WeKnora deployment source with the reviewed wiki identity, summary and recovery fixes

internal/router/routes_memory.go

@@ -0,0 +1,41 @@
+package router
+
+import (
+	"github.com/gin-gonic/gin"
+
+	"github.com/Tencent/WeKnora/internal/handler"
+)
+
+// RegisterMemoryRoutes registers the personal long-term memory endpoints.
+//
+// There is no admin surface here and no subject parameter anywhere in the
+// paths: the memory space is derived from the caller's principal, so these
+// routes can only ever read or write the caller's own memories. That is why
+// Viewer is the only role gate they need. An API key must be full-access,
+// since a memory space belongs to a person and a scoped integration key has
+// no business inheriting one.
+func RegisterMemoryRoutes(r *gin.RouterGroup, memoryHandler *handler.MemoryHandler, g *rbacGuards) {
+	if memoryHandler == nil {
+		return
+	}
+	memoryGroup := g.apiKeyGroup(r.Group("/memory", g.Viewer()), apiKeyFullAccess())
+	{
+		memoryGroup.GET("/settings", memoryHandler.GetSettings)
+		memoryGroup.PUT("/settings", memoryHandler.UpdateSettings)
+		memoryGroup.POST("/extraction/retry", memoryHandler.RetryExtraction)
+		memoryGroup.GET("/items", memoryHandler.ListItems)
+		memoryGroup.POST("/items", memoryHandler.CreateItem)
+		memoryGroup.DELETE("/items", memoryHandler.Clear)
+		memoryGroup.PUT("/items/:id", memoryHandler.UpdateItem)
+		memoryGroup.DELETE("/items/:id", memoryHandler.DeleteItem)
+		memoryGroup.POST("/items/:id/confirm", memoryHandler.ConfirmItem)
+		memoryGroup.POST("/items/:id/reject", memoryHandler.RejectItem)
+		memoryGroup.GET("/topics", memoryHandler.ListTopics)
+		memoryGroup.DELETE("/topics/:id", memoryHandler.DeleteTopic)
+		memoryGroup.POST("/topics/:id/promote", memoryHandler.PromoteTopic)
+		memoryGroup.GET("/documents", memoryHandler.ListDocuments)
+		memoryGroup.DELETE("/documents/:id", memoryHandler.DeleteDocument)
+		memoryGroup.GET("/export", memoryHandler.Export)
+		memoryGroup.POST("/consolidate", memoryHandler.Consolidate)
+	}
+}