@hypercarrier/rarebit 0.2.0 → 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,25 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.2.1 — 2026-09-29
4
+
5
+ - Move Recap into the scrollable transcript using native custom-entry renderers,
6
+ preserving its muted styling. Retain the widget fallback for older Pi hosts.
7
+ - Request 1–2 sentences and at most 300 characters in the default Summary prompt.
8
+ - Add `Ctrl+Alt+G` and `/rarebit got-it` to persist branch-local recap read
9
+ checkpoints. Subsequent summaries emphasize changes beyond recap coverage.
10
+ - Reuse native Recaps for the same receipt and coverage, including after read
11
+ acknowledgement and resume. Validate read markers against branch evidence.
12
+ - Keep conversation evidence beside read metadata when Summary input is trimmed.
13
+ - Promote newer manual assessments after settlement. Preserve active requests
14
+ until an agent-settled assessment closes them.
15
+ - Display current request-prefix Recaps with their exact receipt coverage.
16
+ Revalidate live branch state after asynchronous reads.
17
+ - Report explicit Summary outcomes even when automatic notices are disabled.
18
+ - Shorten Recap headers to numeric date, 24-hour time, and GMT offset. Keep
19
+ the got-it action inline.
20
+ - Include a native fullscreen renderer probe documenting Pi 0.84.2's mouse-input
21
+ limitation; the read affordance currently supports keyboard activation.
22
+
3
23
  ## 0.2.0 — 2026-09-27
4
24
 
5
25
  - Add the `/rarebit` action palette and tabbed `/rarebit settings` editor.
package/README.md CHANGED
@@ -1,113 +1,203 @@
1
1
  # Rarebit
2
2
 
3
- `@hypercarrier/rarebit` recovers decision-bearing conversational evidence from
4
- one persisted Pi Session. It deterministically selects readable user messages
5
- and assistant continuation or stop prose on the active branch. It excludes tool
6
- payloads, tool results, and hidden reasoning.
3
+ [![Rarebit: catch up on a long Pi session](https://raw.githubusercontent.com/deephbz/rarebit/main/brand/assets/banner.svg)](https://deephbz.github.io/rarebit)
7
4
 
8
- Rarebit is public alpha software. Its CLI output, exports, sidecar protocol,
9
- and visual language can change. It is not a Task, Project, runtime, priority,
10
- attention, or delivery authority. Native Pi Session JSONL remains the evidence
11
- authority.
5
+ **[Rarebit website](https://deephbz.github.io/rarebit)**
12
6
 
13
- Rarebit is released from an immutable version tag by
14
- [`.github/workflows/publish.yml`](.github/workflows/publish.yml). The workflow
15
- runs the package gates, verifies one packed artifact, scans that artifact, and
16
- publishes it with npm provenance. Install the exact version required by your
17
- Pi host.
7
+ ## Watch the demo
18
8
 
19
- The old alpha.1, alpha.2, and alpha.3 tag graphs remain public and are not
20
- privacy-clean. Existing package versions, tags, and releases remain immutable.
21
- The source-only candidate derivation and vendored-scanner binding is
22
- [`release/privacy-lineage.v1.json`](release/privacy-lineage.v1.json). It is
23
- excluded from npm and does not claim publication completion.
9
+ [![Watch the one-minute Rarebit demo](https://raw.githubusercontent.com/deephbz/rarebit/main/brand/promo-video/preview.jpg)](https://github.com/deephbz/rarebit/releases/download/v0.2.0/rarebit-promo.mp4)
10
+
11
+ [Play the video inline in the release notes](https://github.com/deephbz/rarebit/releases/tag/v0.2.0#watch-the-demo)
12
+ · [Download the MP4](https://github.com/deephbz/rarebit/releases/download/v0.2.0/rarebit-promo.mp4)
13
+
14
+ Rarebit helps you catch up on a long Pi session without rereading its tool
15
+ traffic. It selects original messages from the active branch so you can read the
16
+ conversation, ask an agent to use it, or start a focused new Session. The
17
+ original Pi Session stays intact.
18
+
19
+ Rarebit is public alpha software. Its CLI output, exports, sidecar protocol, and
20
+ visual language can change.
21
+
22
+ ## Start here
24
23
 
25
- ## Install
24
+ Three outcomes cover the useful path:
26
25
 
27
- Use Node 22 or later and Pi 0.83 or later. Install it in Pi from npm:
26
+ - **Catch up** — read selected conversational prose from the active branch.
27
+ - **Recall** — let an agent read that same selection for one request.
28
+ - **Fork** — start a fresh native Pi Session from a bounded newest suffix.
29
+
30
+ Install Rarebit and make the first deterministic, zero-model extraction:
28
31
 
29
32
  ```sh
33
+ # In a shell, install the extension in Pi, then restart Pi to load it.
30
34
  pi install npm:@hypercarrier/rarebit@0.2.0
31
- pi list
35
+
36
+ # Install the CLI in the Node project where you will run it.
37
+ npm install @hypercarrier/rarebit@0.2.0
38
+ npm exec -- rarebit extract \
39
+ --session /absolute/path/to/session.jsonl --json > selected-prose.json
32
40
  ```
33
41
 
34
- For a local checkout, Pi loads a directory without copying it:
42
+ Replace the example path with an exact Pi Session JSONL path or supported Session
43
+ identifier. Pi normally stores Session JSONL below `~/.pi/agent/sessions/`.
44
+ Open `selected-prose.json` to catch up on the conversation. Then
45
+ choose Recall or Fork when you need an agent request or a fresh Session.
46
+
47
+ Summary and Title are optional model-derived projections. Recap only displays
48
+ an existing Summary in the Pi TUI.
49
+
50
+ ## The product in one view
51
+
52
+ ```text
53
+ long Pi Session
54
+ └─ Distill: selected active-branch prose
55
+ ├─ Catch up: read the conversation
56
+ ├─ Recall: let an agent use the selection for one request
57
+ ├─ Fork: start a new native Pi Session from a bounded suffix
58
+ └─ Summary / Title: optional model-derived projections
59
+ └─ Recap: show an existing Summary in the Pi TUI
60
+ ```
61
+
62
+ ### 1. Catch up and distill
63
+
64
+ Rarebit selects these occurrences from one exact active branch:
65
+
66
+ - readable user messages;
67
+ - assistant prose at a continuation boundary;
68
+ - assistant prose at a normal stop boundary.
69
+
70
+ It excludes tool-call inputs, tool results, hidden reasoning, and transport
71
+ records. Selection is deterministic. It is not model summarization. Each
72
+ selected occurrence keeps its source entry, branch position, role, outcome,
73
+ timestamp when available, and lineage.
74
+
75
+ ### 2. Recall for the agent
76
+
77
+ In Pi, run:
78
+
79
+ ```text
80
+ /rarebit recall What decisions and open questions should guide the next turn?
81
+ ```
82
+
83
+ Recall writes a private conversation view and a detailed lineage view, then
84
+ sends one user-message envelope with your request and both file references. The
85
+ agent reads those referenced files through its configured model provider. The
86
+ files are private on local disk, but Rarebit makes no provider-privacy claim;
87
+ apply your provider's policy. An idle Pi starts one turn. A busy Pi queues one
88
+ steering message. Recall does not create a durable Recall record or a second
89
+ follow-up message.
90
+
91
+ For agent workflows outside the Pi TUI, use the CLI's `extract` operation. It
92
+ is the CLI catch-up interface; there is no CLI `recall` command:
35
93
 
36
94
  ```sh
37
- pi install /absolute/path/to/rarebit
38
- pi list
95
+ npm exec -- rarebit extract \
96
+ --session /absolute/path/to/session.jsonl --json > selected-prose.json
39
97
  ```
40
98
 
41
- The package imports Pi's bundled `@earendil-works/pi-ai` as a peer dependency.
42
- Do not install or bundle a second Pi core. Pi packages execute with your user
43
- permissions, so review source before installation.
99
+ Treat that output as sensitive. It contains selected raw prose.
100
+
101
+ ### 3. Fork as a distilled native fork
44
102
 
45
- To use the CLI in a normal Node project, install it and invoke the local bin
46
- with npm:
103
+ Fork creates a new native Pi Session from the newest contiguous suffix of the
104
+ selected active-branch prose. It does not summarize, deduplicate, or modify the
105
+ source. It does not start a model turn and does not transfer mutable Team, Task,
106
+ subscription, or extension state.
107
+
108
+ In Pi:
109
+
110
+ ```text
111
+ /rarebit fork
112
+ ```
113
+
114
+ From a shell, use the exact source Session path or ID:
47
115
 
48
116
  ```sh
49
- npm install @hypercarrier/rarebit@0.2.0
50
- npm exec -- rarebit --help
117
+ npm exec -- rarebit fork /absolute/path/to/session.jsonl
118
+ npm exec -- rarebit fork /absolute/path/to/session.jsonl \
119
+ --max-token-length 64000 --no-launch --json
51
120
  ```
52
121
 
53
- ## First query and extract
122
+ The default import budget is 64,000 estimated tokens. Fork keeps whole
123
+ occurrences in branch order. If the newest occurrence cannot fit, it refuses
124
+ with an actionable error. The new Session contains machine-readable source
125
+ lineage and a recovery route. It does not promise complete context transfer.
54
126
 
55
- Give the CLI an exact Session JSONL path or supported Pi Session identifier.
56
- `query` returns metadata only. `extract` returns selected raw Session prose.
127
+ Use `piq` to inspect source evidence that the bounded fork omitted:
57
128
 
58
129
  ```sh
59
- npm exec -- rarebit query --session /absolute/path/to/session.jsonl --json
60
- npm exec -- rarebit extract --session /absolute/path/to/session.jsonl --json
130
+ npm exec -- piq entries --session /absolute/path/to/session.jsonl
61
131
  ```
62
132
 
63
- The Pi extension adds one `/rarebit` parent command. In the TUI, the bare
64
- command opens an action palette. `/rarebit settings` opens a tabbed editor
65
- with Actions, Summary, Recap, and Session sections. Choose global settings or
66
- a trusted Project override; each field shows its effective value and source.
67
- Edits require Save confirmation. Blank input or Remove override restores
68
- inheritance. Settings apply to future operations; disabling automatic Recap
69
- also clears its pending or visible widget.
70
-
71
- Direct `help`, `status`, `settings`, `config`, `auto-title`, `title`, `recap`,
72
- `summarize`, `recall`, and `fork` subcommands remain available. Use
73
- `/rarebit settings global` or `/rarebit settings project` to choose the editing
74
- scope directly. `recap` reads the current Summary receipt and renders the
75
- complete multiline Summary in the TUI. It never starts synthesis.
76
-
77
- `/rarebit fork` validates the newest contiguous Rarebit suffix, writes a new
78
- Session in Pi's Session store for the current working directory, and switches
79
- to it without starting a model turn. Use `/rarebit fork --max-token-length 64000` to set the
80
- imported prose budget. Imported messages keep their roles and source outcomes,
81
- use zero usage, and carry machine-only lineage. The generated opening message
82
- records source ID/path/leaf, target directory, coverage, and the read-only PiQ
83
- recovery command. Legacy source entries retain `(sessionId, sourceOrder)` when
84
- native entry IDs are absent; Rarebit does not migrate those sources.
85
-
86
- The CLI performs the same operation without changing the caller's Session:
133
+ PiQ is read-only JSONL output for `jq`. It does not classify Rarebits, mutate a
134
+ Session, invoke a model, or migrate legacy entries.
135
+
136
+ ### 4. Summary, Title, and Recap
137
+
138
+ Summary and Title are optional derivations over the selected evidence. Recap is
139
+ a presentation of an existing Summary, not a derivation.
140
+
141
+ - **Summary** is a lossy, model-derived Session assessment. It can describe
142
+ what appears finished or needs attention in the selected prose. It is not
143
+ proof of completed work.
144
+ - **Title** is a mutable label proposal derived from a suitable user message.
145
+ - **Recap** presents the current Summary in the Pi TUI. It reads an existing
146
+ receipt and does not generate a Summary.
147
+
148
+ Use the Pi commands for a derivation or presentation:
149
+
150
+ ```text
151
+ /rarebit summarize
152
+ /rarebit title
153
+ /rarebit recap
154
+ /rarebit got-it
155
+ ```
156
+
157
+ The CLI exposes the same model operations for an exact Session:
87
158
 
88
159
  ```sh
89
- rarebit fork /absolute/source.jsonl
90
- rarebit fork /absolute/source.jsonl --max-token-length 64000 --no-launch
160
+ npm exec -- rarebit summarize \
161
+ --session /absolute/path/to/session.jsonl --json --force
162
+ npm exec -- rarebit title \
163
+ --session /absolute/path/to/session.jsonl --json
91
164
  ```
92
165
 
93
- The first form launches Pi in the invocation working directory. The second
94
- returns JSON for automation. Fork mode requires an installed Pi coding-agent
95
- peer; read-only query, extract, and PiQ commands do not. Use `piq entries
96
- --session <path>` to read omitted native evidence without writing or migrating
97
- the source.
166
+ Summary and Title need a configured model. Query, extract, and PiQ inspection
167
+ do not need a model. Fork creation needs an installed Pi peer and a resolvable
168
+ target model context, but it does not invoke that model or start a turn.
169
+
170
+ ## Continue from the first result
171
+
172
+ 1. Install the pinned npm package in Pi and restart Pi. For a local checkout,
173
+ use `pi install /absolute/path/to/rarebit`.
174
+ 2. Read or automate against `selected-prose.json`. The deterministic path works
175
+ without a model.
176
+ 3. Run `/rarebit recall <request>` when the agent should read selected earlier
177
+ conversation for one request.
178
+ 4. Use `/rarebit fork` when a bounded, fresh Session is more useful than
179
+ continuing the original one.
180
+ 5. Add model configuration only when you need Summary or Title.
98
181
 
99
- ## Model setup and optional derivations
182
+ The package uses Pi's bundled `@earendil-works/pi-ai` peer. Do not install or
183
+ bundle a second Pi core. Pi packages run with your user permissions. Review
184
+ source before installation. Use `npm install @hypercarrier/rarebit@0.2.0` and
185
+ `npm exec -- rarebit --help` when you use the CLI from a normal Node project.
100
186
 
101
- Summary and Title use a dedicated configured model. They never inherit Pi's
102
- interactive `defaultModel`. Start with
103
- [the example config](docs/examples/rarebit.settings.json). Merge its `rarebit`
104
- object into global Pi settings (`~/.pi/agent/settings.json`, or
105
- `$PI_CODING_AGENT_DIR/settings.json` when set), or a trusted project's
106
- `.pi/settings.json`. Preserve other settings and select a model available
107
- through your authenticated provider. The example includes all Pi extension
108
- settings with their defaults; its model is an example choice.
187
+ ## Scope and source
109
188
 
110
- The configuration shape is:
189
+ Native Pi Session JSONL remains the evidence authority. Rarebit does not own
190
+ Task, Project, runtime, priority, attention, or delivery state. A Summary is a
191
+ lossy Session assessment, not proof of completed Task or Project work. A Title
192
+ is a label proposal, and Recap only presents the current Summary.
193
+
194
+ ## Configure optional derivations
195
+
196
+ Copy the example from
197
+ [`docs/examples/rarebit.settings.json`](docs/examples/rarebit.settings.json)
198
+ into the `rarebit` object in global Pi settings
199
+ (`~/.pi/agent/settings.json`, or `$PI_CODING_AGENT_DIR/settings.json` when set)
200
+ or a trusted Project's `.pi/settings.json`. Preserve other settings.
111
201
 
112
202
  ```json
113
203
  {
@@ -117,7 +207,7 @@ The configuration shape is:
117
207
  "max_rarebit_ratio": 0.4,
118
208
  "auto_title": true,
119
209
  "max_input_tokens": 64000,
120
- "summary_prompt": "The summary is free-form prose. State when evidence is uncertain, confusing, contradictory, or importantly missing instead of inventing a coherent account.",
210
+ "summary_prompt": "State when evidence is uncertain, confusing, contradictory, or importantly missing.",
121
211
  "diagnostics": {
122
212
  "summary_triggered": false,
123
213
  "summary_updated": false
@@ -131,106 +221,137 @@ The configuration shape is:
131
221
  }
132
222
  ```
133
223
 
134
- After a successful automatic or explicit Summary materialization, the Pi TUI
135
- offers the current Summary above the editor after one minute. The offer stays
136
- visible while you type and clears when Pi sends input, starts a new turn,
137
- changes Session or branch, or shuts down. Set `rarebit.recap.enabled` to
138
- `false` to disable the offer, or change `rarebit.recap.delay_ms` to adjust the
139
- delay. Set `rarebit.recap.timezone` to `host` or an IANA time zone such as
140
- `Asia/Hong_Kong` to format the Recap header. The header identifies the host
141
- zone or selected IANA zone and its offset at the observation time. The widget
142
- reads an existing receipt and never adds a Session message. In the Pi extension,
143
- `max_input_tokens` limits the Summary prompt by the existing
144
- `ceil(prompt characters / 4)` estimate. It
145
- defaults to 64,000 estimated input tokens and is not a provider output limit.
146
- Summary trigger and update notifications stay off unless
147
- `rarebit.diagnostics.summary_triggered` or
148
- `rarebit.diagnostics.summary_updated` is enabled.
149
-
150
- `rarebit.summary_prompt` is one scalar guidance string. It uses the default
151
- guidance shown in the example when omitted. The editor accepts multiline text,
152
- preserves its line breaks, and trims only outer whitespace. A blank value
153
- removes the override. The fixed evidence and JSON status contract remains
154
- owned by Rarebit. Keep custom guidance to a few short bullets so it leaves room
155
- for evidence in the configured Summary input budget. The editor rejects unsafe
156
- control characters and guidance longer than 64,000 UTF-16 characters. This
157
- guidance bound is separate from the 8,000-character Summary output safety
158
- limit.
159
-
160
- Then request explicit model work when you want it:
161
-
162
- ```sh
163
- npm exec -- rarebit summarize --session /absolute/path/to/session.jsonl --json --force
164
- npm exec -- rarebit title --session /absolute/path/to/session.jsonl --json
165
- ```
166
-
167
- A Summary is a lossy assessment of an identified selection. It can report only
168
- Session-scoped appearance, not completed Project or Task work. A Title is a
169
- mutable label proposal, not Session identity. Automatic Summary work runs only
170
- at persisted direct-input or settled-agent boundaries and only when its policy
171
- permits it.
172
-
173
- ## Privacy, local data, and provider egress
224
+ Set `model` to a model available through your authenticated provider. Rarebit
225
+ uses this model for Summary and Title; it does not inherit Pi's interactive
226
+ `defaultModel`.
227
+
228
+ Use `/rarebit settings` to edit the dedicated namespace. The editor supports
229
+ global settings and a trusted Project override. Settings apply to future
230
+ operations. The default Summary prompt requests 1–2 sentences and at most 300
231
+ characters including spaces; this is model guidance, not an enforced truncation.
232
+ Existing custom prompts keep their own length guidance. The `summary_prompt` value changes Summary format and length, but
233
+ Rarebit still owns evidence handling and the structured status contract.
234
+
235
+ Automatic Summary work runs only at eligible persisted direct-input or settled-
236
+ agent boundaries. It also requires the configured minimum estimated Session
237
+ length and maximum selected-prose ratio. A Pi Session start does not trigger
238
+ synthesis. Explicit `/rarebit summarize` or `rarebit summarize --force` remains
239
+ available.
240
+
241
+ After successful materialization, Recap can offer the current Summary in the Pi
242
+ TUI after one minute by default. On Pi with `registerEntryRenderer` (tested on
243
+ 0.84.2), it appears in the scrollable transcript with the same muted border and
244
+ prose styling, and survives resume. Older Pi versions retain the pinned widget
245
+ fallback, which clears at input/turn/Session boundaries.
246
+
247
+ Press **Ctrl+Alt+G** or run `/rarebit got-it` to mark the latest displayed Recap
248
+ in the active branch as read. Its inline header affordance changes to `✓ got it`.
249
+ Native Session JSONL stores a read marker for the Recap receipt and covered
250
+ evidence cut. A request-prefix Recap ends at its receipt cut, before later
251
+ assistant prose. New messages remain unread. The next Summary includes the read
252
+ boundary and emphasizes later updates while still checking earlier unresolved
253
+ requests. Reading a Recap does not approve or complete work, and does not trigger
254
+ a model call. The marker is branch-local and survives resume. The read marker
255
+ is unavailable with the legacy widget fallback.
256
+
257
+ A manual `/rarebit summarize` reports when the Summary is current, already
258
+ current or in flight, generated but no longer current, or failed. These result
259
+ messages do not enable automatic Summary notices.
260
+
261
+ Mouse activation is not supported yet: Pi 0.84.2 consumes fullscreen mouse
262
+ input before extension listeners, so the affordance is a keyboard action.
263
+ Set `rarebit.recap.enabled` to `false`, change `delay_ms`, or set
264
+ `timezone` to `host` or an IANA zone such as `Asia/Hong_Kong`.
265
+
266
+ ## Privacy and local data
267
+
268
+ - Rarebit reads native Pi Session JSONL locally. Fork writes a new target
269
+ Session but never modifies the source Session.
270
+ - `query` returns metadata and selected occurrence identifiers. `extract`
271
+ returns selected raw prose on demand.
272
+ - Scrollable Recaps and read markers are stored as native custom Session entries.
273
+ They do not enter the main agent model context. Read-boundary metadata enters
274
+ subsequent Rarebit Summary requests.
275
+ - Summary and Title send selected prose to the provider and model you
276
+ configure. If the input exceeds `max_input_tokens`, Rarebit sends a newest
277
+ suffix with an explicit omission marker and coverage record.
278
+ - Rarebit does not send tool inputs, tool results, hidden reasoning, provider
279
+ credentials, or HTTP headers as Rarebit content.
280
+ - Derived receipts live below
281
+ `~/.pi/agent/rarebit/materializations-v4/`. Job leases live below
282
+ `~/.pi/agent/rarebit/jobs-v4/`. These directories use mode `0700`; their
283
+ files use mode `0600`.
284
+ - Receipts retain compact metadata, not selected prose, prompts, provider
285
+ response bodies, headers, or credentials. Receipts remain until you remove
286
+ them.
287
+ - Recall files are private OS-temporary JSON files. They contain selected
288
+ content and lineage and remain until you delete them after the turn no longer
289
+ needs them. The persisted Pi user message and both files are sensitive.
290
+
291
+ Pi controls Session JSONL retention. Do not put Session prose, credentials,
292
+ Recall files, or private paths in public issues.
174
293
 
175
- Rarebit reads Pi Session JSONL locally and does not modify it. `extract` prints
176
- selected raw prose, so handle its output as sensitive.
177
-
178
- Summary and Title send selected Rarebit prose to the provider and model that you
179
- configure. When input exceeds the fixed limit, Rarebit sends a newest suffix
180
- with an explicit omission marker. It does not send tool inputs, tool results,
181
- hidden reasoning, provider credentials, or HTTP headers as Rarebit content.
294
+ ## Update, uninstall, and rollback
182
295
 
183
- Derived receipts live below `~/.pi/agent/rarebit/materializations-v4/`; job
184
- leases live below `~/.pi/agent/rarebit/jobs-v4/`. These directories use mode
185
- 0700 and their files use mode 0600. Receipts retain compact metadata but no
186
- selected prose, prompt, provider response body, headers, or credentials. They
187
- remain until you remove them. Session JSONL retention is controlled by Pi.
296
+ Pin a version when you need reproducible installs:
188
297
 
189
- ## First Recall
298
+ ```sh
299
+ pi install npm:@hypercarrier/rarebit@0.2.0
300
+ pi remove npm:@hypercarrier/rarebit
301
+ ```
190
302
 
191
- Run `/rarebit recall <prompt>` in a Pi Session. Rarebit writes the exact active
192
- branch selection to two private files: a conversation view and detailed
193
- lineage evidence. It then sends one atomic, human-readable Markdown user
194
- message containing your exact request and absolute pointers to both files.
303
+ A versioned npm install moves an existing Rarebit npm source to that pin. Pi
304
+ skips versioned npm sources during package updates. Restart Pi after an install
305
+ to load new extension code.
195
306
 
196
- When Pi is idle, that message starts one turn. When Pi is busy, it queues one
197
- steering message. Recall does not send a second follow-up, add a custom Session
198
- entry, or create a durable Recall receipt.
307
+ To roll back, reinstall a known version:
199
308
 
200
- The temporary directory is mode 0700 and its JSON files are mode 0600. The
201
- files remain after the request so Pi can read them; delete the directory after
202
- the turn no longer needs it. Both files and the persisted Pi message are
203
- sensitive. Do not put their paths or content in a ticket.
309
+ ```sh
310
+ pi install npm:@hypercarrier/rarebit@<version>
311
+ ```
204
312
 
205
- ## Update, uninstall, and rollback
313
+ Removal stops package loading. It does not alter Pi Session JSONL or delete
314
+ Rarebit sidecars, job leases, or Recall temporary files. Review retained local
315
+ data before removing it.
206
316
 
207
- Pin a version for reproducible installs:
317
+ If you need source evidence after a fork or a bounded extraction, use the
318
+ read-only PiQ command:
208
319
 
209
320
  ```sh
210
- pi install npm:@hypercarrier/rarebit@0.2.0
211
- pi remove npm:@hypercarrier/rarebit
321
+ npm exec -- piq entries --session /absolute/path/to/session.jsonl
212
322
  ```
213
323
 
214
- The exact-version install also moves an existing Rarebit npm installation to
215
- that pin. Pi skips versioned npm sources during package updates. Restart Pi
216
- after installation to load the new extension code.
217
-
218
- To roll back, reinstall a known version with `pi install npm:@hypercarrier/rarebit@<version>`.
219
- Removal stops package loading. It does not alter Pi Session JSONL or delete
220
- Rarebit sidecars, job leases, or Recall temp files. Remove retained local data
221
- only after you review it.
324
+ For sidecar locks, leases, and recovery details, see [`RUNBOOK.md`](RUNBOOK.md).
222
325
 
223
326
  ## Compatibility and support
224
327
 
225
- Rarebit supports Node 22+ and Pi 0.83.0 or later. Its Pi AI peer has no
226
- upper bound. The release gate runs Recall against Pi 0.83.0 and Pi 0.84.2. It
328
+ Rarebit supports Node 22+ and Pi 0.83.0 or later. Its Pi AI peer has no upper
329
+ bound. The release gate runs Recall against Pi 0.83.0 and Pi 0.84.2. Rarebit
227
330
  works as a deterministic CLI without a model. Summary, Title, and the Pi
228
331
  extension require a compatible Pi installation and configured provider
229
332
  credentials.
230
333
 
231
- Report security issues privately as described in [SECURITY.md](SECURITY.md).
232
- Use https://github.com/deephbz/rarebit/issues for normal support. Include no
233
- Session prose, credentials, or Recall files in public reports.
334
+ Report security issues privately as described in [`SECURITY.md`](SECURITY.md).
335
+ Use [GitHub Issues](https://github.com/deephbz/rarebit/issues) for normal
336
+ support. Include no Session prose, credentials, or Recall files in public
337
+ reports.
338
+
339
+ ## Release and source history
340
+
341
+ Rarebit is released from an immutable version tag by
342
+ [`.github/workflows/publish.yml`](.github/workflows/publish.yml). The workflow
343
+ runs package gates, verifies one packed artifact, scans that artifact, and
344
+ publishes it with npm provenance.
345
+
346
+ The old `alpha.1`, `alpha.2`, and `alpha.3` tag graphs remain public and are not
347
+ privacy-clean. Existing package versions, tags, and releases remain immutable.
348
+ The source-only candidate derivation and vendored-scanner binding is
349
+ [`release/privacy-lineage.v1.json`](release/privacy-lineage.v1.json). It is
350
+ excluded from npm and does not claim publication completion.
351
+
352
+ More detail:
234
353
 
235
- See [RUNBOOK.md](RUNBOOK.md) for recovery and sidecar details, and
236
- [VISUAL-LANGUAGE.md](VISUAL-LANGUAGE.md) for evidence-mark meaning.
354
+ - [Visual language](VISUAL-LANGUAGE.md) defines evidence marks and Summary
355
+ presentation.
356
+ - [Runbook](RUNBOOK.md) covers operator recovery and sidecars.
357
+ - [Rarebit website](https://deephbz.github.io/rarebit) introduces the product.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@hypercarrier/rarebit",
3
- "version": "0.2.0",
3
+ "version": "0.2.1",
4
4
  "description": "Sparse, provenance-bearing conversational evidence recovery for Pi sessions.",
5
5
  "license": "MIT",
6
6
  "author": "HyperCarrier contributors",
@@ -324,7 +324,8 @@
324
324
  "enum": [
325
325
  "hc-rarebit-summary-v4",
326
326
  "hc-rarebit-summary-v5",
327
- "hc-rarebit-summary-v6"
327
+ "hc-rarebit-summary-v6",
328
+ "hc-rarebit-summary-v7"
328
329
  ]
329
330
  },
330
331
  "synthesisMode": { "enum": ["forced", "automatic"] },
@@ -318,7 +318,7 @@ try {
318
318
  const providerRequestCountBeforeTyping = requestCountAtWidget();
319
319
 
320
320
  // Keystrokes do not emit a Rarebit lifecycle event. The human can keep
321
- // editing while the display-only widget remains above the editor.
321
+ // editing while the display-only Recap remains in the transcript.
322
322
  await sendKeys(socket, session, "typed while recap is visible");
323
323
  const typingPane = await waitFor(
324
324
  "typed editor text while recap remains",
@@ -340,7 +340,7 @@ try {
340
340
  "typing/display must not trigger another Summary",
341
341
  );
342
342
 
343
- // Submitted input clears the widget before the next provider request.
343
+ // Submitted input preserves the historical transcript Recap.
344
344
  await press(socket, session, "Enter");
345
345
  await waitFor(
346
346
  "second provider request",
@@ -351,14 +351,14 @@ try {
351
351
  15_000,
352
352
  );
353
353
  const afterSubmitPane = await waitFor(
354
- "recap clear after submitted input",
354
+ "recap persists after submitted input",
355
355
  async () => {
356
356
  const pane = await capturePane(socket, session);
357
- return !pane.includes("RECAP_SENTINEL") ? pane : false;
357
+ return pane.includes("RECAP_SENTINEL") ? pane : false;
358
358
  },
359
359
  5_000,
360
360
  );
361
- assert.doesNotMatch(afterSubmitPane, /RECAP_SENTINEL/);
361
+ assert.match(afterSubmitPane, /RECAP_SENTINEL/);
362
362
 
363
363
  const loggedRequests = (await readFile(requestLog, "utf8"))
364
364
  .trim()
@@ -382,7 +382,9 @@ try {
382
382
  const sessionText = (
383
383
  await Promise.all(sessionFiles.map((path) => readFile(path, "utf8")))
384
384
  ).join("\n");
385
- assert.doesNotMatch(sessionText, /RECAP_SENTINEL/);
385
+ const sessionEntries = sessionText.split("\n").filter(Boolean).map(JSON.parse);
386
+ assert.ok(sessionEntries.some((entry) => entry.type === "custom" && entry.customType === "rarebit-recap" && entry.data.summary.includes("RECAP_SENTINEL")));
387
+ assert.ok(!sessionEntries.filter((entry) => entry.type === "message").some((entry) => JSON.stringify(entry).includes("RECAP_SENTINEL")));
386
388
  const receiptFiles = await walkFiles(rarebitRoot);
387
389
  assert.ok(receiptFiles.length > 0, "the real Rarebit sidecar was written");
388
390
 
@@ -422,9 +424,9 @@ try {
422
424
  checks: [
423
425
  "real Pi TUI rendered recap widget after 60 seconds",
424
426
  "typing preserved widget",
425
- "submitted input cleared widget",
427
+ "submitted input preserved transcript Recap",
426
428
  "next provider request excluded recap sentinel",
427
- "Session JSONL excluded recap sentinel",
429
+ "Session JSONL stored Recap as custom UI state, outside provider messages",
428
430
  ],
429
431
  }, null, 2),
430
432
  );