memory-eternal 0.20.0 → 0.22.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "memory-eternal",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "description": "记忆核心（Memory Eternal）：对话结束后自动沉淀知识卡到本地记忆库（~/.dsh/memory-vault），支持检索 / 召回 / 审核中心。",
   "author": {
     "name": "EternalNight996",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memory-eternal",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "description": "记忆核心（Memory Eternal）：对话结束后自动沉淀知识卡到本地记忆库（~/.dsh/memory-vault），支持检索 / 召回 / 审核中心。",
   "author": {
     "name": "EternalNight996",

package/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memory-eternal",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "description": "记忆核心（Memory Eternal）：对话结束后自动沉淀知识卡到本地记忆库（~/.dsh/memory-vault），支持检索 / 召回 / 审核中心。",
   "author": {
     "name": "EternalNight996",

package/README.md

@@ -2,7 +2,7 @@
 
 [![GitHub stars](https://img.shields.io/github/stars/EternalNight996/memory-eternal?style=flat)](https://github.com/EternalNight996/memory-eternal/stargazers)
 [![npm](https://img.shields.io/npm/v/memory-eternal)](https://www.npmjs.com/package/memory-eternal)
-[![release](https://img.shields.io/badge/release-v0.20.0-FF7A45)](https://github.com/EternalNight996/memory-eternal/releases)
+[![release](https://img.shields.io/badge/release-v0.22.0-FF7A45)](https://github.com/EternalNight996/memory-eternal/releases)
 [![license](https://img.shields.io/badge/license-MIT-blue)](LICENSE)
 
 **English (default)** · [简体中文](README.zh-CN.md)
@@ -17,6 +17,7 @@
 > Local-first, review-gated, measurable — one SQLite vault shared by DSH, Claude Code, Codex, Cursor and any MCP client.
 
 - 🔍 **Review before it counts** — new cards wait in a review queue; approve or reject from the Web UI or terminal; every change is written to an immutable audit log.
+- ✏️ **Editable & revisable** — fix a card by hand in the reader, or let an agent submit a **revised copy** (`memory_revise`); the queue labels it a revision, and an approved card is only overwritten when you approve it.
 - 🧾 **Token ledger** — see how much recall injected, how many distillation calls ran, and how often recall was actually useful.
 - 🏠 **Local-first, no cloud** — SQLite + Markdown on your own disk. No third-party memory framework, no account. Memory data never leaves the machine; only the News page fetches public RSS / Hacker News on demand (titles, excerpts and outbound links only).
 - ⭐ **Core memory** — promote approved cards to always-on memory; every session gets them automatically, and the review queue still decides what qualifies.
@@ -84,6 +85,7 @@ A memory system that silently ingests everything will eventually recall a wrong
 - approve, reject or bulk-process from the Web UI, the terminal TUI, or the CLI;
 - every status change is appended to an **immutable audit log** (who / what / when / why) — enforced at the SQLite layer, not by convention;
 - agents can read and propose, but **cannot approve their own cards**;
+- agents can also submit a **revision**: a copy of an approved card lands in the queue marked “✏️ revision of …”; approving it overwrites the original (id, path and status preserved, an entry appended to the card's update log), rejecting it leaves the original untouched;
 - deleted cards go to a recycle bin (30 days by default).
 
 ## ⭐ Core memory

package/README.zh-CN.md

@@ -2,7 +2,7 @@
 
 [![GitHub stars](https://img.shields.io/github/stars/EternalNight996/memory-eternal?style=flat)](https://github.com/EternalNight996/memory-eternal/stargazers)
 [![npm](https://img.shields.io/npm/v/memory-eternal)](https://www.npmjs.com/package/memory-eternal)
-[![release](https://img.shields.io/badge/release-v0.20.0-FF7A45)](https://github.com/EternalNight996/memory-eternal/releases)
+[![release](https://img.shields.io/badge/release-v0.22.0-FF7A45)](https://github.com/EternalNight996/memory-eternal/releases)
 [![license](https://img.shields.io/badge/license-MIT-blue)](LICENSE)
 
 [English (default)](README.md) · **简体中文（镜像）**
@@ -17,6 +17,7 @@
 > 本地优先、先审后入、可度量 —— 一个 SQLite 库，DSH / Claude Code / Codex / Cursor 与任意 MCP 客户端共享。
 
 - 🔍 **先审核，再入库** —— 新卡先进待审队列，Web 或终端里批准/驳回；每次状态变更写入不可篡改的审计日志。
+- ✏️ **可编辑、可修订** —— 在阅读器里直接改卡片，或让 agent 提交**修改副本**（`memory_revise`）；审核中心把它标成「✏️ 修改」，人批准后才覆盖原卡。
 - 🧾 **记忆账本** —— 召回注入了多少、蒸馏调了几次、召回到底有没有用，全部可查。
 - 🏠 **本地优先，零云端** —— SQLite + Markdown 存在你自己的磁盘上。没有第三方记忆框架、不需要账号；记忆数据不外发，只有「动态」资讯会按需请求公开 RSS / Hacker News（只取标题、摘要与外链）。
 - ⭐ **核心记忆** —— 已批准的卡可提升为「每次会话强制注入」的核心记忆；自动沉淀可以建议，但最终仍由审核中心决定。
@@ -84,6 +85,7 @@ npx -y -p memory-eternal dsh-memory tui   # 终端里的实时待审队列
 - 在 Web、终端 TUI 或 CLI 里批准 / 驳回 / 批量处理；
 - 每次状态变更追加到**不可篡改的审计日志**（谁 / 什么 / 何时 / 为什么）—— 由 SQLite 层强制，而不是靠约定；
 - Agent 可以读取和提议，但**不能批准自己写的卡**；
+- Agent 也可以提交**修改**：已批准卡的副本进待审队列并标注「✏️ 修改原卡：…」；批准 = 用副本覆盖原卡（id / path / 状态不变，更新记录留痕），驳回 = 原卡一字不动；
 - 删除的卡进回收站（默认保留 30 天）。
 
 ## ⭐ 核心记忆

package/cursor-extension/package.json

@@ -2,7 +2,7 @@
   "name": "memory-eternal",
   "displayName": "Memory Atlas",
   "description": "Memory-eternal: open the local Memory Atlas library, review queue and knowledge graph in a Cursor/VS Code webview.",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "publisher": "EternalNight996",
   "license": "MIT",
   "repository": {

package/dsh-tui-plugin/dsh-plugin.json

@@ -2,7 +2,7 @@
   "$schema": "urn:dsh-std:community-draft:dsh-plugin:0.15",
   "id": "memory-eternal-tui",
   "name": "memory-eternal-tui",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "manifestVersion": "0.15",
   "description": "Open Memory Atlas from dsh-TUI: native /audit scene plus browser launcher.",
   "facets": {

package/dsh-tui-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memory-eternal-tui",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "description": "Memory Atlas for dsh-TUI: /audit scene with reason/severity, batch confirmation and reject reasons.",
   "type": "module",
   "main": "main.js",

package/lib/align.js

@@ -19,7 +19,8 @@ import { probeServedVersion } from './watchdog.js'
 import { nodeBinary } from './node-bin.js'
 
 /**
- * 纯函数：把「版本现状 + 接线现状」翻译成结论清单（便于单测，无任何 IO）。
+ * 纯函数：把「版本现状 + 接线现状」翻译成结论清单（便于单测）。唯一 IO 是 sameNodePath 的
+ * realpathSync 归一化（issue #56），且它只在路径存在时生效、失败即回退原串，不改变判定语义。
  * @returns {{ok:boolean, findings:Array<{id:string,level:'ok'|'warn'|'fix',title:string,detail:string,command:string}>, counts:{ok:number,warn:number,fix:number}}}
  */
 export function alignFindings({
@@ -27,6 +28,19 @@ export function alignFindings({
   latest = '', updateCommand = '', wiring = [], hookPaths = [], configMirror = null, knownKeys = null,
 } = {}) {
   const findings = []
+  // issue #56：node 路径比较必须**归一化**。配置里写的是稳定 shim（/opt/homebrew/bin/node），
+  // 当前解析出的可能是真实路径（…/Cellar/node/26.13.0_2/bin/node）—— 纯字符串比较必然不等，
+  // 于是 align 把**正确**的接线判成错误；用户按提示跑 setup 又写回带版本号的路径，形成死循环。
+  const sameNodePath = (a, b) => {
+    const norm = (p) => {
+      const raw = String(p || '')
+      if (!raw) return ''
+      try { return fs.realpathSync(raw) } catch { return raw }
+    }
+    const na = norm(a)
+    const nb = norm(b)
+    return process.platform === 'win32' ? na.toLowerCase() === nb.toLowerCase() : na === nb
+  }
   const push = (id, level, title, detail, command) => findings.push({ id, level, title, detail: detail || '', command: command || '' })
 
   // ① 宿主进程（最容易被忽略、也是"旧接口"的主因）
@@ -79,7 +93,7 @@ export function alignFindings({
     if (a.mcpMatchesCurrentNode === false) {
       // 措辞必须准确：`mcpMatchesCurrentNode` 比较的是**整条 MCP 条目**（node 路径 + 脚本路径 + 参数），
       // 两条路径相同时也可能因为**脚本路径/参数是旧写法**而不一致（升级后最常见）。
-      const sameNode = String(a.configuredNodePath || '') === String(a.currentNodePath || '')
+      const sameNode = sameNodePath(a.configuredNodePath, a.currentNodePath)
       push('wiring-node-' + a.name, 'fix',
         sameNode ? `${a.name}：MCP 条目与当前版本写出的不一致（脚本路径 / 参数是旧写法）` : `${a.name}：MCP 记的 node 路径与当前不一致`,
         sameNode

package/lib/api.js

@@ -17,7 +17,7 @@ import fs, { readFileSync } from 'node:fs'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 import { spawn } from 'node:child_process'
-import { listCards, countCards, readCard, search, searchAll, graph, graphAll, overview, exportCards, deleteCard, writeCard, parseCard, stats, optimizeCandidates, optimizeApply, addFeedback, dailyCounts, mergeCards, ensureVault, auditQueue, recycleList, purgeExpired, setCardStatus, setCardKind, restoreCard, mainStoreBodies } from './vault.js'
+import { listCards, countCards, readCard, search, searchAll, graph, graphAll, graphLevel, LEVEL_ERR_PATH, LEVEL_ERR_STALE, overview, exportCards, deleteCard, writeCard, parseCard, stats, optimizeCandidates, optimizeApply, addFeedback, dailyCounts, mergeCards, ensureVault, auditQueue, recycleList, purgeExpired, setCardStatus, setCardKind, restoreCard, mainStoreBodies, updateCardContent, reviseCard } from './vault.js'
 import { compressExcerpt, guessRawKind, DEFAULT_CAPTURE_MAX_TOKENS } from './capture.js'
 import { buildDiagnostics } from './feedback.js'
 import { getSetupStatus, runSetup, mcpAgentAction } from './setup.js'
@@ -199,7 +199,7 @@ export function emptyNumericFields(patch, dict = {}) {
  * **真的会写库**的路由（/card、/cards、/search 这些是读，绝不能拦）。
  * 用途：库不可写时短路径失败；撞锁（SQLITE_BUSY）时做应用层异步重试。
  */
-const DB_WRITE_ROUTES = /^\/(delete|merge|write|import|refine-apply|refine-goals-keep|refine-junk-purge|optimize-execute|feedback|skills\/sync|audit\/(approve|reject)|recycle\/(restore|purge|purge-expired)|backup)$/
+const DB_WRITE_ROUTES = /^\/(delete|merge|write|import|card\/update|card\/revise|refine-apply|refine-goals-keep|refine-junk-purge|optimize-execute|feedback|skills\/sync|audit\/(approve|reject)|recycle\/(restore|purge|purge-expired)|backup)$/
 
 export function createApi(deps = {}) {
   const vaultDir = deps.vaultDir ?? (() => '')
@@ -606,6 +606,25 @@ export function createApi(deps = {}) {
         json(res, 200, { ok: true, diagnostics: text, repo: 'EternalNight996/memory-eternal', version: (dshD && dshD.version) || envD.MEMORY_ETERNAL_VERSION || '' })
         return
       }
+      case '/graph/level': {
+        // 星球分层视图：一次只返回「一层」（根层 kind 折叠 / 卡片层 / 语义簇层）。
+        // 10k 规模下客户端绝不再拉全量图 —— 每层图元 ≤1000、payload ≤1MB（见 lib/vault.js 守卫）。
+        await ensureVault(vaultRoot)
+        const pathStr = query.get('path') || ''
+        const allRoots = query.get('all') === '1'
+        try {
+          const out = await graphLevel(vaultRoot, {
+            path: pathStr,
+            roots: allRoots ? vaultRoots() : null,
+          })
+          return json(res, 200, out)
+        } catch (e) {
+          // 分类失败：路径写错/语义簇过期是「客户端可纠正」的 400；其他未知异常一律 500，
+          // 内部细节只进服务端日志（不把 SQL/堆栈原文抛给浏览器）。
+          const { status, body } = levelErrorResponse(e, 'path=' + pathStr)
+          return json(res, status, body)
+        }
+      }
       case '/graph': {
         await ensureVault(vaultRoot)
         const all = query.get('all') === '1'
@@ -753,9 +772,10 @@ export function createApi(deps = {}) {
         const rel = query.get('path') || body?.path || ''
         const kind = String(query.get('kind') || body?.kind || '').trim()
         if (!rel) return json(res, 400, { ok: false, error: '缺少 path' })
-        await setCardStatus(vaultRoot, rel, 'approved')
-        if (kind === 'core' || kind === 'knowledge') await setCardKind(vaultRoot, rel, kind)
-        json(res, 200, { ok: true, path: rel, status: 'approved', kind: kind || undefined })
+        const out = await setCardStatus(vaultRoot, rel, 'approved')
+        // 修改副本被批准时会覆盖原卡（out.applied），它本身已消失，不能再当独立卡设类型
+        if ((kind === 'core' || kind === 'knowledge') && !out.applied) await setCardKind(vaultRoot, rel, kind)
+        json(res, 200, { ok: true, path: out.path || rel, status: 'approved', kind: kind || undefined, applied: !!out.applied })
         return
       }
       case '/audit/reject': {
@@ -770,6 +790,57 @@ export function createApi(deps = {}) {
         json(res, 200, { ok: true, path: rel, status: 'rejected', reason })
         return
       }
+      case '/card/revise': {
+        // POST {path, title?, tags?, body?, reason?, source?}：agent 提交「审核制修改」——
+        // 生成一张待审副本（同 kind、指向原卡），**不动原卡**；只有 /audit/approve 才会覆盖。
+        // 这是给智能体用的唯一改卡入口：它不能直接改已入库内容，也不能自己批准。
+        if (req.method !== 'POST') return json(res, 405, { ok: false, error: '需要 POST' })
+        const body = await readBody(req)
+        const rel = String(query.get('path') || body.path || '').trim()
+        if (!rel) return json(res, 400, { ok: false, error: '缺少 path' })
+        const title = body.title === undefined ? undefined : String(body.title).trim()
+        if (title !== undefined && !title) return json(res, 400, { ok: false, error: '标题不能为空' })
+        const nextBody = body.body === undefined ? undefined : String(body.body)
+        if (nextBody !== undefined && !nextBody.trim()) return json(res, 400, { ok: false, error: '正文不能为空' })
+        if (nextBody !== undefined && nextBody.length > 200000) return json(res, 413, { ok: false, error: '正文过长（上限 200000 字符）' })
+        const nextTags = Array.isArray(body.tags) ? body.tags.map((x) => String(x || '').trim()).filter(Boolean).slice(0, 30) : undefined
+        try {
+          const out = await reviseCard(vaultRoot, {
+            target: rel, title, tags: nextTags, body: nextBody,
+            reason: String(body.reason || '').slice(0, 300),
+            source: String(body.source || 'agent'),
+            submittedBy: String(body.submittedBy || body.source || 'agent'),
+          })
+          broadcast('audit', { path: out.path })
+          json(res, 200, { ok: true, ...out })
+        } catch (e) {
+          json(res, 400, { ok: false, error: String(e?.message || e) })
+        }
+        return
+      }
+      case '/card/update': {
+        // POST {path, title, tags, body}：人工编辑卡片内容（标题 / 标签 / 正文）。
+        // 只允许改这三样 —— 状态、类型、来源、审核流转仍由 /audit/*、/card-kind 决定，
+        // 避免「手动编辑」成为绕过审核的旁路；本路由只在本机回环 + 同源闸门下可达（见 crossOriginError）。
+        if (req.method !== 'POST') return json(res, 405, { ok: false, error: '需要 POST' })
+        const body = await readBody(req)
+        const rel = String(query.get('path') || body.path || '').trim()
+        if (!rel) return json(res, 400, { ok: false, error: '缺少 path' })
+        const title = body.title === undefined ? undefined : String(body.title).trim()
+        if (title !== undefined && !title) return json(res, 400, { ok: false, error: '标题不能为空' })
+        const nextBody = body.body === undefined ? undefined : String(body.body)
+        if (nextBody !== undefined && !nextBody.trim()) return json(res, 400, { ok: false, error: '正文不能为空' })
+        if (nextBody !== undefined && nextBody.length > 200000) return json(res, 413, { ok: false, error: '正文过长（上限 200000 字符）' })
+        const nextTags = Array.isArray(body.tags) ? body.tags.map((x) => String(x || '').trim()).filter(Boolean).slice(0, 30) : undefined
+        try {
+          const out = await updateCardContent(vaultRoot, rel, { title, tags: nextTags, body: nextBody })
+          broadcast('cards', { path: rel, reason: 'edited' })
+          json(res, 200, { ok: true, path: out.path, store: out.store, updated: out.updated, title, tags: nextTags })
+        } catch (e) {
+          json(res, 400, { ok: false, error: String(e?.message || e) })
+        }
+        return
+      }
       case '/card-kind': {
         // POST {path, kind:'core'|'knowledge'|...}：人工把已批准卡片设为核心/取消核心
         if (req.method !== 'POST') return json(res, 405, { ok: false, error: '需要 POST' })
@@ -1315,6 +1386,29 @@ export function createApi(deps = {}) {
   }
 }
 
+/**
+ * 分层接口的错误 → HTTP 响应（纯函数，便于单测）。
+ *   LEVEL_PATH / LEVEL_STALE：客户端可以自己纠正（路径写错 / 卡片增删让簇 id 过期）→ 400 + 原文案；
+ *   其他未知异常：500 + 通用文案，**内部细节只写服务端日志**，不回给浏览器。
+ * 无论哪种，客户端都会显示「显式报错 + 保留当前层 + 重试」。
+ */
+export function levelErrorResponse(err, context = '') {
+  const code = err && err.code
+  if (code === LEVEL_ERR_PATH || code === LEVEL_ERR_STALE) {
+    return {
+      status: 400,
+      body: { ok: false, code, error: String((err && err.message) || err) },
+    }
+  }
+  try {
+    console.error('[memory-eternal] /graph/level 内部错误' + (context ? '（' + context + '）' : '') + '：', err)
+  } catch { /* console 不可用时彻底静默（日志失败不能反过来影响响应） */ }
+  return {
+    status: 500,
+    body: { ok: false, code: 'LEVEL_FAILED', error: '知识图谱层级暂时不可用，请稍后重试' },
+  }
+}
+
 export function json(res, status, body) {
   const payload = JSON.stringify(body)
   const headers = {