@gitroll/tacitt-cli 0.6.12 → 0.6.13

package/skills/tacitt/scripts/INDEX.md

@@ -6,8 +6,8 @@
 <!-- index-entries
 ./ | Source / reference | Release-pinned phase and review helpers using the paired CLI for frozen inputs and batch persistence.
 INDEX.md | Directory index | Lists executable helpers shipped with the exact Skill release.
-answer.mjs | CLI publisher | Validates task-bound classification and privacy drafts, including required privacy unit coverage and reused-card policy with repair diagnostics, reports card issue paths without mutating validator errors, and atomically publishes canonical answers.
-describe.mjs | Runtime | Binds proposed generated metadata, never Hidden, to the current decision/context.
+answer.mjs | CLI publisher | Validates task-bound classification and privacy drafts, including required privacy unit coverage and reused-card policy with repair diagnostics, reports card issue paths without mutating validator errors, atomically publishes canonical answers, and emits hash-verified source pages with manifest-derived byte framing while preserving legacy page output.
+describe.mjs | Runtime | Binds proposed generated metadata to the current decision/context. A value the person hid is shown as `[hidden]` in the Work title and the workspace title; descriptions stay unchanged and titles the person typed are not masked by Hide answers.
 journey-card-consolidation.d.mts | Declaration | Types global card generation, policy comparison, identity boundaries, answer validation and final key expansion.
 journey-card-consolidation.mjs | Runtime | Immutably merges matching existing-policy extensions without a second model task (ADR 0251); policy or identity mismatches fall back to digest-bound global review, with exact key coverage and five/ten question limits.
 journey-card-values.d.mts | Declaration | Types card value settlement for helper tests.
@@ -19,7 +19,7 @@ journey-classification-tasks.d.mts | Declaration | Types initial classification
 journey-classification-tasks.mjs | Runtime | Original-root routing, capacity-balanced bounded tasks and unresolved-first ready ordering with stable assignments.
 journey-classification-validation.d.mts | Declaration | Shared classification validator contracts.
 journey-classification-validation.mjs | Runtime | Shared root judgment, stable target identity, fixed project metadata, consolidation validation, target-preserving assignment expansion and the late check that an item joins only placed Works with one access record (ADR 0274).
-journey-classification.mjs | Runtime | Batched known-project metadata, unknown-root grouping and bounded evidence, versioned checkpoints and generation progress.
+journey-classification.mjs | Runtime | Batched known-project metadata, unknown-root grouping and streamed four-row evidence, versioned checkpoints and generation progress.
 journey-consolidation-submit.mjs | Runtime | Expands candidate assignments, applies per-root overrides, combines small topics into Unsorted, attaches known projects and checks exact root coverage.
 journey-consolidation.d.mts | Declaration | Consolidation helper contract for bounded evidence regression tests.
 journey-consolidation.mjs | Runtime | Builds proposed-name and stable-target candidate buckets, persists complete reconciliation input, and returns compact dispatch descriptors.
@@ -38,7 +38,7 @@ local-cli.mjs | Read-only package verifier | Validates an explicit installed CLI
 review-stream-client.d.mts | Type declarations | Types the fixed request/shutdown limits, private lifecycle callbacks and review-stream client methods.
 review-stream-client.mjs | Runtime | Bounds requests and owned-child shutdown, permits retry only for explicit pre-request startup busy, and preserves unknown lost-write outcomes for receipt replay.
 review.d.mts | Type declarations | Types the review helper's exported task rendering, answer reading, per-Work progress and entry functions for tests.
-review.mjs | Runtime | Session-ready scanning, immediate sixteen-slot refill, blocked-Work exclusion, largest-Work queue ordering, isolated retries, batched native reader and turn receipts with launch reservations, bounded reissue and visible interruption recovery, planned card capacity, outcome-reported preparation recovery and read-only status, metadata-gated questions, Track B-gated final preview and hash-bound answer recovery.
+review.mjs | Runtime | Session-ready scanning, ready-pack-first twenty-four-slot refill, 30000-token pack target, manifest-derived page byte capture, default reader pull with native self-binding, host-capability fallback and replayable slot transfer, blocked-Work exclusion, largest-Work queue ordering, isolated retries, batched native reader and turn receipts with launch reservations, bounded reissue and visible interruption recovery, planned card capacity, outcome-reported preparation recovery and read-only status, metadata-gated questions, Track B-gated final preview and hash-bound answer recovery.
 verify-cli.mjs | Verification entry | Checks a managed local receipt and its current package bytes before the Skill starts a journey.
 -->
 

package/skills/tacitt/scripts/answer.mjs

@@ -82,8 +82,19 @@ async function publish(args) {
     const receipt = /\nREAD_RECEIPT ([a-f0-9]{64})\n$/u.exec(output)?.[1]
     if (!receipt || createHash('sha256').update(output).digest('hex') !== line.slice(prefix.length))
       throw new Error('SOURCE_BINDING')
+    const bytePrefix = 'Page bytes ' + ref + '/' + ordinal + ' '
+    const byteLine = lines.slice(start + 1).find((item) => item.startsWith(bytePrefix))
+    const expectedBytes = byteLine?.slice(bytePrefix.length)
+    if (
+      expectedBytes !== undefined &&
+      (!/^[1-9]\d*$/u.test(expectedBytes) || Number(expectedBytes) !== Buffer.byteLength(output))
+    )
+      throw new Error('SOURCE_BINDING')
+    // Legacy manifests keep their original output; new capture code consumes this trusted framing.
+    const framed =
+      expectedBytes === undefined ? output : 'READ_BYTES ' + expectedBytes + '\n' + output
     await new Promise((done, reject) =>
-      process.stdout.write(output, (error) => (error ? reject(error) : done())),
+      process.stdout.write(framed, (error) => (error ? reject(error) : done())),
     )
     // A new page is a heartbeat; repeated reads of the same page cannot renew a lost reader.
     const directory = taskPath.replace(/\.md$/u, '.reads')

package/skills/tacitt/scripts/describe.mjs

@@ -1,7 +1,8 @@
 import { randomUUID } from 'node:crypto'
 
-// The parent supplies only its authorized context and proposed generated metadata, which is
-// never Hidden (ADR 0174).
+// The parent supplies only its authorized context and proposed generated metadata.
+// A value the person hid is shown as [hidden] in the Work title and the workspace title.
+// Descriptions stay unchanged; titles the person typed are not masked by Hide answers.
 const object = (value) => typeof value === 'object' && value !== null && !Array.isArray(value)
 const fail = () => {
   throw new Error('INVALID_DESCRIPTION_ANNOTATIONS')

package/skills/tacitt/scripts/journey-classification.mjs

@@ -102,6 +102,7 @@ export async function classificationEvidence(directory, manifest, view, call, li
         let cursor
         for (let pageNumber = 0; pageNumber < 2; pageNumber++) {
           const content = await call('journey.classificationRead', {
+            limit: 4,
             journeyId: view.journeyId,
             workId,
             rootSessionId: root.rootSessionId,

package/skills/tacitt/scripts/journey-scan-timing.mjs

@@ -198,7 +198,7 @@ export async function observeScanTiming(run, observation) {
   if (!receipt || receipt.completedAt) return
   const at = observation.at
   const measurements = receipt.measurements ?? {
-    slots: { capacity: 16, busyChildMs: 0, waitingBatchWallMs: 0, refillGapMs: [], children: [] },
+    slots: { capacity: 24, busyChildMs: 0, waitingBatchWallMs: 0, refillGapMs: [], children: [] },
     preparation: {
       intervals: [],
       milliseconds: { 'before-first-batch': 0, 'mid-run': 0, tail: 0 },
@@ -207,7 +207,8 @@ export async function observeScanTiming(run, observation) {
     observationBasis: {
       dispatch: 'helper-reservation',
       publication: 'answer-file-mtime',
-      slotRelease: 'confirmed-native-close-when-bound-otherwise-helper-observation',
+      slotRelease:
+        'confirmed-native-close-or-persistent-assignment-handoff-otherwise-helper-observation',
       cards: 'parent-reported-count-at-helper-boundary',
       preparation: 'helper-observed-interval',
       lockWait: 'unavailable-in-rpc',

package/skills/tacitt/scripts/journey.mjs

@@ -212,7 +212,7 @@ async function runPhaseCore(
   { run, journeyId, command, stage, refresh = false, limit = 3, waitMs = 0, sleep, ensureHost },
   call,
 ) {
-  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 16) throw new Error('INVALID_ARGUMENTS')
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 24) throw new Error('INVALID_ARGUMENTS')
   // Append-batch consolidation uses immutable local drafts. No current journey view is
   // needed until publication; retain write recovery and live value settlement on that path.
   if (stage === 'cards' && !refresh && ['consolidate', 'ingest'].includes(command)) {

package/skills/tacitt/scripts/privacy-validator.mjs

@@ -9833,6 +9833,8 @@ const decisionCardSchema = decisionCardInputSchema.extend({ answer: object({
 	rule: string().max(4001),
 	additionalRule: string().max(2e3),
 	remember: boolean(),
+	/** Where the answer came from; only the person's panel Hide is remembered (issue #126). */
+	source: _enum(["conversation", "panel"]).optional(),
 	excludedTermKeys: array(string().min(1)).max(2e4).optional()
 }).strict().nullable() }).strict();
 const journeyPrivacySchema = object({
@@ -10340,6 +10342,11 @@ object({
 	/** ADR 0086: per-value Hide or Keep over the term types' answers; absent means none. */
 	valueOverrides: array(journeyValueOverrideSchema).max(1e4).optional(),
 	/**
+	* Values the person hid in earlier journeys on this machine, frozen at formation (issue #126).
+	* Private: never in a view, reader guidance or anything sent.
+	*/
+	rememberedHides: array(string().min(1).max(1024)).max(1e5).optional(),
+	/**
 	* ADR 0086: the snapshot is read by dictionary review. A snapshot without it was read by B
 	* review, whose evidence this release no longer renders, so it is obsolete.
 	*/
@@ -10644,43 +10651,82 @@ object({
 reviewBatchSchema.omit({ digest: true });
 //#endregion
 //#region packages/application/src/journey/terms/locate.ts
-/** NFC core text of each analysed field, contiguous core chunks joined, with its Work. */
-function coreTexts(batches) {
-	const texts = [];
+/**
+* Issue #140: per batch and field, contiguous core and context chunks in offset order, never
+* joined across fields, field revisions or gaps. A core boundary maps to the NFC length of the
+* text before it.
+*/
+function* termSearchRuns(batches) {
 	for (const batch of batches) {
-		const fields = Map.groupBy(batch.chunks.filter((chunk) => chunk.core), (chunk) => JSON.stringify([chunk.fieldId, chunk.fieldHash]));
-		for (const chunks of fields.values()) {
-			let end = -1, text = "";
-			for (const chunk of chunks.toSorted((a, b) => a.offset - b.offset)) {
-				if (chunk.offset !== end && text) {
-					texts.push({
-						workId: batch.workId,
-						text: text.normalize("NFC")
-					});
-					text = "";
+		const fields = Map.groupBy(batch.chunks, (chunk) => JSON.stringify([chunk.fieldId, chunk.fieldHash]));
+		for (const group of fields.values()) {
+			let run = [];
+			const runs = [run];
+			for (const chunk of group.toSorted((a, b) => a.offset - b.offset)) {
+				const last = run.at(-1);
+				if (last && last.offset + last.text.length !== chunk.offset) runs.push(run = []);
+				run.push(chunk);
+			}
+			for (const chunks of runs) {
+				if (!chunks.some((chunk) => chunk.core)) continue;
+				const raw = chunks.map((chunk) => chunk.text).join("");
+				const text = raw.normalize("NFC");
+				const at = (end) => Math.min(text.length, raw.slice(0, end).normalize("NFC").length);
+				const cores = [];
+				let offset = 0;
+				for (const chunk of chunks) {
+					const start = offset;
+					offset += chunk.text.length;
+					if (!chunk.core) continue;
+					const last = cores.at(-1);
+					if (last && last[1] === start) last[1] = offset;
+					else cores.push([start, offset]);
 				}
-				text += chunk.text;
-				end = chunk.offset + chunk.text.length;
+				yield {
+					batch,
+					chunks,
+					text,
+					cores: cores.map(([start, end]) => [at(start), at(end)])
+				};
 			}
-			if (text) texts.push({
-				workId: batch.workId,
-				text: text.normalize("NFC")
-			});
 		}
 	}
-	return texts;
 }
-function occurrences(text, term) {
-	let count = 0;
-	for (let at = text.indexOf(term); at >= 0; at = text.indexOf(term, at + term.length)) count++;
-	return count;
+/**
+* Occurrences of `value` in a run: `owned` counts non-overlapping occurrences that start in a
+* core range; `first` is the first occurrence overlapping a core range, or -1. An occurrence that
+* starts outside the core is skipped by one position only, so it never hides an owned one.
+*/
+function runOccurrences(run, value) {
+	let owned = 0, first = -1;
+	if (!value) return {
+		owned,
+		first
+	};
+	for (let at = run.text.indexOf(value); at >= 0;) {
+		const end = at + value.length;
+		if (run.cores.some(([start, stop]) => at >= start && at < stop)) {
+			owned++;
+			if (first < 0) first = at;
+			at = run.text.indexOf(value, end);
+			continue;
+		}
+		if (first < 0 && run.cores.some(([start, stop]) => at < stop && end > start)) first = at;
+		at = run.text.indexOf(value, at + 1);
+	}
+	return {
+		owned,
+		first
+	};
 }
 /**
-* ADR 0086: a value is kept only if it occurs verbatim (NFC, case-sensitive) in a core chunk of
-* the pack's units; its complete admitted NFC value becomes one dictionary entry (ADR 0088).
+* ADR 0086, refined by issue #140: a value is kept only if it occurs verbatim (NFC,
+* case-sensitive) in a pack field's contiguous core and context text, overlapping a core chunk;
+* only occurrences that start in a core chunk are counted. Its complete admitted NFC value
+* becomes one dictionary entry (ADR 0088).
 */
 function locateTerms(batches, terms) {
-	const texts = coreTexts(batches);
+	const runs = [...termSearchRuns(batches)];
 	const located = /* @__PURE__ */ new Map();
 	const unlocatedIndices = [];
 	let kept = 0, unlocated = 0;
@@ -10693,20 +10739,25 @@ function locateTerms(batches, terms) {
 		}];
 	}));
 	for (const { type, value, index } of unique.values()) {
-		if (value.includes("█") || admitCustomTerm(value)?.value !== value || !texts.some((item) => item.text.includes(value))) {
+		let count = 0;
+		let workId;
+		if (!value.includes("█") && admitCustomTerm(value)?.value === value) for (const run of runs) {
+			const { owned, first } = runOccurrences(run, value);
+			if (first < 0) continue;
+			count += owned;
+			workId ??= run.batch.workId;
+		}
+		if (workId === void 0) {
 			unlocated++;
 			unlocatedIndices.push(index);
 			continue;
 		}
 		kept++;
-		const holders = texts.filter((item) => item.text.includes(value));
-		const first = holders[0];
-		if (!first) continue;
 		located.set(JSON.stringify([type, value]), {
 			type,
 			value,
-			count: holders.reduce((sum, item) => sum + occurrences(item.text, value), 0),
-			workId: first.workId
+			count,
+			workId
 		});
 	}
 	return {

package/skills/tacitt/scripts/review.d.mts

@@ -85,4 +85,5 @@ export function writePackTask(
     }[]
   }[],
   attemptId?: string,
+  reader?: { readerId?: string; readerTurn?: string; repair?: boolean },
 ): Promise<string>