feat(memory): 增加长度校验及限流提示并强化安全确认

- 在多条命令中统一添加对 userId 和 memoryLibraryId 长度的校验
- 新增 profile schema 名称、描述及属性字段长度断言
- 为 delete 内存节点命令添加高风险删除确认机制及 --yes 标志
- 增加账号级别限流说明，提示遇 HTTP 429 需降低请求频率
- 统一移除分散的长度常量，集中定义并使用共享常量
- 相关 E2E 测试覆盖长度限制和高风险操作确认情况
- 支持内存消息内容多样化，新增 MemoryContentPart 类型定义
- 内存文档中新增限流描述及删除命令风险提示，强调确认操作要求

Author: clark-fc

packages/commands/src/commands/memory/add.ts

@@ -13,9 +13,12 @@ import {
 import { emitResult, emitBare } from "bailian-cli-runtime";
 import {
   MEMORY_LIBRARY_FLAG,
+  MEMORY_RATE_LIMIT_NOTE,
   MEMORY_WORKSPACE_NOTE,
+  MAX_CUSTOM_CONTENT_LENGTH,
   PROJECT_ID_FLAG,
   WORKSPACE_FLAG,
+  checkMemoryScopeLengths,
   parseJsonArrayFlag,
   parseJsonObjectFlag,
   resolveWorkspaceId,
@@ -71,10 +74,6 @@ type AddFlags = ParsedFlags<typeof ADD_FLAGS>;
 
 /** Max messages accepted per AddMemory call (a Q&A pair counts as 2). */
 const MAX_MESSAGES = 50;
-/** Max characters accepted for custom_content. */
-const MAX_CONTENT_LENGTH = 512;
-/** Max characters accepted for user_id. */
-const MAX_USER_ID_LENGTH = 64;
 
 export default defineCommand({
   description: {
@@ -96,6 +95,7 @@ export default defineCommand({
         "The response lists the changed memory nodes; one call can add, update or delete several at once.",
       "zh-CN": "返回结果是变更的记忆片段列表；一次调用可能同时新增、更新或删除多条。",
     },
+    MEMORY_RATE_LIMIT_NOTE,
   ],
   exampleArgs: [
     {
@@ -118,10 +118,10 @@ export default defineCommand({
   ],
   validate: (flags: AddFlags) => {
     if (!flags.messages && !flags.content) return "Provide --messages or --content.";
-    if (flags.userId.length > MAX_USER_ID_LENGTH)
-      return `--user-id must be at most ${MAX_USER_ID_LENGTH} characters.`;
-    if (flags.content && flags.content.length > MAX_CONTENT_LENGTH)
-      return `--content must be at most ${MAX_CONTENT_LENGTH} characters.`;
+    const scopeError = checkMemoryScopeLengths(flags);
+    if (scopeError) return scopeError;
+    if (flags.content && flags.content.length > MAX_CUSTOM_CONTENT_LENGTH)
+      return `--content must be at most ${MAX_CUSTOM_CONTENT_LENGTH} characters.`;
     return undefined;
   },
   async run(ctx) {

packages/commands/src/commands/memory/delete.ts

@@ -11,6 +11,7 @@ import {
   MEMORY_LIBRARY_FLAG,
   MEMORY_WORKSPACE_NOTE,
   WORKSPACE_FLAG,
+  checkMemoryScopeLengths,
   resolveWorkspaceId,
 } from "./shared.ts";
 
@@ -37,10 +38,28 @@ const DELETE_FLAGS = {
 export default defineCommand({
   description: { "en-US": "Delete a memory node", "zh-CN": "删除记忆节点" },
   auth: "apiKey",
+  risk: {
+    level: "high",
+    message: {
+      "en-US": "This permanently deletes the specified memory node and cannot be undone.",
+      "zh-CN": "该操作会永久删除指定的记忆片段，且无法恢复。",
+    },
+  },
   usageArgs: "--node-id <id> --user-id <id> [flags]",
   flags: DELETE_FLAGS,
-  notes: [MEMORY_WORKSPACE_NOTE],
-  exampleArgs: ["--node-id node_xxx --user-id user1 --workspace-id ws_xxx"],
+  notes: [
+    MEMORY_WORKSPACE_NOTE,
+    {
+      "en-US":
+        "Irreversible — the memory node is permanently removed. Run `memory list` first to confirm the node ID.",
+      "zh-CN": "该操作不可撤销——记忆片段将被永久删除。建议先用 `memory list` 确认节点 ID。",
+    },
+  ],
+  exampleArgs: [
+    "--node-id node_xxx --user-id user1 --workspace-id ws_xxx",
+    "--node-id node_xxx --user-id user1 --yes",
+  ],
+  validate: (flags) => checkMemoryScopeLengths(flags),
   async run(ctx) {
     const { settings, flags } = ctx;
     const nodeId = flags.nodeId;

packages/commands/src/commands/memory/list.ts

@@ -13,6 +13,7 @@ import {
   MEMORY_WORKSPACE_NOTE,
   PROJECT_ID_FLAG,
   WORKSPACE_FLAG,
+  checkMemoryScopeLengths,
   resolveWorkspaceId,
 } from "./shared.ts";
 
@@ -53,6 +54,8 @@ export default defineCommand({
     "--user-id user1 --memory-library-id lib_xxx --output json",
   ],
   validate: (flags) => {
+    const scopeError = checkMemoryScopeLengths(flags);
+    if (scopeError) return scopeError;
     if (flags.page !== undefined && flags.page < 1) return "--page must be at least 1.";
     if (flags.pageSize !== undefined && flags.pageSize < 1)
       return "--page-size must be at least 1.";

packages/commands/src/commands/memory/profile-create.ts

@@ -1,5 +1,6 @@
 import {
   defineCommand,
+  UsageError,
   memoryEndpoint,
   profileSchemaPath,
   detectOutputFormat,
@@ -15,6 +16,9 @@ import {
   MEMORY_WORKSPACE_NOTE,
   PLAN_VERSION_FLAG,
   WORKSPACE_FLAG,
+  assertAttributeFieldLengths,
+  checkMemoryScopeLengths,
+  checkProfileSchemaTextLengths,
   parseJsonArrayFlag,
   resolveWorkspaceId,
 } from "./shared.ts";
@@ -76,10 +80,20 @@ export default defineCommand({
         '--name "user_basic" --attributes \'[{"name":"age"}]\' --plan-version lite --memory-library-id lib_xxx',
     },
   ],
+  validate: (flags) =>
+    checkMemoryScopeLengths(flags) ?? checkProfileSchemaTextLengths(flags) ?? undefined,
   async run(ctx) {
     const { settings, flags } = ctx;
 
     const attributes = parseJsonArrayFlag<ProfileAttribute>("--attributes", flags.attributes);
+    if (attributes.length === 0) {
+      throw new UsageError("--attributes must contain at least one attribute");
+    }
+    attributes.forEach((attribute, index) => {
+      const position = `--attributes[${index}]`;
+      if (!attribute.name) throw new UsageError(`${position}.name is required`);
+      assertAttributeFieldLengths(position, attribute);
+    });
 
     const body: ProfileSchemaCreateRequest = { name: flags.name, attributes };
     if (flags.description) body.description = flags.description;

packages/commands/src/commands/memory/profile-delete.ts

@@ -11,6 +11,7 @@ import {
   MEMORY_LIBRARY_FLAG,
   MEMORY_WORKSPACE_NOTE,
   WORKSPACE_FLAG,
+  checkMemoryScopeLengths,
   resolveWorkspaceId,
 } from "./shared.ts";
 
@@ -54,6 +55,7 @@ export default defineCommand({
     },
   ],
   exampleArgs: ["--schema-id schema_xxx --workspace-id ws_xxx", "--schema-id schema_xxx --yes"],
+  validate: (flags) => checkMemoryScopeLengths(flags),
   async run(ctx) {
     const { settings, flags } = ctx;
 

packages/commands/src/commands/memory/profile-get.ts

@@ -12,6 +12,7 @@ import {
   MEMORY_LIBRARY_FLAG,
   MEMORY_WORKSPACE_NOTE,
   WORKSPACE_FLAG,
+  checkMemoryScopeLengths,
   resolveWorkspaceId,
 } from "./shared.ts";
 
@@ -56,6 +57,7 @@ export default defineCommand({
     },
   ],
   exampleArgs: ["--schema-id schema_xxx --user-id user1 --workspace-id ws_xxx"],
+  validate: (flags) => checkMemoryScopeLengths(flags),
   async run(ctx) {
     const { settings, flags } = ctx;
 

packages/commands/src/commands/memory/profile-list.ts

@@ -12,6 +12,7 @@ import {
   MEMORY_LIBRARY_FLAG,
   MEMORY_WORKSPACE_NOTE,
   WORKSPACE_FLAG,
+  checkMemoryScopeLengths,
   resolveWorkspaceId,
 } from "./shared.ts";
 
@@ -42,6 +43,8 @@ export default defineCommand({
     "--memory-library-id lib_xxx --output json",
   ],
   validate: (flags) => {
+    const scopeError = checkMemoryScopeLengths(flags);
+    if (scopeError) return scopeError;
     if (flags.page !== undefined && flags.page < 1) return "--page must be at least 1.";
     if (flags.pageSize !== undefined && flags.pageSize < 1)
       return "--page-size must be at least 1.";

packages/commands/src/commands/memory/profile-show.ts

@@ -12,6 +12,7 @@ import {
   MEMORY_LIBRARY_FLAG,
   MEMORY_WORKSPACE_NOTE,
   WORKSPACE_FLAG,
+  checkMemoryScopeLengths,
   resolveWorkspaceId,
 } from "./shared.ts";
 
@@ -50,6 +51,7 @@ export default defineCommand({
     "--schema-id schema_xxx --workspace-id ws_xxx",
     "--schema-id schema_xxx --output json",
   ],
+  validate: (flags) => checkMemoryScopeLengths(flags),
   async run(ctx) {
     const { settings, flags } = ctx;
 

packages/commands/src/commands/memory/profile-update.ts

@@ -13,6 +13,9 @@ import {
   MEMORY_LIBRARY_FLAG,
   MEMORY_WORKSPACE_NOTE,
   WORKSPACE_FLAG,
+  assertAttributeFieldLengths,
+  checkMemoryScopeLengths,
+  checkProfileSchemaTextLengths,
   parseJsonArrayFlag,
   resolveWorkspaceId,
 } from "./shared.ts";
@@ -64,6 +67,7 @@ function validateOperations(operations: ProfileSchemaAttributeOperation[]): void
     if (operation.op !== "add" && !operation.attribute_id) {
       throw new UsageError(`${position}.attribute_id is required when op is "${operation.op}"`);
     }
+    assertAttributeFieldLengths(position, operation);
   });
 }
 
@@ -99,7 +103,7 @@ export default defineCommand({
   validate: (flags) => {
     if (!flags.name && !flags.description && !flags.attributesOperations)
       return "Provide --name, --description, or --attributes-operations.";
-    return undefined;
+    return checkMemoryScopeLengths(flags) ?? checkProfileSchemaTextLengths(flags) ?? undefined;
   },
   async run(ctx) {
     const { settings, flags } = ctx;

packages/commands/src/commands/memory/search.ts

@@ -13,9 +13,11 @@ import {
 import { emitResult, emitBare } from "bailian-cli-runtime";
 import {
   MEMORY_LIBRARY_FLAG,
+  MEMORY_RATE_LIMIT_NOTE,
   MEMORY_WORKSPACE_NOTE,
   PLAN_VERSION_FLAG,
   WORKSPACE_FLAG,
+  checkMemoryScopeLengths,
   parseJsonArrayFlag,
   resolveWorkspaceId,
 } from "./shared.ts";
@@ -117,6 +119,7 @@ export default defineCommand({
         "--plan-version overrides --enable-rerank and changes the price: pro reranks, lite does not.",
       "zh-CN": "--plan-version 覆盖 --enable-rerank 且影响计费：pro 开启重排，lite 不开启。",
     },
+    MEMORY_RATE_LIMIT_NOTE,
   ],
   exampleArgs: [
     {
@@ -135,6 +138,8 @@ export default defineCommand({
   ],
   validate: (flags: SearchFlags) => {
     if (!flags.query && !flags.messages) return "Provide --query or --messages.";
+    const scopeError = checkMemoryScopeLengths(flags);
+    if (scopeError) return scopeError;
     if (flags.topK !== undefined && (flags.topK < 1 || flags.topK > MAX_TOP_K))
       return `--top-k must be between 1 and ${MAX_TOP_K}.`;
     if (flags.minScore !== undefined && (flags.minScore < 0 || flags.minScore > 1))