dsh-engram 0.7.4 → 0.8.6

package/lib/web-provision.js

@@ -50,6 +50,9 @@ import { dirname, join } from "node:path";
 /** The engine package subpath a preset row mounts dsh-engram's engine under. */
 export const ENGRAM_ROW_NAME = "dsh-engram/compaction";
 
+/** The subpath the realm-side BoundaryPrune row mounts. */
+export const ENGRAM_PRUNE_ROW_NAME = "dsh-engram/prune";
+
 /** The stock row name the shipped presets mount inside the `compaction` group. */
 export const STOCK_ROW_NAME = "'@deepseek-ai/dsh-compaction-basic'";
 
@@ -59,6 +62,9 @@ const STOCK_NAME = "@deepseek-ai/dsh-compaction-basic";
 /** Row ids the provisioner looks for (list-item `- id:` values). */
 const STOCK_ROW_ID = "compaction-basic";
 const ENGRAM_ROW_ID = "engram-compaction";
+/** BoundaryPrune (L1) row: it must live in the SAME realm as the sessions it
+ *  prunes, otherwise its listener never sees a `todo/write` boundary. */
+const ENGRAM_PRUNE_ROW_ID = "engram-prune";
 const COMPACTION_GROUP_ID = "compaction";
 
 /** Engine config the plugin writes into each wired preset row (settings-driven). */
@@ -102,6 +108,12 @@ export function engramCompactionRowText(config = {}, indent = 4) {
   ].join("\n");
 }
 
+/** The realm-side BoundaryPrune row (no config: it reads the plugin defaults). */
+export function engramPruneRowText(indent = 4) {
+  const pad = " ".repeat(indent);
+  return [`${pad}- id: ${ENGRAM_PRUNE_ROW_ID}`, `${pad}  name: ${ENGRAM_PRUNE_ROW_NAME}`].join("\n");
+}
+
 /** The replacement row at default settings (back-compat export). */
 export const ENGRAM_COMPACTION_ROW = engramCompactionRowText(DEFAULT_ROW_CONFIG);
 
@@ -193,7 +205,7 @@ function locateRows(text) {
   const lines = text.split("\n");
   const groups = compactionGroupSpans(lines);
   // Two compaction groups in one composition: refuse to guess which one runs.
-  if (groups.length > 1) return { lines, stock: [], engram: [], ambiguous: true };
+  if (groups.length > 1) return { lines, stock: [], engram: [], prune: [], ambiguous: true };
   const span = groups[0] ?? { start: 0, end: lines.length, fallback: true };
   const valid = (rowId, name) => {
     const hits = [];
@@ -210,6 +222,7 @@ function locateRows(text) {
     lines,
     stock: valid(STOCK_ROW_ID, STOCK_NAME),
     engram: valid(ENGRAM_ROW_ID, ENGRAM_ROW_NAME),
+    prune: valid(ENGRAM_PRUNE_ROW_ID, ENGRAM_PRUNE_ROW_NAME),
     ambiguous: false,
   };
 }
@@ -244,6 +257,7 @@ function invariantsOk(text) {
     !text.includes(STOCK_NAME) &&
     text.includes("command-compact") &&
     text.includes("tool-result-pruner") &&
+    text.includes(ENGRAM_PRUNE_ROW_NAME) &&
     text.includes("cordis:group") &&
     text.includes("isolate:")
   );
@@ -260,29 +274,50 @@ function invariantsOk(text) {
  * @returns {string | null}
  */
 export function swapCompactionRow(text, rowConfig = {}) {
-  const { lines, stock, engram, ambiguous } = locateRows(text);
+  const { lines, stock, engram, prune, ambiguous } = locateRows(text);
   if (ambiguous) return null;
   if (engram.length > 0) {
     if (engram.length > 1 || stock.length > 0) return null;
     const index = engram[0];
     const end = blockEnd(lines, index);
-    const rowText = engramCompactionRowText(rowConfig, indentOf(lines[index]));
-    if (lines.slice(index, end).join("\n") === rowText) return text; // already this config
-    const next = replaceBlock(lines, index, end, rowText);
+    const indent = indentOf(lines[index]);
+    const rowText = engramCompactionRowText(rowConfig, indent);
+    let next = lines.slice(index, end).join("\n") === rowText ? text : replaceBlock(lines, index, end, rowText);
+    // An older wiring has the engine row but no prune row: add it in the same
+    // realm so L1 can finally see a boundary.
+    next = ensurePruneRow(next, indent);
     return invariantsOk(next) ? next : null;
   }
   if (stock.length !== 1) return null;
   const index = stock[0];
   const end = blockEnd(lines, index);
-  const next = replaceBlock(
-    lines,
-    index,
-    end,
-    engramCompactionRowText(rowConfig, indentOf(lines[index])),
+  const indent = indentOf(lines[index]);
+  const next = ensurePruneRow(
+    replaceBlock(lines, index, end, engramCompactionRowText(rowConfig, indent)),
+    indent,
   );
   return invariantsOk(next) ? next : null;
 }
 
+/**
+ * Insert the BoundaryPrune row directly after the engine row when the
+ * composition does not already carry one. Idempotent.
+ * @param {string} text
+ * @param {number} indent - indentation of the row being inserted next to.
+ * @returns {string}
+ */
+export function ensurePruneRow(text, indent = 4) {
+  const { lines, engram, prune } = locateRows(text);
+  if (prune !== undefined && prune.length > 0) return text;
+  if (engram === undefined || engram.length !== 1) return text;
+  const end = blockEnd(lines, engram[0]);
+  return [
+    ...lines.slice(0, end),
+    ...engramPruneRowText(indent).split("\n"),
+    ...lines.slice(end),
+  ].join("\n");
+}
+
 /**
  * Reverse {@link swapCompactionRow}: restore the stock `compaction-basic` row
  * from a wired composition (any engram row block — engine config included).
@@ -291,11 +326,21 @@ export function swapCompactionRow(text, rowConfig = {}) {
  * @returns {string | null}
  */
 export function restoreCompactionRow(text) {
-  const { lines, engram, ambiguous } = locateRows(text);
+  const { lines, engram, prune, ambiguous } = locateRows(text);
   if (ambiguous || engram.length !== 1) return null;
-  const index = engram[0];
-  const end = blockEnd(lines, index);
-  const next = replaceBlock(lines, index, end, stockCompactionRowText(indentOf(lines[index])));
+  // Remove the realm prune row first (it is not stock), then restore the engine row.
+  let working = text;
+  if (prune !== undefined && prune.length === 1) {
+    const pIndex = prune[0];
+    // Splice the row out entirely — leaving a blank line behind would break the
+    // byte-identical round trip back to the stock text.
+    working = [...lines.slice(0, pIndex), ...lines.slice(blockEnd(lines, pIndex))].join("\n");
+  }
+  const after = locateRows(working);
+  if (after.engram.length !== 1) return null;
+  const index = after.engram[0];
+  const end = blockEnd(after.lines, index);
+  const next = replaceBlock(after.lines, index, end, stockCompactionRowText(indentOf(after.lines[index])));
   return compactionWireStatus(next) === "stock" ? next : null;
 }
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-engram",
   "description": "Minimalist long-term memory for DeepSeek Harness, distilling symbolic-index + pi-esr ideas: zero-LLM auto-capture, a symbolic [ENGRAM] index with progressive disclosure, and an ESR-lite evidence-closure protocol (esr_task / esr_node / esr_close / esr_link). Real agent-behaviour telemetry (usage rollup + /stats) and a deterministic offline recall benchmark (npm run eval). Hot path is model-free; storage on ctx.storageDomain; web memory viewer, observability panel and config card through DSH's native settings slots.",
-  "version": "0.7.4",
+  "version": "0.8.6",
   "packageManager": "pnpm@11.22.0",
   "license": "MIT",
   "repository": {
@@ -20,6 +20,7 @@
   "exports": {
     ".": "./lib/index.js",
     "./compaction": "./lib/compaction.js",
+    "./prune": "./lib/prune.js",
     "./client": "./lib/client.js",
     "./package.json": "./package.json",
     "./cordis.patch.yml": "./cordis.patch.yml"
@@ -28,6 +29,7 @@
     "lib",
     "scripts",
     "docs",
+    "eval/gate-audit.mjs",
     "cordis.patch.yml",
     "README.md",
     "README.zh.md",
@@ -38,19 +40,24 @@
     "dsh": ">=0.1.2-alpha.2 <0.3.0-0"
   },
   "scripts": {
-    "setup": "node scripts/setup-links.mjs",
-    "prepublishOnly": "node scripts/prepublish-check.mjs",
+    "bench:ledger": "node eval/ledger-bench.mjs",
     "build:client": "node client/build.mjs && node client/build-model.mjs",
-    "test": "node --test \"test/**/*.test.mjs\"",
+    "dsh-engram": "node scripts/dsh-engram.mjs",
+    "dsh-engram:doctor": "node scripts/dsh-engram.mjs doctor",
     "eval": "node eval/recall-bench.mjs",
+    "gate:audit": "node eval/gate-audit.mjs",
+    "playbook:audit": "node eval/playbook-audit.mjs",
+    "prepublishOnly": "node scripts/prepublish-check.mjs",
+    "quality:ab": "node eval/quality-ab.mjs",
+    "release-notes": "node scripts/gen-release-notes.mjs",
+    "setup": "node scripts/setup-links.mjs",
+    "skill:check": "node eval/skill-export-check.mjs",
+    "test": "node --test \"test/**/*.test.mjs\"",
     "typecheck": "node client/typecheck.mjs",
     "web-compaction": "node scripts/dsh-engram.mjs",
-    "web-compaction:status": "node scripts/dsh-engram.mjs status",
     "web-compaction:enable": "node scripts/dsh-engram.mjs enable",
     "web-compaction:revert": "node scripts/dsh-engram.mjs revert",
-    "dsh-engram": "node scripts/dsh-engram.mjs",
-    "dsh-engram:doctor": "node scripts/dsh-engram.mjs doctor",
-    "release-notes": "node scripts/gen-release-notes.mjs"
+    "web-compaction:status": "node scripts/dsh-engram.mjs status"
   },
   "publishConfig": {
     "access": "public"

package/scripts/dsh-engram.mjs

@@ -7,6 +7,9 @@
  *   npx dsh-engram enable    # re-run the boot-time web auto-wiring (usually a no-op)
  *   npx dsh-engram revert    # restore the stock compaction rows everywhere —
  *                            #   run BEFORE uninstalling dsh-engram
+ *   npx dsh-engram skill export [--workspace <dir>] [--dir <skills>] [--dry-run]
+ *                            # export evidence-backed procedures as DSH Skills
+ *                            #   (default: <workspace>/.dsh/skills)
  *
  * `status`/`doctor` read the durable snapshot the plugin writes at boot
  * (`$DSH_HOME/engram/context-gc.status.json`) and cross-check the live preset
@@ -28,7 +31,13 @@ import {
   provisionWebCompaction,
   revertWebCompaction,
 } from "../lib/web-provision.js";
-import { contextGcStatusPath, readContextGcStatus } from "../lib/status.js";
+import { contextGcStatusPath, readContextGcStatus, readPruneAttempts } from "../lib/status.js";
+import { readLedger } from "../lib/ledger.js";
+import { defaultSkillDir, exportSkills, skillDescription, skillName, planSkillExport } from "../lib/skill-export.js";
+import { approvedIds, isApproved, loadApprovals, recordApproval, revokeApproval } from "../lib/approvals.js";
+import { isProvenProcedure, invalidatedProcedure } from "../lib/status-insights.js";
+import { workspaceKey } from "../lib/util.js";
+import { ENGRAM_PRUNE_ROW_NAME } from "../lib/web-provision.js";
 
 const REPO_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 
@@ -193,6 +202,40 @@ async function printStatus(presetsDirFlag) {
   const presets = await discoverPresets(status, presetsDirFlag);
 
   log("── dsh-engram Context GC 状态 ──────────────────────────────");
+  // The two ledger legs decide whether L1 is worth turning on at all: if the
+  // host prunes far more than engram does, enabling it only repeats that work.
+  // Printed regardless of the status snapshot (it is ledger data, not plugin
+  // startup state).
+  try {
+    // Honour DSH_HOME like every other read in this CLI: without it the legs
+    // line silently reports the real machine's ledger even under a sandbox.
+    const ledger = readLedger({ home: join(process.env.DSH_HOME ?? join(homedir(), ".dsh"), "engram") });
+    const rows = ledger.sessions ?? [];
+    if (rows.length > 0) {
+      const engram = rows.reduce((sum, row) => sum + (row.prunedChars ?? 0), 0);
+      const host = ledger.hostPrunedChars ?? 0;
+      const verdict =
+        host > 0 && engram === 0
+          ? "（宿主全干了，engram 一条没剪 → L1 开着只是重复劳动）"
+          : host > engram * 5
+            ? "（宿主腿远大于 engram 腿 → 先确认边界源有没有覆盖到你的用法）"
+            : "";
+      log(`  账本两条腿：engram 剪枝 ${engram} 字符 · 宿主自剪 ${host} 字符${verdict}`);
+      log("");
+      const insights = await readPlaybookInsights();
+      if (insights !== null) {
+        log(`  playbook（当前 workspace）：${insights.total} 条 procedure · 过门 ${insights.promoted} · 未过门 ${insights.unproven} · 失效 ${insights.invalidated}`);
+        if (insights.capsules > 0) {
+          log(`  subagent 胶囊：${insights.capsules} 条 · ${insights.capsuleSource} → ${insights.capsuleChars} 字符（只做留档，父代理仍收到全文）`);
+        }
+        if (insights.promoted > 0) {
+          log("  可导出为 DSH Skill：npx dsh-engram skill export（写入 <workspace>/.dsh/skills）");
+        }
+        log("");
+      }
+    }
+  } catch {}
+
   if (status === undefined) {
     log("  尚无状态文件（插件还没写过，或本机没跑过 dsh web）。");
   } else {
@@ -204,9 +247,28 @@ async function printStatus(presetsDirFlag) {
       const bp = status.boundaryPrune;
       log(`  L1 边界剪枝：${bp.armed ? "已武装" : "未启用"}${bp.reason ? `（${bp.reason}）` : ""}`);
       if (!bp.armed) {
-        log("  ⚠ L1 未武装时「节省 · 剪枝/压缩」不会入账（账本净 token 只会是负值）；0.2.0 web profile 需要 bundle patch 重新启用 host 平面的 tool-result-pruner 行。");
+        const reason = String(bp.reason ?? "");
+        if (/boundaryPrune:false|config/i.test(reason)) {
+          // Default off since v0.7.11 — not a misconfiguration.
+          log("  说明：L1 自 0.7.11 起默认关闭（宿主会自己剪超阈值结果，边界源只在用 todo/goal 的规划型会话里有收益）。");
+          log("  需要时在设置卡或 profile 里设 boundaryPrune: true；打开前先看上面那行「账本两条腿」。");
+        } else {
+          log("  ⚠ L1 未武装（服务缺失/装配问题）：此时账本只有注入支出，没有剪枝入账。");
+        }
       }
     }
+    const attempts = await readPruneAttempts(20).catch(() => []);
+    if (attempts.length === 0) {
+      log("  L1 边界尝试：0 次（还没有任何 todo/goal 边界出现过——注意「已武装」不等于「会开火」）");
+    } else {
+      const byPlane = new Map();
+      const fired = attempts.filter((a) => a.kind === "fired" && a.pruned > 0);
+      for (const a of attempts) byPlane.set(a.plane ?? "?", (byPlane.get(a.plane ?? "?") ?? 0) + 1);
+      const planeLine = [...byPlane].map(([plane, n]) => `${plane} ${n}`).join(" · ");
+      const last = attempts[attempts.length - 1];
+      log(`  L1 边界尝试：${attempts.length} 次见过的边界（${planeLine}）· 真剪到东西的 ${fired.length} 次`);
+      log(`    最近一次：${last.at ?? "?"} · ${last.kind}${last.boundary?.kind ? ` · ${last.boundary.kind}` : ""}${last.pruned !== undefined ? ` · 剪了 ${last.pruned} 条 / ${last.charsRemoved ?? 0} 字符` : ""}`);
+    }
     if (status.configSource?.autoWebCompaction === false) {
       log("  ⚠ autoWebCompaction=false：web 平面不会自动接管（设置卡「记忆 GC」里打开后重启 dsh web）");
     }
@@ -233,8 +295,9 @@ async function printStatus(presetsDirFlag) {
         continue;
       }
       const cs = compactionWireStatus(text);
+      const hasPrune = text.includes(ENGRAM_PRUNE_ROW_NAME);
       const note = cs === "wired"
-        ? "已接管（dsh-engram/compaction 行）"
+        ? `已接管（dsh-engram/compaction 行${hasPrune ? " + dsh-engram/prune 行" : " · 缺 prune 行：L1 在这个预设里看不见边界，重跑 enable 补齐"}）`
         : cs === "stock"
           ? "出厂布局，重启 dsh web 后自动接管"
           : "自定义/无 compaction，插件不碰";
@@ -267,6 +330,20 @@ async function printDoctor(presetsDirFlag) {
     }
   }
 
+  // v0.8-D: an approval prompt nobody sees is a gate that silently blocks. The
+  // doctor line is where a user finds out there is something to approve.
+  try {
+    const home = process.env.DSH_HOME ?? join(homedir(), ".dsh");
+    const { key, rows } = await loadExportable(process.cwd(), home);
+    const approved = new Set(approvedIds(loadApprovals(home), key));
+    const pending = exportSkills(rows, { config: SKILL_GATE, dir: defaultSkillDir(key), dryRun: true, approved, requireApproval: true }).pending;
+    if (pending.length > 0) {
+      notes.push(`有 ${pending.length} 条过门的 auto procedure 等批准才能导出成 skill：npx dsh-engram skill pending`);
+    }
+  } catch {
+    // no store yet — nothing to approve
+  }
+
   const stockLeft = presets.filter((p) => {
     try {
       return compactionWireStatus(readFileSyncSafe(p.path)) === "stock";
@@ -387,6 +464,127 @@ async function runEnableRevert(command, fileFlag, presetsDirFlag) {
   if (command === "revert" && changed > 0) log("  已全部还原为出厂 compaction 行——可以安全卸载 dsh-engram。");
 }
 
+/** Evidence gate defaults; mirrors lib/index.js (kept here so the CLI stays DSH-free). */
+const SKILL_GATE = { procedureMinEvidence: 3, procedureMaxAgeDays: 14, promoteHits: 3 };
+
+/** Rows the exporter would consider (proof gate passed, auto-captured). */
+async function loadExportable(workspace, home) {
+  const storage = join(home, "storages", "dsh_engram.json");
+  if (!(await exists(storage))) throw new Error(`找不到记忆库：${storage}（DSH 还没在这个机器上写过记忆？）`);
+  const unit = JSON.parse(await readFile(storage, "utf8"));
+  const table = unit?.tables?.memories ?? unit?.memories ?? {};
+  const all = Array.isArray(table) ? table : Object.values(table);
+  const key = workspaceKey(workspace);
+  return { key, rows: all.filter((m) => m?.workspace === key) };
+}
+
+async function runSkillApprove({ workspace, home, id, note, revoke }) {
+  const { key, rows } = await loadExportable(workspace, home);
+  const row = rows.find((m) => m?.id === id || String(m?.id ?? "").startsWith(id));
+  if (row === undefined) throw new Error(`workspace ${key} 里没有 id 以 "${id}" 开头的记忆`);
+  if (revoke) {
+    revokeApproval(home, key, row.id);
+    log(`已撤销批准：${row.id}（${skillName(row)}）——下次 export 会删掉它的 SKILL.md`);
+    return;
+  }
+  const state = recordApproval(home, key, row.id, { note: note ?? null });
+  const plan = planSkillExport(rows, { config: SKILL_GATE, dir: defaultSkillDir(key), approved: new Set(approvedIds(state, key)), requireApproval: true });
+  log(`已批准：${row.id} → ${skillName(row)}${note ? `（${note}）` : ""}`);
+  log(`  证据：${row.evidenceCount ?? 0} 次验证 · 最近 ${row.lastVerifiedAt ? new Date(row.lastVerifiedAt).toISOString().slice(0, 10) : "未知"}`);
+  log(plan.length > 0 ? "  现在可以运行：npx dsh-engram skill export" : "  但它还没通过证据门（≥3 次验证 / 14 天内 / 未失效），批准不替代证据。");
+}
+
+async function runSkillPending({ workspace, home }) {
+  const { key, rows } = await loadExportable(workspace, home);
+  const state = loadApprovals(home);
+  const approved = new Set(approvedIds(state, key));
+  const report = exportSkills(rows, { config: SKILL_GATE, dir: defaultSkillDir(key), dryRun: true, approved, requireApproval: true });
+  const ready = planSkillExport(rows, { config: SKILL_GATE, dir: defaultSkillDir(key), approved, requireApproval: true });
+  log(`skill pending · workspace ${key}`);
+  if (ready.length > 0) {
+    log(`  已批准待导出 ${ready.length}:`);
+    for (const skill of ready) log(`    ${skill.name}  (${skill.memoryId})`);
+  }
+  if (report.pending.length > 0) {
+    log(`  等批准 ${report.pending.length}（批准后才写文件）：`);
+    for (const item of report.pending) log(`    ${item.name}  ${item.id.slice(0, 8)}  ${item.description}`);
+    log("  批准：npx dsh-engram skill approve <id> [--note \"…\"]");
+  }
+  if (ready.length === 0 && report.pending.length === 0) log("  没有过门的 auto procedure —— 无事可批。");
+}
+
+async function runSkillExport({ workspace, dir, home, dryRun, force }) {
+  const storage = join(home, "storages", "dsh_engram.json");
+  if (!(await exists(storage))) throw new Error(`找不到记忆库：${storage}（DSH 还没在这个机器上写过记忆？）`);
+  const unit = JSON.parse(await readFile(storage, "utf8"));
+  const table = unit?.tables?.memories ?? unit?.memories ?? {};
+  const all = Array.isArray(table) ? table : Object.values(table);
+  const key = workspaceKey(workspace);
+  const rows = all.filter((m) => m?.workspace === key);
+  const target = dir ?? defaultSkillDir(key);
+  // v0.8-D: evidence gets a procedure into the index; a human yes gets it into
+  // a file the host advertises. `--force` is the audited escape hatch.
+  const approved = new Set(approvedIds(loadApprovals(home), key));
+  const requireApproval = !force;
+  const report = exportSkills(rows, { config: SKILL_GATE, dir: target, dryRun, approved, requireApproval });
+  log(`skill export · workspace ${key} · ${rows.length} 条记忆 · 目标 ${target}${dryRun ? "（dry-run）" : ""}${force ? " · --force（跳过批准门）" : ""}`);
+  if (report.written.length > 0) log(`  写入 ${report.written.length}: ${report.written.join(", ")}`);
+  if (report.unchanged.length > 0) log(`  未变 ${report.unchanged.length}: ${report.unchanged.join(", ")}`);
+  if (report.removed.length > 0) log(`  移除（证据不再成立）${report.removed.length}: ${report.removed.join(", ")}`);
+  for (const skip of report.skipped) log(`  跳过 ${skip}`);
+  if (report.pending.length > 0) {
+    log(`  等批准 ${report.pending.length}（证据已够，但写文件需要你点头）：`);
+    for (const item of report.pending) log(`    ${item.name}  ${item.id.slice(0, 8)}`);
+    log("  批准：npx dsh-engram skill approve <id>；或本次强制：--force");
+  }
+  for (const error of report.errors) log(`  失败 ${error}`);
+  if (report.written.length + report.unchanged.length + report.removed.length === 0 && report.skipped.length === 0 && report.pending.length === 0) {
+    log("  没有 procedure 通过证据门（≥3 次验证、14 天内、未失效）——无导出。");
+  }
+  log("  下一步：DSH 从项目根的 .dsh/skills 发现技能，catalog 里出现名字即生效（新会话无需重启）。");
+}
+
+/** Playbook + capsule counters for `status` (best effort; missing store → null). */
+async function readPlaybookInsights(workspaceArg) {
+  try {
+    const home = process.env.DSH_HOME ?? join(homedir(), ".dsh");
+    const storage = join(home, "storages", "dsh_engram.json");
+    if (!(await exists(storage))) return null;
+    const unit = JSON.parse(await readFile(storage, "utf8"));
+    const table = unit?.tables?.memories ?? unit?.memories ?? {};
+    const all = Array.isArray(table) ? table : Object.values(table);
+    const key = workspaceKey(workspaceArg ?? process.cwd());
+    const rows = all.filter((m) => m?.workspace === key);
+    const config = { ...SKILL_GATE };
+    const procedures = rows.filter((m) => m?.kind === "procedure" && m.status !== "archived");
+    const capsules = rows.filter((m) => (m.tags ?? []).includes("subagent-capsule"));
+    const size = (m) => {
+      const match = /胶囊：.*? (\d+) → (\d+) 字符/.exec(String(m.text ?? ""));
+      return match === null ? null : [Number(match[1]), Number(match[2])];
+    };
+    let capsuleSource = 0;
+    let capsuleChars = 0;
+    for (const capsule of capsules) {
+      const parsed = size(capsule);
+      if (parsed !== null) {
+        capsuleSource += parsed[0];
+        capsuleChars += parsed[1];
+      }
+    }
+    return {
+      total: procedures.length,
+      promoted: procedures.filter((m) => isProvenProcedure(m, config)).length,
+      unproven: procedures.filter((m) => !isProvenProcedure(m, config) && !invalidatedProcedure(m)).length,
+      invalidated: procedures.filter((m) => invalidatedProcedure(m)).length,
+      capsules: capsules.length,
+      capsuleSource,
+      capsuleChars,
+    };
+  } catch {
+    return null;
+  }
+}
+
 async function main() {
   const [, , rawCommand, ...rest] = process.argv;
   const command = rawCommand ?? "status";
@@ -394,7 +592,34 @@ async function main() {
   const fileFlag = fileFlagIndex >= 0 ? rest[fileFlagIndex + 1] : undefined;
   const presetsDirIndex = rest.indexOf("--presets-dir");
   const presetsDirFlag = presetsDirIndex >= 0 ? rest[presetsDirIndex + 1] : undefined;
-  if (command === "status") {
+  if (command === "skill") {
+    const sub = rest[0];
+    if (!["export", "approve", "revoke", "pending"].includes(sub ?? "")) {
+      throw new Error(`未知子命令 "skill ${sub ?? ""}"（用 skill export|pending|approve|revoke）`);
+    }
+    const flag = (name) => {
+      const at = rest.indexOf(name);
+      return at >= 0 ? rest[at + 1] : undefined;
+    };
+    const shared = {
+      workspace: flag("--workspace") ?? process.cwd(),
+      home: flag("--home") ?? process.env.DSH_HOME ?? join(homedir(), ".dsh"),
+    };
+    if (sub === "export") {
+      await runSkillExport({
+        ...shared,
+        dir: flag("--dir"),
+        dryRun: rest.includes("--dry-run"),
+        force: rest.includes("--force"),
+      });
+    } else if (sub === "pending") {
+      await runSkillPending(shared);
+    } else {
+      const id = rest[1];
+      if (id === undefined || id.startsWith("--")) throw new Error(`skill ${sub} 需要一个记忆 id`);
+      await runSkillApprove({ ...shared, id, note: flag("--note"), revoke: sub === "revoke" });
+    }
+  } else if (command === "status") {
     await printStatus(presetsDirFlag);
   } else if (command === "doctor") {
     await printDoctor(presetsDirFlag);