@hypercarrier/rarebit 0.5.0 → 0.5.2

package/AGENTS.md

@@ -7,7 +7,7 @@ must not replace it or claim Task, Project, runtime, or delivery truth.
 Keep the public surface small. Test CLI behavior, package boundaries, and Pi
 installation paths. Do not add private-helper mocks, export-count tests,
 coverage targets, or tautological snapshots. Run `npm ci`, `npm test`, and
-`npm run verify:package` before a release candidate.
+`npm run verify:package` before a release.
 
 Do not record Session prose, provider credentials, Recall bundles, or private
 paths in issues, fixtures, logs, or release records. `README.md` owns user

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.5.2 — 2026-10-15
+
+- Add a development-only simulator lane (`npm run test:sim`) that runs real
+  Rarebit selection, materialization, Recall, compaction and tree navigation on
+  the shared HyperCarrier Pi simulator. It needs the HyperCarrier workspace.
+  `sim/` is not in the npm package. The lane found no Rarebit product bug.
+- Move the selection monitor tests into `test/`.
+
+## 0.5.1 — 2026-10-12
+
+- Document the release privacy gate as the baseline range scan in `RUNBOOK.md`
+  and `AGENTS.md`. A change outside the npm `files` list ships on `main`
+  without a version.
+
 ## 0.5.0 — 2026-10-07
 
 - Add `/rarebit btw [--rarebits] [--readonly] [question]`. It opens a

package/README.md

@@ -400,6 +400,16 @@ Use [GitHub Issues](https://github.com/deephbz/rarebit/issues) for normal
 support. Include no Session prose, credentials, or Recall files in public
 reports.
 
+## Development verification
+
+`npm ci && npm test` runs standalone unit and selection checks. The private
+R&D simulator lane uses HC's shared `@hypercarrier/pi-sim`; it does not enter
+Rarebit's root install or published artifact. Run `npm run test:sim` in the HC
+workspace or set `HC_PI_SIM_PATH` to an installed simulator package root.
+Run `npm run test:sim:campaign` for the longer seeded campaign.
+[Simulator scope, setup, properties, replay, and results](sim/README.md) remain
+repository-only development artifacts. No real provider credentials are needed.
+
 ## Release and source history
 
 Rarebit is released from an immutable version tag by

package/RUNBOOK.md

@@ -1,12 +1,16 @@
 # Rarebit runbook
 
 To release, merge the version bump and its [CHANGELOG.md](CHANGELOG.md) entry
-to `main`, run `git-privacy-scan --ref HEAD history`, then push tag
-`v<version>`. The tag push runs
+to `main`, run
+`git-privacy-scan --ref HEAD --base "$(git config privacy.baseline)" range`,
+then push tag `v<version>`. Any finding blocks the release; the pre-push hook
+runs the same scan. The tag push runs
 [`.github/workflows/publish.yml`](.github/workflows/publish.yml). It runs the
 package gates, publishes one verified packed artifact with npm provenance, and
 creates the GitHub Release. A prerelease version goes to npm `next`; any other
-version goes to `latest`. Publication adds no commit.
+version goes to `latest`. Publication adds no commit. A change outside the npm
+`files` list, such as `claude-code/`, changes no package bytes: push it to
+`main` without a version.
 
 Set `rarebit.model` in global Pi settings or in a trusted Project's
 `.pi/settings.json`. It must be `provider/model` or an object with `provider`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypercarrier/rarebit",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Sparse, provenance-bearing conversational evidence recovery for Pi sessions.",
   "license": "MIT",
   "author": "HyperCarrier contributors",
@@ -29,6 +29,9 @@
   },
   "scripts": {
     "test": "node --test test/*.test.mjs",
+    "test:sim": "node --test sim/*.test.mjs",
+    "test:sim:campaign": "RAREBIT_SIM_RUNS=100 node --test sim/*.test.mjs",
+    "test:sim:replay": "node sim/replay.mjs",
     "test:e2e:tui": "node scripts/e2e-v020-pi.mjs",
     "test:e2e:summary-cache": "node scripts/e2e-summary-cache.mjs",
     "test:e2e:recall": "node scripts/e2e-recall-pi0842.mjs",
@@ -55,6 +58,7 @@
     "@earendil-works/pi-coding-agent": "0.84.2",
     "@earendil-works/pi-tui": "0.84.2",
     "ajv": "^6.15.0",
+    "fast-check": "^4.10.2",
     "typescript": "^5.9.3"
   },
   "pi": {

package/test/helpers/selection-monitor.mjs

@@ -0,0 +1,10 @@
+// Independent observation of the prose-selection contract; no simulator needed.
+import assert from 'node:assert/strict';
+export function expectedProse(branch) {
+  return branch.filter(e => e.type === 'message' && (e.message.role === 'user' || (e.message.role === 'assistant' && ['stop', 'toolUse'].includes(e.message.stopReason))))
+    .map(e => ({ id: e.id ?? e.message.id ?? null, text: typeof e.message.content === 'string' ? e.message.content : (e.message.content ?? []).filter(b => b.type === 'text' && typeof b.text === 'string').map(b => b.text).join('\n'), readable: typeof e.message.content === 'string' || (e.message.content ?? []).some(b => b.type === 'text' && typeof b.text === 'string') }))
+    .filter(e => e.readable).map(({ id, text }) => ({ id, text }));
+}
+export function checkSelection(selection, branch) {
+  assert.deepEqual(selection.occurrences.map(o => ({ id: o.sourceEntryId, text: o.text })), expectedProse(branch), 'R1 selection contract');
+}

package/test/simulator-selection.test.mjs

@@ -0,0 +1,31 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import fc from 'fast-check';
+import { selectRarebits } from '../src/rarebit-core.mjs';
+import { parseNativeSession, resolveActiveBranch } from '../src/rarebit-session.mjs';
+import { checkSelection } from './helpers/selection-monitor.mjs';
+
+test('R1 exhaustive role/outcome/content pairs; R8 old and current native formats', () => {
+  const entries = [];
+  for (const role of ['user', 'assistant', 'toolResult']) for (const stopReason of ['stop', 'toolUse', 'error', 'aborted', 'length', undefined]) for (const content of ['prose', [{ type: 'text', text: 'prose' }, { type: 'thinking', thinking: 'private reasoning' }], [{ type: 'toolCall', id: 'synthetic', name: 'read', arguments: {} }], []]) entries.push({ type: 'message', message: { role, stopReason, content } });
+  let count = 0;
+  for (const a of entries) for (const b of entries) {
+    const branch = [a, b].map((e, i) => ({ ...e, id: `e${i}`, parentId: i ? 'e0' : null }));
+    checkSelection(selectRarebits(branch), branch); count++;
+  }
+  assert.equal(count, 5184);
+  for (const version of [1, 2, 3]) {
+    const branch = entries.map((e, i) => ({ ...e, id: `e${i}`, parentId: i ? `e${i-1}` : null, legacyExtra: 'retained' }));
+    const original = JSON.stringify([{ type: 'session', id: 'synthetic-old', version }, ...branch]);
+    const parsed = parseNativeSession(JSON.parse(original).map(e => JSON.stringify(e)).join('\n'));
+    checkSelection(selectRarebits(resolveActiveBranch(parsed)), branch);
+    assert.equal(JSON.stringify([parsed.header, ...parsed.entries]), original, 'R8 no read-time migration');
+  }
+});
+
+test('R1/R8 fast-check mixed native evidence with shrinking', () => {
+  fc.assert(fc.property(fc.array(fc.record({ role: fc.constantFrom('user', 'assistant', 'toolResult'), stopReason: fc.constantFrom('stop', 'toolUse', 'error', 'aborted'), text: fc.string({ maxLength: 100 }) }), { maxLength: 30 }), records => {
+    const branch = records.map((r, i) => ({ type: 'message', id: `e${i}`, parentId: i ? `e${i-1}` : null, message: { role: r.role, stopReason: r.stopReason, content: [{ type: 'text', text: r.text }] } }));
+    checkSelection(selectRarebits(branch), branch);
+  }), { seed: 20261015, numRuns: 100 });
+});