dsh-continual-evolve 0.11.0 → 0.12.1

package/README.md

@@ -1,171 +1,98 @@
 # dsh-continual-evolve
 
-[中文](README.zh.md) | English
+English | [中文](README.zh.md)
 
 [![awesome · DSH plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com)
 [![npm](https://img.shields.io/npm/v/dsh-continual-evolve)](https://www.npmjs.com/package/dsh-continual-evolve)
 [![CI](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml/badge.svg)](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-339933)](package.json)
-[![Tests](https://img.shields.io/badge/tests-1020%20passing-brightgreen)]()
+[![Tests](https://img.shields.io/badge/tests-62%20passing-brightgreen)]()
 [![Coverage · statements](https://img.shields.io/badge/coverage_statements-98%25-brightgreen)]()
-[![Coverage · branches](https://img.shields.io/badge/coverage_branches-93%25-green)]()
-[![Coverage · functions](https://img.shields.io/badge/coverage_functions-99%25-brightgreen)]()
+[![Coverage · branches](https://img.shields.io/badge/coverage_branches-95%25-green)]()
+[![Coverage · functions](https://img.shields.io/badge/coverage_functions-100%25-brightgreen)]()
 
-Continual self-evolution for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness): a versioned, auditable, rollback-safe harness state layer — prompt notes, memories, skills, subagent specs — refined from session trajectories.
-
-**The model proposes, the code guarantees.** Every mechanical safety property — schema validation, atomic writes, snapshots, versioning, audit trail, acceptance decisions — is enforced in code, never by prompt discipline.
+A workspace-memory plugin for the [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (`dsh`): one plain-markdown memory store per workspace (`<workspace>/.evolve/memory/`), the index injected at session start, used by the model with its **native file tools** — and nothing else.
 
 ## Why
 
-Agents accumulate reusable experience (repeated failures, durable facts, reusable procedures) and forget it next session. This plugin turns that experience into first-class state:
-
-- **Three scopes** with merge semantics (global < project < local): **local** per-session staging, **project** per-workspace cross-session store, **global** cross-project — plus mechanical promotion guards so only portable, substantial, non-duplicate knowledge reaches global
-- **Typed one-fact memories**: every memory entry carries a recall type (`user | feedback | project | reference`); pitfalls (`feedback`) must include Why + How to apply
-- **Moment-driven background memory agent**: a bounded ZCode-style loop wakes only at low-frequency moments (compaction, goal-blocked streaks, the session-close drain, manual wrapup), searches the frozen memory manifest, and proposes memory-only edits through a closed tool set; it cannot call agents, MCP, the network, or write source files. Successful turns never cost an LLM call — conversation writes own routine sedimentation
-- **Memory recall, projection, and receipts**: `evolve_recall` reads back full memory content by query/kind/scope/type; every memory apply also materializes a readable `MEMORY.md` index plus one fact file per entry; each extraction lands a unified audit receipt (no-op/applied/declined with duration and turn stats) and only applied outcomes notify the session
-- **Deterministic rollback**: inverse edits generated from applied results — no LLM re-guessing
-- **Benchmark loop**: candidate refinements are evaluated against frozen cases by a separate scorer before acceptance (rubric encrypted at rest)
-- **Store hygiene**: `/evolve consolidate` turns write-time conflict hints and zero-use staleness into one approved, fully reversible batch of archives — with `merge`, near-duplicate content folds into the surviving original
+Reusable experience gathered in one session (user preferences, pitfalls, project context) is forgotten by the next. ZCode solves this with a folder: one fact per markdown file plus a `MEMORY.md` index, injected at session start, read and written natively by the model, with no dedicated machinery. This plugin brings that exact shape to DSH.
 
 ## How it works
 
-1. **Sediment** — the model creates entries via `evolve_add`; the automatic Memory Agent consumes incremental snapshots only at the four low-frequency moments (compaction, goal-blocked streak, session-close drain, manual wrapup).
-2. **Capability-aware auxiliary calls** — the memory loop, planner, and wrapup resolve exact provider/model metadata through [`src/llm-text.ts`](src/llm-text.ts), use the lowest advertised enabled reasoning effort (falling back to a closing effort only when no enabled level exists), and forward the host session id for provider routing; models without reasoning metadata use their provider default.
-3. **Guard** — code-enforced validation: edit schema, blast-radius/scope coherence, and the promotion policy (project-scoped markers, thin content, near-duplicate detection, credential screening keep the global store clean — secrets are rejected at every write sink, including mount materialization). Global creates that near-duplicate an existing entry are rejected at write time (≥0.8 similarity); moderate overlaps carry a `conflictHint` for later consolidation.
-4. **Approve** — global and project writes require explicit human approval; the dialog shows the bounded structured edit diff and conflict warnings, while malformed/lost responses remain retryable rather than counting as rejection.
-5. **Apply & inject** — memory batches preflight every persistent approval, recheck abort before writes, and compensate earlier scope writes if a later batch fails; every successful scope still passes through snapshot + audit. Prompt notes and delegation specs inject into the system prompt (capped, relevance-ranked, contradicted entries demoted, zero tokens when empty); memory CONTENT injects at session start under a hard character budget, frozen per session, with the when_to_save guide riding along; skills still appear as a relevance-ordered capped directory index.
-6. **Validate & roll back** — benchmarks score candidates against frozen cases; rejected candidates roll back deterministically and are captured as draft regression cases (`auto_regression` benchmark).
+1. **Session-start injection** — the plugin registers a single system-prompt section: the `MEMORY.md` index content (whole-line truncated over budget, with a read-the-directory hint), the absolute store path, and the when_to_save guide. The section is computed once per session and reused byte-for-byte, keeping the system prompt stable and the prompt cache warm; an empty store costs zero tokens.
+2. **Native read/write** — DSH fully permits file access inside the workspace (reads are never fenced; the write fence only covers paths outside the workspace, see [`docs/FAQ.md`](docs/FAQ.md) #6). The model reads, writes, and edits memory files and maintains the index directly; the store is bootstrapped on first use.
+3. **Governance is the file** — no versions, no snapshots, no approvals, no background extraction: a bad memory is a visible file in the workspace, and deleting it is the retirement path. Memories are personal context — on bootstrap in a git workspace the store appends `.evolve/` to the workspace `.gitignore` (non-git workspaces are left untouched).
+4. **Read-only card** — the plugin mounts a read-only memory card on its own page in the official plugin manager (the `plugins.bundle.config` slot; hosts without it silently degrade to no card): recently served workspaces, per-workspace entry and index counts, and index-drift warnings (unindexed files, index rows whose file is gone). The card is a request-time projection of the files on disk — the single source of truth remains `.evolve/memory/`; the card has no edit path, edit the files directly.
+
+Memory file format (same as ZCode): frontmatter with `name` / `description` (the hook that decides whether a future session recalls it) / `metadata.type` (`user | feedback | project | reference`); `feedback` bodies must carry **Why:** and **How to apply:** lines.
 
 ## Install
 
 ```bash
-# from npm (installs and activates — ships its own bundle patch)
+# From npm (activates on install — ships its own bundle patch)
 dsh plugin add dsh-continual-evolve
 
-# or from source (first GitHub installs require approving the allowBuilds step)
+# Or from source (approve the allowBuilds build step on first GitHub install)
 dsh plugin add ZK-Andy/dsh-continual-evolve
 ```
 
-Restart the DSH profile you use (`dsh web` or the desktop host) after installing or updating.
+After installing or updating, restart the DSH profile you actually use (`dsh web` or the desktop host).
 
 ## Usage
 
-Commands (in-session):
-
-| Command | Effect |
-|---|---|
-| `/evolve` | short help + current local store (`/evolve help all` lists every subcommand) |
-| `/evolve list · history · rollback <id>` | inspect and revert (add `project` for this project's store, `global` for the cross-project store) |
-| `/evolve plan [msg]` | run the LLM planner against the store |
-| `/evolve wrapup` | assess this session's local entries: promote / archive / keep |
-| `/evolve archive · unarchive <id>` | hide from injection (data kept, restorable) |
-| `/evolve consolidate [apply] [merge]` | report (or apply) one batch archive of conflict-hinted + stale zero-use global entries; `merge` folds near-duplicate content into the survivors |
-| `/evolve failures` | aggregated failure classes (gate + benchmark) |
-| `/evolve log [tail N] [session <id>]` | plugin log |
-| `/evolve export · import <path>` | backup / restore a store |
-| `/evolve mount · unmount <skillId>` | hot-mount an executable skill as a live plugin |
-| `/evolve goal [objective · done · block]` | round-driven auto-review goal |
-| `/evolve benchmark …` | case lifecycle, runs, acceptance |
-| `/evolve pause · resume · status` | pause/resume the auto-review gate (manual tools keep working), gate state |
-| `/evolve usage` | per-entry injection counts + exact provider-reported tokens for direct memory/review/planner/wrapup/fate calls (benchmark host subagents excluded) |
-
-Model tools: `evolve_list / add / update / delete / rollback / recall` (`evolve_delete` takes `id` or a batch `ids` array — one refinement, one approval; `evolve_recall` filters by query, kinds, scopes, memory types, and limit, and returns full content with version, source, and staleness). Memory reads and writes live in the conversation — the model carries the injected memory index plus `evolve_recall`/`evolve_add` — so there are no `/evolve remember · forget · recall` counterparts: ask in chat.
-
-For third-party consumers: every applied evolution (gate or manual) appends a structured `evolve_complete` event to `reviews.jsonl` (`src/evolve-event.ts` defines the shape) alongside the human-readable audit records.
-
-`/evolve usage` also reads `evolve/token-usage.jsonl`: exact provider-reported input/cache/output/total tokens for the plugin's direct memory-agent, review, planner, manual-wrapup, and automatic-fate calls. The report covers a retained tail rather than lifetime usage, distinguishes missing provider samples, and explicitly excludes host benchmark subagents, their agent-loop calls, and per-entry injection attribution.
-
-Injection shape: prompt notes and delegation specs inject with content (≤6/kind × 180 chars, relevance-ranked). Memories inject as CONTENT at session start: the `evolve:memory-index` section (order 400) carries the when_to_save guide plus every memory body the budget allows, ranked `project > feedback > user > reference`, with overflow degraded to `[memory:type:id] title` hooks and the remainder counted (hard cap `memoryIndex.maxChars`, default 6000 chars; `evolve_recall` reads anything not shown). The section is computed once per session and reused byte-for-byte, so the system prompt stays stable and prompt-cache reads keep hitting — a memory written mid-session appears in the next session. Skills still appear as a relevance-ordered directory index (capped at 15 lines with a fold counter); memories no longer do. Every memory apply also refreshes a readable `MEMORY.md` index plus one fact file per entry in the store directory. With `memoryIndex.guide` off and an empty store, injection is zero tokens.
+No commands, no tools. On the first session after restart, `.evolve/memory/` is created and the index is injected automatically. Just tell the model "remember …" / "forget …" — the memory files plus their index lines are the entire persistent state. Memories written mid-session become visible in the next session (the section is frozen to protect the prompt cache); for an immediate look the model simply reads the directory. To see the whole store, open the plugin's page in the official plugin manager: the read-only card shows each workspace's entries and index drift.
 
 ## Configuration
 
 | Key | Default | Meaning |
 |---|---|---|
-| `baseDir` | resolved DSH home | root for the `evolve/` stores |
-| `autoReview` | `false` | initial Memory Agent default when no `evolve/runtime.json` exists yet; the listener is always registered, so this is not a registration gate |
-| `memoryMinUserWords` | `3` | ZCode-style minimum lexical words in one direct user text part; uses CJK-aware segmentation |
-| `sessionCloseDrainMs` | `15000` | session-close bounded drain for in-flight extraction in ms (`0` aborts immediately) |
-| `maxReviewInputChars` | `40000` | trajectory slice handed to the extractor |
-| `reviewBudgetTokens` | `4096` | output budget for the extraction loop |
-| `notifyOnAutoReview` | `true` | visible follow-up receipt after an applied goal-blocked moment (compaction and session-close stay audit-only) |
-| `requireGlobalApproval` | `true` | global and project edits ask for explicit approval |
-| `recordLanguage` | `auto` | authoring **and dialog** language: `auto` follows the DSH client preference, then the session's own user text, then `en`; `zh`/`en` pin it |
-| `goalBlockedWrapupTurns` | `3` | consecutive blocked-goal idle probes trigger one memory extraction (`0` disables) |
-| `promotionBlockPatterns` | POSIX paths, session ids, `~/.dsh` | content matching these is project-scoped and never promoted to global |
-| `promotionMinChars` | `100` | whole promotions below this length stay local |
-| `injectionDirectoryLines` | `15` | entry-directory lines per build before folding into a counter |
-| `sectionOrder` | `118` | system-prompt section order for the guidance + entries sections |
-| `memoryIndex.enabled` | `true` | register the `evolve:memory-index` content section |
-| `memoryIndex.guide` | `true` | include the when_to_save guide (with the store empty and this off, the section renders nothing) |
-| `memoryIndex.order` | `400` | section order (upstream named slots start at `PLAN_POLICY=500`; the plugin's other sections sit at 118/119) |
-| `memoryIndex.maxChars` | `6000` | hard character budget for the injected memories block |
-| `skillsDir` | `<dshHome>/skills` | where skill entries materialize as SKILL.md bundles |
-| `rubricKey` | auto-generated key file | AES-256-GCM passphrase for benchmark rubrics (`DSH_EVOLVE_RUBRIC_KEY` overrides) |
-| `logToFile` / `logLevel` / `logMaxBytes` | `true` / `1` / 5 MiB | plugin-owned JSONL file log with rotation |
-| `autoRollbackOnReject` | `true` | deterministic rollback after a benchmark rejection |
-| `autoCase` | `true` | failed evolution attempts are captured as draft regression cases (`auto_regression` benchmark) |
-| `reviewModel` | agent's own | optional cheaper model for the dedicated memory agent (`"provider/model"`) |
-| `plannerPrefixCache` | `auto` | Route A session-prefix input when cache evidence exists (`session` always, `off` legacy flat text) |
-| `plannerPrefixMaxChars` | `12000` | session-prefix budget for Route A planning inputs (chars) |
-| `historyRetain` | `{snapshots: 20, refinements: 500, reviews: 500, tokenUsage: 500}` | storage hygiene: snapshots per store, tail lines per store history, shared `reviews.jsonl` tail, and direct-call `token-usage.jsonl` tail |
-
-Example profile patch:
+| `memoryIndex.enabled` | `true` | Register the memory section |
+| `memoryIndex.guide` | `true` | Inject the when_to_save guide (zero tokens when off and the index is empty) |
+| `memoryIndex.order` | `400` | Section order (upstream named slots start at `PLAN_POLICY=500`) |
+| `memoryIndex.maxChars` | `6000` | Hard character budget for the injected index |
+| `memoryCard.enabled` | `true` | Read-only memory card in the official plugin manager (degrades to no card when the host lacks `webServer`/`plugins.bundle.config`) |
+
+Profile patch example:
 
 ```yaml
 - id: continual-evolve
   config:
-    autoReview: true
+    memoryIndex:
+      maxChars: 8000
 ```
 
-The Memory Agent listener is registered even when `autoReview` is `false` —
-`autoReview` only supplies the initial default, so an install works without
-editing the profile. Use `/evolve resume` to enable extraction moments
-immediately, `/evolve pause` to suppress new model work, and `/evolve status`
-to inspect the configured default plus the current runtime state. The runtime
-switch is stored in `evolve/runtime.json`; manual `evolve_*` tools and
-`/evolve` commands are not paused. The memory trigger follows ZCode's
-lightweight eligibility: direct user text must contain at least
-`memoryMinUserWords` lexical words (CJK-aware segmentation), while
-empty/internal/direct-memory-write snapshots are skipped. Every extraction
-writes a unified audit receipt (`noop`/`applied`/`declined` with duration and
-turn/search stats) to `reviews.jsonl`; only an applied goal-blocked moment
-queues a visible follow-up, and a closing session lets in-flight extraction
-settle up to `sessionCloseDrainMs` before aborting.
-
 ## Development
 
 ```bash
 pnpm install && pnpm build   # deps + tsc -> lib/
-pnpm test                    # vitest (1020 tests)
-pnpm test:coverage           # v8 coverage, thresholds enforced in CI
-pnpm coverage:gaps           # locate uncovered lines per file (read-only)
+pnpm test                    # vitest (62 tests)
+pnpm test:coverage           # v8 coverage, CI-enforced thresholds
 pnpm lint                    # oxlint src test
 ```
 
-Project layout:
+Layout:
 
 ```
-├── src/                   # engine, tools, commands, memory agent, recall, projection, benchmark, injection + token usage…
-├── test/                  # vitest suites (57 files)
+├── src/
+│   ├── index.ts           # registration: the one section + config + card route wiring
+│   ├── memory-section.ts  # injection: read index / bootstrap / truncate / session freeze
+│   ├── memory-guide.ts    # guide: when_to_save and upkeep (adapted from ZCode)
+│   ├── memory-snapshot.ts # card: read-only store projection (entries / drift / error degrade)
+│   ├── known-workspaces.ts# card: in-process LRU workspace allowlist (the API read fence)
+│   └── card-routes.ts     # card: GET-only read API on the host webServer
+├── client/
+│   └── client.js          # hand-written client bundle: read-only card in the plugin manager
+├── test/                  # vitest suite (7 files)
 ├── lib/                   # build output (tsc)
-├── docs/
-│   ├── design.md          # the one-loop design narrative
-│   ├── FAQ.md             # real failure/fix records
-│   ├── gap-analysis.md    # vs prime-agent /refine + penguin-harness
-│   ├── research/pi-dsh-competitor-gap-analysis.md  # pi/dsh ecosystem competitors
-│   ├── experiment-bootstrap.md
-│   ├── archive/           # closed point-in-time reports
-│   └── research/          # penguin report + prime-agent annotated source
-├── examples/README.md     # seed benchmark cases
+├── docs/                  # design.md (design) · FAQ.md (real-world pitfalls)
 └── .agents/               # AI collaboration layer (AGENTS.md, skills, ADR notes)
 ```
 
-## Docs & provenance
+## Docs
 
-- Design: [`docs/design.md`](docs/design.md) · Pitfalls: [`docs/FAQ.md`](docs/FAQ.md) · Gap analysis: [`docs/gap-analysis.md`](docs/gap-analysis.md) · D2 experiment: [`docs/experiment-bootstrap.md`](docs/experiment-bootstrap.md)
-- Lineage: **penguin-harness** (concept; Apache-2.0) — report in [`docs/research/penguin-harness-self-evolution.md`](docs/research/penguin-harness-self-evolution.md); **prime-agent `/refine`** (engineering shape; MIT) — annotated reference source in [`docs/research/prime-agent-refinement.ts`](docs/research/prime-agent-refinement.ts). This package is an original implementation on the DSH plugin surface.
+- Design: [`docs/design.md`](docs/design.md) · Pitfalls: [`docs/FAQ.md`](docs/FAQ.md) · Teardown decision: [`.agents/notes/implemented/architecture/2026-10-04-zcode-alignment-teardown.md`](.agents/notes/implemented/architecture/2026-10-04-zcode-alignment-teardown.md)
 
 ## License
 
-[MIT](LICENSE)
+MIT. Independent project — not affiliated with DeepSeek.

package/README.zh.md

@@ -7,35 +7,25 @@
 [![CI](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml/badge.svg)](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-339933)](package.json)
-[![Tests](https://img.shields.io/badge/tests-1020%20passing-brightgreen)]()
+[![Tests](https://img.shields.io/badge/tests-62%20passing-brightgreen)]()
 [![Coverage · statements](https://img.shields.io/badge/coverage_statements-98%25-brightgreen)]()
-[![Coverage · branches](https://img.shields.io/badge/coverage_branches-93%25-green)]()
-[![Coverage · functions](https://img.shields.io/badge/coverage_functions-99%25-brightgreen)]()
+[![Coverage · branches](https://img.shields.io/badge/coverage_branches-95%25-green)]()
+[![Coverage · functions](https://img.shields.io/badge/coverage_functions-100%25-brightgreen)]()
 
-[DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（`dsh`）的持续自进化插件：一套**版本化、可审计、可回滚**的 harness 状态层——提示词补充、记忆、技能、子代理规格——从会话轨迹中沉淀而来。
-
-**模型提议，代码保证。** 每一项机械化安全属性——schema 校验、原子写入、快照、版本、审计、接受决策——都由代码强制，从不依赖提示词自觉。
+[DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（`dsh`）的工作区记忆插件：每个工作区一个纯 markdown 记忆库（`<workspace>/.evolve/memory/`），会话开局注入索引，模型用**原生文件读写工具**直接使用——仅此而已。
 
 ## 为什么
 
-Agent 在每个会话里积累可复用经验（重复失败、持久事实、可复用流程），下个会话就忘掉。本插件把这些经验变成一等公民的持久状态：
-
-- **三作用域**与合并语义（global < project < local）：**local** 本会话暂存、**project** 本项目跨会话库、**global** 跨项目——配合机械化晋升守卫，只有可携带、有分量、非重复的知识才能进全局
-- **类型化单条记忆**：每条 memory 带召回类型（`user | feedback | project | reference`）；踩坑（`feedback`）必须含 Why + How to apply
-- **时刻驱动的后台记忆 Agent**：有界 ZCode 式 loop 只在四个低频时刻醒来（压缩、goal 连续受阻、会话收尾 drain、手动 wrapup），检索冻结的 memory manifest，并经闭集工具提出纯 memory 编辑；不能调用 Agent、MCP、网络，也不能写源码。成功回合零 LLM 成本——日常沉淀由对话直写承担
-- **记忆召回、投影与回执**：`evolve_recall` 按 query/kind/scope/type 精确读回记忆全文；每次 memory 落盘同时生成可读的 `MEMORY.md` 索引 + 单事实文件；每次提取留统一审计回执（no-op/applied/declined + 耗时与轮次统计），只有实际沉淀才通知会话
-- **确定性回滚**：逆操作编辑由已应用结果生成——不靠 LLM 重新猜测
-- **benchmark 闭环**：候选沉淀先经冻结用例 + 独立评分者评估再接受（rubric 加密落盘）
-- **store 卫生**：`/evolve consolidate` 把写入时冲突提示与零使用陈旧条目变成一次批准、完全可逆的批量归档——加 `merge` 可将近重复内容并入幸存原条目
+Agent 每个会话积累的可复用经验（用户偏好、踩坑教训、项目背景）下个会话就忘。ZCode 用一个文件夹解决了这件事：一事一文的 md 记忆 + `MEMORY.md` 索引、开局注入、模型原生读写、没有任何专用机器。本插件把同一形态带给 DSH。
 
 ## 工作原理
 
-1. **沉淀**——模型经 `evolve_add` 创建条目；专用 Memory Agent 只在四个低频时刻消费增量 snapshot（压缩、goal 连续受阻、会话收尾 drain、手动 wrapup）。
-2. **能力感知的辅助调用**——memory loop、planner、wrapup 通过 [`src/llm-text.ts`](src/llm-text.ts) 解析精确 provider/model 能力并使用模型公布的最低开启 reasoning effort，同时转发 host session id 供 provider 路由；只有没有开启档时才回退关闭档，没有 reasoning 元数据时使用 provider 默认行为。
-3. **守卫**——代码强制校验：编辑 schema、blast-radius 与作用域一致性、晋升政策（项目专属标记 / 过薄内容 / 近似重复检测 / 凭据筛查保持全局库干净——密钥类内容在所有写入出口被拒，含 mount 物化）。全局 create 与既有条目高度相似（≥0.8）时写入即拒；中等重叠带 `conflictHint` 供后续合并。
-4. **审批**——全局与项目写入需明确人工批准；弹窗展示有界结构化编辑 diff 与冲突提示，弹窗丢失/响应畸形会重试，不会被误记为拒绝。
-5. **应用与注入**——memory 批次先完成所有持久化审批，写前重查 abort；后续 scope 失败时补偿回滚先前写入，成功 scope 仍保留快照与审计。prompt 补充与委派规格注入系统提示词（封顶、按相关性排序、被证伪条目降权、空 store 零 token）；**memory 正文**在会话开场按硬预算注入（会话内冻结，when_to_save 指南随行）；skill 仍以按相关性排序的目录索引出现。
-6. **验证与回滚**——benchmark 用冻结用例为候选打分；被拒候选确定性回滚，并自动沉淀为 draft 回归用例（`auto_regression` 基准）。
+1. **开局注入** —— 插件只注册一个 system-prompt section：注入 `MEMORY.md` 索引正文（超预算按整行截断并提示读目录）、记忆目录绝对路径、when_to_save 指南。该 section 每会话只算一次并逐字节复用，system prompt 稳定、prompt cache 持续命中；空 store 零 token。
+2. **原生读写** —— DSH 对工作区内文件读写全放行（读路径从不设防，写围栏只围工作区外，见 [`docs/FAQ.md`](docs/FAQ.md) #6）。模型直接 Read/Write/Edit 记忆文件并维护索引；store 不存在时自动 bootstrap。
+3. **治理即文件** —— 无版本、无快照、无审批、无后台提取：一条坏记忆就是工作区里一个可见的文件，删掉它就是退役。记忆是个人上下文——bootstrap 时若工作区是 git 仓库会自动把 `.evolve/` 追加进 `.gitignore`（非 git 工作区不碰任何文件）。
+4. **只读卡片** —— 插件在官方插件管理的本 bundle 页面挂一张只读记忆卡片（`plugins.bundle.config` slot，老宿主自动降级为无卡片）：最近服务过的工作区、各自记忆库的条目数/索引行数、索引漂移警告（未索引文件与索引失联文件）。卡片是磁盘文件的请求时投影——单一事实源永远是 `.evolve/memory/` 里的文件，卡片没有编辑路径，编辑请直接改文件。
+
+记忆文件格式（与 ZCode 一致）：frontmatter 带 `name` / `description`（决定未来会话会不会想起它）/ `metadata.type`（`user | feedback | project | reference`）；`feedback` 正文必带 **Why:** 与 **How to apply:**。
 
 ## 安装
 
@@ -51,107 +41,57 @@ dsh plugin add ZK-Andy/dsh-continual-evolve
 
 ## 使用
 
-会话内命令：
-
-| 命令 | 效果 |
-|---|---|
-| `/evolve` | 简短帮助 + 当前 local store（`/evolve help all` 列全部子命令） |
-| `/evolve list · history · rollback <id>` | 查看与回滚（加 `project` 操作本项目库，`global` 操作跨项目库） |
-| `/evolve plan [msg]` | 对 store 运行 LLM 规划器 |
-| `/evolve wrapup` | 收尾本会话 local 条目：晋升 / 归档 / 保留 |
-| `/evolve archive · unarchive <id>` | 从注入中隐藏（数据保留可恢复） |
-| `/evolve consolidate [apply] [merge]` | 报告（或应用）冲突提示 + 零使用陈旧全局条目的批量归档；`merge` 将近重复内容并入幸存原条目 |
-| `/evolve failures` | 失败类聚合（门禁 + benchmark） |
-| `/evolve log [tail N] [session <id>]` | 插件日志 |
-| `/evolve export · import <path>` | 备份 / 恢复 store |
-| `/evolve mount · unmount <skillId>` | 把可执行技能热挂载为 live 插件 |
-| `/evolve goal [objective · done · block]` | 回合驱动的自进化目标 |
-| `/evolve benchmark …` | 用例生命周期、运行、接受决策 |
-| `/evolve pause · resume · status` | 暂停/恢复自动提取（手动工具不受影响）、运行时状态 |
-| `/evolve usage` | 每条目注入次数 + memory/planner/wrapup 直属调用的 provider 精确 token（不含 benchmark 宿主子代理） |
-
-模型工具：`evolve_list / add / update / delete / rollback / recall`（`evolve_delete` 支持 `id` 或批量 `ids` 数组——一次 refinement、一次审批；`evolve_recall` 按 query/kind/scope/memoryType/limit 过滤，返回全文 + 版本 + 来源 + 过时信号）。记忆的读写都在对话里完成——模型手里有注入的记忆索引 + `evolve_recall`/`evolve_add`——因此不再有 `/evolve remember · forget · recall` 对应命令：直接在对话里说。
-
-第三方消费：每次进化落地（门禁或手动）都会向 `reviews.jsonl` 追加结构化 `evolve_complete` 事件（shape 见 `src/evolve-event.ts`），与人类可读的审计记录并存。
-
-`/evolve usage` 还会读取 `evolve/token-usage.jsonl`：插件直属 memory Agent、planner 与手动 wrapup 调用的 provider 精确 input/cache/output/total token。报告只覆盖保留尾部而非终身累计，单独显示 provider 未返回 usage 的调用，并明确排除宿主 benchmark 子代理、其 agent-loop 调用与逐条 memory 注入归因。
-
-注入形态：prompt 补充与委派规格带内容注入（每 kind ≤6 条 × 180 字符，按相关性排序）。memory 以**正文**在会话开场注入：`evolve:memory-index` section（order 400）承载 when_to_save 指南 + 预算内的全部记忆正文，排序 `project > feedback > user > reference`，放不下的降级为 `[memory:type:id] 标题`钩子、其余折叠计数（硬上限 `memoryIndex.maxChars`，默认 6000 字符；未展示的用 `evolve_recall` 读）。该 section 每会话只算一次并逐字节复用，system prompt 因此稳定、prompt cache 持续命中——会话中途写入的记忆下个会话生效。skill 仍以按相关性排序的目录索引出现（15 行封顶 + 折叠计数行），memory 不再列入。每次 memory 落盘同时刷新 store 目录下的可读 `MEMORY.md` 索引 + 单事实文件。`memoryIndex.guide` 关闭且 store 为空时 = 零注入 token。
+无需命令、无需工具。重启后第一场会话，`.evolve/memory/` 会自动生成，索引自动注入开场；对模型直接说"记住……"/"忘掉……"即可，写入的记忆文件 + 索引行就是全部持久状态。会话中途写入的记忆下个会话生效（会话内冻结守 prompt cache）；需要立即查看时，模型直接读目录。想看记忆库全貌，打开官方插件管理里本插件的页面：只读卡片展示各工作区的记忆条目与索引漂移。
 
 ## 配置
 
 | 键 | 默认 | 含义 |
 |---|---|---|
-| `baseDir` | 解析后的 DSH home | `evolve/` 存储根目录 |
-| `autoReview` | `false` | 没有 `evolve/runtime.json` 时 Memory Agent 的初始默认；监听器始终注册，因此它不是注册门 |
-| `memoryMinUserWords` | `3` | ZCode 风格：单个直接用户文本至少包含的词数；使用 CJK 分词 |
-| `sessionCloseDrainMs` | `15000` | 会话关闭时在途提取的有界 drain（毫秒，`0` 立即 abort） |
-| `maxReviewInputChars` | `40000` | 交给提取器的轨迹切片 |
-| `reviewBudgetTokens` | `4096` | 提取 loop 输出预算 |
-| `notifyOnAutoReview` | `true` | goal 受阻时刻应用后发可见跟进回执（压缩与会话收尾只留审计） |
-| `requireGlobalApproval` | `true` | 全局与项目写入需明确批准 |
-| `recordLanguage` | `auto` | 记录**与弹窗**语言：`auto` 依次跟随 DSH 客户端偏好 → 会话自身用户文本 → `en`；`zh`/`en` 固定 |
-| `goalBlockedWrapupTurns` | `3` | 连续阻塞目标的 idle 探测轮数触发一次记忆提取（`0` 关闭） |
-| `promotionBlockPatterns` | POSIX 路径、session id、`~/.dsh` | 内容命中即判定项目专属，永不晋升全局 |
-| `promotionMinChars` | `100` | 低于此长度的整体晋升留在本地 |
-| `injectionDirectoryLines` | `15` | 每次构建的目录行数上限，超出折叠为计数行 |
-| `sectionOrder` | `118` | 指南与条目两个 section 的系统提示词顺序 |
-| `memoryIndex.enabled` | `true` | 是否注册 `evolve:memory-index` 内容 section |
-| `memoryIndex.guide` | `true` | 是否注入 when_to_save 指南（关闭且 store 为空时该 section 不渲染） |
-| `memoryIndex.order` | `400` | section 顺序（上游命名槽位自 `PLAN_POLICY=500` 起；本插件另两段在 118/119） |
-| `memoryIndex.maxChars` | `6000` | 注入记忆块的硬字符预算 |
-| `skillsDir` | `<dshHome>/skills` | 技能条目物化为 SKILL.md 的根目录 |
-| `rubricKey` | 自动生成本地密钥文件 | benchmark rubric 的 AES-256-GCM 口令（`DSH_EVOLVE_RUBRIC_KEY` 可覆盖） |
-| `logToFile` / `logLevel` / `logMaxBytes` | `true` / `1` / 5 MiB | 插件自带 JSONL 文件日志带轮转 |
-| `autoRollbackOnReject` | `true` | benchmark 拒绝后自动确定性回滚 |
-| `autoCase` | `true` | 失败的进化尝试自动沉淀为 draft 回归用例（`auto_regression` 基准） |
-| `reviewModel` | agent 自身 | 专用 memory Agent 可选更便宜的模型（`"provider/model"`） |
-| `plannerPrefixCache` | `auto` | 有缓存证据时用会话前缀输入（`session` 总是前缀，`off` 保持旧扁平文本） |
-| `plannerPrefixMaxChars` | `12000` | Route A 会话前缀预算（字符） |
-| `historyRetain` | `{snapshots: 20, refinements: 500, reviews: 500, tokenUsage: 500}` | 存储卫生：每 store 快照数、每 store 历史尾行、共享 `reviews.jsonl` 尾行、直属调用 `token-usage.jsonl` 尾行 |
+| `memoryIndex.enabled` | `true` | 是否注册记忆 section |
+| `memoryIndex.guide` | `true` | 是否注入 when_to_save 指南（关闭且索引为空时该 section 零 token） |
+| `memoryIndex.order` | `400` | section 顺序（上游命名槽位自 `PLAN_POLICY=500` 起） |
+| `memoryIndex.maxChars` | `6000` | 注入索引的硬字符预算 |
+| `memoryCard.enabled` | `true` | 官方插件管理内的只读记忆卡片（宿主缺 `webServer`/`plugins.bundle.config` 时自动降级为无卡片） |
 
 profile patch 示例：
 
 ```yaml
 - id: continual-evolve
   config:
-    autoReview: true
+    memoryIndex:
+      maxChars: 8000
 ```
 
-即使 `autoReview` 为 `false`，Memory Agent 监听器也会注册——`autoReview` 只提供初始默认值，装完即用，无需改 profile。使用 `/evolve resume` 立即开启提取时刻，使用 `/evolve pause` 抑制新的模型调用，使用 `/evolve status` 查看配置默认值与运行时状态。开关保存在 `evolve/runtime.json`；手动 `evolve_*` 工具和 `/evolve` 命令不受暂停影响。提取时刻驱动：压缩、goal 连续受阻（`goalBlockedWrapupTurns` 次 idle 探测）、会话收尾 drain（`sessionCloseDrainMs`）与手动 `/evolve wrapup`——成功回合零 LLM 成本。Memory 触发采用 ZCode 的轻量 eligibility：单个直接用户文本至少包含 `memoryMinUserWords` 个词（使用 CJK 分词）；空增量、内部 Agent、直接 memory 写入会跳过。每次提取都在 `reviews.jsonl` 留统一审计回执（`noop`/`applied`/`declined` + 耗时与轮次/检索统计）；只有 goal 受阻时刻的实际沉淀才排队前台回执，关闭的会话让在途提取在 `sessionCloseDrainMs` 内收尾再 abort。
-
 ## 开发
 
 ```bash
 pnpm install && pnpm build   # 依赖 + tsc -> lib/
-pnpm test                    # vitest（1020 例）
+pnpm test                    # vitest（62 例）
 pnpm test:coverage           # v8 覆盖率，CI 强制阈值
-pnpm coverage:gaps           # 定位各文件未覆盖行（只读）
 pnpm lint                    # oxlint src test
 ```
 
 目录结构：
 
 ```
-├── src/                   # 引擎、工具、命令、memory Agent、召回、投影、benchmark、注入 + token 用量…
-├── test/                  # vitest 测试套件（59 个文件）
+├── src/
+│   ├── index.ts           # 注册：唯一 section + 配置 + 卡片路由接线
+│   ├── memory-section.ts  # 注入：读索引 / bootstrap / 截断 / 会话冻结
+│   ├── memory-guide.ts    # 指南：when_to_save 与维护纪律（改编自 ZCode）
+│   ├── memory-snapshot.ts # 卡片：记忆库只读投影（条目 / 漂移 / 错误降级）
+│   ├── known-workspaces.ts# 卡片：进程内 LRU 工作区白名单（API 读围栏）
+│   └── card-routes.ts     # 卡片：webServer 上的 GET-only 只读 API
+├── client/
+│   └── client.js          # 手写 client bundle：官方插件管理内只读卡片
+├── test/                  # vitest 测试（7 个文件）
 ├── lib/                   # 构建产物（tsc）
-├── docs/
-│   ├── design.md          # 一条循环的设计叙事
-│   ├── FAQ.md             # 真实踩坑记录
-│   ├── gap-analysis.md    # 对照 prime-agent /refine + penguin-harness
-│   ├── research/pi-dsh-competitor-gap-analysis.md  # pi/dsh 生态竞品差距分析
-│   ├── experiment-bootstrap.md
-│   ├── archive/           # 已完结的一次性报告
-│   └── research/          # penguin 报告 + prime-agent 注释源码
-├── examples/README.md     # 种子 benchmark 用例
+├── docs/                  # design.md（设计）· FAQ.md（踩坑）
 └── .agents/               # AI 协作层（AGENTS.md、技能、ADR 笔记）
 ```
 
-## 文档与出处
+## 文档
 
-- 设计：[`docs/design.md`](docs/design.md) · 踩坑：[`docs/FAQ.md`](docs/FAQ.md) · 差距分析：[`docs/gap-analysis.md`](docs/gap-analysis.md) · D2 实验:[`docs/experiment-bootstrap.md`](docs/experiment-bootstrap.md)
-- 血统：**penguin-harness**（概念；Apache-2.0）——报告见 [`docs/research/penguin-harness-self-evolution.md`](docs/research/penguin-harness-self-evolution.md)；**prime-agent `/refine`**（工程形态；MIT）——注释参考源码见 [`docs/research/prime-agent-refinement.ts`](docs/research/prime-agent-refinement.ts)。本包是面向 DSH 插件表面的原创实现。
+- 设计：[`docs/design.md`](docs/design.md) · 踩坑：[`docs/FAQ.md`](docs/FAQ.md) · 拆解决策：[`.agents/notes/implemented/architecture/2026-10-04-zcode-alignment-teardown.md`](.agents/notes/implemented/architecture/2026-10-04-zcode-alignment-teardown.md)
 
 ## License