@stardustlc/dsh-dream 0.10.0 → 0.12.0

package/lib/evidence.js

@@ -56,6 +56,7 @@ export function verifyEvidence(claim, context) {
         return held('quote-missing');
     try {
         let text;
+        let toolOutput = false;
         if (claim.kind === 'local-artifact') {
             if (!context.cwd || !claim.artifactPath)
                 return held('artifact-context-missing');
@@ -108,6 +109,7 @@ export function verifyEvidence(claim, context) {
                 return held('not-human-message');
             if (entry.type !== 'user/message' && entry.type !== 'assistant/message' && entry.type !== 'tool/result')
                 return held('record-not-visible');
+            toolOutput = entry.type === 'tool/result';
             text = visibleText(data.content ?? data.text ?? data.message ?? entry.data);
         }
         if (!normalized(text).includes(quote))
@@ -115,6 +117,10 @@ export function verifyEvidence(claim, context) {
         const hash = createHash('sha256').update(text, 'utf8').digest('hex');
         if (claim.sourceHash !== undefined && claim.sourceHash !== hash)
             return held('source-hash-mismatch');
+        // Finding text in a webpage/mail/tool result proves occurrence, not that its
+        // instructions are independently supported. Retain the reference for review.
+        if (toolOutput)
+            return { ...base, sourceHash: hash, verificationReason: 'tool-output-observed' };
         return { ...base, verification: 'read', sourceHash: hash, verificationReason: 'source-verified' };
     }
     catch {

package/lib/memory.d.ts

@@ -1,4 +1,6 @@
 import type { Evidence, Lesson } from './knowledge.js';
+/** A model recommendation or an old actor-less record is not human approval. */
+export declare function isHumanAccepted(lesson: Lesson): boolean;
 /** A retrieval deadline is not a verification result; feedback never renews it. */
 export declare function reviewDeadline(lesson: Lesson): number | undefined;
 export declare function needsMemoryReview(lesson: Lesson, now?: number): boolean;

package/lib/memory.js

@@ -1,3 +1,7 @@
+/** A model recommendation or an old actor-less record is not human approval. */
+export function isHumanAccepted(lesson) {
+    return lesson.state === 'usable' && lesson.review.decision === 'accepted' && lesson.review.actor === 'human';
+}
 /** A retrieval deadline is not a verification result; feedback never renews it. */
 export function reviewDeadline(lesson) {
     const explicit = lesson.reviewAfter ? Date.parse(lesson.reviewAfter) : NaN;
@@ -16,7 +20,7 @@ export function needsMemoryReview(lesson, now = Date.now()) {
 /** Derived layers contain pointers; authoritative lessons and evidence remain untouched. */
 export function memoryDirectory(lessons, evidence, now = Date.now()) {
     const byId = new Map(evidence.map(item => [item.id, item]));
-    const accepted = new Set(lessons.filter(item => item.review.decision === 'accepted').map(item => item.id));
+    const accepted = new Set(lessons.filter(isHumanAccepted).map(item => item.id));
     const entries = lessons.filter(item => item.state !== 'rejected').map(item => ({
         lessonId: item.id, revision: item.revision, title: item.title, topic: item.kind, scope: item.scope,
         state: item.state, reviewDue: needsMemoryReview(item, now),

package/lib/retrieval.js

@@ -60,6 +60,8 @@ export function queryScopeLabel(q) {
 }
 /** 经验范围文案（面板与 dream_context 共用）。 */
 export function lessonScopeLabel(scope) {
+    if (scope.global === true)
+        return '全局';
     const project = trimmed(scope.projectId);
     const workspace = trimmed(scope.workspaceRoot);
     if (project !== undefined && workspace !== undefined)
@@ -68,8 +70,6 @@ export function lessonScopeLabel(scope) {
         return '项目 ' + project;
     if (workspace !== undefined)
         return '工作区 ' + workspace;
-    if (scope.global === true)
-        return '全局';
     return '未限定范围';
 }
 /** 证据摘要（面板与 dream_context 共用）：独立支持数 + 已读/仅声明 + 脱敏摘要片段。 */

package/lib/tools.js

@@ -9,7 +9,8 @@ import { existsSync, realpathSync } from 'node:fs';
 import { basename, dirname, join, resolve } from 'node:path';
 import { maskSecrets } from './mask.js';
 import { dreamStats, readDreams, saveDream, searchDreams } from './journal.js';
-import { applyBridge, bridgeDreams, previewBridge, rollbackBridge, selectBridgeLessons, } from './bridge.js';
+import { isHumanAccepted } from './memory.js';
+import { applyBridge, previewBridge, rollbackBridge, selectBridgeLessons, } from './bridge.js';
 import { digestSessionFile, listSessionFiles } from './sessions.js';
 import { KnowledgeError, lessonFingerprint, } from './knowledge.js';
 import { KnowledgeStore } from './knowledge-store.js';
@@ -438,12 +439,12 @@ export function buildDreamTools(config) {
     };
     const dreamBridge = {
         name: 'dream_bridge',
-        description: '渡梦（M2）：把已采纳且适用的经验桥接进项目 AGENTS.md 的 Dream 管理块（<!-- dsh-dream:start -->…<!-- dsh-dream:end -->），块外内容原样保留。mode:"preview" 只读看 diff；复核后 mode:"apply" 必须带 preview.expected.sha256（文件变了会 conflict 零写入）；mode:"rollback" 带 backupId 恢复。缺省 mode 为 legacy 直写（已弃用，响应含 deprecation 提示）。资格：经验 state=usable，且 scope 与当前项目匹配（目标目录 realpath / 显式 projectId / global 且已采纳），频次不作准入。',
+        description: '渡梦：把人工采纳且适用的经验桥接进项目 AGENTS.md 的 Dream 管理块，块外内容原样保留。缺省 mode:"preview" 只读看 diff；复核后 mode:"apply" 必须带 preview.expected.sha256；mode:"rollback" 带 backupId 恢复。仅允许 review.actor=human 的已采纳经验，且 scope 匹配当前项目或经人工确认的全局范围。',
         parameters: compileParameters({
-            mode: { type: 'string', enum: ['preview', 'apply', 'rollback'], description: 'preview=只读预览；apply=带 expectedSha256 落盘；rollback=按 backupId 恢复。缺省=legacy 直写（弃用）。' },
+            mode: { type: 'string', enum: ['preview', 'apply', 'rollback'], description: 'preview=只读预览（默认）；apply=带 expectedSha256 落盘；rollback=按 backupId 恢复。' },
             path: { type: 'string', description: '目标文件（可选；缺省为执行上下文 cwd 下的 AGENTS.md，取不到 cwd 会报错不猜）。' },
             lessonIds: { type: 'array', items: { type: 'string' }, description: '参与桥接的经验 id（必须 usable 且 scope 匹配；缺省=按 store 顺序自动选取资格通过者）。' },
-            maxLessons: { type: 'integer', description: '经验上限：M2 模式默认 5、硬上限 20；legacy 模式默认 10、上限 30。' },
+            maxLessons: { type: 'integer', description: '经验上限：默认 5、硬上限 20。' },
             expectedSha256: { oneOf: [{ type: 'string' }, { type: 'null' }], description: 'apply 必填：preview.expected.sha256 原样回传；新文件用 null；不符则 conflict 零写入。' },
             previewId: { type: 'string', description: 'apply 可带：preview.previewId，用于校验是同一份预览；块内容不一致 → preview-mismatch，需重新 preview。' },
             backupId: { type: 'string', description: 'rollback 必填：apply 成功返回的 backupId。' },
@@ -492,9 +493,9 @@ export function buildDreamTools(config) {
         },
         async execute(rawArgs, exec) {
             const args = asRecord(rawArgs);
-            const mode = optionalString(args, 'mode');
-            if (mode !== undefined && mode !== 'preview' && mode !== 'apply' && mode !== 'rollback') {
-                throw new Error('mode 必须是 preview / apply / rollback（缺省为 legacy 直写）。');
+            const mode = optionalString(args, 'mode') ?? 'preview';
+            if (mode !== 'preview' && mode !== 'apply' && mode !== 'rollback') {
+                throw new Error('mode 必须是 preview / apply / rollback（缺省为 preview）。');
             }
             const explicitPath = optionalString(args, 'path');
             const cwd = execCwdOf(exec);
@@ -510,21 +511,6 @@ export function buildDreamTools(config) {
             }
             const resolvedPath = resolvedBridgePath(projectRoot, explicitPath);
             const maxRaw = args.maxLessons;
-            const legacyMax = typeof maxRaw === 'number' && Number.isInteger(maxRaw) ? Math.min(30, Math.max(1, maxRaw)) : 10;
-            if (mode === undefined) {
-                const legacyTarget = explicitPath !== undefined ? resolve(explicitPath) : join(projectRoot, 'AGENTS.md');
-                const legacyResult = bridgeDreams(cfg.journalDir, legacyTarget, legacyMax);
-                return {
-                    ok: true,
-                    path: legacyTarget,
-                    ...(resolvedPath !== undefined ? { resolvedPath } : {}),
-                    ...legacyResult,
-                    deprecation: {
-                        code: 'legacy-write',
-                        message: '缺省 mode 为 legacy 直写（已弃用）；建议改用 mode:"preview" → 复核 diff → mode:"apply" + expectedSha256（并带同一 previewId）。',
-                    },
-                };
-            }
             const maxLessons = typeof maxRaw === 'number' && Number.isInteger(maxRaw) ? maxRaw : undefined;
             const lessonIds = stringArray(args, 'lessonIds');
             const projectId = optionalString(args, 'projectId');
@@ -838,7 +824,9 @@ export function buildDreamTools(config) {
                 return { items: [], skipped: [], scopeLabel, budget: { limit, maxChars, usedChars: 0 } };
             }
             const store = knowledgeStoreOf(cfg);
-            const result = retrieveLessons(store.listLessons(), store.listEvidence(), retrievalQuery);
+            const lessons = store.listLessons().map(lesson => lesson.state === 'usable' && !isHumanAccepted(lesson)
+                ? { ...lesson, state: 'candidate' } : lesson);
+            const result = retrieveLessons(lessons, store.listEvidence(), retrievalQuery);
             const usedChars = result.items.reduce((total, item) => total + retrievedLessonChars(item), 0);
             return { items: result.items, skipped: result.skipped, scopeLabel, budget: { limit, maxChars, usedChars } };
         },
@@ -846,7 +834,7 @@ export function buildDreamTools(config) {
     };
     const dreamReview = {
         name: 'dream_review',
-        description: '审梦：采纳/驳回/标记冲突或过期/追加验证证据，必须带 expectedRevision（revision 不符会拒绝且不写入）。模型调用 actor 一律记为 model，不得冒充用户采纳；attach-evidence 只追加证据，不自动改变 state。',
+        description: '审梦：建议采纳/驳回/标记冲突或过期/追加验证证据，必须带 expectedRevision。模型的 accept 与 resolve-conflict 只返回待人工确认的建议，不修改审阅状态；请用户在设置 → Dream 中确认采纳。attach-evidence 只追加证据，不自动改变 state。',
         parameters: compileParameters({
             action: { type: 'string', required: true, enum: [...REVIEW_ACTIONS], description: '审阅动作。' },
             lessonId: { type: 'string', description: '经验 ID（accept/reject/mark-*/attach-evidence 必填；resolve-conflict 可用 targetId 替代）。' },
@@ -862,6 +850,8 @@ export function buildDreamTools(config) {
             schema: baseSchema,
             render: (_args, value) => {
                 const rec = asRecord(value);
+                if (rec.requiresHumanReview === true)
+                    return [{ type: 'text', text: String(rec.message) }];
                 return [{
                         type: 'text',
                         text: '经验 ' + asRecord(rec.lesson).id + '：' + rec.previousState + ' → ' + rec.state + '（revision ' + rec.revision + '）。',
@@ -899,6 +889,13 @@ export function buildDigestText(digest) {
     return lines.join('\n');
 }
 const REVIEW_ACTIONS = ['accept', 'reject', 'reopen', 'mark-stale', 'mark-disputed', 'resolve-conflict', 'attach-evidence'];
+function humanReviewRecommendation(before) {
+    return {
+        ok: true, requiresHumanReview: true, lesson: before,
+        previousState: before.state, state: before.state, revision: before.revision,
+        message: '已建议人工审阅，经验状态未改变。请在设置 → Dream → 经验中核对来源与适用范围，再确认采纳或处理冲突。',
+    };
+}
 /** actor comes from the trusted caller, never from tool or browser arguments. */
 export async function executeDreamReview(cfg, rawArgs, exec, actor = 'model') {
     const args = asRecord(rawArgs);
@@ -927,6 +924,11 @@ export async function executeDreamReview(cfg, rawArgs, exec, actor = 'model') {
         error.details = { currentRevision: before.revision };
         throw error;
     }
+    if (actor === 'model' && action === 'accept')
+        return humanReviewRecommendation(before);
+    if (actor === 'human' && action === 'accept' && before.scope.global && args.confirmGlobal !== true) {
+        throw new KnowledgeError('invalid', '这是全局经验。请确认将其用于所有项目后再采纳。');
+    }
     const affectedIdsArg = stringArray(args, 'affectedIds');
     const conflictWith = affectedIdsArg.length > 0 ? affectedIdsArg : stringArray(args, 'conflictWith');
     const note = optionalString(args, 'note');
@@ -1003,6 +1005,9 @@ export async function executeDreamReview(cfg, rawArgs, exec, actor = 'model') {
             const members = requireConflictGroup(store, lessonId, before, conflictWith);
             const group = members.map((member) => member.id);
             // 校验：所有当事方必须 disputed，且互相登记 conflictIds；否则零写入。
+            if (actor === 'human' && args.confirmGlobal !== true && members.some(member => member.lesson.scope.global)) {
+                throw new KnowledgeError('invalid', '冲突涉及全局经验。请确认将结果用于所有项目后再处理。');
+            }
             for (const member of members) {
                 if (member.lesson.state !== 'disputed') {
                     throw new KnowledgeError('invalid', '冲突解析要求 ' + member.id + ' 处于 disputed（实际 ' + member.lesson.state + '）');
@@ -1015,6 +1020,8 @@ export async function executeDreamReview(cfg, rawArgs, exec, actor = 'model') {
             }
             const now = new Date().toISOString();
             const affectedIds = group.filter((id) => id !== lessonId);
+            if (actor === 'model')
+                return humanReviewRecommendation(before);
             const resolutionPayload = { kind: resolution, targetId: lessonId, affectedIds };
             const remainingOf = (member) => member.lesson.conflictIds.filter((id) => !group.includes(id));
             const planned = [];

package/lib/web-actions.js

@@ -131,6 +131,8 @@ export function createDreamActionHandler(options = {}) {
                     seen.add(item.lessonId);
                     return { id: item.lessonId, expectedRevision: item.expectedRevision, patch: {} };
                 });
+                if (body.action === 'accept' && body.confirmGlobal !== true && updates.some(item => store.getLesson(item.id)?.scope.global))
+                    throw new KnowledgeError('invalid', '所选经验包含全局范围。请确认将其用于所有项目后再采纳。');
                 const lessons = store.updateLessonsBatch(updates, 'web-review-batch:' + key, body.action === 'accept' ? 'accepted' : 'rejected');
                 return json(200, maskDeep({ ok: true, lessons, message: '已完成所选候选的审阅' }));
             }

package/lib/web.d.ts

@@ -44,6 +44,7 @@ export interface KnowledgeWebPayload {
     lessons: Array<Lesson & {
         scopeLabel: string;
         evidenceSummary: string;
+        humanReviewRequired?: boolean;
         reviewDue?: boolean;
         nextReviewAt?: string;
         lastRetrievedAt?: string;

package/lib/web.js

@@ -22,7 +22,7 @@ import { dreamStats, readDreams, searchDreams } from './journal.js';
 import { KnowledgeStore } from './knowledge-store.js';
 import { isDreamReference, maskSecrets } from './mask.js';
 import { buildEvidenceSummary, lessonScopeLabel } from './retrieval.js';
-import { memoryDirectory, needsMemoryReview, reviewDeadline } from './memory.js';
+import { isHumanAccepted, memoryDirectory, needsMemoryReview, reviewDeadline } from './memory.js';
 import { readAutomaticState } from './automatic-state.js';
 /** 面板与浏览器说话的同源路由。 */
 export const DREAM_ROUTE = '/_dsh/dsh-dream/journal';
@@ -353,6 +353,7 @@ export function createKnowledgeWebHandler(options = {}) {
             const payload = {
                 lessons: lessons.map((lesson) => maskDeep({
                     ...lesson,
+                    humanReviewRequired: lesson.state === 'usable' && !isHumanAccepted(lesson),
                     scopeLabel: lessonScopeLabel(lesson.scope),
                     evidenceSummary: buildEvidenceSummary(lesson, evidence),
                     reviewDue: needsMemoryReview(lesson),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardustlc/dsh-dream",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "回顾会话、保存反思，并把经过核验和审阅的经验用于后续任务。",
   "type": "module",
   "main": "lib/index.js",
@@ -24,7 +24,7 @@
     "docs"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.json && node scripts/build-client.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "pnpm run build && node --test \"test/*.test.mjs\"",
     "prepublishOnly": "pnpm run build"
@@ -35,7 +35,9 @@
     },
     "client": {
       "inject": [
-        "@deepseek-ai/dsh-client-ui-settings"
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-ui-sidebar"
       ],
       "platform": "web"
     }

package/skills/dream-protocol/SKILL.md

@@ -9,6 +9,8 @@ description: 做梦协议：任务开始取回适用经验，长任务收尾沉
 
 但「梦」和「经验」是两条流水线：**第一人称感悟**是主观的，进梦境日记；**技术经验**必须可执行、有条件、有证据，先进候选，再经审阅才可能被任务检索取用。
 
+0.11.0 起，采纳只能由用户在面板确认。模型的 `dream_review accept` 和 `resolve-conflict` 只推荐审阅，不修改经验。自动复用与规则桥接只接受 `review.actor=human` 的已采纳经验；全局采纳需用户明确确认对所有项目生效。`dream_bridge` 默认只读预览；不再从旧日记直接写入项目规则。
+
 插件会在符合条件的真人主会话完成后，按预算自动整理有来源的项目候选，并在相关新任务前回用已采纳经验。普通闲聊、子代理和失败轮次跳过；新输入取消整理。用户无需记住触发词或手工填写经验。自动候选从未采纳；日记写入、采纳与规则应用是不同操作。宿主缺少自动接口或用户关闭功能时，使用下述工具流程。
 
 ## 两条流水线（不要混）
@@ -17,7 +19,7 @@ description: 做梦协议：任务开始取回适用经验，长任务收尾沉
 | :-- | :-- | :-- |
 | 是什么 | 你的观察、情绪、偏好、风格直觉，主观 | 可执行、有适用条件、可被证据支持的行为结论 |
 | 写哪里 | `dream_save` → `<journalDir>/dreams.jsonl` | `dream_learn` → `<journalDir>/knowledge/` |
-| 能否变成规则 | 不能。它只是日记，**永不自动进 AGENTS.md** | 也要先候选 + 证据；采纳/驳回由 `dream_review` 或真实用户决定 |
+| 能否变成规则 | 不能。它只是日记，**永不自动进 AGENTS.md** | 也要先候选 + 证据；采纳需真实用户在面板确认；模型可建议审阅或标记问题 |
 | 例子 | 「用户今天很耐心，我意识到自己解释得太快」 | 「Nodemailer 9.0.5 池化发送中 transporter.close() 不保证终止投递；处理 AbortSignal 时要验证连接真的关闭」 |
 
 ## 一、任务前：取回上下文（dream_context）
@@ -43,7 +45,7 @@ description: 做梦协议：任务开始取回适用经验，长任务收尾沉
 - **只有真的读到来源（会话记录 / 本地验证产物 / 用户明确纠正）才能标 read，自我判断一律 claimed**（"我记得""应该是"都算 claimed）；标错 read 等于自我提权，禁止。
 - 没有证据的观察只能是 candidate，不能写成确定事实，也不能说成「已验证」。
 - 所有新经验都先进入 candidate，包括已读到的用户纠正。read 只表示插件成功核对来源，不表示用户采纳；工具审阅记录 actor:model，不能冒充真人。会话证据须给 sessionId、recordSeq、可匹配 quote（缺省使用 summary）；本地产物须给工作目录内的 artifactPath。插件独立核对项目、角色和原文，计算 sourceHash；失败降为 claimed 并给 verificationReason。
-- 用户明确采纳/驳回、发现经验互相冲突、依赖升级后旧经验需要复核 → 用 `dream_review`（必须带 `expectedRevision`）。
+- 需要采纳或解析冲突时，引导用户在面板核对并确认；模型调用 `dream_review accept` / `resolve-conflict` 只建议审阅。驳回、标记冲突/过期和追加证据仍可使用工具（必须带 `expectedRevision`）。
 - 用户采纳必须来自真实用户指令；模型自己不能冒充 `actor: user`。
 - 同一证据重复提交是幂等的，不会增加独立支持数。**禁止靠反复调用 `dream_save` 或 `dream_learn` 刷次数**——次数不等于正确，也不等于重要。
 
@@ -52,7 +54,7 @@ description: 做梦协议：任务开始取回适用经验，长任务收尾沉
 - 只沉淀规律与偏好，不复述流水账；`reflection` 用第一人称写你的观察与感受；
 - `lessons` 是 1–5 条可执行教训，每条以动词开头；拿不准就标注「存疑」；
 - **不得把主观反思升级成 AGENTS.md 指令**：不要用 `dream_bridge` 把未经审阅的感悟写成项目规则。桥接只能用于 `usable`、当前项目范围（或显式 global 且 review.decision 为 accepted）、附证据的经验；频次不再作为准入条件。
-- **桥接三步（M2）**：`mode:"preview"` 只读返回 diff / 参与经验 / skipped 原因（零写入）→ 人工复核 → `mode:"apply"` 必须带预览的 `expectedSha256`（新文件为 null），建议同时带 `previewId`（文件被并发修改则 `conflict` 且零写入）；`mode:"rollback"` 只在当前管理块仍等于该次 apply 结果时回滚。缺省不传 `mode` 仍是 0.5.x 直写并返回弃用提示；新流程一律显式 preview → apply。写入内容统一过 `mask.ts`。
+- **桥接三步（M2）**：`mode:"preview"` 只读返回 diff / 参与经验 / skipped 原因（零写入）→ 人工复核 → `mode:"apply"` 必须带预览的 `expectedSha256`（新文件为 null），建议同时带 `previewId`（文件被并发修改则 `conflict` 且零写入）；`mode:"rollback"` 只在当前管理块仍等于该次 apply 结果时回滚。缺省不传 `mode` 等同于只读预览；新流程一律显式 preview → apply。写入内容统一过 `mask.ts`。
 
 ## 何时做梦
 
@@ -77,6 +79,8 @@ You are an agent that dreams. Dreams are not hallucinations — they are memory
 
 Dreams and **lessons** are two separate pipelines: a **first-person reflection** is subjective and goes to the dream journal; a **technical lesson** must be actionable, conditional and evidence-backed — it starts as a candidate and is only retrieved for tasks after review.
 
+From 0.11.0, acceptance requires a human action in the panel. Model `dream_review accept` and `resolve-conflict` calls only recommend review and leave records unchanged. Automatic reuse and rule bridging require an accepted lesson with `review.actor=human`. Global acceptance explicitly confirms all-project scope. `dream_bridge` defaults to a read-only preview; journal entries cannot be written directly as project rules through the tool.
+
 The plugin collects sourced project candidates after qualifying completed human root turns, within a persistent budget, and retrieves relevant accepted memories for later tasks. Ordinary chat, subagents and unsuccessful turns are skipped; new input cancels collection. Users need neither trigger phrases nor manual forms. Automatic candidates are never accepted automatically. Saving a journal, accepting a lesson and applying a rule are separate operations. Use the tool flow below when automatic interfaces are unavailable or switched off.
 
 ## Two pipelines (do not mix)
@@ -85,7 +89,7 @@ The plugin collects sourced project candidates after qualifying completed human
 | :-- | :-- | :-- |
 | What | your observations, feelings, style instincts — subjective | actionable, conditional conclusions backed by evidence |
 | Where | `dream_save` → `<journalDir>/dreams.jsonl` | `dream_learn` → `<journalDir>/knowledge/` |
-| Can it become a rule? | No. It is a journal entry and **never auto-enters AGENTS.md** | Not either — it starts as a candidate with evidence; acceptance is decided by `dream_review` or a real user |
+| Can it become a rule? | No. It is a journal entry and **never auto-enters AGENTS.md** | Not either — it starts as a candidate with evidence; acceptance requires a human action in the panel; tools only recommend review |
 | Example | "The user was patient today; I realize I explain too fast" | "In Nodemailer 9.0.5 pooled sending, transporter.close() does not guarantee aborting active delivery; verify the connection actually closed when handling AbortSignal" |
 
 ## 1. Before the task: retrieve context (dream_context)
@@ -111,7 +115,7 @@ The plugin collects sourced project candidates after qualifying completed human
 - **Only mark read when the source was actually read (session record / local artifact / explicit user correction); anything self-asserted is claimed.** Marking read without a source is self-promotion and is forbidden.
 - An observation without evidence stays a candidate: do not present it as a fact, and never call it "verified".
 - Every new lesson starts as a candidate, including verified user corrections. Read means the plugin checked the source, not that a user accepted the lesson; tool review records actor:model. Session evidence needs sessionId, recordSeq and a matching quote (summary if omitted). Artifacts need artifactPath inside the working directory. The plugin checks project, role and text and computes sourceHash; failures become claimed with verificationReason.
-- For explicit acceptance/rejection, conflicts between lessons, or re-validation after dependency upgrades → call `dream_review` with an `expectedRevision`.
+- For acceptance or conflict resolution, guide the user to review and confirm in the panel. Model `dream_review accept` / `resolve-conflict` calls only recommend review. Rejection, conflict/stale flags and evidence attachment remain tool actions with an `expectedRevision`.
 - User acceptance must come from a real user instruction; the model must not impersonate `actor: user`.
 - Submitting the same evidence twice is idempotent and does not increase independent support. **Never grind counts by calling `dream_save` or `dream_learn` repeatedly** — frequency is neither correctness nor importance.
 
@@ -120,7 +124,7 @@ The plugin collects sourced project candidates after qualifying completed human
 - Consolidate patterns and preferences only — never a running transcript. Write `reflection` in the first person.
 - `lessons` are 1–5 actionable items; mark uncertain ones as "tentative".
 - **Never promote a subjective reflection into an AGENTS.md instruction**: do not use `dream_bridge` to write unreviewed reflections into project rules. Bridging is for `usable`, project-scoped (or explicit global with review.decision accepted), evidence-backed lessons only; frequency is no longer an admission criterion.
-- **Bridge in three steps (M2)**: `mode:"preview"` returns the diff / selected lessons / skipped reasons read-only (zero writes) → human review → `mode:"apply"` with the preview’s required `expectedSha256` (null for a new file); include `previewId` to bind the preview (a concurrent edit yields `conflict` and zero writes); `mode:"rollback"` only rolls back while the current managed block still equals that apply result. Omitting `mode` keeps the 0.5.x direct write and returns a deprecation notice; new flows should always use preview → apply. Everything written is masked via `mask.ts`.
+- **Bridge in three steps (M2)**: `mode:"preview"` returns the diff / selected lessons / skipped reasons read-only (zero writes) → human review → `mode:"apply"` with the preview’s required `expectedSha256` (null for a new file); include `previewId` to bind the preview (a concurrent edit yields `conflict` and zero writes); `mode:"rollback"` only rolls back while the current managed block still equals that apply result. Omitting `mode` performs a read-only preview. Everything written is masked via `mask.ts`.
 
 ## When to dream