memory-eternal 0.1.2 → 0.3.0

package/index.js

@@ -26,6 +26,7 @@ const versionRef = (() => { try { const p = JSON.parse(readFileSync(path.join(PA
 import z from '@deepseek-ai/schemastery'
 import { defineTool } from '@deepseek-ai/dsh-tools'
 import { ensureVault, search, generateDailyBrief } from './lib/vault.js'
+import { migrateFromMarkdown, setAuditConfig } from './lib/db.js'
 import { summarizeTurn, extractLastTurn, sliceNewEvents, resolveRoute, captureCard, captureUpdate, pickNeighbors } from './lib/capture.js'
 import { createApi, json } from './lib/api.js'
 
@@ -96,6 +97,7 @@ const DSH_AGENT = 'deepseek-harness'
 export function apply(ctx, config) {
   const settings = ctx.settings.register('memory-eternal', Config, { base: config ?? {} })
 
+  // 首次激活：自动从 .md 文件迁移到 SQLite（幂等，已有数据则跳过）
   const vaultDir = () => {
     const cfg = settings.get() ?? {}
     // 多 Vault：若配了 vaultProfiles 且选中了 activeVault，则用该 profile 的目录。
@@ -108,6 +110,18 @@ export function apply(ctx, config) {
     return path.join(home, 'memory-vault')
   }
 
+  // 自动迁移：从 .md 文件导入 SQLite（幂等，DB 有数据则跳过）
+  try { migrateFromMarkdown(vaultDir()).catch(() => {}) } catch {}
+  // 同步审核配置到 SQLite config 表（enforceAudit 从此表读取规则）
+  const syncAudit = () => {
+    try {
+      const cfg = settings.get() ?? {}
+      setAuditConfig(vaultDir(), { auditMode: cfg.auditMode, auditExemptAgents: cfg.auditExemptAgents, auditExemptKinds: cfg.auditExemptKinds })
+    } catch {}
+  }
+  syncAudit()
+  settings.watch(syncAudit)
+
   // 所有 profile 目录（当前激活 + 其余命名的），供跨库聚合。
   const vaultRoots = () => {
     const cfg = settings.get() ?? {}

package/lib/capture.js

@@ -113,8 +113,8 @@ export async function pickNeighbors(root, card, limit = DEDUP_NEIGHBORS) {
  * 去重守卫：目标目录里已有高度相似卡片时返回它，否则返回 null。
  * @returns Promise<null | { path, score }>
  */
-export function makeDedupChecker(dir) {
-  return (text, threshold = DEDUP_THRESHOLD) => dedupCheck(dir, text, threshold)
+export function makeDedupChecker(root) {
+  return (text, threshold = DEDUP_THRESHOLD) => dedupCheck(root, text, threshold)
 }
 
 /** 写卡（带目录级去重守卫），命中返回 duplicate 而非写卡。 */

package/lib/db.js

@@ -0,0 +1,178 @@
+// 记忆核心 · SQLite 存储层（node:sqlite 内置，零依赖）
+//
+// 4 张表：config / cards / card_updates / feedback
+// 首次启动自动从 .md 文件迁移（幂等）
+
+import { DatabaseSync } from 'node:sqlite'
+import { promises as fs, mkdirSync } from 'node:fs'
+import path from 'node:path'
+import { parseCard, KIND_ROOTS } from './vault.js'
+
+const DB_FILE = 'memory-eternal.db'
+
+/** 获取或创建 SQLite 数据库连接（单例 per root）。 */
+const instances = new Map()
+export function getDb(root) {
+  const resolved = path.resolve(root)
+  if (instances.has(resolved)) return instances.get(resolved)
+  // 确保目录存在（SQLite 需要目录才能创建 .db 文件）
+  mkdirSync(resolved, { recursive: true })
+  const dbPath = path.join(resolved, DB_FILE)
+  const db = new DatabaseSync(dbPath)
+  db.exec('PRAGMA journal_mode=WAL')
+  db.exec('PRAGMA foreign_keys=ON')
+  initTables(db)
+  instances.set(resolved, db)
+  return db
+}
+
+function initTables(db) {
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS config (
+      key TEXT PRIMARY KEY,
+      value TEXT NOT NULL,
+      updated_at TEXT DEFAULT (datetime('now'))
+    );
+
+    CREATE TABLE IF NOT EXISTS cards (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      path TEXT UNIQUE NOT NULL,
+      kind TEXT NOT NULL DEFAULT 'knowledge',
+      title TEXT NOT NULL DEFAULT '',
+      tags TEXT DEFAULT '[]',
+      body TEXT NOT NULL DEFAULT '',
+      summary TEXT DEFAULT '',
+      status TEXT NOT NULL DEFAULT 'pending',
+      source TEXT DEFAULT '',
+      submitted_by TEXT DEFAULT '',
+      severity TEXT DEFAULT 'info',
+      reason TEXT DEFAULT '',
+      created_at TEXT DEFAULT (datetime('now')),
+      updated_at TEXT DEFAULT (datetime('now')),
+      deleted_at TEXT
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_cards_status ON cards(status);
+    CREATE INDEX IF NOT EXISTS idx_cards_kind ON cards(kind);
+    CREATE INDEX IF NOT EXISTS idx_cards_deleted ON cards(deleted_at);
+
+    CREATE TABLE IF NOT EXISTS card_updates (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      card_id INTEGER NOT NULL REFERENCES cards(id) ON DELETE CASCADE,
+      content TEXT NOT NULL,
+      created_at TEXT DEFAULT (datetime('now'))
+    );
+
+    CREATE TABLE IF NOT EXISTS feedback (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      query TEXT NOT NULL,
+      card_path TEXT NOT NULL,
+      useful INTEGER NOT NULL DEFAULT 0,
+      created_at TEXT DEFAULT (datetime('now'))
+    );
+
+    -- 审核日志：记录所有 status 变更，不可篡改
+    CREATE TABLE IF NOT EXISTS audit_log (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      card_path TEXT NOT NULL,
+      old_status TEXT,
+      new_status TEXT NOT NULL,
+      changed_by TEXT DEFAULT 'system',
+      reason TEXT DEFAULT '',
+      created_at TEXT DEFAULT (datetime('now'))
+    );
+  `)
+}
+
+/**
+ * 审核守卫：根据 config 表的审核规则决定新卡 status。
+ * 所有写入路径必须经过此函数，杜绝越权。
+ *
+ * 规则：
+ * - config 表无 auditMode 记录 → 用 fallback（调用方传入的 status）
+ * - auditMode = 'none' → approved（全部免审）
+ * - auditMode = 'all' → 检查免审白名单，命中→approved，否则→pending
+ *
+ * @param {string} root - vault 根目录
+ * @param {string} kind - 卡片类型
+ * @param {string} submittedBy - 提交者
+ * @param {string} fallback - 调用方传入的 status（无配置时使用）
+ * @returns {'pending' | 'approved'}
+ */
+export function enforceAudit(root, kind, submittedBy, fallback = 'pending') {
+  const db = getDb(root)
+  const get = (key) => { try { return db.prepare('SELECT value FROM config WHERE key = ?').get(key)?.value } catch { return null } }
+  const mode = get('auditMode')
+  // 无配置 → 用调用方传入的 status
+  if (!mode) return fallback
+  if (mode === 'none') return 'approved'
+  const agentsRaw = get('auditExemptAgents') || '[]'
+  const kindsRaw = get('auditExemptKinds') || '[]'
+  let agents = [], kinds = []
+  try { agents = JSON.parse(agentsRaw) } catch { agents = agentsRaw.split(',').map(s => s.trim()).filter(Boolean) }
+  try { kinds = JSON.parse(kindsRaw) } catch { kinds = kindsRaw.split(',').map(s => s.trim()).filter(Boolean) }
+  if (agents.includes('__all__') || agents.includes(submittedBy)) return 'approved'
+  if (kinds.includes('__all__') || kinds.includes(kind)) return 'approved'
+  return 'pending'
+}
+
+/** 写入审核配置到 config 表（供 index.js 同步 DSH settings）。 */
+export function setAuditConfig(root, { auditMode, auditExemptAgents, auditExemptKinds }) {
+  const db = getDb(root)
+  const upsert = db.prepare(`INSERT INTO config (key, value, updated_at) VALUES (?, ?, datetime('now')) ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at`)
+  if (auditMode !== undefined) upsert.run('auditMode', String(auditMode))
+  if (auditExemptAgents !== undefined) upsert.run('auditExemptAgents', JSON.stringify(auditExemptAgents))
+  if (auditExemptKinds !== undefined) upsert.run('auditExemptKinds', JSON.stringify(auditExemptKinds))
+}
+
+/** 从 .md 文件迁移到 SQLite（幂等：已存在的卡跳过）。 */
+export async function migrateFromMarkdown(root) {
+  const db = getDb(root)
+  const existing = db.prepare('SELECT COUNT(*) as cnt FROM cards').get()
+  if (existing.cnt > 0) return { migrated: 0, skipped: existing.cnt }
+
+  let migrated = 0
+  const walk = async (dir, base) => {
+    let ents = []
+    try { ents = await fs.readdir(dir, { withFileTypes: true }) } catch { return }
+    for (const ent of ents) {
+      const full = path.join(dir, ent.name)
+      if (ent.isDirectory()) { await walk(full, base); continue }
+      if (!ent.name.endsWith('.md')) continue
+      try {
+        const text = await fs.readFile(full, 'utf8')
+        const { meta, body, summary } = parseCard(text)
+        const rel = path.relative(base, full).split(path.sep).join('/')
+        const stat = await fs.stat(full)
+        db.prepare(`
+          INSERT OR IGNORE INTO cards (path, kind, title, tags, body, summary, status, source, submitted_by, severity, reason, created_at, updated_at, deleted_at)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        `).run(
+          rel,
+          meta.kind || 'knowledge',
+          meta.title || rel.replace(/\.[^.]*$/, '').replace(/^[^/]*\//, ''),
+          JSON.stringify(meta.tags || []),
+          body.trim(),
+          summary,
+          meta.status || 'pending',
+          meta.source || '',
+          meta.submittedBy || '',
+          meta.severity || 'info',
+          meta.reason || '',
+          meta.created || stat.mtime.toISOString(),
+          meta.updated || stat.mtime.toISOString(),
+          meta.deletedAt || null,
+        )
+        migrated++
+      } catch { /* 跳过坏文件 */ }
+    }
+  }
+  await walk(root, root)
+  return { migrated, skipped: 0 }
+}
+
+export function closeDb(root) {
+  const resolved = path.resolve(root)
+  const db = instances.get(resolved)
+  if (db) { db.close(); instances.delete(resolved) }
+}

package/lib/vault.js

@@ -1,15 +1,10 @@
-// 记忆核心 · Markdown Vault 存储层
+// 记忆核心 · SQLite Vault 存储层
 //
-// 从 boujoy-harness 的记忆模块移植（web/boujoy_server.py 的知识库部分）：
-// - 卡片 = 带 YAML frontmatter 的 Markdown 文件，落在 02-06 主题目录；
-// - 去重 = Jaccard 字符 bigram 相似度（阈值默认 0.62），命中后拒绝新建并返回原卡；
-// - 检索 = CJK 感知：整词 + 字符 bigram 命中（无需全文引擎）；
-// - 图谱 = 卡片之间的 [[wikilink]] 与共享标签连线。
-//
-// 本文件不依赖 DSH 运行时，可单独单测。
+// 纯工具函数保持不变；IO 函数全部改用 SQL。
+// 底层依赖 lib/db.js 的 getDb(root) → DatabaseSync 实例。
 
-import { promises as fs } from 'node:fs'
 import path from 'node:path'
+import { getDb, enforceAudit } from './db.js'
 
 /** 主题目录根。 */
 export const KIND_ROOTS = {
@@ -26,9 +21,6 @@ export const CAPTURE_KINDS = ['project', 'knowledge', 'content', 'prompt', 'busi
 
 /** 从 Markdown 文本提取 frontmatter 与正文。 */
 export function parseCard(text) {
-  // formatVersion 守卫：读侧始终向后兼容——旧卡无此字段 = v0 按旧逻辑读；
-  // 未来结构变更时升 FORMAT_VERSION 并在读侧加迁移分支，多副本环境
-  // （DSH profile + 全局）版本漂移不会互相写坏库。
   const meta = { title: '', kind: 'knowledge', tags: [], created: '', updated: '', source: '', formatVersion: 0, status: 'pending', submittedBy: '', severity: 'info', reason: '', deletedAt: '' }
   let body = text
   const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/.exec(text)
@@ -51,9 +43,7 @@ export function parseCard(text) {
       }
     }
   }
-  // 审核中心为最高控制：无 status 字段的卡（含 agent 直写 vault 的绕过）一律视为待审核。
   if (!meta.status) meta.status = 'pending'
-  // 标题：frontmatter 的 title 优先，否则取第一个 # 标题，否则取首行。
   if (!meta.title) {
     const h = /^#\s+(.+)$/m.exec(body)
     meta.title = h ? h[1].trim() : body.trim().split(/\r?\n/)[0].slice(0, 60)
@@ -74,7 +64,7 @@ export function safeSlug(name) {
   return base || 'card'
 }
 
-/** Jaccard-like 相似度：字符 bigram 集合（移植 boujoy _text_similarity）。 */
+/** Jaccard-like 相似度：字符 bigram 集合。 */
 export function textSimilarity(a, b) {
   const bigrams = (text) => {
     const cleaned = String(text)
@@ -93,31 +83,7 @@ export function textSimilarity(a, b) {
   return inter / (ba.size + bb.size - inter)
 }
 
-/** 在目标目录中找与候选文本最相似的现有卡（去重守卫）。比较正文（剔除 frontmatter）。 */
-export async function dedupCheck(dir, text, threshold = 0.62) {
-  let best = null
-  let entries = []
-  try {
-    entries = await fs.readdir(dir)
-  } catch {
-    return null
-  }
-  for (const name of entries) {
-    if (!name.toLowerCase().endsWith('.md')) continue
-    try {
-      const existing = await fs.readFile(path.join(dir, name), 'utf8')
-      // 只比较正文，避免 frontmatter 稀释相似度
-      const { body } = parseCard(existing)
-      const score = textSimilarity(text, body || existing)
-      if (score >= threshold && (!best || score > best.score)) best = { path: name, score }
-    } catch {
-      // 跳过不可读文件
-    }
-  }
-  return best
-}
-
-/** CJK 感知查询词：整词 + 中文字符 bigram（移植 boujoy query_terms）。 */
+/** CJK 感知查询词：整词 + 中文字符 bigram。 */
 export function queryTerms(query) {
   const tokens = new Set(String(query).split(/[^\w\u4e00-\u9fff]+/).filter(Boolean))
   for (let i = 0; i < query.length - 1; i++) {
@@ -128,349 +94,272 @@ export function queryTerms(query) {
   return tokens
 }
 
-// 目录名 → kind 推断（直写/非标准目录也归入可读集合）
+/** 在目标目录中找与候选文本最相似的现有卡（去重守卫）。比较正文。 */
+export async function dedupCheck(root, text, threshold = 0.62) {
+  const db = getDb(root)
+  const rows = db.prepare('SELECT path, body FROM cards WHERE deleted_at IS NULL').all()
+  let best = null
+  for (const row of rows) {
+    const score = textSimilarity(text, row.body || '')
+    if (score >= threshold && (!best || score > best.score)) best = { path: row.path, score }
+  }
+  return best
+}
+
+// 目录名 → kind 推断
 function kindFromDir(topDir) {
   for (const [k, v] of Object.entries(KIND_ROOTS)) { if (v.toLowerCase() === String(topDir || '').toLowerCase()) return k }
   return 'knowledge'
 }
 
-/** 递归列出一个目录及其子孙目录下所有 *.md（相对路径，正斜杠）。 */
-async function walkAll(dir, base = dir, out = []) {
-  let ents = []
-  try { ents = await fs.readdir(dir, { withFileTypes: true }) } catch { return out }
-  for (const ent of ents) {
-    const full = path.join(dir, ent.name)
-    if (ent.isDirectory()) await walkAll(full, base, out)
-    else if (ent.name.endsWith('.md')) out.push(path.relative(base, full).split(path.sep).join('/'))
-  }
-  return out
+/** 确保 vault 目录结构存在（即确保 DB 存在）。 */
+export async function ensureVault(root) {
+  // getDb 会自动建表
+  getDb(root)
+}
+
+/** 将 SQL 行还原为调用方期望的卡片摘要对象。 */
+function rowToCard(row) {
+  return {
+    path: row.path,
+    kind: row.kind,
+    title: row.title,
+    tags: JSON.parse(row.tags || '[]'),
+    summary: row.summary || '',
+    created: row.created_at,
+    updated: row.updated_at,
+    mtime: new Date(row.updated_at).getTime(),
+    status: row.status,
+    submittedBy: row.submitted_by || '',
+    severity: row.severity || 'info',
+    reason: row.reason || '',
+    deletedAt: row.deleted_at || '',
+  }
+}
+
+/** 将 SQL 行还原为完整 Markdown 文本（frontmatter + body）。 */
+function rowToMarkdown(row) {
+  const tags = JSON.parse(row.tags || '[]')
+  const lines = [
+    '---',
+    `formatVersion: 1`,
+    `kind: ${row.kind}`,
+    `title: ${yamlString(row.title)}`,
+    `tags: [${tags.map((t) => yamlString(t)).join(', ')}]`,
+    `created: ${row.created_at}`,
+    `updated: ${row.updated_at}`,
+    `status: ${row.status}`,
+    ...(row.deleted_at ? [`deletedAt: ${row.deleted_at}`] : []),
+    ...(row.submitted_by ? [`submittedBy: ${yamlString(row.submitted_by)}`] : []),
+    ...(row.severity && row.severity !== 'info' ? [`severity: ${row.severity}`] : []),
+    ...(row.reason ? [`reason: ${yamlString(row.reason)}`] : []),
+    ...(row.source ? [`source: ${row.source}`] : []),
+    '---',
+    '',
+    `# ${row.title}`,
+    '',
+    row.body.trim(),
+    '',
+  ]
+  // 附加 card_updates
+  return { text: lines.join('\n'), tags }
 }
 
-/** 递归列出 vault 下所有卡片（整个根目录 *.md，含直写到任意子目录的卡），返回解析后的卡摘要。 */
+/** 列出卡片（从 SQL）。 */
 export async function listCards(root, { status } = {}) {
-  // 默认 status=['approved']（主库视图/统计/检索只用已批卡）；audit/recycle 显式传 ['pending','rejected'] / ['deleted']
   const want = status ?? ['approved']
-  const cards = []
-  const files = await walkAll(root)
-  for (const rel of files) {
-    try {
-      const full = path.join(root, rel)
-      const text = await fs.readFile(full, 'utf8')
-      const { meta, body, summary } = parseCard(text)
-      const stat = await fs.stat(full)
-      const s = meta.status || 'approved'
-      if (want && !want.includes(s)) continue
-      const topDir = rel.split('/')[0]
-      cards.push({
-        path: rel,
-        kind: meta.kind || kindFromDir(topDir),
-        title: meta.title || rel.replace(/\.[^.]*$/, '').replace(/^[^/]*\//, ''),
-        tags: meta.tags,
-        summary,
-        created: meta.created,
-        updated: meta.updated || stat.mtime.toISOString(),
-        mtime: stat.mtimeMs,
-        status: s,
-        submittedBy: meta.submittedBy || '',
-        severity: meta.severity || 'info',
-        reason: meta.reason || '',
-        deletedAt: meta.deletedAt || '',
-      })
-    } catch {
-      // 跳过坏文件
-    }
-  }
-  cards.sort((a, b) => b.mtime - a.mtime)
-  return cards
+  const db = getDb(root)
+  const placeholders = want.map(() => '?').join(',')
+  const rows = db.prepare(`SELECT * FROM cards WHERE status IN (${placeholders}) ORDER BY updated_at DESC`).all(...want)
+  return rows.map(rowToCard)
 }
 
-/** 审核队列（待审核卡）：status=pending。 */
+/** 审核队列：status=pending 或 rejected。 */
 export async function auditQueue(root) {
   const cards = await listCards(root, { status: ['pending', 'rejected'] })
   return { pending: cards.filter((c) => c.status === 'pending'), rejected: cards.filter((c) => c.status === 'rejected') }
 }
 
-/** 回收站（软删卡）：status=deleted，按删除时间倒序。 */
+/** 回收站：status=deleted，按 deleted_at 倒序。 */
 export async function recycleList(root) {
-  const cards = await listCards(root, { status: ['deleted'] })
-  return cards.sort((a, b) => new Date(b.deletedAt || 0) - new Date(a.deletedAt || 0))
+  const db = getDb(root)
+  const rows = db.prepare('SELECT * FROM cards WHERE status = ? ORDER BY deleted_at DESC').all('deleted')
+  return rows.map(rowToCard)
 }
 
 /** 清理超过 retentionDays 天的回收卡（永久删除）。 */
 export async function purgeExpired(root, retentionDays = 30) {
-  const cut = Date.now() - retentionDays * 86400000
-  const items = await recycleList(root)
+  const db = getDb(root)
+  const cut = new Date(Date.now() - retentionDays * 86400000).toISOString()
+  const rows = db.prepare('SELECT path FROM cards WHERE status = ? AND deleted_at IS NOT NULL AND deleted_at < ?').all('deleted', cut)
   let purged = 0
-  for (const c of items) {
-    const d = new Date(c.deletedAt || 0).getTime()
-    if (d && d < cut) {
-      try { await deleteCard(root, c.path, { permanent: true }); purged++ } catch {}
-    }
+  for (const row of rows) {
+    try { await deleteCard(root, row.path, { permanent: true }); purged++ } catch {}
   }
   return { ok: true, purged }
 }
 
-async function walkMd(dir) {
-  const out = []
-  let entries
-  try {
-    entries = await fs.readdir(dir, { withFileTypes: true })
-  } catch {
-    return out
-  }
-  for (const ent of entries) {
-    const rel = path.join('.', ent.name)
-    if (ent.isDirectory()) {
-      out.push(...(await walkMd(path.join(dir, ent.name))).map((f) => path.join(rel, f)))
-    } else if (ent.name.toLowerCase().endsWith('.md')) {
-      out.push(rel.replace(/\\/g, '/'))
-    }
-  }
-  return out
-}
-
-/** 确保 vault 目录结构存在（00-System + 02-08）。 */
-export async function ensureVault(root) {
-  await fs.mkdir(path.join(root, '00-System'), { recursive: true })
-  for (const dir of Object.values(KIND_ROOTS)) {
-    await fs.mkdir(path.join(root, dir), { recursive: true })
-  }
-}
-
-/** 读取一张卡（相对路径，安全限定在 vault 内）。 */
+/** 读取一张卡（返回 Markdown 文本，兼容旧调用方）。 */
 export async function readCard(root, rel) {
-  const target = resolveInside(root, rel)
-  if (!target) throw new Error('路径越界')
-  return fs.readFile(target, 'utf8')
-}
-
-/** 合并多张卡为一张（保留第一张的 kind/title 前缀「（合并）」，并集标签，用 --- 分隔正文，删原卡）。 */
-export async function mergeCards(root, paths) {
-  const list = (Array.isArray(paths) ? paths : []).map((p) => String(p || '').trim()).filter(Boolean)
-  if (list.length < 2) return { ok: false, error: '至少选 2 张卡' }
-  const texts = []
-  for (const p of list) {
-    try { texts.push({ path: p, text: await readCard(root, p) }) } catch { /* 跳过读不到的 */ }
+  const db = getDb(root)
+  const row = db.prepare('SELECT * FROM cards WHERE path = ?').get(rel)
+  if (!row) throw new Error('卡片不存在: ' + rel)
+  const { text } = rowToMarkdown(row)
+  // 附加更新记录
+  const updates = db.prepare('SELECT content, created_at FROM card_updates WHERE card_id = ? ORDER BY created_at ASC').all(row.id)
+  if (updates.length > 0) {
+    const updateLines = updates.map((u) => `- ${u.created_at.slice(0, 10)}：${u.content}`)
+    return text + '\n## 更新记录\n\n' + updateLines.join('\n') + '\n'
   }
-  if (texts.length < 2) return { ok: false, error: '读取失败' }
-  const first = parseCard(texts[0].text)
-  const tags = new Set(first.meta.tags || [])
-  let combined = ''
-  texts.forEach((t, i) => {
-    let body = t.text
-    try { const p = parseCard(t.text); body = p.body; (p.meta.tags || []).forEach((x) => tags.add(x)) } catch {}
-    combined += (i ? '\n\n---\n\n' : '') + body.trim()
-  })
-  const title = (first.meta.title || '合并记忆') + '（合并）'
-  const r = await writeCard(root, { kind: first.meta.kind || 'knowledge', title, tags: [...tags], body: combined, source: 'merge', status: 'pending', submittedBy: 'merge', reason: '多卡合并' }, { dedup: false })
-  if (!r.ok) return { ok: false, error: '写入失败' }
-  for (const t of texts) { try { await deleteCard(root, t.path, { permanent: true }) } catch { /* 尽力删除 */ } }
-  return { ok: true, path: r.path, merged: texts.length }
+  return text
 }
 
-/** 软删卡片：标记 status=deleted + deletedAt（进回收站，文件保留可恢复）。不再立即 unlink。 */
+/** 软删卡片：status=deleted + deleted_at。 */
 export async function deleteCard(root, rel, { permanent = false } = {}) {
-  const target = resolveInside(root, rel)
-  if (!target) throw new Error('路径越界')
+  const db = getDb(root)
   if (permanent) {
-    await fs.unlink(target)
-    const dir = path.dirname(target)
-    try { await fs.rmdir(dir) } catch { /* 目录非空则保留 */ }
+    db.prepare('DELETE FROM cards WHERE path = ?').run(rel)
     return { ok: true, permanent: true }
   }
-  // 软删：把 frontmatter status 改 deleted + deletedAt
-  const text = await fs.readFile(target, 'utf8')
-  const { meta, body } = parseCard(text)
   const now = new Date().toISOString()
-  const rewritten = [
-    '---',
-    `formatVersion: 1`,
-    `kind: ${meta.kind || 'knowledge'}`,
-    `title: ${yamlString(meta.title)}`,
-    `tags: [${(meta.tags || []).map((t) => yamlString(t)).join(', ')}]`,
-    `created: ${meta.created || now}`,
-    `updated: ${now}`,
-    `status: deleted`,
-    `deletedAt: ${now}`,
-    ...(meta.submittedBy ? [`submittedBy: ${yamlString(meta.submittedBy)}`] : []),
-    ...(meta.severity ? [`severity: ${meta.severity}`] : []),
-    ...(meta.reason ? [`reason: ${yamlString(meta.reason)}`] : []),
-    ...(meta.source ? [`source: ${meta.source}`] : []),
-    '---',
-    '',
-    body.trim(),
-    '',
-  ].join('\n')
-  await fs.writeFile(target, rewritten, 'utf8')
+  const info = db.prepare('UPDATE cards SET status = ?, deleted_at = ?, updated_at = ? WHERE path = ?').run('deleted', now, now, rel)
+  if (info.changes === 0) throw new Error('卡片不存在: ' + rel)
   return { ok: true, soft: true }
 }
 
-/** 恢复软删卡：status=approved，清除 deletedAt。 */
+/** 恢复软删卡：status=approved，清除 deleted_at。写审计日志。 */
 export async function restoreCard(root, rel) {
-  const target = resolveInside(root, rel)
-  if (!target) throw new Error('路径越界')
-  const text = await fs.readFile(target, 'utf8')
-  const { meta, body } = parseCard(text)
+  const db = getDb(root)
   const now = new Date().toISOString()
-  const rewritten = [
-    '---',
-    `formatVersion: 1`,
-    `kind: ${meta.kind || 'knowledge'}`,
-    `title: ${yamlString(meta.title)}`,
-    `tags: [${(meta.tags || []).map((t) => yamlString(t)).join(', ')}]`,
-    `created: ${meta.created || now}`,
-    `updated: ${now}`,
-    `status: approved`,
-    ...(meta.submittedBy ? [`submittedBy: ${yamlString(meta.submittedBy)}`] : []),
-    ...(meta.severity ? [`severity: ${meta.severity}`] : []),
-    ...(meta.reason ? [`reason: ${yamlString(meta.reason)}`] : []),
-    ...(meta.source ? [`source: ${meta.source}`] : []),
-    '---',
-    '',
-    body.trim(),
-    '',
-  ].join('\n')
-  await fs.writeFile(target, rewritten, 'utf8')
+  const existing = db.prepare('SELECT status FROM cards WHERE path = ?').get(rel)
+  if (!existing) throw new Error('卡片不存在: ' + rel)
+  const info = db.prepare('UPDATE cards SET status = ?, deleted_at = NULL, updated_at = ? WHERE path = ?').run('approved', now, rel)
+  if (info.changes === 0) throw new Error('卡片不存在: ' + rel)
+  db.prepare('INSERT INTO audit_log (card_path, old_status, new_status, changed_by, reason) VALUES (?, ?, ?, ?, ?)').run(rel, existing.status, 'approved', 'restore', '回收站恢复')
   return { ok: true, restored: true }
 }
 
-/** 更新卡状态（审核批准/驳回）。 */
-export async function setCardStatus(root, rel, status) {
-  const target = resolveInside(root, rel)
-  if (!target) throw new Error('路径越界')
-  const text = await fs.readFile(target, 'utf8')
-  const { meta, body } = parseCard(text)
+/** 更新卡状态（审核操作）。写审计日志，确保可追溯。 */
+export async function setCardStatus(root, rel, status, { changedBy = 'system', reason = '' } = {}) {
+  const db = getDb(root)
   const now = new Date().toISOString()
-  const rewritten = [
-    '---',
-    `formatVersion: 1`,
-    `kind: ${meta.kind || 'knowledge'}`,
-    `title: ${yamlString(meta.title)}`,
-    `tags: [${(meta.tags || []).map((t) => yamlString(t)).join(', ')}]`,
-    `created: ${meta.created || now}`,
-    `updated: ${now}`,
-    `status: ${status}`,
-    ...(meta.submittedBy ? [`submittedBy: ${yamlString(meta.submittedBy)}`] : []),
-    ...(meta.severity ? [`severity: ${meta.severity}`] : []),
-    ...(meta.reason ? [`reason: ${yamlString(meta.reason)}`] : []),
-    ...(meta.source ? [`source: ${meta.source}`] : []),
-    '---',
-    '',
-    body.trim(),
-    '',
-  ].join('\n')
-  await fs.writeFile(target, rewritten, 'utf8')
+  const existing = db.prepare('SELECT status FROM cards WHERE path = ?').get(rel)
+  if (!existing) throw new Error('卡片不存在: ' + rel)
+  const info = db.prepare('UPDATE cards SET status = ?, updated_at = ? WHERE path = ?').run(status, now, rel)
+  if (info.changes === 0) throw new Error('卡片不存在: ' + rel)
+  // 审计日志：记录每次 status 变更
+  db.prepare('INSERT INTO audit_log (card_path, old_status, new_status, changed_by, reason) VALUES (?, ?, ?, ?, ?)').run(rel, existing.status, status, changedBy, reason)
   return { ok: true, status }
 }
 
-/** 原子写卡；先去重（target 目录内），命中返回 {duplicate}。 */
+/** 原子写卡；先去重，命中返回 {duplicate}。审核守卫在数据库层强制。 */
 export async function writeCard(root, { kind, title, tags = [], body, source = '', status = 'pending', submittedBy = '', severity = 'info', reason = '', deletedAt = '' }, { threshold = 0.62, dedup = true } = {}) {
+  const db = getDb(root)
   const kindRoot = KIND_ROOTS[kind] || KIND_ROOTS.knowledge
-  const dir = path.join(root, kindRoot)
-  await fs.mkdir(dir, { recursive: true })
+
+  // 审核守卫：数据库层强制，调用方传的 status 仅作 fallback
+  const enforcedStatus = enforceAudit(root, kind, submittedBy, status)
+
   if (dedup) {
-    const hit = await dedupCheck(dir, body, threshold)
-    if (hit) return { ok: false, duplicate: { ...hit, path: `${kindRoot}/${hit.path}` } }
+    const hit = await dedupCheck(root, body, threshold)
+    if (hit) return { ok: false, duplicate: { ...hit, path: hit.path } }
   }
+
   const slug = safeSlug(title)
-  let rel = `${slug}.md`
+  let rel = `${kindRoot}/${slug}.md`
   let index = 2
-  while (await exists(path.join(dir, rel))) {
-    rel = `${slug}-${index}.md`
+  while (db.prepare('SELECT 1 FROM cards WHERE path = ?').get(rel)) {
+    rel = `${kindRoot}/${slug}-${index}.md`
     index++
   }
+
   const now = new Date().toISOString()
-  const text = [
-    '---',
-    `formatVersion: 1`,
-    `kind: ${kind}`,
-    `title: ${yamlString(title)}`,
-    `tags: [${tags.map((t) => yamlString(t)).join(', ')}]`,
-    `created: ${now}`,
-    `updated: ${now}`,
-    `status: ${status}`,
-    ...(deletedAt ? [`deletedAt: ${deletedAt}`] : []),
-    ...(submittedBy ? [`submittedBy: ${yamlString(submittedBy)}`] : []),
-    ...(severity ? [`severity: ${severity}`] : []),
-    ...(reason ? [`reason: ${yamlString(reason)}`] : []),
-    ...(source ? [`source: ${source}`] : []),
-    '---',
-    '',
-    `# ${title}`,
-    '',
+  const summary = body.trim().slice(0, 200)
+  db.prepare(`
+    INSERT INTO cards (path, kind, title, tags, body, summary, status, source, submitted_by, severity, reason, created_at, updated_at, deleted_at)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  `).run(
+    rel,
+    kind,
+    title,
+    JSON.stringify(tags),
     body.trim(),
-    '',
-  ].join('\n')
-  const target = path.join(dir, rel)
-  const tmp = target + '.tmp'
-  await fs.writeFile(tmp, text, 'utf8')
-  await fs.rename(tmp, target)
-  return { ok: true, path: `${kindRoot}/${rel}`, kind }
-}
-
-/** 向已存在的卡追加「更新记录」段（去重命中时的正确动作，移植 boujoy 语义）。 */
-export async function appendUpdate(root, rel, updateText, { threshold = 0.62 } = {}) {
-  const target = resolveInside(root, rel)
-  if (!target) throw new Error('路径越界')
-  const existing = await fs.readFile(target, 'utf8')
-  const { meta, body } = parseCard(existing)
+    summary,
+    enforcedStatus,
+    source,
+    submittedBy,
+    severity,
+    reason,
+    now,
+    now,
+    deletedAt || null,
+  )
+  return { ok: true, path: rel, kind }
+}
+
+/** 向已存在的卡追加更新记录。 */
+export async function appendUpdate(root, rel, updateText) {
+  const db = getDb(root)
+  const row = db.prepare('SELECT id FROM cards WHERE path = ?').get(rel)
+  if (!row) throw new Error('卡片不存在: ' + rel)
   const now = new Date().toISOString()
-  const updated = [
-    '---',
-    `formatVersion: 1`,
-    `kind: ${meta.kind || 'knowledge'}`,
-    `title: ${yamlString(meta.title)}`,
-    `tags: [${(meta.tags || []).map((t) => yamlString(t)).join(', ')}]`,
-    `created: ${meta.created || now}`,
-    `updated: ${now}`,
-    `status: ${meta.status || 'pending'}`,
-    ...(meta.submittedBy ? [`submittedBy: ${yamlString(meta.submittedBy)}`] : []),
-    ...(meta.severity ? [`severity: ${meta.severity}`] : []),
-    ...(meta.reason ? [`reason: ${yamlString(meta.reason)}`] : []),
-    ...(meta.source ? [`source: ${meta.source}`] : []),
-    ...(meta.deletedAt ? [`deletedAt: ${meta.deletedAt}`] : []),
-    '---',
-    '',
-    body.trim(),
-    '',
-    '## 更新记录',
-    '',
-    `- ${now.slice(0, 10)}：${updateText.trim()}`,
-    '',
-  ].join('\n')
-  const tmp = target + '.tmp'
-  await fs.writeFile(tmp, updated, 'utf8')
-  await fs.rename(tmp, target)
-  return { ok: true, path: rel, kind: meta.kind || 'knowledge', updated: now }
+  db.prepare('INSERT INTO card_updates (card_id, content, created_at) VALUES (?, ?, ?)').run(row.id, updateText.trim(), now)
+  db.prepare('UPDATE cards SET updated_at = ? WHERE id = ?').run(now, row.id)
+  return { ok: true, path: rel, updated: now }
 }
 
-/** 检索：整词/中文 bigram 命中 path + 正文。返回卡片摘要（带命中度）。minScore 过滤弱命中；semantic=true 加本地语义分；有反馈则据此反哺排序。 */
+/** 合并多张卡为一张。 */
+export async function mergeCards(root, paths) {
+  const list = (Array.isArray(paths) ? paths : []).map((p) => String(p || '').trim()).filter(Boolean)
+  if (list.length < 2) return { ok: false, error: '至少选 2 张卡' }
+  const db = getDb(root)
+
+  const rows = []
+  for (const p of list) {
+    const row = db.prepare('SELECT * FROM cards WHERE path = ?').get(p)
+    if (row) rows.push(row)
+  }
+  if (rows.length < 2) return { ok: false, error: '读取失败' }
+
+  const first = rows[0]
+  const tags = new Set(JSON.parse(first.tags || '[]'))
+  let combined = ''
+  rows.forEach((row, i) => {
+    const rowTags = JSON.parse(row.tags || '[]')
+    rowTags.forEach((t) => tags.add(t))
+    combined += (i ? '\n\n---\n\n' : '') + row.body.trim()
+  })
+
+  const title = (first.title || '合并记忆') + '（合并）'
+  const r = await writeCard(root, { kind: first.kind || 'knowledge', title, tags: [...tags], body: combined, source: 'merge', status: 'pending', submittedBy: 'merge', reason: '多卡合并' }, { dedup: false })
+  if (!r.ok) return { ok: false, error: '写入失败' }
+  for (const row of rows) { try { await deleteCard(root, row.path, { permanent: true }) } catch {} }
+  return { ok: true, path: r.path, merged: rows.length }
+}
+
+/** 检索：整词/中文 bigram 命中。 */
 export async function search(root, query, { limit = 30, minScore = 0, semantic = false } = {}) {
   const q = String(query || '').trim()
   if (!q) return []
-  const cards = await listCards(root)
+  const db = getDb(root)
+  const rows = db.prepare("SELECT * FROM cards WHERE status = 'approved' ORDER BY updated_at DESC").all()
   const wanted = queryTerms(q)
   const out = []
-  for (const card of cards) {
-    let text
-    try {
-      text = await fs.readFile(path.join(root, card.path), 'utf8')
-    } catch {
-      continue
-    }
-    const haystack = `${card.path}\n${card.title}\n${text}`.toLowerCase()
+  for (const row of rows) {
+    const card = rowToCard(row)
+    const haystack = `${card.path}\n${card.title}\n${row.body}`.toLowerCase()
     let score = 0
     if (haystack.includes(q.toLowerCase())) score = 3
     for (const term of wanted) {
       if (haystack.includes(term.toLowerCase())) score += 1
     }
-    // 本地语义加分：Jaccard bigram 相似度（无 embedding 依赖），覆盖「同义改写/片段命中」
     if (semantic) score += Math.round(textSimilarity(q, `${card.title} ${card.summary}`) * 6)
     if (score > 0 && score >= minScore) {
-      out.push({ ...card, score, excerpt: text.replace(/^---[\s\S]*?---\r?\n?/, '').trim() })
+      out.push({ ...card, score, excerpt: row.body.trim().slice(0, 300) })
     }
   }
-  // 反馈反哺排序：对该查询「有用」的卡加分、「无关」的减分；query 与本次有词交集即生效。
+
+  // 反馈反哺排序
   const fb = await readFeedback(root)
   const ql = q.toLowerCase()
   const fbByPath = {}
@@ -490,63 +379,79 @@ export async function search(root, query, { limit = 30, minScore = 0, semantic =
   return out.slice(0, limit)
 }
 
-/** 当日简报：按 mtime 列出今天新增/更新的卡（供每日回顾）。 */
+/** 当日简报。 */
 export function dailyBrief(cardsToday) {
   if (!cardsToday || cardsToday.length === 0) return '今天还没有新的记忆沉淀。'
   return cardsToday.map((c) => `- ${c.kind}｜${c.title}`).join('\n')
 }
 
-/** 生成今日简报文件到 00-System/daily-YYYY-MM-DD.md，幂等（已存在则跳过）。 */
+/** 生成今日简报卡（INSERT into cards）。 */
 export async function generateDailyBrief(root) {
   const d = new Date()
   const date = `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, '0')}-${String(d.getDate()).padStart(2, '0')}`
-  const dir = path.join(root, '00-System')
-  const file = path.join(dir, `daily-${date}.md`)
   try {
-    if (await exists(file)) return { ok: true, existed: true, file }
+    const db = getDb(root)
+    // 幂等：检查是否已存在
+    const existing = db.prepare("SELECT 1 FROM cards WHERE title = ? AND status = 'approved'").get(`每日回顾 ${date}`)
+    if (existing) return { ok: true, existed: true }
+
     const s = await stats(root)
-    const content = `---\nkind: prompt\ntitle: 每日回顾 ${date}\ntags: [每日回顾, 统计]\ncreated: ${new Date().toISOString()}\nupdated: ${new Date().toISOString()}\nsource: daily-brief\nstatus: approved\n---\n# 每日回顾 ${date}\n\n今日新增 ${s.today} · 近 7 天 ${s.week} · 总 ${s.total}\n\n## 今日沉淀\n${dailyBrief(s.todayCards)}\n`
-    await fs.mkdir(dir, { recursive: true })
-    await fs.writeFile(file, content, 'utf8')
-    return { ok: true, existed: false, file }
+    const body = `今日新增 ${s.today} · 近 7 天 ${s.week} · 总 ${s.total}\n\n## 今日沉淀\n${dailyBrief(s.todayCards)}`
+    const now = new Date().toISOString()
+    db.prepare(`
+      INSERT INTO cards (path, kind, title, tags, body, summary, status, source, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(
+      `00-System/daily-${date}.md`,
+      'prompt',
+      `每日回顾 ${date}`,
+      JSON.stringify(['每日回顾', '统计']),
+      body,
+      body.slice(0, 200),
+      'approved',
+      'daily-brief',
+      now,
+      now,
+    )
+    return { ok: true, existed: false }
   } catch (e) {
     return { ok: false, error: String(e.message || e) }
   }
 }
 
-/** 用量趋势：返回最近 N 天每天新增卡片数 [{date, count}]。 */
+/** 用量趋势：最近 N 天每天新增卡片数。 */
 export async function dailyCounts(root, days = 30) {
-  const cards = await listCards(root)
-  const now = Date.now()
-  const buckets = {}
-  for (let d = 0; d < days; d++) {
-    const date = new Date(now - d * 86400000)
-    const key = `${date.getFullYear()}-${String(date.getMonth() + 1).padStart(2, '0')}-${String(date.getDate()).padStart(2, '0')}`
-    buckets[key] = 0
-  }
-  for (const c of cards) {
-    if (!c.created) continue
-    const d = new Date(c.created)
-    const key = `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, '0')}-${String(d.getDate()).padStart(2, '0')}`
-    if (key in buckets) buckets[key]++
+  const db = getDb(root)
+  const cut = new Date(Date.now() - days * 86400000).toISOString()
+  const rows = db.prepare("SELECT DATE(created_at) as d, COUNT(*) as cnt FROM cards WHERE created_at >= ? GROUP BY DATE(created_at)").all(cut)
+  const map = new Map(rows.map((r) => [r.d, r.cnt]))
+  const out = []
+  for (let i = days - 1; i >= 0; i--) {
+    const dt = new Date(Date.now() - i * 86400000)
+    const key = `${dt.getFullYear()}-${String(dt.getMonth() + 1).padStart(2, '0')}-${String(dt.getDate()).padStart(2, '0')}`
+    out.push({ date: key, count: map.get(key) || 0 })
   }
-  return Object.entries(buckets).sort(([a], [b]) => a.localeCompare(b)).map(([date, count]) => ({ date, count }))
+  return out
 }
 
 /** 导出全部卡片原始 Markdown。 */
 export async function exportCards(root) {
-  const cards = await listCards(root)
-  const out = []
-  for (const c of cards) {
-    try { out.push({ path: c.path, title: c.title, kind: c.kind, text: await fs.readFile(path.join(root, c.path), 'utf8') }) } catch { /* 跳过坏文件 */ }
-  }
-  return out
+  const db = getDb(root)
+  const rows = db.prepare('SELECT * FROM cards ORDER BY updated_at DESC').all()
+  return rows.map((row) => {
+    const { text } = rowToMarkdown(row)
+    return { path: row.path, title: row.title, kind: row.kind, text }
+  })
 }
 
-/** 图谱：节点 = 卡片；边 = [[wikilink]]（同 vault 命中）或共享标签。 */
+/** 图谱：节点 = 卡片；边 = [[wikilink]] 或共享标签。 */
 export async function graph(root) {
-  const cards = await listCards(root)
+  const db = getDb(root)
+  const rows = db.prepare("SELECT * FROM cards WHERE status = 'approved' ORDER BY updated_at DESC").all()
+  const cards = rows.map(rowToCard)
   const byPath = new Map(cards.map((c) => [c.path, c]))
+  const bodyMap = new Map(rows.map((r) => [r.path, r.body]))
+
   const nodes = cards.map((c) => ({
     id: c.path,
     title: c.title,
@@ -561,22 +466,15 @@ export async function graph(root) {
   const addDegree = (p) => { const n = nodeById.get(p); if (n) n.linkCount++ }
   const edges = []
   const seen = new Set()
-  const bodies = new Map()
   const addEdge = (a, b, type) => {
     const key = [a, b].sort().join('|') + '|' + type
     if (seen.has(key)) return
     seen.add(key)
     edges.push({ source: a, target: b, type })
   }
+
   for (const card of cards) {
-    let text = ''
-    try {
-      text = await fs.readFile(path.join(root, card.path), 'utf8')
-    } catch {
-      continue
-    }
-    bodies.set(card.path, text)
-    // wikilinks：[[目标路径]] 或 [[标题]]
+    const text = bodyMap.get(card.path) || ''
     for (const m of text.matchAll(/\[\[([^\]|]+)(?:\|[^\]]+)?\]\]/g)) {
       const raw = m[1].trim().replace(/\.md$/, '')
       const candidates = [
@@ -590,7 +488,6 @@ export async function graph(root) {
           break
         }
       }
-      // 也允许按标题匹配
       for (const other of cards) {
         if (other.path !== card.path && (other.title === raw || other.path.endsWith(`/${raw}.md`))) {
           addEdge(card.path, other.path, 'link'); addDegree(card.path); addDegree(other.path)
@@ -598,51 +495,55 @@ export async function graph(root) {
         }
       }
     }
-    // 共享标签（同一标签出现两次以上才连线，避免全连）
     for (const tag of card.tags) {
       for (const other of cards) {
         if (other.path !== card.path && other.tags.includes(tag)) addEdge(card.path, other.path, `tag:${tag}`)
       }
     }
   }
-  // 相似度关联建议：仅在同 kind 或共享标签的候选间计算 Jaccard，>0.42 连一条「similar」边，每节点最多 1 条，避免稠密发丝球。
+
+  // 相似度关联
   const similarCount = {}
-  const simCandidates = []
-  for (const c of cards) simCandidates.push(c.path)
-  for (let i = 0; i < simCandidates.length; i++) for (let j = i + 1; j < simCandidates.length; j++) {
-    const a = simCandidates[i], b = simCandidates[j]
-    const ca = byPath.get(a), cb = byPath.get(b)
-    if (!ca || !cb) continue
-    if (ca.kind !== cb.kind && !ca.tags.some((t) => cb.tags.includes(t))) continue
-    if ((similarCount[a] || 0) >= 1 || (similarCount[b] || 0) >= 1) continue
-    const sim = textSimilarity(bodies.get(a) || '', bodies.get(b) || '')
-    if (sim >= 0.42) { addEdge(a, b, 'similar'); addDegree(a); addDegree(b); similarCount[a] = (similarCount[a] || 0) + 1; similarCount[b] = (similarCount[b] || 0) + 1 }
+  for (let i = 0; i < cards.length; i++) for (let j = i + 1; j < cards.length; j++) {
+    const a = cards[i], b = cards[j]
+    if (a.kind !== b.kind && !a.tags.some((t) => b.tags.includes(t))) continue
+    if ((similarCount[a.path] || 0) >= 1 || (similarCount[b.path] || 0) >= 1) continue
+    const sim = textSimilarity(bodyMap.get(a.path) || '', bodyMap.get(b.path) || '')
+    if (sim >= 0.42) { addEdge(a.path, b.path, 'similar'); addDegree(a.path); addDegree(b.path); similarCount[a.path] = (similarCount[a.path] || 0) + 1; similarCount[b.path] = (similarCount[b.path] || 0) + 1 }
   }
   return { nodes, edges }
 }
 
-/** 统计（增强）：overview 全量 + 今日/本周新增 + 今日新增卡片明细。 */
+/** 统计。 */
 export async function stats(root) {
-  const cards = await listCards(root)
-  const byKind = {}
-  for (const c of cards) byKind[c.kind] = (byKind[c.kind] || 0) + 1
-  const now = Date.now()
-  const day = now - 86400000
-  const week = now - 7 * 86400000
-  const today = cards.filter((c) => c.mtime > day)
+  const db = getDb(root)
+  const totalRow = db.prepare("SELECT COUNT(*) as cnt FROM cards WHERE status = 'approved'").get()
+  const byKindRows = db.prepare("SELECT kind, COUNT(*) as cnt FROM cards WHERE status = 'approved' GROUP BY kind").all()
+  const byKind = Object.fromEntries(byKindRows.map((r) => [r.kind, r.cnt]))
+
+  const now = new Date()
+  const dayAgo = new Date(now.getTime() - 86400000).toISOString()
+  const weekAgo = new Date(now.getTime() - 7 * 86400000).toISOString()
+  const todayRow = db.prepare("SELECT COUNT(*) as cnt FROM cards WHERE status = 'approved' AND updated_at >= ?").get(dayAgo)
+  const weekRow = db.prepare("SELECT COUNT(*) as cnt FROM cards WHERE status = 'approved' AND updated_at >= ?").get(weekAgo)
+  const tagRows = db.prepare("SELECT tags FROM cards WHERE status = 'approved'").all()
   const tagSet = new Set()
-  for (const c of cards) for (const t of c.tags) tagSet.add(t)
+  for (const r of tagRows) { for (const t of JSON.parse(r.tags || '[]')) tagSet.add(t) }
+
+  const todayCardsRows = db.prepare("SELECT * FROM cards WHERE status = 'approved' AND updated_at >= ? ORDER BY updated_at DESC LIMIT 30").all(dayAgo)
+  const todayCards = todayCardsRows.map((row) => ({ path: row.path, title: row.title, kind: row.kind, updated: row.updated_at, summary: (row.summary || '').slice(0, 80) }))
+
   return {
-    total: cards.length,
-    today: today.length,
-    week: cards.filter((c) => c.mtime > week).length,
+    total: totalRow.cnt,
+    today: todayRow.cnt,
+    week: weekRow.cnt,
     tags: tagSet.size,
     byKind,
-    todayCards: today.slice(0, 30).map((c) => ({ path: c.path, title: c.title, kind: c.kind, updated: c.updated, summary: c.summary.slice(0, 80) })),
+    todayCards,
   }
 }
 
-/** 跨库聚合图谱：roots = [{name, root}]，每个 vault 的子图合并（node id 前缀 profile 名避免冲突）。 */
+/** 跨库聚合图谱。 */
 export async function graphAll(roots) {
   const nodes = []; const edges = []; const idSet = new Set()
   for (const r of roots) {
@@ -656,7 +557,7 @@ export async function graphAll(roots) {
   return { nodes, edges }
 }
 
-/** 跨库聚合检索：多个 vault 的结果合并（path 前缀 profile 名）。 */
+/** 跨库聚合检索。 */
 export async function searchAll(roots, query, opts = {}) {
   const out = []
   for (const r of roots) {
@@ -669,18 +570,18 @@ export async function searchAll(roots, query, opts = {}) {
   return out.slice(0, opts.limit || 30)
 }
 
-/** 整理建议（非破坏性预览）：高相似卡对 + 陈旧卡（>90 天未更新且无连线）。 */
+/** 整理建议（非破坏性预览）。 */
 export async function optimizeCandidates(root) {
-  const cards = await listCards(root)
+  const db = getDb(root)
+  const rows = db.prepare("SELECT * FROM cards WHERE status = 'approved' ORDER BY updated_at DESC").all()
+  const cards = rows.map(rowToCard)
+  const bodyMap = new Map(rows.map((r) => [r.path, (r.body || '').slice(0, 4000)]))
+
   const merge = []
-  const bodies = new Map()
-  for (const c of cards) {
-    try { bodies.set(c.path, (await fs.readFile(path.join(root, c.path), 'utf8')).slice(0, 4000)) } catch { bodies.set(c.path, '') }
-  }
   for (let i = 0; i < cards.length; i++) for (let j = i + 1; j < cards.length; j++) {
     const a = cards[i], b = cards[j]
     if (a.kind !== b.kind) continue
-    const sim = textSimilarity(bodies.get(a.path) || '', bodies.get(b.path) || '')
+    const sim = textSimilarity(bodyMap.get(a.path) || '', bodyMap.get(b.path) || '')
     if (sim >= 0.55) merge.push({ a: { path: a.path, title: a.title }, b: { path: b.path, title: b.title }, sim: Math.round(sim * 100) / 100 })
   }
   merge.sort((x, y) => y.sim - x.sim)
@@ -689,16 +590,7 @@ export async function optimizeCandidates(root) {
   return { merge: merge.slice(0, 40), stale }
 }
 
-/**
- * 一键优化执行：根据 /optimize 候选合并相似卡 + （可选）清理陈旧卡。
- * @param {string} root
- * @param {object} [opts]
- * @param {number} [opts.simThreshold=0.55]   相似度阈值（与 optimizeCandidates 一致）
- * @param {number} [opts.staleDays=90]        多久未更新视为「陈旧」
- * @param {boolean} [opts.cleanupStale=false] 默认不动陈旧卡（用户敏感）
- * @param {boolean} [opts.dryRun=false]       只返回计划，不执行
- * @returns {Promise<{ok:true, plan:{merged:number, staleDeleted:number, staleSkipped:number}, merged:[{from,to}], staleDeleted:[string], staleSkipped:[string], errors:[string]}>}
- */
+/** 一键优化执行。 */
 export async function optimizeApply(root, opts = {}) {
   const simThreshold = Number(opts.simThreshold ?? 0.55)
   const staleDays = Number(opts.staleDays ?? 90)
@@ -748,19 +640,28 @@ export async function optimizeApply(root, opts = {}) {
   }
 }
 
-/** 召回反馈记录：命中是否有用（供相关性调优）。文件存 vault 根 `.feedback.json`。 */
+/** 读取反馈记录。 */
 export async function readFeedback(root) {
-  try { return JSON.parse(await fs.readFile(path.join(root, '.feedback.json'), 'utf8')) } catch { return [] }
+  const db = getDb(root)
+  const rows = db.prepare('SELECT * FROM feedback ORDER BY created_at DESC').all()
+  return rows.map((r) => ({ ts: new Date(r.created_at).getTime(), query: r.query, path: r.card_path, useful: r.useful }))
 }
+
+/** 添加反馈。 */
 export async function addFeedback(root, rec) {
-  const list = await readFeedback(root)
-  list.unshift({ ts: Date.now(), ...rec })
-  await fs.writeFile(path.join(root, '.feedback.json'), JSON.stringify(list.slice(0, 500), null, 2), 'utf8')
+  const db = getDb(root)
+  db.prepare('INSERT INTO feedback (query, card_path, useful) VALUES (?, ?, ?)').run(
+    rec.query || '',
+    rec.path || rec.card_path || '',
+    rec.useful ? 1 : 0,
+  )
   return { ok: true }
 }
 
-/** 统计：按 kind 计数 + 最近 7 天更新数 + 总标签数。 */
-export async function overview(root) {  const cards = await listCards(root, { status: ['approved', 'pending', 'rejected'] })
+/** 统计：按 kind + status。 */
+export async function overview(root) {
+  const db = getDb(root)
+  const cards = await listCards(root, { status: ['approved', 'pending', 'rejected'] })
   const byKind = {}
   const statusCounts = {}
   for (const c of cards) { byKind[c.kind] = (byKind[c.kind] || 0) + 1; statusCounts[c.status] = (statusCounts[c.status] || 0) + 1 }
@@ -789,6 +690,7 @@ function resolveInside(root, rel) {
 
 async function exists(p) {
   try {
+    const { promises: fs } = await import('node:fs')
     await fs.access(p)
     return true
   } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memory-eternal",
-  "version": "0.1.2",
+  "version": "0.3.0",
   "description": "记忆核心（Memory Eternal）：自研的 DeepSeek Harness 记忆插件，不移植任何既有记忆框架——对话结束后自动沉淀知识卡到本地 Markdown Vault（自研去重、自研 CJK 检索、可 git 管理），设置页提供图形化知识库（统计 / 搜索 / 知识图谱 + 侧边栏一键弹窗），Agent 通过 memory_recall 工具按需召回历史上下文。零人工干预。",
   "license": "MIT",
   "repository": {