@inetafrica/open-claudia 3.0.35 → 3.0.40

package/core/system-prompt.js

@@ -241,6 +241,12 @@ Wake-ups and crons (real schedulers, not hallucinations — use them instead of
 - \`open-claudia cron-list\` — list all wakeups + crons on this channel.
 - \`open-claudia cron-remove <id>\` — cancel one.
 
+Watches (a silent background monitor — poll a condition WITHOUT waking every tick; wake only when it actually happens). Use this instead of a minute-by-minute cron whenever you'd otherwise fire a turn just to check "is it done yet?" and stay quiet most times:
+- \`open-claudia watch-add "<check-cmd>" "<wake-prompt>"\` — the scheduler polls \`<check-cmd>\` as a shell command (default every minute). The poll is SILENT: nothing reaches the chat while the check keeps failing. The instant \`<check-cmd>\` exits 0, you wake in this same conversation with \`<wake-prompt>\`, exactly like a wakeup. Non-zero exit = still waiting = nothing happens. Default is ONE-SHOT (fires once, then removes itself); add \`--repeat\` to keep polling after each hit. \`--every "<5-field cron>"\` changes the poll cadence.
+- \`open-claudia watch-list\` / \`open-claudia watch-remove <id>\` — inspect/cancel watches on this channel.
+- The owner has a global master switch: \`/watch off\` pauses ALL watch polling (and \`/watch on\` resumes). If \`watch-list\` shows the switch OFF, watches won't fire until it's back on.
+- Example: after kicking off a long external job, \`open-claudia watch-add "test -f /tmp/build-done || exit 1" "the build finished — verify and report"\` beats a wakeup guess, because it fires the moment it's actually done, not on a fixed timer. (Never use a watch to poll harness-tracked work you started — that notifies you automatically. Watches are for EXTERNAL state the harness can't see.)
+
 The selected coding-agent provider may expose native scheduling tools. Do NOT use those for Open Claudia wakeups or crons: a provider runs as a per-turn subprocess, so its timers do not belong to the long-running bot. Only the \`open-claudia\` CLI commands above are authoritative and survive.
 
 Persistent todo list with plans + subtasks (per channel; survives compaction and restart).
@@ -465,6 +471,7 @@ function buildDynamicContextBlock(opts = {}) {
 const packsInjectedFor = new Map(); // `${adapterId}:${channelId}:${dir}` -> `${sessionId}:${updated}`
 const PACK_INJECT_MAX_CHARS = 4000;
 const DEFAULT_MEMORY_RECALL_MAX_CHARS = 9000;
+const EXTRACTIVE_LINES_PER_SECTION = 4;
 
 // Progressive disclosure: when on, a matched pack is injected as a cheap
 // teaser (Stance + State + a pointer) rather than its full body. Heavy
@@ -533,6 +540,7 @@ function consumeLastInjected() {
 }
 
 function formatPackForContext(pack, packsLib, opts = {}) {
+  const extractive = !!opts.extractive;
   const headline = !!opts.headline;
   const progressive = !!opts.progressive;
   const clip = (s, n) => (s.length > n ? s.slice(0, n) + "\n…[truncated — read the full pack file]" : s);
@@ -547,30 +555,61 @@ function formatPackForContext(pack, packsLib, opts = {}) {
     const childLines = children.map((c) => `- ${c.dir}: ${c.description || c.name}`).join("\n");
     parts.push(`Sub-packs (dig deeper with \`open-claudia pack show <dir>\`):\n${childLines}`);
   }
-  // Progressive mode injects only the live sections (Stance = how to think,
-  // State = where we are) plus a pointer; full mode also inlines Procedure
-  // and the recent Journal.
-  // Headline = description + Stance only (Stance carries hard rules/prefs that
-  // must always apply when the topic comes up). Everything else is pulled on
-  // demand. Progressive = Stance + State. Full = Stance + Procedure + State.
-  const sections = headline
-    ? ["Stance"]
-    : progressive
-    ? ["Stance", "State"]
-    : ["Stance", "Procedure", "State"];
-  for (const section of sections) {
-    const body = (pack.sections[section] || "").trim();
-    if (body) parts.push(`#### ${section}\n${body}`);
-  }
-  if (headline) {
-    const hidden = ["State", "Procedure", "Journal"].filter((s) => (pack.sections[s] || "").trim());
-    if (hidden.length) parts.push(`#### More\n${hidden.join(" + ")} not shown — run \`open-claudia pack show ${pack.dir}\` to read them.`);
-  } else if (progressive) {
-    const hasMore = (pack.sections.Procedure || "").trim() || (pack.sections.Journal || "").trim();
-    if (hasMore) parts.push(`#### More\nProcedure + Journal not shown — run \`open-claudia pack show ${pack.dir}\` to read them.`);
+  // Extractive mode (Defect-A fix): the old headline showed Stance only, so a
+  // fact living in State/Procedure/Journal never loaded even when it was the
+  // whole reason the pack matched. Here we surface Stance verbatim (it carries
+  // the always-on rules/prefs) PLUS the actual lines from anywhere in the pack
+  // that fuzzy-matched this message, tagged by section — verbatim, never a
+  // paraphrase. Progressive/headline/full below are the pre-extractive modes,
+  // still used by the classic engine and as the fallback when no lines matched.
+  if (extractive) {
+    const stance = (pack.sections.Stance || "").trim();
+    if (stance) parts.push(`#### Stance\n${stance}`);
+    const stanceLow = stance.toLowerCase();
+    const bySection = new Map();
+    for (const h of (Array.isArray(opts.matchedLines) ? opts.matchedLines : [])) {
+      if (!h || h.section === "Stance") continue; // Stance already shown in full
+      const text = String(h.text || "").trim();
+      if (!text) continue;
+      if (stanceLow && stanceLow.includes(text.toLowerCase())) continue; // dedupe vs Stance
+      if (!bySection.has(h.section)) bySection.set(h.section, []);
+      const arr = bySection.get(h.section);
+      if (arr.length < EXTRACTIVE_LINES_PER_SECTION && !arr.includes(text)) arr.push(text);
+    }
+    let matchedAny = false;
+    for (const section of ["Procedure", "State", "Journal"]) {
+      const arr = bySection.get(section);
+      if (!arr || !arr.length) continue;
+      matchedAny = true;
+      parts.push(`#### ${section} (matched)\n${arr.map((t) => (/^\s*[-*]/.test(t) ? t : `- ${t}`)).join("\n")}`);
+    }
+    parts.push(`#### More\n${matchedAny ? "Showing Stance + the lines matched to this message." : "Showing Stance."} Full pack (State/Procedure/Journal): \`open-claudia pack show ${pack.dir}\`.`);
   } else {
-    const journal = (pack.sections.Journal || "").trim().split("\n").filter(Boolean).slice(-10).join("\n");
-    if (journal) parts.push(`#### Journal (recent)\n${journal}`);
+    // Progressive mode injects only the live sections (Stance = how to think,
+    // State = where we are) plus a pointer; full mode also inlines Procedure
+    // and the recent Journal.
+    // Headline = description + Stance only (Stance carries hard rules/prefs that
+    // must always apply when the topic comes up). Everything else is pulled on
+    // demand. Progressive = Stance + State. Full = Stance + Procedure + State.
+    const sections = headline
+      ? ["Stance"]
+      : progressive
+      ? ["Stance", "State"]
+      : ["Stance", "Procedure", "State"];
+    for (const section of sections) {
+      const body = (pack.sections[section] || "").trim();
+      if (body) parts.push(`#### ${section}\n${body}`);
+    }
+    if (headline) {
+      const hidden = ["State", "Procedure", "Journal"].filter((s) => (pack.sections[s] || "").trim());
+      if (hidden.length) parts.push(`#### More\n${hidden.join(" + ")} not shown — run \`open-claudia pack show ${pack.dir}\` to read them.`);
+    } else if (progressive) {
+      const hasMore = (pack.sections.Procedure || "").trim() || (pack.sections.Journal || "").trim();
+      if (hasMore) parts.push(`#### More\nProcedure + Journal not shown — run \`open-claudia pack show ${pack.dir}\` to read them.`);
+    } else {
+      const journal = (pack.sections.Journal || "").trim().split("\n").filter(Boolean).slice(-10).join("\n");
+      if (journal) parts.push(`#### Journal (recent)\n${journal}`);
+    }
   }
   // Pack↔tool usages: concrete reusable-tool invocations recorded while this
   // pack was active, so the agent sees HOW a tool was used in this topic (not
@@ -597,7 +636,9 @@ function buildPackBlock(matches, budget, opts = {}) {
     const channelId = currentChannelId();
     const runIdentity = promptDedupeIdentity(opts);
     const progressive = packProgressive();
+    const extractive = opts.extractive === true;
     const headline = recallHeadline();
+    const matchedByDir = opts.matchedLines instanceof Map ? opts.matchedLines : new Map();
     const collector = opts.recallCollector || lastInjected;
     const blocks = [];
     const used = [];
@@ -613,7 +654,7 @@ function buildPackBlock(matches, budget, opts = {}) {
       // as the task tree), so the pack survives compaction without paying
       // to re-stamp an anchor on every intervening turn.
       if (packsInjectedFor.get(key) === stamp) continue;
-      const block = formatPackForContext(pack, packsLib, { progressive, headline });
+      const block = formatPackForContext(pack, packsLib, { progressive, headline, extractive, matchedLines: extractive ? (matchedByDir.get(m.dir) || []) : undefined });
       if (!tryUseRecallBudget(budget, block)) continue;
       packsInjectedFor.set(key, stamp);
       collector.packs.push(pack.name || m.dir);
@@ -621,7 +662,9 @@ function buildPackBlock(matches, budget, opts = {}) {
     }
     if (used.length > 0) setImmediate(() => { try { packsLib.touchUsed(used); } catch (e) {} });
     if (blocks.length === 0) return "";
-    const intro = headline
+    const intro = extractive
+      ? `Long-term topic context auto-matched to this message. Each pack shows its Stance (always-on rules/prefs) plus the specific lines that matched — verbatim, not a summary. These are facts already recalled for you; pull the full State/Procedure/Journal with \`open-claudia pack show <dir>\` when you need more. If the user asked for a skill by name, \`pack show\` the matching pack to load its Procedure. Source files live under ${packsLib.PACKS_DIR}/<dir>/PACK.md — read or edit them directly when deeper context or a correction is needed.`
+      : headline
       ? `Long-term topic context auto-matched to this message — these are *headlines* (description + Stance only), not full packs. Decide which are actually relevant and pull the full State/Procedure/Journal on demand with \`open-claudia pack show <dir>\`. If the user asked for a skill by name, \`pack show\` the matching pack to load its Procedure. Source files live under ${packsLib.PACKS_DIR}/<dir>/PACK.md — read or edit them directly when deeper context or a correction is needed.`
       : `Long-term topic context auto-matched to this message. If the user asked for a skill by name, treat the matching pack's Procedure section as that Open Claudia skill. Source files live under ${packsLib.PACKS_DIR}/<dir>/PACK.md — read or edit them directly when deeper context or a correction is needed.`;
     return `\n\n## Active Open Claudia skills / context packs\n${intro}\n\n${blocks.join("\n\n---\n\n")}`;
@@ -968,8 +1011,8 @@ async function buildOptionalRecallContext(prompt, opts = {}) {
       { provider: recallProvider },
     ),
     logRecall,
-    buildPackBlock: (matches, recallBudget) => buildPackBlock(matches, recallBudget, recallOpts),
-    buildEntityBlock: (matches, recallBudget) => buildEntityBlock(matches, recallBudget, recallOpts),
+    buildPackBlock: (matches, recallBudget, engineOpts) => buildPackBlock(matches, recallBudget, { ...recallOpts, ...(engineOpts || {}) }),
+    buildEntityBlock: (matches, recallBudget, engineOpts) => buildEntityBlock(matches, recallBudget, { ...recallOpts, ...(engineOpts || {}) }),
   };
   const result = await engine.run({
     userText, contextText, fullContext, packLimit, budget, helpers, provider: recallProvider,
@@ -1123,6 +1166,7 @@ module.exports = {
   PromptConstructionError,
   buildCoreInstructions,
   buildOptionalRecallContext,
+  formatPackForContext,
   buildDynamicContextBlock,
   buildExternalModeBlock,
   buildSpacesTaskModeBlock,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inetafrica/open-claudia",
-  "version": "3.0.35",
+  "version": "3.0.40",
   "description": "An always-on, provider-agnostic coding-agent harness for Claude Code and OpenAI Codex via chat",
   "main": "bot.js",
   "bin": {
@@ -9,8 +9,8 @@
   "scripts": {
     "setup": "node setup.js",
     "start": "node bot.js",
-    "pretest": "node test-provider-fixture.js && node test-provider-core-prompt.js && node test-provider-prompt-parity.js && node test-provider-env-isolation.js && node test-provider-resume-parity.js && node test-provider-bootstrap.js && node test-provider-registry.js && node test-provider-stream-decoder.js && node test-provider-events.js && node test-provider-claude.js && node test-provider-codex.js && node test-provider-runner.js && node test-provider-run-lifecycle.js && node test-provider-gateway.js && node test-provider-side-chat.js && node test-single-runtime.js && node test-provider-migration-backup.js && node test-provider-state-migration.js && node test-provider-session-history.js && node test-provider-session-commands.js && node test-provider-compaction.js && node test-provider-scheduler.js && node test-cursor-removal.js && node test-utility-provider-policy.js && node test-provider-subagent.js && node test-provider-recall.js && node test-provider-pack-review.js && node test-memory-mutation-queue.js && node test-provider-dream.js && node test-provider-enforcer.js && node test-provider-tool-hooks.js && node test-provider-boot-matrix.js && node test-provider-capabilities.js && node test-provider-language.js && node test-provider-coupling-audit.js && node test-provider-parity-e2e.js && node test-kazee-channel-health.js && node test-prompt-budget.js && node test-agency-ledger.js && node test-agency-deliberate.js && node test-guardrail.js && node test-spaces-comment-content.js",
-    "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-usage-accounting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-web-sessions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-poll-recovery.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-409-grace.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-conflict-heal-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-single-instance.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-streaming-split.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-spaces-autoenable.js"
+    "pretest": "node test-provider-fixture.js && node test-provider-core-prompt.js && node test-provider-prompt-parity.js && node test-provider-env-isolation.js && node test-provider-resume-parity.js && node test-provider-bootstrap.js && node test-provider-registry.js && node test-provider-stream-decoder.js && node test-provider-events.js && node test-provider-claude.js && node test-provider-codex.js && node test-provider-runner.js && node test-provider-run-lifecycle.js && node test-provider-gateway.js && node test-provider-side-chat.js && node test-single-runtime.js && node test-provider-migration-backup.js && node test-provider-state-migration.js && node test-provider-session-history.js && node test-provider-session-commands.js && node test-provider-compaction.js && node test-provider-scheduler.js && node test-credential-capture.js && node test-cursor-removal.js && node test-utility-provider-policy.js && node test-provider-subagent.js && node test-provider-recall.js && node test-provider-pack-review.js && node test-memory-mutation-queue.js && node test-provider-dream.js && node test-provider-enforcer.js && node test-provider-tool-hooks.js && node test-provider-boot-matrix.js && node test-provider-capabilities.js && node test-provider-language.js && node test-provider-coupling-audit.js && node test-provider-parity-e2e.js && node test-kazee-channel-health.js && node test-prompt-budget.js && node test-agency-ledger.js && node test-agency-deliberate.js && node test-guardrail.js && node test-spaces-comment-content.js",
+    "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-usage-accounting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-walker-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-score-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cokept-warming.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-search.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-extractive-injection.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-web-sessions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-poll-recovery.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-409-grace.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-conflict-heal-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-single-instance.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-streaming-split.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-spaces-autoenable.js"
   },
   "files": [
     "bot.js",
@@ -38,6 +38,9 @@
     "test-recall-engine.js",
     "test-recall-graph.js",
     "test-recall-discoverer.js",
+    "test-walker-score.js",
+    "test-score-gate.js",
+    "test-cokept-warming.js",
     "test-project-transcripts-smoke.js",
     "test-abilities.js",
     "test-ability-extraction.js",
@@ -47,6 +50,8 @@
     "test-ability-merge-guard.js",
     "test-learning-e2e.js",
     "test-pack-nesting.js",
+    "test-pack-search.js",
+    "test-extractive-injection.js",
     "test-read-signal.js",
     "test-tools.js",
     "test-tool-graph.js",
@@ -95,6 +100,7 @@
     "test-provider-session-commands.js",
     "test-provider-compaction.js",
     "test-provider-scheduler.js",
+    "test-credential-capture.js",
     "test-cursor-removal.js",
     "test-utility-provider-policy.js",
     "test-provider-subagent.js",

package/test-cokept-warming.js

@@ -0,0 +1,117 @@
+// WS5: asymmetric co-kept warming. Co-OPEN warming (the model actually opened
+// the nodes together) fires at full strength elsewhere; co-KEPT (the walker
+// co-injected them) is a weaker, noisier signal, so it warms by a small amount
+// and only under guards — both endpoints high-confidence (score ≥ warmMinScore),
+// ≥1 message-grounded (user-origin) endpoint, and only the top N pairs. The
+// feature is dark-launched OFF (it writes persistent graph state, so it can't be
+// validated inside one test session). This test covers the pure pair-selection
+// (cokeptPairs) and the end-to-end warming write through disc.run() when ON.
+const assert = require("assert");
+const fs = require("fs");
+const os = require("os");
+const path = require("path");
+
+const tmp = fs.mkdtempSync(path.join(os.tmpdir(), "recall-warm-"));
+process.env.RECALL_GRAPH_DB = path.join(tmp, "graph.db");
+process.env.RECALL_DISCOVERER_WALKER = "on";
+process.env.RECALL_METRICS = "off";
+process.env.TOOLS_DIR = path.join(tmp, "tools");
+process.env.RECALL_CASCADE = "off";
+delete process.env.RECALL_MIN_RELEVANCE_SCORE; // default gate (55) — 80/70 both survive
+delete process.env.RECALL_COKEPT_WARMING; // default OFF unless a case flips it
+
+const disc = require("./core/recall/discoverer");
+const graph = require("./core/recall/graph");
+
+// ── pure: cokeptPairs guards + ranking ───────────────────────────────────────
+const S = (obj) => new Map(Object.entries(obj));
+
+// basic: a high-score grounded pair is warmed
+assert.deepStrictEqual(
+  disc.cokeptPairs(new Set(["pack:a", "pack:b"]), S({ "pack:a": 80, "pack:b": 70 }), new Set(["pack:a"]), { minScore: 60, maxPairs: 3 }),
+  [["pack:a", "pack:b"]], "grounded high-score pair warms");
+
+// grounding guard: neither endpoint is a message-grounded seed → no warming
+assert.deepStrictEqual(
+  disc.cokeptPairs(new Set(["pack:a", "pack:b"]), S({ "pack:a": 90, "pack:b": 90 }), new Set(), { minScore: 60, maxPairs: 3 }),
+  [], "two pure graph hops never reinforce each other (no grounded endpoint)");
+
+// score guard: an endpoint below the floor is dropped, killing the only pair
+assert.deepStrictEqual(
+  disc.cokeptPairs(new Set(["pack:a", "pack:b"]), S({ "pack:a": 80, "pack:b": 50 }), new Set(["pack:a"]), { minScore: 60, maxPairs: 3 }),
+  [], "a below-floor endpoint removes the pair");
+
+// node-type guard: only pack/entity graph nodes count — tools/episodes are not graph nodes
+assert.deepStrictEqual(
+  disc.cokeptPairs(new Set(["pack:a", "tool:t", "episode:e"]), S({ "pack:a": 90, "tool:t": 90, "episode:e": 90 }), new Set(["pack:a"]), { minScore: 60, maxPairs: 3 }),
+  [], "tools and episodes are excluded from co-kept warming");
+
+// entity nodes are eligible too
+assert.deepStrictEqual(
+  disc.cokeptPairs(new Set(["entity:e1", "pack:a"]), S({ "entity:e1": 70, "pack:a": 65 }), new Set(["entity:e1"]), { minScore: 60, maxPairs: 3 }),
+  [["entity:e1", "pack:a"]], "entity↔pack pair warms when grounded + high-score");
+
+// cap + ranking: strongest pairs first, capped at maxPairs
+const three = disc.cokeptPairs(
+  new Set(["pack:a", "pack:b", "pack:c"]),
+  S({ "pack:a": 90, "pack:b": 80, "pack:c": 70 }),
+  new Set(["pack:a", "pack:b", "pack:c"]), { minScore: 60, maxPairs: 2 });
+assert.deepStrictEqual(three, [["pack:a", "pack:b"], ["pack:a", "pack:c"]], "top-2 strongest pairs by combined score");
+const one = disc.cokeptPairs(
+  new Set(["pack:a", "pack:b", "pack:c"]),
+  S({ "pack:a": 90, "pack:b": 80, "pack:c": 70 }),
+  new Set(["pack:a"]), { minScore: 60, maxPairs: 1 });
+assert.deepStrictEqual(one, [["pack:a", "pack:b"]], "maxPairs=1 keeps only the single strongest pair");
+
+// ── integration: warming ON writes a reinforced edge; OFF writes none ─────────
+const packs = {
+  alpha: { dir: "alpha", name: "Alpha", description: "alpha pack", parent: null, tags: [], sections: { Stance: "alpha stance", Procedure: "", State: "", Journal: "" } },
+  beta: { dir: "beta", name: "Beta", description: "beta pack", parent: null, tags: [], sections: { Stance: "beta stance", Procedure: "", State: "", Journal: "" } },
+};
+const packsLib = {
+  matchPacks: (text) => /widget/.test(text) ? [{ dir: "alpha", name: "Alpha", score: 5 }, { dir: "beta", name: "Beta", score: 4 }] : [],
+  readPack: (dir) => packs[dir] || null,
+  listPacks: () => Object.values(packs),
+  searchLines: () => [],
+  PACKS_DIR: tmp,
+};
+const entitiesLib = { matchEntities: () => [], readEntity: () => null, listEntities: () => [], ENTITIES_DIR: tmp };
+const mergeMatches = (primary, secondary, keyOf) => {
+  const out = primary.map((m) => ({ ...m, origin: "user" }));
+  const seen = new Set(primary.map(keyOf));
+  for (const m of secondary) if (!seen.has(keyOf(m))) out.push({ ...m, origin: "context" });
+  return out;
+};
+const buildPackBlock = (matches) => (matches.length ? "PACKBLOCK" : "");
+const buildEntityBlock = (matches) => (matches.length ? "ENTITYBLOCK" : "");
+const helpers = { packsLib, entitiesLib, mergeMatches, buildPackBlock, buildEntityBlock };
+const walkerReturning = (text) => ({
+  warmWalker: { isEnabled: () => false },
+  resolveUtilityProvider: () => ({ provider: {}, providerId: "fake", model: "fake-model" }),
+  spawnUtilityAgent: async () => ({ text, provider: "fake", model: "fake-model" }),
+});
+const QUERY = "tell me about the widget deployment process in detail";
+const KEEP_BOTH = '[{"id":"pack:alpha","why":"relevant","score":80},{"id":"pack:beta","why":"related","score":70}]';
+const reinforcedBetween = (a, b) => graph.allEdges().some((e) =>
+  ((e.src === a && e.dst === b) || (e.src === b && e.dst === a)) && e.type === "related" && e.last_reinforced);
+
+(async () => {
+  // The integration path writes/reads the sqlite-backed graph. CI runs node:20
+  // (no node:sqlite), where graph.reinforce()/allEdges() are no-ops — so, like
+  // test-recall-graph.js, skip the graph-dependent assertions when the graph is
+  // unavailable. The pure cokeptPairs() unit tests above already ran and cover
+  // the selection logic on every node version.
+  if (!graph.available()) { console.log("cokept warming OK (integration skipped — no node:sqlite)"); return; }
+  // OFF (default): both packs kept, but NO reinforced edge is written
+  const off = await disc.run({ userText: QUERY, contextText: "", fullContext: QUERY, packLimit: 6, budget: {}, helpers, walkerOptions: walkerReturning(KEEP_BOTH) });
+  assert.ok(off.packMatches.some((m) => m.dir === "alpha") && off.packMatches.some((m) => m.dir === "beta"), "both packs kept");
+  assert.strictEqual(reinforcedBetween("pack:alpha", "pack:beta"), false, "warming OFF (default) writes no reinforced edge");
+
+  // ON: the co-kept, high-confidence, grounded pair warms its related edge
+  process.env.RECALL_COKEPT_WARMING = "on";
+  await disc.run({ userText: QUERY, contextText: "", fullContext: QUERY, packLimit: 6, budget: {}, helpers, walkerOptions: walkerReturning(KEEP_BOTH) });
+  assert.strictEqual(reinforcedBetween("pack:alpha", "pack:beta"), true, "warming ON reinforces the co-kept pair's related edge");
+  delete process.env.RECALL_COKEPT_WARMING;
+
+  console.log("cokept warming OK");
+})().catch((e) => { console.error(e); process.exit(1); });

package/test-credential-capture.js

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+
+"use strict";
+
+// Loose credential capture: a pasted secret must be stored out-of-band and the
+// turn stopped BEFORE the message reaches the model — regardless of which
+// provider is active. This is the Codex complaint: Codex refuses secrets in its
+// prompt, so the harness has to intercept the paste itself rather than forward
+// it. Two layers are covered here:
+//   1. the pure classifier (core/credential-detect.js) — the decision logic
+//   2. the router wiring (core/router.js) — capture precedes admitRunContext and
+//      each disposition routes to the right sink, provider-agnostically.
+
+const assert = require("assert");
+const fs = require("fs");
+const path = require("path");
+
+const root = __dirname;
+const { classifyPastedCredential } = require("./core/credential-detect");
+
+function classifierProbe() {
+  const kind = (text) => classifyPastedCredential(text).kind;
+
+  // Claude OAuth: the sk-ant- prefix and the long opaque no-sk shape.
+  assert.strictEqual(kind("sk-ant-oat01-" + "A".repeat(40)), "claude");
+  assert.strictEqual(kind("x".repeat(80)), "claude", "long opaque token with no sk- prefix reads as a Claude token");
+  assert.strictEqual(kind("A1b2C3d4_" + "e".repeat(80)), "claude");
+
+  // OpenAI API keys go to the Codex CLI — the whole point of the fix.
+  assert.strictEqual(kind("sk-" + "a".repeat(40)), "openai");
+  assert.strictEqual(kind("sk-proj-" + "b".repeat(40)), "openai");
+
+  // Recognised service prefixes are claimed before the generic Claude heuristic.
+  const keyring = (text) => {
+    const d = classifyPastedCredential(text);
+    return `${d.kind}:${d.name}`;
+  };
+  assert.strictEqual(keyring("glpat-" + "x".repeat(20)), "keyring:gitlab_token");
+  assert.strictEqual(keyring("ghp_" + "x".repeat(36)), "keyring:github_token");
+  assert.strictEqual(keyring("github_pat_" + "x".repeat(40)), "keyring:github_token");
+  assert.strictEqual(keyring("xoxb-" + "1".repeat(20)), "keyring:slack_token");
+  assert.strictEqual(keyring("AKIA" + "ABCDEFGH1234"), "keyring:aws_access_key_id");
+  assert.strictEqual(keyring("AIza" + "a".repeat(30)), "keyring:google_api_key");
+
+  // A long sk-ant- token must win over the generic long-opaque Claude branch,
+  // and over the OpenAI sk- shape.
+  assert.strictEqual(kind("sk-ant-" + "z".repeat(90)), "claude");
+
+  // Labelled single-token secrets land in the keyring with a derived name.
+  const labelled = classifyPastedCredential("token: " + "s".repeat(24));
+  assert.strictEqual(labelled.kind, "keyring");
+  assert.strictEqual(labelled.name, "token");
+  assert.strictEqual(labelled.value, "s".repeat(24));
+  assert.strictEqual(classifyPastedCredential("Bearer " + "t".repeat(24)).name, "bearer_token");
+
+  // A label followed by prose is ordinary text, not a swallowed secret.
+  assert.strictEqual(kind("key: the answer is 42"), "none");
+
+  // Ambiguous medium-length single token → scrub from chat, but let the turn run.
+  assert.strictEqual(kind("A1b2C3d4E5f6G7h8I9j0"), "scrub");
+
+  // Ordinary conversation and empties are left completely alone.
+  assert.strictEqual(kind("hey can you check the deploy status"), "none");
+  assert.strictEqual(kind("what colour are the fish?"), "none");
+  assert.strictEqual(kind(""), "none");
+  assert.strictEqual(kind("   "), "none");
+  assert.strictEqual(kind("short"), "none");
+  assert.strictEqual(kind(null), "none");
+}
+
+function routerWiringProbe() {
+  const source = fs.readFileSync(path.join(root, "core", "router.js"), "utf8");
+
+  // The classifier is imported and driven through a single capture funnel.
+  assert.match(source, /classifyPastedCredential/, "router must use the pure classifier");
+  assert.match(source, /async function captureLooseCredential/, "router must define the capture funnel");
+
+  // Capture must run — and short-circuit the turn — BEFORE the model is admitted,
+  // so a pasted secret never becomes part of a provider prompt.
+  const captureIdx = source.indexOf("if (await captureLooseCredential(");
+  const admitIdx = source.indexOf("admitRunContext(text,");
+  assert.ok(captureIdx > 0, "handleText must call captureLooseCredential");
+  assert.ok(admitIdx > 0, "handleText must still admit ordinary turns");
+  assert.ok(captureIdx < admitIdx, "credential capture must precede admitRunContext so secrets never reach the model");
+
+  // Capture is provider-agnostic: it must not branch on the active backend/provider.
+  const fnStart = source.indexOf("async function captureLooseCredential");
+  const fnEnd = source.indexOf("\nasync function handleText", fnStart);
+  const fnBody = source.slice(fnStart, fnEnd);
+  assert.ok(fnEnd > fnStart, "captureLooseCredential body must be locatable");
+  assert.ok(!/settings\.backend|state\.settings|activeProvider|currentProvider/.test(fnBody),
+    "credential capture must not depend on which provider is active");
+
+  // Each disposition routes to its sink, and every stored secret is redaction-
+  // registered and deleted from the chat.
+  assert.match(fnBody, /saveClaudeOAuthToken\(/, "claude paste → save Claude OAuth token");
+  assert.match(fnBody, /saveCodexApiKeyWithCli\(/, "openai paste → hand to Codex CLI");
+  assert.match(fnBody, /keyring\.set\(/, "recognised secret → operational keyring");
+  assert.match(fnBody, /registerSecrets\(/, "captured secrets are registered for redaction");
+  assert.match(fnBody, /deleteMessage\(/, "captured secrets are deleted from the chat");
+}
+
+function main() {
+  classifierProbe();
+  routerWiringProbe();
+  console.log("credential capture OK");
+}
+
+main();

package/test-extractive-injection.js

@@ -0,0 +1,70 @@
+// WS3: extractive on-open injection. The old headline surfaced Stance only, so
+// a fact living in State/Procedure/Journal never loaded even when it was the
+// reason the pack matched (Defect A — the felt regression). Extractive mode
+// renders Stance verbatim PLUS the exact lines that matched this message, from
+// anywhere in the pack, tagged by section and never paraphrased. Covers: cross-
+// section surfacing, verbatim text, section tags, Stance dedupe, per-section
+// cap, Stance-only fallback, and the unchanged classic headline path.
+const assert = require("assert");
+const { formatPackForContext } = require("./core/system-prompt");
+
+const pack = {
+  dir: "deploy-notes",
+  name: "Deploy Notes",
+  description: "how we ship",
+  parent: null,
+  tags: [],
+  sections: {
+    Stance: "Prefer GitOps for what runs in the cluster.\nNever force-push to main.",
+    Procedure: "Run the smoke test before every deploy.\nTag the release then push via git-release.",
+    State: "The ArgoCD sync for payments is currently paused.\nWaiting on Emmanuel's review.",
+    Journal: "2026-07-01 shipped v3.\n2026-07-02 rolled back v3 then re-shipped.\n2026-06-30 unrelated note about pizza.",
+  },
+};
+const packsLib = { readPack: () => null, listPacks: () => [] };
+
+// ── extractive: Stance verbatim + the matched State line, tagged, not paraphrased ──
+const matched = [
+  { section: "State", lineno: 1, text: "The ArgoCD sync for payments is currently paused.", score: 30 },
+  { section: "Procedure", lineno: 2, text: "Tag the release then push via git-release.", score: 20 },
+];
+const out = formatPackForContext(pack, packsLib, { extractive: true, matchedLines: matched });
+
+assert.ok(/#### Stance\nPrefer GitOps for what runs in the cluster\./.test(out), "Stance shown verbatim");
+assert.ok(/Never force-push to main\./.test(out), "full Stance body preserved");
+assert.ok(/#### State \(matched\)/.test(out), "matched State section is tagged");
+assert.ok(out.includes("The ArgoCD sync for payments is currently paused."), "the matched State fact is surfaced verbatim (Defect-A fix)");
+assert.ok(/#### Procedure \(matched\)/.test(out), "matched Procedure section is tagged");
+assert.ok(out.includes("Tag the release then push via git-release."), "matched Procedure line surfaced verbatim");
+// Un-matched noise must NOT be dumped: the pizza journal line never matched.
+assert.ok(!out.includes("pizza"), "unmatched Journal noise is not injected");
+assert.ok(!out.includes("Waiting on Emmanuel"), "unmatched State line is not injected");
+assert.ok(/open-claudia pack show deploy-notes/.test(out), "points to the full pack for more");
+
+// ── Stance dedupe: a matched line that IS a Stance line is not repeated ──
+const dupMatched = [{ section: "Stance", text: "Never force-push to main.", score: 20 },
+  { section: "State", text: "Prefer GitOps for what runs in the cluster.", score: 20 }]; // same text as a Stance line
+const outDup = formatPackForContext(pack, packsLib, { extractive: true, matchedLines: dupMatched });
+// "Prefer GitOps..." appears once (in Stance), not again under State (matched).
+const gitopsCount = (outDup.match(/Prefer GitOps for what runs in the cluster\./g) || []).length;
+assert.strictEqual(gitopsCount, 1, "a matched line equal to a Stance line is not duplicated");
+
+// ── per-section cap: at most EXTRACTIVE_LINES_PER_SECTION (4) lines per section ──
+const many = Array.from({ length: 9 }, (_, i) => ({ section: "Journal", text: `2026-07-${10 + i} note number ${i}`, score: 10 }));
+const outMany = formatPackForContext(pack, packsLib, { extractive: true, matchedLines: many });
+const journalBullets = (outMany.match(/note number \d/g) || []).length;
+assert.ok(journalBullets <= 4, `per-section cap holds (got ${journalBullets})`);
+
+// ── Stance-only fallback: extractive with no matched lines → Stance + pointer, no (matched) blocks ──
+const outNone = formatPackForContext(pack, packsLib, { extractive: true, matchedLines: [] });
+assert.ok(/#### Stance/.test(outNone), "Stance still shown when nothing matched");
+assert.ok(!/\(matched\)/.test(outNone), "no (matched) sections when there were no line hits");
+assert.ok(/Showing Stance\./.test(outNone), "fallback pointer explains only Stance is shown");
+
+// ── classic headline path unchanged: Stance only, heavier sections hidden ──
+const outHeadline = formatPackForContext(pack, packsLib, { headline: true });
+assert.ok(/#### Stance/.test(outHeadline), "headline still shows Stance");
+assert.ok(!outHeadline.includes("The ArgoCD sync for payments"), "headline does NOT inline State (unchanged legacy behavior)");
+assert.ok(/not shown/.test(outHeadline), "headline still points to hidden sections");
+
+console.log("extractive injection OK");