@jmtrin/opencode-kevin 0.5.0 → 0.6.0

package/dist/migrations/007_v06_pull.sql

@@ -0,0 +1,145 @@
+-- ============================================================================
+-- 007_v06_pull.sql — v0.6.0 "Pull"
+--
+-- Distribution: curated artifacts instead of a per-prompt token tax.
+--
+-- Section 1: curation_proposals — the persisted human decision record.
+-- Section 2: artifact_writes — the disk audit trail, including refusals.
+-- Section 3: memories curation + inferability columns.
+-- Section 4: metric seeds.
+-- Section 5: setting seeds.
+-- Section 6: conditional push-budget demotion.
+-- Section 7: schema_version.
+--
+-- Additive only. Every CHECK constraint introduced here is on a NEW table;
+-- no existing constraint is widened, so unlike migration 006 there is no
+-- table rebuild in this file.
+-- ============================================================================
+
+-- ---------------------------------------------------------------------------
+-- 1. curation_proposals — one row per proposed artifact change.
+--
+--    This table is the "explicit human decision between generation and
+--    application" of Principle 22. `kevin_propose` writes 'pending' rows and
+--    nothing else; `kevin_approve` moves them to 'approved' → 'applied' or to
+--    'rejected'. Rows are never deleted: rejection history is the evidence
+--    base for roadmap kill criterion K4 ("proposals rejected more often than
+--    approved"), which is uncheckable if rejections are discarded.
+--
+--    memory_id has no REFERENCES clause. Store sets PRAGMA foreign_keys = ON,
+--    and a hard FK would block deleting a memory that a historical proposal
+--    once mentioned — the same reasoning as superseded_by in migration 006.
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS curation_proposals (
+  id            TEXT PRIMARY KEY,
+  project_id    TEXT NOT NULL,
+  memory_id     TEXT NOT NULL,
+  kind          TEXT NOT NULL CHECK (kind IN ('agents_md','skill','reference')),
+  target_path   TEXT NOT NULL,
+  proposed_text TEXT NOT NULL,
+  diff          TEXT NOT NULL,
+  status        TEXT NOT NULL DEFAULT 'pending'
+                CHECK (status IN ('pending','approved','rejected','applied','superseded')),
+  created_at    TEXT NOT NULL DEFAULT (datetime('now')),
+  decided_at    TEXT,
+  applied_at    TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_proposals_status  ON curation_proposals(status);
+CREATE INDEX IF NOT EXISTS idx_proposals_memory  ON curation_proposals(memory_id);
+CREATE INDEX IF NOT EXISTS idx_proposals_project ON curation_proposals(project_id);
+
+-- ---------------------------------------------------------------------------
+-- 2. artifact_writes — the append-only audit trail for every disk operation.
+--
+--    A row is written for EVERY ArtifactWriter.apply() call, including
+--    outcome='noop' and outcome='refused'. A refusal that leaves no trace is
+--    indistinguishable from a write that never happened, and the whole point
+--    of §5.1 rule 3 is that a refusal is a reportable event.
+--
+--    hash_before / hash_after are SHA-256 of the full file contents, not of
+--    the marker block. That is what makes rule 4 (bytes outside the markers
+--    are byte-identical) auditable after the fact rather than only at test
+--    time.
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS artifact_writes (
+  id           TEXT PRIMARY KEY,
+  proposal_id  TEXT,
+  project_id   TEXT NOT NULL,
+  path         TEXT NOT NULL,
+  bytes_before INTEGER,
+  bytes_after  INTEGER,
+  hash_before  TEXT,
+  hash_after   TEXT,
+  outcome      TEXT NOT NULL CHECK (outcome IN ('written','noop','refused')),
+  reason       TEXT,
+  wrote_at     TEXT NOT NULL DEFAULT (datetime('now'))
+);
+CREATE INDEX IF NOT EXISTS idx_artifact_writes_path ON artifact_writes(path);
+
+-- ---------------------------------------------------------------------------
+-- 3. memories: curation state and inferability.
+--
+--    curated / curated_at record that a memory has already been published,
+--    so the Curator does not re-propose it on every session idle.
+--
+--    inferable is deliberately NULLABLE with no default. Three states are
+--    needed, not two: 1 = inferable (a self-describing diagnostic the model
+--    resolves for free), 0 = non-inferable (project truth), NULL = unknown
+--    (not yet classified, or classified as 'unknown'). The Curator predicate
+--    is `inferable != 1`, so NULL rows stay eligible — an unclassified memory
+--    must not be silently withheld from curation.
+-- ---------------------------------------------------------------------------
+ALTER TABLE memories ADD COLUMN curated    INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE memories ADD COLUMN curated_at TEXT;
+ALTER TABLE memories ADD COLUMN inferable  INTEGER;
+
+CREATE INDEX IF NOT EXISTS idx_memories_curated   ON memories(curated);
+CREATE INDEX IF NOT EXISTS idx_memories_inferable ON memories(inferable);
+
+-- ---------------------------------------------------------------------------
+-- 4. Metric seeds. Order matches the additions to METRIC_KEYS in metrics.ts.
+--    injections_blocked_confidence is the sixth member of the v0.5 blocked
+--    family and MUST be counted like the other five (Principle 16).
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES
+  ('proposals_created',             0),
+  ('proposals_approved',            0),
+  ('proposals_rejected',            0),
+  ('artifact_writes_total',         0),
+  ('artifact_writes_noop',          0),
+  ('injections_blocked_confidence', 0);
+
+-- ---------------------------------------------------------------------------
+-- 5. Setting seeds. Values are TEXT, always. Read them with an explicit
+--    string comparison or an explicit Number() parse — never `=== 1`.
+--    (That exact mistake kept cross_project_enabled unreachable for the
+--    whole of v0.3.0.)
+--
+--    skill_emission_enabled and reference_emission_enabled default to '0':
+--    the pull channels ship OFF and are opted into, because they depend on a
+--    v2 domain Kevin does not pin.
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES
+  ('curation_enabled',           '1'),
+  ('agents_md_path',             'AGENTS.md'),
+  ('skill_emission_enabled',     '0'),
+  ('reference_emission_enabled', '0'),
+  ('injection_confidence_floor', '0.6');
+
+-- ---------------------------------------------------------------------------
+-- 6. Push-budget demotion.
+--
+--    Lower the default push budget only where the user has not overridden it.
+--    A user who deliberately set 1200 (or 1500, or 200) keeps their value;
+--    only an installation still sitting on the v0.5 default of '900' is
+--    moved to '400'. An unconditional UPDATE here would silently discard a
+--    deliberate configuration choice, which is a worse defect than the token
+--    cost it would save.
+-- ---------------------------------------------------------------------------
+UPDATE kevin_settings SET value = '400'
+ WHERE key = 'pre_prompt_budget_tokens' AND value = '900';
+
+-- ---------------------------------------------------------------------------
+-- 7. Version marker.
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO schema_version (version) VALUES ('007');

package/dist/plugin/Archiver.js

@@ -74,18 +74,19 @@ export class Archiver {
         return hasArchivedColumnCached(this.store);
     }
 }
+// v0.6.0 (K6-001a) — positive-only caching: a successful probe is cached,
+// a failed probe is NOT. A Store migrated in place heals on the next call.
 const archivedColumnCache = new WeakMap();
 function hasArchivedColumnCached(store) {
     const cached = archivedColumnCache.get(store);
-    if (cached !== undefined)
-        return cached;
+    if (cached === true)
+        return true;
     try {
         store.prepare("SELECT archived_at FROM memories LIMIT 1").get();
         archivedColumnCache.set(store, true);
         return true;
     }
     catch {
-        archivedColumnCache.set(store, false);
         return false;
     }
 }

package/dist/plugin/Archiver.js.map

@@ -1 +1 @@
-{"version":3,"file":"Archiver.js","sourceRoot":"","sources":["../../plugin/Archiver.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,QAAQ;IAKF;IACA;IALD,OAAO,CAAiB;IACxB,GAAG,CAAa;IAEjC,YACkB,KAAY,EACZ,aAA4B,EAC7C,OAAwB,EACxB,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAHjB,UAAK,GAAL,KAAK,CAAO;QACZ,kBAAa,GAAb,aAAa,CAAe;QAI7C,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC;QAC/B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,GAAG;QACF,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK;aACR,OAAO,CACP;;;;;2BAKuB,CACvB;aACA,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,GAAG,EAE9D,CAAC;QACF,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACV,CAAC;IAEO,gBAAgB;QACvB,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAEO,iBAAiB;QACxB,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;CACD;AAED,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAAkB,CAAC;AAC1D,SAAS,uBAAuB,CAAC,KAAY;IAC5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,CAAC;QACJ,KAAK,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,EAAE,CAAC;QAChE,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED;kEACkE;AAClE,SAAS,eAAe,CAAC,CAAO;IAC/B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAC9D,CAAC,CAAC,UAAU,EAAE,CACd,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;AACjF,CAAC"}
+{"version":3,"file":"Archiver.js","sourceRoot":"","sources":["../../plugin/Archiver.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,QAAQ;IAKF;IACA;IALD,OAAO,CAAiB;IACxB,GAAG,CAAa;IAEjC,YACkB,KAAY,EACZ,aAA4B,EAC7C,OAAwB,EACxB,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAHjB,UAAK,GAAL,KAAK,CAAO;QACZ,kBAAa,GAAb,aAAa,CAAe;QAI7C,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC;QAC/B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,GAAG;QACF,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK;aACR,OAAO,CACP;;;;;2BAKuB,CACvB;aACA,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,GAAG,EAE9D,CAAC;QACF,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACV,CAAC;IAEO,gBAAgB;QACvB,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAEO,iBAAiB;QACxB,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;CACD;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAAkB,CAAC;AAC1D,SAAS,uBAAuB,CAAC,KAAY;IAC5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC;QACJ,KAAK,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,EAAE,CAAC;QAChE,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED;kEACkE;AAClE,SAAS,eAAe,CAAC,CAAO;IAC/B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAC9D,CAAC,CAAC,UAAU,EAAE,CACd,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;AACjF,CAAC"}

package/dist/plugin/ArtifactWriter.d.ts

@@ -0,0 +1,50 @@
+import type { Store } from "./Store.js";
+import type { Metrics } from "./metrics.js";
+export declare const MARKER_BEGIN = "<!-- kevin:begin \u2014 curated by opencode-kevin, safe to edit -->";
+export declare const MARKER_END = "<!-- kevin:end -->";
+export type WriteOutcome = "written" | "noop" | "refused";
+export interface WritePlan {
+    readonly path: string;
+    readonly before: string;
+    readonly after: string;
+    readonly diff: string;
+    readonly outcome: WriteOutcome;
+    readonly reason?: string;
+    readonly hashBefore: string;
+    readonly hashAfter: string;
+}
+/**
+ * Rule 9 (K6-009 / plan §5.1, D6-02) — three layers applied to the body
+ * before splicing:
+ *   (a) the escaping discipline of `plugin/memory-format.ts`;
+ *   (b) strip any line containing `kevin:begin` or `kevin:end`, in any
+ *       casing, anywhere in the line;
+ *   (c) strip HTML comment terminators (`-->`).
+ * Without this, a memory containing a literal `<!-- kevin:end -->` line would
+ * close the marker comment early and let subsequent content escape the
+ * curated region on the next regeneration — a marker-injection variant of the
+ * v0.1.5 prompt-injection defect (plan §3.5).
+ */
+export declare function sanitizeArtifactBody(body: string): string;
+/**
+ * v0.6.0 (K6-005 / plan §5.1) — the single write path to disk (D6-01).
+ *
+ * `plan()` is pure: it reads the target file, locates the marker pair, splices
+ * the body between the markers and returns a {@link WritePlan}. It performs no
+ * writes — rule 1. `apply()` is implemented by K6-007; until then it is a stub
+ * that throws, so no caller can accidentally write before the audit trail
+ * exists.
+ *
+ * `projectId` is a constructor argument rather than a per-call argument so that
+ * every audit row is attributed without the call site having to remember.
+ */
+export declare class ArtifactWriter {
+    private readonly store;
+    private readonly projectId;
+    private readonly metrics;
+    constructor(store: Store, projectId: string, metrics?: Metrics | null);
+    plan(path: string, body: string): WritePlan;
+    apply(plan: WritePlan, proposalId?: string): WriteOutcome;
+    private renameTemp;
+    private audit;
+}

package/dist/plugin/ArtifactWriter.js

@@ -0,0 +1,240 @@
+import { createHash } from "node:crypto";
+import { closeSync, fsyncSync, openSync, readFileSync, renameSync, unlinkSync, writeSync, } from "node:fs";
+import { unifiedDiff } from "./diff.js";
+import { uuidv7 } from "./uuid.js";
+// v0.6.0 (K6-005 / plan §5.1, D6-02) — the frozen marker contract. The exact
+// byte sequences are load-bearing: README, v1.0.0 plan C-01 and the round-trip
+// test all depend on them.
+export const MARKER_BEGIN = "<!-- kevin:begin — curated by opencode-kevin, safe to edit -->";
+export const MARKER_END = "<!-- kevin:end -->";
+function sha256(text) {
+    return createHash("sha256").update(text, "utf8").digest("hex");
+}
+/**
+ * Rule 5 (K6-008 / plan §5.1, D6-02) — the line-ending style comes from the
+ * FIRST line ending in the existing file: CRLF if it is CRLF, otherwise LF.
+ * A CRLF file whose last line lacks a terminator, and a mixed-ending file,
+ * are both resolved by the same first-ending rule, deterministically.
+ */
+function detectEol(text) {
+    const nl = text.indexOf("\n");
+    if (nl === -1)
+        return "\n";
+    return nl > 0 && text[nl - 1] === "\r" ? "\r\n" : "\n";
+}
+/**
+ * Rule 5 (K6-008) — normalize the generated body into the file's line-ending
+ * style so a CRLF file stays CRLF everywhere, including inside the block.
+ */
+function normalizeEol(body, eol) {
+    return body.replace(/\r\n/g, "\n").replace(/\n/g, eol);
+}
+/**
+ * Rule 9, layer (a) — the escaping discipline of `plugin/memory-format.ts`
+ * (`&`, `<`, `>`) made idempotent: an ampersand that already heads a known
+ * entity (`&amp;`, `&lt;`, `&gt;`, `&#NNN;`) is left alone, so sanitizing
+ * sanitized output is a fixed point. The round-trip property of the marker
+ * block depends on this: a non-idempotent escape would grow `&amp;lt;` on
+ * every regeneration (K6-009 / plan §5.1 rule 9).
+ */
+function escapeIdempotent(text) {
+    return text
+        .replace(/&(?!(amp|lt|gt|#\d+);)/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;");
+}
+/**
+ * Rule 9 (K6-009 / plan §5.1, D6-02) — three layers applied to the body
+ * before splicing:
+ *   (a) the escaping discipline of `plugin/memory-format.ts`;
+ *   (b) strip any line containing `kevin:begin` or `kevin:end`, in any
+ *       casing, anywhere in the line;
+ *   (c) strip HTML comment terminators (`-->`).
+ * Without this, a memory containing a literal `<!-- kevin:end -->` line would
+ * close the marker comment early and let subsequent content escape the
+ * curated region on the next regeneration — a marker-injection variant of the
+ * v0.1.5 prompt-injection defect (plan §3.5).
+ */
+export function sanitizeArtifactBody(body) {
+    const escaped = escapeIdempotent(body);
+    const kept = escaped
+        .split("\n")
+        .filter((line) => !/kevin:begin|kevin:end/i.test(line))
+        .join("\n");
+    return kept.replace(/-->/g, "");
+}
+/**
+ * v0.6.0 (K6-005 / plan §5.1) — the single write path to disk (D6-01).
+ *
+ * `plan()` is pure: it reads the target file, locates the marker pair, splices
+ * the body between the markers and returns a {@link WritePlan}. It performs no
+ * writes — rule 1. `apply()` is implemented by K6-007; until then it is a stub
+ * that throws, so no caller can accidentally write before the audit trail
+ * exists.
+ *
+ * `projectId` is a constructor argument rather than a per-call argument so that
+ * every audit row is attributed without the call site having to remember.
+ */
+export class ArtifactWriter {
+    store;
+    projectId;
+    metrics;
+    constructor(store, projectId, metrics) {
+        this.store = store;
+        this.projectId = projectId;
+        this.metrics = metrics ?? null;
+    }
+    plan(path, body) {
+        let before;
+        try {
+            // Read as Buffer, not as utf8 text: readFileSync's text decoding
+            // strips a leading BOM, which would silently drop it on the next
+            // write. Buffer.toString keeps \uFEFF as a character of `before`.
+            before = readFileSync(path).toString("utf8");
+        }
+        catch (err) {
+            if (err instanceof Error && "code" in err && err.code === "ENOENT") {
+                before = "";
+            }
+            else {
+                throw err;
+            }
+        }
+        const eol = detectEol(before);
+        // Rule 9 — sanitation happens in plan(), before hashing, so the hashes
+        // describe what was actually written.
+        const bodyEol = normalizeEol(sanitizeArtifactBody(body), eol);
+        const firstBegin = before.indexOf(MARKER_BEGIN);
+        const firstEnd = before.indexOf(MARKER_END);
+        let after;
+        let outcome = "written";
+        let reason;
+        if (firstBegin === -1 && firstEnd === -1) {
+            // Rule 2 — create: the block is appended at the end of the content,
+            // preceded by a blank line. For an empty file (missing file treated
+            // as "") the result is exactly: blank line, MARKER_BEGIN, body,
+            // MARKER_END, trailing newline.
+            const separator = before === "" ? eol : before.endsWith(eol) ? eol : eol + eol;
+            after =
+                before +
+                    separator +
+                    MARKER_BEGIN +
+                    eol +
+                    bodyEol +
+                    eol +
+                    MARKER_END +
+                    eol;
+        }
+        else if (firstBegin === -1 || firstEnd === -1) {
+            // Rule 3 — exactly one marker present.
+            after = before;
+            outcome = "refused";
+            reason =
+                firstBegin === -1
+                    ? "kevin:end marker present without kevin:begin"
+                    : "kevin:begin marker present without kevin:end";
+        }
+        else if (firstEnd < firstBegin) {
+            // Rule 3 — MARKER_END precedes MARKER_BEGIN.
+            after = before;
+            outcome = "refused";
+            reason = "kevin:end appears before kevin:begin";
+        }
+        else if (before.indexOf(MARKER_BEGIN, firstBegin + MARKER_BEGIN.length) !== -1 ||
+            before.indexOf(MARKER_END, firstEnd + MARKER_END.length) !== -1) {
+            // Rule 3 — more than one pair (any additional marker occurrence).
+            after = before;
+            outcome = "refused";
+            reason = "more than one marker pair present";
+        }
+        else {
+            // Rule 4 — bytes outside the marker pair are byte-identical. The
+            // block between the markers (begin marker, old block, end marker)
+            // is replaced by the regenerated block.
+            const blockEnd = firstEnd + MARKER_END.length;
+            after =
+                before.slice(0, firstBegin) +
+                    MARKER_BEGIN +
+                    eol +
+                    bodyEol +
+                    eol +
+                    MARKER_END +
+                    before.slice(blockEnd);
+            // Rule 6 — unchanged content is a noop, never a write.
+            outcome = after === before ? "noop" : "written";
+        }
+        return {
+            path,
+            before,
+            after,
+            // v0.6.0 (K6-006 / plan §5.2, D6-05) — approval prompts show bytes,
+            // never prose. Identical inputs yield "".
+            diff: unifiedDiff(path, before, after),
+            outcome,
+            ...(reason !== undefined ? { reason } : {}),
+            hashBefore: sha256(before),
+            hashAfter: sha256(after),
+        };
+    }
+    // v0.6.0 (K6-007 / plan §5.1, rules 7–8) — atomic write + audit row.
+    apply(plan, proposalId) {
+        // Rule 8 — refusals and noops still leave an audit trail; a refusal
+        // that leaves no trace is indistinguishable from a write that never
+        // happened. Rule 6 — a noop creates no temp file and writes nothing.
+        if (plan.outcome === "noop" || plan.outcome === "refused") {
+            if (plan.outcome === "noop") {
+                this.metrics?.incr("artifact_writes_noop", 1);
+            }
+            this.audit(plan, proposalId);
+            return plan.outcome;
+        }
+        // Rule 7 — write to `<path>.kevin.tmp` in the same directory (same
+        // filesystem, so rename is atomic), fsync, close, then rename over the
+        // target. Never write the target path directly, never truncate-then-write.
+        const tmpPath = `${plan.path}.kevin.tmp`;
+        let fd;
+        try {
+            fd = openSync(tmpPath, "w");
+            writeSync(fd, plan.after, null, "utf8");
+            fsyncSync(fd);
+            closeSync(fd);
+            fd = undefined;
+            this.renameTemp(tmpPath, plan.path);
+        }
+        catch (err) {
+            // Never leave .kevin.tmp litter next to the user's file.
+            if (fd !== undefined) {
+                try {
+                    closeSync(fd);
+                }
+                catch {
+                    // already closed or unusable; unlink below is the cleanup
+                }
+            }
+            try {
+                unlinkSync(tmpPath);
+            }
+            catch {
+                // nothing to clean up
+            }
+            throw err;
+        }
+        this.metrics?.incr("artifact_writes_total", 1);
+        this.audit(plan, proposalId);
+        return "written";
+    }
+    // Fault-injection seam for the atomicity test: the rename is the point
+    // where a failure must leave the target untouched and the temp file gone.
+    renameTemp(tmpPath, target) {
+        renameSync(tmpPath, target);
+    }
+    audit(plan, proposalId) {
+        this.store
+            .prepare(`INSERT INTO artifact_writes
+				 (id, proposal_id, project_id, path, bytes_before, bytes_after,
+				  hash_before, hash_after, outcome, reason)
+				 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .run(uuidv7(), proposalId ?? null, this.projectId, plan.path, Buffer.byteLength(plan.before, "utf8"), Buffer.byteLength(plan.after, "utf8"), plan.hashBefore, plan.hashAfter, plan.outcome, plan.reason ?? null);
+    }
+}
+//# sourceMappingURL=ArtifactWriter.js.map

package/dist/plugin/ArtifactWriter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArtifactWriter.js","sourceRoot":"","sources":["../../plugin/ArtifactWriter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACN,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,UAAU,EACV,SAAS,GACT,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,6EAA6E;AAC7E,+EAA+E;AAC/E,2BAA2B;AAC3B,MAAM,CAAC,MAAM,YAAY,GACxB,gEAAgE,CAAC;AAClE,MAAM,CAAC,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAe/C,SAAS,MAAM,CAAC,IAAY;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAAY;IAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,GAAkB;IACrD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACrC,OAAO,IAAI;SACT,OAAO,CAAC,yBAAyB,EAAE,OAAO,CAAC;SAC3C,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAChD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO;SAClB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACtD,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,cAAc;IACT,KAAK,CAAQ;IACb,SAAS,CAAS;IAClB,OAAO,CAAiB;IAEzC,YAAY,KAAY,EAAE,SAAiB,EAAE,OAAwB;QACpE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,IAAY,EAAE,IAAY;QAC9B,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACJ,iEAAiE;YACjE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpE,MAAM,GAAG,EAAE,CAAC;YACb,CAAC;iBAAM,CAAC;gBACP,MAAM,GAAG,CAAC;YACX,CAAC;QACF,CAAC;QAED,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,uEAAuE;QACvE,sCAAsC;QACtC,MAAM,OAAO,GAAG,YAAY,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,KAAa,CAAC;QAClB,IAAI,OAAO,GAAiB,SAAS,CAAC;QACtC,IAAI,MAA0B,CAAC;QAE/B,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1C,oEAAoE;YACpE,oEAAoE;YACpE,gEAAgE;YAChE,gCAAgC;YAChC,MAAM,SAAS,GACd,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;YAC9D,KAAK;gBACJ,MAAM;oBACN,SAAS;oBACT,YAAY;oBACZ,GAAG;oBACH,OAAO;oBACP,GAAG;oBACH,UAAU;oBACV,GAAG,CAAC;QACN,CAAC;aAAM,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YACjD,uCAAuC;YACvC,KAAK,GAAG,MAAM,CAAC;YACf,OAAO,GAAG,SAAS,CAAC;YACpB,MAAM;gBACL,UAAU,KAAK,CAAC,CAAC;oBAChB,CAAC,CAAC,8CAA8C;oBAChD,CAAC,CAAC,8CAA8C,CAAC;QACpD,CAAC;aAAM,IAAI,QAAQ,GAAG,UAAU,EAAE,CAAC;YAClC,6CAA6C;YAC7C,KAAK,GAAG,MAAM,CAAC;YACf,OAAO,GAAG,SAAS,CAAC;YACpB,MAAM,GAAG,sCAAsC,CAAC;QACjD,CAAC;aAAM,IACN,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAC9D,CAAC;YACF,kEAAkE;YAClE,KAAK,GAAG,MAAM,CAAC;YACf,OAAO,GAAG,SAAS,CAAC;YACpB,MAAM,GAAG,mCAAmC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACP,iEAAiE;YACjE,kEAAkE;YAClE,wCAAwC;YACxC,MAAM,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC;YAC9C,KAAK;gBACJ,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;oBAC3B,YAAY;oBACZ,GAAG;oBACH,OAAO;oBACP,GAAG;oBACH,UAAU;oBACV,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACxB,uDAAuD;YACvD,OAAO,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,CAAC;QAED,OAAO;YACN,IAAI;YACJ,MAAM;YACN,KAAK;YACL,oEAAoE;YACpE,0CAA0C;YAC1C,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC;YACtC,OAAO;YACP,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;YAC1B,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC;SACxB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,IAAe,EAAE,UAAmB;QACzC,oEAAoE;QACpE,oEAAoE;QACpE,qEAAqE;QACrE,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3D,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC7B,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC,OAAO,CAAC;QACrB,CAAC;QAED,mEAAmE;QACnE,uEAAuE;QACvE,2EAA2E;QAC3E,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,IAAI,YAAY,CAAC;QACzC,IAAI,EAAsB,CAAC;QAC3B,IAAI,CAAC;YACJ,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC5B,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACxC,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,EAAE,GAAG,SAAS,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,yDAAyD;YACzD,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACJ,SAAS,CAAC,EAAE,CAAC,CAAC;gBACf,CAAC;gBAAC,MAAM,CAAC;oBACR,0DAA0D;gBAC3D,CAAC;YACF,CAAC;YACD,IAAI,CAAC;gBACJ,UAAU,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACR,sBAAsB;YACvB,CAAC;YACD,MAAM,GAAG,CAAC;QACX,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7B,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,uEAAuE;IACvE,0EAA0E;IAClE,UAAU,CAAC,OAAe,EAAE,MAAc;QACjD,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,IAAe,EAAE,UAA8B;QAC5D,IAAI,CAAC,KAAK;aACR,OAAO,CACP;;;2CAGuC,CACvC;aACA,GAAG,CACH,MAAM,EAAE,EACR,UAAU,IAAI,IAAI,EAClB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,IAAI,EACT,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EACrC,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,IAAI,IAAI,CACnB,CAAC;IACJ,CAAC;CACD"}

package/dist/plugin/ContextInjector.d.ts

@@ -4,6 +4,14 @@ import { type GateReason } from "./QualityGate.js";
 import { type Metrics } from "./metrics.js";
 export declare const QUALITY_GATE_SETTING = "quality_gate_enabled";
 export declare const SNIPPET_INJECTION_SETTING = "lesson_snippet_injection";
+/**
+ * v0.6.0 (K6-023 / plan §5.8) — the effective pre-prompt budget shared by
+ * `ContextInjector.prePromptCap()` and `kevin_audit`'s channels block
+ * (budget_tokens). Single source of truth for the K6-021 clamp:
+ * default 400 when the raw value is missing/non-numeric, clamped to
+ * [0, 4000]; 0 means "push off".
+ */
+export declare function effectivePrePromptCap(raw: string | undefined): number;
 export interface ChatMessage {
     role: string;
     content: string;
@@ -142,6 +150,13 @@ export declare class ContextInjector {
      * read at call time from `pre_prompt_budget_tokens` (seeded "900" by
      * migration 006). Clamped to [100, 4000]; a non-numeric value falls
      * back to 900. `kevin_trace` reports the value used via `plan().cap`.
+     *
+     * v0.6.0 (K6-021 / plan §5.8) — default becomes "400" and the lower
+     * clamp bound drops to **0**: the roadmap's kill criterion K1 prescribes
+     * cutting the push budget to zero when coverage is poor, and v0.5's
+     * [100, 4000] clamp made that response unimplementable. A non-numeric
+     * value falls back to 400. `onSystemTransform` treats 0 as off and
+     * returns before any retrieval (see K6-021 acceptance).
      */
     private prePromptCap;
     /**

package/dist/plugin/ContextInjector.js

@@ -4,13 +4,26 @@ import { estimateTokens } from "./metrics.js";
 import { STOP_WORDS } from "./query-tokenizer.js";
 export const QUALITY_GATE_SETTING = "quality_gate_enabled";
 export const SNIPPET_INJECTION_SETTING = "lesson_snippet_injection";
+/**
+ * v0.6.0 (K6-023 / plan §5.8) — the effective pre-prompt budget shared by
+ * `ContextInjector.prePromptCap()` and `kevin_audit`'s channels block
+ * (budget_tokens). Single source of truth for the K6-021 clamp:
+ * default 400 when the raw value is missing/non-numeric, clamped to
+ * [0, 4000]; 0 means "push off".
+ */
+export function effectivePrePromptCap(raw) {
+    const n = Number(raw);
+    if (!Number.isFinite(n))
+        return 400;
+    return Math.min(4000, Math.max(0, Math.round(n)));
+}
 // v0.4.0 default pre-prompt budget. v0.5.0 (K5-017 / plan §8.11, D5-11):
 // kept as the compile-time fallback, but the EFFECTIVE cap is read at call
-// time from the `pre_prompt_budget_tokens` setting (default "900"). The
-// confound fix in K5-005 will very likely show that a large share of
-// injections are `inconclusive` — charging a 1500-token toll per prompt for
-// an unproven benefit is indefensible, so the number is now a setting that
-// measurement can drive instead of a constant.
+// time from the `pre_prompt_budget_tokens` setting. v0.6.0 (K6-021 / plan
+// §5.8): the setting's default becomes "400" and the lower clamp bound
+// drops to 0 (off) — the confound fix in K5-005 showed a large share of
+// injections are `inconclusive`, and the roadmap's kill criterion K1
+// requires "off" to be a reachable, supported configuration.
 const SYSTEM_TRANSFORM_TOKENS = 900;
 const COMPACTING_TOKENS = 2000;
 // v0.5.0 (K5-007 / plan §8.10, D5-04) — every rejection reason maps 1:1 to
@@ -19,6 +32,8 @@ const COMPACTING_TOKENS = 2000;
 // `ok` reason admits and must never increment anything.
 const BLOCKED_METRIC = {
     ok: null,
+    // v0.6.0 (K6-022 / plan §5.8) — sixth reason, sixth counter.
+    low_confidence: "injections_blocked_confidence",
     seen_this_session: "injections_blocked_seen",
     ignored: "injections_blocked_ignored",
     not_active: "injections_blocked_stale",
@@ -283,6 +298,13 @@ Consider adding this convention to AGENTS.md:
      */
     evaluate(memories, sessionId) {
         const qualityGateEnabled = this.memoryService.getSetting(QUALITY_GATE_SETTING, "1") === "1";
+        // v0.6.0 (K6-022 / plan §5.8) — the floor is read ONCE per
+        // plan/inject call (this method is the shared gate evaluation),
+        // never per memory. A non-numeric setting degrades to undefined,
+        // which disables the branch for every memory this call.
+        const rawFloor = this.memoryService.getSetting("injection_confidence_floor", "0.6");
+        const floor = Number(rawFloor);
+        const confidenceFloor = Number.isFinite(floor) ? floor : undefined;
         const seen = new Set(this.seenBySession.get(sessionId) ?? []);
         const recurrences = this.ledger?.postInjectionRecurrencesFor(sessionId) ??
             new Map();
@@ -297,6 +319,9 @@ Consider adding this convention to AGENTS.md:
                 // v0.5.0 (K5-009) — the `ignored` flag is now a first-class
                 // Memory field via mapRow (D5-07).
                 ignored: m.ignored === true,
+                // v0.6.0 (K6-022) — the memory's computed confidence
+                // (may be null for rows without evidence).
+                confidence: m.confidence ?? undefined,
             }, {
                 seenThisSession: seen,
                 // v0.4.0 (K4-025) — plan §5.1 rule 4: a causal pattern
@@ -310,6 +335,7 @@ Consider adding this convention to AGENTS.md:
                     : m.fingerprint
                         ? (recurrences.get(m.fingerprint) ?? 0)
                         : 0,
+                confidenceFloor,
             }, qualityGateEnabled);
             verdicts.push({ ...verdict, memory: m });
         }
@@ -320,13 +346,16 @@ Consider adding this convention to AGENTS.md:
      * read at call time from `pre_prompt_budget_tokens` (seeded "900" by
      * migration 006). Clamped to [100, 4000]; a non-numeric value falls
      * back to 900. `kevin_trace` reports the value used via `plan().cap`.
+     *
+     * v0.6.0 (K6-021 / plan §5.8) — default becomes "400" and the lower
+     * clamp bound drops to **0**: the roadmap's kill criterion K1 prescribes
+     * cutting the push budget to zero when coverage is poor, and v0.5's
+     * [100, 4000] clamp made that response unimplementable. A non-numeric
+     * value falls back to 400. `onSystemTransform` treats 0 as off and
+     * returns before any retrieval (see K6-021 acceptance).
      */
     prePromptCap() {
-        const raw = this.memoryService.getSetting("pre_prompt_budget_tokens", "900");
-        const n = Number(raw);
-        if (!Number.isFinite(n))
-            return 900;
-        return Math.min(4000, Math.max(100, Math.round(n)));
+        return effectivePrePromptCap(this.memoryService.getSetting("pre_prompt_budget_tokens", "400"));
     }
     /**
      * v0.4.0 (K4-017) — QualityGate admission: filters the ranked slice to
@@ -469,10 +498,16 @@ Consider adding this convention to AGENTS.md:
         return tokens.join(" ");
     }
     onSystemTransform(input, output) {
+        // v0.6.0 (K6-021 / plan §5.8) — a cap of 0 means off: return before
+        // any retrieval, gate evaluation or metric write. "Off" must not
+        // run a hidden query and throw away the result.
+        const cap = this.prePromptCap();
+        if (cap === 0)
+            return;
         const query = this.deriveQuery(input.messages);
         if (!query)
             return;
-        const block = this.inject(query, "context", this.prePromptCap(), "tokens_injected_pre_prompt", input.sessionID ?? "");
+        const block = this.inject(query, "context", cap, "tokens_injected_pre_prompt", input.sessionID ?? "");
         if (block)
             output.system.push(block);
     }