dsh-auto-memory 0.5.0 → 0.5.2

package/README.md

@@ -199,9 +199,13 @@ Override in your profile's `cordis.patch.yml` (config replaces wholesale):
 ```yaml
 - id: auto-memory
   config:
-    maxBytes: 4096          # injection budget
+    maxBytes: 4096          # injection budget (index + guidance + wrapper)
     memoryDir: D:/memories  # default: $DSH_HOME/memory
     enableUserScope: true   # false: user layer off on every path
+    autoSummarize: false         # true: on root-session end, a background LLM files durable new facts
+    autoSummarizeMaxMemories: 5  # cap per consolidation
+    autoSummarizeMaxTokens: 2048 # consolidation output cap
+    staleAfterDays: 0            # >0: soft-hide zero-read memories older than N days (files kept)
 ```
 
 ## How it works (60 seconds)
@@ -216,7 +220,6 @@ Override in your profile's `cordis.patch.yml` (config replaces wholesale):
   resume); everything flows through standard `tool/call` / `tool/result`.
 
 Deep dives: [design decisions](docs/design.md) ·
-[dsh source-level research](docs/api-reports.md) ·
 [postmortem: shipping a PR to awesome-dsh-plugin](docs/postmortem-pr-5696.md)
 
 ## Roadmap

package/README.zh.md

@@ -168,9 +168,13 @@ dsh --profile demo                               # 重启 profile 生效
 ```yaml
 - id: auto-memory
   config:
-    maxBytes: 4096          # 注入预算
+    maxBytes: 4096          # 注入预算(索引+指导文本+协议壳)
     memoryDir: D:/memories  # 默认: $DSH_HOME/memory
     enableUserScope: true   # false: 用户层在所有路径禁用
+    autoSummarize: false         # true: 根会话结束时后台 LLM 提取持久事实写入
+    autoSummarizeMaxMemories: 5  # 单次固化上限
+    autoSummarizeMaxTokens: 2048 # 固化输出 token 上限
+    staleAfterDays: 0            # >0: 软隐藏超 N 天零引用记忆(文件保留)
 ```
 
 ## 工作原理(60 秒)
@@ -183,7 +187,6 @@ dsh --profile demo                               # 重启 profile 生效
   一切走标准 `tool/call` / `tool/result`。
 
 深度内容:[设计决策](docs/design.md) ·
-[dsh 源码级调研](docs/api-reports.md) ·
 [复盘:向 awesome-dsh-plugin 提 PR](docs/postmortem-pr-5696.md)
 
 ## 路线图

package/lib/client.js

@@ -51,6 +51,7 @@ window.__ModuleLoader__.load({
 			const [groups, setGroups] = (0, react.useState)(null);
 			const [maxBytes, setMaxBytes] = (0, react.useState)(4096);
 			const [error, setError] = (0, react.useState)(false);
+			const [actionError, setActionError] = (0, react.useState)(null);
 			const [editing, setEditing] = (0, react.useState)(null);
 			const [busy, setBusy] = (0, react.useState)(false);
 			const load = (0, react.useCallback)(async () => {
@@ -68,27 +69,35 @@ window.__ModuleLoader__.load({
 			}, [load]);
 			const act = async (fn) => {
 				setBusy(true);
+				setActionError(null);
 				try {
 					const response = await fn();
-					if (!response.ok) console.warn("[auto-memory] action failed", response.status);
-					await load();
+					if (!response.ok) setActionError(response.status === 404 ? t("deleteFailed") : t("saveFailed"));
+				} catch {
+					setActionError(t("saveFailed"));
 				} finally {
 					setBusy(false);
+					await load();
 				}
 			};
 			const cwd = (group) => group.scope === "project" && group.current === true ? currentCwd() : void 0;
-			/** 打开编辑器:先拉取正文(列表响应不含 body)。 */
+			/** 打开编辑器:先拉取正文(列表响应不含 body);失败中止,绝不以空正文打开。 */
 			const openEditor = async (group, memory) => {
-				const detail = await read({
-					name: memory.name,
-					scope: group.scope,
-					cwd: cwd(group)
-				});
-				setEditing({
-					group,
-					memory,
-					body: "body" in detail ? detail.body : ""
-				});
+				try {
+					const detail = await read({
+						name: memory.name,
+						scope: group.scope,
+						cwd: cwd(group)
+					});
+					setEditing({
+						group,
+						memory,
+						body: detail.body
+					});
+				} catch (error) {
+					console.warn("[auto-memory] read failed, editor aborted", error);
+					await load();
+				}
 			};
 			if (error) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				style: { padding: "24px" },
@@ -115,13 +124,19 @@ window.__ModuleLoader__.load({
 						style: { opacity: .75 },
 						children: t("intro")
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 						onClick: () => {
 							load();
 						},
 						disabled: busy,
 						children: t("refresh")
-					}) }),
+					}), actionError !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						style: {
+							marginLeft: "12px",
+							color: "#d97706"
+						},
+						children: actionError
+					})] }),
 					total === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("empty") }),
 					groups.map((group) => {
 						const usage = group.indexBytes / maxBytes;
@@ -169,6 +184,28 @@ window.__ModuleLoader__.load({
 										background: hot ? "#d97706" : "rgba(96,165,250,.9)"
 									} })
 								}),
+								group.indexText != null && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", {
+									style: { margin: "6px 0" },
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("summary", {
+										style: {
+											cursor: "pointer",
+											fontSize: "12px",
+											opacity: .8
+										},
+										children: t("injectedPreview")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+										style: {
+											margin: "6px 0 0",
+											padding: "8px",
+											background: "rgba(127,127,127,0.12)",
+											borderRadius: "6px",
+											fontSize: "12px",
+											whiteSpace: "pre-wrap",
+											wordBreak: "break-word"
+										},
+										children: group.indexText
+									})]
+								}),
 								group.memories.map((memory) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 									style: ROW_STYLE,
 									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
@@ -230,22 +267,26 @@ window.__ModuleLoader__.load({
 												disabled: busy,
 												onClick: () => {
 													(async () => {
-														const detail = await read({
-															name: memory.name,
-															scope: group.scope,
-															cwd: cwd(group)
-														});
-														const bodyText = "body" in detail ? detail.body : "";
-														await act(() => write({
-															cwd: cwd(group),
-															scope: group.scope,
-															name: memory.name,
-															title: memory.title,
-															description: memory.description,
-															type: memory.type,
-															body: bodyText,
-															pinned: !memory.pinned
-														}));
+														try {
+															const detail = await read({
+																name: memory.name,
+																scope: group.scope,
+																cwd: cwd(group)
+															});
+															await act(() => write({
+																cwd: cwd(group),
+																scope: group.scope,
+																name: memory.name,
+																title: memory.title,
+																description: memory.description,
+																type: memory.type,
+																body: detail.body,
+																pinned: !memory.pinned
+															}));
+														} catch (error) {
+															console.warn("[auto-memory] read failed, pin aborted", error);
+															await load();
+														}
 													})();
 												},
 												children: memory.pinned ? t("unpinAction") : t("pinAction")
@@ -272,6 +313,7 @@ window.__ModuleLoader__.load({
 						t,
 						initial: editing.memory,
 						initialBody: editing.body,
+						busy,
 						onCancel: () => {
 							setEditing(null);
 						},
@@ -288,7 +330,7 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/** 单条记忆编辑器(标题/摘要/正文,保存即重建索引、下次注入生效)。 */
-		function MemoryEditor({ t, initial, initialBody, onSave, onCancel }) {
+		function MemoryEditor({ t, initial, initialBody, busy, onSave, onCancel }) {
 			const [title, setTitle] = (0, react.useState)(initial.title ?? "");
 			const [description, setDescription] = (0, react.useState)(initial.description);
 			const [body, setBody] = (0, react.useState)(initialBody);
@@ -352,6 +394,7 @@ window.__ModuleLoader__.load({
 						style: { margin: "8px 0 0" },
 						children: [
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								disabled: busy,
 								onClick: () => {
 									onSave({
 										name: initial.name,
@@ -366,6 +409,7 @@ window.__ModuleLoader__.load({
 							}),
 							" ",
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								disabled: busy,
 								onClick: onCancel,
 								children: t("cancel")
 							})
@@ -407,6 +451,7 @@ window.__ModuleLoader__.load({
 			pinned: "置顶",
 			reads: "次读取",
 			updated: "更新于",
+			injectedPreview: "下一次会话将注入的索引(点开预览)",
 			indexUsage: "索引占用",
 			budget: "注入预算",
 			of: "/",
@@ -440,6 +485,7 @@ window.__ModuleLoader__.load({
 			pinned: "pinned",
 			reads: "reads",
 			updated: "updated",
+			injectedPreview: "Index injected into the next session (click to preview)",
 			indexUsage: "Index usage",
 			budget: "injection budget",
 			of: "/",
@@ -487,7 +533,9 @@ window.__ModuleLoader__.load({
 						scope
 					});
 					if (cwd !== void 0) params.set("cwd", cwd);
-					return (await fetch(`${BASE}/memory.read?${params}`)).json();
+					const response = await fetch(`${BASE}/memory.read?${params}`);
+					if (!response.ok) throw new Error(`memory.read HTTP ${String(response.status)}`);
+					return await response.json();
 				},
 				write: (payload) => fetch(`${BASE}/memory.write`, {
 					method: "POST",

package/lib/index.js

@@ -14,7 +14,7 @@ const USER_SCOPE_DIR = "_user";
 /**
 * 记忆存储层:类型化记忆文件 CRUD + MEMORY.md 索引维护。
 *
-* 关键设计决策(依据源码调研与对抗性审查,见 docs/api-reports.md):
+* 关键设计决策(依据源码调研与对抗性审查,见 internal research notes):
 * 1. **必须用 node:fs 而非 ctx.fs**——默认部署的 fs-sandbox 可写根不含 $DSH_HOME,
 *    走 ctx.fs 会抛 FS_SANDBOX_DENIED;官方先例 skill-filesystem 访问 $DSH_HOME
 *    下的文件同样直接用 node:fs。
@@ -207,7 +207,7 @@ const SECRET_PATTERNS = [
 	},
 	{
 		kind: "github-token",
-		re: /\bgh[pousr]_[A-Za-z0-9]{20,}\b/g
+		re: /\bgh[pousr]_[A-Za-z0-9]{20,}\b|\bgithub_pat_[A-Za-z0-9_]{20,}\b/g
 	},
 	{
 		kind: "npm-token",
@@ -215,11 +215,19 @@ const SECRET_PATTERNS = [
 	},
 	{
 		kind: "openai-key",
-		re: /\bsk-[A-Za-z0-9_\-]{20,}\b/g
+		re: /\bsk-(?=[A-Za-z0-9_-]*[0-9])[A-Za-z0-9_-]{20,}\b/g
 	},
 	{
 		kind: "bearer",
-		re: /\bBearer\s+[A-Za-z0-9_\-.=/+]{20,}\b/g
+		re: /\bbearer\s+(?:eyJ[A-Za-z0-9_-]{10,}|[A-Za-z0-9_\-]{16,}[=+/][A-Za-z0-9_\-=/+]{10,})/gi
+	},
+	{
+		kind: "slack-token",
+		re: /\bxox[bposa]-[0-9A-Za-z-]{10,}\b/g
+	},
+	{
+		kind: "google-key",
+		re: /\bAIza[0-9A-Za-z_\-]{30,}\b/g
 	},
 	{
 		kind: "phone",
@@ -231,20 +239,63 @@ const SECRET_PATTERNS = [
 	}
 ];
 /**
+* GB11643 身份证校验位验证:18 位号码仅当末位与加权模 11 校验相符才算真身份证。
+* 纯长度匹配会把订单号/雪花 ID 等任意 18 位数字一并误杀(#7)。
+*/
+function isValidIdCard(candidate) {
+	if (!/^\d{17}[\dXx]$/.test(candidate)) return false;
+	const WEIGHTS = [
+		7,
+		9,
+		10,
+		5,
+		8,
+		4,
+		2,
+		1,
+		6,
+		3,
+		7,
+		9,
+		10,
+		5,
+		8,
+		4,
+		2
+	];
+	const CHECKS = [
+		"1",
+		"0",
+		"X",
+		"9",
+		"8",
+		"7",
+		"6",
+		"5",
+		"4",
+		"3",
+		"2"
+	];
+	let sum = 0;
+	for (let i = 0; i < 17; i++) sum += Number(candidate[i]) * WEIGHTS[i];
+	return candidate[17].toUpperCase() === CHECKS[sum % 11];
+}
+/**
 * 写入前脱敏(纯函数,可测):把高置信密钥/手机号/身份证替换为 [REDACTED:kind]。
-* 应用于 description 与 body——所有写路径(工具/固化/面板)都经 store.write,单点拦截。
+* 应用于 description/body——所有写路径(工具/固化/面板)都经 store.write,单点拦截。
 */
 function redactSecrets(text) {
 	let out = text;
-	for (const { kind, re } of SECRET_PATTERNS) out = out.replace(re, `[REDACTED:${kind}]`);
+	for (const { kind, re } of SECRET_PATTERNS) out = out.replace(re, (match) => kind === "id-card" && !isValidIdCard(match) ? match : `[REDACTED:${kind}]`);
 	return out;
 }
 /**
-* 入库前剥离注入协议标签字样(防闭合逃逸伪造):任何文本中的 <memory_context>
-* 开闭标签转义为 &lt;…&gt;,使注入段永远是"一层壳",无法被内容嵌套穿透。
+* 入库前剥离注入协议标签字样(防闭合逃逸伪造)。匹配放宽到容忍空白/大小写/
+* 属性变体(LLM 分词器对这些变体的容忍度远高于词法精确匹配——审查确认
+* 单空格即可穿透精确形式)。转义后壳永远只有一层,内容无法闭壳。
 */
 function stripMemoryTags(text) {
-	return text.replace(/<\/?memory_context>/g, (match) => match.replace(/[<>]/g, (ch) => ch === "<" ? "&lt;" : "&gt;"));
+	return text.replace(/<\s*\/?\s*memory_context[^>]*>/gi, (match) => match.replace(/[<>]/g, (ch) => ch === "<" ? "&lt;" : "&gt;"));
 }
 /** 写入内容统一清洗(脱敏 + 协议标签防护)。 */
 function sanitizeContent(text) {
@@ -271,9 +322,19 @@ function memoryScore(record, nowMs) {
 /**
 * 描述相似度(Jaccard 词集,纯函数,可测):固化防回声的查重依据——
 * "既有记忆的复述不是新信息",相似度过高的候选跳过而非堆积。
+* CJK 感知:连续中文段按字符二元组(bigram)切分(检索领域标准做法)——
+* 整段单 token 会让中文近重复仅得 ~0.4,防回声对中文完全失效(#5)。
 */
 function descriptionSimilarity(a, b) {
-	const words = (text) => new Set(text.toLowerCase().split(/[^a-z0-9一-鿿]+/).filter((w) => w.length > 0));
+	const words = (text) => {
+		const tokens = text.toLowerCase().split(/[^a-z0-9一-鿿]+/).filter((w) => w.length > 0);
+		const out = /* @__PURE__ */ new Set();
+		for (const token of tokens) if (/^[一-鿿]+$/.test(token)) {
+			if (token.length === 1) out.add(token);
+			else for (let i = 0; i + 1 < token.length; i++) out.add(token.slice(i, i + 2));
+		} else out.add(token);
+		return out;
+	};
 	const wa = words(a);
 	const wb = words(b);
 	if (wa.size === 0 || wb.size === 0) return 0;
@@ -355,9 +416,13 @@ var MemoryStore = class {
 		await this.withLockRecovery(join(dir, INDEX_FILENAME), async () => {
 			const existing = parseMemory(await promises.readFile(file, "utf8").catch(() => ""), scope);
 			const pinned = record.pinned ?? existing?.pinned;
+			const importance = record.importance ?? existing?.importance;
+			const title = record.title ?? existing?.title;
 			written = {
 				...record,
 				...pinned === true ? { pinned: true } : {},
+				...importance !== void 0 ? { importance } : {},
+				...title !== void 0 ? { title: sanitizeContent(title) } : {},
 				description: sanitizeContent(record.description),
 				body: sanitizeContent(record.body),
 				...mergeLifecycleMeta(existing, Date.now()),
@@ -646,11 +711,11 @@ function registerMemoryTools(ctx, store, enableUserScope) {
 			const scope = guardScope(explicit ?? existing?.scope ?? "project");
 			await store.write({
 				name,
-				title: args.title !== void 0 && args.title.trim().length > 0 ? args.title.trim() : void 0,
+				title: args.title !== void 0 && args.title.trim().length > 0 ? args.title.trim().slice(0, 80) : void 0,
 				...args.pinned !== void 0 ? { pinned: args.pinned } : {},
-				description: args.description.trim(),
+				description: args.description.trim().slice(0, 160),
 				type: args.type,
-				body: args.body
+				body: args.body.slice(0, 2e3)
 			}, scope, cwd);
 			return {
 				name,
@@ -1133,7 +1198,7 @@ function renderMemoryIndexText(store, config, cwd) {
 		let size = 0;
 		for (const line of lines) {
 			const lineSize = Buffer.byteLength(line + "\n", "utf8");
-			if (size + lineSize > budget) break;
+			if (size + lineSize > budget) continue;
 			kept.push(line);
 			size += lineSize;
 		}
@@ -1364,18 +1429,18 @@ async function readGroup(dir, scope, slug) {
 	};
 	let entries;
 	try {
-		entries = await promises.readdir(dir);
+		entries = await promises.readdir(dir, { withFileTypes: true });
 	} catch {
 		return group;
 	}
 	for (const entry of entries) {
-		if (!entry.endsWith(".md")) continue;
-		const file = join(dir, entry);
+		if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
+		const file = join(dir, entry.name);
 		const raw = await promises.readFile(file, "utf8").catch(() => null);
 		if (raw === null) continue;
-		if (entry.toLowerCase() === "MEMORY.md".toLowerCase()) {
+		if (entry.name.toLowerCase() === "MEMORY.md".toLowerCase()) {
 			group.indexBytes = Buffer.byteLength(raw, "utf8");
-			group.indexText = raw.trim().length > 0 ? raw : null;
+			group.indexText = raw.length > 0 ? raw.slice(0, 8192) : null;
 			continue;
 		}
 		const record = parseMemory(raw, scope);
@@ -1474,13 +1539,15 @@ function registerMemoryApi(ctx, store, rootDir, config) {
 				const cwd = body.scope === "project" ? body.cwd : void 0;
 				if (body.scope === "project" && (cwd === void 0 || cwd.length === 0)) return json({ error: "project scope requires cwd" }, 400);
 				const name = normalizeName(body.name);
+				if (typeof body.description !== "string" || body.description.trim().length === 0) return json({ error: "description must be a non-empty string" }, 400);
+				if (body.type !== "user" && body.type !== "feedback" && body.type !== "project" && body.type !== "reference") return json({ error: "invalid type" }, 400);
 				await store.write({
 					name,
-					...body.title !== void 0 && body.title.trim().length > 0 ? { title: body.title.trim() } : {},
+					title: typeof body.title === "string" && body.title.trim().length > 0 ? body.title.trim().slice(0, 80) : void 0,
 					...body.pinned !== void 0 ? { pinned: body.pinned } : {},
-					description: body.description,
+					description: body.description.trim().slice(0, 160),
 					type: body.type,
-					body: body.body
+					body: typeof body.body === "string" ? body.body.slice(0, 2e3) : ""
 				}, body.scope, cwd);
 				return json({
 					ok: true,
@@ -1533,8 +1600,8 @@ function apply(ctx, config) {
 	const rootDir = config.memoryDir !== void 0 && config.memoryDir.length > 0 ? resolve(config.memoryDir) : join(resolveDshHome(), "memory");
 	const store = new MemoryStore(rootDir, { staleAfterDays: config.staleAfterDays });
 	registerMemoryTools(ctx, store, config.enableUserScope);
-	ctx.inject(["connection"], () => {
-		registerMemoryApi(ctx, store, rootDir, { maxBytes: config.maxBytes });
+	ctx.inject(["connection"], (fiberCtx) => {
+		registerMemoryApi(fiberCtx, store, rootDir, { maxBytes: config.maxBytes });
 	});
 	registerConsolidation(ctx, store, {
 		autoSummarize: config.autoSummarize,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-auto-memory",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Claude Code style auto-memory plugin for DeepSeek Harness: typed memory files + MEMORY.md index auto-injected into the system prompt",
   "type": "module",
   "license": "MIT",