@nowcrew/daemon 0.6.88-beta.2 → 0.6.88-beta.20

package/dist/local-memory/pending.js

@@ -1,34 +1,11 @@
 import { randomUUID } from "node:crypto";
-import { lstat, mkdir, readdir, realpath, rename, rm, writeFile, readFile } from "node:fs/promises";
+import { lstat, mkdir, realpath, rename, rm, writeFile } from "node:fs/promises";
 import { basename, dirname, join, relative, resolve, sep } from "node:path";
-import { z } from "zod";
+import { isRecallablePending, parsePendingMemoryCandidate } from "./pending-schema.js";
+import { pendingFileNames, pendingReadDirectory, PENDING_FILE_BYTES, readPendingSource } from "./pending-source.js";
+import { pendingRecallScore } from "./pending-match.js";
 export const LOCAL_MEMORY_PENDING_SCAN_FILE_CAP = 128;
 export const LOCAL_MEMORY_PENDING_SCAN_BYTE_CAP = 1_000_000;
-const CandidateSchema = z.object({
-    operation: z.enum(["create", "update", "supersede"]),
-    memoryId: z.string().nullable(),
-    baseRevision: z.number().int().nonnegative().nullable(),
-    supersedesMemoryId: z.string().nullable(),
-    title: z.string().min(1),
-    kind: z.enum(["procedural", "semantic", "episodic", "preference"]),
-    summary: z.string().min(1),
-    triggers: z.array(z.string()).min(1),
-    priority: z.enum(["high", "medium", "low"]),
-    detailCategory: z.enum(["preferences", "project-rules", "testing", "debugging", "git", "incidents", "lessons"]),
-    detailBody: z.string().min(1),
-    reviewAfter: z.string().nullable(),
-}).strict();
-const PendingSchema = z.object({
-    schemaVersion: z.literal(1),
-    pendingId: z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/u),
-    createdAt: z.string().min(1),
-    reason: z.literal("index_over_budget"),
-    source: z.object({
-        executionId: z.string().min(1),
-        pruneTraceId: z.string().min(1).nullable(),
-    }).strict(),
-    candidate: CandidateSchema,
-}).strict();
 function within(root, candidate) {
     const path = relative(root, candidate);
     return path === "" || (path !== ".." && !path.startsWith(`..${sep}`));
@@ -122,13 +99,11 @@ async function atomicWrite(path, content) {
     }
 }
 export async function persistPendingMemoryCandidate(input) {
-    const parsed = PendingSchema.safeParse(input.candidate);
-    if (!parsed.success)
-        throw new Error("local_memory_pending_invalid");
+    const parsed = parsePendingMemoryCandidate(input.candidate);
     const directory = await pendingDirectory(input.agentDir);
-    const target = join(directory, `${parsed.data.pendingId}.json`);
+    const target = join(directory, `${parsed.pendingId}.json`);
     await assertRegularFile(target);
-    await atomicWrite(target, `${JSON.stringify(parsed.data, null, 2)}\n`);
+    await atomicWrite(target, `${JSON.stringify(parsed, null, 2)}\n`);
     return target;
 }
 export async function removePendingMemoryCandidate(input) {
@@ -140,73 +115,44 @@ export async function removePendingMemoryCandidate(input) {
     await rm(target, { force: true });
 }
 export async function readPendingMemoryCandidates(input) {
-    const directory = await existingPendingDirectory(input.agentDir);
-    if (directory === null)
-        return [];
-    const names = (await readdir(directory)).filter((name) => name.endsWith(".json")).sort();
+    const { directory } = await pendingReadDirectory(input.agentDir).catch((error) => {
+        if (error instanceof Error && error.message === "memory_pending_path_invalid") {
+            throw new Error("local_memory_pending_path_invalid");
+        }
+        throw error;
+    });
+    const names = await pendingFileNames(directory);
     const maxFiles = Math.max(0, input.maxFiles ?? LOCAL_MEMORY_PENDING_SCAN_FILE_CAP);
     const maxBytes = Math.max(0, input.maxBytes ?? LOCAL_MEMORY_PENDING_SCAN_BYTE_CAP);
     const result = [];
     let scannedBytes = 0;
-    for (const name of names) {
-        if (result.length >= maxFiles || scannedBytes >= maxBytes)
+    for (const name of names.slice(0, maxFiles)) {
+        if (scannedBytes >= maxBytes)
             break;
-        const path = join(directory, name);
         try {
-            await assertRegularFile(path);
-            const stat = await lstat(path);
-            if (!stat.isFile() || stat.isSymbolicLink())
-                throw new Error("local_memory_pending_path_invalid");
-            if (scannedBytes + stat.size > maxBytes)
-                break;
-            const raw = await readFile(path, "utf8");
-            const size = Buffer.byteLength(raw, "utf8");
-            if (scannedBytes + size > maxBytes)
-                break;
-            scannedBytes += size;
-            const parsed = PendingSchema.safeParse(JSON.parse(raw));
-            if (parsed.success && `${parsed.data.pendingId}.json` === name)
-                result.push(parsed.data);
+            const source = await readPendingSource(input.agentDir, name, maxBytes - scannedBytes);
+            scannedBytes += source.bytes;
+            result.push(source.candidate);
         }
         catch {
-            // A damaged pending item is diagnosable and must not hide other candidates.
+            // 失败读取也消耗预算，显式分页命令负责返回诊断和继续扫描。
+            scannedBytes += Math.min(PENDING_FILE_BYTES, maxBytes - scannedBytes);
         }
     }
     return result;
 }
-function normalize(value) {
-    return value.normalize("NFKC").toLocaleLowerCase().replace(/\s+/gu, " ").trim();
-}
 function priorityRank(priority) {
     return priority === "high" ? 0 : priority === "medium" ? 1 : 2;
 }
-function candidateText(candidate) {
-    return [
-        candidate.candidate.title,
-        candidate.candidate.summary,
-        ...candidate.candidate.triggers,
-        candidate.candidate.detailCategory,
-        candidate.candidate.detailBody,
-    ].join("\n");
-}
-function recallScore(candidate, query) {
-    const normalizedQuery = normalize(query);
-    if (normalizedQuery === "")
-        return 1;
-    const text = normalize(candidateText(candidate));
-    if (text.includes(normalizedQuery))
-        return 100;
-    const terms = normalizedQuery.split(/[\s,，、。！？；：:()[\]{}"'`]+/u).filter((term) => term.length > 0);
-    return terms.reduce((score, term) => score + (text.includes(term) ? 1 : 0), 0);
-}
 export async function searchPendingMemoryCandidates(input) {
     const candidates = await readPendingMemoryCandidates({ agentDir: input.agentDir });
     const limit = Math.max(0, input.limit ?? 5);
     if (limit === 0)
         return [];
     return candidates
-        .map((candidate) => ({ candidate, score: recallScore(candidate, input.query) }))
-        .filter((item) => normalize(input.query) === "" || item.score > 0)
+        .filter(isRecallablePending)
+        .map((candidate) => ({ candidate, score: pendingRecallScore(candidate, input.query) }))
+        .filter((item) => item.score > 0)
         .sort((left, right) => right.score - left.score
         || priorityRank(left.candidate.candidate.priority) - priorityRank(right.candidate.candidate.priority)
         || right.candidate.createdAt.localeCompare(left.candidate.createdAt)
@@ -218,25 +164,29 @@ function truncateCodePoints(value, maxCodePoints) {
     return Array.from(value).slice(0, Math.max(0, maxCodePoints)).join("");
 }
 export function renderPendingMemoryContext(candidates, maxCodePoints = 2_000) {
-    if (candidates.length === 0 || maxCodePoints <= 0)
+    const recallable = candidates.filter(isRecallablePending);
+    if (recallable.length === 0 || maxCodePoints <= 0)
         return "";
-    const header = `\n\n## Archived memory candidates (daemon-managed)\n这些记忆已持久化，但尚未进入常驻热索引；只在当前请求相关时参考，必要时再由 memory-prune 提升。\n`;
+    const header = `\n\n## Archived memory candidates (daemon-managed)\n容量暂存的新增资料，仅为部分预览，不代表完整检索；可参考但不能覆盖现行规则，未包含内容请按需查询。\n`;
     let remaining = maxCodePoints - Array.from(header).length;
     if (remaining <= 0)
         return truncateCodePoints(header, maxCodePoints);
     const sections = [];
-    for (const item of candidates) {
+    for (const item of recallable) {
         const change = item.candidate;
         const prefix = `\n### ${change.title}\n`
-            + `- pending_file: .crew/memory/pending/${item.pendingId}.json\n`
+            + `- pending_id: ${item.pendingId}\n`
             + `- summary: ${change.summary}\n`
             + `- triggers: ${change.triggers.join(", ")}\n`
             + "- detail: ";
         const prefixLength = Array.from(prefix).length;
         if (prefixLength + 1 > remaining)
             break;
-        const detail = truncateCodePoints(change.detailBody, remaining - prefixLength - 1);
-        const section = `${prefix}${detail}\n`;
+        const notice = " [正文未完，请用 read-pending 分页读取]";
+        const available = remaining - prefixLength - 1;
+        const truncated = Array.from(change.detailBody).length > available;
+        const detail = truncateCodePoints(change.detailBody, truncated ? Math.max(0, available - Array.from(notice).length) : available);
+        const section = `${prefix}${detail}${truncated ? truncateCodePoints(notice, available - Array.from(detail).length) : ""}\n`;
         const length = Array.from(section).length;
         sections.push(section);
         remaining -= length;

package/dist/local-memory/prompt.js

@@ -1,6 +1,7 @@
 import { dslog } from "../slog.js";
 import { renderPendingMemoryContext, searchPendingMemoryCandidates } from "./pending.js";
 import { renderLocalMemoryResultInstructions } from "./runtime.js";
+const PENDING_READ_GUIDANCE = "\n\nV2新增资料预览未命中不代表没有资料；先查有效索引，必要时用 crew-memory search-pending --query '关键词'，按 nextCursor 续查；用 read-pending --id ID 分页读正文。容量暂存资料不能覆盖现行规则，未应用修改不作为记忆。用 crew-memory --help 查看参数。\n";
 export async function prepareLocalMemoryPrompt(input) {
     let pending = "";
     if (input.enabled) {
@@ -21,17 +22,19 @@ export async function prepareLocalMemoryPrompt(input) {
     }
     const original = input.renderBase(0);
     const structured = input.resultPath === null ? "" : renderLocalMemoryResultInstructions(input.resultPath);
-    const fits = (prompt) => input.maxBytes === undefined || Buffer.byteLength(prompt, "utf8") <= input.maxBytes;
-    const render = (suffix) => (suffix === "" ? original : input.renderBase(Buffer.byteLength(suffix, "utf8"))) + suffix;
-    // 后缀先占预算，可选预览重建；结构化契约优先于 pending，不能被预览挤掉。
-    const complete = render(pending + structured);
-    if (fits(complete))
-        return { systemPrompt: complete, resultPath: input.resultPath };
-    if (pending !== "") {
-        const withoutPending = render(structured);
-        if (fits(withoutPending))
-            return { systemPrompt: withoutPending, resultPath: input.resultPath };
+    const guidance = input.enabled ? PENDING_READ_GUIDANCE : "";
+    // 短命令指引放在当前轮，独立于可舍弃预览；收尾契约仍保持系统与当前轮两份。
+    for (const choice of [
+        { suffix: pending + structured, wake: structured + guidance },
+        { suffix: structured, wake: structured + guidance },
+        { suffix: structured, wake: structured },
+    ]) {
+        const reserved = Buffer.byteLength(choice.suffix + choice.wake, "utf8");
+        const systemPrompt = (reserved === 0 ? original : input.renderBase(reserved)) + choice.suffix;
+        if (input.maxBytes === undefined || Buffer.byteLength(systemPrompt + choice.wake, "utf8") <= input.maxBytes) {
+            return { systemPrompt, resultPath: input.resultPath, wakePromptSuffix: choice.wake };
+        }
     }
     // 强制基础指令与契约本身仍无法共存时，保留既有非结构化兼容回退，不裁基础指令。
-    return { systemPrompt: original, resultPath: null };
+    return { systemPrompt: original, resultPath: null, wakePromptSuffix: "" };
 }

package/dist/local-memory/read-cli.js

@@ -5,6 +5,7 @@ import { isAbsolute, relative, resolve, sep } from "node:path";
 import { pathToFileURL } from "node:url";
 import { parseArgs, TextDecoder } from "node:util";
 import { z } from "zod";
+import { readPendingMemoryBody, searchPendingMemoryPage } from "./pending-query.js";
 const OUTPUT_BYTES = 12 * 1024;
 const FILE_BYTES = 32 * 1024 * 1024;
 const FileSchema = z.string().min(1).refine((file) => {
@@ -33,14 +34,35 @@ const CommandSchema = z.discriminatedUnion("command", [
         offset: z.coerce.number().int().min(0).max(Number.MAX_SAFE_INTEGER).default(0),
         limit: z.coerce.number().int().min(1).max(4000).default(2000),
     }).strict(),
+    z.object({
+        command: z.literal("search-pending"),
+        query: z.string().trim().min(1).max(256),
+        cursor: z.string().min(1).max(4096).optional(),
+        limit: z.coerce.number().int().min(1).max(40).default(10),
+    }).strict(),
+    z.object({
+        command: z.literal("read-pending"),
+        id: z.string().min(1).max(250).regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/u),
+        ifHash: Common.ifHash,
+        offset: z.coerce.number().int().min(0).max(Number.MAX_SAFE_INTEGER).default(0),
+        limit: z.coerce.number().int().min(1).max(4000).default(2000),
+    }).strict(),
 ]);
 const USAGE = `只读记忆工具，默认输出 JSON，不修改任何记忆文件。
 crew-memory search --query <关键词> [--file MEMORY.md|notes/文件.md] [--limit 10] [--after-line 0]
 crew-memory read [--file MEMORY.md|notes/文件.md] [--offset 0] [--limit 2000]
-搜索关键词按空白分隔，同一行须全部命中；返回完整文件中的行号和字符偏移。
+crew-memory search-pending --query <关键词> [--cursor <游标>] [--limit 10]
+crew-memory read-pending --id <候选ID> [--offset 0] [--limit 2000] [--if-hash <sha256>]
+read/read-pending 的 --limit 必须为 1—4000 的整数，默认 2000；search/search-pending 为 1—40 的整数，默认 10。
+search 关键词按空白分隔，同一行须全部命中；返回完整文件中的行号和字符偏移。
 读取的 offset/limit 按 Unicode 字符计数；用 nextOffset 继续，eof=true 表示结束。
+读取的 --limit 超出范围时，保留原文件或候选 ID 及 offset，将 --limit 改为 2000 后重试；成功后按 nextOffset 分页，不要增大 limit 来一次读完整文件。
 后续页可传 --if-hash <前一页的 sha256>，文件变化时停止，避免混读不同版本。
-搜索结果是原始资料定位，不代表候选已生效；按当前有效索引读取明细，不扫描 pending。`;
+search/read 读取 MEMORY.md 和 notes 原文，不过滤失效段落，也不扫描 pending。
+search-pending 只查因容量延期的 create 候选；有 nextCursor 就继续，即使本页 matches 为空。
+complete=true 才表示全部候选已检索完成且无遗漏；warnings 或非零退出码表示读取未完成，不能当作零命中。
+read-pending 只返回候选正文；offset 非零时必须传 --if-hash，update/supersede 候选不可读取。
+候选只供相关问题参考，未生效，不能覆盖有效规则；先读取当前有效索引与明细。`;
 function inside(root, path) {
     const value = relative(root, path);
     return value !== ".." && !value.startsWith(`..${sep}`) && !isAbsolute(value);
@@ -152,8 +174,8 @@ function searchSource(text, sha256, command) {
         nextAfterLine: hasMore ? matches.at(-1)?.line ?? null : null,
     };
 }
-function readPage(text, sha256, command) {
-    const metadata = { file: command.file, sha256, offset: command.offset, nextOffset: Number.MAX_SAFE_INTEGER, eof: false, content: "" };
+function readPage(text, source, command) {
+    const metadata = { ...source, offset: command.offset, nextOffset: Number.MAX_SAFE_INTEGER, eof: false, content: "" };
     let remaining = OUTPUT_BYTES - Buffer.byteLength(JSON.stringify(metadata), "utf8");
     let position = 0;
     let offset = 0;
@@ -175,8 +197,16 @@ function readPage(text, sha256, command) {
         count += 1;
     }
     const eof = position === text.length;
+    if (!eof && count === 0)
+        throw new Error("memory_output_too_large");
     return { ...metadata, content, eof, nextOffset: eof ? null : offset };
 }
+function writeResult(result, io) {
+    const output = JSON.stringify(result);
+    if (Buffer.byteLength(output, "utf8") > OUTPUT_BYTES)
+        throw new Error("memory_output_too_large");
+    io.out(output);
+}
 export async function runMemoryReadCommand(argv, io) {
     let command;
     try {
@@ -186,6 +216,7 @@ export async function runMemoryReadCommand(argv, io) {
                 query: { type: "string", short: "q" }, file: { type: "string" },
                 limit: { type: "string" }, offset: { type: "string" },
                 "after-line": { type: "string" }, "if-hash": { type: "string" },
+                id: { type: "string" }, cursor: { type: "string" },
                 json: { type: "boolean" }, help: { type: "boolean", short: "h" },
             },
         });
@@ -201,24 +232,44 @@ export async function runMemoryReadCommand(argv, io) {
             ...(afterLine === undefined ? {} : { afterLine }),
             ...(ifHash === undefined ? {} : { ifHash }),
         });
+        if (command.command === "read-pending" && command.offset > 0 && command.ifHash === undefined) {
+            throw new Error("memory_hash_required");
+        }
     }
     catch {
-        io.err(`memory_arguments_invalid: 参数不合法。\n${USAGE}`);
+        io.err(`memory_arguments_invalid: 参数不合法，记忆读取未完成；请按以下参数范围修正后重试，不要当作没有记忆。\n${USAGE}`);
         return 2;
     }
     try {
+        if (!io.env.CREW_HOME)
+            throw new Error("memory_home_missing");
+        if (command.command === "search-pending") {
+            const result = await searchPendingMemoryPage({ agentDir: io.env.CREW_HOME, query: command.query,
+                ...(command.cursor === undefined ? {} : { cursor: command.cursor }), limit: command.limit });
+            writeResult(result, io);
+            if (result.warnings.length > 0 || (!result.hasMore && !result.complete)) {
+                throw new Error("memory_pending_search_incomplete");
+            }
+            return 0;
+        }
+        if (command.command === "read-pending") {
+            const { content, ...metadata } = await readPendingMemoryBody({ agentDir: io.env.CREW_HOME,
+                pendingId: command.id, ...(command.ifHash === undefined ? {} : { ifHash: command.ifHash }) });
+            writeResult(readPage(content, metadata, command), io);
+            return 0;
+        }
         const source = await readSource(io.env.CREW_HOME, command.file);
         if (command.ifHash !== undefined && command.ifHash !== source.sha256)
             throw new Error("memory_file_changed");
         const result = command.command === "search"
             ? searchSource(source.text, source.sha256, command)
-            : readPage(source.text, source.sha256, command);
-        io.out(JSON.stringify(result));
+            : readPage(source.text, { file: command.file, sha256: source.sha256 }, command);
+        writeResult(result, io);
         return 0;
     }
     catch (error) {
         const code = error.code;
-        const known = error instanceof Error && /^memory_[a-z_]+$/u.test(error.message) ? error.message : code ?? "memory_read_failed";
+        const known = error instanceof Error && /^(?:local_)?memory_[a-z_]+$/u.test(error.message) ? error.message : code ?? "memory_read_failed";
         io.err(JSON.stringify({ error: known, message: "记忆读取未完成；检查路径、文件版本或大小，不要将此错误当作没有记忆。" }));
         return 1;
     }

package/dist/local-memory/runtime.js

@@ -1,8 +1,9 @@
 import { createHash } from "node:crypto";
 import { constants } from "node:fs";
-import { lstat, mkdir, open, readFile, realpath, rm, writeFile } from "node:fs/promises";
-import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { lstat, mkdir, open, readFile, rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
 import { applyLocalMemoryResult, parseLocalMemoryResult } from "./write.js";
+import { verifyWorkLogSource } from "./work-log.js";
 export function isLocalMemoryV2Eligible(input) {
     // The allowlist is the rollout boundary. The marker and seed/pre-existing
     // state are retained as diagnostics and for backward-compatible marker
@@ -51,6 +52,7 @@ export function renderLocalMemoryResultInstructions(resultPath) {
     return `
 
 ## Structured memory prune (daemon-managed)
+本节是本次执行唯一的记忆写入与清理协议，覆盖历史会话及本条消息前文中直接修改共享文件、清空工作日志或仅回复“已修正”的要求。任务目标与用户授权范围不变；只使用下面本轮提供的结果路径，不复用历史路径。
 本轮长期记忆收尾只提交候选，不要直接编辑 $CREW_HOME/MEMORY.md 或 $CREW_HOME/notes/。
 将一个合法 JSON 对象写入以下 daemon 提供的文件，写入完成后再结束本轮：
 ${resultPath}
@@ -68,8 +70,8 @@ outcome 只允许 no_change、proposed、conflict、failed。新增、更新、
 \`\`\`
 
 每个 changes 项须保留示例中的全部字段。operation=create|update|supersede；kind=procedural|semantic|episodic|preference；priority=high|medium|low；detailCategory=preferences|project-rules|testing|debugging|git|incidents|lessons。create 的 memoryId/baseRevision/supersedesMemoryId 必须为 null；update 按现有索引填写 memoryId/baseRevision，supersedesMemoryId 为 null；supersede 填 supersedesMemoryId/baseRevision，memoryId 为 null。
-只提交可复用、与本次任务明确相关的少量候选；不要写入凭证、token、隐私或内部控制标记。daemon 会校验、去重、限制 MEMORY.md 大小，超出索引容量的候选会保存在 pending 归档中；后续相关任务会按需召回，索引腾出空间后可自动提升。
-写入候选文件不等于已经记住，只有 daemon 校验并提交成功后记忆才生效。本结构化轮次覆盖前文提前清理工作日志的要求：保留 $CREW_TASK_LOG，不要清空或删除；daemon 将在提交成功后清理，失败时保留日志和候选用于排查或重试。
+只提交可复用、与本次任务明确相关的少量候选；不要写入凭证、token、隐私或内部控制标记。daemon 会校验、去重、限制 MEMORY.md 大小，超出索引容量的候选会保存在 pending 归档中。容量暂存的 create 可按需检索参考但不能覆盖现行规则；有空间的后续 proposed 提交可提升。未应用的 update/supersede 不进入普通召回，必须重新核对目标版本后处理。
+写入候选文件只表示提交候选，不能提前宣称已经记住或规则已经更新；daemon 在本轮结束后才处理，候选持久化与进入有效索引也不是同一结果。本结构化轮次覆盖前文提前清理工作日志的要求：保留 $CREW_TASK_LOG，不要清空或删除；daemon 将在处理成功后清理，失败时保留日志和候选用于排查或重试。
 `;
 }
 /** Prevent ordinary V2 turns from racing the daemon-managed memory writer. */
@@ -79,6 +81,11 @@ export function renderLocalMemoryV2WriteGuard() {
 ## V2 shared memory write safety
 本节覆盖前文关于普通任务直接更新共享记忆的例外规则。本 Agent 已启用结构化本地记忆 V2。普通任务不得直接编辑共享的 $CREW_HOME/MEMORY.md 或 $CREW_HOME/notes/ 文件；即使用户明确要求记住内容，也只把候选、用户授权和分类理由记录到本任务的 $CREW_TASK_LOG，留给任务结束后的 memory-prune 结构化收尾应用。只有 memory-prune 收尾提示明确要求写入 daemon 提供的 result 文件时，才按该协议提交候选。`;
 }
+function workLogFailure(error) {
+    const reason = error instanceof Error ? error.message : "";
+    return { status: "failed", error: reason === "local_memory_work_log_source_changed"
+            || reason === "local_memory_work_log_version_missing" ? reason : "local_memory_work_log_cleanup_failed" };
+}
 export async function commitLocalMemoryResultAfterExit(input) {
     if (input.exitCode !== 0)
         return { status: "skipped" };
@@ -96,6 +103,14 @@ export async function commitLocalMemoryResultAfterExit(input) {
         if (result.outcome === "conflict" || result.outcome === "failed") {
             return { status: "failed", error: `local_memory_result_${result.outcome}` };
         }
+        if (input.workLogPath !== undefined) {
+            try {
+                await verifyWorkLogSource(input.agentDir, input.workLogPath, input.expectedWorkLogSha256);
+            }
+            catch (error) {
+                return workLogFailure(error);
+            }
+        }
         await applyLocalMemoryResult({
             agentDir: input.agentDir,
             result,
@@ -108,20 +123,12 @@ export async function commitLocalMemoryResultAfterExit(input) {
     }
     if (input.workLogPath !== undefined) {
         try {
-            const relativeLogPath = relative(resolve(input.agentDir), resolve(input.workLogPath));
-            if (relativeLogPath === "" || relativeLogPath === ".." || relativeLogPath.startsWith(`..${sep}`)
-                || isAbsolute(relativeLogPath))
-                throw new Error("local_memory_work_log_path_invalid");
-            const expectedLogPath = join(await realpath(input.agentDir), relativeLogPath);
-            const before = await lstat(input.workLogPath);
-            if (!before.isFile() || before.isSymbolicLink())
-                throw new Error("local_memory_work_log_path_invalid");
-            if (await realpath(input.workLogPath) !== expectedLogPath)
-                throw new Error("local_memory_work_log_path_invalid");
+            const before = await verifyWorkLogSource(input.agentDir, input.workLogPath, input.expectedWorkLogSha256);
             const handle = await open(input.workLogPath, constants.O_WRONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
             try {
                 const opened = await handle.stat();
-                if (!opened.isFile() || opened.dev !== before.dev || opened.ino !== before.ino) {
+                if (!opened.isFile() || opened.dev !== before.dev || opened.ino !== before.ino
+                    || opened.size !== before.size || opened.mtimeMs !== before.mtimeMs || opened.ctimeMs !== before.ctimeMs) {
                     throw new Error("local_memory_work_log_path_changed");
                 }
                 await handle.truncate(0);
@@ -130,8 +137,8 @@ export async function commitLocalMemoryResultAfterExit(input) {
                 await handle.close();
             }
         }
-        catch {
-            return { status: "failed", error: "local_memory_work_log_cleanup_failed" };
+        catch (error) {
+            return workLogFailure(error);
         }
     }
     try {

package/dist/local-memory/work-log-execution.js

@@ -0,0 +1,31 @@
+import { resolve } from "node:path";
+import { withKeyedLease } from "../local-execution-lease.js";
+// 只记录尚未结束的本机执行，最后一个执行结束即移除，不落盘。
+const activeExecutions = new Map();
+export function workLogExecutionKey(agentsRoot, handle, taskKey) {
+    return `work-log:${JSON.stringify([resolve(agentsRoot, handle), taskKey ?? "default"])}`;
+}
+export async function withWorkLogExecution(key, operation, cancellation) {
+    // 只在登记期间持锁；普通任务与收尾的模型调用仍可并行。
+    await withKeyedLease(key, async () => {
+        activeExecutions.set(key, (activeExecutions.get(key) ?? 0) + 1);
+    }, cancellation);
+    try {
+        return await operation();
+    }
+    finally {
+        const remaining = (activeExecutions.get(key) ?? 1) - 1;
+        if (remaining === 0)
+            activeExecutions.delete(key);
+        else
+            activeExecutions.set(key, remaining);
+    }
+}
+export async function withWorkLogCommit(key, operation, cancellation) {
+    return withKeyedLease(key, async () => {
+        // 已有同任务执行可能继续写日志，不能提交旧提案；新执行等短提交结束后再登记。
+        if (activeExecutions.get(key) !== 1)
+            throw new Error("local_memory_work_log_execution_conflict");
+        return operation();
+    }, cancellation);
+}

package/dist/local-memory/work-log.js

@@ -0,0 +1,58 @@
+import { lstat, readFile, realpath } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { safeKey } from "../workspace.js";
+/** 收尾会话可以换目录，但仍应消费同一任务已写好的日志；不迁移文件或复用会话。 */
+export async function resolveMemoryPruneWorkLog(workspace, input) {
+    // 旧映射有损时无法证明是同一任务，不能用它查找或清理来源。
+    if (input.keyMode !== "opaque" || !input.taskKey || safeKey(input.taskKey) !== input.taskKey) {
+        return workspace;
+    }
+    const legacyPath = join(workspace.dir, "tasks", input.taskKey, "work-log.md");
+    if (legacyPath === workspace.workLogPath)
+        return workspace;
+    let legacyStat;
+    try {
+        legacyStat = await lstat(legacyPath);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return workspace;
+        throw error;
+    }
+    if (!legacyStat.isFile() || legacyStat.isSymbolicLink()
+        || await realpath(legacyPath) !== join(await realpath(workspace.dir), "tasks", input.taskKey, "work-log.md")) {
+        throw new Error("local_memory_work_log_path_invalid");
+    }
+    const workLog = await readFile(legacyPath, "utf8");
+    if (workLog.length === 0)
+        return workspace;
+    if ((await readFile(workspace.workLogPath, "utf8")).length > 0) {
+        throw new Error("local_memory_work_log_source_conflict");
+    }
+    return { ...workspace, workLogPath: legacyPath, workLog };
+}
+export function workLogSha256(content) {
+    return createHash("sha256").update(content).digest("hex");
+}
+/** 调用方须在同任务的提交互斥边界内校验；指纹对应实际注入模型的那一版内容。 */
+export async function verifyWorkLogSource(agentDir, path, expectedSha256) {
+    if (expectedSha256 === undefined)
+        throw new Error("local_memory_work_log_version_missing");
+    const relativePath = relative(resolve(agentDir), resolve(path));
+    if (relativePath === "" || relativePath === ".." || relativePath.startsWith(`..${sep}`) || isAbsolute(relativePath)) {
+        throw new Error("local_memory_work_log_path_invalid");
+    }
+    const before = await lstat(path);
+    if (!before.isFile() || before.isSymbolicLink()
+        || await realpath(path) !== join(await realpath(agentDir), relativePath)) {
+        throw new Error("local_memory_work_log_path_invalid");
+    }
+    const content = await readFile(path);
+    const after = await lstat(path);
+    if (workLogSha256(content) !== expectedSha256 || before.dev !== after.dev || before.ino !== after.ino
+        || before.size !== after.size || before.mtimeMs !== after.mtimeMs || before.ctimeMs !== after.ctimeMs) {
+        throw new Error("local_memory_work_log_source_changed");
+    }
+    return after;
+}