luckytri 1.0.8 → 1.1.0

package/server/mind/memory.js

@@ -1,888 +1,1091 @@
-import { randomUUID } from "node:crypto";
-import {
-  parseSessionKey,
-  scopedSessionAliases,
-} from "../channels/session-key.js";
-import { localClock } from "../core/conversation-cues.js";
-import { lexicalTerms } from "../knowledge/retrieval.js";
-import { indexMemory } from "../knowledge/schema.js";
-import {
-  applySpeakerNames,
-  readableName,
-  speakerNames,
-} from "../core/speaker-names.js";
-import { agoLabel } from "./clock.js";
-import { hasCredential, secretRequest } from "./guard.js";
-import { MEMORY_IDLE_DAYS, grounded } from "./salience.js";
-import { DAY, clamp, similar, text } from "./util.js";
-import { recallIntent } from "./continuity.js";
-import { consolidationDecision } from "./memory-policy.js";
-import { requestedName } from "../core/person-name.js";
-
-const RECALL_CONFIDENCE = 0.5;
-const RECALL_LIMIT = 12;
-const RECALL_TERMS = 64;
-const FTS_CANDIDATES = 200;
-const BLOCK_USERS = 40;
-// One stretch of talk adds at most this many views to who she is.
-const MEMORY_VIEWS_PER_BLOCK = 2;
-const SENSITIVE = /密码|验证码|密钥|身份证|银行卡|api.?key|token/i;
-const DISCRETIONS = new Set(["open", "private", "secret"]);
-
-// A request to keep something quiet stays with that person for the rest of
-// this stretch. Other people's messages in between do not wash it out, and
-// it does not make anyone else's words a secret.
-function askedSecret(block, subject, beforeSeq) {
-  if (!subject) return false;
-  return block.some(
-    (m) =>
-      m.role === "user" &&
-      String(m.userId) === String(subject) &&
-      m.seq <= beforeSeq &&
-      secretRequest(m.text),
-  );
-}
-
-// Words from the newest messages first, so a long batch still searches for
-// what was just said.
-function recallQuery(rows) {
-  const terms = [];
-  const seen = new Set();
-  for (const row of [...rows].reverse()) {
-    if (row.role === "assistant") continue;
-    for (const term of lexicalTerms(row.text || ""))
-      if (!seen.has(term)) {
-        seen.add(term);
-        terms.push(term);
-      }
-  }
-  return terms
-    .slice(0, RECALL_TERMS)
-    .map((term) => `"${term.replace(/"/g, "")}"`)
-    .filter((term) => term.length > 2)
-    .join(" OR ");
-}
-const marks = (list) => list.map(() => "?").join(",");
-
-export function isPrivateSession(session) {
-  const value = String(session || "");
-  if (value.startsWith("__private__")) return true;
-  try {
-    return parseSessionKey(value).kind === "private";
-  } catch {
-    return value.startsWith("private");
-  }
-}
-
-// One memory for all of her conversations. Where a fact came from travels
-// with it, and so does how freely she may repeat it.
-export class MemoryManager {
-  constructor(repo, models, mind) {
-    this.repo = repo;
-    this.models = models;
-    this.mind = mind;
-    this.busy = new Set();
-    this.lastAttempt = new Map();
-  }
-  scopes(session) {
-    const scopes = new Set([session, "__shared__"]);
-    try {
-      for (const id of scopedSessionAliases(this.repo.db, session))
-        scopes.add(id);
-      const parsed = parseSessionKey(session);
-      if (parsed.kind === "private")
-        scopes.add(`__private__:${parsed.nativeId}`);
-    } catch {
-      /* keep session + shared */
-    }
-    return [...scopes];
-  }
-  retrieve(
-    session,
-    rows,
-    cutoff = Date.now(),
-    { people = [], touch = true, forSpeech = false } = {},
-  ) {
-    const db = this.repo.db;
-    const here = new Set(this.scopes(session));
-    here.delete("__shared__");
-    const speakers = new Set(
-      rows
-        .filter((r) => r.role !== "assistant")
-        .map((r) => String(r.userId || ""))
-        .filter(Boolean),
-    );
-    const present = new Set(people.map(String));
-    // Two people cannot be added together, and her own line does not count
-    // as the world talking about what she remembers.
-    const saidBy = new Map();
-    for (const row of rows) {
-      if (row.role === "assistant") continue;
-      const id = String(row.userId || "");
-      if (!id) continue;
-      const terms = saidBy.get(id) || new Set();
-      for (const term of lexicalTerms(row.text || "")) terms.add(term);
-      saidBy.set(id, terms);
-    }
-    const oneSpeakerOverlap = (content) => {
-      const terms = lexicalTerms(content);
-      let best = 0;
-      for (const said of saidBy.values()) {
-        let count = 0;
-        for (const term of terms) if (said.has(term)) count++;
-        if (count > best) best = count;
-      }
-      return best;
-    };
-    const fts = new Set();
-    const match = recallQuery(rows);
-    if (match)
-      try {
-        for (const hit of db
-          .prepare(
-            "SELECT memory_id FROM core_memory_fts WHERE tokens MATCH ? ORDER BY rank LIMIT ?",
-          )
-          .all(match, FTS_CANDIDATES))
-          fts.add(hit.memory_id);
-      } catch {
-        /* MATCH syntax */
-      }
-    // Only what could matter is read: words in common, people here, or what
-    // was locked to stay in mind.
-    const ids = [...fts];
-    const subjects = [...new Set([...speakers, ...present])].filter(Boolean);
-    const candidates = db
-      .prepare(
-        `SELECT * FROM core_memories WHERE status='confirmed' AND created<=? AND (expires IS NULL OR expires>?) AND COALESCE(confidence,1)>=? AND (locked=1${ids.length ? ` OR id IN (${marks(ids)})` : ""}${subjects.length ? ` OR subject IN (${marks(subjects)})` : ""})`,
-      )
-      .all(cutoff, cutoff, RECALL_CONFIDENCE, ...ids, ...subjects);
-    const lived = this.mind?.days.lived(cutoff);
-    const scored = [];
-    for (const m of candidates) {
-      const local = here.has(m.session_id) || m.session_id === "__shared__";
-      if (!this.permission(m, session, cutoff).recall) continue;
-      const overlap = oneSpeakerOverlap(m.content);
-      const relevance = overlap + (fts.has(m.id) ? 2 : 0);
-      const about = speakers.has(m.subject)
-        ? 3
-        : present.has(m.subject)
-          ? 1.5
-          : 0;
-      if (!relevance && !about && !m.locked) continue;
-      if (!local && !relevance && about < 3) continue;
-      // Something long untouched comes back only when it is really being
-      // talked about, or its person is speaking.
-      const idle = lived
-        ? lived.since(Math.max(m.created || 0, m.last_access || 0))
-        : 0;
-      const strong =
-        overlap >= 2 || speakers.has(String(m.subject)) || !!m.locked;
-      if (!strong && Number(m.importance || 0) < 0.6 && idle > MEMORY_IDLE_DAYS)
-        continue;
-      scored.push({
-        m,
-        local,
-        strong,
-        score:
-          relevance +
-          about +
-          (local ? 1 : 0) +
-          (m.locked ? 2 : 0) +
-          Number(m.importance || 0) +
-          (Number(m.confidence ?? 1) - 0.5) +
-          0.5 * 0.5 ** (idle / 30),
-        why: fts.has(m.id) ? "fts" : about ? "subject" : "related",
-      });
-    }
-    scored.sort((a, b) => b.score - a.score || b.m.created - a.m.created);
-    const selected = [];
-    if (recallIntent(rows)) {
-      // An explicit question about our past needs a range of places and
-      // aspects, not twelve local events with almost identical scores.
-      const elsewhere = scored.filter(
-        (item) =>
-          !item.local &&
-          item.m.discretion === "open" &&
-          speakers.has(String(item.m.subject)),
-      );
-      const covered = new Set();
-      for (const item of elsewhere) {
-        const key = `${item.m.subject}:${item.m.session_id}`;
-        if (covered.has(key)) continue;
-        selected.push(item);
-        covered.add(key);
-        if (selected.length === 4) break;
-      }
-      const kinds = new Set(selected.map((item) => item.m.type));
-      for (const item of elsewhere) {
-        if (selected.length >= 4) break;
-        if (selected.includes(item) || kinds.has(item.m.type)) continue;
-        selected.push(item);
-        kinds.add(item.m.type);
-      }
-    }
-    selected.push(
-      ...scored
-        .filter((item) => !selected.includes(item))
-        .slice(0, RECALL_LIMIT - selected.length),
-    );
-    if (touch) {
-      const access = db.prepare(
-        "UPDATE core_memories SET last_access=? WHERE id=?",
-      );
-      // A weak overlap does not count as remembering. Only a real cue, the
-      // person speaking, or a locked memory starts the quiet stretch again.
-      for (const { m, strong } of selected)
-        if (strong) access.run(cutoff, m.id);
-    }
-    return selected.map(({ m, local, why }) => {
-      const age = cutoff - Number(m.created || cutoff);
-      return {
-        id: m.id,
-        subject: m.subject,
-        content:
-          forSpeech && !this.permission(m, session, cutoff).disclose
-            ? "（关于此人的一条受限记忆；没有在这里复述具体内容的授权）"
-            : m.content,
-        type: m.type,
-        confidence: m.confidence,
-        importance: m.importance,
-        whySelected: why,
-        source: local
-          ? "这里"
-          : isPrivateSession(m.session_id)
-            ? "私聊里"
-            : "别的群里",
-        // Old news may no longer be true; she should know how old it is.
-        ...(age >= 7 * DAY ? { when: `${agoLabel(age)}知道的` } : {}),
-        ...(m.discretion === "private" && !local
-          ? { discretion: "私下知道的，不要当众说出口，也不要说出从哪听来" }
-          : {}),
-      };
-    });
-  }
-  secretsOutside(session) {
-    return this.#outside(session, "secret");
-  }
-  permission(memory, session, now = Date.now()) {
-    const local = this.scopes(session).includes(memory.session_id);
-    const saved = this.repo.db
-      .prepare(
-        "SELECT recall,disclose,expires FROM mind_memory_permissions WHERE memory_id=? AND session_id=?",
-      )
-      .get(memory.id, session);
-    if (saved && (!saved.expires || saved.expires > now))
-      return { recall: !!saved.recall, disclose: !!saved.disclose };
-    return {
-      recall: memory.discretion !== "secret" || local,
-      disclose: memory.discretion === "open" || local,
-    };
-  }
-  permissions(id) {
-    if (!this.repo.db.prepare("SELECT 1 FROM core_memories WHERE id=?").get(id))
-      throw Error("记忆不存在");
-    return this.repo.db
-      .prepare(
-        "SELECT session_id,recall,disclose,expires,updated FROM mind_memory_permissions WHERE memory_id=?",
-      )
-      .all(id);
-  }
-  setPermission(id, { session, recall, disclose, expires = null }) {
-    if (
-      !this.repo.db
-        .prepare("SELECT 1 FROM core_memories WHERE id=? AND status!='deleted'")
-        .get(id)
-    )
-      throw Error("记忆不存在");
-    if (!this.repo.db.prepare("SELECT 1 FROM sessions WHERE id=?").get(session))
-      throw Error("会话不存在");
-    if (
-      typeof recall !== "boolean" ||
-      typeof disclose !== "boolean" ||
-      (disclose && !recall)
-    )
-      throw Error("允许复述时也必须允许想起");
-    if (
-      expires !== null &&
-      (!Number.isSafeInteger(expires) || expires <= Date.now())
-    )
-      throw Error("授权到期时间无效");
-    const value = { recall, disclose, expires };
-    const db = this.repo.db,
-      now = Date.now();
-    db.exec("SAVEPOINT memory_permission");
-    try {
-      db.prepare(
-        "INSERT INTO mind_memory_permissions VALUES (?,?,?,?,?,?) ON CONFLICT(memory_id,session_id) DO UPDATE SET recall=excluded.recall,disclose=excluded.disclose,expires=excluded.expires,updated=excluded.updated",
-      ).run(id, session, +recall, +disclose, expires, now);
-      db.prepare(
-        "INSERT INTO mind_permission_events(memory_id,session_id,created,value) VALUES (?,?,?,?)",
-      ).run(id, session, now, JSON.stringify(value));
-      db.exec("RELEASE memory_permission");
-    } catch (error) {
-      db.exec("ROLLBACK TO memory_permission");
-      db.exec("RELEASE memory_permission");
-      throw error;
-    }
-    this.repo.store.revision++;
-    return value;
-  }
-  // Private facts may be recalled, with a warning. They still must not leave
-  // in the words she actually sends.
-  privateOutside(session) {
-    return this.#outside(session, "private");
-  }
-  #outside(session, discretion) {
-    const here = new Set(this.scopes(session));
-    return this.repo.db
-      .prepare(
-        "SELECT id,session_id,subject,content FROM core_memories WHERE discretion=? AND status='confirmed' ORDER BY updated DESC LIMIT 200",
-      )
-      .all(discretion)
-      .filter(
-        (m) =>
-          !here.has(m.session_id) &&
-          !this.permission({ ...m, discretion }, session).disclose,
-      );
-  }
-  update(id, patch) {
-    const db = this.repo.db,
-      old = db.prepare("SELECT * FROM core_memories WHERE id=?").get(id);
-    if (!old) throw Error("记忆不存在");
-    const m = { ...old, ...patch };
-    if (patch.discretion !== undefined && !DISCRETIONS.has(patch.discretion))
-      throw Error("分寸标签无效");
-    db.exec("SAVEPOINT memory_update");
-    try {
-      db.prepare(
-        "INSERT INTO core_memory_versions(memory_id,time,value) VALUES (?,?,?)",
-      ).run(id, Date.now(), JSON.stringify(old));
-      db.prepare(
-        "UPDATE core_memories SET content=?,status=?,locked=?,confidence=?,importance=?,expires=?,sources=?,discretion=?,updated=?,version=version+1 WHERE id=?",
-      ).run(
-        m.content,
-        m.status,
-        +m.locked,
-        m.confidence,
-        m.importance,
-        m.expires || null,
-        m.sources,
-        m.discretion || "open",
-        Date.now(),
-        id,
-      );
-      indexMemory(db, id, m.content);
-      db.exec("RELEASE memory_update");
-    } catch (e) {
-      db.exec("ROLLBACK TO memory_update");
-      db.exec("RELEASE memory_update");
-      throw e;
-    }
-    this.repo.store.revision++;
-  }
-  // Withdrawal leaves a tombstone, so a later consolidation cannot bring the
-  // same belief back.
-  revoke(id, reason = "") {
-    const row = this.repo.db
-      .prepare("SELECT * FROM core_memories WHERE id=?")
-      .get(id);
-    if (!row) throw Error("记忆不存在");
-    if (row.locked) throw Error("记忆已锁定，请先解锁");
-    this.update(id, { status: "deleted" });
-    this.repo.db
-      .prepare(
-        "INSERT INTO mind_revocations(id,created,target_kind,target_id,content,reason) VALUES (?,?,?,?,?,?)",
-      )
-      .run(
-        randomUUID(),
-        Date.now(),
-        "memory",
-        id,
-        `${row.subject}\n${row.content}`,
-        text(reason, 200),
-      );
-  }
-  revokedFor(subject) {
-    return this.repo.db
-      .prepare(
-        "SELECT content FROM mind_revocations WHERE target_kind='memory' AND content LIKE ?",
-      )
-      .all(`${subject}\n%`)
-      .map((row) => row.content.slice(String(subject).length + 1));
-  }
-  deleteBatch(session, ids = [], { all = false } = {}) {
-    const db = this.repo.db;
-    if (
-      typeof session !== "string" ||
-      !session ||
-      !db.prepare("SELECT id FROM sessions WHERE id=?").get(session)
-    )
-      throw Error("会话不存在");
-    if (!all && !Array.isArray(ids)) throw Error("请选择要删除的记忆");
-    const uniqueIds = [...new Set((Array.isArray(ids) ? ids : []).map(String))];
-    if (!all && (!uniqueIds.length || uniqueIds.length > 500))
-      throw Error("请选择 1–500 条记忆");
-    if (all && uniqueIds.length) throw Error("全选删除不需要传入记忆 ID");
-    const rows = all
-      ? db
-          .prepare(
-            "SELECT id,session_id,locked FROM core_memories WHERE session_id=? AND status!='deleted'",
-          )
-          .all(session)
-      : uniqueIds.map((id) =>
-          db
-            .prepare(
-              "SELECT id,session_id,locked FROM core_memories WHERE id=?",
-            )
-            .get(id),
-        );
-    if (!all && (rows.some((row) => !row) || rows.length !== uniqueIds.length))
-      throw Error("只能删除当前会话中存在的记忆");
-    if (rows.some((row) => row.session_id !== session))
-      throw Error("只能删除当前会话的记忆，共享或继承记忆请单独管理");
-    if (rows.some((row) => row.locked))
-      throw Error("包含已锁定记忆，请先解锁后再删除");
-    if (!rows.length) return { deleted: 0 };
-    const placeholders = rows.map(() => "?").join(",");
-    const rowIds = rows.map((row) => row.id);
-    db.exec("BEGIN IMMEDIATE");
-    try {
-      db.prepare(
-        `DELETE FROM core_memory_versions WHERE memory_id IN (${placeholders})`,
-      ).run(...rowIds);
-      db.prepare(
-        `DELETE FROM core_memory_fts WHERE memory_id IN (${placeholders})`,
-      ).run(...rowIds);
-      db.prepare(`DELETE FROM core_memories WHERE id IN (${placeholders})`).run(
-        ...rowIds,
-      );
-      db.exec("COMMIT");
-    } catch (e) {
-      db.exec("ROLLBACK");
-      throw e;
-    }
-    this.repo.store.revision++;
-    return { deleted: rows.length };
-  }
-  insert({
-    session,
-    subject,
-    content,
-    type = "event",
-    confidence = 0.8,
-    importance = 0.5,
-    sources = [],
-    discretion = "open",
-    locked = false,
-    time = Date.now(),
-  }) {
-    const db = this.repo.db;
-    if (
-      db
-        .prepare(
-          "SELECT 1 FROM core_memories WHERE subject=? AND content=? AND status!='deleted'",
-        )
-        .get(subject, content)
-    )
-      return null;
-    if (this.revokedFor(subject).some((old) => similar(old, content, 0.75)))
-      return null;
-    const id = randomUUID();
-    db.prepare(
-      "INSERT INTO core_memories(id,session_id,subject,content,type,confidence,importance,status,locked,sources,created,updated,discretion) VALUES (?,?,?,?,?,?,?,'confirmed',?,?,?,?,?)",
-    ).run(
-      id,
-      session,
-      subject,
-      content,
-      type,
-      clamp(confidence),
-      clamp(importance),
-      +locked,
-      JSON.stringify(sources),
-      time,
-      time,
-      DISCRETIONS.has(discretion) ? discretion : "open",
-    );
-    indexMemory(db, id, content);
-    return id;
-  }
-  // "记住，我……" is a friend asking to be remembered, not a draft for review.
-  remember(message) {
-    const value = String(message.text || "");
-    if (/不要记|别记|不许记/.test(value)) return null;
-    const match = value.match(
-      /(?:请)?(?:记住|记一下)[，,：:\s]*(我[^\n]{2,200})[。！!]?$/u,
-    );
-    const name = requestedName(value);
-    if ((!match && !name) || SENSITIVE.test(value) || hasCredential(value))
-      return null;
-    const said = name
-      ? `我希望被称呼为${name}`
-      : match[1].replace(/[。！!]+$/, "").trim();
-    const content = /我/.test(said.slice(1))
-      ? `原话：${said}`
-      : said.replace(/^我/, "");
-    const privateChat = message.kind === "private";
-    const quiet =
-      secretRequest(value) ||
-      this.#recentSecret(message.sessionId, message.userId, message.seq);
-    const id = this.insert({
-      session: message.sessionId,
-      subject: String(message.userId),
-      content,
-      type: "preference",
-      confidence: 0.95,
-      importance: 0.7,
-      sources: [
-        {
-          id: message.seq,
-          text: value.slice(-300),
-          speaker: message.userId,
-          time: message.time,
-          certainty: "self_report",
-        },
-      ],
-      discretion: quiet ? "secret" : privateChat ? "private" : "open",
-      time: Number(message.time) || Date.now(),
-    });
-    if (id) this.repo.store.revision++;
-    return id;
-  }
-  // "别告诉别人" then, after more of their own messages, "记住，我……" is still
-  // a secret until this stretch is consolidated. Only words she could have
-  // heard count. A request from the previous stretch does not carry over.
-  #recentSecret(session, userId, seq) {
-    if (!session || seq == null) return false;
-    const rows = this.repo.db
-      .prepare(
-        `SELECT payload FROM core_events
-         WHERE session_id=? AND role='user' AND seq<?
-         AND seq>COALESCE((SELECT seq FROM core_cursors WHERE session_id=?),0)
-         AND json_extract(payload,'$.userId')=?
-         AND seq NOT IN (SELECT seq FROM mind_unlived)
-         ORDER BY seq DESC LIMIT 40`,
-      )
-      .all(session, seq, session, String(userId));
-    return rows.some((row) => {
-      let payload = {};
-      try {
-        payload = JSON.parse(row.payload);
-      } catch {
-        payload = {};
-      }
-      return secretRequest(payload.text);
-    });
-  }
-  pending(session) {
-    return this.repo.db
-      .prepare(
-        "SELECT COUNT(*) n FROM core_events WHERE session_id=? AND role='user' AND seq>COALESCE((SELECT seq FROM core_cursors WHERE session_id=?),0) AND seq NOT IN (SELECT seq FROM mind_unlived) AND COALESCE(json_extract(payload,'$.simulated'),0)=0",
-      )
-      .get(session, session).n;
-  }
-  due(session, now = Date.now()) {
-    return this.mind
-      ? consolidationDecision(this.mind, session, now)
-      : { due: this.pending(session) >= BLOCK_USERS };
-  }
-  // What she already remembers about the people in this stretch, so the
-  // same fact is not written twice and a changed one can replace the old.
-  known(session, block) {
-    const here = new Set(this.scopes(session));
-    const known = [];
-    const refs = new Map();
-    const read = this.repo.db.prepare(
-      "SELECT id,subject,content,session_id,discretion FROM core_memories WHERE subject=? AND status='confirmed' ORDER BY importance DESC, updated DESC LIMIT 5",
-    );
-    const subjects = new Set(
-      block.filter((m) => m.role === "user").map((m) => String(m.userId)),
-    );
-    for (const subject of subjects)
-      for (const k of read.all(subject)) {
-        if (known.length >= 20) return { known, refs };
-        if (k.discretion !== "open" && !here.has(k.session_id)) continue;
-        const ref = `k${known.length + 1}`;
-        refs.set(ref, k);
-        known.push({ ref, subject: k.subject, content: text(k.content, 80) });
-      }
-    return { known, refs };
-  }
-  // A newer fact replaces an older one; the old stays visible with its
-  // versions but is no longer recalled.
-  supersede(id, by) {
-    const old = this.repo.db
-      .prepare("SELECT * FROM core_memories WHERE id=?")
-      .get(id);
-    if (!old || old.locked || old.status !== "confirmed" || id === by)
-      return false;
-    this.update(id, { status: "superseded" });
-    this.repo.db
-      .prepare("UPDATE core_memories SET superseded_by=? WHERE id=?")
-      .run(by, id);
-    return true;
-  }
-  // Things said in this stretch that are still to come. Someone's plans and
-  // dates must come from their own words; a promise must be her own.
-  anticipate(list, { block, session, names, privateChat, now }) {
-    if (!this.mind?.anticipations) return 0;
-    let added = 0;
-    for (const a of (Array.isArray(list) ? list : []).slice(0, 8)) {
-      if (!a || typeof a.content !== "string" || !a.content.trim()) continue;
-      const kind = ["event", "promise", "date"].includes(a.kind)
-        ? a.kind
-        : null;
-      const cited = block.filter((m) =>
-        (Array.isArray(a.sources) ? a.sources : []).map(Number).includes(m.seq),
-      );
-      if (!kind || !cited.length || cited.some((m) => m.artifact)) continue;
-      let subject = a.subject == null ? null : String(a.subject);
-      if (kind === "promise") {
-        if (!cited.every((m) => m.role === "assistant")) continue;
-        if (
-          subject &&
-          !block.some((m) => m.role === "user" && String(m.userId) === subject)
-        )
-          subject = null;
-      } else if (
-        !subject ||
-        !cited.some((m) => m.role === "user" && String(m.userId) === subject)
-      )
-        continue;
-      const first = Math.min(...cited.map((m) => m.seq));
-      const last = Math.max(...cited.map((m) => m.seq));
-      const secret =
-        block.some(
-          (m) =>
-            m.role === "user" &&
-            m.seq <= last &&
-            m.seq >= first - 6 &&
-            secretRequest(m.text),
-        ) || askedSecret(block, subject, last);
-      if (
-        !grounded(
-          a.content,
-          cited.map((m) => m.text || ""),
-        )
-      )
-        continue;
-      const result = this.mind.anticipations.add({
-        kind,
-        subject,
-        session,
-        content: applySpeakerNames(a.content.trim(), names),
-        due: a.due,
-        recurrence: a.recurrence,
-        discretion: secret ? "secret" : privateChat ? "private" : "open",
-        sources: cited.map((m) => m.seq),
-        origin: "memory",
-        time: now,
-      });
-      if (result.id) added++;
-    }
-    return added;
-  }
-  async consolidate(
-    session,
-    profile,
-    prompt,
-    trace,
-    {
-      force = false,
-      simulated = false,
-      models = this.models,
-      now = Date.now(),
-    } = {},
-  ) {
-    if (this.busy.has(session)) return;
-    if (!force && now - (this.lastAttempt.get(session) || 0) < 60000) return;
-    this.busy.add(session);
-    try {
-      const db = this.repo.db;
-      const cursor =
-        db
-          .prepare("SELECT seq FROM core_cursors WHERE session_id=?")
-          .get(session)?.seq || 0;
-      const aside = new Set(
-        db
-          .prepare("SELECT seq FROM mind_unlived")
-          .all()
-          .map((row) => row.seq),
-      );
-      const rows = this.repo
-        .eventsAfter(session, cursor, { simulated, limit: 200 })
-        .filter(
-          (m) =>
-            m.time <= now &&
-            !aside.has(m.seq) &&
-            !/^\[(图片|表情|媒体)\]+$/.test(m.text || ""),
-        );
-      const users = rows.filter((m) => m.role === "user");
-      if (!users.length || (!force && !this.due(session, now).due)) return;
-      this.lastAttempt.set(session, now);
-      // Her answers to the block's last messages belong with that block.
-      const next = users[BLOCK_USERS]?.seq ?? Number.MAX_SAFE_INTEGER;
-      const block = rows.filter((m) => m.seq < next);
-      const last = block.at(-1).seq;
-      const names = speakerNames(db, [session]);
-      const self = this.mind?.nature.current().name || "self";
-      const zone = this.mind?.timeZone() || "Asia/Shanghai";
-      const { known, refs } = this.known(session, block);
-      const value = await models.call(
-        profile,
-        "memory",
-        prompt +
-          "\nartifact 标记的是作品正文，fiction 的人物/剧情和 reference 的游戏资料情节不能作为现实人物事实；不要把正文中的约定提取成她现实接受的承诺。读者讨论作品时保留作品语境。",
-        {
-          sessionId: session,
-          self,
-          privateChat: isPrivateSession(session),
-          ...(known.length ? { known } : {}),
-          messages: block.map((m) => ({
-            id: m.seq,
-            userId: m.role === "assistant" ? "self" : m.userId,
-            name:
-              m.role === "assistant"
-                ? self
-                : readableName(m.name, m.userId) ||
-                  names.get(String(m.userId)) ||
-                  m.userId,
-            role: m.role,
-            ...(m.artifact ? { artifact: m.artifact } : {}),
-            text: String(m.text || "").slice(0, 600),
-            // A readable local time lets "明天" become a date.
-            localTime: localClock(m.time, zone).local,
-          })),
-        },
-        trace,
-      );
-      if (typeof value?.summary !== "string" || !Array.isArray(value.facts))
-        throw Error("记忆整理格式无效");
-      db.exec("BEGIN IMMEDIATE");
-      try {
-        const said = block.map((m) => m.text || "");
-        const raw = value.summary.trim();
-        const summary =
-          raw && grounded(raw, said) ? applySpeakerNames(raw, names) : "";
-        const privateChat = isPrivateSession(session);
-        const keptFacts = [];
-        for (const f of value.facts.slice(0, 30)) {
-          if (
-            typeof f?.content !== "string" ||
-            !f.content.trim() ||
-            f.content.length > 2000 ||
-            !Array.isArray(f.sources) ||
-            !f.sources.length ||
-            !Number.isFinite(f.confidence) ||
-            !Number.isFinite(f.importance) ||
-            ["joke", "hearsay"].includes(f.certainty) ||
-            SENSITIVE.test(f.content) ||
-            hasCredential(f.content)
-          )
-            continue;
-          const sources = block.filter((m) => f.sources.includes(m.seq));
-          if (
-            sources.length !== f.sources.length ||
-            !sources.every(
-              (m) =>
-                m.role === "user" && String(m.userId) === String(f.subject),
-            )
-          )
-            continue;
-          if (
-            !grounded(
-              f.content,
-              sources.map((m) => m.text || ""),
-            )
-          )
-            continue;
-          const secret =
-            f.discretion === "secret" ||
-            askedSecret(block, f.subject, Math.max(...f.sources));
-          const content = applySpeakerNames(f.content.trim(), names);
-          const discretion = secret
-            ? "secret"
-            : privateChat || f.discretion === "private"
-              ? "private"
-              : "open";
-          const id = this.insert({
-            session,
-            subject: String(f.subject),
-            content,
-            type: String(f.type || "event").slice(0, 20),
-            confidence:
-              f.certainty === "inferred"
-                ? Math.min(0.6, f.confidence)
-                : f.confidence,
-            importance: f.importance,
-            sources: sources.map((m) => ({
-              id: m.seq,
-              text: m.text,
-              speaker: m.userId,
-              time: m.time,
-              certainty: f.certainty || "unknown",
-            })),
-            discretion,
-            time: now,
-          });
-          if (!id) continue;
-          keptFacts.push({
-            subject: String(f.subject),
-            content,
-            discretion,
-          });
-          for (const ref of Array.isArray(f.supersedes) ? f.supersedes : []) {
-            const old = refs.get(String(ref));
-            if (old && String(old.subject) === String(f.subject))
-              this.supersede(old.id, id);
-          }
-        }
-        db.prepare(
-          "INSERT OR IGNORE INTO core_stages VALUES (?,?,?,?,?,?)",
-        ).run(
-          randomUUID(),
-          session,
-          block[0].seq,
-          last,
-          now,
-          JSON.stringify({ summary, facts: keptFacts }),
-        );
-        this.anticipate(value.anticipations, {
-          block,
-          session,
-          names,
-          privateChat,
-          now,
-        });
-        // What she herself said and meant becomes part of who she is. Her
-        // opinions about topics are not: one stretch of talk can add only a
-        // couple of views, and the rest stays in the summary.
-        const valid = new Set(
-          block.filter((m) => m.role === "assistant").map((m) => `m:${m.seq}`),
-        );
-        let views = 0;
-        for (const note of (Array.isArray(value.self) ? value.self : []).slice(
-          0,
-          6,
-        )) {
-          if (note?.kind === "view" && ++views > MEMORY_VIEWS_PER_BLOCK)
-            continue;
-          this.mind?.self.propose(
-            { ...note, action: "new", session },
-            { valid, origin: "memory", time: now },
-          );
-        }
-        db.prepare(
-          "INSERT INTO core_cursors VALUES (?,?) ON CONFLICT(session_id) DO UPDATE SET seq=excluded.seq",
-        ).run(session, last);
-        db.exec("COMMIT");
-        this.lastAttempt.delete(session);
-      } catch (e) {
-        db.exec("ROLLBACK");
-        throw e;
-      }
-    } finally {
-      this.busy.delete(session);
-    }
-  }
-}
+import { randomUUID } from "node:crypto";
+import {
+  parseSessionKey,
+  scopedSessionAliases,
+} from "../channels/session-key.js";
+import { localClock } from "../core/conversation-cues.js";
+import { lexicalTerms } from "../knowledge/retrieval.js";
+import { indexMemory } from "../knowledge/schema.js";
+import {
+  applySpeakerNames,
+  readableName,
+  speakerNames,
+} from "../core/speaker-names.js";
+import { agoLabel } from "./clock.js";
+import { hasCredential, secretRequest } from "./guard.js";
+import { MEMORY_IDLE_DAYS, grounded } from "./salience.js";
+import { DAY, clamp, parse, similar, text } from "./util.js";
+import { recallIntent } from "./continuity.js";
+import { consolidationDecision } from "./memory-policy.js";
+import { requestedName } from "../core/person-name.js";
+import { isFormatFailure, providerWaitMs } from "../core/backoff.js";
+
+const RECALL_CONFIDENCE = 0.5;
+const RECALL_LIMIT = 12;
+const RECALL_TERMS = 64;
+const FTS_CANDIDATES = 200;
+const BLOCK_USERS = 40;
+const MIN_BLOCK_USERS = 10;
+// One stretch of talk adds at most this many views to who she is.
+const MEMORY_VIEWS_PER_BLOCK = 2;
+const SENSITIVE = /密码|验证码|密钥|身份证|银行卡|api.?key|token/i;
+const DISCRETIONS = new Set(["open", "private", "secret"]);
+
+// A request to keep something quiet stays with that person for the rest of
+// this stretch. Other people's messages in between do not wash it out, and
+// it does not make anyone else's words a secret.
+function askedSecret(block, subject, beforeSeq) {
+  if (!subject) return false;
+  return block.some(
+    (m) =>
+      m.role === "user" &&
+      String(m.userId) === String(subject) &&
+      m.seq <= beforeSeq &&
+      secretRequest(m.text),
+  );
+}
+
+// Words from the newest messages first, so a long batch still searches for
+// what was just said.
+function recallQuery(rows) {
+  const terms = [];
+  const seen = new Set();
+  for (const row of [...rows].reverse()) {
+    if (row.role === "assistant") continue;
+    for (const term of lexicalTerms(row.text || ""))
+      if (!seen.has(term)) {
+        seen.add(term);
+        terms.push(term);
+      }
+  }
+  return terms
+    .slice(0, RECALL_TERMS)
+    .map((term) => `"${term.replace(/"/g, "")}"`)
+    .filter((term) => term.length > 2)
+    .join(" OR ");
+}
+const marks = (list) => list.map(() => "?").join(",");
+
+// How a fact was learned, from the certainty its sources carry.
+function basisOf(sources) {
+  const certainty = (Array.isArray(sources) ? sources : []).map(
+    (s) => s?.certainty,
+  );
+  if (certainty.includes("inferred")) return "inferred";
+  if (certainty.includes("hearsay")) return "hearsay";
+  return "stated";
+}
+
+export function isPrivateSession(session) {
+  const value = String(session || "");
+  if (value.startsWith("__private__")) return true;
+  try {
+    return parseSessionKey(value).kind === "private";
+  } catch {
+    return value.startsWith("private");
+  }
+}
+
+// One memory for all of her conversations. Where a fact came from travels
+// with it, and so does how freely she may repeat it.
+export class MemoryManager {
+  constructor(repo, models, mind) {
+    this.repo = repo;
+    this.models = models;
+    this.mind = mind;
+    this.busy = new Set();
+    this.lastAttempt = new Map();
+  }
+  scopes(session) {
+    const scopes = new Set([session, "__shared__"]);
+    try {
+      for (const id of scopedSessionAliases(this.repo.db, session))
+        scopes.add(id);
+      const parsed = parseSessionKey(session);
+      if (parsed.kind === "private")
+        scopes.add(`__private__:${parsed.nativeId}`);
+    } catch {
+      /* keep session + shared */
+    }
+    return [...scopes];
+  }
+  retrieve(
+    session,
+    rows,
+    cutoff = Date.now(),
+    { people = [], touch = true, forSpeech = false } = {},
+  ) {
+    const db = this.repo.db;
+    const here = new Set(this.scopes(session));
+    here.delete("__shared__");
+    const speakers = new Set(
+      rows
+        .filter((r) => r.role !== "assistant")
+        .map((r) => String(r.userId || ""))
+        .filter(Boolean),
+    );
+    const present = new Set(people.map(String));
+    // Two people cannot be added together, and her own line does not count
+    // as the world talking about what she remembers.
+    const saidBy = new Map();
+    for (const row of rows) {
+      if (row.role === "assistant") continue;
+      const id = String(row.userId || "");
+      if (!id) continue;
+      const terms = saidBy.get(id) || new Set();
+      for (const term of lexicalTerms(row.text || "")) terms.add(term);
+      saidBy.set(id, terms);
+    }
+    const oneSpeakerOverlap = (content) => {
+      const terms = lexicalTerms(content);
+      let best = 0;
+      for (const said of saidBy.values()) {
+        let count = 0;
+        for (const term of terms) if (said.has(term)) count++;
+        if (count > best) best = count;
+      }
+      return best;
+    };
+    const fts = new Set();
+    const match = recallQuery(rows);
+    if (match)
+      try {
+        for (const hit of db
+          .prepare(
+            "SELECT memory_id FROM core_memory_fts WHERE tokens MATCH ? ORDER BY rank LIMIT ?",
+          )
+          .all(match, FTS_CANDIDATES))
+          fts.add(hit.memory_id);
+      } catch {
+        /* MATCH syntax */
+      }
+    // Only what could matter is read: words in common, people here, or what
+    // was locked to stay in mind.
+    const ids = [...fts];
+    const subjects = [...new Set([...speakers, ...present])].filter(Boolean);
+    const candidates = db
+      .prepare(
+        `SELECT * FROM core_memories WHERE status='confirmed' AND created<=? AND (expires IS NULL OR expires>?) AND COALESCE(confidence,1)>=? AND (locked=1${ids.length ? ` OR id IN (${marks(ids)})` : ""}${subjects.length ? ` OR subject IN (${marks(subjects)})` : ""})`,
+      )
+      .all(cutoff, cutoff, RECALL_CONFIDENCE, ...ids, ...subjects);
+    const lived = this.mind?.days.lived(cutoff);
+    const scored = [];
+    for (const m of candidates) {
+      const local = here.has(m.session_id) || m.session_id === "__shared__";
+      if (!this.permission(m, session, cutoff).recall) continue;
+      const overlap = oneSpeakerOverlap(m.content);
+      const relevance = overlap + (fts.has(m.id) ? 2 : 0);
+      const about = speakers.has(m.subject)
+        ? 3
+        : present.has(m.subject)
+          ? 1.5
+          : 0;
+      if (!relevance && !about && !m.locked) continue;
+      if (!local && !relevance && about < 3) continue;
+      // Something long untouched comes back only when it is really being
+      // talked about, or its person is speaking.
+      const idle = lived
+        ? lived.since(Math.max(m.created || 0, m.last_access || 0))
+        : 0;
+      const strong =
+        overlap >= 2 || speakers.has(String(m.subject)) || !!m.locked;
+      if (!strong && Number(m.importance || 0) < 0.6 && idle > MEMORY_IDLE_DAYS)
+        continue;
+      scored.push({
+        m,
+        local,
+        strong,
+        score:
+          relevance +
+          about +
+          (local ? 1 : 0) +
+          (m.locked ? 2 : 0) +
+          Number(m.importance || 0) +
+          (Number(m.confidence ?? 1) - 0.5) +
+          0.5 * 0.5 ** (idle / 30),
+        why: fts.has(m.id) ? "fts" : about ? "subject" : "related",
+      });
+    }
+    scored.sort((a, b) => b.score - a.score || b.m.created - a.m.created);
+    const selected = [];
+    if (recallIntent(rows)) {
+      // An explicit question about our past needs a range of places and
+      // aspects, not twelve local events with almost identical scores.
+      const elsewhere = scored.filter(
+        (item) =>
+          !item.local &&
+          item.m.discretion === "open" &&
+          speakers.has(String(item.m.subject)),
+      );
+      const covered = new Set();
+      for (const item of elsewhere) {
+        const key = `${item.m.subject}:${item.m.session_id}`;
+        if (covered.has(key)) continue;
+        selected.push(item);
+        covered.add(key);
+        if (selected.length === 4) break;
+      }
+      const kinds = new Set(selected.map((item) => item.m.type));
+      for (const item of elsewhere) {
+        if (selected.length >= 4) break;
+        if (selected.includes(item) || kinds.has(item.m.type)) continue;
+        selected.push(item);
+        kinds.add(item.m.type);
+      }
+    }
+    selected.push(
+      ...scored
+        .filter((item) => !selected.includes(item))
+        .slice(0, RECALL_LIMIT - selected.length),
+    );
+    if (touch) {
+      const access = db.prepare(
+        "UPDATE core_memories SET last_access=? WHERE id=?",
+      );
+      // A weak overlap does not count as remembering. Only a real cue, the
+      // person speaking, or a locked memory starts the quiet stretch again.
+      for (const { m, strong } of selected)
+        if (strong) access.run(cutoff, m.id);
+    }
+    return selected.map(({ m, local, why }) => {
+      const age = cutoff - Number(m.created || cutoff);
+      return {
+        id: m.id,
+        subject: m.subject,
+        content:
+          forSpeech && !this.permission(m, session, cutoff).disclose
+            ? "（关于此人的一条受限记忆；没有在这里复述具体内容的授权）"
+            : m.content,
+        type: m.type,
+        confidence: m.confidence,
+        importance: m.importance,
+        whySelected: why,
+        source: local
+          ? "这里"
+          : isPrivateSession(m.session_id)
+            ? "私聊里"
+            : "别的群里",
+        // Old news may no longer be true; she should know how old it is.
+        ...(age >= 7 * DAY ? { when: `${agoLabel(age)}知道的` } : {}),
+        ...(m.discretion === "private" && !local
+          ? { discretion: "私下知道的，不要当众说出口，也不要说出从哪听来" }
+          : {}),
+      };
+    });
+  }
+  secretsOutside(session) {
+    return this.#outside(session, "secret");
+  }
+  permission(memory, session, now = Date.now()) {
+    const local = this.scopes(session).includes(memory.session_id);
+    const saved = this.repo.db
+      .prepare(
+        "SELECT recall,disclose,expires FROM mind_memory_permissions WHERE memory_id=? AND session_id=?",
+      )
+      .get(memory.id, session);
+    if (saved && (!saved.expires || saved.expires > now))
+      return { recall: !!saved.recall, disclose: !!saved.disclose };
+    return {
+      recall: memory.discretion !== "secret" || local,
+      disclose: memory.discretion === "open" || local,
+    };
+  }
+  permissions(id) {
+    if (!this.repo.db.prepare("SELECT 1 FROM core_memories WHERE id=?").get(id))
+      throw Error("记忆不存在");
+    return this.repo.db
+      .prepare(
+        "SELECT session_id,recall,disclose,expires,updated FROM mind_memory_permissions WHERE memory_id=?",
+      )
+      .all(id);
+  }
+  setPermission(id, { session, recall, disclose, expires = null }) {
+    if (
+      !this.repo.db
+        .prepare("SELECT 1 FROM core_memories WHERE id=? AND status!='deleted'")
+        .get(id)
+    )
+      throw Error("记忆不存在");
+    if (!this.repo.db.prepare("SELECT 1 FROM sessions WHERE id=?").get(session))
+      throw Error("会话不存在");
+    if (
+      typeof recall !== "boolean" ||
+      typeof disclose !== "boolean" ||
+      (disclose && !recall)
+    )
+      throw Error("允许复述时也必须允许想起");
+    if (
+      expires !== null &&
+      (!Number.isSafeInteger(expires) || expires <= Date.now())
+    )
+      throw Error("授权到期时间无效");
+    const value = { recall, disclose, expires };
+    const db = this.repo.db,
+      now = Date.now();
+    db.exec("SAVEPOINT memory_permission");
+    try {
+      db.prepare(
+        "INSERT INTO mind_memory_permissions VALUES (?,?,?,?,?,?) ON CONFLICT(memory_id,session_id) DO UPDATE SET recall=excluded.recall,disclose=excluded.disclose,expires=excluded.expires,updated=excluded.updated",
+      ).run(id, session, +recall, +disclose, expires, now);
+      db.prepare(
+        "INSERT INTO mind_permission_events(memory_id,session_id,created,value) VALUES (?,?,?,?)",
+      ).run(id, session, now, JSON.stringify(value));
+      db.exec("RELEASE memory_permission");
+    } catch (error) {
+      db.exec("ROLLBACK TO memory_permission");
+      db.exec("RELEASE memory_permission");
+      throw error;
+    }
+    this.repo.store.revision++;
+    return value;
+  }
+  // Private facts may be recalled, with a warning. They still must not leave
+  // in the words she actually sends.
+  privateOutside(session) {
+    return this.#outside(session, "private");
+  }
+  #outside(session, discretion) {
+    const here = new Set(this.scopes(session));
+    return this.repo.db
+      .prepare(
+        "SELECT id,session_id,subject,content FROM core_memories WHERE discretion=? AND status='confirmed' ORDER BY updated DESC LIMIT 200",
+      )
+      .all(discretion)
+      .filter(
+        (m) =>
+          !here.has(m.session_id) &&
+          !this.permission({ ...m, discretion }, session).disclose,
+      );
+  }
+  update(id, patch) {
+    const db = this.repo.db,
+      old = db.prepare("SELECT * FROM core_memories WHERE id=?").get(id);
+    if (!old) throw Error("记忆不存在");
+    const m = { ...old, ...patch };
+    if (patch.discretion !== undefined && !DISCRETIONS.has(patch.discretion))
+      throw Error("分寸标签无效");
+    db.exec("SAVEPOINT memory_update");
+    try {
+      db.prepare(
+        "INSERT INTO core_memory_versions(memory_id,time,value) VALUES (?,?,?)",
+      ).run(id, Date.now(), JSON.stringify(old));
+      db.prepare(
+        "UPDATE core_memories SET content=?,status=?,locked=?,confidence=?,importance=?,expires=?,sources=?,discretion=?,updated=?,version=version+1 WHERE id=?",
+      ).run(
+        m.content,
+        m.status,
+        +m.locked,
+        m.confidence,
+        m.importance,
+        m.expires || null,
+        m.sources,
+        m.discretion || "open",
+        Date.now(),
+        id,
+      );
+      indexMemory(db, id, m.content);
+      db.exec("RELEASE memory_update");
+    } catch (e) {
+      db.exec("ROLLBACK TO memory_update");
+      db.exec("RELEASE memory_update");
+      throw e;
+    }
+    this.mind?.recall?.sync("fact", id);
+    this.repo.store.revision++;
+  }
+  // Her own forgetting leaves the record and hides it from ordinary recall.
+  // A person's request to delete still removes the source, the index and the vector.
+  archive(id) {
+    this.update(id, { status: "archived" });
+    return { id, status: "archived" };
+  }
+  // Withdrawal leaves a tombstone, so a later consolidation cannot bring the
+  // same belief back.
+  revoke(id, reason = "") {
+    const row = this.repo.db
+      .prepare("SELECT * FROM core_memories WHERE id=?")
+      .get(id);
+    if (!row) throw Error("记忆不存在");
+    if (row.locked) throw Error("记忆已锁定，请先解锁");
+    this.update(id, { status: "deleted" });
+    this.repo.db
+      .prepare(
+        "INSERT INTO mind_revocations(id,created,target_kind,target_id,content,reason) VALUES (?,?,?,?,?,?)",
+      )
+      .run(
+        randomUUID(),
+        Date.now(),
+        "memory",
+        id,
+        `${row.subject}\n${row.content}`,
+        text(reason, 200),
+      );
+  }
+  revokedFor(subject) {
+    return this.repo.db
+      .prepare(
+        "SELECT content FROM mind_revocations WHERE target_kind='memory' AND content LIKE ?",
+      )
+      .all(`${subject}\n%`)
+      .map((row) => row.content.slice(String(subject).length + 1));
+  }
+  deleteBatch(session, ids = [], { all = false } = {}) {
+    const db = this.repo.db;
+    if (
+      typeof session !== "string" ||
+      !session ||
+      !db.prepare("SELECT id FROM sessions WHERE id=?").get(session)
+    )
+      throw Error("会话不存在");
+    if (!all && !Array.isArray(ids)) throw Error("请选择要删除的记忆");
+    const uniqueIds = [...new Set((Array.isArray(ids) ? ids : []).map(String))];
+    if (!all && (!uniqueIds.length || uniqueIds.length > 500))
+      throw Error("请选择 1–500 条记忆");
+    if (all && uniqueIds.length) throw Error("全选删除不需要传入记忆 ID");
+    const rows = all
+      ? db
+          .prepare(
+            "SELECT id,session_id,locked FROM core_memories WHERE session_id=? AND status!='deleted'",
+          )
+          .all(session)
+      : uniqueIds.map((id) =>
+          db
+            .prepare(
+              "SELECT id,session_id,locked FROM core_memories WHERE id=?",
+            )
+            .get(id),
+        );
+    if (!all && (rows.some((row) => !row) || rows.length !== uniqueIds.length))
+      throw Error("只能删除当前会话中存在的记忆");
+    if (rows.some((row) => row.session_id !== session))
+      throw Error("只能删除当前会话的记忆，共享或继承记忆请单独管理");
+    if (rows.some((row) => row.locked))
+      throw Error("包含已锁定记忆，请先解锁后再删除");
+    if (!rows.length) return { deleted: 0 };
+    const placeholders = rows.map(() => "?").join(",");
+    const rowIds = rows.map((row) => row.id);
+    db.exec("BEGIN IMMEDIATE");
+    try {
+      db.prepare(
+        `DELETE FROM core_memory_versions WHERE memory_id IN (${placeholders})`,
+      ).run(...rowIds);
+      db.prepare(
+        `DELETE FROM core_memory_fts WHERE memory_id IN (${placeholders})`,
+      ).run(...rowIds);
+      db.prepare(`DELETE FROM core_memories WHERE id IN (${placeholders})`).run(
+        ...rowIds,
+      );
+      // Deleted means deleted: the searchable copy and its vectors go too.
+      for (const id of rowIds) this.mind?.recall?.store.remove(`fact:${id}`);
+      db.prepare(
+        `DELETE FROM mind_links WHERE from_id IN (${placeholders}) OR to_id IN (${placeholders})`,
+      ).run(
+        ...rowIds.map((id) => `fact:${id}`),
+        ...rowIds.map((id) => `fact:${id}`),
+      );
+      db.exec("COMMIT");
+    } catch (e) {
+      db.exec("ROLLBACK");
+      throw e;
+    }
+    this.repo.store.revision++;
+    return { deleted: rows.length };
+  }
+  insert({
+    session,
+    subject,
+    content,
+    type = "event",
+    confidence = 0.8,
+    importance = 0.5,
+    sources = [],
+    discretion = "open",
+    locked = false,
+    time = Date.now(),
+  }) {
+    const db = this.repo.db;
+    const same = db
+      .prepare(
+        "SELECT id FROM core_memories WHERE subject=? AND content=? AND status!='deleted'",
+      )
+      .get(subject, content);
+    if (same) {
+      // Said again is remembered more firmly, not remembered twice.
+      this.reinforce(same.id, sources, time);
+      return null;
+    }
+    if (this.revokedFor(subject).some((old) => similar(old, content, 0.75)))
+      return null;
+    const id = randomUUID();
+    db.prepare(
+      "INSERT INTO core_memories(id,session_id,subject,content,type,confidence,importance,status,locked,sources,created,updated,discretion,basis,last_confirmed) VALUES (?,?,?,?,?,?,?,'confirmed',?,?,?,?,?,?,?)",
+    ).run(
+      id,
+      session,
+      subject,
+      content,
+      type,
+      clamp(confidence),
+      clamp(importance),
+      +locked,
+      JSON.stringify(sources),
+      time,
+      time,
+      DISCRETIONS.has(discretion) ? discretion : "open",
+      basisOf(sources),
+      time,
+    );
+    indexMemory(db, id, content);
+    this.mind?.recall?.sync("fact", id);
+    return id;
+  }
+  // Another time the person said the same thing. The memory keeps its words
+  // and gains the new source, a count and the date it was last confirmed.
+  reinforce(id, sources = [], time = Date.now()) {
+    const db = this.repo.db;
+    const row = db
+      .prepare(
+        "SELECT sources,evidence_count FROM core_memories WHERE id=? AND status='confirmed'",
+      )
+      .get(id);
+    if (!row) return false;
+    const old = parse(row.sources, []);
+    const known = new Set(old.map((s) => `${s?.id}`));
+    const added = (Array.isArray(sources) ? sources : []).filter(
+      (s) => s && !known.has(`${s.id}`),
+    );
+    if (!added.length && old.length) return false;
+    db.prepare(
+      "UPDATE core_memories SET sources=?,evidence_count=evidence_count+1,last_confirmed=MAX(COALESCE(last_confirmed,0),?) WHERE id=?",
+    ).run(JSON.stringify([...old, ...added].slice(-12)), time, id);
+    this.mind?.recall?.sync("fact", id);
+    return true;
+  }
+  // Two statements that cannot both hold and could not be settled. Both stay
+  // remembered; the link lets recall show them side by side with their dates.
+  conflict(newer, older, sources = [], time = Date.now()) {
+    this.repo.db
+      .prepare(
+        "INSERT OR IGNORE INTO mind_links(from_id,to_id,relation,created,sources) VALUES (?,?,'conflicts',?,?)",
+      )
+      .run(`fact:${newer}`, `fact:${older}`, time, JSON.stringify(sources));
+  }
+  // "记住，我……" is a friend asking to be remembered, not a draft for review.
+  remember(message) {
+    const value = String(message.text || "");
+    if (/不要记|别记|不许记/.test(value)) return null;
+    const match = value.match(
+      /(?:请)?(?:记住|记一下)[，,：:\s]*(我[^\n]{2,200})[。！!]?$/u,
+    );
+    const name = requestedName(value);
+    if ((!match && !name) || SENSITIVE.test(value) || hasCredential(value))
+      return null;
+    const said = name
+      ? `我希望被称呼为${name}`
+      : match[1].replace(/[。！!]+$/, "").trim();
+    const content = /我/.test(said.slice(1))
+      ? `原话：${said}`
+      : said.replace(/^我/, "");
+    const privateChat = message.kind === "private";
+    const quiet =
+      secretRequest(value) ||
+      this.#recentSecret(message.sessionId, message.userId, message.seq);
+    const id = this.insert({
+      session: message.sessionId,
+      subject: String(message.userId),
+      content,
+      type: "preference",
+      confidence: 0.95,
+      importance: 0.7,
+      sources: [
+        {
+          id: message.seq,
+          text: value.slice(-300),
+          speaker: message.userId,
+          time: message.time,
+          certainty: "self_report",
+        },
+      ],
+      discretion: quiet ? "secret" : privateChat ? "private" : "open",
+      time: Number(message.time) || Date.now(),
+    });
+    if (id) this.repo.store.revision++;
+    return id;
+  }
+  // "别告诉别人" then, after more of their own messages, "记住，我……" is still
+  // a secret until this stretch is consolidated. Only words she could have
+  // heard count. A request from the previous stretch does not carry over.
+  #recentSecret(session, userId, seq) {
+    if (!session || seq == null) return false;
+    const rows = this.repo.db
+      .prepare(
+        `SELECT payload FROM core_events
+         WHERE session_id=? AND role='user' AND seq<?
+         AND seq>COALESCE((SELECT seq FROM core_cursors WHERE session_id=?),0)
+         AND json_extract(payload,'$.userId')=?
+         AND seq NOT IN (SELECT seq FROM mind_unlived)
+         ORDER BY seq DESC LIMIT 40`,
+      )
+      .all(session, seq, session, String(userId));
+    return rows.some((row) => {
+      let payload = {};
+      try {
+        payload = JSON.parse(row.payload);
+      } catch {
+        payload = {};
+      }
+      return secretRequest(payload.text);
+    });
+  }
+  pending(session) {
+    return this.repo.db
+      .prepare(
+        "SELECT COUNT(*) n FROM core_events WHERE session_id=? AND role='user' AND seq>COALESCE((SELECT seq FROM core_cursors WHERE session_id=?),0) AND seq NOT IN (SELECT seq FROM mind_unlived) AND COALESCE(json_extract(payload,'$.simulated'),0)=0",
+      )
+      .get(session, session).n;
+  }
+  due(session, now = Date.now()) {
+    return this.mind
+      ? consolidationDecision(this.mind, session, now)
+      : { due: this.pending(session) >= BLOCK_USERS };
+  }
+  // What she already remembers about the people in this stretch, so the
+  // same fact is not written twice and a changed one can replace the old.
+  known(session, block) {
+    const here = new Set(this.scopes(session));
+    const known = [];
+    const refs = new Map();
+    const read = this.repo.db.prepare(
+      "SELECT id,subject,content,session_id,discretion FROM core_memories WHERE subject=? AND status='confirmed' ORDER BY importance DESC, updated DESC LIMIT 5",
+    );
+    const subjects = new Set(
+      block.filter((m) => m.role === "user").map((m) => String(m.userId)),
+    );
+    for (const subject of subjects)
+      for (const k of read.all(subject)) {
+        if (known.length >= 20) return { known, refs };
+        if (k.discretion !== "open" && !here.has(k.session_id)) continue;
+        const ref = `k${known.length + 1}`;
+        refs.set(ref, k);
+        known.push({ ref, subject: k.subject, content: text(k.content, 80) });
+      }
+    return { known, refs };
+  }
+  // A newer fact replaces an older one; the old stays visible with its
+  // versions but is no longer recalled.
+  supersede(id, by) {
+    const old = this.repo.db
+      .prepare("SELECT * FROM core_memories WHERE id=?")
+      .get(id);
+    if (!old || old.locked || old.status !== "confirmed" || id === by)
+      return false;
+    this.update(id, { status: "superseded" });
+    this.repo.db
+      .prepare("UPDATE core_memories SET superseded_by=? WHERE id=?")
+      .run(by, id);
+    return true;
+  }
+  // Things said in this stretch that are still to come. Someone's plans and
+  // dates must come from their own words; a promise must be her own.
+  anticipate(list, { block, session, names, privateChat, now }) {
+    if (!this.mind?.anticipations) return 0;
+    let added = 0;
+    for (const a of (Array.isArray(list) ? list : []).slice(0, 8)) {
+      if (!a || typeof a.content !== "string" || !a.content.trim()) continue;
+      const kind = ["event", "promise", "date"].includes(a.kind)
+        ? a.kind
+        : null;
+      const cited = block.filter((m) =>
+        (Array.isArray(a.sources) ? a.sources : []).map(Number).includes(m.seq),
+      );
+      if (!kind || !cited.length || cited.some((m) => m.artifact)) continue;
+      let subject = a.subject == null ? null : String(a.subject);
+      if (kind === "promise") {
+        if (!cited.every((m) => m.role === "assistant")) continue;
+        if (
+          subject &&
+          !block.some((m) => m.role === "user" && String(m.userId) === subject)
+        )
+          subject = null;
+      } else if (
+        !subject ||
+        !cited.some((m) => m.role === "user" && String(m.userId) === subject)
+      )
+        continue;
+      const first = Math.min(...cited.map((m) => m.seq));
+      const last = Math.max(...cited.map((m) => m.seq));
+      const secret =
+        block.some(
+          (m) =>
+            m.role === "user" &&
+            m.seq <= last &&
+            m.seq >= first - 6 &&
+            secretRequest(m.text),
+        ) || askedSecret(block, subject, last);
+      if (
+        !grounded(
+          a.content,
+          cited.map((m) => m.text || ""),
+        )
+      )
+        continue;
+      const result = this.mind.anticipations.add({
+        kind,
+        subject,
+        session,
+        content: applySpeakerNames(a.content.trim(), names),
+        due: a.due,
+        recurrence: a.recurrence,
+        discretion: secret ? "secret" : privateChat ? "private" : "open",
+        sources: cited.map((m) => m.seq),
+        origin: "memory",
+        time: now,
+      });
+      if (result.id) added++;
+    }
+    return added;
+  }
+  async consolidate(
+    session,
+    profile,
+    prompt,
+    trace,
+    {
+      force = false,
+      simulated = false,
+      models = this.models,
+      now = Date.now(),
+    } = {},
+  ) {
+    if (this.busy.has(session)) return;
+    if (!force && now - (this.lastAttempt.get(session) || 0) < 60000) return;
+    const backoff = this.mind?.backoff;
+    const backoffKey = `memory:${session}`;
+    if (!force && backoff && !backoff.ready(backoffKey, now)) return;
+    this.busy.add(session);
+    let blockCursor = null;
+    try {
+      const db = this.repo.db;
+      const cursor =
+        db
+          .prepare("SELECT seq FROM core_cursors WHERE session_id=?")
+          .get(session)?.seq || 0;
+      const aside = new Set(
+        db
+          .prepare("SELECT seq FROM mind_unlived")
+          .all()
+          .map((row) => row.seq),
+      );
+      const rows = this.repo
+        .eventsAfter(session, cursor, { simulated, limit: 200 })
+        .filter(
+          (m) =>
+            m.time <= now &&
+            !aside.has(m.seq) &&
+            !/^\[(图片|表情|媒体)\]+$/.test(m.text || ""),
+        );
+      const users = rows.filter((m) => m.role === "user");
+      if (!users.length || (!force && !this.due(session, now).due)) return;
+      this.lastAttempt.set(session, now);
+      blockCursor = cursor;
+      // A stretch the model could not turn into valid notes twice is tried
+      // in smaller pieces; the same input is not resent unchanged forever.
+      const failing = backoff?.state(backoffKey).meta || {};
+      const blockUsers =
+        failing.cursor === cursor && failing.blockUsers
+          ? failing.blockUsers
+          : BLOCK_USERS;
+      // Her answers to the block's last messages belong with that block.
+      const next = users[blockUsers]?.seq ?? Number.MAX_SAFE_INTEGER;
+      const block = rows.filter((m) => m.seq < next);
+      const last = block.at(-1).seq;
+      const names = speakerNames(db, [session]);
+      const self = this.mind?.nature.current().name || "self";
+      const zone = this.mind?.timeZone() || "Asia/Shanghai";
+      const { known, refs } = this.mind?.recall
+        ? await this.mind.recall.knownFor(session, block)
+        : this.known(session, block);
+      const threads = this.mind?.episodes?.candidates(session, block, now) || {
+        list: [],
+        refs: new Map(),
+      };
+      // How she read these messages when she answered them.
+      const readings = new Map(
+        db
+          .prepare(
+            `SELECT seq,tone,stance FROM core_message_cues WHERE seq IN (${block.map(() => "?").join(",")})`,
+          )
+          .all(...block.map((m) => m.seq))
+          .map((row) => [
+            row.seq,
+            {
+              ...(row.tone ? { tone: row.tone } : {}),
+              ...(row.stance ? { stance: row.stance } : {}),
+            },
+          ]),
+      );
+      const value = await models.call(
+        profile,
+        "memory",
+        prompt +
+          "\nartifact 标记的是作品正文，fiction 的人物/剧情和 reference 的游戏资料情节不能作为现实人物事实；不要把正文中的约定提取成她现实接受的承诺。读者讨论作品时保留作品语境。",
+        {
+          sessionId: session,
+          self,
+          privateChat: isPrivateSession(session),
+          ...(known.length ? { known } : {}),
+          ...(threads.list.length ? { openEpisodes: threads.list } : {}),
+          messages: block.map((m) => ({
+            id: m.seq,
+            userId: m.role === "assistant" ? "self" : m.userId,
+            name:
+              m.role === "assistant"
+                ? self
+                : readableName(m.name, m.userId) ||
+                  names.get(String(m.userId)) ||
+                  m.userId,
+            role: m.role,
+            ...(m.artifact ? { artifact: m.artifact } : {}),
+            ...(readings.get(m.seq) ? { readAs: readings.get(m.seq) } : {}),
+            text: String(m.text || "").slice(0, 600),
+            // A readable local time lets "明天" become a date.
+            localTime: localClock(m.time, zone).local,
+          })),
+        },
+        trace,
+      );
+      if (typeof value?.summary !== "string" || !Array.isArray(value.facts))
+        throw Error("记忆整理格式无效");
+      db.exec("BEGIN IMMEDIATE");
+      try {
+        const said = block.map((m) => m.text || "");
+        const raw = value.summary.trim();
+        const summary =
+          raw && grounded(raw, said) ? applySpeakerNames(raw, names) : "";
+        const privateChat = isPrivateSession(session);
+        const keptFacts = [];
+        for (const f of value.facts.slice(0, 30)) {
+          if (
+            typeof f?.content !== "string" ||
+            !f.content.trim() ||
+            f.content.length > 2000 ||
+            !Array.isArray(f.sources) ||
+            !f.sources.length ||
+            !Number.isFinite(f.confidence) ||
+            !Number.isFinite(f.importance) ||
+            ["joke", "hearsay"].includes(f.certainty) ||
+            SENSITIVE.test(f.content) ||
+            hasCredential(f.content)
+          )
+            continue;
+          const sources = block.filter((m) => f.sources.includes(m.seq));
+          if (
+            sources.length !== f.sources.length ||
+            !sources.every(
+              (m) =>
+                m.role === "user" && String(m.userId) === String(f.subject),
+            )
+          )
+            continue;
+          if (
+            !grounded(
+              f.content,
+              sources.map((m) => m.text || ""),
+            )
+          )
+            continue;
+          // Said as a joke, in irony or as hearsay when she read it: not a
+          // fact about the person. A guess is kept as an inference at most.
+          const read = sources.map((m) => readings.get(m.seq) || {});
+          if (
+            read.every(
+              (r) =>
+                ["joke", "hearsay"].includes(r.stance) ||
+                ["joking", "teasing", "ironic"].includes(r.tone),
+            )
+          )
+            continue;
+          if (read.every((r) => r.stance === "guess")) {
+            f.certainty = "inferred";
+            f.confidence = Math.min(0.6, f.confidence);
+          }
+          const secret =
+            f.discretion === "secret" ||
+            askedSecret(block, f.subject, Math.max(...f.sources));
+          const content = applySpeakerNames(f.content.trim(), names);
+          const citations = sources.map((m) => ({
+            id: m.seq,
+            text: m.text,
+            speaker: m.userId,
+            time: m.time,
+            certainty: f.certainty || "unknown",
+          }));
+          const confirmed = (Array.isArray(f.confirms) ? f.confirms : [])
+            .map((ref) => refs.get(String(ref)))
+            .find((old) => old && String(old.subject) === String(f.subject));
+          if (confirmed) {
+            this.reinforce(confirmed.id, citations, now);
+            continue;
+          }
+          const discretion = secret
+            ? "secret"
+            : privateChat || f.discretion === "private"
+              ? "private"
+              : "open";
+          const id = this.insert({
+            session,
+            subject: String(f.subject),
+            content,
+            type: String(f.type || "event").slice(0, 20),
+            confidence:
+              f.certainty === "inferred"
+                ? Math.min(0.6, f.confidence)
+                : f.confidence,
+            importance: f.importance,
+            sources: citations,
+            discretion,
+            time: now,
+          });
+          if (!id) continue;
+          keptFacts.push({
+            subject: String(f.subject),
+            content,
+            discretion,
+          });
+          for (const ref of Array.isArray(f.supersedes) ? f.supersedes : []) {
+            const old = refs.get(String(ref));
+            if (old && String(old.subject) === String(f.subject))
+              this.supersede(old.id, id);
+          }
+          for (const ref of Array.isArray(f.conflicts) ? f.conflicts : []) {
+            const old = refs.get(String(ref));
+            if (old && String(old.subject) === String(f.subject))
+              this.conflict(id, old.id, f.sources, now);
+          }
+        }
+        db.prepare(
+          "INSERT OR IGNORE INTO core_stages VALUES (?,?,?,?,?,?)",
+        ).run(
+          randomUUID(),
+          session,
+          block[0].seq,
+          last,
+          now,
+          JSON.stringify({ summary, facts: keptFacts }),
+        );
+        this.anticipate(value.anticipations, {
+          block,
+          session,
+          names,
+          privateChat,
+          now,
+        });
+        this.mind?.episodes?.record(value.episodes, {
+          block,
+          session,
+          refs: threads.refs,
+          names,
+          privateChat,
+          now,
+        });
+        // What she herself said and meant becomes part of who she is. Her
+        // opinions about topics are not: one stretch of talk can add only a
+        // couple of views, and the rest stays in the summary.
+        const valid = new Set(
+          block.filter((m) => m.role === "assistant").map((m) => `m:${m.seq}`),
+        );
+        let views = 0;
+        for (const note of (Array.isArray(value.self) ? value.self : []).slice(
+          0,
+          6,
+        )) {
+          if (note?.kind === "view" && ++views > MEMORY_VIEWS_PER_BLOCK)
+            continue;
+          this.mind?.self.propose(
+            { ...note, action: "new", session },
+            { valid, origin: "memory", time: now },
+          );
+        }
+        db.prepare(
+          "INSERT INTO core_cursors VALUES (?,?) ON CONFLICT(session_id) DO UPDATE SET seq=excluded.seq",
+        ).run(session, last);
+        db.exec("COMMIT");
+        this.lastAttempt.delete(session);
+        backoff?.succeed(backoffKey);
+      } catch (e) {
+        db.exec("ROLLBACK");
+        throw e;
+      }
+    } catch (error) {
+      if (backoff && blockCursor !== null)
+        this.#failed(backoffKey, blockCursor, session, error, now);
+      throw error;
+    } finally {
+      this.busy.delete(session);
+    }
+  }
+  // A provider refusal or outage only waits. A block whose notes keep coming
+  // back malformed is halved, and the smallest block that still fails is set
+  // aside with its reason so the stretches after it can be remembered.
+  #failed(key, cursor, session, error, now) {
+    const backoff = this.mind.backoff;
+    if (!isFormatFailure(error)) {
+      backoff.fail(key, error, now, { minimumMs: providerWaitMs(error) });
+      return;
+    }
+    const old = backoff.state(key).meta || {};
+    const same = old.cursor === cursor;
+    const failures = (same ? old.formatFailures || 0 : 0) + 1;
+    const blockUsers = same && old.blockUsers ? old.blockUsers : BLOCK_USERS;
+    if (failures < 2) {
+      backoff.fail(key, error, now, {
+        meta: { cursor, formatFailures: failures, blockUsers },
+      });
+      return;
+    }
+    if (blockUsers > MIN_BLOCK_USERS) {
+      backoff.fail(key, error, now, {
+        meta: {
+          cursor,
+          formatFailures: 0,
+          blockUsers: Math.max(MIN_BLOCK_USERS, Math.floor(blockUsers / 2)),
+        },
+      });
+      return;
+    }
+    const db = this.repo.db;
+    const rows = this.repo
+      .eventsAfter(session, cursor, { limit: 200 })
+      .filter((m) => m.time <= now);
+    const users = rows.filter((m) => m.role === "user");
+    const next = users[blockUsers]?.seq ?? Number.MAX_SAFE_INTEGER;
+    const block = rows.filter((m) => m.seq < next);
+    if (!block.length) {
+      backoff.fail(key, error, now);
+      return;
+    }
+    db.exec("BEGIN IMMEDIATE");
+    try {
+      db.prepare("INSERT OR IGNORE INTO core_stages VALUES (?,?,?,?,?,?)").run(
+        randomUUID(),
+        session,
+        block[0].seq,
+        block.at(-1).seq,
+        now,
+        JSON.stringify({
+          summary: "",
+          facts: [],
+          skipped: text(error.message, 200),
+        }),
+      );
+      db.prepare(
+        "INSERT INTO core_cursors VALUES (?,?) ON CONFLICT(session_id) DO UPDATE SET seq=excluded.seq",
+      ).run(session, block.at(-1).seq);
+      db.exec("COMMIT");
+    } catch (writeError) {
+      db.exec("ROLLBACK");
+      throw writeError;
+    }
+    backoff.succeed(key);
+  }
+}