solopup-memory 0.21.0-beta.2 → 0.22.0-beta.3

package/{test-packaging.mjs → test/test-packaging.mjs}

@@ -1,5 +1,5 @@
 /**
- * 打包完整性。跑法：node --test ~/.dsh/plugins/memory/test-packaging.mjs
+ * 打包完整性。跑法：node --test ~/.dsh/plugins/memory/test/test-packaging.mjs
  *
  * 发布前最容易漏的四件事：版本两处不一致、manifest 字段缺失、files 漏了运行时文件、
  * 文档里指向不存在的文件。这些都是机械可查的，不该靠人记得。
@@ -7,16 +7,16 @@
 
 import { test } from 'node:test'
 import assert from 'node:assert/strict'
-import { existsSync, readFileSync, mkdtempSync, mkdirSync, rmSync } from 'node:fs'
+import { existsSync, readFileSync, readdirSync, mkdtempSync, mkdirSync, rmSync } from 'node:fs'
 import { join, dirname } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import { tmpdir } from 'node:os'
 import { spawnSync } from 'node:child_process'
-import { probeEnvironment } from './scripts/probe-env.mjs'
+import { probeEnvironment } from '../scripts/probe-env.mjs'
 
-import { VERSION } from './version.mjs'
+import { VERSION } from '../version.mjs'
 
-const HERE = dirname(fileURLToPath(import.meta.url))
+const HERE = dirname(dirname(fileURLToPath(import.meta.url)))
 const pkg = JSON.parse(readFileSync(join(HERE, 'package.json'), 'utf8'))
 
 test('版本单点：package.json 与 version.mjs 一致', () => {
@@ -72,6 +72,15 @@ test('npm scripts 指向真实存在的测试文件', () => {
   for (const file of files) assert.ok(existsSync(join(HERE, file)), `脚本引用了不存在的 ${file}`)
 })
 
+test('测试集中在 test/，命令与发布清单完整覆盖同一集合', () => {
+  const isSuite = name => /^test(?:-[a-z0-9-]+)?\.mjs$/.test(name)
+  assert.deepEqual(readdirSync(HERE).filter(isSuite), [], '根目录不应再有测试入口')
+  const suites = readdirSync(join(HERE, 'test')).filter(isSuite).map(name => `test/${name}`).sort()
+  const declared = pkg.scripts.test.split(/\s+/).filter(token => token.endsWith('.mjs')).sort()
+  assert.deepEqual(declared, suites, 'npm test 应覆盖全部测试且没有重复项')
+  for (const suite of suites) assert.ok(pkg.files.includes(suite), `files 漏了 ${suite}`)
+})
+
 test('LICENSE 与 package.json 的 license 字段一致', () => {
   assert.equal(pkg.license, 'MIT')
   assert.match(readFileSync(join(HERE, 'LICENSE'), 'utf8'), /MIT License/)
@@ -100,3 +109,21 @@ test('真实探针子进程看不到合成凭据或 NODE_OPTIONS，home/tmp 均
     assert.doesNotMatch(child.stdout,/synthetic-key/)
   } finally {rmSync(root,{recursive:true,force:true})}
 })
+
+// This executes from both the source tree and the extracted npm archive.
+test('随包示例执行真实处理器，保留来源并隔离不同项目（非真实模型验收）', () => {
+  const child = spawnSync(process.execPath, [join(HERE, 'scripts/demo-source-recall.mjs'), '--json'], { encoding: 'utf8', timeout: 30000 })
+  assert.equal(child.status, 0, child.stderr)
+  const receipt = JSON.parse(child.stdout)
+  assert.equal(receipt.kind, 'synthetic-scripted-host-mechanics')
+  assert.equal(receipt.realDshHost, false)
+  assert.equal(receipt.realModel, false)
+  assert.equal(receipt.networkRequests, 0)
+  assert.equal(receipt.isolatedTemporaryHome, true)
+  assert.equal(receipt.separateProcesses, 3)
+  assert.equal(receipt.phases.write.result.status, 'recorded')
+  assert.equal(receipt.phases.recall.current.hits.length, 1)
+  assert.equal(receipt.phases.recall.history.hits.length, 1)
+  assert.equal(receipt.phases['other-project'].current.hits.length, 0)
+  assert.equal(receipt.phases['other-project'].history.hits.length, 0)
+})

package/{test-paired-analysis.mjs → test/test-paired-analysis.mjs}

@@ -1,6 +1,6 @@
 import { test } from 'node:test'
 import assert from 'node:assert/strict'
-import { analyzePairs, signTail } from './eval/paired-analysis.mjs'
+import { analyzePairs, signTail } from '../eval/paired-analysis.mjs'
 
 test('配对精确检验：已知二项尾概率', () => {
   assert.equal(signTail(0, 0), 1)

package/{test-patch.mjs → test/test-patch.mjs}

@@ -1,5 +1,5 @@
 /**
- * 安装/卸载脚本。跑法：node --test ~/.dsh/plugins/memory/test-patch.mjs
+ * 安装/卸载脚本。跑法：node --test ~/.dsh/plugins/memory/test/test-patch.mjs
  *
  * 这类脚本最容易在"用户的文件"上出事：删多了、重复插、覆盖掉别人的配置。
  * 所以测试重点不是"能不能装上"，而是"只动自己那几行"。
@@ -13,7 +13,7 @@ import { tmpdir } from 'node:os'
 import { fileURLToPath, pathToFileURL } from 'node:url'
 import { spawnSync } from 'node:child_process'
 
-import { run } from './scripts/patch.mjs'
+import { run } from '../scripts/patch.mjs'
 
 const OTHER = `# 用户自己的配置
 - id: locale
@@ -57,7 +57,7 @@ test('插件路径不存在时拒绝安装，且不改动文件', () => {
 test('安装：真实路径下写入块，且原有条目一行不少', () => {
   const box = sandbox()
   try {
-    const plugin = fileURLToPath(new URL('./index.mjs', import.meta.url))
+    const plugin = fileURLToPath(new URL('../index.mjs', import.meta.url))
     const result = run(['install', '--profile', box.profile, '--plugin', plugin])
     assert.equal(result.changed, true)
 
@@ -79,7 +79,7 @@ test('安装：真实路径下写入块，且原有条目一行不少', () => {
 test('幂等：装两次不产生第二个块', () => {
   const box = sandbox()
   try {
-    const plugin = fileURLToPath(new URL('./index.mjs', import.meta.url))
+    const plugin = fileURLToPath(new URL('../index.mjs', import.meta.url))
     run(['install', '--profile', box.profile, '--plugin', plugin])
     const first = readFileSync(box.file, 'utf8')
 
@@ -95,7 +95,7 @@ test('幂等：装两次不产生第二个块', () => {
 test('卸载：只删自己的块，用户配置逐字保留', () => {
   const box = sandbox()
   try {
-    const plugin = fileURLToPath(new URL('./index.mjs', import.meta.url))
+    const plugin = fileURLToPath(new URL('../index.mjs', import.meta.url))
     run(['install', '--profile', box.profile, '--plugin', plugin])
     const result = run(['uninstall', '--profile', box.profile])
     assert.equal(result.changed, true)
@@ -124,7 +124,7 @@ test('卸载：没装过时不动文件', () => {
 test('dry-run 不落盘', () => {
   const box = sandbox()
   try {
-    const plugin = fileURLToPath(new URL('./index.mjs', import.meta.url))
+    const plugin = fileURLToPath(new URL('../index.mjs', import.meta.url))
     const before = readFileSync(box.file, 'utf8')
     const result = run(['install', '--profile', box.profile, '--plugin', plugin, '--dry-run'])
     assert.equal(result.dryRun, true)
@@ -138,7 +138,7 @@ test('dry-run 不落盘', () => {
 test('标记不成对时拒绝操作（不猜）', () => {
   const box = sandbox(`${OTHER}# >>> dsh-memory\n- insert:\n`)
   try {
-    assert.throws(() => run(['install', '--profile', box.profile, '--plugin', fileURLToPath(new URL('./index.mjs', import.meta.url))]), /标记不成对/)
+    assert.throws(() => run(['install', '--profile', box.profile, '--plugin', fileURLToPath(new URL('../index.mjs', import.meta.url))]), /标记不成对/)
     assert.throws(() => run(['uninstall', '--profile', box.profile]), /标记不成对/)
   } finally {
     box.cleanup()
@@ -158,7 +158,7 @@ test('已有未托管的 memory 条目时拒绝安装（不制造副本）', ()
   try {
     const before = readFileSync(box.file, 'utf8')
     assert.throws(
-      () => run(['install', '--profile', box.profile, '--plugin', fileURLToPath(new URL('./index.mjs', import.meta.url))]),
+      () => run(['install', '--profile', box.profile, '--plugin', fileURLToPath(new URL('../index.mjs', import.meta.url))]),
       /未托管的 memory 条目/,
     )
     assert.equal(readFileSync(box.file, 'utf8'), before, '拒绝时不应改动文件')
@@ -171,7 +171,7 @@ test('全新空列表配置可安装，卸载逐字恢复注释与空白', () =>
   const original = '# clean profile\n  [] # intentional empty\n\n'
   const box = sandbox(original)
   try {
-    run(['install', '--profile', box.profile, '--plugin', fileURLToPath(new URL('./index.mjs', import.meta.url))])
+    run(['install', '--profile', box.profile, '--plugin', fileURLToPath(new URL('../index.mjs', import.meta.url))])
     const installed = readFileSync(box.file, 'utf8')
     assert.doesNotMatch(installed, /^\s*\[\]/m)
     assert.match(installed, /^- insert:/m)
@@ -183,7 +183,7 @@ test('全新空列表配置可安装，卸载逐字恢复注释与空白', () =>
 test('恢复空列表时保留托管块以外的新注释，损坏恢复标记则拒绝', () => {
   const box = sandbox('[]\n')
   try {
-    run(['install', '--profile', box.profile, '--plugin', fileURLToPath(new URL('./index.mjs', import.meta.url))])
+    run(['install', '--profile', box.profile, '--plugin', fileURLToPath(new URL('../index.mjs', import.meta.url))])
     const installed = readFileSync(box.file, 'utf8')
     writeFileSync(box.file, '# newer outside comment\n' + installed)
     run(['uninstall', '--profile', box.profile])
@@ -212,7 +212,7 @@ test('插件路径中的空格、中文与井号使用有效 file URL', () => {
 test('default plugin path installs correctly from a Unicode directory with spaces and URL metacharacters',()=>{
  const box=sandbox()
  try{
-  const local=join(box.root,'插件 空间#'),scripts=join(local,'scripts');mkdirSync(scripts,{recursive:true});writeFileSync(join(local,'index.mjs'),'export function apply() {}\n');const file=join(scripts,'patch.mjs');copyFileSync(fileURLToPath(new URL('./scripts/patch.mjs',import.meta.url)),file)
+  const local=join(box.root,'插件 空间#'),scripts=join(local,'scripts');mkdirSync(scripts,{recursive:true});writeFileSync(join(local,'index.mjs'),'export function apply() {}\n');const file=join(scripts,'patch.mjs');copyFileSync(fileURLToPath(new URL('../scripts/patch.mjs',import.meta.url)),file)
   const result=spawnSync(process.execPath,[file,'install','--profile',box.profile],{encoding:'utf8'});assert.equal(result.status,0,result.stderr);const body=readFileSync(box.file,'utf8'),href=JSON.parse(body.split('\n').filter(line=>line.trim().startsWith('name:')).at(-1).split('name:')[1].trim());assert.equal(realpathSync(fileURLToPath(href)),realpathSync(join(local,'index.mjs')));assert.ok(href.includes('%20')&&href.includes('%23'));assert.ok(body.includes('id: mcp-godot'))
  }finally{box.cleanup()}
 })

package/{test-plugin-contract.mjs → test/test-plugin-contract.mjs}

@@ -4,10 +4,10 @@ import assert from 'node:assert/strict'
 import { mkdtempSync, mkdirSync, readFileSync, existsSync, rmSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
-import { Config, normalizePluginConfig, DEFAULT_AUTO_CAPTURE } from './plugin-config.mjs'
-import { optionalService } from './host-services.mjs'
-import { extractWithLlm } from './capture-llm.mjs'
-import { apply,storeDirFor } from './index.mjs'
+import { Config, normalizePluginConfig, DEFAULT_AUTO_CAPTURE } from '../plugin-config.mjs'
+import { optionalService } from '../host-services.mjs'
+import { extractWithLlm } from '../capture-llm.mjs'
+import { apply,storeDirFor } from '../index.mjs'
 const sleep = ms => new Promise(resolve => setTimeout(resolve, ms))
 async function until(check) { for (let i = 0; i < 200; i++) { if (check()) return; await sleep(5) } throw Error('fixture deadline') }
 

package/test/test-privacy.mjs

@@ -0,0 +1,65 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+import {mkdtempSync,realpathSync,mkdirSync,readFileSync,writeFileSync,rmSync} from 'node:fs'
+import {join} from 'node:path'
+import {tmpdir} from 'node:os'
+import {apply,searchStore,lookupLinks} from '../index.mjs'
+import {writeFixtureMemory} from '../fixture-host.mjs'
+import {memoryPrivacy,privateMemory,publicMemoryRecords,publicMemoryIndex} from '../privacy.mjs'
+
+test('actual background extractor receives no unrelated saved private source or summary',async()=>{
+  const home=realpathSync(mkdtempSync(join(tmpdir(),'memory-private-background-'))),old=process.env.DSH_HOME;process.env.DSH_HOME=home
+  const cwd=join(home,'project'),handlers=[],effects=[];mkdirSync(cwd);let requestText,finished=false
+  const llm={async prepareCall(config){return{config,async*stream(request){requestText=JSON.stringify(request);yield{type:'text-delta',text:'[]'};yield{type:'finish',reason:{kind:'stop'}};finished=true}}}}
+  try{
+    apply({llm,systemPrompt:{context(){}},workingDirectory:{get:()=>cwd},tools:{register(){}},on:(name,fn)=>handlers.push([name,fn]),effect:fn=>effects.push(fn())},
+      {autoCapture:{everyTurns:1,provider:'fixture',model:'fixture'}})
+    writeFixtureMemory({dir:join(home,'memory'),type:'user',scope:'global',summary:'个人档案：出生于1993年4月16日，女性',meaning:{kind:'claim'}})
+    const session={id:'synthetic-unrelated-work'},emit=e=>{for(const [n,f]of handlers)if(n==='session/event')f(session,e)}
+    emit({type:'user/message',seq:1,data:{source:{kind:'user'},content:[{type:'text',text:'本项目以后交付字幕时固定先检查断句。'}]}})
+    emit({type:'step/end',seq:2})
+    for(let i=0;i<100&&!finished;i++)await new Promise(r=>setTimeout(r,5))
+    assert.equal(finished,true)
+    assert.doesNotMatch(requestText,/1993|4月16|个人档案：/)
+  }finally{for(const f of effects.reverse())if(typeof f==='function')f();if(old===undefined)delete process.env.DSH_HOME;else process.env.DSH_HOME=old;rmSync(home,{recursive:true,force:true})}
+})
+
+test('known personal categories default to on-demand, including evidence-only private data',()=>{
+  for(const text of ['生日是1993年4月16日','个人档案：女性','病史与用药资料','亲密关系与伴侣','家庭住址','[private:personal] opaque','birthday is April 16'])assert.equal(privateMemory(text),true)
+  assert.equal(privateMemory({summary:'工作反馈先给结论',evidence:[{quote:'我的生日是1993年4月16日，我希望先给结论。'}]}),true)
+  assert.equal(memoryPrivacy('字幕交付先检查中英断句').exposure,'automatic')
+  assert.equal(privateMemory('工具失败的原生记录仅用于诊断'),false)
+})
+test('background projections and pointers omit private evidence without changing originals',()=>{
+  const secret={indexLine:'- [user] 个人档案：出生于1993年4月16日 — user.md',summary:'个人档案：出生于1993年4月16日',evidence:[]}
+  const mixed={indexLine:'- [user] 回答先给结论 — user.md',summary:'回答先给结论',evidence:[{quote:'我的生日是1993年4月16日，回答先给结论'}]}
+  const safe={indexLine:'- [feedback] 字幕保留断句 — feedback.md',summary:'字幕保留断句',evidence:[]}
+  const records=[secret,mixed,safe],before=JSON.stringify(records)
+  assert.deepEqual(publicMemoryRecords(records),[safe])
+  assert.deepEqual(publicMemoryIndex(records.map(r=>r.indexLine),records),[safe.indexLine])
+  assert.equal(JSON.stringify(records),before)
+})
+test('real plugin render and both current/history search hide private records by default',()=>{
+  const home=realpathSync(mkdtempSync(join(tmpdir(),'memory-privacy-'))),old=process.env.DSH_HOME;process.env.DSH_HOME=home
+  const cwd=join(home,'project'),providers=[],tools=[];mkdirSync(cwd)
+  try{
+    apply({systemPrompt:{context:p=>providers.push(p)},workingDirectory:{get:()=>cwd},tools:{register:t=>tools.push(t),schemas:()=>[{name:'memory_write'}]},on(){},effect(){}},{autoCapture:{enabled:false}})
+    const dir=join(home,'memory'),secret='固定个人档案：出生于1993年4月16日，女性。'
+    const privateWrite=writeFixtureMemory({dir,type:'user',scope:'global',summary:secret,detail:'私人资料分行\n1993-04-16\n女性',meaning:{kind:'claim'}})
+    writeFixtureMemory({dir,type:'feedback',scope:'global',summary:'字幕验收先看断句',meaning:{kind:'preference'}})
+    const before=readFileSync(join(dir,'MEMORY.md'),'utf8')
+    const rendered=providers.find(p=>p.name==='memory:index').text({agent:{session:{}}})
+    assert.doesNotMatch(rendered,/1993|女性|固定个人档案/)
+    assert.match(rendered,/字幕验收先看断句/)
+    assert.match(providers.find(p=>p.name==='memory:protocol').text({agent:{session:{}}}),/includePrivate=true/)
+    assert.equal(searchStore(dir,'1993',{mode:'exact'}).hits.length,0)
+    assert.ok(searchStore(dir,'1993',{mode:'exact',includePrivate:true}).hits.length>0)
+    assert.equal(lookupLinks(dir,{id:privateWrite.id}).found,false)
+    assert.equal(lookupLinks(dir,{match:'个人档案'}).found,false)
+    assert.equal(searchStore(dir,'1993',{mode:'exact',view:'history',scope:'global'}).hits.length,0)
+    assert.ok(searchStore(dir,'1993',{mode:'exact',view:'history',scope:'global',includePrivate:true}).hits.length>0)
+    assert.throws(()=>searchStore(dir,'1993',{includePrivate:'true'}),/private-option/)
+    assert.equal(readFileSync(join(dir,'MEMORY.md'),'utf8'),before)
+    assert.ok(tools.find(t=>t.name==='memory_search').parameters.properties.includePrivate)
+  }finally{if(old===undefined)delete process.env.DSH_HOME;else process.env.DSH_HOME=old;rmSync(home,{recursive:true,force:true})}
+})

package/{test-project-stores.mjs → test/test-project-stores.mjs}

@@ -1,4 +1,4 @@
-import {prepareMountedFixture} from './fixture-host.mjs'
+import {prepareMountedFixture} from '../fixture-host.mjs'
 import {realpathSync} from 'node:fs'
 import { test } from 'node:test'
 import assert from 'node:assert/strict'
@@ -7,8 +7,8 @@ import { spawnSync } from 'node:child_process'
 import { join } from 'node:path'
 import { tmpdir } from 'node:os'
 import { fileURLToPath } from 'node:url'
-import { projectStoreDir, projectIdentity, legacyProjectSlug, inspectProjectStore, migrateProjectStore, recoverProjectStore } from './project-stores.mjs'
-import { storeDirFor, writeMemory, indexLine, searchStore, apply } from './index.mjs'
+import { projectStoreDir, projectIdentity, legacyProjectSlug, inspectProjectStore, migrateProjectStore, recoverProjectStore } from '../project-stores.mjs'
+import { storeDirFor, writeMemory, indexLine, searchStore, apply } from '../index.mjs'
 
 function box(run) {
   const root = realpathSync(mkdtempSync(join(tmpdir(), 'dsh-project-store-'))), store = join(root, 'memory'), a = join(root, 'A B'), b = join(root, 'A-B')
@@ -160,7 +160,7 @@ test('a live loaded host blocks applying migration while read-only inspection re
 }))
 test('actual SIGKILL after directory publication is recoverable and never assigns the copy to a colliding project', () => box(box => {
   const dir = legacy(box), before = contents(dir), options = reviewed(box)
-  const worker = `import {migrateProjectStore} from ${JSON.stringify(new URL('./project-stores.mjs', import.meta.url).href)};migrateProjectStore(process.argv[1],process.argv[2],{...JSON.parse(process.argv[3]),fault:event=>{if(event.phase==='renamed')process.kill(process.pid,'SIGKILL')}})`
+  const worker = `import {migrateProjectStore} from ${JSON.stringify(new URL('../project-stores.mjs', import.meta.url).href)};migrateProjectStore(process.argv[1],process.argv[2],{...JSON.parse(process.argv[3]),fault:event=>{if(event.phase==='renamed')process.kill(process.pid,'SIGKILL')}})`
   const result = spawnSync(process.execPath, ['--input-type=module', '-e', worker, box.store, box.a, JSON.stringify(options)], { encoding: 'utf8', timeout: 15000 })
   assert.equal(result.signal, 'SIGKILL', result.stderr)
   assert.throws(() => storeDirFor('project', box.a), /migration-needs-recovery/)
@@ -204,7 +204,7 @@ test('source edits after completed migration are diagnosed and never silently me
 }))
 test('local CLI previews and applies with both review hashes without package installation', () => box(box => {
   legacy(box)
-  const cli = fileURLToPath(new URL('./scripts/projects.mjs', import.meta.url))
+  const cli = fileURLToPath(new URL('../scripts/projects.mjs', import.meta.url))
   const run = args => spawnSync(process.execPath, [cli, ...args, '--cwd', box.a], { env: process.env, encoding: 'utf8', timeout: 10000 })
   const preview = run(['migrate'])
   assert.equal(preview.status, 0, preview.stderr)

package/{test-publication.mjs → test/test-publication.mjs}

@@ -6,11 +6,11 @@ import { join } from 'node:path'
 import { tmpdir } from 'node:os'
 import { spawnSync } from 'node:child_process'
 import { fileURLToPath } from 'node:url'
-import { stageCandidate, listCandidates, rejectCandidate, withdrawSource, pruneCandidates } from './candidates.mjs'
-import { adoptCandidate, recoverMemoryPublication, writeMemory, storeRevision, indexLine, searchStore, apply } from './index.mjs'
-import { commitPublication } from './publication.mjs'
+import { stageCandidate, listCandidates, rejectCandidate, withdrawSource, pruneCandidates } from '../candidates.mjs'
+import { adoptCandidate, recoverMemoryPublication, writeMemory, storeRevision, indexLine, searchStore, apply } from '../index.mjs'
+import { commitPublication } from '../publication.mjs'
 
-const modulePath = fileURLToPath(new URL('./index.mjs', import.meta.url))
+const modulePath = fileURLToPath(new URL('../index.mjs', import.meta.url))
 function fixture(dir) {
   return { type: 'user', scope: 'project', summary: '本项目偏好柔和低反差的光线', detail: '仅限本项目的夜间室内对白场景。',
     sessionId: 'review-session', indexRevision: storeRevision(dir),

package/{test-restore.mjs → test/test-restore.mjs}

@@ -6,17 +6,17 @@ import {tmpdir} from 'node:os'
 import {spawnSync} from 'node:child_process'
 import {fileURLToPath} from 'node:url'
 import {createHash} from 'node:crypto'
-import {createMemorySnapshot,snapshotIO} from './snapshots.mjs'
-import {restoreMemorySnapshot,reviewMemoryRestore,resumeMemoryRestore} from './restore.mjs'
-import {restorationPending,restorationJournalPath} from './restoration-lock.mjs'
-import {initializeManagedMemory,managedMemoryStatus,writeMemory,indexLine,searchStore,withdrawManagedSource,storeDirFor,apply} from './index.mjs'
-import {controlStatus} from './managed-policy.mjs'
-import {claimCaptureJob,finishCaptureJob,listCaptureJobs} from './capture-jobs.mjs'
-import {captureInputDescriptor,enqueueCaptureInput,listCaptureInputs,bindCaptureInput} from './capture-inputs.mjs'
-import {compileValueRevision} from './field-lineage.mjs'
-import {candidateSnapshot} from './candidates.mjs'
-import {episodeSnapshot} from './episodes.mjs'
-const here=dirname(fileURLToPath(import.meta.url)),hash=b=>createHash('sha256').update(b).digest('hex')
+import {createMemorySnapshot,snapshotIO} from '../snapshots.mjs'
+import {restoreMemorySnapshot,reviewMemoryRestore,resumeMemoryRestore} from '../restore.mjs'
+import {restorationPending,restorationJournalPath} from '../restoration-lock.mjs'
+import {initializeManagedMemory,managedMemoryStatus,writeMemory,indexLine,searchStore,withdrawManagedSource,storeDirFor,apply} from '../index.mjs'
+import {controlStatus} from '../managed-policy.mjs'
+import {claimCaptureJob,finishCaptureJob,listCaptureJobs} from '../capture-jobs.mjs'
+import {captureInputDescriptor,enqueueCaptureInput,listCaptureInputs,bindCaptureInput} from '../capture-inputs.mjs'
+import {compileValueRevision} from '../field-lineage.mjs'
+import {candidateSnapshot} from '../candidates.mjs'
+import {episodeSnapshot} from '../episodes.mjs'
+const here=dirname(dirname(fileURLToPath(import.meta.url))),hash=b=>createHash('sha256').update(b).digest('hex')
 async function box(run){const root=realpathSync(mkdtempSync(join(tmpdir(),'memory-restore-'))),home=join(root,'home'),data=join(home,'memory'),snapshot=join(root,'snapshot'),cwd=join(root,'project'),previous=process.env.DSH_HOME;mkdirSync(home);mkdirSync(data);mkdirSync(cwd);writeFileSync(join(cwd,'.dsh-root'),'');process.env.DSH_HOME=home;const p=initializeManagedMemory(data);initializeManagedMemory(data,undefined,{apply:true,reviewed:p.review});try{return await run({root,home,data,snapshot,cwd})}finally{if(previous===undefined)delete process.env.DSH_HOME;else process.env.DSH_HOME=previous;rmSync(root,{recursive:true,force:true})}}
 function seed(dir,word,owner='owner-'+word,scope='global'){const summary='Synthetic lasting preference '+word;return writeMemory({dir,scope,type:'user',summary,detail:summary,line:indexLine('user',summary,undefined,true),provenance:{basis:'tool-context',sessionId:owner,callHash:hash(owner+word),evidence:[{messageId:'root',hash:hash('quote '+word),quote:summary}]}})}
 function revoke(data,owner){const p=withdrawManagedSource(data,owner,'root');return withdrawManagedSource(data,owner,'root',{apply:true,controlReview:p.controlReview})}

package/{test-retrieval.mjs → test/test-retrieval.mjs}

@@ -3,8 +3,8 @@ import assert from 'node:assert/strict'
 import { mkdtempSync, writeFileSync, rmSync } from 'node:fs'
 import { join } from 'node:path'
 import { tmpdir } from 'node:os'
-import { queryTokens, rankLines, foldEnglishInflection } from './retrieval.mjs'
-import { searchStore } from './index.mjs'
+import { queryTokens, rankLines, foldEnglishInflection } from '../retrieval.mjs'
+import { searchStore } from '../index.mjs'
 
 test('词元：中文双字、拉丁大小写与标识符', () => {
   const tokens = queryTokens('中英字幕 E01-Final')

package/{test-revision-admission.mjs → test/test-revision-admission.mjs}

@@ -1,8 +1,8 @@
 import test from 'node:test'
 import assert from 'node:assert/strict'
-import {isRevisionAdmissionError} from './revision-admission.mjs'
-import {compileValueRevision,normalizeFieldLineage} from './field-lineage.mjs'
-import {captureRevision} from './capture-revision.mjs'
+import {isRevisionAdmissionError} from '../revision-admission.mjs'
+import {compileValueRevision,normalizeFieldLineage} from '../field-lineage.mjs'
+import {captureRevision} from '../capture-revision.mjs'
 const caught=fn=>{try{fn()}catch(error){return error}assert.fail('expected a real guard refusal')}
 const parent={id:'a'.repeat(64),status:'recorded',scope:'global',meaning:{kind:'preference',conditions:[{dimension:'document_kind',value:'draft'}]},sources:['b'.repeat(64),'c'.repeat(64)]}
 test('real value-change and target-identity guards are preparation refusals',()=>{

package/{test-rule-admission.mjs → test/test-rule-admission.mjs}

@@ -4,13 +4,13 @@ import assert from 'node:assert/strict'
 import {mkdtempSync,realpathSync,readFileSync,writeFileSync,existsSync,rmSync} from 'node:fs'
 import {join} from 'node:path'
 import {tmpdir} from 'node:os'
-import {assertMeaningSatisfiable,normalizeMeaning,applicability} from './meaning.mjs'
-import {assessCandidate} from './capture-evidence.mjs'
-import {writeFixtureMemory} from './fixture-host.mjs'
-import {candidateSnapshot,stageCandidate} from './candidates.mjs'
-import {adoptCandidate,storeRevision} from './index.mjs'
-import {prepareValidationPrompt,ValidationSubmission} from './capture-validation.mjs'
-import {VALIDATION_FIELDS} from './capture-validation-contract.mjs'
+import {assertMeaningSatisfiable,normalizeMeaning,applicability} from '../meaning.mjs'
+import {assessCandidate} from '../capture-evidence.mjs'
+import {writeFixtureMemory} from '../fixture-host.mjs'
+import {candidateSnapshot,stageCandidate} from '../candidates.mjs'
+import {adoptCandidate,storeRevision} from '../index.mjs'
+import {prepareValidationPrompt,ValidationSubmission} from '../capture-validation.mjs'
+import {VALIDATION_FIELDS} from '../capture-validation-contract.mjs'
 const contradictory={kind:'preference',conditions:[{dimension:'document_kind',value:'exploratory_draft'}],except:[{dimension:'document_kind',value:'exploratory_draft'}]}
 const valid={...contradictory,except:[{dimension:'document_kind',value:'final'}]}
 const owner={id:'synthetic-owner',role:'user',hash:'a'.repeat(64),text:'长期处理探索性草稿时先确认试验目标。'}
@@ -38,7 +38,7 @@ test('reviewed adoption cannot publish an impossible pending candidate or change
  assert.equal(readFileSync(join(dir,'.candidates.json'),'utf8'),before);assert.equal(existsSync(join(dir,'MEMORY.md')),false)
 }))
 test('old effective self-excluding records retain their identities and remain readable without rewriting',()=>box(dir=>{
- const fixture=JSON.parse(readFileSync(new URL('./corpus/legacy-self-excluding-dev36.json',import.meta.url)))
+ const fixture=JSON.parse(readFileSync(new URL('../corpus/legacy-self-excluding-dev36.json',import.meta.url)))
  for(const[name,content]of Object.entries(fixture.files))writeFileSync(join(dir,name),content)
  const records=candidateSnapshot(dir,'global').records;assert.equal(records.length,1);assert.equal(records[0].status,'recorded')
  assert.deepEqual(normalizeMeaning(records[0].meaning),normalizeMeaning(contradictory))

package/{test-runtime-startup.mjs → test/test-runtime-startup.mjs}

@@ -4,8 +4,8 @@ import {mkdtempSync,mkdirSync,readFileSync,writeFileSync,rmSync,realpathSync,exi
 import {join} from 'node:path'
 import {tmpdir} from 'node:os'
 import {createHash} from 'node:crypto'
-import {apply,managedMemoryStatus,writeMemory,indexLine,withdrawManagedSource,storeDirFor,searchStore} from './index.mjs'
-import {projectIdentity} from './project-stores.mjs'
+import {apply,managedMemoryStatus,writeMemory,indexLine,withdrawManagedSource,storeDirFor,searchStore} from '../index.mjs'
+import {projectIdentity} from '../project-stores.mjs'
 const hash=value=>createHash('sha256').update(value).digest('hex')
 async function box(run){const root=realpathSync(mkdtempSync(join(tmpdir(),'memory-startup-'))),home=join(root,'home'),cwd=join(root,'work'),data=join(home,'memory'),previous=process.env.DSH_HOME;mkdirSync(home);mkdirSync(cwd);process.env.DSH_HOME=home;const effects=[]
  try{return await run({root,home,cwd,data,effects})}finally{for(const effect of effects.reverse())effect?.();if(previous===undefined)delete process.env.DSH_HOME;else process.env.DSH_HOME=previous;rmSync(root,{recursive:true,force:true})}}

package/{test-schema.mjs → test/test-schema.mjs}

@@ -1,7 +1,7 @@
 import {realpathSync} from 'node:fs'
-import {applyWithOwnerFixture as apply} from './fixture-host.mjs'
+import {applyWithOwnerFixture as apply} from '../fixture-host.mjs'
 /**
- * 工具 schema 的静态校验。跑法：node --test ~/.dsh/plugins/memory/test-schema.mjs
+ * 工具 schema 的静态校验。跑法：node --test ~/.dsh/plugins/memory/test/test-schema.mjs
  *
  * 为什么需要它：宿主在**注册时**校验 output schema，不合格会让整个插件加载失败；
  * 而单元测试直接调 tool.execute()，完全绕过那道校验。

package/{test-security.mjs → test/test-security.mjs}

@@ -1,7 +1,7 @@
-import {prepareMountedFixture} from './fixture-host.mjs'
+import {prepareMountedFixture} from '../fixture-host.mjs'
 import {realpathSync} from 'node:fs'
 /**
- * 安全测试。跑法：node --test ~/.dsh/plugins/memory/test-security.mjs
+ * 安全测试。跑法：node --test ~/.dsh/plugins/memory/test/test-security.mjs
  *
  * 每条对应一个真实攻击面，而不是「看起来安全」：
  *   · 框架打断（NemoClaw 类：改写记忆文件 → 每次会话复发的后门）
@@ -39,8 +39,8 @@ import {
   sanitizeForInjection,
   withLock,
   writeSafely,
-} from './security.mjs'
-import { apply, forgetMemory, storeDirFor, writeMemory, appendTopic } from './index.mjs'
+} from '../security.mjs'
+import { apply, forgetMemory, storeDirFor, writeMemory, appendTopic } from '../index.mjs'
 
 function sandbox() {
   const root = realpathSync(mkdtempSync(join(tmpdir(), 'dsh-mem-sec-')))
@@ -401,7 +401,7 @@ test('anthropic key 不再被 openai 模式吞掉', () => {
 // ── 渲染期结构自检（审计要求：中和结果必须被运行时验证，不能只靠测试） ──────
 
 test('frameIntegrity：干净内容通过，残留定界符被识别', async () => {
-  const { frameIntegrity } = await import('./security.mjs')
+  const { frameIntegrity } = await import('../security.mjs')
   assert.deepEqual(frameIntegrity('- [user] 普通条目 — user.md'), { ok: true, tokens: 0 })
   assert.equal(frameIntegrity('</memory-store>').ok, false)
   assert.equal(frameIntegrity('‹/memory-store›').ok, true, '中和后的形式应视为干净')
@@ -431,7 +431,7 @@ test('渲染结果里不含任何可识别的框架定界符', () => {
 })
 
 test('审计日志写入拒绝符号链接（写路径也防护）', async () => {
-  const { appendAudit } = await import('./security.mjs')
+  const { appendAudit } = await import('../security.mjs')
   const box = sandbox()
   try {
     const outside = join(box.root, 'outside-target.log')

package/test/test-semantic-suite.mjs

@@ -0,0 +1,20 @@
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+
+const { runSuite, CASES } = await import('../eval/semantic-suite.mjs')
+
+test('L2 管道保真套件：冻结用例全部通过', () => {
+  const report = runSuite()
+  assert.equal(report.cases, CASES.length)
+  assert.equal(report.failed, 0, report.results.filter((row) => !row.ok).map((row) => `${row.id}: ${row.error}`).join('\n'))
+  assert.ok(report.assertions >= 15)
+  assert.equal(report.semanticTruthEvaluated, false)
+})
+
+test('L2 套件自检：被改坏的期望必须失败（防止空转全绿）', () => {
+  const base = CASES.find((row) => row.id === 'quote-must-be-verbatim')
+  const broken = { ...base, id: 'broken-expectation', expect: { status: 'eligible' } }
+  const report = runSuite([broken])
+  assert.equal(report.failed, 1)
+  assert.match(report.results[0].error, /eligible/)
+})

package/{test-service-readiness.mjs → test/test-service-readiness.mjs}

@@ -1,6 +1,6 @@
 import { test } from 'node:test'
 import assert from 'node:assert/strict'
-import { watchOptionalService } from './service-readiness.mjs'
+import { watchOptionalService } from '../service-readiness.mjs'
 
 test('compatibility lookup discovers a late active service and keeps stable snapshots unchanged', () => {
   let value

package/{test-smell.mjs → test/test-smell.mjs}

@@ -1,7 +1,7 @@
-import {prepareMountedFixture} from './fixture-host.mjs'
+import {prepareMountedFixture} from '../fixture-host.mjs'
 import {realpathSync} from 'node:fs'
 /**
- * 指令气味检测（R5）。跑法：node --test ~/.dsh/plugins/memory/test-smell.mjs
+ * 指令气味检测（R5）。跑法：node --test ~/.dsh/plugins/memory/test/test-smell.mjs
  *
  * 这是 L2 组合污染的**缓解**，不是防护：MemPoison 已经说明写时过滤压不住组合型攻击。
  * 做法是给「像指令」的条目打 ⚠，让模型和人都能看见，而不是假装拦住了。
@@ -13,8 +13,8 @@ import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'node:fs'
 import { join } from 'node:path'
 import { tmpdir } from 'node:os'
 
-import { SMELL_THRESHOLD, instructionSmell, isSmelly } from './security.mjs'
-import { apply, storeDirFor, writeMemory } from './index.mjs'
+import { SMELL_THRESHOLD, instructionSmell, isSmelly } from '../security.mjs'
+import { apply, storeDirFor, writeMemory } from '../index.mjs'
 
 const captured_text = (cwd) => {
   const captured = mount(cwd)

package/{test-snapshots.mjs → test/test-snapshots.mjs}

@@ -5,10 +5,10 @@ import {join,dirname} from 'node:path'
 import {tmpdir} from 'node:os'
 import {spawnSync} from 'node:child_process'
 import {fileURLToPath} from 'node:url'
-import {createMemorySnapshot,verifyMemorySnapshot,SNAPSHOT_LIMITS} from './snapshots.mjs'
-import {initializeManagedMemory,writeMemory,indexLine,withdrawManagedSource,managedMemoryStatus} from './index.mjs'
+import {createMemorySnapshot,verifyMemorySnapshot,SNAPSHOT_LIMITS} from '../snapshots.mjs'
+import {initializeManagedMemory,writeMemory,indexLine,withdrawManagedSource,managedMemoryStatus} from '../index.mjs'
 import {createHash} from 'node:crypto'
-const hash=b=>createHash('sha256').update(b).digest('hex'),here=dirname(fileURLToPath(import.meta.url))
+const hash=b=>createHash('sha256').update(b).digest('hex'),here=dirname(dirname(fileURLToPath(import.meta.url)))
 function box(run){const root=realpathSync(mkdtempSync(join(tmpdir(),'memory-snapshot-'))),data=join(root,'memory'),snapshot=join(root,'backup');mkdirSync(data);try{return run({root,data,snapshot})}finally{rmSync(root,{recursive:true,force:true})}}
 function text(data){writeFileSync(join(data,'MEMORY.md'),'- [user] Synthetic preference cyan1234\n',{mode:0o600});mkdirSync(join(data,'projects/empty'),{recursive:true})}
 function tree(root){const rows=[];const walk=(p,r='')=>{for(const name of readdirSync(p).sort()){const f=join(p,name),n=r?r+'/'+name:name,s=lstatSync(f);if(s.isDirectory()){rows.push([n,'dir']);walk(f,n)}else rows.push([n,hash(readFileSync(f))])}};walk(root);return rows}

package/{test-source-completeness.mjs → test/test-source-completeness.mjs}

@@ -3,12 +3,12 @@ import assert from 'node:assert/strict'
 import {mkdtempSync,realpathSync,mkdirSync,readFileSync,rmSync} from 'node:fs'
 import {tmpdir} from 'node:os'
 import {join} from 'node:path'
-import {captureMessage,assessCandidate} from './capture-evidence.mjs'
-import {captureInputDescriptor,reconstructCaptureInput,listCaptureInputs} from './capture-inputs.mjs'
-import {extractWithLlm} from './capture-llm.mjs'
-import {apply} from './index.mjs'
-import {candidateSnapshot} from './candidates.mjs'
-import {captureJobStatus,listCaptureJobs} from './capture-jobs.mjs'
+import {captureMessage,assessCandidate} from '../capture-evidence.mjs'
+import {captureInputDescriptor,reconstructCaptureInput,listCaptureInputs} from '../capture-inputs.mjs'
+import {extractWithLlm} from '../capture-llm.mjs'
+import {apply} from '../index.mjs'
+import {candidateSnapshot} from '../candidates.mjs'
+import {captureJobStatus,listCaptureJobs} from '../capture-jobs.mjs'
 const prefix='甲'.repeat(2000),long=prefix+'但上述约定只在初稿反馈时适用，正式稿不采用。'
 const event=text=>({seq:0,type:'user/message',data:{source:{kind:'user'},content:[{type:'text',text}]}})
 const shortMessage=()=>({...captureMessage(event(prefix),'synthetic:0'),seq:0}),longMessage=()=>({...captureMessage(event(long),'synthetic:0'),seq:0})

package/{test-source-key.mjs → test/test-source-key.mjs}

@@ -4,8 +4,8 @@ import {mkdtempSync,rmSync,readFileSync,writeFileSync,existsSync} from 'node:fs'
 import {join} from 'node:path'
 import {tmpdir} from 'node:os'
 import {createHash} from 'node:crypto'
-import {stageCandidate,candidateSnapshot,sourceWithdrawalReviewKey} from './candidates.mjs'
-import {writeMemory,indexLine,storeRevision,adoptCandidate,withdrawManagedSource,withdrawManagedSourceKey,searchStore} from './index.mjs'
+import {stageCandidate,candidateSnapshot,sourceWithdrawalReviewKey} from '../candidates.mjs'
+import {writeMemory,indexLine,storeRevision,adoptCandidate,withdrawManagedSource,withdrawManagedSourceKey,searchStore} from '../index.mjs'
 const key=(session,message)=>createHash('sha256').update(JSON.stringify([session,message])).digest('hex')
 function box(run){const dir=mkdtempSync(join(tmpdir(),'dsh-source-key-'));try{return run(dir)}finally{rmSync(dir,{recursive:true,force:true})}}
 function adopted(dir){const id=stageCandidate(dir,{type:'user',scope:'global',summary:'Synthetic palette jade9876',detail:'Synthetic dated detail jade9876',sessionId:'owner-session',indexRevision:storeRevision(dir),evidence:[{messageId:'owner-message',hash:'b'.repeat(64),quote:'Synthetic independently supplied palette jade9876'}]}).id,review=adoptCandidate(dir,id,{scope:'global'});adoptCandidate(dir,id,{scope:'global',apply:true,reviewedIndex:review.reviewedIndex,candidateRevision:review.candidateRevision});return id}

package/{test-source-retirement.mjs → test/test-source-retirement.mjs}

@@ -4,10 +4,10 @@ import {mkdtempSync,mkdirSync,readFileSync,writeFileSync,rmSync} from 'node:fs'
 import {join} from 'node:path'
 import {tmpdir} from 'node:os'
 import {createHash} from 'node:crypto'
-import {writeMemory,indexLine,searchStore,withdrawManagedSource,storeRevision,recoverMemoryPublication,forgetMemory,adoptCandidate} from './index.mjs'
-import {candidateSnapshot,stageCandidate,withdrawSource,withdrawalPolicy,sourceLedgerStatus} from './candidates.mjs'
-import {prepareSourceRetirement,validateRetiredSource,SOURCE_LEDGER_BYTES} from './source-retirement.mjs'
-import {commitPublication} from './publication.mjs'
+import {writeMemory,indexLine,searchStore,withdrawManagedSource,storeRevision,recoverMemoryPublication,forgetMemory,adoptCandidate} from '../index.mjs'
+import {candidateSnapshot,stageCandidate,withdrawSource,withdrawalPolicy,sourceLedgerStatus} from '../candidates.mjs'
+import {prepareSourceRetirement,validateRetiredSource,SOURCE_LEDGER_BYTES} from '../source-retirement.mjs'
+import {commitPublication} from '../publication.mjs'
 const box=run=>{const root=mkdtempSync(join(tmpdir(),'source-retire-'));mkdirSync(join(root,'memory'));try{return run(join(root,'memory'))}finally{rmSync(root,{recursive:true,force:true})}}
 const hash=value=>createHash('sha256').update(value).digest('hex')
 function write(dir,n,{supersedes,publicationFault,unique=false}={}){const value='palette'+String(n).padStart(4,'0'),summary=unique?'Synthetic '+hash('entry-'+n).slice(0,48)+' '+value:'Synthetic retained source '+value,detail='Synthetic private detail '+value;return writeMemory({dir,scope:'global',type:'user',summary,detail,supersedes,line:indexLine('user',summary,undefined,true),provenance:{sessionId:'synthetic-retirement-owner',basis:'tool-context',via:'memory_write',callHash:hash('call-'+n),evidence:[{messageId:'owner-'+n,hash:hash('message-'+n),quote:'Synthetic owner chose '+value}]},publicationFault})}