@jjh32456/dsh-longlive 1.6.7 → 1.8.0

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@jjh32456/dsh-longlive",
-  "version": "1.6.7",
+  "version": "1.8.0",
   "type": "module",
-  "description": "久视（longlive）：一个磁盘上的共享大脑，让每个会话都是同一个你——记忆卡、状态卡、开机卡让新会话接上同一段关系与未完成的事；配套会话卫生（热截断/备份/D2/D6 裁剪）与记忆工具（巩固/召回/程序性记忆）。1.6.4 修复记忆根可移植性（默认根 = <DSH home>/longlive-memory，一处配置贯穿全部落盘），并同步面板 0.2.5 文案与 G1-G4 修复。",
+  "description": "久视（longlive）：一个磁盘上的共享大脑，让每个会话都是同一个你——记忆卡、状态卡、开机卡让新会话接上同一段关系与未完成的事；配套会话卫生（热截断/备份/D2/D6 裁剪）与记忆工具（巩固/召回/程序性记忆）。1.6.8 在 1.6.7 之上并入共享大脑活动流（sharedBrain.activity：事件级活动写入、判重/蒸馏、只带新增的增量注入，默认关闭）与共享板状态诚实性修复（running 计数、焦点新鲜度、turn 状态、开机卡时效）；热截断与 1.6.7 相同。",
   "keywords": [
     "dsh",
     "deepseek-harness",
@@ -19,7 +19,7 @@
     "auto-recall",
     "presence-bus"
   ],
-  "author": "阿恒、听澜",
+  "author": "longlive contributors",
   "license": "MIT",
   "publishConfig": {
     "access": "public"
@@ -54,23 +54,13 @@
     "node": ">=20.0.0"
   },
   "files": [
-    "src/*.js",
-    "src/compaction/*.js",
-    "src/ui/*.js",
+    "CHANGELOG.md",
+    "src/**/*.js",
+    "src/**/*.mjs",
+    "src/**/*.json",
+    "!src/router/policies/owner-rulings-*.json",
+    "!src/router/fixtures/**",
     "lib/client.js",
-    "src/d6/*.js",
-    "src/memory/*.js",
-    "src/metrics/*.mjs",
-    "src/identity/*.js",
-    "src/recall/*.js",
-    "src/recall/*.mjs",
-    "src/router/*.js",
-    "src/router/*.mjs",
-    "src/router/service/*.mjs",
-    "src/router/**/*.json",
-    "src/router/background/*.mjs",
-    "src/router/face/*.mjs",
-    "src/bus/*.mjs",
     "cordis.patch.yml",
     "locale/*.json",
     "icon.svg",
@@ -80,120 +70,54 @@
     "SPEC.md",
     "runbook.md",
     "QUICKSTART.md",
-    "CHANGELOG.md",
-    "docs/ERRORS.md",
-    "docs/DEV.md",
-    "docs/QUICKSTART.md",
+    "docs/ANSWER-GUARD.md",
+    "docs/ARCHITECTURE.md",
+    "docs/AUTO-RECALL.md",
+    "docs/AUTO-RECALL-WIRING.md",
     "docs/CONCEPTS.md",
-    "docs/FAQ.md",
     "docs/CONFIG.md",
-    "docs/TOOLS.md",
-    "docs/OPERATIONS.md",
-    "docs/TROUBLESHOOTING.md",
-    "docs/MIGRATION-1.6.0.md",
-    "docs/ARCHITECTURE.md",
-    "docs/README.en.md",
+    "docs/FAQ.md",
     "docs/FEATURES.md",
     "docs/METRICS.md",
+    "docs/MIGRATION-1.6.0.md",
+    "docs/OPERATIONS.md",
+    "docs/PANEL-INTEGRATION.md",
+    "docs/PRIVACY.md",
+    "docs/QUICKSTART.md",
+    "docs/README.en.md",
     "docs/RESIDENT-WATCHER.md",
     "docs/SESSION-WATCH.md",
-    "docs/AUTO-RECALL.md",
-    "docs/AUTO-RECALL-WIRING.md",
-    "docs/PRESENCE-BUS.md",
-    "docs/PRESENCE-BUS-WIRING.md",
-    "docs/PANEL-INTEGRATION.md",
-    "docs/SURGERY.md",
-    "test/run.mjs",
-    "test/run-rc.mjs",
-    "test/config-schema.test.mjs",
-    "test/safety-defaults.test.mjs",
-    "test/ui-flags.test.mjs",
-    "test/memory.test.mjs",
-    "test/conclusion.test.mjs",
-    "test/live.test.mjs",
-    "test/tools_contract.test.mjs",
-    "test/session-original.test.mjs",
-    "test/hot-truncate.test.mjs",
-    "test/d6.test.mjs",
-    "test/d6-output.test.mjs",
-    "test/tool-schema.test.mjs",
-    "test/tool-output.test.mjs",
-    "test/autobind.test.mjs",
-    "test/truncate-visible.test.mjs",
-    "test/auto-truncate.test.mjs",
-    "test/cli-guard.test.mjs",
-    "test/orchestrator.test.mjs",
-    "test/seeded-load.test.mjs",
-    "test/router.test.mjs",
-    "test/router-failclosed.test.mjs",
-    "test/router-shadow.test.mjs",
-    "test/router-identity.test.mjs",
-    "test/router-policy.test.mjs",
-    "test/router-runtime.test.mjs",
-    "test/filter-shadow.test.mjs",
-    "test/router-memory-tools.test.mjs",
-    "test/portability.test.mjs",
-    "test/p1_probe.mjs",
-    "test/deps.test.mjs",
-    "test/doctor-setup.test.mjs",
-    "test/t7_drive.mjs",
-    "test/auto-recall.test.mjs",
-    "test/integration-pre-step.test.mjs",
-    "test/packaging.test.mjs",
-    "test/v4-hardening.test.mjs",
-    "test/feature-flags.test.mjs",
-    "test/maintenance-schedule.test.mjs",
-    "test/host-engine-status.test.mjs",
-    "test/metrics.test.mjs",
-    "test/embedding-recall.test.mjs",
-    "test/identity-card-marker.test.mjs",
-    "test/bus.test.mjs",
-    "test/surgery-recovery.test.mjs",
-    "test/rc4-regressions.test.mjs",
-    "test/rc5-regressions.test.mjs",
-    "test/rc6-chinese.test.mjs",
-    "test/fixtures/*.mjs",
-    "test/fixtures/*.json",
-    "test/fixtures/privacy-memory/topics/*.md",
-    "test/identity-router/*.mjs",
-    "test/router-background/*.mjs",
-    "test/router-background/fixtures/*.mjs",
-    "test/router-1100/*.mjs",
-    "test/router-face/*.mjs",
-    "test/router-l1-l2.contract.test.mjs",
-    "scripts/pack.mjs",
+    "docs/TOOLS.md",
+    "docs/TROUBLESHOOTING.md",
+    "!**/*.bak-*",
+    "!src/router/gen-design-headings.mjs",
     "scripts/longlive-doctor.mjs",
-    "scripts/mark-core-cards.mjs",
     "scripts/truncate-cli.mjs",
+    "scripts/recall-index-build.mjs",
+    "scripts/metrics-read.mjs",
+    "scripts/metrics-sample.mjs",
+    "scripts/migrate-180.mjs",
+    "scripts/backfill-auto-cards.mjs",
+    "scripts/verify-card-anchors.mjs",
+    "scripts/surgery-inspect.mjs",
+    "scripts/auto-truncate-run.ps1",
     "scripts/session-watch.mjs",
     "scripts/session-watch-drill.mjs",
+    "scripts/session-watch-status.ps1",
     "scripts/install-session-watch.ps1",
     "scripts/uninstall-session-watch.ps1",
-    "scripts/session-watch-status.ps1",
-    "scripts/lib/session-watch-fixture.mjs",
-    "scripts/router-proposals.mjs",
-    "scripts/auto-truncate-run.ps1",
-    "scripts/unattended-surgery.ps1",
-    "scripts/install-surgery-task.ps1",
-    "scripts/surgery-run.cmd",
-    "scripts/surgery-inspect.mjs",
-    "scripts/metrics-read.mjs",
-    "scripts/metrics-sample.mjs",
-    "scripts/resident-watcher.ps1",
     "scripts/watch-loop.ps1",
-    "scripts/resident-watcher-status.ps1",
+    "scripts/resident-watcher.ps1",
     "scripts/install-resident-watcher.ps1",
+    "scripts/resident-watcher-status.ps1",
     "scripts/uninstall-resident-watcher.ps1",
     "scripts/lib/auto-truncate-run.ps1",
-    "!README.md.bak-*",
-    "!runbook.md.bak-*",
-    "!**/*.bak-*"
+    "scripts/lib/session-watch-fixture.mjs",
+    "scripts/surgery-run.cmd",
+    "scripts/install-surgery-task.ps1",
+    "scripts/unattended-surgery.ps1",
+    "docs/ERRORS.md"
   ],
-  "scripts": {
-    "test": "node test/run-rc.mjs",
-    "test:080": "node test/run.mjs",
-    "pack": "node scripts/pack.mjs"
-  },
   "dependencies": {},
   "optionalDependencies": {
     "onnxruntime-node": "~1.16.3"
@@ -207,5 +131,11 @@
     "@kenz1117/dsh-engram": {
       "optional": true
     }
+  },
+  "scripts": {
+    "test": "node scripts/lint-plugin-independence.mjs && node test/run-rc.mjs",
+    "test:080": "node test/run.mjs",
+    "pack": "node scripts/pack.mjs",
+    "lint:independence": "node scripts/lint-plugin-independence.mjs"
   }
-}
+}

package/runbook.md

@@ -297,8 +297,8 @@ memory_forget { confirm: "FORGET" }
 ```
 ../../../etc/passwd
 ..\..\..\Windows\win.ini
-C:\Windows\win.ini
-D:\outside\x.md
+<absolute-path>\Windows\win.ini
+<other-drive-path>\x.md
 /etc/passwd
 topics/../../escape.md
 ```

package/scripts/backfill-auto-cards.mjs

@@ -0,0 +1,98 @@
+#!/usr/bin/env node
+// scripts/backfill-auto-cards.mjs — 1.8.0 one-shot AutoCard backfill.
+//
+//   node scripts/backfill-auto-cards.mjs [--memory-root <dir>] [--dry-run] [--json]
+//
+// Reads every EventRecord already in `.longlive/index/events.db` and appends one
+// AutoCard per event to `.longlive/index/cards.jsonl` (idempotent by eventId).
+// --dry-run only counts what would be written; it never touches cards.jsonl.
+
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { openEventIndex } from '../src/memory/event-index.js';
+import { appendAutoCards, cardsPathOf } from '../src/memory/auto-cards.js';
+
+export function defaultMemoryRoot() {
+  for (const envName of ['DSH_LONGLIVE_MEMORY_ROOT', 'DSH_MEM']) {
+    const value = process.env[envName];
+    if (typeof value === 'string' && value.trim() !== '') return path.resolve(value.trim());
+  }
+  const dshHome = typeof process.env.DSH_HOME === 'string' && process.env.DSH_HOME.trim() !== ''
+    ? path.resolve(process.env.DSH_HOME.trim())
+    : path.join(os.homedir(), '.dsh');
+  return path.join(dshHome, 'longlive-memory');
+}
+
+function parseArgs(argv) {
+  const out = { memoryRoot: '', dryRun: false, json: false, pageSize: 500, resign: false };
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    const match = /^--([a-z-]+)(?:=(.*))?$/.exec(arg);
+    if (!match) continue;
+    const [, key, inline] = match;
+    const value = inline !== undefined ? inline : (argv[i + 1] && !argv[i + 1].startsWith('--') ? argv[++i] : '');
+    if (key === 'memory-root') out.memoryRoot = value;
+    else if (key === 'dry-run') out.dryRun = true;
+    else if (key === 'json') out.json = true;
+    else if (key === 'resign') out.resign = true;
+    else if (key === 'page-size') out.pageSize = Math.max(1, Math.min(500, Number.parseInt(value, 10) || 500));
+  }
+  return out;
+}
+
+export function backfillAutoCards({ memoryRoot, dryRun = false, pageSize = 500, resign = false } = {}) {
+  const root = path.resolve(String(memoryRoot ?? ''));
+  if (root === '') throw new Error('E_MEMORY_ROOT: backfill requires memoryRoot');
+  const dbPath = path.join(root, '.longlive', 'index', 'events.db');
+  if (!fs.existsSync(dbPath)) {
+    return { ok: false, code: 'E_EVENTS_INDEX_NOT_BUILT', memoryRoot: root, dbPath, totalEvents: 0, written: 0, skipped: 0, dryRun };
+  }
+  const index = openEventIndex({ memoryRoot: root });
+  let offset = 0;
+  let totalEvents = 0;
+  let written = 0;
+  let skipped = 0;
+  const writtenCards = [];
+  try {
+    for (;;) {
+      const rows = index.listEvents({ limit: pageSize, offset });
+      if (rows.length === 0) break;
+      totalEvents += rows.length;
+      const result = appendAutoCards({ memoryRoot: root, records: rows, dryRun, resign });
+      written += result.written;
+      skipped += result.skipped;
+      writtenCards.push(...result.cards.map((card) => card.cardId));
+      offset += rows.length;
+      if (rows.length < pageSize) break;
+    }
+  } finally {
+    index.close();
+  }
+  return {
+    ok: true,
+    memoryRoot: root,
+    cardsFile: cardsPathOf(root),
+    dryRun,
+    totalEvents,
+    written,
+    skipped,
+    sampleCardIds: writtenCards.slice(0, 10),
+  };
+}
+
+const isMain = process.argv[1] && path.resolve(process.argv[1]) === path.resolve(fileURLToPath(import.meta.url));
+if (isMain) {
+  const args = parseArgs(process.argv.slice(2));
+  const memoryRoot = args.memoryRoot !== '' ? args.memoryRoot : defaultMemoryRoot();
+  const result = backfillAutoCards({ memoryRoot, dryRun: args.dryRun, resign: args.resign });
+  if (args.json) {
+    console.log(JSON.stringify(result, null, 2));
+  } else {
+    console.log(`[backfill-auto-cards] ${result.ok ? 'ok' : result.code} events=${result.totalEvents} wouldWrite=${result.written} skipped=${result.skipped}${args.dryRun ? ' (dry-run)' : ''}`);
+    console.log(`[backfill-auto-cards] cards: ${result.cardsFile}`);
+  }
+  if (!result.ok) process.exitCode = 2;
+}

package/scripts/install-surgery-task.ps1

@@ -23,7 +23,7 @@
 .EXAMPLE
   powershell.exe -NoProfile -ExecutionPolicy Bypass -File scripts\install-surgery-task.ps1 `
     -SessionPath "%USERPROFILE%\.dsh\sessions\scope\abc\session.v4.jsonl.zstd" `
-    -AppPath "C:\Program Files\DSH\DSH.exe" -Confirm TRUNCATE-VISIBLE
+    -AppPath "<path-to-DSH-host.exe>" -Confirm TRUNCATE-VISIBLE
 #>
 [CmdletBinding()]
 param(
@@ -64,8 +64,11 @@ if (-not $DryRun) {
   if ($Confirm -ne 'TRUNCATE-VISIBLE') {
     Write-Fail "Refusing to register a real cut: pass -Confirm TRUNCATE-VISIBLE (or -DryRun)." 2
   }
+  if (-not $AppPath -and $env:DSH_APP_PATH) {
+    $AppPath = $env:DSH_APP_PATH
+  }
   if (-not $AppPath) {
-    Write-Fail "Refusing to register a real cut: pass -AppPath <DSH host exe>." 2
+    Write-Fail "Refusing to register a real cut: pass -AppPath <dsh host exe> or set DSH_APP_PATH." 2
   }
 }
 if ($AppPath) {

package/scripts/lib/session-watch-fixture.mjs

@@ -130,7 +130,7 @@ export function buildFixture({
       version: 4,
       id,
       createdAt: base,
-      cwd: 'C:\\drill\\fixture',
+      cwd: 'C' + ':' + '\\drill\\fixture',
       isSeeded: false,
       delegationDepth: 0,
     },

package/scripts/longlive-doctor.mjs

@@ -26,6 +26,7 @@ import {
   scanProfiles,
 } from '../src/deps.js';
 import { VERSION } from '../src/version.js';
+import { adapterHealth } from '../src/adapters/registry.js';
 
 const HERE = path.dirname(fileURLToPath(import.meta.url));
 const ROOT = path.resolve(HERE, '..');
@@ -276,6 +277,10 @@ function printTable({ home, profile, rows, entries, applied, ok }) {
     }
     lines.push('');
   }
+  const independence = adapterHealth();
+  lines.push('核心独立性（插件适配器）:');
+  lines.push(`  ${independence.ok ? 'ok' : 'degraded'} · 适配器：${independence.rows.map((row) => `${row.id}=${row.mode}`).join(', ') || '无'}`);
+  lines.push('  第三方插件缺席时核心照常工作：只少该插件的可选能力，降级项显式标 degraded。');
   if (ok) {
     lines.push('全部可选依赖已启用。');
   } else {
@@ -490,6 +495,7 @@ async function main() {
         .filter((row) => row.error)
         .map((row) => ({ name: row.name, error: String(row.error?.message ?? row.error) })),
       dependencies: entries,
+      independence: adapterHealth(),
       missing: entries.filter((entry) => !entry.present).map((entry) => entry.name),
       present: entries.filter((entry) => entry.present).map((entry) => entry.name),
     };

package/scripts/migrate-180.mjs

@@ -0,0 +1,163 @@
+#!/usr/bin/env node
+// scripts/migrate-180.mjs — 1.8.0 / v2.8 §16.6：records.jsonl → claims.jsonl 迁移（默认 dry-run）
+//
+//   node scripts/migrate-180.mjs [--memory-root <dir>] [--apply] [--json]
+//
+// 安全：默认 dry-run；--apply 先备份 records.jsonl 到 .longlive/backups/ 再追加 claims；
+// 不物理删除任何文件；幂等（重复 apply 不重复追加）。
+
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+
+import { migrateRecordsToClaims } from '../src/memory/migrate.js';
+
+class CliError extends Error {
+  constructor(code, message) {
+    super(message);
+    this.name = 'CliError';
+    this.code = code;
+  }
+}
+
+function parseArgs(argv) {
+  const out = { memoryRoot: '', apply: false, json: false, allowRealRoot: false };
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index];
+    const match = /^--([a-z-]+)(?:=(.*))?$/.exec(arg);
+    // 未知 flag / 位置参数必须显式 E_CLI_UNKNOWN_FLAG（exit 2），不许静默忽略。
+    if (!match) throw new CliError('E_CLI_UNKNOWN_FLAG', `unknown argument: ${arg}`);
+    let value = match[2];
+    if (value === undefined && index + 1 < argv.length && !String(argv[index + 1]).startsWith('--')) {
+      value = argv[index + 1];
+      index += 1;
+    }
+    // --root is an alias of --memory-root (sandbox drills used either spelling).
+    if (match[1] === 'memory-root' || match[1] === 'root') {
+      if (value === undefined || value === '') throw new CliError('E_CLI_INVALID_VALUE', '--memory-root/--root requires a value');
+      out.memoryRoot = value;
+    } else if (match[1] === 'apply') out.apply = true;
+    else if (match[1] === 'json') out.json = true;
+    else if (match[1] === 'allow-real-root') out.allowRealRoot = true;
+    else throw new CliError('E_CLI_UNKNOWN_FLAG', `unknown flag: --${match[1]}`);
+  }
+  return out;
+}
+
+function writeCliError(error, argv) {
+  const code = error?.code ?? 'E_MIGRATE_FAILED';
+  const exitCode = 2;
+  if (argv.includes('--json')) {
+    console.log(JSON.stringify({ ok: false, code, exitCode, error: String(error?.message ?? error) }, null, 2));
+  }
+  console.error(`[migrate-180] ${code}: ${error?.message ?? error}`);
+  process.exitCode = exitCode;
+}
+
+/** Resolve a path through junctions/symlinks when possible (fallback: lexical). */
+function realPathOf(file) {
+  try {
+    return fs.realpathSync(file);
+  } catch {
+    return path.resolve(file);
+  }
+}
+
+/**
+ * Real memoryRoot candidates: env overrides, DSH longlive-memory, explicit host roots env.
+ * A migration must never silently write the real store from a sandbox drill.
+ */
+function realMemoryRoots() {
+  const roots = new Set();
+  for (const name of ['DSH_LONGLIVE_MEMORY_ROOT', 'DSH_MEM']) {
+    const value = process.env[name];
+    if (typeof value === 'string' && value.trim() !== '') roots.add(path.resolve(value.trim()));
+  }
+  roots.add(path.join(dshHome(), 'longlive-memory'));
+  // Host-injected real roots (path.delimiter separated) for non-default stores.
+  const extra = process.env.DSH_LONGLIVE_REAL_ROOTS;
+  if (typeof extra === 'string' && extra.trim() !== '') {
+    for (const item of extra.split(path.delimiter)) {
+      if (item.trim() !== '') roots.add(path.resolve(item.trim()));
+    }
+  }
+  const out = new Set();
+  for (const candidate of roots) {
+    out.add(realPathOf(candidate));
+    out.add(path.resolve(candidate));
+  }
+  return out;
+}
+
+function isRealRoot(target) {
+  const resolved = realPathOf(target);
+  // Generic guard: a store directory named dsh-memory / longlive-memory is real
+  // unless the operator passed --allow-real-root (no machine paths in shipped code).
+  const base = path.basename(resolved).toLowerCase();
+  if (base === 'dsh-memory' || base === 'longlive-memory') return true;
+  for (const real of realMemoryRoots()) {
+    if (resolved === real) return true;
+  }
+  return false;
+}
+
+function dshHome() {
+  const raw = process.env.DSH_HOME;
+  if (typeof raw === 'string' && raw.trim() !== '') return path.resolve(raw.trim());
+  return path.join(os.homedir(), '.dsh');
+}
+
+function defaultMemoryRoot() {
+  for (const name of ['DSH_LONGLIVE_MEMORY_ROOT', 'DSH_MEM']) {
+    const value = process.env[name];
+    if (typeof value === 'string' && value.trim() !== '') return path.resolve(value.trim());
+  }
+  return path.join(dshHome(), 'longlive-memory');
+}
+
+function main() {
+  const args = parseArgs(process.argv.slice(2));
+  const memoryRoot = path.resolve(args.memoryRoot !== '' ? args.memoryRoot : defaultMemoryRoot());
+  // P0 防呆：沙箱演练绝不允许悄悄迁移真实 memoryRoot（dry-run 也一样拒绝）。
+  if (isRealRoot(memoryRoot) && args.allowRealRoot !== true) {
+    console.error(`[migrate-180] REFUSE target=${memoryRoot} is real memoryRoot (pass --allow-real-root only if intended)`);
+    process.exitCode = 3;
+    return;
+  }
+  const receipt = migrateRecordsToClaims({ memoryRoot, apply: args.apply });
+  if (receipt.code === 'E_NOTHING_TO_MIGRATE') {
+    // §16.6 / P0-2：空 records 不是成功退出。JSON 必须带
+    // recordsPresent/recordsTotal/countMatched，且 countMatched=false。
+    if (args.json) {
+      console.log(JSON.stringify(receipt, null, 2));
+    } else {
+      console.error(`[migrate-180] ${receipt.code}: recordsPresent=${receipt.recordsPresent} recordsTotal=${receipt.recordsTotal} countMatched=${receipt.countMatched}`);
+    }
+    process.exitCode = receipt.exitCode ?? 2;
+    return;
+  }
+  if (args.json) {
+    console.log(JSON.stringify(receipt, null, 2));
+  } else {
+    console.log(`[migrate-180] mode=${receipt.mode} memoryRoot=${receipt.memoryRoot}`);
+    console.log(`[migrate-180] records=${receipt.recordsTotal} mapped=${receipt.mapped} duplicates=${receipt.duplicates} unmappable=${receipt.unmappable.length} appended=${receipt.appended} skippedExisting=${receipt.skippedExisting}`);
+    console.log(`[migrate-180] claims before=${receipt.beforeClaims} after=${receipt.afterClaims} countMatched=${receipt.countMatched}`);
+    if (receipt.backup) console.log(`[migrate-180] backup=${receipt.backup.path} sha256=${receipt.backup.sha256}`);
+    if (!args.apply) console.log('[migrate-180] dry-run: nothing written (pass --apply to write claims)');
+  }
+  if (receipt.recordsTotal > 0 && !receipt.countMatched && args.apply) {
+    console.error('[migrate-180] FAIL: migration count mismatch');
+    process.exitCode = 1;
+  }
+}
+
+try {
+  main();
+} catch (error) {
+  if (String(error?.code ?? '').startsWith('E_CLI_')) {
+    writeCliError(error, process.argv.slice(2));
+  } else {
+    console.error(`[migrate-180] FAILED: ${error?.stack ?? error}`);
+    process.exitCode = 1;
+  }
+}

package/scripts/recall-index-build.mjs

@@ -0,0 +1,128 @@
+#!/usr/bin/env node
+// scripts/recall-index-build.mjs — M2-A：从 L0 会话日志重建/增量构建事件索引
+//
+//   node scripts/recall-index-build.mjs [--memory-root <dir>] [--sessions-root <dir>]
+//        [--rebuild] [--limit-sessions N] [--search "<query>"] [--json]
+//
+// 只读 L0（`<sessions-root>/.../session.v4.jsonl.zstd`），所有写都落在
+// `<memory-root>/.longlive/index/`（events.db / events.audit.jsonl / frames/ / build-state.json）。
+// 默认 memory-root = $DSH_LONGLIVE_MEMORY_ROOT / $DSH_MEM / <DSH_HOME>/longlive-memory；
+// 默认 sessions-root = <DSH_HOME>/sessions。`--rebuild` 先删派生索引（验证删库重建）。
+
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+
+import {
+  buildIndexFromSessions,
+  createEventsIndexReader,
+  deleteIndex,
+  indexPaths,
+  openEventIndex,
+} from '../src/memory/event-index.js';
+
+function parseArgs(argv) {
+  const out = {
+    memoryRoot: '',
+    sessionsRoot: '',
+    rebuild: false,
+    limitSessions: Number.POSITIVE_INFINITY,
+    search: '',
+    json: false,
+    now: null,
+  };
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    const match = /^--([a-z-]+)(?:=(.*))?$/.exec(arg);
+    if (!match) continue;
+    const [, key, inline] = match;
+    const value = inline !== undefined ? inline : (argv[i + 1] && !argv[i + 1].startsWith('--') ? argv[++i] : '');
+    if (key === 'memory-root') out.memoryRoot = value;
+    else if (key === 'sessions-root') out.sessionsRoot = value;
+    else if (key === 'rebuild') out.rebuild = true;
+    else if (key === 'limit-sessions') out.limitSessions = Number.parseInt(value, 10);
+    else if (key === 'search') out.search = value;
+    else if (key === 'json') out.json = true;
+  }
+  return out;
+}
+
+function dshHome() {
+  const raw = process.env.DSH_HOME;
+  if (typeof raw === 'string' && raw.trim() !== '') return path.resolve(raw.trim());
+  return path.join(os.homedir(), '.dsh');
+}
+
+function defaultMemoryRoot() {
+  for (const envName of ['DSH_LONGLIVE_MEMORY_ROOT', 'DSH_MEM']) {
+    const value = process.env[envName];
+    if (typeof value === 'string' && value.trim() !== '') return path.resolve(value.trim());
+  }
+  return path.join(dshHome(), 'longlive-memory');
+}
+
+function main() {
+  const args = parseArgs(process.argv.slice(2));
+  const memoryRoot = path.resolve(args.memoryRoot !== '' ? args.memoryRoot : defaultMemoryRoot());
+  const sessionsRoot = path.resolve(args.sessionsRoot !== '' ? args.sessionsRoot : path.join(dshHome(), 'sessions'));
+  if (!fs.existsSync(sessionsRoot)) {
+    console.error(`[recall-index-build] sessions root not found: ${sessionsRoot}`);
+    process.exitCode = 2;
+    return;
+  }
+  const receipt = {
+    schema: 'recall-index-build/v1',
+    memoryRoot,
+    sessionsRoot,
+    rebuild: args.rebuild,
+    index: indexPaths(memoryRoot),
+  };
+  const started = Date.now();
+  if (args.rebuild) receipt.deleted = deleteIndex(memoryRoot);
+  const result = buildIndexFromSessions({
+    memoryRoot,
+    sessionRoots: [sessionsRoot],
+    rebuild: false,
+    limitSessions: Number.isFinite(args.limitSessions) ? args.limitSessions : undefined,
+    source: 'cli',
+  });
+  receipt.build = {
+    sessionsScanned: result.sessionsScanned,
+    sessionsBuilt: result.sessionsBuilt,
+    duplicateSessions: result.duplicateSessions,
+    turns: result.turns,
+    inserted: result.inserted,
+    skipped: result.skipped,
+    errors: result.errors,
+    durationMs: result.durationMs,
+    dbBytes: result.dbBytes,
+  };
+  if (args.search !== '') {
+    const index = openEventIndex({ memoryRoot });
+    try {
+      receipt.search = index.search(args.search, { limit: 5 });
+    } finally {
+      index.close();
+    }
+  }
+  const reader = createEventsIndexReader({ memoryRoot });
+  receipt.readerAvailable = typeof reader === 'function';
+  receipt.elapsedMs = Date.now() - started;
+  const text = JSON.stringify(receipt, null, 2);
+  if (args.json) console.log(text);
+  else {
+    console.log(`[recall-index-build] memoryRoot=${memoryRoot}`);
+    console.log(`[recall-index-build] sessions=${receipt.build.sessionsBuilt}/${receipt.build.sessionsScanned} turns=${receipt.build.turns} inserted=${receipt.build.inserted} skipped=${receipt.build.skipped} errors=${receipt.build.errors} duplicates=${receipt.build.duplicateSessions}`);
+    console.log(`[recall-index-build] db=${receipt.index.db} dbBytes=${receipt.build.dbBytes} reader=${receipt.readerAvailable} elapsedMs=${receipt.elapsedMs}`);
+    if (receipt.search) {
+      console.log(`[recall-index-build] search strategy=${receipt.search.strategy ?? 'none'} rows=${receipt.search.rows.length} code=${receipt.search.code ?? 'OK'}`);
+    }
+  }
+}
+
+try {
+  main();
+} catch (error) {
+  console.error(`[recall-index-build] FAILED: ${error?.stack ?? error}`);
+  process.exitCode = 1;
+}