dsh-continual-evolve 0.9.0 → 0.10.1

package/README.md

@@ -7,7 +7,7 @@
 [![CI](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml/badge.svg)](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-339933)](package.json)
-[![Tests](https://img.shields.io/badge/tests-1031%20passing-brightgreen)]()
+[![Tests](https://img.shields.io/badge/tests-1051%20passing-brightgreen)]()
 [![Coverage · statements](https://img.shields.io/badge/coverage_statements-98%25-brightgreen)]()
 [![Coverage · branches](https://img.shields.io/badge/coverage_branches-92%25-green)]()
 [![Coverage · functions](https://img.shields.io/badge/coverage_functions-99%25-brightgreen)]()
@@ -142,7 +142,7 @@ before aborting.
 
 ```bash
 pnpm install && pnpm build   # deps + tsc -> lib/
-pnpm test                    # vitest (1031 tests)
+pnpm test                    # vitest (1051 tests)
 pnpm test:coverage           # v8 coverage, thresholds enforced in CI
 pnpm coverage:gaps           # locate uncovered lines per file (read-only)
 pnpm lint                    # oxlint src test
@@ -152,7 +152,7 @@ Project layout:
 
 ```
 ├── src/                   # engine, tools, commands, memory agent, recall, projection, gate, fate, benchmark, injection + token usage…
-├── test/                  # vitest suites (50 files)
+├── test/                  # vitest suites (56 files)
 ├── lib/                   # build output (tsc)
 ├── docs/
 │   ├── design.md          # full design doc (hardening matrix)

package/README.zh.md

@@ -7,7 +7,7 @@
 [![CI](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml/badge.svg)](https://github.com/ZK-Andy/dsh-continual-evolve/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-339933)](package.json)
-[![Tests](https://img.shields.io/badge/tests-1031%20passing-brightgreen)]()
+[![Tests](https://img.shields.io/badge/tests-1051%20passing-brightgreen)]()
 [![Coverage · statements](https://img.shields.io/badge/coverage_statements-98%25-brightgreen)]()
 [![Coverage · branches](https://img.shields.io/badge/coverage_branches-92%25-green)]()
 [![Coverage · functions](https://img.shields.io/badge/coverage_functions-99%25-brightgreen)]()
@@ -126,7 +126,7 @@ profile patch 示例：
 
 ```bash
 pnpm install && pnpm build   # 依赖 + tsc -> lib/
-pnpm test                    # vitest（1031 例）
+pnpm test                    # vitest（1051 例）
 pnpm test:coverage           # v8 覆盖率，CI 强制阈值
 pnpm coverage:gaps           # 定位各文件未覆盖行（只读）
 pnpm lint                    # oxlint src test
@@ -136,7 +136,7 @@ pnpm lint                    # oxlint src test
 
 ```
 ├── src/                   # 引擎、工具、命令、memory Agent、召回、投影、门禁、fate、benchmark、注入 + token 用量…
-├── test/                  # vitest 测试套件（50 个文件）
+├── test/                  # vitest 测试套件（56 个文件）
 ├── lib/                   # 构建产物（tsc）
 ├── docs/
 │   ├── design.md          # 完整设计文档（硬化矩阵）

package/lib/approval.d.ts

@@ -36,6 +36,20 @@ export declare function questionServiceOf(ctx: Context): QuestionService | undef
  * Ask once for a persistent-scope edit. Only a unique, explicit approval
  * choice is accepted. A missing/ambiguous/unknown answer throws so callers
  * never interpret a lost or malformed dialog as a durable rejection.
+ *
+ * Copy follows the headline → details → impact shape: the first line names
+ * the target store, the middle carries the (truncated) edit summary, and the
+ * last line states visibility/reversibility. Option labels stay literal
+ * ("批准"/"拒绝") for parser compatibility; human guidance lives in
+ * `description`.
+ *
+ * @param ctx Cordis context carrying the userQuestions service.
+ * @param agent Agent prompting the question, if any.
+ * @param signal Abort signal for the question, if any.
+ * @param scope Target persistent scope.
+ * @param what Edit summary; truncated to 300 chars with "…" when longer.
+ * @returns "approved" when the user picks "批准", otherwise "declined".
+ * @throws When the service is missing or the answer is not unique/explicit.
  */
 export declare function requestScopeApproval(ctx: Context, agent: Agent | undefined, signal: AbortSignal | undefined, scope: "project" | "global", what: string): Promise<ScopeApprovalDecision>;
 /**

package/lib/approval.js

@@ -10,6 +10,20 @@ export function questionServiceOf(ctx) {
  * Ask once for a persistent-scope edit. Only a unique, explicit approval
  * choice is accepted. A missing/ambiguous/unknown answer throws so callers
  * never interpret a lost or malformed dialog as a durable rejection.
+ *
+ * Copy follows the headline → details → impact shape: the first line names
+ * the target store, the middle carries the (truncated) edit summary, and the
+ * last line states visibility/reversibility. Option labels stay literal
+ * ("批准"/"拒绝") for parser compatibility; human guidance lives in
+ * `description`.
+ *
+ * @param ctx Cordis context carrying the userQuestions service.
+ * @param agent Agent prompting the question, if any.
+ * @param signal Abort signal for the question, if any.
+ * @param scope Target persistent scope.
+ * @param what Edit summary; truncated to 300 chars with "…" when longer.
+ * @returns "approved" when the user picks "批准", otherwise "declined".
+ * @throws When the service is missing or the answer is not unique/explicit.
  */
 export async function requestScopeApproval(ctx, agent, signal, scope, what) {
     const userQuestions = questionServiceOf(ctx);
@@ -17,12 +31,20 @@ export async function requestScopeApproval(ctx, agent, signal, scope, what) {
         throw new Error("global evolution edits require the userQuestions service (load @deepseek-ai/dsh-user-questions)");
     }
     const storeLabel = scope === "project" ? "本项目跨会话 store" : "跨会话全局 store";
+    const compactWhat = what.length > 300 ? `${what.slice(0, 300)}…` : what;
+    const impact = scope === "project" ? "影响：仅本项目会话可见，可回滚。" : "影响：所有会话可见，可回滚。";
     const answer = await userQuestions.ask({
         questions: [
             {
                 id: "approve-global-evolve",
-                question: `批准写入${storeLabel}？\n\n${what}`,
-                options: [{ label: "批准" }, { label: "拒绝" }],
+                question: `写入${storeLabel}？\n${compactWhat}\n${impact}`,
+                options: [
+                    {
+                        label: "批准",
+                        description: scope === "project" ? "写入，仅本项目会话可见" : "写入，所有会话可见",
+                    },
+                    { label: "拒绝", description: "不写入，本次跳过" },
+                ],
             },
         ],
         ...(agent ? { agent } : {}),

package/lib/auto.js

@@ -34,6 +34,8 @@ import { isGateEnabled } from "./runtime.js";
 import { compareReviewCursors, createReviewScheduler } from "./review-scheduler.js";
 import { captureTurnSnapshot, sliceTurnSnapshot } from "./turn-snapshot.js";
 import { captureAutoCase } from "./autocase.js";
+import { loadDeclinedMemory, matchDeclinedCheckpoint } from "./declines.js";
+import { tokenize } from "./search.js";
 import { applyMemoryExtractionProposal, buildMemoryManifest, runMemoryAgent, } from "./memory-agent.js";
 import { asLlmSessionId } from "./llm-text.js";
 /** Turns a rejected skill candidate stays silent before being offered again. */
@@ -417,6 +419,23 @@ export async function runMemoryExtractionPhase(ctx, engine, agent, config, state
         });
         return;
     }
+    const declinedHit = matchDeclinedCheckpoint(loadDeclinedMemory(engine.baseDir), tokenize(memorySnapshot.trajectory));
+    if (declinedHit !== undefined) {
+        advanceMemoryCheckpoint(state, memorySnapshot.cursor);
+        ctx.logger("continual-evolve").info(`memory agent pre-suppressed (${snapshot.reason}) [${agent.id}]: checkpoint overlaps declined ${declinedHit.entry.scope}:${declinedHit.entry.fingerprint} (coverage ${(declinedHit.coverage * 100).toFixed(0)}%, ${declinedHit.hits} tokens) — agent not invoked`);
+        record({
+            sessionId,
+            reason: snapshot.reason,
+            turnsSinceLastReview,
+            outcome: "noop",
+            rationale: `memory pre-suppressed (${snapshot.reason}): checkpoint overlaps declined ${declinedHit.entry.scope}:${declinedHit.entry.fingerprint} — agent not invoked`,
+            durationMs: Date.now() - startedAt,
+            memoryTurns: 0,
+            memorySearches: 0,
+            appliedEdits: 0,
+        });
+        return;
+    }
     const projectKey = snapshot.projectKey ?? projectKeyOf(agent);
     const baselines = {
         local: engine.load("local", sessionId),
@@ -725,8 +744,11 @@ export async function consultSkillEdits(ctx, agent, skillEdits, gate) {
             questions: [
                 {
                     id: "evolve-skill-consult",
-                    question: `自进化检测到反复出现的流程/技能候选，建议沉淀：\n\n${description}\n\n是否固化？`,
-                    options: [{ label: "固化" }, { label: "不固化" }],
+                    question: `发现可复用的流程，建议固化为技能\n${description}\n\n固化后以后同类任务自动复用，可回滚。是否固化？`,
+                    options: [
+                        { label: "固化", description: "生成技能，以后复用" },
+                        { label: "不固化", description: "本次跳过，10 回合内不再打扰" },
+                    ],
                 },
             ],
             agent,

package/lib/command.js

@@ -58,7 +58,7 @@ const USAGE = `Usage:
 export function registerEvolveCommand(ctx, engine, opts, runtime) {
     ctx.commands.register({
         name: "evolve",
-        description: "inspect and evolve the continual harness state (memories, skills, prompt notes, subagent specs)",
+        description: "自进化：检查并演进 harness 状态（记忆/技能/提示词/子代理） | Inspect and evolve the continual harness state (memories, skills, prompt notes, subagent specs)",
         input: { hint: "[list [global] | history [global] | rollback <id> [global] | plan [msg]]" },
         handler: (invocation) => executeEvolveCommand(ctx, engine, invocation, opts, runtime),
     });

package/lib/declines.d.ts

@@ -0,0 +1,101 @@
+/** Cap on remembered declines; oldest-first pruning keeps the file small. */
+export declare const MAX_DECLINED_MEMORY_LEDGER = 50;
+/** Cap on stored content tokens per entry; enough for coverage, never prose. */
+export declare const MAX_DECLINED_ENTRY_TOKENS = 128;
+/** Minimum coverage of an entry's tokens by the checkpoint to pre-suppress. */
+export declare const DECLINED_PRECHECK_COVERAGE = 0.85;
+/** Minimum overlapping tokens; tiny entries must never match vacuously. */
+export declare const DECLINED_PRECHECK_MIN_TOKENS = 5;
+/** One declined project/global batch, keyed by its content fingerprint. */
+export interface DeclinedMemoryBatch {
+    /** Persistent scope that was declined. Local never asks, so never lands here. */
+    scope: "project" | "global";
+    /** sha256-16 over the normalized batch (same cut as evaluate.ts/project.ts). */
+    fingerprint: string;
+    /** First edit title (audit readability only, never matched on). */
+    title: string;
+    /** Deduplicated content tokens for checkpoint containment checks. */
+    tokens: string[];
+    /** ISO timestamp of the human rejection. */
+    declinedAt: string;
+}
+/** Minimal edit shape needed for fingerprinting (avoids importing the agent). */
+export interface FingerprintableEdit {
+    action: string;
+    id?: string;
+    title?: string;
+    content?: string;
+}
+/** Full path of the decline ledger file. */
+export declare function declinedMemoryPath(baseDir: string): string;
+/**
+ * Fingerprint one scope batch. Normalization is whitespace-only on purpose:
+ * case folding could conflate distinct facts (e.g. env var names), and a
+ * missed match only costs one more popup (fail-closed).
+ *
+ * @param scope - persistent scope the batch targets.
+ * @param edits - the scope batch in proposal order (order is significant).
+ * @returns 16-char hex fingerprint.
+ */
+export declare function fingerprintMemoryBatch(scope: "project" | "global", edits: readonly FingerprintableEdit[]): string;
+/**
+ * Load the decline ledger. Missing or malformed files read as empty so a
+ * broken ledger degrades to the status quo (ask anyway), never to a crash
+ * on the approval path.
+ *
+ * @param baseDir - engine base directory.
+ * @returns validated ledger entries (possibly empty).
+ */
+export declare function loadDeclinedMemory(baseDir: string): DeclinedMemoryBatch[];
+/**
+ * Whether this exact batch was declined before.
+ *
+ * @param entries - loaded ledger.
+ * @param scope - persistent scope of the pending batch.
+ * @param fingerprint - fingerprint of the pending batch.
+ */
+export declare function isDeclinedRepeat(entries: readonly DeclinedMemoryBatch[], scope: "project" | "global", fingerprint: string): boolean;
+/**
+ * Record one human decline, pruning oldest-first past the cap. The batch
+ * edits supply fingerprint material, match tokens, and the secret screen:
+ * a secret-shaped decline is still declined, but never lands in the ledger
+ * (it was never engine-screened, so it must not be persisted anywhere).
+ *
+ * @param baseDir - engine base directory.
+ * @param scope - persistent scope that was declined.
+ * @param edits - the declined scope batch in proposal order.
+ * @param title - first edit title, kept for audit readability.
+ * @returns the ledger file path, or undefined when skipped by the secret screen.
+ * @throws On filesystem write failure; callers on the approval path should
+ * contain it (suppression is an optimization, never load-bearing).
+ */
+export declare function recordDeclinedMemory(baseDir: string, scope: "project" | "global", edits: readonly FingerprintableEdit[], title: string): string | undefined;
+/**
+ * Deduplicated content tokens of one batch, capped. Shared CJK-aware
+ * tokenizer with the manifest ranking, so both sides of the containment
+ * check speak the same token language.
+ *
+ * @param edits - batch edits.
+ * @returns at most MAX_DECLINED_ENTRY_TOKENS distinct tokens.
+ */
+export declare function declinedContentTokens(edits: readonly FingerprintableEdit[]): string[];
+/** One checkpoint containment hit: which entry matched and how strongly. */
+export interface DeclinedCheckpointHit {
+    /** Ledger entry whose content the checkpoint re-covers. */
+    entry: DeclinedMemoryBatch;
+    /** Fraction of the entry's tokens present in the checkpoint. */
+    coverage: number;
+    /** Overlapping token count. */
+    hits: number;
+}
+/**
+ * Match a pending checkpoint against declined content (entry ⊆ checkpoint).
+ * Conservative by design: high coverage plus an absolute token floor, so
+ * tiny or vague declines can never suppress anything.
+ *
+ * @param entries - loaded ledger.
+ * @param checkpointTokens - tokens of the pending checkpoint trajectory.
+ * @returns the strongest hit, or undefined when nothing clears the floor.
+ */
+export declare function matchDeclinedCheckpoint(entries: readonly DeclinedMemoryBatch[], checkpointTokens: readonly string[]): DeclinedCheckpointHit | undefined;
+//# sourceMappingURL=declines.d.ts.map

package/lib/declines.js

@@ -0,0 +1,175 @@
+/**
+ * Cross-session ledger of declined memory proposals (the decline loop).
+ *
+ * In-memory `GateState.memoryDecisions` dies on restart and its decision
+ * cursor is per-checkpoint, so a declined project/global batch is re-asked
+ * in the next session. This file persists batch fingerprints plus content
+ * tokens under `<baseDir>/evolve/declined-memory.json`: exact batches are
+ * suppressed at approval time, and checkpoints overlapping declined content
+ * are suppressed before the agent is even invoked. Token matching is
+ * containment (entry ⊆ checkpoint) with a conservative floor; rephrasing
+ * below the floor still asks (documented limitation, not silent loss).
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { join } from "node:path";
+import { secretLeakReason } from "./promotion.js";
+import { tokenize } from "./search.js";
+import { EVOLVE_DIR } from "./store.js";
+/** Cap on remembered declines; oldest-first pruning keeps the file small. */
+export const MAX_DECLINED_MEMORY_LEDGER = 50;
+/** Cap on stored content tokens per entry; enough for coverage, never prose. */
+export const MAX_DECLINED_ENTRY_TOKENS = 128;
+/** Minimum coverage of an entry's tokens by the checkpoint to pre-suppress. */
+export const DECLINED_PRECHECK_COVERAGE = 0.85;
+/** Minimum overlapping tokens; tiny entries must never match vacuously. */
+export const DECLINED_PRECHECK_MIN_TOKENS = 5;
+const DECLINED_MEMORY_FILE = "declined-memory.json";
+/** Full path of the decline ledger file. */
+export function declinedMemoryPath(baseDir) {
+    return join(baseDir, EVOLVE_DIR, DECLINED_MEMORY_FILE);
+}
+/**
+ * Fingerprint one scope batch. Normalization is whitespace-only on purpose:
+ * case folding could conflate distinct facts (e.g. env var names), and a
+ * missed match only costs one more popup (fail-closed).
+ *
+ * @param scope - persistent scope the batch targets.
+ * @param edits - the scope batch in proposal order (order is significant).
+ * @returns 16-char hex fingerprint.
+ */
+export function fingerprintMemoryBatch(scope, edits) {
+    const parts = [scope];
+    for (const edit of edits) {
+        parts.push([edit.action, edit.id ?? "", edit.title ?? "", edit.content ?? ""].join("|"));
+    }
+    const material = parts.join("\n").replace(/\s+/g, " ").trim();
+    return createHash("sha256").update(material, "utf8").digest("hex").slice(0, 16);
+}
+/**
+ * Load the decline ledger. Missing or malformed files read as empty so a
+ * broken ledger degrades to the status quo (ask anyway), never to a crash
+ * on the approval path.
+ *
+ * @param baseDir - engine base directory.
+ * @returns validated ledger entries (possibly empty).
+ */
+export function loadDeclinedMemory(baseDir) {
+    const path = declinedMemoryPath(baseDir);
+    if (!existsSync(path))
+        return [];
+    try {
+        const raw = JSON.parse(readFileSync(path, "utf8"));
+        if (!Array.isArray(raw))
+            return [];
+        return raw
+            .filter((entry) => {
+            if (typeof entry !== "object" || entry === null)
+                return false;
+            const candidate = entry;
+            return ((candidate.scope === "project" || candidate.scope === "global") &&
+                typeof candidate.fingerprint === "string");
+        })
+            .map((entry) => ({
+            ...entry,
+            tokens: Array.isArray(entry.tokens) ? entry.tokens.filter((token) => typeof token === "string") : [],
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Whether this exact batch was declined before.
+ *
+ * @param entries - loaded ledger.
+ * @param scope - persistent scope of the pending batch.
+ * @param fingerprint - fingerprint of the pending batch.
+ */
+export function isDeclinedRepeat(entries, scope, fingerprint) {
+    return entries.some((entry) => entry.scope === scope && entry.fingerprint === fingerprint);
+}
+/**
+ * Record one human decline, pruning oldest-first past the cap. The batch
+ * edits supply fingerprint material, match tokens, and the secret screen:
+ * a secret-shaped decline is still declined, but never lands in the ledger
+ * (it was never engine-screened, so it must not be persisted anywhere).
+ *
+ * @param baseDir - engine base directory.
+ * @param scope - persistent scope that was declined.
+ * @param edits - the declined scope batch in proposal order.
+ * @param title - first edit title, kept for audit readability.
+ * @returns the ledger file path, or undefined when skipped by the secret screen.
+ * @throws On filesystem write failure; callers on the approval path should
+ * contain it (suppression is an optimization, never load-bearing).
+ */
+export function recordDeclinedMemory(baseDir, scope, edits, title) {
+    const screenable = edits.map((edit) => `${edit.title ?? ""}\n${edit.content ?? ""}`).join("\n");
+    if (secretLeakReason(screenable) !== undefined)
+        return undefined;
+    const entries = loadDeclinedMemory(baseDir);
+    entries.push({
+        scope,
+        fingerprint: fingerprintMemoryBatch(scope, edits),
+        title,
+        tokens: declinedContentTokens(edits),
+        declinedAt: new Date().toISOString(),
+    });
+    entries.sort((left, right) => (left.declinedAt < right.declinedAt ? -1 : 1));
+    while (entries.length > MAX_DECLINED_MEMORY_LEDGER)
+        entries.shift();
+    const path = declinedMemoryPath(baseDir);
+    mkdirSync(join(baseDir, EVOLVE_DIR), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(entries, null, 2)}\n`, "utf8");
+    return path;
+}
+/**
+ * Deduplicated content tokens of one batch, capped. Shared CJK-aware
+ * tokenizer with the manifest ranking, so both sides of the containment
+ * check speak the same token language.
+ *
+ * @param edits - batch edits.
+ * @returns at most MAX_DECLINED_ENTRY_TOKENS distinct tokens.
+ */
+export function declinedContentTokens(edits) {
+    const seen = new Set();
+    for (const edit of edits) {
+        for (const token of tokenize(`${edit.title ?? ""} ${edit.content ?? ""}`)) {
+            seen.add(token);
+            if (seen.size >= MAX_DECLINED_ENTRY_TOKENS)
+                return [...seen];
+        }
+    }
+    return [...seen];
+}
+/**
+ * Match a pending checkpoint against declined content (entry ⊆ checkpoint).
+ * Conservative by design: high coverage plus an absolute token floor, so
+ * tiny or vague declines can never suppress anything.
+ *
+ * @param entries - loaded ledger.
+ * @param checkpointTokens - tokens of the pending checkpoint trajectory.
+ * @returns the strongest hit, or undefined when nothing clears the floor.
+ */
+export function matchDeclinedCheckpoint(entries, checkpointTokens) {
+    const pending = new Set(checkpointTokens);
+    let best;
+    for (const entry of entries) {
+        if (entry.tokens.length === 0)
+            continue;
+        let hits = 0;
+        for (const token of entry.tokens) {
+            if (pending.has(token))
+                hits += 1;
+        }
+        if (hits < DECLINED_PRECHECK_MIN_TOKENS)
+            continue;
+        const coverage = hits / entry.tokens.length;
+        if (coverage < DECLINED_PRECHECK_COVERAGE)
+            continue;
+        if (best === undefined || coverage > best.coverage)
+            best = { entry, coverage, hits };
+    }
+    return best;
+}
+//# sourceMappingURL=declines.js.map

package/lib/fate.js

@@ -92,7 +92,10 @@ export async function consultLocalFates(ctx, agent, plan, gate) {
                 {
                     id: "evolve-fate-consult",
                     question: consultQuestion(plan),
-                    options: [{ label: "执行" }, { label: "不执行" }],
+                    options: [
+                        { label: "执行", description: "提升写全局，归档隐藏本地（均可恢复）" },
+                        { label: "不执行", description: "全部保留，10 回合内不再打扰" },
+                    ],
                 },
             ],
             agent,
@@ -112,7 +115,7 @@ function consultQuestion(plan) {
     const byKey = new Map(plan.candidates.map((candidate) => [candidateKey(candidate.kind, candidate.id), candidate]));
     const lines = [];
     if (plan.promotable.length > 0 || plan.splits.length > 0) {
-        lines.push("【提升到跨会话全局 store】");
+        lines.push("【提升到全局（写入全局 store）】");
         for (const item of plan.promotable) {
             lines.push(`- ${item.key}「${byKey.get(item.key)?.title ?? item.key}」 — ${item.reason}`);
         }
@@ -121,15 +124,15 @@ function consultQuestion(plan) {
         }
     }
     if (plan.reviewArchives.length > 0) {
-        lines.push("【归档（未被全局覆盖且源自真实对话，需确认）】");
+        lines.push("【归档（本地隐藏，可恢复）】");
         for (const item of plan.reviewArchives) {
             lines.push(`- ${item.key}「${byKey.get(item.key)?.title ?? item.key}」 — ${item.reason}`);
         }
     }
     return [
-        "自进化门禁检测到本会话的 local 条目需要归宿处理（提升条目将写入跨会话全局 store，归档条目隐藏但可恢复）：",
+        "自进化门禁：本会话 local 条目需要归宿处理",
         ...lines,
-        "是否执行？",
+        "提升写入后所有会话可见，归档隐藏但可恢复。是否执行？",
     ].join("\n");
 }
 /**

package/lib/memory-agent.d.ts

@@ -61,7 +61,7 @@ export interface MemoryApplicationResult {
 /** Provider-facing schemas for the closed memory-only tool set. */
 export declare const MEMORY_AGENT_TOOL_SCHEMAS: readonly ToolSchema[];
 /** Instructions for the dedicated loop; model text is always untrusted. */
-export declare const MEMORY_AGENT_SYSTEM_PROMPT = "You are the dedicated background memory extraction agent for a continual-evolution harness.\n\nYou receive only an incremental conversation checkpoint and a frozen manifest of existing memory entries. Your entire job is to decide whether this checkpoint contains a durable fact worth remembering. Never propose prompt notes, skills, subagent specs, code changes, or general conversation summaries.\n\nRules:\n- Use memory_search before creating when the manifest may already cover the topic. Update an existing entry instead of creating a near-duplicate.\n- Every memory entry contains exactly one fact. Classify it with metadata.memoryType = user | feedback | project | reference.\n- feedback and project memories must state the fact, Why it matters, and How to apply it next time.\n- Never invent a user preference. Ground every proposal in the supplied conversation evidence and existing memory.\n- Every edit must have kind=memory, an explicit targetScope, and a coherent blastRadius.\n- targetScope=local is session staging. project persists within the current repository. global persists across projects. project/global require human approval before application.\n- update/delete/archive must name an existing id from the same targetScope. Prefer archive over delete when the fact is obsolete but should remain restorable.\n- Do not remember: code structure or file paths re-readable from the repository; git history, diffs, commit hashes, or CI logs; content already written in project instruction files; temporary session state, one-off debugging trails, or current task progress; model-only speculation without conversation evidence.\n- Be specific enough to act on: prefer a fact that tells the next session what to DO over a summary of what happened. If the fact is obvious from the conversation itself with no future action attached, skip it.\n- Save only what is surprising or non-obvious: routine chatter, restated context, and facts with no bearing on future work are no-ops, not memories.\n- Granularity examples (vague \u2192 reject; sharp \u2192 save):\n  - \"user communicates in Chinese\" \u2192 \"user reads English with effort \u2014 write memory and handoff content in Chinese prose\".\n  - \"user works on the desktop project\" \u2192 \"desktop profile loads npm-installed plugin copies \u2014 source edits need a release before they take effect\".\n- You cannot read or write source files, call agents, use MCP, use the network, or mutate the harness directly. memory_propose is the only finish tool and never writes state itself.\n- If no durable memory is justified, call memory_propose with edits=[].\n- Always finish by calling memory_propose. Do not return unproposed prose.";
+export declare const MEMORY_AGENT_SYSTEM_PROMPT = "You are the dedicated background memory extraction agent for a continual-evolution harness.\n\nYou receive only an incremental conversation checkpoint and a frozen manifest of existing memory entries. Your entire job is to decide whether this checkpoint contains a durable fact worth remembering. Never propose prompt notes, skills, subagent specs, code changes, or general conversation summaries.\n\nRules:\n- Use memory_search before creating when the manifest may already cover the topic. Update an existing entry instead of creating a near-duplicate.\n- Every memory entry contains exactly one fact. Classify it with metadata.memoryType = user | feedback | project | reference.\n- feedback and project memories must state the fact, Why it matters, and How to apply it next time.\n- Never invent a user preference. Ground every proposal in the supplied conversation evidence and existing memory.\n- Every edit must have kind=memory, an explicit targetScope, and a coherent blastRadius.\n- targetScope=local is session staging. project persists within the current repository. global persists across projects. project/global require human approval before application.\n- update/delete/archive must name an existing id from the same targetScope. Prefer archive over delete when the fact is obsolete but should remain restorable.\n- Do not remember: code structure or file paths re-readable from the repository; git history, diffs, commit hashes, or CI logs; content already written in project instruction files; temporary session state, one-off debugging trails, or current task progress; model-only speculation without conversation evidence; an already-applied troubleshooting fix with no recurrence evidence (the fixed state on disk is its own record).\n- Be specific enough to act on: prefer a fact that tells the next session what to DO over a summary of what happened. If the fact is obvious from the conversation itself with no future action attached, skip it.\n- Save only what is surprising or non-obvious: routine chatter, restated context, and facts with no bearing on future work are no-ops, not memories.\n- Granularity examples (vague \u2192 reject; sharp \u2192 save):\n  - \"user communicates in Chinese\" \u2192 \"user reads English with effort \u2014 write memory and handoff content in Chinese prose\".\n  - \"user works on the desktop project\" \u2192 \"desktop profile loads npm-installed plugin copies \u2014 source edits need a release before they take effect\".\n  - \"fixed fcitx5 by setting GTK_IM_MODULE tonight\" \u2192 reject (one-off applied fix, already on disk, no recurrence evidence).\n- You cannot read or write source files, call agents, use MCP, use the network, or mutate the harness directly. memory_propose is the only finish tool and never writes state itself.\n- If no durable memory is justified, call memory_propose with edits=[].\n- Always finish by calling memory_propose. Do not return unproposed prose.";
 /** Build the frozen memory manifest from a merged harness view. */
 export declare function buildMemoryManifest(state: HarnessState): MemoryManifestEntry[];
 /** Render a bounded manifest index; full bodies remain available through memory_search. */

package/lib/memory-agent.js

@@ -1,5 +1,6 @@
 import { createAssistantMessage, createToolResultMessage, createUserMessage, } from "@deepseek-ai/dsh-llm";
 import { requestScopeApproval } from "./approval.js";
+import { fingerprintMemoryBatch, isDeclinedRepeat, loadDeclinedMemory, recordDeclinedMemory, } from "./declines.js";
 import { streamModelTurn } from "./llm-text.js";
 import { EVOLVE_MESSAGE_SOURCE } from "./message-source.js";
 import { extractJsonObject, parseJsonCandidate } from "./plan.js";
@@ -91,12 +92,13 @@ Rules:
 - Every edit must have kind=memory, an explicit targetScope, and a coherent blastRadius.
 - targetScope=local is session staging. project persists within the current repository. global persists across projects. project/global require human approval before application.
 - update/delete/archive must name an existing id from the same targetScope. Prefer archive over delete when the fact is obsolete but should remain restorable.
-- Do not remember: code structure or file paths re-readable from the repository; git history, diffs, commit hashes, or CI logs; content already written in project instruction files; temporary session state, one-off debugging trails, or current task progress; model-only speculation without conversation evidence.
+- Do not remember: code structure or file paths re-readable from the repository; git history, diffs, commit hashes, or CI logs; content already written in project instruction files; temporary session state, one-off debugging trails, or current task progress; model-only speculation without conversation evidence; an already-applied troubleshooting fix with no recurrence evidence (the fixed state on disk is its own record).
 - Be specific enough to act on: prefer a fact that tells the next session what to DO over a summary of what happened. If the fact is obvious from the conversation itself with no future action attached, skip it.
 - Save only what is surprising or non-obvious: routine chatter, restated context, and facts with no bearing on future work are no-ops, not memories.
 - Granularity examples (vague → reject; sharp → save):
   - "user communicates in Chinese" → "user reads English with effort — write memory and handoff content in Chinese prose".
   - "user works on the desktop project" → "desktop profile loads npm-installed plugin copies — source edits need a release before they take effect".
+  - "fixed fcitx5 by setting GTK_IM_MODULE tonight" → reject (one-off applied fix, already on disk, no recurrence evidence).
 - You cannot read or write source files, call agents, use MCP, use the network, or mutate the harness directly. memory_propose is the only finish tool and never writes state itself.
 - If no durable memory is justified, call memory_propose with edits=[].
 - Always finish by calling memory_propose. Do not return unproposed prose.`;
@@ -338,6 +340,13 @@ export async function applyMemoryExtractionProposal(ctx, engine, proposal, optio
         const baseline = options.baselines[scope];
         if (!baseline)
             throw new Error(`memory agent has no ${scope} baseline`);
+        const scopeEdits = proposal.edits.filter((edit) => edit.targetScope === scope);
+        const fingerprint = fingerprintMemoryBatch(scope, scopeEdits);
+        if (isDeclinedRepeat(loadDeclinedMemory(engine.baseDir), scope, fingerprint)) {
+            ctx.logger("continual-evolve").info(`memory ${scope} proposal repeat-suppressed (declined before, no popup)`);
+            declinedScopes.push(scope);
+            continue;
+        }
         const decisionKey = options.decisionCursor === undefined
             ? undefined
             : memoryScopeDecisionKey(options.decisionCursor, scope, proposal.edits.filter((edit) => edit.targetScope === scope));
@@ -355,8 +364,15 @@ export async function applyMemoryExtractionProposal(ctx, engine, proposal, optio
             options.onScopeDecision?.(decisionKey, approved);
         if (approved === "approved")
             approvedScopes.add(scope);
-        else
+        else {
             declinedScopes.push(scope);
+            try {
+                recordDeclinedMemory(engine.baseDir, scope, scopeEdits, compactText(scopeEdits[0]?.title ?? proposal.summary, 120));
+            }
+            catch (error) {
+                ctx.logger("continual-evolve").warn(`declined-memory ledger write failed: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
     }
     const results = [];
     const applied = [];

package/lib/wrapup-command.js

@@ -190,8 +190,11 @@ export async function executeWrapupCommand(ctx, engine, invocation, policy = DEF
                 questions: [
                     {
                         id: questionId,
-                        question: `wrapup：条目「${candidate.title}」未被全局覆盖且源自真实对话，直接归档会隐藏它（数据保留、可恢复）。确认归档？`,
-                        options: [{ label: "归档" }, { label: "保留" }],
+                        question: `wrapup 确认归档：条目「${candidate.title}」\n未被全局覆盖且源自真实对话。归档后不再注入，数据保留、可恢复。`,
+                        options: [
+                            { label: "归档", description: "隐藏但可恢复" },
+                            { label: "保留", description: "继续注入" },
+                        ],
                     },
                 ],
                 agent: invocation.agent,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-continual-evolve",
-  "version": "0.9.0",
+  "version": "0.10.1",
   "description": "Continual self-evolution plugin for DeepSeek Harness: versioned, auditable, rollback-safe harness state (prompt notes, memories, skills, subagent specs) refined from session trajectories.",
   "license": "MIT",
   "repository": {