dsh-continual-evolve 0.13.0 → 0.14.0

package/README.md

@@ -7,9 +7,9 @@ English | [中文](README.zh.md)
 [![CI](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml/badge.svg)](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-339933)](package.json)
-[![Tests](https://img.shields.io/badge/tests-62%20passing-brightgreen)]()
-[![Coverage · statements](https://img.shields.io/badge/coverage_statements-98%25-brightgreen)]()
-[![Coverage · branches](https://img.shields.io/badge/coverage_branches-95%25-green)]()
+[![Tests](https://img.shields.io/badge/tests-80%20passing-brightgreen)]()
+[![Coverage · statements](https://img.shields.io/badge/coverage_statements-96%25-brightgreen)]()
+[![Coverage · branches](https://img.shields.io/badge/coverage_branches-93%25-green)]()
 [![Coverage · functions](https://img.shields.io/badge/coverage_functions-100%25-brightgreen)]()
 
 A workspace-memory plugin for the [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (`dsh`): one plain-markdown memory store per workspace (`<workspace>/.evolve/memory/`), the index injected at session start, used by the model with its **native file tools** — and nothing else.
@@ -23,7 +23,7 @@ Reusable experience gathered in one session (user preferences, pitfalls, project
 1. **Session-start injection** — the plugin registers a single system-prompt section: the `MEMORY.md` index content (whole-line truncated over budget, with a read-the-directory hint), the absolute store path, and the when_to_save guide. The section is computed once per session and reused byte-for-byte, keeping the system prompt stable and the prompt cache warm; an empty store costs zero tokens.
 2. **Native read/write** — DSH fully permits file access inside the workspace (reads are never fenced; the write fence only covers paths outside the workspace, see [`docs/FAQ.md`](docs/FAQ.md) #6). The model reads, writes, and edits memory files and maintains the index directly; the store is bootstrapped on first use.
 3. **Governance is the file** — no versions, no snapshots, no approvals, no background extraction: a bad memory is a visible file in the workspace, and deleting it is the retirement path. Memories are personal context — on bootstrap in a git workspace the store appends `.evolve/` to the workspace `.gitignore` (non-git workspaces are left untouched).
-4. **Read-only card** — the plugin mounts a read-only memory card on its own page in the official plugin manager (the `plugins.bundle.config` slot; hosts without it silently degrade to no card): recently served workspaces, per-workspace entry and index counts, and index-drift warnings (unindexed files, index rows whose file is gone). The card follows the market's look — host theme tokens, the `Button` primitive for refresh, and zh/en copy that tracks the DSH language (plain themed elements on old hosts). The card is a request-time projection of the files on disk — the single source of truth remains `.evolve/memory/`; the card has no edit path, edit the files directly.
+4. **Read-only card** — the plugin mounts a read-only memory card on its own page in the official plugin manager (the `plugins.bundle.config` slot; hosts without it silently degrade to no card), shaped like the market's own settings card (collapsed by default, header toggle with a rotating chevron, hover/open frame states) and aligned with ZCode's Settings → Memory viewer: one workspace at a time (directory-name chips), a file search box, per-file relative updated times, click-to-preview file bodies (5 MiB cap), plus index-drift warnings (unindexed files, index rows whose file is gone). The plugin's display name and description localize through the host's package `locale/*.json` metadata channel. The card follows the market's look — host theme tokens, the `Button` primitive for refresh, and zh/en copy that tracks the DSH language (plain themed elements on old hosts). The card is a request-time projection of the files on disk — the single source of truth remains `.evolve/memory/`; the card has no edit path, edit the files directly.
 
 Memory file format (same as ZCode): frontmatter with `name` / `description` (the hook that decides whether a future session recalls it) / `metadata.type` (`user | feedback | project | reference`); `feedback` bodies must carry **Why:** and **How to apply:** lines.
 
@@ -66,7 +66,7 @@ Profile patch example:
 
 ```bash
 pnpm install && pnpm build   # deps + tsc -> lib/
-pnpm test                    # vitest (66 tests)
+pnpm test                    # vitest (80 tests)
 pnpm test:coverage           # v8 coverage, CI-enforced thresholds
 pnpm lint                    # oxlint src test
 ```
@@ -83,6 +83,7 @@ Layout:
 │   └── card-routes.ts     # card: GET-only read API on the host webServer
 ├── client/
 │   └── client.js          # hand-written client bundle: read-only card in the plugin manager
+├── locale/                # host package metadata: localized display name + description (zh/en)
 ├── test/                  # vitest suite (7 files)
 ├── lib/                   # build output (tsc)
 ├── docs/                  # design.md (design) · FAQ.md (real-world pitfalls)

package/README.zh.md

@@ -7,9 +7,9 @@
 [![CI](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml/badge.svg)](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-339933)](package.json)
-[![Tests](https://img.shields.io/badge/tests-62%20passing-brightgreen)]()
-[![Coverage · statements](https://img.shields.io/badge/coverage_statements-98%25-brightgreen)]()
-[![Coverage · branches](https://img.shields.io/badge/coverage_branches-95%25-green)]()
+[![Tests](https://img.shields.io/badge/tests-80%20passing-brightgreen)]()
+[![Coverage · statements](https://img.shields.io/badge/coverage_statements-96%25-brightgreen)]()
+[![Coverage · branches](https://img.shields.io/badge/coverage_branches-93%25-green)]()
 [![Coverage · functions](https://img.shields.io/badge/coverage_functions-100%25-brightgreen)]()
 
 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（`dsh`）的工作区记忆插件：每个工作区一个纯 markdown 记忆库（`<workspace>/.evolve/memory/`），会话开局注入索引，模型用**原生文件读写工具**直接使用——仅此而已。
@@ -23,7 +23,7 @@ Agent 每个会话积累的可复用经验（用户偏好、踩坑教训、项
 1. **开局注入** —— 插件只注册一个 system-prompt section：注入 `MEMORY.md` 索引正文（超预算按整行截断并提示读目录）、记忆目录绝对路径、when_to_save 指南。该 section 每会话只算一次并逐字节复用，system prompt 稳定、prompt cache 持续命中；空 store 零 token。
 2. **原生读写** —— DSH 对工作区内文件读写全放行（读路径从不设防，写围栏只围工作区外，见 [`docs/FAQ.md`](docs/FAQ.md) #6）。模型直接 Read/Write/Edit 记忆文件并维护索引；store 不存在时自动 bootstrap。
 3. **治理即文件** —— 无版本、无快照、无审批、无后台提取：一条坏记忆就是工作区里一个可见的文件，删掉它就是退役。记忆是个人上下文——bootstrap 时若工作区是 git 仓库会自动把 `.evolve/` 追加进 `.gitignore`（非 git 工作区不碰任何文件）。
-4. **只读卡片** —— 插件在官方插件管理的本 bundle 页面挂一张只读记忆卡片（`plugins.bundle.config` slot，老宿主自动降级为无卡片）：最近服务过的工作区、各自记忆库的条目数/索引行数、索引漂移警告（未索引文件与索引失联文件）。卡片与市场同款——宿主主题 token、`Button` 原语刷新按钮、中英文案跟随 DSH 语言（老宿主降级为同主题裸元素）。卡片是磁盘文件的请求时投影——单一事实源永远是 `.evolve/memory/` 里的文件，卡片没有编辑路径，编辑请直接改文件。
+4. **只读卡片** —— 插件在官方插件管理的本 bundle 页面挂一张只读记忆卡片（`plugins.bundle.config` slot，老宿主自动降级为无卡片）：形态对齐市场自家设置卡（默认收起、头部整行可点 + 旋转 chevron、hover/展开框态），内容对齐 ZCode 设置的记忆选项卡——工作区一次选一个（目录名 chips）、文件搜索框、每个文件的相对更新时间、点击行内展开文件内容预览（5 MiB 上限），外加索引漂移警告（未索引文件与索引失联文件）。插件的显示名与描述走宿主包元数据 `locale/*.json` 通道双语切换。卡片与市场同款——宿主主题 token、`Button` 原语刷新按钮、中英文案跟随 DSH 语言（老宿主降级为同主题裸元素）。卡片是磁盘文件的请求时投影——单一事实源永远是 `.evolve/memory/` 里的文件，卡片没有编辑路径，编辑请直接改文件。
 
 记忆文件格式（与 ZCode 一致）：frontmatter 带 `name` / `description`（决定未来会话会不会想起它）/ `metadata.type`（`user | feedback | project | reference`）；`feedback` 正文必带 **Why:** 与 **How to apply:**。
 
@@ -66,7 +66,7 @@ profile patch 示例：
 
 ```bash
 pnpm install && pnpm build   # 依赖 + tsc -> lib/
-pnpm test                    # vitest（66 例）
+pnpm test                    # vitest（80 例）
 pnpm test:coverage           # v8 覆盖率，CI 强制阈值
 pnpm lint                    # oxlint src test
 ```
@@ -83,6 +83,7 @@ pnpm lint                    # oxlint src test
 │   └── card-routes.ts     # 卡片：webServer 上的 GET-only 只读 API
 ├── client/
 │   └── client.js          # 手写 client bundle：官方插件管理内只读卡片
+├── locale/                # 宿主包元数据：显示名 + 描述双语（zh/en）
 ├── test/                  # vitest 测试（7 个文件）
 ├── lib/                   # 构建产物（tsc）
 ├── docs/                  # design.md（设计）· FAQ.md（踩坑）

package/client/client.js

@@ -17,12 +17,25 @@
  * call with null (the bundle list row shows the package description; the
  * card is the page).
  *
- * Market parity (v0.13): locale/theme/primitives wiring copied from
- * dshmarket's client — `ctx.locale.register(NS, { zh, en })` + `bind`,
- * `var(--dsw-alias-*)` theme tokens, `Button` primitive for the refresh
- * control. Missing primitives/locale degrade to themed plain elements, so an
- * old host never blanks the settings dialog. The card stays a read-only
- * projection: fetched at render time from this plugin's host routes
+ * Card form (v0.14): the dshmarket SettingsCard shape, one for one — a
+ * collapsed-by-default framed card whose header is the toggle button
+ * (name + one-liner + rotating chevron), body rendered only when open, hover
+ * and open states on the frame (see that bundle's "why the chrome is
+ * hand-built" note: a flat, always-expanded box next to rows that collapse
+ * reads as another product). The stylesheet is injected once, like the
+ * host's own CSS-module tags.
+ *
+ * Content (v0.14): aligned with ZCode's Settings → Memory viewer, which the
+ * .evolve store shape was itself aligned with — one workspace selected at a
+ * time (chips; the known-workspace LRU is bounded at 8), a file search box,
+ * per-file relative updated times, and a click-to-preview body served by the
+ * host's content endpoint (5 MiB cap, deleted/changed guards). The drift
+ * warnings (dangling index rows / unindexed files) stay: they are this
+ * plugin's OBSERVATION surface and a deliberate superset of ZCode's viewer.
+ * Locale/theme/primitives wiring unchanged from v0.13: `ctx.locale.register`
+ * + `bind`, `var(--dsw-alias-*)` tokens, primitives with plain-element
+ * fallbacks so an old host never blanks the settings dialog. Read-only
+ * projection, fetched at render time from this plugin's host routes
  * (same-origin). No editor, no write path, no cached state.
  */
 window.__ModuleLoader__.load({
@@ -65,9 +78,11 @@ window.__ModuleLoader__.load({
 		var NS = "dsh-continual-evolve";
 		var SLOT = "plugins.bundle.config";
 		var API_ROOT = "/dsh-continual-evolve/api/v1";
+		var STYLE_ID = "dsh-continual-evolve-card-css";
 
 		var zh = {
-			title: "工作区记忆（只读投影）",
+			title: "工作区记忆",
+			desc: "各工作区 .evolve/memory/ 的只读投影。",
 			refresh: "刷新",
 			hint: "事实源是各工作区 .evolve/memory/ 下的 markdown 文件——模型原生读写；本卡片只展示，编辑请直接改文件。",
 			loading: "读取中…",
@@ -76,12 +91,25 @@ window.__ModuleLoader__.load({
 			absent: "该工作区尚无记忆库（开一次会话自动创建）。",
 			readFailed: "记忆库读取失败：",
 			stats: "{files} 条记忆 · 索引 {index} 行",
+			filesHeading: "文件",
+			searchPlaceholder: "搜索记忆文件…",
+			searchEmpty: "没有匹配的记忆文件。",
 			missing: "索引失联（索引引用但文件已删）：",
 			unindexed: "未入索引（文件存在但索引没有行）：",
 			readError: "读取失败：",
+			previewLoading: "正在加载文件…",
+			previewTooLarge: "该记忆文件超过 5 MiB 预览上限。",
+			previewDeleted: "该记忆文件已被删除，请刷新文件列表。",
+			previewFailed: "内容读取失败：",
+			justNow: "刚刚",
+			minutesAgo: "{count} 分钟前",
+			today: "今天 {time}",
+			yesterday: "昨天 {time}",
+			localeTag: "zh-CN",
 		};
 		var en = {
-			title: "Workspace memory (read-only)",
+			title: "Workspace Memory",
+			desc: "Read-only projection of each workspace's .evolve/memory/.",
 			refresh: "Refresh",
 			hint: "The source of truth is the markdown files under each workspace's .evolve/memory/ — read and written by the model; this card only displays them, edit the files directly.",
 			loading: "Loading…",
@@ -90,9 +118,21 @@ window.__ModuleLoader__.load({
 			absent: "No memory store in this workspace yet (one is created when you open a session).",
 			readFailed: "Failed to read the memory store: ",
 			stats: "{files} memories · {index} index rows",
+			filesHeading: "Files",
+			searchPlaceholder: "Search memory files…",
+			searchEmpty: "No matching memory files.",
 			missing: "Dangling index (indexed but deleted): ",
 			unindexed: "Unindexed (on disk, missing from the index): ",
 			readError: "Read failed: ",
+			previewLoading: "Loading file…",
+			previewTooLarge: "This memory file exceeds the 5 MiB preview limit.",
+			previewDeleted: "This memory file has been deleted — refresh the file list.",
+			previewFailed: "Failed to read the content: ",
+			justNow: "Just now",
+			minutesAgo: "{count} min ago",
+			today: "Today {time}",
+			yesterday: "Yesterday {time}",
+			localeTag: "en-US",
 		};
 
 		function format(template, params) {
@@ -102,6 +142,41 @@ window.__ModuleLoader__.load({
 			});
 		}
 
+		/**
+		 * Relative updated time, ZCode viewer style: just now / N minutes ago /
+		 * today / yesterday, then a calendar rendering via Intl in the active
+		 * language (the `localeTag` dictionary key carries that language out).
+		 */
+		function formatRelative(updatedAt, now, t) {
+			if (typeof updatedAt !== "number" || !isFinite(updatedAt) || updatedAt <= 0) {
+				return "";
+			}
+			var minute = 60000;
+			var diff = now - updatedAt;
+			if (diff < minute) {
+				return t("justNow");
+			}
+			if (diff < 60 * minute) {
+				return t("minutesAgo", { count: Math.floor(diff / minute) });
+			}
+			var date = new Date(updatedAt);
+			var time = new Intl.DateTimeFormat(t("localeTag"), { hour: "2-digit", minute: "2-digit" }).format(date);
+			var startOfDay = new Date(now);
+			startOfDay.setHours(0, 0, 0, 0);
+			if (updatedAt >= startOfDay.getTime()) {
+				return t("today", { time: time });
+			}
+			if (updatedAt >= startOfDay.getTime() - 24 * 60 * 60 * 1000) {
+				return t("yesterday", { time: time });
+			}
+			var sameYear = date.getFullYear() === new Date(now).getFullYear();
+			return new Intl.DateTimeFormat(t("localeTag"), {
+				month: "numeric",
+				day: "numeric",
+				year: sameYear ? undefined : "numeric",
+			}).format(date);
+		}
+
 		/**
 		 * Assemble the card's view model: the workspace allowlist, then one
 		 * snapshot per workspace. Network or API failure per workspace degrades
@@ -141,157 +216,355 @@ window.__ModuleLoader__.load({
 			return { workspaces: entries };
 		}
 
-		var CARD_STYLE = {
-			background: "var(--dsw-alias-bg-layer-1,#fff)",
-			border: "1px solid var(--dsw-alias-border-l2,#e5e7eb)",
-			borderRadius: "12px",
-			padding: "12px 14px",
-			display: "flex",
-			flexDirection: "column",
-			gap: "12px",
-		};
-		var TITLE_STYLE = {
-			color: "var(--dsw-alias-label-primary,#1f2328)",
-			fontSize: "15px",
-			fontWeight: 600,
-			lineHeight: "22px",
-		};
-		var HINT_STYLE = {
-			color: "var(--dsw-alias-label-tertiary,#8b93a1)",
-			fontSize: "12px",
-			lineHeight: "18px",
-		};
-		var SECTION_STYLE = {
-			borderTop: "1px solid var(--dsw-alias-border-l2,#f0f1f3)",
-			paddingTop: "8px",
-			display: "flex",
-			flexDirection: "column",
-			gap: "6px",
-		};
-		var ROOT_STYLE = {
-			fontFamily: "ui-monospace,Menlo,monospace",
-			fontSize: "11px",
-			color: "var(--dsw-alias-label-secondary,#6b7280)",
-			wordBreak: "break-all",
-		};
-		var STATS_STYLE = {
-			fontSize: "12px",
-			lineHeight: "18px",
-			color: "var(--dsw-alias-label-secondary,#6b7280)",
-		};
-		var WARN_STYLE = {
-			fontSize: "12px",
-			lineHeight: "18px",
-			color: "var(--dsw-alias-state-warn-primary,#b45309)",
-		};
-		var ERROR_STYLE = {
-			fontSize: "12px",
-			lineHeight: "18px",
-			color: "var(--dsw-alias-state-error-primary,#dc2626)",
-		};
-		var LIST_STYLE = { margin: "4px 0 0", paddingLeft: "18px", fontSize: "12px", lineHeight: "18px" };
-		var FALLBACK_BUTTON_STYLE = {
-			background: "var(--dsw-alias-bg-layer-2,#f3f4f6)",
-			color: "var(--dsw-alias-label-primary,#1f2328)",
-			border: "1px solid var(--dsw-alias-border-l2,#e5e7eb)",
-			borderRadius: "6px",
-			padding: "3px 10px",
-			fontSize: "12px",
-			lineHeight: "18px",
-			cursor: "pointer",
-		};
+		/**
+		 * Fetch one memory file's body for the preview. Outcomes mirror the
+		 * endpoint's status mapping so the card can show the ZCode viewer's
+		 * deleted / too-large / failed states instead of a raw error.
+		 *
+		 * @param {typeof fetch} fetchImpl - injectable for tests.
+		 * @param {string} root - known workspace root.
+		 * @param {string} file - plain .md file name inside that memory store.
+		 * @returns {Promise<{status: "ready"|"deleted"|"tooLarge"|"failed", content: string, message: string}>}
+		 */
+		async function loadFileContent(fetchImpl, root, file) {
+			var url = API_ROOT + "/memory/file?root=" + encodeURIComponent(root) + "&file=" + encodeURIComponent(file);
+			try {
+				var response = await fetchImpl(url);
+				if (response.ok) {
+					var body = await response.json();
+					return {
+						status: "ready",
+						content: typeof body.content === "string" ? body.content : "",
+						message: "",
+					};
+				}
+				if (response.status === 404) {
+					return { status: "deleted", content: "", message: "" };
+				}
+				if (response.status === 413) {
+					return { status: "tooLarge", content: "", message: "" };
+				}
+				return { status: "failed", content: "", message: "HTTP " + response.status };
+			} catch (error) {
+				return {
+					status: "failed",
+					content: "",
+					message: error instanceof Error ? error.message : String(error),
+				};
+			}
+		}
+
+		/** Display label for a workspace: its directory name (ZCode shows a project name, not a path). */
+		function workspaceLabel(root) {
+			var normalized = String(root).replace(/[\\/]+$/, "");
+			var index = Math.max(normalized.lastIndexOf("/"), normalized.lastIndexOf("\\"));
+			return index >= 0 ? normalized.slice(index + 1) : normalized;
+		}
+
+		/**
+		 * Inject the card stylesheet once, the way the host's own CSS-module
+		 * tags work. The classes are prefixed `dce-` and every value falls back
+		 * to a fixed color after the token, so an old theme never blanks text.
+		 */
+		function injectCardStyle() {
+			if (typeof document === "undefined") {
+				return;
+			}
+			if (document.getElementById(STYLE_ID) !== null) {
+				return;
+			}
+			var style = document.createElement("style");
+			style.id = STYLE_ID;
+			style.dataset.plugin = NS;
+			style.textContent = [
+				".dce-card{border:1px solid var(--dsw-alias-border-l2,#e5e7eb);background:var(--dsw-alias-bg-layer-3,#fff);border-radius:12px;transition:border-color .16s,background .16s}",
+				".dce-card:hover{border-color:var(--dsw-alias-label-dimmed,#c8ccd4)}",
+				'.dce-card[data-open="true"]{background:var(--dsw-alias-bg-layer-2,#f7f8fa);border-color:var(--dsw-alias-label-dimmed,#c8ccd4)}',
+				".dce-head{appearance:none;-webkit-appearance:none;width:100%;font:inherit;color:inherit;text-align:left;cursor:pointer;background:0 0;border:0;border-radius:12px;align-items:center;gap:12px;padding:14px 16px;display:flex}",
+				".dce-head:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#4f6ef7);outline-offset:-2px}",
+				".dce-head-text{flex-direction:column;flex:1;gap:4px;min-width:0;display:flex}",
+				".dce-name{color:var(--dsw-alias-label-primary,#1f2328);font-size:15px;font-weight:600;line-height:1.4}",
+				".dce-desc{color:var(--dsw-alias-label-tertiary,#8b93a1);font-size:13px;line-height:1.5}",
+				".dce-chevron{color:var(--dsw-alias-label-tertiary,#8b93a1);flex:none;transition:transform .16s;display:inline-flex}",
+				'.dce-chevron[data-open="true"]{transform:rotate(180deg)}',
+				".dce-body{border-top:1px solid var(--dsw-alias-border-l2,#e5e7eb);margin:0 16px;padding:12px 0 14px;display:flex;flex-direction:column;gap:10px}",
+				".dce-hint{color:var(--dsw-alias-label-tertiary,#8b93a1);font-size:12px;line-height:18px}",
+				".dce-empty{border:1px dashed var(--dsw-alias-border-l3,#d1d9e0);border-radius:10px;padding:16px;text-align:center;color:var(--dsw-alias-label-tertiary,#8b93a1);font-size:13px;line-height:20px}",
+				".dce-chips{display:flex;flex-wrap:wrap;gap:6px}",
+				".dce-chip{font:inherit;cursor:pointer;background:0 0;border:1px solid var(--dsw-alias-border-l2,#e5e7eb);border-radius:var(--dsw-radius-md,8px);color:var(--dsw-alias-label-secondary,#6b7280);padding:3px 10px;font-size:12px;line-height:18px}",
+				'.dce-chip[data-active="true"]{background:var(--dsw-alias-bg-module-platform,#eef1f4);border-color:var(--dsw-alias-border-l3,#d1d9e0);color:var(--dsw-alias-label-primary,#1f2328)}',
+				".dce-search{width:100%;box-sizing:border-box;border:1px solid var(--dsw-alias-border-l4,#d8dee4);border-radius:var(--dsw-radius-md,8px);background:var(--dsw-alias-bg-layer-1,#fff);height:32px;color:var(--dsw-alias-label-primary,#1f2328);font:inherit;font-size:12px;padding:0 10px;outline:none}",
+				".dce-search::placeholder{color:var(--dsw-alias-label-tertiary,#8b93a1)}",
+				".dce-search:focus-visible{border-color:var(--dsw-alias-brand-primary,#4f6ef7)}",
+				".dce-files-head{display:flex;align-items:center;gap:10px;min-height:28px}",
+				".dce-files-title{color:var(--dsw-alias-label-primary,#1f2328);font-size:13px;font-weight:600;line-height:18px}",
+				".dce-files-count{color:var(--dsw-alias-label-tertiary,#8b93a1);font-size:12px;line-height:18px}",
+				".dce-spacer{flex:1}",
+				".dce-list{margin:0;padding:0;list-style:none;border:1px solid var(--dsw-alias-border-l2,#e5e7eb);border-radius:10px;overflow:hidden;background:var(--dsw-alias-bg-layer-1,#fff)}",
+				".dce-item+.dce-item{border-top:1px solid var(--dsw-alias-border-l2,#e5e7eb)}",
+				".dce-row{display:flex;width:100%;align-items:center;gap:10px;padding:8px 12px;background:0 0;border:0;font:inherit;color:inherit;text-align:left;cursor:pointer}",
+				".dce-row:hover{background:var(--dsw-alias-interactive-bg-hover,rgba(0,0,0,.03))}",
+				".dce-row:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#4f6ef7);outline-offset:-2px}",
+				".dce-file-name{min-width:0;flex:1;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:var(--dsw-alias-label-primary,#1f2328);font-size:13px;font-weight:500;line-height:18px}",
+				".dce-file-time{flex:none;color:var(--dsw-alias-label-tertiary,#8b93a1);font-size:11px;line-height:16px}",
+				".dce-preview{margin:0;padding:8px 12px 10px;background:var(--dsw-alias-bg-module-platform,#eef1f4);border-top:1px solid var(--dsw-alias-border-l2,#e5e7eb)}",
+				".dce-pre{margin:0;max-height:240px;overflow:auto;font-family:var(--ds-font-family-code,ui-monospace,Menlo,monospace);font-size:11px;line-height:17px;color:var(--dsw-alias-label-primary,#1f2328);white-space:pre-wrap;word-break:break-word}",
+				".dce-workspace{display:flex;flex-direction:column;gap:10px}",
+				".dce-stats{color:var(--dsw-alias-label-secondary,#6b7280);font-size:12px;line-height:18px}",
+				".dce-warn{color:var(--dsw-alias-state-warn-primary,#b45309);font-size:12px;line-height:18px}",
+				".dce-error{color:var(--dsw-alias-state-error-primary,#dc2626);font-size:12px;line-height:18px}",
+				".dce-fallback-btn{background:var(--dsw-alias-bg-layer-2,#f3f4f6);color:var(--dsw-alias-label-primary,#1f2328);border:1px solid var(--dsw-alias-border-l2,#e5e7eb);border-radius:6px;padding:3px 10px;font-size:12px;line-height:18px;cursor:pointer}",
+			].join("\n");
+			document.head.appendChild(style);
+		}
+
+		/** Chevron from the host primitives, or a plain glyph when they are absent. */
+		function Chevron() {
+			if (
+				primitives !== undefined &&
+				primitives !== null &&
+				typeof primitives.IconChevronDownOutlineRegular !== "undefined" &&
+				primitives.IconChevronDownOutlineRegular !== null
+			) {
+				return createElement(primitives.IconChevronDownOutlineRegular, { size: 14, "aria-hidden": "true" });
+			}
+			return createElement("span", { "aria-hidden": "true" }, "▾");
+		}
 
 		function RefreshButton(props) {
 			var UI = props.UI;
 			var t = props.t;
 			var onClick = props.onClick;
 			if (UI !== null && UI !== undefined && typeof UI.Button !== "undefined" && UI.Button !== null) {
-				return createElement(
-					UI.Button,
-					{ variant: "outline", size: "sm", onClick: onClick },
-					t("refresh"),
-				);
+				return createElement(UI.Button, { variant: "outline", size: "sm", onClick: onClick }, t("refresh"));
 			}
-			return createElement("button", { type: "button", style: FALLBACK_BUTTON_STYLE, onClick: onClick }, t("refresh"));
+			return createElement(
+				"button",
+				{ type: "button", className: "dce-fallback-btn", onClick: onClick },
+				t("refresh"),
+			);
 		}
 
-		/** One workspace block: root, stats, drift warnings, per-file lines. */
-		function WorkspaceBlock(props) {
-			var entry = props.entry;
+		/** One memory file row: name + relative updated time, click toggles the body preview. */
+		function FileRow(props) {
+			var file = props.file;
+			var now = props.now;
 			var t = props.t;
-			if (entry.error !== null && entry.error !== undefined) {
-				return createElement(
-					"div",
-					{ style: SECTION_STYLE },
-					createElement("div", { style: ROOT_STYLE }, entry.root),
-					createElement("div", { style: ERROR_STYLE }, t("readError") + entry.error),
-				);
-			}
-			var snapshot = entry.snapshot;
-			if (snapshot === null || snapshot === undefined || !snapshot.exists) {
-				return createElement(
-					"div",
-					{ style: SECTION_STYLE },
-					createElement("div", { style: ROOT_STYLE }, entry.root),
-					createElement("div", { style: HINT_STYLE }, t("absent")),
-				);
-			}
-			if (snapshot.readError !== null && snapshot.readError !== undefined) {
-				return createElement(
-					"div",
-					{ style: SECTION_STYLE },
-					createElement("div", { style: ROOT_STYLE }, entry.root),
-					createElement("div", { style: ERROR_STYLE }, t("readFailed") + snapshot.readError),
-				);
+			var expanded = props.expanded;
+			var preview = props.preview;
+			var onToggle = props.onToggle;
+			var rowChildren = [
+				createElement("span", { key: "name", className: "dce-file-name" }, file.file),
+			];
+			var time = formatRelative(file.updatedAt, now, t);
+			if (time !== "") {
+				rowChildren.push(createElement("span", { key: "time", className: "dce-file-time" }, time));
 			}
 			var children = [
-				createElement("div", { key: "root", style: ROOT_STYLE }, entry.root),
 				createElement(
-					"div",
-					{ key: "stats", style: STATS_STYLE },
-					t("stats", { files: snapshot.fileCount, index: snapshot.indexEntryCount }),
+					"button",
+					{
+						key: "row",
+						type: "button",
+						className: "dce-row",
+						"aria-expanded": expanded ? "true" : "false",
+						onClick: onToggle,
+					},
+					rowChildren,
 				),
 			];
-			if (snapshot.missingFiles.length > 0) {
-				children.push(
-					createElement("div", { key: "missing", style: WARN_STYLE }, t("missing") + snapshot.missingFiles.join("、")),
+			if (expanded) {
+				var body = null;
+				if (preview === null || preview.file !== file.file) {
+					body = createElement("div", { className: "dce-hint" }, t("previewLoading"));
+				} else if (preview.status === "loading") {
+					body = createElement("div", { className: "dce-hint" }, t("previewLoading"));
+				} else if (preview.status === "ready") {
+					body = createElement("pre", { className: "dce-pre" }, preview.content);
+				} else if (preview.status === "deleted") {
+					body = createElement("div", { className: "dce-hint" }, t("previewDeleted"));
+				} else if (preview.status === "tooLarge") {
+					body = createElement("div", { className: "dce-hint" }, t("previewTooLarge"));
+				} else {
+					body = createElement("div", { className: "dce-error" }, t("previewFailed") + preview.message);
+				}
+				children.push(createElement("div", { key: "preview", className: "dce-preview" }, body));
+			}
+			return createElement("li", { className: "dce-item" }, children);
+		}
+
+		/** One workspace's memory store: stats, drift warnings, searchable file list with previews. */
+		function WorkspaceBlock(props) {
+			var entry = props.entry;
+			var selected = props.selected;
+			var onSelect = props.onSelect;
+			var t = props.t;
+			var UI = props.UI;
+			var now = props.now;
+			var expandedFile = props.expandedFile;
+			var preview = props.preview;
+			var onToggleFile = props.onToggleFile;
+			var onRefresh = props.onRefresh;
+			var query = props.query;
+			var onQueryChange = props.onQueryChange;
+			var chips = [];
+			if (entry.workspaces.length > 1) {
+				chips = createElement(
+					"div",
+					{ key: "chips", className: "dce-chips", role: "tablist", "aria-label": t("filesHeading") },
+					entry.workspaces.map(function (workspace) {
+						return createElement(
+							"button",
+							{
+								key: workspace.root,
+								type: "button",
+								className: "dce-chip",
+								"data-active": workspace.root === selected ? "true" : "false",
+								onClick: function () {
+									onSelect(workspace.root);
+								},
+							},
+							workspaceLabel(workspace.root),
+						);
+					}),
 				);
 			}
-			if (snapshot.unindexedFiles.length > 0) {
-				children.push(
+			var active = entry.workspaces.find(function (workspace) {
+				return workspace.root === selected;
+			});
+			if (active === undefined) {
+				return createElement("div", { key: "block" }, chips);
+			}
+			var body = null;
+			if (active.error !== null && active.error !== undefined) {
+				body = [
+					createElement("div", { key: "root", className: "dce-stats" }, active.root),
+					createElement("div", { key: "err", className: "dce-error" }, t("readError") + active.error),
+				];
+			} else if (active.snapshot === null || active.snapshot === undefined || !active.snapshot.exists) {
+				body = createElement("div", { className: "dce-empty" }, t("absent"));
+			} else if (active.snapshot.readError !== null && active.snapshot.readError !== undefined) {
+				body = [
+					createElement("div", { key: "root", className: "dce-stats" }, active.root),
+					createElement("div", { key: "err", className: "dce-error" }, t("readFailed") + active.snapshot.readError),
+				];
+			} else {
+				var snapshot = active.snapshot;
+				var normalizedQuery = String(query).trim().toLocaleLowerCase();
+				var files = snapshot.files.filter(function (file) {
+					if (normalizedQuery.length === 0) {
+						return true;
+					}
+					return [file.file, file.name, file.description, file.type]
+						.filter(function (value) {
+							return typeof value === "string";
+						})
+						.some(function (value) {
+							return value.toLocaleLowerCase().includes(normalizedQuery);
+						});
+				});
+				var parts = [
+					createElement(
+						"div",
+						{ key: "stats", className: "dce-stats" },
+						t("stats", { files: snapshot.fileCount, index: snapshot.indexEntryCount }),
+					),
+				];
+				if (snapshot.missingFiles.length > 0) {
+					parts.push(
+						createElement("div", { key: "missing", className: "dce-warn" }, t("missing") + snapshot.missingFiles.join("、")),
+					);
+				}
+				if (snapshot.unindexedFiles.length > 0) {
+					parts.push(
+						createElement(
+							"div",
+							{ key: "unindexed", className: "dce-warn" },
+							t("unindexed") + snapshot.unindexedFiles.join("、"),
+						),
+					);
+				}
+				parts.push(
+					createElement("input", {
+						key: "search",
+						type: "search",
+						className: "dce-search",
+						value: query,
+						placeholder: t("searchPlaceholder"),
+						"aria-label": t("searchPlaceholder"),
+						onChange: function (event) {
+							onQueryChange(event.currentTarget.value);
+						},
+					}),
+				);
+				parts.push(
 					createElement(
 						"div",
-						{ key: "unindexed", style: WARN_STYLE },
-						t("unindexed") + snapshot.unindexedFiles.join("、"),
+						{ key: "head", className: "dce-files-head" },
+						createElement("span", { className: "dce-files-title" }, t("filesHeading")),
+						createElement("span", { className: "dce-files-count" }, String(files.length)),
+						createElement("span", { className: "dce-spacer" }),
+						createElement(RefreshButton, {
+							UI: UI,
+							t: t,
+							onClick: onRefresh,
+						}),
 					),
 				);
+				if (files.length === 0) {
+					parts.push(createElement("div", { key: "none", className: "dce-empty" }, t("searchEmpty")));
+				} else {
+					parts.push(
+						createElement(
+							"ul",
+							{ key: "files", className: "dce-list" },
+							files.map(function (file) {
+								return createElement(FileRow, {
+									key: file.file,
+									file: file,
+									now: now,
+									t: t,
+									expanded: expandedFile === file.file,
+									preview: preview,
+									onToggle: function () {
+										onToggleFile(file.file);
+									},
+								});
+							}),
+						),
+					);
+				}
+				body = parts;
 			}
-			children.push(
-				createElement(
-					"ul",
-					{ key: "files", style: LIST_STYLE },
-					snapshot.files.map(function (file) {
-						return createElement(
-							"li",
-							{ key: file.file },
-							createElement("strong", null, file.file),
-							file.description !== "" ? " — " + file.description : "",
-						);
-					}),
-				),
-			);
-			return createElement("div", { style: SECTION_STYLE }, children);
+			return createElement("div", { key: "block", className: "dce-workspace" }, chips, body);
 		}
 
-		/** The card page: refresh control + one block per known workspace. */
+		/**
+		 * The card: a collapsed-by-default framed disclosure (dshmarket
+		 * SettingsCard shape) whose open body is the ZCode-memory-viewer-shaped
+		 * read-only projection.
+		 */
 		function MemoryCard(props) {
 			var t = props.t;
 			var UI = props.UI;
+			injectCardStyle();
+			var openState = useState(false);
+			var open = openState[0];
+			var setOpen = openState[1];
 			var state = useState({ status: "loading", model: null, message: "" });
 			var model = state[0];
 			var setModel = state[1];
 			var reloadState = useState(0);
 			var reload = reloadState[1];
+			var selectionState = useState({ root: null, query: "", expandedFile: null });
+			var selection = selectionState[0];
+			var setSelection = selectionState[1];
+			var previewState = useState({ file: null, status: "loading", content: "", message: "" });
+			var preview = previewState[0];
+			var setPreview = previewState[1];
+			var nowState = useState(Date.now());
+			var now = nowState[0];
+			var setNow = nowState[1];
 			useEffect(
 				function () {
 					var alive = true;
@@ -311,42 +584,116 @@ window.__ModuleLoader__.load({
 				},
 				[reloadState[0]],
 			);
+			useEffect(
+				function () {
+					if (open) setNow(Date.now());
+				},
+				[open],
+			);
+			var refresh = function () {
+				setModel({ status: "loading", model: null, message: "" });
+				setSelection(function (current) {
+					return { root: current.root, query: "", expandedFile: null };
+				});
+				setPreview({ file: null, status: "loading", content: "", message: "" });
+				reload(function (n) {
+					return n + 1;
+				});
+			};
+			var header = createElement(
+				"button",
+				{
+					type: "button",
+					className: "dce-head",
+					"aria-expanded": open ? "true" : "false",
+					onClick: function () {
+						setOpen(!open);
+					},
+				},
+				createElement(
+					"div",
+					{ className: "dce-head-text" },
+					createElement("div", { className: "dce-name" }, t("title")),
+					createElement("div", { className: "dce-desc" }, t("desc")),
+				),
+				createElement(
+					"span",
+					{ className: "dce-chevron", "data-open": open ? "true" : "false" },
+					createElement(Chevron, null),
+				),
+			);
 			var body = null;
+			if (!open) {
+				return createElement("div", { className: "dce-card", "data-open": "false" }, header);
+			}
+			var inner = null;
 			if (model.status === "loading") {
-				body = createElement("div", { key: "body", style: HINT_STYLE }, t("loading"));
+				inner = createElement("div", { key: "inner", className: "dce-hint" }, t("loading"));
 			} else if (model.status === "error") {
-				body = createElement("div", { key: "body", style: ERROR_STYLE }, t("loadFailed") + model.message);
+				inner = createElement("div", { key: "inner", className: "dce-error" }, t("loadFailed") + model.message);
 			} else if (model.model.workspaces.length === 0) {
-				body = createElement("div", { key: "body", style: HINT_STYLE }, t("empty"));
+				inner = createElement("div", { key: "inner", className: "dce-empty" }, t("empty"));
 			} else {
-				body = createElement(
-					"div",
-					{ key: "body" },
-					model.model.workspaces.map(function (entry) {
-						return createElement(WorkspaceBlock, { key: entry.root, entry: entry, t: t, UI: UI });
-					}),
-				);
+				var selected = selection.root;
+				if (
+					selected === null ||
+					!model.model.workspaces.some(function (workspace) {
+						return workspace.root === selected;
+					})
+				) {
+					selected = model.model.workspaces[0].root;
+				}
+				inner = createElement(WorkspaceBlock, {
+					key: "inner",
+					entry: model.model,
+					selected: selected,
+					onSelect: function (root) {
+						setSelection({ root: root, query: "", expandedFile: null });
+						setPreview({ file: null, status: "loading", content: "", message: "" });
+					},
+					t: t,
+					UI: UI,
+					now: now,
+					expandedFile: selection.expandedFile,
+					preview: preview,
+					onToggleFile: function (file) {
+						if (selection.expandedFile === file) {
+							setSelection(function (current) {
+								return { root: current.root, query: current.query, expandedFile: null };
+							});
+							return;
+						}
+						setSelection(function (current) {
+							return { root: current.root, query: current.query, expandedFile: file };
+						});
+						setPreview({ file: file, status: "loading", content: "", message: "" });
+						loadFileContent(fetch, selected, file).then(function (result) {
+							setPreview(function (current) {
+								if (current.file !== file) {
+									return current;
+								}
+								return { file: file, status: result.status, content: result.content, message: result.message };
+							});
+						});
+					},
+					query: selection.query,
+					onQueryChange: function (value) {
+						setSelection(function (current) {
+							return { root: current.root, query: value, expandedFile: current.expandedFile };
+						});
+					},
+				});
 			}
+			body = createElement(
+				"div",
+				{ key: "body", className: "dce-body" },
+				createElement("div", { className: "dce-hint" }, t("hint")),
+				inner,
+			);
 			return createElement(
 				"div",
-				{ style: CARD_STYLE },
-				createElement(
-					"div",
-					{ style: { display: "flex", alignItems: "center", gap: "12px" } },
-					createElement("div", { style: TITLE_STYLE }, t("title")),
-					createElement("span", { style: { flex: 1 } }),
-					createElement(RefreshButton, {
-						UI: UI,
-						t: t,
-						onClick: function () {
-							setModel({ status: "loading", model: null, message: "" });
-							reload(function (n) {
-								return n + 1;
-							});
-						},
-					}),
-				),
-				createElement("div", { style: HINT_STYLE }, t("hint")),
+				{ className: "dce-card", "data-open": "true" },
+				header,
 				body,
 			);
 		}
@@ -354,6 +701,7 @@ window.__ModuleLoader__.load({
 		exports.name = NS;
 		exports.inject = ["slots", "locale", "theme"];
 		exports.loadCardModel = loadCardModel;
+		exports.loadFileContent = loadFileContent;
 		exports.apply = function apply(ctx) {
 			var tRaw = null;
 			try {

package/lib/card-routes.d.ts

@@ -2,6 +2,7 @@ import type { KnownWorkspaces } from "./known-workspaces.js";
 /** URL prefix of the card API (kind-exact routes registered under it). */
 export declare const CARD_API_WORKSPACES_PATH = "/dsh-continual-evolve/api/v1/workspaces";
 export declare const CARD_API_MEMORY_PATH = "/dsh-continual-evolve/api/v1/memory";
+export declare const CARD_API_MEMORY_FILE_PATH = "/dsh-continual-evolve/api/v1/memory/file";
 /** Minimal request shape the handlers touch (Node IncomingMessage subset). */
 export interface CardRequest {
     method?: string;

package/lib/card-routes.js

@@ -3,17 +3,20 @@
  *
  * Mounted through the host's `webServer` service (same registration shape
  * dshmarket uses: `kind: "exact"` routes on the profile's web server), the
- * two endpoints are GET-only projections: the workspace allowlist and, for a
- * known root, the memory snapshot. The allowlist IS the security fence — the
- * memory endpoint resolves its `root` parameter only against roots the
- * running process has actually served, so the API cannot read arbitrary
- * paths. Handlers are synchronous and never throw past the response.
+ * three endpoints are GET-only projections: the workspace allowlist, the
+ * memory snapshot for a known root, and one memory file's body for the card's
+ * content preview. The allowlist IS the security fence — the memory endpoints
+ * resolve their `root` parameter only against roots the running process has
+ * actually served, and the file endpoint additionally accepts only plain .md
+ * entries of that workspace's memory directory, so the API cannot read
+ * arbitrary paths. Handlers are synchronous and never throw past the response.
  */
 import { resolve } from "node:path";
-import { memorySnapshot } from "./memory-snapshot.js";
+import { memoryFileContent, memorySnapshot } from "./memory-snapshot.js";
 /** URL prefix of the card API (kind-exact routes registered under it). */
 export const CARD_API_WORKSPACES_PATH = "/dsh-continual-evolve/api/v1/workspaces";
 export const CARD_API_MEMORY_PATH = "/dsh-continual-evolve/api/v1/memory";
+export const CARD_API_MEMORY_FILE_PATH = "/dsh-continual-evolve/api/v1/memory/file";
 function sendJson(response, status, body) {
     response.writeHead(status, { "content-type": "application/json; charset=utf-8" });
     response.end(JSON.stringify(body));
@@ -65,6 +68,56 @@ export function mountCardRoutes(webServer, workspaces) {
             sendJson(response, 200, memorySnapshot(known.root));
         },
     }));
+    disposers.push(webServer.register({
+        kind: "exact",
+        path: CARD_API_MEMORY_FILE_PATH,
+        handler(request, response) {
+            if (!isGet(request)) {
+                response.writeHead(405, { allow: "GET" });
+                response.end();
+                return;
+            }
+            const root = rootParamOf(request);
+            if (root === null) {
+                sendJson(response, 400, { error: "root query parameter is required and must be an absolute path" });
+                return;
+            }
+            const file = fileParamOf(request);
+            if (file === null) {
+                sendJson(response, 400, { error: "file query parameter is required" });
+                return;
+            }
+            const known = workspaces.list().find((workspace) => workspace.root === resolve(root));
+            if (known === undefined) {
+                // Same fence as the snapshot route: 404 without distinguishing
+                // "never served" from "wrong path".
+                sendJson(response, 404, { error: "unknown workspace root" });
+                return;
+            }
+            const content = memoryFileContent(known.root, file);
+            if (!content.ok) {
+                // The fence reasons stay indistinguishable from absence in status
+                // terms only where safe: "outside" answers 400 (a client bug),
+                // absence 404, oversized 413 — never a body leak either way.
+                if (content.reason === "outside") {
+                    sendJson(response, 400, { error: "file must be a plain .md entry of the memory directory" });
+                }
+                else if (content.reason === "too-large") {
+                    sendJson(response, 413, { error: "memory file exceeds the 5 MiB preview limit" });
+                }
+                else {
+                    sendJson(response, 404, { error: "memory file not found" });
+                }
+                return;
+            }
+            sendJson(response, 200, {
+                file: content.file,
+                content: content.content,
+                mtimeMs: content.mtimeMs,
+                changed: content.changed,
+            });
+        },
+    }));
     return () => {
         for (const disposer of disposers) {
             if (typeof disposer === "function") {
@@ -89,4 +142,19 @@ function rootParamOf(request) {
         return null;
     }
 }
+/** The decoded `file` query parameter, or null when absent. */
+function fileParamOf(request) {
+    try {
+        const url = new URL(request.url ?? "/", "http://dsh-card.invalid");
+        const file = url.searchParams.get("file");
+        if (file === null || file.trim().length === 0) {
+            return null;
+        }
+        return file;
+    }
+    catch (error) {
+        void error;
+        return null;
+    }
+}
 //# sourceMappingURL=card-routes.js.map

package/lib/memory-snapshot.d.ts

@@ -1,11 +1,18 @@
 /** The index file name (same store contract as the injection path). */
 export declare const MEMORY_SNAPSHOT_INDEX_FILE = "MEMORY.md";
+/**
+ * Preview size cap for the file content endpoint — files above it answer
+ * `too-large` instead of their body (ZCode's memory viewer uses the same 5 MiB).
+ */
+export declare const MEMORY_FILE_PREVIEW_LIMIT: number;
 /** One memory file with its frontmatter fields ("" when absent). */
 export interface MemoryFileInfo {
     file: string;
     name: string;
     description: string;
     type: string;
+    /** File modification time in epoch milliseconds (the card's "updated" line). */
+    updatedAt: number;
 }
 /** One parsed index row: `- [title](file.md) — hook`. */
 export interface MemoryIndexRow {
@@ -51,4 +58,25 @@ export declare function parseMemoryFrontmatter(text: string): MemoryFrontmatter;
  * card must observe, never break.
  */
 export declare function memorySnapshot(root: string): MemorySnapshot;
+/** The content endpoint's outcomes: the body, or why there is none. */
+export type MemoryFileContent = {
+    ok: true;
+    file: string;
+    content: string;
+    mtimeMs: number;
+    changed: boolean;
+} | {
+    ok: false;
+    reason: "outside" | "absent" | "too-large";
+};
+/**
+ * Read one memory file's body for the card's content preview — the viewer
+ * side of the same read-only fence as `memorySnapshot`. The requested file
+ * name must be a plain entry of the workspace's memory directory (no path
+ * separators, no traversal, resolved location stays inside the directory);
+ * anything else answers `outside` without touching the filesystem, so the
+ * endpoint cannot become a path oracle. Oversized files answer `too-large`
+ * with the body unread.
+ */
+export declare function memoryFileContent(root: string, file: string): MemoryFileContent;
 //# sourceMappingURL=memory-snapshot.d.ts.map

package/lib/memory-snapshot.js

@@ -4,11 +4,16 @@
  * card is a viewer, never a second store: no caching, no writes, no bootstrap
  * (unlike the injection path, a missing store is reported, not created).
  */
-import { existsSync, readdirSync, readFileSync } from "node:fs";
-import { join, resolve } from "node:path";
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { basename, join, resolve } from "node:path";
 import { memoryDirFor } from "./memory-section.js";
 /** The index file name (same store contract as the injection path). */
 export const MEMORY_SNAPSHOT_INDEX_FILE = "MEMORY.md";
+/**
+ * Preview size cap for the file content endpoint — files above it answer
+ * `too-large` instead of their body (ZCode's memory viewer uses the same 5 MiB).
+ */
+export const MEMORY_FILE_PREVIEW_LIMIT = 5 * 1024 * 1024;
 /**
  * Parse `- [title](file.md) …` rows out of an index text. Anything else
  * (headings, the bootstrap hint comment, blank lines) is ignored.
@@ -67,7 +72,8 @@ function readStoreState(memoryDir) {
     const diskFiles = listStoreFiles(memoryDir);
     const files = diskFiles.map((file) => {
         const frontmatter = parseMemoryFrontmatter(readFileSync(join(memoryDir, file), "utf8"));
-        return { file, name: frontmatter.name, description: frontmatter.description, type: frontmatter.type };
+        const updatedAt = statSync(join(memoryDir, file)).mtimeMs;
+        return { file, name: frontmatter.name, description: frontmatter.description, type: frontmatter.type, updatedAt };
     });
     return { indexRows: parseMemoryIndexRows(indexText), diskFiles, files };
 }
@@ -122,4 +128,52 @@ export function memorySnapshot(root) {
         readError: null,
     };
 }
+/**
+ * Read one memory file's body for the card's content preview — the viewer
+ * side of the same read-only fence as `memorySnapshot`. The requested file
+ * name must be a plain entry of the workspace's memory directory (no path
+ * separators, no traversal, resolved location stays inside the directory);
+ * anything else answers `outside` without touching the filesystem, so the
+ * endpoint cannot become a path oracle. Oversized files answer `too-large`
+ * with the body unread.
+ */
+export function memoryFileContent(root, file) {
+    const memoryDir = memoryDirFor(resolve(root));
+    if (file.length === 0 ||
+        !file.endsWith(".md") ||
+        file.includes("/") ||
+        file.includes("\\") ||
+        basename(file) !== file) {
+        return { ok: false, reason: "outside" };
+    }
+    const target = resolve(memoryDir, file);
+    if (!target.startsWith(memoryDir + "/") && target !== memoryDir) {
+        return { ok: false, reason: "outside" };
+    }
+    let before;
+    try {
+        before = statSync(target);
+    }
+    catch {
+        return { ok: false, reason: "absent" };
+    }
+    if (!before.isFile()) {
+        return { ok: false, reason: "absent" };
+    }
+    if (before.size > MEMORY_FILE_PREVIEW_LIMIT) {
+        return { ok: false, reason: "too-large" };
+    }
+    let content;
+    try {
+        content = readFileSync(target, "utf8");
+    }
+    catch {
+        return { ok: false, reason: "absent" };
+    }
+    // The file may have been rewritten between stat and read — surface that
+    // instead of silently showing stale bytes (same guard shape as ZCode's
+    // memory viewer's "changed during read" state).
+    const after = statSync(target);
+    return { ok: true, file, content, mtimeMs: after.mtimeMs, changed: after.mtimeMs !== before.mtimeMs };
+}
 //# sourceMappingURL=memory-snapshot.js.map

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Workspace Memory",
+    "description": "Per-workspace markdown memory store with session-start index injection."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "工作区记忆",
+    "description": "每个工作区一个 markdown 记忆库，会话开局注入索引，模型原生读写。"
+  }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-continual-evolve",
-  "version": "0.13.0",
-  "description": "DSH 工作区记忆：每个工作区一个 markdown 记忆库，会话开局注入索引，模型原生读写 / ZCode-style workspace memory for DeepSeek Harness: a per-workspace markdown store with session-start index injection.",
+  "version": "0.14.0",
+  "description": "ZCode-style workspace memory for DeepSeek Harness: a per-workspace markdown store with session-start index injection.",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -20,13 +20,15 @@
       "default": "./lib/index.js"
     },
     "./client": "./client/client.js",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
   },
   "files": [
     "lib/**/*.js",
     "lib/**/*.d.ts",
     "client/client.js",
     "cordis.patch.yml",
+    "locale/*.json",
     "README.md",
     "LICENSE"
   ],