@fenglimg/fabric-cli 2.2.0-rc.8 → 2.2.0

package/templates/hooks/knowledge-hint-broad.cjs

@@ -16,12 +16,11 @@
  *
  *   AI sink (additionalContext) — the dynamically generated "MEMORY.md":
  *     [fabric:SessionStart] <store>
- *     ALWAYS-ACTIVE RULES (no recall needed):    # guideline/model — full BODY
- *       [guideline] team:KT-GLD-0001
- *       <full body>                              # over budget → degrade to index line
- *     REFERENCE (read on demand / fab_recall):   # decision/pitfall/process — title + hook
+ *     ALWAYS-ACTIVE RULES (unconditional · act on the line): # guideline/model, BROAD only
+ *       [guideline] team:KT-GLD-0001 · <summary> # INDEX line; body on demand (KT-DEC-0036)
+ *     REFERENCE (situational · Read when must_read_if fires): # decision/pitfall/process, BROAD
  *       [decision] team:KT-DEC-0001 — <must_read_if>
- *       … N more folded (broad index > backstop 50; run fabric-audit)
+ *       … N more folded (broad index > backstop 50; prune via fabric-audit)
  *     Load full content: fab_recall(paths), or Read <store>/knowledge/<type>/<id>--*.md
  *
  *   Human sink (systemMessage) — broad-only census breadcrumb; SessionStart is
@@ -54,7 +53,6 @@ const { appendLockedLine } = require("./lib/injection-log.cjs");
 // (TASK-002). Variant is resolved ONCE per main() invocation via
 // readFabricLanguage(cwd) and threaded into renderBanner — no fs in render path.
 const { renderBanner, readFabricLanguage } = require("./lib/banner-i18n.cjs");
-const { resolveOpaqueSummaries } = require("./lib/summary-fallback.cjs");
 // v2.0.0-rc.37 NEW-19: shared fabric-config reader + sidecar I/O. Replaces the
 // five per-key readFileSync+parse config readers (one parse per fire now) and
 // the bespoke last-emit sidecar helpers. The L78 "refactor into lib/ if a
@@ -112,15 +110,23 @@ function readWorkspaceBindingId(cwd) {
 }
 
 function readSnapshotCanonicalCount(projectRoot) {
+  // No reader / not bound → degrade to an empty corpus (0), the documented
+  // store-only behavior (KT-DEC-0007). Only the "snapshot EXISTS but predates
+  // knowledge_store_dirs" case below is undeterminable → null (skip).
   if (bindingsSnapshotReader === null) {
-    return null;
+    return 0;
   }
   const bindingId = readWorkspaceBindingId(projectRoot);
   if (bindingId === null) {
-    return null;
+    return 0;
   }
   try {
     const snapshot = bindingsSnapshotReader.readBindingsSnapshot(bindingId);
+    // No snapshot file at all → treat as an empty corpus (KT-DEC-0007),
+    // preserving the fresh-project underseed nudge.
+    if (!snapshot) {
+      return 0;
+    }
     // LIVE recount off the snapshot's resolved store dirs. The cached
     // knowledge_stats.canonical_count is frozen at snapshot-write time and goes
     // stale when store content syncs in out-of-band (e.g. the store grew from 1
@@ -128,13 +134,21 @@ function readSnapshotCanonicalCount(projectRoot) {
     // THIS workspace's snapshot), which mis-fired the "knowledge sparse"
     // underseed nudge (KT-PIT-0017, same stale-projection root cause).
     const live = bindingsSnapshotReader.liveKnowledgeStats(snapshot);
-    if (live && Number.isFinite(live.canonicalCount) && live.canonicalCount > 0) {
-      return Math.floor(live.canonicalCount);
+    // #3: a snapshot that predates knowledge_store_dirs makes liveKnowledgeStats
+    // return null — the count is undeterminable and the cached projection is
+    // unreliable. Return null (not 0) so countCanonicalNodes / shouldRecommendImport
+    // SKIP the nudge instead of false-firing on stale data; the snapshot
+    // self-heals on the next install/sync. A genuine live 0 (dirs present, no
+    // *.md) still returns 0 and fires correctly.
+    if (live === null) {
+      return null;
     }
+    return Number.isFinite(live.canonicalCount) ? Math.floor(live.canonicalCount) : 0;
   } catch {
-    // best-effort hint stats only
+    // Read/parse fault → degrade to empty (0), preserving prior behavior. The
+    // only undeterminable→skip path is the explicit live===null above.
+    return 0;
   }
-  return 0;
 }
 
 
@@ -205,8 +219,10 @@ const DEFAULT_HINT_REMINDER_TO_CONTEXT = true;
  * trees — a missing snapshot degrades to zero (KT-DEC-0007).
  */
 function countCanonicalNodes(projectRoot) {
-  const snapshotCount = readSnapshotCanonicalCount(projectRoot);
-  return snapshotCount === null ? 0 : snapshotCount;
+  // #3: null = undeterminable (old snapshot lacking store dirs, or no binding
+  // context). Propagate it — shouldRecommendImport SKIPS on null rather than
+  // treating it as zero and false-firing the underseed nudge on a stale corpus.
+  return readSnapshotCanonicalCount(projectRoot);
 }
 
 /**
@@ -332,12 +348,26 @@ function isImportTouched(projectRoot) {
  *
  * Best-effort: any unexpected error → return false (do not nag on faults).
  */
-function shouldRecommendImport(projectRoot) {
+function shouldRecommendImport(projectRoot, liveTotal) {
   try {
     if (readWorkspaceBindingId(projectRoot) === null) return false;
 
     const threshold = readUnderseedThreshold(projectRoot);
-    const nodeCount = countCanonicalNodes(projectRoot);
+    // P0 (Goal H3 / KT-PIT-0017 + KT-PIT-0019): prefer the LIVE census total the
+    // HUD displays as the single count source. The census walks the read-set
+    // fresh every fire (never a frozen snapshot projection), so feeding it here
+    // makes the import nudge and the HUD agree by construction — killing the
+    // "HUD shows 61 entries but the nudge claims the KB is sparse" contradiction
+    // the stale-snapshot count produced. Fall back to the snapshot-derived count
+    // only when no live total is supplied (e.g. direct unit-test calls).
+    const nodeCount =
+      typeof liveTotal === "number" && Number.isFinite(liveTotal)
+        ? liveTotal
+        : countCanonicalNodes(projectRoot);
+    // #3: undeterminable count (old snapshot predating knowledge_store_dirs) →
+    // skip. `null < threshold` coerces to true in JS, so an explicit guard is
+    // required — otherwise the stale-snapshot case would still false-fire.
+    if (nodeCount === null) return false;
     if (nodeCount >= threshold) return false;
 
     if (isImportTouched(projectRoot) !== "absent") return false;
@@ -363,6 +393,12 @@ function shouldRecommendImport(projectRoot) {
 // truncation summary lines) consume it as a single source of truth.
 const TRUNCATION_THRESHOLD = 12;
 
+// Goal H4 action ladder — review rung: surface a single `/fabric-review` line when
+// the LIVE pending backlog exceeds this. Mirrors fabric-hint.cjs's
+// DEFAULT_REVIEW_HINT_PENDING_COUNT (the Stop hook's review threshold) so the two
+// surfaces agree on "how much pending is too much". Strictly `> threshold`.
+const REVIEW_PENDING_THRESHOLD = 10;
+
 // `fabric plan-context-hint` is a thin wrapper over planContext(); on a
 // well-seeded repo it returns in ~100ms. Two-second cap is defensive — any
 // pathological hang must not stall session start.
@@ -374,65 +410,6 @@ const CLI_TIMEOUT_MS = 2000;
 // `hint_summary_max_len` in fabric-config overrides this default (range 40..240).
 const DEFAULT_SUMMARY_MAX_LEN = 80;
 
-// v2.2 HK2-degrade (W2-T2): char budget for the rendered broad-menu BODY. The
-// hook already degrades by COUNT (hint_broad_top_k slice + TRUNCATION_THRESHOLD
-// grouped mode), but nothing bounded the total rendered SIZE — a corpus with
-// many types or long (near-maxLen) summaries could still emit a wall of text
-// that displaces the agent's working memory. Borrowing the maestro
-// context-budget idea, this is the final rung of the degradation ladder: once
-// the body exceeds the budget, the tail collapses to a single "N more omitted"
-// marker. Default 2000 chars ≈ one screenful. Overridable via
-// fabric-config.json#hint_broad_budget_chars (range 200..20000); 0 disables.
-const DEFAULT_HINT_BROAD_BUDGET_CHARS = 2000;
-
-// v2.2 C5-budget (W2-T3): bind the injection char budget to the layered retrieval
-// budget profile. Mirrors the injectionChars column of shared/retrieval-budget.ts
-// PROFILES (kept in sync — the hook cannot require the TS resolver). The explicit
-// `hint_broad_budget_chars` knob still wins; the profile only supplies the
-// default. `balanced` (and an absent/unknown profile) keeps the historical 2000.
-const RETRIEVAL_BUDGET_INJECTION_CHARS = {
-  conservative: 1000,
-  balanced: 2000,
-  generous: 4000,
-};
-
-function readBroadBudgetChars(projectRoot) {
-  const profile = readConfigString(projectRoot, "retrieval_budget_profile", "balanced");
-  const profileDefault =
-    RETRIEVAL_BUDGET_INJECTION_CHARS[profile] ?? DEFAULT_HINT_BROAD_BUDGET_CHARS;
-  return readConfigNumber(projectRoot, "hint_broad_budget_chars", profileDefault, {
-    min: 0,
-    max: 20000,
-    floor: true,
-  });
-}
-
-// v2.2 HK2-degrade (W2-T2): cap the rendered body to `budgetChars`, collapsing
-// the overflow tail into one marker line. Structural lines (banner, revision_hash,
-// footer) are appended by renderSummary AFTER this pass, so they always survive —
-// only entry/group body lines are subject to the budget. `budgetChars` of 0 or
-// undefined is a no-op (preserves the pre-HK2 unbounded behavior and all
-// existing snapshot tests).
-function capBodyToBudget(body, budgetChars) {
-  if (!budgetChars || budgetChars <= 0) return body;
-  const kept = [];
-  let total = 0;
-  for (let i = 0; i < body.length; i += 1) {
-    const line = body[i];
-    // +1 for the newline each line costs once joined.
-    if (kept.length > 0 && total + line.length + 1 > budgetChars) {
-      const remaining = body.length - i;
-      kept.push(
-        `  … ${remaining} more entr${remaining === 1 ? "y" : "ies"} omitted (injection budget ${budgetChars} chars; raise hint_broad_budget_chars or narrow scope)`,
-      );
-      return kept;
-    }
-    kept.push(line);
-    total += line.length + 1;
-  }
-  return kept;
-}
-
 function readSummaryMaxLen(projectRoot) {
   return readConfigNumber(projectRoot, "hint_summary_max_len", DEFAULT_SUMMARY_MAX_LEN, {
     min: 40,
@@ -682,7 +659,7 @@ function renderTruncated(narrow, maxLen) {
  * after writing exactly one stderr breadcrumb so operators grepping a stuck-
  * banner report can diagnose the version drift without source-diving.
  */
-function renderSummary(payload, maxLen, budgetChars) {
+function renderSummary(payload, maxLen) {
   if (!payload || payload.version !== 2) {
     if (payload && payload.version !== undefined) {
       try {
@@ -705,9 +682,9 @@ function renderSummary(payload, maxLen, budgetChars) {
     ? `[fabric] Session start — ${entries.length} broad-scoped knowledge entries available (truncated):`
     : `[fabric] Session start — ${entries.length} broad-scoped knowledge entries available:`;
 
-  const renderedBody = truncated ? renderTruncated(entries, maxLen) : renderFull(entries, maxLen);
-  // v2.2 HK2-degrade (W2-T2): final budget rung — cap the body's rendered size.
-  const body = capBodyToBudget(renderedBody, budgetChars);
+  // KT-DEC-0028 completeness: the rendered census is bounded by the per-line
+  // maxLen + TRUNCATION_THRESHOLD grouped mode, not by a body char budget.
+  const body = truncated ? renderTruncated(entries, maxLen) : renderFull(entries, maxLen);
 
   const lines = [banner, ...body];
   const revHash = typeof payload.revision_hash === "string" ? payload.revision_hash : null;
@@ -806,65 +783,134 @@ function toPluralType(type) {
 // count the (possibly sliced) entries by knowledge_type so the human banner still
 // has something to group. Production payloads always carry the unsliced census.
 function deriveCensusFromEntries(entries) {
-  const census = { by_type: {}, by_layer: { team: 0, personal: 0, project: 0 }, dropped_other_project: 0, total: 0 };
+  const census = {
+    by_type: {},
+    by_layer: { team: 0, personal: 0, project: 0 },
+    broad_by_type: {},
+    narrow_total: 0,
+    dropped_other_project: 0,
+    total: 0,
+  };
   if (!Array.isArray(entries)) return census;
   for (const e of entries) {
     const type = e && typeof e.type === "string" ? toPluralType(e.type) : null;
     if (type === null) continue;
+    const isNarrow = e.relevance_scope === "narrow";
     census.by_type[type] = (census.by_type[type] || 0) + 1;
+    if (isNarrow) census.narrow_total += 1;
+    else census.broad_by_type[type] = (census.broad_by_type[type] || 0) + 1;
     census.total += 1;
   }
   return census;
 }
 
-// Render the human-facing grouped census (§3). `lang` is "zh-CN" | other (en).
-// Returns an array of lines (may be empty when the census is empty).
+// Render the human-facing scope-primary status HUD (Goal H2). `lang` is
+// "zh-CN" | other (en). Returns an array of lines (empty when census is empty).
+//
+// Shape (KT-DEC-0029 — SessionStart is scope-primary; broad is the spine that's
+// injected this session, narrow surfaces contextually via the PreToolUse hint):
+//   ▸ [fabric] 共 N 条 · 团队X · 项目Y · 个人Z
+//     broad B · 本会话注入
+//       ├ 常驻规则 G+M  guideline G · model M     (KT-DEC-0027 resident tier)
+//       └ 情境参考 D+P+Pr  decision D · pitfall P · process Pr  (reference tier)
+//     narrow M · 编辑对应文件时浮现                (合计 only, no per-type)
+// Self-consistency invariant: broad (= 常驻 + 参考) + narrow == total.
 function renderHumanCensus(census, opts) {
   const { lang } = opts || {};
   const c = census || {};
-  const byType = c.by_type || {};
   const total = typeof c.total === "number" ? c.total : 0;
   if (total === 0 && (c.dropped_other_project || 0) === 0) return [];
   const zh = lang === "zh-CN";
 
-  const typeCounts = (types) =>
-    types
-      .filter((t) => (byType[t] || 0) > 0)
-      .map((t) => `${TYPE_SINGULAR[t] || t} ${byType[t]}`)
-      .join(" · ");
+  const broadByType = c.broad_by_type || {};
+  const narrowTotal = typeof c.narrow_total === "number" ? c.narrow_total : 0;
+  // Per-tier broad counts. `broad_by_type` keys on the plural enum.
+  const g = broadByType.guidelines || 0;
+  const m = broadByType.models || 0;
+  const d = broadByType.decisions || 0;
+  const p = broadByType.pitfalls || 0;
+  const pr = broadByType.processes || 0;
+  const residentN = g + m; // 常驻规则 (always-active: guideline + model)
+  const referenceN = d + p + pr; // 情境参考 (decision + pitfall + process)
+  const broadN = residentN + referenceN;
 
-  const lines = [];
-  // `total` is the read-set ENTRY COUNT (not bytes) — label it as 条/entries.
-  lines.push(`▸ [fabric] SessionStart (${total} ${zh ? "条" : total === 1 ? "entry" : "entries"})`);
-  // W2-2/W2-3 (KT-DEC-0027/0029): the human breadcrumb shows only the
-  // always-loaded (guideline/model) census. The on-demand (decision/pitfall/
-  // process) count line and the dropped-other-project line are retired — the
-  // decision/pitfall/process REFERENCE lives in the AI sink (title + must_read_if),
-  // and SessionStart stays silent about narrow-scoped knowledge.
-  const alwaysCounts = typeCounts(ALWAYS_TYPES);
-  lines.push(zh ? "  ─ always-loaded(AI 也收到正文)─" : "  ─ always-loaded (AI also gets bodies) ─");
-  lines.push(`   ${alwaysCounts.length > 0 ? alwaysCounts : zh ? "(无)" : "(none)"}`);
   const layer = c.by_layer || {};
   const teamCount = layer.team || 0;
   const personalCount = layer.personal || 0;
   const projectCount = layer.project || 0;
-  if (teamCount > 0 || personalCount > 0 || projectCount > 0) {
-    const segs = [`[team] ${teamCount}`];
-    if (projectCount > 0) segs.push(`[project] ${projectCount}`);
-    segs.push(`[personal] ${personalCount}`);
-    lines.push(`  ${segs.join(" · ")}`);
-  }
+
+  const lines = [];
+  // Header: total entry count + semantic_scope breakdown (KT-MOD-0001 三轴).
+  const scopeSegs = [zh ? `团队 ${teamCount}` : `team ${teamCount}`];
+  if (projectCount > 0) scopeSegs.push(zh ? `项目 ${projectCount}` : `project ${projectCount}`);
+  scopeSegs.push(zh ? `个人 ${personalCount}` : `personal ${personalCount}`);
+  const totalLabel = zh ? `共 ${total} 条` : `${total} ${total === 1 ? "entry" : "entries"}`;
+  lines.push(`▸ [fabric] ${totalLabel} · ${scopeSegs.join(" · ")}`);
+
+  // broad spine — injected this session.
+  lines.push(zh ? `  broad ${broadN} · 本会话注入` : `  broad ${broadN} · injected this session`);
+  const residentDetail = [];
+  if (g > 0) residentDetail.push(`guideline ${g}`);
+  if (m > 0) residentDetail.push(`model ${m}`);
+  const refDetail = [];
+  if (d > 0) refDetail.push(`decision ${d}`);
+  if (p > 0) refDetail.push(`pitfall ${p}`);
+  if (pr > 0) refDetail.push(`process ${pr}`);
+  const dash = zh ? "—" : "—";
+  lines.push(
+    zh
+      ? `    ├ 常驻规则 ${residentN}  ${residentDetail.join(" · ") || dash}`
+      : `    ├ resident ${residentN}  ${residentDetail.join(" · ") || dash}`,
+  );
+  lines.push(
+    zh
+      ? `    └ 情境参考 ${referenceN}  ${refDetail.join(" · ") || dash}`
+      : `    └ reference ${referenceN}  ${refDetail.join(" · ") || dash}`,
+  );
+
+  // narrow remainder — 合计 only (no per-type; it's file-specific, surfaces on edit).
+  lines.push(
+    zh
+      ? `  narrow ${narrowTotal} · 编辑对应文件时浮现`
+      : `  narrow ${narrowTotal} · surfaces when you edit matching files`,
+  );
   return lines;
 }
 
+// Goal H2: the SessionStart store label, scope-primary wording — `写入 X · 只读 Y`
+// (write target receives new knowledge; the rest are read-only sources). Replaces
+// the legacy `read-set stores: a (write), b (ro)` jargon line inline (kept local
+// to this hook so the shared lib formatStoreLabels — used by other hooks — is
+// untouched). Empty string when there is nothing to show.
+function renderScopeStoreLabel(snapshot, lang) {
+  if (!snapshot || !snapshot.read_set || !Array.isArray(snapshot.read_set.stores)) return "";
+  const stores = snapshot.read_set.stores;
+  if (stores.length === 0) return "";
+  const zh = lang === "zh-CN";
+  const writeAlias = snapshot.write_target && snapshot.write_target.alias;
+  const writeStores = [];
+  const readonlyStores = [];
+  for (const s of stores) {
+    const alias = s && typeof s.alias === "string" ? s.alias : null;
+    if (alias === null) continue;
+    if (alias === writeAlias) writeStores.push(alias);
+    else readonlyStores.push(alias);
+  }
+  const segs = [];
+  if (writeStores.length > 0) segs.push((zh ? "写入 " : "write ") + writeStores.join(", "));
+  if (readonlyStores.length > 0) segs.push((zh ? "只读 " : "readonly ") + readonlyStores.join(", "));
+  if (segs.length === 0) return "";
+  return "  " + segs.join(" · ");
+}
+
 // W2 (KT-DEC-0027/0028/0029): render the AI-facing sink — the dynamically
 // generated "MEMORY.md" spine injected into the SessionStart context. Two
 // type-tiered sections over the BROAD knowledge (narrow stays silent — D0029):
 //
-//   ALWAYS-ACTIVE RULES (guideline/model): full BODIES injected, bounded by
-//     budgetChars. On overflow each entry degrades to an INDEX LINE (title +
-//     summary), NOT a folded count (D0028) — the entry stays individually
-//     visible and fetchable.
+//   ALWAYS-ACTIVE RULES (guideline/model): INDEX LINE only (title + summary) —
+//     never the eager body (KT-DEC-0036). The body is one cheap on-demand fetch
+//     away, so injecting it on every SessionStart is a permanent context tax
+//     (KT-GLD-0005) we no longer pay; each entry stays individually visible.
 //   REFERENCE (decision/pitfall/process): TITLE + must_read_if hook only
 //     (situational; the agent Reads the body on demand) — never the body.
 //
@@ -876,7 +922,7 @@ function renderHumanCensus(census, opts) {
 const REFERENCE_TYPES = new Set(["decision", "pitfall", "process"]);
 
 function renderAiSink(opts) {
-  const { entries, alwaysBodies, storeLabel, budgetChars, broadIndexBackstop, summaryMaxLen, lang } =
+  const { entries, alwaysBodies, storeLabel, broadIndexBackstop, summaryMaxLen, lang } =
     opts || {};
   const zh = lang === "zh-CN";
   const bodies = Array.isArray(alwaysBodies) ? alwaysBodies : [];
@@ -895,37 +941,34 @@ function renderAiSink(opts) {
   const lines = [];
   lines.push(`[fabric:SessionStart] ${storeLabel || "store"}`);
 
-  // ALWAYS-ACTIVE RULES — inject bodies up to the budget, degrade to index line.
-  lines.push(zh ? "ALWAYS-ACTIVE RULES (无需再 recall):" : "ALWAYS-ACTIVE RULES (no recall needed):");
+  // ALWAYS-ACTIVE RULES — index-only (title + summary), never the eager body.
+  lines.push(
+    zh
+      ? "ALWAYS-ACTIVE RULES (无条件适用 · 照此行遵循,正文按需取):"
+      : "ALWAYS-ACTIVE RULES (unconditional · act on the line; body on demand):",
+  );
   if (bodies.length === 0) {
     lines.push(zh ? "  (无 always-active 条目)" : "  (none)");
   } else {
-    const budget = typeof budgetChars === "number" && budgetChars > 0 ? budgetChars : 0;
-    let used = 0;
-    let degraded = false;
+    // KT-DEC-0036: render each always-active entry as a single index line
+    // (title + summary). The body is one cheap on-demand fetch away (see footer),
+    // so injecting it on every SessionStart is a permanent context tax
+    // (KT-GLD-0005) we no longer pay.
     for (const b of bodies) {
       const label = `[${TYPE_SINGULAR[b.type] || b.type}] ${b.id}`;
-      const body = typeof b.body === "string" ? b.body.trim() : "";
-      const summary = typeof b.summary === "string" ? b.summary : "";
-      const fullCost = label.length + body.length + 2;
-      if (!degraded && (budget === 0 || used + fullCost <= budget)) {
-        lines.push(`  ${label}`);
-        if (body.length > 0) lines.push(body);
-        used += fullCost;
-      } else {
-        // D0028: degrade to an INDEX LINE (title + summary), never a folded count.
-        degraded = true;
-        lines.push(
-          `  ${label} · ${summary}${zh ? " (超预算; fab_recall 取正文)" : " (over budget; fab_recall for body)"}`,
-        );
-      }
+      const summary = typeof b.summary === "string" ? b.summary.trim() : "";
+      lines.push(summary.length > 0 ? `  ${label} · ${summary}` : `  ${label}`);
       indexCount += 1;
     }
   }
 
   // REFERENCE — broad decision/pitfall/process: title + must_read_if hook.
   if (referenceEntries.length > 0) {
-    lines.push(zh ? "REFERENCE (按需 Read / fab_recall):" : "REFERENCE (read on demand / fab_recall):");
+    lines.push(
+      zh
+        ? "REFERENCE (情境触发 · 命中 must_read_if 时 Read / fab_recall):"
+        : "REFERENCE (situational · Read when must_read_if fires / fab_recall):",
+    );
     let folded = 0;
     for (const e of referenceEntries) {
       if (backstop > 0 && indexCount >= backstop) {
@@ -947,8 +990,8 @@ function renderAiSink(opts) {
     if (folded > 0) {
       lines.push(
         zh
-          ? `  … 另 ${folded} 条 broad 条目折叠 (broad index > backstop ${backstop}; 跑 fabric-audit)`
-          : `  … ${folded} more broad entr${folded === 1 ? "y" : "ies"} folded (broad index > backstop ${backstop}; run fabric-audit)`,
+          ? `  … 另 ${folded} 条 broad 条目折叠 (broad index > backstop ${backstop})。先跑 fabric-audit 瘦身;确需全展示再调 .fabric/fabric-config.json#broad_index_backstop (20..500)`
+          : `  … ${folded} more broad entr${folded === 1 ? "y" : "ies"} folded (broad index > backstop ${backstop}). Run fabric-audit to prune first; raise .fabric/fabric-config.json#broad_index_backstop (20..500) only if you truly need them all`,
       );
     }
   }
@@ -959,6 +1002,15 @@ function renderAiSink(opts) {
       ? "取正文: fab_recall(paths), 或 Read <store>/knowledge/<type>/<id>--*.md"
       : "Load full content: fab_recall(paths), or Read <store>/knowledge/<type>/<id>--*.md",
   );
+  // H6 scope discipline: this sink carries ONLY broad (always-relevant) knowledge;
+  // narrow (file-specific) entries surface contextually via the PreToolUse hint
+  // when you edit a matching file (KT-DEC-0029). Stops the agent from assuming
+  // SessionStart is the whole KB.
+  lines.push(
+    zh
+      ? "范围: 此处仅 broad(始终相关);narrow(文件专属)在你编辑对应文件时由 PreToolUse 浮现"
+      : "Scope: broad only (always relevant) here; narrow (file-specific) surfaces via the PreToolUse hint when you edit a matching file",
+  );
   return lines.join("\n");
 }
 
@@ -977,29 +1029,19 @@ function renderAiSink(opts) {
 // Returns:
 //   human               — gated final human text (null when gated off / empty)
 //   ai                  — gated final AI text (null when reminder-to-context off / empty)
-//   resolvedPayload     — payload with opaque summaries resolved (for telemetry / --explain)
+//   resolvedPayload     — the plan-context payload, passed through unchanged (for telemetry / --explain)
 //   hasRenderedContent  — true when ANY sink rendered content (main's silent-exit gate)
 //   reminderToContext   — readReminderToContext(cwd) (telemetry target-channel)
 function buildSessionStartSinks(cwd, payload, env) {
-  // rc.35 TASK-06: opaque-summary substitution (best-effort; failure leaves
-  // the original summary untouched).
-  let resolvedPayload = payload;
-  try {
-    if (payload && Array.isArray(payload.entries)) {
-      const resolvedEntries = resolveOpaqueSummaries(
-        payload.entries,
-        cwd,
-        typeof payload.revision_hash === "string" ? payload.revision_hash : "",
-      );
-      resolvedPayload = { ...payload, entries: resolvedEntries };
-    }
-  } catch {
-    // resolveOpaqueSummaries swallows its own errors; belt + suspenders.
-  }
+  // KT-GLD-0006: the rc.35 opaque-summary runtime substitution
+  // (resolveOpaqueSummaries) is retired. The write-time mechanical floor in
+  // extractKnowledge (summary !== stable_id/slug + length floor) prevents
+  // degenerate summaries at the source, so SessionStart no longer band-aids them
+  // at render time; surviving legacy opaque summaries are fixed by the
+  // review-time cold-eval audit pass.
+  const resolvedPayload = payload;
 
-  const recommendImport = shouldRecommendImport(cwd);
   const summaryMaxLen = readSummaryMaxLen(cwd);
-  const broadBudgetChars = readBroadBudgetChars(cwd);
   const fabricLanguageForEmit = readFabricLanguage(cwd);
 
   const census =
@@ -1015,6 +1057,24 @@ function buildSessionStartSinks(cwd, payload, env) {
         ? payload.always_bodies
         : [];
 
+  // H3: the LIVE census total is the single count source for the import gate —
+  // computed AFTER census so the nudge and the HUD agree by construction.
+  const censusTotal = census && typeof census.total === "number" ? census.total : undefined;
+  const recommendImport = shouldRecommendImport(cwd, censusTotal);
+
+  // Read the resolved-bindings snapshot ONCE — reused for the scope store label
+  // (写入/只读) and the H4 review-rung pending count. Best-effort/decorative: any
+  // failure leaves snapshot null and the dependent lines simply don't render.
+  let snapshot = null;
+  if (bindingsSnapshotReader !== null) {
+    try {
+      const bindingId = readWorkspaceBindingId(cwd);
+      if (bindingId) snapshot = bindingsSnapshotReader.readBindingsSnapshot(bindingId);
+    } catch {
+      snapshot = null;
+    }
+  }
+
   const humanGate =
     nudgePolicy !== null
       ? nudgePolicy.resolveHumanSink(cwd, "session_start", {})
@@ -1023,45 +1083,58 @@ function buildSessionStartSinks(cwd, payload, env) {
   // ---- HUMAN sink: §3 grouped census (+ verbose per-entry detail). ----
   const humanLines = renderHumanCensus(census, { lang: fabricLanguageForEmit });
   if (humanLines.length > 0 && humanGate.verbosity === "verbose") {
-    const detail = renderSummary(resolvedPayload, summaryMaxLen, broadBudgetChars);
+    const detail = renderSummary(resolvedPayload, summaryMaxLen);
     humanLines.push(...detail);
   }
-  if (bindingsSnapshotReader !== null && humanLines.length > 0) {
-    try {
-      const bindingId = readWorkspaceBindingId(cwd);
-      if (bindingId) {
-        const label = bindingsSnapshotReader.formatStoreLabels(
-          bindingsSnapshotReader.readBindingsSnapshot(bindingId),
+  // H2: scope store label — `写入 X · 只读 Y` (replaces the legacy read-set jargon).
+  if (humanLines.length > 0 && snapshot !== null) {
+    const storeLabel = renderScopeStoreLabel(snapshot, fabricLanguageForEmit);
+    if (storeLabel) humanLines.push(storeLabel);
+  }
+
+  // H4 action ladder (KT-DEC-0007: nudge, never a gate). AT MOST ONE line, the
+  // highest-priority rung wins, and steady state is fully silent:
+  //   1. import  — KB is sparse (recommendImport, off the live census total)
+  //   2. review  — pending backlog exceeds REVIEW_PENDING_THRESHOLD (live count)
+  //   3. (silent)
+  if (humanLines.length > 0 && fabricLanguageForEmit !== null) {
+    if (recommendImport) {
+      humanLines.push(renderBanner("broadImportBanner", fabricLanguageForEmit, {}));
+    } else if (snapshot !== null && bindingsSnapshotReader !== null) {
+      let pendingCount = 0;
+      try {
+        const live = bindingsSnapshotReader.liveKnowledgeStats(snapshot);
+        if (live && Number.isFinite(live.pendingCount)) pendingCount = Math.floor(live.pendingCount);
+      } catch {
+        pendingCount = 0;
+      }
+      if (pendingCount > REVIEW_PENDING_THRESHOLD) {
+        humanLines.push(
+          fabricLanguageForEmit === "zh-CN"
+            ? `  📋 Fabric: ${pendingCount} 条 pending 待审,是否调 /fabric-review?`
+            : `  📋 Fabric: ${pendingCount} pending entries — run /fabric-review?`,
         );
-        if (label) humanLines.push(label);
       }
-    } catch {
-      // store labels are decorative provenance — never crash the hook
     }
   }
-  if (recommendImport && humanLines.length > 0 && fabricLanguageForEmit !== null) {
-    humanLines.push(renderBanner("broadImportBanner", fabricLanguageForEmit, {}));
-  }
+
+  // H5: the `下一步: …fab_recall…` AI-plumbing line is retired from the human sink
+  // (the AI gets it from its own footer + the MCP server directive). Keep only the
+  // pointer to the byte-identical inspector for this injection.
   if (humanLines.length > 0) {
     humanLines.push(
       fabricLanguageForEmit === "zh-CN"
-        ? "下一步: 改相关文件前调 fab_recall(paths) 拿 KB 条目的描述+读路径;按需 Read 路径取正文。"
-        : "Next: before editing related files, call fab_recall(paths) for the KB entries' descriptions + read paths; Read a path on demand for the body.",
-    );
-    // Block 5 (Option X): point to the byte-identical inspector for this injection.
-    humanLines.push(
-      fabricLanguageForEmit === "zh-CN"
-        ? "看具体注入: fabric context (--explain 看每条来源)"
-        : "Inspect this injection: fabric context (--explain for per-entry provenance)",
+        ? "  看具体注入: fabric context (--explain 看每条来源)"
+        : "  Inspect this injection: fabric context (--explain for per-entry provenance)",
     );
   }
 
-  // ---- AI sink: spine — always-active bodies + reference, bounded. ----
+  // ---- AI sink: spine — always-active INDEX lines (no eager body, KT-DEC-0036)
+  // + reference, bounded by the broad_index_backstop fold. ----
   const broadIndexBackstop = readBroadIndexBackstop(cwd);
   const aiText = renderAiSink({
     entries: resolvedPayload && Array.isArray(resolvedPayload.entries) ? resolvedPayload.entries : [],
     alwaysBodies,
-    budgetChars: broadBudgetChars,
     broadIndexBackstop,
     summaryMaxLen,
     lang: fabricLanguageForEmit,