@stardustlc/dsh-dream 0.6.0 → 0.7.0

package/lib/tools.js

@@ -844,7 +844,6 @@ export function buildDreamTools(config) {
         },
         timeoutMs: 15000,
     };
-    const REVIEW_ACTIONS = ['accept', 'reject', 'reopen', 'mark-stale', 'mark-disputed', 'resolve-conflict', 'attach-evidence'];
     const dreamReview = {
         name: 'dream_review',
         description: '审梦：采纳/驳回/标记冲突或过期/追加验证证据，必须带 expectedRevision（revision 不符会拒绝且不写入）。模型调用 actor 一律记为 model，不得冒充用户采纳；attach-evidence 只追加证据，不自动改变 state。',
@@ -870,210 +869,7 @@ export function buildDreamTools(config) {
             },
         },
         async execute(rawArgs, exec) {
-            const args = asRecord(rawArgs);
-            const action = optionalString(args, 'action');
-            if (action === undefined || !REVIEW_ACTIONS.includes(action)) {
-                throw new Error('action 必须是 ' + REVIEW_ACTIONS.join(' / ') + '。');
-            }
-            const targetId = optionalString(args, 'targetId');
-            const lessonIdArg = optionalString(args, 'lessonId');
-            const lessonId = targetId ?? lessonIdArg;
-            if (lessonId === undefined) {
-                throw new KnowledgeError('invalid', '缺少 lessonId（resolve-conflict 可用 targetId）。');
-            }
-            const revisionRaw = args.expectedRevision;
-            if (typeof revisionRaw !== 'number' || !Number.isInteger(revisionRaw) || revisionRaw < 1) {
-                throw new Error('expectedRevision 必须是 >= 1 的整数。');
-            }
-            const expectedRevision = revisionRaw;
-            const store = knowledgeStoreOf(cfg);
-            const before = store.getLesson(lessonId);
-            if (before === undefined)
-                throw new KnowledgeError('invalid', '经验不存在：' + lessonId);
-            if (before.revision !== expectedRevision) {
-                const error = new KnowledgeError('revision', '经验 ' + lessonId + ' 期望 revision ' + expectedRevision + '，实际 ' + before.revision);
-                error.currentRevision = before.revision;
-                error.details = { currentRevision: before.revision };
-                throw error;
-            }
-            const affectedIdsArg = stringArray(args, 'affectedIds');
-            const conflictWith = affectedIdsArg.length > 0 ? affectedIdsArg : stringArray(args, 'conflictWith');
-            const note = optionalString(args, 'note');
-            const maskedNote = note === undefined ? undefined : maskIfNeeded(cfg, note);
-            const resolutionArg = optionalString(args, 'resolution');
-            const evidenceInputs = action === 'attach-evidence'
-                ? parseEvidenceArgs(args, 'evidence', before.scope.projectId).map(entry => verifyEvidence(entry, {
-                    sessionsRoot: cfg.sessionsRoot, projectId: before.scope.projectId, workspaceRoot: before.scope.workspaceRoot, cwd: execCwdOf(exec),
-                })).map(entry => ({ ...entry, summary: maskIfNeeded(cfg, entry.summary) }))
-                : [];
-            const idempotencyKey = 'dream_review:' + sha256Short(JSON.stringify({
-                action, lessonId, expectedRevision, conflictWith, resolution: resolutionArg ?? null, note: maskedNote ?? null,
-                evidence: evidenceInputs,
-            }));
-            // 模型调用永远记为 model；入参里的 actor 一律忽略（用户采纳只能来自宿主授权的真实用户指令）。
-            const actor = 'model';
-            let lesson;
-            switch (action) {
-                case 'accept':
-                    lesson = store.reviewLesson(lessonId, 'accepted', expectedRevision, idempotencyKey, actor);
-                    break;
-                case 'reject':
-                    lesson = store.reviewLesson(lessonId, 'rejected', expectedRevision, idempotencyKey, actor);
-                    break;
-                case 'reopen':
-                    if (before.state !== 'rejected')
-                        throw new KnowledgeError('invalid', 'reopen 只用于把已驳回经验重新送审。');
-                    lesson = store.reviewLesson(lessonId, 'unreviewed', expectedRevision, idempotencyKey, actor);
-                    break;
-                case 'mark-stale':
-                    lesson = store.applyTransition(lessonId, 'stale', expectedRevision, idempotencyKey);
-                    break;
-                case 'attach-evidence':
-                    lesson = store.attachEvidence(lessonId, evidenceInputs, expectedRevision, idempotencyKey);
-                    break;
-                case 'mark-disputed': {
-                    // M2：primary 与所有 conflictWith 一律置 disputed，双方 conflictIds 互相登记（去重、可多对多）。
-                    const members = requireConflictGroup(store, lessonId, before, conflictWith);
-                    const group = members.map((member) => member.id);
-                    const updates = [];
-                    for (const member of members) {
-                        const others = group.filter((id) => id !== member.id);
-                        const conflictIds = [...member.lesson.conflictIds];
-                        for (const id of others) {
-                            if (!conflictIds.includes(id))
-                                conflictIds.push(id);
-                        }
-                        const noteSatisfied = maskedNote === undefined || member.lesson.review.note === maskedNote;
-                        const alreadyDisputed = member.lesson.state === 'disputed'
-                            && conflictIds.length === member.lesson.conflictIds.length
-                            && conflictIds.every((id) => member.lesson.conflictIds.includes(id))
-                            && noteSatisfied;
-                        if (alreadyDisputed)
-                            continue;
-                        const patch = { state: 'disputed', conflictIds };
-                        if (maskedNote !== undefined)
-                            patch.review = { ...member.lesson.review, note: maskedNote };
-                        updates.push({ id: member.id, patch, expectedRevision: member.lesson.revision });
-                    }
-                    lesson = updates.length === 0 ? before : store.updateLessonsBatch(updates, idempotencyKey).find(item => item.id === lessonId) ?? before;
-                    break;
-                }
-                case 'resolve-conflict': {
-                    const resolution = optionalString(args, 'resolution');
-                    if (resolution !== 'prefer' && resolution !== 'drop' && resolution !== 'merge') {
-                        throw new KnowledgeError('invalid', 'resolution 必须是 prefer / drop / merge。');
-                    }
-                    if (maskedNote === undefined) {
-                        throw new KnowledgeError('invalid', 'resolve-conflict 必须带 note（解析依据），以便事件可回溯。');
-                    }
-                    if (conflictWith.length === 0) {
-                        throw new KnowledgeError('invalid', 'resolve-conflict 必须带至少一个 affectedIds/conflictWith 目标 id。');
-                    }
-                    const members = requireConflictGroup(store, lessonId, before, conflictWith);
-                    const group = members.map((member) => member.id);
-                    // 校验：所有当事方必须 disputed，且互相登记 conflictIds；否则零写入。
-                    for (const member of members) {
-                        if (member.lesson.state !== 'disputed') {
-                            throw new KnowledgeError('invalid', '冲突解析要求 ' + member.id + ' 处于 disputed（实际 ' + member.lesson.state + '）');
-                        }
-                        for (const other of group) {
-                            if (other !== member.id && !member.lesson.conflictIds.includes(other)) {
-                                throw new KnowledgeError('invalid', '冲突未双向登记：' + member.id + ' 的 conflictIds 缺少 ' + other);
-                            }
-                        }
-                    }
-                    const now = new Date().toISOString();
-                    const affectedIds = group.filter((id) => id !== lessonId);
-                    const resolutionPayload = { kind: resolution, targetId: lessonId, affectedIds };
-                    const remainingOf = (member) => member.lesson.conflictIds.filter((id) => !group.includes(id));
-                    const planned = [];
-                    if (resolution === 'prefer' || resolution === 'drop') {
-                        for (const member of members) {
-                            const isPrimary = member.id === lessonId;
-                            const patch = { conflictIds: remainingOf(member) };
-                            if (resolution === 'prefer') {
-                                if (isPrimary) {
-                                    if (remainingOf(member).length === 0)
-                                        patch.state = 'usable';
-                                    patch.review = { ...member.lesson.review, at: now, note: maskedNote, resolution: resolutionPayload };
-                                }
-                                else {
-                                    patch.state = 'rejected';
-                                    patch.review = { decision: 'rejected', actor: 'model', at: now, note: '冲突解析：败给 ' + lessonId, resolution: resolutionPayload };
-                                }
-                            }
-                            else if (isPrimary) {
-                                patch.state = 'rejected';
-                                patch.review = { decision: 'rejected', actor: 'model', at: now, note: '冲突解析：放弃本条目', resolution: resolutionPayload };
-                            }
-                            else {
-                                if (remainingOf(member).length === 0)
-                                    patch.state = 'usable';
-                                patch.review = { ...member.lesson.review, at: now, note: maskedNote, resolution: resolutionPayload };
-                            }
-                            planned.push({ id: member.id, isPrimary, patch });
-                        }
-                    }
-                    else {
-                        const primaryMember = members.find((member) => member.id === lessonId);
-                        const mergedEvidence = [...(primaryMember?.lesson.evidenceIds ?? [])];
-                        for (const member of members) {
-                            if (member.id === lessonId)
-                                continue;
-                            for (const id of member.lesson.evidenceIds) {
-                                if (!mergedEvidence.includes(id))
-                                    mergedEvidence.push(id);
-                            }
-                        }
-                        for (const member of members) {
-                            const isPrimary = member.id === lessonId;
-                            const patch = { conflictIds: remainingOf(member) };
-                            if (isPrimary) {
-                                const supersedes = [...(member.lesson.supersedes ?? [])];
-                                for (const id of group) {
-                                    if (id !== member.id && !supersedes.includes(id))
-                                        supersedes.push(id);
-                                }
-                                if (remainingOf(member).length === 0)
-                                    patch.state = 'usable';
-                                patch.supersedes = supersedes;
-                                patch.evidenceIds = mergedEvidence;
-                                patch.review = { ...member.lesson.review, at: now, note: '冲突解析：并入 ' + affectedIds.join('、'), resolution: resolutionPayload };
-                            }
-                            else {
-                                patch.state = 'stale';
-                                patch.review = { ...member.lesson.review, at: now, note: maskedNote, resolution: resolutionPayload };
-                            }
-                            planned.push({ id: member.id, isPrimary, patch });
-                        }
-                    }
-                    const updates = [];
-                    for (const item of planned) {
-                        const member = members.find((entry) => entry.id === item.id);
-                        if (member === undefined)
-                            continue;
-                        const current = member.lesson;
-                        const desiredConflictIds = item.patch.conflictIds ?? [];
-                        const reviewPatch = item.patch.review;
-                        const evidencePatch = item.patch.evidenceIds;
-                        const desiredState = item.patch.state;
-                        const noOp = desiredState === current.state
-                            && desiredConflictIds.length === current.conflictIds.length
-                            && desiredConflictIds.every((id) => current.conflictIds.includes(id))
-                            && (reviewPatch === undefined || (current.review.decision === reviewPatch.decision && current.review.note === reviewPatch.note))
-                            && (evidencePatch === undefined
-                                || (evidencePatch.length === current.evidenceIds.length && evidencePatch.every((id) => current.evidenceIds.includes(id))));
-                        if (noOp)
-                            continue;
-                        updates.push({ id: item.id, patch: item.patch, expectedRevision: current.revision });
-                    }
-                    lesson = updates.length === 0 ? before : store.updateLessonsBatch(updates, idempotencyKey).find(item => item.id === lessonId) ?? before;
-                    break;
-                }
-                default:
-                    throw new Error('不支持的动作：' + action);
-            }
-            return { ok: true, lesson, previousState: before.state, state: lesson.state, revision: lesson.revision };
+            return executeDreamReview(cfg, rawArgs, exec, 'model');
         },
         timeoutMs: 15000,
     };
@@ -1102,3 +898,211 @@ export function buildDigestText(digest) {
     }
     return lines.join('\n');
 }
+const REVIEW_ACTIONS = ['accept', 'reject', 'reopen', 'mark-stale', 'mark-disputed', 'resolve-conflict', 'attach-evidence'];
+/** actor comes from the trusted caller, never from tool or browser arguments. */
+export async function executeDreamReview(cfg, rawArgs, exec, actor = 'model') {
+    const args = asRecord(rawArgs);
+    const action = optionalString(args, 'action');
+    if (action === undefined || !REVIEW_ACTIONS.includes(action)) {
+        throw new Error('action 必须是 ' + REVIEW_ACTIONS.join(' / ') + '。');
+    }
+    const targetId = optionalString(args, 'targetId');
+    const lessonIdArg = optionalString(args, 'lessonId');
+    const lessonId = targetId ?? lessonIdArg;
+    if (lessonId === undefined) {
+        throw new KnowledgeError('invalid', '缺少 lessonId（resolve-conflict 可用 targetId）。');
+    }
+    const revisionRaw = args.expectedRevision;
+    if (typeof revisionRaw !== 'number' || !Number.isInteger(revisionRaw) || revisionRaw < 1) {
+        throw new Error('expectedRevision 必须是 >= 1 的整数。');
+    }
+    const expectedRevision = revisionRaw;
+    const store = knowledgeStoreOf(cfg);
+    const before = store.getLesson(lessonId);
+    if (before === undefined)
+        throw new KnowledgeError('invalid', '经验不存在：' + lessonId);
+    if (before.revision !== expectedRevision) {
+        const error = new KnowledgeError('revision', '经验 ' + lessonId + ' 期望 revision ' + expectedRevision + '，实际 ' + before.revision);
+        error.currentRevision = before.revision;
+        error.details = { currentRevision: before.revision };
+        throw error;
+    }
+    const affectedIdsArg = stringArray(args, 'affectedIds');
+    const conflictWith = affectedIdsArg.length > 0 ? affectedIdsArg : stringArray(args, 'conflictWith');
+    const note = optionalString(args, 'note');
+    const maskedNote = note === undefined ? undefined : maskIfNeeded(cfg, note);
+    const resolutionArg = optionalString(args, 'resolution');
+    const evidenceInputs = action === 'attach-evidence'
+        ? parseEvidenceArgs(args, 'evidence', before.scope.projectId).map(entry => verifyEvidence(entry, {
+            sessionsRoot: cfg.sessionsRoot, projectId: before.scope.projectId, workspaceRoot: before.scope.workspaceRoot, cwd: execCwdOf(exec),
+        })).map(entry => ({ ...entry, summary: maskIfNeeded(cfg, entry.summary) }))
+        : [];
+    const idempotencyKey = 'dream_review:' + sha256Short(JSON.stringify({
+        actor, action, lessonId, expectedRevision, conflictWith, resolution: resolutionArg ?? null, note: maskedNote ?? null,
+        evidence: evidenceInputs,
+    }));
+    let lesson;
+    switch (action) {
+        case 'accept':
+            lesson = store.reviewLesson(lessonId, 'accepted', expectedRevision, idempotencyKey, actor);
+            break;
+        case 'reject':
+            lesson = store.reviewLesson(lessonId, 'rejected', expectedRevision, idempotencyKey, actor);
+            break;
+        case 'reopen':
+            if (before.state !== 'rejected')
+                throw new KnowledgeError('invalid', 'reopen 只用于把已驳回经验重新送审。');
+            lesson = store.reviewLesson(lessonId, 'unreviewed', expectedRevision, idempotencyKey, actor);
+            break;
+        case 'mark-stale':
+            lesson = actor === 'human'
+                ? store.updateLesson(lessonId, { state: 'stale', review: { ...before.review, actor, at: new Date().toISOString(), ...(maskedNote === undefined ? {} : { note: maskedNote }) } }, expectedRevision, idempotencyKey)
+                : store.applyTransition(lessonId, 'stale', expectedRevision, idempotencyKey);
+            break;
+        case 'attach-evidence':
+            lesson = store.attachEvidence(lessonId, evidenceInputs, expectedRevision, idempotencyKey);
+            break;
+        case 'mark-disputed': {
+            // M2：primary 与所有 conflictWith 一律置 disputed，双方 conflictIds 互相登记（去重、可多对多）。
+            const members = requireConflictGroup(store, lessonId, before, conflictWith);
+            const group = members.map((member) => member.id);
+            const updates = [];
+            for (const member of members) {
+                const others = group.filter((id) => id !== member.id);
+                const conflictIds = [...member.lesson.conflictIds];
+                for (const id of others) {
+                    if (!conflictIds.includes(id))
+                        conflictIds.push(id);
+                }
+                const noteSatisfied = maskedNote === undefined || member.lesson.review.note === maskedNote;
+                const alreadyDisputed = member.lesson.state === 'disputed'
+                    && conflictIds.length === member.lesson.conflictIds.length
+                    && conflictIds.every((id) => member.lesson.conflictIds.includes(id))
+                    && noteSatisfied;
+                if (alreadyDisputed)
+                    continue;
+                const patch = { state: 'disputed', conflictIds };
+                if (maskedNote !== undefined)
+                    patch.review = { ...member.lesson.review, note: maskedNote };
+                updates.push({ id: member.id, patch, expectedRevision: member.lesson.revision });
+            }
+            lesson = updates.length === 0 ? before : store.updateLessonsBatch(updates, idempotencyKey).find(item => item.id === lessonId) ?? before;
+            break;
+        }
+        case 'resolve-conflict': {
+            const resolution = optionalString(args, 'resolution');
+            if (resolution !== 'prefer' && resolution !== 'drop' && resolution !== 'merge') {
+                throw new KnowledgeError('invalid', 'resolution 必须是 prefer / drop / merge。');
+            }
+            if (maskedNote === undefined) {
+                throw new KnowledgeError('invalid', 'resolve-conflict 必须带 note（解析依据），以便事件可回溯。');
+            }
+            if (conflictWith.length === 0) {
+                throw new KnowledgeError('invalid', 'resolve-conflict 必须带至少一个 affectedIds/conflictWith 目标 id。');
+            }
+            const members = requireConflictGroup(store, lessonId, before, conflictWith);
+            const group = members.map((member) => member.id);
+            // 校验：所有当事方必须 disputed，且互相登记 conflictIds；否则零写入。
+            for (const member of members) {
+                if (member.lesson.state !== 'disputed') {
+                    throw new KnowledgeError('invalid', '冲突解析要求 ' + member.id + ' 处于 disputed（实际 ' + member.lesson.state + '）');
+                }
+                for (const other of group) {
+                    if (other !== member.id && !member.lesson.conflictIds.includes(other)) {
+                        throw new KnowledgeError('invalid', '冲突未双向登记：' + member.id + ' 的 conflictIds 缺少 ' + other);
+                    }
+                }
+            }
+            const now = new Date().toISOString();
+            const affectedIds = group.filter((id) => id !== lessonId);
+            const resolutionPayload = { kind: resolution, targetId: lessonId, affectedIds };
+            const remainingOf = (member) => member.lesson.conflictIds.filter((id) => !group.includes(id));
+            const planned = [];
+            if (resolution === 'prefer' || resolution === 'drop') {
+                for (const member of members) {
+                    const isPrimary = member.id === lessonId;
+                    const patch = { conflictIds: remainingOf(member) };
+                    if (resolution === 'prefer') {
+                        if (isPrimary) {
+                            if (remainingOf(member).length === 0)
+                                patch.state = 'usable';
+                            patch.review = { ...member.lesson.review, ...(actor === 'human' ? { actor, decision: 'accepted' } : {}), at: now, note: maskedNote, resolution: resolutionPayload };
+                        }
+                        else {
+                            patch.state = 'rejected';
+                            patch.review = { decision: 'rejected', actor, at: now, note: '冲突解析：败给 ' + lessonId, resolution: resolutionPayload };
+                        }
+                    }
+                    else if (isPrimary) {
+                        patch.state = 'rejected';
+                        patch.review = { decision: 'rejected', actor, at: now, note: '冲突解析：放弃本条目', resolution: resolutionPayload };
+                    }
+                    else {
+                        if (remainingOf(member).length === 0)
+                            patch.state = 'usable';
+                        patch.review = { ...member.lesson.review, ...(actor === 'human' ? { actor, decision: 'accepted' } : {}), at: now, note: maskedNote, resolution: resolutionPayload };
+                    }
+                    planned.push({ id: member.id, isPrimary, patch });
+                }
+            }
+            else {
+                const primaryMember = members.find((member) => member.id === lessonId);
+                const mergedEvidence = [...(primaryMember?.lesson.evidenceIds ?? [])];
+                for (const member of members) {
+                    if (member.id === lessonId)
+                        continue;
+                    for (const id of member.lesson.evidenceIds) {
+                        if (!mergedEvidence.includes(id))
+                            mergedEvidence.push(id);
+                    }
+                }
+                for (const member of members) {
+                    const isPrimary = member.id === lessonId;
+                    const patch = { conflictIds: remainingOf(member) };
+                    if (isPrimary) {
+                        const supersedes = [...(member.lesson.supersedes ?? [])];
+                        for (const id of group) {
+                            if (id !== member.id && !supersedes.includes(id))
+                                supersedes.push(id);
+                        }
+                        if (remainingOf(member).length === 0)
+                            patch.state = 'usable';
+                        patch.supersedes = supersedes;
+                        patch.evidenceIds = mergedEvidence;
+                        patch.review = { ...member.lesson.review, ...(actor === 'human' ? { actor, decision: 'accepted' } : {}), at: now, note: '冲突解析：并入 ' + affectedIds.join('、'), resolution: resolutionPayload };
+                    }
+                    else {
+                        patch.state = 'stale';
+                        patch.review = { ...member.lesson.review, ...(actor === 'human' ? { actor } : {}), at: now, note: maskedNote, resolution: resolutionPayload };
+                    }
+                    planned.push({ id: member.id, isPrimary, patch });
+                }
+            }
+            const updates = [];
+            for (const item of planned) {
+                const member = members.find((entry) => entry.id === item.id);
+                if (member === undefined)
+                    continue;
+                const current = member.lesson;
+                const desiredConflictIds = item.patch.conflictIds ?? [];
+                const reviewPatch = item.patch.review;
+                const evidencePatch = item.patch.evidenceIds;
+                const desiredState = item.patch.state;
+                const noOp = desiredState === current.state
+                    && desiredConflictIds.length === current.conflictIds.length
+                    && desiredConflictIds.every((id) => current.conflictIds.includes(id))
+                    && (reviewPatch === undefined || (current.review.decision === reviewPatch.decision && current.review.note === reviewPatch.note))
+                    && (evidencePatch === undefined
+                        || (evidencePatch.length === current.evidenceIds.length && evidencePatch.every((id) => current.evidenceIds.includes(id))));
+                if (noOp)
+                    continue;
+                updates.push({ id: item.id, patch: item.patch, expectedRevision: current.revision });
+            }
+            lesson = updates.length === 0 ? before : store.updateLessonsBatch(updates, idempotencyKey).find(item => item.id === lessonId) ?? before;
+            break;
+        }
+        default:
+            throw new Error('不支持的动作：' + action);
+    }
+    return { ok: true, lesson, previousState: before.state, state: lesson.state, revision: lesson.revision };
+}

package/lib/web-actions.d.ts

@@ -0,0 +1,11 @@
+import { type ResolvedDreamConfig } from './config.js';
+export declare const DREAM_ACTION_ROUTE = "/api/dsh-dream/actions";
+type Options = {
+    journalDir?: string;
+    config?: Record<string, unknown> | ResolvedDreamConfig | null;
+};
+/** Connection has authenticated the operator before this handler is called. */
+export declare function createDreamActionHandler(options?: Options): (request: Request) => Promise<Response>;
+/** No unauthenticated webServer fallback: old hosts keep their read-only panel. */
+export declare function installDreamActions(ctx: any, options?: Options): void;
+export {};

package/lib/web-actions.js

@@ -0,0 +1,175 @@
+/** Mutations are mounted exclusively on Connection's authenticated Fetch carrier. */
+import { randomUUID } from 'node:crypto';
+import { realpathSync } from 'node:fs';
+import { isAbsolute, join } from 'node:path';
+import { resolveConfig } from './config.js';
+import { KnowledgeError } from './knowledge.js';
+import { KnowledgeStore } from './knowledge-store.js';
+import { maskSecrets } from './mask.js';
+import { buildDreamTools, executeDreamReview } from './tools.js';
+import { rollbackBridge } from './bridge.js';
+import { maskDeep } from './web.js';
+export const DREAM_ACTION_ROUTE = '/api/dsh-dream/actions';
+const BODY_LIMIT = 64 * 1024;
+const PREVIEW_LIFETIME = 10 * 60 * 1000;
+const MAX_PREVIEWS = 100;
+function json(status, value) {
+    return new Response(JSON.stringify(value), { status, headers: { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' } });
+}
+function fail(status, code, message) {
+    return json(status, { ok: false, error: { code, message: maskSecrets(message) } });
+}
+function text(body, key) {
+    const value = body[key];
+    if (typeof value !== 'string' || value.trim() === '' || value.length > 2000)
+        throw new KnowledgeError('invalid', key + ' 必须是非空文本，最多 2000 字符');
+    return value.trim();
+}
+function checkRevision(store, body) {
+    const id = text(body, 'lessonId');
+    const lesson = store.getLesson(id);
+    if (lesson === undefined)
+        throw new KnowledgeError('invalid', '经验不存在，请刷新列表');
+    if (typeof body.expectedRevision !== 'number' || !Number.isInteger(body.expectedRevision) || body.expectedRevision < 1)
+        throw new KnowledgeError('invalid', '缺少有效的经验版本');
+    if (lesson.revision !== body.expectedRevision)
+        throw new KnowledgeError('revision', '经验已更新，请刷新后重新操作');
+    return lesson;
+}
+/** Connection has authenticated the operator before this handler is called. */
+export function createDreamActionHandler(options = {}) {
+    const cfg = { ...resolveConfig(options.config), ...(options.journalDir === undefined ? {} : { journalDir: options.journalDir }) };
+    const store = new KnowledgeStore(join(cfg.journalDir, 'knowledge'), { maskSecrets: cfg.maskSecrets });
+    const bridge = buildDreamTools(cfg).find(tool => tool.name === 'dream_bridge');
+    const previews = new Map();
+    return async (request) => {
+        if (request.method !== 'POST')
+            return fail(405, 'method', '请使用 POST');
+        if (request.headers.get('content-type')?.split(';', 1)[0]?.trim().toLowerCase() !== 'application/json')
+            return fail(415, 'content-type', '需要 application/json');
+        // A web form or cross-origin simple request cannot supply this header.
+        if (request.headers.get('x-dsh-dream-action') !== '1')
+            return fail(403, 'forbidden', '请从 Dream 面板操作');
+        const site = request.headers.get('sec-fetch-site');
+        if (site !== null && site !== 'same-origin' && site !== 'none')
+            return fail(403, 'forbidden', '拒绝跨站操作');
+        const origin = request.headers.get('origin');
+        if (origin !== null && /^https?:/i.test(origin)) {
+            try {
+                // The official node:http bridge intentionally uses http://dsh.internal
+                // as its Fetch URL base; the preserved Host is the original authority.
+                const host = request.headers.get('host');
+                const authority = host === null ? new URL(request.url).host : new URL('http://' + host).host;
+                if (new URL(origin).host !== authority)
+                    return fail(403, 'forbidden', '拒绝跨源操作');
+            }
+            catch {
+                return fail(403, 'forbidden', '无效来源');
+            }
+        }
+        try {
+            const reader = request.body?.getReader();
+            if (reader === undefined)
+                return fail(400, 'invalid', '缺少请求内容');
+            const chunks = [];
+            let size = 0;
+            try {
+                for (;;) {
+                    const part = await reader.read();
+                    if (part.done)
+                        break;
+                    size += part.value.byteLength;
+                    if (size > BODY_LIMIT) {
+                        await reader.cancel();
+                        return fail(413, 'too-large', '请求内容超过 64 KB');
+                    }
+                    chunks.push(part.value);
+                }
+            }
+            finally {
+                reader.releaseLock();
+            }
+            let raw;
+            try {
+                raw = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+            }
+            catch {
+                return fail(400, 'invalid', '请求不是有效 JSON');
+            }
+            if (raw === null || typeof raw !== 'object' || Array.isArray(raw))
+                return fail(400, 'invalid', '请求必须是对象');
+            const body = raw;
+            if (request.signal.aborted)
+                return fail(409, 'cancelled', '操作已取消');
+            const operation = text(body, 'operation');
+            if (operation === 'review') {
+                if (!['accept', 'reject', 'reopen', 'mark-stale', 'resolve-conflict'].includes(String(body.action)))
+                    throw new KnowledgeError('invalid', '不支持此页面审阅动作');
+                checkRevision(store, body);
+                const result = await executeDreamReview(cfg, body, undefined, 'human');
+                return json(200, maskDeep(result));
+            }
+            if (operation === 'feedback') {
+                // The store checks revision inside its lock and keeps retry keys idempotent.
+                const id = text(body, 'lessonId');
+                const key = text(body, 'requestId');
+                if (!/^[a-zA-Z0-9_-]{8,100}$/.test(key))
+                    throw new KnowledgeError('invalid', '反馈请求标识无效');
+                const note = body.note === undefined ? undefined : text(body, 'note');
+                const lesson = store.recordFeedback(id, body.vote, note, body.expectedRevision, 'web-feedback:' + key);
+                return json(200, maskDeep({ ok: true, lesson, message: '已记录使用反馈，审阅状态保持原样' }));
+            }
+            for (const [key, value] of previews)
+                if (value.expires < Date.now())
+                    previews.delete(key);
+            if (operation === 'preview') {
+                const lesson = checkRevision(store, body);
+                const root = lesson.scope.workspaceRoot;
+                if (root === undefined || !isAbsolute(root))
+                    throw new KnowledgeError('invalid', '这条经验没有项目目录，请在对应项目的对话中预览规则');
+                const canonicalRoot = realpathSync(root);
+                const result = await bridge.execute({ mode: 'preview', lessonIds: [lesson.id], path: 'AGENTS.md', projectId: lesson.scope.projectId }, { cwd: canonicalRoot });
+                if (result.ok !== true)
+                    return json(409, maskDeep(result));
+                if (result.lessons.length === 0)
+                    return fail(409, 'ineligible', '当前经验不满足写入资格，请先查看适用范围与审阅状态');
+                while (previews.size >= MAX_PREVIEWS)
+                    previews.delete(previews.keys().next().value);
+                const token = randomUUID();
+                previews.set(token, { expires: Date.now() + PREVIEW_LIFETIME, root: canonicalRoot, lessonId: lesson.id, revision: lesson.revision, projectId: lesson.scope.projectId, sha: result.expected.sha256, previewId: result.previewId });
+                return json(200, { ...maskDeep(result), token });
+            }
+            if (operation === 'apply') {
+                const token = text(body, 'token');
+                const preview = previews.get(token);
+                if (preview === undefined)
+                    return fail(409, 'preview-expired', '预览已过期，请重新预览');
+                const lesson = checkRevision(store, { lessonId: preview.lessonId, expectedRevision: preview.revision });
+                if (realpathSync(lesson.scope.workspaceRoot) !== preview.root)
+                    return fail(409, 'revision', '项目目录已变化，请重新预览');
+                const result = await bridge.execute({ mode: 'apply', lessonIds: [preview.lessonId], path: 'AGENTS.md', projectId: preview.projectId, expectedSha256: preview.sha, previewId: preview.previewId }, { cwd: preview.root });
+                previews.delete(token);
+                return json(result.ok === true ? 200 : 409, maskDeep(result));
+            }
+            if (operation === 'rollback') {
+                const result = rollbackBridge({ journalDir: cfg.journalDir, projectRoot: '', backupId: text(body, 'backupId') });
+                return json(result.ok === true ? 200 : 409, maskDeep(result));
+            }
+            throw new KnowledgeError('invalid', '不支持此操作');
+        }
+        catch (error) {
+            if (error instanceof KnowledgeError)
+                return fail(error.code === 'revision' || error.code === 'duplicate' ? 409 : error.code === 'io' ? 500 : 400, error.code, error.message);
+            return fail(500, 'io', '操作失败：' + (error instanceof Error ? error.message : String(error)));
+        }
+    };
+}
+/** No unauthenticated webServer fallback: old hosts keep their read-only panel. */
+export function installDreamActions(ctx, options = {}) {
+    const fetch = createDreamActionHandler(options);
+    ctx.inject(['connection'], (host) => {
+        if (typeof host.connection?.fetch?.register !== 'function')
+            return;
+        host.connection.fetch.register({ path: DREAM_ACTION_ROUTE, methods: ['POST'], requestBody: 'buffered', fetch });
+    });
+}

package/lib/web.d.ts

@@ -106,6 +106,8 @@ export declare function limitFromQuery(raw: unknown, fallback?: number): number;
 export declare function knowledgeDirOf(options: DreamWebOptions, journalDir?: string): string;
 /** 解析后的 bridgeDir：显式路径优先，否则 = <journalDir>/bridge。 */
 export declare function bridgeDirOf(options: DreamWebOptions, journalDir?: string): string;
+/** 递归脱敏；结构化绝对路径按目录分段，避免 Unix 分隔符把正常路径连成长令牌。 */
+export declare function maskDeep<T>(value: T, key?: string): T;
 /** 知识目录不存在（或尚未建立）时的空载荷：不写盘、不报 404。 */
 export declare function emptyKnowledgePayload(): KnowledgeWebPayload;
 /**

package/lib/web.js

@@ -139,7 +139,7 @@ const HASH_KEY_RE = /^(?:sourceHash|beforeSha256|afterSha256|afterBlockSha256|af
 const REFERENCE_KEYS = new Set(['id', 'lessonId', 'lessonIds', 'evidenceIds', 'conflictIds', 'supersedes', 'targetId', 'affectedIds', 'backupId', 'previewId']);
 const PATH_KEYS = new Set(['target', 'path', 'resolvedPath', 'workspaceRoot']);
 /** 递归脱敏；结构化绝对路径按目录分段，避免 Unix 分隔符把正常路径连成长令牌。 */
-function maskDeep(value, key) {
+export function maskDeep(value, key) {
     if (typeof value === 'string') {
         if (key !== undefined && HASH_KEY_RE.test(key) && /^[0-9a-f]{64}$/i.test(value))
             return value;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardustlc/dsh-dream",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "DSH 做梦与经验记忆：核验来源、审阅经验，预览写入 AGENTS.md 并支持回滚；附梦境日记面板，默认隐私脱敏，零运行时依赖。",
   "type": "module",
   "main": "lib/index.js",