有的内容。它不上传、不导出、不发起任何网络请求；顶部「隐私模式」可一键模糊正文与教训，但它只是浏览器里的显示效果（DOM 中仍是明文），不是加密。共享屏幕或转发 dreams.jsonl 前请自行确认内容。
+- **隐私**：只读路由会再次脱敏正文；已校验的内部经验、证据与备份编号保留以供操作。界面只访问本机同源路由，不上传第三方服务。“隐私模式”仅模糊显示，DOM 仍有文本；日志本身是明文。
 - **还没有梦时**：面板显示空态，提示对 agent 说「做个梦」——它会回放最近的会话、反思之后把第一条梦写进这里；只有一场梦时按单条卡片展示，心境方块与教训榜都不留空、不画失真图表。
-- **经验区块（M1）**：面板下方的只读「经验」区块显示技术经验的状态（候选 / 可用 / 有冲突 / 待复核 / 已驳回）、适用条件、范围、适用与例外（exceptions 非空才显示）、证据摘要与最近核验时间，候选与冲突有独立配色和边框，空态与梦境空态分开。知识日志被截断（truncated）或有坏行（badLines）时显示一行提示，并注明 events.jsonl 未改动。数据来自只读路由 GET /_dsh/dsh-dream/knowledge（仅回环地址可达；非 GET → 405，非本机 Host → 403），没有采纳 / 编辑 / 删除按钮；审阅请用 dream_review。
-- **后续计划**：用 sidecar 记录桥接状态（哪些教训、何时写进了哪个 AGENTS.md）。本轮不做——v1 不读取 AGENTS.md，也不新增任何状态文件。
+- **经验视图**：可用经验与待核实队列分开，已驳回历史按需查看。来源记录可展开查看核验信息；采纳、驳回、重新送审和标记待复核可以直接点击。处理冲突须选择对方经验和填写依据。每次操作检查版本，冲突时保留输入并提供刷新；对话命令入口仍可使用。
+- **使用反馈**：展开“使用反馈”记录这次有用或不适用，并可填写场景。反馈不会自动改变审阅状态、证据或最后核验时间；最近 20 条明细可恢复，事件流保留历史。
+- **规则变更与回滚**：带项目目录的可用经验提供“预览规则变更”，展示实际目标与新增/删除差异后才可应用。此预览按所选经验重建 Dream 管理块，保留块外内容；经验版本或文件哈希变化时拒绝应用。没有项目目录的经验须在对应项目对话中使用预览命令。写入记录展示备份与“回滚这次变更”；当前管理块仍匹配该次 apply 时才允许回滚。
 
 ## 工具一览
 
@@ -78,11 +95,13 @@ dsh plugin --profile web remove @stardustlc/dsh-dream
 | `dream_save` | 记梦：反思 + 1-5 条教训 + 心境，永久保存 | `reflection` 必填；`lessons`/`mood` 可选 |
 | `dream_journal` | 翻梦：倒序列出历史梦境 | `limit` 可选 |
 | `dream_recall` | 忆梦：关键词检索梦境 | `query` 必填 |
-| `dream_bridge` | 渡梦：把高频教训幂等合并进 AGENTS.md，梦变成长期记忆 | `path` 必填；`maxLessons` 可选 |
+| `dream_bridge` | 渡梦：把已采纳、范围匹配的经验写入 AGENTS.md（`preview` 预览 / `apply` 应用 / `rollback` 回滚；缺省保留旧直写并给弃用提示） | `mode` 可选；`path` / `lessonIds` / `maxLessons` / `expectedSha256` / `previewId` / `projectId` |
 | `dream_health` | 自检：会话目录/梦境计数/配置汇总 | 无 |
 | `dream_learn` | 提交候选技术经验及证据（校验 / 脱敏 / 去重 / 按范围保存；无证据只能留在候选） | `kind`、`title`、`action`、`when` 必填；`evidence` 可选（缺省 `[]`） |
-| `dream_context` | 任务前取回少量适用经验（只读；候选默认不注入） | `query` 必填；`projectId` / `workspaceRoot` / `limit` / `maxChars` / `packageName` / `packageVersion` / `includeCandidates` 可选 |
-| `dream_review` | 审阅与状态流转：采纳 / 驳回 / 标记过期 / 标记冲突 / 补充证据 | `action`、`lessonId`、`expectedRevision` 必填 |
+| `dream_context` | 任务前取回少量适用经验（只读；候选默认不注入） | `query` 必填；`projectId` / `workspaceRoot` / `limit` / `maxChars` / `packageName` / `packageVersion` / `platform` / `includeCandidates` 可选 |
+| `dream_review` | 审阅与状态流转：采纳 / 驳回 / 标记过期 / 标记冲突 / 处理冲突 / 补充证据 / 重新送审 | `action`、`lessonId`、`expectedRevision` 必填 |
+
+处理冲突时必须填写 resolution（prefer / drop / merge）、affectedIds 与 note；所有当事方一并校验并在同一事件中保存，校验失败不改任何经验。attach-evidence 核验并附加来源，reopen 把驳回经验重新置为候选。
 
 ### 示例
 
@@ -90,15 +109,21 @@ dsh plugin --profile web remove @stardustlc/dsh-dream
 dream_digest { maxSessions: 5, mode: 'brief' }
 dream_save { reflection: "用户反复遇到输入法问题，偏好先自查再重启", lessons: ["先问是否重启过应用"], mood: "平静" }
 dream_recall { query: "输入法" }
-dream_bridge { path: "AGENTS.md", maxLessons: 10 }
-dream_context { query: "SMTP 取消投递", projectId: "mailer", packageVersion: "9.0.5" }
-dream_learn { kind: "pitfall", title: "池化发送中 close() 不保证终止投递", action: "取消后验证当前连接确实关闭", when: "使用 Nodemailer 9.0.5 池化发送并处理 AbortSignal 时", evidence: [{ kind: "local-artifact", summary: "本机 SMTP 复现：取消后服务器仍收到正文", verification: "read" }] }
+dream_bridge { mode: "preview", path: "AGENTS.md", maxLessons: 10 }
+dream_context { query: "SMTP 取消投递", projectId: "mailer", packageName: "nodemailer", packageVersion: "9.0.5", platform: "windows" }
+dream_learn { kind: "pitfall", title: "池化发送中 close() 不保证终止投递", action: "取消后验证当前连接确实关闭", when: "使用 Nodemailer 9.0.5 池化发送并处理 AbortSignal 时", evidence: [{ kind: "local-artifact", artifactPath: "test-results/smtp.txt", summary: "本机 SMTP 复现：取消后服务器仍收到正文", verification: "read" }] }
 dream_review { action: "accept", lessonId: "lesson-…", expectedRevision: 1 }
 ```
 
-## 渡梦：让梦变成长期记忆
+## 渡梦：让梦变成长期记忆（M2）
+
+`dream_bridge` 现在有显式三模式：
+
+- `preview`（只读）：返回真实 diff、参与经验与 skipped 原因，零写入；
+- `apply`：必须带预览的 `expectedSha256`（新文件为 null），建议同时带 `previewId`，文件被并发修改时返回 `conflict` 且零写入；只替换 Dream 管理块（`<!-- dsh-dream:start/end -->`），保留块外文字、BOM 与换行风格，先持久化 pending 恢复记录再原子替换文件，最后记录 applied；
+- `rollback`：用 backupId 定位记录，只在当前管理块仍等于该次 apply 结果时回滚，保留块外后来追加的人工内容。
 
-`dream_bridge` 把梦境日记里出现频次最高的教训合并进目标 `AGENTS.md`：带 `<!-- dsh-dream:lessons:start/end -->` 标记块，重复执行只刷新块内内容（幂等），反复梦到的教训会标注次数。`dream_journal` 同时给出心境分布与最常梦到的教训统计。
+缺省不传 `mode` 保持 0.5.x 直写并返回弃用提示；建议新流程一律显式 `preview → apply`。只有 `usable`、scope 匹配当前项目（或显式 global 且 review.decision 为 accepted）的经验可桥接，频次不再准入；写入内容统一过 `mask.ts`。面板的「写入记录」展示备份与可否回滚，0.7.0 起提供确认回滚按钮。
 
 ## 做梦协议（随包技能）
 
@@ -108,8 +133,8 @@ dream_review { action: "accept", lessonId: "lesson-…", expectedRevision: 1 }
 
 梦境日记是主观感悟；真正要复用的技术经验走 `<journalDir>/knowledge/`：
 
-- **候选 → 证据 → 审阅**：`dream_learn` 把「何时 / 做什么 / 例外 / 范围」和证据一起保存为 candidate；`verification: read` 表示读到原记录，`claimed` 只表示模型声称（不计入独立支持数）。用户采纳、驳回、标记过期或冲突用 `dream_review`，所有修改都要带 `expectedRevision`，过期写入会被拒绝。当证据为 `kind: "user-correction"` 且已读到原文（`verification: "read"`）时，该经验初始状态直接是 `usable`，`review` 记 `actor: "user"`、`decision: "accepted"`——用户决定优先于模型推测；其余证据一律从 candidate 起，claimed 不计独立支持、也不能覆盖用户纠正。
-- **取回有预算**：`dream_context` 默认最多返回 5 条、3000 字符（硬上限 20 条 / 20000 字符）；按排名整条装入，遇到第一条放不下就停止（`skipped: budget-stop`），`title / when / action / exceptions` 永不截断，绝不返回半条。候选与无独立证据的非 usable 条目默认不注入（`includeCandidates: false`，记 `candidate-hold` / `no-evidence`）；显式 `includeCandidates: true` 可在审阅候选时看到，且候选排在可用经验之后——未经审阅不得当作已证实结论。已驳回、已过期和冲突未解决的不注入；`applicability.versions` 只在包名被识别（显式 `packageName` 或 query 中出现包名）时参与判定。
+- **候选 → 来源核验 → 审阅**：dream_learn 创建 candidate。会话来源需要 sessionId、recordSeq 与可匹配的 quote（省略时用 summary 匹配）；插件核对项目、角色、记录和文本并计算 sourceHash。user-correction 必须来自真实用户消息；local-artifact 需要 artifactPath，真实路径必须位于调用工作目录内。核验失败记 claimed 与 verificationReason，不计独立支持数。读到来源不等于用户采纳，工具审阅记录 actor:model。补充证据不会自动改变状态；所有审阅携带 expectedRevision，旧版本会拒绝。
+- **取回有预算**：`dream_context` 默认最多返回 5 条、3000 字符（硬上限 20 条 / 20000 字符）；按排名整条装入，遇到第一条放不下就停止（`skipped: budget-stop`），`title / when / action / exceptions` 永不截断，绝不返回半条。候选与无独立证据的非 usable 条目默认不注入（`includeCandidates: false`，记 `candidate-hold` / `no-evidence`）；显式 `includeCandidates: true` 可在审阅候选时看到，且候选排在可用经验之后——未经审阅不得当作已证实结论。已驳回、已过期和冲突未解决的不注入；platform 可显式指定，未指定时从明确任务文字识别，否则采用宿主平台，平台不符记 platform-mismatch；`applicability.versions` 只在包名被识别（显式 `packageName` 或 query 中出现包名）时参与判定。
 - **频率不是可靠性**：同一条证据重复提交是幂等的；不要在同一个会话里反复 `dream_save` / `dream_learn` 刷次数。同一个会话中重复出现的教训只算一次独立来源。
 - **存储可恢复**：`events.jsonl` 是权威事件日志（追加写），`evidence.jsonl` 追加证据，`index.json` 是可丢弃重建的派生索引；重建索引不删除任何原文件。目录不存在时读取接口返回空结果，不会为了读而创建目录。
 - **删除新数据**：直接删除 `<journalDir>/knowledge/` 即清空经验记忆；这不会影响 `dreams.jsonl` 里的旧日记，旧版本插件也仍能读取旧日记。

package/lib/bridge.d.ts

@@ -1,15 +1,218 @@
+import type { Lesson } from './knowledge.js';
+/** 新管理块起始标记（整行）。 */
+export declare const DREAM_BLOCK_START = "<!-- dsh-dream:start -->";
+/** 新管理块结束标记（整行）。 */
+export declare const DREAM_BLOCK_END = "<!-- dsh-dream:end -->";
+/** 默认最多桥接条数。 */
+export declare const BRIDGE_DEFAULT_MAX_LESSONS = 5;
+/** 硬上限。 */
+export declare const BRIDGE_HARD_MAX_LESSONS = 20;
+export interface BridgeScope {
+    projectId?: string;
+    workspaceRoot?: string;
+}
+export interface BridgeLessonView {
+    lessonId: string;
+    revision: number;
+    title: string;
+    when: string;
+    action: string;
+    exceptions: string[];
+    scopeLabel: string;
+}
+export interface BridgeSkipped {
+    lessonId: string;
+    reason: string;
+}
+export interface BridgeFileState {
+    exists: boolean;
+    /** 文件不存在时为 null；存在时是文件字节 sha256。 */
+    sha256: string | null;
+    size: number;
+}
+export type BridgeAction = 'create' | 'replace' | 'append' | 'unchanged';
+export interface BridgeTargetOptions {
+    /** 当前项目根目录（必须存在）。 */
+    projectRoot: string;
+    /** 目标文件；缺省 = <projectRoot>/AGENTS.md。 */
+    path?: string;
+}
+export interface BridgeOptions extends BridgeTargetOptions {
+    /** 应用记录目录 <journalDir>/bridge/。 */
+    journalDir: string;
+    /** 候选经验（由 tools 层从 KnowledgeStore 提供）。 */
+    lessons: Lesson[];
+    /** 当前项目标识；两者都没有时只允许显式 global 且已采纳的经验。 */
+    projectId?: string;
+    workspaceRoot?: string;
+    /** 只桥接这些经验（可选）。 */
+    lessonIds?: string[];
+    /** 条数上限，默认 5，硬上限 20。 */
+    maxLessons?: number;
+    /** 写盘前是否过 mask.ts；默认 true。 */
+    maskSecrets?: boolean;
+}
+export interface BridgeApplyOptions extends BridgeOptions {
+    /** apply 必须提供：当前目标文件的 sha256；文件不存在时用 null（preview.expected.sha256 原样回传即可）。 */
+    expectedSha256: string | null;
+    /** 可选：apply 必须是同一份预览。 */
+    previewId?: string;
+}
+export interface BridgeRollbackOptions {
+    projectRoot: string;
+    path?: string;
+    journalDir: string;
+    backupId: string;
+}
+export type BridgeErrorCode = 'invalid' | 'conflict' | 'read-only' | 'io' | 'marker' | 'preview-mismatch' | 'not-found' | 'unsupported-encoding' | 'path-outside-project' | 'target-is-directory' | 'not-rollbackable';
+export interface BridgeError {
+    code: BridgeErrorCode;
+    message: string;
+    line?: number;
+    hint?: string;
+}
+export interface BridgeFailure {
+    ok: false;
+    error: BridgeError;
+    /** 可选的形状兜底：preview 即使失败也尽量给出 action/expected/resolvedPath，避免调用方读字段崩。 */
+    action?: BridgeAction;
+    expected?: BridgeFileState;
+    resolvedPath?: string;
+}
+export interface BridgePreviewSuccess {
+    ok: true;
+    action: BridgeAction;
+    expected: BridgeFileState;
+    resolvedPath: string;
+    diff: string;
+    lessons: BridgeLessonView[];
+    skipped: BridgeSkipped[];
+    previewId: string;
+    blockPreview: string;
+}
+export interface BridgeApplySuccess {
+    ok: true;
+    action: BridgeAction;
+    unchanged: boolean;
+    backupId?: string;
+    file: BridgeFileState;
+    path: string;
+    resolvedPath: string;
+    lessons: BridgeLessonView[];
+    skipped: BridgeSkipped[];
+    previewId?: string;
+    /** 目标已应用且可按 backupId 恢复，但最终审计确认未能追加。 */
+    warning?: string;
+}
+export interface BridgeRollbackSuccess {
+    ok: true;
+    backupId: string;
+    file: BridgeFileState;
+    path: string;
+    resolvedPath: string;
+}
+export type BridgePreviewResult = BridgePreviewSuccess | BridgeFailure;
+export type BridgeApplyResult = BridgeApplySuccess | BridgeFailure;
+export type BridgeRollbackResult = BridgeRollbackSuccess | BridgeFailure;
+export interface BridgeRecord {
+    schemaVersion: 1;
+    backupId: string;
+    at: string;
+    target: string;
+    projectRoot: string;
+    action: 'create' | 'replace' | 'append';
+    before: BridgeFileState;
+    beforeBlock: string | null;
+    separator: string;
+    afterBlockSha256: string;
+    afterFileSha256: string;
+    lessons: Array<{
+        lessonId: string;
+        revision: number;
+    }>;
+    previewId: string;
+    /** 缺省为旧版已完成记录；pending 是先于目标写入持久化的恢复记录。 */
+    phase?: 'pending' | 'applied' | 'aborted';
+}
+interface ResolvedTarget {
+    /** 跟随链接后的真实写入路径。 */
+    path: string;
+    projectRoot: string;
+    lexical: string;
+}
+type BlockLocation = {
+    status: 'none';
+} | {
+    status: 'ok';
+    start: number;
+    end: number;
+    text: string;
+    startLine: number;
+    endLine: number;
+} | {
+    status: 'broken';
+    message: string;
+    line?: number;
+};
+/**
+ * 经验资格：state=usable；scope 匹配当前项目；或显式 global 且 review.decision=accepted。
+ * 解释为空或不满足一律进 skipped，绝不因频次入选或落选。
+ */
+export declare function selectBridgeLessons(lessons: Lesson[], scope: BridgeScope, options?: {
+    lessonIds?: string[];
+    maxLessons?: number;
+}): {
+    eligible: Lesson[];
+    skipped: BridgeSkipped[];
+};
+/** 定位管理块；缺损/重复/嵌套/错位给出位置。 */
+export declare function locateDreamBlock(text: string): BlockLocation;
+/** 生成管理块（内部使用 \n；落盘前按目标换行风格转换）。 */
+export declare function buildDreamBlock(lessons: BridgeLessonView[]): string;
+export declare function resolveBridgeTarget(projectRoot: string, rawPath?: string): {
+    ok: true;
+    target: ResolvedTarget;
+} | BridgeFailure;
+/** preview：只读计算 diff / expected / 管理块；绝不写盘。 */
+export declare function previewBridge(options: BridgeOptions): BridgePreviewResult;
+/** apply：必须带 expectedSha256；CAS 冲突 → conflict 零写入；只替换管理块。 */
+export declare function applyBridge(options: BridgeApplyOptions): BridgeApplyResult;
+/** rollback：仅当当前管理块仍等于该次 apply 的结果时恢复原管理块。 */
+export declare function rollbackBridge(options: BridgeRollbackOptions): BridgeRollbackResult;
+export interface BridgeApplicationView {
+    backupId: string;
+    at: string;
+    target: string;
+    action: 'create' | 'replace' | 'append';
+    lessons: Array<{
+        lessonId: string;
+        revision: number;
+    }>;
+    beforeSha256: string | null;
+    afterSha256: string;
+    rollbackable: boolean;
+    rollbackReason?: string;
+}
+/**
+ * 只读列出应用记录（按 at 降序）。目录/文件缺失返回 []，绝不写盘。
+ * rollbackable 在桥接层按当前文件的管理块重算，供面板直接展示。
+ */
+export declare function listBridgeApplications(journalDir: string): BridgeApplicationView[];
+/** 旧版标记块起始行（历史文件用；新流程不碰它）。 */
 export declare const BRIDGE_START = "<!-- dsh-dream:lessons:start\uFF08\u81EA\u52A8\u751F\u6210\uFF0C\u8BF7\u52FF\u624B\u5DE5\u7F16\u8F91\u5757\u5185\u5185\u5BB9\uFF09 -->";
+/** 旧版标记块结束行。 */
 export declare const BRIDGE_END = "<!-- dsh-dream:lessons:end -->";
-/** 生成教训块文本。 */
+/** 生成教训块文本（legacy）。 */
 export declare function buildLessonsBlock(lessons: Array<{
     lesson: string;
     count: number;
 }>): string;
 /**
- * 把梦境教训合并进目标文件：无文件则创建，有标记块则替换，无标记块则追加。
+ * legacy：把梦境教训合并进目标文件（0.5.x 行为，直接写；新代码请用 preview/apply）。
  * @returns 动作类型与写入的教训数。
  */
 export declare function bridgeDreams(journalDir: string, targetPath: string, maxLessons: number): {
     action: 'created' | 'replaced' | 'appended';
     lessonsCount: number;
 };
+export {};