@aiwayds/dsh-topics-memory 0.24.1 → 0.25.1

package/lib/pipeline-events.js

@@ -33,6 +33,7 @@ const KNOWN_KINDS = new Set([
     'link-ref-rejected',
     'seam-observations-fed',
     'seam-lesson-status',
+    'lesson-conflict-flagged',
 ]);
 export function pipelineEventsFile(bundleDir) {
     return join(metaDir(bundleDir), PIPELINE_EVENTS_FILE);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiwayds/dsh-topics-memory",
-  "version": "0.24.1",
+  "version": "0.25.1",
   "description": "dsh-plugin: quality-first topic memory for dsh — a topic keeps the starting question, conclusion, impact and dependencies, not the process; local-first git-traced OKF bundle, budgeted LLM-free injection",
   "type": "module",
   "main": "lib/index.js",
@@ -42,7 +42,7 @@
     "build": "tsc -p tsconfig.json",
     "check": "tsc --noEmit -p tsconfig.json",
     "pretest": "tsc -p tsconfig.json",
-    "test": "node --test test/yaml.test.mjs test/okf.test.mjs test/retrieval.test.mjs test/digest.test.mjs test/digest-package.test.mjs test/ilog.test.mjs test/store.test.mjs test/paths.test.mjs test/git.test.mjs test/sync.test.mjs test/tools.test.mjs test/dedup.test.mjs test/commands.test.mjs test/onboard.test.mjs test/delegation.test.mjs test/observer.test.mjs test/distill.test.mjs test/consolidate.test.mjs test/viz.test.mjs test/corpus.test.mjs test/llm-scope.test.mjs test/quality.test.mjs test/replay-gate.test.mjs test/depends-repair.test.mjs test/skill.test.mjs test/fast-lane.test.mjs test/legacy-import.test.mjs test/jev-config.test.mjs test/jev-gate.test.mjs test/jev-client.test.mjs test/jev-log.test.mjs test/jev-dual.test.mjs test/jev-fastgate.test.mjs test/zero-open-decay.test.mjs test/embedding.test.mjs test/embedding-index.test.mjs test/query-sanitize.test.mjs test/semantic-rerank.test.mjs test/inject-config.test.mjs test/distill-links.test.mjs test/store-links.test.mjs test/lesson-seams.test.mjs",
+    "test": "node --test test/yaml.test.mjs test/okf.test.mjs test/retrieval.test.mjs test/digest.test.mjs test/digest-package.test.mjs test/ilog.test.mjs test/store.test.mjs test/paths.test.mjs test/git.test.mjs test/sync.test.mjs test/tools.test.mjs test/dedup.test.mjs test/commands.test.mjs test/onboard.test.mjs test/delegation.test.mjs test/observer.test.mjs test/distill.test.mjs test/consolidate.test.mjs test/viz.test.mjs test/corpus.test.mjs test/llm-scope.test.mjs test/quality.test.mjs test/replay-gate.test.mjs test/depends-repair.test.mjs test/skill.test.mjs test/fast-lane.test.mjs test/legacy-import.test.mjs test/jev-config.test.mjs test/jev-gate.test.mjs test/jev-client.test.mjs test/jev-log.test.mjs test/jev-dual.test.mjs test/jev-fastgate.test.mjs test/zero-open-decay.test.mjs test/embedding.test.mjs test/embedding-index.test.mjs test/query-sanitize.test.mjs test/semantic-rerank.test.mjs test/inject-config.test.mjs test/distill-links.test.mjs test/distill-lesson.test.mjs test/store-links.test.mjs test/lesson-seams.test.mjs",
     "smoke": "node scripts/smoke-boot.mjs"
   },
   "dependencies": {},
@@ -84,22 +84,22 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.4",
-    "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-attachment": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-brand": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-commands": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-agent": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-brand": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-commands": "0.2.1-rc.2",
     "@deepseek-ai/dsh-invariants": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-scope": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-sandbox": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-settings": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-skill": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-timeout": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-user-approval": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-util-values": "0.2.0-rc.2",
+    "@deepseek-ai/dsh-llm": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-scope": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-sandbox": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-session": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-settings": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-skill": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-timeout": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-tools": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-user-approval": "0.2.1-rc.2",
+    "@deepseek-ai/dsh-util-values": "0.2.1-rc.2",
     "@deepseek-ai/schemastery": "3.18.4",
     "@types/node": "^22.19.0",
     "typescript": "^5.9.2"

package/src/distill.ts

@@ -54,6 +54,16 @@ export interface DistillOp {
   conclusion?: string
   recommendations?: string
   status?: string
+  /** Lesson distill branch (B2): lesson-kind create op — a behavior lesson. */
+  kind?: string
+  /** Lesson scope (B2 §6.2, lesson 必带; the write defaults absent → workspace). */
+  scope?: string
+  /**
+   * Conflict self-check markers (B2 决议 5, baseline): established lesson
+   * slugs from the prompt's baseline list that this draft contradicts. The
+   * draft still lands — the flag is ledgered for the B4 approval gate.
+   */
+  conflictsWith?: string[]
   observed_ids?: string[]
 }
 
@@ -86,6 +96,47 @@ export const SYSTEM_PROMPT = [
   '- 中文主题用中文写；tags 全小写。',
 ].join('\n')
 
+/**
+ * The lesson distill branch's system prompt (B2 决议 3①, spec 卷二 §3.1):
+ * fed structured signals (`kind:'signal'` + `source:'fed'`, feature lines
+ * only — 对话原文结构上进不来) distill into behavior LESSONS, not factual
+ * topics. The 判定问句 is the gate: a signal batch that cannot yield an
+ * executable behavioral rule must come back EMPTY (宁缺勿滥 — a fabricated
+ * lesson is noise the approval gate then has to burn down). The lane stamps
+ * confidence='hint' + source='distilled' itself; promotion to established is
+ * the B4 approval gate's exclusive write path (setLessonStatus).
+ */
+export const LESSON_PROMPT = [
+  '你是 lesson 记忆库的蒸馏引擎。输入是若干条来自改进回路的结构化信号观察（JSON，只含特征与计数，无对话原文）和现有 established lesson 清单。',
+  '任务：把信号提炼成行为教训（lesson）操作。只输出一个 JSON 对象，不要任何其他文字、Markdown 代码块或解释。',
+  '判定问句：「违反它会犯错误吗？」——只有当信号指向一条可执行的行为规则（遵守或违反它会直接改变做事的对错）才立 lesson；只是事实、环境描述或给不出行动指令的信号批没有教训可立：明确输出 {"ops":[]}（宁缺勿滥，禁止为凑数编造教训）。',
+  '输出格式：{"ops": [...]}，每个元素只允许 create：',
+  '  {"op":"create","kind":"lesson","title":"条件式短句（什么情境下）","triggers":["condition 触发词，恰好 3-8 个具体短语"],',
+  '   "conclusion":"action：怎么做，祈使句，自含可执行","scope":"workspace 或 global","observed_ids":["obs-..."]}',
+  '规则：',
+  '- 硬性要求：每个 op 必须带 observed_ids 字段，值只能从本次输入「信号观察」里列出的 id 中逐字复制（形如 "obs-..."）；含列表之外 id 的条目会被过滤；observed_ids 缺失、为空或过滤后不剩任何有效 id 的 op 会被整体丢弃。',
+  '- 硬性要求：每个 create 必须带 triggers（恰好 3-8 个「什么情境出现时应该想起这条教训」的 condition 触发短语）与 conclusion（祈使句行动指令）；缺失或数量不符的 create 会被补问一次，补全后仍不合规的 op 会被丢弃并落账。',
+  '- title 写情境侧（条件式短句），conclusion 写行动侧（怎么做，祈使句）；confidence 一律 hint、来源一律 distilled，由系统落库时固定，不要输出这两个字段。',
+  '- scope：只在本工作区适用的教训用 "workspace"（默认），跨项目普适的才用 "global"。',
+  '- 矛盾自查：输出前对照输入里的「现有 established lesson 清单」——若候选教训与某条已有教训在同一情境下给出相反做法，照常输出草稿并加 "conflictsWith":["该教训的slug"] 标记（只能引用清单里的 slug；是否新覆旧由审批门裁决，不要因此放弃输出）。',
+  '- 同一情境只允许一个 create；中文写。',
+].join('\n')
+
+/** Which prompt branch a batch rides: the standing topic lane or the B-line
+ *  lesson lane (fed+signal observations only). */
+type DistillBranch = 'topic' | 'lesson'
+
+/**
+ * The B-line routing predicate (B2 决议 3①): the write seam stamps fed
+ * structured signals `kind:'signal'` + `source:'fed'` (feedObservations);
+ * exactly that combination rides the lesson prompt branch. Every other
+ * observation keeps the topic prompt — the topic lane's behavior is
+ * byte-for-byte unchanged.
+ */
+function isFedSignal(o: ObservationLike): boolean {
+  return o.source === 'fed' && o.kind === 'signal'
+}
+
 /** Adaptive-batch floor — below this, shrinking cannot rescue an output limit. */
 const MIN_BATCH_SIZE = 5
 /** Fallbacks when the config fields are absent (bare test harnesses). */
@@ -121,6 +172,8 @@ interface BatchOutcome {
   invalidOps?: number
   /** links stripped by the whitelist (A2) this batch. */
   rejectedLinks?: number
+  /** lesson-conflict-flagged events ledgered this batch (lesson branch only). */
+  conflictsFlagged?: number
   detail?: string
   /**
    * Specific zero-consumption explanation for the stalled stop (undefined =
@@ -187,6 +240,29 @@ function checkCreateSchema(op: DistillOp): { valid: boolean; missing: string } {
   return { valid: problems.length === 0, missing: problems.join('、') }
 }
 
+/**
+ * The lesson-branch schema check (B2): a lesson create must carry the
+ * condition (triggers 3-8 — the same strong-field contract as topics) and the
+ * action (conclusion, the 祈使句 imperative). `description` is NOT required
+ * on lessons — the §6.2 frontmatter contract is scope/confidence/source and
+ * the title carries the condition side. An ABSENT scope is not a defect (the
+ * write defaults it to workspace — lesson 必带 scope is a storage invariant
+ * enforced at saveTopic, not a model-output demand); a present-but-illegal
+ * scope is.
+ */
+function checkLessonSchema(op: DistillOp): { valid: boolean; missing: string } {
+  const problems: string[] = []
+  if (typeof op.conclusion !== 'string' || op.conclusion.trim() === '') problems.push('conclusion(action)')
+  const triggers = Array.isArray(op.triggers) ? op.triggers.filter((t): t is string => typeof t === 'string' && t.trim() !== '') : []
+  if (triggers.length < TRIGGERS_MIN || triggers.length > TRIGGERS_MAX) {
+    problems.push(`triggers(实际 ${triggers.length}，需 ${TRIGGERS_MIN}-${TRIGGERS_MAX})`)
+  }
+  if (op.scope !== undefined && op.scope !== 'workspace' && op.scope !== 'global') {
+    problems.push('scope(需 workspace|global)')
+  }
+  return { valid: problems.length === 0, missing: problems.join('、') }
+}
+
 export class Distiller {
   private inFlight = new Map<string, Promise<DistillResult>>()
   private readonly service: TopicsService
@@ -327,6 +403,7 @@ export class Distiller {
     let filteredTotal = 0
     let invalidTotal = 0
     let rejectedTotal = 0
+    let conflictTotal = 0
     let stallDetail: string | undefined
     // GC bookkeeping (store.recordUnconsumed): every id the model EVALUATED
     // this run (parseable answer, however useless) minus the ids an op
@@ -351,14 +428,25 @@ export class Distiller {
         stopped = 'budget'
         break
       }
+      // B-line routing (lesson distill branch): fed+signal observations carry
+      // the self-improve structured signals and distill through the lesson
+      // prompt branch into lesson ops; every other observation keeps the topic
+      // prompt byte-for-byte. A mixed window runs ONE sub-pool per iteration —
+      // the topic sub-pool first (the topic lane keeps its claim on the batch
+      // head and its existing stop semantics); the other sub-pool stays
+      // pending in the pool and is fetched by the next iteration.
+      const topicObs = observations.filter((o) => !isFedSignal(o))
+      const branch: DistillBranch = topicObs.length > 0 ? 'topic' : 'lesson'
+      const pool = topicObs.length > 0 ? topicObs : observations
       // The batch spends 1 call, or 2 when the corrective observed_ids retry
       // fires — the budget check above already guaranteed room for both.
-      const outcome = await this.runBatch(sessionId, observations, maxCalls - calls)
+      const outcome = await this.runBatch(sessionId, pool, maxCalls - calls, branch)
       calls += Math.max(1, outcome.callsUsed ?? 1)
       for (const id of outcome.consumedIds ?? []) consumedRunIds.add(id)
       filteredTotal += outcome.filteredIds ?? 0
       invalidTotal += outcome.invalidOps ?? 0
       rejectedTotal += outcome.rejectedLinks ?? 0
+      conflictTotal += outcome.conflictsFlagged ?? 0
       created.push(...outcome.created)
       updated.push(...outcome.updated)
       marked += outcome.marked
@@ -379,7 +467,7 @@ export class Distiller {
         // Floor reached: repeated output-limit finishes ARE an evaluation
         // verdict on this content (the model saw it and could not fit an
         // answer) — the batch counts toward the GC.
-        for (const o of observations) fedIds.add(o.id)
+        for (const o of pool) fedIds.add(o.id)
         stopped = 'max-tokens'
         failureDetail = `批次无法再缩小（当前 ${this.batchSize} 条）仍触发输出上限：${outcome.detail ?? 'model finish: max-tokens'}`
         break
@@ -395,7 +483,7 @@ export class Distiller {
       }
       // Parseable answer (ops, empty or not): the batch was genuinely
       // evaluated — its unconsumed ids gain one failed attempt.
-      for (const o of observations) fedIds.add(o.id)
+      for (const o of pool) fedIds.add(o.id)
       if (outcome.noOps) {
         stopped = 'no-ops'
         break
@@ -439,7 +527,8 @@ export class Distiller {
       const filteredNote = filteredTotal > 0 ? `；filtered ${filteredTotal} invalid observed_ids` : ''
       const schemaNote = invalidTotal > 0 ? `；schema-dropped ${invalidTotal} create op(s)` : ''
       const linkNote = rejectedTotal > 0 ? `；rejected ${rejectedTotal} invalid link ref(s)` : ''
-      const notes = `${filteredNote}${schemaNote}${linkNote}`
+      const conflictNote = conflictTotal > 0 ? `；conflict-flagged ${conflictTotal} lesson draft(s)` : ''
+      const notes = `${filteredNote}${schemaNote}${linkNote}${conflictNote}`
       const base = head === undefined ? undefined : `partial: 已蒸馏标记 ${marked} 条观察（${calls} 次模型调用）；${head}`
       result = {
         ok: true,
@@ -478,39 +567,68 @@ export class Distiller {
 
   /**
    * One model call (plus at most one corrective retry) over one batch:
-   * payload build → ops → topic writes → marks. `budgetLeft` is the calls
-   * still available to the run including this batch's first call (≥ 1); the
-   * corrective retry only fires when it can stay inside that budget.
+   * payload build → ops → topic/lesson writes → marks. `budgetLeft` is the
+   * calls still available to the run including this batch's first call (≥ 1);
+   * the corrective retry only fires when it can stay inside that budget.
+   * `branch` picks the prompt and the payload: the topic branch carries the
+   * topic index (ops may update slugs), the lesson branch carries the
+   * established-lesson baseline for the conflict self-check instead — lesson
+   * ops never reference the topic roster. Both branches share the
+   * observed_ids sanitation, the schema gate, the corrective retry, the GC
+   * and the marks; only the payload/system/op-shape differ.
    */
   private async runBatch(
     sessionId: string | undefined,
     observations: readonly ObservationLike[],
     budgetLeft: number,
+    branch: DistillBranch,
   ): Promise<BatchOutcome> {
+    const lesson = branch === 'lesson'
+    const system = lesson ? LESSON_PROMPT : SYSTEM_PROMPT
     const metas = await this.service.store.listTopics()
-    // Real open questions need the docs; fetch for index (bounded).
-    const indexDetailed = []
-    for (const m of metas.slice(0, 100)) {
-      const doc = await this.service.store.readTopic(m.slug).catch(() => undefined)
-      indexDetailed.push({
-        slug: m.slug,
-        title: m.title,
-        status: m.status,
-        tags: m.tags,
-        open_questions: doc?.fm.open_questions ?? [],
-        conclusion: (okf.firstParagraph(okf.sectionOf(doc?.body ?? '', okf.CONCLUSION_HEADING) ?? '')).slice(0, 200),
-      })
+    let establishedSlugs: ReadonlySet<string> = new Set<string>()
+    let user: string
+    if (lesson) {
+      // Lesson branch payload: the conflict self-check baseline (B2 决议 5)
+      // rides IN the prompt — a same-prompt self-check, not a separate slow
+      // call; the B4 gate owns any 新覆旧 disposition afterwards.
+      const established = await this.establishedLessonBriefs(metas)
+      establishedSlugs = new Set(established.map((l) => l.slug))
+      const observationsPayload = observations.map((o) => ({ id: o.id, kind: o.kind, source: o.source, text: o.text }))
+      user = [
+        `现有 established lesson 清单（${established.length} 条）：`,
+        JSON.stringify(established),
+        '',
+        `信号观察（${observationsPayload.length} 条）：`,
+        JSON.stringify(observationsPayload),
+        '',
+        '请输出蒸馏结果（严格 JSON，{"ops":[...]}）：',
+      ].join('\n')
+    } else {
+      // Real open questions need the docs; fetch for index (bounded).
+      const indexDetailed = []
+      for (const m of metas.slice(0, 100)) {
+        const doc = await this.service.store.readTopic(m.slug).catch(() => undefined)
+        indexDetailed.push({
+          slug: m.slug,
+          title: m.title,
+          status: m.status,
+          tags: m.tags,
+          open_questions: doc?.fm.open_questions ?? [],
+          conclusion: (okf.firstParagraph(okf.sectionOf(doc?.body ?? '', okf.CONCLUSION_HEADING) ?? '')).slice(0, 200),
+        })
+      }
+      const observationsPayload = observations.map((o) => ({ id: o.id, kind: o.kind, source: o.source, text: o.text }))
+      user = [
+        `现有 topic 索引（${indexDetailed.length} 个）：`,
+        JSON.stringify(indexDetailed),
+        '',
+        `未蒸馏观察（${observationsPayload.length} 条）：`,
+        JSON.stringify(observationsPayload),
+        '',
+        '请输出蒸馏结果（严格 JSON，{"ops":[...]}）：',
+      ].join('\n')
     }
-    const observationsPayload = observations.map((o) => ({ id: o.id, kind: o.kind, source: o.source, text: o.text }))
-    const user = [
-      `现有 topic 索引（${indexDetailed.length} 个）：`,
-      JSON.stringify(indexDetailed),
-      '',
-      `未蒸馏观察（${observationsPayload.length} 条）：`,
-      JSON.stringify(observationsPayload),
-      '',
-      '请输出蒸馏结果（严格 JSON，{"ops":[...]}）：',
-    ].join('\n')
     let raw: string
     const caller = this.caller
     if (caller === undefined) {
@@ -519,7 +637,7 @@ export class Distiller {
       return { created: [], updated: [], marked: 0, fatalReason: 'model-error', detail: 'distill caller unavailable' }
     }
     try {
-      raw = await caller({ system: SYSTEM_PROMPT, user, purpose: 'topics-distill', sessionId, maxTokens: 4000 })
+      raw = await caller({ system, user, purpose: 'topics-distill', sessionId, maxTokens: 4000 })
     } catch (e) {
       const detail = String(e instanceof Error ? e.message : e).slice(0, 200)
       return isMaxTokens(e)
@@ -538,6 +656,15 @@ export class Distiller {
         detail: String(e instanceof Error ? e.message : e).slice(0, 200),
       }
     }
+    if (lesson) {
+      // The lesson branch drafts NEW lessons only — a lesson "update" would
+      // rewrite another lane's lifecycle state (confidence/status transitions
+      // are the B4 approval gate's exclusive write path), so non-create shapes
+      // are dropped before the gate. Their observations stay unconsumed and
+      // walk the existing GC path; an all-update batch resolves to the honest
+      // no-ops stop.
+      ops = ops.filter((o) => o.op === 'create')
+    }
     if (ops.length === 0) {
       return { created: [], updated: [], marked: 0, noOps: true, callsUsed: 1 }
     }
@@ -545,7 +672,7 @@ export class Distiller {
     // 补问 retry (budget-guarded), still-deficient ops are dropped and
     // ledgered — never a silent drop. Their observations simply stay
     // unconsumed and walk the existing GC/corrective path (three strikes).
-    const schema = await this.enforceSchema(sessionId, user, ops, budgetLeft)
+    const schema = await this.enforceSchema(sessionId, system, user, ops, budgetLeft, branch)
     let callsUsed = 1 + schema.retrySpent
     for (const drop of schema.drops) {
       await recordPipelineEvent(this.service.store.root, {
@@ -561,9 +688,15 @@ export class Distiller {
         marked: 0,
         callsUsed,
         invalidOps: schema.drops.length,
-        stallDetail: `全部 create op 未通过 schema 校验（description 必填 + triggers 3-8 条），已丢弃并落账（${schema.drops.length} 个）`,
+        stallDetail: lesson
+          ? `全部 lesson op 未通过 schema 校验（triggers 3-8 条 + conclusion(action) 必填 + scope 枚举），已丢弃并落账（${schema.drops.length} 个）`
+          : `全部 create op 未通过 schema 校验（description 必填 + triggers 3-8 条），已丢弃并落账（${schema.drops.length} 个）`,
       }
     }
+    // B2 conflict self-check ledgering: the draft still lands as a hint —
+    // the flag is for the approval surface, never a lifecycle write.
+    let conflictsFlagged = 0
+    if (lesson) conflictsFlagged = await this.ledgerLessonConflicts(schema.finalOps, establishedSlugs)
     // observed_ids are the ONLY bridge between ops and marks — without a valid
     // id the store cannot mark anything and the batch head can never advance
     // (the real-machine zero-consumption livelock: topics landed, backlog
@@ -597,7 +730,7 @@ export class Distiller {
         }
       }
       const pass1 = applied
-      const { applied: pass2, why } = await this.correctiveRetry(sessionId, user, idList, validIds, knownSlugs)
+      const { applied: pass2, why } = await this.correctiveRetry(sessionId, system, user, idList, validIds, knownSlugs)
       callsUsed += 1
       if (pass2 === undefined || pass2.consumedIds.length === 0) {
         const tail =
@@ -638,10 +771,65 @@ export class Distiller {
       filteredIds: applied.filteredIds,
       invalidOps: schema.drops.length,
       rejectedLinks: applied.rejectedLinks,
+      conflictsFlagged,
       consumedIds: applied.consumedIds,
     }
   }
 
+  /**
+   * The conflict self-check baseline (B2 决议 5): established lessons ONLY —
+   * hint drafts are not yet norms, so there is nothing for a candidate to
+   * contradict. Each brief carries the lesson's condition surface (title +
+   * triggers) and its slug (the only legal conflictsWith reference). Bounded
+   * reads like the topic index (first 100 roster entries); established
+   * lessons are post-gate artifacts and stay a handful in practice.
+   */
+  private async establishedLessonBriefs(
+    metas: readonly { slug: string; title: string }[],
+  ): Promise<{ slug: string; title: string; triggers: string[] }[]> {
+    const out: { slug: string; title: string; triggers: string[] }[] = []
+    for (const m of metas.slice(0, 100)) {
+      const doc = await this.service.store.readTopic(m.slug).catch(() => undefined)
+      if (doc === undefined) continue
+      if (okf.topicKindOf(doc.fm.type) !== 'lesson') continue
+      if ((doc.fm.confidence ?? 'hint') !== 'established') continue
+      out.push({ slug: m.slug, title: m.title, triggers: doc.fm.triggers ?? [] })
+    }
+    return out
+  }
+
+  /**
+   * B2 conflict self-check, LEDGER-ONLY disposition: a draft that declares
+   * `conflictsWith` still lands as a hint draft (新覆旧 is the B4 approval
+   * gate's call, never the distill lane's). Each declared slug is
+   * whitelist-checked against the established baseline the prompt carried;
+   * roster-unknown slugs are model noise and are dropped without an event (a
+   * hallucinated slug must not fabricate a conflict). The event is a flag for
+   * the approval surface — no lifecycle state changes here.
+   */
+  private async ledgerLessonConflicts(
+    ops: readonly DistillOp[],
+    establishedSlugs: ReadonlySet<string>,
+  ): Promise<number> {
+    let flagged = 0
+    for (const op of ops) {
+      if (!Array.isArray(op.conflictsWith) || op.conflictsWith.length === 0) continue
+      const valid = [...new Set(op.conflictsWith)].filter(
+        (s): s is string => typeof s === 'string' && establishedSlugs.has(s),
+      )
+      if (valid.length === 0) continue
+      await recordPipelineEvent(this.service.store.root, {
+        at: new Date().toISOString(),
+        kind: 'lesson-conflict-flagged',
+        // detail values are scalar-only (pipeline-events whitelist): the slug
+        // list rides as a comma join, the raw declaration count rides as a number.
+        detail: { op: opKey(op), conflictsWith: valid.join(','), declared: op.conflictsWith.length },
+      })
+      flagged += valid.length
+    }
+    return flagged
+  }
+
   /**
    * The ONE corrective retry for a zero-valid-observed_ids batch: re-ask with
    * the batch's legal id list spelled out verbatim. It spends a second call
@@ -652,6 +840,7 @@ export class Distiller {
    */
   private async correctiveRetry(
     sessionId: string | undefined,
+    system: string,
     originalUser: string,
     idList: readonly string[],
     validIds: ReadonlySet<string>,
@@ -670,7 +859,7 @@ export class Distiller {
     ].join('\n')
     let raw: string
     try {
-      raw = await caller({ system: SYSTEM_PROMPT, user, purpose: 'topics-distill', sessionId, maxTokens: 4000 })
+      raw = await caller({ system, user, purpose: 'topics-distill', sessionId, maxTokens: 4000 })
     } catch (e) {
       return { why: `模型调用失败：${String(e instanceof Error ? e.message : e).slice(0, 160)}` }
     }
@@ -699,10 +888,14 @@ export class Distiller {
    */
   private async enforceSchema(
     sessionId: string | undefined,
+    system: string,
     originalUser: string,
     ops: readonly DistillOp[],
     budgetLeft: number,
+    branch: DistillBranch,
   ): Promise<{ finalOps: DistillOp[]; drops: SchemaDrop[]; retrySpent: number }> {
+    const lesson = branch === 'lesson'
+    const check = lesson ? checkLessonSchema : checkCreateSchema
     const valid: DistillOp[] = []
     const invalid: { op: DistillOp; key: string; missing: string }[] = []
     for (const op of ops) {
@@ -710,9 +903,9 @@ export class Distiller {
         valid.push(op)
         continue
       }
-      const check = checkCreateSchema(op)
-      if (check.valid) valid.push(op)
-      else invalid.push({ op, key: opKey(op), missing: check.missing })
+      const verdict = check(op)
+      if (verdict.valid) valid.push(op)
+      else invalid.push({ op, key: opKey(op), missing: verdict.missing })
     }
     if (invalid.length === 0) return { finalOps: valid, drops: [], retrySpent: 0 }
     if (budgetLeft < 2) {
@@ -726,7 +919,7 @@ export class Distiller {
         retrySpent: 0,
       }
     }
-    const rescued = await this.schemaRetryCall(sessionId, originalUser, invalid)
+    const rescued = await this.schemaRetryCall(sessionId, system, originalUser, invalid, branch)
     if (rescued === undefined) {
       return {
         finalOps: valid,
@@ -741,7 +934,7 @@ export class Distiller {
     const drops: SchemaDrop[] = []
     for (const c of invalid) {
       const replacement = rescued.get(c.key)
-      if (replacement !== undefined && checkCreateSchema(replacement).valid) {
+      if (replacement !== undefined && check(replacement).valid) {
         valid.push(replacement)
       } else {
         drops.push({ key: c.key, kind: 'distill-op-invalid', missing: c.missing })
@@ -758,23 +951,31 @@ export class Distiller {
    */
   private async schemaRetryCall(
     sessionId: string | undefined,
+    system: string,
     originalUser: string,
     invalid: readonly { op: DistillOp; key: string; missing: string }[],
+    branch: DistillBranch,
   ): Promise<Map<string, DistillOp> | undefined> {
     const caller = this.caller
     if (caller === undefined) return undefined
     const list = invalid.map((c) => `- create「${typeof c.op.title === 'string' ? c.op.title : ''}」（缺：${c.missing}）`).join('\n')
+    // The completion demand names the branch's own required fields; the topic
+    // line is byte-identical to its pre-lesson-branch form.
+    const instruction =
+      branch === 'lesson'
+        ? '请只重新输出这些 op 的补全版本（严格 JSON，{"ops":[...]}）：每个 create 必须带 triggers（恰好 3-8 个 condition 触发短语）与 conclusion（祈使句行动指令），scope 只能是 workspace 或 global，并保留原有的 title/observed_ids 等字段。无法补全的 op 不要输出。'
+        : '请只重新输出这些 op 的补全版本（严格 JSON，{"ops":[...]}）：每个 create 必须带 description（一句话概括）与 triggers（恰好 3-8 条具体触发短语，禁止 dsh、配置、错误 之类的泛词），并保留原有的 title/conclusion/observed_ids 等字段。无法补全的 op 不要输出。'
     const user = [
       originalUser,
       '',
       '---',
       'schema 补问：你上一次返回的以下 create op 缺少必填字段：',
       list,
-      '请只重新输出这些 op 的补全版本（严格 JSON，{"ops":[...]}）：每个 create 必须带 description（一句话概括）与 triggers（恰好 3-8 条具体触发短语，禁止 dsh、配置、错误 之类的泛词），并保留原有的 title/conclusion/observed_ids 等字段。无法补全的 op 不要输出。',
+      instruction,
     ].join('\n')
     let raw: string
     try {
-      raw = await caller({ system: SYSTEM_PROMPT, user, purpose: 'topics-distill', sessionId, maxTokens: 4000 })
+      raw = await caller({ system, user, purpose: 'topics-distill', sessionId, maxTokens: 4000 })
     } catch {
       return undefined
     }
@@ -810,6 +1011,11 @@ export class Distiller {
    * the store transaction (先落 topic 再建边 — one write, no separate edge
    * pass). The set is locally seeded with this call's predicted op slugs and
    * grows as creates land, so same-batch references resolve in op order.
+   *
+   * Lesson creates (B2) ride the same sanitation and consume their
+   * observations through the same observed_ids bridge; the write goes through
+   * saveTopic's lesson branch (kind:'lesson', confidence hint, distilled
+   * provenance) — the observation→mark closure is identical to topics.
    */
   private async applyOps(
     ops: readonly DistillOp[],
@@ -851,20 +1057,40 @@ export class Distiller {
         if (op.op === 'create' && typeof op.title === 'string' && typeof op.conclusion === 'string') {
           const links = await this.acceptLinks(op, slugs)
           applied.rejectedLinks += links.rejected
-          const res = await this.service.saveTopic({
-            title: op.title,
-            conclusion: op.conclusion,
-            description: op.description,
-            tags: op.tags,
-            triggers: Array.isArray(op.triggers) ? op.triggers.filter((t): t is string => typeof t === 'string') : undefined,
-            depends: op.depends,
-            openQuestions: op.open_questions,
-            impact: op.impact,
-            recommendations: op.recommendations,
-            status: op.status === 'stable' ? 'stable' : 'draft',
-            source: 'distill',
-            links: links.targets,
-          })
+          const res =
+            op.kind === 'lesson'
+              ? // Lesson data plane (B2 §6.2): the draft lands as a hint with
+                // distilled provenance — status derives from confidence, and
+                // promotion to established is the B4 approval gate's exclusive
+                // write path (setLessonStatus), so `status` is NOT taken from
+                // the op. Scope: the op's explicit choice, default workspace
+                // (lesson 必带 scope, global 需显式).
+                await this.service.saveTopic({
+                  title: op.title,
+                  kind: 'lesson',
+                  conclusion: op.conclusion,
+                  description: op.description,
+                  triggers: Array.isArray(op.triggers) ? op.triggers.filter((t): t is string => typeof t === 'string') : undefined,
+                  scope: op.scope === 'global' ? 'global' : 'workspace',
+                  confidence: 'hint',
+                  lessonSource: 'distilled',
+                  source: 'distill',
+                  links: links.targets,
+                })
+              : await this.service.saveTopic({
+                  title: op.title,
+                  conclusion: op.conclusion,
+                  description: op.description,
+                  tags: op.tags,
+                  triggers: Array.isArray(op.triggers) ? op.triggers.filter((t): t is string => typeof t === 'string') : undefined,
+                  depends: op.depends,
+                  openQuestions: op.open_questions,
+                  impact: op.impact,
+                  recommendations: op.recommendations,
+                  status: op.status === 'stable' ? 'stable' : 'draft',
+                  source: 'distill',
+                  links: links.targets,
+                })
           applied.created.push(res.slug)
           applied.consumedSlugs.push(res.slug)
           slugs.add(res.slug)

package/src/index.ts

@@ -891,10 +891,11 @@ export async function apply(ctx: Context, config: TopicsRuntimeConfig = {}): Pro
   // `agent/created` listener and a throw or rejection ROLLS THE ENTIRE AGENT
   // CREATION BACK. This listener is therefore total and synchronous — it
   // never throws, never returns a promise — and the chain is deferred off
-  // the creation transaction entirely (setImmediate, unref'd): the pull /
+  // the creation transaction entirely (1.5s unref'd timer): the pull /
   // replay-distill / consolidation slow work starts only after the serial
-  // dispatch has moved on. Plugin initialization must never block, delay,
-  // or abort session startup; a chain failure at most warns.
+  // dispatch has moved on and the first frame is up. Plugin initialization
+  // must never block, delay, or abort session startup; a chain failure at
+  // most warns.
   const runBootChain = (sessionId: string) => {
     // Contained at the top too: a synchronous prologue throw (config read,
     // sync bookkeeping) must degrade to a warn, not leak toward the host.
@@ -987,11 +988,14 @@ export async function apply(ctx: Context, config: TopicsRuntimeConfig = {}): Pro
     try {
       const sessionId = String(payload?.agent?.id ?? '')
       if (sessionId === '') return
-      // Off the creation transaction: the unref'd immediate fires after the
-      // current serial dispatch slice, so the chain's synchronous prologue
-      // (config read, sync state) never delays the remaining listeners nor
-      // the loop start, and the timer cannot hold a dying process open.
-      const deferred = setImmediate(() => runBootChain(sessionId))
+      // Off the creation transaction AND off the boot window: the unref'd
+      // 1.5s timer fires after the serial dispatch has fully moved on and
+      // after the host's first frame, so the pull's git/DNS child processes
+      // never compete with startup I/O on a cold (possibly network-starved)
+      // machine — the 2026-10-19 boot-stall report showed the boot window
+      // and the fetch share the same constrained threadpool on a flaky VPN.
+      // The timer cannot hold a dying process open.
+      const deferred = setTimeout(() => runBootChain(sessionId), 1500)
       deferred.unref?.()
     } catch (error) {
       warn(`dsh-topics-memory boot 链触发失败（不影响会话启动）：${error instanceof Error ? error.message : String(error)}`)