fix: keep local Qdrant on an owner thread

Co-authored-by: Cursor <cursoragent@cursor.com>

.env.example

@@ -86,7 +86,6 @@ MEMORY_VECTOR_STORE=chroma
 # MEMORY_CODING_DB_PATH=                        # coding_memory.db 路径（默认 {DATA_DIR}/data/coding_memory.db）
 # MEMORY_CODING_TOOL_RESULT_MAX_BYTES=2048      # 单条 tool_result 截断字节上限
 # MEMORY_CODING_VERBATIM_FALLBACK_ENABLED=false # 模型无结果时是否保存原文 fact；默认关，避免 tool trace 外泄
-# MEMORY_CODING_CHAIN_BLOCK_ENABLED=false       # search 是否注入版本演进链块（diff）；默认关，省 token
 # MEMORY_EXTRACT_HISTORY_TURNS=5                 # 除本次 write 外，额外注入 extractor 的历史 user-turn 数
 
 # ── 写入流程开关 ──

.github/workflows/ci.yml

@@ -59,30 +59,4 @@ jobs:
       - run: corepack enable
       - run: pnpm install --frozen-lockfile
       - run: uv sync --directory apps/core --all-groups --locked
-      - name: Verify public source structure and privacy boundaries
-        run: |
-          python3 scripts/verify_structure.py
-          python3 scripts/generate_core_test_index.py --check
-          python3 scripts/verify_zero_collection.py
-          python3 scripts/verify_zero_collection.py --self-test
-      - name: Lint Node workspaces
-        run: pnpm lint
-      - name: Typecheck Node workspaces
-        run: pnpm typecheck
-      - name: Test Node workspaces
-        run: pnpm test
-      - name: Test release tooling
-        run: pnpm test:release-scripts
-      - name: Fetch and verify the pinned embedding model
-        run: |
-          pnpm fetch:embedding-model
-          uv run --directory apps/core python -c \
-            "from one_memory.embedding_assets import assets_present, verify_assets; assert assets_present(); verify_assets()"
-      - name: Test public Core smoke suite
-        run: >-
-          bash scripts/run-tests-isolated.sh core-pr
-          tests/test_core_test_reporting.py
-          tests/test_import_api.py
-          tests/test_recent_first_import.py
-          tests/test_source_session_count_api.py
-          tests/test_schema_migrations.py
+      - run: pnpm check

.github/workflows/hermes-provider.yml

@@ -1,49 +0,0 @@
-name: Hermes provider
-
-on:
-  pull_request:
-    paths:
-      - "plugins/hermes/**"
-      - ".github/workflows/hermes-provider.yml"
-  push:
-    branches: [main]
-    paths:
-      - "plugins/hermes/**"
-      - ".github/workflows/hermes-provider.yml"
-
-permissions:
-  contents: read
-
-jobs:
-  provider:
-    runs-on: ubuntu-24.04
-    timeout-minutes: 3
-    steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
-        with:
-          persist-credentials: false
-      - uses: astral-sh/setup-uv@d0d8abe699bfb85fec6de9f7adb5ae17292296ff
-        with:
-          python-version: "3.12"
-          enable-cache: false
-      - name: Download and verify native Hermes contract
-        run: |
-          uv run --no-project --python 3.12 python - <<'PY'
-          import hashlib
-          import os
-          from pathlib import Path
-          import urllib.request
-
-          url = "https://raw.githubusercontent.com/NousResearch/hermes-agent/818c13be1dc4fd28987e1e881a9408224afd4535/agent/memory_provider.py"
-          with urllib.request.urlopen(url, timeout=30) as response:
-              data = response.read()
-          expected = "a4e44a293013fff831ac136ab77c556541cd18817f53bd662e97090cd80bd5a6"
-          if hashlib.sha256(data).hexdigest() != expected:
-              raise SystemExit("Hermes contract SHA-256 mismatch")
-          snapshot = Path(os.environ["RUNNER_TEMP"]) / "hermes-memory-provider.py"
-          snapshot.write_bytes(data)
-          with open(os.environ["GITHUB_ENV"], "a") as env:
-              env.write(f"HERMES_MEMORY_PROVIDER_SNAPSHOT={snapshot}\n")
-          PY
-      - name: Test provider with native contract
-        run: uv run --no-project --python 3.12 --with pytest python -m pytest plugins/hermes/tests -o addopts= -o log_cli=false -q

.github/workflows/linux-lifecycle.yml

@@ -102,71 +102,3 @@ jobs:
           if-no-files-found: error
           compression-level: 0
           retention-days: 14
-
-  publish-draft-release:
-    if: ${{ inputs.run_lifecycle && startsWith(github.ref, 'refs/tags/v') }}
-    needs: matrix
-    runs-on: ubuntu-24.04
-    permissions:
-      contents: write
-    steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
-        with:
-          persist-credentials: false
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
-        with:
-          pattern: memhub-runtime-linux-*
-          path: memhub/release-assets
-          merge-multiple: true
-      - name: Verify tag and Linux release assets
-        shell: bash
-        run: |
-          set -euo pipefail
-          shopt -s globstar nullglob
-          version=$(node -p 'require("./package.json").version')
-          node scripts/verify-release-version.mjs \
-            --channel stable \
-            --version "$version" \
-            --build-number "$(node -p 'require("./package.json").release.build_number')" \
-            --tag "$GITHUB_REF_NAME"
-          mkdir -p publish-assets
-          for arch in x64 arm64; do
-            name="memhub-runtime-v${version}-linux-${arch}.tar.gz"
-            archives=(release-assets/**/"$name")
-            checksums=(release-assets/**/"$name.sha256")
-            test "${#archives[@]}" -eq 1
-            test "${#checksums[@]}" -eq 1
-            cp -- "${archives[0]}" "publish-assets/$name"
-            cp -- "${checksums[0]}" "publish-assets/$name.sha256"
-            (
-              cd publish-assets
-              sha256sum -c "$name.sha256"
-            )
-          done
-      - name: Upload Linux assets to a draft GitHub Release
-        env:
-          GH_TOKEN: ${{ github.token }}
-        shell: bash
-        run: |
-          set -euo pipefail
-          if gh release view "$GITHUB_REF_NAME" \
-            --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1; then
-            test "$(
-              gh release view "$GITHUB_REF_NAME" \
-                --repo "$GITHUB_REPOSITORY" \
-                --json isDraft \
-                --jq .isDraft
-            )" = "true"
-          else
-            gh release create "$GITHUB_REF_NAME" \
-              --repo "$GITHUB_REPOSITORY" \
-              --verify-tag \
-              --draft \
-              --generate-notes \
-              --title "$GITHUB_REF_NAME"
-          fi
-          gh release upload "$GITHUB_REF_NAME" \
-            publish-assets/memhub-runtime-v*-linux-*.tar.gz \
-            publish-assets/memhub-runtime-v*-linux-*.tar.gz.sha256 \
-            --repo "$GITHUB_REPOSITORY" \
-            --clobber

.gitignore

@@ -26,9 +26,6 @@ package-lock.json
 ui_walkthrough_*/
 
 # Internal release/open-source coordination must never enter the public tree.
-HANDSOFF.md
-新鲜度_todo.md
-memhub/docs/LOCAL_PRODUCT_APP_MIGRATION_TEST.md
 OPEN_SOURCE_TODO.md
 release_todo.md
 

CHANGELOG.md

@@ -2,121 +2,6 @@
 
 Hy Memory and MemHub are versioned and released independently.
 
-## Unreleased
-
-- Fixed legacy-to-SDK startup migration to adopt native Coding Experience and
-  Working Fact IDs instead of importing them as Chat layers. Raw migration now
-  rebuilds bounded user/assistant turns from the latest three days, excludes
-  tools, and enforces the same rolling retention after cutover.
-- Paused host capture writes with a live Desktop migration fence; Cursor
-  History catch-up resumes from its existing checkpoint after cutover.
-- Removed MemHub's private `hy_memory_bridge` implementation. MemHub now calls
-  public `HyMemoryClient` methods at runtime; prompt/reconcile/response
-  monkey-patches and private VDB/Coding runtime access were deleted. Kuzu Graph
-  projection/admin and stopped-writer App migration are the documented product
-  exceptions.
-- Added a MemHub-managed native Hermes MemoryProvider with automatic prefetch,
-  persistent per-session memory-ID deduplication, authorized Broker reads, and
-  recall-context stripping to prevent memory recursion.
-- Added an extensible MemHub interface-localization layer with Simplified
-  Chinese, English, and Spanish catalogs shared by Web and Electron-native
-  surfaces. Interface language remains independent from memory content and
-  model processing language.
-- Fixed governed-memory revisions and repeated evidence links failing when the
-  visibility dirty-marker trigger encounters the same memory twice. Startup
-  now replaces the affected legacy trigger without changing schema versions
-  or governed and visibility data.
-- Kept post-write authority verification failures available for read-only
-  reconciliation while preventing automatic or generic confirmed retries from
-  invoking the model again. Automatic reconciliation skips those sticky rows
-  before applying its batch limit, and linked durable jobs exclusively own
-  retry scheduling for their memory tasks.
-- Removed MemHub's task-scoped HyPermission store wrappers and global
-  model-content consent switch. The trusted embedded Hy Memory SDK now uses
-  its native local stores directly.
-- Existing installations ignore the retired config flag, readmit previously
-  parked pre-invocation work, and drop only the obsolete
-  `hy_node_permissions` proof table. Evidence, governed memories, model
-  profiles, SDK stores, and source/host grants are preserved.
-
-## Hy Memory 2.0.5 — 2026-10-22
-
-- Published
-  [`hy-memory==2.0.5`](https://pypi.org/project/hy-memory/2.0.5/).
-- Extended `get()` across Chat, Coding Experience, Working Fact, and raw IDs;
-  the returned `layer`, `kind`, and `variant` identify the actual record.
-- Added explicit raw retrieval through the existing `search()` and
-  `list_memories()` contracts, including user, agent, session, and source
-  filters.
-- Added public embedding-service injection and corrected extraction language
-  detection for structured OpenAI-style messages.
-- Added lifecycle status filters, durable idempotent write outcomes, and
-  quiesced local data-plane snapshot/restore.
-- Kept legacy migration mechanics out of the public Client API; separate
-  migration-only raw/import methods from development previews were removed.
-- Physical delete now reports partial VDB/Graph cleanup as failure.
-- Coding search no longer injects the version-evolution diff block by default;
-  opt in with `MEMORY_CODING_CHAIN_BLOCK_ENABLED=true`.
-- Serialized SDK SQLite cache/history connection lifecycle and tightened
-  Coding reconciliation to its agent/session/workspace authority.
-- Clarified persistent caller context through `meta`, while `metadata` remains
-  legacy processing configuration.
-
-## Hy Memory 2.0.5.dev4 — 2026-10-21
-
-- Development preview used for SDK-authority migration validation; not the
-  final `2.0.5` release.
-- Published as
-  [`hy-memory==2.0.5.dev4`](https://pypi.org/project/hy-memory/2.0.5.dev4/).
-
-## Hy Memory 2.0.5.dev3 — 2026-10-21
-
-- Development preview; not the final `2.0.5` release.
-- Published as
-  [`hy-memory==2.0.5.dev3`](https://pypi.org/project/hy-memory/2.0.5.dev3/).
-- Lets the existing `search` API explicitly query SDK raw with
-  `layers=["l1_raw"]`, including existing source filters.
-
-## Hy Memory 2.0.5.dev2 — 2026-10-21
-
-- Development preview; not the final `2.0.5` release.
-- Published as
-  [`hy-memory==2.0.5.dev2`](https://pypi.org/project/hy-memory/2.0.5.dev2/).
-- Adds exact, idempotent semantic-memory import for legacy MemHub cutover
-  without extraction, reconciliation or identity changes.
-
-## Hy Memory 2.0.5.dev1 — 2026-10-21
-
-- Development preview for the MemHub SDK-authority migration; this is not the
-  final `2.0.5` release.
-- Published as
-  [`hy-memory==2.0.5.dev1`](https://pypi.org/project/hy-memory/2.0.5.dev1/).
-- Adds lifecycle status filtering, durable idempotent write outcomes, exact raw
-  APIs, offline local data-plane snapshot/restore, and fail-closed physical
-  delete receipts.
-
-## Hy Memory 2.0.4 — 2026-10-17
-
-- Published
-  [`hy-memory==2.0.4`](https://pypi.org/project/hy-memory/2.0.4/) as a
-  maintenance release.
-
-## Hy Memory 2.0.3 — 2026-10-17
-
-- Added an optional runtime HTTP transport factory so embedded products can
-  enforce request budgets without wrapping or restricting SDK local-store
-  access.
-- Published
-  [`hy-memory==2.0.3`](https://pypi.org/project/hy-memory/2.0.3/) with
-  unchanged memory extraction, reconciliation, storage, and Coding/Working
-  behavior.
-
-## Hy Memory 2.0.2 — 2026-10-17
-
-- Published
-  [`hy-memory==2.0.2`](https://pypi.org/project/hy-memory/2.0.2/) with the
-  current SDK fixes and Apache-2.0 package metadata.
-
 ## Hy Memory 2.0.1 — 2026-10-16
 
 - Published the Python distribution as
@@ -125,46 +10,13 @@ Hy Memory and MemHub are versioned and released independently.
   Because PyPI release metadata is immutable, the next SDK patch release must
   carry the updated license metadata; `2.0.1` retains its published metadata.
 
-## MemHub 1.0.5 — Unreleased
+## MemHub
 
-- Updated the source version to `1.0.5` (build 14).
-- Pinned the public SDK to the stable `hy-memory==2.0.5` release.
+MemHub has no public release yet. The source version is `1.0.0` (build 4), the
+selected npm package is `memhub-cli`, and both npm publication and GitHub
+Release artifacts are still pending. Internal release-candidate builds are not
+public releases.
 
-## MemHub 1.0.4 — 2026-10-18
-
-- Updated the source version to `1.0.4` (build 13).
-- Published the `v1.0.4` source and release metadata.
-
-## MemHub 1.0.3 — 2026-10-17
-
-- Updated the source version to `1.0.3` (build 7).
-- Pinned the public SDK to `hy-memory==2.0.3`.
-- Removed the HyPermission store wrappers and global model-content consent
-  switch; the trusted embedded SDK now uses native local stores.
-- Prevented uncertain writes from blocking later source work and added one
-  reconciled automatic retry after ten seconds.
-- Added product-facing memory pipeline counters and the log troubleshooting
-  runbook.
-- Allowed a verified packaged Desktop Runtime from a different commit to take
-  over an equal-build install atomically while preserving downgrade and
-  tamper refusal.
-
-## MemHub 1.0.2 — 2026-10-17
-
-- Updated the source version to `1.0.2` (build 6).
-- Pinned the public SDK to `hy-memory==2.0.2`.
-- Pinned `onnxruntime==1.23.2` to retain macOS x64 packaging support.
-- Fixed relaunch and upgrade failures when a prior managed Runtime exists.
-- Embedded canonical build identity when an external packaging pipeline omits
-  release environment fields.
-- Added automatic Linux Runtime upload to tagged Draft Releases.
-
-## MemHub 1.0.1 — Superseded before release
-
-- The candidate tag was not published as a GitHub Release; `1.0.2` replaces it
-  after the managed-Runtime relaunch fix.
-
-## MemHub 1.0.0
-
-- Published the initial GitHub Release with macOS arm64 and Linux Runtime
-  artifacts.
+No compatibility or deprecation policy has been adopted beyond the explicit
+CLI/Runtime protocol ranges stored in the release manifests. Future public
+releases must record user-visible changes and supported platforms here.

README.md

@@ -32,9 +32,7 @@ English | [中文](README.zh.md)
 
 ## Latest News
 
-* *<mark>[new]</mark>* 🔥🔥🔥 **[2026-10]**: 🚀 **Open-sourced** quantized **FP8** (**[Hy-Memory-30B-A3B-FP8](https://huggingface.co/tencent/Hy-Memory-30B-A3B-FP8)**) and **GGUF** (**[Hy-Memory-30B-A3B-GGUF](https://huggingface.co/tencent/Hy-Memory-30B-A3B-GGUF)**) versions of **Hy-Memory-30B-A3B** on Hugging Face!
-* *<mark>[new]</mark>* 🔥🔥🔥 **[2026-10]**: 📦 **Released [MemHub v1.0.4](https://github.com/Tencent-Hunyuan/Hy-Memory/releases/tag/v1.0.4)** and **[memhub-cli 1.0.5](https://www.npmjs.com/package/memhub-cli/v/1.0.5)**, with a signed macOS desktop app and verified macOS/Linux Runtimes!
-* *<mark>[new]</mark>* 🔥🔥🔥 **[2026-10]**: 🚀 **Released** **Hy Memory 2.0 (`hy-memory==2.0.4`)** on [PyPI](https://pypi.org/project/hy-memory/2.0.4/) and open-sourced the **Hy-Memory** monorepo together with **[MemHub](memhub/README.md)**!
+* *<mark>[new]</mark>* 🔥🔥🔥 **[2026-10]**: 🚀 **Released** **Hy Memory 2.0 (`hy-memory==2.0.1`)** on [PyPI](https://pypi.org/project/hy-memory/2.0.1/) and open-sourced the **Hy-Memory** monorepo together with **[MemHub](memhub/README.md)**!
 * *<mark>[new]</mark>* 🔥🔥🔥 **[2026-10]**: 🚀 **Open-sourced** **[Hy-Memory-30B-A3B](https://huggingface.co/tencent/Hy-Memory-30B-A3B)** on Hugging Face along with its [technical report](https://arxiv.org/abs/2610.22196) on attributed reinforcement learning for long-term memory writing!
 * *<mark>[new]</mark>* 🔥🔥 **[2026-09]**: 📊 **Released** **[CMB: A Coding Memory Benchmark for Long-Horizon and Interleaved Coding Agents](docs/papers/CMB_A_Coding_Memory_Benchmark_for_Long_Horizon_and_Interleaved_Coding_Agents.pdf)** (submitted to **ICLR 2027**).
 * *<mark>[new]</mark>* 🔥🔥 **[2026-08]**: 🎉 **Accepted** at **EMNLP 2026**: **[Memory Beyond Recall: A Dual-Process Cognitive Memory System for Self-Evolving LLM Agents](https://arxiv.org/abs/2606.09483)**!
@@ -65,13 +63,13 @@ Welcome to the **Hy Memory Research Family**, covering cognitive chat memory, lo
 ### 1. Installation
 
 ```bash
-pip install hy-memory==2.0.4              # core (includes ChromaDB and Kuzu)
-pip install "hy-memory[qdrant]==2.0.4"    # + Qdrant
-pip install "hy-memory[faiss]==2.0.4"     # + FAISS
-pip install "hy-memory[graph]==2.0.4"     # + Neo4j
-pip install "hy-memory[mysql]==2.0.4"     # + MySQL cache
-pip install "hy-memory[rerank]==2.0.4"    # + local multilingual cross-encoder rerank
-pip install "hy-memory[all]==2.0.4"       # everything
+pip install hy-memory==2.0.1              # core (includes ChromaDB and Kuzu)
+pip install "hy-memory[qdrant]==2.0.1"    # + Qdrant
+pip install "hy-memory[faiss]==2.0.1"     # + FAISS
+pip install "hy-memory[graph]==2.0.1"     # + Neo4j
+pip install "hy-memory[mysql]==2.0.1"     # + MySQL cache
+pip install "hy-memory[rerank]==2.0.1"    # + local multilingual cross-encoder rerank
+pip install "hy-memory[all]==2.0.1"       # everything
 ```
 
 ### 2. Configuration
@@ -153,7 +151,7 @@ result = client.search(
 
 result["facts"]          # fact layer
 result["experiences"]    # experience layer
-result["chain_block"]    # coding only: version-evolution context (empty unless MEMORY_CODING_CHAIN_BLOCK_ENABLED)
+result["chain_block"]    # coding only: version-evolution context
 ```
 
 ### 5. Routing, Source Isolation & Advanced APIs
@@ -253,7 +251,6 @@ That version is usually not in the working tree or at HEAD either, so it cannot
 - [Graph memory design](docs/pro_graph_design.md) — graph projection, rerank, relation paths, and deployment limits
 - [Environment template](.env.example) — a copy-ready configuration template
 - [MemHub README](memhub/README.md) — local-first desktop & CLI product overview, runtime commands, and privacy boundaries
-- [Hermes native memory provider](plugins/hermes/README.md) — explicit owner/agent scope; separate HTTP service; automatic capture and recall opt-in.
 - [OpenClaw plugin](plugins/openclaw/README.md) — agent integrations live under `plugins/` (overview: [plugins/README.md](plugins/README.md))
 
 ### License

README.zh.md

@@ -32,9 +32,7 @@
 
 ## 最新动态
 
-* *<mark>[new]</mark>* 🔥🔥🔥 **[2026-10]**: 🚀 **模型开源** 在 Hugging Face 发布 **Hy-Memory-30B-A3B** 的 **FP8**（**[Hy-Memory-30B-A3B-FP8](https://huggingface.co/tencent/Hy-Memory-30B-A3B-FP8)**）与 **GGUF**（**[Hy-Memory-30B-A3B-GGUF](https://huggingface.co/tencent/Hy-Memory-30B-A3B-GGUF)**）量化版本模型！
-* *<mark>[new]</mark>* 🔥🔥🔥 **[2026-10]**: 📦 **正式发布 [MemHub v1.0.4](https://github.com/Tencent-Hunyuan/Hy-Memory/releases/tag/v1.0.4)** 与 **[memhub-cli 1.0.5](https://www.npmjs.com/package/memhub-cli/v/1.0.5)**，提供已签名的 macOS 桌面应用及经过验证的 macOS/Linux Runtime！
-* *<mark>[new]</mark>* 🔥🔥🔥 **[2026-10]**: 🚀 **正式发布** **Hy Memory 2.0 (`hy-memory==2.0.4`)**（已上线 [PyPI](https://pypi.org/project/hy-memory/2.0.4/)），并开源 **Hy-Memory** monorepo 与 **[MemHub](memhub/README.md)**！
+* *<mark>[new]</mark>* 🔥🔥🔥 **[2026-10]**: 🚀 **正式发布** **Hy Memory 2.0 (`hy-memory==2.0.1`)**（已上线 [PyPI](https://pypi.org/project/hy-memory/2.0.1/)），并开源 **Hy-Memory** monorepo 与 **[MemHub](memhub/README.md)**！
 * *<mark>[new]</mark>* 🔥🔥🔥 **[2026-10]**: 🚀 **模型开源** 在 Hugging Face 发布 **[Hy-Memory-30B-A3B](https://huggingface.co/tencent/Hy-Memory-30B-A3B)** 长期记忆写入模型及[技术报告](https://arxiv.org/abs/2610.22196)！
 * *<mark>[new]</mark>* 🔥🔥 **[2026-09]**: 📊 **基准与方法发布** 推出长周期与交错式编程记忆评测基准 **[CMB: A Coding Memory Benchmark for Long-Horizon and Interleaved Coding Agents](docs/papers/CMB_A_Coding_Memory_Benchmark_for_Long_Horizon_and_Interleaved_Coding_Agents.pdf)**（已投稿 **ICLR 2027**）。
 * *<mark>[new]</mark>* 🔥🔥 **[2026-08]**: 🎉 **论文录用** 双系统认知记忆架构论文 **[Memory Beyond Recall: A Dual-Process Cognitive Memory System for Self-Evolving LLM Agents](https://arxiv.org/abs/2606.09483)** 被 **EMNLP 2026** 接收！
@@ -65,13 +63,13 @@
 ### 1. 安装
 
 ```bash
-pip install hy-memory==2.0.4              # 核心（含 ChromaDB 与 Kuzu）
-pip install "hy-memory[qdrant]==2.0.4"    # + Qdrant
-pip install "hy-memory[faiss]==2.0.4"     # + FAISS
-pip install "hy-memory[graph]==2.0.4"     # + Neo4j
-pip install "hy-memory[mysql]==2.0.4"     # + MySQL 缓存
-pip install "hy-memory[rerank]==2.0.4"    # + 本地多语言 cross-encoder rerank
-pip install "hy-memory[all]==2.0.4"       # 全部
+pip install hy-memory==2.0.1              # 核心（含 ChromaDB 与 Kuzu）
+pip install "hy-memory[qdrant]==2.0.1"    # + Qdrant
+pip install "hy-memory[faiss]==2.0.1"     # + FAISS
+pip install "hy-memory[graph]==2.0.1"     # + Neo4j
+pip install "hy-memory[mysql]==2.0.1"     # + MySQL 缓存
+pip install "hy-memory[rerank]==2.0.1"    # + 本地多语言 cross-encoder rerank
+pip install "hy-memory[all]==2.0.1"       # 全部
 ```
 
 ### 2. 配置
@@ -153,7 +151,7 @@ result = client.search(
 
 result["facts"]          # 事实层
 result["experiences"]    # 经验层
-result["chain_block"]    # 仅 coding：版本演进上下文（默认空；需 MEMORY_CODING_CHAIN_BLOCK_ENABLED）
+result["chain_block"]    # 仅 coding：版本演进上下文
 ```
 
 ### 5. 自动路由、来源过滤与进阶 API
@@ -253,7 +251,6 @@ Coding 与 Working **复用同一套双层 pipeline 和数据 schema**，区别
 - [Graph 记忆设计](docs/pro_graph_design.md) — 图投影、重排、关系路径与部署限制
 - [环境变量模板](.env.example) — 可直接复制的配置模板
 - [MemHub 说明文档](memhub/README.md) — 本地优先桌面端与 CLI 产品总览、Runtime 命令与隐私边界
-- [Hermes 原生记忆 Provider](plugins/hermes/README.md) — 显式用户与 Agent 隔离，独立 HTTP 服务，自动记录与召回默认关闭。
 - [OpenClaw 插件](plugins/openclaw/README.md) — Agent 集成见 `plugins/`（总览：[plugins/README.md](plugins/README.md)）
 
 ### License

docs/env_reference.md

@@ -197,7 +197,6 @@ SDK 不设置 Rerank Search 并发上限。开启后模型在 `HyMemoryClient`
 | `MEMORY_HISTORY_DB_PATH` | `{DATA_DIR}/data/history.db` | History SQLite 路径 |
 | `MEMORY_HISTORY_RECORD_SEARCHES` | `false` | 是否记录 Search 操作 |
 | `MEMORY_CODING_CHAIN_REPO_ROOT` | — | coding 版本链读取本地 Git diff 的仓库根目录 |
-| `MEMORY_CODING_CHAIN_BLOCK_ENABLED` | `false` | search(scene=coding) 是否注入版本演进链块（diff / `chain_block`）；默认关 |
 
 ## HTTP Server
 

docs/hy_memory_search_skill.md

@@ -78,8 +78,7 @@ default 多-query 超过 `MEMORY_QUERY_REWRITE_MAX_CHARS` 时不改写：Coding
 Coding 关闭则直接使用最后一条 query。
 
 路由到 `working` / `coding` 后，Search 读取独立生产力记忆库，返回 `facts` /
-`experiences`，不使用 chat 三通道结构。`coding` 还返回 `chain_block` / `chain_used`
-（默认空；需 `MEMORY_CODING_CHAIN_BLOCK_ENABLED` 才注入 diff 块）。
+`experiences`，不使用 chat 三通道结构。`coding` 还返回 `chain_block` / `chain_used`。
 
 ## Chat 成功返回结构
 
@@ -153,7 +152,7 @@ client = HyMemoryClient.from_config({
 安装可选依赖：
 
 ```bash
-pip install 'hy-memory[rerank]==2.0.4'
+pip install 'hy-memory[rerank]==2.0.1'
 ```
 
 启用后，`HyMemoryClient(...)` 构造阶段会完成模型下载/读取、device 放置和一次 dummy

docs/monorepo.md

@@ -37,7 +37,8 @@ do not belong in the public source tree.
 - Root GitHub workflows run SDK and MemHub checks from their respective working
   directories. Native lifecycle workflows produce reviewable Actions artifacts;
   tag releases remain fail-closed on public identity, signing and notarization.
-- Hy Memory is published as `hy-memory==2.0.4`. MemHub pins that public
-  distribution; its selected npm package is `memhub-cli` 1.0.5.
+- Hy Memory is published as `hy-memory==2.0.1`. MemHub pins that public
+  distribution; its selected npm package is `memhub-cli`, which is not yet
+  published.
 - Hy-Memory source uses Apache-2.0 at the repository root. Third-party
   components retain their own licenses and attribution notices.

docs/scene_coding_usage.md

@@ -168,11 +168,9 @@ working/coding 搜索返回：
 
 `limit` 分别限制 facts 与 experiences，因此两层最多各返回 `limit` 条。
 
-`scene="coding"` 额外返回 `chain_block` 和 `chain_used` 字段（键始终存在；默认内容为空）：
+`scene="coding"` 额外返回 `chain_block` 和 `chain_used`：
 
-- 注入 diff / 版本演进块需显式开启 `MEMORY_CODING_CHAIN_BLOCK_ENABLED=true`
-  （或 `CodingConfig.chain_block_enabled=True`）。默认关闭，以节约 prompt token。
-- 开启后，`chain_block` 是与已召回 fact 对齐的版本演进上下文；无法挂链时为 `""`。
+- `chain_block` 是与已召回 fact 对齐的版本演进上下文；无法挂链时为 `""`。
 - `chain_used` 是已经进入 chain block 的 `facts` 下标。
 - SDK 不会从 `facts` 删除这些条目。调用方若要拼成“chain block + 剩余 facts”，需自行按 `chain_used` 过滤。
 
@@ -224,12 +222,10 @@ working/coding 搜索返回：
 | `MEMORY_CODING_DB_PATH` | `{DATA_DIR}/data/coding_memory.db` | working 基础 SQLite 路径；coding/trace 路径由此派生 |
 | `MEMORY_CODING_TOOL_RESULT_MAX_BYTES` | `2048` | 单条 tool result 的字节上限 |
 | `MEMORY_CODING_VERBATIM_FALLBACK_ENABLED` | `false` | 模型无结果时是否保存原文 fact；默认关闭，避免 assistant/tool trace 直接展示 |
-| `MEMORY_CODING_CHAIN_BLOCK_ENABLED` | `false` | search 是否注入版本演进链块（`chain_block` / diff）；默认关闭（opt-in） |
 | `MEMORY_EXTRACT_HISTORY_TURNS` | `5` | 回读的历史 user-turn 数；当前 prompt 最终最多使用 5 |
 | `MEMORY_CODING_CHAIN_REPO_ROOT` | 空 | coding 版本链读取本地 Git diff 的仓库路径 |
 
 `HCM_*` 变量属于版本链的高级调优项，不是稳定的公共配置契约；普通接入不应依赖其默认值。
-其中 `HCM_BLOCK_OFF=1` 可在已开启 `MEMORY_CODING_CHAIN_BLOCK_ENABLED` 时做消融（完全不出块）。
 
 ## 8. 定向验证
 

docs/usage.md

@@ -5,14 +5,14 @@
 ## 安装与快速开始
 
 ```bash
-pip install hy-memory==2.0.4
+pip install hy-memory==2.0.1
 
 # 可选后端
-pip install 'hy-memory[qdrant]==2.0.4'
-pip install 'hy-memory[faiss]==2.0.4'
-pip install 'hy-memory[graph]==2.0.4'     # Neo4j；Kuzu 已在核心依赖中
-pip install 'hy-memory[mysql]==2.0.4'
-pip install 'hy-memory[rerank]==2.0.4'    # 本地多语言 cross-encoder rerank
+pip install 'hy-memory[qdrant]==2.0.1'
+pip install 'hy-memory[faiss]==2.0.1'
+pip install 'hy-memory[graph]==2.0.1'     # Neo4j；Kuzu 已在核心依赖中
+pip install 'hy-memory[mysql]==2.0.1'
+pip install 'hy-memory[rerank]==2.0.1'    # 本地多语言 cross-encoder rerank
 ```
 
 默认 LLM 和 Embedding 均使用 OpenAI-compatible 接口。使用 OpenAI 时可只设置：
@@ -106,15 +106,6 @@ result = client.add(
 )
 ```
 
-`metadata` 与 `meta` 不是同一字段：
-
-- `metadata` 是兼容旧调用方保留的 SDK 处理选项，会进入内部
-  `WriteRequest.extra`，不保证持久化或随查询结果返回。
-- `meta` 是调用方的业务上下文，会持久化并在 `search()`、`get()` 等结果中返回。
-  同一记忆被多次合并时，各次 `meta` 会按写入顺序保存在列表中。
-
-需要以后读回的数据必须放在 `meta`，不要放在 `metadata`。
-
 `scene` 的公开取值：
 
 - `None`：普通文本直接走 chat；messages 含 tool 时执行快速场景判断。
@@ -210,8 +201,7 @@ result = client.search(
 ```
 
 `working` / `coding` 路径返回 `scene="productivity"`、`facts`、`experiences`，不使用
-chat 的三桶结构；`coding` 还会返回 `chain_block` 和 `chain_used` 字段（默认空；
-需 `MEMORY_CODING_CHAIN_BLOCK_ENABLED=true` 才注入 diff 块）。
+chat 的三桶结构；`coding` 还会返回 `chain_block` 和 `chain_used`。
 
 #### `search_mode`
 
@@ -273,8 +263,6 @@ catalog 也可以在没有基础 L0 时形成只读的合成画像。
 
 ```python
 memory = client.get("memory_id")
-# raw ID 返回 L1_RAW，fact ID 返回对应事实层。
-raw_memory = client.get("raw_id")
 result = client.update("memory_id", "更新后的内容")
 result = client.delete("memory_id")
 result = client.delete_all(user_id="user_001")
@@ -284,7 +272,7 @@ page = client.list_memories(
     limit=100,
     offset=0,
     order="desc",
-    layers=["l1_raw"],  # 显式列出 raw；不传仍沿用默认语义层列表
+    layers=None,
     with_evolution=False,
 )
 
@@ -294,11 +282,6 @@ result = client.clone_user("user_001", "user_002", agent_id=None)
 对应异步方法为 `async_get()`、`async_update()`、`async_delete()`、
 `async_delete_all()`、`async_list_memories()`、`async_clone_user()`。
 
-`get()` / `async_get()` 是统一的 ID 精确读取：返回结果的 `layer`、`kind` 和
-`variant` 表明实际类型。授权由调用 SDK 前的产品边界完成，不由 SDK 根据 layer
-猜测。`list_memories()` 默认仍不包含 `L1_RAW`；显式传
-`layers=["l1_raw"]` 时按同一列表合同返回 raw。
-
 普通 `list_memories()` 返回 `vdb` 桶，并在 Graph 有结果时附带 `graph`；传入
 `workspace_id` 时返回生产力记忆的 `scene="productivity"` 和 `experiences`。
 

hy_memory/__init__.py

@@ -55,22 +55,9 @@ except Exception:
 from .client import HyMemoryClient
 from .inspector import MemoryInspector
 from .runtime import SharedRuntime
-from .snapshot import (
-    DataPlaneRestore,
-    DataPlaneSnapshot,
-    DataPlaneSnapshotRejected,
-    restore_local_data_plane,
-    snapshot_local_data_plane,
-)
 
 # ====== 配置 ======
 from .config import MemoryConfig
-from .embedding import (
-    EmbeddingDimensionMismatchError,
-    EmbeddingService,
-    EmbeddingServiceProtocol,
-)
-from .retrieval import AmbiguousMemoryIdError, MemoryKind, MemoryVariant
 
 # ====== Embedding 端点覆盖（per-call，不改 model/dims，只换接入端点）======
 from .core.embed_service import embed_endpoint_override
@@ -124,20 +111,8 @@ __all__ = [
     "HyMemoryClient",
     "MemoryInspector",
     "SharedRuntime",
-    "DataPlaneRestore",
-    "DataPlaneSnapshot",
-    "DataPlaneSnapshotRejected",
-    "restore_local_data_plane",
-    "snapshot_local_data_plane",
     # 配置
     "MemoryConfig",
-    # 公共扩展协议 / 精确读取类型
-    "EmbeddingService",
-    "EmbeddingServiceProtocol",
-    "EmbeddingDimensionMismatchError",
-    "MemoryKind",
-    "MemoryVariant",
-    "AmbiguousMemoryIdError",
     # Embedding 端点覆盖
     "embed_endpoint_override",
     # 高级 API

hy_memory/agent/abstractor.py

@@ -22,8 +22,7 @@ logger = logging.getLogger(__name__)
 
 # ================================================================
 # 数据结构
-# ================================================================
-@dataclass
+# ================================================================@dataclass
 class SessionSummaryResult:
     """Session 摘要结果 (V2)"""
     success: bool

hy_memory/agent/episode_summary.py

@@ -39,7 +39,6 @@ import logging
 import hashlib
 import json
 import re
-from datetime import datetime
 from typing import Any, Dict, List, Optional
 import uuid
 
@@ -253,17 +252,6 @@ def _series_episode_id(
     return str(uuid.uuid5(uuid.NAMESPACE_URL, "hy-memory:series-episode:" + raw))
 
 
-def _series_memory_at(times: List[int]) -> Optional[datetime]:
-    """Earliest member timestamp as the same local wall clock it came from.
-
-    ``_node_timestamp`` produces ``datetime.timestamp()`` values. Reading them
-    back with ``utcfromtimestamp`` turns them into a naive *UTC* datetime, which
-    the vector payload later re-interprets as local time and shifts by the
-    machine's UTC offset.
-    """
-    return datetime.fromtimestamp(min(times)) if times else None
-
-
 def _node_timestamp(node: Any) -> Optional[int]:
     value = getattr(node, "memory_at", None) or getattr(node, "gmt_created", None)
     if value is None:
@@ -986,6 +974,8 @@ async def finalize_series_episode_containers(
     Stored text is only a title plus a structural intro. Exact L2 bodies remain in
     their canonical nodes and are referenced by ID from dated timeline segments.
     """
+    from datetime import datetime
+
     from ..models.memory import MemoryLayer, MemoryNode, MemoryStatus, SourceType
     from ..pipelines._retrieval.session_episode import (
         add_parent_episode_membership,
@@ -1071,7 +1061,7 @@ async def finalize_series_episode_containers(
             segment["memory_at"] for segment in plan["timeline"]
             if segment.get("memory_at") is not None
         ]
-        memory_at = _series_memory_at(times)
+        memory_at = datetime.utcfromtimestamp(min(times)) if times else None
         content = f"{plan['title']}. {plan['intro']}".strip()
         series = MemoryNode(
             node_id=series_id, user_id=user_id,

hy_memory/agent/extractor.py

@@ -1123,7 +1123,6 @@ class Extractor:
                 max_tokens=self._llm_config.agent_max_tokens,
                 tools=None,
                 tool_choice=None,
-                audit_stage="extract",
             )
             self._call_count += 1
             total_tokens += response.tokens_used
@@ -1234,7 +1233,6 @@ class Extractor:
                         max_tokens=self._llm_config.agent_max_tokens,
                         tools=None,
                         tool_choice=None,
-                        audit_stage="extract",
                     )
                     self._call_count += 1
                     total_tokens += response.tokens_used

hy_memory/agent/llm_provider.py

@@ -34,7 +34,6 @@ import os
 import weakref
 
 from ..config import MemoryConfig
-from ..utils.model_call_context import model_call_stage
 from ..core.workload import llm_slot
 
 logger = logging.getLogger(__name__)
@@ -349,7 +348,6 @@ class LLMProvider:
         stop: List[str] = None,
         tools: Optional[List[Dict[str, Any]]] = None,
         tool_choice: Optional[Any] = None,
-        audit_stage: Optional[str] = None,
         **kwargs
     ) -> LLMResponse:
         """
@@ -388,16 +386,15 @@ class LLMProvider:
                         len(prompt), _content_fingerprint(prompt),
                     )
 
-                with model_call_stage(audit_stage):
-                    response = await self._call_llm(
-                        prompt=prompt,
-                        max_tokens=max_tokens,
-                        temperature=temperature,
-                        stop=stop,
-                        tools=tools,
-                        tool_choice=tool_choice,
-                        **kwargs
-                    )
+                response = await self._call_llm(
+                    prompt=prompt,
+                    max_tokens=max_tokens,
+                    temperature=temperature,
+                    stop=stop,
+                    tools=tools,
+                    tool_choice=tool_choice,
+                    **kwargs
+                )
 
                 self._total_calls += 1
                 self._total_tokens += response.tokens_used
@@ -499,21 +496,11 @@ class LLMProvider:
         clients = self._clients.setdefault(loop, {})
         client = clients.get(client_key)
         if client is None:
-            client_options: Dict[str, Any] = {
-                "api_key": base_api_key,
-                "base_url": base_url,
-                "timeout": self._llm_config.timeout,
-                "max_retries": 0,
-            }
-            transport_factory = getattr(self.config, "http_transport_factory", None)
-            if callable(transport_factory):
-                import httpx
-
-                client_options["http_client"] = httpx.AsyncClient(
-                    transport=transport_factory()
-                )
             client = AsyncOpenAI(
-                **client_options,
+                api_key=base_api_key,
+                base_url=base_url,
+                timeout=self._llm_config.timeout,
+                max_retries=0,
             )
             clients[client_key] = client
 
@@ -598,7 +585,6 @@ class LLMProvider:
         temperature: Optional[float] = None,
         tools: Optional[List[Dict[str, Any]]] = None,
         tool_choice: Optional[Any] = None,
-        audit_stage: Optional[str] = None,
     ) -> LLMResponse:
         """
         多轮 messages 调用（支持 tool results 回传）。
@@ -626,14 +612,13 @@ class LLMProvider:
                         f"msgs={len(messages)} tools={len(tools) if tools else 0}"
                     )
 
-                with model_call_stage(audit_stage):
-                    response = await self._chat_completions(
-                        messages,
-                        max_tokens=max_tokens,
-                        temperature=temperature,
-                        tools=tools,
-                        tool_choice=tool_choice,
-                    )
+                response = await self._chat_completions(
+                    messages,
+                    max_tokens=max_tokens,
+                    temperature=temperature,
+                    tools=tools,
+                    tool_choice=tool_choice,
+                )
 
                 self._total_calls += 1
                 self._total_tokens += response.tokens_used

hy_memory/agent/reconciler.py

@@ -669,7 +669,6 @@ class MemoryReconciler:
             response = await llm.complete(
                 prompt=prompt,
                 max_tokens=500,
-                audit_stage="reconcile",
             )
             text = response.content.strip()
             if "```json" in text:
@@ -1384,7 +1383,6 @@ class MemoryReconciler:
                     response = await llm.complete(
                         prompt=prompt,
                         max_tokens=dyn_max_tokens,
-                        audit_stage="reconcile",
                     )
                 except Exception as e:
                     # LLM 彻底不可用（provider 已按 max_retries 重试过，网关 500 /

hy_memory/coding/chain_store.py

@@ -647,9 +647,7 @@ class HyCodeMem:
         top-k，但它们的 diff 对当前工作区不可能有用，因此挂链前必须做同仓过滤。
         """
         facts = facts or []
-        # 高级消融开关: HCM_BLOCK_OFF=1 → 完全不出块, 也不从 bullet 删任何 fact。
-        # 公共 opt-in 见 CodingConfig.chain_block_enabled /
-        # MEMORY_CODING_CHAIN_BLOCK_ENABLED（默认关；客户端在调用 decorate 前拦截）。
+        # 开关: HCM_BLOCK_OFF=1 → 完全不出块, 也不从 bullet 删任何 fact。
         if os.environ.get("HCM_BLOCK_OFF") == "1":
             return "", []
         picked, used = [], []

hy_memory/coding/extractor.py

@@ -919,7 +919,6 @@ class CodingMemoryExtractor:
             resp = await self.llm_provider.complete(
                 prompt=prompt,
                 max_tokens=self.max_tokens,
-                audit_stage="coding_extract",
             )
         except Exception as e:
             logger.warning(f"[coding-extract] LLM call failed: {e}")

hy_memory/coding/fact_reconciler.py

@@ -466,13 +466,7 @@ class WorkingFactReconciler:
             return [], []
 
         candidates = await self._retrieve_candidates(
-            drafts,
-            user_id=user_id,
-            agent_id=agent_id,
-            session_id=session_id,
-            workspace_id=workspace_id,
-            branch=branch,
-            source=source,
+            drafts, user_id=user_id, source=source,
         )
 
         try:
@@ -505,15 +499,7 @@ class WorkingFactReconciler:
     # ------------------------------------------------------------
 
     async def _retrieve_candidates(
-        self,
-        drafts: List[WorkingFactDraft],
-        *,
-        user_id: str,
-        agent_id: str,
-        session_id: Optional[str],
-        workspace_id: Optional[str],
-        branch: Optional[str],
-        source: str,
+        self, drafts: List[WorkingFactDraft], *, user_id: str, source: str
     ) -> List[List[WorkingFact]]:
         """每条 draft 用 statement 召回同 user 的 top-N active 事实。
 
@@ -526,10 +512,6 @@ class WorkingFactReconciler:
         关掉时整份召回原样交给 LLM。适用于 subject 不是稳定实体名的数据集（自由文本、
         位置标签），那里精确字符串相等会把同实体判成不同主体，反而拦掉真实更新。
         """
-        # Empty/legacy session metadata remains readable, but cannot prove
-        # conversation authority for a destructive SUPERSEDE.
-        if not session_id:
-            return [[] for _ in drafts]
         try:
             embeddings = await self.embed_service.embed_batch(
                 [d.statement for d in drafts]
@@ -543,10 +525,6 @@ class WorkingFactReconciler:
             try:
                 hits = await self.store.search_facts(
                     emb, user_id=user_id, top=self.candidates_per_draft,
-                    agent_id=agent_id,
-                    session_id=session_id,
-                    workspace_id=workspace_id,
-                    branch=branch,
                     # 写入侧同样接词面通道：候选选错了 LLM 就没有机会判对。这里不传
                     # min_score——写入侧要的是"有哪些可能的前身"，让 LLM 看更宽的名单，
                     # 阈值过滤是读取侧的事。
@@ -593,7 +571,6 @@ class WorkingFactReconciler:
         resp = await self.llm_provider.complete(
             prompt=prompt,
             max_tokens=self.max_tokens,
-            audit_stage="coding_fact_reconcile",
         )
         return self._parse_ops(resp.content)
 
@@ -660,7 +637,6 @@ class WorkingFactReconciler:
             resp = await self.llm_provider.complete(
                 prompt=prompt,
                 max_tokens=_CHAIN_SUMMARY_MAX_TOKENS,
-                audit_stage="coding_fact_summary",
             )
         except Exception as e:
             logger.warning(f"[fact-reconcile] chain summary failed: {e}")
@@ -816,15 +792,6 @@ class WorkingFactReconciler:
                 old = await self.store.get_fact(old_id, user_id=user_id)
                 if old is None:
                     continue
-                if (
-                    old.agent_id != agent_id
-                    or old.session_id != session_id
-                    or old.workspace_id != workspace_id
-                ):
-                    logger.warning(
-                        f"[fact-reconcile] refused cross-authority SUPERSEDE: {old.fact_id}"
-                    )
-                    continue
                 # 闸门在候选阶段已经拦过一道，这里再拦一次：候选是按 statement 召回的，
                 # 而 LLM 只能覆盖候选名单里的 id，理论上到不了这儿。真到了就说明前面
                 # 哪一环漏了，宁可让这次覆盖不生效——多留一条旧事实是可恢复的，删掉

hy_memory/coding/judge.py

@@ -29,9 +29,6 @@ logger = logging.getLogger(__name__)
 
 _JUDGE_MAX_TURNS = 20
 _JUDGE_HEAD_TURNS = 5
-_JUDGE_USER_CONTENT_LIMIT = 1_000
-_JUDGE_USER_CONTENT_HEAD = 200
-_JUDGE_USER_CONTENT_TAIL = 200
 _JUDGE_MAX_QUERY_CHARS = 300
 _JUDGE_MAX_QUERIES = 20
 
@@ -189,7 +186,6 @@ async def classify_messages_scene(
             prompt=prompt,
             max_tokens=max_tokens,
             temperature=temperature,
-            audit_stage="coding_judge",
         )
         _elapsed = round((time.perf_counter() - _t0) * 1000, 2)
         result = _parse_scene_json(resp.content)
@@ -635,13 +631,9 @@ def _format_turns(summary: List[Dict[str, Any]]) -> str:
     rows = []
     for t in summary:
         user = t.get("user", "") or ""
-        if len(user) > _JUDGE_USER_CONTENT_LIMIT:
-            omitted = len(user) - _JUDGE_USER_CONTENT_HEAD - _JUDGE_USER_CONTENT_TAIL
-            user = (
-                user[:_JUDGE_USER_CONTENT_HEAD]
-                + f"\n[...{omitted} chars omitted...]\n"
-                + user[-_JUDGE_USER_CONTENT_TAIL:]
-            )
+        # 单 turn 用户文本截到 200 字符
+        if len(user) > 200:
+            user = user[:200] + "..."
         tools = t.get("tools", []) or []
         rows.append(
             f"- turn {t.get('turn', '?')}: user={user!r}, tools={tools}"

hy_memory/coding/reconciler.py

@@ -240,7 +240,7 @@ class CodingMemoryReconciler:
         )
 
         # 3. 校验 + 执行
-        executed = await self._execute(ops, drafts, candidates_per_draft)
+        executed = await self._execute(ops, drafts)
         logger.info(
             f"[coding-reconcile] drafts={len(drafts)} ops={len(executed)} "
             + ", ".join(f"{a}={sum(1 for o in executed if o.action == a)}"
@@ -263,12 +263,6 @@ class CodingMemoryReconciler:
         """
         result: List[List[CodingMemory]] = []
         for d in drafts:
-            # A coding mutation must be attributable to one conversation.
-            # Empty/legacy session metadata stays readable through ordinary
-            # search, but it cannot authorize UPDATE/DELETE.
-            if not d.session_id:
-                result.append([])
-                continue
             try:
                 # task 为主入口，search_keys 为附加入口（去重、去空）
                 queries = [d.task] + [k for k in (d.search_keys or []) if k and k != d.task]
@@ -280,8 +274,6 @@ class CodingMemoryReconciler:
                     hits = await self.store.search_by_query_embedding(
                         emb,
                         user_id=d.user_id,
-                        agent_id=d.agent_id,
-                        session_id=d.session_id,
                         workspace_id=d.workspace_id,
                         branch=d.branch,
                         top=self.candidates_per_draft * 4,
@@ -318,7 +310,6 @@ class CodingMemoryReconciler:
         resp = await self.llm_provider.complete(
             prompt=prompt,
             max_tokens=self.max_tokens,
-            audit_stage="coding_reconcile",
         )
         return self._parse_ops(resp.content), prompt, resp.content, resp
 
@@ -423,7 +414,6 @@ class CodingMemoryReconciler:
         self,
         ops: List[ReconcileOp],
         drafts: List[CodingMemoryDraft],
-        candidates_per_draft: List[List[CodingMemory]],
     ) -> List[ReconcileOp]:
         """
         校验 + 执行 ops。返回成功执行的 ops（filter 掉无效 op）。
@@ -463,11 +453,6 @@ class CodingMemoryReconciler:
                 if not op.target_experience_id:
                     logger.warning(f"[coding-reconcile] drop UPDATE missing target: {op.to_dict()}")
                     continue
-                if not self._target_was_offered(op, candidates_per_draft):
-                    logger.warning(
-                        f"[coding-reconcile] drop UPDATE outside authority scope: {op.to_dict()}"
-                    )
-                    continue
                 if op.draft_idx in consumed:
                     logger.warning(f"[coding-reconcile] drop UPDATE on consumed draft: {op.to_dict()}")
                     continue
@@ -490,11 +475,6 @@ class CodingMemoryReconciler:
                 if not op.target_experience_id:
                     logger.warning(f"[coding-reconcile] drop DELETE missing target: {op.to_dict()}")
                     continue
-                if not self._target_was_offered(op, candidates_per_draft):
-                    logger.warning(
-                        f"[coding-reconcile] drop DELETE outside authority scope: {op.to_dict()}"
-                    )
-                    continue
                 # DELETE 需要知道 user_id；通过 draft_idx（如有）或第一个 draft 推断
                 user_id = self._infer_user_id(op, drafts)
                 if not user_id:
@@ -531,19 +511,6 @@ class CodingMemoryReconciler:
 
         return executed
 
-    @staticmethod
-    def _target_was_offered(
-        op: ReconcileOp,
-        candidates_per_draft: List[List[CodingMemory]],
-    ) -> bool:
-        """Only mutate a target frozen into this draft's scoped candidate set."""
-        if op.draft_idx is None or not (0 <= op.draft_idx < len(candidates_per_draft)):
-            return False
-        return any(
-            candidate.experience_id == op.target_experience_id
-            for candidate in candidates_per_draft[op.draft_idx]
-        )
-
     @staticmethod
     def _infer_user_id(
         op: ReconcileOp, drafts: List[CodingMemoryDraft]

hy_memory/coding/store.py

@@ -209,14 +209,6 @@ def _scope_where(
     return sql, params
 
 
-def _in_clause(column: str, values: Optional[List[str]]) -> Tuple[str, List[Any]]:
-    """SQL ``column IN (...)`` + parameters; empty values mean no condition."""
-    if not values:
-        return "", []
-    placeholders = ",".join("?" for _ in values)
-    return f"{column} IN ({placeholders})", list(values)
-
-
 def _scope_matches(
     row_workspace_id: Optional[str],
     row_branch: Optional[str],
@@ -416,36 +408,6 @@ class CodingMemoryStore:
 
         self._initialized = False
 
-    @staticmethod
-    def database_path(
-        config: MemoryConfig,
-        db_path: Optional[str] = None,
-        variant: str = "working",
-    ) -> str:
-        """Return the authoritative SQLite path without creating anything."""
-        if db_path is None:
-            data_dir = (
-                os.path.dirname(config.history.db_path)
-                if config.history.db_path else "./data"
-            )
-            db_path = os.path.join(data_dir, "coding_memory.db")
-        normalized = (
-            "coding"
-            if str(variant or "").strip().lower() == "coding"
-            else "working"
-        )
-        return _variant_db_path(db_path, "_cv" if normalized == "coding" else "")
-
-    @classmethod
-    def database_exists(
-        cls,
-        config: MemoryConfig,
-        db_path: Optional[str] = None,
-        variant: str = "working",
-    ) -> bool:
-        """Whether a coding namespace has an existing SQLite database."""
-        return os.path.isfile(cls.database_path(config, db_path, variant))
-
     async def initialize(self) -> None:
         if self._initialized:
             return
@@ -567,20 +529,10 @@ class CodingMemoryStore:
         """覆盖式更新一条 coding memory。"""
         # 拿旧 keys 长度，先删旧 VDB rows
         prev = await self.get_by_id(memory.experience_id, user_id=memory.user_id)
-        if prev is None:
-            raise ValueError("coding_memory_update_target_missing")
-        if (
-            not prev.session_id
-            or not memory.session_id
-            or prev.agent_id != memory.agent_id
-            or prev.session_id != memory.session_id
-            or prev.workspace_id != memory.workspace_id
-        ):
-            raise ValueError("coding_memory_update_authority_mismatch")
-        prev_key_count = 1 + len(prev.search_keys)
+        prev_key_count = (1 + len(prev.search_keys)) if prev else 0
 
         memory.updated_at = datetime.utcnow()
-        if memory.created_at is None:
+        if memory.created_at is None and prev is not None:
             memory.created_at = prev.created_at
         await _run_in_pool(self._upsert_sql_sync, memory)
         # 删旧 VDB
@@ -719,10 +671,6 @@ class CodingMemoryStore:
         query_embedding: List[float],
         user_id: str,
         *,
-        agent_id: Optional[str] = None,
-        session_id: Optional[str] = None,
-        agent_ids: Optional[List[str]] = None,
-        session_ids: Optional[List[str]] = None,
         workspace_id: Optional[str] = None,
         branch: Optional[str] = None,
         top: int = 40,
@@ -740,34 +688,21 @@ class CodingMemoryStore:
                 },
                 ...
             ]
-        agent_id / session_id（或 agent_ids / session_ids）是写授权作用域，
-        传入时精确匹配；workspace_id / branch 的规则见 _scope_where。
-        不传任何作用域则维持纯语义召回；传了则只保留 SQLite 里落在作用域内的经验，
-        并按选择率放大向量取数，避免"先取 top-N 再过滤"把召回吃掉。
+        workspace_id / branch 是作用域过滤，规则见 _scope_where：不传则纯语义召回
+        （行为与加过滤前完全一致）；传了则只保留 SQLite 里落在作用域内的经验，并按
+        作用域的选择率放大向量取数，避免"先取 top-N 再过滤"把召回吃掉。
         """
         if self._vec is None:
             return []
 
-        effective_agent_ids = list(agent_ids) if agent_ids else (
-            [agent_id] if agent_id else []
-        )
-        effective_session_ids = list(session_ids) if session_ids else (
-            [session_id] if session_id else []
-        )
         allowed: Optional[Set[str]] = None
-        if effective_agent_ids or effective_session_ids or workspace_id:
+        if workspace_id:
             allowed, total = await _run_in_pool(
-                self._authority_scoped_experience_ids_sync,
-                user_id,
-                effective_agent_ids,
-                effective_session_ids,
-                workspace_id,
-                branch,
+                self._scoped_experience_ids_sync, user_id, workspace_id, branch
             )
             if not allowed:
                 logger.info(
                     f"[coding-store] no experience in scope: "
-                    f"agent_id={agent_id!r} session_id={session_id!r} "
                     f"workspace_id={workspace_id!r} branch={branch!r} "
                     f"(user has {total}); skip vdb search"
                 )
@@ -843,10 +778,6 @@ class CodingMemoryStore:
         query_embedding: List[float],
         user_id: str,
         *,
-        agent_id: Optional[str] = None,
-        session_id: Optional[str] = None,
-        agent_ids: Optional[List[str]] = None,
-        session_ids: Optional[List[str]] = None,
         workspace_id: Optional[str] = None,
         branch: Optional[str] = None,
         top: int = 5,
@@ -860,9 +791,8 @@ class CodingMemoryStore:
         SUPERSEDE 时向量行已被删掉，理论上召不到 superseded；这里再按 SQLite 的
         status 过一道，避免两边不一致时把过期结论放出去。
 
-        agent_id / session_id（或 agent_ids / session_ids）是写授权作用域，
-        传入时精确匹配；workspace_id / branch 的规则见 _scope_where。
-        不传任何作用域则不过滤，传了按 SQLite 里的值筛，并按选择率放大向量取数。
+        workspace_id / branch 是作用域过滤，规则见 _scope_where，语义与经验层一致：
+        不传不过滤，传了按 SQLite 里的值筛，并按选择率放大向量取数。
 
         向量库按 top 的 4 倍过采样：向量行和 SQLite 行不是一个事务里写的，中间挂掉
         就会留下"向量还在、SQLite 没了"的孤儿，软删时删向量失败也会留下 superseded
@@ -878,27 +808,14 @@ class CodingMemoryStore:
         if self._fact_vec is None:
             return []
 
-        effective_agent_ids = list(agent_ids) if agent_ids else (
-            [agent_id] if agent_id else []
-        )
-        effective_session_ids = list(session_ids) if session_ids else (
-            [session_id] if session_id else []
-        )
         fetch = top * 4
-        if effective_agent_ids or effective_session_ids or workspace_id:
+        if workspace_id:
             scoped, total = await _run_in_pool(
-                self._count_active_facts_sync,
-                user_id,
-                effective_agent_ids,
-                effective_session_ids,
-                workspace_id,
-                branch,
+                self._count_active_facts_sync, user_id, workspace_id, branch
             )
             if not scoped:
                 logger.info(
                     f"[coding-store] no active fact in scope: "
-                    f"agent_ids={effective_agent_ids!r} "
-                    f"session_ids={effective_session_ids!r} "
                     f"workspace_id={workspace_id!r} branch={branch!r} "
                     f"(user has {total}); skip fact vdb search"
                 )
@@ -935,8 +852,6 @@ class CodingMemoryStore:
         alive = [
             (f, scores[f.fact_id]) for f in facts
             if f.status == "active"
-            and (not effective_agent_ids or f.agent_id in effective_agent_ids)
-            and (not effective_session_ids or f.session_id in effective_session_ids)
             and _scope_matches(f.workspace_id, f.branch, workspace_id, branch)
         ]
         kept = [(f, s) for f, s in alive if s >= min_score]
@@ -1135,28 +1050,14 @@ class CodingMemoryStore:
             by_id = {r["experience_id"]: _row_to_memory(r) for r in rows}
             return [by_id[eid] for eid in experience_ids if eid in by_id]
 
-    def _authority_scoped_experience_ids_sync(
-        self,
-        user_id: str,
-        agent_ids: Optional[List[str]],
-        session_ids: Optional[List[str]],
-        workspace_id: Optional[str],
-        branch: Optional[str],
+    def _scoped_experience_ids_sync(
+        self, user_id: str, workspace_id: str, branch: Optional[str]
     ) -> Tuple[Set[str], int]:
-        """返回 (落在授权作用域内的 experience_id 集合, 该 user 的经验总数)。
+        """返回 (落在作用域内的 experience_id 集合, 该 user 的经验总数)。
 
         一次查询同时拿到过滤结果和选择率分母：前者供向量命中做交集，后者定放大倍数。
-        agent_ids / session_ids 为空表示该维度不筛；非空按 IN 精确匹配。
         """
         scope_sql, scope_params = _scope_where(workspace_id, branch)
-        agent_sql, agent_params = _in_clause("agent_id", agent_ids)
-        if agent_sql:
-            scope_sql = f"({agent_sql}) AND ({scope_sql})"
-            scope_params = [*agent_params, *scope_params]
-        session_sql, session_params = _in_clause("session_id", session_ids)
-        if session_sql:
-            scope_sql = f"({session_sql}) AND ({scope_sql})"
-            scope_params = [*session_params, *scope_params]
         with self._lock:
             assert self._conn is not None
             cur = self._conn.execute(
@@ -1168,27 +1069,13 @@ class CodingMemoryStore:
         return {r["experience_id"] for r in rows if r["in_scope"]}, len(rows)
 
     def _count_active_facts_sync(
-        self,
-        user_id: str,
-        agent_ids: Optional[List[str]],
-        session_ids: Optional[List[str]],
-        workspace_id: Optional[str],
-        branch: Optional[str],
+        self, user_id: str, workspace_id: str, branch: Optional[str]
     ) -> Tuple[int, int]:
         """返回 (作用域内 active 事实数, 该 user 的 active 事实总数)。
 
         事实层的过滤在 get_facts 拿到对象之后用 _scope_matches 做，这里只要选择率。
-        agent_ids / session_ids 为空表示该维度不筛；非空按 IN 精确匹配。
         """
         scope_sql, scope_params = _scope_where(workspace_id, branch)
-        agent_sql, agent_params = _in_clause("agent_id", agent_ids)
-        if agent_sql:
-            scope_sql = f"({agent_sql}) AND ({scope_sql})"
-            scope_params = [*agent_params, *scope_params]
-        session_sql, session_params = _in_clause("session_id", session_ids)
-        if session_sql:
-            scope_sql = f"({session_sql}) AND ({scope_sql})"
-            scope_params = [*session_params, *scope_params]
         with self._lock:
             assert self._conn is not None
             row = self._conn.execute(

hy_memory/coding/writer.py

@@ -50,7 +50,6 @@ class CodingWriter:
         embed_service: EmbedService,
         fact_reconciler: Optional[WorkingFactReconciler] = None,
         cache: Any = None,
-        variant: str = "working",
     ):
         self.store = store
         self.extractor = extractor
@@ -60,11 +59,6 @@ class CodingWriter:
         self.fact_reconciler = fact_reconciler or WorkingFactReconciler(
             store, embed_service, llm_provider
         )
-        self.variant = (
-            "coding"
-            if str(variant or "").strip().lower() == "coding"
-            else "working"
-        )
         # cache 仅用于把 request_id 串给各阶段（各阶段自己打点）；writer 不集中打点。
         self.cache = cache
 
@@ -223,7 +217,6 @@ class CodingWriter:
         return {
             "success": True,
             "scene": "productivity",
-            "variant": self.variant,
             "request_id": request_id,
             "elapsed_ms": round((time.perf_counter() - t0) * 1000, 2),
             "ops": [op.to_dict() for op in ops],
@@ -285,11 +278,11 @@ class CodingWriter:
                         f"[coding-write] crosslink fact {f.fact_id} failed: {e}"
                     )
 
-    def _empty_response(self, request_id: str, t0: float) -> Dict[str, Any]:
+    @staticmethod
+    def _empty_response(request_id: str, t0: float) -> Dict[str, Any]:
         return {
             "success": True,
             "scene": "productivity",
-            "variant": self.variant,
             "request_id": request_id,
             "elapsed_ms": round((time.perf_counter() - t0) * 1000, 2),
             "ops": [],

hy_memory/config.py

@@ -6,7 +6,7 @@ Agent Memory - 配置管理
 
 import os
 from dataclasses import dataclass, field
-from typing import Optional, Dict, Any, Callable, List
+from typing import Optional, Dict, Any, List
 from pathlib import Path
 
 
@@ -1136,9 +1136,6 @@ class CodingConfig:
     # LLM 失败或没有抽出 fact 时，是否把对话原文存成 working fact。
     # 默认关闭，避免 assistant/tool 轨迹以 statement 形式直接暴露给消费方。
     verbatim_fallback_enabled: bool = None
-    # search(scene="coding") 是否注入版本演进链块（diff / chain_block）。
-    # 默认关闭（opt-in）：中重度 coding 用户可省下大量 prompt token；写入侧仍可 observe。
-    chain_block_enabled: bool = None
 
     def __post_init__(self):
         if self.enable is None:
@@ -1156,10 +1153,6 @@ class CodingConfig:
             self.verbatim_fallback_enabled = _get_env_bool(
                 "MEMORY_CODING_VERBATIM_FALLBACK_ENABLED", False
             )
-        if self.chain_block_enabled is None:
-            self.chain_block_enabled = _get_env_bool(
-                "MEMORY_CODING_CHAIN_BLOCK_ENABLED", False
-            )
 
 
 @dataclass
@@ -1259,13 +1252,6 @@ class MemoryConfig:
     enable_agent: bool = False
     debug: bool = False
     metrics_enabled: bool = True
-    # Runtime-only HTTP transport factory. MemHub uses this for request-cost
-    # budgeting without restricting the embedded SDK's local store access.
-    http_transport_factory: Optional[Callable[[], Any]] = field(
-        default=None,
-        repr=False,
-        compare=False,
-    )
 
     def __post_init__(self):
         # enable_graph 跟随 mode 走：mode=ultra 时自动启用，无需独立环境变量

hy_memory/core/embed_service.py

@@ -356,21 +356,11 @@ class EmbedService:
         key = self._client_cache_key(base_url, api_key, timeout)
         client = self._client_cache.get(key)
         if client is None:
-            client_options = {
-                "api_key": api_key,
-                "base_url": base_url or None,
-                "timeout": timeout,
-                "max_retries": 0,
-            }
-            transport_factory = getattr(self.config, "http_transport_factory", None)
-            if callable(transport_factory):
-                import httpx
-
-                client_options["http_client"] = httpx.AsyncClient(
-                    transport=transport_factory()
-                )
             client = AsyncOpenAI(
-                **client_options,
+                api_key=api_key,
+                base_url=base_url or None,
+                timeout=timeout,
+                max_retries=0,
             )
             self._client_cache[key] = client
         return client

hy_memory/data/cache_base.py

@@ -114,37 +114,6 @@ class CacheBase(ABC):
         """查询 pipeline 中间结果日志"""
         ...
 
-    # ================================================================
-    # Durable write outcomes
-    # ================================================================
-
-    @abstractmethod
-    async def claim_write_outcome(
-        self,
-        request_id: str,
-        user_id: str,
-        agent_id: str,
-        session_id: str,
-        operation: str,
-    ) -> Optional[Dict[str, Any]]:
-        """Claim one idempotent write; return the existing row if already claimed."""
-        ...
-
-    @abstractmethod
-    async def finish_write_outcome(
-        self,
-        request_id: str,
-        status: str,
-        result: Dict[str, Any],
-    ) -> bool:
-        """Persist the terminal/unknown result for a claimed write."""
-        ...
-
-    @abstractmethod
-    async def get_write_outcome(self, request_id: str) -> Optional[Dict[str, Any]]:
-        """Read one durable write outcome by exact request id."""
-        ...
-
     # ================================================================
     # Summary Buffer（rolling summary 的未消费 turn 暂存）
     #

hy_memory/data/cache_mysql.py

@@ -81,21 +81,6 @@ _CREATE_TABLES_SQL = [
     )
     """,
     """
-    CREATE TABLE IF NOT EXISTS write_outcomes (
-        request_id VARCHAR(256) NOT NULL,
-        user_id    VARCHAR(255) NOT NULL,
-        agent_id   VARCHAR(255) NOT NULL DEFAULT '',
-        session_id VARCHAR(255) NOT NULL DEFAULT '',
-        operation  VARCHAR(32) NOT NULL,
-        status     VARCHAR(32) NOT NULL,
-        result_json LONGTEXT NOT NULL,
-        created_at VARCHAR(64) NOT NULL,
-        updated_at VARCHAR(64) NOT NULL,
-        PRIMARY KEY (request_id),
-        KEY idx_write_outcomes_owner (user_id, agent_id, session_id)
-    ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4
-    """,
-    """
     CREATE TABLE IF NOT EXISTS system_metrics (
         minute_ts   VARCHAR(32) NOT NULL,
         data        LONGTEXT NOT NULL,
@@ -474,128 +459,29 @@ class MysqlCache(CacheBase):
             logger.warning(f"get_pipeline_logs failed: {e}")
             return []
 
-    async def claim_write_outcome(
-        self,
-        request_id: str,
-        user_id: str,
-        agent_id: str,
-        session_id: str,
-        operation: str,
-    ) -> Optional[Dict[str, Any]]:
-        now = datetime.now().isoformat()
-        inserted = await self._execute(
-            """
-            INSERT IGNORE INTO write_outcomes (
-                request_id, user_id, agent_id, session_id, operation,
-                status, result_json, created_at, updated_at
-            ) VALUES (%s, %s, %s, %s, %s, 'running', '{}', %s, %s)
-            """,
-            (request_id, user_id, agent_id, session_id, operation, now, now),
-        )
-        if inserted == 1:
-            return None
-        return await self.get_write_outcome(request_id)
-
-    async def finish_write_outcome(
-        self,
-        request_id: str,
-        status: str,
-        result: Dict[str, Any],
-    ) -> bool:
-        updated = await self._execute(
-            """
-            UPDATE write_outcomes
-            SET status = %s, result_json = %s, updated_at = %s
-            WHERE request_id = %s
-            """,
-            (
-                status,
-                json.dumps(result, ensure_ascii=False, default=str),
-                datetime.now().isoformat(),
-                request_id,
-            ),
-        )
-        return updated == 1
-
-    async def get_write_outcome(self, request_id: str) -> Optional[Dict[str, Any]]:
-        row = await self._fetchone(
-            "SELECT * FROM write_outcomes WHERE request_id = %s",
-            (request_id,),
-        )
-        if row is None:
-            return None
-        try:
-            row["result"] = json.loads(row.pop("result_json") or "{}")
-        except (TypeError, json.JSONDecodeError):
-            row["result"] = {}
-        return row
-
     # ================================================================
     # System Metrics（分钟粒度落盘）
     # ================================================================
 
     async def store_metrics_minute(self, minute_ts: str, data: dict) -> None:
-        import aiomysql
-
         try:
             now = datetime.now().isoformat()
-            # Read-merge-write must be one transaction: two instances flushing
-            # the same minute used to overwrite each other's counters, and a
-            # concurrent insert could lose the whole batch to a duplicate key.
-            for attempt in range(2):
-                try:
-                    async with self._pool.acquire() as conn:
-                        await conn.begin()
-                        try:
-                            async with conn.cursor(aiomysql.DictCursor) as cur:
-                                await cur.execute(
-                                    "SELECT data FROM system_metrics "
-                                    "WHERE minute_ts = %s FOR UPDATE",
-                                    (minute_ts,),
-                                )
-                                row = await cur.fetchone()
-                                if row is not None:
-                                    old_raw = (
-                                        row["data"]
-                                        if isinstance(row, dict)
-                                        else row[0]
-                                    )
-                                    merged = self._merge_metric_buckets(
-                                        json.loads(old_raw), data,
-                                    )
-                                    await cur.execute(
-                                        "UPDATE system_metrics SET data = %s, "
-                                        "created_at = %s WHERE minute_ts = %s",
-                                        (
-                                            json.dumps(merged, default=str),
-                                            now,
-                                            minute_ts,
-                                        ),
-                                    )
-                                else:
-                                    await cur.execute(
-                                        "INSERT INTO system_metrics "
-                                        "(minute_ts, data, created_at) "
-                                        "VALUES (%s, %s, %s)",
-                                        (
-                                            minute_ts,
-                                            json.dumps(data, default=str),
-                                            now,
-                                        ),
-                                    )
-                            await conn.commit()
-                            return
-                        except Exception:
-                            await conn.rollback()
-                            raise
-                except (aiomysql.IntegrityError, aiomysql.OperationalError) as error:
-                    code = error.args[0] if error.args else None
-                    deadlock = code in (1205, 1213)
-                    if attempt or (isinstance(error, aiomysql.OperationalError) and not deadlock):
-                        raise
-                    # A competing writer inserted the row, or InnoDB chose us
-                    # as the deadlock victim. Retry so this batch merges.
-                    continue
+            # 尝试 UPSERT
+            existing = await self._fetchone(
+                "SELECT data FROM system_metrics WHERE minute_ts = %s", (minute_ts,)
+            )
+            if existing:
+                old_data = json.loads(existing["data"])
+                merged = self._merge_metric_buckets(old_data, data)
+                await self._execute(
+                    "UPDATE system_metrics SET data = %s, created_at = %s WHERE minute_ts = %s",
+                    (json.dumps(merged, default=str), now, minute_ts),
+                )
+            else:
+                await self._execute(
+                    "INSERT INTO system_metrics (minute_ts, data, created_at) VALUES (%s, %s, %s)",
+                    (minute_ts, json.dumps(data, default=str), now),
+                )
         except Exception as e:
             logger.warning(f"store_metrics_minute failed: {e}")
 

hy_memory/data/cache_sqlite.py

@@ -7,7 +7,7 @@ Agent Memory V2 - SqliteCache
 设计模式跟随 history_store.py:
 - 标准库 sqlite3 + _run_in_sqlite_pool()
 - WAL 模式 + check_same_thread=False
-- 每实例 threading.RLock 保护共享连接的全部操作与关闭
+- threading.Lock 保护写操作
 
 三张表:
 - memory_operations / pipeline_logs / system_metrics: 审计与观测
@@ -87,20 +87,6 @@ CREATE TABLE IF NOT EXISTS pipeline_logs_v2 (
 CREATE INDEX IF NOT EXISTS idx_plog_request ON pipeline_logs_v2(request_id);
 CREATE INDEX IF NOT EXISTS idx_plog_user    ON pipeline_logs_v2(user_id);
 
-CREATE TABLE IF NOT EXISTS write_outcomes (
-    request_id   TEXT PRIMARY KEY,
-    user_id      TEXT NOT NULL,
-    agent_id     TEXT NOT NULL DEFAULT '',
-    session_id   TEXT NOT NULL DEFAULT '',
-    operation    TEXT NOT NULL,
-    status       TEXT NOT NULL,
-    result_json  TEXT NOT NULL DEFAULT '{}',
-    created_at   TEXT NOT NULL,
-    updated_at   TEXT NOT NULL
-);
-CREATE INDEX IF NOT EXISTS idx_write_outcomes_owner
-ON write_outcomes(user_id, agent_id, session_id);
-
 CREATE TABLE IF NOT EXISTS system_metrics (
     minute_ts  TEXT PRIMARY KEY,
     data       TEXT NOT NULL,
@@ -136,10 +122,7 @@ class SqliteCache(CacheBase):
     def __init__(self, config: MemoryConfig):
         self.config = config
         self._conn: Optional[sqlite3.Connection] = None
-        # One connection is shared by the executor workers. Use the same lock
-        # for reads, writes, initialization and close so close() cannot free
-        # the connection while another worker is inside sqlite3.
-        self._lock = threading.RLock()
+        self._lock = threading.Lock()
 
         # 读取 db_path
         cache_cfg = getattr(config, "cache", None)
@@ -161,37 +144,35 @@ class SqliteCache(CacheBase):
         logger.debug(f"SqliteCache initialized: {self._db_path}")
 
     def _init_sync(self) -> None:
-        with self._lock:
-            db_dir = os.path.dirname(self._db_path)
-            if db_dir:
-                os.makedirs(db_dir, exist_ok=True)
-            self._conn = sqlite3.connect(self._db_path, check_same_thread=False)
-            self._conn.row_factory = sqlite3.Row
-            self._conn.execute("PRAGMA journal_mode=WAL;")
-            self._conn.executescript(_CREATE_TABLES_SQL)
-            self._migrate_pipeline_logs_columns()
-            self._conn.commit()
+        db_dir = os.path.dirname(self._db_path)
+        if db_dir:
+            os.makedirs(db_dir, exist_ok=True)
+        self._conn = sqlite3.connect(self._db_path, check_same_thread=False)
+        self._conn.row_factory = sqlite3.Row
+        self._conn.execute("PRAGMA journal_mode=WAL;")
+        self._conn.executescript(_CREATE_TABLES_SQL)
+        self._migrate_pipeline_logs_columns()
+        self._conn.commit()
 
     def _migrate_pipeline_logs_columns(self) -> None:
         """给旧库的 pipeline_logs_v2 补 namespace/session/event time 列。"""
-        with self._lock:
-            try:
-                cols = {
-                    row["name"]
-                    for row in self._conn.execute("PRAGMA table_info(pipeline_logs_v2)")
-                }
-                _text_cols = ("namespace", "session_id")
-                for col in _text_cols:
-                    if col not in cols:
-                        self._conn.execute(
-                            f"ALTER TABLE pipeline_logs_v2 ADD COLUMN {col} TEXT NOT NULL DEFAULT ''"
-                        )
-                if "event_at_ms" not in cols:
+        try:
+            cols = {
+                row["name"]
+                for row in self._conn.execute("PRAGMA table_info(pipeline_logs_v2)")
+            }
+            _text_cols = ("namespace", "session_id")
+            for col in _text_cols:
+                if col not in cols:
                     self._conn.execute(
-                        "ALTER TABLE pipeline_logs_v2 ADD COLUMN event_at_ms INTEGER NOT NULL DEFAULT 0"
+                        f"ALTER TABLE pipeline_logs_v2 ADD COLUMN {col} TEXT NOT NULL DEFAULT ''"
                     )
-            except Exception as e:
-                logger.debug(f"[sqlite] pipeline_logs_v2 column migration skipped: {e}")
+            if "event_at_ms" not in cols:
+                self._conn.execute(
+                    "ALTER TABLE pipeline_logs_v2 ADD COLUMN event_at_ms INTEGER NOT NULL DEFAULT 0"
+                )
+        except Exception as e:
+            logger.debug(f"[sqlite] pipeline_logs_v2 column migration skipped: {e}")
 
     async def close(self) -> None:
         if self._conn is not None:
@@ -199,10 +180,9 @@ class SqliteCache(CacheBase):
         logger.info("SqliteCache closed")
 
     def _close_sync(self) -> None:
-        with self._lock:
-            if self._conn:
-                self._conn.close()
-                self._conn = None
+        if self._conn:
+            self._conn.close()
+            self._conn = None
 
     # ================================================================
     # 统计
@@ -275,40 +255,39 @@ class SqliteCache(CacheBase):
         """
         try:
             def _query():
-                with self._lock:
-                    conditions = []
-                    params = []
-                    if request_id:
-                        conditions.append("request_id = ?")
-                        params.append(request_id)
-                    if memory_id:
-                        conditions.append("memory_id = ?")
-                        params.append(memory_id)
-                    if user_id:
-                        conditions.append("user_id = ?")
-                        params.append(user_id)
+                conditions = []
+                params = []
+                if request_id:
+                    conditions.append("request_id = ?")
+                    params.append(request_id)
+                if memory_id:
+                    conditions.append("memory_id = ?")
+                    params.append(memory_id)
+                if user_id:
+                    conditions.append("user_id = ?")
+                    params.append(user_id)
 
-                    if not conditions:
-                        return []
+                if not conditions:
+                    return []
 
-                    where = " AND ".join(conditions)
-                    rows = self._conn.execute(
-                        f"SELECT * FROM memory_operations_v2 WHERE {where} "
-                        f"ORDER BY id DESC LIMIT ?",
-                        params + [limit],
-                    ).fetchall()
-                    result = []
-                    for r in rows:
-                        row = dict(r)
-                        # 反序列化 supersedes JSON 字符串 → list
-                        import json as _json
-                        raw_sup = row.get("supersedes", "")
-                        try:
-                            row["supersedes"] = _json.loads(raw_sup) if raw_sup else []
-                        except Exception:
-                            row["supersedes"] = []
-                        result.append(row)
-                    return result
+                where = " AND ".join(conditions)
+                rows = self._conn.execute(
+                    f"SELECT * FROM memory_operations_v2 WHERE {where} "
+                    f"ORDER BY id DESC LIMIT ?",
+                    params + [limit],
+                ).fetchall()
+                result = []
+                for r in rows:
+                    row = dict(r)
+                    # 反序列化 supersedes JSON 字符串 → list
+                    import json as _json
+                    raw_sup = row.get("supersedes", "")
+                    try:
+                        row["supersedes"] = _json.loads(raw_sup) if raw_sup else []
+                    except Exception:
+                        row["supersedes"] = []
+                    result.append(row)
+                return result
 
             return await _run_in_sqlite_pool(_query)
         except Exception as e:
@@ -390,126 +369,43 @@ class SqliteCache(CacheBase):
         """
         try:
             def _query():
-                with self._lock:
-                    conditions = []
-                    params = []
-                    if request_id:
-                        conditions.append("request_id = ?")
-                        params.append(request_id)
-                    if user_id:
-                        conditions.append("user_id = ?")
-                        params.append(user_id)
-                    if step:
-                        conditions.append("step = ?")
-                        params.append(step)
+                conditions = []
+                params = []
+                if request_id:
+                    conditions.append("request_id = ?")
+                    params.append(request_id)
+                if user_id:
+                    conditions.append("user_id = ?")
+                    params.append(user_id)
+                if step:
+                    conditions.append("step = ?")
+                    params.append(step)
 
-                    if not conditions:
-                        return []
+                if not conditions:
+                    return []
 
-                    where = " AND ".join(conditions)
-                    rows = self._conn.execute(
-                        f"SELECT * FROM pipeline_logs_v2 WHERE {where} "
-                        f"ORDER BY id ASC LIMIT ?",
-                        params + [limit],
-                    ).fetchall()
-                    out = [dict(r) for r in rows]
-                    # 派生可读的 event_at（ISO ms）供查询接口直接用；event_at_ms 为 0 时留空
-                    from datetime import datetime as _dt
-                    for _r in out:
-                        _ms = _r.get("event_at_ms") or 0
-                        _r["event_at"] = (
-                            _dt.fromtimestamp(_ms / 1000.0).isoformat(timespec="milliseconds")
-                            if _ms else ""
-                        )
-                    return out
+                where = " AND ".join(conditions)
+                rows = self._conn.execute(
+                    f"SELECT * FROM pipeline_logs_v2 WHERE {where} "
+                    f"ORDER BY id ASC LIMIT ?",
+                    params + [limit],
+                ).fetchall()
+                out = [dict(r) for r in rows]
+                # 派生可读的 event_at（ISO ms）供查询接口直接用；event_at_ms 为 0 时留空
+                from datetime import datetime as _dt
+                for _r in out:
+                    _ms = _r.get("event_at_ms") or 0
+                    _r["event_at"] = (
+                        _dt.fromtimestamp(_ms / 1000.0).isoformat(timespec="milliseconds")
+                        if _ms else ""
+                    )
+                return out
 
             return await _run_in_sqlite_pool(_query)
         except Exception as e:
             logger.warning(f"get_pipeline_logs failed: {e}")
             return []
 
-    # ================================================================
-    # Durable write outcomes
-    # ================================================================
-
-    async def claim_write_outcome(
-        self,
-        request_id: str,
-        user_id: str,
-        agent_id: str,
-        session_id: str,
-        operation: str,
-    ) -> Optional[Dict[str, Any]]:
-        def _claim():
-            with self._lock:
-                now = datetime.now().isoformat()
-                cursor = self._conn.execute(
-                    """
-                    INSERT OR IGNORE INTO write_outcomes (
-                        request_id, user_id, agent_id, session_id, operation,
-                        status, result_json, created_at, updated_at
-                    ) VALUES (?, ?, ?, ?, ?, 'running', '{}', ?, ?)
-                    """,
-                    (request_id, user_id, agent_id, session_id, operation, now, now),
-                )
-                self._conn.commit()
-                if cursor.rowcount == 1:
-                    return None
-                row = self._conn.execute(
-                    "SELECT * FROM write_outcomes WHERE request_id = ?",
-                    (request_id,),
-                ).fetchone()
-                return dict(row) if row else None
-
-        existing = await _run_in_sqlite_pool(_claim)
-        if existing is None:
-            return None
-        return await self.get_write_outcome(request_id)
-
-    async def finish_write_outcome(
-        self,
-        request_id: str,
-        status: str,
-        result: Dict[str, Any],
-    ) -> bool:
-        def _finish():
-            with self._lock:
-                cursor = self._conn.execute(
-                    """
-                    UPDATE write_outcomes
-                    SET status = ?, result_json = ?, updated_at = ?
-                    WHERE request_id = ?
-                    """,
-                    (
-                        status,
-                        json.dumps(result, ensure_ascii=False, default=str),
-                        datetime.now().isoformat(),
-                        request_id,
-                    ),
-                )
-                self._conn.commit()
-                return cursor.rowcount == 1
-
-        return await _run_in_sqlite_pool(_finish)
-
-    async def get_write_outcome(self, request_id: str) -> Optional[Dict[str, Any]]:
-        def _get():
-            with self._lock:
-                row = self._conn.execute(
-                    "SELECT * FROM write_outcomes WHERE request_id = ?",
-                    (request_id,),
-                ).fetchone()
-                return dict(row) if row else None
-
-        row = await _run_in_sqlite_pool(_get)
-        if row is None:
-            return None
-        try:
-            row["result"] = json.loads(row.pop("result_json") or "{}")
-        except (TypeError, json.JSONDecodeError):
-            row["result"] = {}
-        return row
-
     # ================================================================
     # System Metrics（分钟粒度落盘）
     # ================================================================
@@ -518,27 +414,26 @@ class SqliteCache(CacheBase):
         """存储一个分钟桶的增量指标数据（UPSERT: 同一分钟多次写入会合并）"""
         try:
             def _store():
-                with self._lock:
-                    now = datetime.now().isoformat()
-                    # UPSERT: 如果同一分钟已存在，合并数据
-                    existing = self._conn.execute(
-                        "SELECT data FROM system_metrics WHERE minute_ts = ?",
-                        (minute_ts,),
-                    ).fetchone()
-                    if existing:
-                        import json as _json
-                        old_data = _json.loads(existing["data"])
-                        merged = self._merge_metric_buckets(old_data, data)
-                        self._conn.execute(
-                            "UPDATE system_metrics SET data = ?, created_at = ? WHERE minute_ts = ?",
-                            (_json.dumps(merged, default=str), now, minute_ts),
-                        )
-                    else:
-                        self._conn.execute(
-                            "INSERT INTO system_metrics (minute_ts, data, created_at) VALUES (?, ?, ?)",
-                            (minute_ts, json.dumps(data, default=str), now),
-                        )
-                    self._conn.commit()
+                now = datetime.now().isoformat()
+                # UPSERT: 如果同一分钟已存在，合并数据
+                existing = self._conn.execute(
+                    "SELECT data FROM system_metrics WHERE minute_ts = ?",
+                    (minute_ts,),
+                ).fetchone()
+                if existing:
+                    import json as _json
+                    old_data = _json.loads(existing["data"])
+                    merged = self._merge_metric_buckets(old_data, data)
+                    self._conn.execute(
+                        "UPDATE system_metrics SET data = ?, created_at = ? WHERE minute_ts = ?",
+                        (_json.dumps(merged, default=str), now, minute_ts),
+                    )
+                else:
+                    self._conn.execute(
+                        "INSERT INTO system_metrics (minute_ts, data, created_at) VALUES (?, ?, ?)",
+                        (minute_ts, json.dumps(data, default=str), now),
+                    )
+                self._conn.commit()
             await _run_in_sqlite_pool(_store)
         except Exception as e:
             logger.warning(f"store_metrics_minute failed: {e}")
@@ -547,18 +442,17 @@ class SqliteCache(CacheBase):
         """读取指定时间范围内的分钟指标数据"""
         try:
             def _load():
-                with self._lock:
-                    rows = self._conn.execute(
-                        "SELECT data FROM system_metrics WHERE minute_ts >= ? AND minute_ts <= ? ORDER BY minute_ts",
-                        (start_ts, end_ts),
-                    ).fetchall()
-                    results = []
-                    for row in rows:
-                        try:
-                            results.append(json.loads(row["data"]))
-                        except (json.JSONDecodeError, TypeError):
-                            pass
-                    return results
+                rows = self._conn.execute(
+                    "SELECT data FROM system_metrics WHERE minute_ts >= ? AND minute_ts <= ? ORDER BY minute_ts",
+                    (start_ts, end_ts),
+                ).fetchall()
+                results = []
+                for row in rows:
+                    try:
+                        results.append(json.loads(row["data"]))
+                    except (json.JSONDecodeError, TypeError):
+                        pass
+                return results
             return await _run_in_sqlite_pool(_load)
         except Exception as e:
             logger.warning(f"load_metrics_range failed: {e}")
@@ -568,12 +462,11 @@ class SqliteCache(CacheBase):
         """删除指定时间之前的 metrics 数据"""
         try:
             def _cleanup():
-                with self._lock:
-                    self._conn.execute(
-                        "DELETE FROM system_metrics WHERE minute_ts < ?",
-                        (before_ts,),
-                    )
-                    self._conn.commit()
+                self._conn.execute(
+                    "DELETE FROM system_metrics WHERE minute_ts < ?",
+                    (before_ts,),
+                )
+                self._conn.commit()
             await _run_in_sqlite_pool(_cleanup)
         except Exception as e:
             logger.warning(f"cleanup_old_metrics failed: {e}")

hy_memory/data/history_store.py

@@ -16,7 +16,6 @@ import json
 import logging
 import os
 import sqlite3
-import threading
 from datetime import datetime, timezone
 from typing import Dict, List, Any, Optional
 
@@ -66,11 +65,6 @@ def _now_iso() -> str:
     return datetime.now(timezone.utc).isoformat()
 
 
-def _escape_like(value: str) -> str:
-    """Escape LIKE wildcards so a user id is matched literally."""
-    return value.replace("\\", "\\\\").replace("%", "\\%").replace("_", "\\_")
-
-
 class HistoryStore:
     """
     SQLite 历史存储 - 记录所有内存操作的审计日志。
@@ -95,10 +89,6 @@ class HistoryStore:
         """
         self._db_path = config.history.db_path
         self._conn: Optional[sqlite3.Connection] = None
-        # sqlite3.Connection.close() must never race with an execute() on the
-        # same connection. The lock also serializes operations on this shared
-        # connection; separate HistoryStore instances remain independent.
-        self._conn_lock = threading.RLock()
 
     async def initialize(self) -> None:
         """创建表和索引（如果不存在）"""
@@ -107,21 +97,20 @@ class HistoryStore:
 
     def _init_sync(self) -> None:
         """同步初始化：创建目录、连接数据库、建表建索引"""
-        with self._conn_lock:
-            # 确保目录存在
-            db_dir = os.path.dirname(self._db_path)
-            if db_dir:
-                os.makedirs(db_dir, exist_ok=True)
+        # 确保目录存在
+        db_dir = os.path.dirname(self._db_path)
+        if db_dir:
+            os.makedirs(db_dir, exist_ok=True)
 
-            self._conn = sqlite3.connect(self._db_path, check_same_thread=False)
-            self._conn.row_factory = sqlite3.Row
-            # 开启 WAL 模式，提高并发读写性能
-            self._conn.execute("PRAGMA journal_mode=WAL;")
+        self._conn = sqlite3.connect(self._db_path, check_same_thread=False)
+        self._conn.row_factory = sqlite3.Row
+        # 开启 WAL 模式，提高并发读写性能
+        self._conn.execute("PRAGMA journal_mode=WAL;")
 
-            self._conn.execute(_CREATE_TABLE_SQL)
-            for idx_sql in _CREATE_INDEXES_SQL:
-                self._conn.execute(idx_sql)
-            self._conn.commit()
+        self._conn.execute(_CREATE_TABLE_SQL)
+        for idx_sql in _CREATE_INDEXES_SQL:
+            self._conn.execute(idx_sql)
+        self._conn.commit()
 
     # ================================================================
     # 记录操作
@@ -229,14 +218,13 @@ class HistoryStore:
         return await _run_in_sqlite_pool(self._get_history_sync, memory_id)
 
     def _get_history_sync(self, memory_id: str) -> List[Dict[str, Any]]:
-        with self._conn_lock:
-            if self._conn is None:
-                return []
-            cursor = self._conn.execute(
-                "SELECT * FROM memory_history WHERE memory_id = ? ORDER BY created_at ASC",
-                (memory_id,),
-            )
-            return [dict(row) for row in cursor.fetchall()]
+        if self._conn is None:
+            return []
+        cursor = self._conn.execute(
+            "SELECT * FROM memory_history WHERE memory_id = ? ORDER BY created_at ASC",
+            (memory_id,),
+        )
+        return [dict(row) for row in cursor.fetchall()]
 
     async def get_recent(
         self,
@@ -256,43 +244,14 @@ class HistoryStore:
         return await _run_in_sqlite_pool(self._get_recent_sync, isolation_key, limit)
 
     def _get_recent_sync(self, isolation_key: str, limit: int) -> List[Dict[str, Any]]:
-        with self._conn_lock:
-            if self._conn is None:
-                return []
-            cursor = self._conn.execute(
-                "SELECT * FROM memory_history WHERE isolation_key = ? "
-                "ORDER BY created_at DESC LIMIT ?",
-                (isolation_key, limit),
-            )
-            return [dict(row) for row in cursor.fetchall()]
-
-    async def get_recent_for_user(
-        self,
-        user_id: str,
-        limit: int = 50,
-    ) -> List[Dict[str, Any]]:
-        """获取某 user 下所有 agent 的最近操作。
-
-        isolation_key 形如 ``"{user_id}:{agent_id}"``。user_id 里的 LIKE
-        通配符会被转义，保证只匹配这个 user，不会漏到 ``u1`` 之外。
-        """
-        prefix = _escape_like(f"{user_id}:") + "%"
-        return await _run_in_sqlite_pool(
-            self._get_recent_prefix_sync, prefix, limit,
+        if self._conn is None:
+            return []
+        cursor = self._conn.execute(
+            "SELECT * FROM memory_history WHERE isolation_key = ? "
+            "ORDER BY created_at DESC LIMIT ?",
+            (isolation_key, limit),
         )
-
-    def _get_recent_prefix_sync(
-        self, pattern: str, limit: int,
-    ) -> List[Dict[str, Any]]:
-        with self._conn_lock:
-            if self._conn is None:
-                return []
-            cursor = self._conn.execute(
-                "SELECT * FROM memory_history WHERE isolation_key LIKE ? ESCAPE '\\' "
-                "ORDER BY created_at DESC LIMIT ?",
-                (pattern, limit),
-            )
-            return [dict(row) for row in cursor.fetchall()]
+        return [dict(row) for row in cursor.fetchall()]
 
     async def count(self, isolation_key: str = "") -> int:
         """
@@ -307,17 +266,16 @@ class HistoryStore:
         return await _run_in_sqlite_pool(self._count_sync, isolation_key)
 
     def _count_sync(self, isolation_key: str) -> int:
-        with self._conn_lock:
-            if self._conn is None:
-                return 0
-            if isolation_key:
-                cursor = self._conn.execute(
-                    "SELECT COUNT(*) FROM memory_history WHERE isolation_key = ?",
-                    (isolation_key,),
-                )
-            else:
-                cursor = self._conn.execute("SELECT COUNT(*) FROM memory_history")
-            return cursor.fetchone()[0]
+        if self._conn is None:
+            return 0
+        if isolation_key:
+            cursor = self._conn.execute(
+                "SELECT COUNT(*) FROM memory_history WHERE isolation_key = ?",
+                (isolation_key,),
+            )
+        else:
+            cursor = self._conn.execute("SELECT COUNT(*) FROM memory_history")
+        return cursor.fetchone()[0]
 
     async def close(self) -> None:
         """关闭数据库连接"""
@@ -326,10 +284,9 @@ class HistoryStore:
             logger.info("[HistoryStore] closed")
 
     def _close_sync(self) -> None:
-        with self._conn_lock:
-            if self._conn:
-                self._conn.close()
-                self._conn = None
+        if self._conn:
+            self._conn.close()
+            self._conn = None
 
     # ================================================================
     # 内部
@@ -382,34 +339,33 @@ class HistoryStore:
         role: str = "",
         extra: Optional[Dict[str, Any]] = None,
     ) -> int:
-        with self._conn_lock:
-            if self._conn is None:
-                return -1
-            now = _now_iso()
-            extra_json = json.dumps(extra or {}, ensure_ascii=False)
-            cursor = self._conn.execute(
-                """INSERT INTO memory_history
-                   (memory_id, isolation_key, event,
-                    old_memory, new_memory, old_status, new_status,
-                    change_reason, layer, actor_id, role, extra,
-                    created_at, updated_at)
-                   VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)""",
-                (
-                    memory_id,
-                    isolation_key,
-                    event,
-                    old_memory,
-                    new_memory,
-                    old_status,
-                    new_status,
-                    change_reason,
-                    layer,
-                    actor_id,
-                    role,
-                    extra_json,
-                    now,
-                    now,
-                ),
-            )
-            self._conn.commit()
-            return cursor.lastrowid
+        if self._conn is None:
+            return -1
+        now = _now_iso()
+        extra_json = json.dumps(extra or {}, ensure_ascii=False)
+        cursor = self._conn.execute(
+            """INSERT INTO memory_history
+               (memory_id, isolation_key, event,
+                old_memory, new_memory, old_status, new_status,
+                change_reason, layer, actor_id, role, extra,
+                created_at, updated_at)
+               VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)""",
+            (
+                memory_id,
+                isolation_key,
+                event,
+                old_memory,
+                new_memory,
+                old_status,
+                new_status,
+                change_reason,
+                layer,
+                actor_id,
+                role,
+                extra_json,
+                now,
+                now,
+            ),
+        )
+        self._conn.commit()
+        return cursor.lastrowid

hy_memory/data/vector_store_faiss.py

@@ -462,39 +462,14 @@ class FaissVectorStore(VectorStoreBase):
             return None
 
     async def get_embeddings(self, node_ids: List[str]) -> Dict[str, List[float]]:
-        """批量取向量，供去重 / episode 摘要计算 cosine。
-
-        ``_data`` 只保存 payload 与 FAISS 内部下标；普通 upsert 不额外存一份
-        embedding，向量本体在 FAISS index 里。这里按当前有效下标 reconstruct，
-        并用 ``_idx_to_id`` 校验，避免读到已被替换的旧下标。
-        """
-
-        def _get() -> Dict[str, List[float]]:
-            out: Dict[str, List[float]] = {}
-            with self._lock:
-                for nid in node_ids:
-                    point_id = self._node_id_to_point_id(nid)
-                    entry = self._data.get(point_id)
-                    if entry is None:
-                        continue
-                    embedding = entry.get("embedding")
-                    if embedding:
-                        out[nid] = list(embedding)
-                        continue
-                    idx = entry.get("idx")
-                    if (
-                        idx is None
-                        or self._index is None
-                        or self._idx_to_id.get(int(idx)) != point_id
-                    ):
-                        continue
-                    try:
-                        out[nid] = self._index.reconstruct(int(idx)).tolist()
-                    except Exception:
-                        continue
-            return out
-
-        return await _run_in_vdb_pool(_get)
+        """批量取向量（in-memory _data 直接读 embedding），供去重算 cosine。"""
+        out: Dict[str, List[float]] = {}
+        for nid in node_ids:
+            point_id = self._node_id_to_point_id(nid)
+            entry = self._data.get(point_id)
+            if entry and entry.get("embedding"):
+                out[nid] = list(entry["embedding"])
+        return out
 
     # ================================================================
     # 删除

hy_memory/embedding.py

@@ -1,53 +0,0 @@
-"""Public structural contract for injected embedding services."""
-
-from typing import Any, Dict, List, Protocol, Tuple, runtime_checkable
-
-
-@runtime_checkable
-class EmbeddingService(Protocol):
-    """Embedding service accepted by :class:`HyMemoryClient`.
-
-    Implementations are borrowed by the client: their lifecycle remains owned
-    by the caller and ``HyMemoryClient.close()`` will not close them.
-    """
-
-    async def embed(self, text: str, use_cache: bool = True) -> List[float]:
-        ...
-
-    async def embed_with_meta(
-        self, text: str, use_cache: bool = True
-    ) -> Tuple[List[float], Dict[str, Any]]:
-        ...
-
-    async def embed_batch(
-        self, texts: List[str], use_cache: bool = True
-    ) -> List[List[float]]:
-        ...
-
-    async def embed_queued(
-        self, text: str, use_cache: bool = True
-    ) -> List[float]:
-        ...
-
-    async def embed_queued_with_meta(
-        self, text: str, use_cache: bool = True
-    ) -> Tuple[List[float], Dict[str, Any]]:
-        ...
-
-    def get_embedding_dims(self) -> int:
-        ...
-
-
-# Explicit alias for callers that prefer the conventional Protocol suffix.
-EmbeddingServiceProtocol = EmbeddingService
-
-
-class EmbeddingDimensionMismatchError(ValueError):
-    """Raised before initialization when service and store dimensions differ."""
-
-
-__all__ = [
-    "EmbeddingService",
-    "EmbeddingServiceProtocol",
-    "EmbeddingDimensionMismatchError",
-]

hy_memory/pipelines/_retrieval/intention.py

@@ -10,8 +10,8 @@ HY Memory - Intention (L7) 召回 + 惰性过期转换 + 复本判定
     节点的 layer 改写为 l2_fact（持久化 update_payload），并从意图结果里剔除——
     过期意图变成普通历史事实，下次走 normal 召回；
   - **判重（重点）**：对幸存意图按下述规则分组，同组只留一条本次返回：
-        同 user_id + 同 agent_id + 同一天 memory_at + valid_until 相同
-        （都为 None 或都相等）+ cosine 相似度 ≥ MEMORY_DEDUP_THRESHOLD (默认 0.95)
+        同 user_id + 同一天 memory_at + valid_until 相同（都为 None 或都相等）
+        + cosine 相似度 ≥ MEMORY_DEDUP_THRESHOLD (默认 0.95)
     → 视为同一个意图的复本（extractor 复读机 / 多 session 重复表达）。
     保留组里 `gmt_created` 最早的（老的先来先得，稳定 id）；
   - **异步删库**：其余复本 fire-and-forget 从 VDB 删除，不影响本次调用 RT。
@@ -112,19 +112,11 @@ def _partition_duplicates(
     if len(hits) < 2:
         return list(hits), []
 
-    # 1. 按 (user_id, agent_id, memory_at day, valid_until day) 分桶。
-    #    user_id / agent_id 必须进键：多用户检索时不同用户的同一天意图可能
-    #    文本、日期都相同，但它们是两个独立的租户数据；只按日期分桶会把其中
-    #    一个判成复本并硬删除。
-    buckets: Dict[Tuple[Any, Any, Any, Any], List[int]] = {}
+    # 1. 按 (memory_at day, valid_until day) 分桶
+    buckets: Dict[Tuple[Any, Any], List[int]] = {}
     for idx, h in enumerate(hits):
         node = h.get("node")
-        key = (
-            getattr(node, "user_id", None) if node else None,
-            getattr(node, "agent_id", None) if node else None,
-            _memory_at_day(node),
-            _valid_until_key(node),
-        )
+        key = (_memory_at_day(node), _valid_until_key(node))
         buckets.setdefault(key, []).append(idx)
 
     def _gmt(h: Dict[str, Any]) -> float:
@@ -237,8 +229,6 @@ async def recall_intentions(
     *,
     user_ids: Optional[List[str]] = None,
     agent_ids: Optional[List[str]] = None,
-    isolation_key: str = "",
-    isolation_keys: Optional[List[str]] = None,
     limit: int = 10,
     now: Optional[datetime] = None,
     stats_out: Optional[Dict[str, Any]] = None,
@@ -253,9 +243,6 @@ async def recall_intentions(
         query_embedding: 查询向量
         user_ids: 用户隔离（单/多用户）
         agent_ids: 可选 agent 过滤
-        isolation_key / isolation_keys: 精确的 (user, agent, session) 隔离键。
-            与其它召回通道一致：调用方在按 session 过滤时只生成这两项，
-            user_ids / agent_ids 为 None；不把它们透传下去就会退化成全库检索。
         limit: 召回上限（返回给上游的条数）
         now: 当前时间（默认 datetime.now()，测试可注入）
         stats_out: 可选 dict，本函数把分段耗时与数量**原地回填**进去，供调用方落
@@ -296,8 +283,6 @@ async def recall_intentions(
             query_embedding=query_embedding,
             user_ids=user_ids or None,
             agent_ids=agent_ids,
-            isolation_key=isolation_key,
-            isolation_keys=isolation_keys,
             layers=[MemoryLayer.L7_INTENTION],
             limit=fetch_limit,
             score_threshold=0.0,  # intention 不设语义门槛

hy_memory/pipelines/reader_base.py

@@ -1840,8 +1840,6 @@ class BaseReadPipeline(ReadPipeline):
                     query_embedding,
                     user_ids=isolation_params.get("user_ids"),
                     agent_ids=isolation_params.get("agent_ids"),
-                    isolation_key=isolation_params.get("isolation_key") or "",
-                    isolation_keys=isolation_params.get("isolation_keys"),
                     limit=request.intention_limit,
                     stats_out=_intent_stats,
                     include_sources=request.include_sources,

hy_memory/pipelines/registry.py

@@ -19,7 +19,6 @@ import logging
 from .base import WritePipeline, ReadPipeline
 from ..config import MemoryConfig
 from ..core.embed_service import EmbedService
-from ..embedding import EmbeddingService
 from ..data.vector_store import create_vector_store
 from ..data.vector_store_base import VectorStoreBase
 
@@ -51,12 +50,7 @@ class ComponentFactory:
         s2 = await factory.get_system2_writer()    # System2Writer (ultra mode)
     """
 
-    def __init__(
-        self,
-        config: Optional[MemoryConfig] = None,
-        *,
-        embedding_service: Optional[EmbeddingService] = None,
-    ):
+    def __init__(self, config: Optional[MemoryConfig] = None):
         self.config = config or MemoryConfig.from_env()
 
         # 实例缓存（单例）
@@ -68,7 +62,7 @@ class ComponentFactory:
         self._readers: Dict[str, ReadPipeline] = {}
 
         # 共享资源
-        self._shared_embed_service: Optional[EmbeddingService] = embedding_service
+        self._shared_embed_service: Optional[EmbedService] = None
         self._shared_vector_store: Optional[VectorStoreBase] = None
         self._shared_vector_store_initialized: bool = False
         self._shared_graph_store = None
@@ -78,7 +72,7 @@ class ComponentFactory:
     # 共享资源
     # ================================================================
 
-    def _get_shared_embed_service(self) -> EmbeddingService:
+    def _get_shared_embed_service(self) -> EmbedService:
         if self._shared_embed_service is None:
             self._shared_embed_service = EmbedService(self.config)
         return self._shared_embed_service

hy_memory/pipelines/writer.py

@@ -968,7 +968,7 @@ class MemoryWriter(WritePipeline):
             async def _run():
                 try:
                     nid = await summarize_closed_episode(
-                        vector_store=await self._get_vector_store(),
+                        vector_store=self.vector_store,
                         embed_service=self.embed_service,
                         llm_provider=self.llm_provider,
                         episode_id=episode_id,

hy_memory/retrieval.py

@@ -1,23 +0,0 @@
-"""Public types and errors for exact memory-ID lookup."""
-
-from typing import Literal, Sequence
-
-
-MemoryKind = Literal["chat", "experience", "fact"]
-MemoryVariant = Literal["working", "coding"]
-
-
-class AmbiguousMemoryIdError(LookupError):
-    """An ID exists in more than one public memory namespace."""
-
-    def __init__(self, memory_id: str, namespaces: Sequence[str]):
-        self.memory_id = memory_id
-        self.namespaces = tuple(namespaces)
-        joined = ", ".join(self.namespaces)
-        super().__init__(
-            f"memory ID {memory_id!r} is ambiguous across namespaces: {joined}; "
-            "pass kind and/or variant to disambiguate"
-        )
-
-
-__all__ = ["MemoryKind", "MemoryVariant", "AmbiguousMemoryIdError"]

hy_memory/server.py

@@ -29,7 +29,7 @@ import logging
 import os
 import re
 import signal
-import threading
+import sys
 from datetime import datetime
 from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
 from typing import Any, Dict, Optional
@@ -495,16 +495,6 @@ class MemoryHTTPHandler(BaseHTTPRequestHandler):
         _json_response(self, 200, result)
 
 
-def _request_shutdown(server: ThreadingHTTPServer) -> None:
-    """Ask ``serve_forever`` to stop without blocking the calling thread.
-
-    ``BaseServer.shutdown()`` waits for the ``serve_forever`` loop to exit. A
-    signal handler runs on the very thread executing that loop, so calling it
-    there deadlocks forever. Hand the call to a helper thread instead.
-    """
-    threading.Thread(target=server.shutdown, daemon=True).start()
-
-
 def run_server(port: int = 19527, host: str = "127.0.0.1"):
     """Start the HTTP server (blocking)."""
     # Configure logging — basicConfig for root; hy_memory level set after client init
@@ -533,12 +523,13 @@ def run_server(port: int = 19527, host: str = "127.0.0.1"):
     logger.info(f"[server] Listening on http://{host}:{port}")
     logger.info(f"[server] Health check: http://{host}:{port}/healthz")
 
-    # Graceful shutdown. The signal handler only asks a helper thread to stop
-    # the loop; cleanup runs after serve_forever() returns so it cannot race
-    # the request threads or deadlock the serving thread.
+    # Graceful shutdown
     def _shutdown(signum, frame):
         logger.info("[server] Shutting down...")
-        _request_shutdown(server)
+        server.shutdown()
+        if _client is not None:
+            _client.close()
+        sys.exit(0)
 
     signal.signal(signal.SIGINT, _shutdown)
     signal.signal(signal.SIGTERM, _shutdown)
@@ -547,10 +538,6 @@ def run_server(port: int = 19527, host: str = "127.0.0.1"):
         server.serve_forever()
     except KeyboardInterrupt:
         _shutdown(None, None)
-    finally:
-        server.server_close()
-        if _client is not None:
-            _client.close()
 
 
 def main():

hy_memory/snapshot.py

@@ -1,150 +0,0 @@
-"""Public, offline snapshot support for the SDK-owned local data plane."""
-
-from __future__ import annotations
-
-import hashlib
-import os
-import shutil
-from dataclasses import dataclass
-from pathlib import Path
-
-
-class DataPlaneSnapshotRejected(RuntimeError):
-    def __init__(self, code: str) -> None:
-        super().__init__(code)
-        self.code = code
-
-
-@dataclass(frozen=True)
-class DataPlaneSnapshot:
-    source_root: Path
-    snapshot_root: Path
-    files: tuple[dict[str, object], ...]
-    total_bytes: int
-
-
-@dataclass(frozen=True)
-class DataPlaneRestore:
-    restored_root: Path
-    previous_root: Path | None
-    files_restored: int
-    total_bytes: int
-
-
-def _sha256(path: Path) -> str:
-    digest = hashlib.sha256()
-    with path.open("rb") as handle:
-        for chunk in iter(lambda: handle.read(1024 * 1024), b""):
-            digest.update(chunk)
-    return digest.hexdigest()
-
-
-def snapshot_local_data_plane(
-    *,
-    source_root: Path,
-    target_root: Path,
-    writers_stopped: bool,
-) -> DataPlaneSnapshot:
-    """Copy one quiesced local SDK root and return a verified inventory.
-
-    Remote providers require their own export implementation and must not call
-    this local-path contract.
-    """
-    if not writers_stopped:
-        raise DataPlaneSnapshotRejected("data_plane_snapshot_writers_running")
-    source = source_root.resolve()
-    target = target_root.resolve()
-    if source.is_symlink() or not source.is_dir():
-        raise DataPlaneSnapshotRejected("data_plane_snapshot_source_invalid")
-    if target.exists():
-        raise DataPlaneSnapshotRejected("data_plane_snapshot_target_exists")
-
-    try:
-        target.mkdir(parents=True)
-        for root, directories, files in os.walk(source, followlinks=False):
-            root_path = Path(root)
-            relative = root_path.relative_to(source)
-            target_directory = target / relative
-            target_directory.mkdir(parents=True, exist_ok=True)
-            for name in directories:
-                if (root_path / name).is_symlink():
-                    raise DataPlaneSnapshotRejected("data_plane_snapshot_symlink")
-            for name in files:
-                item = root_path / name
-                if item.is_symlink():
-                    raise DataPlaneSnapshotRejected("data_plane_snapshot_symlink")
-                shutil.copy2(item, target_directory / name)
-
-        inventory: list[dict[str, object]] = []
-        for path in sorted(item for item in target.rglob("*") if item.is_file()):
-            inventory.append(
-                {
-                    "path": path.relative_to(target).as_posix(),
-                    "bytes": path.stat().st_size,
-                    "sha256": _sha256(path),
-                }
-            )
-        for item in inventory:
-            copied = target / str(item["path"])
-            if copied.stat().st_size != item["bytes"] or _sha256(copied) != item["sha256"]:
-                raise DataPlaneSnapshotRejected("data_plane_snapshot_verify_failed")
-    except DataPlaneSnapshotRejected:
-        shutil.rmtree(target, ignore_errors=True)
-        raise
-    except OSError as error:
-        shutil.rmtree(target, ignore_errors=True)
-        raise DataPlaneSnapshotRejected("data_plane_snapshot_failed") from error
-
-    return DataPlaneSnapshot(
-        source_root=source,
-        snapshot_root=target,
-        files=tuple(inventory),
-        total_bytes=sum(int(item["bytes"]) for item in inventory),
-    )
-
-
-def restore_local_data_plane(
-    *,
-    snapshot_root: Path,
-    target_root: Path,
-    writers_stopped: bool,
-    protective_root: Path | None = None,
-) -> DataPlaneRestore:
-    """Replace one local SDK root from a verified snapshot with rollback."""
-    if not writers_stopped:
-        raise DataPlaneSnapshotRejected("data_plane_restore_writers_running")
-    source = snapshot_root.resolve()
-    target = target_root.resolve()
-    protective = (
-        protective_root.resolve()
-        if protective_root is not None
-        else target.parent / f".{target.name}.pre-restore"
-    )
-    staging = target.parent / f".{target.name}.restore.tmp"
-    if target.is_symlink() or protective.exists() or staging.exists():
-        raise DataPlaneSnapshotRejected("data_plane_restore_target_unsafe")
-
-    copied = snapshot_local_data_plane(
-        source_root=source,
-        target_root=staging,
-        writers_stopped=True,
-    )
-    previous: Path | None = None
-    try:
-        if target.exists():
-            target.replace(protective)
-            previous = protective
-        staging.replace(target)
-    except OSError as error:
-        if previous is not None and previous.exists() and not target.exists():
-            previous.replace(target)
-            previous = None
-        shutil.rmtree(staging, ignore_errors=True)
-        raise DataPlaneSnapshotRejected("data_plane_restore_replace_failed") from error
-
-    return DataPlaneRestore(
-        restored_root=target,
-        previous_root=previous,
-        files_restored=len(copied.files),
-        total_bytes=copied.total_bytes,
-    )

hy_memory/utils/lang_detect.py

@@ -8,7 +8,6 @@ Uses a two-tier strategy:
 This avoids langdetect's known weakness with short Chinese text.
 """
 
-import json
 import logging
 import re
 from typing import List, Optional
@@ -136,30 +135,6 @@ def detect_language(text: str) -> str:
     return "zh" if ratio > 0.1 else "en"
 
 
-def _spoken_text(value: str) -> str:
-    """Ignore text-block metadata when a message content is structured JSON."""
-    text = value.strip()
-    if text.startswith("["):
-        try:
-            blocks = json.loads(text)
-        except (ValueError, TypeError):
-            pass
-        else:
-            if (
-                isinstance(blocks, list)
-                and blocks
-                and all(
-                    isinstance(block, dict)
-                    and isinstance(block.get("type"), str)
-                    and block["type"] in {"text", "input_text", "output_text"}
-                    and isinstance(block.get("text"), str)
-                    for block in blocks
-                )
-            ):
-                return "\n".join(block["text"] for block in blocks)
-    return text
-
-
 def extract_content_for_detection(
     content: str = "",
     messages: Optional[List] = None,
@@ -178,57 +153,20 @@ def extract_content_for_detection(
         Concatenated content text suitable for language detection.
     """
     if content and content.strip():
-        value = content.strip()
-        # Writer serializes message batches to JSON before calling Extractor.
-        # Detect the spoken text, not the leading ASCII keys (role/content),
-        # without changing the raw evidence sent to the model.
-        if value.startswith("["):
-            try:
-                decoded = json.loads(value)
-            except (ValueError, TypeError):
-                pass
-            else:
-                if (
-                    isinstance(decoded, list)
-                    and decoded
-                    and all(
-                        isinstance(item, dict)
-                        and isinstance(item.get("role"), str)
-                        and isinstance(item.get("content"), str)
-                        for item in decoded
-                    )
-                ):
-                    # In a mixed batch, the latest user turn is the clearest
-                    # instruction for the language; assistant/tool metadata
-                    # must not decide it first.
-                    user_text = [
-                        _spoken_text(item["content"])
-                        for item in decoded
-                        if item["role"] == "user" and item["content"].strip()
-                    ]
-                    if user_text:
-                        return user_text[-1]
-                    spoken = "\n".join(_spoken_text(item["content"]) for item in decoded)
-                    if spoken.strip():
-                        return spoken
-        return _spoken_text(value)
+        return content.strip()
 
     if messages:
         parts = []
-        user_parts = []
         for msg in messages:
             if isinstance(msg, dict):
-                c, role = msg.get("content", ""), msg.get("role")
+                c = msg.get("content", "")
             elif hasattr(msg, "content"):
-                c, role = msg.content, getattr(msg, "role", None)
+                c = msg.content
             else:
                 continue
-            if isinstance(c, str) and c.strip():
-                text = _spoken_text(c)
-                parts.append(text)
-                if role == "user":
-                    user_parts.append(text)
-        return user_parts[-1] if user_parts else "\n".join(parts)
+            if c and c.strip():
+                parts.append(c.strip())
+        return "\n".join(parts)
 
     return ""
 

hy_memory/utils/model_call_context.py

@@ -1,24 +0,0 @@
-"""Context propagated to host-provided HTTP transports for cost accounting."""
-
-from collections.abc import Iterator
-from contextlib import contextmanager
-from contextvars import ContextVar, Token
-
-_model_call_stage: ContextVar[str] = ContextVar(
-    "hy_memory_model_call_stage",
-    default="other",
-)
-
-
-def current_model_call_stage() -> str:
-    return _model_call_stage.get()
-
-
-@contextmanager
-def model_call_stage(stage: str | None) -> Iterator[None]:
-    normalized = (stage or "other").strip().lower() or "other"
-    token: Token[str] = _model_call_stage.set(normalized)
-    try:
-        yield
-    finally:
-        _model_call_stage.reset(token)

hy_memory/utils/pipeline_log_writer.py

@@ -18,32 +18,12 @@ from __future__ import annotations
 
 import json
 import logging
-import re
 from datetime import datetime
 from pathlib import Path
 from typing import Any, List, Optional
 
 logger = logging.getLogger(__name__)
 
-#: A namespace is a single path component, not a path. `\w` keeps Unicode
-#: names working while excluding separators, drive letters and NUL.
-_SAFE_SUBDIR = re.compile(r"[\w.-]{1,64}", re.UNICODE)
-
-
-def _safe_subdir(value: str) -> Optional[str]:
-    """Return ``value`` if it is safe as one directory name, else ``None``.
-
-    ``user_id`` is caller-controlled. Without this check a value such as
-    ``"/tmp/evil__u1"`` makes ``Path(base) / "/tmp/evil"`` discard ``base``
-    entirely; ``"../.."`` escapes it the same way.
-    """
-    candidate = (value or "").strip()
-    if not candidate or candidate in {".", ".."}:
-        return None
-    if not _SAFE_SUBDIR.fullmatch(candidate):
-        return None
-    return candidate
-
 # 兼容旧 import
 TraceFileWriter = None  # set after class definition
 
@@ -60,7 +40,7 @@ class PipelineLogWriter:
 
     def __init__(self, log_dir: str, default_subdir: str = "default"):
         self._log_dir = log_dir
-        self._default_subdir = _safe_subdir(default_subdir) or "default"
+        self._default_subdir = default_subdir or "default"
         try:
             (Path(self._log_dir) / self._default_subdir).mkdir(parents=True, exist_ok=True)
         except Exception:
@@ -69,7 +49,7 @@ class PipelineLogWriter:
     def _resolve_subdir(self, user_id: str) -> str:
         """从 user_id 的 "{prefix}__{user_id}" 前缀取 prefix 作为子目录；无前缀则回落。"""
         if user_id and "__" in user_id:
-            prefix = _safe_subdir(user_id.split("__", 1)[0])
+            prefix = user_id.split("__", 1)[0].strip()
             if prefix:
                 return prefix
         return self._default_subdir
@@ -100,11 +80,7 @@ class PipelineLogWriter:
                 split_namespace_user,
             )
 
-            # Providers define total_tokens as prompt+completion. Adding all
-            # three fields doubled every cost estimate in this JSONL.
-            tokens = (total_tokens or 0) or (
-                (prompt_tokens or 0) + (completion_tokens or 0)
-            )
+            tokens = (prompt_tokens or 0) + (completion_tokens or 0) + (total_tokens or 0)
             namespace, uid = split_namespace_user(user_id or "")
             if not is_llm_content_logging_enabled():
                 prompt = redact_content(prompt)
@@ -135,14 +111,7 @@ class PipelineLogWriter:
             line = json.dumps(record, ensure_ascii=False, default=str)
             date_str = datetime.now().strftime("%Y-%m-%d")
             subdir = self._resolve_subdir(user_id)
-            base_dir = Path(self._log_dir).resolve()
-            log_dir = (base_dir / subdir).resolve()
-            # Defence in depth: even if a future change lets a suspicious
-            # component through, never write outside the configured root.
-            try:
-                log_dir.relative_to(base_dir)
-            except ValueError:
-                log_dir = base_dir / self._default_subdir
+            log_dir = Path(self._log_dir) / subdir
             log_dir.mkdir(parents=True, exist_ok=True)
             log_file = log_dir / f"{date_str}.log"
             with open(log_file, "a", encoding="utf-8") as f:

memhub/CONTRIBUTING.md

@@ -1,6 +1,6 @@
 # Contributing
 
-感谢你参与 MemHub。
+感谢你参与 One Memory。
 
 ## 开发环境
 
@@ -27,10 +27,3 @@ pnpm check
 
 涉及外部源码时，必须记录项目、固定版本或 commit、许可证、采用文件和修改说明。不得提交
 密钥、内部地址、真实对话、个人路径、模型权重或签名证书。
-
-## 界面翻译
-
-新增或修改界面语言时遵循
-[`docs/LOCALIZATION.md`](docs/LOCALIZATION.md)：使用稳定语义 key，保持所有
-locale 的 key 与占位符一致，不翻译用户内容、路径、标识符或外部错误正文。语言
-catalog 与无关产品行为应拆成不同 PR。

memhub/MEMORY.md

@@ -1,71 +1,63 @@
 # Hy Memory 使用与配置
 
-更新：2026-10-21
+更新：2026-10-12
 
-架构边界以 [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md) 为准。
+本文说明 MemHub 当前使用的 Hy Memory SDK、配置边界，以及直接使用 SDK 时如何
+write、search，并把搜索结果格式化为可交给模型的 memory text chunk。
 
----
-
-## Architecture Principles
-
-1. Memory 读写与存储 backend **只经 SDK**（config / env）。
-2. MemHub 运行时对 memory 的原子操作 **只经 SDK 公共 Client**；缺正常业务
-   接口先补 SDK。Runtime writers 停止后的 App 启动迁移可直接操作底层存储，
-   但不得把迁移专用方法加入公共 Client。
-3. MemHub **不存 memory 实体**；**可以存 `memory_id`** 做组织/回执。原文进入 **SDK raw**。
-4. SDK raw 只保留滚动三天；一条 raw 对应一个完整 turn，只含真人 user 与
-   assistant，tool 不持久化。提取后的高层 memory 不受该窗口影响。
-
-生产入口通过共享 Runtime 租约取得公开 `HyMemoryClient`；MemHub 只在调用前执行
-模型配置、密钥和 harness/model 门禁，不维护第二套 memory 正文权威。
-
-来源授权、模型授权和宿主召回授权仍是 MemHub 管理面门禁；memory
-数据平面的权威在 SDK。
+仓库内仍以 One Memory 命名的 Evidence、权限和 Governance 层属于 MemHub 的历史兼容
+模块；产品代码不应绕过这些层直接调用 SDK。本文中的
+原生 SDK 示例主要用于开发、调试和独立验证。
 
 ## 当前版本状态
 
-当前源码固定使用（以仓库 pin / lockfile 为准）：
+当前源码固定使用：
 
 ```text
 distribution: hy-memory
-version:      见 pyproject / lock（文档数字可能滞后）
+version:      2.0.1
 mode:         按运行时配置选择
 reader:       hybrid
 ```
 
+仓库 pin、lockfile 和运行时版本守卫均固定到公开的 `hy-memory==2.0.1`。
+MemHub 在本地 Runtime 内嵌入 SDK，但不绕过自身的来源授权、模型授权、Evidence、
+Governance 和撤权边界。
+
 ## MemHub 运行时边界
 
-MemHub 通过公开 `HyMemoryClient` 配置使用可复现的本地策略：
+MemHub 对 SDK 使用以下公开、可复现的本地策略：
 
-- vector / graph / cache / history / coding 等 **一律 SDK config/env**；
-- 模型与 embedding 来自版本化 Model Profile；密钥进安全存储；
-- MemHub 管理库可存 harness/model/队列状态与 **`memory_id` 引用**。
+- vector store 使用受管数据目录中的 Chroma；
+- graph store 使用受管数据目录中的 Kuzu；
+- cache 与 history 使用 SQLite；
+- reader 使用 `hybrid`；
+- reranker 默认关闭，不引入 Torch、Transformers 或额外模型；
+- 模型与远程 embedding 参数来自版本化 Model Profile；
+- API Key 进入系统安全存储，不写入仓库、安装包、日志或 HY metadata；
+- 服务端数据库、租户队列及宿主 shell 中的 ambient 凭据不会进入 SDK config。
 
-MemHub 不再通过 import-time 环境变量覆盖 SDK 的提取、reconcile、episode、
-intention、few-shot、summary 或去重策略。产品只配置模型/密钥/endpoint、本地
-backend 路径、公开 embedding service，以及每次公开 Client 调用的参数。
-
-独立脚本直连 SDK 时须自配存储目录与模型端点。
+这些默认值集中在
+`apps/core/src/one_memory/hy_runtime_config.py`，并由发布测试和 lockfile 共同约束。
+独立脚本若绕过 MemHub 直接导入 SDK，应自行显式配置存储目录和模型端点。
 
 ## 原生 SDK 初始化
 
-下面是独立调试示例。
-
-产品代码经 `hy_sdk_runtime.SdkClientHandle` 获取已配置的公开 client；memory I/O
-由 SDK 完成。
+下面是独立调试示例。产品代码应使用 One Memory 的 `HyMemoryBridge`，因为它额外提供来源
+授权、模型授权、Evidence 绑定、写后核验、Governance 和撤权保护。
 
 ```python
 from hy_memory import HyMemoryClient, MemoryConfig
 
 config = MemoryConfig.from_env()
 
-# 本地优先示例；实际目录应由调用方传入。
+# 本地优先示例；实际目录应由调用方传入，不能依赖 ~/.hy_memory 默认值。
 config.vector_store.provider = "chroma"
-config.vector_store.persist_directory = "/path/to/one-memory/hy-memory/vector"
+config.vector_store.persist_directory = "/path/to/one-memory/hy-memory/governed-v2/vector"
 config.graph_store.provider = "kuzu"
-config.graph_store.db_path = "/path/to/one-memory/hy-memory/graph"
+config.graph_store.db_path = "/path/to/one-memory/hy-memory/governed-v2/graph"
 config.cache.backend = "sqlite"
-config.cache.db_path = "/path/to/one-memory/hy-memory/cache.sqlite3"
+config.cache.db_path = "/path/to/one-memory/hy-memory/governed-v2/cache.sqlite3"
 
 config.llm.provider = "openai"
 config.llm.model = "your-model"
@@ -81,11 +73,12 @@ config.embedder.embedding_dims = 1024
 client = HyMemoryClient(config=config, mode="ultra")
 ```
 
-`embedding_dims` 必须与模型输出及已有向量/图存储一致。
+`embedding_dims` 必须与模型实际输出宽度以及已有向量/图存储一致。更换 embedding 模型、
+端点或维度不能直接复用旧 collection；One Memory 会检测图宽度不一致并拒绝静默重建。
 
 ## Write：写入对话
 
-推荐把一段连续对话作为 OpenAI messages 写入；含原文时由 SDK 接管 raw：
+推荐把一段连续对话作为 OpenAI messages 写入：
 
 ```python
 from datetime import UTC, datetime
@@ -104,54 +97,47 @@ result = client.add(
     request_id=str(uuid4()),
     metadata={
         "source_id": "cursor",
+        "evidence_ids": ["evidence-001", "evidence-002"],
         "workspace_ids": ["workspace-abc"],
         "input_kind": "raw_conversation",
     },
 )
 ```
 
+参数规则：
+
 | 参数 | 填法 | 约束 |
 | --- | --- | --- |
-| `data` | 字符串或 `[{role, content}]` | 对话优先 messages；不混入密钥与隐藏系统提示 |
-| `user_id` / `agent_id` / `session_id` | 隔离与会话键 | 产品侧授权决定合法 scope |
-| `memory_at` | 有时区 datetime | 历史导入用原始发生时间 |
-| `scene` | `chat` / `working` | 明确传入 |
-| `request_id` | 每次写入唯一 | 幂等与追踪 |
-| `metadata` / `meta` | 来源与透传 | 不放秘密 |
+| `data` | 字符串或 `[{role, content}]` | 对话优先用 messages；不混入 tool 参数、reasoning、密钥和隐藏系统提示 |
+| `user_id` | 稳定用户 ID | 一级隔离键；不能为空 |
+| `agent_id` | 记忆 scope | One Memory 中不是宿主 App 名的简单替代；跨 App scope 由授权和路由决定 |
+| `session_id` | 稳定会话 ID | 同一会话增量写入时保持一致 |
+| `memory_at` | 有时区的 `datetime` | 历史导入必须传原始发生时间，不能用导入时间替代 |
+| `scene` | `"chat"` 或 `"working"` | 普通对话明确传 `chat`；代码/tool 会话才用 `working` |
+| `request_id` | 每次写入唯一 ID | 用于幂等、追踪和写后核验 |
+| `metadata` | 来源和 Evidence 引用 | 不放秘密；One Memory 至少保存 source/evidence/workspace/input kind |
+| `meta` | 业务透传数据 | 不参与 embedding 和过滤；只放可安全返回的数据 |
+| `embed_override` | 临时 embedding 端点 | 只能换 endpoint/key/header/timeout；模型和维度不能改变 |
 
-MemHub Runtime 对应用和 CLI 暴露等价的本机 HTTP 合同：
-
-```text
-POST /api/v2/memory-writes
-GET  /api/v2/user-profile
-
-memhub write submit --messages-file messages.json --session <id>
-memhub profile
-```
-
-`messages.json` 是 OpenAI 文本 messages 数组，当前接受 `user`、
-`assistant`、`tool`；系统/开发者隐藏提示不得作为记忆输入。Core 将输入冻结进
-`memory_write_jobs`，worker 对 SDK 执行一次 `add()`，成功后清除队列正文。
-`user-profile` / `memhub profile` 调用 SDK `get_user_profile()`，返回组装后的
-用户长期画像，不通过普通 Search 拼装。
-
-返回值：
+返回值至少检查：
 
 ```python
 if result.get("success") is not True:
     raise RuntimeError("HY write failed")
 
-memory_ids = list(result.get("memory_ids") or [])
+memory_ids = result.get("memory_ids") or []
 if result.get("memory_id"):
     memory_ids.append(result["memory_id"])
-# 需要组织或回执时，MemHub 只持久化这些 memory_id。
 ```
 
-以 SDK 合同为准做成功判定；需要写后核验时使用 SDK `get` 回读。缺少所需
-核验能力时扩展 SDK API，不在 MemHub 新建镜像台账。
+不要只相信 `success=True`。One Memory 还会按返回 ID `get()` 回读、核对 request/source/
+Evidence 支持关系，并在 Governance 层记录版本。生产路径不能用直接 `client.add()` 代替这些
+检查。
 
 ### 写入已抽取的记忆
 
+只有输入本身就是已有记忆内容、且原始对话不可用时才使用：
+
 ```python
 result = client.add_extracted(
     ["用户长期偏好简洁、直接的回答。"],
@@ -162,16 +148,18 @@ result = client.add_extracted(
     request_id=str(uuid4()),
     metadata={
         "source_id": "memory-export",
+        "evidence_ids": ["evidence-003"],
         "input_kind": "memory_content_without_raw",
     },
 )
 ```
 
-该入口仍走 SDK reconcile/持久化；MemHub 只做管理面门禁与可选
-`memory_id` 记录。
+它跳过 Extractor，但不能跳过 HY reconcile、持久化、One Memory Evidence 绑定和 Governance。
 
 ## Search：搜索记忆
 
+普通 chat 搜索：
+
 ```python
 result = client.search(
     "用户偏好怎样的回答风格？",
@@ -188,47 +176,114 @@ result = client.search(
 )
 ```
 
-参数表与返回结构同前（chat 三 channel / working 的 facts·experiences）；调用方按 `scene` 解析，无法识别则报错。
+参数规则：
+
+| 参数 | 填法 | 说明 |
+| --- | --- | --- |
+| `query` | 当前问题 | 与 `queries` 二选一 |
+| `queries` | 多轮查询文本 | 最后一条是目标；只有需要 SDK 判断上下文时使用 |
+| `user_ids` | 获授权用户列表 | 必填且不能空；不要用空列表扩大范围 |
+| `agent_ids` | 获授权 scope 列表 | 空列表在 SDK 中表示所有 agent，产品代码必须先完成授权判断 |
+| `session_ids` | 可选会话范围 | 多 agent 与多 session 不能同时使用 |
+| `limit` | normal top-k | 默认 10；注入模型前还要受字符预算限制 |
+| `min_score` | normal 阈值 | One Memory 当前内部语义检索使用 0.25 |
+| `profile_min_score` | profile 阈值 | One Memory 当前使用 0.25 |
+| `profile_limit` | profile 数量 | 通常与 limit 一致 |
+| `intention_limit` | intention 数量 | 当前配置关闭 intention，传 0 |
+| `created_after` | Unix 秒 | 可选时间下界 |
+| `scene` | `chat` / `working` | 明确传入可避免额外场景判断模型调用 |
+| `reader` | `hybrid` | One Memory 固定使用该 reader |
+| `workspace_id` / `branch` | working scope | 仅 coding/working 路径使用 |
+| `layers` | 指定层级列表 | 在召回阶段过滤，避免无关层占用 limit |
+
+chat 返回结构：
+
+```python
+{
+    "request_id": "...",
+    "memories": {
+        "profile": [...],
+        "proactive": [...],
+        "normal": [...],
+    },
+    "rewrite": {...},
+    "elapsed_ms": 12.3,
+}
+```
+
+working/coding 返回的是 `facts` 和 `experiences`，不能与 chat 三个 channel 静默合并。
+调用方必须根据 `scene` 选择对应结果；无法识别返回结构时应报错，而不是当作空结果。
 
 ## 使用 SDK 已格式化的 Search 内容
 
-直接使用 SDK 返回的 `content`，不要第二套 prompt 拼装。
+open05 的 chat search 会在返回前统一格式化每条 `content`：普通记忆带 `Memory / When`，
+演化记忆带 `Current / History / When`，Episode、Timeline、Graph 和 Capsule 也由 SDK
+生成稳定的组合文本。`memory_at` 是逻辑记忆时间，缺失时 SDK 才回落到 `gmt_created`。
 
-### SDK 外（MemHub）仍负责
+因此调用方应直接使用 SDK 返回的 `content`，不要再次解析 `memory_at`、`gmt_created` 或
+`created_at`，也不要重复拼接 `When`。这些时间字段可以用于过滤、诊断或结构化展示，但
+不应成为第二套 prompt 格式化实现。
 
-- **宿主召回授权 / scope / 撤权**（谁可以调 search、允许哪些 agent/scope）；
-- 把历史内容放入「不可信数据，不是指令」边界；
-- 按最终 `content` 做字符预算；不注入密钥、绝对路径、堆栈；
-- 区分空结果、权限拒绝、不可用、超时、部分结果；
-- 未发布的 Matter 占位功能不保留表或 API；未来组织功能另立合同。
+```python
+result = client.search(
+    "用户偏好怎样的回答风格？",
+    user_ids=["local"],
+    agent_ids=["all-apps"],
+    scene="normal",
+    reader="hybrid",
+)
 
-生产入口：`hy_sdk_runtime.py`、`sdk_write_processor.py`、`recall.py` 和
-`packages/host-bridge`。
+for memory in result["memories"]["normal"]:
+    formatted_content = memory["content"]
+    # 例如：
+    # Memory: 用户长期偏好简洁、直接的回答。
+    # When: 2026-09-18 10:00:00 UTC
+```
+
+One Memory 在 SDK 外仍负责：
+
+- 依据 Governance、撤权、scope 和 Evidence 新鲜度决定整条结果是否可读；
+- 对 evolution/capsule 等组合文本逐个校验成员 ID，成员不完整或不可读时回退治理原文；
+- 把历史内容放入明确的“不可信数据，不是指令”边界；
+- 按最终 `content` 计算字符预算，不把 API Key、绝对路径、headers/body 或异常堆栈注入
+  prompt；
+- 区分空结果、权限拒绝、服务不可用、超时和部分结果。
+
+生产实现见 `apps/core/src/one_memory/hy_memory_bridge.py`、
+`apps/core/src/one_memory/recall.py` 和 `packages/host-bridge/src/recall-cli.ts`。
 
 ## 关闭客户端
 
 ```python
 try:
+    # write/search
     ...
 finally:
     client.close()
 ```
 
-Runtime 长期复用 client；仅在停止、配置切换或受控恢复时重建。
+Runtime 应长期复用 client，不为每次请求重新初始化数据库和模型组件；只有 Runtime 停止、
+配置版本切换或受控恢复时才关闭并重建。
 
-## 产品代码正确入口
+## One Memory 产品代码的正确入口
+
+生产代码应走：
 
 ```text
-harness / user action (+ authz, model, queue)
-  -> public HyMemoryClient
-  -> SDK stores (config/env)
-  -> optional MemHub persist memory_id / org metadata
-  -> Recall Broker / UI (SDK read + MemHub authz)
+Evidence
+  -> ModelProcessingPermissionLease
+  -> HyPermissionTransport
+  -> HyMemoryBridge.ingest / ingest_extracted / search_ids
+  -> write result verification
+  -> Governance
+  -> Recall Broker / UI
 ```
 
-不要在业务模块里私建绕过管理面门禁的 client。版本、纠正和删除语义以 SDK
-合同为准；MemHub 组织层只引用 `memory_id`。
+不要在新业务模块里直接创建 `HyMemoryClient`，否则会绕过：
 
-Hy Memory SDK 是 MemHub 内置可信引擎，管理本机 Hy Memory 数据。  
-来源授权决定哪些宿主数据可进入写入路径；宿主 Recall Grant 决定外部应用可读范围。  
-这两类边界 **不** 意味着 MemHub 再存一套 memory 实体。
+- 来源读取授权；
+- 模型内容处理授权；
+- 发送前与响应后的撤权复核；
+- Evidence 引用与作者归属；
+- 写后回读验证；
+- Governance 状态、版本、更正和删除级联。

memhub/README.md

@@ -1,30 +1,18 @@
-# MemHub
+# MemHub / One Memory
 
-MemHub是一个本地优先的共享记忆产品。它把用户明确授权的AI对话和编码记录汇总到一份本地记忆中，再由用户分别授权给支持的AI工具调用。你可以继续使用熟悉的客户端，同时保留跨工具延续的上下文。Hy Memory是MemHub使用的Python SDK和记忆引擎。
-
-# 💡❤️ MemHub 刚刚开源，欢迎一起优化共建！ ❤️💡 
-
-**# 💭 MemHub处于preview阶段，当前公开版本可以下载和体验，部分平台制品、安装路径与宿主体验仍在持续优化验证。安装前请先查看Release里的实际制品和版本说明。**
-
-> 🙋 如果你遇到问题/有建议：欢迎提交Issue，并附上MemHub版本、操作系统与芯片架构、复现步骤、预期结果、实际结果和经过脱敏的日志。请不要上传APIKey、真实对话、个人路径或其他敏感信息。
-
-> 我们会公开跟进可复现的问题，持续发布修复，并根据真实反馈完善安装、同步和召回体验。
-
-**# 感谢每一条反馈，期待你和我们一起打磨MemHub的体验 ：）**
-
-> 💗 MemHub has just been open-sourced and is under active development. The current public release is available for download andevaluation. Some platform packages, installation paths, and host integrations are still being completed and verified. Check the assets
-and release notes before installing.
-If you run into a problem, please open an Issue with the version, platform,reproduction steps, and sanitized logs, We wilreviewreports, publish fixes, and keep the support matrix up to date.
+MemHub 是一个本地优先的共享记忆产品：把用户授权的多个 AI 产品中的历史对话和新增内容
+汇总到同一份记忆，并让这些 AI 在独立授权后复用它。Hy Memory 是 MemHub 使用的 Python
+SDK 和记忆引擎。One Memory / `one-memory` 是历史模块、数据目录、服务和兼容命令名称。
 
 ## 发行与平台合同
 
-源码当前固定使用公开 PyPI 正式版 `hy-memory==2.0.5`。MemHub 源码版本为 `1.0.5`
-（build 14），GitHub 仓库为
+公共 Python SDK 为 `hy-memory==2.0.1`。MemHub 源码版本为 `1.0.0`
+（build 4），GitHub 仓库为
 [`Tencent-Hunyuan/Hy-Memory`](https://github.com/Tencent-Hunyuan/Hy-Memory)，npm 包名为
 `memhub-cli`。当前代码架构见
 [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md)。
 
-`v1.0.5` 的发行目标是 Linux x64/arm64 Runtime 与 macOS arm64/x64 App 和 Runtime。
+`v1.0.0` 的发行目标是 Linux x64/arm64 Runtime 与 macOS arm64/x64 App 和 Runtime。
 Linux 制品由 GitHub Actions 在原生架构 runner 上构建并完成生命周期验收；macOS
 制品由发行流水线完成 Developer ID 签名、公证和验收后手动上传。Windows 不支持。
 只有同时出现在 GitHub Release 与 `release-manifest.json` 中、且通过公开校验的制品才属于
@@ -37,29 +25,23 @@ Linux 制品由 GitHub Actions 在原生架构 runner 上构建并完成生命
 ## 核心原则
 
 - 一次安装、一个 Runtime、一份数据、多种客户端。
-- Hy Memory SDK 是 memory/raw/vector/graph/coding 数据面的唯一权威；Python Core
-  管理授权、模型、异步队列和 Runtime 状态。
+- Python Core 是唯一记忆数据面和唯一业务数据库写入者。
 - 来源读取、模型处理和宿主读取是相互独立的授权边界。
-- 正式写链路为 `memory_write_jobs -> SDK add() -> raw/memory ID receipt`。
+- 正式记忆链路保持 `Evidence -> Hy Memory -> Governance -> Matters/Wiki`。
 - 产品不包含屏幕、Accessibility / AXTree、OCR、键鼠、剪贴板或后台录音采集。
 
 ## 仓库结构
 
-- `apps/core`：Python / FastAPI Kernel，负责授权、模型、队列、SDK Runtime 边界与 API。
+- `apps/core`：Python / FastAPI Kernel，负责 Evidence、Hy Memory、治理、检索与 API。
 - `apps/cli`：安装、控制和诊断共享 Runtime 的 `one-memory` CLI。
 - `apps/web`：React / TypeScript 管理界面。
 - `apps/desktop`：Electron 桌面壳与图形安装入口。
 - `packages/contracts`：公共 API 类型。
-- `packages/i18n`：Web 与 Electron 共用的界面语言合同和 catalog。
 - `packages/host-bridge`：AI App 的 Skill、Hook、插件和 MCP 接入。
 - `packages/runtime-control`：Core、Host Gateway 和 Runtime 生命周期控制。
 
 架构详情见 [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md) 和
 [`docs/contracts/runtime-unification.md`](docs/contracts/runtime-unification.md)。
-界面语言架构与社区翻译规则见
-[`docs/LOCALIZATION.md`](docs/LOCALIZATION.md)。
-产品、测试和一线支持排查导入与记忆沉淀时，使用
-[`docs/PRODUCT_LOG_TROUBLESHOOTING.md`](docs/PRODUCT_LOG_TROUBLESHOOTING.md)。
 
 ## 开发环境
 
@@ -117,7 +99,7 @@ MemHub 的 SQLite 数据默认位于 `~/.one-memory`，不在 npm 包或 Runtime
 
 ## Hy Memory
 
-SDK 依赖固定为公开 PyPI 正式版 `hy-memory==2.0.5`。SDK 配置、权限边界及 search
+当前开发依赖固定为公开 PyPI 包 `hy-memory==2.0.1`。SDK 配置、权限边界及 search
 返回格式见 [`MEMORY.md`](MEMORY.md)。HY search 返回的 `content` 已包含 SDK 统一生成的
 逻辑时间和演化上下文；调用方不应再次转换时间戳或重复拼接 `When`。
 

memhub/SBOM.spdx.json

@@ -3,9 +3,9 @@
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "name": "one-memory",
-  "documentNamespace": "https://one-memory.local/spdx/2026-10-22T13:18:16Z",
+  "documentNamespace": "https://one-memory.local/spdx/2026-10-15T17:26:47Z",
   "creationInfo": {
-    "created": "2026-10-22T13:18:16Z",
+    "created": "2026-10-15T17:26:47Z",
     "creators": [
       "Tool: one-memory-generate-sbom"
     ]
@@ -88,23 +88,6 @@
         }
       ]
     },
-    {
-      "SPDXID": "SPDXRef-Package-npm-i18next",
-      "name": "i18next",
-      "versionInfo": "25.10.10",
-      "downloadLocation": "NOASSERTION",
-      "filesAnalyzed": false,
-      "licenseConcluded": "NOASSERTION",
-      "licenseDeclared": "NOASSERTION",
-      "copyrightText": "NOASSERTION",
-      "externalRefs": [
-        {
-          "referenceCategory": "PACKAGE-MANAGER",
-          "referenceType": "purl",
-          "referenceLocator": "pkg:npm/i18next@25.10.10"
-        }
-      ]
-    },
     {
       "SPDXID": "SPDXRef-Package-npm-lucide-react",
       "name": "lucide-react",
@@ -496,23 +479,6 @@
         }
       ]
     },
-    {
-      "SPDXID": "SPDXRef-Package-pypi-coloredlogs",
-      "name": "coloredlogs",
-      "versionInfo": "15.0.1",
-      "downloadLocation": "NOASSERTION",
-      "filesAnalyzed": false,
-      "licenseConcluded": "NOASSERTION",
-      "licenseDeclared": "NOASSERTION",
-      "copyrightText": "NOASSERTION",
-      "externalRefs": [
-        {
-          "referenceCategory": "PACKAGE-MANAGER",
-          "referenceType": "purl",
-          "referenceLocator": "pkg:pypi/coloredlogs@15.0.1"
-        }
-      ]
-    },
     {
       "SPDXID": "SPDXRef-Package-pypi-distro",
       "name": "distro",
@@ -785,23 +751,6 @@
         }
       ]
     },
-    {
-      "SPDXID": "SPDXRef-Package-pypi-humanfriendly",
-      "name": "humanfriendly",
-      "versionInfo": "10.0",
-      "downloadLocation": "NOASSERTION",
-      "filesAnalyzed": false,
-      "licenseConcluded": "NOASSERTION",
-      "licenseDeclared": "NOASSERTION",
-      "copyrightText": "NOASSERTION",
-      "externalRefs": [
-        {
-          "referenceCategory": "PACKAGE-MANAGER",
-          "referenceType": "purl",
-          "referenceLocator": "pkg:pypi/humanfriendly@10.0"
-        }
-      ]
-    },
     {
       "SPDXID": "SPDXRef-Package-pypi-idna",
       "name": "idna",
@@ -1176,23 +1125,6 @@
         }
       ]
     },
-    {
-      "SPDXID": "SPDXRef-Package-pypi-mpmath",
-      "name": "mpmath",
-      "versionInfo": "1.3.0",
-      "downloadLocation": "NOASSERTION",
-      "filesAnalyzed": false,
-      "licenseConcluded": "NOASSERTION",
-      "licenseDeclared": "NOASSERTION",
-      "copyrightText": "NOASSERTION",
-      "externalRefs": [
-        {
-          "referenceCategory": "PACKAGE-MANAGER",
-          "referenceType": "purl",
-          "referenceLocator": "pkg:pypi/mpmath@1.3.0"
-        }
-      ]
-    },
     {
       "SPDXID": "SPDXRef-Package-pypi-multidict",
       "name": "multidict",
@@ -1298,7 +1230,7 @@
     {
       "SPDXID": "SPDXRef-Package-pypi-onnxruntime",
       "name": "onnxruntime",
-      "versionInfo": "1.23.2",
+      "versionInfo": "1.29.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1308,7 +1240,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:pypi/onnxruntime@1.23.2"
+          "referenceLocator": "pkg:pypi/onnxruntime@1.29.0"
         }
       ]
     },
@@ -2060,23 +1992,6 @@
         }
       ]
     },
-    {
-      "SPDXID": "SPDXRef-Package-pypi-sympy",
-      "name": "sympy",
-      "versionInfo": "1.14.0",
-      "downloadLocation": "NOASSERTION",
-      "filesAnalyzed": false,
-      "licenseConcluded": "NOASSERTION",
-      "licenseDeclared": "NOASSERTION",
-      "copyrightText": "NOASSERTION",
-      "externalRefs": [
-        {
-          "referenceCategory": "PACKAGE-MANAGER",
-          "referenceType": "purl",
-          "referenceLocator": "pkg:pypi/sympy@1.14.0"
-        }
-      ]
-    },
     {
       "SPDXID": "SPDXRef-Package-pypi-tenacity",
       "name": "tenacity",
@@ -2352,12 +2267,12 @@
     {
       "SPDXID": "SPDXRef-Package-hy-memory",
       "name": "hy-memory",
-      "versionInfo": "2.0.5",
+      "versionInfo": "2.0.1",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
-      "licenseConcluded": "Apache-2.0",
-      "licenseDeclared": "Apache-2.0",
-      "copyrightText": "Copyright (C) 2026 Tencent. All rights reserved."
+      "licenseConcluded": "MIT",
+      "licenseDeclared": "MIT",
+      "copyrightText": "Copyright (c) 2025 HY Memory Contributors"
     },
     {
       "SPDXID": "SPDXRef-Package-memmy-agent-derived",
@@ -2397,11 +2312,6 @@
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-npm-https-proxy-agent"
     },
-    {
-      "spdxElementId": "SPDXRef-Package-one-memory",
-      "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-npm-i18next"
-    },
     {
       "spdxElementId": "SPDXRef-Package-one-memory",
       "relationshipType": "DEPENDS_ON",
@@ -2517,11 +2427,6 @@
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-pypi-cloudpickle"
     },
-    {
-      "spdxElementId": "SPDXRef-Package-one-memory",
-      "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-pypi-coloredlogs"
-    },
     {
       "spdxElementId": "SPDXRef-Package-one-memory",
       "relationshipType": "DEPENDS_ON",
@@ -2602,11 +2507,6 @@
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-pypi-huggingface-hub"
     },
-    {
-      "spdxElementId": "SPDXRef-Package-one-memory",
-      "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-pypi-humanfriendly"
-    },
     {
       "spdxElementId": "SPDXRef-Package-one-memory",
       "relationshipType": "DEPENDS_ON",
@@ -2717,11 +2617,6 @@
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-pypi-more-itertools"
     },
-    {
-      "spdxElementId": "SPDXRef-Package-one-memory",
-      "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-pypi-mpmath"
-    },
     {
       "spdxElementId": "SPDXRef-Package-one-memory",
       "relationshipType": "DEPENDS_ON",
@@ -2977,11 +2872,6 @@
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-pypi-starlette"
     },
-    {
-      "spdxElementId": "SPDXRef-Package-one-memory",
-      "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-pypi-sympy"
-    },
     {
       "spdxElementId": "SPDXRef-Package-one-memory",
       "relationshipType": "DEPENDS_ON",

memhub/THIRD_PARTY_NOTICES.md

@@ -2,79 +2,39 @@
 
 MemHub itself is licensed under Apache-2.0 (see `LICENSE`).
 It bundles the runtime dependencies listed below.
-Generated from the installed dependency tree on 2026-10-22T13:18:16Z
+Generated from the installed dependency tree on 2026-10-15T17:26:47Z
 by `python3 scripts/generate_sbom.py`. Do not edit by hand.
 
 Per-package license texts are not reproduced here yet; the license
 column is filled in as part of release review, and the SBOM records
 `NOASSERTION` until then rather than guessing.
 
-## hy-memory 2.0.5
+## hy-memory 2.0.1
 
-License: Apache-2.0
+License: MIT
 
 ```text
-Tencent is pleased to support the community by making Hy-Memory available.
+MIT License
 
-Copyright (C) 2026 Tencent. All rights reserved.
+Copyright (c) 2025 HY Memory Contributors
 
-Hy-Memory is licensed under Apache-2.0. Hy-Memory does not impose any additional restrictions beyond those specified in the license.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
 
-For the avoidance of doubt, Hy-Memory refers solely to code, parameters, and weights made publicly available by Tencent in accordance with Apache-2.0.
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
 
-Terms of the Apache-2.0 License:
---------------------------------------------------------------------
-Apache License
-Version 2.0, January 2004
-http://www.apache.org/licenses/
-
-TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-1. Definitions.
-
-"License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document.
-
-"Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License.
-
-"Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity.
-
-"You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License.
-
-"Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files.
-
-"Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types.
-
-"Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below).
-
-"Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof.
-
-"Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution."
-
-"Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work.
-
-2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form.
-
-3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed.
-
-4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions:
-
-You must give any other recipients of the Work or Derivative Works a copy of this License; and
-You must cause any modified files to carry prominent notices stating that You changed the files; and
-You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and
-If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License.
-You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License.
-
-5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions.
-
-6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file.
-
-7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License.
-
-8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages.
-
-9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability.
-
-END OF TERMS AND CONDITIONS
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
 ```
 
 ## MemTensor memmy-agent (adapted)
@@ -112,13 +72,12 @@ Adaptation boundary:
 
 No Memmy brand, icon, font or mascot assets are distributed.
 
-## JavaScript (npm) — 11 packages
+## JavaScript (npm) — 10 packages
 
 - @tanstack/react-query 5.103.2
 - axios 1.20.0
 - fflate 0.8.3
 - https-proxy-agent 7.0.0
-- i18next 25.10.10
 - lucide-react 1.43.0
 - proxy-from-env 2.1.0
 - react 19.2.8
@@ -126,7 +85,7 @@ No Memmy brand, icon, font or mascot assets are distributed.
 - tar 7.5.22
 - three 0.185.1
 
-## Python (PyPI) — 126 packages
+## Python (PyPI) — 122 packages
 
 - aiohappyeyeballs 2.7.1
 - aiohttp 3.14.3
@@ -145,7 +104,6 @@ No Memmy brand, icon, font or mascot assets are distributed.
 - chromadb 1.5.9
 - click 8.5.0
 - cloudpickle 3.1.2
-- coloredlogs 15.0.1
 - distro 1.9.0
 - durationpy 0.11
 - execnet 2.1.2
@@ -162,7 +120,6 @@ No Memmy brand, icon, font or mascot assets are distributed.
 - httptools 0.8.0
 - httpx 0.28.1
 - huggingface-hub 1.29.0
-- humanfriendly 10.0
 - idna 3.19
 - importlib-resources 7.1.0
 - iniconfig 2.3.0
@@ -185,14 +142,13 @@ No Memmy brand, icon, font or mascot assets are distributed.
 - mdurl 0.1.2
 - mmh3 5.3.0
 - more-itertools 11.1.0
-- mpmath 1.3.0
 - multidict 6.7.1
 - mypy 2.3.1
 - mypy-extensions 1.1.0
 - narwhals 2.25.0
 - numpy 2.5.2
 - oauthlib 3.3.1
-- onnxruntime 1.23.2
+- onnxruntime 1.29.0
 - openai 2.54.0
 - opentelemetry-api 1.44.0
 - opentelemetry-exporter-otlp-proto-common 1.44.0
@@ -237,7 +193,6 @@ No Memmy brand, icon, font or mascot assets are distributed.
 - six 1.17.0
 - sniffio 1.3.1
 - starlette 1.6.0
-- sympy 1.14.0
 - tenacity 9.1.4
 - threadpoolctl 3.6.0
 - tiktoken 0.14.0

memhub/apps/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@one-memory/cli",
-  "version": "1.0.5",
+  "version": "1.0.0",
   "description": "MemHub bootstrap CLI for installing and managing the local-first shared memory runtime",
   "license": "Apache-2.0",
   "repository": {

memhub/apps/cli/scripts/prepare-publish-manifest.mjs

@@ -12,23 +12,25 @@
  * It is generated rather than hand-written so the two cannot drift: this reads
  * the real package.json and only strips what is provably not needed at runtime.
  */
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { execFileSync } from "node:child_process";
 import { createRequire } from "node:module";
+import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const here = dirname(fileURLToPath(import.meta.url));
 const root = resolve(here, "..");
+const repositoryRoot = resolve(root, "../..");
 const require = createRequire(import.meta.url);
-const { assertSemver } = require("../../../scripts/release-version.cjs");
+const { resolveBuildVersion } = require("../../../scripts/release-version.cjs");
+const releaseVersion = resolveBuildVersion(process.env, repositoryRoot);
 const pkgPath = resolve(root, "package.json");
 const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
-const publishVersion = assertSemver(
-  process.env.MEMHUB_NPM_VERSION?.trim() || pkg.version,
-  "MEMHUB_NPM_VERSION",
-);
 const publishName = process.env.MEMHUB_NPM_PACKAGE?.trim();
-if (!publishName || !/^(?:@[a-z0-9._-]+\/)?[a-z0-9._-]+$/.test(publishName)) {
+if (
+  !publishName ||
+  !/^(?:@[a-z0-9._-]+\/)?[a-z0-9._-]+$/.test(publishName)
+) {
   throw new Error(
     "MEMHUB_NPM_PACKAGE must name the explicit npm publish identity",
   );
@@ -36,12 +38,8 @@ if (!publishName || !/^(?:@[a-z0-9._-]+\/)?[a-z0-9._-]+$/.test(publishName)) {
 
 const bundle = resolve(root, "dist/one-memory.cjs");
 const source = readFileSync(bundle, "utf8");
-const runtimeRequires = [
-  ...source.matchAll(/require\(["']([^"']+)["']\)/g),
-].map((m) => m[1]);
-const workspaceLeaked = runtimeRequires.filter((name) =>
-  name.startsWith("@one-memory/"),
-);
+const runtimeRequires = [...source.matchAll(/require\(["']([^"']+)["']\)/g)].map((m) => m[1]);
+const workspaceLeaked = runtimeRequires.filter((name) => name.startsWith("@one-memory/"));
 if (workspaceLeaked.length > 0) {
   throw new Error(
     `bundle still requires workspace packages at runtime: ${workspaceLeaked.join(", ")}. ` +
@@ -54,7 +52,7 @@ mkdirSync(outDir, { recursive: true });
 
 const published = { ...pkg };
 published.name = publishName;
-published.version = publishVersion;
+published.version = releaseVersion;
 for (const section of ["dependencies", "devDependencies", "peerDependencies"]) {
   if (!published[section]) continue;
   published[section] = Object.fromEntries(
@@ -63,7 +61,9 @@ for (const section of ["dependencies", "devDependencies", "peerDependencies"]) {
       // else is build-time only. The bundle is inlined (tsup noExternal), so
       // in practice only Node builtins remain — but compute it rather than
       // assume, so a future non-inlined dep is not silently dropped.
-      runtimeRequires.some((req) => req === name || req.startsWith(`${name}/`)),
+      runtimeRequires.some(
+        (req) => req === name || req.startsWith(`${name}/`),
+      ),
     ),
   );
   if (Object.keys(published[section]).length === 0) delete published[section];
@@ -77,15 +77,8 @@ published.files = ["dist", "scripts", "package.json"];
 // in the staging dir overrides that and makes the manifest authoritative.
 writeFileSync(
   resolve(outDir, ".npmignore"),
-  [
-    "# Ship the built bundle: the repo root .gitignore excludes dist/.",
-    "!dist/",
-    "",
-  ].join("\n"),
+  ["# Ship the built bundle: the repo root .gitignore excludes dist/.", "!dist/", ""].join("\n"),
 );
 
-writeFileSync(
-  resolve(outDir, "package.json"),
-  `${JSON.stringify(published, null, 2)}\n`,
-);
+writeFileSync(resolve(outDir, "package.json"), `${JSON.stringify(published, null, 2)}\n`);
 console.log("wrote", resolve(outDir, "package.json"));

memhub/apps/cli/scripts/verify-package-matrix.mjs

@@ -20,7 +20,11 @@ import { pathToFileURL } from "node:url";
 
 const REQUIRED_ALIASES = {
   daemon: ["start", "stop", "restart", "status"],
-  "startup-service": ["service-plan", "service-install", "service-uninstall"],
+  "startup-service": [
+    "service-plan",
+    "service-install",
+    "service-uninstall",
+  ],
 };
 
 const REQUIRED_COMMAND_SURFACE = [
@@ -29,9 +33,11 @@ const REQUIRED_COMMAND_SURFACE = [
   "sources",
   "sync",
   "memories",
-  "profile",
   "calls",
+  "import-file",
   "notes",
+  "permission",
+  "extraction",
   "graph",
   "models",
   "host",
@@ -54,6 +60,7 @@ const REQUIRED_COMMAND_SURFACE = [
   "scan",
   "progress",
   "jobs",
+  "processing",
   "path",
   "adapter",
   "write",
@@ -74,21 +81,25 @@ const REQUIRED_MARKERS = [
 
 /**
  * Sub-commands the UI-write parity work added. A package can declare the
- * parent command (`models`) while still missing the new verb, so
+ * parent command (`permission`, `models`) while still missing the new verb, so
  * checking command names alone would pass a stale bundle. The marker is the
  * exact literal the catalog usage string contains.
  */
 const REQUIRED_SUBCOMMANDS = [
   { command: "calls", marker: "memhub calls clear" },
+  { command: "import-file", marker: "memhub import-file upload" },
+  { command: "import-file", marker: "memhub import-file commit" },
+  { command: "import-file", marker: "memhub import-file discard" },
   { command: "notes", marker: "memhub notes add" },
   { command: "notes", marker: "memhub notes process" },
-  { command: "memories", marker: "memhub memories update" },
-  { command: "memories", marker: "memhub memories delete" },
-  { command: "write", marker: "memhub write submit" },
-  { command: "write", marker: "memhub write status" },
+  { command: "permission", marker: "memhub permission status" },
+  { command: "permission", marker: "memhub permission allow" },
+  { command: "permission", marker: "memhub permission deny" },
+  { command: "extraction", marker: "memhub extraction set" },
   { command: "graph", marker: "memhub graph width" },
   { command: "models", marker: "memhub models edit" },
   { command: "models", marker: "memhub models activate" },
+  { command: "processing", marker: "memhub processing extract" },
   { command: "jobs", marker: "memhub jobs start" },
   { command: "jobs", marker: "memhub jobs <pause|resume|cancel>" },
 ];
@@ -101,57 +112,19 @@ const REQUIRED_SUBCOMMANDS = [
  * These run without `--lifecycle`, so they are safe against any package.
  */
 const STOPPED_DESTRUCTIVE_PROBES = [
-  {
-    name: "calls_clear_preview",
-    args: ["calls", "clear", "--event", "11111111-1111-4111-8111-111111111111"],
-  },
-  {
-    name: "calls_clear_apply",
-    args: [
-      "calls",
-      "clear",
-      "--event",
-      "11111111-1111-4111-8111-111111111111",
-      "--confirm",
-    ],
-  },
-  {
-    name: "calls_clear_all_apply",
-    args: ["calls", "clear", "--all", "--confirm"],
-  },
-  {
-    name: "notes_process_apply",
-    args: [
-      "notes",
-      "process",
-      "33333333-3333-4333-8333-333333333333",
-      "--confirm",
-    ],
-  },
-  {
-    name: "graph_width_apply",
-    args: ["graph", "width", "--decision", "keep_existing", "--confirm"],
-  },
-  {
-    name: "models_activate_apply",
-    args: [
-      "models",
-      "activate",
-      "44444444-4444-4444-8444-444444444444",
-      "--confirm",
-    ],
-  },
-  {
-    name: "models_edit_apply",
-    args: [
-      "models",
-      "edit",
-      "44444444-4444-4444-8444-444444444444",
-      "--config-file",
-      "/nonexistent/patch.json",
-      "--confirm",
-    ],
-  },
+  { name: "calls_clear_preview", args: ["calls", "clear", "--event", "11111111-1111-4111-8111-111111111111"] },
+  { name: "calls_clear_apply", args: ["calls", "clear", "--event", "11111111-1111-4111-8111-111111111111", "--confirm"] },
+  { name: "calls_clear_all_apply", args: ["calls", "clear", "--all", "--confirm"] },
+  { name: "import_file_commit_apply", args: ["import-file", "commit", "22222222-2222-4222-8222-222222222222", "--confirm"] },
+  { name: "import_file_discard_apply", args: ["import-file", "discard", "22222222-2222-4222-8222-222222222222", "--confirm"] },
+  { name: "notes_process_apply", args: ["notes", "process", "33333333-3333-4333-8333-333333333333", "--confirm"] },
+  { name: "permission_allow", args: ["permission", "allow"] },
+  { name: "permission_deny", args: ["permission", "deny"] },
+  { name: "extraction_set_apply", args: ["extraction", "set", "--window", "6m", "--confirm"] },
+  { name: "graph_width_apply", args: ["graph", "width", "--decision", "keep_existing", "--confirm"] },
+  { name: "processing_extract_apply", args: ["processing", "extract", "--confirm"] },
+  { name: "models_activate_apply", args: ["models", "activate", "44444444-4444-4444-8444-444444444444", "--confirm"] },
+  { name: "models_edit_apply", args: ["models", "edit", "44444444-4444-4444-8444-444444444444", "--config-file", "/nonexistent/patch.json", "--confirm"] },
 ];
 
 export function validateCatalog(document) {
@@ -228,9 +201,7 @@ export async function runPackageMatrix(runtimeDist, options = {}) {
   const markers = REQUIRED_MARKERS.filter(
     (marker) => !bundle.toString("utf8").includes(marker),
   );
-  const isolatedRoot = await mkdtemp(
-    path.join(tmpdir(), "memhub-package-matrix-"),
-  );
+  const isolatedRoot = await mkdtemp(path.join(tmpdir(), "memhub-package-matrix-"));
   const home = path.join(isolatedRoot, "home");
   const dataDir = path.join(isolatedRoot, "data");
   const hostHome = path.join(isolatedRoot, "host-home");
@@ -372,10 +343,7 @@ async function runStoppedDestructive(node, cli, environment) {
         `${probe.name} exit ${result.code}, expected 3 while Runtime is stopped`,
       );
     }
-    if (
-      document?.state !== "unknown" ||
-      document?.code !== "runtime_not_running"
-    ) {
+    if (document?.state !== "unknown" || document?.code !== "runtime_not_running") {
       failures.push(
         `${probe.name} did not fail closed with unknown/runtime_not_running`,
       );
@@ -483,7 +451,8 @@ async function main() {
   }
   const asJson = rest.includes("--json");
   const expectShaIndex = rest.indexOf("--expect-sha");
-  const expectSha = expectShaIndex >= 0 ? rest[expectShaIndex + 1] : undefined;
+  const expectSha =
+    expectShaIndex >= 0 ? rest[expectShaIndex + 1] : undefined;
   if (expectSha !== undefined && !/^[0-9a-fA-F]{64}$/.test(expectSha)) {
     process.stderr.write("--expect-sha must be a 64-character SHA-256\n");
     process.exitCode = 2;

memhub/apps/cli/src/backup-restore.test.ts

@@ -30,16 +30,12 @@ describe("managed restore over HTTP", { timeout: 15_000 }, () => {
       }
       if (request.headers.authorization === "Bearer r409") {
         response.statusCode = 409;
-        response.end(
-          JSON.stringify({ detail: "backup_restore_runtime_running" }),
-        );
+        response.end(JSON.stringify({ detail: "backup_restore_runtime_running" }));
         return;
       }
       if (request.headers.authorization === "Bearer r422") {
         response.statusCode = 422;
-        response.end(
-          JSON.stringify({ detail: "backup_restore_source_outside_home" }),
-        );
+        response.end(JSON.stringify({ detail: "backup_restore_source_outside_home" }));
         return;
       }
       response.end(
@@ -52,12 +48,9 @@ describe("managed restore over HTTP", { timeout: 15_000 }, () => {
         }),
       );
     });
-    await new Promise<void>((resolve) =>
-      server.listen(0, "127.0.0.1", resolve),
-    );
+    await new Promise<void>((resolve) => server.listen(0, "127.0.0.1", resolve));
     const address = server.address();
-    if (address === null || typeof address === "string")
-      throw new Error("no port");
+    if (address === null || typeof address === "string") throw new Error("no port");
     port = address.port;
   });
 
@@ -144,18 +137,8 @@ describe("maintenance Core identity", { timeout: 15_000 }, () => {
 
   it("rejects a squatter, wrong service, wrong instance, and non-200", async () => {
     const cases = [
-      {
-        status: 200,
-        data: { status: "ok", service: "other", instance_id: "x" },
-      },
-      {
-        status: 200,
-        data: {
-          status: "ok",
-          service: "one-memory-core",
-          instance_id: "wrong",
-        },
-      },
+      { status: 200, data: { status: "ok", service: "other", instance_id: "x" } },
+      { status: 200, data: { status: "ok", service: "one-memory-core", instance_id: "wrong" } },
       { status: 503, data: {} },
       { status: 200, data: null },
     ];

memhub/apps/cli/src/backup-restore.ts

@@ -91,8 +91,7 @@ export async function callRestore(
   source: string,
   request: typeof defaultPost = defaultPost,
 ): Promise<
-  | { state: "restored"; result: RestoreResult }
-  | { state: "rejected"; code: string }
+  { state: "restored"; result: RestoreResult } | { state: "rejected"; code: string }
 > {
   const response = await request(
     `http://${options.host}:${options.port}/api/v1/backup/restore`,

memhub/apps/cli/src/batch-import-flow.test.ts

@@ -1,21 +1,19 @@
 import { describe, expect, it, vi } from "vitest";
+
+import type { CoreReader, ReadOutcome } from "./core-client.js";
+import type { CoreOperations } from "./core-operations.js";
 import {
   batchScanExitCode,
   executeBatchImport,
   planBatchImport,
   renderBatchScanText,
 } from "./batch-import-flow.js";
-import type { CoreReader, ReadOutcome } from "./core-client.js";
-import type { CoreOperations } from "./core-operations.js";
 
 function readerFor(catalog: unknown): CoreReader {
   return (async (path: string) =>
     path === "/api/v1/sources"
       ? ({ state: "ok", data: catalog } as ReadOutcome<unknown>)
-      : ({
-          state: "not_found",
-          code: "http_404",
-        } as ReadOutcome<unknown>)) as CoreReader;
+      : ({ state: "not_found", code: "http_404" } as ReadOutcome<unknown>)) as CoreReader;
 }
 
 function found(source_id: string, extra: Record<string, unknown> = {}) {
@@ -83,36 +81,18 @@ describe("A19 batch execution", () => {
       readerFor([found("codex"), found("cursor")]),
     );
     if (planned.state !== "preview") throw new Error("expected preview");
-    const post = vi.fn(
-      async (_path: string, body: Record<string, unknown>) => ({
-        state: "committed" as const,
-        data: {
-          request_id: body.request_id,
-          accepted_source_ids: ["codex", "cursor"],
-          failed_sources: {},
-          jobs: [
-            {
-              job_id: "j1",
-              source_id: "codex",
-              status: "pending",
-              discovered: 3,
-              stored: 3,
-              errors: 0,
-              operation: "history",
-            },
-            {
-              job_id: "j2",
-              source_id: "cursor",
-              status: "pending",
-              discovered: 5,
-              stored: 5,
-              errors: 0,
-              operation: "history",
-            },
-          ],
-        },
-      }),
-    );
+    const post = vi.fn(async (_path: string, body: Record<string, unknown>) => ({
+      state: "committed" as const,
+      data: {
+        request_id: body.request_id,
+        accepted_source_ids: ["codex", "cursor"],
+        failed_sources: {},
+        jobs: [
+          { job_id: "j1", source_id: "codex", status: "pending", discovered: 3, stored: 3, errors: 0, operation: "history" },
+          { job_id: "j2", source_id: "cursor", status: "pending", discovered: 5, stored: 5, errors: 0, operation: "history" },
+        ],
+      },
+    }));
     const operations = { post } as unknown as CoreOperations;
     const document = await executeBatchImport(
       planned.candidates,
@@ -147,15 +127,7 @@ describe("A19 batch execution", () => {
           accepted_source_ids: ["codex"],
           failed_sources: { cursor: "source_identity_changed" },
           jobs: [
-            {
-              job_id: "j1",
-              source_id: "codex",
-              status: "pending",
-              discovered: 1,
-              stored: 1,
-              errors: 0,
-              operation: "history",
-            },
+            { job_id: "j1", source_id: "codex", status: "pending", discovered: 1, stored: 1, errors: 0, operation: "history" },
           ],
         },
       })),
@@ -270,15 +242,7 @@ describe("A19 batch execution", () => {
           accepted_source_ids: ["codex"],
           failed_sources: {},
           jobs: [
-            {
-              job_id: "j1",
-              source_id: "codex",
-              status: "pending",
-              discovered: 1,
-              stored: 1,
-              errors: 0,
-              operation: "history",
-            },
+            { job_id: "j1", source_id: "codex", status: "pending", discovered: 1, stored: 1, errors: 0, operation: "history" },
           ],
         },
       })),

memhub/apps/cli/src/batch-import-flow.ts

@@ -14,14 +14,15 @@
  */
 
 import { randomUUID } from "node:crypto";
-import type { ImportJob } from "@one-memory/contracts";
 import { buildSourceImportRequest } from "@one-memory/operations";
-import type { CoreReader } from "./core-client.js";
-import type { CoreOperations } from "./core-operations.js";
+
+import type { ImportJob } from "@one-memory/contracts";
 import {
   type SourceConnectionCandidate,
   validateSourceConnectionCandidates,
 } from "./core-responses.js";
+import type { CoreReader } from "./core-client.js";
+import type { CoreOperations } from "./core-operations.js";
 import { PRODUCT } from "./version.js";
 
 export interface BatchSourceRow {
@@ -56,34 +57,19 @@ export function detectedSourceIds(
   return candidates.map((candidate) => candidate.source_id);
 }
 
-export async function planBatchImport(reader: CoreReader): Promise<
-  | {
-      state: "preview";
-      candidates: SourceConnectionCandidate[];
-      rows: BatchSourceRow[];
-      notFound: string[];
-    }
-  | {
-      state: "rejected" | "unknown" | "no_sources";
-      code: string;
-      notFound: string[];
-    }
+export async function planBatchImport(
+  reader: CoreReader,
+): Promise<
+  | { state: "preview"; candidates: SourceConnectionCandidate[]; rows: BatchSourceRow[]; notFound: string[] }
+  | { state: "rejected" | "unknown" | "no_sources"; code: string; notFound: string[] }
 > {
   const outcome = await reader<unknown>("/api/v1/sources");
   if (outcome.state !== "ok") {
-    return {
-      state: outcome.state === "unavailable" ? "unknown" : "rejected",
-      code: outcome.code,
-      notFound: [],
-    };
+    return { state: outcome.state === "unavailable" ? "unknown" : "rejected", code: outcome.code, notFound: [] };
   }
   const catalog = outcome.data;
   if (!Array.isArray(catalog) || catalog.length > SOURCE_LIST_LIMIT) {
-    return {
-      state: "rejected",
-      code: "sources_response_invalid",
-      notFound: [],
-    };
+    return { state: "rejected", code: "sources_response_invalid", notFound: [] };
   }
   const candidates = validateSourceConnectionCandidates(catalog);
   if (!candidates) {
@@ -179,7 +165,9 @@ export async function executeBatchImport(
     receipt.failed_sources && typeof receipt.failed_sources === "object"
       ? (receipt.failed_sources as Record<string, string>)
       : {};
-  const jobs = Array.isArray(receipt.jobs) ? (receipt.jobs as ImportJob[]) : [];
+  const jobs = Array.isArray(receipt.jobs)
+    ? (receipt.jobs as ImportJob[])
+    : [];
   const firstSeen = jobs.map((job) => ({
     source_id: job.source_id,
     discovered: job.discovered,
@@ -274,8 +262,7 @@ export async function executeBatchImport(
 }
 
 export function batchScanExitCode(document: BatchScanDocument): number {
-  if (document.state === "committed" || document.state === "no_sources")
-    return 0;
+  if (document.state === "committed" || document.state === "no_sources") return 0;
   if (document.state === "partial") return 1;
   return 1;
 }

memhub/apps/cli/src/cli-logs.test.ts

@@ -1,7 +1,6 @@
-import { mkdtemp, readdir, readFile, rm, writeFile } from "node:fs/promises";
+import { mkdtemp, readdir, rm, writeFile } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
-import { inflateRawSync } from "node:zlib";
 import { DiagnosticLogger } from "@one-memory/runtime-control";
 import { afterEach, expect, it, vi } from "vitest";
 
@@ -30,27 +29,6 @@ async function fixture() {
   return dataDir;
 }
 
-function readZipEntry(archive: Buffer, expected: string): string {
-  let offset = 0;
-  while (archive.readUInt32LE(offset) === 0x04034b50) {
-    const method = archive.readUInt16LE(offset + 8);
-    const compressedSize = archive.readUInt32LE(offset + 18);
-    const nameLength = archive.readUInt16LE(offset + 26);
-    const extraLength = archive.readUInt16LE(offset + 28);
-    const nameStart = offset + 30;
-    const dataStart = nameStart + nameLength + extraLength;
-    const name = archive.subarray(nameStart, nameStart + nameLength).toString();
-    const compressed = archive.subarray(dataStart, dataStart + compressedSize);
-    if (name === expected) {
-      if (method === 0) return compressed.toString();
-      if (method === 8) return inflateRawSync(compressed).toString();
-      throw new Error("unsupported zip compression");
-    }
-    offset = dataStart + compressedSize;
-  }
-  throw new Error(`missing ${expected}`);
-}
-
 it("prints matching diagnostic events as NDJSON without starting Runtime", async () => {
   const dataDir = await fixture();
   let stdout = "";
@@ -96,25 +74,6 @@ it("exports one support zip to the requested downloads directory", async () => {
   });
   expect(receipt.path).toMatch(/MemHub-日志-3800-\d{8}-\d{4}\.zip$/);
   expect(await readdir(downloads)).toEqual([path.basename(receipt.path)]);
-  const archive = await readFile(receipt.path);
-  expect(JSON.parse(readZipEntry(archive, "summary.json")).commit).toBeNull();
-});
-
-it("fails closed for an explicitly supplied invalid commit", async () => {
-  const dataDir = await fixture();
-  const downloads = await mkdtemp(path.join(os.tmpdir(), "om-cli-downloads-"));
-  roots.push(downloads);
-  vi.spyOn(process.stdout, "write").mockImplementation(() => true);
-
-  await expect(
-    run(["logs", "export", "--json"], {
-      ONE_MEMORY_DATA_DIR: dataDir,
-      ONE_MEMORY_EXPORT_DIR: downloads,
-      ONE_MEMORY_BUILD_NUMBER: "3800",
-      ONE_MEMORY_COMMIT: "unknown",
-    }),
-  ).rejects.toThrow("diagnostic_commit_invalid");
-  expect(await readdir(downloads)).toEqual([]);
 });
 
 it("never emits a secret from a malformed manually written event", async () => {

memhub/apps/cli/src/cli.test.ts

@@ -57,11 +57,6 @@ const runtimeMocks = vi.hoisted(() => ({
   })),
   uninstallUserService: vi.fn(async (..._args: unknown[]) => "removed"),
   restartUserService: vi.fn(async () => undefined),
-  runSdkMigration: vi.fn(
-    async (): Promise<{ state: string; code?: string }> => ({
-      state: "not_required",
-    }),
-  ),
   rollbackLocalInstall: vi.fn(async () => undefined),
   planCliLink: vi.fn(async ({ home, installRoot }) => ({
     schema_version: 1,
@@ -131,7 +126,6 @@ vi.mock("@one-memory/runtime-control", async (importOriginal) => {
     installUserService: runtimeMocks.installUserService,
     uninstallUserService: runtimeMocks.uninstallUserService,
     restartUserService: runtimeMocks.restartUserService,
-    runSdkMigration: runtimeMocks.runSdkMigration,
     rollbackLocalInstall: runtimeMocks.rollbackLocalInstall,
     planCliLink: runtimeMocks.planCliLink,
     installCliLink: runtimeMocks.installCliLink,
@@ -895,108 +889,6 @@ describe("public One Memory CLI", () => {
       expect(runtimeMocks.restartUserService).toHaveBeenCalledTimes(2);
     });
 
-    const upgradeArguments = [
-      "upgrade",
-      "--source",
-      "/tmp/dist",
-      "--home",
-      "/tmp/home",
-      "--install-root",
-      "/tmp/install",
-      "--data-dir",
-      "/tmp/custom data",
-      "--yes",
-    ];
-    const presentCliLink = {
-      schema_version: 1 as const,
-      platform: "linux" as const,
-      home: "/tmp/home",
-      install_root: "/tmp/install",
-      bin_directory: "/tmp/bin",
-      status: "present" as const,
-      blocked_reason: null,
-      link_path: "/tmp/bin/one-memory",
-      target_path: "/tmp/install/current/bin/one-memory",
-    };
-
-    it("migrates the home with the new Core before restarting the Runtime", async () => {
-      vi.clearAllMocks();
-      runtimeMocks.planCliLink.mockResolvedValueOnce(presentCliLink);
-      const order: string[] = [];
-      runtimeMocks.runSdkMigration.mockImplementationOnce(async () => {
-        order.push("migrate");
-        return { state: "cutover" };
-      });
-      runtimeMocks.restartUserService.mockImplementationOnce(async () => {
-        order.push("restart");
-      });
-      const output = captureStdout();
-      let code: number;
-      try {
-        code = await run(
-          upgradeArguments,
-          {},
-          { waitForRuntimeReady: async () => true },
-        );
-      } finally {
-        output.restore();
-      }
-      expect(code!).toBe(0);
-      expect(order).toEqual(["migrate", "restart"]);
-      expect(runtimeMocks.runSdkMigration).toHaveBeenCalledWith(
-        expect.objectContaining({ dataDir: "/tmp/custom data" }),
-      );
-    });
-
-    it("rolls back to the previous version when the migration does not finish", async () => {
-      vi.clearAllMocks();
-      runtimeMocks.planCliLink.mockResolvedValueOnce(presentCliLink);
-      runtimeMocks.runSdkMigration.mockResolvedValueOnce({
-        state: "deferred",
-        code: "sdk_migration_disk_space_insufficient",
-      });
-      const streams = captureStreams();
-      let code: number;
-      try {
-        code = await run(
-          upgradeArguments,
-          {},
-          { waitForRuntimeReady: async () => true },
-        );
-      } finally {
-        streams.restore();
-      }
-      expect(code!).toBe(1);
-      expect(JSON.parse(streams.stderr())).toMatchObject({
-        command: "upgrade",
-        code: "sdk_migration_disk_space_insufficient",
-      });
-      expect(runtimeMocks.rollbackLocalInstall).toHaveBeenCalledOnce();
-    });
-
-    it("keeps the new version when a migrated home is slow to come up", async () => {
-      vi.clearAllMocks();
-      runtimeMocks.planCliLink.mockResolvedValueOnce(presentCliLink);
-      runtimeMocks.runSdkMigration.mockResolvedValueOnce({ state: "cutover" });
-      const streams = captureStreams();
-      let code: number;
-      try {
-        code = await run(
-          upgradeArguments,
-          {},
-          { waitForRuntimeReady: async () => false },
-        );
-      } finally {
-        streams.restore();
-      }
-      expect(code!).toBe(1);
-      expect(JSON.parse(streams.stderr())).toMatchObject({
-        command: "upgrade",
-        code: "runtime_not_ready_after_sdk_migration",
-      });
-      expect(runtimeMocks.rollbackLocalInstall).not.toHaveBeenCalled();
-    });
-
     it("reports success once the upgraded Runtime is healthy", async () => {
       vi.clearAllMocks();
       runtimeMocks.planCliLink.mockResolvedValueOnce({
@@ -1893,11 +1785,14 @@ describe("stopped Runtime is exit 3, not a usage error", () => {
     ["task", "--id", "nope", "--json"],
     [
       "write",
-      "submit",
       "--session",
       "s",
-      "--messages-file",
-      "/tmp/messages.json",
+      "--from",
+      "1",
+      "--to",
+      "1",
+      "--evidence",
+      "e",
       "--json",
     ],
     ["backup", "create", "--target", "/tmp/x", "--yes", "--json"],

memhub/apps/cli/src/cli.ts

@@ -4,11 +4,7 @@ import { createReadStream } from "node:fs";
 import { access } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
-import {
-  type HealthResponse,
-  type ImportJob,
-  isHostId,
-} from "@one-memory/contracts";
+import type { HealthResponse, ImportJob } from "@one-memory/contracts";
 import {
   type AcquiredRuntimeDistribution,
   acquireRuntimeDistribution,
@@ -39,9 +35,7 @@ import {
   rollbackCliLink,
   rollbackLocalInstall,
   runRuntimeCli,
-  runSdkMigration,
   runtimeInstallLayout,
-  type SdkMigrationResult,
   stopRuntimeProcess,
 } from "@one-memory/runtime-control";
 import axios from "axios";
@@ -82,13 +76,11 @@ import {
   createCoreReader,
   createUiSessionRequest,
   deleteModelProfile,
-  parseOpenAIMessages,
   probeAdapter,
   readAdapters,
   readMemoryWrite,
   readScanRoots,
   removeScanRoot,
-  resetOnboarding,
   submitBackup,
   submitMemoryWrite,
   submitScan,
@@ -102,6 +94,7 @@ import {
   createCoreOperations,
 } from "./core-operations.js";
 import {
+  MEMORY_STATUSES,
   type SourceConnectionCandidate,
   validateImportJob,
   validateSourceConnectionCandidates,
@@ -197,6 +190,13 @@ import {
   renderMemoryDetailText,
   renderMemoryPageText,
 } from "./memory-report.js";
+import {
+  type ModelContentPermissionDocument,
+  modelContentPermissionExitCode,
+  readModelContentPermission,
+  renderModelContentPermissionText,
+  setModelContentPermission,
+} from "./model-content-permission-flow.js";
 import {
   executeModelProbe,
   inspectModelProbePlan,
@@ -217,10 +217,12 @@ import {
   executeModelProfileActivate,
   executeModelProfileEdit,
   type ModelWriteDocument,
+  type ModelWritePlan,
   modelWriteExitCode,
   planModelProfileActivate,
   planModelProfileEdit,
   renderModelWriteText,
+  validateModelWritePlan,
 } from "./model-write-flows.js";
 import { claimPlanAttempt } from "./operation-journal.js";
 import {
@@ -337,7 +339,7 @@ import {
   renderVersion,
   renderVersionDocument,
 } from "./usage.js";
-import { CLI_VERSION, PRODUCT, RUNTIME_RELEASE_VERSION } from "./version.js";
+import { CLI_VERSION, PRODUCT } from "./version.js";
 import { runWatchLoop, type WatchEvent, type WatchRead } from "./watch-loop.js";
 
 export interface RunControls {
@@ -356,9 +358,6 @@ export interface RunControls {
   /** Wait for a restarted Runtime to become healthy after `upgrade`.
    * Injectable so the upgrade tests do not spend real seconds polling. */
   waitForRuntimeReady?: (dataDir: string) => Promise<boolean>;
-  /** Run the SDK data migration before install/upgrade starts the new
-   * Runtime. Injectable so the tests do not spawn a real Core. */
-  migrateSdkData?: typeof migrateSdkDataBeforeStart;
   restartManagedRuntime?: typeof restartManagedService;
   stopRuntime?: typeof stopRuntimeProcess;
   ensureRuntime?: typeof ensureRuntimeProcess;
@@ -426,8 +425,7 @@ async function selectInstallSource(
     throw new Error("release_manifest_url_unavailable");
   }
   const manifestUrl =
-    explicitManifestUrl ??
-    template.replaceAll("{version}", RUNTIME_RELEASE_VERSION);
+    explicitManifestUrl ?? template.replaceAll("{version}", CLI_VERSION);
   const allowedHosts = parseAllowedReleaseHosts(
     environment.MEMHUB_RELEASE_ALLOWED_HOSTS,
   );
@@ -472,7 +470,7 @@ async function resolveRemoteInstallPreview(
 ): Promise<ResolvedRuntimeRelease> {
   return (controls.resolveRuntimeRelease ?? resolveRuntimeRelease)({
     manifestUrl: selection.manifestUrl,
-    expectedVersion: RUNTIME_RELEASE_VERSION,
+    expectedVersion: CLI_VERSION,
     channel: selection.channel,
     platform: process.platform,
     arch: process.arch,
@@ -486,7 +484,7 @@ async function acquireRemoteInstallSource(
 ): Promise<AcquiredRuntimeDistribution> {
   return (controls.acquireRuntimeDistribution ?? acquireRuntimeDistribution)({
     manifestUrl: selection.manifestUrl,
-    expectedVersion: RUNTIME_RELEASE_VERSION,
+    expectedVersion: CLI_VERSION,
     channel: selection.channel,
     platform: process.platform,
     arch: process.arch,
@@ -699,36 +697,6 @@ async function runCommand(
   // `path list` and `adapter list` are read-only: they have no plan to confirm,
   // so they are answered here rather than falling into the two-phase branch
   // (which would reject them for having nothing to apply).
-  // Back to the cold-start screens on purpose. Deleting the app cannot do this
-  // (the completion flag lives with the memories, by design), and deleting the
-  // data to get there would cost the user everything they have stored.
-  if (named === "onboarding" && arguments_.includes("reset")) {
-    if (
-      arguments_.filter((item) => item === "--json").length > 1 ||
-      arguments_.filter((item) => item !== "--json").join(" ") !==
-        "onboarding reset"
-    ) {
-      return usage();
-    }
-    const attachment = await attachToRuntime(
-      resolveRuntimeCliConfig(environment, process.argv[1]).dataDir,
-    );
-    if (attachment === null) {
-      return runtimeUnavailable(descriptor, asJson);
-    }
-    const state = await resetOnboarding(attachment);
-    if (state === null) {
-      return reject(descriptor, asJson, "引导状态端点不可用。");
-    }
-    if (asJson) {
-      process.stdout.write(`${JSON.stringify(state)}\n`);
-      return EXIT_OK;
-    }
-    process.stdout.write(
-      `引导流程已回到首次运行（status=${state.status}），记忆数据未改动。\n`,
-    );
-    return EXIT_OK;
-  }
   if (named === "path" && arguments_.includes("list")) {
     if (
       arguments_.filter((item) => item === "--json").length > 1 ||
@@ -927,36 +895,7 @@ async function runCommand(
     if (attachment === null) {
       return runtimeUnavailable(descriptor, asJson);
     }
-    if (parsed.kind === "status") {
-      const receipt = await readMemoryWrite(attachment, parsed.id);
-      process.stdout.write(
-        asJson
-          ? `${JSON.stringify({ schema_version: 1, write: receipt })}\n`
-          : receipt === null
-            ? "未找到该 request id。\n"
-            : `request_id: ${receipt.request_id}\nstate: ${receipt.state}\n`,
-      );
-      return EXIT_OK;
-    }
-    const document = await readBoundedJson(parsed.messages_file);
-    const messages = parseOpenAIMessages(document);
-    if (messages === null) {
-      return reject(
-        descriptor,
-        asJson,
-        "messages 文件必须是含 user/assistant/tool 文本消息的 OpenAI messages 数组。",
-      );
-    }
-    const receipt = await submitMemoryWrite(attachment, {
-      session: parsed.session,
-      source: parsed.source,
-      request_id: parsed.request_id ?? randomUUID(),
-      messages,
-      ...(parsed.memory_at === undefined
-        ? {}
-        : { memory_at: parsed.memory_at }),
-      ...(parsed.priority === undefined ? {} : { priority: parsed.priority }),
-    });
+    const receipt = await submitMemoryWrite(attachment, parsed);
     process.stdout.write(
       asJson
         ? `${JSON.stringify({ schema_version: 1, write: receipt })}\n`
@@ -1053,21 +992,15 @@ async function runCommand(
         entry: "cli",
       }));
       const target = path.join(downloads, diagnosticZipFilename(build));
-      const environmentCommit = environment.ONE_MEMORY_COMMIT?.trim();
-      const embeddedCommit =
-        typeof __ONE_MEMORY_COMMIT__ === "string"
-          ? __ONE_MEMORY_COMMIT__.trim()
-          : "";
-      const commit =
-        environmentCommit ||
-        (embeddedCommit && embeddedCommit !== "unknown"
-          ? embeddedCommit
-          : undefined);
       const receipt = await exportDiagnosticZip({
         dataDir: config.dataDir,
         target,
         productVersion: build,
-        ...(commit === undefined ? {} : { commit }),
+        commit:
+          environment.ONE_MEMORY_COMMIT?.trim() ||
+          (typeof __ONE_MEMORY_COMMIT__ === "string"
+            ? __ONE_MEMORY_COMMIT__
+            : "unknown"),
         coreSha256: await sha256File(config.coreCommand).catch(() => undefined),
         home: os.homedir(),
         crashReportsDir: path.join(
@@ -2334,75 +2267,6 @@ async function runCommand(
     emitReadDocument(named, document, asJson);
     return sourceProgressExitCode(document);
   }
-  if (named === "profile") {
-    if (arguments_.slice(1).some((value) => value !== "--json")) return usage();
-    const config = resolveRuntimeCliConfig(environment, process.argv[1]);
-    const attached = await attachClients(config.dataDir, {
-      readerTimeoutMs: 15_000,
-    });
-    if (!attached.reader) {
-      const document = {
-        schema_version: 2,
-        product: PRODUCT,
-        state: "unavailable",
-        code: attached.failure ?? "runtime_attach_failed",
-      };
-      emit(
-        asJson
-          ? `${JSON.stringify(document)}\n`
-          : `用户画像读取失败：${document.code}\n`,
-      );
-      return EXIT_RUNTIME_STOPPED;
-    }
-    const outcome = await attached.reader<unknown>("/api/v2/user-profile");
-    if (outcome.state !== "ok") {
-      const document = {
-        schema_version: 2,
-        product: PRODUCT,
-        state: outcome.state,
-        code: outcome.code,
-      };
-      emit(
-        asJson
-          ? `${JSON.stringify(document)}\n`
-          : `用户画像读取失败：${outcome.code}\n`,
-      );
-      return EXIT_FAILED;
-    }
-    const value = outcome.data as {
-      request_id?: unknown;
-      profile?: unknown;
-      elapsed_ms?: unknown;
-    };
-    if (
-      typeof value.request_id !== "string" ||
-      !(
-        value.profile === null ||
-        (typeof value.profile === "object" && !Array.isArray(value.profile))
-      ) ||
-      typeof value.elapsed_ms !== "number"
-    ) {
-      return reject(descriptor, asJson, "用户画像响应格式无效。");
-    }
-    const document = {
-      schema_version: 2,
-      product: PRODUCT,
-      state: "ok",
-      ...value,
-    };
-    const content =
-      value.profile && typeof value.profile === "object"
-        ? (value.profile as { content?: unknown }).content
-        : null;
-    emit(
-      asJson
-        ? `${JSON.stringify(document)}\n`
-        : value.profile === null
-          ? "尚未形成用户长期画像。\n"
-          : `${typeof content === "string" ? content : JSON.stringify(value.profile)}\n`,
-    );
-    return EXIT_OK;
-  }
   if (named === "memories") {
     const parsed = await parseMemoryCommand(arguments_.slice(1));
     if (!parsed) return usage();
@@ -2435,8 +2299,6 @@ async function runCommand(
     }
     if (blocked || !reader) {
       if (
-        parsed.kind === "update" ||
-        parsed.kind === "delete" ||
         parsed.kind === "plan-add" ||
         parsed.kind === "plan-existing" ||
         parsed.kind === "apply"
@@ -2485,62 +2347,6 @@ async function runCommand(
       );
       return document.memory.state === "ok" ? EXIT_OK : EXIT_FAILED;
     }
-    if (parsed.kind === "update" || parsed.kind === "delete") {
-      const content =
-        parsed.kind === "update"
-          ? await readMemoryContentFile(parsed.contentFile)
-          : null;
-      if (parsed.kind === "update" && content === null) return usage();
-      const plan = {
-        schema_version: 2,
-        product: PRODUCT,
-        state: "preview",
-        operation: parsed.kind,
-        memory_id: parsed.memoryId,
-        ...(content === null
-          ? {}
-          : {
-              content_sha256: createHash("sha256")
-                .update(content)
-                .digest("hex"),
-            }),
-      };
-      if (!parsed.confirmed) {
-        emit(
-          asJson
-            ? `${JSON.stringify(plan)}\n`
-            : `计划：${parsed.kind} ${parsed.memoryId}\n使用 --confirm 执行。\n`,
-        );
-        return EXIT_OK;
-      }
-      if (!operations) return EXIT_FAILED;
-      const writable = operations as CoreOperations &
-        CorePutOperations &
-        CoreDeleteOperations;
-      const path = `/api/v2/memories/${encodeURIComponent(parsed.memoryId)}`;
-      const outcome =
-        parsed.kind === "update"
-          ? await writable.put<unknown>(path, { content })
-          : await writable.delete<unknown>(path);
-      const document = {
-        schema_version: 2,
-        product: PRODUCT,
-        state: outcome.state,
-        operation: parsed.kind,
-        memory_id: parsed.memoryId,
-        ...(outcome.state === "committed"
-          ? { result: outcome.data }
-          : { code: outcome.code }),
-      };
-      emit(
-        asJson
-          ? `${JSON.stringify(document)}\n`
-          : outcome.state === "committed"
-            ? `已${parsed.kind === "update" ? "更新" : "删除"}记忆 ${parsed.memoryId}\n`
-            : `操作失败：${outcome.code}\n`,
-      );
-      return outcome.state === "committed" ? EXIT_OK : EXIT_FAILED;
-    }
     if (parsed.kind === "plan-add") {
       const content = await readMemoryContentFile(parsed.contentFile);
       if (content === null) return usage();
@@ -2564,6 +2370,7 @@ async function runCommand(
         operation: parsed.operation,
         memoryId: parsed.memoryId,
         ...(content === undefined ? {} : { content }),
+        ...(parsed.scopes.length === 0 ? {} : { scopes: parsed.scopes }),
       });
       emitMemoryFlow(document, asJson);
       return memoryFlowExitCode(document);
@@ -2655,6 +2462,45 @@ async function runCommand(
     );
     return uiWriteExitCode(document);
   }
+  if (named === "permission") {
+    const parsed = parsePermissionCommand(arguments_.slice(1));
+    if (!parsed) return usage();
+    const config = resolveRuntimeCliConfig(environment, process.argv[1]);
+    const runtime = await inspectRuntimeStatus({
+      dataDir: config.dataDir,
+      probeIdentity,
+      requireServiceReceipt: true,
+    });
+    const attached =
+      runtime.state === "running"
+        ? await attachClients(config.dataDir)
+        : { reader: null, operations: null, failure: runtime.code };
+    if (
+      runtime.state !== "running" ||
+      (parsed === "status" ? !attached.reader : !attached.operations)
+    ) {
+      const document: ModelContentPermissionDocument = {
+        schema_version: 1,
+        product: PRODUCT,
+        state: "unknown",
+        code:
+          runtime.state !== "running"
+            ? runtime.code
+            : (attached.failure ?? "runtime_attach_failed"),
+      };
+      emitModelContentPermissionDocument(document, asJson);
+      return runtime.state === "stopped" ? 3 : 1;
+    }
+    const document =
+      parsed === "status"
+        ? await readModelContentPermission(attached.reader!)
+        : await setModelContentPermission(
+            attached.operations!,
+            parsed === "allow",
+          );
+    emitModelContentPermissionDocument(document, asJson);
+    return modelContentPermissionExitCode(document);
+  }
   if (named === "notes" || named === "extraction" || named === "graph") {
     const parsed = parseExtendedWriteCommand(
       named as "notes" | "extraction" | "graph",
@@ -3154,7 +3000,6 @@ async function runCommand(
       null;
     let installReceiptWritten = false;
     let serviceApplied = false;
-    let migrated = false;
     let previousOwner:
       | Awaited<ReturnType<typeof claimCliServiceOwnership>>
       | undefined;
@@ -3165,23 +3010,6 @@ async function runCommand(
       }
       shellPathReceipt = await applyShellPath(shellPath);
       previousOwner = await claimCliServiceOwnership(layout.dataDir);
-      // `install` over an existing home (reinstall, App-to-CLI takeover) must
-      // migrate it too, before the new Runtime starts serving it.
-      const migration = await (
-        controls.migrateSdkData ?? migrateSdkDataBeforeStart
-      )({
-        coreCommand: layout.coreCommand,
-        dataDir: layout.dataDir,
-        runtimeBuild: String(plan.build_number ?? plan.version),
-        asJson: true,
-      });
-      if (migration.state === "deferred") {
-        throw new SdkMigrationDeferred(
-          migration.code ?? "sdk_migration_incomplete",
-        );
-      }
-      migrated =
-        migration.state === "cutover" || migration.state === "complete";
       await applyPreparedServiceInstall(preparedService);
       serviceApplied = true;
       // The receipt exists so a later command can find the data dir without
@@ -3233,13 +3061,6 @@ async function runCommand(
           );
         }
       };
-      if (migrated) {
-        // An older Runtime refuses a migrated home: keep this install.
-        process.stderr.write(
-          `${JSON.stringify(notReadyAfterMigration("install"), null, 2)}\n`,
-        );
-        return EXIT_FAILED;
-      }
       if (serviceApplied) {
         await rollbackPreparedServiceInstall(
           preparedService,
@@ -3249,13 +3070,7 @@ async function runCommand(
         await rollbackFilesAndOwner();
       }
       process.stderr.write(
-        `${JSON.stringify(
-          error instanceof SdkMigrationDeferred
-            ? sdkMigrationFailure("install", error.code)
-            : serviceErrorDocument("install", error),
-          null,
-          2,
-        )}\n`,
+        `${JSON.stringify(serviceErrorDocument("install", error), null, 2)}\n`,
       );
       return EXIT_FAILED;
     }
@@ -3617,7 +3432,6 @@ async function runCommand(
     let previousOwner:
       | Awaited<ReturnType<typeof claimCliServiceOwnership>>
       | undefined;
-    let migrated = false;
     const rollbackUpgrade = async (
       dataDir: string | undefined,
     ): Promise<void> => {
@@ -3649,25 +3463,6 @@ async function runCommand(
         memhubReceipts.push(await installManagedCliLink(link));
       }
       previousOwner = await claimCliServiceOwnership(layout.dataDir);
-      const migration = await (
-        controls.migrateSdkData ?? migrateSdkDataBeforeStart
-      )({
-        coreCommand: layout.coreCommand,
-        dataDir: parsed.dataDir ?? layout.dataDir,
-        runtimeBuild: String(plan.build_number ?? plan.version),
-        asJson,
-      });
-      if (migration.state === "deferred") {
-        await rollbackUpgrade(parsed.dataDir);
-        process.stderr.write(
-          `${JSON.stringify(sdkMigrationFailure("upgrade", migration.code ?? "sdk_migration_incomplete"), null, 2)}\n`,
-        );
-        return EXIT_FAILED;
-      }
-      // An older Runtime refuses a migrated home, so from here a failure
-      // keeps the new version instead of rolling back to one that cannot start.
-      migrated =
-        migration.state === "cutover" || migration.state === "complete";
       await restartUserService(layout, serviceOptions);
       // A restart that returns without error only means launchd/systemd
       // accepted the command. O-22: the first `upgrade` implementation
@@ -3679,12 +3474,6 @@ async function runCommand(
       const ready = await (controls.waitForRuntimeReady ?? waitForRuntimeReady)(
         dataDir,
       );
-      if (!ready && migrated) {
-        process.stderr.write(
-          `${JSON.stringify(notReadyAfterMigration("upgrade"), null, 2)}\n`,
-        );
-        return EXIT_FAILED;
-      }
       if (!ready) {
         await rollbackUpgrade(parsed.dataDir);
         process.stderr.write(
@@ -3712,9 +3501,9 @@ async function runCommand(
         });
       }
     } catch (error) {
-      if (!migrated) await rollbackUpgrade(parsed.dataDir);
+      await rollbackUpgrade(parsed.dataDir);
       process.stderr.write(
-        `${JSON.stringify(migrated ? notReadyAfterMigration("upgrade") : serviceErrorDocument("upgrade", error), null, 2)}\n`,
+        `${JSON.stringify(serviceErrorDocument("upgrade", error), null, 2)}\n`,
       );
       return EXIT_FAILED;
     }
@@ -4082,79 +3871,6 @@ export function runtimeIsReady(
   );
 }
 
-const SDK_MIGRATION_STEPS: Record<string, string> = {
-  bundle: "正在备份记忆数据，数据较多时需要几分钟……",
-  prepare: "正在整理待处理的写入任务……",
-  cutover: "正在切换记忆数据源……",
-  cleanup: "正在清理旧数据表……",
-};
-
-/**
- * Migrate a home written by an older release before the new Runtime serves it.
- *
- * Runs the new Runtime's own Core with the Runtime stopped. Progress goes to
- * stderr so stdout stays one result document.
- */
-async function migrateSdkDataBeforeStart(options: {
-  coreCommand: string;
-  dataDir: string;
-  runtimeBuild: string;
-  asJson: boolean;
-}): Promise<SdkMigrationResult> {
-  return runSdkMigration({
-    dataDir: options.dataDir,
-    core: { command: options.coreCommand },
-    runtimeBuild: options.runtimeBuild,
-    onProgress: (step) => {
-      process.stderr.write(
-        options.asJson
-          ? `${JSON.stringify({ schema_version: 1, product: PRODUCT, event: "sdk_migration.progress", step })}\n`
-          : `${SDK_MIGRATION_STEPS[step] ?? step}\n`,
-      );
-    },
-  });
-}
-
-class SdkMigrationDeferred extends Error {
-  constructor(readonly code: string) {
-    super(code);
-  }
-}
-
-function notReadyAfterMigration(command: "install" | "upgrade") {
-  return {
-    schema_version: 1,
-    product: PRODUCT,
-    command,
-    status: "error",
-    code: "runtime_not_ready_after_sdk_migration",
-    message:
-      "记忆数据已迁移到新版本，但新版本 Runtime 没有在限定时间内就绪。旧版本无法打开已迁移的数据，所以没有回滚。请运行 memhub restart，或 memhub doctor 查看原因。",
-  };
-}
-
-const SDK_MIGRATION_FAILURES: Record<string, string> = {
-  sdk_migration_disk_space_insufficient:
-    "磁盘空间不足，记忆数据迁移没有完成，已回滚到上一版本。请腾出与记忆数据同等大小的空间后重试；原有记忆数据不会丢失。",
-  sdk_migration_memory_unreadable:
-    "核对发现新版本还读不到你的全部记忆，没有切换数据源，已回滚到上一版本。请把这个错误码反馈给我们；原有记忆数据不会丢失。",
-  sdk_migration_model_profile_required:
-    "迁移需要先有可用的模型配置，用来核对新版本能否读回记忆。已回滚到上一版本；请先用 memhub models setup 完成配置后再升级。",
-};
-
-function sdkMigrationFailure(command: "install" | "upgrade", code: string) {
-  return {
-    schema_version: 1,
-    product: PRODUCT,
-    command,
-    status: "error",
-    code,
-    message:
-      SDK_MIGRATION_FAILURES[code] ??
-      "记忆数据迁移没有完成，已回滚到上一版本。请重试；如果仍然失败，请把这个错误码反馈给我们。原有记忆数据不会丢失。",
-  };
-}
-
 async function waitForRuntimeReady(
   dataDir: string,
   timeoutMs = 45_000,
@@ -4871,10 +4587,10 @@ async function runMaintenanceRestore(options: {
   const instanceId = randomUUID();
   const child = spawn(options.coreCommand, ["serve", "--maintenance"], {
     env: {
-      // Do not pass the caller's Runtime tuning variables into a
-      // maintenance process: a restore must start the product's minimal
-      // maintenance configuration, not inherit an unrelated experiment from
-      // the shell.
+      // Do not pass the caller's Runtime tuning variables (for example
+      // retrieval-index flags) into a maintenance process: a restore must
+      // start the product's minimal maintenance configuration, not inherit
+      // an unrelated experiment from the shell.
       PATH: process.env.PATH,
       HOME: process.env.HOME,
       LANG: process.env.LANG,
@@ -5408,6 +5124,18 @@ function parseHeadlessCommand(
     : null;
 }
 
+function parsePermissionCommand(
+  rest: readonly string[],
+): "status" | "allow" | "deny" | null {
+  if (rest.filter((item) => item === "--json").length > 1) return null;
+  const tokens = rest.filter((item) => item !== "--json");
+  const action = tokens[0];
+  return tokens.length === 1 &&
+    (action === "status" || action === "allow" || action === "deny")
+    ? action
+    : null;
+}
+
 function unwrapPlan(value: unknown): unknown {
   if (
     value &&
@@ -5456,10 +5184,10 @@ type HostCommand =
       args: unknown[];
     };
 
-// Host ids are read with the same grammar as the permission layer and the
-// grant store (`@one-memory/contracts`): `deepseek-harness:web` is a real id —
-// that host is configured per profile — and `host list` prints it, so rejecting
-// it here would mean listing a host the CLI then refuses to act on.
+// `deepseek-harness:web` is a real id — that host is configured per profile —
+// and `host list` prints it. Rejecting it here would mean listing a host the
+// CLI then refuses to act on.
+const HOST_ID = /^[a-z0-9][a-z0-9-]{0,31}(:[a-z0-9][a-z0-9-]{0,31})?$/;
 const FINGERPRINT = /^[0-9a-f]{64}$/;
 
 /** Host subcommands.
@@ -5482,7 +5210,7 @@ function parseHostCommand(rest: readonly string[]): HostCommand | null {
     const token = tokens[index];
     if (token === "--host") {
       const value = tokens[index + 1];
-      if (!value || !isHostId(value)) return null;
+      if (!value || !HOST_ID.test(value)) return null;
       if (hostId !== undefined) return null;
       hostId = value;
       index += 1;
@@ -5515,7 +5243,7 @@ function parseHostCommand(rest: readonly string[]): HostCommand | null {
     qualifier !== undefined &&
     (verb === "status" || verb === "install" || verb === "uninstall")
   ) {
-    if (!isHostId(qualifier)) return null;
+    if (!HOST_ID.test(qualifier)) return null;
     hostId = qualifier;
     // Drop the consumed host positional so the verb/qualifier checks below see
     // the same shape as the flag form.
@@ -5531,7 +5259,7 @@ function parseHostCommand(rest: readonly string[]): HostCommand | null {
     positional[2] !== undefined
   ) {
     const trailing = positional[2];
-    if (!isHostId(trailing)) return null;
+    if (!HOST_ID.test(trailing)) return null;
     hostId = trailing;
     positional.splice(2, 1);
     verb = positional[0];
@@ -5595,6 +5323,17 @@ function emitModelReportDocument(
   );
 }
 
+function emitModelContentPermissionDocument(
+  document: ModelContentPermissionDocument,
+  asJson: boolean,
+): void {
+  process.stdout.write(
+    asJson
+      ? `${JSON.stringify(document)}\n`
+      : renderModelContentPermissionText(document),
+  );
+}
+
 function emitSourceSyncDocument(
   document: SourceSyncFlowDocument,
   asJson: boolean,
@@ -6080,13 +5819,6 @@ function emitReadDocument(
 type MemoryCommand =
   | { kind: "list"; query: MemoryQuery }
   | { kind: "show"; memoryId: string }
-  | {
-      kind: "update";
-      memoryId: string;
-      contentFile: string;
-      confirmed: boolean;
-    }
-  | { kind: "delete"; memoryId: string; confirmed: boolean }
   | {
       kind: "plan-add";
       contentFile: string;
@@ -6096,9 +5828,10 @@ type MemoryCommand =
     }
   | {
       kind: "plan-existing";
-      operation: "correct" | "delete";
+      operation: "correct" | "delete" | "scope";
       memoryId: string;
       contentFile?: string;
+      scopes: string[];
     }
   | { kind: "apply"; planFile: string; contentFile?: string };
 
@@ -6114,33 +5847,6 @@ async function parseMemoryCommand(
       ? { kind: "show", memoryId }
       : null;
   }
-  if (action === "update" || action === "delete") {
-    const memoryId = tokens[1];
-    if (!memoryId || !isMemoryId(memoryId)) return null;
-    let contentFile: string | undefined;
-    let confirmed = false;
-    for (let index = 2; index < tokens.length; index += 1) {
-      const flag = tokens[index];
-      if (flag === "--confirm") {
-        if (confirmed) return null;
-        confirmed = true;
-        continue;
-      }
-      const value = tokens[index + 1];
-      if (value === undefined || value.startsWith("--")) return null;
-      if (flag !== "--content-file" || contentFile !== undefined) return null;
-      contentFile = value;
-      index += 1;
-    }
-    if (action === "update")
-      return contentFile
-        ? { kind: "update", memoryId, contentFile, confirmed }
-        : null;
-    return contentFile === undefined
-      ? { kind: "delete", memoryId, confirmed }
-      : null;
-  }
-  if (action === "plan" || action === "apply") return null;
   if (action === "plan") return parseMemoryPlanCommand(tokens.slice(1));
   if (action === "apply") {
     let planFile: string | undefined;
@@ -6166,7 +5872,10 @@ async function parseMemoryCommand(
       : null;
   }
   if (action !== "list") return null;
+  let query: string | undefined;
+  let queryFile: string | undefined;
   let status: string | undefined;
+  let source: string | undefined;
   let offset = 0;
   let limit = 100;
   let offsetSet = false;
@@ -6175,7 +5884,11 @@ async function parseMemoryCommand(
     const flag = tokens[index];
     const value = tokens[index + 1];
     if (value === undefined || value.startsWith("--")) return null;
-    if (flag === "--status" && status === undefined) status = value;
+    if (flag === "--query" && query === undefined) query = value;
+    else if (flag === "--query-file" && queryFile === undefined)
+      queryFile = value;
+    else if (flag === "--status" && status === undefined) status = value;
+    else if (flag === "--source" && source === undefined) source = value;
     else if (flag === "--limit" && !limitSet) {
       limit = Number(value);
       limitSet = true;
@@ -6184,11 +5897,24 @@ async function parseMemoryCommand(
       offsetSet = true;
     } else return null;
   }
-  if (status !== undefined && (status.length === 0 || status.length > 64))
+  if (query !== undefined && queryFile !== undefined) return null;
+  if (queryFile !== undefined) {
+    query = (await readQueryFile(queryFile)) ?? undefined;
+    if (query === undefined) return null;
+  }
+  if (
+    query !== undefined &&
+    (query.length === 0 || query.length > QUERY_MAX_CHARACTERS)
+  ) {
     return null;
+  }
+  if (status !== undefined && !MEMORY_STATUSES.includes(status as never)) {
+    return null;
+  }
+  if (source !== undefined && source.length === 0) return null;
   if (!Number.isSafeInteger(limit) || limit < 1 || limit > 500) return null;
   if (!Number.isSafeInteger(offset) || offset < 0) return null;
-  return { kind: "list", query: { status, offset, limit } };
+  return { kind: "list", query: { query, status, source, offset, limit } };
 }
 
 function parseMemoryPlanCommand(
@@ -6196,7 +5922,7 @@ function parseMemoryPlanCommand(
 ): MemoryCommand | null {
   const operation = tokens[0];
   const add = operation === "add";
-  if (!add && !["correct", "delete"].includes(operation)) {
+  if (!add && !["correct", "delete", "scope"].includes(operation)) {
     return null;
   }
   const memoryId = add ? undefined : tokens[1];
@@ -6215,7 +5941,7 @@ function parseMemoryPlanCommand(
     else if (flag === "--kind" && add && !kindSet) {
       memoryKind = value;
       kindSet = true;
-    } else if (flag === "--scope" && add && !scopes.includes(value))
+    } else if (flag === "--scope" && !scopes.includes(value))
       scopes.push(value);
     else if (flag === "--evidence" && add && !evidenceIds.includes(value))
       evidenceIds.push(value);
@@ -6235,15 +5961,18 @@ function parseMemoryPlanCommand(
   }
   if (
     (operation === "correct" && !contentFile) ||
-    (operation === "delete" && (contentFile !== undefined || scopes.length > 0))
+    (operation === "scope" && scopes.length === 0) ||
+    (!["correct", "scope"].includes(operation) &&
+      (contentFile !== undefined || scopes.length > 0))
   ) {
     return null;
   }
   return {
     kind: "plan-existing",
-    operation: operation as "correct" | "delete",
+    operation: operation as "correct" | "delete" | "scope",
     memoryId: memoryId as string,
     ...(contentFile ? { contentFile } : {}),
+    scopes,
   };
 }
 
@@ -6831,7 +6560,7 @@ function parseInstallOptions(
         ...(releaseManifestUrl ? { releaseManifestUrl } : {}),
         releaseChannel:
           releaseChannel ??
-          (RUNTIME_RELEASE_VERSION.includes("-") ? "prerelease" : "stable"),
+          (CLI_VERSION.includes("-") ? "prerelease" : "stable"),
         installRoot: resolvedInstallRoot,
         home: resolvedHome,
         uid: uid ?? process.getuid?.(),

memhub/apps/cli/src/command-catalog.ts

@@ -282,7 +282,11 @@ export const COMMANDS: readonly CommandDescriptor[] = [
     summary: "列出来源、执行已确认的导入计划。",
     usage:
       "memhub sources list [--json]\n            memhub sources import --plan-file <path> --confirm [--json]\n            memhub sources receipt <request-id> [--json]",
-    options: [PLAN_FILE_OPTION, EXPLICIT_CONFIRM_OPTION, JSON_OPTION],
+    options: [
+      PLAN_FILE_OPTION,
+      EXPLICIT_CONFIRM_OPTION,
+      JSON_OPTION,
+    ],
     exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE, EXIT_RUNTIME_STOPPED],
   },
   {
@@ -347,6 +351,22 @@ export const COMMANDS: readonly CommandDescriptor[] = [
     ],
     exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE, EXIT_RUNTIME_STOPPED],
   },
+  {
+    name: "processing",
+    summary: "手动推进待处理证据；默认只预览，确认后执行。",
+    usage:
+      "memhub processing extract [--evidence <id> ...] [--confirm] [--json]",
+    options: [
+      {
+        flag: "--evidence <id>",
+        summary:
+          "processing extract 要提前处理的证据 ID，可重复；不给则推进下一批。",
+      },
+      DIRECT_CONFIRM_OPTION,
+      JSON_OPTION,
+    ],
+    exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE, EXIT_RUNTIME_STOPPED],
+  },
   {
     name: "models",
     summary:
@@ -371,14 +391,25 @@ export const COMMANDS: readonly CommandDescriptor[] = [
   },
   {
     name: "memories",
-    summary: "通过 SDK 数据面列出、查看、修改或物理删除记忆。",
+    summary:
+      "列出/查看记忆，或生成并显式确认带版本与 request identity 的治理操作计划。",
     usage:
-      "memhub memories list [--status <state>] [--offset <n>] [--limit <n>] [--json]\n            memhub memories show <memory-id> [--json]\n            memhub memories update <memory-id> --content-file <path> [--confirm] [--json]\n            memhub memories delete <memory-id> [--confirm] [--json]",
+      "memhub memories list [--query <text>] [--query-file <path>] [--status <state>] [--source <id>] [--offset <n>] [--limit <n>] [--json]\n            memhub memories show <memory-id> [--json]\n            memhub memories plan add --content-file <path> --scope <scope> --evidence <id> [--kind <kind>] [--json]\n            memhub memories plan <correct|delete|scope> <memory-id> [--content-file <path>] [--scope <scope>] [--json]\n            memhub memories apply --plan-file <path> --confirm [--content-file <path>] [--json]",
     options: [
+      {
+        flag: "--query <text>",
+        summary:
+          "按内容过滤；会出现在 shell 历史里，敏感词请改用 --query-file。",
+      },
+      {
+        flag: "--query-file <path>",
+        summary: "从文件读取过滤词，避免查询内容进入命令行历史。",
+      },
       {
         flag: "--status <state>",
         summary: `记忆状态，取值 ${MEMORY_STATUSES.join("、")}。`,
       },
+      { flag: "--source <id>", summary: "只看某个来源产生的记忆。" },
       { flag: "--offset <n>", summary: "跳过前 n 条，默认 0。" },
       {
         flag: "--limit <n>",
@@ -389,18 +420,24 @@ export const COMMANDS: readonly CommandDescriptor[] = [
         summary:
           "从有界普通文件读取新增/纠正正文；计划只保存摘要，执行时再次校验。",
       },
-      DIRECT_CONFIRM_OPTION,
+      {
+        flag: "--kind <chat|working|coding|schema|intention>",
+        summary: "新增记忆的类型，默认 chat。",
+      },
+      {
+        flag: "--scope <scope>",
+        summary: "记忆使用范围，可重复；private 必须独占。",
+      },
+      {
+        flag: "--evidence <id>",
+        summary: "新增记忆引用的 Evidence ID，可重复。",
+      },
+      PLAN_FILE_OPTION,
+      EXPLICIT_CONFIRM_OPTION,
       JSON_OPTION,
     ],
     exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE, EXIT_RUNTIME_STOPPED],
   },
-  {
-    name: "profile",
-    summary: "读取 SDK 组装后的用户长期画像（L0 + 已启用的长期画像补充）。",
-    usage: "memhub profile [--json]",
-    options: [DATA_DIR_OPTION, JSON_OPTION],
-    exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE, EXIT_RUNTIME_STOPPED],
-  },
   {
     name: "calls",
     summary:
@@ -421,6 +458,28 @@ export const COMMANDS: readonly CommandDescriptor[] = [
     ],
     exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE, EXIT_RUNTIME_STOPPED],
   },
+  {
+    name: "import-file",
+    summary:
+      "上传、提交或丢弃一份历史导入文件；提交与丢弃默认只出计划，需 --confirm。",
+    usage:
+      "memhub import-file upload --file <path> [--kind raw_conversation|memory_content] [--confirm] [--json]\n            memhub import-file commit <upload-id> [--confirm] [--json]\n            memhub import-file discard <upload-id> [--confirm] [--json]",
+    options: [
+      {
+        flag: "--file <path>",
+        summary:
+          "要上传的普通文件（非符号链接，<=128 MiB，.zip/.json/.md/.txt）。",
+      },
+      {
+        flag: "--kind <kind>",
+        summary:
+          "输入类型，默认 raw_conversation；memory_content 用于记忆正文。",
+      },
+      DIRECT_CONFIRM_OPTION,
+      JSON_OPTION,
+    ],
+    exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE, EXIT_RUNTIME_STOPPED],
+  },
   {
     name: "notes",
     summary:
@@ -438,6 +497,28 @@ export const COMMANDS: readonly CommandDescriptor[] = [
     ],
     exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE, EXIT_RUNTIME_STOPPED],
   },
+  {
+    name: "permission",
+    summary: "读取或直接设置全局模型内容外发许可。",
+    usage:
+      "memhub permission status [--json]\n            memhub permission allow [--json]\n            memhub permission deny [--json]",
+    options: [JSON_OPTION],
+    exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE, EXIT_RUNTIME_STOPPED],
+  },
+  {
+    name: "extraction",
+    summary: "设置提取窗口；默认只出计划，--confirm 后才写入。",
+    usage: "memhub extraction set --window <3m|6m|1y|all> [--confirm] [--json]",
+    options: [
+      {
+        flag: "--window <preset>",
+        summary: "提取窗口预设：3m、6m、1y 或 all。",
+      },
+      DIRECT_CONFIRM_OPTION,
+      JSON_OPTION,
+    ],
+    exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE, EXIT_RUNTIME_STOPPED],
+  },
   {
     name: "graph",
     summary: "图谱宽度不匹配时的用户决定；默认只出计划，--confirm 后才执行。",
@@ -582,14 +663,6 @@ export const COMMANDS: readonly CommandDescriptor[] = [
     ],
     exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE, EXIT_PLAN_BLOCKED],
   },
-  {
-    name: "onboarding",
-    summary:
-      "onboarding reset 回到首次运行的引导流程。只清除引导完成状态：不删记忆数据，也不需要卸载重装。",
-    usage: "memhub onboarding reset [--json]",
-    options: [JSON_OPTION],
-    exit_codes: [EXIT_OK, EXIT_FAILED, EXIT_USAGE],
-  },
   {
     name: "help",
     summary: "显示总帮助或单个命令的用法。",
@@ -653,16 +726,16 @@ export const COMMANDS: readonly CommandDescriptor[] = [
   },
   {
     name: "write",
-    summary: "提交 OpenAI messages 到 SDK 写入队列，或按 request id 查询状态。",
+    summary:
+      "提交一次记忆写入，返回可查询的 request id；写入异步完成，不可重复提交。",
     usage:
-      "memhub write submit --messages-file <path> --session <id> [--source <id>] [--request-id <id>] [--memory-at <RFC3339>] [--live] [--json]\n            memhub write status --id <request-id> [--json]",
+      "memhub write --session <id> --from <round> --to <round> --evidence <id> [--evidence <id>...] [--live] [--json]",
     options: [DATA_DIR_OPTION, JSON_OPTION],
     exit_codes: [EXIT_OK, EXIT_USAGE, EXIT_FAILED],
   },
   {
     name: "task",
-    summary:
-      "兼容别名：按 request id 查询写入状态；新脚本请使用 write status。",
+    summary: "查询写入任务状态；unknown 表示结果待定，不可据此重发。",
     usage: "memhub task --id <request-id> [--json]",
     options: [DATA_DIR_OPTION, JSON_OPTION],
     exit_codes: [EXIT_OK, EXIT_USAGE, EXIT_FAILED],

memhub/apps/cli/src/command-contract.test.ts

@@ -74,12 +74,15 @@ const COMMANDS = [
   "sync",
   "progress",
   "jobs",
+  "processing",
   "models",
   "memories",
-  "profile",
   // C6 App BLOCK (25f4ecf): UI write operations that had no CLI equivalent.
   "calls",
+  "import-file",
   "notes",
+  "permission",
+  "extraction",
   "graph",
   "host",
   "recall",
@@ -90,7 +93,6 @@ const COMMANDS = [
   "uninstall",
   "upgrade",
   "delete-data",
-  "onboarding",
   "help",
   "version",
   // A6 product commands. Appended, not inserted: the catalog is a stable
@@ -257,14 +259,7 @@ describe("CLI-22 shared output contract", () => {
 
   describe("argument validation", () => {
     it("fails unknown commands without printing data or running anything", async () => {
-      for (const argv of [
-        ["unknown"],
-        ["unknown", "--help"],
-        ["--typo"],
-        ["permission", "status"],
-        ["permission", "allow"],
-        ["permission", "deny"],
-      ]) {
+      for (const argv of [["unknown"], ["unknown", "--help"], ["--typo"]]) {
         const streams = captureStreams();
         try {
           expect(await run(argv, {})).toBe(2);
@@ -305,7 +300,11 @@ describe("CLI-22 shared output contract", () => {
           `${PRODUCT} sync`,
         ],
         [
-          ["sync", "receipt", "123e4567-e89b-12d3-a456-426614174000"],
+          [
+            "sync",
+            "receipt",
+            "123e4567-e89b-12d3-a456-426614174000",
+          ],
           `${PRODUCT} sync`,
         ],
         [["sync", "pause", "--source"], `${PRODUCT} sync`],
@@ -556,11 +555,16 @@ describe("documented commands", () => {
     // Source processing is one Freeze/Thaw switch under `sync`; the obsolete
     // independent read/write `sources access` command must not return here.
     sources: ["list", "import", "receipt"],
-    jobs: ["list", "show", "start", "<pause|resume|cancel>"],
+    jobs: [
+      "list",
+      "show",
+      "start",
+      "<pause|resume|cancel>",
+    ],
     // `sync <pause|resume>` is documented as one alternation, so it is
     // checked as an entry rather than as two literal subcommands.
     sync: ["status", "<pause|resume>"],
-    memories: ["list", "show", "update", "delete"],
+    memories: ["list", "show", "plan", "apply"],
     host: ["list", "status", "install", "uninstall", "sync"],
   };
 

memhub/apps/cli/src/context-search.test.ts

@@ -342,20 +342,17 @@ describe("unified context search", () => {
     ["--limit", "1", "2"],
     ["--character-budget", "200", "300"],
     ["--timeout-ms", "100", "200"],
-  ])(
-    "rejects a repeated %s before Runtime attach",
-    async (flag, first, second) => {
-      const streams = captureStreams();
-      try {
-        expect(
-          await run(["recall", "q", flag, first, flag, second, "--json"], {}),
-        ).toBe(2);
-      } finally {
-        streams.restore();
-      }
-      expect(streams.stdout()).toBe("");
-    },
-  );
+  ])("rejects a repeated %s before Runtime attach", async (flag, first, second) => {
+    const streams = captureStreams();
+    try {
+      expect(
+        await run(["recall", "q", flag, first, flag, second, "--json"], {}),
+      ).toBe(2);
+    } finally {
+      streams.restore();
+    }
+    expect(streams.stdout()).toBe("");
+  });
 
   it("refuses malformed success bodies instead of leaking nested values", async () => {
     transport.post.mockResolvedValue({
@@ -384,101 +381,6 @@ describe("unified context search", () => {
     expect(streams.stdout()).not.toContain("must-not-print");
   });
 
-  it("counts characters as code points so an emoji hit stays grounded", async () => {
-    // Core reports used_characters with Python's len(), which counts code
-    // points: this text is 10 characters there and 12 UTF-16 units here.
-    const text = "消费保 📍 扩展 📡";
-    expect(text.length).toBe(12);
-    expect(Array.from(text).length).toBe(10);
-    transport.post.mockResolvedValue({
-      status: 200,
-      data: {
-        ...RESPONSE,
-        paths: {
-          ...RESPONSE.paths,
-          memory: {
-            ...RESPONSE.paths.memory,
-            status: "empty",
-            returned_count: 0,
-          },
-        },
-        items: [
-          {
-            ...(RESPONSE.items[0] as Record<string, unknown>),
-            messages: [
-              {
-                ...(
-                  RESPONSE.items[0] as {
-                    messages: Array<Record<string, unknown>>;
-                  }
-                ).messages[0],
-                text,
-              },
-            ],
-          },
-        ],
-        used_characters: 10,
-      },
-    });
-    const streams = captureStreams();
-    try {
-      expect(await run(["recall", "test", "--json"])).toBe(0);
-    } finally {
-      streams.restore();
-    }
-    expect(JSON.parse(streams.stdout())).toMatchObject({
-      state: "grounded",
-      used_characters: 10,
-      items: [{ kind: "raw", messages: [{ text }] }],
-    });
-  });
-
-  it("still rejects a response whose character total does not match", async () => {
-    // The same text counted as UTF-16 units is exactly what Core does not mean,
-    // so the cross-check must keep failing instead of accepting both totals.
-    const text = "消费保 📍 扩展 📡";
-    transport.post.mockResolvedValue({
-      status: 200,
-      data: {
-        ...RESPONSE,
-        paths: {
-          ...RESPONSE.paths,
-          memory: {
-            ...RESPONSE.paths.memory,
-            status: "empty",
-            returned_count: 0,
-          },
-        },
-        items: [
-          {
-            ...(RESPONSE.items[0] as Record<string, unknown>),
-            messages: [
-              {
-                ...(
-                  RESPONSE.items[0] as {
-                    messages: Array<Record<string, unknown>>;
-                  }
-                ).messages[0],
-                text,
-              },
-            ],
-          },
-        ],
-        used_characters: 12,
-      },
-    });
-    const streams = captureStreams();
-    try {
-      expect(await run(["recall", "test", "--json"])).toBe(1);
-    } finally {
-      streams.restore();
-    }
-    expect(JSON.parse(streams.stdout())).toMatchObject({
-      state: "invalid",
-      code: "response_invalid",
-    });
-  });
-
   it("reports endpoint denial without exposing the response body", async () => {
     transport.post.mockResolvedValue({
       status: 403,

memhub/apps/cli/src/context-search.ts

@@ -181,9 +181,9 @@ function validateContextResponse(
     items.push(item);
     characters +=
       item.kind === "memory"
-        ? characterCount(item.content)
+        ? String(item.content).length
         : (item.messages as Array<Record<string, unknown>>).reduce(
-            (sum, message) => sum + characterCount(message.text),
+            (sum, message) => sum + String(message.text).length,
             0,
           );
   }
@@ -330,17 +330,6 @@ function record(value: unknown): Record<string, unknown> | null {
     : null;
 }
 
-/**
- * Count characters the way Core does. Python's len() counts Unicode code
- * points; String.prototype.length counts UTF-16 code units, so an emoji outside
- * the BMP is one character to Core and two here. Comparing the two totals made
- * every response containing an emoji fail the used_characters cross-check and
- * surface as response_invalid.
- */
-function characterCount(value: unknown): number {
-  return Array.from(String(value)).length;
-}
-
 function boundedText(
   value: unknown,
   maximum: number,

memhub/apps/cli/src/core-client.ts

@@ -1,5 +1,5 @@
-import { classifyModelRemove } from "@one-memory/operations";
 import axios from "axios";
+import { classifyModelRemove } from "@one-memory/operations";
 
 /**
  * Only paths proven side-effect free by reading the Core handlers belong here.
@@ -8,6 +8,7 @@ import axios from "axios";
  */
 const READ_ONLY_PATHS = [
   "/api/v1/call-events",
+  "/api/v1/model-content-permission",
   "/api/v1/home-summary",
   "/api/v1/import-jobs",
   "/api/v1/live-sync",
@@ -16,10 +17,7 @@ const READ_ONLY_PATHS = [
   "/api/v1/memory-tasks",
   "/api/v1/model-profiles",
   "/api/v1/sources",
-  "/api/v2/memory-library",
-  "/api/v2/user-profile",
 ] as const;
-const SDK_MEMORY_DETAIL = /^\/api\/v2\/memories\/[A-Za-z0-9][\w.-]{0,127}$/;
 
 /** Contract (C0, H25): the one-time loopback code exchange for `memhub ui`.
  * It is a POST because it mints a short-lived code; the CLI sends the bearer
@@ -58,10 +56,7 @@ export function createUiSessionRequest(attachment: {
       return { state: "ok" as const, data: response.data };
     }
     if (response.status === 503) {
-      return {
-        state: "unavailable" as const,
-        code: "ui_web_assets_unavailable",
-      };
+      return { state: "unavailable" as const, code: "ui_web_assets_unavailable" };
     }
     return { state: "unavailable" as const, code: `http_${response.status}` };
   };
@@ -198,7 +193,6 @@ export function isReadOnlyPath(path: string): boolean {
   if (IMPORT_JOB.test(path)) return true;
   if (OPERATION_RECEIPT.test(path)) return true;
   if (MEMORY_MUTATION_RECEIPT.test(path)) return true;
-  if (SDK_MEMORY_DETAIL.test(path)) return true;
   if (!MEMORY_DETAIL.test(path)) return false;
   const segment = path.slice("/api/v1/memories/".length);
   return !(RESERVED_MEMORY_SEGMENTS as readonly string[]).includes(segment);
@@ -215,43 +209,6 @@ export interface MemoryWriteReceipt {
   created_at: string;
   updated_at: string;
   detail?: string;
-  raw_ids?: string[];
-  memory_ids?: string[];
-}
-
-export interface OpenAIMessage {
-  role: "user" | "assistant" | "tool";
-  content: string;
-}
-
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-
-export function parseOpenAIMessages(value: unknown): OpenAIMessage[] | null {
-  const candidate = Array.isArray(value)
-    ? value
-    : isRecord(value) && Array.isArray(value.messages)
-      ? value.messages
-      : null;
-  if (candidate === null || candidate.length < 1 || candidate.length > 200)
-    return null;
-  const messages: OpenAIMessage[] = [];
-  for (const item of candidate) {
-    if (!isRecord(item)) return null;
-    if (!["user", "assistant", "tool"].includes(String(item.role))) return null;
-    if (
-      typeof item.content !== "string" ||
-      item.content.length < 1 ||
-      item.content.length > 12_000
-    )
-      return null;
-    messages.push({
-      role: item.role as OpenAIMessage["role"],
-      content: item.content,
-    });
-  }
-  return messages.some((message) => message.role === "user") ? messages : null;
 }
 
 /** A6: submit a write through the durable entry every entry shares.
@@ -278,23 +235,19 @@ export async function submitMemoryWrite(
   attachment: RuntimeAttachmentLike,
   request: {
     session: string;
-    source: string;
-    request_id: string;
-    messages: readonly OpenAIMessage[];
-    memory_at?: string;
+    first_round: number;
+    last_round: number;
+    evidence_ids: readonly string[];
     priority?: "live" | "normal";
   },
 ): Promise<MemoryWriteReceipt> {
   const response = await axios.post<MemoryWriteReceipt>(
-    `${baseUrlOf(attachment)}/api/v2/memory-writes`,
+    `${baseUrlOf(attachment)}/api/v1/memory-writes`,
     {
-      request_id: request.request_id,
-      session_id: request.session,
-      source_id: request.source,
-      messages: [...request.messages],
-      ...(request.memory_at === undefined
-        ? {}
-        : { memory_at: request.memory_at }),
+      internal_session_id: request.session,
+      first_round: request.first_round,
+      last_round: request.last_round,
+      evidence_ids: [...request.evidence_ids],
       ...(request.priority === undefined ? {} : { priority: request.priority }),
     },
     {
@@ -425,7 +378,7 @@ export async function readMemoryWrite(
 ): Promise<MemoryWriteReceipt | null> {
   try {
     const response = await axios.get<MemoryWriteReceipt>(
-      `${baseUrlOf(attachment)}/api/v2/memory-writes/${encodeURIComponent(requestId)}`,
+      `${baseUrlOf(attachment)}/api/v1/memory-writes/${encodeURIComponent(requestId)}`,
       {
         headers: { Authorization: `Bearer ${attachment.apiToken}` },
         timeout: 10_000,
@@ -442,30 +395,15 @@ export async function readMemoryWrite(
   }
 }
 
-export interface OnboardingState {
-  status: string;
-  selected_source_ids: string[];
-  started_at: string | null;
-  completed_at: string | null;
-}
-
-/** Send onboarding back to its first-run state.
- *
- * Returns null when the endpoint is not there, so an older runtime degrades to
- * "not available" instead of failing the command. Only the completion flag
- * moves: memories, sources and settings live in other tables, which is what
- * makes this the honest way to see the cold-start screens again.
- */
-export async function resetOnboarding(
+export async function readScanRoots(
   attachment: RuntimeAttachmentLike,
-): Promise<OnboardingState | null> {
+): Promise<{ schema_version: number; revision: number; roots: unknown[] } | null> {
   try {
-    const response = await axios.post<OnboardingState>(
-      `${baseUrlOf(attachment)}/api/v1/onboarding/reset`,
-      undefined,
+    const response = await axios.get<{ schema_version: number; revision: number; roots: unknown[] }>(
+      `${baseUrlOf(attachment)}/api/v1/scan-roots`,
       {
         headers: { Authorization: `Bearer ${attachment.apiToken}` },
-        timeout: 15_000,
+        timeout: 10_000,
         proxy: false,
         maxRedirects: 0,
         maxContentLength: MAX_RESPONSE_BYTES,
@@ -477,47 +415,18 @@ export async function resetOnboarding(
   }
 }
 
-export async function readScanRoots(
-  attachment: RuntimeAttachmentLike,
-): Promise<{
-  schema_version: number;
-  revision: number;
-  roots: unknown[];
-} | null> {
-  try {
-    const response = await axios.get<{
-      schema_version: number;
-      revision: number;
-      roots: unknown[];
-    }>(`${baseUrlOf(attachment)}/api/v1/scan-roots`, {
-      headers: { Authorization: `Bearer ${attachment.apiToken}` },
-      timeout: 10_000,
-      proxy: false,
-      maxRedirects: 0,
-      maxContentLength: MAX_RESPONSE_BYTES,
-    });
-    return response.data;
-  } catch {
-    return null;
-  }
-}
-
 export async function addScanRoot(
   attachment: RuntimeAttachmentLike,
   body: { root: string; source?: string; recursive?: boolean },
 ): Promise<unknown | null> {
   try {
-    const response = await axios.post<unknown>(
-      `${baseUrlOf(attachment)}/api/v1/scan-roots`,
-      body,
-      {
-        headers: { Authorization: `Bearer ${attachment.apiToken}` },
-        timeout: 10_000,
-        proxy: false,
-        maxRedirects: 0,
-        maxContentLength: MAX_RESPONSE_BYTES,
-      },
-    );
+    const response = await axios.post<unknown>(`${baseUrlOf(attachment)}/api/v1/scan-roots`, body, {
+      headers: { Authorization: `Bearer ${attachment.apiToken}` },
+      timeout: 10_000,
+      proxy: false,
+      maxRedirects: 0,
+      maxContentLength: MAX_RESPONSE_BYTES,
+    });
     return response.data;
   } catch (error) {
     return { _error: error instanceof Error ? error.message : String(error) };
@@ -529,17 +438,14 @@ export async function removeScanRoot(
   body: { root: string },
 ): Promise<unknown | null> {
   try {
-    const response = await axios.delete<unknown>(
-      `${baseUrlOf(attachment)}/api/v1/scan-roots`,
-      {
-        headers: { Authorization: `Bearer ${attachment.apiToken}` },
-        data: body,
-        timeout: 10_000,
-        proxy: false,
-        maxRedirects: 0,
-        maxContentLength: MAX_RESPONSE_BYTES,
-      },
-    );
+    const response = await axios.delete<unknown>(`${baseUrlOf(attachment)}/api/v1/scan-roots`, {
+      headers: { Authorization: `Bearer ${attachment.apiToken}` },
+      data: body,
+      timeout: 10_000,
+      proxy: false,
+      maxRedirects: 0,
+      maxContentLength: MAX_RESPONSE_BYTES,
+    });
     return response.data;
   } catch (error) {
     return { _error: error instanceof Error ? error.message : String(error) };
@@ -550,16 +456,16 @@ export async function readAdapters(
   attachment: RuntimeAttachmentLike,
 ): Promise<{ schema_version: number; adapters: unknown[] } | null> {
   try {
-    const response = await axios.get<{
-      schema_version: number;
-      adapters: unknown[];
-    }>(`${baseUrlOf(attachment)}/api/v1/adapters`, {
-      headers: { Authorization: `Bearer ${attachment.apiToken}` },
-      timeout: 10_000,
-      proxy: false,
-      maxRedirects: 0,
-      maxContentLength: MAX_RESPONSE_BYTES,
-    });
+    const response = await axios.get<{ schema_version: number; adapters: unknown[] }>(
+      `${baseUrlOf(attachment)}/api/v1/adapters`,
+      {
+        headers: { Authorization: `Bearer ${attachment.apiToken}` },
+        timeout: 10_000,
+        proxy: false,
+        maxRedirects: 0,
+        maxContentLength: MAX_RESPONSE_BYTES,
+      },
+    );
     return response.data;
   } catch {
     return null;

memhub/apps/cli/src/core-operations.ts

@@ -6,7 +6,6 @@ const WRITE_PATHS = [
 ] as const;
 const MEMORY_WRITE_PATH =
   /^\/api\/v1\/memories(?:\/[A-Za-z0-9][\w.-]{0,127}\/(?:correct|scopes|actions\/delete))?$/;
-const SDK_MEMORY_PATH = /^\/api\/v2\/memories\/[A-Za-z0-9][\w.-]{0,127}$/;
 const MODEL_PROBE_PATH =
   /^\/api\/v1\/model-profiles\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\/probe$/;
 const MODEL_PROFILE_PATH =
@@ -31,6 +30,7 @@ const IMPORT_FILE =
 const MEMORY_NOTES_PATH = "/api/v1/memory-notes";
 const MEMORY_NOTE_PROCESS =
   /^\/api\/v1\/memory-notes\/[A-Za-z0-9][\w.:-]{0,127}\/process$/;
+const MODEL_CONTENT_PERMISSION_PATH = "/api/v1/model-content-permission";
 const EXTRACTION_SETTINGS_PATH = "/api/v1/extraction-settings";
 const GRAPH_WIDTH_PATH = "/api/v1/graph-width";
 const MANUAL_EXTRACT_PATH = "/api/v1/memory-processing/manual-extract";
@@ -134,6 +134,7 @@ export function createCoreOperations(attachment: {
         !IMPORT_FILE_COMMIT.test(path) &&
         path !== MEMORY_NOTES_PATH &&
         !MEMORY_NOTE_PROCESS.test(path) &&
+        path !== MODEL_CONTENT_PERMISSION_PATH &&
         path !== GRAPH_WIDTH_PATH &&
         path !== MANUAL_EXTRACT_PATH &&
         path !== ONBOARDING_COMPLETE_PATH &&
@@ -171,7 +172,7 @@ export function createCoreOperations(attachment: {
       body: Record<string, unknown>,
       signal?: AbortSignal,
     ) {
-      if (path !== EXTRACTION_SETTINGS_PATH && !SDK_MEMORY_PATH.test(path)) {
+      if (path !== EXTRACTION_SETTINGS_PATH) {
         throw new Error("core_operation_path_not_allowed");
       }
       let response: { status: number; data: unknown };
@@ -233,7 +234,7 @@ export function createCoreOperations(attachment: {
       };
     },
     async delete<T>(path: string, signal?: AbortSignal) {
-      if (!IMPORT_FILE.test(path) && !SDK_MEMORY_PATH.test(path)) {
+      if (!IMPORT_FILE.test(path)) {
         throw new Error("core_operation_path_not_allowed");
       }
       let response: { status: number; data: unknown };

memhub/apps/cli/src/data-deletion.test.ts

@@ -1,4 +1,4 @@
-import { mkdir, mkdtemp, readFile, stat, writeFile } from "node:fs/promises";
+import { mkdtemp, mkdir, readFile, stat, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { describe, expect, it } from "vitest";
@@ -23,22 +23,14 @@ describe("explicit data deletion", () => {
       "one-memory.sqlite3": "db",
       "runtime-service.json": "{}",
     });
-    const plan = await planDataDeletion({
-      dataDir,
-      home,
-      runtimeRunning: false,
-    });
+    const plan = await planDataDeletion({ dataDir, home, runtimeRunning: false });
     expect(plan.state).toBe("preview");
     expect(plan.entries).toContain(path.join(dataDir, "one-memory.sqlite3"));
   });
 
   it("refuses while the Runtime is still running", async () => {
     const { home, dataDir } = await homeWith();
-    const plan = await planDataDeletion({
-      dataDir,
-      home,
-      runtimeRunning: true,
-    });
+    const plan = await planDataDeletion({ dataDir, home, runtimeRunning: true });
     expect(plan).toMatchObject({
       state: "blocked",
       code: "runtime_still_running",
@@ -74,23 +66,16 @@ describe("explicit data deletion", () => {
         home,
         runtimeRunning: false,
       });
-      expect(plan).toMatchObject({
-        state: "blocked",
-        code: "data_dir_refused",
-      });
+      expect(plan).toMatchObject({ state: "blocked", code: "data_dir_refused" });
     }
   });
 
   it("requires the second confirmation to name the exact directory", async () => {
     const { home, dataDir } = await homeWith();
-    const plan = await planDataDeletion({
-      dataDir,
-      home,
-      runtimeRunning: false,
-    });
-    await expect(
-      applyDataDeletion(plan, path.join(home, "other")),
-    ).rejects.toThrow("data_deletion_confirmation_mismatch");
+    const plan = await planDataDeletion({ dataDir, home, runtimeRunning: false });
+    await expect(applyDataDeletion(plan, path.join(home, "other"))).rejects.toThrow(
+      "data_deletion_confirmation_mismatch",
+    );
     // The data survived a mismatched confirmation.
     await expect(
       stat(path.join(dataDir, "one-memory.sqlite3")),
@@ -99,11 +84,7 @@ describe("explicit data deletion", () => {
 
   it("deletes an owned Home only when both confirmations match", async () => {
     const { home, dataDir } = await homeWith({ "one-memory.sqlite3": "db" });
-    const plan = await planDataDeletion({
-      dataDir,
-      home,
-      runtimeRunning: false,
-    });
+    const plan = await planDataDeletion({ dataDir, home, runtimeRunning: false });
     const receipt = await applyDataDeletion(plan, dataDir);
     expect(receipt.state).toBe("deleted");
     await expect(stat(dataDir)).rejects.toMatchObject({ code: "ENOENT" });

memhub/apps/cli/src/doctor-report.ts

@@ -68,8 +68,7 @@ export function renderDoctorText(document: DoctorDocument): string {
   return [
     `MemHub 检查：${doctorState(document.state)}`,
     ...document.checks.map(
-      (check) =>
-        `${symbol(check.state)} ${labels[check.id]}：${checkState(check.state)}`,
+      (check) => `${symbol(check.state)} ${labels[check.id]}：${checkState(check.state)}`,
     ),
     ...(document.state === "healthy"
       ? []

memhub/apps/cli/src/entry-diagnostics.ts

@@ -28,7 +28,11 @@ export function resolveEntryDiagnostics(input: {
   // comparison would misread that as isolated and silently drop diagnostics.
   const home = resolve(input.home);
   const accountHome = resolve(input.accountHome);
-  if (home === undefined || accountHome === undefined || home === accountHome) {
+  if (
+    home === undefined ||
+    accountHome === undefined ||
+    home === accountHome
+  ) {
     return { kind: "log" };
   }
   // Isolated HOME with no explicit data dir: the fallback path would write

memhub/apps/cli/src/entry.ts

@@ -9,8 +9,8 @@ import {
   resolveRuntimeCliConfig,
 } from "@one-memory/runtime-control";
 import { run } from "./cli.js";
-import { resolveEntryDiagnostics } from "./entry-diagnostics.js";
 import { resolveDiagnosticsDataDir } from "./install-receipt.js";
+import { resolveEntryDiagnostics } from "./entry-diagnostics.js";
 
 function accountHomeDirectory(): string | undefined {
   try {

memhub/apps/cli/src/headless-flows.ts

@@ -1,12 +1,12 @@
 import { createHash, randomUUID } from "node:crypto";
-import type { ImportJob, ModelProfile } from "@one-memory/contracts";
 import {
+  ModelProfileInputError,
+  SourceImportInputError,
   buildModelProfileCreateRequest,
   buildSourceImportRequest,
-  ModelProfileInputError,
   parseModelProfileReceipt,
-  SourceImportInputError,
 } from "@one-memory/operations";
+import type { ImportJob, ModelProfile } from "@one-memory/contracts";
 import type { CoreReader, ReadOutcome } from "./core-client.js";
 import type { CoreOperations } from "./core-operations.js";
 import {
@@ -117,7 +117,9 @@ function classifySourceImport(
       product: PRODUCT,
       state: "rejected",
       operation_id: operationId,
-      code: onlyBusy ? "source_import_all_busy" : "source_import_all_rejected",
+      code: onlyBusy
+        ? "source_import_all_busy"
+        : "source_import_all_rejected",
       receipt,
     };
   }

memhub/apps/cli/src/host-flow.ts

@@ -266,9 +266,7 @@ export function renderHostText(document: HostFlowDocument): string {
       }
       if (review.length > 12) lines.push(`    … 另有 ${review.length - 12} 处`);
       lines.push("");
-      lines.push(
-        "这些不是我们安装的内容，卸载不会替你删除；需自行处理后才能卸载。",
-      );
+      lines.push("这些不是我们安装的内容，卸载不会替你删除；需自行处理后才能卸载。");
     }
   }
   return `${lines.join("\n")}\n`;

memhub/apps/cli/src/init-interactive.test.ts

@@ -259,7 +259,7 @@ describe("A2 dual-mode init", () => {
     expect(streams.value()).toContain("处理：已开启");
   });
 
-  it("continues the TTY wizard through model setup and probe", async () => {
+  it("continues the TTY wizard through model probe and content permission", async () => {
     const profileId = "22222222-2222-4222-8222-222222222222";
     const profile = {
       profile_id: profileId,
@@ -361,6 +361,12 @@ describe("A2 dual-mode init", () => {
           };
         }
         if (url.endsWith("/activate")) return { status: 200, data: profile };
+        if (url === "/api/v1/model-content-permission") {
+          return {
+            status: 200,
+            data: { allowed: body.allowed },
+          };
+        }
         if (url === "/api/v1/onboarding/complete") {
           return {
             status: 200,
@@ -377,7 +383,7 @@ describe("A2 dual-mode init", () => {
       },
     );
     const prompt = extendedPrompter(
-      ["", "", "", "", "", "", "", "n"],
+      ["", "", "", "", "", "", "", "", "n"],
       "sk-never-print-this",
     );
     const streams = captureStdout();
@@ -396,6 +402,7 @@ describe("A2 dual-mode init", () => {
       streams.restore();
     }
     expect(streams.value()).toContain("已接入来源：codex");
+    expect(prompt.written.join("\n")).toContain("模型内容外发：已允许");
     expect(streams.value()).toContain("首次设置完成。");
     expect(`${streams.value()}\n${prompt.written.join("\n")}`).not.toContain(
       "sk-never-print-this",
@@ -405,10 +412,10 @@ describe("A2 dual-mode init", () => {
       expect.objectContaining({ api_key: "sk-never-print-this" }),
       undefined,
     );
-    expect(transport.post).not.toHaveBeenCalledWith(
+    expect(transport.post).toHaveBeenCalledWith(
       "/api/v1/model-content-permission",
-      expect.anything(),
-      expect.anything(),
+      { allowed: true },
+      undefined,
     );
     expect(transport.post).toHaveBeenCalledWith(
       "/api/v1/onboarding/complete",

memhub/apps/cli/src/init-wizard.test.ts

@@ -7,9 +7,7 @@ import {
   type WizardPrompter,
 } from "./init-wizard.js";
 
-function scripted(
-  lines: string[],
-): WizardPrompter & { asked: string[]; wrote: string[] } {
+function scripted(lines: string[]): WizardPrompter & { asked: string[]; wrote: string[] } {
   let index = 0;
   const asked: string[] = [];
   const wrote: string[] = [];

memhub/apps/cli/src/init-wizard.ts

@@ -99,7 +99,8 @@ export async function runInitWizard(
     "开启处理？开启后会处理历史未完成会话并持续接收新会话；输入 n 保持冻结。[Y/n]: ",
   );
   const processing = parseYesNo(processingAnswer, true);
-  if (processing === null) return { state: "invalid", code: "invalid_answer" };
+  if (processing === null)
+    return { state: "invalid", code: "invalid_answer" };
 
   return {
     state: "answered",

memhub/apps/cli/src/install-receipt.test.ts

@@ -1,15 +1,15 @@
 import {
   mkdir,
   mkdtemp,
-  readdir,
   readFile,
+  readdir,
   rm,
   writeFile,
 } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { describe, expect, it } from "vitest";
-import { resolveEntryDiagnostics } from "./entry-diagnostics.js";
+
 import {
   defaultInstallReceiptPath,
   readInstallReceipt,
@@ -18,6 +18,7 @@ import {
   resolveInstalledDataDir,
   writeInstallReceipt,
 } from "./install-receipt.js";
+import { resolveEntryDiagnostics } from "./entry-diagnostics.js";
 
 async function root(): Promise<string> {
   return mkdtemp(path.join(tmpdir(), "memhub-install-receipt-"));
@@ -229,9 +230,9 @@ describe("managed install receipt", () => {
       }),
     ).toBe("/tmp/env data");
     // Receipt beats default.
-    expect(await resolveDiagnosticsDataDir(["install"], { HOME: home })).toBe(
-      path.join(home, "receipt data"),
-    );
+    expect(
+      await resolveDiagnosticsDataDir(["install"], { HOME: home }),
+    ).toBe(path.join(home, "receipt data"));
     // Invalid explicit flag must not silently fall back to the receipt.
     expect(
       await resolveDiagnosticsDataDir(

memhub/apps/cli/src/interactive-model-setup.test.ts

@@ -132,6 +132,12 @@ function clients(options: { failedProbes?: number } = {}) {
       if (path.endsWith("/activate")) {
         return { state: "committed" as const, data: profile(true) };
       }
+      if (path === "/api/v1/model-content-permission") {
+        return {
+          state: "committed" as const,
+          data: { allowed: body.allowed },
+        };
+      }
       return {
         state: "rejected" as const,
         code: "unexpected_path",
@@ -154,8 +160,8 @@ function clients(options: { failedProbes?: number } = {}) {
 }
 
 describe("interactive model setup", () => {
-  it("uses App defaults and keeps the key out of output", async () => {
-    const prompt = prompter(["", "", ""]);
+  it("uses App defaults, keeps the key out of output, and allows model content", async () => {
+    const prompt = prompter(["", "", "", "", "", ""]);
     const api = clients();
 
     const result = await runInteractiveModelSetup(prompt.value, api, {
@@ -164,7 +170,10 @@ describe("interactive model setup", () => {
       installHosts: false,
     });
 
-    expect(result).toMatchObject({ state: "configured" });
+    expect(result).toMatchObject({
+      state: "configured",
+      model_content_allowed: true,
+    });
     expect(api.post).toHaveBeenCalledWith(
       "/api/v1/model-profiles",
       expect.objectContaining({
@@ -175,9 +184,9 @@ describe("interactive model setup", () => {
         embedding_provider_kind: "local_onnx",
       }),
     );
-    expect(api.post).not.toHaveBeenCalledWith(
+    expect(api.post).toHaveBeenCalledWith(
       "/api/v1/model-content-permission",
-      expect.anything(),
+      { allowed: true },
     );
     expect(prompt.written.join("\n")).not.toContain("sk-do-not-print");
   });
@@ -197,7 +206,7 @@ describe("interactive model setup", () => {
   });
 
   it("removes an unverified profile before skipping after a failed probe", async () => {
-    const prompt = prompter(["", "", "", "0"]);
+    const prompt = prompter(["", "", "", "n", "0"]);
     const api = clients();
     api.post.mockImplementation(
       async (path: string, body: Record<string, unknown>) => {
@@ -272,7 +281,7 @@ describe("interactive model setup", () => {
   });
 
   it("cleans a failed probe and lets the user re-enter the model settings", async () => {
-    const prompt = prompter(["", "", "", "", "", "", ""]);
+    const prompt = prompter(["", "", "", "", "", "", "", "", "", "", ""]);
     const api = clients({ failedProbes: 1 });
 
     const result = await runInteractiveModelSetup(prompt.value, api, {
@@ -281,7 +290,10 @@ describe("interactive model setup", () => {
       installHosts: false,
     });
 
-    expect(result).toMatchObject({ state: "configured" });
+    expect(result).toMatchObject({
+      state: "configured",
+      model_content_allowed: true,
+    });
     expect(api.remove).toHaveBeenCalledTimes(1);
     expect(
       api.post.mock.calls.filter(([path]) => path === "/api/v1/model-profiles"),
@@ -294,7 +306,7 @@ describe("interactive model setup", () => {
     const prompt = prompter(["", "", ""]);
     prompt.value.ask = async () => {
       asked += 1;
-      if (asked === 3) throw new Error("interrupted");
+      if (asked === 4) throw new Error("interrupted");
       return "";
     };
     const api = clients();
@@ -311,7 +323,7 @@ describe("interactive model setup", () => {
   });
 
   it("installs selected detected hosts through preview and fingerprint apply", async () => {
-    const prompt = prompter(["", "", "", "", ""]);
+    const prompt = prompter(["", "", "", "n", "", ""]);
     const api = clients();
     const read = vi
       .fn()
@@ -349,6 +361,7 @@ describe("interactive model setup", () => {
 
     expect(result).toMatchObject({
       state: "configured",
+      model_content_allowed: false,
       installed_hosts: ["codex"],
     });
     expect(read).toHaveBeenNthCalledWith(
@@ -361,7 +374,7 @@ describe("interactive model setup", () => {
   });
 
   it("lists and installs only hosts that are actually present", async () => {
-    const prompt = prompter(["", "", "", "", ""]);
+    const prompt = prompter(["", "", "", "n", "", ""]);
     const api = clients();
     const read = vi
       .fn()
@@ -408,7 +421,7 @@ describe("interactive model setup", () => {
   });
 
   it("completes the wizard and keeps onboarding reachable when one host install fails", async () => {
-    const prompt = prompter(["", "", "", "", ""]);
+    const prompt = prompter(["", "", "", "n", "", ""]);
     const api = clients();
     const read = vi
       .fn()
@@ -457,6 +470,7 @@ describe("interactive model setup", () => {
     // calling the install a failure.
     expect(result).toMatchObject({
       state: "configured",
+      model_content_allowed: false,
       installed_hosts: ["codex"],
     });
     const summary = prompt.written.join("\n");
@@ -466,7 +480,7 @@ describe("interactive model setup", () => {
   });
 
   it("tells the user to install App-only hosts in the App instead of calling them failed", async () => {
-    const prompt = prompter(["", "", "", "", ""]);
+    const prompt = prompter(["", "", "", "n", "", ""]);
     const api = clients();
     const read = vi
       .fn()
@@ -493,6 +507,7 @@ describe("interactive model setup", () => {
     // only the App can install, so nothing counts as "installed".
     expect(result).toMatchObject({
       state: "configured",
+      model_content_allowed: false,
       installed_hosts: [],
     });
     const summary = prompt.written.join("\n");

memhub/apps/cli/src/interactive-model-setup.ts

@@ -16,6 +16,7 @@ import {
   executeModelProfileActivate,
   planModelProfileActivate,
 } from "./model-write-flows.js";
+import { setModelContentPermission } from "./model-content-permission-flow.js";
 
 type ProviderPreset = {
   id: string;
@@ -121,6 +122,7 @@ export type InteractiveModelSetupState =
   | {
       state: "configured";
       profile: ModelProfile;
+      model_content_allowed: boolean;
       installed_hosts: string[];
     }
   | { state: "skipped" }
@@ -287,11 +289,15 @@ async function installHosts(
 function writeSummary(
   prompter: WizardPrompter,
   profile: ModelProfile,
+  modelContentAllowed: boolean,
   installedHosts: readonly string[],
   failedHosts: readonly { hostId: string; label: string }[],
 ): void {
   prompter.write("配置摘要：");
   prompter.write(`  模型：${profile.name} / ${profile.model}`);
+  prompter.write(
+    `  模型内容外发：${modelContentAllowed ? "已允许" : "已禁止"}`,
+  );
   prompter.write(
     `  应用接入：${installedHosts.length > 0 ? installedHosts.join("、") : "已跳过"}`,
   );
@@ -347,6 +353,14 @@ export async function runInteractiveModelSetup(
       prompter.write("未填写 API Key。输入 back 返回，或重新选择模型服务。");
       continue;
     }
+    const permissionAnswer = (
+      await prompter.ask("允许将对话内容发送给模型以整理记忆？[Y/n]: ")
+    )
+      .trim()
+      .toLowerCase();
+    const modelContentAllowed = !["n", "no", "否", "0"].includes(
+      permissionAnswer,
+    );
     const hostApi = options.hostApi ?? { list: listHosts, read: readHost };
     const selectedHosts = options.installHosts
       ? await chooseDetectedHosts(prompter, options.hostHome, hostApi)
@@ -438,6 +452,13 @@ export async function runInteractiveModelSetup(
       return { state: "failed", code: "model_activate_failed" };
     }
 
+    const permission = await setModelContentPermission(
+      clients.operations,
+      modelContentAllowed,
+    );
+    if (permission.state !== "ok") {
+      return { state: "failed", code: "model_content_permission_set_failed" };
+    }
     const { installed, failed } = await installHosts(
       options.dataDir,
       selectedHosts,
@@ -446,6 +467,7 @@ export async function runInteractiveModelSetup(
     writeSummary(
       prompter,
       profile,
+      modelContentAllowed,
       installed,
       failed.map((hostId) => ({
         hostId,
@@ -455,6 +477,7 @@ export async function runInteractiveModelSetup(
     return {
       state: "configured",
       profile,
+      model_content_allowed: modelContentAllowed,
       installed_hosts: installed,
     };
   }

memhub/apps/cli/src/job-flow.test.ts

@@ -17,7 +17,6 @@ vi.mock("axios", () => ({
   default: { create: vi.fn(() => transport), get: vi.fn() },
 }));
 
-import type { CoreOperations } from "./core-operations.js";
 import { createCoreOperations } from "./core-operations.js";
 import {
   executeJobAction,
@@ -26,6 +25,7 @@ import {
   planJobAction,
   planJobStart,
 } from "./job-flow.js";
+import type { CoreOperations } from "./core-operations.js";
 
 function operations(
   post: (path: string, body: Record<string, unknown>) => Promise<unknown>,
@@ -180,8 +180,5 @@ describe("import-job write allow-list", () => {
     await expect(
       operations.post("/api/v1/import-jobs/job-1/delete", {}),
     ).rejects.toThrow("core_operation_path_not_allowed");
-    await expect(
-      operations.post("/api/v1/model-content-permission", { allowed: true }),
-    ).rejects.toThrow("core_operation_path_not_allowed");
   });
 });

memhub/apps/cli/src/job-flow.ts

@@ -145,7 +145,9 @@ function jobMutationResult(
 export function jobExitCode(document: JobFlowDocument): number {
   if (document.state === "preview" || document.state === "committed") return 0;
   if (document.state === "recovered") return 0;
-  return document.state === "rejected" || document.state === "unknown" ? 1 : 2;
+  return document.state === "rejected" || document.state === "unknown"
+    ? 1
+    : 2;
 }
 
 function invalid(code: string): JobFlowDocument {

memhub/apps/cli/src/jobs-command.test.ts

@@ -105,7 +105,10 @@ describe("memhub jobs", () => {
     const output = captureStdout();
     let code: number;
     try {
-      code = await run(["jobs", "start", "--source", "codex", "--json"], {});
+      code = await run(
+        ["jobs", "start", "--source", "codex", "--json"],
+        {},
+      );
     } finally {
       output.restore();
     }
@@ -151,7 +154,10 @@ describe("memhub jobs", () => {
       const output = captureStdout();
       let code: number;
       try {
-        code = await run(["jobs", action, "--job", "job-1", "--json"], {});
+        code = await run(
+          ["jobs", action, "--job", "job-1", "--json"],
+          {},
+        );
       } finally {
         output.restore();
       }

memhub/apps/cli/src/log-report.test.ts

@@ -1,4 +1,4 @@
-import { mkdtemp, rm, symlink } from "node:fs/promises";
+import { mkdtemp, rm } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { DiagnosticLogger } from "@one-memory/runtime-control";
@@ -41,15 +41,11 @@ it("redacts unsafe details and absolute stack frames from the read surface", ()
     session_id: "11111111-1111-4111-8111-111111111111",
     details: {
       count: 1,
-      reason: "/Users/me/private-query.txt",
-      status: "sk-live-secret-token",
-      source_id: "credential.private",
       prompt: "secret-token-123",
       authorization: "Bearer secret-token-123",
     } as unknown as Record<string, string | number | boolean | null>,
     safe_stack: [
       "packages/runtime-control/src/example.ts:42:7",
-      "packages/runtime/sk-live-secret-token.ts:1:1",
       "/Users/me/private.py:1",
       "C:\\Users\\me\\private.py:1",
     ],
@@ -60,8 +56,6 @@ it("redacts unsafe details and absolute stack frames from the read surface", ()
     "packages/runtime-control/src/example.ts:42:7",
   ]);
   expect(JSON.stringify(redacted)).not.toContain("secret-token-123");
-  expect(JSON.stringify(redacted)).not.toContain("sk-live-secret-token");
-  expect(JSON.stringify(redacted)).not.toContain("credential.private");
   expect(JSON.stringify(redacted)).not.toContain("/Users/me");
   expect(JSON.stringify(redacted)).not.toContain("C:\\\\Users");
 });
@@ -138,27 +132,3 @@ it("follows a newly appended event without stopping Runtime", async () => {
   });
   expect(seen).toEqual(["service.ready", "core.failed"]);
 });
-
-it("fails follow mode when the diagnostic directory is unsafe", async () => {
-  const dataDir = await mkdtemp(
-    path.join(os.tmpdir(), "om-cli-follow-unsafe-"),
-  );
-  const external = await mkdtemp(
-    path.join(os.tmpdir(), "om-cli-follow-external-"),
-  );
-  roots.push(dataDir, external);
-  await symlink(external, path.join(dataDir, "logs"));
-  const query = parseLogQuery(["--follow"]);
-  expect(query).not.toBeNull();
-  if (!query) throw new Error("query_missing");
-  await expect(
-    followLogs({
-      dataDir,
-      query,
-      signal: new AbortController().signal,
-      maxEvents: 1,
-      emit: () => undefined,
-      wait: async () => undefined,
-    }),
-  ).rejects.toThrow("log_directory_unreadable");
-});

memhub/apps/cli/src/log-report.ts

@@ -1,11 +1,7 @@
+import type { DiagnosticEventV1 } from "@one-memory/runtime-control";
+import { diagnosticLogFiles, readDiagnosticEvents } from "@one-memory/runtime-control";
 import { lstat } from "node:fs/promises";
 import path from "node:path";
-import type { DiagnosticEventV1 } from "@one-memory/runtime-control";
-import {
-  diagnosticLogFiles,
-  projectDiagnosticEventForSafeOutput,
-  readDiagnosticEvents,
-} from "@one-memory/runtime-control";
 
 export interface LogQuery {
   since?: Date;
@@ -25,6 +21,54 @@ export interface LogQuery {
 
 const ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/;
 const NAME = /^[a-z][a-z0-9]*(?:[._-][a-z0-9]+){0,15}$/;
+const SAFE_DETAIL_KEYS = new Set([
+  "action",
+  "attempt",
+  "count",
+  "method",
+  "mode",
+  "phase",
+  "platform",
+  "reason",
+  "result_count",
+  "source_id",
+  "spawned",
+  "status",
+  "version",
+  "parent_session_id",
+  "invalid_lines",
+  "truncated",
+  "runtime_state",
+  "core_state",
+  "broker_state",
+  "instance_id",
+  "open_file_count",
+  "memory_bytes",
+  "thread_count",
+  "database_error_count",
+  "file_count",
+  "sqlite_file_count",
+  "byte_file_count",
+  "total_bytes",
+  "copied_bytes",
+  "bytes_per_second",
+  "stored_count",
+  "revised_count",
+  "skipped_count",
+  "error_count",
+  "pending_count",
+  "prepared_count",
+  "queue_depth",
+  "in_flight_count",
+  "call_count",
+  "created_count",
+  "updated_count",
+  "superseded_count",
+  "deleted_count",
+  "operation_kind",
+  "file_kind",
+]);
+
 export function parseLogQuery(arguments_: readonly string[]): LogQuery | null {
   if (arguments_.filter((item) => item === "--json").length > 1) return null;
   const values: Partial<LogQuery> = { errorsOnly: false, follow: false };
@@ -116,21 +160,10 @@ export async function readLogReport(
   const logsDirectory = path.join(path.resolve(dataDir), "logs");
   const info = await lstat(logsDirectory).catch(() => null);
   if (info !== null && (!info.isDirectory() || info.isSymbolicLink())) {
-    return {
-      events: [],
-      invalid_lines: 0,
-      failure: "log_directory_unreadable",
-    };
+    return { events: [], invalid_lines: 0, failure: "log_directory_unreadable" };
   }
-  if (
-    info !== null &&
-    (await diagnosticLogFiles(dataDir).catch(() => null)) === null
-  ) {
-    return {
-      events: [],
-      invalid_lines: 0,
-      failure: "log_directory_unreadable",
-    };
+  if (info !== null && (await diagnosticLogFiles(dataDir).catch(() => null)) === null) {
+    return { events: [], invalid_lines: 0, failure: "log_directory_unreadable" };
   }
   const explicit =
     query.since ||
@@ -190,13 +223,51 @@ export function renderLogText(
   return `${lines.join("\n")}\n`;
 }
 
-/** Defence in depth for the CLI read surface. Local writers accept arbitrary
- * bounded scalar keys, so every outward read surface must reuse the same
- * field-and-value projection as the support-bundle exporter. */
+/** Defence in depth for the CLI read surface. `DiagnosticLogger` already
+ * allow-lists keys, but a future writer, a manually edited log, or a malformed
+ * line must not turn `memhub logs` into an exfiltration path. */
 export function redactDiagnosticEvent(
   event: DiagnosticEventV1,
 ): DiagnosticEventV1 {
-  return projectDiagnosticEventForSafeOutput(event);
+  const redacted: DiagnosticEventV1 = {
+    schema_version: 1,
+    timestamp: event.timestamp,
+    level: event.level,
+    service: event.service,
+    component: event.component,
+    event: event.event,
+    outcome: event.outcome,
+    session_id: event.session_id,
+    ...(event.trace_id === undefined ? {} : { trace_id: event.trace_id }),
+    ...(event.incident_id === undefined ? {} : { incident_id: event.incident_id }),
+    ...(event.instance_id === undefined ? {} : { instance_id: event.instance_id }),
+    ...(event.operation_id === undefined ? {} : { operation_id: event.operation_id }),
+    ...(event.request_id === undefined ? {} : { request_id: event.request_id }),
+    ...(event.job_id === undefined ? {} : { job_id: event.job_id }),
+    ...(event.task_id === undefined ? {} : { task_id: event.task_id }),
+    ...(event.duration_ms === undefined ? {} : { duration_ms: event.duration_ms }),
+    ...(event.state_before === undefined ? {} : { state_before: event.state_before }),
+    ...(event.state_after === undefined ? {} : { state_after: event.state_after }),
+    ...(event.error_code === undefined ? {} : { error_code: event.error_code }),
+    ...(event.error_type === undefined ? {} : { error_type: event.error_type }),
+    ...(event.safe_stack === undefined
+      ? {}
+      : {
+          safe_stack: event.safe_stack.filter(
+            (frame) =>
+              !frame.startsWith("/") &&
+              !/^[A-Za-z]:\\/.test(frame) &&
+              !frame.includes(".."),
+          ),
+        }),
+  };
+  const details = Object.fromEntries(
+    Object.entries(event.details ?? {}).filter(([key]) =>
+      SAFE_DETAIL_KEYS.has(key),
+    ),
+  );
+  if (Object.keys(details).length > 0) redacted.details = details;
+  return redacted;
 }
 
 export async function followLogs(options: {
@@ -218,7 +289,6 @@ export async function followLogs(options: {
       ...options.query,
       tail: 5_000,
     });
-    if (report.failure) throw new Error(report.failure);
     for (const event of report.events) {
       const identity = JSON.stringify(event);
       if (seen.has(identity)) continue;

memhub/apps/cli/src/managed-cli-link.test.ts

@@ -11,8 +11,9 @@ import {
 } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
-import type { CliLinkPlan } from "@one-memory/runtime-control";
 import { describe, expect, it } from "vitest";
+
+import type { CliLinkPlan } from "@one-memory/runtime-control";
 import {
   installManagedCliAlias,
   installManagedCliLink,
@@ -106,9 +107,7 @@ describe("managed memhub CLI alias", () => {
     await installManagedCliAlias(plan);
 
     await expect(removeManagedCliAlias(plan)).resolves.toBe("removed");
-    await expect(lstat(plan.link_path)).rejects.toMatchObject({
-      code: "ENOENT",
-    });
+    await expect(lstat(plan.link_path)).rejects.toMatchObject({ code: "ENOENT" });
   });
 
   // C8 P1 (2026-09-29): `runtime-control.applyLocalUninstall` deletes
@@ -157,10 +156,7 @@ describe("managed memhub CLI alias", () => {
   it("manages the one-memory companion when memhub is already present", async () => {
     if (process.platform === "win32") return;
     const f = await fixture();
-    const primary = {
-      ...f.base,
-      link_path: path.join(f.base.bin_directory, "memhub"),
-    };
+    const primary = { ...f.base, link_path: path.join(f.base.bin_directory, "memhub") };
     await mkdir(f.base.bin_directory, { recursive: true, mode: 0o700 });
     await (await import("node:fs/promises")).chmod(f.base.bin_directory, 0o700);
     await (await import("node:fs/promises")).symlink(
@@ -172,10 +168,7 @@ describe("managed memhub CLI alias", () => {
     const plan = await planManagedCliLink(f.base, "one-memory");
     // The companion does not exist yet, so it is ours to create; crucially it
     // targets the compat name, not the package's `memhub`.
-    expect(plan).toMatchObject({
-      status: "create",
-      link_path: f.base.link_path,
-    });
+    expect(plan).toMatchObject({ status: "create", link_path: f.base.link_path });
 
     // The package's memhub link is untouched.
     expect(await readlink(primary.link_path)).toBe(f.target);

memhub/apps/cli/src/managed-cli-link.ts

@@ -1,12 +1,4 @@
-import {
-  access,
-  chmod,
-  lstat,
-  mkdir,
-  readlink,
-  rm,
-  symlink,
-} from "node:fs/promises";
+import { access, chmod, lstat, mkdir, readlink, rm, symlink } from "node:fs/promises";
 import path from "node:path";
 
 import type { CliLinkPlan, CliLinkReceipt } from "@one-memory/runtime-control";

memhub/apps/cli/src/memory-flows.test.ts

@@ -0,0 +1,718 @@
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { run } from "./cli.js";
+import type { CoreReader } from "./core-client.js";
+import type { CoreOperations } from "./core-operations.js";
+import {
+  executeMemoryMutation,
+  inspectMemoryPlan,
+  memoryPlanAcceptsContent,
+  planExistingMemoryMutation,
+  planMemoryAdd,
+  readMemoryMutationReceipt,
+} from "./memory-flows.js";
+import { readMemoryDetail } from "./memory-report.js";
+
+const transport = vi.hoisted(() => ({
+  get: vi.fn(),
+  post: vi.fn(),
+  put: vi.fn(),
+  patch: vi.fn(),
+  delete: vi.fn(),
+}));
+
+vi.mock("axios", () => ({
+  default: { create: vi.fn(() => transport), get: vi.fn() },
+}));
+
+const runtime = vi.hoisted(() => ({
+  inspectRuntimeStatus: vi.fn(),
+  discoverRuntimeAttachment: vi.fn(),
+  stopRuntimeProcess: vi.fn(),
+}));
+
+vi.mock("@one-memory/runtime-control", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("@one-memory/runtime-control")>()),
+  ...runtime,
+}));
+
+const MEMORY = {
+  memory_id: "memory-1",
+  user_id: "local",
+  kind: "working",
+  status: "confirmed",
+  content: "Existing synthetic memory.",
+  scopes: ["all-apps"],
+  evidence_ids: ["evidence-1"],
+  origin: "extracted",
+  tags: ["synthetic"],
+  revision: 3,
+  created_at: "2026-09-19T00:00:00Z",
+  updated_at: "2026-09-19T00:00:01Z",
+  deleted_at: null,
+};
+
+const DETAIL = {
+  memory: MEMORY,
+  evidence: [
+    {
+      evidence_id: "evidence-1",
+      available: true,
+      source_id: "codex",
+      written_by: "person",
+      created_at: "2026-09-19T00:00:00Z",
+      verbatim: "Synthetic source text.",
+    },
+  ],
+  history: [
+    {
+      revision: 3,
+      action: "create",
+      status: "confirmed",
+      content: "Existing synthetic memory.",
+      scopes: ["all-apps"],
+      created_at: "2026-09-19T00:00:01Z",
+    },
+  ],
+  index_sync: null,
+};
+
+const ATTACHED = {
+  instanceId: "instance-1",
+  apiToken: "synthetic-runtime-token",
+  host: "127.0.0.1" as const,
+  port: 8765,
+  servicePid: 4242,
+  health: {
+    status: "ok",
+    service: "one-memory-core",
+    version: "1.2.3",
+    instance_id: "instance-1",
+  },
+};
+
+beforeEach(() => {
+  vi.clearAllMocks();
+  runtime.inspectRuntimeStatus.mockResolvedValue({
+    state: "running",
+    code: "runtime_verified",
+    instanceId: "instance-1",
+    host: "127.0.0.1",
+    port: 8765,
+    version: "1.2.3",
+  });
+  runtime.discoverRuntimeAttachment.mockResolvedValue(ATTACHED);
+  transport.get.mockImplementation(async (url: string) =>
+    url === "/api/v1/memories/memory-1"
+      ? { status: 200, data: DETAIL }
+      : { status: 404, data: {} },
+  );
+});
+
+describe("memory governance plans", () => {
+  it("plans a manual memory without putting private content in the plan", () => {
+    const result = planMemoryAdd({
+      content: "Private synthetic addition.",
+      memoryKind: "working",
+      scopes: ["all-apps"],
+      evidenceIds: ["evidence-1"],
+    });
+    expect(result.state).toBe("preview");
+    expect(JSON.stringify(result)).not.toContain("Private synthetic addition.");
+    if (result.state !== "preview") throw new Error("preview expected");
+    expect(result.plan).toMatchObject({
+      operation: "add",
+      memory_kind: "working",
+      scopes: ["all-apps"],
+      evidence_ids: ["evidence-1"],
+      content_characters: 27,
+    });
+    expect(inspectMemoryPlan(result.plan)).toMatchObject({
+      operationId: result.plan.request_id,
+      needsContent: true,
+    });
+    expect(
+      memoryPlanAcceptsContent(result.plan, "Private synthetic addition."),
+    ).toBe(true);
+    expect(memoryPlanAcceptsContent(result.plan, "Different content.")).toBe(
+      false,
+    );
+  });
+
+  it("binds correction to the current version, source, author and scopes", async () => {
+    const result = await planExistingMemoryMutation(detailReader(), {
+      operation: "correct",
+      memoryId: "memory-1",
+      content: "Corrected synthetic memory.",
+      scopes: ["codex"],
+    });
+    expect(result.state).toBe("preview");
+    if (result.state !== "preview") throw new Error("preview expected");
+    expect(result.plan).toMatchObject({
+      memory_id: "memory-1",
+      expected_revision: 3,
+      expected_status: "confirmed",
+      expected_origin: "extracted",
+      scopes: ["codex"],
+      current: {
+        revision: 3,
+        evidence: [
+          {
+            evidence_id: "evidence-1",
+            source_id: "codex",
+            written_by: "person",
+          },
+        ],
+      },
+    });
+    expect(JSON.stringify(result)).not.toContain("Corrected synthetic memory.");
+  });
+
+  it("posts a confirmed plan once and validates the bound receipt", async () => {
+    const preview = planMemoryAdd({
+      content: "Private synthetic addition.",
+      memoryKind: "working",
+      scopes: ["all-apps"],
+      evidenceIds: ["evidence-1"],
+    });
+    if (preview.state !== "preview") throw new Error("preview expected");
+    const post = vi.fn().mockResolvedValue({
+      state: "committed",
+      data: {
+        ...MEMORY,
+        memory_id: "created-1",
+        content: "Private synthetic addition.",
+        status: "confirmed",
+        origin: "manual",
+        revision: 1,
+      },
+    });
+    const result = await executeMemoryMutation(
+      preview.plan,
+      "Private synthetic addition.",
+      { post } as CoreOperations,
+    );
+    expect(result.state).toBe("committed");
+    expect(post).toHaveBeenCalledWith(
+      "/api/v1/memories",
+      expect.objectContaining({
+        request_id: preview.plan.request_id,
+        draft: expect.objectContaining({
+          origin: "manual",
+          content: "Private synthetic addition.",
+        }),
+      }),
+    );
+    expect(JSON.stringify(result)).not.toContain("Private synthetic addition.");
+  });
+
+  it("does not take a created memory that is not in effect as the add", async () => {
+    const preview = planMemoryAdd({
+      content: "Private synthetic addition.",
+      memoryKind: "working",
+      scopes: ["all-apps"],
+      evidenceIds: ["evidence-1"],
+    });
+    if (preview.state !== "preview") throw new Error("preview expected");
+    const result = await executeMemoryMutation(
+      preview.plan,
+      "Private synthetic addition.",
+      {
+        post: vi.fn().mockResolvedValue({
+          state: "committed",
+          data: {
+            ...MEMORY,
+            memory_id: "created-1",
+            content: "Private synthetic addition.",
+            status: "deleted",
+            origin: "manual",
+            revision: 1,
+          },
+        }),
+      } as CoreOperations,
+    );
+    expect(result).toMatchObject({
+      state: "unknown",
+      code: "memory_receipt_invalid",
+    });
+  });
+
+  it.each([["delete", "/actions/delete", "deleted"]] as const)(
+    "executes %s against the revision-bound action route",
+    async (operation, suffix, status) => {
+      const preview = await planExistingMemoryMutation(detailReader(), {
+        operation,
+        memoryId: "memory-1",
+      });
+      if (preview.state !== "preview") throw new Error("preview expected");
+      const post = vi.fn().mockResolvedValue({
+        state: "committed",
+        data: { ...MEMORY, status, revision: 4 },
+      });
+      const result = await executeMemoryMutation(preview.plan, undefined, {
+        post,
+      } as CoreOperations);
+      expect(result.state).toBe("committed");
+      expect(post).toHaveBeenCalledWith(`/api/v1/memories/memory-1${suffix}`, {
+        request_id: preview.plan.request_id,
+        expected_revision: 3,
+      });
+    },
+  );
+
+  it("executes correction and scope changes without changing origin", async () => {
+    for (const operation of ["correct", "scope"] as const) {
+      const content =
+        operation === "correct" ? "Corrected synthetic memory." : undefined;
+      const preview = await planExistingMemoryMutation(detailReader(), {
+        operation,
+        memoryId: "memory-1",
+        ...(content ? { content } : {}),
+        scopes: ["codex"],
+      });
+      if (preview.state !== "preview") throw new Error("preview expected");
+      const post = vi.fn().mockResolvedValue({
+        state: "committed",
+        data: {
+          ...MEMORY,
+          content: content ?? MEMORY.content,
+          scopes: ["codex"],
+          revision: 4,
+        },
+      });
+      const result = await executeMemoryMutation(preview.plan, content, {
+        post,
+      } as CoreOperations);
+      expect(result.state).toBe("committed");
+      expect(post.mock.calls[0][0]).toBe(
+        `/api/v1/memories/memory-1/${operation === "scope" ? "scopes" : "correct"}`,
+      );
+      expect(post.mock.calls[0][1]).toMatchObject({
+        request_id: preview.plan.request_id,
+        expected_revision: 3,
+        scopes: ["codex"],
+      });
+    }
+  });
+
+  it("treats a misbound HTTP 200 receipt as unknown", async () => {
+    const preview = await planExistingMemoryMutation(detailReader(), {
+      operation: "delete",
+      memoryId: "memory-1",
+    });
+    if (preview.state !== "preview") throw new Error("preview expected");
+    const result = await executeMemoryMutation(preview.plan, undefined, {
+      post: vi.fn().mockResolvedValue({
+        state: "committed",
+        data: {
+          ...MEMORY,
+          memory_id: "another-memory",
+          status: "deleted",
+          revision: 4,
+        },
+      }),
+    });
+    expect(result).toMatchObject({
+      state: "unknown",
+      code: "memory_receipt_invalid",
+      operation_id: preview.plan.request_id,
+    });
+  });
+
+  it("recovers only an exactly bound governance transaction receipt", async () => {
+    const preview = await planExistingMemoryMutation(detailReader(), {
+      operation: "delete",
+      memoryId: "memory-1",
+    });
+    if (preview.state !== "preview") throw new Error("preview expected");
+    const result = await readMemoryMutationReceipt(
+      receiptReader({
+        schema_version: 2,
+        request_id: preview.plan.request_id,
+        state: "committed",
+        operation: "delete",
+        memory_id: "memory-1",
+        result_revision: 4,
+        result_status: "deleted",
+        memory_state: "deleted",
+        migrated_from: null,
+      }),
+      preview.plan,
+    );
+    expect(result).toMatchObject({
+      state: "recovered",
+      operation_id: preview.plan.request_id,
+      receipt: {
+        operation: "delete",
+        memory_id: "memory-1",
+        result_revision: 4,
+        result_status: "deleted",
+      },
+    });
+    expect(JSON.stringify(result)).not.toContain("content_sha256");
+  });
+
+  it.each([
+    ["operation", "correct"],
+    ["memory_id", "memory-2"],
+    ["result_revision", 5],
+    ["result_status", "confirmed"],
+    ["migrated_from", "reject"],
+  ] as const)("refuses a receipt with wrong %s", async (field, wrong) => {
+    const preview = await planExistingMemoryMutation(detailReader(), {
+      operation: "delete",
+      memoryId: "memory-1",
+    });
+    if (preview.state !== "preview") throw new Error("preview expected");
+    const result = await readMemoryMutationReceipt(
+      receiptReader({
+        schema_version: 2,
+        request_id: preview.plan.request_id,
+        state: "committed",
+        operation: "delete",
+        memory_id: "memory-1",
+        result_revision: 4,
+        result_status: "deleted",
+        memory_state: "deleted",
+        migrated_from: null,
+        [field]: wrong,
+      }),
+      preview.plan,
+    );
+    expect(result).toMatchObject({
+      state: "unknown",
+      code: "memory_mutation_receipt_invalid",
+    });
+  });
+
+  it("keeps not-found, denied and unavailable lookups unresolved", async () => {
+    const preview = await planExistingMemoryMutation(detailReader(), {
+      operation: "delete",
+      memoryId: "memory-1",
+    });
+    if (preview.state !== "preview") throw new Error("preview expected");
+    const notFound = await readMemoryMutationReceipt(
+      receiptReader({
+        schema_version: 2,
+        request_id: preview.plan.request_id,
+        state: "not_found",
+        operation: null,
+        memory_id: null,
+        result_revision: null,
+        result_status: null,
+        memory_state: null,
+        migrated_from: null,
+      }),
+      preview.plan,
+    );
+    expect(notFound).toMatchObject({
+      state: "unknown",
+      code: "memory_mutation_receipt_not_found_after_attempt",
+    });
+    for (const state of ["denied", "unavailable"] as const) {
+      const result = await readMemoryMutationReceipt(
+        async () => ({ state, code: `synthetic_${state}` }),
+        preview.plan,
+      );
+      expect(result).toMatchObject({
+        state: "unknown",
+        code: `memory_mutation_receipt_synthetic_${state}`,
+      });
+    }
+  });
+
+  it("maps an add plan only to the Core create receipt", async () => {
+    const preview = planMemoryAdd({
+      content: "Private synthetic addition.",
+      memoryKind: "working",
+      scopes: ["all-apps"],
+      evidenceIds: ["evidence-1"],
+    });
+    if (preview.state !== "preview") throw new Error("preview expected");
+    const result = await readMemoryMutationReceipt(
+      receiptReader({
+        schema_version: 2,
+        request_id: preview.plan.request_id,
+        state: "committed",
+        operation: "create",
+        memory_id: "created-1",
+        result_revision: 1,
+        result_status: "confirmed",
+        memory_state: "present",
+        migrated_from: null,
+      }),
+      preview.plan,
+    );
+    expect(result).toMatchObject({
+      state: "recovered",
+      receipt: {
+        operation: "create",
+        memory_id: "created-1",
+        result_revision: 1,
+        result_status: "confirmed",
+      },
+    });
+  });
+
+  it("shows bounded history fields including scopes and status", async () => {
+    const result = await readMemoryDetail(detailReader(), "memory-1");
+    expect(result.history[0]).toMatchObject({
+      revision: 3,
+      action: "create",
+      status: "confirmed",
+      scopes: ["all-apps"],
+      content: "Existing synthetic memory.",
+    });
+  });
+});
+
+describe("memory pending fence", () => {
+  it("rejects missing confirmation and invalid plans before any write", async () => {
+    for (const argv of [
+      ["memories", "apply", "--plan-file", "/synthetic/plan", "--json"],
+      ["memories", "plan", "delete", "graph", "--json"],
+      ["memories", "plan", "delete", "memory-1", "--scope", "codex", "--json"],
+      ["memories", "plan", "confirm", "memory-1", "--json"],
+      ["memories", "plan", "reject", "memory-1", "--json"],
+      [
+        "memories",
+        "plan",
+        "add",
+        "--content-file",
+        "/synthetic/content",
+        "--scope",
+        "all-apps",
+        "--json",
+      ],
+    ]) {
+      const streams = captureStreams();
+      try {
+        expect(await run(argv)).toBe(2);
+      } finally {
+        streams.restore();
+      }
+    }
+    expect(transport.post).not.toHaveBeenCalled();
+  });
+
+  it("generates a bounded correction preview without writing", async () => {
+    const directory = await mkdtemp(
+      path.join(os.tmpdir(), "om-memory-preview-"),
+    );
+    const contentFile = path.join(directory, "content.txt");
+    await writeFile(contentFile, "Corrected synthetic memory.");
+    const streams = captureStreams();
+    try {
+      expect(
+        await run([
+          "memories",
+          "plan",
+          "correct",
+          "memory-1",
+          "--content-file",
+          contentFile,
+          "--scope",
+          "codex",
+          "--json",
+        ]),
+      ).toBe(0);
+    } finally {
+      streams.restore();
+      await rm(directory, { recursive: true, force: true });
+    }
+    const output = JSON.parse(streams.stdout());
+    expect(output).toMatchObject({
+      state: "preview",
+      plan: {
+        operation: "correct",
+        memory_id: "memory-1",
+        expected_revision: 3,
+        scopes: ["codex"],
+      },
+    });
+    expect(streams.stdout()).not.toContain("Corrected synthetic memory.");
+    expect(transport.post).not.toHaveBeenCalled();
+  });
+
+  it("checks content identity before claiming the durable fence", async () => {
+    const preview = planMemoryAdd({
+      content: "Private synthetic addition.",
+      memoryKind: "working",
+      scopes: ["all-apps"],
+      evidenceIds: ["evidence-1"],
+    });
+    if (preview.state !== "preview") throw new Error("preview expected");
+    const directory = await mkdtemp(
+      path.join(os.tmpdir(), "om-memory-content-"),
+    );
+    const planFile = path.join(directory, "plan.json");
+    const wrongFile = path.join(directory, "wrong.txt");
+    const correctFile = path.join(directory, "correct.txt");
+    await writeFile(planFile, JSON.stringify(preview));
+    await writeFile(wrongFile, "Different content.");
+    await writeFile(correctFile, "Private synthetic addition.");
+    const wrong = captureStreams();
+    try {
+      expect(
+        await run([
+          "memories",
+          "apply",
+          "--plan-file",
+          planFile,
+          "--content-file",
+          wrongFile,
+          "--confirm",
+          "--json",
+        ]),
+      ).toBe(2);
+    } finally {
+      wrong.restore();
+    }
+    transport.post.mockResolvedValue({
+      status: 200,
+      data: {
+        ...MEMORY,
+        memory_id: "created-1",
+        content: "Private synthetic addition.",
+        status: "confirmed",
+        origin: "manual",
+        revision: 1,
+      },
+    });
+    const correct = captureStreams();
+    try {
+      expect(
+        await run([
+          "memories",
+          "apply",
+          "--plan-file",
+          planFile,
+          "--content-file",
+          correctFile,
+          "--confirm",
+          "--json",
+        ]),
+      ).toBe(0);
+    } finally {
+      correct.restore();
+      await rm(directory, { recursive: true, force: true });
+    }
+    expect(transport.post).toHaveBeenCalledTimes(1);
+  });
+
+  it("recovers an unknown mutation after restart without reposting", async () => {
+    const preview = await planExistingMemoryMutation(detailReader(), {
+      operation: "delete",
+      memoryId: "memory-1",
+    });
+    if (preview.state !== "preview") throw new Error("preview expected");
+    const directory = await mkdtemp(path.join(os.tmpdir(), "om-memory-plan-"));
+    const planFile = path.join(directory, "plan.json");
+    await writeFile(planFile, JSON.stringify(preview));
+    transport.post.mockRejectedValue(new Error("synthetic disconnect"));
+    let receiptLookups = 0;
+    transport.get.mockImplementation(async (url: string) => {
+      if (url === "/api/v1/memories/memory-1") {
+        return { status: 200, data: DETAIL };
+      }
+      if (url === `/api/v1/memory-mutations/${preview.plan.request_id}`) {
+        receiptLookups += 1;
+        if (receiptLookups === 1) throw new Error("synthetic lookup outage");
+        return {
+          status: 200,
+          data: {
+            schema_version: 2,
+            request_id: preview.plan.request_id,
+            state: "committed",
+            operation: "delete",
+            memory_id: "memory-1",
+            result_revision: 4,
+            result_status: "deleted",
+            memory_state: "deleted",
+            migrated_from: null,
+          },
+        };
+      }
+      return { status: 404, data: {} };
+    });
+    const first = captureStreams();
+    try {
+      expect(
+        await run([
+          "memories",
+          "apply",
+          "--plan-file",
+          planFile,
+          "--confirm",
+          "--json",
+        ]),
+      ).toBe(1);
+    } finally {
+      first.restore();
+    }
+    expect(JSON.parse(first.stdout())).toMatchObject({
+      state: "unknown",
+      code: "memory_mutation_receipt_transport_failed",
+    });
+    const second = captureStreams();
+    try {
+      expect(
+        await run([
+          "memories",
+          "apply",
+          "--plan-file",
+          planFile,
+          "--confirm",
+          "--json",
+        ]),
+      ).toBe(0);
+    } finally {
+      second.restore();
+      await rm(directory, { recursive: true, force: true });
+    }
+    expect(JSON.parse(second.stdout())).toMatchObject({
+      state: "recovered",
+      receipt: {
+        operation: "delete",
+        memory_id: "memory-1",
+        result_revision: 4,
+        result_status: "deleted",
+      },
+    });
+    expect(transport.post).toHaveBeenCalledTimes(1);
+    expect(receiptLookups).toBe(2);
+  });
+});
+
+function captureStreams() {
+  let stdout = "";
+  let stderr = "";
+  const out = vi.spyOn(process.stdout, "write").mockImplementation((chunk) => {
+    stdout += String(chunk);
+    return true;
+  });
+  const error = vi
+    .spyOn(process.stderr, "write")
+    .mockImplementation((chunk) => {
+      stderr += String(chunk);
+      return true;
+    });
+  return {
+    stdout: () => stdout,
+    stderr: () => stderr,
+    restore: () => {
+      out.mockRestore();
+      error.mockRestore();
+    },
+  };
+}
+
+function detailReader(): CoreReader {
+  return async <T>() => ({ state: "ok", data: DETAIL as T });
+}
+
+function receiptReader(receipt: unknown): CoreReader {
+  return async <T>() => ({ state: "ok", data: receipt as T });
+}

memhub/apps/cli/src/memory-flows.ts

@@ -4,11 +4,15 @@ import {
   buildMemoryActionRequest,
   buildMemoryCorrectRequest,
   buildMemoryCreateRequest,
+  buildMemoryScopesRequest,
   parseMemoryReceipt,
 } from "@one-memory/operations";
 import type { CoreReader } from "./core-client.js";
 import type { CoreOperations } from "./core-operations.js";
-import { validateMemoryDetail } from "./core-responses.js";
+import {
+  validateGovernedMemory,
+  validateMemoryDetail,
+} from "./core-responses.js";
 import { isMemoryId } from "./memory-report.js";
 import { PRODUCT } from "./version.js";
 
@@ -19,7 +23,7 @@ const MEMORY_KINDS = [
   "schema",
   "intention",
 ] as const;
-const OPERATIONS = ["add", "correct", "delete"] as const;
+const OPERATIONS = ["add", "correct", "delete", "scope"] as const;
 const MEMORY_ORIGINS = ["extracted", "answered", "agent", "manual"] as const;
 const MUTATION_RECEIPT_KEYS = new Set([
   "schema_version",
@@ -141,12 +145,15 @@ export async function planExistingMemoryMutation(
     operation: Exclude<(typeof OPERATIONS)[number], "add">;
     memoryId: string;
     content?: string;
+    scopes?: string[];
   },
 ): Promise<MemoryFlowDocument> {
   if (
     !isMemoryId(input.memoryId) ||
     (input.operation === "correct" && input.content === undefined) ||
-    (input.content !== undefined && !validContent(input.content))
+    (input.content !== undefined && !validContent(input.content)) ||
+    ((input.operation === "scope" || input.scopes !== undefined) &&
+      !validScopes(input.scopes ?? []))
   ) {
     return invalid("memory_plan_input_invalid");
   }
@@ -169,6 +176,7 @@ export async function planExistingMemoryMutation(
     expected_revision: memory.revision,
     expected_status: memory.status,
     expected_origin: memory.origin,
+    ...(input.scopes ? { scopes: input.scopes } : {}),
     ...(input.content ? contentIdentity(input.content) : {}),
     current: {
       status: memory.status,
@@ -399,7 +407,15 @@ function operationRequest(
       plan.memory_id as string,
       plan.expected_revision as number,
       content as string,
-      undefined,
+      plan.scopes,
+      plan.request_id,
+    );
+  }
+  if (plan.operation === "scope") {
+    return buildMemoryScopesRequest(
+      plan.memory_id as string,
+      plan.expected_revision as number,
+      plan.scopes ?? [],
       plan.request_id,
     );
   }
@@ -435,7 +451,10 @@ function matchesReceipt(
     return false;
   }
   if (plan.operation === "delete" && memory.status !== "deleted") return false;
-  if (plan.operation === "correct" && memory.status !== plan.expected_status) {
+  if (
+    (plan.operation === "correct" || plan.operation === "scope") &&
+    memory.status !== plan.expected_status
+  ) {
     return false;
   }
   if (plan.operation === "correct" && memory.content !== content) return false;
@@ -471,7 +490,11 @@ function validateMutationReceipt(
       : null;
   }
   const expectedOperation =
-    plan.operation === "add" ? "create" : plan.operation;
+    plan.operation === "add"
+      ? "create"
+      : plan.operation === "scope"
+        ? "set_scopes"
+        : plan.operation;
   const expectedRevision =
     plan.operation === "add" ? 1 : (plan.expected_revision as number) + 1;
   const expectedStatus = plan.operation === "delete" ? "deleted" : "confirmed";
@@ -538,7 +561,9 @@ function validatePlan(value: unknown): MemoryMutationPlan | null {
     plan.expected_status !== "confirmed" ||
     !oneOf(plan.expected_origin, MEMORY_ORIGINS) ||
     !validCurrent(plan) ||
-    (plan.operation === "correct" && !contentFields(plan))
+    (plan.operation === "correct" && !contentFields(plan)) ||
+    ((plan.operation === "scope" || plan.scopes !== undefined) &&
+      !validScopes(plan.scopes))
   ) {
     return null;
   }

memhub/apps/cli/src/memory-receipt-contract.test.ts

@@ -17,7 +17,7 @@ const FIXTURE = JSON.parse(
     ),
     "utf8",
   ),
-) as { receipts: Record<"add" | "correct" | "delete", Receipt> };
+) as { receipts: Record<"add" | "correct" | "scope" | "delete", Receipt> };
 
 interface Receipt {
   schema_version: number;
@@ -103,8 +103,11 @@ describe("memory mutation receipt v2 from Core", () => {
     });
   });
 
-  it.each<["correct" | "delete", { content?: string }]>([
+  it.each<
+    ["correct" | "scope" | "delete", { content?: string; scopes?: string[] }]
+  >([
     ["correct", { content: "Corrected synthetic memory." }],
+    ["scope", { scopes: ["codex"] }],
     ["delete", {}],
   ])(
     "recovers %s from the receipt Core returns for it",

memhub/apps/cli/src/memory-report.ts

@@ -1,5 +1,6 @@
-import type { SdkMemoryPage, SdkMemoryRecord } from "@one-memory/contracts";
+import type { GovernedMemory } from "@one-memory/contracts";
 import { type CoreReader, RESERVED_MEMORY_SEGMENTS } from "./core-client.js";
+import { validateMemoryDetail, validateMemoryPage } from "./core-responses.js";
 import { PRODUCT } from "./version.js";
 
 /** Output budget: a long memory is shortened visibly, never dropped silently. */
@@ -46,8 +47,10 @@ export async function readMemoryPage(
     offset: query.offset,
     limit: query.limit,
   };
-  if (query.status !== undefined) parameters.statuses = query.status;
-  const outcome = await reader<unknown>("/api/v2/memory-library", parameters);
+  if (query.query !== undefined) parameters.query = query.query;
+  if (query.status !== undefined) parameters.status = query.status;
+  if (query.source !== undefined) parameters.source = query.source;
+  const outcome = await reader<unknown>("/api/v1/memory-library", parameters);
   if (outcome.state !== "ok") {
     return {
       schema_version: 1,
@@ -56,7 +59,7 @@ export async function readMemoryPage(
       memories: [],
     };
   }
-  const page = sdkMemoryPage(outcome.data);
+  const page = validateMemoryPage(outcome.data, query);
   if (page === null) {
     return {
       schema_version: 1,
@@ -65,7 +68,7 @@ export async function readMemoryPage(
       memories: [],
     };
   }
-  const items = page.memories;
+  const items = page.items;
   return {
     schema_version: 1,
     product: PRODUCT,
@@ -85,7 +88,7 @@ export async function readMemoryDetail(
   reader: CoreReader,
   memoryId: string,
 ): Promise<MemoryDetailDocument> {
-  const outcome = await reader<unknown>(`/api/v2/memories/${memoryId}`);
+  const outcome = await reader<unknown>(`/api/v1/memories/${memoryId}`);
   if (outcome.state !== "ok") {
     return {
       schema_version: 1,
@@ -95,8 +98,8 @@ export async function readMemoryDetail(
       history: [],
     };
   }
-  const memory = sdkMemory(outcome.data);
-  if (memory === null || memory.memory_id !== memoryId) {
+  const detail = validateMemoryDetail(outcome.data, memoryId);
+  if (detail === null) {
     return {
       schema_version: 1,
       product: PRODUCT,
@@ -108,9 +111,33 @@ export async function readMemoryDetail(
   return {
     schema_version: 1,
     product: PRODUCT,
-    memory: { state: "ok", ...describeMemory(memory) },
-    evidence: [],
-    history: [],
+    memory: { state: "ok", ...describeMemory(detail.memory) },
+    evidence: (detail.evidence ?? []).map((item) => {
+      const budgeted = budget(item.verbatim ?? "");
+      return {
+        evidence_id: item.evidence_id,
+        available: item.available,
+        source_id: item.source_id,
+        written_by: item.written_by,
+        created_at: item.created_at,
+        excerpt: budgeted.text,
+        excerpt_truncated: budgeted.truncated,
+        excerpt_characters: budgeted.characters,
+      };
+    }),
+    history: (detail.history ?? []).map((item) => {
+      const content = budget(item.content);
+      return {
+        revision: item.revision,
+        action: item.action,
+        status: item.status,
+        scopes: item.scopes,
+        created_at: item.created_at,
+        content: content.text,
+        content_truncated: content.truncated,
+        content_characters: content.characters,
+      };
+    }),
   };
 }
 
@@ -129,7 +156,9 @@ export function renderMemoryPageText(document: MemoryPageDocument): string {
   ];
   for (const memory of document.memories) {
     lines.push(
-      `- ${memory.memory_id}  ${memory.status}/${memory.layer}  source=${memory.source ?? "未知"}`,
+      `- ${memory.memory_id}  ${memory.status}/${memory.kind}  rev ${memory.revision}  scopes=${
+        (memory.scopes as string[]).join(",") || "无"
+      }`,
       `  ${memory.content}${memory.content_truncated ? ` …（共 ${memory.content_characters} 字）` : ""}`,
     );
   }
@@ -148,91 +177,54 @@ export function renderMemoryDetailText(document: MemoryDetailDocument): string {
   }
   const lines = [
     `记忆 ${memory.memory_id}`,
-    `状态：${memory.status}  层：${memory.layer}  来源：${memory.source ?? "未知"}`,
-    `owner：${memory.owner ?? "未知"}  latest：${memory.is_latest}`,
-    `raw IDs：${(memory.source_raw_ids as string[]).join(",") || "无"}`,
+    `状态：${memory.status}  类型：${memory.kind}  来源方式：${memory.origin}  版本：${memory.revision}`,
+    `授权范围：${(memory.scopes as string[]).join(",") || "无"}`,
+    `证据：${(memory.evidence_ids as string[]).join(",") || "无"}`,
+    `更新时间：${memory.updated_at}`,
     "",
     String(memory.content),
     memory.content_truncated ? `…（共 ${memory.content_characters} 字）` : "",
     "",
-    "SDK memory 数据不在 MemHub 中保留 Evidence/版本副本。",
+    "原文摘录：",
   ];
+  for (const item of document.evidence) {
+    lines.push(
+      `- ${item.evidence_id}  来源=${item.source_id ?? "未知"}  作者=${item.written_by ?? "未知"}  可读=${item.available}`,
+      `  ${item.excerpt}${item.excerpt_truncated ? ` …（共 ${item.excerpt_characters} 字）` : ""}`,
+    );
+  }
+  if (document.evidence.length === 0) lines.push("（无可读原文）");
+  lines.push("", "版本历史：");
+  for (const item of document.history) {
+    lines.push(
+      `- rev ${item.revision}  ${item.action}  ${item.status}  scopes=${(item.scopes as string[]).join(",")}`,
+      `  ${item.content}${item.content_truncated ? ` …（共 ${item.content_characters} 字）` : ""}`,
+    );
+  }
+  if (document.history.length === 0) lines.push("（无）");
   lines.push("");
   return lines.join("\n");
 }
 
-function describeMemory(memory: SdkMemoryRecord): Record<string, unknown> {
+function describeMemory(memory: GovernedMemory): Record<string, unknown> {
   const budgeted = budget(memory.content ?? "");
   return {
     memory_id: memory.memory_id,
     status: memory.status,
-    layer: memory.layer,
-    is_latest: memory.is_latest,
-    owner: memory.owner,
-    source: memory.source,
-    source_raw_ids: memory.source_raw_ids,
-    supersedes: memory.supersedes,
-    superseded_by: memory.superseded_by,
+    kind: memory.kind,
+    origin: memory.origin,
+    revision: memory.revision,
+    scopes: memory.scopes ?? [],
+    evidence_ids: memory.evidence_ids ?? [],
     tags: memory.tags ?? [],
-    memory_at: memory.memory_at,
-    gmt_created: memory.gmt_created,
+    created_at: memory.created_at,
+    updated_at: memory.updated_at,
     content: budgeted.text,
     content_truncated: budgeted.truncated,
     content_characters: budgeted.characters,
   };
 }
 
-function sdkMemoryPage(value: unknown): SdkMemoryPage | null {
-  if (!record(value) || !Array.isArray(value.memories)) return null;
-  const memories = value.memories.map(sdkMemory);
-  if (memories.some((item) => item === null)) return null;
-  if (!integer(value.total) || !integer(value.limit) || !integer(value.offset))
-    return null;
-  return {
-    memories: memories as SdkMemoryRecord[],
-    total: value.total,
-    limit: value.limit,
-    offset: value.offset,
-  };
-}
-
-function sdkMemory(value: unknown): SdkMemoryRecord | null {
-  if (
-    !record(value) ||
-    !text(value.memory_id) ||
-    typeof value.content !== "string" ||
-    !text(value.layer) ||
-    !text(value.status) ||
-    typeof value.is_latest !== "boolean" ||
-    !strings(value.supersedes) ||
-    !strings(value.superseded_by) ||
-    !strings(value.tags) ||
-    !strings(value.source_raw_ids) ||
-    !text(value.user_id) ||
-    !text(value.agent_id)
-  )
-    return null;
-  return value as unknown as SdkMemoryRecord;
-}
-
-function record(value: unknown): value is Record<string, unknown> {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-
-function text(value: unknown): value is string {
-  return typeof value === "string" && value.length > 0;
-}
-
-function strings(value: unknown): value is string[] {
-  return (
-    Array.isArray(value) && value.every((item) => typeof item === "string")
-  );
-}
-
-function integer(value: unknown): value is number {
-  return Number.isInteger(value) && Number(value) >= 0;
-}
-
 function budget(value: string): {
   text: string;
   truncated: boolean;

memhub/apps/cli/src/model-content-permission-cli.test.ts

@@ -0,0 +1,152 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import { run } from "./cli.js";
+
+const transport = vi.hoisted(() => ({
+  get: vi.fn(),
+  post: vi.fn(),
+  put: vi.fn(),
+  patch: vi.fn(),
+  delete: vi.fn(),
+}));
+vi.mock("axios", () => ({
+  default: { create: vi.fn(() => transport), get: vi.fn() },
+}));
+
+const runtime = vi.hoisted(() => ({
+  inspectRuntimeStatus: vi.fn(),
+  discoverRuntimeAttachment: vi.fn(),
+}));
+vi.mock("@one-memory/runtime-control", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("@one-memory/runtime-control")>()),
+  ...runtime,
+}));
+
+beforeEach(() => {
+  vi.clearAllMocks();
+  runtime.inspectRuntimeStatus.mockResolvedValue({
+    state: "running",
+    code: "runtime_verified",
+    instanceId: "instance-1",
+    host: "127.0.0.1",
+    port: 8765,
+    version: "1.2.3",
+  });
+  runtime.discoverRuntimeAttachment.mockResolvedValue({
+    instanceId: "instance-1",
+    apiToken: "synthetic-runtime-token",
+    host: "127.0.0.1",
+    port: 8765,
+    servicePid: 4242,
+    health: {
+      status: "ok",
+      service: "one-memory-core",
+      version: "1.2.3",
+      instance_id: "instance-1",
+    },
+  });
+});
+
+describe("model content permission CLI", () => {
+  it("documents only final-state permission and manual extraction commands", async () => {
+    const permission = await capturedRun(["help", "permission"]);
+    expect(permission.code).toBe(0);
+    expect(permission.stdout).toContain("memhub permission allow");
+    expect(permission.stdout).toContain("memhub permission deny");
+    expect(permission.stdout).not.toMatch(/\b(preview|confirm|process|revoke)\b/);
+    expect(permission.stdout).not.toContain("revision");
+    expect(permission.stdout).not.toContain("receipt");
+
+    const processing = await capturedRun(["help", "processing"]);
+    expect(processing.code).toBe(0);
+    expect(processing.stdout).toContain("memhub processing extract");
+    expect(processing.stdout).not.toMatch(/\b(plan|apply|receipt)\b/);
+    expect(processing.stdout).not.toContain("backlog");
+  });
+
+  it("reads the final state", async () => {
+    transport.get.mockResolvedValue({ status: 200, data: { allowed: true } });
+
+    const result = await capturedRun(["permission", "status", "--json"]);
+
+    expect(result.code).toBe(0);
+    expect(JSON.parse(result.stdout)).toMatchObject({
+      state: "ok",
+      allowed: true,
+    });
+    expect(transport.get).toHaveBeenCalledWith(
+      "/api/v1/model-content-permission",
+      undefined,
+    );
+  });
+
+  it.each([
+    ["allow", true],
+    ["deny", false],
+  ] as const)("sets %s directly with only allowed", async (verb, allowed) => {
+    transport.post.mockResolvedValue({ status: 200, data: { allowed } });
+
+    const result = await capturedRun(["permission", verb, "--json"]);
+
+    expect(result.code).toBe(0);
+    expect(JSON.parse(result.stdout)).toMatchObject({ state: "ok", allowed });
+    expect(transport.post).toHaveBeenCalledWith(
+      "/api/v1/model-content-permission",
+      { allowed },
+      undefined,
+    );
+  });
+
+  it.each(["preview", "confirm", "process", "revoke"])(
+    "rejects removed %s commands before runtime access",
+    async (verb) => {
+      const result = await capturedRun(["permission", verb, "--json"]);
+
+      expect(result.code).toBe(2);
+      expect(runtime.inspectRuntimeStatus).not.toHaveBeenCalled();
+      expect(transport.get).not.toHaveBeenCalled();
+      expect(transport.post).not.toHaveBeenCalled();
+    },
+  );
+
+  it.each(["plan", "apply", "receipt"])(
+    "rejects removed processing %s commands before runtime access",
+    async (verb) => {
+      const result = await capturedRun(["processing", verb, "--json"]);
+
+      expect(result.code).toBe(2);
+      expect(runtime.inspectRuntimeStatus).not.toHaveBeenCalled();
+      expect(transport.get).not.toHaveBeenCalled();
+      expect(transport.post).not.toHaveBeenCalled();
+    },
+  );
+});
+
+async function capturedRun(arguments_: string[]) {
+  let stdout = "";
+  let stderr = "";
+  const stdoutSpy = vi
+    .spyOn(process.stdout, "write")
+    .mockImplementation((chunk) => {
+      stdout += String(chunk);
+      return true;
+    });
+  const stderrSpy = vi
+    .spyOn(process.stderr, "write")
+    .mockImplementation((chunk) => {
+      stderr += String(chunk);
+      return true;
+    });
+  try {
+    return {
+      code: await run(arguments_, {
+        ONE_MEMORY_DATA_DIR: "/synthetic/data",
+      }),
+      stdout,
+      stderr,
+    };
+  } finally {
+    stdoutSpy.mockRestore();
+    stderrSpy.mockRestore();
+  }
+}

memhub/apps/cli/src/model-content-permission-flow.test.ts

@@ -0,0 +1,63 @@
+import { describe, expect, it, vi } from "vitest";
+
+import type { CoreReader } from "./core-client.js";
+import type { CoreOperations } from "./core-operations.js";
+import {
+  readModelContentPermission,
+  setModelContentPermission,
+} from "./model-content-permission-flow.js";
+
+describe("model content permission flow", () => {
+  it("reads the single final-state boolean", async () => {
+    const reader = vi.fn().mockResolvedValue({
+      state: "ok",
+      data: { allowed: true },
+    });
+
+    await expect(
+      readModelContentPermission(reader as CoreReader),
+    ).resolves.toMatchObject({ state: "ok", allowed: true });
+    expect(reader).toHaveBeenCalledWith("/api/v1/model-content-permission");
+  });
+
+  it.each([
+    ["allow", true],
+    ["deny", false],
+  ] as const)("sets %s directly without revision or receipt fields", async (_, allowed) => {
+    const post = vi.fn().mockResolvedValue({
+      state: "committed",
+      data: { allowed },
+    });
+
+    await expect(
+      setModelContentPermission({ post } as CoreOperations, allowed),
+    ).resolves.toMatchObject({ state: "ok", allowed });
+    expect(post).toHaveBeenCalledWith("/api/v1/model-content-permission", {
+      allowed,
+    });
+  });
+
+  it("does not accept a malformed or mismatched success response", async () => {
+    const malformed = vi.fn().mockResolvedValue({
+      state: "committed",
+      data: { allowed: true, revision: 1 },
+    });
+    await expect(
+      setModelContentPermission({ post: malformed } as CoreOperations, true),
+    ).resolves.toMatchObject({
+      state: "unknown",
+      code: "model_content_permission_response_invalid",
+    });
+
+    const mismatched = vi.fn().mockResolvedValue({
+      state: "committed",
+      data: { allowed: false },
+    });
+    await expect(
+      setModelContentPermission({ post: mismatched } as CoreOperations, true),
+    ).resolves.toMatchObject({
+      state: "unknown",
+      code: "model_content_permission_state_mismatch",
+    });
+  });
+});

memhub/apps/cli/src/model-content-permission-flow.ts

@@ -0,0 +1,93 @@
+import type { CoreReader } from "./core-client.js";
+import type { CoreOperations } from "./core-operations.js";
+import { PRODUCT } from "./version.js";
+
+export type ModelContentPermissionDocument =
+  | {
+      schema_version: 1;
+      product: string;
+      state: "ok";
+      allowed: boolean;
+    }
+  | {
+      schema_version: 1;
+      product: string;
+      state: "rejected" | "unknown";
+      code: string;
+    };
+
+export async function readModelContentPermission(
+  reader: CoreReader,
+): Promise<ModelContentPermissionDocument> {
+  const outcome = await reader<unknown>("/api/v1/model-content-permission");
+  if (outcome.state !== "ok") {
+    return failure("unknown", outcome.code);
+  }
+  return permissionState(outcome.data, "model_content_permission_response_invalid");
+}
+
+export async function setModelContentPermission(
+  operations: CoreOperations,
+  allowed: boolean,
+): Promise<ModelContentPermissionDocument> {
+  const outcome = await operations.post<unknown>(
+    "/api/v1/model-content-permission",
+    { allowed },
+  );
+  if (outcome.state === "rejected") {
+    return failure("rejected", outcome.code);
+  }
+  if (outcome.state === "unknown") {
+    return failure("unknown", outcome.code);
+  }
+  const document = permissionState(
+    outcome.data,
+    "model_content_permission_response_invalid",
+  );
+  return document.state === "ok" && document.allowed !== allowed
+    ? failure("unknown", "model_content_permission_state_mismatch")
+    : document;
+}
+
+export function modelContentPermissionExitCode(
+  document: ModelContentPermissionDocument,
+): number {
+  return document.state === "ok" ? 0 : 1;
+}
+
+export function renderModelContentPermissionText(
+  document: ModelContentPermissionDocument,
+): string {
+  if (document.state === "ok") {
+    return `模型内容外发：${document.allowed ? "允许" : "禁止"}\n`;
+  }
+  return `模型内容权限未更新：${document.state}（${document.code}）\n`;
+}
+
+function permissionState(
+  value: unknown,
+  invalidCode: string,
+): ModelContentPermissionDocument {
+  if (
+    value === null ||
+    typeof value !== "object" ||
+    Array.isArray(value) ||
+    Object.keys(value).length !== 1 ||
+    typeof (value as Record<string, unknown>).allowed !== "boolean"
+  ) {
+    return failure("unknown", invalidCode);
+  }
+  return {
+    schema_version: 1,
+    product: PRODUCT,
+    state: "ok",
+    allowed: (value as { allowed: boolean }).allowed,
+  };
+}
+
+function failure(
+  state: "rejected" | "unknown",
+  code: string,
+): ModelContentPermissionDocument {
+  return { schema_version: 1, product: PRODUCT, state, code };
+}

memhub/apps/cli/src/model-write-flows.ts

@@ -13,8 +13,8 @@
 import { createHash, randomUUID } from "node:crypto";
 import type { ModelProfile } from "@one-memory/contracts";
 import {
-  buildModelProfileUpdateRequest,
   ModelProfileInputError,
+  buildModelProfileUpdateRequest,
   parseModelProfileReceipt,
 } from "@one-memory/operations";
 import type { CoreOperations, CorePatchOperations } from "./core-operations.js";
@@ -78,10 +78,7 @@ function digestOf(value: unknown): string {
 
 function preview(
   plan:
-    | Omit<
-        Extract<ModelWritePlan, { kind: "model_profile_activate" }>,
-        "digest"
-      >
+    | Omit<Extract<ModelWritePlan, { kind: "model_profile_activate" }>, "digest">
     | Omit<Extract<ModelWritePlan, { kind: "model_profile_edit" }>, "digest">,
 ): ModelWriteDocument {
   return {
@@ -201,9 +198,9 @@ export async function executeModelProfileEdit(
   let request: ReturnType<typeof buildModelProfileUpdateRequest>;
   try {
     request = buildModelProfileUpdateRequest(plan.profile_id, {
-      ...plan.patch,
-      expected_revision: plan.expected_revision,
-      ...(apiKey === undefined ? {} : { api_key: apiKey }),
+    ...plan.patch,
+    expected_revision: plan.expected_revision,
+    ...(apiKey === undefined ? {} : { api_key: apiKey }),
     });
   } catch (error) {
     if (error instanceof ModelProfileInputError) {

memhub/apps/cli/src/package-matrix.test.ts

@@ -1,7 +1,7 @@
 import { execFile } from "node:child_process";
 import { createHash } from "node:crypto";
 import { mkdtemp, readFile, writeFile } from "node:fs/promises";
-import { homedir, tmpdir } from "node:os";
+import { tmpdir, homedir } from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
@@ -122,9 +122,7 @@ describe("package matrix harness", () => {
       process.execPath,
       [script, runtimeDist, "--stopped-commands", "--json"],
       { env: isolatedEnv },
-    ).catch((error: { stdout?: string; stderr?: string }) => {
-      throw new Error(`${error.stdout ?? ""}\n${error.stderr ?? ""}`);
-    });
+    );
     const document = JSON.parse(positive.stdout) as {
       state: string;
       commands: {
@@ -139,8 +137,8 @@ describe("package matrix harness", () => {
     };
     expect(document.state).toBe("verified");
     const results = document.commands.stopped_destructive.results;
-    // Every destructive command fails closed while Runtime is stopped.
-    expect(Object.keys(results)).toHaveLength(7);
+    // 13 destructive commands, each unknown/runtime_not_running with exit 3.
+    expect(Object.keys(results)).toHaveLength(13);
     for (const [name, result] of Object.entries(results)) {
       expect(result, `${name} did not fail closed`).toEqual({
         exit: 3,
@@ -164,7 +162,7 @@ describe("package matrix harness", () => {
     const shim = [
       "#!/usr/bin/env node",
       "const a=process.argv.slice(2);",
-      "if(['calls','notes','graph','models','memories'].includes(a[0])){",
+      "if(['calls','import-file','notes','permission','extraction','graph','models'].includes(a[0])||(a[0]==='processing'&&a[1]==='extract')){",
       '  process.stdout.write(\'{"schema_version":1,"product":"memhub","state":"committed","operation_id":"x","receipt":{}}\\n\');',
       "  process.exit(0);",
       "}",
@@ -190,7 +188,7 @@ describe("package matrix harness", () => {
     expect(failure?.state).toBe("failed");
     expect(
       failure?.failures.filter((item) => item.includes("did not fail closed")),
-    ).toHaveLength(7);
+    ).toHaveLength(13);
   });
 
   it("can require an expected bundle SHA and reports bundle metadata", {
@@ -282,17 +280,20 @@ describe("package matrix harness", () => {
   });
 
   it("rejects a catalog that declares the parent command but not the new verb", async () => {
-    // A bundle can still declare `models` while missing `models activate`.
-    // Names alone would pass it; the usage marker must not.
+    // A bundle can still declare `permission`/`models` while missing
+    // `permission allow` or `models activate`. Names alone would pass it; the
+    // usage marker must not.
     const declared = [
       "install",
       "init",
       "sources",
       "sync",
       "memories",
-      "profile",
       "calls",
+      "import-file",
       "notes",
+      "permission",
+      "extraction",
       "graph",
       "models",
       "host",
@@ -315,6 +316,7 @@ describe("package matrix harness", () => {
       "scan",
       "progress",
       "jobs",
+      "processing",
       "path",
       "adapter",
       "write",
@@ -340,11 +342,14 @@ describe("package matrix harness", () => {
       },
     };
     const failures = harness.validateCatalog(catalog);
+    expect(failures).toContain(
+      'command "permission" is missing usage "memhub permission allow"',
+    );
     expect(failures).toContain(
       'command "models" is missing usage "memhub models activate"',
     );
     expect(failures).toContain(
-      'command "memories" is missing usage "memhub memories update"',
+      'command "import-file" is missing usage "memhub import-file discard"',
     );
     expect(failures).toContain(
       'command "jobs" is missing usage "memhub jobs start"',

memhub/apps/cli/src/product-command-contract.test.ts

@@ -1,6 +1,6 @@
 import { execFileSync } from "node:child_process";
 import { existsSync } from "node:fs";
-import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
+import { mkdtemp, readFile, readdir, rm } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
@@ -146,22 +146,23 @@ describe("memhub short-command contract", () => {
     ).join("\n");
     for (const shortForm of [
       "memhub calls clear",
+      "memhub import-file upload",
+      "memhub import-file commit",
+      "memhub import-file discard",
       "memhub notes add",
       "memhub notes process",
+      "memhub permission status",
+      "memhub permission allow",
+      "memhub permission deny",
       "memhub models setup",
       "memhub models activate",
       "memhub models edit",
+      "memhub extraction set",
       "memhub graph width",
-      "memhub write submit",
-      "memhub write status",
-      "memhub memories update",
-      "memhub memories delete",
+      "memhub processing extract",
     ]) {
       expect(flattened).toContain(shortForm);
     }
-    expect(COMMANDS.some((command) => command.name === "permission")).toBe(
-      false,
-    );
   });
 
   it("ships a memhub bin entry pointing at a real bundle path", () => {

memhub/apps/cli/src/product-flows.test.ts

@@ -6,7 +6,6 @@
 
 import { describe, expect, it } from "vitest";
 
-import { parseOpenAIMessages } from "./core-client.js";
 import {
   asPlanDocument,
   describe as describePlan,
@@ -104,45 +103,26 @@ describe("unknown flags are rejected", () => {
   });
 
   it("still accepts the documented verbless scan", () => {
-    expect(parseProductCommand("scan", ["--all", "--yes"])?.plan.all).toBe(
-      true,
+    expect(parseProductCommand("scan", ["--all", "--yes"])?.plan.all).toBe(true);
+    expect(parseProductCommand("scan", ["--source", "codex"])?.plan.sourceId).toBe(
+      "codex",
     );
-    expect(
-      parseProductCommand("scan", ["--source", "codex"])?.plan.sourceId,
-    ).toBe("codex");
   });
 
   it("rejects flags that the named verb does not consume", () => {
     // These were accepted and then silently dropped. An operator who typed
     // `path remove --source codex` would believe the source filter applied.
     expect(
-      parseProductCommand("path", [
-        "remove",
-        "--root",
-        "/tmp/x",
-        "--source",
-        "codex",
-      ]),
+      parseProductCommand("path", ["remove", "--root", "/tmp/x", "--source", "codex"]),
     ).toBeNull();
     expect(
-      parseProductCommand("path", [
-        "remove",
-        "--root",
-        "/tmp/x",
-        "--no-recursive",
-      ]),
+      parseProductCommand("path", ["remove", "--root", "/tmp/x", "--no-recursive"]),
     ).toBeNull();
     expect(
       parseProductCommand("path", ["add", "--root", "/tmp/x", "--full"]),
     ).toBeNull();
     expect(
-      parseProductCommand("backup", [
-        "create",
-        "--target",
-        "/tmp/b",
-        "--source",
-        "/tmp/s",
-      ]),
+      parseProductCommand("backup", ["create", "--target", "/tmp/b", "--source", "/tmp/s"]),
     ).toBeNull();
     expect(
       parseProductCommand("backup", [
@@ -183,7 +163,9 @@ describe("unknown flags are rejected", () => {
   });
 
   it("rejects repeated boolean flags instead of treating them as idempotent", () => {
-    expect(parseProductCommand("scan", ["--all", "--all", "--yes"])).toBeNull();
+    expect(
+      parseProductCommand("scan", ["--all", "--all", "--yes"]),
+    ).toBeNull();
     expect(
       parseProductCommand("scan", ["--full", "--full", "--yes"]),
     ).toBeNull();
@@ -197,13 +179,7 @@ describe("unknown flags are rejected", () => {
       ]),
     ).toBeNull();
     expect(
-      parseProductCommand("backup", [
-        "create",
-        "--target",
-        "/tmp/a",
-        "--yes",
-        "--yes",
-      ]),
+      parseProductCommand("backup", ["create", "--target", "/tmp/a", "--yes", "--yes"]),
     ).toBeNull();
   });
 
@@ -239,12 +215,12 @@ describe("unknown flags are rejected", () => {
     ]);
     expect(parsed).not.toBeNull();
     expect(parsed?.confirmPath).toBe("/tmp/backups/a.sqlite3");
-    expect(
-      restoreConfirmationMatches("/tmp/backups/a.sqlite3", parsed?.confirmPath),
-    ).toBe(true);
-    expect(
-      restoreConfirmationMatches("/tmp/backups/a.sqlite3", undefined),
-    ).toBe(false);
+    expect(restoreConfirmationMatches("/tmp/backups/a.sqlite3", parsed?.confirmPath)).toBe(
+      true,
+    );
+    expect(restoreConfirmationMatches("/tmp/backups/a.sqlite3", undefined)).toBe(
+      false,
+    );
     expect(
       restoreConfirmationMatches(
         "/tmp/backups/a.sqlite3",
@@ -260,92 +236,93 @@ describe("unknown flags are rejected", () => {
 
 describe("write", () => {
   const base = [
-    "submit",
     "--session",
     "s1",
-    "--messages-file",
-    "/tmp/messages.json",
+    "--from",
+    "1",
+    "--to",
+    "5",
+    "--evidence",
+    "e1",
   ];
 
   it("accepts a well-formed write", () => {
     const parsed = parseWriteCommand(base);
     expect(parsed).toEqual({
-      kind: "submit",
       session: "s1",
-      source: "memhub-cli",
-      messages_file: "/tmp/messages.json",
+      first_round: 1,
+      last_round: 5,
+      evidence_ids: ["e1"],
     });
   });
 
-  it("rejects a write with no messages file", () => {
-    expect(parseWriteCommand(["submit", "--session", "s1"])).toBeNull();
-  });
-
-  it("accepts source, request identity, and RFC3339 time", () => {
+  it("rejects a write with no evidence", () => {
     expect(
-      parseWriteCommand([
-        ...base,
-        "--source",
-        "cursor",
-        "--request-id",
-        "request-1",
-        "--memory-at",
-        "2026-10-22T00:00:00+08:00",
-      ]),
-    ).toMatchObject({
-      source: "cursor",
-      request_id: "request-1",
-      memory_at: "2026-10-22T00:00:00+08:00",
-    });
-  });
-
-  it("rejects a timestamp without timezone", () => {
-    expect(
-      parseWriteCommand([...base, "--memory-at", "2026-10-22T00:00:00"]),
+      parseWriteCommand(["--session", "s1", "--from", "1", "--to", "5"]),
     ).toBeNull();
   });
 
-  it("parses status under write", () => {
-    expect(parseWriteCommand(["status", "--id", "request-1"])).toEqual({
-      kind: "status",
-      id: "request-1",
-    });
+  it("rejects a descending round range", () => {
+    expect(
+      parseWriteCommand([
+        "--session",
+        "s1",
+        "--from",
+        "5",
+        "--to",
+        "1",
+        "--evidence",
+        "e1",
+      ]),
+    ).toBeNull();
+  });
+
+  it("rejects a round starting below one", () => {
+    expect(
+      parseWriteCommand([
+        "--session",
+        "s1",
+        "--from",
+        "0",
+        "--to",
+        "5",
+        "--evidence",
+        "e1",
+      ]),
+    ).toBeNull();
+  });
+
+  it("rejects a non-integer round", () => {
+    expect(
+      parseWriteCommand([
+        "--session",
+        "s1",
+        "--from",
+        "x",
+        "--to",
+        "5",
+        "--evidence",
+        "e1",
+      ]),
+    ).toBeNull();
+  });
+
+  it("accepts several evidence ids", () => {
+    const parsed = parseWriteCommand([...base, "--evidence", "e2"]);
+    expect(parsed?.evidence_ids).toEqual(["e1", "e2"]);
   });
 
   it("marks --live as priority live", () => {
-    expect(parseWriteCommand([...base, "--live"])).toMatchObject({
-      kind: "submit",
-      priority: "live",
-    });
+    expect(parseWriteCommand([...base, "--live"])?.priority).toBe("live");
   });
 
   it("leaves priority unset by default", () => {
-    expect(parseWriteCommand(base)).not.toHaveProperty("priority");
+    expect(parseWriteCommand(base)?.priority).toBeUndefined();
   });
 
   it("rejects a repeated --json", () => {
     expect(parseWriteCommand([...base, "--json", "--json"])).toBeNull();
   });
-
-  it("validates OpenAI text messages and requires a user turn", () => {
-    expect(
-      parseOpenAIMessages({
-        messages: [
-          { role: "user", content: "Remember Tuesday." },
-          { role: "assistant", content: "Understood.", ignored: true },
-        ],
-      }),
-    ).toEqual([
-      { role: "user", content: "Remember Tuesday." },
-      { role: "assistant", content: "Understood." },
-    ]);
-    expect(
-      parseOpenAIMessages([{ role: "assistant", content: "No user turn." }]),
-    ).toBeNull();
-    expect(
-      parseOpenAIMessages([{ role: "system", content: "Hidden prompt." }]),
-    ).toBeNull();
-  });
 });
 
 describe("task", () => {
@@ -388,11 +365,7 @@ describe("path add and remove carry what the endpoint needs", () => {
   });
 
   it("distinguishes remove from add", () => {
-    const parsed = parseProductCommand("path", [
-      "remove",
-      "--root",
-      "/tmp/scanme",
-    ]);
+    const parsed = parseProductCommand("path", ["remove", "--root", "/tmp/scanme"]);
     if (parsed === null) {
       throw new Error("path remove must parse");
     }
@@ -402,12 +375,7 @@ describe("path add and remove carry what the endpoint needs", () => {
   });
 
   it("does not silently drop --yes", () => {
-    const parsed = parseProductCommand("path", [
-      "add",
-      "--root",
-      "/tmp/a",
-      "--yes",
-    ]);
+    const parsed = parseProductCommand("path", ["add", "--root", "/tmp/a", "--yes"]);
     expect(parsed?.confirmed).toBe(true);
     // Without this, a typo'd `--yes` would fall through to a plan and the user
     // would believe the change had been made.

memhub/apps/cli/src/product-flows.ts

@@ -255,73 +255,52 @@ export function restoreConfirmationMatches(
   return confirmPath === source;
 }
 
-export interface WriteSubmitCommand {
-  readonly kind: "submit";
+export interface WriteCommand {
   readonly session: string;
-  readonly source: string;
-  readonly messages_file: string;
-  readonly request_id?: string;
-  readonly memory_at?: string;
+  readonly first_round: number;
+  readonly last_round: number;
+  readonly evidence_ids: readonly string[];
   readonly priority?: "live" | "normal";
 }
 
-export interface WriteStatusCommand {
-  readonly kind: "status";
-  readonly id: string;
-}
-
-export type WriteCommand = WriteSubmitCommand | WriteStatusCommand;
-
-/** Parse SDK-native `write submit|status`. */
+/** Parse `write`. Evidence is required: no write without something to cite. */
 export function parseWriteCommand(
   args: readonly string[],
 ): WriteCommand | null {
   if (args.filter((item) => item === "--json").length > 1) return null;
-  const meaningful = args.filter((item) => item !== "--json");
-  if (meaningful[0] === "status") {
-    const status = parseTaskCommand(meaningful.slice(1));
-    return status === null ? null : { kind: "status", id: status.id };
-  }
-  const input = meaningful[0] === "submit" ? meaningful.slice(1) : meaningful;
   let session: string | undefined;
-  let source = "memhub-cli";
-  let messagesFile: string | undefined;
-  let requestId: string | undefined;
-  let memoryAt: string | undefined;
+  let first: number | undefined;
+  let last: number | undefined;
   let priority: "live" | "normal" | undefined;
+  const evidence: string[] = [];
 
-  for (let index = 0; index < input.length; index += 1) {
-    const arg = input[index];
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index];
+    if (arg === "--json") continue;
     if (arg === "--live") {
       priority = "live";
       continue;
     }
-    const value = input[index + 1];
+    const value = args[index + 1];
     if (value === undefined || value.startsWith("--")) return null;
     index += 1;
     if (arg === "--session") session = value;
-    else if (arg === "--source") source = value;
-    else if (arg === "--messages-file") messagesFile = value;
-    else if (arg === "--request-id") requestId = value;
-    else if (arg === "--memory-at") memoryAt = value;
+    else if (arg === "--from") first = Number(value);
+    else if (arg === "--to") last = Number(value);
+    else if (arg === "--evidence") evidence.push(value);
     else return null;
   }
 
-  if (session === undefined || messagesFile === undefined || !source)
+  if (session === undefined || first === undefined || last === undefined)
     return null;
-  if (
-    memoryAt !== undefined &&
-    (!Number.isFinite(Date.parse(memoryAt)) ||
-      !/(?:Z|[+-]\d\d:\d\d)$/.test(memoryAt))
-  )
-    return null;
-  const command: WriteSubmitCommand = {
-    kind: "submit",
+  if (!Number.isInteger(first) || first < 1) return null;
+  if (!Number.isInteger(last) || last < first) return null;
+  if (evidence.length === 0) return null;
+  const command: WriteCommand = {
     session,
-    source,
-    messages_file: messagesFile,
-    ...(requestId === undefined ? {} : { request_id: requestId }),
-    ...(memoryAt === undefined ? {} : { memory_at: memoryAt }),
+    first_round: first,
+    last_round: last,
+    evidence_ids: evidence,
   };
   return priority === undefined ? command : { ...command, priority };
 }

memhub/apps/cli/src/publish-manifest.test.ts

@@ -6,7 +6,10 @@ import { fileURLToPath } from "node:url";
 import { describe, expect, it } from "vitest";
 
 /** The app root (one level above this test's `src/`). */
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const root = path.resolve(
+  path.dirname(fileURLToPath(import.meta.url)),
+  "..",
+);
 const bundle = path.join(root, "dist", "one-memory.cjs");
 
 // The published npm package must be self-contained. The bundle inlines
@@ -17,10 +20,9 @@ const bundle = path.join(root, "dist", "one-memory.cjs");
 describe("publish manifest is production-safe", () => {
   it("declares no npm runtime dependency once dependencies are inlined", () => {
     // `test` builds with tsup first, so a missing bundle is a real failure.
-    expect(
-      existsSync(bundle),
-      "run `pnpm --filter @one-memory/cli build`",
-    ).toBe(true);
+    expect(existsSync(bundle), "run `pnpm --filter @one-memory/cli build`").toBe(
+      true,
+    );
     const source = readFileSync(bundle, "utf8");
     const external = [
       ...new Set(
@@ -35,24 +37,21 @@ describe("publish manifest is production-safe", () => {
       ),
     ];
     // Every one of these must be a Node builtin, i.e. no npm package.
-    const npmDeps = external.filter((name) => !builtinModules.includes(name));
+    const npmDeps = external.filter(
+      (name) => !builtinModules.includes(name),
+    );
     expect(npmDeps).toEqual([]);
   });
 
   it("strip-out rule keeps only what the bundle requires", () => {
-    expect(
-      existsSync(bundle),
-      "run `pnpm --filter @one-memory/cli build`",
-    ).toBe(true);
+    expect(existsSync(bundle), "run `pnpm --filter @one-memory/cli build`").toBe(
+      true,
+    );
     // Run the real generator, then inspect its output manifest.
     execFileSync("node", ["scripts/prepare-publish-manifest.mjs"], {
       cwd: root,
       stdio: "pipe",
-      env: {
-        ...process.env,
-        MEMHUB_NPM_PACKAGE: "@example/memhub-cli",
-        MEMHUB_NPM_VERSION: "1.0.5",
-      },
+      env: { ...process.env, MEMHUB_NPM_PACKAGE: "@example/memhub-cli" },
     });
     const published = JSON.parse(
       readFileSync(path.join(root, "dist-publish", "package.json"), "utf8"),
@@ -60,7 +59,6 @@ describe("publish manifest is production-safe", () => {
     expect(published.dependencies).toBeUndefined();
     expect(published.private).toBe(false);
     expect(published.name).toBe("@example/memhub-cli");
-    expect(published.version).toBe("1.0.5");
     expect(published.bin).toMatchObject({
       memhub: "dist/one-memory.cjs",
       "memhub-cli": "dist/one-memory.cjs",

memhub/apps/cli/src/read-only-queries.test.ts

@@ -197,9 +197,6 @@ const READ_ONLY_PATHS = [
   "/api/v1/home-summary",
   "/api/v1/memory-library",
   "/api/v1/memories/",
-  "/api/v2/memory-library",
-  "/api/v2/memories/",
-  "/api/v2/user-profile",
 ];
 
 const BACKGROUND_HEALTHY = {
@@ -565,43 +562,6 @@ describe("CLI-20 status summary", () => {
   });
 });
 
-describe("SDK user profile", () => {
-  it("prints the assembled long-term profile from the v2 endpoint", async () => {
-    transport.get.mockImplementation(async (url: string) =>
-      url === "/api/v2/user-profile"
-        ? {
-            status: 200,
-            data: {
-              request_id: "profile-request",
-              profile: {
-                memory_id: "l0-head",
-                content: "name is Alice",
-                layer: "L0_BASIC_INFO",
-                basic_info: { name: "Alice" },
-              },
-              elapsed_ms: 1.2,
-            },
-          }
-        : { status: 404, data: {} },
-    );
-    const streams = captureStreams();
-    try {
-      expect(await run(["profile", "--json"], {})).toBe(0);
-    } finally {
-      streams.restore();
-    }
-    expect(transport.get).toHaveBeenCalledWith(
-      "/api/v2/user-profile",
-      undefined,
-    );
-    expect(JSON.parse(streams.stdout())).toMatchObject({
-      schema_version: 2,
-      state: "ok",
-      profile: { memory_id: "l0-head", content: "name is Alice" },
-    });
-  });
-});
-
 describe("CLI-21 memory reads", () => {
   it("keeps memory reads open long enough for a busy Core and explains failure", async () => {
     const axios = (await import("axios")).default as unknown as {
@@ -650,14 +610,14 @@ describe("CLI-21 memory reads", () => {
 
   it("lists a page and states truthfully that more remains", async () => {
     transport.get.mockImplementation(async (url: string) => {
-      if (url !== "/api/v2/memory-library") return { status: 404, data: {} };
+      if (url !== "/api/v1/memory-library") return { status: 404, data: {} };
       return {
         status: 200,
         data: {
           total: 12,
           offset: 0,
           limit: 2,
-          memories: [memory("m1", "第一条记忆"), memory("m2", "x".repeat(400))],
+          items: [memory("m1", "第一条记忆"), memory("m2", "x".repeat(400))],
         },
       };
     });
@@ -680,8 +640,10 @@ describe("CLI-21 memory reads", () => {
     });
     expect(report.memories[0]).toMatchObject({
       memory_id: "m1",
-      status: "active",
-      layer: "L2_FACT",
+      status: "confirmed",
+      revision: 3,
+      scopes: ["all-apps"],
+      evidence_ids: ["e1"],
       content_truncated: false,
     });
     expect(report.memories[1]).toMatchObject({
@@ -696,8 +658,12 @@ describe("CLI-21 memory reads", () => {
       [
         "memories",
         "list",
+        "--query",
+        "部署",
         "--status",
-        "active",
+        "confirmed",
+        "--source",
+        "codex",
         "--offset",
         "10",
         "--limit",
@@ -706,23 +672,30 @@ describe("CLI-21 memory reads", () => {
       ],
       {},
     ).catch(() => undefined);
-    expect(transport.get).toHaveBeenCalledWith("/api/v2/memory-library", {
+    expect(transport.get).toHaveBeenCalledWith("/api/v1/memory-library", {
       params: {
-        statuses: "active",
+        query: "部署",
+        status: "confirmed",
+        source: "codex",
         offset: 10,
         limit: 5,
       },
     });
   });
 
-  it("rejects retired memory query flags before calling Core", async () => {
+  it("reads a sensitive query from a file so it stays out of shell history", async () => {
     const directory = await mkdtemp(path.join(tmpdir(), "om-cli-query-"));
     const file = path.join(directory, "query.txt");
     await writeFile(file, "机密查询\n", { mode: 0o600 });
-    expect(
-      await run(["memories", "list", "--query-file", file, "--json"], {}),
-    ).toBe(2);
-    expect(transport.get).not.toHaveBeenCalled();
+    await run(["memories", "list", "--query-file", file, "--json"], {}).catch(
+      () => undefined,
+    );
+    expect(transport.get).toHaveBeenCalledWith(
+      "/api/v1/memory-library",
+      expect.objectContaining({
+        params: expect.objectContaining({ query: "机密查询" }),
+      }),
+    );
   });
 
   it("rejects contradictory or unreadable query input before calling Core", async () => {
@@ -732,7 +705,7 @@ describe("CLI-21 memory reads", () => {
       ["memories", "list", "--limit", "0"],
       ["memories", "list", "--limit", "501"],
       ["memories", "list", "--offset", "-1"],
-      ["memories", "list", "--status", ""],
+      ["memories", "list", "--status", "unknown-status"],
       ["memories", "show"],
       ["memories"],
     ]) {
@@ -750,7 +723,7 @@ describe("CLI-21 memory reads", () => {
   it("distinguishes an empty page from a denied or missing one", async () => {
     transport.get.mockResolvedValue({
       status: 200,
-      data: { total: 0, offset: 0, limit: 100, memories: [] },
+      data: { total: 0, offset: 0, limit: 100, items: [] },
     });
     const empty = captureStreams();
     try {
@@ -790,10 +763,33 @@ describe("CLI-21 memory reads", () => {
     });
   });
 
-  it("shows one SDK memory without fabricated Evidence or versions", async () => {
+  it("shows one memory with its source, version and evidence", async () => {
     transport.get.mockResolvedValue({
       status: 200,
-      data: memory("m1", "记忆正文"),
+      data: {
+        memory: memory("m1", "记忆正文"),
+        evidence: [
+          {
+            evidence_id: "e1",
+            available: true,
+            source_id: "codex",
+            written_by: "user",
+            created_at: "T",
+            verbatim: "y".repeat(500),
+          },
+        ],
+        history: [
+          {
+            memory_id: "m1",
+            revision: 3,
+            action: "correct",
+            status: "confirmed",
+            content: "记忆正文",
+            scopes: ["all-apps"],
+            created_at: "T",
+          },
+        ],
+      },
     });
     const streams = captureStreams();
     try {
@@ -803,17 +799,28 @@ describe("CLI-21 memory reads", () => {
     }
     const report = JSON.parse(streams.stdout());
     expect(transport.get).toHaveBeenCalledWith(
-      "/api/v2/memories/m1",
+      "/api/v1/memories/m1",
       undefined,
     );
     expect(report.memory).toMatchObject({
       state: "ok",
       memory_id: "m1",
-      layer: "L2_FACT",
-      status: "active",
+      revision: 3,
+      scopes: ["all-apps"],
+    });
+    expect(report.evidence[0]).toMatchObject({
+      evidence_id: "e1",
+      source_id: "codex",
+      excerpt_truncated: true,
+      excerpt_characters: 500,
+    });
+    expect(report.history[0]).toMatchObject({
+      revision: 3,
+      action: "correct",
+      status: "confirmed",
+      scopes: ["all-apps"],
+      content: "记忆正文",
     });
-    expect(report.evidence).toEqual([]);
-    expect(report.history).toEqual([]);
   });
 
   // Core registers /api/v1/memories/graph before /{memory_id}, and that static
@@ -833,9 +840,6 @@ describe("CLI-21 memory reads", () => {
     expect(isReadOnlyPath("/api/v1/memories/graph")).toBe(false);
     expect(isReadOnlyPath("/api/v1/memories/ask")).toBe(false);
     expect(isReadOnlyPath("/api/v1/memories/m1")).toBe(true);
-    expect(isReadOnlyPath("/api/v2/memory-library")).toBe(true);
-    expect(isReadOnlyPath("/api/v2/memories/m1")).toBe(true);
-    expect(isReadOnlyPath("/api/v1/model-content-permission")).toBe(false);
     expect(
       isReadOnlyPath(
         "/api/v1/memory-mutations/123e4567-e89b-12d3-a456-426614174000",
@@ -1132,20 +1136,17 @@ function memory(id: string, content: string) {
   return {
     memory_id: id,
     user_id: "local",
-    agent_id: "one-memory",
-    layer: "L2_FACT",
-    status: "active",
-    is_latest: true,
-    supersedes: [],
-    superseded_by: [],
+    kind: "chat",
+    status: "confirmed",
     content,
+    scopes: ["all-apps"],
+    evidence_ids: ["e1"],
+    origin: "extracted",
     tags: [],
-    owner: "user",
-    source_raw_ids: ["raw-1"],
-    session_id: "s1",
-    source: "codex",
-    memory_at: null,
-    gmt_created: null,
+    revision: 3,
+    created_at: "T",
+    updated_at: "T",
+    deleted_at: null,
   };
 }
 

memhub/apps/cli/src/runtime-lock-guard.test.ts

@@ -49,9 +49,9 @@ describe("runtime service lock guard", () => {
       JSON.stringify({ pid: 4321 }),
       { mode: 0o600 },
     );
-    await expect(inspectRuntimeServiceLock(dataDir, () => false)).resolves.toBe(
-      "clear",
-    );
+    await expect(
+      inspectRuntimeServiceLock(dataDir, () => false),
+    ).resolves.toBe("clear");
   });
 
   it("fails closed on a malformed lease", async () => {