dsh-continual-evolve 0.4.0 → 0.6.0

package/lib/tool.js

@@ -1,6 +1,7 @@
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import { formatHarnessStateForPrompt } from "./render.js";
 import { requireGlobalApproval } from "./approval.js";
+import { CONFLICT_WARN_SCORE, buildConflictNotice, mostSimilarEntry } from "./promotion.js";
 import { entrySourceOf } from "./source.js";
 import { getUsageCount, loadUsage } from "./usage.js";
 import { buildEvolveCompleteEvent, emitEvolveComplete } from "./evolve-event.js";
@@ -72,7 +73,13 @@ export function registerEvolveTools(ctx, engine, opts) {
         execute: async (args, exec) => {
             const scope = scopeOf(args.global, "local");
             if (scope === "global" && opts.requireGlobalApproval) {
-                await requireGlobalApproval(ctx, exec.agent, exec.signal, `evolve_add ${args.kind} "${args.title}" → 跨会话全局 store`);
+                // Informed approval: surface a similarity hit against the
+                // existing global store BEFORE the human decides — the
+                // engine's write-time guard still has the final say.
+                const globalState = engine.load("global", undefined);
+                const hit = mostSimilarEntry(Object.values(globalState.entries[args.kind]), args.title ?? "", args.content ?? "", CONFLICT_WARN_SCORE);
+                const conflictNote = hit ? ` ⚠️ ${buildConflictNotice(hit)}——建议改用 evolve_update` : "";
+                await requireGlobalApproval(ctx, exec.agent, exec.signal, `evolve_add ${args.kind} "${args.title}" → 跨会话全局 store${conflictNote}`);
             }
             const edit = {
                 action: "create",

package/lib/types.d.ts

@@ -57,6 +57,28 @@ export declare const PROMOTED_AT_KEY = "promotedAt";
  * cross-session copy back to the session it was distilled from.
  */
 export declare const SOURCED_FROM_KEY = "sourcedFromLocal";
+/**
+ * Metadata key stamped on a GLOBAL entry that was created despite a
+ * moderate-similarity overlap with an existing entry (write-time conflict
+ * guard, warn tier): `<kind>:<id>:<score>` — points at the entry it may
+ * duplicate so wrapup/fate can consolidate later. Creates at/above the block
+ * threshold never reach this stamp; they are rejected outright.
+ */
+export declare const CONFLICT_HINT_KEY = "conflictHint";
+/**
+ * Negative-valence counter (P1 效价反馈): how many times an assessment marked
+ * this entry contradicted by newer evidence (user correction, overridden
+ * fact). Injection ranking demotes entries with a positive counter and the
+ * wrapup/fate assessors see the count so they prefer archiving the entry.
+ */
+export declare const VALENCE_NEGATIVE_KEY = "valenceNegative";
+/**
+ * Provenance of entries merged INTO this one by the consolidation command
+ * (P1 反膨胀): array of `<kind>:<id>` — the near-duplicate sources whose
+ * content was appended before they archived. The trail keeps an unarchive of
+ * the source explainable and lets audits find the merge provenance.
+ */
+export declare const MERGED_FROM_KEY = "mergedFrom";
 /**
  * True when the entry is archived (hidden from injection, restorable).
  * Absent or empty archivedAt means the entry is active.

package/lib/types.js

@@ -43,6 +43,28 @@ export const PROMOTED_AT_KEY = "promotedAt";
  * cross-session copy back to the session it was distilled from.
  */
 export const SOURCED_FROM_KEY = "sourcedFromLocal";
+/**
+ * Metadata key stamped on a GLOBAL entry that was created despite a
+ * moderate-similarity overlap with an existing entry (write-time conflict
+ * guard, warn tier): `<kind>:<id>:<score>` — points at the entry it may
+ * duplicate so wrapup/fate can consolidate later. Creates at/above the block
+ * threshold never reach this stamp; they are rejected outright.
+ */
+export const CONFLICT_HINT_KEY = "conflictHint";
+/**
+ * Negative-valence counter (P1 效价反馈): how many times an assessment marked
+ * this entry contradicted by newer evidence (user correction, overridden
+ * fact). Injection ranking demotes entries with a positive counter and the
+ * wrapup/fate assessors see the count so they prefer archiving the entry.
+ */
+export const VALENCE_NEGATIVE_KEY = "valenceNegative";
+/**
+ * Provenance of entries merged INTO this one by the consolidation command
+ * (P1 反膨胀): array of `<kind>:<id>` — the near-duplicate sources whose
+ * content was appended before they archived. The trail keeps an unarchive of
+ * the source explainable and lets audits find the merge provenance.
+ */
+export const MERGED_FROM_KEY = "mergedFrom";
 /**
  * True when the entry is archived (hidden from injection, restorable).
  * Absent or empty archivedAt means the entry is active.

package/lib/usage.d.ts

@@ -1,4 +1,4 @@
-import type { HarnessState, RefinementKind } from "./types.js";
+import type { RefinementKind } from "./types.js";
 export interface UsageStore {
     /** Injection count per entry key (`kind:id`). */
     counts: Record<string, number>;
@@ -33,13 +33,4 @@ export declare function recordInjection(baseDir: string, injectedKeys: readonly
  * has never been injected (absent from the store).
  */
 export declare function getUsageCount(store: UsageStore, kind: RefinementKind, id: string): number;
-/**
- * Find entries with zero injection usage. Returns `{kind, id, title}` for
- * each entry that has never been injected — prime candidates for archival.
- */
-export declare function zeroUsageEntries(state: HarnessState, store: UsageStore): {
-    kind: RefinementKind;
-    id: string;
-    title: string;
-}[];
 //# sourceMappingURL=usage.d.ts.map

package/lib/usage.js

@@ -95,21 +95,4 @@ export function recordInjection(baseDir, injectedKeys, sessionId) {
 export function getUsageCount(store, kind, id) {
     return store.counts[usageKey(kind, id)] ?? 0;
 }
-/**
- * Find entries with zero injection usage. Returns `{kind, id, title}` for
- * each entry that has never been injected — prime candidates for archival.
- */
-export function zeroUsageEntries(state, store) {
-    const results = [];
-    for (const kind of Object.keys(state.entries)) {
-        for (const entry of Object.values(state.entries[kind])) {
-            if (entry.scope !== "local")
-                continue;
-            if (getUsageCount(store, kind, entry.id) === 0) {
-                results.push({ kind, id: entry.id, title: entry.title });
-            }
-        }
-    }
-    return results;
-}
 //# sourceMappingURL=usage.js.map

package/lib/validate.d.ts

@@ -4,7 +4,7 @@
  * the base system prompt, required fields per action, and the executable
  * contract skill entries must carry.
  */
-import type { HarnessScope, RefinementEdit } from "./types.js";
+import type { HarnessEntry, HarnessScope, RefinementEdit } from "./types.js";
 export declare const BASE_SYSTEM_PROMPT_ID = "base_system_prompt";
 /**
  * Gap C2: mechanical check that an edit's declared blast radius is coherent
@@ -16,6 +16,13 @@ export declare const BASE_SYSTEM_PROMPT_ID = "base_system_prompt";
  * incoherently.
  */
 export declare function validateBlastRadiusScope(scope: HarnessScope, blastRadius: "general" | "project" | "session"): string | undefined;
-/** Returns a human-readable failure reason, or undefined when the edit passes. */
-export declare function validateEdit(edit: RefinementEdit, computedId: string | undefined, scope?: HarnessScope): string | undefined;
+/**
+ * Returns a human-readable failure reason, or undefined when the edit passes.
+ *
+ * `before` (the entry the edit targets, absent for creates/unknown ids) lets
+ * update rules distinguish "carrying the persisted value" from "changing it"
+ * — e.g. a rollback inverse re-carries the stored skill_kind, which must
+ * pass, while a genuine executable↔guidance switch must not.
+ */
+export declare function validateEdit(edit: RefinementEdit, computedId: string | undefined, scope?: HarnessScope, before?: HarnessEntry): string | undefined;
 //# sourceMappingURL=validate.d.ts.map

package/lib/validate.js

@@ -20,8 +20,15 @@ export function validateBlastRadiusScope(scope, blastRadius) {
     }
     return undefined;
 }
-/** Returns a human-readable failure reason, or undefined when the edit passes. */
-export function validateEdit(edit, computedId, scope) {
+/**
+ * Returns a human-readable failure reason, or undefined when the edit passes.
+ *
+ * `before` (the entry the edit targets, absent for creates/unknown ids) lets
+ * update rules distinguish "carrying the persisted value" from "changing it"
+ * — e.g. a rollback inverse re-carries the stored skill_kind, which must
+ * pass, while a genuine executable↔guidance switch must not.
+ */
+export function validateEdit(edit, computedId, scope, before) {
     if (!ACTIONS.has(edit.action)) {
         return `unsupported action ${String(edit.action)}`;
     }
@@ -46,10 +53,25 @@ export function validateEdit(edit, computedId, scope) {
     if (edit.action === "archive") {
         return undefined;
     }
-    if (edit.action !== "delete" && (!edit.title || !edit.content)) {
-        return `${edit.action} requires title and content`;
+    // Create needs the full payload (nothing to fall back to). Update may
+    // carry any subset — apply merges with `?? before` — but must carry at
+    // least one change (review audit 2026-08-28 B3/B5: the old blanket
+    // "update requires title and content" broke every partial-update path:
+    // skill archive/demote, consolidate, and the evolve_update tool contract
+    // all construct payload-subset updates).
+    if (edit.action === "create" && (!edit.title || !edit.content)) {
+        return "create requires title and content";
+    }
+    if (edit.action === "update" &&
+        edit.title === undefined &&
+        edit.content === undefined &&
+        edit.path === undefined &&
+        edit.metadata === undefined &&
+        edit.reference === undefined &&
+        edit.arguments === undefined) {
+        return "update carries no changes";
     }
-    if (edit.action !== "delete" && edit.kind === "skill") {
+    if (edit.action === "create" && edit.kind === "skill") {
         // Guidance skills are SKILL.md documents: no python reference (a
         // reference on a guidance skill would be an invented contract) and
         // no arguments contract. Executable skills keep the full contract.
@@ -75,6 +97,31 @@ export function validateEdit(edit, computedId, scope) {
             return contentProblems.join("; ");
         }
     }
+    if (edit.action === "update" && edit.kind === "skill") {
+        // skill_kind is immutable on update: a switch without the matching
+        // contract pair would leave an invalid entry (guidance carrying a
+        // python reference, or an executable with none). Re-carrying the
+        // persisted value (rollback inverses do) passes. Recreate the entry
+        // to change the kind.
+        if (edit.skill_kind !== undefined && before !== undefined && before.skill_kind !== edit.skill_kind) {
+            return "update cannot change skill_kind — delete and recreate the entry instead";
+        }
+        // A carried non-empty reference replaces the contract wholesale, so it
+        // must be a complete executable contract on its own. Empty references
+        // (guidance skills) and absent payloads pass through — apply keeps
+        // the persisted values.
+        if (edit.reference !== undefined && Object.keys(edit.reference).length > 0) {
+            const contractError = validateSkillContract(edit);
+            if (contractError)
+                return contractError;
+        }
+        if (edit.content !== undefined) {
+            const contentProblems = validateSkillEntryContent(edit.content);
+            if (contentProblems.length > 0) {
+                return contentProblems.join("; ");
+            }
+        }
+    }
     return undefined;
 }
 function validateSkillContract(edit) {

package/lib/wrapup-command.js

@@ -1,5 +1,5 @@
 import { questionServiceOf, requireGlobalApproval } from "./approval.js";
-import { assessLocalEntries, candidateKey, filterPromotable, listLocalCandidates, splitArchiveGuards, splitPromoteBlocked, splitPromoteProposals, wholePromoteProposals } from "./wrapup.js";
+import { assessLocalEntries, candidateKey, filterPromotable, listLocalCandidates, splitArchiveGuards, splitPromoteBlocked, splitPromoteProposals, valenceStampProposal, wholePromoteProposals } from "./wrapup.js";
 import { DEFAULT_PROMOTION_POLICY } from "./promotion.js";
 function success(text) {
     return { kind: "success", text };
@@ -206,6 +206,22 @@ export async function executeWrapupCommand(ctx, engine, invocation, policy = DEF
             applied.push(`kept ${item.key} — user declined the archive`);
         }
     }
+    // 7. Valence stamps (P1 效价反馈): keep-verdict entries the assessor marked
+    //    contradicted get their negative counter bumped — the entry stays live
+    //    but sinks in injection ranking and the next assessment prefers
+    //    archiving it. Deterministic local action, no approval needed.
+    for (const item of keepItems) {
+        if (!item.contradicted)
+            continue;
+        const candidate = byKey.get(item.key);
+        if (!candidate)
+            continue;
+        const proposal = valenceStampProposal(item, candidate);
+        if (!proposal)
+            continue;
+        const result = engine.apply("local", sessionId, proposal, { scope: "local", baselineState: localState });
+        applied.push(`contradicted stamp ${item.key} → valenceNegative=${candidate.negativeCount + 1} (${result.id})`);
+    }
     lines.push(...(applied.length > 0 ? applied : ["(no changes applied — all entries kept)"]));
     return success(lines.join("\n"));
 }

package/lib/wrapup.d.ts

@@ -40,6 +40,14 @@ export interface WrapupItem {
         title: string;
         content: string;
     };
+    /**
+     * Valence signal (P1 效价反馈): the assessor found trajectory or global
+     * evidence contradicting this entry's content (user correction, overridden
+     * fact). Strictly parsed — only an explicit JSON `true` sets it. Keep
+     * verdicts with this flag get a negative-valence stamp; the assessor is
+     * instructed to prefer "archive" for contradicted entries.
+     */
+    contradicted?: boolean;
 }
 /** A real global entry worth showing the assessor for the same topic. */
 export interface GlobalHint {
@@ -87,6 +95,13 @@ export interface WrapupCandidate {
      * The assessor is instructed to prefer "archive" for stale entries.
      */
     stale: boolean;
+    /**
+     * Negative-valence counter (P1 效价反馈): how many prior assessments marked
+     * this entry contradicted (metadata {@link VALENCE_NEGATIVE_KEY}). Shown to
+     * the assessor so it can prefer "archive"; also demotes the entry in
+     * injection ranking (inject.ts rankEntries).
+     */
+    negativeCount: number;
 }
 export declare function candidateKey(kind: RefinementKind, id: string): string;
 /**
@@ -208,7 +223,16 @@ export declare function splitPromoteProposals(item: WrapupItem, candidate: Wrapu
     global: RefinementProposal;
     localStamp: (createdId: string) => RefinementProposal;
 };
-export declare const WRAPUP_ASSESS_SYSTEM_PROMPT = "You are the /evolve session wrap-up assessor.\n\nA session is ending and its local harness entries need a fate. Classify each\nlisted entry exactly once:\n\n- \"promote\" \u2014 the content is a stable, durable, CROSS-SESSION reusable lesson:\n  a durable user preference, a project-level fact or convention, a reusable\n  procedure or skill. Future sessions would benefit from seeing it.\n- \"archive\" \u2014 the content is session-specific task progress, one-off noise,\n  superseded or obsolete, or already covered by the global store (note\n  \"covered globally\" in the reason), or stale (old + never injected \u2014 note\n  \"stale (injectionCount=0, recency low)\" in the reason).\n- \"keep\" \u2014 still actively useful to this session, or genuinely uncertain.\n\nRules:\n- When an entry is marked \"covered globally\" in the listing, prefer \"archive\"\n  or \"keep\" over \"promote\" \u2014 promoting a duplicate gains nothing.\n- When an entry is marked \"stale\" (injectionCount=0 and low recency), prefer\n  \"archive\" \u2014 the entry has never been used and is old, so it is unlikely to\n  be needed again. Only \"keep\" if the content is clearly valuable despite low\n  usage (e.g. a safety policy that rarely triggers but is critical).\n- Do not promote local task state, work-in-progress notes, or content tied to\n  one session's ephemeral details.\n- Skills: only \"promote\" a skill entry that is a genuinely reusable procedure\n  meeting the DSH skill quality standard; one-off workflows are \"archive\" or\n  \"keep\".\n- SPLIT PROMOTION: when an entry mixes a stable, cross-session-reusable part\n  WITH session-specific snapshot details, do NOT promote it whole. Instead\n  give verdict \"archive\" WITH a \"promote\" sub-object holding a CLEANED\n  version of only the durable part (a stable title + the persistent facts,\n  stripped of dates/states/one-off figures). Ephemeral snapshot content stays\n  out of the sub-object \u2014 it is left behind in the archive. A sub-object is\n  only meaningful on \"archive\" verdicts.\n\nReturn JSON only:\n{\n  \"rationale\": \"one or two sentences\",\n  \"items\": [\n    {\"key\": \"memory:foo\", \"verdict\": \"promote|archive|keep\", \"reason\": \"why\"},\n    {\"key\": \"memory:bar\", \"verdict\": \"archive\", \"reason\": \"why\",\n     \"promote\": {\"title\": \"cleaned stable title\", \"content\": \"cleaned durable part only\"}}\n  ]\n}\nOnly keys from the provided list are allowed; any entry you omit defaults to \"keep\".";
+/**
+ * Valence stamp (P1 效价反馈): a keep-verdict item the assessor marked
+ * contradicted gets its negative-valence counter bumped — the entry stays
+ * live but sinks in injection ranking and the next assessment prefers
+ * archiving it. Promotes pass untouched (the human-approved global copy is
+ * the live truth); archives don't need the stamp (they already leave
+ * injection). Undefined when nothing applies.
+ */
+export declare function valenceStampProposal(item: WrapupItem, candidate: WrapupCandidate): RefinementProposal | undefined;
+export declare const WRAPUP_ASSESS_SYSTEM_PROMPT = "You are the /evolve session wrap-up assessor.\nA session is ending and its local harness entries need a fate. Classify each\nlisted entry exactly once:\n\n- \"promote\" \u2014 the content is a stable, durable, CROSS-SESSION reusable lesson:\n  a durable user preference, a project-level fact or convention, a reusable\n  procedure or skill. Future sessions would benefit from seeing it.\n- \"archive\" \u2014 the content is session-specific task progress, one-off noise,\n  superseded or obsolete, or already covered by the global store (note\n  \"covered globally\" in the reason), or stale (old + never injected \u2014 note\n  \"stale (injectionCount=0, recency low)\" in the reason), or CONTRADICTED \u2014\n  newer evidence in the trajectory or the global store disproves or overrides\n  the entry's content (note what contradicts it in the reason).\n- \"keep\" \u2014 still actively useful to this session, or genuinely uncertain.\n\nRules:\n- CONTRADICTED: when evidence contradicts an entry, set \"contradicted\": true\n  on that item (besides the verdict). Entries marked \"(contradicted N\u00D7\n  before)\" were contradicted in earlier assessments \u2014 prefer \"archive\" for\n  them unless you have concrete evidence the content is valid again.\n- When an entry is marked \"covered globally\" in the listing, prefer \"archive\"\n  or \"keep\" over \"promote\" \u2014 promoting a duplicate gains nothing.\n- When an entry is marked \"stale\" (injectionCount=0 and low recency), prefer\n  \"archive\" \u2014 the entry has never been used and is old, so it is unlikely to\n  be needed again. Only \"keep\" if the content is clearly valuable despite low\n  usage (e.g. a safety policy that rarely triggers but is critical).\n- Do not promote local task state, work-in-progress notes, or content tied to\n  one session's ephemeral details.\n- Skills: only \"promote\" a skill entry that is a genuinely reusable procedure\n  meeting the DSH skill quality standard; one-off workflows are \"archive\" or\n  \"keep\".\n- SPLIT PROMOTION: when an entry mixes a stable, cross-session-reusable part\n  WITH session-specific snapshot details, do NOT promote it whole. Instead\n  give verdict \"archive\" WITH a \"promote\" sub-object holding a CLEANED\n  version of only the durable part (a stable title + the persistent facts,\n  stripped of dates/states/one-off figures). Ephemeral snapshot content stays\n  out of the sub-object \u2014 it is left behind in the archive. A sub-object is\n  only meaningful on \"archive\" verdicts.\n\nReturn JSON only:\n{\n  \"rationale\": \"one or two sentences\",\n  \"items\": [\n    {\"key\": \"memory:foo\", \"verdict\": \"promote|archive|keep\", \"reason\": \"why\"},\n    {\"key\": \"memory:bar\", \"verdict\": \"archive\", \"reason\": \"why\", \"contradicted\": true,\n     \"promote\": {\"title\": \"cleaned stable title\", \"content\": \"cleaned durable part only\"}}\n  ]\n}\nOnly keys from the provided list are allowed; any entry you omit defaults to \"keep\".";
 export interface AssessOptions {
     /** Output token budget for the assessment call. */
     maxOutputTokens?: number;

package/lib/wrapup.js

@@ -1,10 +1,10 @@
-import { ARCHIVED_AT_KEY, PROMOTED_AT_KEY, PROMOTED_TO_KEY, SOURCE_SEQS_KEY, SOURCE_SESSION_KEY, SOURCED_FROM_KEY, isArchived } from "./types.js";
+import { ARCHIVED_AT_KEY, PROMOTED_AT_KEY, PROMOTED_TO_KEY, SOURCE_SEQS_KEY, SOURCE_SESSION_KEY, SOURCED_FROM_KEY, VALENCE_NEGATIVE_KEY, isArchived } from "./types.js";
 import { extractJsonObject } from "./plan.js";
 import { compactText } from "./render.js";
 import { streamText } from "./llm-text.js";
 import { getUsageCount, loadUsage } from "./usage.js";
 import { recencyScore } from "./inject.js";
-import { DEFAULT_PROMOTION_POLICY, mostSimilarGlobalEntry, projectScopedReason } from "./promotion.js";
+import { DEFAULT_PROMOTION_POLICY, mostSimilarGlobalEntry, projectScopedReason, secretLeakReason } from "./promotion.js";
 export function candidateKey(kind, id) {
     return `${kind}:${id}`;
 }
@@ -90,6 +90,8 @@ export function listLocalCandidates(state, globalState, baseDir) {
                 continue;
             const injectionCount = usage ? getUsageCount(usage, kind, entry.id) : 0;
             const stale = injectionCount === 0 && recencyScore(entry, now) < STALE_RECENCY_THRESHOLD;
+            const rawNegative = entry.metadata[VALENCE_NEGATIVE_KEY];
+            const negativeCount = typeof rawNegative === "number" && Number.isFinite(rawNegative) && rawNegative > 0 ? rawNegative : 0;
             candidates.push({
                 kind,
                 id: entry.id,
@@ -102,6 +104,7 @@ export function listLocalCandidates(state, globalState, baseDir) {
                 globalHints: globalHintsFor(globalState, kind, entry),
                 injectionCount,
                 stale,
+                negativeCount,
             });
         }
     }
@@ -136,6 +139,9 @@ export function parseWrapupAssessment(text, candidates) {
                 continue;
             const verdict = item["verdict"] === "promote" || item["verdict"] === "archive" ? item["verdict"] : "keep";
             const built = { key, verdict, reason: typeof item["reason"] === "string" ? item["reason"] : "" };
+            if (item["contradicted"] === true) {
+                built.contradicted = true;
+            }
             if (verdict === "archive" && typeof item["promote"] === "object" && item["promote"] !== null) {
                 const sub = item["promote"];
                 const subTitle = typeof sub["title"] === "string" ? sub["title"].trim() : "";
@@ -189,6 +195,15 @@ export function filterPromotable(items, globalState, candidates, policy = DEFAUL
             skipped.push({ key: item.key, reason: scoped });
             continue;
         }
+        // Metadata screens too: wholePromoteProposals copies candidate.metadata
+        // verbatim into the global entry, so a credential planted in local
+        // metadata must not ride the promotion path into the shared store
+        // (review audit 2026-08-28 B2).
+        const secret = secretLeakReason([candidate.title, candidate.content, JSON.stringify(candidate.metadata ?? {})].join("\n"));
+        if (secret) {
+            skipped.push({ key: item.key, reason: secret });
+            continue;
+        }
         if (candidate.content.length < policy.minPromoteChars) {
             skipped.push({
                 key: item.key,
@@ -265,6 +280,9 @@ export function splitPromoteBlocked(item, globalState, kind, policy = DEFAULT_PR
     const scoped = projectScopedReason(`${item.promote.title}\n${item.promote.content}`, policy);
     if (scoped)
         return `split promotion is ${scoped}`;
+    const secret = secretLeakReason([item.promote.title, item.promote.content].join("\n"));
+    if (secret)
+        return `split promotion blocked: ${secret}`;
     if (item.promote.content.length < policy.minPromoteChars) {
         return `split promotion too thin (${item.promote.content.length} < ${policy.minPromoteChars} chars)`;
     }
@@ -381,8 +399,34 @@ export function splitPromoteProposals(item, candidate, sessionId) {
         }),
     };
 }
+/**
+ * Valence stamp (P1 效价反馈): a keep-verdict item the assessor marked
+ * contradicted gets its negative-valence counter bumped — the entry stays
+ * live but sinks in injection ranking and the next assessment prefers
+ * archiving it. Promotes pass untouched (the human-approved global copy is
+ * the live truth); archives don't need the stamp (they already leave
+ * injection). Undefined when nothing applies.
+ */
+export function valenceStampProposal(item, candidate) {
+    if (item.verdict !== "keep" || !item.contradicted)
+        return undefined;
+    return {
+        summary: `wrapup: stamp contradicted valence on ${item.key} (${candidate.negativeCount + 1})`,
+        rationale: item.reason,
+        expectedOutcome: "The entry's negative-valence counter rises; injection downranks it and the next assessment prefers archiving it.",
+        edits: [
+            {
+                action: "update",
+                kind: candidate.kind,
+                id: candidate.id,
+                title: candidate.title,
+                content: candidate.content,
+                metadata: { ...candidate.metadata, [VALENCE_NEGATIVE_KEY]: candidate.negativeCount + 1 },
+            },
+        ],
+    };
+}
 export const WRAPUP_ASSESS_SYSTEM_PROMPT = `You are the /evolve session wrap-up assessor.
-
 A session is ending and its local harness entries need a fate. Classify each
 listed entry exactly once:
 
@@ -392,10 +436,16 @@ listed entry exactly once:
 - "archive" — the content is session-specific task progress, one-off noise,
   superseded or obsolete, or already covered by the global store (note
   "covered globally" in the reason), or stale (old + never injected — note
-  "stale (injectionCount=0, recency low)" in the reason).
+  "stale (injectionCount=0, recency low)" in the reason), or CONTRADICTED —
+  newer evidence in the trajectory or the global store disproves or overrides
+  the entry's content (note what contradicts it in the reason).
 - "keep" — still actively useful to this session, or genuinely uncertain.
 
 Rules:
+- CONTRADICTED: when evidence contradicts an entry, set "contradicted": true
+  on that item (besides the verdict). Entries marked "(contradicted N×
+  before)" were contradicted in earlier assessments — prefer "archive" for
+  them unless you have concrete evidence the content is valid again.
 - When an entry is marked "covered globally" in the listing, prefer "archive"
   or "keep" over "promote" — promoting a duplicate gains nothing.
 - When an entry is marked "stale" (injectionCount=0 and low recency), prefer
@@ -420,7 +470,7 @@ Return JSON only:
   "rationale": "one or two sentences",
   "items": [
     {"key": "memory:foo", "verdict": "promote|archive|keep", "reason": "why"},
-    {"key": "memory:bar", "verdict": "archive", "reason": "why",
+    {"key": "memory:bar", "verdict": "archive", "reason": "why", "contradicted": true,
      "promote": {"title": "cleaned stable title", "content": "cleaned durable part only"}}
   ]
 }
@@ -442,10 +492,11 @@ export async function assessLocalEntries(ctx, agent, candidates, options = {}) {
         const key = candidateKey(candidate.kind, candidate.id);
         const covered = candidate.coveredGlobally ? " (covered globally)" : "";
         const stale = candidate.stale ? ` (stale: injectionCount=${candidate.injectionCount}, recency low)` : "";
+        const negated = candidate.negativeCount > 0 ? ` (contradicted ${candidate.negativeCount}× before)` : "";
         const hints = candidate.globalHints.length > 0
             ? ` | global≈${candidate.globalHints.map((hint) => hint.id + ":" + hint.title).join(", ")}`
             : "";
-        return `- ${key} [${candidate.path}, v${candidate.version}] "${candidate.title}"${covered}${stale}${hints}: ${compactText(candidate.content, 220)}`;
+        return `- ${key} [${candidate.path}, v${candidate.version}] "${candidate.title}"${covered}${stale}${negated}${hints}: ${compactText(candidate.content, 220)}`;
     })
         .join("\n");
     const userPrompt = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-continual-evolve",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "Continual self-evolution plugin for DeepSeek Harness: versioned, auditable, rollback-safe harness state (prompt notes, memories, skills, subagent specs) refined from session trajectories.",
   "license": "MIT",
   "repository": {