@jmtrin/opencode-kevin 0.4.0 → 0.6.0

package/dist/migrations/006_v05_glassbox.sql

@@ -0,0 +1,118 @@
+-- ============================================================================
+-- 006_v05_glassbox.sql — v0.5.0 "Glass Box"
+--
+-- Honest measurement, human feedback, lifecycle completion.
+--
+-- Section 1: rebuild kevin_injections to admit a fourth outcome.
+-- Section 2: human feedback storage.
+-- Section 3: memory lifecycle columns.
+-- Section 4: metric seeds.
+-- Section 5: setting seeds.
+-- Section 6: schema_version.
+-- ============================================================================
+
+-- ---------------------------------------------------------------------------
+-- 1. kevin_injections: add 'inconclusive'.
+--
+-- SQLite cannot ALTER a CHECK constraint, so the table must be rebuilt.
+-- Migration 004 set this precedent. kevin_injections has no FTS5 triggers,
+-- so unlike 004 this is a straight four-step rebuild.
+--
+-- Existing rows with outcome='effective' are remapped to 'inconclusive'.
+-- This is not data loss: v0.4's 'effective' meant "the error did not recur",
+-- which is the exact definition of the new 'inconclusive' bucket. Rows that
+-- genuinely earned the new 'effective' will be re-settled naturally, and the
+-- post-apply hook re-derives the counters from the table.
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS kevin_injections_new (
+  id          TEXT PRIMARY KEY,
+  memory_id   TEXT NOT NULL,
+  fingerprint TEXT NOT NULL,
+  session_id  TEXT NOT NULL,
+  hook        TEXT NOT NULL CHECK (hook IN ('pre_prompt','compacting')),
+  tokens      INTEGER NOT NULL,
+  injected_at TEXT NOT NULL DEFAULT (datetime('now')),
+  outcome     TEXT NOT NULL DEFAULT 'unmeasured'
+              CHECK (outcome IN ('unmeasured','effective','ineffective','inconclusive'))
+);
+
+INSERT INTO kevin_injections_new
+  (id, memory_id, fingerprint, session_id, hook, tokens, injected_at, outcome)
+SELECT
+  id, memory_id, fingerprint, session_id, hook, tokens, injected_at,
+  CASE WHEN outcome = 'effective' THEN 'inconclusive' ELSE outcome END
+FROM kevin_injections;
+
+DROP TABLE kevin_injections;
+ALTER TABLE kevin_injections_new RENAME TO kevin_injections;
+
+CREATE INDEX IF NOT EXISTS idx_injections_fp      ON kevin_injections(fingerprint);
+CREATE INDEX IF NOT EXISTS idx_injections_session ON kevin_injections(session_id);
+CREATE INDEX IF NOT EXISTS idx_injections_outcome ON kevin_injections(outcome);
+
+-- ---------------------------------------------------------------------------
+-- 2. Human feedback. Append-only audit trail; the hot path reads the
+--    denormalized counters on `memories` (section 3), never this table.
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS memory_feedback (
+  id         TEXT PRIMARY KEY,
+  memory_id  TEXT NOT NULL,
+  verdict    TEXT NOT NULL CHECK (verdict IN ('useful','wrong','outdated','ignore')),
+  session_id TEXT,
+  note       TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_feedback_memory  ON memory_feedback(memory_id);
+CREATE INDEX IF NOT EXISTS idx_feedback_created ON memory_feedback(created_at);
+
+-- ---------------------------------------------------------------------------
+-- 3. Memory lifecycle and feedback columns.
+--
+--    feedback_positive / feedback_negative are SEPARATE from evidence_count
+--    and recurrence_count by design: human judgement is evidence about the
+--    memory, causal counters are evidence about the world. Mixing them was
+--    the confidence-poisoning defect closed in v0.4.0.
+--
+--    superseded_by has no REFERENCES clause on purpose. Store enables
+--    PRAGMA foreign_keys=ON, and a hard FK would block deletion of a memory
+--    that superseded another.
+-- ---------------------------------------------------------------------------
+ALTER TABLE memories ADD COLUMN feedback_positive INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE memories ADD COLUMN feedback_negative INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE memories ADD COLUMN ignored           INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE memories ADD COLUMN superseded_by     TEXT;
+ALTER TABLE memories ADD COLUMN archived_at       TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_memories_ignored  ON memories(ignored);
+CREATE INDEX IF NOT EXISTS idx_memories_archived ON memories(archived_at);
+
+-- ---------------------------------------------------------------------------
+-- 4. Metric seeds. Order matches the additions to METRIC_KEYS in metrics.ts.
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES
+  ('injections_inconclusive',      0),
+  ('injections_blocked_seen',      0),
+  ('injections_blocked_weak',      0),
+  ('injections_blocked_recurrence',0),
+  ('injections_blocked_stale',     0),
+  ('injections_blocked_ignored',   0),
+  ('feedback_positive_total',      0),
+  ('feedback_negative_total',      0),
+  ('memories_archived',            0);
+
+-- ---------------------------------------------------------------------------
+-- 5. Setting seeds. Values are TEXT, always. Read them with an explicit
+--    string comparison or an explicit Number() parse — never `=== 1`.
+--    (That exact mistake kept cross_project_enabled unreachable for the
+--    whole of v0.3.0.)
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES
+  ('deterministic_retrieval',    '0'),
+  ('pre_prompt_budget_tokens', '900'),
+  ('archive_after_days',        '30');
+
+-- ---------------------------------------------------------------------------
+-- 6. Version marker.
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO schema_version (version) VALUES ('006');

package/dist/migrations/007_v06_pull.sql

@@ -0,0 +1,145 @@
+-- ============================================================================
+-- 007_v06_pull.sql — v0.6.0 "Pull"
+--
+-- Distribution: curated artifacts instead of a per-prompt token tax.
+--
+-- Section 1: curation_proposals — the persisted human decision record.
+-- Section 2: artifact_writes — the disk audit trail, including refusals.
+-- Section 3: memories curation + inferability columns.
+-- Section 4: metric seeds.
+-- Section 5: setting seeds.
+-- Section 6: conditional push-budget demotion.
+-- Section 7: schema_version.
+--
+-- Additive only. Every CHECK constraint introduced here is on a NEW table;
+-- no existing constraint is widened, so unlike migration 006 there is no
+-- table rebuild in this file.
+-- ============================================================================
+
+-- ---------------------------------------------------------------------------
+-- 1. curation_proposals — one row per proposed artifact change.
+--
+--    This table is the "explicit human decision between generation and
+--    application" of Principle 22. `kevin_propose` writes 'pending' rows and
+--    nothing else; `kevin_approve` moves them to 'approved' → 'applied' or to
+--    'rejected'. Rows are never deleted: rejection history is the evidence
+--    base for roadmap kill criterion K4 ("proposals rejected more often than
+--    approved"), which is uncheckable if rejections are discarded.
+--
+--    memory_id has no REFERENCES clause. Store sets PRAGMA foreign_keys = ON,
+--    and a hard FK would block deleting a memory that a historical proposal
+--    once mentioned — the same reasoning as superseded_by in migration 006.
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS curation_proposals (
+  id            TEXT PRIMARY KEY,
+  project_id    TEXT NOT NULL,
+  memory_id     TEXT NOT NULL,
+  kind          TEXT NOT NULL CHECK (kind IN ('agents_md','skill','reference')),
+  target_path   TEXT NOT NULL,
+  proposed_text TEXT NOT NULL,
+  diff          TEXT NOT NULL,
+  status        TEXT NOT NULL DEFAULT 'pending'
+                CHECK (status IN ('pending','approved','rejected','applied','superseded')),
+  created_at    TEXT NOT NULL DEFAULT (datetime('now')),
+  decided_at    TEXT,
+  applied_at    TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_proposals_status  ON curation_proposals(status);
+CREATE INDEX IF NOT EXISTS idx_proposals_memory  ON curation_proposals(memory_id);
+CREATE INDEX IF NOT EXISTS idx_proposals_project ON curation_proposals(project_id);
+
+-- ---------------------------------------------------------------------------
+-- 2. artifact_writes — the append-only audit trail for every disk operation.
+--
+--    A row is written for EVERY ArtifactWriter.apply() call, including
+--    outcome='noop' and outcome='refused'. A refusal that leaves no trace is
+--    indistinguishable from a write that never happened, and the whole point
+--    of §5.1 rule 3 is that a refusal is a reportable event.
+--
+--    hash_before / hash_after are SHA-256 of the full file contents, not of
+--    the marker block. That is what makes rule 4 (bytes outside the markers
+--    are byte-identical) auditable after the fact rather than only at test
+--    time.
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS artifact_writes (
+  id           TEXT PRIMARY KEY,
+  proposal_id  TEXT,
+  project_id   TEXT NOT NULL,
+  path         TEXT NOT NULL,
+  bytes_before INTEGER,
+  bytes_after  INTEGER,
+  hash_before  TEXT,
+  hash_after   TEXT,
+  outcome      TEXT NOT NULL CHECK (outcome IN ('written','noop','refused')),
+  reason       TEXT,
+  wrote_at     TEXT NOT NULL DEFAULT (datetime('now'))
+);
+CREATE INDEX IF NOT EXISTS idx_artifact_writes_path ON artifact_writes(path);
+
+-- ---------------------------------------------------------------------------
+-- 3. memories: curation state and inferability.
+--
+--    curated / curated_at record that a memory has already been published,
+--    so the Curator does not re-propose it on every session idle.
+--
+--    inferable is deliberately NULLABLE with no default. Three states are
+--    needed, not two: 1 = inferable (a self-describing diagnostic the model
+--    resolves for free), 0 = non-inferable (project truth), NULL = unknown
+--    (not yet classified, or classified as 'unknown'). The Curator predicate
+--    is `inferable != 1`, so NULL rows stay eligible — an unclassified memory
+--    must not be silently withheld from curation.
+-- ---------------------------------------------------------------------------
+ALTER TABLE memories ADD COLUMN curated    INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE memories ADD COLUMN curated_at TEXT;
+ALTER TABLE memories ADD COLUMN inferable  INTEGER;
+
+CREATE INDEX IF NOT EXISTS idx_memories_curated   ON memories(curated);
+CREATE INDEX IF NOT EXISTS idx_memories_inferable ON memories(inferable);
+
+-- ---------------------------------------------------------------------------
+-- 4. Metric seeds. Order matches the additions to METRIC_KEYS in metrics.ts.
+--    injections_blocked_confidence is the sixth member of the v0.5 blocked
+--    family and MUST be counted like the other five (Principle 16).
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES
+  ('proposals_created',             0),
+  ('proposals_approved',            0),
+  ('proposals_rejected',            0),
+  ('artifact_writes_total',         0),
+  ('artifact_writes_noop',          0),
+  ('injections_blocked_confidence', 0);
+
+-- ---------------------------------------------------------------------------
+-- 5. Setting seeds. Values are TEXT, always. Read them with an explicit
+--    string comparison or an explicit Number() parse — never `=== 1`.
+--    (That exact mistake kept cross_project_enabled unreachable for the
+--    whole of v0.3.0.)
+--
+--    skill_emission_enabled and reference_emission_enabled default to '0':
+--    the pull channels ship OFF and are opted into, because they depend on a
+--    v2 domain Kevin does not pin.
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES
+  ('curation_enabled',           '1'),
+  ('agents_md_path',             'AGENTS.md'),
+  ('skill_emission_enabled',     '0'),
+  ('reference_emission_enabled', '0'),
+  ('injection_confidence_floor', '0.6');
+
+-- ---------------------------------------------------------------------------
+-- 6. Push-budget demotion.
+--
+--    Lower the default push budget only where the user has not overridden it.
+--    A user who deliberately set 1200 (or 1500, or 200) keeps their value;
+--    only an installation still sitting on the v0.5 default of '900' is
+--    moved to '400'. An unconditional UPDATE here would silently discard a
+--    deliberate configuration choice, which is a worse defect than the token
+--    cost it would save.
+-- ---------------------------------------------------------------------------
+UPDATE kevin_settings SET value = '400'
+ WHERE key = 'pre_prompt_budget_tokens' AND value = '900';
+
+-- ---------------------------------------------------------------------------
+-- 7. Version marker.
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO schema_version (version) VALUES ('007');

package/dist/plugin/Archiver.d.ts

@@ -0,0 +1,42 @@
+import type { MemoryService } from "./MemoryService.js";
+import type { Store } from "./Store.js";
+import type { Metrics } from "./metrics.js";
+/**
+ * v0.5.0 Archiver (K5-012 / plan §5.4, D5-05).
+ *
+ * Lifecycle tail of the memory loop: reflectors mark a lesson `stale` when
+ * its fingerprint recurred enough times (penalizeRecurringReflectors,
+ * migration 003), but nothing ever retires those rows — they keep
+ * circulating through status filters and inflating counts. The Archiver
+ * runs on `session.idle` and retires stale memories whose last activity
+ * (`updated_at`, falling back to `last_verified_at`) is older than
+ * `archive_after_days` (kevin_settings, seeded '30' in migration 006).
+ *
+ * Rules:
+ *  - Only `status = 'stale'` rows with `archived_at IS NULL`.
+ *  - `type != 'pattern'`: a pattern is the FIXED form of a fingerprint
+ *    (K4-025); archiving it would break kevin_why and the recurrence
+ *    re-admission path (QualityGate rule 4).
+ *  - Clock: the injection clock (K5-008) — tests freeze it; production
+ *    defaults to `new Date()`. Never `Date.now()` inside.
+ *  - `memories_archived` is bumped by the batch size, once per run.
+ *  - Pre-006 DBs (no `archived_at`) degrade to a no-op.
+ *
+ * Archived rows remain queryable with `includeSuperseded: true`-style
+ * reads (status filter is exclusive, not destructive).
+ */
+export declare class Archiver {
+    private readonly store;
+    private readonly memoryService;
+    private readonly metrics;
+    private readonly now;
+    constructor(store: Store, memoryService: MemoryService, metrics?: Metrics | null, now?: () => Date);
+    /**
+     * Archives every eligible stale memory. Returns the number of rows
+     * retired. Idempotent: archived rows are excluded by `archived_at IS
+     * NULL`, so a second run archives nothing.
+     */
+    run(): number;
+    private archiveAfterDays;
+    private hasArchivedColumn;
+}

package/dist/plugin/Archiver.js

@@ -0,0 +1,99 @@
+/**
+ * v0.5.0 Archiver (K5-012 / plan §5.4, D5-05).
+ *
+ * Lifecycle tail of the memory loop: reflectors mark a lesson `stale` when
+ * its fingerprint recurred enough times (penalizeRecurringReflectors,
+ * migration 003), but nothing ever retires those rows — they keep
+ * circulating through status filters and inflating counts. The Archiver
+ * runs on `session.idle` and retires stale memories whose last activity
+ * (`updated_at`, falling back to `last_verified_at`) is older than
+ * `archive_after_days` (kevin_settings, seeded '30' in migration 006).
+ *
+ * Rules:
+ *  - Only `status = 'stale'` rows with `archived_at IS NULL`.
+ *  - `type != 'pattern'`: a pattern is the FIXED form of a fingerprint
+ *    (K4-025); archiving it would break kevin_why and the recurrence
+ *    re-admission path (QualityGate rule 4).
+ *  - Clock: the injection clock (K5-008) — tests freeze it; production
+ *    defaults to `new Date()`. Never `Date.now()` inside.
+ *  - `memories_archived` is bumped by the batch size, once per run.
+ *  - Pre-006 DBs (no `archived_at`) degrade to a no-op.
+ *
+ * Archived rows remain queryable with `includeSuperseded: true`-style
+ * reads (status filter is exclusive, not destructive).
+ */
+export class Archiver {
+    store;
+    memoryService;
+    metrics;
+    now;
+    constructor(store, memoryService, metrics, now = () => new Date()) {
+        this.store = store;
+        this.memoryService = memoryService;
+        this.metrics = metrics ?? null;
+        this.now = now;
+    }
+    /**
+     * Archives every eligible stale memory. Returns the number of rows
+     * retired. Idempotent: archived rows are excluded by `archived_at IS
+     * NULL`, so a second run archives nothing.
+     */
+    run() {
+        if (!this.hasArchivedColumn())
+            return 0;
+        const days = this.archiveAfterDays();
+        if (days <= 0)
+            return 0;
+        const now = this.now();
+        const cutoff = formatSqliteUtc(new Date(now.getTime() - days * 86_400_000));
+        this.store
+            .prepare(`UPDATE memories
+				    SET status = 'archived', archived_at = ?, updated_at = ?
+				  WHERE status = 'stale'
+				    AND type != 'pattern'
+				    AND archived_at IS NULL
+				    AND updated_at < ?`)
+            .run(formatSqliteUtc(now), formatSqliteUtc(now), cutoff);
+        const changed = this.store.prepare("SELECT changes() AS n").get();
+        const n = changed.n;
+        if (n > 0)
+            this.metrics?.incr("memories_archived", n);
+        return n;
+    }
+    archiveAfterDays() {
+        try {
+            const raw = this.memoryService.getSetting("archive_after_days", "30");
+            const n = Number(raw);
+            return Number.isFinite(n) ? n : 30;
+        }
+        catch {
+            return 30;
+        }
+    }
+    hasArchivedColumn() {
+        return hasArchivedColumnCached(this.store);
+    }
+}
+// v0.6.0 (K6-001a) — positive-only caching: a successful probe is cached,
+// a failed probe is NOT. A Store migrated in place heals on the next call.
+const archivedColumnCache = new WeakMap();
+function hasArchivedColumnCached(store) {
+    const cached = archivedColumnCache.get(store);
+    if (cached === true)
+        return true;
+    try {
+        store.prepare("SELECT archived_at FROM memories LIMIT 1").get();
+        archivedColumnCache.set(store, true);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** 'YYYY-MM-DD HH:MM:SS' UTC — the format SQLite `datetime('now')` uses,
+ * so lexicographic comparisons against `updated_at` are valid. */
+function formatSqliteUtc(d) {
+    const pad = (n) => String(n).padStart(2, "0");
+    return `${d.getUTCFullYear()}-${pad(d.getUTCMonth() + 1)}-${pad(d.getUTCDate())} ${pad(d.getUTCHours())}:${pad(d.getUTCMinutes())}:${pad(d.getUTCSeconds())}`;
+}
+//# sourceMappingURL=Archiver.js.map

package/dist/plugin/Archiver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Archiver.js","sourceRoot":"","sources":["../../plugin/Archiver.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,QAAQ;IAKF;IACA;IALD,OAAO,CAAiB;IACxB,GAAG,CAAa;IAEjC,YACkB,KAAY,EACZ,aAA4B,EAC7C,OAAwB,EACxB,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAHjB,UAAK,GAAL,KAAK,CAAO;QACZ,kBAAa,GAAb,aAAa,CAAe;QAI7C,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC;QAC/B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,GAAG;QACF,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK;aACR,OAAO,CACP;;;;;2BAKuB,CACvB;aACA,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,GAAG,EAE9D,CAAC;QACF,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACV,CAAC;IAEO,gBAAgB;QACvB,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAEO,iBAAiB;QACxB,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;CACD;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAAkB,CAAC;AAC1D,SAAS,uBAAuB,CAAC,KAAY;IAC5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC;QACJ,KAAK,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,EAAE,CAAC;QAChE,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED;kEACkE;AAClE,SAAS,eAAe,CAAC,CAAO;IAC/B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAC9D,CAAC,CAAC,UAAU,EAAE,CACd,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;AACjF,CAAC"}

package/dist/plugin/ArtifactWriter.d.ts

@@ -0,0 +1,50 @@
+import type { Store } from "./Store.js";
+import type { Metrics } from "./metrics.js";
+export declare const MARKER_BEGIN = "<!-- kevin:begin \u2014 curated by opencode-kevin, safe to edit -->";
+export declare const MARKER_END = "<!-- kevin:end -->";
+export type WriteOutcome = "written" | "noop" | "refused";
+export interface WritePlan {
+    readonly path: string;
+    readonly before: string;
+    readonly after: string;
+    readonly diff: string;
+    readonly outcome: WriteOutcome;
+    readonly reason?: string;
+    readonly hashBefore: string;
+    readonly hashAfter: string;
+}
+/**
+ * Rule 9 (K6-009 / plan §5.1, D6-02) — three layers applied to the body
+ * before splicing:
+ *   (a) the escaping discipline of `plugin/memory-format.ts`;
+ *   (b) strip any line containing `kevin:begin` or `kevin:end`, in any
+ *       casing, anywhere in the line;
+ *   (c) strip HTML comment terminators (`-->`).
+ * Without this, a memory containing a literal `<!-- kevin:end -->` line would
+ * close the marker comment early and let subsequent content escape the
+ * curated region on the next regeneration — a marker-injection variant of the
+ * v0.1.5 prompt-injection defect (plan §3.5).
+ */
+export declare function sanitizeArtifactBody(body: string): string;
+/**
+ * v0.6.0 (K6-005 / plan §5.1) — the single write path to disk (D6-01).
+ *
+ * `plan()` is pure: it reads the target file, locates the marker pair, splices
+ * the body between the markers and returns a {@link WritePlan}. It performs no
+ * writes — rule 1. `apply()` is implemented by K6-007; until then it is a stub
+ * that throws, so no caller can accidentally write before the audit trail
+ * exists.
+ *
+ * `projectId` is a constructor argument rather than a per-call argument so that
+ * every audit row is attributed without the call site having to remember.
+ */
+export declare class ArtifactWriter {
+    private readonly store;
+    private readonly projectId;
+    private readonly metrics;
+    constructor(store: Store, projectId: string, metrics?: Metrics | null);
+    plan(path: string, body: string): WritePlan;
+    apply(plan: WritePlan, proposalId?: string): WriteOutcome;
+    private renameTemp;
+    private audit;
+}