dsh-instruction-memory 1.0.4 → 1.0.6

package/README.md

@@ -2,6 +2,10 @@
 
 在 DSH 设置界面中维护**长期指令记忆**：保存后自动注入此后每一轮对话的系统提示词。
 
+![设置页截图](docs/screenshot.png)
+
+> 想先看看界面？`docs/demo.html` 无需安装 DSH，浏览器直接打开即可体验真实设置页（内置演示数据）。
+
 ## 安装
 
 ```sh
@@ -32,6 +36,7 @@ dsh plugin --profile web remove dsh-instruction-memory
 | `contract-test.mjs` | 契约测试：驱动真实路由，验证两半之间的响应格式 |
 | `verify.mjs` | 装载验证：按 DSH 的方式加载两半 |
 | `smoke-test.mjs` | 注入渲染逻辑的单元测试 |
+| `docs/demo.html` | 离线演示页：桩掉 DSH 外壳、加载真实 Client 半渲染设置页（不随 npm 包发布） |
 
 ## 生效方式
 
@@ -57,7 +62,14 @@ DSH 就会得到第二份空记忆，看起来像"记忆消失"。
 > 1.0.0 之前的构建曾把数据写在宿主进程 cwd 下（`.dsh-instruction-memory.json`）。
 > 首次启动新版本时会自动迁移到上述位置，并把原文件改名为 `*.migrated` 保留。
 
-该文件可手工编辑，改完点设置页的「重新载入」即可读回。
+该文件可手工编辑，改完点设置页的「重新载入」即可读回。每次保存先写临时文件再原子替换，
+进程崩溃不会留下损坏的半截 `memory.json`；保存时上一版会保留为 `memory.json.bak`，
+若 `memory.json` 解析失败会自动临时回退到该备份并明确提示。若手工编辑后的文件有条目为空
+或超过 200 条上限，设置页会明确提示哪些条目未能载入（它们将在下次保存时从文件中移除），
+不会静默丢弃。
+
+设置页支持**导出 / 导入**：导出为自带说明的 JSON 文件；导入采用**合并语义**——按 id 与
+「标题+内容」去重，只新增、绝不覆盖或清空现有条目。
 
 ## 兼容性
 

package/lib/client.js

@@ -57,6 +57,7 @@ window.__ModuleLoader__.load({
   border:1px dashed var(--dsw-alias-border-l2,rgba(0,0,0,.18)); color:var(--dsw-alias-label-secondary,#8a9099); }
 .im-err { font-size:12px; color:var(--dsw-alias-state-error-primary,#d94838); }
 .im-ok { font-size:12px; color:var(--dsw-alias-state-success-primary,#18a058); }
+.im-warn { font-size:12px; color:var(--dsw-alias-state-warn-primary,#d97706); }
 .im-meta { font-size:11.5px; color:var(--dsw-alias-label-secondary,#8a9099); word-break:break-all; }
 .im-pre { margin:0; padding:12px 14px; border-radius:8px; font-size:11.5px; line-height:1.65;
   background:var(--dsw-alias-bg-layer-2,rgba(0,0,0,.04)); color:var(--dsw-alias-label-secondary,#4b5563);
@@ -70,6 +71,9 @@ window.__ModuleLoader__.load({
 .im-dot-on { background:var(--dsw-alias-state-success-primary,#18a058); }
 .im-dot-off { background:var(--dsw-alias-state-warn-primary,#d97706); }
 .im-dot-err { background:var(--dsw-alias-state-error-primary,#d94838); }
+.im-body-open { max-height:none; }
+.im-more { margin-top:4px; font-size:11.5px; color:var(--dsw-alias-brand-primary,#3b6cff); cursor:pointer; user-select:none; }
+.im-search-meta { margin-top:5px; }
 @media (max-width:640px) { .im-grid2 { grid-template-columns:1fr; } }
 `
 
@@ -107,13 +111,25 @@ window.__ModuleLoader__.load({
     }
 
     async function callHost(method, args) {
-      const response = await fetch(API, {
-        method: 'POST',
-        headers: { 'content-type': 'application/json' },
-        body: JSON.stringify({ method, args: args === undefined ? null : args }),
-      })
-      if (!response.ok) throw new Error('宿主返回 HTTP ' + response.status)
-      return await response.json()
+      // A hung host used to pin the panel on 保存中… forever; fail visibly
+      // after a generous timeout instead.
+      const controller = typeof AbortController === 'function' ? new AbortController() : null
+      const timer = controller !== null ? setTimeout(() => controller.abort(), 15000) : null
+      try {
+        const response = await fetch(API, {
+          method: 'POST',
+          headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({ method, args: args === undefined ? null : args }),
+          signal: controller !== null ? controller.signal : undefined,
+        })
+        if (!response.ok) throw new Error('宿主返回 HTTP ' + response.status)
+        return await response.json()
+      } catch (err) {
+        if (controller !== null && controller.signal.aborted) throw new Error('请求宿主超时（15 秒无响应）')
+        throw err
+      } finally {
+        if (timer !== null) clearTimeout(timer)
+      }
     }
 
     function EntryEditor(props) {
@@ -126,6 +142,7 @@ window.__ModuleLoader__.load({
           h('input', {
             className: 'im-input',
             value: draft.title,
+            maxLength: 120,
             placeholder: '例如：回答语言',
             onChange: (ev) => set({ title: ev.target.value }),
           })),
@@ -134,6 +151,7 @@ window.__ModuleLoader__.load({
           h('textarea', {
             className: 'im-textarea',
             value: draft.content,
+            maxLength: 6000,
             placeholder: '例如：所有回答使用简体中文；不确定需求时先提问再动手。',
             onChange: (ev) => set({ content: ev.target.value }),
           })),
@@ -164,6 +182,7 @@ window.__ModuleLoader__.load({
           h('input', {
             className: 'im-input',
             value: draft.when,
+            maxLength: 200,
             placeholder: '例如：编写或修改代码时',
             onChange: (ev) => set({ when: ev.target.value }),
           })))
@@ -177,6 +196,24 @@ window.__ModuleLoader__.load({
       return h('div', { className: 'im-card' }, children)
     }
 
+    /**
+     * Entry body with an explicit 展开/收起 toggle. The collapsed cap lives in
+     * CSS (max-height + overflow:hidden), so whether overflow actually happens
+     * is measured from the DOM — a short body renders no toggle at all.
+     */
+    function EntryBody(props) {
+      const bodyRef = React.useRef(null)
+      const [overflowing, setOverflowing] = React.useState(false)
+      const [open, setOpen] = React.useState(false)
+      React.useEffect(() => {
+        const el = bodyRef.current
+        if (el !== null && el !== undefined) setOverflowing(el.scrollHeight > el.clientHeight + 1)
+      }, [props.text])
+      return h('div', null,
+        h('div', { className: 'im-body' + (open ? ' im-body-open' : ''), ref: bodyRef }, props.text),
+        overflowing ? h('div', { className: 'im-more', onClick: () => setOpen(!open) }, open ? '收起' : '展开全部') : null)
+    }
+
     function InstructionPanel() {
       const [view, setView] = React.useState(null)
       const [error, setError] = React.useState('')
@@ -185,6 +222,8 @@ window.__ModuleLoader__.load({
       const [draft, setDraft] = React.useState(null)
       const [budgetText, setBudgetText] = React.useState('')
       const [showPreview, setShowPreview] = React.useState(false)
+      const [query, setQuery] = React.useState('')
+      const importInputRef = React.useRef(null)
 
       function absorb(result) {
         const normalized = normalizeResult(result)
@@ -219,6 +258,50 @@ window.__ModuleLoader__.load({
         }
       }
 
+      async function doExport() {
+        try {
+          const result = await callHost('export-data', null)
+          if (result === null || typeof result !== 'object' || result.export === undefined || result.export === null) {
+            setError('导出失败：宿主返回了无法识别的数据')
+            return
+          }
+          const blob = new Blob([JSON.stringify(result.export, null, 2) + '\n'], { type: 'application/json' })
+          const url = URL.createObjectURL(blob)
+          const link = document.createElement('a')
+          link.href = url
+          link.download = 'dsh-instruction-memory-' + new Date().toISOString().slice(0, 10) + '.json'
+          document.body.appendChild(link)
+          link.click()
+          if (link.parentNode !== null) link.parentNode.removeChild(link)
+          setTimeout(() => { URL.revokeObjectURL(url) }, 1000)
+        } catch (err) {
+          setError(String(err && err.message ? err.message : err))
+        }
+      }
+
+      async function handleImportFile(file) {
+        try {
+          const text = typeof file.text === 'function'
+            ? await file.text()
+            : await new Promise((resolve, reject) => {
+              const reader = new FileReader()
+              reader.onload = () => resolve(String(reader.result))
+              reader.onerror = () => reject(reader.error)
+              reader.readAsText(file)
+            })
+          let payload
+          try {
+            payload = JSON.parse(text)
+          } catch (err) {
+            setError('导入文件不是有效的 JSON（' + String(err && err.message ? err.message : err) + '）')
+            return
+          }
+          await send('import-data', { payload })
+        } catch (err) {
+          setError(String(err && err.message ? err.message : err))
+        }
+      }
+
       React.useEffect(() => {
         let alive = true
         callHost('state', null).then(
@@ -253,10 +336,20 @@ window.__ModuleLoader__.load({
       }
 
       const data = view.data
-      const storage = view.storage
+      // Older hosts can hand over snapshots without storage/limits; fall back
+      // instead of throwing mid-render.
+      const storage = view.storage || {}
+      const limits = view.limits || { minBudget: 800, maxBudget: 40000, maxEntries: 200 }
       const injection = view.injection || { registered: false, chars: 0, error: null }
       const entries = data.entries.slice().sort((a, b) => (b.priority - a.priority) || (b.updatedAt - a.updatedAt))
       const activeCount = entries.filter((e) => e.enabled && e.content !== '').length
+      const keyword = query.trim().toLowerCase()
+      const visible = keyword === ''
+        ? entries
+        : entries.filter((entry) =>
+          entry.title.toLowerCase().indexOf(keyword) !== -1
+          || entry.content.toLowerCase().indexOf(keyword) !== -1
+          || entry.when.toLowerCase().indexOf(keyword) !== -1)
 
       const dotClass = injection.error
         ? 'im-dot im-dot-err'
@@ -289,17 +382,17 @@ window.__ModuleLoader__.load({
             h('input', {
               className: 'im-input',
               type: 'number',
-              min: view.limits.minBudget,
-              max: view.limits.maxBudget,
+              min: limits.minBudget,
+              max: limits.maxBudget,
               step: 100,
               value: budgetText,
               disabled: busy,
               onChange: (ev) => setBudgetText(ev.target.value),
               onBlur: () => {
                 const parsed = Number(budgetText)
-                if (!Number.isFinite(parsed) || parsed < view.limits.minBudget || parsed > view.limits.maxBudget) {
+                if (!Number.isFinite(parsed) || parsed < limits.minBudget || parsed > limits.maxBudget) {
                   setBudgetText(String(data.budgetChars))
-                  setError('上限需在 ' + view.limits.minBudget + ' ~ ' + view.limits.maxBudget + ' 之间')
+                  setError('上限需在 ' + limits.minBudget + ' ~ ' + limits.maxBudget + ' 之间')
                   return
                 }
                 send('set-options', { budgetChars: parsed })
@@ -309,6 +402,14 @@ window.__ModuleLoader__.load({
             h('label', { className: 'im-label' }, '生效规则'),
             h('div', { className: 'im-meta' },
               '「始终」无条件生效；「按需」由模型按相关性自动判断。超出上限时按优先级保留，其余暂不注入。'))),
+        entries.length > 0 ? h('div', { key: 'search' },
+          h('input', {
+            className: 'im-input',
+            value: query,
+            placeholder: '搜索指令：标题 / 内容 / 适用场景（共 ' + entries.length + ' 条）',
+            onChange: (ev) => setQuery(ev.target.value),
+          }),
+          query.trim() !== '' ? h('div', { className: 'im-meta im-search-meta' }, '匹配 ' + visible.length + ' / ' + entries.length + ' 条') : null) : null,
         h('div', { className: 'im-row-wrap' },
           h('button', {
             className: 'im-btn im-btn-primary',
@@ -316,6 +417,15 @@ window.__ModuleLoader__.load({
             onClick: () => { setDraft(blankDraft()); setError('') },
           }, '＋ 新增指令'),
           h('button', { className: 'im-btn', disabled: busy, onClick: () => send('reload', null) }, '重新载入'),
+          h('button', { className: 'im-btn', disabled: busy, onClick: doExport }, '导出'),
+          h('button', {
+            className: 'im-btn',
+            disabled: busy,
+            onClick: () => {
+              const el = importInputRef.current
+              if (el !== null && el !== undefined) el.click()
+            },
+          }, '导入'),
           h('button', {
             className: 'im-btn',
             disabled: busy,
@@ -330,14 +440,27 @@ window.__ModuleLoader__.load({
         storage.migratedFrom
           ? h('div', { className: 'im-ok' }, '已从旧位置迁移：' + storage.migratedFrom + '（原文件保留为 *.migrated）')
           : null,
+        storage.warning ? h('div', { className: 'im-warn' }, storage.warning) : null,
         error !== '' ? h('div', { className: 'im-err' }, error) : null,
         error === '' && notice !== '' ? h('div', { className: 'im-ok' }, notice) : null,
         error === '' && notice === '' && storage.error ? h('div', { className: 'im-err' }, storage.error) : null,
         showPreview ? h('div', null,
           h('label', { className: 'im-label' }, '当前注入到每轮系统提示词的内容'),
-          h('pre', { className: 'im-pre' }, view.preview === '' ? '（当前没有生效中的指令）' : view.preview)) : null)
+          h('pre', { className: 'im-pre' }, view.preview === '' ? '（当前没有生效中的指令）' : view.preview)) : null,
+        h('input', {
+          key: 'import-input',
+          type: 'file',
+          accept: '.json,application/json',
+          style: { display: 'none' },
+          ref: importInputRef,
+          onChange: (ev) => {
+            const file = ev.target.files && ev.target.files.length > 0 ? ev.target.files[0] : null
+            ev.target.value = ''
+            if (file !== null) void handleImportFile(file)
+          },
+        }))
 
-      const items = entries.map((entry) => {
+      const items = visible.map((entry) => {
         const tags = [
           h('span', {
             className: 'im-tag ' + (entry.mode === 'always' ? 'im-tag-always' : 'im-tag-auto'),
@@ -374,9 +497,15 @@ window.__ModuleLoader__.load({
             h('button', {
               className: 'im-btn im-btn-danger',
               disabled: busy,
-              onClick: () => send('delete-entry', { id: entry.id }),
+              onClick: () => {
+                // confirm() is standard DOM, guarded anyway: if the embedded
+                // shell omits it, deletion proceeds rather than breaking.
+                if (typeof window.confirm === 'function'
+                  && !window.confirm('确定删除「' + (entry.title !== '' ? entry.title : '未命名指令') + '」？删除后无法恢复。')) return
+                send('delete-entry', { id: entry.id })
+              },
             }, '删除')),
-          h('div', { className: 'im-body' }, entry.content),
+          h(EntryBody, { text: entry.content, key: 'body' }),
           entry.mode === 'auto' && entry.when !== ''
             ? h('div', { className: 'im-meta' }, '适用场景：' + entry.when)
             : null)
@@ -385,7 +514,9 @@ window.__ModuleLoader__.load({
       const list = entries.length === 0
         ? h('div', { className: 'im-empty', key: 'empty' },
           '还没有指令记忆。点击「＋ 新增指令」添加第一条，例如“所有回答使用简体中文”。')
-        : h('div', { className: 'im-list', key: 'list' }, items)
+        : visible.length === 0
+          ? h('div', { className: 'im-empty', key: 'no-match' }, '没有匹配“' + query.trim() + '”的指令。')
+          : h('div', { className: 'im-list', key: 'list' }, items)
 
       return h('div', { className: 'im-root' }, header, list)
     }

package/lib/index.js

@@ -10,7 +10,7 @@
  * plugin's fiber, so unmounting the row removes all of them.
  */
 
-import { mkdir, readFile, rename, writeFile } from 'node:fs/promises'
+import { mkdir, readFile, rename, unlink, writeFile } from 'node:fs/promises'
 import { homedir } from 'node:os'
 import { dirname, join } from 'node:path'
 
@@ -38,6 +38,8 @@ const LEGACY_FILE_NAME = '.dsh-instruction-memory.json'
 const SECTION_NAME = 'instruction-memory'
 const SECTION_ORDER = 900
 const API_PREFIX = '/instruction-memory/api'
+/** Request body ceiling for the settings-page route; anything larger is rejected. */
+const MAX_BODY_CHARS = 1_000_000
 
 /**
  * Resolve this plugin's data file under the harness home.
@@ -120,24 +122,43 @@ export function sanitizeEntry(raw) {
   }
 }
 
+/**
+ * Load a parsed memory file. Returns the sanitized data plus how many array
+ * items were discarded (blank entries, or valid ones past the cap). The count
+ * is surfaced rather than swallowed because the next save rewrites the file
+ * without those items — silently destroying user data is exactly what this
+ * plugin must never do.
+ */
 function normalizeData(raw) {
-  const out = { version: 1, enabled: true, budgetChars: DEFAULT_BUDGET, entries: [] }
-  if (raw === null || typeof raw !== 'object') return out
-  if (typeof raw.enabled === 'boolean') out.enabled = raw.enabled
-  out.budgetChars = clampBudget(raw.budgetChars)
+  const data = { version: 1, enabled: true, budgetChars: DEFAULT_BUDGET, entries: [] }
+  if (raw === null || typeof raw !== 'object') return { data, dropped: 0 }
+  if (typeof raw.enabled === 'boolean') data.enabled = raw.enabled
+  data.budgetChars = clampBudget(raw.budgetChars)
   const list = Array.isArray(raw.entries) ? raw.entries : []
   const seen = new Set()
+  let dropped = 0
   for (const candidate of list) {
-    if (out.entries.length >= MAX_ENTRIES) break
     const entry = sanitizeEntry(candidate)
-    if (entry === null) continue
+    if (entry === null) {
+      dropped += 1
+      continue
+    }
+    if (data.entries.length >= MAX_ENTRIES) {
+      dropped += 1
+      continue
+    }
     if (seen.has(entry.id)) entry.id = makeId()
     seen.add(entry.id)
-    out.entries.push(entry)
+    data.entries.push(entry)
   }
-  return out
+  return { data, dropped }
 }
 
+const droppedEntriesMessage = (count) =>
+  count > 0
+    ? '存储文件中有 ' + count + ' 条条目未能载入（内容为空或超过 ' + MAX_ENTRIES + ' 条上限）；下次保存时它们将从文件中移除'
+    : null
+
 function formatEntry(entry, tag) {
   const lines = ['[' + tag + '｜优先级 ' + priorityLabel(entry.priority) + '] ' + entry.title]
   if (entry.mode === 'auto' && entry.when !== '') lines.push('适用场景：' + entry.when)
@@ -212,7 +233,13 @@ export function buildBlock(data) {
       const room = budget - used - 2 - reserve
       const note = '\n…（本条因注入字数上限被截断）'
       if (room > note.length + 20) {
-        const body = block.slice(0, room - note.length) + note
+        // Cut in UTF-16 units but back off one char when that lands between a
+        // surrogate pair, so the truncation point can never end on the broken
+        // half of an emoji or CJK ext-B character.
+        let head = block.slice(0, room - note.length)
+        const last = head.charCodeAt(head.length - 1)
+        if (last >= 0xd800 && last <= 0xdbff) head = head.slice(0, -1)
+        const body = head + note
         blocks.push(body)
         used += body.length + 2
         return
@@ -241,6 +268,7 @@ export function apply(ctx) {
     storagePath: null,
     storageDisplay: null,
     storageError: null,
+    storageWarning: null,
     savedAt: null,
     migratedFrom: null,
     sectionRegistered: false,
@@ -318,9 +346,27 @@ export function apply(ctx) {
   const serialize = () => JSON.stringify(state.data, null, 2) + '\n'
 
   const writeToDisk = async () => {
+    // Atomic replace (write a sibling temp file, then rename) with a rolling
+    // one-version backup: a crash mid-write must never leave a truncated
+    // memory.json, and an edit the user regrets must still be recoverable
+    // from memory.json.bak. The .bak holds the previous good version.
+    const tmpPath = storePath + '.tmp'
+    const bakPath = storePath + '.bak'
     try {
       await mkdir(dirname(storePath), { recursive: true })
-      await writeFile(storePath, serialize(), 'utf8')
+      await writeFile(tmpPath, serialize(), 'utf8')
+      try {
+        await rename(storePath, bakPath)
+      } catch (err) {
+        // No previous version on the very first save; anything else is real.
+        if (err.code !== 'ENOENT') throw err
+      }
+      try {
+        await rename(tmpPath, storePath)
+      } catch (err) {
+        await unlink(tmpPath).catch(() => {})
+        throw err
+      }
       state.storagePath = storePath
       state.storageDisplay = storePath
       state.storageError = null
@@ -340,15 +386,40 @@ export function apply(ctx) {
   const readFromDisk = async () => {
     state.storagePath = storePath
     state.storageDisplay = storePath
+    state.storageWarning = null
 
     // 1. The canonical location under the harness home.
     try {
       const parsed = await readStoreFile(storePath)
-      if (parsed !== null) state.data = normalizeData(parsed)
+      if (parsed !== null) {
+        const loaded = normalizeData(parsed)
+        state.data = loaded.data
+        state.storageWarning = droppedEntriesMessage(loaded.dropped)
+      }
       state.storageError = null
       return
     } catch (err) {
       if (err === null || err === undefined || err.code !== 'ENOENT') {
+        // The main file is unreadable or corrupt. A previous good version
+        // may survive in the rolling backup — recover from it rather than
+        // presenting an empty memory, but say so loudly. The corrupt file
+        // itself stays untouched for hand repair; it gets overwritten on the
+        // next save (the pre-existing and disclosed behaviour).
+        if (err instanceof SyntaxError) {
+          try {
+            const backup = await readStoreFile(storePath + '.bak')
+            if (backup !== null) {
+              const loaded = normalizeData(backup)
+              state.data = loaded.data
+              state.storageWarning = (droppedEntriesMessage(loaded.dropped) || '')
+                + (loaded.dropped > 0 ? '；' : '')
+                + 'memory.json 解析失败（' + describeError(err) + '），已临时回退到最近备份 memory.json.bak；损坏文件已保留，下次保存时会覆盖它'
+              return
+            }
+          } catch {
+            // No usable backup either; fall through to the error below.
+          }
+        }
         // A file we cannot understand must never be silently overwritten.
         state.storageError = err instanceof SyntaxError
           ? '配置文件解析失败（' + describeError(err) + '），原文件已保留；你下次保存时会覆盖它'
@@ -363,7 +434,9 @@ export function apply(ctx) {
     try {
       const parsed = await readStoreFile(legacyPath)
       if (parsed !== null) {
-        state.data = normalizeData(parsed)
+        const loaded = normalizeData(parsed)
+        state.data = loaded.data
+        state.storageWarning = droppedEntriesMessage(loaded.dropped)
         if (await writeToDisk()) {
           state.migratedFrom = legacyPath
           // Keep the original as evidence instead of deleting user data.
@@ -394,6 +467,21 @@ export function apply(ctx) {
       syncSection()
     })
 
+  /**
+   * All state-mutating work (edits and 重新载入) runs through this chain, so a
+   * save that is still flushing to disk can never interleave with a reload
+   * reading the file back — the old lost-update window in which the panel
+   * briefly resurrected data the user had just replaced. Each operation
+   * returns its full response payload, computed in the same tick as the
+   * mutation, so a snapshot can never straddle the next queued operation.
+   */
+  let diskQueue = Promise.resolve()
+  const enqueue = (op) => {
+    const run = diskQueue.then(op, op)
+    diskQueue = run.then(() => undefined, () => undefined)
+    return run
+  }
+
   /* ---------------- snapshots ---------------- */
 
   const snapshot = () => {
@@ -408,6 +496,7 @@ export function apply(ctx) {
       storage: {
         path: state.storageDisplay !== null ? state.storageDisplay : state.storagePath,
         error: state.storageError,
+        warning: state.storageWarning,
         savedAt: state.savedAt,
         migratedFrom: state.migratedFrom,
       },
@@ -431,7 +520,7 @@ export function apply(ctx) {
 
   /* ---------------- commands (shared by route and callers) ---------------- */
 
-  const saveEntry = async (raw) => {
+  const saveEntry = (raw) => enqueue(async () => {
     const entry = sanitizeEntry(raw)
     if (entry === null) return { ok: false, saved: false, message: '标题与指令内容不能同时为空', snapshot: snapshot() }
     entry.updatedAt = Date.now()
@@ -445,16 +534,23 @@ export function apply(ctx) {
       list.push(entry)
     }
     syncSection()
-    return settle(null, await writeToDisk())
-  }
+    const saved = await writeToDisk()
+    // A successful save has rewritten the file to match memory, so a
+    // dropped-entries warning from load time ("they will be removed on the
+    // next save") has played out and must not keep showing.
+    if (saved) state.storageWarning = null
+    return settle(null, saved)
+  })
 
-  const deleteEntry = async (id) => {
+  const deleteEntry = (id) => enqueue(async () => {
     state.data.entries = state.data.entries.filter((entry) => entry.id !== id)
     syncSection()
-    return settle(null, await writeToDisk())
-  }
+    const saved = await writeToDisk()
+    if (saved) state.storageWarning = null
+    return settle(null, saved)
+  })
 
-  const setOptions = async (patch) => {
+  const setOptions = (patch) => enqueue(async () => {
     if (patch !== null && typeof patch === 'object') {
       if (typeof patch.enabled === 'boolean') state.data.enabled = patch.enabled
       if (typeof patch.budgetChars === 'number' && Number.isFinite(patch.budgetChars)) {
@@ -462,8 +558,73 @@ export function apply(ctx) {
       }
     }
     syncSection()
-    return settle(null, await writeToDisk())
-  }
+    const saved = await writeToDisk()
+    if (saved) state.storageWarning = null
+    return settle(null, saved)
+  })
+
+  const reload = () => enqueue(async () => {
+    await readFromDisk()
+    syncSection()
+    return { ok: state.storageError === null, saved: true, message: state.storageError, snapshot: snapshot() }
+  })
+
+  const exportData = () => enqueue(async () => ({
+    ok: true,
+    saved: true,
+    message: null,
+    // A self-describing envelope: re-importable by this plugin, and readable
+    // as plain JSON by anything else.
+    export: { app: 'dsh-instruction-memory', version: 1, exportedAt: new Date().toISOString(), data: snapshot().data },
+    snapshot: snapshot(),
+  }))
+
+  const importData = (payload) => enqueue(async () => {
+    if (payload === null || typeof payload !== 'object') {
+      return { ok: false, saved: false, message: '导入内容不是有效的 JSON 对象', snapshot: snapshot() }
+    }
+    // Accept both the plugin's own export envelope ({app, data:{entries}}) and
+    // a bare {entries} array (e.g. a hand-assembled file).
+    const rawEntries = Array.isArray(payload.entries)
+      ? payload.entries
+      : (payload.data !== null && typeof payload.data === 'object' && Array.isArray(payload.data.entries)
+        ? payload.data.entries
+        : null)
+    if (rawEntries === null || rawEntries.length === 0) {
+      return { ok: false, saved: false, message: '导入文件中没有找到条目', snapshot: snapshot() }
+    }
+    // Merge, never replace: importing must not be able to wipe what is here.
+    // Duplicates (same id, or same title+content) and invalid items are
+    // skipped and counted, not silently dropped.
+    const existing = state.data.entries
+    const seenIds = new Set(existing.map((entry) => entry.id))
+    const seenBodies = new Set(existing.map((entry) => entry.title + '\u0000' + entry.content))
+    let imported = 0
+    let skipped = 0
+    for (const candidate of rawEntries) {
+      const entry = sanitizeEntry(candidate)
+      if (entry === null || seenIds.has(entry.id) || seenBodies.has(entry.title + '\u0000' + entry.content)) {
+        skipped += 1
+        continue
+      }
+      if (existing.length >= MAX_ENTRIES) {
+        skipped += 1
+        continue
+      }
+      entry.updatedAt = Date.now()
+      existing.push(entry)
+      seenIds.add(entry.id)
+      seenBodies.add(entry.title + '\u0000' + entry.content)
+      imported += 1
+    }
+    if (imported === 0) {
+      return { ok: true, saved: true, message: '没有新增条目：' + skipped + ' 条已存在或无效', snapshot: snapshot() }
+    }
+    syncSection()
+    const saved = await writeToDisk()
+    if (saved) state.storageWarning = null
+    return settle('导入完成：新增 ' + imported + ' 条，跳过 ' + skipped + ' 条（已存在或无效）', saved)
+  })
 
   const dispatch = async (method, args) => {
     await boot
@@ -479,9 +640,11 @@ export function apply(ctx) {
       case 'set-options':
         return setOptions(args)
       case 'reload':
-        await readFromDisk()
-        syncSection()
-        return { ok: state.storageError === null, saved: true, message: state.storageError, snapshot: snapshot() }
+        return reload()
+      case 'export-data':
+        return exportData()
+      case 'import-data':
+        return importData(args !== null && typeof args === 'object' ? args.payload : null)
       default:
         return { ok: false, saved: false, message: '未知方法：' + String(method), snapshot: snapshot() }
     }
@@ -497,14 +660,45 @@ export function apply(ctx) {
         res.end(JSON.stringify({ ok: false, message: 'only POST is supported' }))
         return
       }
+      // The settings page always posts application/json. Enforcing it turns
+      // the anti-CSRF coincidence (a plain HTML form cannot fabricate a JSON
+      // body) into a hard rule: a cross-site or malformed post now gets a
+      // readable 415 instead of a confusing parse failure.
+      const contentType = String(
+        (req.headers !== null && typeof req.headers === 'object') ? (req.headers['content-type'] || '') : '',
+      )
+      if (contentType.indexOf('application/json') === -1) {
+        res.writeHead(415, { 'content-type': 'application/json; charset=utf-8' })
+        res.end(JSON.stringify({ ok: false, message: 'content-type 必须是 application/json' }))
+        return
+      }
+      // A call aborted mid-flight (settings page closed, tab navigated away)
+      // makes these streams emit 'error'. A server stream with no error
+      // listener turns that into an uncaught exception — i.e. it would take
+      // the whole host process down over one dead HTTP request.
+      req.on('error', () => {})
+      res.on('error', () => {})
       let body = ''
+      // Over the ceiling we stop accumulating but keep draining, so the
+      // response can go out as a clean 413 instead of a destroyed socket the
+      // Client can only report as a generic network failure.
+      let overflow = false
       req.setEncoding('utf8')
       req.on('data', (chunk) => {
+        if (overflow) return
         body += chunk
-        if (body.length > 1_000_000) req.destroy()
+        if (body.length > MAX_BODY_CHARS) {
+          overflow = true
+          body = ''
+        }
       })
       req.on('end', () => {
         void (async () => {
+          if (overflow) {
+            res.writeHead(413, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })
+            res.end(JSON.stringify({ ok: false, message: '请求体超过 ' + MAX_BODY_CHARS + ' 字符上限' }))
+            return
+          }
           let result
           try {
             const payload = body === '' ? {} : JSON.parse(body)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-instruction-memory",
-  "version": "1.0.4",
-  "description": "DSH 指令记忆：在设置界面中维护可增删改的长期指令，并自动注入此后每一轮对话的系统提示词。",
+  "version": "1.0.6",
+  "description": "User-only instruction memory for DSH: long-term instructions maintained in the settings UI and auto-injected into every conversation — the model has no write access. 指令记忆：只由用户在设置页维护的长期指令，自动注入此后每轮对话；模型没有任何写入口。",
   "license": "MIT",
   "type": "module",
   "repository": {
@@ -33,10 +33,15 @@
     "dsh",
     "dsh-plugin",
     "deepseek-harness",
-    "cordis",
     "instruction-memory",
+    "memory",
+    "记忆",
+    "instructions",
+    "custom-instructions",
+    "persistent-instructions",
     "system-prompt",
-    "settings"
+    "settings",
+    "cordis"
   ],
   "engines": {
     "node": ">=20"