@modusensus/dsh-mneme 0.8.14 → 0.8.15

package/test/inject-pools.test.js

@@ -1,194 +1,194 @@
-import test from "node:test";
-import assert from "node:assert/strict";
-import { createStore } from "../src/store.js";
-import { createService } from "../src/service.js";
-import { createInjector } from "../src/inject.js";
-import { createSettings } from "../src/settings.js";
-import { createTools } from "../src/tools.js";
-import { MEMORY_GUIDE_SECTION } from "../src/guide.js";
-
-// 回归（issue #249 第一批）：注入形态的两件事——
-// ①能力说明（injectGuidanceEnabled）：工具描述补判断指引 + order 150 一次性
-//   总则段（常驻段必须同会话稳定，不逐轮复读）；
-// ②B1 pin 池（pinnedInjectBudget）：约束/偏好不进相关性竞争与跨轮轮换、逐字
-//   保真、排在块内排序之前，且有独立小预算（不占 maxInjectedItems 名额）。
-// 本文件给的是裸 config，两个键缺省时都按关/零算：能力说明的解析默认值由 config.js
-// 的 schema 给出（#249 第二批起为开，另见 test/inject-parent-gate.test.js），pin 池
-// 的默认值是 0。
-
-const userMsg = (text) => ({
-  type: "user/message",
-  data: { source: { kind: "user" }, content: [{ type: "text", text }] }
-});
-
-function setup(over = {}) {
-  const store = createStore(":memory:");
-  // 同一份 config 同时交给 service 与 injector——生产里是同一个 cfg 对象，
-  // 而 pin 池的预算读取发生在 service 内、能力说明的开关读取发生在 injector 内。
-  const config = { maxInjectedItems: 3, importanceThreshold: 3, ...over };
-  const service = createService({ store, mirror: null, config });
-  const settings = createSettings(store.db);
-  const contexts = [];
-  const sections = [];
-  const ctx = {
-    systemPrompt: {
-      context(def) { contexts.push(def); return () => {}; },
-      section(def) { sections.push(def); return () => {}; }
-    }
-  };
-  createInjector(ctx, service, settings, config);
-  const text = (query = "") => contexts[0].text({
-    agent: { session: { id: "s1", snapshotEvents: () => (query ? [userMsg(query)] : []) } }
-  });
-  return { store, service, contexts, sections, text };
-}
-
-const types = (body) => [...body.matchAll(/- \[(\w+)\]/g)].map((m) => m[1]);
-const leadPreference = (body) => body.match(/- \[preference\] ([^（(]*)/)?.[1]?.trim();
-
-test("#249: default (pinned budget 0) keeps the legacy order and adds no annotation", () => {
-  const { service, text } = setup({});
-  service.saveWithDedupe({ type: "summary", title: "总览", content: "总览内容", importance: 5 });
-  service.saveWithDedupe({ type: "preference", title: "偏好A", content: "偏好内容", importance: 5 });
-  const body = text();
-  // 现状档位：蒸馏摘要(0) 先于偏好(1)。pin 关闭时不得出现「偏好前置」这一改动。
-  assert.deepEqual(types(body), ["summary", "preference"], "budget 0 → legacy priority order");
-  assert.ok(!body.includes("未展示"), "pool off → no overflow annotation");
-});
-
-test("#249: pinned entries lead the block and sit outside maxInjectedItems", () => {
-  const { service, text } = setup({ maxInjectedItems: 2, pinnedInjectBudget: 2 });
-  service.saveWithDedupe({ type: "summary", title: "总览", content: "总览内容", importance: 5 });
-  service.saveWithDedupe({ type: "preference", title: "偏好A", content: "偏好甲内容", importance: 5 });
-  service.saveWithDedupe({ type: "preference", title: "偏好B", content: "偏好乙内容", importance: 5 });
-  service.saveWithDedupe({ type: "decision", title: "决定甲", content: "决定内容", importance: 5 });
-  const body = text();
-  const seq = types(body);
-  assert.deepEqual(seq.slice(0, 2), ["preference", "preference"], "pin pool leads the block");
-  assert.deepEqual(seq.slice(2), ["summary", "decision"], "general slots still fill to maxItems");
-  assert.equal(seq.length, 4, "pinned entries do not consume maxInjectedItems slots");
-});
-
-test("#249: over-budget pinned entries are annotated with the truly hidden count", () => {
-  const { service, text } = setup({ maxInjectedItems: 1, pinnedInjectBudget: 1 });
-  for (let i = 0; i < 3; i++) {
-    service.saveWithDedupe({ type: "preference", title: `偏好${i}`, content: `第 ${i} 条偏好内容`, importance: 5 });
-  }
-  const body = text();
-  // 3 条同类里 pref0 被 pin、pref1 进了 general 槽（真的在块内），只有 pref2 没展示。
-  // 按 eligible - pinned 直接相减会把 pref1 也算成未展示——虚报（#266 评审实测）。
-  assert.ok(body.includes("偏好1"), "the over-budget one that made it into a general slot is really shown");
-  assert.ok(body.includes("另有 1 条未展示"), `annotation must carry the hidden count: ${body}`);
-  assert.ok(!body.includes("另有 2 条"), "no double counting");
-});
-
-test("#249: pinned entries are exempt from cross-turn rotation", () => {
-  const { service, text } = setup({ maxInjectedItems: 1, pinnedInjectBudget: 1, injectRotationTurns: 2 });
-  service.saveWithDedupe({ type: "preference", title: "偏好A", content: "偏好甲内容", importance: 5 });
-  service.saveWithDedupe({ type: "preference", title: "偏好B", content: "偏好乙内容", importance: 5 });
-  service.saveWithDedupe({ type: "decision", title: "决定甲", content: "决定内容", importance: 5 });
-  service.saveWithDedupe({ type: "decision", title: "决定乙", content: "另一决定", importance: 5 });
-  const first = leadPreference(text("第一个问题"));
-  const second = leadPreference(text("第二个问题"));
-  assert.ok(first, "pin entry is rendered in turn 1");
-  assert.equal(first, second, "pin stays at the block head across turns (not rotated away)");
-});
-
-test("#249: pinned content is verbatim below the hard ceiling", () => {
-  const { service, text } = setup({ maxInjectedItems: 1, pinnedInjectBudget: 1, injectContentMaxChars: 60 });
-  const long = "约束原文".repeat(60); // 240 chars, 4× the per-entry cap
-  service.saveWithDedupe({ type: "preference", title: "长偏好", content: long, importance: 5 });
-  const body = text();
-  assert.ok(body.includes(long), "240-char pinned body goes in verbatim (injectContentMaxChars does not apply)");
-  assert.ok(!body.includes("已截断"), "no truncation hint needed below the ceiling");
-});
-
-test("#249: pinned content still honours the hard ceiling and says so", () => {
-  const { service, text } = setup({ maxInjectedItems: 1, pinnedInjectBudget: 1 });
-  const huge = "超长约束".repeat(900); // 3600 chars
-  service.saveWithDedupe({ type: "preference", title: "超长偏好", content: huge, importance: 5 });
-  const body = text();
-  assert.ok(!body.includes(huge), "a runaway pinned entry cannot flood the standing block");
-  assert.ok(body.includes("已截断"), "the cut is reported, never silent");
-});
-
-test("#249: pinned content does not eat the general block budget", () => {
-  // 一条 pin 就够击穿 MAX_BLOCK（PINNED_CONTENT_MAX 2000 > MAX_BLOCK 1500）：pin
-  // 若照旧扣共享预算，budget 变负后同一轮的所有普通候选都会被压成标题行。
-  const { service, text } = setup({ maxInjectedItems: 2, pinnedInjectBudget: 1 });
-  const longPinned = "约束原文".repeat(470); // 1880 字符，仍在 2000 硬顶内（不带截断）
-  service.saveWithDedupe({ type: "preference", title: "长约束", content: longPinned, importance: 5 });
-  service.saveWithDedupe({ type: "summary", title: "总览", content: "总览正文必须带出来", importance: 5 });
-  const body = text();
-  assert.ok(body.includes(longPinned), "pin 逐字保真");
-  assert.ok(body.includes("总览正文必须带出来"), "普通候选照旧拿完整正文：pin 不占共享预算");
-});
-
-test("#249: capability guide registers exactly once, and stays off when the key is absent", () => {
-  // 这里给的是裸 config（不经 schema 解析），所以「缺键 = 不生效」；生产默认值
-  // 由 config.js 的 schema 给出（#249 第二批起为 true），那条锁在
-  // test/inject-parent-gate.test.js。
-  const off = setup({});
-  assert.equal(off.sections.length, 0, "缺键 → 不注册提示段");
-
-  const on = setup({ injectGuidanceEnabled: true });
-  assert.equal(on.sections.length, 1, "exactly one guide section");
-  assert.equal(on.sections[0].name, "memory-guide");
-  assert.equal(on.sections[0].order, 150, "插件指引段的既有 order 惯例");
-  assert.equal(on.sections[0].text, MEMORY_GUIDE_SECTION, "常量文本 → 同会话内稳定");
-  // 不可逆工具（memory_delete）的克制指引必须在场：这是全 guide 里唯一有数据
-  // 损失后果的一句，被误删掉的回归要能立刻转红。
-  assert.ok(MEMORY_GUIDE_SECTION.includes("memory_delete"), "guide keeps the irreversible-tool warning");
-  // memory_forget 的副作用面同样不能被写窄：工具描述是「挡注入 + 从检索与列表里
-  // 消失」，只写「只挡注入」会让模型低估它（#249 文案定稿时专门改过这一句）。
-  assert.ok(
-    MEMORY_GUIDE_SECTION.includes("memory_forget suppresses it from injection, search results and lists"),
-    "reversible-tools rule states memory_forget's full reach"
-  );
-  // 优先序那条不得让模型拿 memory_search 去核对当前指令/仓库：它只搜记忆库，
-  // 搜不到「现在」——把它写成验证手段会换来一轮无效查询 + 继续采信陈旧记忆。
-  assert.ok(
-    MEMORY_GUIDE_SECTION.includes("memory_search searches stored memories only"),
-    "precedence rule points at the instruction/repository, not at memory_search"
-  );
-  // 不逐轮复读：通则只出现在一次性段落，每轮内容块里不重复。
-  on.service.saveWithDedupe({ type: "preference", title: "偏好A", content: "偏好内容", importance: 5 });
-  assert.ok(!on.text().includes("[dsh-mneme memory]"), "guide text must not ride the per-turn block");
-});
-
-test("#249: capability guide extends only the judgement-heavy tool descriptions", () => {
-  const toolsFor = (flags) => {
-    const store = createStore(":memory:");
-    const service = createService({ store, mirror: null, config: {} });
-    const registered = [];
-    const ctx = { tools: { register(def) { registered.push(def); return () => {}; } } };
-    createTools(ctx, service, { ...flags }, null);
-    return new Map(registered.map((t) => [t.name, t.description]));
-  };
-  const off = toolsFor({});
-  const on = toolsFor({ injectGuidanceEnabled: true });
-  const changed = [...off.keys()].filter((name) => off.get(name) !== on.get(name)).sort();
-  assert.deepEqual(changed, ["memory_save", "memory_search"], "only the two 'when to use' tools gain guidance");
-  for (const name of changed) {
-    assert.ok(on.get(name).startsWith(off.get(name)), `${name}: guidance is appended, original text untouched`);
-  }
-});
-
-test("#249: memory_save guidance states the scope default in the safe direction", () => {
-  // #164 口径：scope 参数漏填的后果是单向的——未标注 = 处处可见（NULL 恒可见），
-  // 而显式 scope 会让记忆在离开他 scope 时被降权（A2 软隔离 ×0.5，保留可见）或直接
-  // 过滤（A3 strictScope，默认关）。所以这一句必须同时给出「什么时候标注」与「不确定
-  // 就都别填」，只写前半句会把模型推向「能填就填」，正好制造那个单向损失。
-  const store = createStore(":memory:");
-  const service = createService({ store, mirror: null, config: {} });
-  const registered = [];
-  createTools({ tools: { register(def) { registered.push(def); return () => {}; } } }, service, { injectGuidanceEnabled: true }, null);
-  const text = registered.find((t) => t.name === "memory_save").description;
-  assert.ok(text.includes("declare workspace_scope / agent_scope"), "scope declaration rule is present");
-  assert.ok(text.includes("otherwise leave both out"), "the no-scope default is stated, not just the declare case");
-  // 措辞回归锁：默认配置（strictScope 关）下他 scope 只是降权可见，不是消失。写成
-  // 「静默消失」既是错的，也会造出本来不存在的隐私预期。
-  assert.ok(!text.includes("silently disappears"), "must not claim a narrowed memory disappears silently");
-  // 回归锁：这句话不能只落在总则里（工具描述才是常驻、零注入成本的那个承载位）。
-  assert.ok(!MEMORY_GUIDE_SECTION.includes("declare workspace_scope / agent_scope"), "scope rule stays a per-tool rule, not a sixth general rule");
-});
+import test from "node:test";
+import assert from "node:assert/strict";
+import { createStore } from "../src/store.js";
+import { createService } from "../src/service.js";
+import { createInjector } from "../src/inject.js";
+import { createSettings } from "../src/settings.js";
+import { createTools } from "../src/tools.js";
+import { MEMORY_GUIDE_SECTION } from "../src/guide.js";
+
+// 回归（issue #249 第一批）：注入形态的两件事——
+// ①能力说明（injectGuidanceEnabled）：工具描述补判断指引 + order 150 一次性
+//   总则段（常驻段必须同会话稳定，不逐轮复读）；
+// ②B1 pin 池（pinnedInjectBudget）：约束/偏好不进相关性竞争与跨轮轮换、逐字
+//   保真、排在块内排序之前，且有独立小预算（不占 maxInjectedItems 名额）。
+// 本文件给的是裸 config，两个键缺省时都按关/零算：能力说明的解析默认值由 config.js
+// 的 schema 给出（#249 第二批起为开，另见 test/inject-parent-gate.test.js），pin 池
+// 的默认值是 0。
+
+const userMsg = (text) => ({
+  type: "user/message",
+  data: { source: { kind: "user" }, content: [{ type: "text", text }] }
+});
+
+function setup(over = {}) {
+  const store = createStore(":memory:");
+  // 同一份 config 同时交给 service 与 injector——生产里是同一个 cfg 对象，
+  // 而 pin 池的预算读取发生在 service 内、能力说明的开关读取发生在 injector 内。
+  const config = { maxInjectedItems: 3, importanceThreshold: 3, ...over };
+  const service = createService({ store, mirror: null, config });
+  const settings = createSettings(store.db);
+  const contexts = [];
+  const sections = [];
+  const ctx = {
+    systemPrompt: {
+      context(def) { contexts.push(def); return () => {}; },
+      section(def) { sections.push(def); return () => {}; }
+    }
+  };
+  createInjector(ctx, service, settings, config);
+  const text = (query = "") => contexts[0].text({
+    agent: { session: { id: "s1", snapshotEvents: () => (query ? [userMsg(query)] : []) } }
+  });
+  return { store, service, contexts, sections, text };
+}
+
+const types = (body) => [...body.matchAll(/- \[(\w+)\]/g)].map((m) => m[1]);
+const leadPreference = (body) => body.match(/- \[preference\] ([^（(]*)/)?.[1]?.trim();
+
+test("#249: default (pinned budget 0) keeps the legacy order and adds no annotation", () => {
+  const { service, text } = setup({});
+  service.saveWithDedupe({ type: "summary", title: "总览", content: "总览内容", importance: 5 });
+  service.saveWithDedupe({ type: "preference", title: "偏好A", content: "偏好内容", importance: 5 });
+  const body = text();
+  // 现状档位：蒸馏摘要(0) 先于偏好(1)。pin 关闭时不得出现「偏好前置」这一改动。
+  assert.deepEqual(types(body), ["summary", "preference"], "budget 0 → legacy priority order");
+  assert.ok(!body.includes("未展示"), "pool off → no overflow annotation");
+});
+
+test("#249: pinned entries lead the block and sit outside maxInjectedItems", () => {
+  const { service, text } = setup({ maxInjectedItems: 2, pinnedInjectBudget: 2 });
+  service.saveWithDedupe({ type: "summary", title: "总览", content: "总览内容", importance: 5 });
+  service.saveWithDedupe({ type: "preference", title: "偏好A", content: "偏好甲内容", importance: 5 });
+  service.saveWithDedupe({ type: "preference", title: "偏好B", content: "偏好乙内容", importance: 5 });
+  service.saveWithDedupe({ type: "decision", title: "决定甲", content: "决定内容", importance: 5 });
+  const body = text();
+  const seq = types(body);
+  assert.deepEqual(seq.slice(0, 2), ["preference", "preference"], "pin pool leads the block");
+  assert.deepEqual(seq.slice(2), ["summary", "decision"], "general slots still fill to maxItems");
+  assert.equal(seq.length, 4, "pinned entries do not consume maxInjectedItems slots");
+});
+
+test("#249: over-budget pinned entries are annotated with the truly hidden count", () => {
+  const { service, text } = setup({ maxInjectedItems: 1, pinnedInjectBudget: 1 });
+  for (let i = 0; i < 3; i++) {
+    service.saveWithDedupe({ type: "preference", title: `偏好${i}`, content: `第 ${i} 条偏好内容`, importance: 5 });
+  }
+  const body = text();
+  // 3 条同类里 pref0 被 pin、pref1 进了 general 槽（真的在块内），只有 pref2 没展示。
+  // 按 eligible - pinned 直接相减会把 pref1 也算成未展示——虚报（#266 评审实测）。
+  assert.ok(body.includes("偏好1"), "the over-budget one that made it into a general slot is really shown");
+  assert.ok(body.includes("另有 1 条未展示"), `annotation must carry the hidden count: ${body}`);
+  assert.ok(!body.includes("另有 2 条"), "no double counting");
+});
+
+test("#249: pinned entries are exempt from cross-turn rotation", () => {
+  const { service, text } = setup({ maxInjectedItems: 1, pinnedInjectBudget: 1, injectRotationTurns: 2 });
+  service.saveWithDedupe({ type: "preference", title: "偏好A", content: "偏好甲内容", importance: 5 });
+  service.saveWithDedupe({ type: "preference", title: "偏好B", content: "偏好乙内容", importance: 5 });
+  service.saveWithDedupe({ type: "decision", title: "决定甲", content: "决定内容", importance: 5 });
+  service.saveWithDedupe({ type: "decision", title: "决定乙", content: "另一决定", importance: 5 });
+  const first = leadPreference(text("第一个问题"));
+  const second = leadPreference(text("第二个问题"));
+  assert.ok(first, "pin entry is rendered in turn 1");
+  assert.equal(first, second, "pin stays at the block head across turns (not rotated away)");
+});
+
+test("#249: pinned content is verbatim below the hard ceiling", () => {
+  const { service, text } = setup({ maxInjectedItems: 1, pinnedInjectBudget: 1, injectContentMaxChars: 60 });
+  const long = "约束原文".repeat(60); // 240 chars, 4× the per-entry cap
+  service.saveWithDedupe({ type: "preference", title: "长偏好", content: long, importance: 5 });
+  const body = text();
+  assert.ok(body.includes(long), "240-char pinned body goes in verbatim (injectContentMaxChars does not apply)");
+  assert.ok(!body.includes("已截断"), "no truncation hint needed below the ceiling");
+});
+
+test("#249: pinned content still honours the hard ceiling and says so", () => {
+  const { service, text } = setup({ maxInjectedItems: 1, pinnedInjectBudget: 1 });
+  const huge = "超长约束".repeat(900); // 3600 chars
+  service.saveWithDedupe({ type: "preference", title: "超长偏好", content: huge, importance: 5 });
+  const body = text();
+  assert.ok(!body.includes(huge), "a runaway pinned entry cannot flood the standing block");
+  assert.ok(body.includes("已截断"), "the cut is reported, never silent");
+});
+
+test("#249: pinned content does not eat the general block budget", () => {
+  // 一条 pin 就够击穿 MAX_BLOCK（PINNED_CONTENT_MAX 2000 > MAX_BLOCK 1500）：pin
+  // 若照旧扣共享预算，budget 变负后同一轮的所有普通候选都会被压成标题行。
+  const { service, text } = setup({ maxInjectedItems: 2, pinnedInjectBudget: 1 });
+  const longPinned = "约束原文".repeat(470); // 1880 字符，仍在 2000 硬顶内（不带截断）
+  service.saveWithDedupe({ type: "preference", title: "长约束", content: longPinned, importance: 5 });
+  service.saveWithDedupe({ type: "summary", title: "总览", content: "总览正文必须带出来", importance: 5 });
+  const body = text();
+  assert.ok(body.includes(longPinned), "pin 逐字保真");
+  assert.ok(body.includes("总览正文必须带出来"), "普通候选照旧拿完整正文：pin 不占共享预算");
+});
+
+test("#249: capability guide registers exactly once, and stays off when the key is absent", () => {
+  // 这里给的是裸 config（不经 schema 解析），所以「缺键 = 不生效」；生产默认值
+  // 由 config.js 的 schema 给出（#249 第二批起为 true），那条锁在
+  // test/inject-parent-gate.test.js。
+  const off = setup({});
+  assert.equal(off.sections.length, 0, "缺键 → 不注册提示段");
+
+  const on = setup({ injectGuidanceEnabled: true });
+  assert.equal(on.sections.length, 1, "exactly one guide section");
+  assert.equal(on.sections[0].name, "memory-guide");
+  assert.equal(on.sections[0].order, 150, "插件指引段的既有 order 惯例");
+  assert.equal(on.sections[0].text, MEMORY_GUIDE_SECTION, "常量文本 → 同会话内稳定");
+  // 不可逆工具（memory_delete）的克制指引必须在场：这是全 guide 里唯一有数据
+  // 损失后果的一句，被误删掉的回归要能立刻转红。
+  assert.ok(MEMORY_GUIDE_SECTION.includes("memory_delete"), "guide keeps the irreversible-tool warning");
+  // memory_forget 的副作用面同样不能被写窄：工具描述是「挡注入 + 从检索与列表里
+  // 消失」，只写「只挡注入」会让模型低估它（#249 文案定稿时专门改过这一句）。
+  assert.ok(
+    MEMORY_GUIDE_SECTION.includes("memory_forget suppresses it from injection, search results and lists"),
+    "reversible-tools rule states memory_forget's full reach"
+  );
+  // 优先序那条不得让模型拿 memory_search 去核对当前指令/仓库：它只搜记忆库，
+  // 搜不到「现在」——把它写成验证手段会换来一轮无效查询 + 继续采信陈旧记忆。
+  assert.ok(
+    MEMORY_GUIDE_SECTION.includes("memory_search searches stored memories only"),
+    "precedence rule points at the instruction/repository, not at memory_search"
+  );
+  // 不逐轮复读：通则只出现在一次性段落，每轮内容块里不重复。
+  on.service.saveWithDedupe({ type: "preference", title: "偏好A", content: "偏好内容", importance: 5 });
+  assert.ok(!on.text().includes("[dsh-mneme memory]"), "guide text must not ride the per-turn block");
+});
+
+test("#249: capability guide extends only the judgement-heavy tool descriptions", () => {
+  const toolsFor = (flags) => {
+    const store = createStore(":memory:");
+    const service = createService({ store, mirror: null, config: {} });
+    const registered = [];
+    const ctx = { tools: { register(def) { registered.push(def); return () => {}; } } };
+    createTools(ctx, service, { ...flags }, null);
+    return new Map(registered.map((t) => [t.name, t.description]));
+  };
+  const off = toolsFor({});
+  const on = toolsFor({ injectGuidanceEnabled: true });
+  const changed = [...off.keys()].filter((name) => off.get(name) !== on.get(name)).sort();
+  assert.deepEqual(changed, ["memory_save", "memory_search"], "only the two 'when to use' tools gain guidance");
+  for (const name of changed) {
+    assert.ok(on.get(name).startsWith(off.get(name)), `${name}: guidance is appended, original text untouched`);
+  }
+});
+
+test("#249: memory_save guidance states the scope default in the safe direction", () => {
+  // #164 口径：scope 参数漏填的后果是单向的——未标注 = 处处可见（NULL 恒可见），
+  // 而显式 scope 会让记忆在离开他 scope 时被降权（A2 软隔离 ×0.5，保留可见）或直接
+  // 过滤（A3 strictScope，默认关）。所以这一句必须同时给出「什么时候标注」与「不确定
+  // 就都别填」，只写前半句会把模型推向「能填就填」，正好制造那个单向损失。
+  const store = createStore(":memory:");
+  const service = createService({ store, mirror: null, config: {} });
+  const registered = [];
+  createTools({ tools: { register(def) { registered.push(def); return () => {}; } } }, service, { injectGuidanceEnabled: true }, null);
+  const text = registered.find((t) => t.name === "memory_save").description;
+  assert.ok(text.includes("declare workspace_scope / agent_scope"), "scope declaration rule is present");
+  assert.ok(text.includes("otherwise leave both out"), "the no-scope default is stated, not just the declare case");
+  // 措辞回归锁：默认配置（strictScope 关）下他 scope 只是降权可见，不是消失。写成
+  // 「静默消失」既是错的，也会造出本来不存在的隐私预期。
+  assert.ok(!text.includes("silently disappears"), "must not claim a narrowed memory disappears silently");
+  // 回归锁：这句话不能只落在总则里（工具描述才是常驻、零注入成本的那个承载位）。
+  assert.ok(!MEMORY_GUIDE_SECTION.includes("declare workspace_scope / agent_scope"), "scope rule stays a per-tool rule, not a sixth general rule");
+});

package/test/inject-recall.test.js

@@ -1,105 +1,105 @@
-import test from "node:test";
-import assert from "node:assert/strict";
-import { createStore } from "../src/store.js";
-import { createService } from "../src/service.js";
-
-// #217 增量（2026-09-19 拍板）：注入是曝光型访问事件，注入终选集落
-// mode='inject' 审计行（跟随 recallRecordDefault；空选不记）。留痕与消费
-// 解耦：heatEnabled=false 时行照写，touch（heat 消费侧）不发生。
-
-function setup(config = {}) {
-  const store = createStore(":memory:");
-  const service = createService({ store, mirror: null, config });
-  // 与 index.js 相同的接线：审计记账 → recall_runs（best effort）
-  service.setRecallRecorder((recall) => {
-    store.saveRecallRun({
-      query: recall.query,
-      mode: recall.mode,
-      topK: recall.topK,
-      threshold: recall.threshold ?? null,
-      candidates: recall.candidates ?? [],
-      created_at: recall.createdAt
-    });
-  });
-  return { store, service };
-}
-
-const injectRow = (store) =>
-  store.listRecallRunsSince(new Date(Date.now() - 86400000).toISOString())
-    .rows.find((r) => r.mode === "inject");
-
-test("注入落账：终选集写一行 mode='inject'，candidates 为实际注入条目", () => {
-  const { store, service } = setup();
-  service.saveWithDedupe({ type: "decision", title: "甲", content: "内容甲", importance: 4 });
-  service.saveWithDedupe({ type: "decision", title: "乙", content: "内容乙", importance: 3 });
-  const selected = service.injectCandidates({ maxItems: 5 });
-  assert.ok(selected.length >= 2);
-  const row = injectRow(store);
-  assert.ok(row, "注入应落一行审计");
-  assert.equal(row.mode, "inject");
-  // recall_runs.query 是 NOT NULL（store.js:61）：注入无查询词，用空串而非 null
-  assert.equal(row.query, "");
-  assert.deepEqual(row.candidates.map((c) => c.id), selected.map((m) => m.id));
-  store.close();
-});
-
-test("recallRecordDefault=false 不落账（与检索侧同门）", () => {
-  const { store, service } = setup({ recallRecordDefault: false });
-  service.saveWithDedupe({ type: "decision", title: "甲", content: "内容甲", importance: 4 });
-  service.injectCandidates({ maxItems: 5 });
-  assert.equal(injectRow(store), undefined);
-  store.close();
-});
-
-test("空选不落账（没有访问发生）", () => {
-  const { store, service } = setup();
-  service.injectCandidates({ maxItems: 5 });
-  assert.equal(injectRow(store), undefined);
-  store.close();
-});
-
-test("留痕与消费解耦：heat 关闭时行照写、touch 不发生", () => {
-  // 显式 false = 生产 config 经 resolveConfig 后的默认值；touchRecalled 的
-  // 门控是 === false 才跳过（service.js:515）
-  const { store, service } = setup({ heatEnabled: false });
-  const m = service.saveWithDedupe({ type: "decision", title: "甲", content: "内容甲", importance: 4 }).memory;
-  const before = store.getById(m.id).last_accessed_at ?? null;
-  service.injectCandidates({ maxItems: 5 });
-  assert.ok(injectRow(store), "heat 关闭时注入行仍照写");
-  assert.equal(store.getById(m.id).last_accessed_at ?? null, before, "touch 属 heat 消费侧，不发生");
-  store.close();
-});
-
-test("聚合：注入候选计入零曝光判定，注入口径单独报数", () => {
-  const { store, service } = setup();
-  service.saveWithDedupe({ type: "decision", title: "被注入", content: "被注入候选的内容说明", importance: 4 });
-  // importance 2 低于注入阈值 3：活跃但不进注入候选 → 零曝光 → 僵尸
-  service.saveWithDedupe({ type: "decision", title: "没动静", content: "低重要度不进注入候选的内容", importance: 2 });
-  // 回拨 created_at 避开 nowIso 同毫秒单调顶推的 1ms 豁免边界：刚写入的记忆
-  // 可能比 recallStats 的 Date.now() 晚 1ms，exemptDays:0 时会落进豁免桶
-  // （宁漏勿误伤），断言就变成看运气。回拨到 10 天前，判定确定性成立。
-  const old = new Date(Date.now() - 10 * 86400000).toISOString();
-  for (const m of store.all()) {
-    store.db.prepare("UPDATE memories SET created_at = ? WHERE id = ?").run(old, m.id);
-  }
-  service.injectCandidates({ maxItems: 5 });
-  const stats = service.recallStats({ windowDays: 30, exemptDays: 0 });
-  assert.equal(stats.injection.runs, 1);
-  assert.ok(stats.injection.injectedCount >= 1);
-  assert.equal(stats.zombie.activeCount, 2);
-  assert.equal(stats.zombie.zombieCount, 1, "被注入的不算僵尸（注入=曝光），未进候选的计僵尸");
-  store.close();
-});
-
-test("slotFillRate = 注入条数 / (轮数 × 槽位数)", () => {
-  const { store, service } = setup();
-  for (let i = 0; i < 3; i++) {
-    service.saveWithDedupe({ type: "decision", title: `t${i}`, content: "x", importance: 4 });
-  }
-  service.injectCandidates({ maxItems: 5 });
-  const stats = service.recallStats({ windowDays: 30, exemptDays: 0, maxInjectSlots: 4 });
-  assert.equal(stats.injection.runs, 1);
-  assert.equal(stats.injection.injectedCount, 3);
-  assert.equal(stats.injection.slotFillRate, 3 / 4);
-  store.close();
-});
+import test from "node:test";
+import assert from "node:assert/strict";
+import { createStore } from "../src/store.js";
+import { createService } from "../src/service.js";
+
+// #217 增量（2026-09-19 拍板）：注入是曝光型访问事件，注入终选集落
+// mode='inject' 审计行（跟随 recallRecordDefault；空选不记）。留痕与消费
+// 解耦：heatEnabled=false 时行照写，touch（heat 消费侧）不发生。
+
+function setup(config = {}) {
+  const store = createStore(":memory:");
+  const service = createService({ store, mirror: null, config });
+  // 与 index.js 相同的接线：审计记账 → recall_runs（best effort）
+  service.setRecallRecorder((recall) => {
+    store.saveRecallRun({
+      query: recall.query,
+      mode: recall.mode,
+      topK: recall.topK,
+      threshold: recall.threshold ?? null,
+      candidates: recall.candidates ?? [],
+      created_at: recall.createdAt
+    });
+  });
+  return { store, service };
+}
+
+const injectRow = (store) =>
+  store.listRecallRunsSince(new Date(Date.now() - 86400000).toISOString())
+    .rows.find((r) => r.mode === "inject");
+
+test("注入落账：终选集写一行 mode='inject'，candidates 为实际注入条目", () => {
+  const { store, service } = setup();
+  service.saveWithDedupe({ type: "decision", title: "甲", content: "内容甲", importance: 4 });
+  service.saveWithDedupe({ type: "decision", title: "乙", content: "内容乙", importance: 3 });
+  const selected = service.injectCandidates({ maxItems: 5 });
+  assert.ok(selected.length >= 2);
+  const row = injectRow(store);
+  assert.ok(row, "注入应落一行审计");
+  assert.equal(row.mode, "inject");
+  // recall_runs.query 是 NOT NULL（store.js:61）：注入无查询词，用空串而非 null
+  assert.equal(row.query, "");
+  assert.deepEqual(row.candidates.map((c) => c.id), selected.map((m) => m.id));
+  store.close();
+});
+
+test("recallRecordDefault=false 不落账（与检索侧同门）", () => {
+  const { store, service } = setup({ recallRecordDefault: false });
+  service.saveWithDedupe({ type: "decision", title: "甲", content: "内容甲", importance: 4 });
+  service.injectCandidates({ maxItems: 5 });
+  assert.equal(injectRow(store), undefined);
+  store.close();
+});
+
+test("空选不落账（没有访问发生）", () => {
+  const { store, service } = setup();
+  service.injectCandidates({ maxItems: 5 });
+  assert.equal(injectRow(store), undefined);
+  store.close();
+});
+
+test("留痕与消费解耦：heat 关闭时行照写、touch 不发生", () => {
+  // 显式 false = 生产 config 经 resolveConfig 后的默认值；touchRecalled 的
+  // 门控是 === false 才跳过（service.js:515）
+  const { store, service } = setup({ heatEnabled: false });
+  const m = service.saveWithDedupe({ type: "decision", title: "甲", content: "内容甲", importance: 4 }).memory;
+  const before = store.getById(m.id).last_accessed_at ?? null;
+  service.injectCandidates({ maxItems: 5 });
+  assert.ok(injectRow(store), "heat 关闭时注入行仍照写");
+  assert.equal(store.getById(m.id).last_accessed_at ?? null, before, "touch 属 heat 消费侧，不发生");
+  store.close();
+});
+
+test("聚合：注入候选计入零曝光判定，注入口径单独报数", () => {
+  const { store, service } = setup();
+  service.saveWithDedupe({ type: "decision", title: "被注入", content: "被注入候选的内容说明", importance: 4 });
+  // importance 2 低于注入阈值 3：活跃但不进注入候选 → 零曝光 → 僵尸
+  service.saveWithDedupe({ type: "decision", title: "没动静", content: "低重要度不进注入候选的内容", importance: 2 });
+  // 回拨 created_at 避开 nowIso 同毫秒单调顶推的 1ms 豁免边界：刚写入的记忆
+  // 可能比 recallStats 的 Date.now() 晚 1ms，exemptDays:0 时会落进豁免桶
+  // （宁漏勿误伤），断言就变成看运气。回拨到 10 天前，判定确定性成立。
+  const old = new Date(Date.now() - 10 * 86400000).toISOString();
+  for (const m of store.all()) {
+    store.db.prepare("UPDATE memories SET created_at = ? WHERE id = ?").run(old, m.id);
+  }
+  service.injectCandidates({ maxItems: 5 });
+  const stats = service.recallStats({ windowDays: 30, exemptDays: 0 });
+  assert.equal(stats.injection.runs, 1);
+  assert.ok(stats.injection.injectedCount >= 1);
+  assert.equal(stats.zombie.activeCount, 2);
+  assert.equal(stats.zombie.zombieCount, 1, "被注入的不算僵尸（注入=曝光），未进候选的计僵尸");
+  store.close();
+});
+
+test("slotFillRate = 注入条数 / (轮数 × 槽位数)", () => {
+  const { store, service } = setup();
+  for (let i = 0; i < 3; i++) {
+    service.saveWithDedupe({ type: "decision", title: `t${i}`, content: "x", importance: 4 });
+  }
+  service.injectCandidates({ maxItems: 5 });
+  const stats = service.recallStats({ windowDays: 30, exemptDays: 0, maxInjectSlots: 4 });
+  assert.equal(stats.injection.runs, 1);
+  assert.equal(stats.injection.injectedCount, 3);
+  assert.equal(stats.injection.slotFillRate, 3 / 4);
+  store.close();
+});