…ngle-daemon mode

- zcode detectCompaction: reuse cached getConn (was new Database per session per cycle, never closed - handle leak + memory sawtooth root cause, upstream #2); healthCheck closes probe conn
- cli/service windowsRunScript: quote nodeAbs (upstream #1) + chcp 65001 for CJK paths; vbs written UTF-16LE BOM (wscript misreads UTF-8 CJK paths as GBK)
- capture/sync: per-session content-signature watermark (adapter.changeProbe: zcode MAX(rowid) aggregate, 2 SQL/cycle; file sources mtime+size) + known-in-db guard (rebuild/forget safe) + 10-min full sweep backstop -> idle daemon CPU 7.5% -> 0.08%
- capture/watch: per-project named-pipe single-instance lock (upstream #2 instance accumulation); worker extraction; --global mode: one process adopts all registry projects dynamically

…d --global process was adopting 0 projects and idling as zombie

… projects were unreleasable (sqlite/cmd held open by this process), now auto-pruned within one sweep

…obal lock released on exit); fix ensureRegistered double-call that swallowed custom-adapter load errors (upstream wart)

…决策'); upstream wart exposed by brief quality audit

…markdown fragments / embedded JSON residue) + unresolved 14-day fade in CLI

… opts.json - upstream wart the brief's text-fallback was papering over)

- mcp adopt(): close previous project's db on switch (handle leak + EBUSY vs forget/rebuild)
- archive: days/sizeMb 0 no longer treated as unset (0-days archive-everything footgun)
- loadConfig: corrupt config.json -> readable error instead of raw stack
- forget: corrupt preview snapshot now REJECTS --yes (fail-safe optimistic lock)
- annotate_session/save --tag: re-include decision texts in meta_text (viaMeta search surface)

…assertion broke past the 30-day boundary on Sep 19) - suite is fully green (222) for the first time

…h.log - per-project logs froze forever under the global daemon, making 'watch --status' print zombie tails in non-cwd projects

- watcher: runtime 'error' events (dir deleted / overflow / AV) had no listener -> EventEmitter throw kills the whole global daemon; now degrades to the existing 1s polling fallback (self-heal)
- insertMessage: index text capped at 100KB (jieba sync tokenize of huge tool-dump messages stalled the event loop seconds); full content still stored, only FTS coverage capped
- zcode discover: cache by source-db mtime (idle cycles = 0 SQL instead of unindexed lower() table scan per worker per event)
- watch: wire the local anonymous stats counter into the daemon cycle (status panel's 'ignored 0' lied vs 34 real blocks)

… with N workers sharing one source db, projects B/C received project A's session list and ingested it as their own (cross-project contamination, live: music 42->559, novel 15->495). Key now includes project root.

…n (4th-project field report)

From a live field report (E:/mc整合包, 4th deployment, direct SQLite forensics):
- P0 decisions froze for 20+h on long-lived sessions: extraction only ran at
  confirm (idle 10min -> pending -> 6h cooldown -> confirm); continuously-worked
  sessions never completed the loop. Fix: refreshExtraction() now runs at every
  pending transition (10-min idle), decisions lag <= 10min. confirmSession reuses it.
- P1 88% of extracted decisions were workflow-subagent fragments: zcode adapter
  now tags title-matched subagent sessions with originHint='workflow' -> origin
  column -> listDecisions excludes them by default (data preserved, queries clean).
  Live: 36 sessions auto-tagged, visible decisions 82 -> 20, residue 0.
- P2 decision text hard-cut at 90 chars produced mid-sentence/trailing-bracket
  fragments: cut at nearest pause char + trim trailing closers + reject
  leading-closer fragments.

Tests: 222 -> 221 pass + 1 skipped, 0 failures.

…text (same family as annotate/save fix - confirm/refresh path was the missed third site)

…n captured twice displayed twice in briefs)

…ntence start; 最终用/最终选 stay strong (they are genuine final-choice verbs - caught by the suite)

…rmark from decisions column, O(delta) instead of O(full session)); topics/summary full rebuild stays at confirm - kills the last recurring CPU/RAM burst generator on long-lived sessions

…le/bold residue rejected); briefs read unresolved entries via q field (title-only display was a silent regression from the --json fix)

…de confirm counts were invisible in the status panel)

… and incremental decision refresh (seq-watermark idempotency); guards the mc-report root-cures against silent breakage