dsh-continual-evolve 0.14.1 → 0.15.0

package/client/client.js

@@ -76,6 +76,7 @@ window.__ModuleLoader__.load({
 		var createElement = react.createElement;
 		var useState = react.useState;
 		var useEffect = react.useEffect;
+		var useRef = react.useRef;
 
 		var NS = "dsh-continual-evolve";
 		var SLOT = "plugins.bundle.config";
@@ -84,25 +85,24 @@ window.__ModuleLoader__.load({
 
 		var zh = {
 			title: "工作区记忆",
-			desc: "各工作区 .evolve/memory/ 的只读投影。",
+			desc: "中央记忆库（~/.dsh/evolve/memory.db）的只读投影。",
 			refresh: "刷新",
-			hint: "事实源是各工作区 .evolve/memory/ 下的 markdown 文件——模型原生读写；本卡片只展示，编辑请直接改文件。",
+			hint: "事实源是中央记忆库——模型经 memory_write 提案、代码校验后落库（代码是唯一写者）；本卡片只展示。",
 			loading: "读取中…",
 			loadFailed: "卡片数据加载失败：",
-			empty: "还没有任何工作区有记忆库——在某个工作区开一次会话后回来刷新。",
-			absent: "该工作区尚无记忆库（开一次会话自动创建）。",
+			empty: "还没有任何工作区写过记忆——在某个工作区正常使用后回来刷新。",
+			absent: "该工作区还没有记忆。",
 			readFailed: "记忆库读取失败：",
-			stats: "{files} 条记忆 · 索引 {index} 行",
+			stats: "{files} 条记忆",
 			filesHeading: "文件",
 			scopeLabel: "选择工作区",
-			searchPlaceholder: "搜索记忆文件…",
+			searchPlaceholder: "搜索记忆…",
 			searchEmpty: "没有匹配的记忆文件。",
-			missing: "索引失联（索引引用但文件已删）：",
-			unindexed: "未入索引（文件存在但索引没有行）：",
-			readError: "读取失败：",
-			previewLoading: "正在加载文件…",
+			quarantined: "巡检隔离（疑似密钥泄漏等异常，已隐藏）：",
+						readError: "读取失败：",
+			previewLoading: "正在加载记忆…",
 			previewTooLarge: "该记忆文件超过 5 MiB 预览上限。",
-			previewDeleted: "该记忆文件已被删除，请刷新文件列表。",
+			previewDeleted: "该记忆已被删除，请刷新列表。",
 			previewFailed: "内容读取失败：",
 			justNow: "刚刚",
 			minutesAgo: "{count} 分钟前",
@@ -112,25 +112,24 @@ window.__ModuleLoader__.load({
 		};
 		var en = {
 			title: "Workspace Memory",
-			desc: "Read-only projection of each workspace's .evolve/memory/.",
+			desc: "Read-only projection of the central memory store (~/.dsh/evolve/memory.db).",
 			refresh: "Refresh",
-			hint: "The source of truth is the markdown files under each workspace's .evolve/memory/ — read and written by the model; this card only displays them, edit the files directly.",
+			hint: "The source of truth is the central memory store — the model proposes through memory_write, code validates and lands it (code is the sole writer); this card only displays it.",
 			loading: "Loading…",
 			loadFailed: "Failed to load card data: ",
-			empty: "No workspace has a memory store yet — open a session in a workspace, then come back and refresh.",
-			absent: "No memory store in this workspace yet (one is created when you open a session).",
+			empty: "No workspace has memories yet — use a workspace normally, then come back and refresh.",
+			absent: "No memories in this workspace yet.",
 			readFailed: "Failed to read the memory store: ",
-			stats: "{files} memories · {index} index rows",
+			stats: "{files} memories",
 			filesHeading: "Files",
 			scopeLabel: "Choose workspace",
 			searchPlaceholder: "Search memory files…",
 			searchEmpty: "No matching memory files.",
-			missing: "Dangling index (indexed but deleted): ",
-			unindexed: "Unindexed (on disk, missing from the index): ",
-			readError: "Read failed: ",
-			previewLoading: "Loading file…",
+			quarantined: "Quarantined by patrol (suspected secrets, hidden): ",
+						readError: "Read failed: ",
+			previewLoading: "Loading memory…",
 			previewTooLarge: "This memory file exceeds the 5 MiB preview limit.",
-			previewDeleted: "This memory file has been deleted — refresh the file list.",
+			previewDeleted: "This memory has been deleted — refresh the list.",
 			previewFailed: "Failed to read the content: ",
 			justNow: "Just now",
 			minutesAgo: "{count} min ago",
@@ -230,11 +229,11 @@ window.__ModuleLoader__.load({
 		 *
 		 * @param {typeof fetch} fetchImpl - injectable for tests.
 		 * @param {string} root - known workspace root.
-		 * @param {string} file - plain .md file name inside that memory store.
+		 * @param {string} id - the memory id inside that workspace's partition.
 		 * @returns {Promise<{status: "ready"|"deleted"|"tooLarge"|"failed", content: string, message: string}>}
 		 */
-		async function loadFileContent(fetchImpl, root, file) {
-			var url = API_ROOT + "/memory/file?root=" + encodeURIComponent(root) + "&file=" + encodeURIComponent(file);
+		async function loadFileContent(fetchImpl, root, id) {
+			var url = API_ROOT + "/memory/file?root=" + encodeURIComponent(root) + "&id=" + encodeURIComponent(id);
 			try {
 				var response = await fetchImpl(url);
 				if (response.ok) {
@@ -298,6 +297,7 @@ window.__ModuleLoader__.load({
 				".dce-hint{color:var(--dsw-alias-label-tertiary,#8b93a1);font-size:12px;line-height:18px}",
 				".dce-empty{border:1px dashed var(--dsw-alias-border-l3,#d1d9e0);border-radius:10px;padding:16px;text-align:center;color:var(--dsw-alias-label-tertiary,#8b93a1);font-size:13px;line-height:20px}",
 				".dce-scope-wrap{position:relative;display:inline-flex;min-width:0;max-width:100%;align-self:flex-start}",
+				".dce-scope-pill{border-radius:999px}",
 				".dce-scope{display:inline-flex;align-items:center;gap:8px;max-width:100%;padding:4px 10px;border:1px solid var(--dsw-alias-border-l2,#e5e7eb);border-radius:999px;background:var(--dsw-alias-bg-layer-1,#fff);color:var(--dsw-alias-label-primary,#1f2328);font:inherit;font-size:12px;line-height:18px;cursor:pointer}",
 				".dce-scope:hover{border-color:var(--dsw-alias-label-dimmed,#c8ccd4)}",
 				".dce-scope:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#4f6ef7);outline-offset:1px}",
@@ -307,8 +307,6 @@ window.__ModuleLoader__.load({
 				".dce-menu-item{display:flex;flex-direction:column;gap:2px;width:100%;padding:6px 10px;border:0;border-radius:8px;background:0 0;font:inherit;color:inherit;text-align:left;cursor:pointer}",
 				".dce-menu-item:hover{background:var(--dsw-alias-interactive-bg-hover,rgba(0,0,0,.03))}",
 				'.dce-menu-item[data-active="true"]{background:var(--dsw-alias-bg-module-platform,#eef1f4)}',
-				".dce-menu-label{color:var(--dsw-alias-label-primary,#1f2328);font-size:13px;line-height:18px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}",
-				".dce-menu-path{color:var(--dsw-alias-label-tertiary,#8b93a1);font-size:11px;line-height:16px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}",
 				".dce-search{width:100%;box-sizing:border-box;border:1px solid var(--dsw-alias-border-l4,#d8dee4);border-radius:var(--dsw-radius-md,8px);background:var(--dsw-alias-bg-layer-1,#fff);height:32px;color:var(--dsw-alias-label-primary,#1f2328);font:inherit;font-size:12px;padding:0 10px;outline:none}",
 				".dce-search::placeholder{color:var(--dsw-alias-label-tertiary,#8b93a1)}",
 				".dce-search:focus-visible{border-color:var(--dsw-alias-brand-primary,#4f6ef7)}",
@@ -321,6 +319,7 @@ window.__ModuleLoader__.load({
 				".dce-row{display:flex;width:100%;align-items:center;gap:10px;padding:8px 12px;background:0 0;border:0;font:inherit;color:inherit;text-align:left;cursor:pointer}",
 				".dce-row:hover{background:var(--dsw-alias-interactive-bg-hover,rgba(0,0,0,.03))}",
 				".dce-row:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#4f6ef7);outline-offset:-2px}",
+				".dce-file-icon{display:inline-flex;flex:none;align-items:center;justify-content:center;width:28px;height:28px;border-radius:8px;background:var(--dsw-alias-bg-module-platform,#eef1f4)}",
 				".dce-file-name{min-width:0;flex:1;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:var(--dsw-alias-label-primary,#1f2328);font-size:13px;font-weight:500;line-height:18px}",
 				".dce-file-time{flex:none;color:var(--dsw-alias-label-tertiary,#8b93a1);font-size:11px;line-height:16px}",
 				".dce-preview{margin:0;padding:8px 12px 10px;background:var(--dsw-alias-bg-module-platform,#eef1f4);border-top:1px solid var(--dsw-alias-border-l2,#e5e7eb)}",
@@ -369,9 +368,20 @@ window.__ModuleLoader__.load({
 			var expanded = props.expanded;
 			var preview = props.preview;
 			var onToggle = props.onToggle;
-			var rowChildren = [
-				createElement("span", { key: "name", className: "dce-file-name" }, file.file),
-			];
+			var UI = props.UI;
+			var rowChildren = [];
+			if (UI !== null && UI !== undefined && UI.FileIcon !== undefined && UI.FileIcon !== null) {
+				// ZCode's memory rows open with a category tile; the host classifies
+				// the file itself, so a memory .md gets the markdown glyph.
+				rowChildren.push(
+					createElement(
+						"span",
+						{ key: "icon", className: "dce-file-icon" },
+						createElement(UI.FileIcon, { path: file.id + ".md", size: 16 }),
+					),
+				);
+			}
+			rowChildren.push(createElement("span", { key: "name", className: "dce-file-name" }, file.title));
 			var time = formatRelative(file.updatedAt, now, t);
 			if (time !== "") {
 				rowChildren.push(createElement("span", { key: "time", className: "dce-file-time" }, time));
@@ -391,7 +401,7 @@ window.__ModuleLoader__.load({
 			];
 			if (expanded) {
 				var body = null;
-				if (preview === null || preview.file !== file.file) {
+				if (preview === null || preview.file !== file.id) {
 					body = createElement("div", { className: "dce-hint" }, t("previewLoading"));
 				} else if (preview.status === "loading") {
 					body = createElement("div", { className: "dce-hint" }, t("previewLoading"));
@@ -409,26 +419,31 @@ window.__ModuleLoader__.load({
 			return createElement("li", { className: "dce-item" }, children);
 		}
 
-		/** Leading "switch scope" marker from the host primitives, or nothing. */
-		function ScopeMark() {
-			if (
-				primitives !== undefined &&
-				primitives !== null &&
-				typeof primitives.IconChevronsUpDownOutlineRegular !== "undefined" &&
-				primitives.IconChevronsUpDownOutlineRegular !== null
-			) {
-				return createElement(primitives.IconChevronsUpDownOutlineRegular, { size: 14, "aria-hidden": "true" });
+		/** The host's folder marker for a workspace, or nothing on an old host. */
+		function FolderMark(props) {
+			var UI = props.UI;
+			if (UI !== null && UI !== undefined && UI.Folder !== undefined && UI.Folder !== null) {
+				return createElement(UI.Folder, { size: 16, "aria-hidden": "true" });
 			}
 			return null;
 		}
 
 		/**
 		 * The workspace scope selector, ZCode's Settings → Memory shape: one
-		 * scope at a time behind a dropdown (leading marker + current workspace
-		 * label + chevron), never a row of chips. A chip row can only render
+		 * scope at a time behind a dropdown (folder marker + current workspace
+		 * label + chevron), never a row of chips — a chip row can only render
 		 * when several workspaces are known, so in the common single-workspace
 		 * case it renders nothing at all and the capability reads as missing.
-		 * The menu closes on select, on Escape and on a click outside.
+		 *
+		 * The list is the host's own `Menu` primitive whenever the host provides
+		 * it: the same surface the rest of the settings UI uses, and it owns
+		 * outside-click/Escape handling. A hand-rolled document listener gets
+		 * that wrong — React flushes this component's effect synchronously for
+		 * the discrete click that opens the list, so a listener attached there
+		 * catches that very click and closes the list again (the button then
+		 * looks dead). The hand-rolled list stays as the old-host fallback and
+		 * closes on a pointerdown outside its wrapper, which cannot be the click
+		 * that opened it.
 		 */
 		function WorkspaceScopeMenu(props) {
 			var workspaces = props.workspaces;
@@ -439,27 +454,41 @@ window.__ModuleLoader__.load({
 			var openState = useState(false);
 			var open = openState[0];
 			var setOpen = openState[1];
+			var wrapRef = useRef(null);
+			var hostMenu =
+				UI !== null && UI !== undefined && UI.Menu !== undefined && UI.Menu !== null ? UI.Menu : null;
 			useEffect(
 				function () {
-					if (!open || typeof document === "undefined") {
+					if (hostMenu !== null || !open || typeof document === "undefined") {
 						return undefined;
 					}
-					var close = function () {
-						setOpen(false);
+					var onPointerDown = function (event) {
+						var node = wrapRef.current;
+						var target = event.target;
+						var inside =
+							node !== null &&
+							node !== undefined &&
+							typeof node.contains === "function" &&
+							target !== null &&
+							target !== undefined &&
+							node.contains(target);
+						if (!inside) {
+							setOpen(false);
+						}
 					};
 					var onKeyDown = function (event) {
 						if (event.key === "Escape") {
-							close();
+							setOpen(false);
 						}
 					};
-					document.addEventListener("click", close);
+					document.addEventListener("pointerdown", onPointerDown);
 					document.addEventListener("keydown", onKeyDown);
 					return function () {
-						document.removeEventListener("click", close);
+						document.removeEventListener("pointerdown", onPointerDown);
 						document.removeEventListener("keydown", onKeyDown);
 					};
 				},
-				[open],
+				[open, hostMenu],
 			);
 			var current = null;
 			for (var index = 0; index < workspaces.length; index++) {
@@ -473,18 +502,11 @@ window.__ModuleLoader__.load({
 			}
 			var label = current === null ? "" : current.label || workspaceLabel(current.root);
 			var scopeChildren = [
-				createElement(ScopeMark, { key: "mark" }),
 				createElement("span", { key: "label", className: "dce-scope-label" }, label),
 				createElement("span", { key: "caret", className: "dce-scope-caret" }, createElement(Chevron, null)),
 			];
-			var triggerProps = {
-				type: "button",
-				"aria-haspopup": "menu",
-				"aria-expanded": open ? "true" : "false",
-				"aria-label": t("scopeLabel"),
-				onClick: function () {
-					setOpen(!open);
-				},
+			var toggle = function () {
+				setOpen(!open);
 			};
 			var trigger = null;
 			if (UI !== null && UI !== undefined && typeof UI.Button !== "undefined" && UI.Button !== null) {
@@ -493,12 +515,14 @@ window.__ModuleLoader__.load({
 					{
 						key: "trigger",
 						variant: "outline",
-						size: "sm",
-						type: triggerProps.type,
-						"aria-haspopup": triggerProps["aria-haspopup"],
-						"aria-expanded": triggerProps["aria-expanded"],
-						"aria-label": triggerProps["aria-label"],
-						onClick: triggerProps.onClick,
+						size: "md",
+						icon: createElement(FolderMark, { UI: UI }),
+						className: "dce-scope-pill",
+						type: "button",
+						"aria-haspopup": "menu",
+						"aria-expanded": open ? "true" : "false",
+						"aria-label": t("scopeLabel"),
+						onClick: toggle,
 					},
 					scopeChildren,
 				);
@@ -507,16 +531,44 @@ window.__ModuleLoader__.load({
 					"button",
 					{
 						key: "trigger",
-						type: triggerProps.type,
+						type: "button",
 						className: "dce-scope",
-						"aria-haspopup": triggerProps["aria-haspopup"],
-						"aria-expanded": triggerProps["aria-expanded"],
-						"aria-label": triggerProps["aria-label"],
-						onClick: triggerProps.onClick,
+						"aria-haspopup": "menu",
+						"aria-expanded": open ? "true" : "false",
+						"aria-label": t("scopeLabel"),
+						onClick: toggle,
 					},
 					scopeChildren,
 				);
 			}
+			if (hostMenu !== null) {
+				return createElement(hostMenu, {
+					key: "scope",
+					open: open,
+					anchor: trigger,
+					items: workspaces.map(function (workspace) {
+						return {
+							id: workspace.root,
+							label: workspace.label || workspaceLabel(workspace.root),
+							icon: createElement(FolderMark, { UI: UI }),
+						};
+					}),
+					selectedId: selected,
+					onSelect: function (id) {
+						setOpen(false);
+						if (id !== selected) {
+							onSelect(id);
+						}
+					},
+					onClose: function () {
+						setOpen(false);
+					},
+					align: "start",
+					side: "bottom",
+					portal: true,
+					selection: "check",
+				});
+			}
 			var menu = null;
 			if (open) {
 				menu = createElement(
@@ -539,15 +591,12 @@ window.__ModuleLoader__.load({
 									}
 								},
 							},
-							// The registry allows duplicate titles, so the root
-							// disambiguates two workspaces that read the same.
-							createElement("span", { key: "label", className: "dce-menu-label" }, workspace.label || workspaceLabel(workspace.root)),
-							createElement("span", { key: "root", className: "dce-menu-path" }, workspace.root),
+							workspace.label || workspaceLabel(workspace.root),
 						);
 					}),
 				);
 			}
-			return createElement("div", { key: "scope", className: "dce-scope-wrap" }, trigger, menu);
+			return createElement("div", { key: "scope", className: "dce-scope-wrap", ref: wrapRef }, trigger, menu);
 		}
 
 		/** One workspace's memory store: stats, drift warnings, searchable file list with previews. */
@@ -600,7 +649,7 @@ window.__ModuleLoader__.load({
 					if (normalizedQuery.length === 0) {
 						return true;
 					}
-					return [file.file, file.name, file.description, file.type]
+					return [file.id, file.title, file.description, file.type]
 						.filter(function (value) {
 							return typeof value === "string";
 						})
@@ -612,21 +661,12 @@ window.__ModuleLoader__.load({
 					createElement(
 						"div",
 						{ key: "stats", className: "dce-stats" },
-						t("stats", { files: snapshot.fileCount, index: snapshot.indexEntryCount }),
+						t("stats", { files: snapshot.fileCount }),
 					),
 				];
-				if (snapshot.missingFiles.length > 0) {
-					parts.push(
-						createElement("div", { key: "missing", className: "dce-warn" }, t("missing") + snapshot.missingFiles.join("、")),
-					);
-				}
-				if (snapshot.unindexedFiles.length > 0) {
+				if (snapshot.quarantined.length > 0) {
 					parts.push(
-						createElement(
-							"div",
-							{ key: "unindexed", className: "dce-warn" },
-							t("unindexed") + snapshot.unindexedFiles.join("、"),
-						),
+						createElement("div", { key: "quarantined", className: "dce-warn" }, t("quarantined") + snapshot.quarantined.map(function (entry) { return entry.id; }).join("、")),
 					);
 				}
 				parts.push(
@@ -665,14 +705,15 @@ window.__ModuleLoader__.load({
 							{ key: "files", className: "dce-list" },
 							files.map(function (file) {
 								return createElement(FileRow, {
-									key: file.file,
+									key: file.id,
 									file: file,
 									now: now,
 									t: t,
-									expanded: expandedFile === file.file,
+									UI: UI,
+									expanded: expandedFile === file.id,
 									preview: preview,
 									onToggle: function () {
-										onToggleFile(file.file);
+										onToggleFile(file.id);
 									},
 								});
 							}),
@@ -896,7 +937,15 @@ window.__ModuleLoader__.load({
 			}
 			var UI = null;
 			if (primitives !== undefined && primitives !== null && typeof primitives.Button !== "undefined") {
-				UI = { Button: primitives.Button };
+				// The scope selector prefers the host's own Menu and folder icon;
+				// each stays optional so a host with only Button still gets the
+				// hand-rolled list and a plain trigger.
+				UI = {
+					Button: primitives.Button,
+					Menu: primitives.Menu,
+					Folder: primitives.IconFolderOpenOutlineRegular,
+					FileIcon: primitives.FileTypeIcon,
+				};
 			}
 			ctx.slots.inject(SLOT, function () {
 				return ctx.slots.register(

package/lib/card-routes.d.ts

@@ -1,4 +1,4 @@
-import type { WorkspaceCatalog } from "./workspace-catalog.js";
+import type { MemoryStore } from "./store.js";
 /** URL prefix of the card API (kind-exact routes registered under it). */
 export declare const CARD_API_WORKSPACES_PATH = "/dsh-continual-evolve/api/v1/workspaces";
 export declare const CARD_API_MEMORY_PATH = "/dsh-continual-evolve/api/v1/memory";
@@ -24,10 +24,10 @@ export interface CardWebServer {
     register(route: CardRoute): unknown;
 }
 /**
- * Register the two card routes and return a disposer that removes them.
+ * Register the card routes and return a disposer that removes them.
  * Registration return values are passed through untouched: whatever disposer
  * shape the host hands back (or none, as on some host versions), the
  * disposer calls only the functions among them.
  */
-export declare function mountCardRoutes(webServer: CardWebServer, catalog: WorkspaceCatalog): () => void;
+export declare function mountCardRoutes(webServer: CardWebServer, store: MemoryStore): () => void;
 //# sourceMappingURL=card-routes.d.ts.map

package/lib/card-routes.js

@@ -3,17 +3,15 @@
  *
  * Mounted through the host's `webServer` service (same registration shape
  * dshmarket uses: `kind: "exact"` routes on the profile's web server), the
- * three endpoints are GET-only projections: the workspace catalogue, the
- * memory snapshot for a known root, and one memory file's body for the card's
- * content preview. The catalogue IS the security fence — the memory endpoints
- * resolve their `root` parameter only against workspaces the host's registry
- * (or, on hosts without one, a root this process has served) knows about, and
- * the file endpoint additionally accepts only plain .md entries of that
- * workspace's memory directory, so the API cannot read arbitrary paths.
- * Handlers are synchronous and never throw past the response.
+ * three endpoints are GET-only projections of the central SQLite store: the
+ * workspace list (active partitions whose directory still exists), the
+ * memory snapshot for a known workspace, and one record's body by id. The
+ * store itself is the security fence — a `root` parameter only resolves
+ * when the database has rows for it, so the API cannot probe the
+ * filesystem; the content endpoint takes an id, never a path. Handlers are
+ * synchronous and never throw past the response.
  */
-import { resolve } from "node:path";
-import { memoryFileContent, memorySnapshot } from "./memory-snapshot.js";
+import { memoryEntryContent, listCardWorkspaces, memorySnapshot } from "./memory-snapshot.js";
 /** URL prefix of the card API (kind-exact routes registered under it). */
 export const CARD_API_WORKSPACES_PATH = "/dsh-continual-evolve/api/v1/workspaces";
 export const CARD_API_MEMORY_PATH = "/dsh-continual-evolve/api/v1/memory";
@@ -25,13 +23,17 @@ function sendJson(response, status, body) {
 function isGet(request) {
     return (request.method ?? "GET") === "GET";
 }
+/** The card's read fence: a root only resolves when the store has rows for it. */
+function isKnownRoot(store, root) {
+    return listCardWorkspaces(store).some((workspace) => workspace.root === root);
+}
 /**
- * Register the two card routes and return a disposer that removes them.
+ * Register the card routes and return a disposer that removes them.
  * Registration return values are passed through untouched: whatever disposer
  * shape the host hands back (or none, as on some host versions), the
  * disposer calls only the functions among them.
  */
-export function mountCardRoutes(webServer, catalog) {
+export function mountCardRoutes(webServer, store) {
     const disposers = [];
     disposers.push(webServer.register({
         kind: "exact",
@@ -42,9 +44,7 @@ export function mountCardRoutes(webServer, catalog) {
                 response.end();
                 return;
             }
-            // The listed set is the display projection (workspaces with a
-            // memory directory); the read fence is `known` below.
-            sendJson(response, 200, { workspaces: catalog.list() });
+            sendJson(response, 200, { workspaces: listCardWorkspaces(store) });
         },
     }));
     disposers.push(webServer.register({
@@ -61,14 +61,13 @@ export function mountCardRoutes(webServer, catalog) {
                 sendJson(response, 400, { error: "root query parameter is required and must be an absolute path" });
                 return;
             }
-            const known = knownEntryOf(catalog, root);
-            if (known === undefined) {
-                // The catalogue answers 404 without distinguishing "not a
-                // workspace here" from "wrong path": no filesystem oracle.
+            if (!isKnownRoot(store, root)) {
+                // The store answers 404 without distinguishing "no rows" from
+                // "wrong path": no filesystem oracle.
                 sendJson(response, 404, { error: "unknown workspace root" });
                 return;
             }
-            sendJson(response, 200, memorySnapshot(known.root));
+            sendJson(response, 200, memorySnapshot(store, root));
         },
     }));
     disposers.push(webServer.register({
@@ -85,39 +84,33 @@ export function mountCardRoutes(webServer, catalog) {
                 sendJson(response, 400, { error: "root query parameter is required and must be an absolute path" });
                 return;
             }
-            const file = fileParamOf(request);
-            if (file === null) {
-                sendJson(response, 400, { error: "file query parameter is required" });
+            const id = idParamOf(request);
+            if (id === null) {
+                sendJson(response, 400, { error: "id query parameter is required" });
                 return;
             }
-            const known = knownEntryOf(catalog, root);
-            if (known === undefined) {
-                // Same fence as the snapshot route: 404 without distinguishing
-                // "not a workspace here" from "wrong path".
+            if (!isKnownRoot(store, root)) {
+                // Same fence as the snapshot route.
                 sendJson(response, 404, { error: "unknown workspace root" });
                 return;
             }
-            const content = memoryFileContent(known.root, file);
+            const content = memoryEntryContent(store, root, id);
             if (!content.ok) {
-                // The fence reasons stay indistinguishable from absence in status
-                // terms only where safe: "outside" answers 400 (a client bug),
-                // absence 404, oversized 413 — never a body leak either way.
-                if (content.reason === "outside") {
-                    sendJson(response, 400, { error: "file must be a plain .md entry of the memory directory" });
-                }
-                else if (content.reason === "too-large") {
-                    sendJson(response, 413, { error: "memory file exceeds the 5 MiB preview limit" });
+                // Absence answers 404; the oversized case is theoretically
+                // unreachable (bodies are schema-capped at 64KB) but keeps its
+                // own status for the day the preview limit shrinks.
+                if (content.reason === "too-large") {
+                    sendJson(response, 413, { error: "memory body exceeds the 5 MiB preview limit" });
                 }
                 else {
-                    sendJson(response, 404, { error: "memory file not found" });
+                    sendJson(response, 404, { error: "memory not found" });
                 }
                 return;
             }
             sendJson(response, 200, {
-                file: content.file,
+                id: content.id,
                 content: content.content,
-                mtimeMs: content.mtimeMs,
-                changed: content.changed,
+                updatedAtMs: content.updatedAtMs,
             });
         },
     }));
@@ -129,11 +122,6 @@ export function mountCardRoutes(webServer, catalog) {
         }
     };
 }
-/** The catalogued workspace a `root` query parameter resolves to, if any. */
-function knownEntryOf(catalog, root) {
-    const target = resolve(root);
-    return catalog.known().find((workspace) => workspace.root === target);
-}
 /** The decoded `root` query parameter, or null when absent/relative. */
 function rootParamOf(request) {
     try {
@@ -150,15 +138,15 @@ function rootParamOf(request) {
         return null;
     }
 }
-/** The decoded `file` query parameter, or null when absent. */
-function fileParamOf(request) {
+/** The decoded `id` query parameter, or null when absent. */
+function idParamOf(request) {
     try {
         const url = new URL(request.url ?? "/", "http://dsh-card.invalid");
-        const file = url.searchParams.get("file");
-        if (file === null || file.trim().length === 0) {
+        const id = url.searchParams.get("id");
+        if (id === null || id.trim().length === 0) {
             return null;
         }
-        return file;
+        return id;
     }
     catch (error) {
         void error;