@gamaze/hicortex 0.22.3 → 0.23.0

package/dist/distiller.js

@@ -10,10 +10,12 @@ exports.extractConversationText = extractConversationText;
 exports.distillSession = distillSession;
 exports.isNoExtractResponse = isNoExtractResponse;
 exports.hasMinimalSubstance = hasMinimalSubstance;
+exports.isVolatileStatusEntry = isVolatileStatusEntry;
 exports.typeFromTag = typeFromTag;
 exports.parseDistilledEntries = parseDistilledEntries;
 const prompts_js_1 = require("./prompts.js");
 const redact_js_1 = require("./redact.js");
+const calibration_js_1 = require("./calibration.js");
 const MAX_TRANSCRIPT_CHARS = 80_000;
 const MIN_CONVERSATION_CHARS = 200;
 // #339 (2026-08-24 postmortem): NO_EXTRACT over-firing visibility threshold.
@@ -403,21 +405,36 @@ async function distillChunk(llm, transcript, projectName, date, onUsage) {
         console.log(`[hicortex]     topic-first check: ${offTopic}/${parsed.length} entries look actor/bracket-led (prompt may be ignored)`);
     }
     const entries = [];
-    const dropped = [];
+    const substanceDropped = [];
+    const volatileDropped = [];
     for (const entry of parsed) {
-        if (hasMinimalSubstance(entry.content)) {
-            entries.push(entry);
+        if (!hasMinimalSubstance(entry.content)) {
+            substanceDropped.push(entry.content);
+            continue;
         }
-        else {
-            dropped.push(entry.content);
+        // #489 volatility gate (owner decision 2: entry-level, deterministic,
+        // beside the substance gate — cleanMessageContent untouched): GH-ticket /
+        // version-bump / commit-state status shapes drop into the SAME #156
+        // trail (owner decision 1: mark-and-skip, never silent). Kill-switch =
+        // the release-managed calibration constant (owner decision 5).
+        if (calibration_js_1.VOLATILE_STATUS_FILTER && isVolatileStatusEntry(entry.content)) {
+            volatileDropped.push(entry.content);
+            continue;
         }
+        entries.push(entry);
     }
-    if (dropped.length > 0) {
-        for (const d of dropped) {
+    const dropped = [...substanceDropped, ...volatileDropped];
+    for (const [label, list] of [
+        ["Substance gate", substanceDropped],
+        ["Volatility gate", volatileDropped],
+    ]) {
+        if (list.length === 0)
+            continue;
+        for (const d of list) {
             const preview = d.length > 120 ? `${d.slice(0, 120)}…` : d;
-            console.log(`[hicortex]     Substance gate: dropped "${preview}"`);
+            console.log(`[hicortex]     ${label}: dropped "${preview}"`);
         }
-        console.log(`[hicortex]     Substance gate: dropped ${dropped.length}/${parsed.length} content-free fragment(s)`);
+        console.log(`[hicortex]     ${label}: dropped ${list.length}/${parsed.length} entr(ies)`);
     }
     // Parsed-zero bypass (#339 CR finding 2): a non-empty response with no
     // NO_EXTRACT token that still parses to zero bullets is the silent twin of
@@ -508,6 +525,74 @@ function hasMinimalSubstance(entry) {
         return false;
     return true;
 }
+// ---------------------------------------------------------------------------
+// Volatility gate (#489) — deterministic, entry-level, beside the substance
+// gate. Owner directive (gold-set A adjudication): GitHub ticket/workflow
+// states and version numbers churn faster than nightly consolidation retires
+// them — they arrive as supersession noise and inflate the store with
+// same-subject rows. The ephemera PROMPT already names these categories and
+// demonstrably under-fires (a month of it running, gold A still full of
+// GH-status/version rows) — so the filter is deterministic, catching entries
+// synthesized from ANY source prose.
+// ---------------------------------------------------------------------------
+/**
+ * Durability escapes — decision/policy predicates that OVERRIDE every
+ * volatility trigger (#489 spec): "switched from X to Y" is a durable model
+ * choice even though it names two versions; a version boundary is a policy
+ * even though it cites one. Whole-word, case-insensitive. Version numbers
+ * never trigger alone — version + STATUS-verb triggers; version +
+ * DECISION-verb escapes.
+ */
+const VOLATILE_ESCAPES = /\b(?:switch(?:ed)?\s+from|adopt(?:ed)?|standardi[sz]ed|deprecated|polic(?:y|ies)|rule|boundary|convention|must|never|always|only\s+when)\b/i;
+/** T1 — GH ticket/workflow status: a #number ticket + a status predicate, or
+ *  a workflow-run shape (checks/CI outcome, test-count status). */
+const TICKET_REF = /(?:^|[\s(#])(?:pr|issue|epic)?\s*#\d+/i;
+const TICKET_STATUS = /\b(?:merged?|closed?|reopened?|opened?|approved?|blocked?|failing|pass(?:ed|ing)?|green|red|ready|draft)\b/i;
+const WORKFLOW_STATUS = /\b(?:checks?\s+(?:passed|failed|green|red)|ci\s+(?:green|red)|\d+\s+tests?\s+(?:pass(?:ed|ing)?|fail(?:ed|ing)?))\b/i;
+/** T2 — version-bump status: a semver-ish number + a release verb, or a
+ *  version→version transition. The `\b` boundary keeps "Qwen3.6" (no
+ *  boundary between n and 3) from matching — model names are not versions. */
+const SEMVERISH = /\bv?\d+\.\d+(?:\.\d+)?\b/;
+const RELEASE_VERB = /\b(?:released?|deployed?|promoted?|published?|tagged?|bumped?|cut|shipped?|rolled?\s+out|dist-tags?)\b/i;
+const VERSION_TRANSITION = /\bv?\d+\.\d+(?:\.\d+)?\b[^.\d]{0,20}(?:→|->|to)\s*v?\d+\.\d+(?:\.\d+)?\b/i;
+/** T3 — branch/commit state: a short sha (7-40 hex, word-bounded) + a
+ *  vcs-motion verb. The SHA is the discriminator, so the verb list is bare
+ *  ("rebased feature branch onto 4f9c1ab" must fire); a durable narrative
+ *  carrying a sha + verb rides the escape list or the length cap. */
+const SHORT_SHA = /\b[0-9a-f]{7,40}\b/;
+const VCS_STATE = /\b(?:pushed?|merged?|rebased?|force-?pushed?|updated?)\b/i;
+/**
+ * True when the entry is a VOLATILE STATUS SHAPE — GH-ticket/workflow status,
+ * version-bump status, or branch/commit state — and carries no durability
+ * escape (#489, owner decisions 1+2). Runs in distillChunk's gate zone beside
+ * hasMinimalSubstance; drops ride the SAME #156 dropped[] trail. Also reused
+ * verbatim by `hicortex sweep-volatile` over the stored corpus — ONE gate,
+ * one meaning.
+ *
+ * PRECISION OVER RECALL (the substance gate's law, inherited): escapes are
+ * checked FIRST and override every trigger; entries longer than
+ * VOLATILE_GATE_MAX_CHARS are treated as mixed prose whose status clause is
+ * not the DOMINANT content (kept). Accepted false-positive mode, stated
+ * plainly: an entry pairing a status clause with a distinct durable clause
+ * and no escape word drops, losing the durable half — unless the distiller
+ * emitted that half as its own entry, which is exactly what the ephemera
+ * prompt tells it to do. Every drop is auditable via the trail.
+ */
+function isVolatileStatusEntry(entry) {
+    const raw = entry.trim();
+    if (!raw || raw.length > calibration_js_1.VOLATILE_GATE_MAX_CHARS)
+        return false;
+    if (VOLATILE_ESCAPES.test(raw))
+        return false;
+    const ticketStatus = TICKET_REF.test(raw) && TICKET_STATUS.test(raw);
+    const workflowStatus = WORKFLOW_STATUS.test(raw);
+    // A version number + release verb, OR a bare version→version transition
+    // (the transition fires without a verb — "0.22.2 → 0.22.3 on rc" is a
+    // version-bump status; the escape list carries the durable flips).
+    const versionBump = (SEMVERISH.test(raw) && RELEASE_VERB.test(raw)) || VERSION_TRANSITION.test(raw);
+    const commitState = SHORT_SHA.test(raw) && VCS_STATE.test(raw);
+    return ticketStatus || workflowStatus || versionBump || commitState;
+}
 /**
  * Map a single-letter type tag to the stored memory_type. Unknown/absent →
  * experience (the pre-#216 default). `[L]` is explicitly rejected →

package/dist/eval/planted-harness.js

@@ -644,7 +644,7 @@ function renderPlantedReport(args) {
         `- conflicts (guard-C): flagged ${s.conflict_flagged}, skipped ${s.conflict_skipped} ` +
         `(zone clusters + judged merges refused on a conflicts link)\n` +
         `- zone: clusters_found ${s.merges.clusters_found}, merged ${s.merges.merged_clusters}, ` +
-        `losers_merged ${s.merges.losers_merged}, metadata_skipped ${s.merges.skipped_metadata_mismatch}, ` +
+        `losers_merged ${s.merges.losers_merged}, project_skipped ${s.merges.skipped_project_mismatch}, ` +
         `conflict_skipped ${s.merges.skipped_conflict}\n` +
         `- skipped: infra ${s.skipped_infra}, idempotent ${s.skipped_idempotent}, above_ceiling ${s.skipped_above_ceiling}\n`);
     return L.join("\n");

package/dist/eval/run-eval.js

@@ -66,11 +66,9 @@ function renderDups(d) {
         `${d.pairAttribution.recoveryReingest} recovery/re-ingest-suspect (${pct(d.pairAttribution.totalPairs > 0 ? d.pairAttribution.recoveryReingest / d.pairAttribution.totalPairs : 0)}), ${d.pairAttribution.organic} organic (${pct(d.pairAttribution.totalPairs > 0 ? d.pairAttribution.organic / d.pairAttribution.totalPairs : 0)}).\n`);
     lines.push(`### Top ${d.topClusters.length} clusters (0.90 threshold, largest first)\n`);
     d.topClusters.forEach((cluster, i) => {
+        // #206 decision 2: project is the only merge-safety rail (agent rail removed).
         const mismatch = cluster.metadataMismatch;
-        const mismatchFlags = [
-            mismatch.projectMismatch ? "project" : null,
-            mismatch.sourceAgentMismatch ? "source_agent" : null,
-        ].filter(Boolean);
+        const mismatchFlags = [mismatch.projectMismatch ? "project" : null].filter(Boolean);
         lines.push(`**Cluster ${i + 1}** — size ${cluster.size}, attribution: ${cluster.attribution.recoveryReingest} recovery-pair(s) / ${cluster.attribution.organic} organic-pair(s)` +
             (mismatchFlags.length > 0 ? `, metadata mismatch: ${mismatchFlags.join(", ")}` : ", metadata consistent"));
         for (const m of cluster.members) {

package/dist/nightly.js

@@ -782,13 +782,11 @@ async function runNightly(options = {}) {
                             // #408: weakPrimaryFloor is a release-managed calibration
                             // constant now — no config threading; the Options field stays
                             // as the eval/test seam.
-                        }, {
-                        // #405: no supersessionMaxCalls — the ONE run budget is the
-                        // only call cap. #408: minSimilarity defaults to the
-                        // calibration constant (seam only).
                         }, 
                         // #405: the ONE per-run LLM-call ceiling (default 5000;
                         // consolidateMaxLlmCalls honored as a deprecated alias).
+                        // (#206-B: the retired supersession stage's options slot sat
+                        // here — removed with the stage; true-update detection is 3.8's.)
                         (0, consolidate_js_1.resolveNightlyLlmCallBudget)(savedConfig), 
                         // #245: soft cap on the corpus (default 10000; 0 disables eviction).
                         memorySoftCapResolved, {

package/dist/recall-hook-cli.js

@@ -17,6 +17,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildHookRequest = buildHookRequest;
 exports.runRecallHook = runRecallHook;
 const learnings_identity_js_1 = require("./learnings-identity.js");
+const wrapper_prompt_js_1 = require("./wrapper-prompt.js");
 const node_path_1 = require("node:path");
 const FETCH_TIMEOUT_MS = 1000;
 /** Read all of stdin (CC pipes the hook payload JSON). */
@@ -44,6 +45,15 @@ function buildHookRequest(payload, cwd = process.cwd()) {
     const prompt = typeof payload.prompt === "string" ? payload.prompt : "";
     if (!prompt)
         return null;
+    // #489: a pure plumbing payload (task-notification without a report result,
+    // command envelope, caveat, stdout echo, bare system-reminder) produces NO
+    // request at all — no HTTP call, so the 1000 ms hook budget is spent on
+    // real prompts only. A wrapper CARRYING prose (agent-message hand-back,
+    // report <result>, user text around the wrapper) recalls on the full text
+    // (owner decision 4) — the shared classifier, same function the server
+    // guards with (wrapper-prompt.ts).
+    if ((0, wrapper_prompt_js_1.isPureWrapperPrompt)(prompt))
+        return null;
     // #203 scope: derive project from the session cwd so retrieval can apply a
     // soft project-affinity boost. basename(cwd) matches capture's
     // decodeProjectDirName for non-hyphenated dirs (the common case); a hyphen

package/dist/recall-index.js

@@ -93,6 +93,7 @@ exports.handleRecallIndex = handleRecallIndex;
 exports.handleMemoryGet = handleMemoryGet;
 exports.formatMemoryGetText = formatMemoryGetText;
 const storage = __importStar(require("./storage.js"));
+const wrapper_prompt_js_1 = require("./wrapper-prompt.js");
 const type_labels_js_1 = require("./type-labels.js");
 const retrieval_js_1 = require("./retrieval.js");
 const CALIBRATION = __importStar(require("./calibration.js"));
@@ -321,6 +322,17 @@ async function handleRecallIndex(deps, body) {
         return { status: 200, body: { ok: true, reset: true } };
     }
     const prompt = typeof req.prompt === "string" ? req.prompt.trim() : "";
+    // #489 wrapper guard — the short-prompt gate's slot, BEFORE beginTurn and
+    // before any precision recording, so a pure plumbing payload (CC delivers
+    // task-notifications/command envelopes as user-role messages; any client
+    // could POST one) gets {block: null} with NO recall_pushes row, NO turn
+    // burn, NO shown_count bump, NO last_accessed refresh. The SAME shared
+    // classifier the hook client guards with (wrapper-prompt.ts) — defense in
+    // depth. A wrapper carrying real payload prose falls through and recalls on
+    // the full text, exactly today's behavior (owner decision 4).
+    if ((0, wrapper_prompt_js_1.isPureWrapperPrompt)(prompt)) {
+        return { status: 200, body: { block: null, skipped: "wrapper-prompt" } };
+    }
     const minPromptLength = deps.options?.minPromptLength ?? DEFAULT_MIN_PROMPT_LENGTH;
     if (prompt.length < minPromptLength) {
         return { status: 200, body: { block: null, skipped: "short-prompt" } };

package/dist/reconsolidation.d.ts

@@ -2,7 +2,7 @@
  * Reconsolidation (#384, #392) — the store resolves its own corrections, and
  * THE unified resolution stage.
  *
- * Nightly consolidation stage (runs as Stage 3.8, after supersession, before
+ * Nightly consolidation stage (runs as Stage 3.8, after links, before
  * decay/prune) that detects memories which correct, retract, supersede, or
  * DUPLICATE older ones; REWRITES corrected facts in place (absorbing
  * transition-only trigger memories), MERGES confirmed duplicates via the
@@ -44,8 +44,9 @@
  * planDedup and the judged mergeMemoryIds) refuse to blend a conflicts-linked
  * pair, counted as conflict_skipped. The zone therefore runs AFTER the scan —
  * with the zone first, a >=0.92 conflict pair was blended
- * before the judge ever saw it (the planted-eval harm: canonical=older, the
- * newer truth erased); running it last means verdicts/marks/binds land first
+ * before the judge ever saw it (the planted-eval harm: an unjudged blend —
+ * whichever row lost the canonical pick, its wording was simply erased);
+ * running it last means verdicts/marks/binds land first
  * and the zone merges only what no verdict claimed — a conflicts bind set by
  * this run's scan guards the SAME run's zone.
  *
@@ -94,10 +95,14 @@ export declare const RECONSOLIDATION_STAGE_LABEL = "reconsolidation";
 /**
  * Default minimum COSINE similarity for a correction candidate pair —
  * RELEASE-MANAGED since #408 (calibration.ts CORRECTION_MIN_SIMILARITY;
- * provenance there). Lower than the supersession stage's 0.80 on purpose: a
- * retraction often rides inside an otherwise unrelated memory (the field
- * failure that opened this issue), so the neighborhood gate must be a touch
- * wider while the LLM verdict + confidence gate carry the precision load.
+ * provenance there). Deliberately wide: a retraction often rides inside an
+ * otherwise unrelated memory (the field failure that opened this issue), so
+ * the neighborhood gate must be a touch wider while the LLM verdict +
+ * confidence gate carry the precision load. Since #206-B (owner decision 6)
+ * this floor also subsumes the retired Stage 3.7 supersession scan's 0.80:
+ * 3.8 is the ONLY true-update detector, scanning every new memory — no
+ * shape gate, wider floor — with `corrects`/`supersedes` partitioning what
+ * 3.7's binary prompt called a supersession.
  */
 export declare const DEFAULT_CORRECTION_MIN_SIMILARITY = 0.75;
 /**
@@ -193,7 +198,7 @@ export interface ScoutShape {
 }
 /**
  * Build the constrained correction-shape prompt (classify-tier cost profile:
- * 1500-char truncation, supersession/verdict precedent). The wording asks for
+ *  1500-char truncation, verdict-prompt precedent). The wording asks for
  * the OLD claim's distinctive terms — the field-failure mechanism is that a
  * correction CONTAINS the words of what it corrects, even when the surrounding
  * topics (and therefore the embedding cosine) are unrelated. Guard-C extends
@@ -204,13 +209,14 @@ export declare function buildScoutShapePrompt(content: string): string;
 /**
  * Parse the scout shape reply. Null on unparseable JSON, a missing/non-boolean
  * `correction`, or a missing/out-of-range `confidence` — the caller counts
- * skipped_infra and moves on (parseSupersessionReply discipline: never
+ * skipped_infra and moves on (the retired supersession stage's parse
+ * discipline, kept: never
  * mis-detect on ambiguity). `references` is lenient (missing/non-string → "")
  * because an empty string simply yields no FTS hits — a harmless miss, not a
  * mis-judgment.
  */
 export declare function parseScoutShape(reply: string): ScoutShape | null;
-/** Build the constrained pair-verdict prompt (1500-char truncation, supersession precedent). */
+/** Build the constrained pair-verdict prompt (1500-char truncation). */
 export declare function buildCorrectionVerdictPrompt(oldContent: string, newContent: string): string;
 export interface CorrectionVerdict {
     action: ResolutionAction;
@@ -219,7 +225,7 @@ export interface CorrectionVerdict {
 /**
  * Parse the pair verdict. Null on anything unparseable, unknown action, or an
  * out-of-range/missing confidence — the caller counts skipped_infra and moves
- * on (same discipline as parseSupersessionReply: never mis-judge on ambiguity).
+ * on (the same never-mis-judge-on-ambiguity discipline).
  */
 export declare function parseCorrectionVerdict(reply: string): CorrectionVerdict | null;
 export interface RewriteTriggerDisposition {

package/dist/reconsolidation.js

@@ -3,7 +3,7 @@
  * Reconsolidation (#384, #392) — the store resolves its own corrections, and
  * THE unified resolution stage.
  *
- * Nightly consolidation stage (runs as Stage 3.8, after supersession, before
+ * Nightly consolidation stage (runs as Stage 3.8, after links, before
  * decay/prune) that detects memories which correct, retract, supersede, or
  * DUPLICATE older ones; REWRITES corrected facts in place (absorbing
  * transition-only trigger memories), MERGES confirmed duplicates via the
@@ -45,8 +45,9 @@
  * planDedup and the judged mergeMemoryIds) refuse to blend a conflicts-linked
  * pair, counted as conflict_skipped. The zone therefore runs AFTER the scan —
  * with the zone first, a >=0.92 conflict pair was blended
- * before the judge ever saw it (the planted-eval harm: canonical=older, the
- * newer truth erased); running it last means verdicts/marks/binds land first
+ * before the judge ever saw it (the planted-eval harm: an unjudged blend —
+ * whichever row lost the canonical pick, its wording was simply erased);
+ * running it last means verdicts/marks/binds land first
  * and the zone merges only what no verdict claimed — a conflicts bind set by
  * this run's scan guards the SAME run's zone.
  *
@@ -154,10 +155,14 @@ exports.RECONSOLIDATION_STAGE_LABEL = "reconsolidation";
 /**
  * Default minimum COSINE similarity for a correction candidate pair —
  * RELEASE-MANAGED since #408 (calibration.ts CORRECTION_MIN_SIMILARITY;
- * provenance there). Lower than the supersession stage's 0.80 on purpose: a
- * retraction often rides inside an otherwise unrelated memory (the field
- * failure that opened this issue), so the neighborhood gate must be a touch
- * wider while the LLM verdict + confidence gate carry the precision load.
+ * provenance there). Deliberately wide: a retraction often rides inside an
+ * otherwise unrelated memory (the field failure that opened this issue), so
+ * the neighborhood gate must be a touch wider while the LLM verdict +
+ * confidence gate carry the precision load. Since #206-B (owner decision 6)
+ * this floor also subsumes the retired Stage 3.7 supersession scan's 0.80:
+ * 3.8 is the ONLY true-update detector, scanning every new memory — no
+ * shape gate, wider floor — with `corrects`/`supersedes` partitioning what
+ * 3.7's binary prompt called a supersession.
  */
 exports.DEFAULT_CORRECTION_MIN_SIMILARITY = CALIBRATION.CORRECTION_MIN_SIMILARITY;
 /**
@@ -167,11 +172,12 @@ exports.DEFAULT_CORRECTION_MIN_SIMILARITY = CALIBRATION.CORRECTION_MIN_SIMILARIT
  * weak rewrite is corruption.
  */
 exports.DEFAULT_CORRECTION_REWRITE_MIN_CONFIDENCE = CALIBRATION.CORRECTION_REWRITE_MIN_CONFIDENCE;
-/** Neighbor pool size before older/similarity filtering narrows to top 5 (supersession mirror). */
+/** Neighbor pool size before older/similarity filtering narrows to top 5
+ *  (formerly the supersession stage's constants — 3.8 inherited the shape). */
 const CORRECTION_NEIGHBOR_POOL = 15;
-/** Older-neighbor pairs kept per candidate after filtering (supersession mirror). */
+/** Older-neighbor pairs kept per candidate after filtering. */
 const CORRECTION_NEIGHBOR_TOP_K = 5;
-/** Content truncation for prompts (classify-tier cost profile; supersession precedent). */
+/** Content truncation for prompts (classify-tier cost profile). */
 const PROMPT_TRUNCATE_CHARS = 1500;
 /** Head of the old content quoted in the provenance footer. */
 exports.FOOTER_HEAD_MAX_CHARS = 160;
@@ -214,7 +220,7 @@ function nowIso() {
 }
 /**
  * Build the constrained correction-shape prompt (classify-tier cost profile:
- * 1500-char truncation, supersession/verdict precedent). The wording asks for
+ *  1500-char truncation, verdict-prompt precedent). The wording asks for
  * the OLD claim's distinctive terms — the field-failure mechanism is that a
  * correction CONTAINS the words of what it corrects, even when the surrounding
  * topics (and therefore the embedding cosine) are unrelated. Guard-C extends
@@ -237,7 +243,8 @@ function buildScoutShapePrompt(content) {
 /**
  * Parse the scout shape reply. Null on unparseable JSON, a missing/non-boolean
  * `correction`, or a missing/out-of-range `confidence` — the caller counts
- * skipped_infra and moves on (parseSupersessionReply discipline: never
+ * skipped_infra and moves on (the retired supersession stage's parse
+ * discipline, kept: never
  * mis-detect on ambiguity). `references` is lenient (missing/non-string → "")
  * because an empty string simply yields no FTS hits — a harmless miss, not a
  * mis-judgment.
@@ -264,7 +271,7 @@ function parseScoutShape(reply) {
     const references = typeof obj.references === "string" ? obj.references : "";
     return { correction: obj.correction, references: references.trim(), confidence };
 }
-/** Build the constrained pair-verdict prompt (1500-char truncation, supersession precedent). */
+/** Build the constrained pair-verdict prompt (1500-char truncation). */
 function buildCorrectionVerdictPrompt(oldContent, newContent) {
     const trunc = (s) => (s.length > PROMPT_TRUNCATE_CHARS ? `${s.slice(0, PROMPT_TRUNCATE_CHARS)}…` : s);
     return (`You are checking how a NEWER memory relates to an OLDER one in an AI agent's long-term memory.\n\n` +
@@ -287,7 +294,7 @@ function buildCorrectionVerdictPrompt(oldContent, newContent) {
 /**
  * Parse the pair verdict. Null on anything unparseable, unknown action, or an
  * out-of-range/missing confidence — the caller counts skipped_infra and moves
- * on (same discipline as parseSupersessionReply: never mis-judge on ambiguity).
+ * on (the same never-mis-judge-on-ambiguity discipline).
  */
 function parseCorrectionVerdict(reply) {
     if (!reply)
@@ -558,8 +565,8 @@ function accumulateBandStat(cumulative, run) {
     cumulative.none += run.none;
     cumulative.merge_below_gate += run.merge_below_gate;
     cumulative.conf_sum += run.conf_sum;
-    if (run.metadata_skipped !== undefined) {
-        cumulative.metadata_skipped = (cumulative.metadata_skipped ?? 0) + run.metadata_skipped;
+    if (run.project_skipped !== undefined) {
+        cumulative.project_skipped = (cumulative.project_skipped ?? 0) + run.project_skipped;
     }
 }
 /**
@@ -715,7 +722,9 @@ async function stageReconsolidation(db, llm, budget, embedFn, dryRun, stateDir,
     // re-detect). Once the backlog drains, pairs_reevaluated reads 0.
     const prevScannedRowid = (0, state_js_1.loadState)(stateDir).reconsolidationScannedRowid ?? startCursor;
     let scannedRowidHighwater = startCursor;
-    // NO shape filter (AC2) — unlike stageSupersession. Absorbed rows are
+    // NO shape filter (AC2) — also why 3.8 subsumes the retired Stage 3.7
+    // supersession scan (its shape gate would miss exactly these pairs).
+    // Absorbed rows are
     // excluded: they are invisible to recall and must not re-enter judgment.
     const rows = db
         .prepare(`SELECT rowid AS __rowid, * FROM memories
@@ -739,7 +748,7 @@ async function stageReconsolidation(db, llm, budget, embedFn, dryRun, stateDir,
     let explicitDivergent = 0;
     let mergeBelowGate = 0;
     let skippedAboveCeiling = 0;
-    let skippedMetadataMismatch = 0;
+    let skippedProjectMismatch = 0;
     let mergePairsApplied = 0;
     // #393 guard-C: conflicts verdicts rendered (link written, both live) and
     // judged-path merge refusals on a conflicts-linked pair.
@@ -1228,10 +1237,10 @@ async function stageReconsolidation(db, llm, budget, embedFn, dryRun, stateDir,
                                         console.log(`[hicortex] Reconsolidation: merged ${pair.oldId.slice(0, 8)} + ${pair.newId.slice(0, 8)} ` +
                                             `into canonical ${result.canonicalId.slice(0, 8)} (${result.linksRepointed} link(s) re-pointed)`);
                                     }
-                                    else if (result.reason === "metadata_mismatch") {
-                                        skippedMetadataMismatch++;
+                                    else if (result.reason === "project_mismatch") {
+                                        skippedProjectMismatch++;
                                         console.log(`[hicortex] Reconsolidation: merge of ${pair.oldId.slice(0, 8)} + ${pair.newId.slice(0, 8)} ` +
-                                            `skipped (metadata mismatch) — both kept`);
+                                            `skipped (project mismatch) — both kept`);
                                     }
                                     else if (result.reason === "conflict_linked") {
                                         // #393 guard-C: the pair is conflicts-linked (operator-planted
@@ -1446,10 +1455,10 @@ async function stageReconsolidation(db, llm, budget, embedFn, dryRun, stateDir,
                                 console.log(`[hicortex] Reconsolidation: merged ${pair.oldId.slice(0, 8)} + ${pair.newId.slice(0, 8)} ` +
                                     `into canonical ${result.canonicalId.slice(0, 8)} (${result.linksRepointed} link(s) re-pointed)`);
                             }
-                            else if (result.reason === "metadata_mismatch") {
-                                skippedMetadataMismatch++;
+                            else if (result.reason === "project_mismatch") {
+                                skippedProjectMismatch++;
                                 console.log(`[hicortex] Reconsolidation: merge of ${pair.oldId.slice(0, 8)} + ${pair.newId.slice(0, 8)} ` +
-                                    `skipped (metadata mismatch) — both kept`);
+                                    `skipped (project mismatch) — both kept`);
                             }
                             else if (result.reason === "conflict_linked") {
                                 conflictSkippedJudged++;
@@ -1473,7 +1482,8 @@ async function stageReconsolidation(db, llm, budget, embedFn, dryRun, stateDir,
     // deterministic sweep: verdicts, marks, and binds land first, and the zone
     // merges only what no verdict claimed. With the zone first, a >=0.92
     // genuine-conflict pair was blended before the judge ever saw it
-    // (canonical = oldest, the newer truth erased — the planted-eval harm);
+    // (an unjudged blend — the canonical-pick loser's wording erased —
+    // the planted-eval harm);
     // running it last means a `conflicts` bind set by THIS run's scan guards
     // the SAME run's zone. LLM-free and budget-free — an LLM-less night still
     // drains duplicates (a deadline-deferred cluster re-detects next run at
@@ -1499,8 +1509,8 @@ async function stageReconsolidation(db, llm, budget, embedFn, dryRun, stateDir,
         det.pairs = merges.losers_merged;
         det.merge = merges.losers_merged;
         det.conf_sum = merges.losers_merged;
-        if (merges.skipped_metadata_mismatch > 0) {
-            det.metadata_skipped = merges.skipped_metadata_mismatch;
+        if (merges.skipped_project_mismatch > 0) {
+            det.project_skipped = merges.skipped_project_mismatch;
         }
         bandStats[`>=${autoMergeThreshold}`] = det;
     }
@@ -1569,7 +1579,7 @@ async function stageReconsolidation(db, llm, budget, embedFn, dryRun, stateDir,
         merge_pairs_applied: mergePairsApplied,
         merge_below_gate: mergeBelowGate,
         skipped_above_ceiling: skippedAboveCeiling,
-        skipped_metadata_mismatch: skippedMetadataMismatch,
+        skipped_project_mismatch: skippedProjectMismatch,
         conflict_flagged: conflictFlagged,
         conflict_skipped: conflictSkippedJudged + merges.skipped_conflict,
         scout_scanned: scoutScanned,

package/dist/relink.d.ts

@@ -86,8 +86,8 @@ export interface RelinkReport {
 /**
  * Read the stored embedding for a memory from memory_vectors.
  * Returns null when the row is missing (caller falls back to re-embedding).
- * @deprecated moved to storage.ts (shared with consolidate.ts's supersession
- * stage); re-exported here so existing importers of relink.ts keep working.
+ * @deprecated moved to storage.ts (shared with the resolution stages);
+ * re-exported here so existing importers of relink.ts keep working.
  */
 export { getStoredEmbedding } from "./storage.js";
 /**

package/dist/relink.js

@@ -107,8 +107,8 @@ function loadExistingPairs(db) {
 /**
  * Read the stored embedding for a memory from memory_vectors.
  * Returns null when the row is missing (caller falls back to re-embedding).
- * @deprecated moved to storage.ts (shared with consolidate.ts's supersession
- * stage); re-exported here so existing importers of relink.ts keep working.
+ * @deprecated moved to storage.ts (shared with the resolution stages);
+ * re-exported here so existing importers of relink.ts keep working.
  */
 var storage_js_1 = require("./storage.js");
 Object.defineProperty(exports, "getStoredEmbedding", { enumerable: true, get: function () { return storage_js_1.getStoredEmbedding; } });

package/dist/retrieval.d.ts

@@ -155,14 +155,15 @@ export declare function recallQueryVector(registry: CentroidStore, sessionId: st
 }): Float32Array;
 /**
  * Ids among `candidateIds` that have been superseded by a later memory — i.e.
- * they are the SOURCE of a `superseded_by` link (stageSupersession links
- * old → new). One query, not per-candidate.
+ * they are the SOURCE of a `superseded_by` link (the resolution pass links
+ * old → new; formerly also the retired Stage 3.7 supersession scan). One
+ * query, not per-candidate.
  */
 export declare function findSupersededIds(db: Database.Database, candidateIds: string[]): Set<string>;
 /**
  * The full ranking-demotion set among `candidateIds` (#384): the UNION of
- * (a) sources of a `superseded_by` link (legacy + stageSupersession — link
- * driven, works on pre-v14 rows with NULL status) and (b) rows whose
+ * (a) sources of a `superseded_by` link (legacy + retired-3.7 + resolution
+ * verdicts — link driven, works on pre-v14 rows with NULL status) and (b) rows whose
  * `memories.status` is 'superseded' or 'retracted' (reconsolidation marks +
  * explicit ingest marks). `corrected` is deliberately NOT demoting — a
  * rewritten memory carries the CORRECTION, and demoting it would bury the

package/dist/retrieval.js

@@ -275,8 +275,9 @@ function recallQueryVector(registry, sessionId, promptEmb, opts) {
 }
 /**
  * Ids among `candidateIds` that have been superseded by a later memory — i.e.
- * they are the SOURCE of a `superseded_by` link (stageSupersession links
- * old → new). One query, not per-candidate.
+ * they are the SOURCE of a `superseded_by` link (the resolution pass links
+ * old → new; formerly also the retired Stage 3.7 supersession scan). One
+ * query, not per-candidate.
  */
 function findSupersededIds(db, candidateIds) {
     if (candidateIds.length === 0)
@@ -290,8 +291,8 @@ function findSupersededIds(db, candidateIds) {
 }
 /**
  * The full ranking-demotion set among `candidateIds` (#384): the UNION of
- * (a) sources of a `superseded_by` link (legacy + stageSupersession — link
- * driven, works on pre-v14 rows with NULL status) and (b) rows whose
+ * (a) sources of a `superseded_by` link (legacy + retired-3.7 + resolution
+ * verdicts — link driven, works on pre-v14 rows with NULL status) and (b) rows whose
  * `memories.status` is 'superseded' or 'retracted' (reconsolidation marks +
  * explicit ingest marks). `corrected` is deliberately NOT demoting — a
  * rewritten memory carries the CORRECTION, and demoting it would bury the

package/dist/state.d.ts

@@ -51,19 +51,19 @@ export interface HicortexState {
      */
     domainCursor?: number;
     /**
-     * Resume cursor for the nightly's supersession-detection stage (#191 Phase
-     * B) — highest memories.rowid whose decision/correction candidates have
-     * been evaluated (or infra-skipped) this run. Absent/0 = never run. Unlike
-     * relinkCursor/domainCursor (separate resumable CLI commands), this cursor
-     * advances within the shared nightly LLM call budget as part of the regular
-     * nightly — the corpus is back-processed gradually over many nights.
+     * #206-B: the retired supersession stage's cursor key
+     * (`supersessionCursor`) is deliberately NOT modeled here anymore. The
+     * stage (3.7, #191 Phase B) is retired into the reconsolidation pass, the
+     * whole-corpus backfill was complete before retirement, and nothing reads
+     * the key — pre-#206-B installs keep their stale value on disk, left to
+     * rot unread (no migration, no deletion). Do not repurpose the name.
      */
-    supersessionCursor?: number;
     /**
      * Resume cursor for the nightly's reconsolidation stage (#384) — highest
      * memories.rowid whose candidates have been evaluated (or infra-skipped)
      * with all their CONFIRMED work applied. Absent/0 = never run. Same
-     * advance-past-considered-candidates discipline as supersessionCursor,
+     * advance-past-considered-candidates discipline (formerly the retired
+     * supersessionCursor's),
      * with one addition (#439): confirmed merges and rewrite groups apply at
      * the candidate boundary — the END of the iteration that confirmed them —
      * and the cursor advances past a candidate only when that apply landed.

package/dist/storage.d.ts

@@ -149,8 +149,8 @@ export declare function getMemoryTagsWeightedBatched(db: Database.Database, memo
  * Read the stored embedding for a memory from memory_vectors.
  * Returns null when the row is missing (caller falls back to re-embedding).
  *
- * Shared by `hicortex relink` and the nightly's supersession stage
- * (consolidate.ts) — lives here (not in relink.ts) so consolidate.ts can use
+ * Shared by `hicortex relink` and the nightly's resolution stages
+ * (reconsolidation.ts, consolidate.ts) — lives here (not in relink.ts) so they can use
  * it without importing from relink.ts, which itself imports from
  * consolidate.ts (BudgetTracker, discoverLinkCandidates).
  */

package/dist/storage.js

@@ -408,8 +408,8 @@ function getMemoryTagsWeightedBatched(db, memoryIds) {
  * Read the stored embedding for a memory from memory_vectors.
  * Returns null when the row is missing (caller falls back to re-embedding).
  *
- * Shared by `hicortex relink` and the nightly's supersession stage
- * (consolidate.ts) — lives here (not in relink.ts) so consolidate.ts can use
+ * Shared by `hicortex relink` and the nightly's resolution stages
+ * (reconsolidation.ts, consolidate.ts) — lives here (not in relink.ts) so they can use
  * it without importing from relink.ts, which itself imports from
  * consolidate.ts (BudgetTracker, discoverLinkCandidates).
  */