dsh-continual-evolve 0.14.2 → 0.15.0

package/lib/index.js

@@ -1,46 +1,60 @@
 /**
  * dsh-continual-evolve — plugin entry.
  *
- * After the 2026-10-04 ZCode-alignment teardown the plugin is one thing: a
- * session-start system-prompt section that injects the workspace memory
- * index (`<cwd>/.evolve/memory/MEMORY.md`), hands out the store path, and
- * teaches the when-to-save guide. The model reads and writes the markdown
- * files with its native tools; there are no plugin tools, no commands, no
- * background extraction, and no governance. See
- * .agents/notes/implemented/architecture/2026-10-04-zcode-alignment-teardown.md.
+ * The v0.15 SQLite single-store redesign (ADR
+ * `2026-10-06-sqlite-single-store`): every memory lives in one central
+ * database (`~/.dsh/evolve/memory.db`, rows partitioned by workspace path)
+ * and the plugin's code is the literal sole writer. This entry wires four
+ * surfaces over the store:
  *
- * The 2026-10-04 plugin-management card adds a read-only surface: the host's
- * workspace registry feeds a catalogue, and a `webServer` route triple projects
- * any catalogued workspace's store for the card in the official plugin manager
- * (`plugins.bundle.config`, client bundle in client/client.js). The card is a
- * viewer — see
- * .agents/notes/implemented/feature/2026-10-04-plugin-management-card.md and
- * .agents/notes/implemented/feature/2026-10-05-zcode-workspace-switcher.md.
+ * - the session-start section (`memory-section.ts`): a store query rendered
+ *   as the injected index, frozen per session for the prompt cache;
+ * - the model tools (`memory-tools.ts`): `memory_write` for explicit
+ *   "记住/忘掉" instructions, `memory_read` for bodies and search;
+ * - the extraction scheduler (`extraction.ts`): turn-level, debounced,
+ *   single-flight; proposals land only through the store's gates;
+ * - the read-only card routes (`card-routes.ts`) in the official plugin
+ *   manager.
  *
- * The host API surface is declared locally (the minimal shape this plugin
- * touches) instead of importing the DSH type packages — the section call is
- * the same one every prior release used, verified in production.
+ * The store opens asynchronously (dynamic `node:sqlite` import); until it is
+ * ready — or forever, if the runtime lacks `node:sqlite` — the section
+ * renders "" and the tools never register. Injection must never break an
+ * assembly, and a degraded plugin must never take the host down.
+ *
+ * The host API surface is declared locally (the minimal shapes this plugin
+ * touches) instead of importing the DSH type packages — verified in
+ * production across every prior release.
  */
 import z from "@deepseek-ai/schemastery";
 import { mountCardRoutes } from "./card-routes.js";
-import { createKnownWorkspaces } from "./known-workspaces.js";
+import { createExtractionScheduler } from "./extraction.js";
 import { createFrozenMemorySection, cwdOf, DEFAULT_MAX_CHARS, DEFAULT_MEMORY_SECTION_ORDER, MEMORY_SECTION_NAME, memorySectionText, } from "./memory-section.js";
-import { createWorkspaceCatalog } from "./workspace-catalog.js";
+import { registerMemoryTools } from "./memory-tools.js";
+import { importWorkspaceMd } from "./import-md.js";
+import { openMemoryStore } from "./store.js";
 export const name = "continual-evolve";
 export const inject = ["systemPrompt"];
 export const Config = z.object({
     /**
-     * The memory section: injects the workspace memory index at session
-     * start, frozen per session to keep the system prompt byte-stable
-     * (prompt cache). `enabled`/`guide`/`order`/`maxChars` default to
-     * true/true/400/6000; with `guide` off and an empty store the section
-     * renders to "" and costs no tokens.
+     * The memory section: injects the workspace memory index (a store query)
+     * at session start, frozen per session to keep the system prompt
+     * byte-stable (prompt cache). `enabled`/`guide`/`order`/`maxChars`
+     * default to true/true/400/6000; with `guide` off and an empty store the
+     * section renders to "" and costs no tokens.
      */
     memoryIndex: z.object({
         enabled: z.boolean(),
         guide: z.boolean(),
         order: z.natural(),
         maxChars: z.natural(),
+        /**
+         * The proposal-based extraction run (trigger: turn-level with idle
+         * debounce; writes land only through the store's gates). Off keeps
+         * the plugin injection + explicit tools only.
+         */
+        extraction: z.boolean(),
+        /** Idle debounce minutes between turn end and an extraction run (0 = per turn). */
+        debounceMin: z.natural(),
     }),
     /**
      * The read-only memory card in the official plugin manager
@@ -52,15 +66,60 @@ export const Config = z.object({
         enabled: z.boolean(),
     }),
 });
+/** Register the memory tools through a nested inject (see memory-tools.ts). */
+function mountToolsWhenAvailable(host, store, state) {
+    const nested = host;
+    if (typeof nested.inject !== "function") {
+        host.logger("continual-evolve").warn("host context exposes no inject — memory tools not registered (injection unaffected; explicit memory management falls back to telling the user)");
+        return;
+    }
+    nested.inject(["tools"], (scoped) => {
+        const tools = scoped.tools;
+        if (tools === undefined || typeof tools.register !== "function") {
+            host.logger("continual-evolve").warn("tools service present but empty — memory tools not registered (injection unaffected)");
+            return;
+        }
+        registerMemoryTools(tools, store);
+        state.toolsAvailable = true;
+        host.logger("continual-evolve").info("memory_write and memory_read registered");
+    });
+}
+/**
+ * Arm the extraction scheduler through a nested inject: the session reader
+ * and LLM services are siblings, so they are resolved inside the scoped
+ * context while the event listeners use the plugin's own context. A host
+ * without either service (or without `.on`) simply never arms — injection
+ * and the explicit tools remain functional.
+ */
+function mountExtractionWhenAvailable(host, store, config) {
+    const log = host.logger("continual-evolve");
+    if (config.memoryIndex?.extraction === false) {
+        log.info("extraction disabled by config — injection and memory_write remain active");
+        return;
+    }
+    const nested = host;
+    const events = host;
+    if (typeof nested.inject !== "function" || typeof events.on !== "function") {
+        log.warn("host context exposes no inject/on — extraction not armed (injection and tools unaffected)");
+        return;
+    }
+    nested.inject(["sessionQuery", "llm"], (scoped) => {
+        const context = scoped;
+        const surface = context.sessionQuery;
+        const llm = (context.llm ?? context.get?.("llm"));
+        if (surface === undefined || typeof surface.readSurface !== "function") {
+            log.warn("sessionQuery service present but empty — extraction not armed (injection and tools unaffected)");
+            return;
+        }
+        createExtractionScheduler(events, { store, surface, llm }, { debounceMin: config.memoryIndex?.debounceMin ?? 10 });
+    });
+}
 /**
  * Mount the card routes on the host web server through a nested inject, so
- * the plugin stays mountable on hosts without that service. Called only when
- * the card is enabled. The workspace registry is looked up inside the scoped
- * context (nothing else injects it: a host without the service must still get
- * the card) and read per request, so a workspace created while the card is
- * open appears on the next refresh.
+ * the plugin stays mountable on hosts without that service. Called once the
+ * store is ready — the routes are projections of the store, not of files.
  */
-function mountCardWhenAvailable(host, served) {
+function mountCardWhenAvailable(host, store) {
     const nested = host;
     if (typeof nested.inject !== "function") {
         host.logger("continual-evolve").warn("host context exposes no inject — memory card routes not mounted (memory section unaffected)");
@@ -72,60 +131,57 @@ function mountCardWhenAvailable(host, served) {
             host.logger("continual-evolve").warn("webServer service present but empty — memory card routes not mounted (memory section unaffected)");
             return;
         }
-        const catalog = createWorkspaceCatalog({
-            registry: registryLookup(scoped),
-            served: served,
-            homeDir: process.env.DSH_HOME,
-        });
-        mountCardRoutes(webServer, catalog);
+        mountCardRoutes(webServer, store);
     });
 }
-/**
- * A live `ctx.workspaceRegistry` getter over the scoped context. The service
- * is a sibling, so it is reached with `ctx.get` (property access only walks
- * fiber ancestors) and treated as optional: an absent, foreign or throwing
- * service degrades the catalogue to its fallback sources instead of taking the
- * card down.
- */
-function registryLookup(scoped) {
-    const context = scoped;
-    return () => {
-        if (typeof context.get !== "function") {
-            return undefined;
-        }
-        try {
-            const service = context.get("workspaceRegistry");
-            return service === undefined || service === null ? undefined : service;
-        }
-        catch {
-            return undefined;
-        }
-    };
-}
 export function apply(host, config) {
     if (config.memoryIndex?.enabled === false) {
         return;
     }
-    const workspaces = createKnownWorkspaces();
+    const log = host.logger("continual-evolve");
+    const state = { store: undefined, toolsAvailable: false };
+    void openMemoryStore().then((store) => {
+        state.store = store;
+        mountToolsWhenAvailable(host, store, state);
+        mountExtractionWhenAvailable(host, store, config);
+        if (config.memoryCard?.enabled !== false) {
+            mountCardWhenAvailable(host, store);
+        }
+    }, (error) => {
+        // node:sqlite missing (old runtime) or the database unusable:
+        // degrade to a no-op plugin, never take the host down.
+        log.warn(`memory store unavailable — injection and tools disabled: ${error instanceof Error ? error.message : String(error)}`);
+    });
     const frozen = createFrozenMemorySection();
     host.systemPrompt.section({
         name: MEMORY_SECTION_NAME,
         order: config.memoryIndex?.order ?? DEFAULT_MEMORY_SECTION_ORDER,
         text: (context) => {
+            const store = state.store;
+            if (store === undefined) {
+                // Still loading or unavailable: render nothing (and freeze
+                // nothing — the first assembly after readiness builds for real).
+                return "";
+            }
             const cwd = cwdOf(context.agent);
             if (cwd !== undefined) {
-                workspaces.remember(cwd);
+                // First contact with this workspace migrates any legacy MD-era
+                // store into the database; flag-guarded, so it is a no-op after.
+                try {
+                    importWorkspaceMd(store, cwd);
+                }
+                catch (error) {
+                    log.warn(`legacy memory import failed for ${cwd}: ${error instanceof Error ? error.message : String(error)}`);
+                }
             }
             return frozen.textFor(context.agent, (agent) => memorySectionText(agent, {
+                store,
                 maxChars: config.memoryIndex?.maxChars ?? DEFAULT_MAX_CHARS,
                 guide: config.memoryIndex?.guide ?? true,
+                toolsAvailable: state.toolsAvailable,
             }));
         },
     });
-    host.logger("continual-evolve").info("continual-evolve memory section registered (workspace .evolve/memory, native file read/write)");
-    if (config.memoryCard?.enabled === false) {
-        return;
-    }
-    mountCardWhenAvailable(host, workspaces);
+    log.info("continual-evolve memory section registered (central SQLite store, sole-writer gates)");
 }
 //# sourceMappingURL=index.js.map

package/lib/memory-guide.d.ts

@@ -1,18 +1,26 @@
 /**
- * The persistent-memory guide injected as part of the memory section.
+ * The persistent-memory guide injected as part of the memory section —
+ * three sentences of discipline, nothing more (the v0.15 SQLite single-store
+ * redesign, ADR `2026-10-06-sqlite-single-store`).
  *
- * This text is the write-path half of the ZCode-aligned design: it teaches
- * the model when a durable memory is worth creating, which type it belongs
- * to, what body structure each type owes, and that memories are plain
- * markdown files written directly with the native file tools — the plugin
- * registers no tools and no commands.
- *
- * Provenance: the when_to_save taxonomy is adapted from ZCode's persistent-
- * memory prompt (introduced here in evolve v2); the write-path wording now
- * targets native file operations on `<workspace>/.evolve/memory/`.
+ * The store is a central database only the plugin's code can write; the
+ * model reads the injected index, fetches bodies with `memory_read`, and
+ * lands explicit writes through `memory_write`. Automatic sedimentation is
+ * the extraction pipeline's job and the main session must not spend tokens
+ * maintaining memory. The write-quality taxonomy (what deserves a memory,
+ * type bodies, the ADR boundary) moved to the extraction prompt, which is
+ * the only writer left that needs it.
+ */
+/**
+ * Heading and framing before the `<memories>` block. `toolsAvailable`
+ * reflects whether the tool registration actually succeeded on this host:
+ * a host without the tools service degrades to "tell the user" phrasing
+ * instead of naming tools that do not exist.
+ */
+export declare function memoryGuideIntro(storePath: string, workspaceId: string, toolsAvailable: boolean): string;
+/**
+ * Hard rules that ride along regardless of the intro (kept as a separate
+ * constant so the section renderer can compose them once).
  */
-/** Heading and framing before the `<memories>` block. Takes the absolute memory dir. */
-export declare function memoryGuideIntro(memoryDir: string): string;
-/** The file format, when_to_save / how_to_use rules, and maintenance discipline. */
-export declare const MEMORY_GUIDE_RULES = "## \u8BB0\u5FC6\u6587\u4EF6\u7684\u683C\u5F0F\n\n---\nname: <\u77ED\u6A2A\u7EBF\u5C0F\u5199\u6807\u8BC6>\ndescription: <\u4E00\u53E5\u8BDD\u76F8\u5173\u6027\u94A9\u5B50\u2014\u2014\u51B3\u5B9A\u672A\u6765\u4F1A\u8BDD\u4F1A\u4E0D\u4F1A\u60F3\u8D77\u8FD9\u6761\u8BB0\u5FC6>\nmetadata:\n  type: user | feedback | project | reference\n---\n\n<\u6B63\u6587>\n\n## \u4F55\u65F6\u5199\u5165\u8BB0\u5FC6\n\n\u7528\u6237\u660E\u786E\u8981\u6C42\u8BB0\u4F4F\u65F6\uFF0C\u7ACB\u5373\u5B58\u4E3A\u6700\u5408\u9002\u7684\u7C7B\u578B\uFF1B\u8981\u6C42\u5FD8\u8BB0\u65F6\uFF0C\u627E\u5230\u5E76\u5220\u9664\u76F8\u5173\u6587\u4EF6\u4E0E\u7D22\u5F15\u884C\u3002\n\u9664\u6B64\u4E4B\u5916\uFF0C\u5728\u5BF9\u8BDD\u4E2D\u81EA\u7136\u9047\u5230\u4EE5\u4E0B\u4FE1\u53F7\u65F6\u4E3B\u52A8\u5199\u5165\u3002\u5B58\u4E4B\u524D\u5148\u8FC7\u4E00\u9053\u7B5B\u5B50\uFF1A\n**\u80FD\u4ECE\u4EE3\u7801\u3001git \u5386\u53F2\u3001\u4ED3\u5E93\u6587\u4EF6\u91CC\u91CD\u65B0\u63A8\u5BFC\u51FA\u6765\u7684\u4E8B\u5B9E\u4E0D\u5B58**\u2014\u2014\u53EA\u5B58\u91CD\u63A8\u5BFC\u4E0D\u51FA\u6765\u7684\n\u80CC\u666F\u3001\u51B3\u7B56\u548C\u504F\u597D\u3002\u76F8\u5BF9\u65E5\u671F\u4E00\u5F8B\u8F6C\u6210\u7EDD\u5BF9\u65E5\u671F\uFF08\"\u5468\u56DB\"\u2192\"2026-10-08\"\uFF09\uFF0C\u5426\u5219\u672A\u6765\n\u7684\u4F1A\u8BDD\u65E0\u6CD5\u89E3\u8BFB\u3002\u4E00\u6761\u4E8B\u5B9E\u4E00\u4E2A\u6587\u4EF6\uFF1B\u4E0D\u786E\u5B9A\u503C\u4E0D\u503C\u5F97\u5B58\u65F6\uFF0C\u95EE\u81EA\u5DF1\"\u8FD9\u6761\u7684\u4FE1\u606F\u91CF\n\u662F\u5426\u5728'\u4E3A\u4EC0\u4E48'\u91CC\uFF0C\u800C\u4E0D\u5728'\u662F\u4EC0\u4E48'\u91CC\"\u3002\n\n<type name=\"user\">\n  <when_to_save>\u5F97\u77E5\u7528\u6237\u7684\u89D2\u8272\u3001\u6280\u672F\u6808\u3001\u7ECF\u9A8C\u6C34\u5E73\u3001\u504F\u597D\u6216\u77E5\u8BC6\u80CC\u666F\u7684\u4EFB\u4F55\u7EC6\u8282\u65F6\u3002\n  \u4F8B\u5982\u7528\u6237\u81EA\u8FF0\"\u6211\u662F\u6570\u636E\u79D1\u5B66\u5BB6\uFF0C\u5728\u67E5\u65E5\u5FD7\u7CFB\u7EDF\"\u2014\u2014\u5B58\uFF1A\u7528\u6237\u662F\u6570\u636E\u79D1\u5B66\u5BB6\uFF0C\n  \u5F53\u524D\u5173\u6CE8\u53EF\u89C2\u6D4B\u6027/\u65E5\u5FD7\u3002</when_to_save>\n  <how_to_use>\u540E\u7EED\u89E3\u91CA\u548C\u5EFA\u8BAE\u6309\u7528\u6237\u7684\u80CC\u666F\u5B9A\u5236\u6DF1\u6D45\u4E0E\u7C7B\u6BD4\uFF1B\u5BF9\u8D44\u6DF1\u5DE5\u7A0B\u5E08\n  \u4E0D\u89E3\u91CA\u57FA\u7840\u6982\u5FF5\uFF0C\u5BF9\u67D0\u9886\u57DF\u7684\u65B0\u624B\u7528\u5176\u719F\u6089\u9886\u57DF\u7684\u7C7B\u6BD4\u5207\u5165\u3002</how_to_use>\n</type>\n\n<type name=\"feedback\">\n  <when_to_save>\u4E24\u6761\u4FE1\u53F7\uFF0C\u7F3A\u4E00\u4E0D\u53EF\uFF1A\n  \uFF081\uFF09\u7EA0\u6B63\u2014\u2014\u7528\u6237\u8BF4\"\u4E0D\u662F\u8FD9\u6837\"\"\u522B\"\"\u505C\u4E0B\"\u65F6\uFF0C\u5B58\u88AB\u7EA0\u6B63\u7684\u505A\u6CD5\u4E0E\u6B63\u786E\u505A\u6CD5\uFF1B\n  \uFF082\uFF09\u786E\u8BA4\u2014\u2014\u8FD9\u662F\u66F4\u5B89\u9759\u3001\u66F4\u5BB9\u6613\u6F0F\u7684\u4FE1\u53F7\uFF1A\u7528\u6237\u63A5\u53D7\u4E86\u4F60\u4E0D\u5BFB\u5E38\u7684\u9009\u62E9\u800C\u6CA1\u6709\u5F02\u8BAE\uFF0C\n  \u6216\u660E\u786E\u8BF4\"\u5BF9\uFF0C\u5C31\u8FD9\u6837\"\"\u4FDD\u6301\u8FD9\u6837\"\u3002\u786E\u8BA4\u8FC7\u7684\u5224\u65AD\u662F\u5DF2\u9A8C\u8BC1\u7684\u65B9\u6CD5\u8BBA\uFF0C\u53EA\u5B58\u7EA0\u9519\n  \u4F1A\u8BA9\u4F60\u7684\u884C\u4E3A\u8D8A\u6765\u8D8A\u4FDD\u5B88\u3001\u504F\u79BB\u7528\u6237\u5DF2\u8BA4\u53EF\u7684\u8DEF\u3002\n  \u4F8B\uFF1A\"\u6D4B\u8BD5\u522B mock \u6570\u636E\u5E93\uFF0C\u4E0A\u6B21 mock \u8FC7\u4E86\u7EBF\u4E0A\u8FC1\u79FB\u6302\u4E86\"\u2014\u2014\u5B58\u89C4\u5219\u5E76\u5E26\u4E0A\u4E8B\u6545\u539F\u56E0\u3002\n  \u4F8B\uFF1A\"\u7ED3\u5C3E\u4E0D\u7528\u603B\u7ED3\uFF0Cdiff \u6211\u81EA\u5DF1\u4F1A\u770B\"\u2014\u2014\u5B58\uFF1A\u8BE5\u7528\u6237\u4E0D\u8981\u5C3E\u968F\u6027\u603B\u7ED3\u3002</when_to_save>\n  <how_to_use>\u8BA9\u7528\u6237\u4E0D\u5FC5\u628A\u540C\u4E00\u6761\u6307\u5BFC\u8BF4\u7B2C\u4E8C\u904D\u3002</how_to_use>\n  <body_structure>\u89C4\u5219\u5148\u884C\uFF0C\u968F\u540E\u5FC5\u5E26\u4E24\u884C\uFF1A**Why:**\uFF08\u7528\u6237\u7ED9\u7684\u7406\u7531\uFF0C\u5E38\u662F\u67D0\u6B21\n  \u4E8B\u6545\u6216\u5F3A\u504F\u597D\u2014\u2014\u77E5\u9053\u4E3A\u4EC0\u4E48\u624D\u80FD\u5224\u65AD\u8FB9\u7F18\u60C5\u51B5\u8BE5\u4E0D\u8BE5\u7834\u4F8B\uFF09\u548C **How to apply:**\n  \uFF08\u4F55\u65F6\u4F55\u5730\u751F\u6548\uFF09\u3002feedback \u7C7B\u578B\u7F3A\u8FD9\u4E24\u884C\u89C6\u4E3A\u4E0D\u5B8C\u6574\u3002</body_structure>\n</type>\n\n<type name=\"project\">\n  <when_to_save>\u5F97\u77E5\u8FDB\u884C\u4E2D\u7684\u5DE5\u4F5C\u3001\u76EE\u6807\u3001\u51B3\u7B56\u3001\u622A\u6B62\u671F\u6216\u4E8B\u6545\u7684\u80CC\u666F\u52A8\u673A\u65F6\u2014\u2014\n  \u51E1\u662F\"\u8C01\u5728\u505A\u4EC0\u4E48\u3001\u4E3A\u4EC0\u4E48\u3001\u5230\u4EC0\u4E48\u65F6\u5019\"\u4E14\u65E0\u6CD5\u4ECE\u4EE3\u7801\u6216 git \u63A8\u5BFC\u7684\u4FE1\u606F\u3002\n  \u8FD9\u7C7B\u8BB0\u5FC6\u8870\u51CF\u5FEB\uFF0C\u72B6\u6001\u53D8\u5316\u65F6\u66F4\u65B0\u5B83\uFF0C\u522B\u5806\u53E0\u65B0\u6587\u4EF6\u3002</when_to_save>\n  <how_to_use>\u7528\u5B83\u8865\u5168\u8BF7\u6C42\u80CC\u540E\u7684\u4E0A\u4E0B\u6587\u4E0E\u52A8\u673A\uFF0C\u8BA9\u5EFA\u8BAE\u8D34\u4F4F\u771F\u5B9E\u7EA6\u675F\u3002\n  \u4F8B\uFF1A\"\u5468\u56DB\u8D77\u51BB\u7ED3\u5408\u5E76\"\u2014\u2014\u5B58\uFF1A2026-03-05 \u8D77\u51BB\u7ED3\u5408\u5E76\uFF0C\u975E\u5173\u952E PR \u63D0\u524D\u6807\u8BB0\u3002</how_to_use>\n  <body_structure>\u4E8B\u5B9E/\u51B3\u7B56\u5148\u884C + **Why:**\uFF08\u52A8\u673A\uFF1A\u7EA6\u675F\u3001deadline\u3001\u5E72\u7CFB\u4EBA\u8981\u6C42\uFF09\n  + **How to apply:**\uFF08\u8FD9\u6761\u5982\u4F55\u5F71\u54CD\u540E\u7EED\u5EFA\u8BAE\uFF09\u3002</body_structure>\n</type>\n\n<type name=\"reference\">\n  <when_to_save>\u7528\u6237\u63D0\u5230\u672A\u6765\u4F1A\u7528\u5230\u7684\u5916\u90E8\u8D44\u6E90\u6307\u9488\uFF1AURL\u3001\u4EEA\u8868\u76D8\u3001\u5DE5\u5355\u3001\n  \u6587\u6863\u4F4D\u7F6E\u3002</when_to_save>\n  <how_to_use>\u9700\u8981\u65F6\u76F4\u63A5\u53D6\u7528\uFF0C\u4E0D\u91CD\u65B0\u68C0\u7D22\u3002</how_to_use>\n</type>\n\n## \u5982\u4F55\u7EF4\u62A4\n\n- \u5199\u5B8C\u8BB0\u5FC6\u6587\u4EF6\u540E\u7ACB\u5373\u5728 MEMORY.md \u8FFD\u52A0\u6216\u66F4\u65B0\u4E00\u884C\u7D22\u5F15\uFF1A`- [\u6807\u9898](\u6587\u4EF6\u540D.md) \u2014 \u94A9\u5B50`\uFF1B\u72B6\u6001\u53D8\u5316\u65F6\u539F\u6587\u4E0E\u7D22\u5F15\u884C\u4E00\u8D77\u6539\uFF0C\u522B\u8BA9\u7D22\u5F15\u8BF4\u8C0E\u3002\n- \u66F4\u65B0\u4F18\u5148\u4E8E\u65B0\u5EFA\uFF1A\u72B6\u6001\u53D8\u4E86\u6539\u539F\u6587\u4EF6\uFF0C\u4E0D\u53E6\u8D77\u4E00\u6761\uFF08\u65B0\u65E7\u5E76\u5B58\u6BD4\u6CA1\u6709\u8BB0\u5FC6\u66F4\u7CDF\uFF09\u3002\n- \u5F15\u7528\u8BB0\u5FC6\u524D\u82E5\u53D1\u73B0\u4E0E\u73B0\u5B9E\u4E0D\u7B26\uFF0C\u5F53\u573A\u4FEE\u6B63\u6216\u5220\u9664\u8BE5\u6587\u4EF6\u4E0E\u7D22\u5F15\u884C\u2014\u2014\u574F\u8BB0\u5FC6\u7684\u5371\u5BB3\u968F\u5F15\u7528\u6269\u6563\uFF0C\n  \u9000\u5F79\u4E0D\u7559\u7ED9\u7528\u6237\u3002\n- [[\u540D\u5B57]] \u4E92\u76F8\u5F15\u7528\u76F8\u5173\u8BB0\u5FC6\uFF1B\u5F15\u7528\u8FD8\u4E0D\u5B58\u5728\u7684\u540D\u5B57\u662F\u5408\u6CD5\u7684\uFF0C\u5B83\u6807\u8BB0\"\u503C\u5F97\u5C06\u6765\u8865\u5199\"\u3002";
+export declare const MEMORY_GUIDE_RULES = "**\u8FB9\u754C\uFF1A\u6362\u4E00\u4E2A\u4ED3\u5E93\u8FD8\u6709\u7528\u7684\u4FE1\u606F\u624D\u8FDB\u8BB0\u5FC6\u3002**\u51B3\u7B56\u3001\u67B6\u6784\u53D6\u820D\u3001\u8FDB\u884C\u4E2D\u72B6\u6001\u8D70\u4ED3\u5E93\u7684 ADR/\u6587\u6863\u8DEF\u7EBF\uFF0C\u4E0D\u8FDB\u8BB0\u5FC6\u5E93\uFF1B\u76F8\u5BF9\u65E5\u671F\u4E00\u5F8B\u5199\u6210\u7EDD\u5BF9\u65E5\u671F\uFF08\"\u5468\u56DB\"\u2192\"2026-10-08\"\uFF09\u3002";
 //# sourceMappingURL=memory-guide.d.ts.map

package/lib/memory-guide.js

@@ -1,86 +1,43 @@
 /**
- * The persistent-memory guide injected as part of the memory section.
+ * The persistent-memory guide injected as part of the memory section —
+ * three sentences of discipline, nothing more (the v0.15 SQLite single-store
+ * redesign, ADR `2026-10-06-sqlite-single-store`).
  *
- * This text is the write-path half of the ZCode-aligned design: it teaches
- * the model when a durable memory is worth creating, which type it belongs
- * to, what body structure each type owes, and that memories are plain
- * markdown files written directly with the native file tools — the plugin
- * registers no tools and no commands.
- *
- * Provenance: the when_to_save taxonomy is adapted from ZCode's persistent-
- * memory prompt (introduced here in evolve v2); the write-path wording now
- * targets native file operations on `<workspace>/.evolve/memory/`.
+ * The store is a central database only the plugin's code can write; the
+ * model reads the injected index, fetches bodies with `memory_read`, and
+ * lands explicit writes through `memory_write`. Automatic sedimentation is
+ * the extraction pipeline's job and the main session must not spend tokens
+ * maintaining memory. The write-quality taxonomy (what deserves a memory,
+ * type bodies, the ADR boundary) moved to the extraction prompt, which is
+ * the only writer left that needs it.
  */
-/** Heading and framing before the `<memories>` block. Takes the absolute memory dir. */
-export function memoryGuideIntro(memoryDir) {
-    return `# 持久记忆
-
-你有一个跨会话的持久记忆系统，存放在 \`${memoryDir}/\`：一事一文，\`MEMORY.md\` 是索引，其内容已注入在下方。没有专用命令或工具——直接用你的文件读写工具查看、新建、修改、删除记忆文件，并在同一会话内顺手落盘。`;
-}
-/** The file format, when_to_save / how_to_use rules, and maintenance discipline. */
-export const MEMORY_GUIDE_RULES = `## 记忆文件的格式
-
----
-name: <短横线小写标识>
-description: <一句话相关性钩子——决定未来会话会不会想起这条记忆>
-metadata:
-  type: user | feedback | project | reference
----
-
-<正文>
-
-## 何时写入记忆
-
-用户明确要求记住时，立即存为最合适的类型；要求忘记时，找到并删除相关文件与索引行。
-除此之外，在对话中自然遇到以下信号时主动写入。存之前先过一道筛子：
-**能从代码、git 历史、仓库文件里重新推导出来的事实不存**——只存重推导不出来的
-背景、决策和偏好。相对日期一律转成绝对日期（"周四"→"2026-10-08"），否则未来
-的会话无法解读。一条事实一个文件；不确定值不值得存时，问自己"这条的信息量
-是否在'为什么'里，而不在'是什么'里"。
+/**
+ * Heading and framing before the `<memories>` block. `toolsAvailable`
+ * reflects whether the tool registration actually succeeded on this host:
+ * a host without the tools service degrades to "tell the user" phrasing
+ * instead of naming tools that do not exist.
+ */
+export function memoryGuideIntro(storePath, workspaceId, toolsAvailable) {
+    if (toolsAvailable) {
+        return `# 持久记忆
 
-<type name="user">
-  <when_to_save>得知用户的角色、技术栈、经验水平、偏好或知识背景的任何细节时。
-  例如用户自述"我是数据科学家，在查日志系统"——存：用户是数据科学家，
-  当前关注可观测性/日志。</when_to_save>
-  <how_to_use>后续解释和建议按用户的背景定制深浅与类比；对资深工程师
-  不解释基础概念，对某领域的新手用其熟悉领域的类比切入。</how_to_use>
-</type>
+你的持久记忆存放在中央库 \`${storePath}\`（按工作区分区，当前工作区：\`${workspaceId}\`）。下方注入的是本工作区的记忆索引（feedback > user > reference，只有钩子不含正文）；需要某条正文或想按关键词检索，用 \`memory_read\`。
 
-<type name="feedback">
-  <when_to_save>两条信号，缺一不可：
-  （1）纠正——用户说"不是这样""别""停下"时，存被纠正的做法与正确做法；
-  （2）确认——这是更安静、更容易漏的信号：用户接受了你不寻常的选择而没有异议，
-  或明确说"对，就这样""保持这样"。确认过的判断是已验证的方法论，只存纠错
-  会让你的行为越来越保守、偏离用户已认可的路。
-  例："测试别 mock 数据库，上次 mock 过了线上迁移挂了"——存规则并带上事故原因。
-  例："结尾不用总结，diff 我自己会看"——存：该用户不要尾随性总结。</when_to_save>
-  <how_to_use>让用户不必把同一条指导说第二遍。</how_to_use>
-  <body_structure>规则先行，随后必带两行：**Why:**（用户给的理由，常是某次
-  事故或强偏好——知道为什么才能判断边缘情况该不该破例）和 **How to apply:**
-  （何时何地生效）。feedback 类型缺这两行视为不完整。</body_structure>
-</type>
+用户明确要求记住时，用 \`memory_write\`（action: create）落库——feedback 类的正文必带 **Why:** 与 **How to apply:** 两行；要求忘记时用 action: delete；情况变了用 action: update 改原条目，不另起新条目。
 
-<type name="project">
-  <when_to_save>得知进行中的工作、目标、决策、截止期或事故的背景动机时——
-  凡是"谁在做什么、为什么、到什么时候"且无法从代码或 git 推导的信息。
-  这类记忆衰减快，状态变化时更新它，别堆叠新文件。</when_to_save>
-  <how_to_use>用它补全请求背后的上下文与动机，让建议贴住真实约束。
-  例："周四起冻结合并"——存：2026-03-05 起冻结合并，非关键 PR 提前标记。</how_to_use>
-  <body_structure>事实/决策先行 + **Why:**（动机：约束、deadline、干系人要求）
-  + **How to apply:**（这条如何影响后续建议）。</body_structure>
-</type>
+除此之外的沉淀由会话结束后的专职提取流程负责——不要在执行任务途中分心维护记忆。`;
+    }
+    return `# 持久记忆
 
-<type name="reference">
-  <when_to_save>用户提到未来会用到的外部资源指针：URL、仪表盘、工单、
-  文档位置。</when_to_save>
-  <how_to_use>需要时直接取用，不重新检索。</how_to_use>
-</type>
+你的持久记忆存放在中央库 \`${storePath}\`（按工作区分区，当前工作区：\`${workspaceId}\`），但本宿主未挂载记忆读写工具。下方注入的是本工作区的记忆索引（feedback > user > reference，只有钩子不含正文）；需要正文时，把 id 告诉用户请其代查。
 
-## 如何维护
+用户明确要求记住或忘记时，直接把要记的内容和类型（user/feedback/reference）告诉用户，由用户手动管理。
 
-- 写完记忆文件后立即在 MEMORY.md 追加或更新一行索引：\`- [标题](文件名.md) — 钩子\`；状态变化时原文与索引行一起改，别让索引说谎。
-- 更新优先于新建：状态变了改原文件，不另起一条（新旧并存比没有记忆更糟）。
-- 引用记忆前若发现与现实不符，当场修正或删除该文件与索引行——坏记忆的危害随引用扩散，
-  退役不留给用户。
-- [[名字]] 互相引用相关记忆；引用还不存在的名字是合法的，它标记"值得将来补写"。`;
+除此之外的沉淀由会话结束后的专职提取流程负责——不要在执行任务途中分心维护记忆。`;
+}
+/**
+ * Hard rules that ride along regardless of the intro (kept as a separate
+ * constant so the section renderer can compose them once).
+ */
+export const MEMORY_GUIDE_RULES = `**边界：换一个仓库还有用的信息才进记忆。**决策、架构取舍、进行中状态走仓库的 ADR/文档路线，不进记忆库；相对日期一律写成绝对日期（"周四"→"2026-10-08"）。`;
 //# sourceMappingURL=memory-guide.js.map

package/lib/memory-rules.d.ts

@@ -0,0 +1,56 @@
+/** Memory types a record can carry (the guide's taxonomy, enforced). */
+export declare const MEMORY_TYPES: readonly ["user", "feedback", "reference"];
+export type MemoryType = (typeof MEMORY_TYPES)[number];
+/** Record lifecycle statuses. `quarantined` is set by patrol, never shown. */
+export declare const MEMORY_STATUSES: readonly ["active", "quarantined", "archived"];
+export type MemoryStatus = (typeof MEMORY_STATUSES)[number];
+/** Hard body size cap: the one unbounded-growth entry point, killed at write. */
+export declare const MEMORY_BODY_LIMIT = 65536;
+/** Sanity caps for the injection-facing fields (hook text, not prose). */
+export declare const MEMORY_TITLE_LIMIT = 200;
+export declare const MEMORY_DESCRIPTION_LIMIT = 500;
+/** Full id bound (slug + hash-fallback suffix headroom). */
+export declare const MEMORY_ID_LIMIT = 80;
+/**
+ * First reason the content reads as carrying a live credential, or undefined
+ * when it screens clean. Applied to the whole proposed record (title +
+ * description + body) at write time, and again by patrol over stored rows.
+ */
+export declare function secretLeakReason(content: string): string | undefined;
+/**
+ * Derive a kebab-slug id from a title. CJK (or any non-ASCII-only) titles
+ * produce an empty slug, so a short sha1 hash stands in — same fallback the
+ * v1 store used (ADR `2026-09-25-cjk-slug-hash-fallback`).
+ */
+export declare function slugifyId(title: string): string;
+/** Whether `id` is a well-formed store id. */
+export declare function isValidMemoryId(id: string): boolean;
+/** Labels of the feedback body lines that are missing, empty string when complete. */
+export declare function feedbackWhyHowMissing(body: string): string;
+/** One proposed mutation — the closed proposal shape both write paths speak. */
+export interface MemoryProposal {
+    action: "create" | "update" | "delete";
+    /** Required for update/delete; optional for create (derived from title). */
+    id?: string | undefined;
+    type?: string | undefined;
+    title?: string | undefined;
+    description?: string | undefined;
+    body?: string | undefined;
+    /** Trajectory provenance for extraction writes ("820-831"). */
+    sourceSeqs?: string | undefined;
+}
+/** The merged field values a create/update would write (delete checks none). */
+export interface ProposedFields {
+    type: MemoryType;
+    title: string;
+    description: string;
+    body: string;
+}
+/**
+ * Gates that depend only on the merged field values (not on store state).
+ * Returns the blocking reasons, empty when the record would pass. Runs the
+ * secret screen over the full visible text so a secret smuggled into any
+ * field blocks the write.
+ */
+export declare function fieldGateReasons(fields: ProposedFields): string[];
+//# sourceMappingURL=memory-rules.d.ts.map

package/lib/memory-rules.js

@@ -0,0 +1,152 @@
+/**
+ * The mechanical write gates every memory passes before the store accepts it
+ * — the "模型提议，代码保证" boundary made literal. Both write paths (the
+ * explicit `memory_write` tool and the proposal-based extraction) funnel
+ * through these checks; nothing reaches the database without them.
+ *
+ * Type taxonomy and the boundary judgment (what deserves a memory at all)
+ * live in the extraction prompt (`memory-guide.ts`); this module only holds
+ * what code can decide without judgment: enumerations, sizes, id shape, the
+ * feedback body contract, and secret screening.
+ */
+import { createHash } from "node:crypto";
+/** Memory types a record can carry (the guide's taxonomy, enforced). */
+export const MEMORY_TYPES = ["user", "feedback", "reference"];
+/** Record lifecycle statuses. `quarantined` is set by patrol, never shown. */
+export const MEMORY_STATUSES = ["active", "quarantined", "archived"];
+/** Hard body size cap: the one unbounded-growth entry point, killed at write. */
+export const MEMORY_BODY_LIMIT = 65_536;
+/** Sanity caps for the injection-facing fields (hook text, not prose). */
+export const MEMORY_TITLE_LIMIT = 200;
+export const MEMORY_DESCRIPTION_LIMIT = 500;
+/** Kebab-slug id shape: lowercase alphanumerics joined by single dashes. */
+const ID_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+/** Full id bound (slug + hash-fallback suffix headroom). */
+export const MEMORY_ID_LIMIT = 80;
+/**
+ * Fixed secret-detection patterns — a security invariant, deliberately NOT
+ * configurable: a user pattern typo must never be able to disable secret
+ * screening. Patterns carried over verbatim from the v1 promotion gate
+ * (ADR `2026-08-28-secret-leak-guard`), tuned for low false positives —
+ * placeholders like "YOUR_API_KEY_HERE" don't match; realistic mixed
+ * literals do.
+ */
+const SECRET_PATTERNS = [
+    { label: "AnySearch API key", regex: /\bas_sk_[A-Za-z0-9]{8,}\b/ },
+    { label: "Anthropic API key", regex: /\bsk-ant-[A-Za-z0-9_-]{16,}\b/ },
+    { label: "OpenAI-style API key", regex: /\bsk-(?:proj-)?[A-Za-z0-9_-]{16,}\b/ },
+    { label: "GitHub token", regex: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b/ },
+    { label: "GitHub fine-grained PAT", regex: /\bgithub_pat_[A-Za-z0-9_]{20,}\b/ },
+    { label: "AWS access key", regex: /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/ },
+    { label: "Google API key", regex: /\bAIza[0-9A-Za-z_-]{35}\b/ },
+    { label: "Slack token", regex: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/ },
+    { label: "npm grant token", regex: /\bnpm_[A-Za-z0-9]{36}\b/ },
+    { label: "private key block", regex: /-----BEGIN (?:RSA |EC |DSA |OPENSSH |PGP )?PRIVATE KEY(?: BLOCK)?-----/ },
+    {
+        label: "credential assignment",
+        // The credential-name group is manually case-insensitive ("apiKey" in
+        // JSON, "API_KEY" in env examples) so the placeholder lookahead stays
+        // case-sensitive: it excludes only ALL-CAPS placeholders
+        // ("YOUR_KEY_HERE"), not real mixed/lowercase literals.
+        regex: /\b(?:[Aa][Pp][Ii][_-]?[Kk][Ee][Yy]|[Ss][Ee][Cc][Rr][Ee][Tt]|[Tt][Oo][Kk][Ee][Nn]|[Pp][Aa][Ss][Ss][Ww][Oo][Rr][Dd]|[Pp][Aa][Ss][Ss][Ww][Dd]|[Pp][Ww][Dd])\b["']?\s*[:=]\s*["'](?!["']*[A-Z0-9_]+["'])[A-Za-z0-9+/_-]{16,}["']/,
+    },
+];
+/** Redact a matched secret for error/audit surfaces: family, never the value. */
+function redactSecret(matched) {
+    if (matched.length <= 10) {
+        return `${matched.slice(0, 3)}…`;
+    }
+    return `${matched.slice(0, 6)}…${matched.slice(-3)}`;
+}
+/**
+ * First reason the content reads as carrying a live credential, or undefined
+ * when it screens clean. Applied to the whole proposed record (title +
+ * description + body) at write time, and again by patrol over stored rows.
+ */
+export function secretLeakReason(content) {
+    for (const { label, regex } of SECRET_PATTERNS) {
+        const match = regex.exec(content);
+        if (match?.[0]) {
+            return `possible ${label} ("${redactSecret(match[0])}") — secrets must never be sedimented into the memory store; rotate the credential and keep it out of the store`;
+        }
+    }
+    return undefined;
+}
+/**
+ * Derive a kebab-slug id from a title. CJK (or any non-ASCII-only) titles
+ * produce an empty slug, so a short sha1 hash stands in — same fallback the
+ * v1 store used (ADR `2026-09-25-cjk-slug-hash-fallback`).
+ */
+export function slugifyId(title) {
+    const slug = title
+        .toLowerCase()
+        .normalize("NFKD")
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .slice(0, MEMORY_ID_LIMIT)
+        .replace(/-+$/g, "");
+    if (slug.length > 0) {
+        return slug;
+    }
+    return `m-${createHash("sha1").update(title).digest("hex").slice(0, 8)}`;
+}
+/** Whether `id` is a well-formed store id. */
+export function isValidMemoryId(id) {
+    return id.length <= MEMORY_ID_LIMIT && ID_PATTERN.test(id);
+}
+/** The feedback body contract: rule first, then **Why:** and **How to apply:**. */
+const FEEDBACK_WHY = /(?:\*\*)?Why:(?:\*\*)?/i;
+const FEEDBACK_HOW = /(?:\*\*)?How to apply:(?:\*\*)?/i;
+/** Labels of the feedback body lines that are missing, empty string when complete. */
+export function feedbackWhyHowMissing(body) {
+    const missing = [];
+    if (!FEEDBACK_WHY.test(body)) {
+        missing.push("Why:");
+    }
+    if (!FEEDBACK_HOW.test(body)) {
+        missing.push("How to apply:");
+    }
+    return missing.join("、");
+}
+/**
+ * Gates that depend only on the merged field values (not on store state).
+ * Returns the blocking reasons, empty when the record would pass. Runs the
+ * secret screen over the full visible text so a secret smuggled into any
+ * field blocks the write.
+ */
+export function fieldGateReasons(fields) {
+    const reasons = [];
+    if (!MEMORY_TYPES.includes(fields.type)) {
+        reasons.push(`type must be one of ${MEMORY_TYPES.join("/")}`);
+    }
+    if (fields.title.trim().length === 0) {
+        reasons.push("title must not be empty");
+    }
+    else if (fields.title.length > MEMORY_TITLE_LIMIT) {
+        reasons.push(`title exceeds ${MEMORY_TITLE_LIMIT} characters`);
+    }
+    if (fields.description.trim().length === 0) {
+        reasons.push("description must not be empty — it is the injection hook");
+    }
+    else if (fields.description.length > MEMORY_DESCRIPTION_LIMIT) {
+        reasons.push(`description exceeds ${MEMORY_DESCRIPTION_LIMIT} characters`);
+    }
+    if (fields.body.trim().length === 0) {
+        reasons.push("body must not be empty");
+    }
+    else if (fields.body.length > MEMORY_BODY_LIMIT) {
+        reasons.push(`body exceeds the ${MEMORY_BODY_LIMIT}-character cap`);
+    }
+    if (fields.type === "feedback") {
+        const missing = feedbackWhyHowMissing(fields.body);
+        if (missing.length > 0) {
+            reasons.push(`feedback body must carry the ${missing} lines`);
+        }
+    }
+    const leak = secretLeakReason(`${fields.title}\n${fields.description}\n${fields.body}`);
+    if (leak !== undefined) {
+        reasons.push(leak);
+    }
+    return reasons;
+}
+//# sourceMappingURL=memory-rules.js.map