solopup-memory 0.21.0-beta.2 → 0.22.0-beta.3

package/scripts/security-check.mjs

@@ -0,0 +1,173 @@
+#!/usr/bin/env node
+/**
+ * 发版前安全自查（只读）。检查依赖面、运行时执行/网络面、密钥与绝对路径、
+ * CI 工作流权限与 pin、打包内容、许可与引擎声明。
+ *
+ *   node scripts/security-check.mjs
+ *   node scripts/security-check.mjs --json
+ *
+ * 这不是渗透测试，也不能替代独立审计；它检查的是“不该进发行包/不该在运行时出现”的机械项。
+ */
+
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs'
+import { dirname, join, relative } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const ROOT = join(HERE, '..')
+const pkg = JSON.parse(readFileSync(join(ROOT, 'package.json'), 'utf8'))
+const checks = []
+const check = (id, run) => {
+  try {
+    const detail = run()
+    checks.push({ id, passed: true, detail: detail ?? null })
+  } catch (error) {
+    checks.push({ id, passed: false, error: error.message })
+  }
+}
+const assert = (condition, message) => {
+  if (!condition) throw new Error(message)
+}
+
+function walk(dir, out = []) {
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    if (['node_modules', 'research', '.git', '.github', 'ci'].includes(entry.name)) continue
+    const full = join(dir, entry.name)
+    if (entry.isDirectory()) walk(full, out)
+    else if (entry.isFile()) out.push(full)
+  }
+  return out
+}
+
+const files = walk(ROOT)
+const runtimeFiles = files.filter((file) => file.endsWith('.mjs') && !/\/test-[^/]+\.mjs$/.test(file) && !file.includes('/scripts/') && !file.includes('/eval/'))
+const text = (file) => readFileSync(file, 'utf8')
+
+/** 发行包实际包含的文件（目录条目展开）。绝对路径与密钥检查只看这些。 */
+function shippedFiles() {
+  const out = new Set()
+  for (const entry of pkg.files ?? []) {
+    if (entry.endsWith('/')) {
+      const prefix = join(ROOT, entry)
+      if (existsSync(prefix)) for (const file of walk(prefix)) out.add(file)
+      continue
+    }
+    const full = join(ROOT, entry)
+    if (existsSync(full) && statSync(full).isFile()) out.add(full)
+  }
+  return [...out]
+}
+/** 注入测试语料与安全测试里故意放的反例，不是真实凭据。 */
+const fixtureAllowlist = (file) => /\/corpus\/|\/test-[^/]+\.mjs$|\/scripts\/security-check\.mjs$/.test(file)
+
+check('dependencies', () => {
+  const deps = { ...(pkg.dependencies ?? {}), ...(pkg.optionalDependencies ?? {}), ...(pkg.peerDependencies ?? {}) }
+  assert(Object.keys(deps).length === 0, `存在运行时依赖：${Object.keys(deps).join(',')}`)
+  return 'zero runtime dependencies'
+})
+
+check('install-hooks', () => {
+  const hooks = ['preinstall', 'install', 'postinstall', 'prepare', 'prepublishOnly'].filter((name) => pkg.scripts?.[name] !== undefined)
+  assert(hooks.length === 0, `存在安装/发布钩子：${hooks.join(',')}`)
+  return 'no install hooks'
+})
+
+check('runtime-network', () => {
+  const hits = []
+  for (const file of runtimeFiles) {
+    const body = text(file)
+    if (/\bfetch\s*\(/.test(body) || /node:(http|https|net|tls)/.test(body) || /\.listen\s*\(/.test(body) || /new\s+WebSocket/.test(body)) hits.push(relative(ROOT, file))
+  }
+  assert(hits.length === 0, `运行时出现网络/监听面：${hits.join(',')}`)
+  return `${runtimeFiles.length} 个运行时文件无网络调用`
+})
+
+check('runtime-exec', () => {
+  const allowed = new Set(['restore.mjs'])
+  const hits = []
+  for (const file of runtimeFiles) {
+    if (!/child_process|\bexecSync\b|\bspawnSync\b/.test(text(file))) continue
+    if (!allowed.has(relative(ROOT, file))) hits.push(relative(ROOT, file))
+  }
+  assert(hits.length === 0, `未登记的运行时子进程：${hits.join(',')}`)
+  const restore = text(join(ROOT, 'restore.mjs'))
+  assert(/spawnSync\('tar',\s*\[/.test(restore), 'restore.mjs 的子进程不是固定的 tar 参数调用')
+  assert(!/shell:\s*true/.test(restore), 'restore.mjs 启用了 shell')
+  return 'restore.mjs 仅以固定参数调用 tar（无 shell）'
+})
+
+check('secrets-shipped', () => {
+  const patterns = [/gho_[A-Za-z0-9]{20,}/, /npm_[A-Za-z0-9]{20,}/, /sk-[A-Za-z0-9]{20,}/, /-----BEGIN [A-Z ]*PRIVATE KEY-----/]
+  const hits = []
+  const shipped = shippedFiles().filter((file) => !fixtureAllowlist(file))
+  for (const file of [...shipped, join(ROOT, '.github', 'workflows', 'publish.yml')]) {
+    if (!existsSync(file) || !/\.(mjs|json|md|yml|yaml|js|txt)$/.test(file)) continue
+    const body = text(file)
+    for (const pattern of patterns) if (pattern.test(body)) hits.push(`${relative(ROOT, file)}:${pattern}`)
+  }
+  assert(hits.length === 0, `发行文件里发现密钥：${hits.slice(0, 5).join('；')}`)
+  return `${shipped.length} 个发行文件无密钥（测试语料已列允许项）`
+})
+
+check('absolute-paths-shipped', () => {
+  const pattern = /\/Users\/[a-z][^/\s"']+/
+  const hits = shippedFiles().filter((file) => /\.(mjs|json|md|yml|yaml|js|txt)$/.test(file) && pattern.test(text(file)))
+  assert(hits.length === 0, `发行文件含机器绝对路径：${hits.map((file) => relative(ROOT, file)).slice(0, 5).join(',')}`)
+  return `${shippedFiles().length} 个发行文件无 /Users 绝对路径`
+})
+
+check('workflow-pins', () => {
+  const file = join(ROOT, '.github', 'workflows', 'publish.yml')
+  if (!existsSync(file)) return '未包含发布工作流'
+  const body = text(file)
+  const uses = [...body.matchAll(/^\s*(?:-\s*)?uses:\s*(\S+)/gm)].map((match) => match[1])
+  const unpinned = uses.filter((value) => !value.startsWith('./.github/workflows/') && !/@[0-9a-f]{40}$/.test(value))
+  assert(unpinned.length === 0, `未按 commit pin 的 action：${unpinned.join(',')}`)
+  assert(/permissions:\s*\n\s*contents:\s*read/.test(body), '工作流权限不是 contents: read')
+  assert(!/secrets\.[A-Za-z0-9_]+/.test(body), '工作流引用了 secrets（优先 OIDC/可信发布）')
+  assert(!/pull_request_target/.test(body), '工作流使用了 pull_request_target')
+  return `${uses.length} 个 action 全部 pin 到 commit；contents: read；无 secrets`
+})
+
+check('package-contents', () => {
+  const bad = (pkg.files ?? []).filter((entry) => /research|last-run|\.tgz|node_modules|\.env/.test(entry))
+  assert(bad.length === 0, `发行包包含不该发布的条目：${bad.join(',')}`)
+  assert(pkg.files.includes('LICENSE') || pkg.license === 'MIT', '发行包未声明 LICENSE')
+  return `${pkg.files.length} 个发布条目，无研究目录/日志/tgz`
+})
+
+check('license', () => {
+  assert(pkg.license === 'MIT', `license=${pkg.license}`)
+  const body = text(join(ROOT, 'LICENSE'))
+  assert(/MIT License/.test(body), 'LICENSE 不是 MIT 正文')
+  return 'MIT'
+})
+
+check('engines', () => {
+  assert(pkg.engines?.node, '缺少 node engines 声明')
+  assert(pkg.engines?.dsh, '缺少 dsh engines 声明')
+  return `node ${pkg.engines.node}；dsh ${pkg.engines.dsh}`
+})
+
+check('gitignore', () => {
+  const body = existsSync(join(ROOT, '.gitignore')) ? text(join(ROOT, '.gitignore')) : ''
+  const need = ['node_modules/', '*.tgz']
+  const missing = need.filter((line) => !body.includes(line))
+  assert(missing.length === 0, `.gitignore 缺：${missing.join(',')}`)
+  return '.gitignore 覆盖 node_modules 与 tgz'
+})
+
+check('store-permissions-code', () => {
+  const security = text(join(ROOT, 'security.mjs'))
+  assert(/0o700/.test(security) && /0o600/.test(security), 'security.mjs 未显式设置 0700/0600')
+  return 'store 目录 0700、文件 0600（由 soak 实测再次验证）'
+})
+
+const passed = checks.every((row) => row.passed)
+const report = { passed, scope: 'mechanical pre-release checks; not an independent audit', version: pkg.version, checks }
+if (process.argv.includes('--json')) process.stdout.write(JSON.stringify(report, null, 2) + '\n')
+else {
+  for (const row of checks) console.log(`[${row.passed ? 'PASS' : 'FAIL'}] ${row.id}${row.passed ? ` · ${row.detail}` : ` · ${row.error}`}`)
+  console.log(passed ? `安全自查通过（${checks.length} 项；机械项，不是独立审计）` : '安全自查未通过')
+}
+if (!passed) process.exitCode = 1

package/scripts/soak.mjs

@@ -0,0 +1,219 @@
+#!/usr/bin/env node
+/**
+ * 可靠性测试（soak）：走**官方离线安装路径**，反复启动真实 DSH 宿主，并做一次 SIGKILL 恢复。
+ *
+ *   node scripts/soak.mjs                 # 3 次正常启停 + 1 次崩溃恢复
+ *   node scripts/soak.mjs --cycles 5
+ *   node scripts/soak.mjs --json
+ *
+ * 断言：
+ *   · 官方 CLI 能从 tgz 离线安装，profile 自动选中 bundle；
+ *   · 每次宿主启动都写入 .loaded.json：版本一致、6 工具、degraded 为空、sourceControl=managed；
+ *   · 每次优雅退出后，记忆内容文件逐字节不变（无模型调用时不该改动）；
+ *   · SIGKILL 后重启可加载，且没有遗留 .write.lock / .publication.json；
+ *   · 存储目录权限为 0700、文件 0600。
+ */
+
+import { spawn, spawnSync } from 'node:child_process'
+import { createHash } from 'node:crypto'
+import { existsSync, mkdtempSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync, statSync, writeFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import { VERSION } from '../version.mjs'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const ROOT = join(HERE, '..')
+const CLI = process.env.DSH_CLI ?? '/Applications/DeepSeek Harness.app/Contents/Resources/runtime/cli/bin/dsh'
+const TOOLS = ['memory_write', 'memory_forget', 'memory_links', 'memory_search', 'memory_prune', 'memory_status']
+const DATA_FILES = /^(MEMORY\.md|(user|feedback|project|reference)\.md|\.candidates\.json|\.episodes\.json|\.history\.jsonl)$/
+const hash = (file) => createHash('sha256').update(readFileSync(file)).digest('hex')
+const sleep = (ms) => new Promise((done) => setTimeout(done, ms))
+
+function dataFingerprint(memoryRoot) {
+  const out = []
+  const walk = (dir) => {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+      if (entry.name.startsWith('.')) continue
+      const full = join(dir, entry.name)
+      if (entry.isDirectory()) walk(full)
+      else if (entry.isFile() && DATA_FILES.test(entry.name)) out.push([full.slice(memoryRoot.length), statSync(full).size, hash(full)])
+    }
+  }
+  if (existsSync(memoryRoot)) walk(memoryRoot)
+  return JSON.stringify(out.sort())
+}
+
+function packTarball() {
+  const result = spawnSync('npm', ['pack', '--silent'], { cwd: ROOT, encoding: 'utf8', timeout: 60000 })
+  if (result.status !== 0) throw new Error(`npm pack 失败：${result.stderr ?? ''}`)
+  const name = result.stdout.trim().split('\n').at(-1)
+  return join(ROOT, name)
+}
+
+function install(tgz, home) {
+  const profile = join(home, 'profiles', 'soak')
+  mkdirSync(profile, { recursive: true })
+  writeFileSync(join(profile, 'package.json'), JSON.stringify({ name: 'solopup-soak', private: true, dependencies: {}, dsh: { profile: { bundles: ['@deepseek-ai/dsh-base', '@deepseek-ai/dsh-web-app'] } } }, null, 2))
+  writeFileSync(join(profile, 'cordis.yml'), '[]\n')
+  const result = spawnSync(CLI, ['plugin', '--profile', 'soak', 'add', tgz, '--offline', '--ignore-scripts'], {
+    env: { PATH: process.env.PATH, HOME: home, USERPROFILE: home, DSH_HOME: home },
+    encoding: 'utf8',
+    timeout: 180000,
+  })
+  if (result.status !== 0) throw new Error(`官方离线安装失败：${(result.stderr ?? result.stdout ?? '').slice(-500)}`)
+  const pkg = JSON.parse(readFileSync(join(profile, 'package.json'), 'utf8'))
+  if (!pkg.dsh?.profile?.bundles?.includes('solopup-memory')) throw new Error('安装后 bundle 未自动选中')
+  return profile
+}
+
+async function startHost(home, profile) {
+  const child = spawn(CLI, ['--profile', 'soak', '--port', '0', '--no-open'], {
+    env: { PATH: process.env.PATH, HOME: home, USERPROFILE: home, DSH_HOME: home, TMPDIR: join(home, 'tmp') },
+    stdio: ['ignore', 'pipe', 'pipe'],
+  })
+  let output = ''
+  child.stdout.on('data', (chunk) => (output += chunk))
+  child.stderr.on('data', (chunk) => (output += chunk))
+  const marker = join(home, 'memory', '.loaded.json')
+  const started = Date.now()
+  const deadline = started + 40000
+  while (Date.now() < deadline) {
+    await sleep(200)
+    if (!existsSync(marker)) continue
+    try {
+      const stamp = JSON.parse(readFileSync(marker, 'utf8'))
+      if (stamp?.pid === child.pid && stamp.version === VERSION) {
+        return { child, stamp, loadMs: Date.now() - started, output: () => output }
+      }
+    } catch {
+      /* 写入中，重试 */
+    }
+  }
+  child.kill('SIGKILL')
+  throw new Error(`宿主未在 40s 内就绪：${output.slice(-400)}`)
+}
+
+async function stopHost(child) {
+  const exited = new Promise((done) => child.once('exit', (code, signal) => done({ code, signal })))
+  child.kill('SIGTERM')
+  const timer = setTimeout(() => child.kill('SIGKILL'), 5000)
+  const result = await exited
+  clearTimeout(timer)
+  return result
+}
+
+function assertStorePermissions(memoryRoot) {
+  const mode = (path, expected) => {
+    const value = statSync(path).mode & 0o777
+    if (value !== expected) throw new Error(`${path} 权限 ${value.toString(8)}，期望 ${expected.toString(8)}`)
+  }
+  mode(memoryRoot, 0o700)
+  for (const name of readdirSync(memoryRoot)) {
+    if (name === 'projects') continue
+    const full = join(memoryRoot, name)
+    if (statSync(full).isFile() && !name.endsWith('.lock') && !name.endsWith('.json')) mode(full, 0o600)
+  }
+}
+
+export async function soak({ cycles = 3 } = {}) {
+  const base = realpathSync(mkdtempSync(join(homedir(), '.dsh-soak-')))
+  const home = join(base, 'home')
+  mkdirSync(home)
+  mkdirSync(join(home, 'tmp'))
+  const memoryRoot = join(home, 'memory')
+  const report = { cycles, version: VERSION, startedAt: new Date().toISOString(), loads: [], crash: null, dataStable: null, permissions: null }
+  try {
+    const tgz = packTarball()
+    const profile = install(tgz, home)
+    const baseline = dataFingerprint(memoryRoot)
+    for (let index = 0; index < cycles; index += 1) {
+      const run = await startHost(home, profile)
+      if (run.stamp.degraded?.length) throw new Error(`第 ${index + 1} 次加载 degraded：${run.stamp.degraded.join(',')}`)
+      if (run.stamp.sourceControl?.state !== 'managed') throw new Error(`第 ${index + 1} 次 sourceControl=${run.stamp.sourceControl?.state}`)
+      const missing = TOOLS.filter((name) => !(run.stamp.tools ?? []).includes(name))
+      if (missing.length) throw new Error(`第 ${index + 1} 次缺工具：${missing.join(',')}`)
+      if (index === 0) {
+        // 用官方 accept.mjs 对“正在运行的宿主”做只读安装/运行验收。
+        const accept = spawnSync(process.execPath, [join(ROOT, 'accept.mjs'), '--profile', 'soak'], {
+          env: { ...process.env, HOME: home, USERPROFILE: home, DSH_HOME: home },
+          encoding: 'utf8',
+          timeout: 30000,
+        })
+        let parsed
+        try {
+          parsed = JSON.parse(accept.stdout)
+        } catch {
+          throw new Error(`accept.mjs 输出无法解析：${(accept.stderr ?? accept.stdout ?? '').slice(-400)}`)
+        }
+        if (!parsed.passed) throw new Error(`accept.mjs 未通过：${JSON.stringify(parsed.checks.filter((row) => !row.passed))}`)
+        report.accept = { passed: true, checks: parsed.checks.length }
+      }
+      const stopped = await stopHost(run.child)
+      if (stopped.code !== 0 && stopped.signal !== 'SIGTERM') throw new Error(`第 ${index + 1} 次退出异常：${JSON.stringify(stopped)}`)
+      report.loads.push({ cycle: index + 1, loadMs: run.loadMs, exit: stopped.code ?? stopped.signal })
+    }
+    report.permissions = (assertStorePermissions(memoryRoot), 'ok')
+
+    // 崩溃恢复：加载后立刻 SIGKILL，再重启。
+    const crashRun = await startHost(home, profile)
+    crashRun.child.kill('SIGKILL')
+    await new Promise((done) => crashRun.child.once('exit', done))
+    const leftovers = ['.write.lock', '.publication.json'].filter((name) => existsSync(join(memoryRoot, name)))
+    if (leftovers.length) throw new Error(`崩溃后遗留：${leftovers.join(',')}`)
+    const restarted = await startHost(home, profile)
+    if (restarted.stamp.degraded?.length) throw new Error(`崩溃恢复后 degraded：${restarted.stamp.degraded.join(',')}`)
+    const restartMs = restarted.loadMs
+    await stopHost(restarted.child)
+    report.crash = { recovered: true, restartMs, leftovers: 0 }
+
+    // 并发：同一 store 上两个宿主同时运行，随后第三个宿主重新加载。
+    const hostA = await startHost(home, profile)
+    const hostB = await startHost(home, profile)
+    await sleep(1200)
+    const aliveA = hostA.child.exitCode === null
+    const aliveB = hostB.child.exitCode === null
+    if (!aliveA || !aliveB) throw new Error(`并发宿主未同时存活：A=${aliveA} B=${aliveB}`)
+    await stopHost(hostA.child)
+    await stopHost(hostB.child)
+    const reload = await startHost(home, profile)
+    if (reload.stamp.degraded?.length) throw new Error(`并发后 reload degraded：${reload.stamp.degraded.join(',')}`)
+    await stopHost(reload.child)
+    report.concurrency = { hosts: 2, bothAlive: true, reloadAfter: true }
+
+    report.dataStable = dataFingerprint(memoryRoot) === baseline
+    if (!report.dataStable) throw new Error('多轮启停后记忆内容文件发生变化（无模型调用时应保持不变）')
+    report.passed = true
+  } catch (error) {
+    report.passed = false
+    report.error = error.message
+  } finally {
+    rmSync(base, { recursive: true, force: true })
+  }
+  report.finishedAt = new Date().toISOString()
+  return report
+}
+
+if (process.argv[1] !== undefined && import.meta.url === `file://${process.argv[1]}`) {
+  const argv = process.argv.slice(2)
+  const cyclesAt = argv.indexOf('--cycles')
+  const cycles = cyclesAt >= 0 ? Number(argv[cyclesAt + 1]) : 3
+  const report = await soak({ cycles })
+  if (argv.includes('--json')) process.stdout.write(JSON.stringify(report, null, 2) + '\n')
+  else {
+    const lines = [
+      `SoloPup 可靠性测试（官方离线安装 + 真实宿主）· v${report.version}`,
+      `正常启停 ${report.loads.length} 次：` + report.loads.map((row) => `${row.loadMs}ms`).join('、') + `；退出 ${report.loads.map((row) => row.exit).join('、')}`,
+      report.crash ? `崩溃恢复：SIGKILL 后重启 ${report.crash.restartMs}ms，遗留锁/发布标记 ${report.crash.leftovers} 个` : '崩溃恢复：未执行',
+      report.concurrency ? `并发宿主：${report.concurrency.hosts} 个同时存活=${report.concurrency.bothAlive}，之后 reload=${report.concurrency.reloadAfter}` : '并发宿主：未执行',
+      `记忆内容文件多轮不变：${report.dataStable === true ? '是' : '否'}`,
+      `存储权限：${report.permissions ?? '未检查'}`,
+      report.accept ? `官方 accept 验收：${report.accept.checks} 项通过` : '官方 accept 验收：未执行',
+    ]
+    if (!report.passed) lines.push(`[FAIL] ${report.error}`)
+    else lines.push('[PASS] 可靠性测试通过')
+    process.stdout.write(lines.join('\n') + '\n')
+  }
+  if (!report.passed) process.exit(1)
+}

package/scripts/telemetry.mjs

@@ -0,0 +1,187 @@
+#!/usr/bin/env node
+/**
+ * L3 长期观测：把账本原料汇成“管道是否在产出”的指标。只读，不调用模型。
+ *
+ *   node scripts/telemetry.mjs            # 人类可读
+ *   node scripts/telemetry.mjs --json     # 机器可读
+ *   node scripts/telemetry.mjs --check    # 有 error 级告警时退出码 1
+ *
+ * 这些指标是“做梦”调度的输入：没有变更、没有产出、待审积压时，不该启动整理。
+ */
+
+import { existsSync, readFileSync, readdirSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const { candidateSnapshot } = await import(join(HERE, '..', 'candidates.mjs'))
+
+const DAY = 86_400_000
+
+function readText(file) {
+  try {
+    return readFileSync(file, 'utf8')
+  } catch {
+    return undefined
+  }
+}
+
+function readJson(file) {
+  try {
+    return JSON.parse(readFileSync(file, 'utf8'))
+  } catch {
+    return undefined
+  }
+}
+
+function indexEntryCount(dir) {
+  const text = readText(join(dir, 'MEMORY.md')) ?? ''
+  return text.split(/\r?\n/).filter((line) => line.trim().startsWith('- [')).length
+}
+
+function snapshot(dir, scope) {
+  try {
+    return candidateSnapshot(dir, scope)
+  } catch {
+    return undefined
+  }
+}
+
+function pendingStats(snapshot, now) {
+  const pending = (snapshot?.records ?? []).filter((record) => record.status === 'pending')
+  let oldest = null
+  for (const record of pending) {
+    const stamp = Date.parse(record.createdAt ?? '')
+    if (Number.isFinite(stamp) && (oldest === null || stamp < oldest)) oldest = stamp
+  }
+  return { count: pending.length, oldestDays: oldest === null ? null : Math.floor((now - oldest) / DAY) }
+}
+
+export function collect(root, now = Date.now()) {
+  const stores = []
+  const globalSnapshot = snapshot(root, 'global')
+  stores.push({ scope: 'global', dir: root, indexLines: indexEntryCount(root), ...pendingStats(globalSnapshot, now) })
+  let projectNames = []
+  try {
+    projectNames = readdirSync(join(root, 'projects'), { withFileTypes: true })
+      .filter((entry) => entry.isDirectory() && !entry.name.startsWith('.'))
+      .map((entry) => entry.name)
+      .sort()
+  } catch {
+    projectNames = []
+  }
+  for (const name of projectNames) {
+    const dir = join(root, 'projects', name)
+    const snap = snapshot(dir, 'project')
+    stores.push({ scope: 'project', name, dir, indexLines: indexEntryCount(dir), ...pendingStats(snap, now) })
+  }
+
+  // 审计账本：只看 capture 与 write，不推断“没记 = 没发生”。
+  const auditText = readText(join(root, '.audit.jsonl')) ?? ''
+  const events = []
+  for (const line of auditText.split(/\r?\n/)) {
+    if (line.trim().length === 0) continue
+    try {
+      events.push(JSON.parse(line))
+    } catch {
+      /* 坏行不算 */
+    }
+  }
+  const captures = events.filter((event) => event.op === 'capture')
+  const skipping = captures.filter((event) => event.reason === 'short-session-below-threshold')
+  const byOutcome = (outcome) => captures.filter((event) => event.outcome === outcome).length
+  const lastCaptureAt = captures.map((event) => Date.parse(event.at ?? '')).filter(Number.isFinite).sort().at(-1) ?? null
+  const inserts = captures.filter((event) => Number(event.inserted) > 0 && Number.isFinite(Date.parse(event.at ?? '')))
+  const lastInsertAt = inserts.map((event) => Date.parse(event.at)).sort().at(-1) ?? null
+
+  const jobState = readJson(join(root, '.capture-jobs.json'))
+  const jobs = Array.isArray(jobState?.jobs) ? jobState.jobs : []
+  const jobByStatus = {}
+  for (const job of jobs) jobByStatus[job.status] = (jobByStatus[job.status] ?? 0) + 1
+  const lastJobAt = jobs.map((job) => Number(job.updatedAt ?? job.at)).filter(Number.isFinite).sort().at(-1) ?? null
+
+  const state = readJson(join(root, '.capture-state.json'))
+  const candidates = (globalSnapshot?.records ?? [])
+  const lastRecordAt = candidates.map((record) => Date.parse(record.createdAt ?? '')).filter(Number.isFinite).sort().at(-1) ?? null
+  const lastOutputAt = Math.max(lastInsertAt ?? 0, lastRecordAt ?? 0) || null
+  const zeroOutputDays = lastOutputAt === null ? null : Math.floor((now - lastOutputAt) / DAY)
+
+  const warnings = []
+  if (captures.length >= 5) {
+    const success = byOutcome('ok') / captures.length
+    if (success < 0.5) warnings.push({ id: 'T1-low-capture-success', severity: 'warning', message: `捕获成功率 ${(success * 100).toFixed(1)}%（${byOutcome('ok')}/${captures.length}）` })
+  }
+  if (zeroOutputDays !== null && zeroOutputDays >= 3) {
+    warnings.push({ id: 'T2-zero-output', severity: zeroOutputDays >= 7 ? 'error' : 'warning', message: `已 ${zeroOutputDays} 天没有新记忆入库` })
+  }
+  if (skipping.length >= 3) {
+    warnings.push({ id: 'T3-short-sessions', severity: 'warning', message: `${skipping.length} 次捕获因会话过短被跳过（每 ${state?.everyTurns ?? 4} 轮才触发）` })
+  }
+  for (const store of stores) {
+    if (store.scope === 'project' && store.oldestDays !== null && store.oldestDays >= 7) {
+      warnings.push({ id: 'T4-pending-stale', severity: 'warning', message: `待审候选已挂 ${store.oldestDays} 天（${store.name}）` })
+    }
+  }
+  if (stores.every((store) => store.indexLines === 0)) {
+    warnings.push({ id: 'T5-no-memory', severity: 'info', message: '所有库都没有索引条目' })
+  }
+
+  return {
+    root,
+    generatedAt: new Date(now).toISOString(),
+    stores,
+    capture: {
+      total: captures.length,
+      ok: byOutcome('ok'),
+      error: byOutcome('error'),
+      rejected: byOutcome('rejected'),
+      partial: byOutcome('partial'),
+      skipped: skipping.length,
+      successRate: captures.length === 0 ? null : byOutcome('ok') / captures.length,
+      lastAt: lastCaptureAt === null ? null : new Date(lastCaptureAt).toISOString(),
+    },
+    jobs: { total: jobs.length, byStatus: jobByStatus, lastAt: lastJobAt === null ? null : new Date(lastJobAt).toISOString() },
+    output: {
+      lastInsertAt: lastInsertAt === null ? null : new Date(lastInsertAt).toISOString(),
+      lastRecordAt: lastRecordAt === null ? null : new Date(lastRecordAt).toISOString(),
+      zeroOutputDays,
+      captureState: state === undefined ? null : { at: state.at ?? null, turns: state.turns ?? null, everyTurns: state.everyTurns ?? null, running: state.running === true },
+    },
+    warnings,
+  }
+}
+
+const argv = process.argv.slice(2)
+const flag = (name) => argv.includes(name)
+const option = (name) => {
+  const at = argv.indexOf(name)
+  return at >= 0 ? argv[at + 1] : undefined
+}
+
+if (import.meta.url === `file://${process.argv[1]}`) {
+  const root = resolve(option('--root') ?? join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'memory'))
+  if (!existsSync(root)) {
+    console.error(`[telemetry] 记忆根不存在：${root}`)
+    process.exit(2)
+  }
+  const report = collect(root)
+  if (flag('--json')) process.stdout.write(JSON.stringify(report, null, 2) + '\n')
+  else {
+    const pct = (value) => (value === null ? '—' : `${(value * 100).toFixed(1)}%`)
+    const lines = [
+      `SoloPup 长期观测 · ${report.generatedAt}`,
+      `根目录：${report.root}`,
+      `捕获：${report.capture.total} 次（ok ${report.capture.ok}、error ${report.capture.error}、rejected ${report.capture.rejected}、partial ${report.capture.partial}、跳过短会话 ${report.capture.skipped}），成功率 ${pct(report.capture.successRate)}`,
+      `作业：${report.jobs.total} 个（${Object.entries(report.jobs.byStatus).map(([status, count]) => `${status} ${count}`).join('、') || '无'}）`,
+      `最后一次入库：${report.output.lastInsertAt ?? '从未'}；零产出 ${report.output.zeroOutputDays ?? '—'} 天`,
+    ]
+    for (const store of report.stores) {
+      const label = store.scope === 'global' ? 'global' : `project ${store.name}`
+      lines.push(`库 ${label}：索引 ${store.indexLines} 条；待审 ${store.count}（最老 ${store.oldestDays ?? '—'} 天）`)
+    }
+    for (const warning of report.warnings) lines.push(`   [${warning.severity}] ${warning.id} ${warning.message}`)
+    process.stdout.write(lines.join('\n') + '\n')
+  }
+  if (flag('--check') && report.warnings.some((warning) => warning.severity === 'error')) process.exit(1)
+}

package/scripts/verify.mjs

@@ -22,7 +22,7 @@ const ROOT = join(HERE, '..')
 const withAccept = !process.argv.includes('--no-accept')
 
 const testArgs=JSON.parse(readFileSync(join(ROOT,'package.json'),'utf8')).scripts.test.trim().split(/\s+/)
-if(testArgs[0]!=='node'||testArgs[1]!=='--test'||testArgs.slice(2).some(arg=>!/^test(?:-[a-z0-9-]+)?\.mjs$/.test(arg)&&!/^--test-concurrency=[1-9]\d*$/.test(arg)))throw Error('unsupported-test-command')
+if(testArgs[0]!=='node'||testArgs[1]!=='--test'||testArgs.slice(2).some(arg=>!/^test\/test(?:-[a-z0-9-]+)?\.mjs$/.test(arg)&&!/^--test-concurrency=[1-9]\d*$/.test(arg)))throw Error('unsupported-test-command')
 const SUITES=testArgs.slice(2).filter(arg=>arg.endsWith('.mjs'))
 
 function run(label, command, args) {
@@ -47,8 +47,10 @@ if (missing.length > 0) {
   process.exit(1)
 }
 
+results.push(run('安全自查', process.execPath, ['scripts/security-check.mjs']))
 results.push(run('测试', process.execPath, testArgs.slice(1)))
 results.push(run('加载探针', process.execPath, ['scripts/probe-load.mjs']))
+results.push(run('宿主历史契约', process.execPath, ['scripts/probe-history.mjs']))
 results.push(run('评测门禁', process.execPath, ['eval/run-eval.mjs', '--check']))
 results.push(run('可用性门禁', process.execPath, ['eval/mechanical-table.mjs', '--check']))
 if (withAccept) results.push(run('验收', process.execPath, ['accept.mjs']))

package/{test-adversarial.mjs → test/test-adversarial.mjs}

@@ -1,7 +1,7 @@
-import {prepareMountedFixture} from './fixture-host.mjs'
+import {prepareMountedFixture} from '../fixture-host.mjs'
 import {realpathSync} from 'node:fs'
 /**
- * 对抗测试。跑法：node --test ~/.dsh/plugins/memory/test-adversarial.mjs
+ * 对抗测试。跑法：node --test ~/.dsh/plugins/memory/test/test-adversarial.mjs
  *
  * 三层：
  *   1. 题库驱动 —— corpus/injections.json 里每条 payload 按 expect 断言
@@ -25,10 +25,10 @@ import { join, dirname } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import { tmpdir } from 'node:os'
 
-import { findSecrets, sanitizeForInjection, withLock } from './security.mjs'
-import { addIndexLine, apply, indexLine, isExpired, parseExpiry, storeDirFor, storeSize, writeMemory } from './index.mjs'
+import { findSecrets, sanitizeForInjection, withLock } from '../security.mjs'
+import { addIndexLine, apply, indexLine, isExpired, parseExpiry, storeDirFor, storeSize, writeMemory } from '../index.mjs'
 
-const HERE = dirname(fileURLToPath(import.meta.url))
+const HERE = dirname(dirname(fileURLToPath(import.meta.url)))
 
 const INVISIBLE = /[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F-\u009F\u200B-\u200F\u202A-\u202E\u2060-\u2069\uFEFF]|[\u{E0000}-\u{E007F}]/u
 

package/{test-belief-revision.mjs → test/test-belief-revision.mjs}

@@ -1,16 +1,16 @@
-import {applyWithValidationFixture as apply} from './fixture-host.mjs'
+import {applyWithValidationFixture as apply} from '../fixture-host.mjs'
 import {test} from 'node:test'
 import assert from 'node:assert/strict'
 import {mkdtempSync,realpathSync,mkdirSync,readFileSync,writeFileSync,rmSync,existsSync} from 'node:fs'
 import {join} from 'node:path'
 import {tmpdir} from 'node:os'
 import {createHash,randomUUID} from 'node:crypto'
-import {indexLine, searchStore, withdrawManagedSource, adoptCandidate, storeRevision, recoverMemoryPublication} from './index.mjs'
-import {writeFixtureMemory} from './fixture-host.mjs'
-import {listCaptureJobs} from './capture-jobs.mjs'
-import {candidateSnapshot,stageCandidate} from './candidates.mjs'
-import {normalizeMeaning} from './meaning.mjs'
-import {buildUserPrompt} from './capture-llm.mjs'
+import {indexLine, searchStore, withdrawManagedSource, adoptCandidate, storeRevision, recoverMemoryPublication} from '../index.mjs'
+import {writeFixtureMemory} from '../fixture-host.mjs'
+import {listCaptureJobs} from '../capture-jobs.mjs'
+import {candidateSnapshot,stageCandidate} from '../candidates.mjs'
+import {normalizeMeaning} from '../meaning.mjs'
+import {buildUserPrompt} from '../capture-llm.mjs'
 const hash=text=>createHash('sha256').update(text).digest('hex')
 async function box(run,options={}){
  const base=realpathSync(mkdtempSync(join(tmpdir(),'dsh-belief-'))),home=join(base,'home'),cwd=join(base,'project'),previous=process.env.DSH_HOME

package/{test-candidates.mjs → test/test-candidates.mjs}

@@ -5,11 +5,11 @@ import { join } from 'node:path'
 import { tmpdir } from 'node:os'
 import { spawn, spawnSync } from 'node:child_process'
 import { fileURLToPath } from 'node:url'
-import { stageCandidate, listCandidates, rejectCandidate, withdrawSource, pruneCandidates } from './candidates.mjs'
-import { writeSafely } from './security.mjs'
+import { stageCandidate, listCandidates, rejectCandidate, withdrawSource, pruneCandidates } from '../candidates.mjs'
+import { writeSafely } from '../security.mjs'
 
-const modulePath = fileURLToPath(new URL('./candidates.mjs', import.meta.url))
-const cli = fileURLToPath(new URL('./scripts/candidates.mjs', import.meta.url))
+const modulePath = fileURLToPath(new URL('../candidates.mjs', import.meta.url))
+const cli = fileURLToPath(new URL('../scripts/candidates.mjs', import.meta.url))
 const fixture = (n = 0) => ({ type: 'user', scope: 'project', summary: `本项目可能偏好低反差方案 ${n}`,
   sessionId: 'session-test', indexRevision: 'a'.repeat(64),
   evidence: [{ messageId: `message-${n}`, hash: 'b'.repeat(64), quote: '这次我选低反差的那一张图' }] })