@yeaft/webchat-agent 0.1.914 → 0.1.915

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yeaft/webchat-agent",
-  "version": "0.1.914",
+  "version": "0.1.915",
   "description": "Remote agent for Yeaft WebChat — connects worker machines to the central server",
   "main": "index.js",
   "type": "module",

package/yeaft/compact/compactor.js

@@ -61,7 +61,25 @@ export class Compactor {
    *        the trimmed summary text (or '' on failure — `compactHistory`
    *        treats that as a soft failure).
    * @param {() => number|undefined} [opts.getMaxContextTokens]
-   *        Returns `config.maxContextTokens` for `shouldCompactHistory`.
+   *        Returns the model-aware context window (preferred — provided
+   *        by `session.js` via `resolveContextWindow(model, config)`) or
+   *        a flat `config.maxContextTokens` fallback. The number is
+   *        threaded into `shouldCompactHistory` as `maxContextTokens`.
+   * @param {() => number|undefined} [opts.getTriggerRatio]
+   *        Returns the fraction-of-context threshold (e.g. `0.7` for the
+   *        user-stated "70% of model context"). The application-wide
+   *        default is 0.7, enforced by the injector in `session.js` — a
+   *        finite number in (0, 1) wins, anything else falls back to 0.7.
+   *
+   *        When NO injector is wired (typically test fixtures that omit
+   *        `getTriggerRatio` entirely), this falls through to
+   *        `shouldCompactHistory`'s library default (`DEFAULT_TOKEN_FRACTION`
+   *        = 0.5). That gap is intentional: the library default is the
+   *        documented unit-test contract, the application default is the
+   *        user-facing product contract, and the injector boundary is what
+   *        keeps them from drifting in production. Production callers MUST
+   *        wire `getTriggerRatio` (session.js does). Live-read so a config
+   *        edit takes effect without reboot.
    * @param {() => string|undefined} [opts.getLanguage]
    *        Returns the live `config.language`. Threaded into
    *        `compactHistory` so the compactor's summary prompt + the
@@ -72,7 +90,7 @@ export class Compactor {
    *        `yeaft_history_compacted` WS event. Default: no-op. Can be
    *        replaced post-construction via `setOnCompacted`.
    */
-  constructor({ summarize, getMaxContextTokens, getLanguage, onCompacted } = {}) {
+  constructor({ summarize, getMaxContextTokens, getTriggerRatio, getLanguage, onCompacted } = {}) {
     if (typeof summarize !== 'function') {
       throw new TypeError('Compactor: summarize is required');
     }
@@ -80,6 +98,9 @@ export class Compactor {
     this._getMaxContextTokens = typeof getMaxContextTokens === 'function'
       ? getMaxContextTokens
       : () => undefined;
+    this._getTriggerRatio = typeof getTriggerRatio === 'function'
+      ? getTriggerRatio
+      : () => undefined;
     this._getLanguage = typeof getLanguage === 'function'
       ? getLanguage
       : () => undefined;
@@ -183,12 +204,19 @@ export class Compactor {
       const snapshotLen = snapshot.length;
 
       const maxContextTokens = this._getMaxContextTokens();
+      const tokenFraction = this._getTriggerRatio();
 
       // Cheap O(n) precheck so we don't bother engaging the LLM at all
       // when the conversation is still small. `compactHistory` runs the
       // same check internally, but only after building the summarizer
       // input — this keeps small chats off the LLM altogether.
-      const triage = shouldCompactHistory(snapshot, { maxContextTokens });
+      //
+      // `tokenFraction` is the user-configurable ratio knob — production
+      // wiring (session.js) ALWAYS returns a finite (0,1) number defaulting
+      // to 0.7. The `undefined` branch (helper falls back to its
+      // `DEFAULT_TOKEN_FRACTION = 0.5`) is reachable only when a caller
+      // skips `getTriggerRatio` entirely — see constructor JSDoc.
+      const triage = shouldCompactHistory(snapshot, { maxContextTokens, tokenFraction });
       if (!triage.trigger) return;
 
       const summarize = ({ system, prompt }) =>
@@ -197,6 +225,7 @@ export class Compactor {
       const result = await compactHistory(snapshot, {
         summarize,
         maxContextTokens,
+        tokenFraction,
         language: this._getLanguage(),
       });
       if (!result || !result.compacted) {

package/yeaft/{memory/consolidate.js → compact/partition.js}

@@ -1,17 +1,28 @@
 /**
- * consolidate.js — Hot-window budget partitioning utilities.
+ * compact/partition.js — Hot-window budget partitioning utilities.
  *
- * Reduced surface (PR-B rip): the legacy LLM-driven consolidate() pipeline
- * (compact summary + entries-store extraction) has been retired. The only
- * survivors are the pure functions used by the compact orchestrator:
+ * (Renamed from `agent/yeaft/memory/consolidate.js` on 2026-06-09.) The
+ * legacy "consolidate" name and the `memory/` location both pointed at
+ * a single concept — Layer-A memory consolidation — that has since been
+ * cleanly split:
  *
- *   - shouldConsolidate(store, budget) — decide when to compact
- *   - partitionMessages(messages, budget) — split hot messages into
- *     toArchive / toKeep based on token budget
+ *   - Memory consolidation / system-prompt maintenance is owned by
+ *     Dream V2 (per-group diff -> triage -> merge by target scope ->
+ *     apply via segment-store + summary-store). NONE of that lives here.
  *
- * Memory extraction is now owned by Dream V2 (per-group diff -> triage ->
- * merge by target scope -> apply via segment-store + summary-store).
- * Conversation summarisation lives in compact/orchestrator.js's hooks.
+ *   - Conversation history compaction (the thing this file ACTUALLY
+ *     serves) is owned by `compact/orchestrator.js`. The two functions
+ *     below — `shouldCompact` (the "hot window over budget?" predicate
+ *     that gates `compact/orchestrator.js`) and `partitionMessages`
+ *     (hot/cold split by token budget) are pure helpers for that
+ *     orchestrator.
+ *
+ * Why the move matters: keeping these under `memory/` invited the next
+ * person to think "this is part of the memory subsystem" and reach for
+ * it during a Dream-v2 patch — the exact category error
+ * `DESIGN-COMPACT-VS-DREAM.md` (sibling doc) warns against. Putting
+ * them next to `compact/orchestrator.js` makes the ownership obvious
+ * from the file tree.
  */
 
 // ─── Constants ──────────────────────────────────────────────────
@@ -26,13 +37,18 @@ export const COMPACT_KEEP_RATIO = 0.4;
 const MIN_KEEP_MESSAGES = 3;
 
 /**
- * Check if consolidation should be triggered.
+ * Check if a compact pass should be triggered.
+ *
+ * Semantically: "is the hot window over budget?" — the predicate that
+ * gates `compact/orchestrator.js`. Renamed from `shouldConsolidate` on
+ * 2026-06-09; the old name leaked Dream V2's vocabulary into a file
+ * that exclusively serves Compact.
  *
  * @param {import('../conversation/persist.js').ConversationStore} conversationStore
  * @param {number} [budget] — MESSAGE_TOKEN_BUDGET
  * @returns {boolean}
  */
-export function shouldConsolidate(conversationStore, budget = DEFAULT_MESSAGE_TOKEN_BUDGET) {
+export function shouldCompact(conversationStore, budget = DEFAULT_MESSAGE_TOKEN_BUDGET) {
   const hotTokens = conversationStore.hotTokens();
   return hotTokens > budget;
 }

package/yeaft/engine.js

@@ -23,7 +23,7 @@ import { buildSystemPrompt, buildWorkerPrompt } from './prompts.js';
 import { LLMContextError, LLMAbortError } from './llm/adapter.js';
 import { runMemoryPreflow, buildRelevantScopes } from './sessions/pre-flow.js';
 import { readProjectDoc, pickProjectDocFile, DEFAULT_PROJECT_DOC_MAX_BYTES } from './sessions/project-doc.js';
-import { shouldConsolidate, partitionMessages } from './memory/consolidate.js';
+import { partitionMessages } from './compact/partition.js';
 import { runCompact as runCompactOrchestrator } from './compact/orchestrator.js';
 import { evaluateCompactTriggers } from './compact/triggers.js';
 import { archiveTurn } from './archive/turn-archive.js';
@@ -257,8 +257,18 @@ export function buildResidentEntries(args) {
   if (args.sessionId && summaries.group) {
     out.push({ scope: `group/${args.sessionId}`, summary: summaries.group });
   }
-  if (args.ownVpId && summaries.vp && !isVpSeedBackfillStub(summaries.vp)) {
-    out.push({ scope: `vp/${args.ownVpId}`, summary: summaries.vp });
+  // VP per-session isolation (2026-06-09): the VP summary scope MUST be
+  // session-qualified. The legacy bare `vp/<id>` scope was a structural
+  // bug — `summaries.vp` is actually loaded from `group/<sessionId>/vp/<id>/summary.md`
+  // (see #loadLayerASummaries, kind:'group-vp'), so labelling it `vp/<id>`
+  // in the Resident layer (a) collides with the ACL regex in store-v2
+  // (which only recognises `<root>/<sid>/vp/...`) and (b) makes the same
+  // VP persona leak across DIFFERENT sessions whenever the AMS rehydrates
+  // by id rather than by full scope path. The session-qualified form
+  // makes the per-session boundary explicit and matches the on-disk
+  // layout 1:1.
+  if (args.sessionId && args.ownVpId && summaries.vp && !isVpSeedBackfillStub(summaries.vp)) {
+    out.push({ scope: `group/${args.sessionId}/vp/${args.ownVpId}`, summary: summaries.vp });
   }
   return out;
 }
@@ -1481,6 +1491,23 @@ export class Engine {
       projectDoc,
     });
 
+    // ─── HARD INVARIANT: Compact ≠ Dream (read DESIGN-COMPACT-VS-DREAM.md) ─
+    // Compact summary (this block) ONLY lands in the messages array head as
+    // a `<conversation_summary>` user/assistant pair. It MUST NEVER appear
+    // in the system prompt — that was the bug DESIGN-PROMPT §4.3 banned.
+    //
+    // Inversely: Dream V2's output (per-scope `memory.md` / `summary.md`)
+    // flows exclusively through `prompts.js#buildSystemPrompt`'s §6 Memory
+    // section via the AMS Resident layer (see `engine.js#buildResidentEntries`).
+    // It MUST NEVER appear in the messages array.
+    //
+    // Two write roots, two scheduler triggers, two prompt slots — never
+    // mixed. Anyone touching this section must read
+    // `agent/yeaft/DESIGN-COMPACT-VS-DREAM.md` before changing the wiring;
+    // the boundary has been violated twice in this codebase's history and
+    // each time it took an LLM cache-thrash + persona-dup follow-up PR to
+    // unwind.
+    //
     // ─── Compact summary as messages-array head (DESIGN-PROMPT §4.3) ─
     // The previous code placed the compact summary inside the system
     // prompt; that broke prompt-cache hit-rate (any compact update

package/yeaft/memory/seed-backfill.js

@@ -1,54 +1,60 @@
 /**
- * memory/seed-backfill.js — Run-once backfill of `summary.md` for VPs and
- * groups that were created BEFORE the create-time seed was added (PR
- * "fix-yeaft-context-and-memory"). Without backfill, an existing user's
- * `grp_claude` group and `steve` VP never get a Layer-A resident summary —
- * `engine.#prepareAms` then renders an empty memory section every turn,
- * which is the user-visible Bug #2.
- *
- * Idempotency:
- *   - Reads `<root>/<scopeDir>/summary.md`. If it already has any non-
- *     empty content, the backfill is a no-op for that scope.
- *   - Only seeds when the file is missing OR empty.
- *
- * This runs sync at session boot. Failures are logged and swallowed —
- * a permission error must NEVER prevent the session from loading.
+ * memory/seed-backfill.js — stub-marker contract + one-shot legacy archive.
+ *
+ * Earlier versions of this module shipped `backfillVpSummaries` /
+ * `migrateLegacyVpSummaries` / `backfillGroupSummaries` / `runSummaryBackfill`
+ * that wrote files into BARE `<root>/vp/<id>/summary.md` and
+ * `<root>/group/<id>/summary.md` paths. Those paths are not the layout the
+ * Engine actually reads: `engine.#loadLayerASummaries` looks under
+ * `group/<sessionId>/vp/<id>/summary.md` (kind: 'group-vp'). The backfill
+ * helpers were therefore writing **orphan files** that nothing ever read.
+ *
+ * Per user directive (2026-06-09 — "VP per-session isolation + clean up the
+ * dead backfill code"), the orphan writers have been deleted. What remains:
+ *
+ *   - `VP_STUB_MARKER` / `isVpSeedBackfillStub`: still used by `engine.js`
+ *     and `engine.#prepareAms` to skip the own-VP Resident entry when its
+ *     summary is just the stub. Section 1 (`renderVpPersona`) is the source
+ *     of truth for own-VP identity; surfacing the stub in Section 6 would
+ *     dup the same `# Name / Role` text. New seed paths (vp-crud.js,
+ *     group-crud.js, seed-default.js) use `seedSummaryIfMissingSync` from
+ *     store-v2.js to write directly to the correct scope dir.
+ *
+ *   - `archiveLegacyScopes(root)`: one-shot migration that moves the truly
+ *     dead top-level `vp/`, `feature/`, `topic/` dirs to `.legacy/`. Per
+ *     user directive "硬切，老的就不要了" — we do NOT migrate per-record,
+ *     just move once. They're never read again; forensics-only.
+ *
+ * Anything that *looks* like a backfill function and lived here before is
+ * gone. If you need to seed a missing summary today, call
+ * `seedSummaryIfMissingSync` directly from the CRUD entry point — that's
+ * the only path that writes to the correct (group-scoped) location.
  */
 
-import { existsSync, mkdirSync, readFileSync, writeFileSync, readdirSync, statSync, renameSync } from 'fs';
+import { existsSync, mkdirSync, renameSync } from 'fs';
 import { join } from 'path';
-import { homedir } from 'os';
-import { parseRoleMd } from '../vp/vp-store.js';
-
-const DEFAULT_MEMORY_ROOT = join(homedir(), '.yeaft', 'memory');
 
 /**
- * Marker stamped into every VP summary written by this module.
- *
- * Two consumers care about it:
- *   1. `engine.#prepareAms` uses `isVpSeedBackfillStub` to skip the
- *      `vp/<ownVpId>` Resident entry when its summary is just our stub —
- *      the real persona is already rendered as Section 1 of the system
- *      prompt by `renderVpPersona`. Without the skip, AMS Resident dups
- *      Section 1 with redundant `name + role` labels.
- *   2. `migrateLegacyVpSummaries` uses absence-of-marker + presence of
- *      `**Persona:**` to identify pre-fix summary.md files (which copied
- *      up to 800 chars of `role.md` body) and rewrite them as stubs.
+ * Marker stamped into every VP summary written by `seedSummaryIfMissingSync`
+ * for the VP scope. Consumed by `isVpSeedBackfillStub` (below) so
+ * `engine.#prepareAms` can skip the `vp/<ownVpId>` Resident entry when the
+ * file is just the stub. Real Dream-v2 summaries lack the marker and ARE
+ * surfaced in Section 6 normally.
  *
  * Bump the version suffix when the stub format changes meaningfully so
- * old stamps can be re-migrated if needed.
+ * old stamps can be re-detected if needed.
  */
 export const VP_STUB_MARKER = '<!-- seed-backfill:vp-stub v1 -->';
 
 /**
- * True iff the given summary text was produced by this module's VP stub
- * writer (i.e. carries the marker comment). Whitespace-tolerant.
+ * True iff the given summary text was produced by a VP stub writer
+ * (i.e. carries the marker comment). Whitespace-tolerant.
  *
- * Used by `engine.#prepareAms` to decide whether to surface the
- * `vp/<ownVpId>` summary as a Resident AMS entry. Stubs are skipped so
- * Section 1 (`renderVpPersona`) is the sole rendering of own-VP identity;
- * Dream-v2's eventual real summary will lack the marker and be surfaced
- * normally.
+ * Used by `engine.#prepareAms` (via `buildResidentEntries`) to decide
+ * whether to surface the `group/<sessionId>/vp/<ownVpId>` summary as a
+ * Resident AMS entry. Stubs are skipped so Section 1 (`renderVpPersona`)
+ * is the sole rendering of own-VP identity; Dream-v2's eventual real
+ * summary will lack the marker and be surfaced normally.
  *
  * @param {string|null|undefined} text
  * @returns {boolean}
@@ -58,249 +64,14 @@ export function isVpSeedBackfillStub(text) {
   return text.includes(VP_STUB_MARKER);
 }
 
-function readIfPresent(path) {
-  try {
-    if (!existsSync(path)) return '';
-    return readFileSync(path, 'utf-8').trim();
-  } catch {
-    return '';
-  }
-}
-
-function writeAtomicSync(path, body) {
-  mkdirSync(join(path, '..'), { recursive: true });
-  writeFileSync(path, (body || '').trim() + '\n', 'utf-8');
-}
-
-/**
- * Build a synthetic VP summary from the on-disk role.md.
- *
- * IMPORTANT — this is a STUB that lives until Dream-v2 writes a real
- * per-scope summary. Earlier versions copied up to 800 chars of the
- * `role.md` body into `summary.md`. That body is *also* rendered as
- * Section 1 of the system prompt (`renderVpPersona` in `prompts.js`),
- * so the same persona text reappeared in `## Active Memory Set →
- * Resident → vp/<id>` — the user-visible "Why is the persona defined
- * twice?" bug.
- *
- * The summary.md placeholder is therefore deliberately minimal: just
- * the VP's display name + role label. Layer-A AMS still sees a
- * non-empty `vp/<id>` resident entry (so adjust/recall scope wiring
- * stays unchanged), but the persona body is rendered exactly once,
- * by Section 1.
- *
- * Once Dream-v2 produces a real summary for this scope it overwrites
- * this stub — see `idempotency` note at the top of the file.
- *
- * Delegates frontmatter parsing to `vp-store.js#parseRoleMd` so the
- * backfill stays in sync with the production loader.
- *
- * @param {string} libDir
- * @param {string} vpId
- * @returns {string|null}
- */
-function readVpRoleSummary(libDir, vpId) {
-  const rolePath = join(libDir, vpId, 'role.md');
-  if (!existsSync(rolePath)) return null;
-  let raw = '';
-  try { raw = readFileSync(rolePath, 'utf-8'); } catch { return null; }
-
-  const { meta } = parseRoleMd(raw);
-  const name = String(meta.name || vpId).trim() || vpId;
-  const role = typeof meta.role === 'string' ? meta.role.trim() : '';
-
-  const lines = [VP_STUB_MARKER, '', `# ${name}`];
-  if (role) lines.push('', `**Role:** ${role}`);
-  return lines.join('\n').trim();
-}
-
-/**
- * Walk the VP library and seed `summary.md` for every VP without one.
- *
- * @param {{ libDir: string, root?: string }} opts
- * @returns {{seeded: number, scanned: number}}
- */
-export function backfillVpSummaries({ libDir, root = DEFAULT_MEMORY_ROOT }) {
-  let scanned = 0;
-  let seeded = 0;
-  if (!existsSync(libDir)) return { scanned, seeded };
-  let entries;
-  try { entries = readdirSync(libDir); } catch { return { scanned, seeded }; }
-  for (const name of entries) {
-    const vpDir = join(libDir, name);
-    let isDir = false;
-    try { isDir = statSync(vpDir).isDirectory(); } catch { /* skip */ }
-    if (!isDir) continue;
-    if (name.startsWith('.')) continue;
-    scanned++;
-    const summaryPath = join(root, 'vp', name, 'summary.md');
-    if (readIfPresent(summaryPath)) continue;
-    const body = readVpRoleSummary(libDir, name);
-    if (!body) continue;
-    try {
-      writeAtomicSync(summaryPath, body);
-      seeded++;
-    } catch (err) {
-      console.warn(`[seed-backfill] vp ${name}: ${err?.message || err}`);
-    }
-  }
-  return { scanned, seeded };
-}
-
-/**
- * Build a synthetic group summary from group.json on disk.
- *
- * @param {string} sessionDir
- * @returns {string|null}
- */
-function readGroupSummaryBody(sessionDir) {
-  const metaPath = join(sessionDir, 'group.json');
-  if (!existsSync(metaPath)) return null;
-  let meta;
-  try { meta = JSON.parse(readFileSync(metaPath, 'utf-8')); } catch { return null; }
-  const name = (meta?.name || '').trim();
-  const roster = Array.isArray(meta?.roster) ? meta.roster : [];
-  const defaultVpId = meta?.defaultVpId || null;
-  const lines = [];
-  if (name) lines.push(`# ${name}`);
-  lines.push('', `Group with ${roster.length} member${roster.length === 1 ? '' : 's'}.`);
-  if (roster.length > 0) lines.push('', `**Members:** ${roster.join(', ')}`);
-  if (defaultVpId) lines.push('', `**Default VP:** ${defaultVpId}`);
-  return lines.join('\n').trim();
-}
-
-/**
- * Detect the *legacy* (pre-stamp) VP summary shape: a body that lacks
- * `VP_STUB_MARKER` AND contains the `**Persona:**` block written by the
- * older stub. Tight signature on purpose — we don't want to clobber
- * hand-edited or Dream-v2-produced summaries that happen to be missing
- * the marker for unrelated reasons.
- *
- * @param {string} body
- * @returns {boolean}
- */
-function isLegacyVpSummary(body) {
-  if (typeof body !== 'string' || body.length === 0) return false;
-  if (body.includes(VP_STUB_MARKER)) return false;
-  return body.includes('**Persona:**');
-}
-
-/**
- * One-shot migration: walk `<root>/vp/<id>/summary.md` and rewrite any
- * file matching the legacy shape (`isLegacyVpSummary`) into the current
- * stamped stub. Idempotent — a stamped or Dream-v2-produced file is left
- * untouched. Safe to run on every session boot.
- *
- * Existing users whose `summary.md` was written by the pre-stamp stub
- * carry the persona body forever, because `backfillVpSummaries` only
- * writes when the file is empty/missing. This pass closes that gap.
- *
- * @param {{ libDir: string, root?: string }} opts
- * @returns {{ scanned: number, migrated: number }}
- */
-export function migrateLegacyVpSummaries({ libDir, root = DEFAULT_MEMORY_ROOT }) {
-  let scanned = 0;
-  let migrated = 0;
-  const vpRoot = join(root, 'vp');
-  if (!existsSync(vpRoot)) return { scanned, migrated };
-  let entries;
-  try { entries = readdirSync(vpRoot); } catch { return { scanned, migrated }; }
-  for (const name of entries) {
-    if (name.startsWith('.')) continue;
-    const summaryPath = join(vpRoot, name, 'summary.md');
-    let body = '';
-    try {
-      if (!existsSync(summaryPath)) continue;
-      body = readFileSync(summaryPath, 'utf-8');
-    } catch { continue; }
-    scanned++;
-    if (!isLegacyVpSummary(body)) continue;
-    const stub = readVpRoleSummary(libDir, name);
-    if (!stub) continue;
-    try {
-      writeAtomicSync(summaryPath, stub);
-      migrated++;
-    } catch (err) {
-      console.warn(`[seed-backfill] migrate vp ${name}: ${err?.message || err}`);
-    }
-  }
-  return { scanned, migrated };
-}
-
-/**
- * Walk groups/ and seed `summary.md` for every group without one.
- *
- * @param {{ yeaftDir: string, root?: string }} opts
- * @returns {{seeded: number, scanned: number}}
- */
-export function backfillGroupSummaries({ yeaftDir, root = DEFAULT_MEMORY_ROOT }) {
-  let scanned = 0;
-  let seeded = 0;
-  const sessionsRoot = join(yeaftDir, 'sessions');
-  if (!existsSync(sessionsRoot)) return { scanned, seeded };
-  let entries;
-  try { entries = readdirSync(sessionsRoot); } catch { return { scanned, seeded }; }
-  for (const name of entries) {
-    if (name.startsWith('.')) continue;
-    const sessionDir = join(sessionsRoot, name);
-    let isDir = false;
-    try { isDir = statSync(sessionDir).isDirectory(); } catch { /* skip */ }
-    if (!isDir) continue;
-    scanned++;
-    const summaryPath = join(root, 'group', name, 'summary.md');
-    if (readIfPresent(summaryPath)) continue;
-    const body = readGroupSummaryBody(sessionDir);
-    if (!body) continue;
-    try {
-      writeAtomicSync(summaryPath, body);
-      seeded++;
-    } catch (err) {
-      console.warn(`[seed-backfill] group ${name}: ${err?.message || err}`);
-    }
-  }
-  return { scanned, seeded };
-}
-
-/**
- * Run all backfills sequentially. Best-effort — any per-step error is
- * logged and the next step still runs.
- *
- * Order:
- *   1. Migrate legacy VP summaries (rewrite pre-stamp persona-body stubs
- *      to current-format stamped stubs). Runs FIRST so that
- *      `backfillVpSummaries` sees consistent on-disk state and any
- *      future logic that distinguishes "stamped" vs "free-form" works
- *      uniformly downstream.
- *   2. Backfill missing VP summaries.
- *   3. Backfill missing group summaries.
- *
- * @param {{ yeaftDir: string, libDir: string, root?: string }} opts
- * @returns {{ migrate: {scanned:number, migrated:number}, vp: {scanned:number, seeded:number}, group: {scanned:number, seeded:number} }}
- */
-export function runSummaryBackfill({ yeaftDir, libDir, root = DEFAULT_MEMORY_ROOT }) {
-  let migrate = { scanned: 0, migrated: 0 };
-  let vp = { scanned: 0, seeded: 0 };
-  let group = { scanned: 0, seeded: 0 };
-  try { migrate = migrateLegacyVpSummaries({ libDir, root }); } catch (err) {
-    console.warn('[seed-backfill] vp migrate failed:', err?.message || err);
-  }
-  try { vp = backfillVpSummaries({ libDir, root }); } catch (err) {
-    console.warn('[seed-backfill] vp pass failed:', err?.message || err);
-  }
-  try { group = backfillGroupSummaries({ yeaftDir, root }); } catch (err) {
-    console.warn('[seed-backfill] group pass failed:', err?.message || err);
-  }
-  return { migrate, vp, group };
-}
-
 /**
  * archiveLegacyScopes(root) — one-shot migration for the group-isolated
  * memory refactor. The legacy flat layout had `vp/<id>/`, `feature/<id>/`,
- * and `topic/<l1>[/<l2>]/` directories at the memory root; the new layout
- * tucks each into `group/<g>/{vp,feature,topic}/...`. Per user directive
- * "硬切，老的就不要了" — we do NOT migrate per-record, we just move the
- * top-level dirs to `<root>/.legacy/<kind>/` once. They are never read
- * again; this is forensics-only.
+ * and `topic/<l1>[/<l2>]/` directories at the memory root; the current
+ * layout tucks each into `group/<g>/{vp,feature,topic}/...`. Per user
+ * directive "硬切，老的就不要了" — we do NOT migrate per-record, we just
+ * move the top-level dirs to `<root>/.legacy/<kind>/` once. They are never
+ * read again; this is forensics-only.
  *
  * Idempotent: a second invocation is a no-op when no legacy dirs remain at
  * the root. If `.legacy/<kind>/` already exists, the new move is suffixed
@@ -323,7 +94,6 @@ export function archiveLegacyScopes(root) {
         const ts = new Date().toISOString().replace(/[:.]/g, '-');
         dst = `${dst}.${ts}`;
       }
-      // eslint-disable-next-line global-require
       renameSync(src, dst);
       moved.push(kind);
     } catch (err) {

package/yeaft/session.js

@@ -23,6 +23,7 @@ import { MCPManager } from './mcp.js';
 import { createFullRegistry } from './tools/index.js';
 import { Engine } from './engine.js';
 import { Compactor } from './compact/compactor.js';
+import { resolveContextWindow } from './models.js';
 import { ToolUsageStats } from './stats/tool-usage.js';
 // H2.f.5 removed the old user-facing thread pipeline/dispatcher. The base
 // session still exposes a single default Engine; PR #797 adds group VP thread
@@ -45,7 +46,7 @@ import { ToolUsageStats } from './stats/tool-usage.js';
 import { ensureDefaultSessionIfEmpty } from './sessions/session-crud.js';
 import { seedDefaultVps } from './vp/seed-defaults.js';
 import { topUpDefaultVps } from './vp/seed-topup.js';
-import { runSummaryBackfill, archiveLegacyScopes } from './memory/seed-backfill.js';
+import { archiveLegacyScopes } from './memory/seed-backfill.js';
 import { createV2DreamScheduler, bootInitEmptyGroups, bootCatchUpStaleDream } from './dream-v2/session-wiring.js';
 import { openSegmentIndex } from './memory/index-db.js';
 import { syncAll as syncSegmentIndex } from './memory/segment-sync.js';
@@ -53,6 +54,18 @@ import { openAmsRegistry } from './memory/ams-registry.js';
 import { join } from 'path';
 import { existsSync as existsSyncSafe, readFileSync as readFileSyncSafe, mkdirSync as mkdirSyncSafe } from 'fs';
 
+/**
+ * Application-wide default for `Compactor`'s trigger ratio (the
+ * "fraction of model context" gate). The user-stated requirement is
+ * "model context 的 70%"; this is the canonical literal for it. Lives
+ * in session.js (not in compactor.js) because `Compactor` is also used
+ * by test fixtures that intentionally skip the ratio injector to
+ * exercise the library default (`history-compact.js#DEFAULT_TOKEN_FRACTION`).
+ * The two defaults are kept separate on purpose — see the Compactor
+ * constructor JSDoc for the boundary.
+ */
+const DEFAULT_COMPACT_TRIGGER_RATIO = 0.7;
+
 /**
  * @typedef {Object} SessionOptions
  * @property {string} [dir] — Yeaft data directory override (default: ~/.yeaft)
@@ -342,20 +355,15 @@ export async function loadSession(options = {}) {
     // the sidebar shows the empty state + "create session" CTA, which
     // is the explicit behaviour the user asked for.
 
-    // task-fix-memory-load: backfill summary.md for VPs / groups created
-    // before the create-time seed was added. Without this, an existing
-    // user's `grp_claude` and `steve` VP have an empty Layer-A resident
-    // summary every turn (memory section in the system prompt is just
-    // the `active_scope` header). Idempotent — only writes when missing.
-    try {
-      runSummaryBackfill({
-        yeaftDir,
-        libDir: join(yeaftDir, 'virtual-persons'),
-        root: join(yeaftDir, 'memory'),
-      });
-    } catch (err) {
-      console.warn(`[Yeaft] runSummaryBackfill failed: ${err?.message || err}`);
-    }
+    // 2026-06-09 (VP per-session isolation): `runSummaryBackfill` was
+    // removed here. It walked `vp/<id>/` and `group/<id>/` at the memory
+    // root, writing `summary.md` files into bare paths the Engine never
+    // reads (`engine.#loadLayerASummaries` reads `group/<sid>/vp/<id>/...`
+    // — kind:'group-vp'). The backfill therefore generated orphan files
+    // on every boot. See `memory/seed-backfill.js` for the historical
+    // context. Real seeding happens at create time via
+    // `seedSummaryIfMissingSync` from `store-v2.js`, called by vp-crud /
+    // group-crud / seed-default — those write to the correct scope dirs.
   }
 
   // ─── 6. Load skills ────────────────────────────────────
@@ -430,8 +438,25 @@ export async function loadSession(options = {}) {
   const compactor = new Compactor({
     summarize: ({ system, prompt, maxTokens } = {}) =>
       engine.summarizeForCompact({ system, prompt, maxTokens }),
+    // Resolve the model's true context window (GPT-5 256K vs Claude 200K
+    // etc.) instead of pinning to a flat `config.maxContextTokens`.
+    // The 70% threshold then floats with the model in use — the
+    // user-stated requirement ("超过 model context 70% 这一个约束").
     getMaxContextTokens: () =>
-      typeof config.maxContextTokens === 'number' ? config.maxContextTokens : undefined,
+      resolveContextWindow(
+        typeof config.model === 'string' && config.model
+          ? config.model
+          : (config.primaryModel || ''),
+        config
+      ),
+    // Trigger ratio knob. Defaults to DEFAULT_COMPACT_TRIGGER_RATIO (0.7)
+    // per the user directive; a finite number in (0, 1) wins. Anything
+    // else (NaN, ≤0, ≥1, missing) falls back to the default so a typo in
+    // config.json can't disable compact.
+    getTriggerRatio: () => {
+      const r = Number(config?.compactTriggerRatio);
+      return Number.isFinite(r) && r > 0 && r < 1 ? r : DEFAULT_COMPACT_TRIGGER_RATIO;
+    },
     // Live-read: `config.language` is mutated in place by
     // `engine.setLanguage()` (which broadcastLanguageChange fans out to
     // every per-VP engine). The compactor must see the post-broadcast

package/yeaft/web-bridge.js

@@ -2478,6 +2478,35 @@ export async function handleYeaftSessionSend(msg) {
   // Do not wait for every driver in the group: unrelated older threads may keep
   // running for minutes and must not hold this request lifecycle hostage.
   await waitForRoutePromises(report?.message?.id);
+
+  // Post-turn compaction. Fire-and-forget — does NOT block the response
+  // path. The Compactor's own precheck (`shouldCompactHistory`) decides
+  // whether to engage the LLM, using the trigger ratio wired in
+  // `session.js` (default 70% of model context, knob:
+  // `config.compactTriggerRatio`). The single-flight + anti-starvation
+  // logic inside Compactor handles concurrent turns; the entry-gate
+  // `awaitInFlight` at the top of `handleYeaftSessionSend` (~:2291)
+  // ensures a follow-up turn never reads a half-mutated history.
+  //
+  // Why a per-call historyHandle: Compactor must NEVER close over a
+  // frozen snapshot — the array reference can be swapped by
+  // `consolidate`, session reset, or `route_forward` bursts. The handle
+  // re-resolves on each `get` via the same sessionId-keyed helpers used
+  // everywhere else in the bridge.
+  //
+  // Naming asymmetry note: `getOrCreateSessionHistory` and
+  // `setGroupHistory` are intentionally NOT renamed to match. Both are
+  // session-keyed today (the `set` helper's name is a historical alias
+  // from the pre-VP-thread era), but per CLAUDE.md's "不要为了改名而批量
+  // 重命名" guardrail we leave the wire-compat names alone and rely on
+  // co-location to make the symmetry obvious. The source-pinning test
+  // `web-bridge-post-turn-compact-wiring.test.js` matches both names.
+  if (session?.compactor && sessionId) {
+    session.compactor.scheduleAfterTurn(sessionId, {
+      get: () => getOrCreateSessionHistory(sessionId),
+      set: (next) => setGroupHistory(sessionId, next),
+    });
+  }
 }
 
 /**