@stardustlc/dsh-dream 0.5.1 → 0.7.0

package/lib/evidence.d.ts

@@ -0,0 +1,15 @@
+import type { EvidenceInput } from './knowledge.js';
+export interface EvidenceClaim extends EvidenceInput {
+    /** 摘要为转述时，另给原文片段以便核验；不持久化原文。 */
+    quote?: string;
+    artifactPath?: string;
+}
+export interface EvidenceContext {
+    sessionsRoot: string;
+    projectId?: string;
+    workspaceRoot?: string;
+    /** 本地文件只在宿主执行上下文的工作区内读取。 */
+    cwd?: string;
+}
+/** 核验失败保留 claimed 和原因；永远不以模型提供的 hash、verification 或用户角色为准。 */
+export declare function verifyEvidence(claim: EvidenceClaim, context: EvidenceContext): EvidenceInput;

package/lib/evidence.js

@@ -0,0 +1,123 @@
+/** 工具参数只是来源声明；只有本模块读到匹配的可见记录后才产生 read。 */
+import { readFileSync, realpathSync, statSync } from 'node:fs';
+import { basename, dirname, isAbsolute, relative, resolve } from 'node:path';
+import { createHash } from 'node:crypto';
+import { decompressAll, listSessionFiles } from './sessions.js';
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+function visibleText(value) {
+    if (typeof value === 'string')
+        return value;
+    if (Array.isArray(value))
+        return value.map(visibleText).join('');
+    const item = record(value);
+    if (item.type !== undefined && item.type !== 'text')
+        return '';
+    return visibleText(item.text ?? item.content ?? '');
+}
+function normalized(text) { return text.normalize('NFC').replace(/\s+/g, ' ').trim(); }
+function inside(root, file) {
+    const rel = relative(root, file);
+    return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
+}
+function samePath(a, b) {
+    const canonical = (p) => { try {
+        return realpathSync(p);
+    }
+    catch {
+        return resolve(p);
+    } };
+    const left = canonical(a), right = canonical(b);
+    return process.platform === 'win32' ? left.toLowerCase() === right.toLowerCase() : left === right;
+}
+function readBounded(file, maxBytes) {
+    const stat = statSync(file);
+    if (!stat.isFile() || stat.size > maxBytes)
+        throw new Error('source-unreadable');
+    const bytes = readFileSync(file);
+    if (bytes.length > maxBytes)
+        throw new Error('source-unreadable');
+    return bytes;
+}
+/** 核验失败保留 claimed 和原因；永远不以模型提供的 hash、verification 或用户角色为准。 */
+export function verifyEvidence(claim, context) {
+    const base = {
+        kind: claim.kind, summary: claim.summary, verification: 'claimed',
+        ...(claim.sessionId !== undefined ? { sessionId: claim.sessionId } : {}),
+        ...(claim.recordSeq !== undefined ? { recordSeq: claim.recordSeq } : {}),
+        ...(context.projectId !== undefined ? { projectId: context.projectId } : {}),
+    };
+    const held = (reason) => ({ ...base, verificationReason: reason });
+    if (claim.verification !== 'read')
+        return held('model-claimed');
+    const quote = normalized(claim.quote ?? claim.summary);
+    if (quote === '')
+        return held('quote-missing');
+    try {
+        let text;
+        if (claim.kind === 'local-artifact') {
+            if (!context.cwd || !claim.artifactPath)
+                return held('artifact-context-missing');
+            const root = realpathSync(context.cwd);
+            if (context.workspaceRoot && !samePath(root, context.workspaceRoot))
+                return held('workspace-mismatch');
+            const file = realpathSync(resolve(root, claim.artifactPath));
+            if (!inside(root, file))
+                return held('artifact-outside-workspace');
+            const bytes = readBounded(file, 1024 * 1024);
+            text = bytes.toString('utf8');
+            if (bytes.includes(0) || !Buffer.from(text, 'utf8').equals(bytes))
+                return held('artifact-not-text');
+        }
+        else {
+            if (!claim.sessionId || claim.recordSeq === undefined)
+                return held('session-reference-missing');
+            const root = realpathSync(context.sessionsRoot);
+            const candidates = listSessionFiles(root, 10000).filter(file => basename(dirname(file)) === claim.sessionId);
+            if (candidates.length !== 1)
+                return held('session-not-found-or-ambiguous');
+            const file = realpathSync(candidates[0]);
+            if (!inside(root, file))
+                return held('session-outside-root');
+            if (context.projectId && basename(dirname(dirname(file))) !== context.projectId)
+                return held('project-mismatch');
+            const bytes = readBounded(file, 64 * 1024 * 1024);
+            const content = file.endsWith('.zstd') ? decompressAll(bytes) : bytes.toString('utf8');
+            if (Buffer.byteLength(content) > 64 * 1024 * 1024)
+                return held('source-unreadable');
+            const lines = content.split('\n').filter(line => line.trim() !== '');
+            const header = record(JSON.parse(lines[0] ?? 'null'));
+            if (header.type !== 'session' || header.id !== claim.sessionId || (header.version !== undefined && ![0, 1, 2, 3, 4].includes(header.version)))
+                return held('session-header-mismatch');
+            if (context.workspaceRoot && (typeof header.cwd !== 'string' || !samePath(header.cwd, context.workspaceRoot)))
+                return held('workspace-mismatch');
+            const found = [];
+            for (const line of lines.slice(1)) {
+                try {
+                    const item = record(JSON.parse(line));
+                    if (item.seq !== undefined && String(item.seq) === String(claim.recordSeq))
+                        found.push(item);
+                }
+                catch { /* 坏行不是证据 */ }
+            }
+            if (found.length !== 1)
+                return held('record-not-found-or-ambiguous');
+            const entry = found[0], data = record(entry.data);
+            if (claim.kind === 'user-correction' && (entry.type !== 'user/message' || (header.version >= 4 && record(data.source).kind !== 'user')))
+                return held('not-human-message');
+            if (entry.type !== 'user/message' && entry.type !== 'assistant/message' && entry.type !== 'tool/result')
+                return held('record-not-visible');
+            text = visibleText(data.content ?? data.text ?? data.message ?? entry.data);
+        }
+        if (!normalized(text).includes(quote))
+            return held('quote-mismatch');
+        const hash = createHash('sha256').update(text, 'utf8').digest('hex');
+        if (claim.sourceHash !== undefined && claim.sourceHash !== hash)
+            return held('source-hash-mismatch');
+        return { ...base, verification: 'read', sourceHash: hash, verificationReason: 'source-verified' };
+    }
+    catch {
+        return held('source-unreadable');
+    }
+}

package/lib/index.js

@@ -9,6 +9,7 @@ import { join } from 'node:path';
 import { resolveConfig } from './config.js';
 import { buildDreamTools } from './tools.js';
 import { installDreamWeb } from './web.js';
+import { installDreamActions } from './web-actions.js';
 /** cordis 服务注入：要用 ctx.tools 与 ctx.skills。 */
 export const name = 'dream';
 export const inject = ['tools', 'skills'];
@@ -56,7 +57,8 @@ export function apply(ctx, config) {
     }
     // 面板同源路由：宿主有 webServer 才由 web.ts 用 ctx.inject 挂上；headless 夹具没有 inject 就跳过。
     if (typeof ctx.inject === 'function') {
-        installDreamWeb(ctx, { journalDir: cfg.journalDir });
+        installDreamWeb(ctx, { journalDir: cfg.journalDir, config: cfg });
+        installDreamActions(ctx, { config: cfg });
     }
     if (typeof ctx.on === 'function') {
         ctx.on('dispose', () => {

package/lib/knowledge-store.d.ts

@@ -1,4 +1,4 @@
-import { type Evidence, type EvidenceInput, type Lesson, type LessonInput, type LessonState, type ReviewDecision } from './knowledge.js';
+import { type Evidence, type EvidenceInput, type Lesson, type LessonInput, type LessonReviewResolution, type LessonState, type ReviewDecision } from './knowledge.js';
 /** events.jsonl 默认最多回放的行数（有界读取）。 */
 export declare const MAX_REPLAY_EVENTS = 200000;
 /** KnowledgeStore 构造选项（都可省略，保持 FREEZE 的 constructor(knowledgeDir) 可用）。 */
@@ -47,16 +47,31 @@ export declare class KnowledgeStore {
     /**
      * 创建候选经验。同 idempotencyKey + 同 requestHash 幂等；同指纹（文本 + 范围相同）确定性合并，
      * 只把新证据并入已有经验，不新增经验。
-     * R2′：有 read 证据 → 初始 usable（含 user-correction read 时 review=accepted/user）；只有 claimed 或无证据 → candidate。
+     * 经调用方核验的 read 来源可用于项目经验；来源读取不代表用户采纳，review 始终 unreviewed。
      */
-    createLesson(input: LessonInput, idempotencyKey: string): {
+    createLesson(input: LessonInput, idempotencyKey: string, options?: {
+        requireReview?: boolean;
+    }): {
         lesson: Lesson;
         created: boolean;
     };
+    /** 追加证据与更新引用共用一把锁；先检查 revision 与全部输入，不改变审阅状态。 */
+    attachEvidence(id: string, inputs: EvidenceInput[], expectedRevision: number, idempotencyKey: string): Lesson;
     /** 按 patch 更新经验；revision 不符抛 KnowledgeError('revision')（details 带 currentRevision）且不写。 */
     updateLesson(id: string, patch: Partial<Lesson>, expectedRevision: number, idempotencyKey: string): Lesson;
+    /** 记录一次使用反馈，不改变审阅、状态、证据和最后核验时间。 */
+    recordFeedback(id: string, vote: 'useful' | 'not-applicable', note: string | undefined, expectedRevision: number, idempotencyKey: string): Lesson;
     /** 审阅经验：accepted → usable，rejected → rejected，unreviewed → candidate。 */
-    reviewLesson(id: string, decision: ReviewDecision, expectedRevision: number, idempotencyKey: string, actor?: string): Lesson;
+    reviewLesson(id: string, decision: ReviewDecision, expectedRevision: number, idempotencyKey: string, actor?: string, note?: string, resolution?: LessonReviewResolution): Lesson;
+    /**
+     * 批量原子更新（M2-②）：一个事件承载全部变更；先统一校验，
+     * 任一条不通过 → 零写入并抛 KnowledgeError（details.failedId）。
+     */
+    updateLessonsBatch(updates: Array<{
+        id: string;
+        patch: Partial<Lesson>;
+        expectedRevision: number;
+    }>, idempotencyKey: string): Lesson[];
     /** 状态迁移；不允许的迁移抛 KnowledgeError('invalid') 且不写。 */
     applyTransition(id: string, to: LessonState, expectedRevision: number, idempotencyKey: string): Lesson;
     /** 从事件完整重建派生索引与 checkpoint；不删除、不改写 events.jsonl / evidence.jsonl。 */
@@ -71,10 +86,11 @@ export declare class KnowledgeStore {
         badLines: number;
         orphanEvents: number;
         unsupportedVersions: number;
+        skippedEvents: number;
         firstReplayedEventId?: string;
         replayMode: 'full' | 'snapshot+tail';
         replayedEvents: number;
-        skippedEvents: number;
+        unreplayedEvents: number;
     };
     /** 只读诊断：锁、文件、计数与最近一次派生索引写失败；绝不获取锁、绝不写盘。 */
     diagnose(): {
@@ -113,6 +129,7 @@ export declare class KnowledgeStore {
             badLines: number;
             orphanEvents: number;
             unsupportedVersions: number;
+            skippedEvents: number;
             truncated: boolean;
             byState: Record<LessonState, number>;
         };
@@ -135,6 +152,7 @@ export declare class KnowledgeStore {
      *   在命中该幂等键的那一刻取快照；失败再退回当前实体（best effort）。
      */
     private resolveIdempotentLesson;
+    private resolveIdempotentBatch;
     private replayUntilIdempotencyKey;
     /** 顺序读取 JSONL 的非空行；每 TOUCH_EVERY_LINES 行调用一次 touch（长回放锁心跳）。 */
     private forEachLine;