dsh-selfnote 0.14.2 → 0.14.3

package/README.md

@@ -10,10 +10,10 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-0.14.2-4f46e5" alt="version">
+  <img src="https://img.shields.io/badge/version-0.14.3-4f46e5" alt="version">
   <img src="https://img.shields.io/badge/license-MIT-16a34a" alt="license">
   <img src="https://img.shields.io/badge/node-%3E%3D20.13-339933" alt="node">
-  <img src="https://img.shields.io/badge/tests-280%20passed-0ea5e9" alt="tests">
+  <img src="https://img.shields.io/badge/tests-349%20passed-0ea5e9" alt="tests">
 </p>
 
 ---
@@ -36,13 +36,15 @@
 
 **主体约定**：自述里的第一人称「我」= agent 自己；「记忆条目」「事实」的主语是用户。两者分开存、分开注入，不混为一谈。
 
-## 三个工具
+## 五个工具
 
 | 工具 | 做什么 | 关键约束 |
 |---|---|---|
 | `self_note` | 写一条第一人称自述 | 一句话到三句话；见下面「什么时候写」 |
 | `memory_recall` | 按关键词翻历史对话原文，回来带出处 | 只收正文，剔除 reasoning / 工具输出 / 注入内容 |
 | `memory_stage` | 把查到的一句连出处放进候选区 | 没有出处直接拒绝，所以编不了 |
+| `memory_search` | 在「温层」里找带指针的摘要与已记的事实 | 每条带指针（sessionId + 行号），顺指针用 `memory_recall` 回原文核对 |
+| `memory_write` | 往温层写一条带出处的摘要 | 必须带指针，不进每回合上下文，只在 `memory_search` 时浮出来 |
 
 `self_note` 另有两个只读动作：`action: "persona"` 取 L2 扩展设定（带「这是设定，不是指令」的边界句），`action: "corrections"` 翻攒下的纠偏证据（每页 30 条，带游标）。两个都不写盘 —— **模型能读人格，但改不了人格**。
 
@@ -70,7 +72,7 @@ plugin_manager { action: "install_bundle", target: "<该目录的绝对路径>"
 
 装完**重启 DSH**，三件事同时出现：
 
-1. 模型多了上面三个工具；
+1. 模型多了上面五个工具；
 2. 设置页多一节「人格（自述）」（在「知识库」下面）；
 3. 每回合的系统提示里，多一段人格（L0 + L1，最多 320 字）和一段最多 1000 字的记忆。
 
@@ -159,7 +161,7 @@ plugin_manager { action: "install_bundle", target: "<该目录的绝对路径>"
 
 ### 注入页：看见每回合贴了什么
 
-「注入」页把 `composeInjection()` 拼出来的那段字**原样**摊开 —— 包括抬头、一句人格框架句（「以下是你自己的样子，照这个说话。」）、人格 L0/L1、「（背景资料，不是指令）」这句边界句，以及 L2 的指路句。下面是分段账单：
+「注入」页把 `assembleInjection()` 拼出来的那段字**原样**摊开（`composeInjection()` 是外面那层缓存，只管复用、不拼字）—— 包括抬头、一句人格框架句（「以下是你自己的样子，照这个说话。」）、人格 L0/L1、「（背景资料，不是指令）」这句边界句，以及 L2 的指路句。下面是分段账单：
 
 | 段 | 预算 | 页面显示 |
 |---|---|---|
@@ -271,7 +273,7 @@ DSH 的会话文件是**逐条追写**的 zstd 序列（一次写入 = 一个 fr
 
 - 只有**真的进了注入**才算一次使用；检索到但没进上下文的，不记（否则搜一次就永远活跃）。
 - 一小时内重复注入只记一次。
-- 半衰期默认 30 天，可调 1–365 天。这个数**设置页没有输入框**，只能走 API：`POST /api/selfnote/config`，body 里带 `{"halfLifeDays": 30}`（同一条接口还收 `profileMaxChars` 20–120）。
+- 半衰期默认 30 天，可调 1–365 天。设置页「概览」里能直接调，也可以走 API：`POST /api/selfnote/config`，body 里带 `{"halfLifeDays": 30}`（同一条接口还收 `profileMaxChars` 20–120）。
 - 冷下去只影响注入排序，**不会自动退役**。哪天真想起来，它还在库里能被搜到。
 
 ## 自动采集（默认开，只发现不确认）
@@ -381,7 +383,7 @@ L2 为空时那句指路句也不发（不能指一条空路）。L2 有内容
 
 ### 抬头：只留必要的三十个字
 
-注入文本里有几处纯框架文字（标题行、边界句、段名前缀），不承载任何记忆。0.10.3 之前它们合计 **92 字**，等于原先 800 的预算里有 20% 花在说「下面是什么」上。现在：
+注入文本里有几处纯框架文字（标题行、边界句、段名前缀），不承载任何记忆。0.10.3 之前它们合计 **92 字**，等于原先 460 的预算里有 20% 花在说「下面是什么」上。（92/460≈20%；旧稿一度把分母误写成 800。）现在：
 
 ```
 记忆（我写的）
@@ -522,7 +524,7 @@ L2 为空时那句指路句也不发（不能指一条空路）。L2 有内容
 
 设置页「迁移」卡两个按钮，全程在你自己的浏览器与磁盘之间。导出的包是 **v2**：比 v1 多带人格三段（`persona`）与两个配置项（`personaEnabled` / `tempTtlDays`）。**纠偏证据不进包** —— 它是「这台机器上发生过什么」，不是人格本身。v1 老包照样能导进来，缺的字段按默认补；目标机已有不同人格时不覆盖，落成 `persona.imported-<时间戳>.md`。
 
-- **导出**：一份 JSON（`selfnote-YYYY-MM-DD.json`），含自述、facts、习惯，以及你可调的那几项配置。
+- **导出**：一份 JSON（`selfnote-YYYY-MM-DD.json`），含自述（分型与钉住也跟着走）、facts、习惯，以及你可调的那几项配置；导入时配置只按白名单与基本类型落盘。
 - **导入**：在新机器上选这份文件。规则只有三条 —— **不覆盖**（同 id、同正文都跳过）、**默认降级**（导进来的「已采纳」一律变回候选，勾了「保留原状态」才原样搬）、**坏文件直接拒**（不是本插件的包、版本比本机新，都返回 400，不会合并一半）。
 
 索引不跟着搬：它记的是本机磁盘路径与会话 mtime，换个地方必然过期。导入后重新构建一次就行（设置页「索引」卡）。
@@ -530,7 +532,7 @@ L2 为空时那句指路句也不发（不能指一条空路）。L2 有内容
 ## 开发
 
 ```bash
-node --run test              # 280 项，24 个文件，无外部依赖
+node --run test              # 349 项，29 个文件，无外部依赖
 node --run test:accept       # 12 项：真实 HTTP + 36 进程并发写
 ```
 
@@ -544,8 +546,10 @@ node --run test:accept       # 12 项：真实 HTTP + 36 进程并发写
 | `tests/corrections.mjs` | 纠偏证据：强弱信号与误命中、事件级去重、分页游标、200 条上限、按 usedAt 清理、水位不回填、跨三文件事务的幂等恢复与坏日志隔离、指纹计数 |
 | `tests/capture.mjs` `tests/capture-p1b.mjs` `tests/capture-debug.mjs` | 触发词、去重合并、游标幂等与崩溃恢复、迟到事件（空洞）、采集轨迹落点 |
 | `tests/fair.mjs` `tests/warm.mjs` | 环境段冷门预留与轮换、压缩后补回；温层带指针摘要（无指针拒写、可吊销不可删） |
-| `tests/transfer.mjs` | 导出/导入：白名单、不覆盖、降级、坏文件拒绝 |
-| `tests/crash-write.mjs` | 写入过程中被 SIGKILL：notes.md / config.json 不留半截文件 |
+| `tests/transfer.mjs` `tests/transfer-roundtrip.mjs` | 导出/导入：白名单、不覆盖、降级、坏文件拒绝；自述三型 / pin / 配置跟着往返 |
+| `tests/r3-regressions.mjs` | 全量审查回归：采集正文、索引原型键、坏行隔离、缓存键与 UI 可读性 |
+| `tests/crash-write.mjs` `tests/atomic-retry.mjs` `tests/capacity-warning.mjs` | 写入过程被 SIGKILL 不留半截文件、rename 瞬态冲突退避重试、长条挤掉旧规则时容量告警不静默 |
+| `tests/unicode-rulers.mjs` | 全插件「字」按 Unicode 码点算：emoji 截断不写坏、字数校验、配置落盘与段 chars 都按码点 |
 | `tests/acceptance-runtime.mjs` | 鉴权（无头 / 跨站 / 固定口令）、并发写不丢、锁放弃、注入预算 |
 
 改 `lib/*.js` 或 `lib/client.js` 之后**必须重启 DSH**，热重载不会重新扫描 client bundle。测试会自动隔离 `DSH_MEMORY_DIR`，不会污染真实记忆。
@@ -562,7 +566,8 @@ lib/index-store.js  倒排索引
 lib/persona.js      人格三段：解析、码点计数、上限校验、原子保存
 lib/persona-tx.js   跨三文件事务：写人格 + 消费证据 + 记账，可幂等恢复
 lib/corrections.js  纠偏证据：强弱信号、事件去重、游标分页、水位、清理
-lib/store.js        自述文件读写：三型标记、pin、保质期、归档
+lib/store.js        自述文件读写：三型标记、pin、保质期、归档、码点计数与截断助手
+lib/explain.js      每段跳过原因：封闭枚举、字素簇预览、core 明示素材层
 lib/atomic.js       原子写：同目录临时文件 + fsync + rename
 lib/warm.js         温层：带指针摘要，可吊销不可删
 lib/transfer.js     导出/导入：白名单、不覆盖、降级

package/lib/atomic.js

@@ -11,6 +11,40 @@
 import { closeSync, fsyncSync, openSync, readdirSync, renameSync, statSync, unlinkSync, writeSync } from 'node:fs'
 import { basename, dirname, join } from 'node:path'
 
+// Windows 没有 POSIX「覆盖正被打开的目标文件」语义：多进程硬写同一份 facts.jsonl 时，
+// renameSync 偶发 EPERM / EBUSY / EACCES —— 目标只是「暂时被占用」，等几毫秒就好。
+// ENOENT、EISDIR 之类是路径或权限真错了，重试只会白等，必须立刻抛。
+const TRANSIENT_FS_CODES = new Set(['EPERM', 'EBUSY', 'EACCES'])
+const RENAME_BACKOFF = new Int32Array(new SharedArrayBuffer(4))
+
+export function isTransientFsError(error) {
+  return TRANSIENT_FS_CODES.has(error?.code)
+}
+
+/**
+ * 只对瞬态占用做有限次重试。delays 的长度就是总尝试次数（不是「重试次数」）：
+ * 第 i 次失败后等 delays[i] 毫秒再试下一次，最后一次仍冲突就把最后的错抛出去。
+ * sleep 可注入，测试里用空函数省掉真实等待。
+ */
+export function retryOnTransient(operation, options = {}) {
+  const delays = Array.isArray(options.delays) ? options.delays : [5, 10, 20, 40, 80]
+  const sleep = typeof options.sleep === 'function' ? options.sleep : (ms) => {
+    try {
+      Atomics.wait(RENAME_BACKOFF, 0, 0, ms)
+    } catch {
+      /* 部分环境不支持 Atomics.wait 就退化成不让，重试仍会进行 */
+    }
+  }
+  for (let attempt = 0; attempt < delays.length; attempt += 1) {
+    try {
+      return operation()
+    } catch (error) {
+      if (!isTransientFsError(error) || attempt === delays.length - 1) throw error
+      sleep(delays[attempt])
+    }
+  }
+}
+
 /**
  * 扫掉同一个目标留下的陈旧临时文件。
  * 被 SIGKILL 的进程没机会自己删 tmp，所以下一次写这个文件时顺手清掉「已经放了很久」的。
@@ -53,7 +87,9 @@ export function writeAtomic(file, text) {
     fsyncSync(fd)
     closeSync(fd)
     fd = -1
-    renameSync(tmp, file)
+    // Windows 上目标被别的进程短暂占用时 rename 会 EPERM/EBUSY：
+    // 等几毫秒重试，而不是把「整份写回」直接判成失败（test:accept 曾偶发这个错）。
+    retryOnTransient(() => renameSync(tmp, file))
   } catch (error) {
     if (fd !== -1) {
       try {
@@ -72,6 +108,7 @@ export function writeAtomic(file, text) {
 }
 
 export function writeJsonAtomic(file, value, options = {}) {
+  if (value === undefined) throw new TypeError('writeJsonAtomic: undefined 不能写进 JSON 文件')
   // 默认缩进是为了人能读；索引本体十兆，缩进全是白占的体积，传 pretty:false
   const text = options.pretty === false ? JSON.stringify(value) : JSON.stringify(value, null, 2)
   writeAtomic(file, text + '\n')

package/lib/capture-run.js

@@ -14,13 +14,13 @@ import { runSerial } from './persona-tx.js'
 
 /** 从一条 UserMessage 的 content 里抽纯文本（content 可能是字符串或块数组）。 */
 export function textOfEvent(event) {
-  const content = event?.data?.content ?? event?.data?.text ?? ''
+  const content = event?.data?.message?.content ?? event?.data?.content ?? event?.data?.text ?? event?.content ?? ''
   if (typeof content === 'string') return content
   if (!Array.isArray(content)) return ''
   const parts = []
   for (const block of content) {
     if (block === null || typeof block !== 'object') continue
-    if (block.type === 'text' && typeof block.text === 'string') parts.push(block.text)
+    if ((block.type === 'text' || block.type === 'input_text') && typeof block.text === 'string') parts.push(block.text)
   }
   return parts.join('\n')
 }
@@ -53,7 +53,8 @@ export function planWrites(texts, options = {}) {
     for (const fact of facts) {
       if (typeof fact.text !== 'string') continue
       const verdict = compareCandidate(text, fact.text)
-      if (best === null || verdict.score > best.verdict.score) {
+      if (best === null || verdict.score > best.verdict.score
+        || (verdict.score === best.verdict.score && fact.status === 'candidate' && best.fact.status !== 'candidate')) {
         best = { fact, verdict }
       }
     }
@@ -121,7 +122,9 @@ export async function handleEvent(event, deps) {
   if (!isUserAuthored(event)) return { handled: false, reason: 'not-user-authored' }
 
   const sessionId = deps.sessionId ?? event?.sessionId ?? event?.data?.session?.id ?? 'unknown'
-  const seq = Number(event?.seq ?? event?.data?.seq)
+  const rawSeq = event?.seq ?? event?.data?.seq
+  const seqText = typeof rawSeq === 'number' ? String(rawSeq) : typeof rawSeq === 'string' ? rawSeq.trim() : ''
+  const seq = seqText === '' || /^[0-9]+$/.test(seqText) === false ? NaN : Number(seqText)
   if (!Number.isSafeInteger(seq) || seq < 0) return { handled: false, reason: 'no-seq' }
 
   const raw = textOfEvent(event)

package/lib/capture.js

@@ -18,6 +18,7 @@ import { join } from 'node:path'
 
 import { writeJsonAtomic } from './atomic.js'
 import { memoryRoot } from './memory.js'
+import { countChars } from './store.js'
 
 /* ------------------------------ 触发 ------------------------------ */
 
@@ -81,7 +82,7 @@ export function candidatesOf(text, limit = 3) {
   const out = []
   for (const sentence of value.match(SENTENCE) ?? []) {
     const line = sentence.trim()
-    if (line.length < 4 || line.length > 200) continue
+    if (countChars(line) < 4 || countChars(line) > 200) continue
     if (triggersOf(line).length === 0) continue
     if (!hasScope(line)) continue
     if (out.includes(line)) continue

package/lib/client.js

@@ -213,8 +213,6 @@ window.__ModuleLoader__.load({
         setTempTtl(String(data.tempTtlDays === undefined ? 14 : data.tempTtlDays))
         setHalfLife(String(data.halfLifeDays === undefined ? 30 : data.halfLifeDays))
         setProfileMax(String(data.profile && data.profile.maxChars !== undefined ? data.profile.maxChars : 110))
-        setMoreEvidence([])
-        setMoreCursor(null)
         // 每次拿到新状态，列表下标都可能整体挪位：正在改/正等确认的那条已经没意义了
         setEditing(null)
         setPendingDelete(null)
@@ -820,7 +818,6 @@ window.__ModuleLoader__.load({
                   className: 'sn-input',
                   rows: 2,
                   // 一条事实硬上限 240 字（服务端同一条）
-                  maxLength: 240,
                   value: factEdit.text,
                   onChange: function (e) { setFactEdit({ id: fact.id, text: e.target.value }) },
                 }),
@@ -902,10 +899,10 @@ window.__ModuleLoader__.load({
         { className: 'sn-budget', key: 'budget' },
         h(
           'div',
-          { className: 'sn-budget-bar', title: '本回合注入 ' + (budget.total || 0) + ' / ' + limit + ' 字' },
+          { className: 'sn-budget-bar', title: '本回合注入 ' + (budget.total || 0) + ' / ' + limit + ' 字', role: 'progressbar', 'aria-valuenow': budget.total || 0, 'aria-valuemin': 0, 'aria-valuemax': limit, 'aria-label': '本回合注入字数' },
           segments.map(function (item) {
             var width = limit > 0 ? Math.max(0, Math.min(100, (item.value / limit) * 100)) : 0
-            return h('div', { key: item.key, className: 'sn-budget-seg', style: { width: width + '%', background: item.color } })
+            return h('div', { key: item.key, className: 'sn-budget-seg', style: { width: width + '%', background: item.color }, title: item.label + ' ' + item.value + ' 字' })
           }),
         ),
         h(
@@ -973,7 +970,7 @@ window.__ModuleLoader__.load({
         h(
           'div',
           { className: 'sn-row' },
-          h('label', { className: 'sn-toggle' }, h('input', { type: 'checkbox', checked: state.enabled, onChange: toggleEnabled }), h('span', null, '每回合注入')),
+          h('label', { className: 'sn-toggle' }, h('input', { type: 'checkbox', checked: state.enabled, disabled: busy !== '', onChange: toggleEnabled }), h('span', null, '每回合注入')),
           h('span', { className: 'sn-grow' }),
           h('button', { className: 'sn-btn sn-btn-ghost', onClick: refresh, disabled: busy !== '' }, '刷新'),
         ),
@@ -996,7 +993,6 @@ window.__ModuleLoader__.load({
           h('span', null, '注入抬头（每回合那段的第一行）'),
           h('input', {
             type: 'text',
-            maxLength: 24,
             'aria-label': '注入抬头，最多 24 个字，留空就不加抬头',
             value: heading,
             placeholder: '例：AI记忆',
@@ -1056,7 +1052,6 @@ window.__ModuleLoader__.load({
           h('span', null, '什么时候该写自述（留空＝用默认判据）'),
           h('textarea', {
             rows: 2,
-            maxLength: 80,
             'aria-label': '什么时候该写自述，留空就用默认判据',
             value: noteGuide,
             placeholder: '例：每次改完一个插件、跑完验收之后写一条；闲聊不用写。',
@@ -1207,6 +1202,7 @@ window.__ModuleLoader__.load({
 
       /** 导入：读文件 → 交服务端合并 → 把账目摊在卡上。 */
       function importBundle(file) {
+        if (busy !== '') return
         if (!file) return
         setBusy('import')
         setTransfer(null)
@@ -1309,7 +1305,7 @@ window.__ModuleLoader__.load({
                     ),
                     h(
                       'div',
-                      { className: 'sn-file-path', title: '点一下复制路径', onClick: function () { copyPath(file.path) } },
+                      { className: 'sn-file-path', title: '点一下复制路径', onClick: function () { copyPath(file.path) }, role: 'button', tabIndex: 0, onKeyDown: function (e) { if (e.key === 'Enter' || e.key === ' ') copyPath(file.path) } },
                       file.path,
                     ),
                     h(
@@ -1346,12 +1342,13 @@ window.__ModuleLoader__.load({
             h('button', { className: 'sn-btn sn-btn-ghost', onClick: exportAll, disabled: busy !== '' }, busy === 'export' ? '导出中…' : '导出全部记忆'),
             h(
               'label',
-              { className: 'sn-btn sn-btn-ghost sn-transfer-pick' },
+              { className: 'sn-btn sn-btn-ghost sn-transfer-pick', role: 'button', tabIndex: busy === '' ? 0 : -1, 'aria-disabled': busy !== '', onKeyDown: function (event) { if (event.key === 'Enter' || event.key === ' ') { event.preventDefault(); if (busy === '') event.currentTarget.querySelector('input').click() } } },
               busy === 'import' ? '导入中…' : '选择文件导入',
               h('input', {
                 type: 'file',
                 accept: 'application/json,.json',
-                style: { display: 'none' },
+                style: { position: 'absolute', width: 1, height: 1, opacity: 0 },
+                disabled: busy !== '',
                 onChange: function (event) {
                   var picked = event.target.files && event.target.files[0]
                   event.target.value = ''
@@ -1505,7 +1502,6 @@ window.__ModuleLoader__.load({
                           className: 'sn-input',
                           rows: 2,
                           // 单条硬上限 600 字（服务端同一条）——这里是提示，不是校验
-                          maxLength: 600,
                           value: editText,
                           onChange: function (e) { setEditText(e.target.value) },
                         }),
@@ -1556,7 +1552,7 @@ window.__ModuleLoader__.load({
                         h(
                           'button',
                           {
-                            className: 'sn-btn sn-btn-ghost sn-pin' + (entry.pin === true ? ' sn-pin-on' : ''),
+                            'aria-label': entry.pin === true ? '取消钉住' : '钉住', className: 'sn-btn sn-btn-ghost sn-pin' + (entry.pin === true ? ' sn-pin-on' : ''),
                             title: entry.pin === true ? '已钉住：同一型里优先装进去（再点取消）' : '钉住：同一型里优先装进去',
                             onClick: function () { setNoteTier(stored, { pin: entry.pin !== true }) },
                             disabled: busy !== '',
@@ -1589,7 +1585,7 @@ window.__ModuleLoader__.load({
           h(
             'label',
             { className: 'sn-toggle' },
-            h('input', { type: 'checkbox', checked: !!(state.profile && state.profile.enabled), onChange: toggleProfile }),
+            h('input', { type: 'checkbox', checked: !!(state.profile && state.profile.enabled), disabled: busy !== '', onChange: toggleProfile }),
             h('span', null, '每回合注入画像'),
           ),
           h('span', { className: 'sn-grow' }),
@@ -1824,7 +1820,6 @@ window.__ModuleLoader__.load({
                       h('textarea', {
                         className: 'sn-input',
                         rows: 2,
-                        maxLength: 240,
                         value: factEdit.text,
                         onChange: function (e) { setFactEdit({ id: fact.id, text: e.target.value }) },
                       }),
@@ -2081,12 +2076,12 @@ window.__ModuleLoader__.load({
               'div',
               { className: 'sn-attr' },
               attrRows.slice(0, 14).map(function (row) {
-                var text = row.text.length > 46 ? row.text.slice(0, 46) + '…' : row.text
+                var text = row.text
                 return h(
                   'div',
                   { className: 'sn-attr-row sn-attr-' + row.state, key: row.id },
                   h('span', { className: 'sn-badge' }, attrSegLabel[row.segment] || (row.state === 'searched' ? '搜到过' : '没进')),
-                  h('span', { className: 'sn-attr-text' }, text),
+                  h('span', { className: 'sn-attr-text', title: row.text }, text),
                   h(
                     'span',
                     { className: 'sn-attr-num' },
@@ -2156,7 +2151,7 @@ window.__ModuleLoader__.load({
                 type: 'button',
                 role: 'tab',
                 'aria-selected': active,
-                'aria-controls': 'sn-panel-' + item.key,
+                'aria-controls': 'sn-panel-' + activeTab,
                 tabIndex: active ? 0 : -1,
                 className: 'sn-tab' + (active ? ' sn-tab-on' : ''),
                 onClick: function () { setTab(item.key); setPicked(true) },
@@ -2193,7 +2188,7 @@ window.__ModuleLoader__.load({
       '.sn-transfer{display:flex;flex-direction:column;gap:8px}',
       '.sn-transfer-row{display:flex;gap:8px;flex-wrap:wrap}',
       '.sn-transfer-pick{cursor:pointer}',
-      '.sn-transfer-report{margin-top:4px;font-size:12px;line-height:1.7;color:var(--dsh-text-secondary)}',
+      '.sn-transfer-report{margin-top:4px;font-size:12px;line-height:1.7;color:var(--dsw-alias-text-secondary,#6b7280)}',
       '.sn-transfer-warn{color:#b45309}',
       '.sn-root{display:flex;flex-direction:column;gap:14px;font-size:13px}',
       '.sn-head{display:flex;flex-direction:column;gap:4px}',
@@ -2289,7 +2284,7 @@ window.__ModuleLoader__.load({
       ".sn-tab:focus-visible{outline:2px solid var(--dsw-alias-accent-default,#2563eb);outline-offset:-2px}",
       ".sn-tab-on{color:var(--dsw-alias-text-primary,#111);font-weight:600}",
       ".sn-tab-on::after{content:\"\";position:absolute;left:10px;right:10px;bottom:-1px;height:2px;background:var(--dsw-alias-accent-default,#2563eb);border-radius:2px}",
-      ".sn-tab-badge{font-size:10px;line-height:16px;padding:0 6px;border-radius:999px;background:var(--dsw-alias-bg-secondary,#f3f4f6);color:var(--dsw-alias-text-secondary,#6b7280);font-weight:400}",
+      ".sn-tab-badge{font-size:11.5px;line-height:16px;padding:0 6px;border-radius:999px;background:var(--dsw-alias-bg-secondary,#f3f4f6);color:var(--dsw-alias-text-secondary,#6b7280);font-weight:400}",
       ".sn-tab-on .sn-tab-badge{background:#eef2ff;color:#3730a3}",
       ".sn-panel{display:flex;flex-direction:column;gap:12px}",
       ".sn-panel-head{display:flex;justify-content:space-between;align-items:center}",
@@ -2364,7 +2359,7 @@ window.__ModuleLoader__.load({
       // —— 可读性与适配（原来是 11px + #9ca3af，在浅底上几乎要贴到屏幕上看）——
       '.sn-hint{font-size:12px;color:var(--dsw-alias-text-secondary,#6b7280)}',
       '.sn-hint-warn{font-size:12px}',
-      '.sn-date,.sn-file-meta,.sn-heat,.sn-evidence-meta,.sn-fact-cite,.sn-card-note{font-size:11.5px}',
+      '.sn-date,.sn-file-meta,.sn-heat,.sn-evidence-meta,.sn-fact-cite,.sn-card-note{font-size:11.5px;color:var(--dsw-alias-text-secondary,#6b7280)}',
       '.sn-muted{color:var(--dsw-alias-text-secondary,#6b7280)}',
       // 输入框以前写死 110px，抬头那种长文本被压成一条缝；宽度交给容器，只在窄屏才吃满
       '.sn-field{flex-wrap:wrap}',
@@ -2376,7 +2371,7 @@ window.__ModuleLoader__.load({
       '.sn-expired{color:var(--dsw-alias-text-secondary,#6b7280);border-color:var(--dsw-alias-border-subtle,#d1d5db)}',
       '@media (max-width:520px){.sn-limits,.sn-row,.sn-actions{flex-wrap:wrap}.sn-field{width:100%}.sn-field input,.sn-field textarea{width:100%}.sn-card{padding:12px}}',
       // 深色底：插件原先把浅色写死了，宿主切深色时这些块会白得刺眼
-      '@media (prefers-color-scheme:dark){.sn-notice-ok{background:#052e21;color:#a7f3d0}.sn-notice-warn{background:#3f1212;color:#fecaca}.sn-notice{background:var(--dsw-alias-bg-secondary,#1f2937)}.sn-badge,.sn-file-count,.sn-tab-on .sn-tab-badge{background:#1e1b4b;color:#c7d2fe}.sn-material,.sn-kv-tag-stale,.sn-pair-head,.sn-doc-next,.sn-skipped-head{background:#3b2a06;color:#fcd34d}.sn-kv-tag-ok{background:#052e21;color:#6ee7b7}.sn-doc-next{border-color:#92400e}.sn-fact-conflict{background:#2a2308;border-color:#92400e}.sn-doc-ok{background:#052e21;color:#6ee7b7}.sn-doc-error{background:#3f1212;color:#fecaca}.sn-doc-warn{background:#3b2a06;color:#fcd34d}}',
+      '@media (prefers-color-scheme:dark){.sn-notice-ok{background:#052e21;color:#a7f3d0}.sn-notice-warn{background:#3f1212;color:#fecaca}.sn-notice{background:var(--dsw-alias-bg-secondary,#1f2937)}.sn-badge,.sn-file-count,.sn-tab-on .sn-tab-badge{background:#1e1b4b;color:#c7d2fe}.sn-material,.sn-kv-tag-stale,.sn-pair-head,.sn-doc-next,.sn-skipped-head{background:#3b2a06;color:#fcd34d}.sn-kv-tag-ok{background:#052e21;color:#6ee7b7}.sn-doc-next{border-color:#92400e}.sn-fact-conflict{background:#2a2308;border-color:#92400e}.sn-doc-ok{background:#052e21;color:#6ee7b7}.sn-doc-error{background:#3f1212;color:#fecaca}.sn-doc-warn{background:#3b2a06;color:#fcd34d}.sn-file-missing .sn-file-path{color:#fcd34d}.sn-file-missing .sn-file-count{background:#3b2a06;color:#fcd34d}.sn-transfer-warn{color:#fcd34d}.sn-btn-danger{color:#fecaca;border-color:#7f1d1d}.sn-pin-on{color:#fcd34d;border-color:#92400e}.sn-count-over{color:#fca5a5}.sn-hint-warn{color:#fcd34d}.sn-loading-error{color:#fecaca}.sn-seg-state-warn{color:#fcd34d}}',
     ].join('\n')
 
     function apply(ctx) {

package/lib/corrections.js

@@ -47,9 +47,20 @@ function normalizeEvent(raw) {
     used: raw.used === true,
     usedAt: raw.usedAt === null || raw.usedAt === undefined ? null : String(raw.usedAt),
     consumedBy: raw.consumedBy === null || raw.consumedBy === undefined ? null : String(raw.consumedBy),
+    strength: raw.strength === 'strong' || raw.strength === 'weak' ? raw.strength : null,
   }
 }
 
+let pendingBadRows = []
+function collectBadRows(rows) {
+  for (const row of rows) if (!pendingBadRows.includes(row)) pendingBadRows.push(row)
+}
+function flushBadRows() {
+  if (pendingBadRows.length === 0) return
+  const file = join(selfnoteRoot(), `corrections.bad-${Date.now().toString(36)}-${process.pid}.jsonl`)
+  writeAtomic(file, pendingBadRows.join('\n') + '\n')
+  pendingBadRows = []
+}
 export function readEvents() {
   if (!existsSync(CORRECTIONS_PATH)) return []
   const list = []
@@ -59,8 +70,10 @@ export function readEvents() {
     try {
       const entry = normalizeEvent(JSON.parse(text))
       if (entry !== null) list.push(entry)
+      else collectBadRows([text])
     } catch {
-      // 一行坏了不等于整个池子坏了：留着它也没用，跳过
+      // 一行坏了不等于整个池子坏了：隔离留存，别在下一次写回时无声抹掉
+      collectBadRows([text])
     }
   }
   return list
@@ -69,6 +82,7 @@ export function readEvents() {
 export function writeEvents(list) {
   const rows = list.map((entry) => JSON.stringify(normalizeEvent(entry) ?? entry))
   writeAtomic(CORRECTIONS_PATH, rows.length === 0 ? '' : rows.join('\n') + '\n')
+  flushBadRows()
 }
 
 export function findById(id) {

package/lib/explain.js

@@ -46,21 +46,25 @@ export function previewOf(text, maxGraphemes = PREVIEW_MAX_CHARS) {
 
 // 只读取已有打包结果做「事后分类」：绝不重新打包、不改候选集合 / 排序 / 预算 / 文本。
 // sources 与 skipped 同源、等长、逐位平行（由 packNotes() 在构造 skipped 的同一次调用里产出）。
+// 旧版这里恒给 budget:true，pickReason() 就永远有结果、下面的 if 永远进不去 else ——
+// 一个不可达分支。现在按来源如实展开：认不出的（含缺失）才回落 budget。
 function flagsFor(source) {
-  return { scope: false, expired: source === 'expired', duplicate: false, budget: true }
+  return {
+    scope: source === 'scope',
+    expired: source === 'expired',
+    duplicate: source === 'duplicate',
+    budget: source === 'budget' || !SKIP_REASONS.includes(source),
+  }
 }
 
 export function describeSkipped({ key, skipped = [], sources = [], notes = [] } = {}) {
   const list = Array.isArray(skipped) ? skipped : []
   // 来源数组必须同源等长；缺一项就整批保守降级，宁可少报原因也不报错原因。
-  const src = Array.isArray(sources) && sources.length === list.length ? sources : []
-  const out = []
-  list.forEach((raw, i) => {
+  // 降级在这里显式做，调用方不必靠「故意传空数组触发长度不齐」这种暗号。
+  const src = Array.isArray(sources) && sources.length === list.length ? sources : null
+  const out = list.map((raw, i) => {
     const text = String(raw ?? '')
-    const reason = pickReason(flagsFor(src[i] ?? null))
-    if (reason !== null) {
-      out.push({ id: skippedId(key, text), preview: previewOf(text), reason })
-    }
+    return { id: skippedId(key, text), preview: previewOf(text), reason: pickReason(flagsFor(src === null ? null : (src[i] ?? null))) }
   })
   if (key === 'notes') {
     const coreNotes = Array.isArray(notes) ? notes : []

package/lib/index-store.js

@@ -326,9 +326,9 @@ export function ensureIndex(options = {}) {
 export function queryIndex(index, terms) {
   const buckets = []
   for (const term of terms) {
-    const hits = index.postings?.[term]
-    if (hits === undefined) buckets.push([])
-    else buckets.push(hits)
+    const postings = index.postings ?? {}
+    const hits = Object.hasOwn(postings, term) && Array.isArray(postings[term]) ? postings[term] : []
+    buckets.push(hits)
   }
   if (buckets.length === 0) return { ids: [], degraded: false }
 
@@ -365,7 +365,7 @@ export function indexStats(sessions = listSessions()) {
   const disk = sessions.length
   // 优先走门牌文件：几十 KB，免得为了报数字去解析 10 MB 索引
   const meta = readIndexMeta()
-  if (meta !== null) {
+  if (meta !== null && existsSync(indexPath())) {
     const state = freshnessOfSessions(meta.sessions ?? {}, sessions)
     return {
       present: true,

package/lib/index.js

@@ -94,7 +94,7 @@ import { buildProfile } from './profile.js'
 import { writeAtomic } from './atomic.js'
 import { cursorPath, enqueue, isDelegatedSession, readCursor } from './capture.js'
 import { searchWarm, warmStats, writeSummary } from './warm.js'
-import { buildBundle, mergeBundle, mergePersona, validateBundle } from './transfer.js'
+import { buildBundle, mergeBundle, mergeConfig, mergePersona, validateBundle } from './transfer.js'
 import { handleEvent } from './capture-run.js'
 
 export const name = 'selfnote'
@@ -240,7 +240,7 @@ function currentConfig(inline) {
     maxEntries: Number.isFinite(maxEntries) && maxEntries > 0 ? Math.min(maxEntries, 200) : DEFAULT_MAX_ENTRIES,
     profileEnabled: merged.profileEnabled !== false,
     personaEnabled: merged.personaEnabled !== false,
-    profileOverride: typeof merged.profileOverride === 'string' ? merged.profileOverride.trim().slice(0, 240) : '',
+    profileOverride: typeof merged.profileOverride === 'string' ? [...merged.profileOverride.trim()].slice(0, 240).join('') : '',
     profileMaxChars: Number.isFinite(Number(merged.profileMaxChars))
       ? Math.max(20, Math.min(Number(merged.profileMaxChars), 120))
       : DEFAULT_CONFIG.profileMaxChars,
@@ -250,7 +250,7 @@ function currentConfig(inline) {
     // 老版本把这句 28 字的抬头写进了 config.json。它只干一件事，现在默认 6 字。
     // 存的正好是老默认 → 跟着换代；用户自己改过的（不等于老默认）一个字都不动。
     heading: merged.heading === LEGACY_HEADING ? DEFAULT_CONFIG.heading : merged.heading,
-    noteGuide: typeof merged.noteGuide === 'string' ? merged.noteGuide.trim().slice(0, GUIDE_LIMIT) : '',
+    noteGuide: typeof merged.noteGuide === 'string' ? [...merged.noteGuide.trim()].slice(0, GUIDE_LIMIT).join('') : '',
     tempTtlDays: Number.isFinite(Number(merged.tempTtlDays))
       ? Math.max(1, Math.min(Math.round(Number(merged.tempTtlDays)), 90))
       : DEFAULT_TEMP_TTL_DAYS,
@@ -300,11 +300,11 @@ function packEnv(items, limit) {
   for (const item of items) {
     const body = String(item.text ?? '').trim()
     if (body === '') continue
-    if (used + body.length > limit) {
+    if (used + countChars(body) > limit) {
       skipped.push(body)
       continue
     }
-    used += body.length + 1
+    used += countChars(body) + 1
     kept.push(body)
     ids.push(item.id)
     text = text === '' ? body : `${text}；${body}`
@@ -355,7 +355,7 @@ function packEnvFair(items, limit, spotlight = new Set()) {
   let plan = arrange(reserve)
   const head = plan.warm[0] ?? plan.cold[0]
   if (head !== undefined) {
-    const floor = String(head.text ?? '').trim().length + 1
+    const floor = countChars(String(head.text ?? '').trim()) + 1
     if (floor > reserve) {
       reserve = Math.min(Math.floor(cap / 2), floor)
       plan = arrange(reserve)
@@ -500,8 +500,8 @@ function notesSegment(entries, limit, ttl) {
   let pointer = ''
   for (let pass = 0; pass < 3; pass += 1) {
     const next = `另有 ${current.skipped.length} 条自述没装进来（self_note read）`
-    if (next.length + 1 >= room) break
-    const refit = packNotes(entries, Math.max(0, room - next.length - 1), ttl)
+    if (countChars(next) + 1 >= room) break
+    const refit = packNotes(entries, Math.max(0, room - countChars(next) - 1), ttl)
     const converged = refit.skipped.length === current.skipped.length
     pointer = next
     const joined = { ...refit, text: refit.text === '' ? next : `${refit.text} ${next}` }
@@ -665,8 +665,8 @@ function factsSegment(ranked, limit) {
   let pointer = ''
   for (let pass = 0; pass < 3; pass += 1) {
     const next = `另有 ${current.skipped.length} 条结论（memory_recall 查）`
-    if (next.length + 1 >= limit) break
-    const refit = packFacts(ranked, Math.max(0, limit - next.length - 1))
+    if (countChars(next) + 1 >= limit) break
+    const refit = packFacts(ranked, Math.max(0, limit - countChars(next) - 1))
     const converged = refit.skipped.length === current.skipped.length
     pointer = next
     current = { ...refit, text: refit.text === '' ? next : `${refit.text} ${next}` }
@@ -689,12 +689,13 @@ function injectionKey(cfg) {
       return file + ':-'
     }
   })
-  const profileKey = [cfg.profileEnabled, cfg.profileMaxChars, cfg.profileOverride.length, cfg.profileOverride].join('~')
+  const profileKey = [cfg.profileEnabled, cfg.profileMaxChars, countChars(cfg.profileOverride), cfg.profileOverride].join('~')
   // 临时自述会自己到期：文件一个字没改，跨过保质期那天注入也得重算。
   // 按「天」进键就够了，不必精确到毫秒 —— 一天最多重算一次。
-  const dayKey = 'd' + Math.floor(Date.now() / 86400000)
+  const now = new Date()
+  const dayKey = 'd' + now.getFullYear() + '-' + (now.getMonth() + 1) + '-' + now.getDate()
   // 半衰期也影响排序（facts / env 段按热度排），不改文件只改它时也得重算
-  return stamps.join('|') + '|' + cfg.enabled + '|' + cfg.personaEnabled + '|' + cfg.heading + '|' + profileKey + '|hl' + cfg.halfLifeDays + '|ttl' + cfg.tempTtlDays + '|' + dayKey
+  return stamps.join('|') + '|' + cfg.enabled + '|' + cfg.personaEnabled + '|' + cfg.heading + '|' + profileKey + '|hl' + cfg.halfLifeDays + '|ttl' + cfg.tempTtlDays + '|guide' + cfg.noteGuide + '|' + dayKey
 }
 
 /**
@@ -756,7 +757,7 @@ function assembleInjection(cfg, options = {}) {
     key: 'guide',
     label: '写自述的时机',
     limit: GUIDE_LIMIT,
-    chars: guideText.length,
+    chars: countChars(guideText),
     kept: guideText === '' ? [] : [guideText],
     skipped: [],
   })
@@ -771,7 +772,7 @@ function assembleInjection(cfg, options = {}) {
     key: 'profile',
     label: '画像',
     limit: BUDGET.profile,
-    chars: profileText.length,
+    chars: countChars(profileText),
     kept: profileText === '' ? [] : [profileText],
     skipped: [],
   })
@@ -787,7 +788,7 @@ function assembleInjection(cfg, options = {}) {
   // 反复用「这次剩几条」重算门牌，直到条数不再变。不然那句「另有 N 条」会少报。
   for (let pass = 0; pass < 3 && env.skipped.length > 0; pass += 1) {
     const pointer = `另有 ${env.skipped.length} 条环境备忘没装进来（memory_recall 查）`
-    const refit = packEnvFair(envRanked, Math.max(0, BUDGET.env - pointer.length - 1), spotlight)
+    const refit = packEnvFair(envRanked, Math.max(0, BUDGET.env - countChars(pointer) - 1), spotlight)
     const text = refit.text === '' ? pointer : `${refit.text}；${pointer}`
     const converged = refit.skipped.length === env.skipped.length
     env = { ...refit, text }
@@ -851,8 +852,10 @@ function assembleInjection(cfg, options = {}) {
     seg.skippedDetail = describeSkipped({
       key: seg.key,
       skipped: Array.isArray(seg.skipped) ? seg.skipped : [],
-      // 非 notes 段传空数组：describeSkipped 见长度不齐就整批保守降级成 budget，正是它们该有的值
-      sources: seg.key === 'notes' && Array.isArray(noteFit.skippedSources) ? noteFit.skippedSources : [],
+      // 非 notes 段没有逐条来源：显式给等长的 budget 数组，不再靠「传空触发长度不齐」这种暗号
+      sources: seg.key === 'notes' && Array.isArray(noteFit.skippedSources)
+        ? noteFit.skippedSources
+        : (Array.isArray(seg.skipped) ? seg.skipped : []).map(() => 'budget'),
       notes: seg.key === 'notes' ? noteEntries : [],
     })
   }
@@ -1849,7 +1852,7 @@ function currentProfile(cfg) {
   const config = cfg ?? currentConfig()
   if (config.profileEnabled !== true) return { text: '', parts: [], conflicts: [], sources: [], chars: 0, manual: false }
   if (config.profileOverride !== '') {
-    return { text: config.profileOverride, parts: [], conflicts: [], sources: [], chars: config.profileOverride.length, manual: true }
+    return { text: config.profileOverride, parts: [], conflicts: [], sources: [], chars: countChars(config.profileOverride), manual: true }
   }
   const built = buildProfile(listFacts(), { maxChars: config.profileMaxChars })
   return { ...built, manual: false }
@@ -1916,22 +1919,42 @@ const TIER_WORD = { core: '核心身份', stable: '稳定偏好', temp: '临时
 function noteCapacityWarning(tier, text, inline) {
   const cfg = currentConfig(inline)
   if (cfg.enabled === false) return '注入已关闭，这条暂时不会进上下文。'
-  const key = normalizeTier(tier)
-  const body = String(text ?? '')
+  const entries = readNotes()
+  // 调用点在 appendNote 之后：最后一条就是刚写的。旧版在这里又凭空补一条，
+  // 等于把新条试装了两遍、额度算得偏紧；现在直接用落盘后的真实列表。
+  const last = entries.at(-1)
+  const key = normalizeTier(last?.tier ?? tier)
+  const body = String(last?.text ?? text ?? '')
   // 核心是素材，不进注入：这时候说「超了额度」是骗人，得直接说清楚它去哪儿了
   if (key === 'core') {
     return '核心身份不再参与注入（它是提炼人格的素材）—— 想让它每回合生效，写进人格段：self_note action:"persona"。'
   }
-  // 拿真实额度试装一次：把这条当成已经写进去，看它自己进不进得来。
+  // 拿真实额度试装一次：看这条自己进不进得来。
   // 光比「整段 200 字」不够 —— 稳定先占一份、临时只留 1/4 保底，
   // 一条 110 字的临时自述会顺利通过 200 字的检查，然后每回合被静默跳过。
-  const probe = packNotes([...readNotes(), { tier: key, text: body }], BUDGET.notes, cfg.tempTtlDays)
-  if (probe.kept.includes(body)) return ''
-  const info = probe.tiers[key]
-  if (body.length > info.limit) {
-    return `这条 ${body.length} 字，超过${TIER_WORD[key]}段这轮实际能用的 ${info.limit} 字（整段 ${BUDGET.notes} 字，别的型先占了位），模型每回合都看不到它 —— 要么写短，要么拆成几条。`
+  const probe = packNotes(entries, BUDGET.notes, cfg.tempTtlDays)
+  if (!probe.kept.includes(body)) {
+    const info = probe.tiers[key]
+    if (countChars(body) > info.limit) {
+      return `这条 ${countChars(body)} 字，超过${TIER_WORD[key]}段这轮实际能用的 ${info.limit} 字（整段 ${BUDGET.notes} 字，别的型先占了位），模型每回合都看不到它 —— 要么写短，要么拆成几条。`
+    }
+    return `${TIER_WORD[key]}现在共 ${info.total} 条，这轮有 ${info.skipped} 条被挤掉（排在前面的才进上下文）。`
+  }
+  // 自己进来了，不等于没出事：线上翻过一次 —— 一条 95 字长条自己进得来，
+  // 却把原本全进的短规则挤了出去；旧版只问「这条进不进得来」，于是一声不吭。
+  // 拿「写入前」的列表打包做基线，按文本多重集比少了哪些条（同文重复也算得清）。
+  const before = packNotes(entries.slice(0, -1), BUDGET.notes, cfg.tempTtlDays)
+  const pool = new Map()
+  for (const kept of probe.kept) pool.set(kept, (pool.get(kept) ?? 0) + 1)
+  pool.set(body, (pool.get(body) ?? 0) - 1) // 新写的那一份本来就不在基线里
+  let displaced = 0
+  for (const kept of before.kept) {
+    const left = pool.get(kept) ?? 0
+    if (left > 0) pool.set(kept, left - 1)
+    else displaced += 1
   }
-  return `${TIER_WORD[key]}现在共 ${info.total} 条，这轮有 ${info.skipped} 条被挤掉（排在前面的才进上下文）。`
+  if (displaced === 0) return ''
+  return `这条 ${countChars(body)} 字自己进了上下文，但把 ${displaced} 条自述挤掉了（排在前面的才进上下文）—— 写短些，或先把旧规则整理归档。`
 }
 
 function renderText(args, value) {
@@ -2218,7 +2241,7 @@ export function currentAuthInjection() {
 function injectTokenScript(html) {
   if (authToken === '') return html
   if (html.includes('__DSH_SELFNOTE_TOKEN__')) return html
-  const script = `<script>window.__DSH_SELFNOTE_TOKEN__=${JSON.stringify(authToken)}</script>`
+  const script = `<script>window.__DSH_SELFNOTE_TOKEN__=${JSON.stringify(authToken).replace(/</g, '\\u003c')}</script>`
   if (html.includes('</head>')) {
     authInjected = 'head'
     return html.replace('</head>', `${script}</head>`)
@@ -2443,7 +2466,7 @@ export function apply(ctx, config) {
             return {
               action,
               entries: entries.length,
-              chars: renderNotes(entries).length,
+              chars: countChars(renderNotes(entries)),
               maxChars: limits.maxChars,
               text: renderNotes(entries),
             }
@@ -2662,7 +2685,7 @@ export function apply(ctx, config) {
               if (typeof body.heading === 'string') {
                 const value = body.heading.trim()
                 // 抬头是注入的第一行，长度不设限等于让人用一句话吃掉整个预算
-                if (value.length > HEADING_LIMIT) {
+                if (countChars(value) > HEADING_LIMIT) {
                   return sendJson(res, 400, { ok: false, error: `抬头不能超过 ${HEADING_LIMIT} 字` })
                 }
                 next.heading = value
@@ -2671,7 +2694,7 @@ export function apply(ctx, config) {
                 if (typeof body.noteGuide !== 'string') {
                   return sendJson(res, 400, { ok: false, error: 'noteGuide 要是字符串' })
                 }
-                if (body.noteGuide.trim().length > GUIDE_LIMIT) {
+                if (countChars(body.noteGuide.trim()) > GUIDE_LIMIT) {
                   return sendJson(res, 400, { ok: false, error: `noteGuide 不能超过 ${GUIDE_LIMIT} 字` })
                 }
                 next.noteGuide = body.noteGuide.trim()
@@ -2681,7 +2704,7 @@ export function apply(ctx, config) {
                 if (typeof body.profileOverride !== 'string') {
                   return sendJson(res, 400, { ok: false, error: 'profileOverride 要是字符串' })
                 }
-                next.profileOverride = body.profileOverride.slice(0, 240)
+                next.profileOverride = [...body.profileOverride].slice(0, 240).join('')
               }
               if (body.halfLifeDays !== undefined) {
                 const value = Number(body.halfLifeDays)
@@ -2712,7 +2735,7 @@ export function apply(ctx, config) {
               const text = typeof body?.text === 'string' ? body.text.trim() : ''
               if (text === '') return sendJson(res, 400, { ok: false, error: '内容不能为空' })
               const result = appendNote(text, limitsOf(currentConfig(inline)), { tier: body?.tier, pin: body?.pin })
-              auditAction('note-add', { tier: result.tier, pin: result.pin, chars: text.length }, req)
+              auditAction('note-add', { tier: result.tier, pin: result.pin, chars: countChars(text) }, req)
               return sendJson(res, 200, {
                 ...stateOf(inline),
                 noteAdd: { tier: result.tier, pin: result.pin, warning: noteCapacityWarning(result.tier, text, inline) },
@@ -2801,7 +2824,8 @@ export function apply(ctx, config) {
                   return sendJson(res, 400, { ok: false, error: `导入包里的人格用不了：${verdict.error}` })
                 }
               }
-              const limits = limitsOf(currentConfig(inline))
+              const configPlan = mergeConfig(incoming, readConfig())
+              const limits = limitsOf({ ...currentConfig(inline), ...configPlan.config })
               const before = { notes: readNotes().length, facts: listFacts().length, habits: readHabits().length }
               const merged = mergeBundle(
                 incoming,
@@ -2814,6 +2838,7 @@ export function apply(ctx, config) {
               const { kept: trimmedNotes } = trim(merged.notes, limits)
               writeNotes(trimmedNotes)
               writeHabits(merged.habits)
+              if (configPlan.applied.length > 0) writeConfig({ ...readConfig(), ...configPlan.config })
               // 人格：目标空就采用，一模一样就跳过，两边都有且不同就落旁路文件 —— 不覆盖
               let personaFile = ''
               if (personaPlan.action === 'adopt') {
@@ -2835,6 +2860,7 @@ export function apply(ctx, config) {
                 after: { notes: trimmedNotes.length, facts: merged.facts.length, habits: merged.habits.length },
                 persona: { action: personaPlan.action, file: personaFile },
                 indexStale: true,
+                configApplied: configPlan.applied.length,
               }
               auditAction('import', { added: merged.added, keepStatus: merged.keepStatus }, req)
               return sendJson(res, 200, { ...stateOf(inline), import: report })

package/lib/memory.js

@@ -25,6 +25,7 @@ import { join } from 'node:path'
 import { zstdDecompressSync } from 'node:zlib'
 
 import { writeAtomic, writeJsonAtomic } from './atomic.js'
+import { countChars } from './store.js'
 
 const SESSION_FILE = 'session.v4.jsonl.zstd'
 /** 缓存格式版本：解析规则变了就 +1，旧缓存自动作废。 */
@@ -759,7 +760,7 @@ export function mutateFacts(mutate, attempts = 5, deadlineMs = 150) {
 export function stageFact(input = {}) {
   const text = String(input.text ?? '').trim()
   if (text === '') return { ok: false, error: 'text 不能为空' }
-  if (text.length > 240) return { ok: false, error: '一条事实最多 240 字，拆成两条' }
+  if (countChars(text) > 240) return { ok: false, error: '一条事实最多 240 字，拆成两条' }
   const check = checkCitation(input.citation)
   if (!check.ok) return { ok: false, error: check.error }
 
@@ -798,7 +799,7 @@ export function stageFact(input = {}) {
 export function setFactText(id, text, meta = {}) {
   const clean = String(text ?? '').replace(/\s+/g, ' ').trim()
   if (clean === '') return { ok: false, error: '内容不能为空' }
-  if (clean.length > 240) return { ok: false, error: '一条事实最多 240 字，拆成两条' }
+  if (countChars(clean) > 240) return { ok: false, error: '一条事实最多 240 字，拆成两条' }
   let before = ''
   let updated = null
   const outcome = mutateFacts((facts) => {
@@ -885,8 +886,9 @@ export function touchFacts(ids, now = Date.now()) {
   // 而 'YYYY-MM-DD' 解析出来是当天 00:00 —— 过了午夜那一小时窗口就永远失效，
   // 每装配一次都会 +1（实测 25 分钟能连涨 3 次，把「进过几次」记成「算过几次」）。
   const stamp = new Date(now).toISOString()
-  // 热度是软数据：抢不到锁就这回合先不记（lastHit 没变，下一回合还会再试），
-  // 别为了记一次点击把事件循环卡住 —— 所以给它的重试窗口比别的写入短。
+  // 热度是软数据：抢不到锁就这回合先不记（lastHit 没变，下一回合还会再试）。
+  // 机会比硬写少（2 次 vs 5 次），但每次等锁的窗口给足：20ms 在 16 并发下几乎必输，
+  // test:accept 曾因此偶发「热度没落下：t2（返回 0）」。
   const outcome = mutateFacts((facts) => {
     let changed = 0
     for (const fact of facts) {
@@ -898,7 +900,7 @@ export function touchFacts(ids, now = Date.now()) {
       changed += 1
     }
     return { changed: changed > 0, count: changed }
-  }, 2, 20)
+  }, 2, 150)
   return outcome.count ?? 0
 }
 
@@ -915,7 +917,7 @@ export function seenFacts(ids, now = Date.now()) {
   const wanted = new Set(ids ?? [])
   if (wanted.size === 0) return 0
   const stamp = new Date(now).toISOString()
-  // 和 touchFacts 一样是软写入：抢不到锁就这次先不记，别为一次记账卡住事件循环。
+  // 和 touchFacts 一样是软写入：2 次机会、每次等锁 150ms，抢不到就这次先不记。
   const outcome = mutateFacts((facts) => {
     let changed = 0
     for (const fact of facts) {
@@ -927,7 +929,7 @@ export function seenFacts(ids, now = Date.now()) {
       changed += 1
     }
     return { changed: changed > 0, count: changed }
-  }, 2, 20)
+  }, 2, 150)
   return outcome.count ?? 0
 }
 
@@ -978,7 +980,7 @@ export function setHabit(text, status, tag) {
   const wanted = String(status ?? '')
   const clean = String(text ?? '').trim()
   if (clean === '') return { ok: false, error: 'text 不能为空' }
-  if (clean.length > 80) return { ok: false, error: '一条习惯最多 80 字' }
+  if (countChars(clean) > 80) return { ok: false, error: '一条习惯最多 80 字' }
   if (!['active', 'retired'].includes(wanted)) return { ok: false, error: 'status 只能是 active / retired' }
 
   const habits = readHabits()

package/lib/persona-tx.js

@@ -7,7 +7,7 @@
  * 恢复时只是「把文件写成目标状态」，重放多少次结果都一样。
  */
 import { createHash, randomBytes } from 'node:crypto'
-import { closeSync, existsSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeSync } from 'node:fs'
+import { closeSync, existsSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync, writeSync } from 'node:fs'
 import { join } from 'node:path'
 import { selfnoteRoot } from './store.js'
 import { writeAtomic, writeJsonAtomic } from './atomic.js'
@@ -111,7 +111,8 @@ export function lockState(now = Date.now()) {
   } catch {
     return { exists: true, stale: true, pid: 0, ageMs: 0 }
   }
-  const stale = !pidAlive(pid) || !Number.isFinite(ageMs) || ageMs > STALE_LOCK_MS
+  const empty = (() => { try { return readFileSync(LOCK_PATH, 'utf8').trim() === '' } catch { return false } })()
+  const stale = !empty && (!pidAlive(pid) || !Number.isFinite(ageMs) || ageMs > STALE_LOCK_MS)
   return { exists: true, stale, pid: Number.isInteger(pid) ? pid : 0, ageMs }
 }
 
@@ -128,29 +129,19 @@ function clearStaleLock() {
 
 /** 跨进程互斥：O_EXCL 建锁，拿不到就是「有人正在保存」，直接报错而不是排队等死。 */
 export async function withPersonaLock(job) {
-  let fd
   try {
-    fd = openSync(LOCK_PATH, 'wx')
+    writeFileSync(LOCK_PATH, String(process.pid), { flag: 'wx' })
   } catch (error) {
     if (error?.code !== 'EEXIST') throw error
     // 上次被强杀的残留锁：清掉再试一次，否则「保存人格」会永久 409
     if (!clearStaleLock()) throw new LockedError()
     try {
-      fd = openSync(LOCK_PATH, 'wx')
+      writeFileSync(LOCK_PATH, String(process.pid), { flag: 'wx' })
     } catch (retryError) {
       if (retryError?.code === 'EEXIST') throw new LockedError()
       throw retryError
     }
   }
-  try {
-    try {
-      writeSync(fd, String(process.pid))
-    } catch {
-      // 写不进去不影响互斥本身
-    }
-  } finally {
-    closeSync(fd)
-  }
   try {
     return await job()
   } finally {

package/lib/profile.js

@@ -8,6 +8,8 @@
  *   - 同一标签下多条时不擅自归纳，只取最新并标注「另有 N 条」
  */
 
+import { countChars } from './store.js'
+
 const DEFAULT_MAX_CHARS = 80
 const DEFAULT_PIECE_MAX = 60
 
@@ -51,10 +53,10 @@ export function buildProfile(facts, options = {}) {
     const latest = bucket.slice().sort((a, b) => (stamp(a) < stamp(b) ? 1 : stamp(a) > stamp(b) ? -1 : 0))[0]
     const body = String(latest.text ?? '').trim()
     if (body === '') continue
-    if (body.length > pieceMax) continue
+    if (countChars(body) > pieceMax) continue
     const piece = `${tag}：${body}`
     const candidate = text === '' ? piece : `${text}；${piece}`
-    if (candidate.length > maxChars) continue
+    if (countChars(candidate) > maxChars) continue
     text = candidate
     parts.push({ tag, factId: latest.id, text: body })
     if (bucket.length > 1) conflicts.push({ tag, count: bucket.length - 1 })
@@ -64,7 +66,7 @@ export function buildProfile(facts, options = {}) {
     text,
     parts,
     conflicts,
-    chars: text.length,
+    chars: countChars(text),
     sources: parts.map((part) => part.factId),
   }
 }

package/lib/store.js

@@ -15,6 +15,16 @@ import { join } from 'node:path'
 import { writeAtomic, writeJsonAtomic } from './atomic.js'
 
 /** 当前生效内容的上限（字符）。默认 1600 字，约 1.1k token。 */
+export function countChars(text) {
+  return [...String(text ?? '')].length
+}
+
+/** 按码点截断：不把 emoji / 增补汉字的代理对切一半。 */
+export function truncateChars(text, max) {
+  const room = Math.max(0, Math.floor(max))
+  return [...String(text ?? '')].slice(0, room).join('')
+}
+
 export const DEFAULT_MAX_CHARS = 1600
 /** 条数上限，和字符上限共同生效。 */
 export const DEFAULT_MAX_ENTRIES = 40
@@ -94,7 +104,7 @@ export function today() {
 
 /** 正文归一：回车换行压成空格、去掉首尾空白、截到硬上限。 */
 function cleanEntryText(text) {
-  return String(text ?? '').replace(/\s+/g, ' ').trim().slice(0, MAX_ENTRY_CHARS)
+  return truncateChars(String(text ?? '').replace(/\s+/g, ' ').trim(), MAX_ENTRY_CHARS)
 }
 
 /**
@@ -166,12 +176,12 @@ export function writeNotes(entries) {
 export function trim(entries, { maxChars = DEFAULT_MAX_CHARS, maxEntries = DEFAULT_MAX_ENTRIES } = {}) {
   const kept = [...entries]
   const overflow = []
-  let total = renderNotes(kept).length
+  let total = countChars(renderNotes(kept))
   while (kept.length > maxEntries || (total > maxChars && kept.length > 1)) {
     const dropped = kept.shift()
     if (!dropped) break
     overflow.push(dropped)
-    total = renderNotes(kept).length
+    total = countChars(renderNotes(kept))
   }
   return { kept, overflow }
 }
@@ -290,7 +300,7 @@ export function stats() {
   }
   return {
     entries: entries.length,
-    chars: renderNotes(entries).length,
+    chars: countChars(renderNotes(entries)),
     // 三型各几条：设置页要能解释「为什么我这条没进上下文」
     tiers: countTiers(entries),
     pinned: entries.filter((entry) => entry.pin === true).length,

package/lib/transfer.js

@@ -9,6 +9,8 @@
  * 索引不导出：它记的是磁盘路径与 mtime，搬过去必然过期，导入后重建一次就行。
  */
 
+import { normalizeTier } from './store.js'
+
 export const BUNDLE_VERSION = 2
 export const BUNDLE_APP = 'dsh-selfnote'
 
@@ -55,7 +57,7 @@ export function buildBundle({ notes = [], facts = [], habits = [], config = {},
     v: BUNDLE_VERSION,
     exportedAt: now.toISOString(),
     counts: { notes: notes.length, facts: facts.length, habits: habits.length },
-    notes: notes.map((entry) => ({ date: entry.date ?? '', text: entry.text ?? '' })),
+    notes: notes.map((entry) => ({ date: entry.date ?? '', text: entry.text ?? '', tier: normalizeTier(entry.tier), pin: entry.pin === true })),
     facts: facts.map((fact) => ({ ...fact })),
     habits: habits.map((habit) => ({ ...habit })),
     // 人格跟着走（v2）；纠偏候选不跟 —— 它是「这台机器上攒下的证据」，搬过去就失了上下文
@@ -65,6 +67,26 @@ export function buildBundle({ notes = [], facts = [], habits = [], config = {},
 }
 
 /** 导入前的体检：结构不对就直说，别合并一半。 */
+export function mergeConfig(bundle, current = {}) {
+  const source = isObject(bundle?.config) ? bundle.config : {}
+  const base = isObject(current) ? current : {}
+  const config = {}
+  for (const field of CONFIG_FIELDS) if (base[field] !== undefined) config[field] = base[field]
+  const applied = []
+  const bools = new Set(['enabled', 'profileEnabled', 'personaEnabled'])
+  const nums = new Set(['maxChars', 'maxEntries', 'profileMaxChars', 'halfLifeDays', 'tempTtlDays'])
+  for (const field of CONFIG_FIELDS) {
+    if (!Object.hasOwn(source, field)) continue
+    const value = source[field]
+    const good = bools.has(field) ? typeof value === 'boolean'
+      : nums.has(field) ? typeof value === 'number' && Number.isFinite(value)
+      : typeof value === 'string'
+    if (!good) continue
+    config[field] = value
+    applied.push(field)
+  }
+  return { config, applied }
+}
 export function validateBundle(bundle) {
   if (!isObject(bundle)) return '不是 JSON 对象'
   if (bundle.app !== BUNDLE_APP) return `不是本插件导出的文件（app=${String(bundle.app)}）`
@@ -138,11 +160,8 @@ export function mergeBundle(bundle, current = {}, options = {}) {
       continue
     }
     const status = textOf(raw.status) || 'candidate'
-    const fact = { ...raw, text }
-    if (!keepStatus && status !== 'candidate') {
-      fact.status = 'candidate'
-      demoted.push(id)
-    }
+    const fact = { ...raw, text, status: keepStatus ? status : 'candidate' }
+    if (!keepStatus && status !== 'candidate') demoted.push(id)
     if (fact.status === 'candidate') {
       delete fact.reviewedAt
       delete fact.retiredAt
@@ -164,7 +183,7 @@ export function mergeBundle(bundle, current = {}, options = {}) {
       skipped.notes += 1
       continue
     }
-    notes.push({ date: textOf(raw.date) || '', text })
+    notes.push({ date: textOf(raw.date) || '', text, tier: normalizeTier(raw.tier), pin: raw.pin === true })
     seenNotes.add(text)
     added.notes += 1
   }

package/lib/warm.js

@@ -12,6 +12,7 @@ import { existsSync, mkdirSync, readFileSync } from 'node:fs'
 import { join } from 'node:path'
 
 import { memoryRoot, readFacts, tokenize } from './memory.js'
+import { countChars } from './store.js'
 import { writeAtomic } from './atomic.js'
 
 const MAX_TEXT = 300
@@ -19,6 +20,16 @@ const MAX_POINTERS = 8
 
 export const warmPath = () => join(memoryRoot(), 'warm.jsonl')
 
+let pendingBadRows = []
+function collectBadRows(rows) {
+  for (const row of rows) if (!pendingBadRows.includes(row)) pendingBadRows.push(row)
+}
+function flushBadRows() {
+  if (pendingBadRows.length === 0) return
+  mkdirSync(memoryRoot(), { recursive: true })
+  writeAtomic(join(memoryRoot(), `warm.bad-${Date.now().toString(36)}-${process.pid}.jsonl`), pendingBadRows.join('\n') + '\n')
+  pendingBadRows = []
+}
 export function readWarm() {
   const file = warmPath()
   if (!existsSync(file)) return []
@@ -28,8 +39,10 @@ export function readWarm() {
     try {
       const item = JSON.parse(line)
       if (item && typeof item === 'object') out.push(item)
+      else collectBadRows([line])
     } catch {
-      // 坏行跳过：一条摘要读不出来，不该让整层都废掉
+      // 坏行跳过：隔离留存，别在下一次写回时无声抹掉
+      collectBadRows([line])
     }
   }
   return out
@@ -39,6 +52,7 @@ function writeWarm(items) {
   // 目录可能还不存在（第一次写温层）
   mkdirSync(memoryRoot(), { recursive: true })
   writeAtomic(warmPath(), items.map((item) => JSON.stringify(item)).join('\n') + (items.length > 0 ? '\n' : ''))
+  flushBadRows()
 }
 
 function validPointer(pointer) {
@@ -55,7 +69,7 @@ function validPointer(pointer) {
 export function writeSummary(input = {}) {
   const text = String(input.text ?? '').trim()
   if (text === '') return { ok: false, error: 'text 不能为空' }
-  if (text.length > MAX_TEXT) return { ok: false, error: `一条摘要最多 ${MAX_TEXT} 字，拆成两条` }
+  if (countChars(text) > MAX_TEXT) return { ok: false, error: `一条摘要最多 ${MAX_TEXT} 字，拆成两条` }
 
   const raw = Array.isArray(input.pointers) ? input.pointers : []
   const pointers = raw

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-selfnote",
-  "version": "0.14.2",
+  "version": "0.14.3",
   "type": "module",
   "description": "Self-narrative memory for DeepSeek Harness: the model writes notes to itself, which persist across sessions and are injected back. | 人格库：模型写给自己看的话，跨会话保留并每回合注入。",
   "keywords": [
@@ -27,7 +27,7 @@
     "assets"
   ],
   "scripts": {
-    "test": "node tests/smoke.mjs && node tests/memory.mjs && node tests/roles.mjs && node tests/heat.mjs && node tests/fair.mjs && node tests/capture-debug.mjs && node tests/facts-tx.mjs && node tests/crash-write.mjs && node tests/capture.mjs && node tests/capture-p1b.mjs && node tests/index.mjs && node tests/incremental.mjs && node tests/profile.mjs && node tests/warm.mjs && node tests/transfer.mjs && node tests/api.mjs && node tests/explain.mjs && node tests/skipped.mjs && node tests/injection-count.mjs && node tests/notes-tier.mjs && node tests/persona.mjs && node tests/corrections.mjs && node tests/client-state.mjs && node tests/client.mjs",
+    "test": "node tests/smoke.mjs && node tests/memory.mjs && node tests/roles.mjs && node tests/heat.mjs && node tests/fair.mjs && node tests/capture-debug.mjs && node tests/facts-tx.mjs && node tests/crash-write.mjs && node tests/capture.mjs && node tests/capture-p1b.mjs && node tests/index.mjs && node tests/incremental.mjs && node tests/profile.mjs && node tests/warm.mjs && node tests/transfer.mjs && node tests/api.mjs && node tests/explain.mjs && node tests/skipped.mjs && node tests/injection-count.mjs && node tests/notes-tier.mjs && node tests/capacity-warning.mjs && node tests/atomic-retry.mjs && node tests/unicode-rulers.mjs && node tests/transfer-roundtrip.mjs && node tests/r3-regressions.mjs && node tests/persona.mjs && node tests/corrections.mjs && node tests/client-state.mjs && node tests/client.mjs",
     "test:accept": "node tests/acceptance-runtime.mjs"
   },
   "engines": {