@jigyasudham/veto 3.3.0 → 3.5.0

package/dist/lessons/adapters/gemini.js

@@ -0,0 +1,44 @@
+import { createHash } from 'node:crypto';
+import { parseMarkdownMemory } from './markdown.js';
+// Gemini CLI's save_memory tool appends `- <fact>` lines under this heading in
+// ~/.gemini/GEMINI.md; the rest of the file is the user's own instructions.
+export const GEMINI_MEMORY_HEADING = 'Gemini Added Memories';
+/**
+ * One saved fact per section. Anchors hash the fact rather than count bullets,
+ * so inserting a memory does not re-key every memory after it.
+ */
+function splitSavedMemories(section) {
+    const facts = [];
+    const rest = [];
+    for (const line of section.text.split('\n').slice(1)) {
+        const bullet = /^\s*[-*]\s+(.+)$/.exec(line);
+        if (bullet)
+            facts.push(bullet[1].trim());
+        else if (/^\s+\S/.test(line) && facts.length)
+            facts[facts.length - 1] += ` ${line.trim()}`;
+        else if (line.trim())
+            rest.push(line);
+    }
+    const seen = new Set();
+    const out = [];
+    for (const fact of facts) {
+        const anchor = `${section.anchor}-${createHash('sha256').update(fact).digest('hex').slice(0, 8)}`;
+        if (seen.has(anchor))
+            continue;
+        seen.add(anchor);
+        out.push({ anchor, title: section.title, text: fact });
+    }
+    if (rest.length)
+        out.push({ ...section, text: `${section.title}\n${rest.join('\n')}` });
+    return out;
+}
+export function parseGeminiMemory(raw, fileName = '') {
+    const parsed = parseMarkdownMemory(raw, fileName || 'GEMINI.md');
+    if (!parsed.ok || 'skip' in parsed)
+        return parsed;
+    return {
+        ...parsed,
+        sections: parsed.sections.flatMap(section => section.title === GEMINI_MEMORY_HEADING ? splitSavedMemories(section) : [section]),
+    };
+}
+//# sourceMappingURL=gemini.js.map

package/dist/lessons/adapters/gemini.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.js","sourceRoot":"","sources":["../../../src/lessons/adapters/gemini.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGpD,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAE7D;;;GAGG;AACH,SAAS,kBAAkB,CAAC,OAAsB;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aACpC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;aACtF,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAClG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,QAAQ,GAAG,EAAE;IAC1D,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,QAAQ,IAAI,WAAW,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAClD,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAC1C,OAAO,CAAC,KAAK,KAAK,qBAAqB,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;KACrF,CAAC;AACJ,CAAC"}

package/dist/lessons/adapters/index.d.ts

@@ -0,0 +1,6 @@
+import type { LessonSource, MemoryParseResult } from './types.js';
+export type { LessonSource, MemoryFrontmatter, MemoryParseResult, MemorySection } from './types.js';
+export { LESSON_SOURCES } from './types.js';
+/** Parse one native-memory document using its host-specific adapter. */
+export declare function parseNativeMemory(source: LessonSource, raw: string, fileName?: string): MemoryParseResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/lessons/adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lessons/adapters/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAElE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAQ5C,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAK,GAAG,iBAAiB,CAErG"}

package/dist/lessons/adapters/index.js

@@ -0,0 +1,14 @@
+import { parseClaudeMemory } from './claude.js';
+import { parseCodexMemory } from './codex.js';
+import { parseGeminiMemory } from './gemini.js';
+export { LESSON_SOURCES } from './types.js';
+const PARSERS = {
+    claude: parseClaudeMemory,
+    codex: parseCodexMemory,
+    gemini: parseGeminiMemory,
+};
+/** Parse one native-memory document using its host-specific adapter. */
+export function parseNativeMemory(source, raw, fileName = '') {
+    return PARSERS[source](raw, fileName);
+}
+//# sourceMappingURL=index.js.map

package/dist/lessons/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lessons/adapters/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIhD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,OAAO,GAA+E;IAC1F,MAAM,EAAE,iBAAiB;IACzB,KAAK,EAAE,gBAAgB;IACvB,MAAM,EAAE,iBAAiB;CAC1B,CAAC;AAEF,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,GAAW,EAAE,QAAQ,GAAG,EAAE;IAChF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC"}

package/dist/lessons/adapters/markdown.d.ts

@@ -0,0 +1,16 @@
+import type { MemoryParseResult, MemorySection } from './types.js';
+export declare function normalizeMarkdown(raw: string): string;
+/**
+ * Split a Markdown body into section-level notes. Text before the first heading
+ * is a note of its own (most Claude entries have no heading at all). Headings
+ * inside fenced code are not structure, and a heading with no body is only a
+ * document title. Anchors are unique within the document.
+ */
+export declare function splitSections(body: string, fallbackTitle: string): MemorySection[];
+/**
+ * Native memory documents are Markdown, optionally with YAML frontmatter.
+ * Only shapes that cannot be Markdown count as drift and fail closed; a
+ * headingless entry is the normal Claude shape, not drift.
+ */
+export declare function parseMarkdownMemory(raw: string, fallbackTitle?: string): MemoryParseResult;
+//# sourceMappingURL=markdown.d.ts.map

package/dist/lessons/adapters/markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../../src/lessons/adapters/markdown.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAqB,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAMtF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAErD;AAiDD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,aAAa,EAAE,CAyBlF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,SAAK,GAAG,iBAAiB,CAwBtF"}

package/dist/lessons/adapters/markdown.js

@@ -0,0 +1,130 @@
+const FRONTMATTER_RE = /^---\n([\s\S]*?)\n---[ \t]*(?:\n|$)/;
+const HEADING_RE = /^(#{1,6})\s+(.+?)(?:\s+#+)?\s*$/;
+const FENCE_RE = /^\s*(```|~~~)/;
+export function normalizeMarkdown(raw) {
+    return raw.replace(/^\uFEFF/, '').replace(/\r\n?/g, '\n');
+}
+/**
+ * The guide `veto init` used to write over ~/.gemini/GEMINI.md and
+ * ~/.codex/AGENTS.override.md. It is Veto's own text, not a host's memory.
+ * Every version of it has exactly one heading, so it is always exactly one
+ * section, and a host that later appended its own memories below it keeps them.
+ */
+function isVetoGuideSection(section) {
+    return section.title === 'Veto MCP Server' && /\bVeto is active\b/.test(section.text);
+}
+function unquote(value) {
+    const v = value.trim();
+    if (v.length >= 2 && v.startsWith('"') && v.endsWith('"'))
+        return v.slice(1, -1).replace(/\\(["\\])/g, '$1');
+    if (v.length >= 2 && v.startsWith("'") && v.endsWith("'"))
+        return v.slice(1, -1).replace(/''/g, "'");
+    return v;
+}
+/**
+ * Just enough YAML for memory frontmatter: top-level `name`/`description`, and
+ * `type` either top-level (older entries) or nested under `metadata:` (current
+ * Claude entries). Block scalars are ignored rather than guessed at.
+ */
+function readFrontmatter(yaml) {
+    const out = {};
+    let parent = null;
+    for (const line of yaml.split('\n')) {
+        const m = /^(\s*)([A-Za-z_][\w-]*):[ \t]*(.*)$/.exec(line);
+        if (!m)
+            continue;
+        const [, indent, key, rawValue] = m;
+        const value = rawValue.trim();
+        if (indent.length === 0) {
+            parent = value === '' ? key : null;
+            if (value === '' || value === '|' || value === '>')
+                continue;
+            if (key === 'name')
+                out.name = unquote(value);
+            else if (key === 'description')
+                out.description = unquote(value);
+            else if (key === 'type')
+                out.type = unquote(value).toLowerCase();
+        }
+        else if (parent === 'metadata' && key === 'type' && value) {
+            out.type = unquote(value).toLowerCase();
+        }
+    }
+    return out;
+}
+function slug(title) {
+    return title.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '');
+}
+/**
+ * Split a Markdown body into section-level notes. Text before the first heading
+ * is a note of its own (most Claude entries have no heading at all). Headings
+ * inside fenced code are not structure, and a heading with no body is only a
+ * document title. Anchors are unique within the document.
+ */
+export function splitSections(body, fallbackTitle) {
+    const lines = body.split('\n');
+    const headings = [];
+    let inFence = false;
+    lines.forEach((line, index) => {
+        if (FENCE_RE.test(line)) {
+            inFence = !inFence;
+            return;
+        }
+        if (inFence)
+            return;
+        const m = HEADING_RE.exec(line);
+        if (m)
+            headings.push({ index, title: m[2].trim() });
+    });
+    const raw = [];
+    const preamble = lines.slice(0, headings[0]?.index ?? lines.length).join('\n').trim();
+    if (preamble)
+        raw.push({ base: 'body', title: fallbackTitle, body: preamble });
+    headings.forEach((heading, i) => {
+        const text = lines.slice(heading.index + 1, headings[i + 1]?.index ?? lines.length).join('\n').trim();
+        if (text)
+            raw.push({ base: slug(heading.title) || `section-${i + 1}`, title: heading.title, body: text });
+    });
+    const seen = new Map();
+    return raw.map(({ base, title, body: text }) => {
+        const n = (seen.get(base) ?? 0) + 1;
+        seen.set(base, n);
+        return { anchor: n === 1 ? base : `${base}-${n}`, title, text: title ? `${title}\n${text}` : text };
+    });
+}
+/**
+ * Native memory documents are Markdown, optionally with YAML frontmatter.
+ * Only shapes that cannot be Markdown count as drift and fail closed; a
+ * headingless entry is the normal Claude shape, not drift.
+ */
+export function parseMarkdownMemory(raw, fallbackTitle = '') {
+    const text = normalizeMarkdown(raw);
+    if (text.includes('\u0000'))
+        return { ok: false, reason: 'binary content where Markdown was expected' };
+    const trimmed = text.trim();
+    if (!trimmed)
+        return { ok: true, skip: 'empty' };
+    if (/^[[{]/.test(trimmed)) {
+        try {
+            JSON.parse(trimmed);
+            return { ok: false, reason: 'JSON document where Markdown was expected' };
+        }
+        catch { /* Markdown that happens to start with a bracket */ }
+    }
+    let frontmatter = {};
+    let body = text;
+    if (text.startsWith('---\n')) {
+        const fm = FRONTMATTER_RE.exec(text);
+        if (!fm)
+            return { ok: false, reason: 'frontmatter is not terminated' };
+        frontmatter = readFrontmatter(fm[1]);
+        body = text.slice(fm[0].length);
+    }
+    const title = frontmatter.description || frontmatter.name || fallbackTitle;
+    const all = splitSections(body, title);
+    const sections = all.filter(section => !isVetoGuideSection(section));
+    if (sections.length)
+        return { ok: true, frontmatter, sections };
+    return { ok: true, skip: all.length ? 'veto-authored' : 'empty' };
+}
+//# sourceMappingURL=markdown.js.map

package/dist/lessons/adapters/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../../src/lessons/adapters/markdown.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAC7D,MAAM,UAAU,GAAG,iCAAiC,CAAC;AACrD,MAAM,QAAQ,GAAG,eAAe,CAAC;AAEjC,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,OAAsB;IAChD,OAAO,OAAO,CAAC,KAAK,KAAK,iBAAiB,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC7G,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrG,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YACnC,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;gBAAE,SAAS;YAC7D,IAAI,GAAG,KAAK,MAAM;gBAAE,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;iBACzC,IAAI,GAAG,KAAK,aAAa;gBAAE,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;iBAC5D,IAAI,GAAG,KAAK,MAAM;gBAAE,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnE,CAAC;aAAM,IAAI,MAAM,KAAK,UAAU,IAAI,GAAG,KAAK,MAAM,IAAI,KAAK,EAAE,CAAC;YAC5D,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,aAAqB;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAA4C,EAAE,CAAC;IAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,OAAO,CAAC;YAAC,OAAO;QAAC,CAAC;QACxD,IAAI,OAAO;YAAE,OAAO;QACpB,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAyD,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACtF,IAAI,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/E,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACtG,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtG,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,aAAa,GAAG,EAAE;IACjE,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IACxG,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;QAAC,CAAC;QACvG,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,WAAW,GAAsB,EAAE,CAAC;IACxC,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QACvE,WAAW,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,IAAI,IAAI,aAAa,CAAC;IAC3E,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AACpE,CAAC"}

package/dist/lessons/adapters/types.d.ts

@@ -0,0 +1,27 @@
+export declare const LESSON_SOURCES: readonly ["claude", "codex", "gemini"];
+export type LessonSource = (typeof LESSON_SOURCES)[number];
+export type MemorySection = {
+    anchor: string;
+    /** Heading, or the entry's frontmatter description/name for body text. */
+    title: string;
+    /** Title and body as one note; this is what gets masked and stored. */
+    text: string;
+};
+export type MemoryFrontmatter = {
+    name?: string;
+    description?: string;
+    /** Claude memory type: user | feedback | project | reference. */
+    type?: string;
+};
+export type MemoryParseResult = {
+    ok: true;
+    frontmatter: MemoryFrontmatter;
+    sections: MemorySection[];
+} | {
+    ok: true;
+    skip: 'empty' | 'index' | 'veto-authored';
+} | {
+    ok: false;
+    reason: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/lessons/adapters/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lessons/adapters/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,wCAAyC,CAAC;AACrE,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,iBAAiB,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,GAGvE;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,eAAe,CAAA;CAAE,GAEvD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/lessons/adapters/types.js

@@ -0,0 +1,2 @@
+export const LESSON_SOURCES = ['claude', 'codex', 'gemini'];
+//# sourceMappingURL=types.js.map

package/dist/lessons/adapters/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/lessons/adapters/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC"}

package/dist/lessons/classify.d.ts

@@ -0,0 +1,33 @@
+import type { LessonSource, MemoryFrontmatter, MemorySection } from './adapters/index.js';
+export type LessonScope = 'project' | 'user' | 'machine';
+/** Which rule set the scope; `veto lessons why` explains it from this. */
+export type ScopeReason = 'global-file' | 'names-project' | 'user-entry' | 'feedback-entry' | 'environment-heading' | 'project-default';
+export type LessonClassification = {
+    scope: LessonScope;
+    scopeReason: ScopeReason;
+    kind: string;
+    /** Non-null keeps the note inside its own project, whatever its scope. */
+    quarantineReason: string | null;
+};
+export declare function isSensitiveNote(fileName: string, frontmatter: MemoryFrontmatter, sectionTitle: string): boolean;
+/**
+ * Scope rules. User and machine scope can come ONLY from the sources below,
+ * and even then a note that names its own project is about that project:
+ * - a host's GLOBAL file (~/.codex/AGENTS.md, ~/.gemini/GEMINI.md) is the
+ *   user's own standing instructions → user;
+ * - a Claude entry typed `user` or `feedback` → user;
+ * - a section whose heading names the environment → machine;
+ * - everything else, including anything untyped → project.
+ */
+export declare function classifyLesson(input: {
+    source: LessonSource;
+    fileName: string;
+    global: boolean;
+    frontmatter: MemoryFrontmatter;
+    section: MemorySection;
+    maskedText: string;
+    secrets: number;
+    /** The note's own project's names (folder, repository); empty for global files. */
+    projectNames?: string[];
+}): LessonClassification;
+//# sourceMappingURL=classify.d.ts.map

package/dist/lessons/classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../src/lessons/classify.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE1F,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAEzD,0EAA0E;AAC1E,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,eAAe,GAAG,YAAY,GAAG,gBAAgB,GAAG,qBAAqB,GAAG,iBAAiB,CAAC;AAExI,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,WAAW,CAAC;IACnB,WAAW,EAAE,WAAW,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAAC;AA6DF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAE/G;AASD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE;IACpC,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB,GAAG,oBAAoB,CAWvB"}

package/dist/lessons/classify.js

@@ -0,0 +1,108 @@
+// Deterministic classification of a harvested section (council 320c40dc).
+//
+// Scope decides WHERE a note may go; quarantine decides whether it may leave
+// its own project at all. Both are rules, not judgement: "ambiguous" always
+// resolves to the narrower answer, because a wrong narrow call costs a missed
+// note while a wrong wide call spreads text into other projects and vendors.
+// Notes ABOUT secrets, identity, sanitization or credentials never cross scope.
+// Matched on what names the note (file name, entry name and description,
+// section heading), not on every passing mention in its body.
+const SENSITIVE_NAME_RE = /(secret|credential|passw(or)?d|api[-_ ]?key|private[-_ ]?key|ssh[-_ ]?key|access[-_ ]?token|auth[-_ ]?token|api[-_ ]?token|identit(y|ies)|saniti[sz]|\bpii\b|personal|profile|employer)/i;
+// A section whose heading names the shell, console or network environment is a
+// machine lesson (cp1252, Git Bash quoting, dead IPv6). Heading only: a body
+// that merely mentions PowerShell is still a project note.
+const ENVIRONMENT_TITLE_RE = /\b(git[ -]bash|powershell|pwsh|cmd\.exe|wsl|cp\d{3,4}|code ?page|encoding|utf-?8|crlf|line endings?|ipv[46]|dns|proxy|locale|terminal|console|shell)\b/i;
+const URL_RE = /\b(?:https?|ftp|file|ssh|git|wss?):\/\/|\bwww\.[a-z0-9-]+\.[a-z]{2,}/i;
+const EXECUTABLES = [
+    'npm', 'npx', 'pnpm', 'yarn', 'bun', 'node', 'deno', 'python3?', 'py', 'pip3?', 'uv', 'uvx', 'git', 'gh',
+    'curl', 'wget', 'ssh', 'scp', 'rsync', 'nc', 'ncat', 'telnet', 'ftp', 'docker', 'kubectl', 'helm',
+    'terraform', 'aws', 'gcloud', 'az', 'powershell(?:\\.exe)?', 'pwsh', 'cmd(?:\\.exe)?', 'bash', 'sh', 'zsh',
+    'sudo', 'chmod', 'chown', 'rm', 'del', 'rmdir', 'mv', 'cp', 'iwr', 'irm', 'iex', 'invoke-webrequest',
+    'invoke-restmethod', 'invoke-expression', 'start-process', 'remove-item', 'set-executionpolicy', 'reg',
+    'schtasks', 'certutil', 'bitsadmin', 'mshta', 'rundll32', 'regsvr32', 'msiexec', 'winget', 'choco', 'scoop',
+    'brew', 'apt(?:-get)?', 'yum', 'dnf', 'cargo', 'make', 'mcp-publisher', 'smithery', 'veto',
+].join('|');
+const EXEC = `(?:${EXECUTABLES})(?:\\.(?:cmd|exe|bat|ps1))?`;
+// Prose lines are NOT scanned for a leading executable ("Make sure…", "Node
+// 22.13 is the floor"); commands are recognised where commands are written:
+// behind a prompt, inside a code span, inside a fence, or after "run".
+const PROMPT_LINE_RE = /(?:^|\n)[ \t]*(?:\$|PS>|PS [^>\n]*>)[ \t]*\S/;
+const COMMAND_SPAN_RE = new RegExp('`[ \\t]*(?:\\$[ \\t]*)?' + EXEC + '(?:[ \\t][^`]*)?`', 'i');
+const FENCED_LINE_RE = new RegExp(`^[ \\t]*(?:\\$[ \\t]*)?${EXEC}(?:[ \\t]|$)`, 'i');
+const SHELL_FENCE_RE = /(?:^|\n)[ \t]*(?:```|~~~)[ \t]*(?:bash|sh|zsh|shell|console|terminal|powershell|pwsh|ps1?|cmd|bat|batch)\b/i;
+const PIPE_TO_SHELL_RE = /\|\s*(?:sh|bash|zsh|iex|invoke-expression|powershell|pwsh)\b/i;
+const RUN_DIRECTIVE_RE = new RegExp(`\\b(?:run|execute|exec|type|paste|invoke)\\s+[\`'"]?${EXEC}\\b`, 'i');
+const DIRECTIVE_RES = [
+    /\b(?:ignore|disregard|override|forget)\b[^.\n]{0,30}\b(?:previous|prior|above|system|all|earlier)\b[^.\n]{0,20}\b(?:instructions?|rules?|prompts?|guidelines?)\b/i,
+    /\b(?:always|must|should)\s+(?:run|execute)\s+(?:this|these|it|them|the following)\b/i,
+    /\b(?:always|must|should)\s+(?:download|fetch|install|open|visit|send|upload)\b/i,
+    /\b(?:download|fetch)\b[^.\n]{0,60}\b(?:from|url|link|script)\b/i,
+    /\b(?:send|post|upload|exfiltrate|forward)\b[^.\n]{0,60}\bto\b[^.\n]{0,40}(?:\[email redacted\]|server|endpoint|webhook|url|address)/i,
+];
+function fencedCommand(text) {
+    let inFence = false;
+    for (const line of text.split('\n')) {
+        if (/^\s*(```|~~~)/.test(line)) {
+            inFence = !inFence;
+            continue;
+        }
+        if (inFence && FENCED_LINE_RE.test(line))
+            return true;
+    }
+    return false;
+}
+function quarantineReason(text, secrets, sensitive) {
+    if (sensitive)
+        return 'sensitive';
+    if (secrets > 0 || /REDACTED\[sha256:/.test(text))
+        return 'credential';
+    if (URL_RE.test(text))
+        return 'url';
+    if (SHELL_FENCE_RE.test(text) || PROMPT_LINE_RE.test(text) || COMMAND_SPAN_RE.test(text) || fencedCommand(text)
+        || PIPE_TO_SHELL_RE.test(text) || RUN_DIRECTIVE_RE.test(text))
+        return 'command';
+    if (DIRECTIVE_RES.some(re => re.test(text)))
+        return 'directive';
+    return null;
+}
+export function isSensitiveNote(fileName, frontmatter, sectionTitle) {
+    return [fileName, frontmatter.name, frontmatter.description, sectionTitle].some(label => SENSITIVE_NAME_RE.test(label ?? ''));
+}
+function namesProject(text, names) {
+    return names.some(name => {
+        const pattern = name.trim().split(/[\s_-]+/).map(part => part.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('[\\s_-]+');
+        return pattern && new RegExp(`(?<![\\p{L}\\p{N}])${pattern}(?![\\p{L}\\p{N}])`, 'iu').test(text);
+    });
+}
+/**
+ * Scope rules. User and machine scope can come ONLY from the sources below,
+ * and even then a note that names its own project is about that project:
+ * - a host's GLOBAL file (~/.codex/AGENTS.md, ~/.gemini/GEMINI.md) is the
+ *   user's own standing instructions → user;
+ * - a Claude entry typed `user` or `feedback` → user;
+ * - a section whose heading names the environment → machine;
+ * - everything else, including anything untyped → project.
+ */
+export function classifyLesson(input) {
+    const type = input.frontmatter.type;
+    const kind = type ?? (input.global ? 'instructions' : 'note');
+    let scope = 'project';
+    let scopeReason = 'project-default';
+    if (input.global) {
+        scope = 'user';
+        scopeReason = 'global-file';
+    }
+    else if (namesProject(input.maskedText, input.projectNames ?? []))
+        scopeReason = 'names-project';
+    else if (type === 'user' || type === 'feedback') {
+        scope = 'user';
+        scopeReason = `${type}-entry`;
+    }
+    else if (ENVIRONMENT_TITLE_RE.test(input.section.title)) {
+        scope = 'machine';
+        scopeReason = 'environment-heading';
+    }
+    const sensitive = isSensitiveNote(input.fileName, input.frontmatter, input.section.title);
+    return { scope, scopeReason, kind, quarantineReason: quarantineReason(input.maskedText, input.secrets, sensitive) };
+}
+//# sourceMappingURL=classify.js.map

package/dist/lessons/classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.js","sourceRoot":"","sources":["../../src/lessons/classify.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAiB7E,gFAAgF;AAChF,yEAAyE;AACzE,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,0LAA0L,CAAC;AAErN,+EAA+E;AAC/E,6EAA6E;AAC7E,2DAA2D;AAC3D,MAAM,oBAAoB,GAAG,yJAAyJ,CAAC;AAEvL,MAAM,MAAM,GAAG,uEAAuE,CAAC;AAEvF,MAAM,WAAW,GAAG;IAClB,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI;IACxG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM;IACjG,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK;IAC1G,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB;IACpG,mBAAmB,EAAE,mBAAmB,EAAE,eAAe,EAAE,aAAa,EAAE,qBAAqB,EAAE,KAAK;IACtG,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO;IAC3G,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM;CAC3F,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACZ,MAAM,IAAI,GAAG,MAAM,WAAW,8BAA8B,CAAC;AAC7D,4EAA4E;AAC5E,4EAA4E;AAC5E,uEAAuE;AACvE,MAAM,cAAc,GAAG,8CAA8C,CAAC;AACtE,MAAM,eAAe,GAAG,IAAI,MAAM,CAAC,yBAAyB,GAAG,IAAI,GAAG,mBAAmB,EAAE,GAAG,CAAC,CAAC;AAChG,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,0BAA0B,IAAI,cAAc,EAAE,GAAG,CAAC,CAAC;AACrF,MAAM,cAAc,GAAG,6GAA6G,CAAC;AACrI,MAAM,gBAAgB,GAAG,+DAA+D,CAAC;AACzF,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,uDAAuD,IAAI,KAAK,EAAE,GAAG,CAAC,CAAC;AAE3G,MAAM,aAAa,GAAa;IAC9B,mKAAmK;IACnK,sFAAsF;IACtF,iFAAiF;IACjF,iEAAiE;IACjE,sIAAsI;CACvI,CAAC;AAEF,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,OAAO,CAAC;YAAC,SAAS;QAAC,CAAC;QACjE,IAAI,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAe,EAAE,SAAkB;IACzE,IAAI,SAAS;QAAE,OAAO,WAAW,CAAC;IAClC,IAAI,OAAO,GAAG,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IACvE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC;WAC1G,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,WAA8B,EAAE,YAAoB;IACpG,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;AAChI,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAe;IACjD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvH,OAAO,OAAO,IAAI,IAAI,MAAM,CAAC,sBAAsB,OAAO,oBAAoB,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAU9B;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,KAAK,GAAgB,SAAS,CAAC;IACnC,IAAI,WAAW,GAAgB,iBAAiB,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAAC,KAAK,GAAG,MAAM,CAAC;QAAC,WAAW,GAAG,aAAa,CAAC;IAAC,CAAC;SAC7D,IAAI,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;QAAE,WAAW,GAAG,eAAe,CAAC;SAC5F,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QAAC,KAAK,GAAG,MAAM,CAAC;QAAC,WAAW,GAAG,GAAG,IAAI,QAAQ,CAAC;IAAC,CAAC;SAC9F,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,KAAK,GAAG,SAAS,CAAC;QAAC,WAAW,GAAG,qBAAqB,CAAC;IAAC,CAAC;IACpH,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1F,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;AACtH,CAAC"}

package/dist/lessons/consent.d.ts

@@ -0,0 +1,30 @@
+import { type LessonSyncReport } from './harvest.js';
+/**
+ * What each AI CLI sets in the environment of the commands it runs.
+ * CLAUDECODE and AI_AGENT are set by Claude Code (checked on this machine);
+ * GEMINI_CLI by Gemini CLI's shell tool; the CODEX_ ones by Codex's sandboxed
+ * and npm-launched runs. A real terminal is required as well, so a marker a
+ * host does not set is not the only line of defence.
+ */
+export declare const AI_SESSION_MARKERS: readonly ["CLAUDECODE", "AI_AGENT", "GEMINI_CLI", "CODEX_SANDBOX", "CODEX_SANDBOX_NETWORK_DISABLED", "CODEX_MANAGED_BY_NPM"];
+/** The marker showing an AI is running this command, or null in the user's own terminal. */
+export declare function detectAiSession(env?: NodeJS.ProcessEnv): string | null;
+/**
+ * The disclosure shown before the user accepts. Changing what it promises
+ * means bumping LESSONS_CONSENT_VERSION, and so does starting delivery: this
+ * text promises to ask again first.
+ */
+export declare function lessonsDisclosure(): string;
+export type ConsentSummary = {
+    report: LessonSyncReport;
+    notes: number;
+    projects: number;
+    anyProject: number;
+    ownProject: number;
+    unlinked: number;
+    byHost: Record<'claude' | 'codex' | 'gemini', number>;
+    disabledHosts: string[];
+};
+/** Record consent, read every AI's memory once, and summarise what was found. */
+export declare function acceptLessonsConsent(home?: string): ConsentSummary;
+//# sourceMappingURL=consent.d.ts.map

package/dist/lessons/consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.d.ts","sourceRoot":"","sources":["../../src/lessons/consent.ts"],"names":[],"mappings":"AAOA,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGxE;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,8HAA+H,CAAC;AAE/J,4FAA4F;AAC5F,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAEnF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CA0C1C;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtD,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEF,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,cAAc,CAelE"}

package/dist/lessons/consent.js

@@ -0,0 +1,86 @@
+// Consent v2 for Harvest-and-Share (council 320c40dc, legal conditions): it
+// names both flows, across projects and between AI vendors, is OFF by default,
+// and no upgrade can switch it on. Only the user can accept it, typing "yes"
+// in a terminal of their own: a command an AI runs is refused, so no AI can
+// turn sharing on for them (owner decision, 2026-09-19).
+import { enableLessonsSharing } from '../memory/config.js';
+import { syncLessonSources } from './harvest.js';
+import { lessonFlows, lessonsStatus, unresolvedFolders } from './manage.js';
+/**
+ * What each AI CLI sets in the environment of the commands it runs.
+ * CLAUDECODE and AI_AGENT are set by Claude Code (checked on this machine);
+ * GEMINI_CLI by Gemini CLI's shell tool; the CODEX_ ones by Codex's sandboxed
+ * and npm-launched runs. A real terminal is required as well, so a marker a
+ * host does not set is not the only line of defence.
+ */
+export const AI_SESSION_MARKERS = ['CLAUDECODE', 'AI_AGENT', 'GEMINI_CLI', 'CODEX_SANDBOX', 'CODEX_SANDBOX_NETWORK_DISABLED', 'CODEX_MANAGED_BY_NPM'];
+/** The marker showing an AI is running this command, or null in the user's own terminal. */
+export function detectAiSession(env = process.env) {
+    return AI_SESSION_MARKERS.find(name => (env[name] ?? '') !== '') ?? null;
+}
+/**
+ * The disclosure shown before the user accepts. Changing what it promises
+ * means bumping LESSONS_CONSENT_VERSION, and so does starting delivery: this
+ * text promises to ask again first.
+ */
+export function lessonsDisclosure() {
+    return [
+        'What you are turning on: sharing between your AIs\' notes',
+        '',
+        'Claude, Codex and Gemini each keep notes in their own memory (Claude\'s',
+        'memory folders, ~/.codex/AGENTS.md, ~/.gemini/GEMINI.md). With sharing on,',
+        'Veto passes those notes on where they help:',
+        '',
+        '  • ACROSS YOUR PROJECTS: a note about you or this computer, written while',
+        '    you worked on one project, can be shared into your other projects.',
+        '  • BETWEEN AIs: a note one AI wrote can be shared with the others, so a',
+        '    note Claude wrote can reach Codex and Gemini, and the other way round.',
+        '    A note given to an AI goes to that AI\'s company as part of your',
+        '    conversation, like anything else you send it.',
+        '',
+        'What Veto does, and does not do:',
+        '  • It only reads those memory files. It never changes or deletes them.',
+        '  • It reads them again each time you save a session, so notes you make',
+        '    today are picked up without you running anything. `veto lessons off`',
+        '    stops it, and so does turning harvest_on_save off in Veto\'s config.',
+        '  • It keeps a copy of each note in its own database on this computer,',
+        '    with email addresses, your home folder and anything that looks like a',
+        '    password or key removed first. Veto itself uploads nothing.',
+        '  • A note stays in its own project if it is about that project, or if it',
+        '    contains a command, a web address, a credential or an instruction to',
+        '    fetch, send or run something. Notes about secrets or personal details',
+        '    never leave their project.',
+        '  • A shared note is marked as information from another AI session, never',
+        '    as an instruction to follow.',
+        '',
+        'For now this is a trial: Veto reads the notes and keeps its own masked',
+        'copy of them on this computer, but gives none of them to any AI yet, and',
+        'works out nothing about which ones it would give. Before it starts giving',
+        'notes to your AIs, Veto will ask you again.',
+        '',
+        'You stay in control:',
+        '  veto lessons list          every note Veto has read',
+        '  veto lessons why <id>      one note, where it came from, where it may go',
+        '  veto lessons forget <id>   stop one note for good',
+        '  veto lessons exclude       keep the current project out entirely',
+        '  veto lessons off           turn sharing off and delete everything Veto copied',
+    ].join('\n');
+}
+/** Record consent, read every AI's memory once, and summarise what was found. */
+export function acceptLessonsConsent(home) {
+    enableLessonsSharing();
+    const report = syncLessonSources(home);
+    const status = lessonsStatus();
+    const flows = lessonFlows();
+    return {
+        report,
+        notes: status.notes,
+        projects: new Set(flows.filter(f => !f.projectIdentity.startsWith('global:')).map(f => f.projectIdentity)).size,
+        anyProject: status.anyProject,
+        ownProject: flows.reduce((sum, f) => sum + f.ownProject + f.nowhere, 0),
+        unlinked: unresolvedFolders().length,
+        byHost: status.byHost,
+        disabledHosts: [...status.disabledHosts.keys()],
+    };
+}
+//# sourceMappingURL=consent.js.map

package/dist/lessons/consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.js","sourceRoot":"","sources":["../../src/lessons/consent.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,yDAAyD;AAEzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAyB,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,gCAAgC,EAAE,sBAAsB,CAAU,CAAC;AAE/J,4FAA4F;AAC5F,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,2DAA2D;QAC3D,EAAE;QACF,yEAAyE;QACzE,4EAA4E;QAC5E,6CAA6C;QAC7C,EAAE;QACF,4EAA4E;QAC5E,wEAAwE;QACxE,0EAA0E;QAC1E,4EAA4E;QAC5E,sEAAsE;QACtE,mDAAmD;QACnD,EAAE;QACF,kCAAkC;QAClC,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,iEAAiE;QACjE,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,gCAAgC;QAChC,2EAA2E;QAC3E,kCAAkC;QAClC,EAAE;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,6CAA6C;QAC7C,EAAE;QACF,sBAAsB;QACtB,uDAAuD;QACvD,4EAA4E;QAC5E,qDAAqD;QACrD,oEAAoE;QACpE,iFAAiF;KAClF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAaD,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,oBAAoB,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,OAAO;QACL,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;QAC/G,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,MAAM;QACpC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC"}

package/dist/lessons/discover.d.ts

@@ -0,0 +1,26 @@
+import type { LessonSource } from './adapters/index.js';
+export type NativeMemorySource = {
+    source: LessonSource;
+    sourcePath: string;
+    fileName: string;
+    mtimeMs: number;
+    /** A host-wide file every session of that host loads, not tied to a project. */
+    global: boolean;
+    /**
+     * The host's own directory this file was found under. A memory file is only
+     * followed while it resolves inside it, so a link dropped into a memory
+     * folder cannot make the harvester read somewhere else. Not the user's home:
+     * CODEX_HOME and a relocated Claude directory both live wherever they like.
+     */
+    root: string;
+    /** Claude only: the ~/.claude/projects/<slug> folder the entry lives in. */
+    claudeFolder?: string;
+    claudeSlug?: string;
+};
+/**
+ * Known native-memory locations only; discovery reads directory listings and
+ * file metadata and performs no writes. CODEX_HOME relocates ~/.codex, as it
+ * does for Codex itself.
+ */
+export declare function discoverNativeMemorySources(home?: string): NativeMemorySource[];
+//# sourceMappingURL=discover.d.ts.map

package/dist/lessons/discover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../src/lessons/discover.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AA8BF;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,SAAY,GAAG,kBAAkB,EAAE,CAUlF"}