dsh-auto-memory 0.5.0 → 0.5.1

package/README.md

@@ -199,9 +199,13 @@ Override in your profile's `cordis.patch.yml` (config replaces wholesale):
 ```yaml
 - id: auto-memory
   config:
-    maxBytes: 4096          # injection budget
+    maxBytes: 4096          # injection budget (index + guidance + wrapper)
     memoryDir: D:/memories  # default: $DSH_HOME/memory
     enableUserScope: true   # false: user layer off on every path
+    autoSummarize: false         # true: on root-session end, a background LLM files durable new facts
+    autoSummarizeMaxMemories: 5  # cap per consolidation
+    autoSummarizeMaxTokens: 2048 # consolidation output cap
+    staleAfterDays: 0            # >0: soft-hide zero-read memories older than N days (files kept)
 ```
 
 ## How it works (60 seconds)

package/README.zh.md

@@ -168,9 +168,13 @@ dsh --profile demo                               # 重启 profile 生效
 ```yaml
 - id: auto-memory
   config:
-    maxBytes: 4096          # 注入预算
+    maxBytes: 4096          # 注入预算(索引+指导文本+协议壳)
     memoryDir: D:/memories  # 默认: $DSH_HOME/memory
     enableUserScope: true   # false: 用户层在所有路径禁用
+    autoSummarize: false         # true: 根会话结束时后台 LLM 提取持久事实写入
+    autoSummarizeMaxMemories: 5  # 单次固化上限
+    autoSummarizeMaxTokens: 2048 # 固化输出 token 上限
+    staleAfterDays: 0            # >0: 软隐藏超 N 天零引用记忆(文件保留)
 ```
 
 ## 工作原理(60 秒)

package/lib/client.js

@@ -77,18 +77,23 @@ window.__ModuleLoader__.load({
 				}
 			};
 			const cwd = (group) => group.scope === "project" && group.current === true ? currentCwd() : void 0;
-			/** 打开编辑器:先拉取正文(列表响应不含 body)。 */
+			/** 打开编辑器:先拉取正文(列表响应不含 body);失败中止,绝不以空正文打开。 */
 			const openEditor = async (group, memory) => {
-				const detail = await read({
-					name: memory.name,
-					scope: group.scope,
-					cwd: cwd(group)
-				});
-				setEditing({
-					group,
-					memory,
-					body: "body" in detail ? detail.body : ""
-				});
+				try {
+					const detail = await read({
+						name: memory.name,
+						scope: group.scope,
+						cwd: cwd(group)
+					});
+					setEditing({
+						group,
+						memory,
+						body: detail.body
+					});
+				} catch (error) {
+					console.warn("[auto-memory] read failed, editor aborted", error);
+					await load();
+				}
 			};
 			if (error) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				style: { padding: "24px" },
@@ -169,6 +174,28 @@ window.__ModuleLoader__.load({
 										background: hot ? "#d97706" : "rgba(96,165,250,.9)"
 									} })
 								}),
+								group.indexText != null && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", {
+									style: { margin: "6px 0" },
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("summary", {
+										style: {
+											cursor: "pointer",
+											fontSize: "12px",
+											opacity: .8
+										},
+										children: t("injectedPreview")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+										style: {
+											margin: "6px 0 0",
+											padding: "8px",
+											background: "rgba(127,127,127,0.12)",
+											borderRadius: "6px",
+											fontSize: "12px",
+											whiteSpace: "pre-wrap",
+											wordBreak: "break-word"
+										},
+										children: group.indexText
+									})]
+								}),
 								group.memories.map((memory) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 									style: ROW_STYLE,
 									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
@@ -230,22 +257,26 @@ window.__ModuleLoader__.load({
 												disabled: busy,
 												onClick: () => {
 													(async () => {
-														const detail = await read({
-															name: memory.name,
-															scope: group.scope,
-															cwd: cwd(group)
-														});
-														const bodyText = "body" in detail ? detail.body : "";
-														await act(() => write({
-															cwd: cwd(group),
-															scope: group.scope,
-															name: memory.name,
-															title: memory.title,
-															description: memory.description,
-															type: memory.type,
-															body: bodyText,
-															pinned: !memory.pinned
-														}));
+														try {
+															const detail = await read({
+																name: memory.name,
+																scope: group.scope,
+																cwd: cwd(group)
+															});
+															await act(() => write({
+																cwd: cwd(group),
+																scope: group.scope,
+																name: memory.name,
+																title: memory.title,
+																description: memory.description,
+																type: memory.type,
+																body: detail.body,
+																pinned: !memory.pinned
+															}));
+														} catch (error) {
+															console.warn("[auto-memory] read failed, pin aborted", error);
+															await load();
+														}
 													})();
 												},
 												children: memory.pinned ? t("unpinAction") : t("pinAction")
@@ -407,6 +438,7 @@ window.__ModuleLoader__.load({
 			pinned: "置顶",
 			reads: "次读取",
 			updated: "更新于",
+			injectedPreview: "下一次会话将注入的索引(点开预览)",
 			indexUsage: "索引占用",
 			budget: "注入预算",
 			of: "/",
@@ -440,6 +472,7 @@ window.__ModuleLoader__.load({
 			pinned: "pinned",
 			reads: "reads",
 			updated: "updated",
+			injectedPreview: "Index injected into the next session (click to preview)",
 			indexUsage: "Index usage",
 			budget: "injection budget",
 			of: "/",
@@ -487,7 +520,9 @@ window.__ModuleLoader__.load({
 						scope
 					});
 					if (cwd !== void 0) params.set("cwd", cwd);
-					return (await fetch(`${BASE}/memory.read?${params}`)).json();
+					const response = await fetch(`${BASE}/memory.read?${params}`);
+					if (!response.ok) throw new Error(`memory.read HTTP ${String(response.status)}`);
+					return await response.json();
 				},
 				write: (payload) => fetch(`${BASE}/memory.write`, {
 					method: "POST",

package/lib/index.js

@@ -207,7 +207,7 @@ const SECRET_PATTERNS = [
 	},
 	{
 		kind: "github-token",
-		re: /\bgh[pousr]_[A-Za-z0-9]{20,}\b/g
+		re: /\bgh[pousr]_[A-Za-z0-9]{20,}\b|\bgithub_pat_[A-Za-z0-9_]{20,}\b/g
 	},
 	{
 		kind: "npm-token",
@@ -215,11 +215,19 @@ const SECRET_PATTERNS = [
 	},
 	{
 		kind: "openai-key",
-		re: /\bsk-[A-Za-z0-9_\-]{20,}\b/g
+		re: /\bsk-(?=[A-Za-z0-9_-]*[0-9])[A-Za-z0-9_-]{20,}\b/g
 	},
 	{
 		kind: "bearer",
-		re: /\bBearer\s+[A-Za-z0-9_\-.=/+]{20,}\b/g
+		re: /\bbearer\s+(?:eyJ[A-Za-z0-9_-]{10,}|[A-Za-z0-9_\-]{16,}[=+/][A-Za-z0-9_\-=/+]{10,})/gi
+	},
+	{
+		kind: "slack-token",
+		re: /\bxox[bposa]-[0-9A-Za-z-]{10,}\b/g
+	},
+	{
+		kind: "google-key",
+		re: /\bAIza[0-9A-Za-z_\-]{30,}\b/g
 	},
 	{
 		kind: "phone",
@@ -240,11 +248,12 @@ function redactSecrets(text) {
 	return out;
 }
 /**
-* 入库前剥离注入协议标签字样(防闭合逃逸伪造):任何文本中的 <memory_context>
-* 开闭标签转义为 &lt;…&gt;,使注入段永远是"一层壳",无法被内容嵌套穿透。
+* 入库前剥离注入协议标签字样(防闭合逃逸伪造)。匹配放宽到容忍空白/大小写/
+* 属性变体(LLM 分词器对这些变体的容忍度远高于词法精确匹配——审查确认
+* 单空格即可穿透精确形式)。转义后壳永远只有一层,内容无法闭壳。
 */
 function stripMemoryTags(text) {
-	return text.replace(/<\/?memory_context>/g, (match) => match.replace(/[<>]/g, (ch) => ch === "<" ? "&lt;" : "&gt;"));
+	return text.replace(/<\s*\/?\s*memory_context[^>]*>/gi, (match) => match.replace(/[<>]/g, (ch) => ch === "<" ? "&lt;" : "&gt;"));
 }
 /** 写入内容统一清洗(脱敏 + 协议标签防护)。 */
 function sanitizeContent(text) {
@@ -355,9 +364,13 @@ var MemoryStore = class {
 		await this.withLockRecovery(join(dir, INDEX_FILENAME), async () => {
 			const existing = parseMemory(await promises.readFile(file, "utf8").catch(() => ""), scope);
 			const pinned = record.pinned ?? existing?.pinned;
+			const importance = record.importance ?? existing?.importance;
+			const title = record.title ?? existing?.title;
 			written = {
 				...record,
 				...pinned === true ? { pinned: true } : {},
+				...importance !== void 0 ? { importance } : {},
+				...title !== void 0 ? { title: sanitizeContent(title) } : {},
 				description: sanitizeContent(record.description),
 				body: sanitizeContent(record.body),
 				...mergeLifecycleMeta(existing, Date.now()),
@@ -646,11 +659,11 @@ function registerMemoryTools(ctx, store, enableUserScope) {
 			const scope = guardScope(explicit ?? existing?.scope ?? "project");
 			await store.write({
 				name,
-				title: args.title !== void 0 && args.title.trim().length > 0 ? args.title.trim() : void 0,
+				title: args.title !== void 0 && args.title.trim().length > 0 ? args.title.trim().slice(0, 80) : void 0,
 				...args.pinned !== void 0 ? { pinned: args.pinned } : {},
-				description: args.description.trim(),
+				description: args.description.trim().slice(0, 160),
 				type: args.type,
-				body: args.body
+				body: args.body.slice(0, 2e3)
 			}, scope, cwd);
 			return {
 				name,
@@ -1133,7 +1146,7 @@ function renderMemoryIndexText(store, config, cwd) {
 		let size = 0;
 		for (const line of lines) {
 			const lineSize = Buffer.byteLength(line + "\n", "utf8");
-			if (size + lineSize > budget) break;
+			if (size + lineSize > budget) continue;
 			kept.push(line);
 			size += lineSize;
 		}
@@ -1364,18 +1377,18 @@ async function readGroup(dir, scope, slug) {
 	};
 	let entries;
 	try {
-		entries = await promises.readdir(dir);
+		entries = await promises.readdir(dir, { withFileTypes: true });
 	} catch {
 		return group;
 	}
 	for (const entry of entries) {
-		if (!entry.endsWith(".md")) continue;
-		const file = join(dir, entry);
+		if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
+		const file = join(dir, entry.name);
 		const raw = await promises.readFile(file, "utf8").catch(() => null);
 		if (raw === null) continue;
-		if (entry.toLowerCase() === "MEMORY.md".toLowerCase()) {
+		if (entry.name.toLowerCase() === "MEMORY.md".toLowerCase()) {
 			group.indexBytes = Buffer.byteLength(raw, "utf8");
-			group.indexText = raw.trim().length > 0 ? raw : null;
+			group.indexText = raw.length > 0 ? raw.slice(0, 8192) : null;
 			continue;
 		}
 		const record = parseMemory(raw, scope);
@@ -1474,13 +1487,15 @@ function registerMemoryApi(ctx, store, rootDir, config) {
 				const cwd = body.scope === "project" ? body.cwd : void 0;
 				if (body.scope === "project" && (cwd === void 0 || cwd.length === 0)) return json({ error: "project scope requires cwd" }, 400);
 				const name = normalizeName(body.name);
+				if (typeof body.description !== "string" || body.description.trim().length === 0) return json({ error: "description must be a non-empty string" }, 400);
+				if (body.type !== "user" && body.type !== "feedback" && body.type !== "project" && body.type !== "reference") return json({ error: "invalid type" }, 400);
 				await store.write({
 					name,
-					...body.title !== void 0 && body.title.trim().length > 0 ? { title: body.title.trim() } : {},
+					title: typeof body.title === "string" && body.title.trim().length > 0 ? body.title.trim().slice(0, 80) : void 0,
 					...body.pinned !== void 0 ? { pinned: body.pinned } : {},
-					description: body.description,
+					description: body.description.trim().slice(0, 160),
 					type: body.type,
-					body: body.body
+					body: typeof body.body === "string" ? body.body.slice(0, 2e3) : ""
 				}, body.scope, cwd);
 				return json({
 					ok: true,
@@ -1533,8 +1548,8 @@ function apply(ctx, config) {
 	const rootDir = config.memoryDir !== void 0 && config.memoryDir.length > 0 ? resolve(config.memoryDir) : join(resolveDshHome(), "memory");
 	const store = new MemoryStore(rootDir, { staleAfterDays: config.staleAfterDays });
 	registerMemoryTools(ctx, store, config.enableUserScope);
-	ctx.inject(["connection"], () => {
-		registerMemoryApi(ctx, store, rootDir, { maxBytes: config.maxBytes });
+	ctx.inject(["connection"], (fiberCtx) => {
+		registerMemoryApi(fiberCtx, store, rootDir, { maxBytes: config.maxBytes });
 	});
 	registerConsolidation(ctx, store, {
 		autoSummarize: config.autoSummarize,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-auto-memory",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Claude Code style auto-memory plugin for DeepSeek Harness: typed memory files + MEMORY.md index auto-injected into the system prompt",
   "type": "module",
   "license": "MIT",