@jmtrin/opencode-kevin 0.6.0 → 0.8.0

package/migrations/007_v06_pull.sql

@@ -1,145 +1,145 @@
--- ============================================================================
--- 007_v06_pull.sql — v0.6.0 "Pull"
---
--- Distribution: curated artifacts instead of a per-prompt token tax.
---
--- Section 1: curation_proposals — the persisted human decision record.
--- Section 2: artifact_writes — the disk audit trail, including refusals.
--- Section 3: memories curation + inferability columns.
--- Section 4: metric seeds.
--- Section 5: setting seeds.
--- Section 6: conditional push-budget demotion.
--- Section 7: schema_version.
---
--- Additive only. Every CHECK constraint introduced here is on a NEW table;
--- no existing constraint is widened, so unlike migration 006 there is no
--- table rebuild in this file.
--- ============================================================================
-
--- ---------------------------------------------------------------------------
--- 1. curation_proposals — one row per proposed artifact change.
---
---    This table is the "explicit human decision between generation and
---    application" of Principle 22. `kevin_propose` writes 'pending' rows and
---    nothing else; `kevin_approve` moves them to 'approved' → 'applied' or to
---    'rejected'. Rows are never deleted: rejection history is the evidence
---    base for roadmap kill criterion K4 ("proposals rejected more often than
---    approved"), which is uncheckable if rejections are discarded.
---
---    memory_id has no REFERENCES clause. Store sets PRAGMA foreign_keys = ON,
---    and a hard FK would block deleting a memory that a historical proposal
---    once mentioned — the same reasoning as superseded_by in migration 006.
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS curation_proposals (
-  id            TEXT PRIMARY KEY,
-  project_id    TEXT NOT NULL,
-  memory_id     TEXT NOT NULL,
-  kind          TEXT NOT NULL CHECK (kind IN ('agents_md','skill','reference')),
-  target_path   TEXT NOT NULL,
-  proposed_text TEXT NOT NULL,
-  diff          TEXT NOT NULL,
-  status        TEXT NOT NULL DEFAULT 'pending'
-                CHECK (status IN ('pending','approved','rejected','applied','superseded')),
-  created_at    TEXT NOT NULL DEFAULT (datetime('now')),
-  decided_at    TEXT,
-  applied_at    TEXT
-);
-CREATE INDEX IF NOT EXISTS idx_proposals_status  ON curation_proposals(status);
-CREATE INDEX IF NOT EXISTS idx_proposals_memory  ON curation_proposals(memory_id);
-CREATE INDEX IF NOT EXISTS idx_proposals_project ON curation_proposals(project_id);
-
--- ---------------------------------------------------------------------------
--- 2. artifact_writes — the append-only audit trail for every disk operation.
---
---    A row is written for EVERY ArtifactWriter.apply() call, including
---    outcome='noop' and outcome='refused'. A refusal that leaves no trace is
---    indistinguishable from a write that never happened, and the whole point
---    of §5.1 rule 3 is that a refusal is a reportable event.
---
---    hash_before / hash_after are SHA-256 of the full file contents, not of
---    the marker block. That is what makes rule 4 (bytes outside the markers
---    are byte-identical) auditable after the fact rather than only at test
---    time.
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS artifact_writes (
-  id           TEXT PRIMARY KEY,
-  proposal_id  TEXT,
-  project_id   TEXT NOT NULL,
-  path         TEXT NOT NULL,
-  bytes_before INTEGER,
-  bytes_after  INTEGER,
-  hash_before  TEXT,
-  hash_after   TEXT,
-  outcome      TEXT NOT NULL CHECK (outcome IN ('written','noop','refused')),
-  reason       TEXT,
-  wrote_at     TEXT NOT NULL DEFAULT (datetime('now'))
-);
-CREATE INDEX IF NOT EXISTS idx_artifact_writes_path ON artifact_writes(path);
-
--- ---------------------------------------------------------------------------
--- 3. memories: curation state and inferability.
---
---    curated / curated_at record that a memory has already been published,
---    so the Curator does not re-propose it on every session idle.
---
---    inferable is deliberately NULLABLE with no default. Three states are
---    needed, not two: 1 = inferable (a self-describing diagnostic the model
---    resolves for free), 0 = non-inferable (project truth), NULL = unknown
---    (not yet classified, or classified as 'unknown'). The Curator predicate
---    is `inferable != 1`, so NULL rows stay eligible — an unclassified memory
---    must not be silently withheld from curation.
--- ---------------------------------------------------------------------------
-ALTER TABLE memories ADD COLUMN curated    INTEGER NOT NULL DEFAULT 0;
-ALTER TABLE memories ADD COLUMN curated_at TEXT;
-ALTER TABLE memories ADD COLUMN inferable  INTEGER;
-
-CREATE INDEX IF NOT EXISTS idx_memories_curated   ON memories(curated);
-CREATE INDEX IF NOT EXISTS idx_memories_inferable ON memories(inferable);
-
--- ---------------------------------------------------------------------------
--- 4. Metric seeds. Order matches the additions to METRIC_KEYS in metrics.ts.
---    injections_blocked_confidence is the sixth member of the v0.5 blocked
---    family and MUST be counted like the other five (Principle 16).
--- ---------------------------------------------------------------------------
-INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES
-  ('proposals_created',             0),
-  ('proposals_approved',            0),
-  ('proposals_rejected',            0),
-  ('artifact_writes_total',         0),
-  ('artifact_writes_noop',          0),
-  ('injections_blocked_confidence', 0);
-
--- ---------------------------------------------------------------------------
--- 5. Setting seeds. Values are TEXT, always. Read them with an explicit
---    string comparison or an explicit Number() parse — never `=== 1`.
---    (That exact mistake kept cross_project_enabled unreachable for the
---    whole of v0.3.0.)
---
---    skill_emission_enabled and reference_emission_enabled default to '0':
---    the pull channels ship OFF and are opted into, because they depend on a
---    v2 domain Kevin does not pin.
--- ---------------------------------------------------------------------------
-INSERT OR IGNORE INTO kevin_settings (key, value) VALUES
-  ('curation_enabled',           '1'),
-  ('agents_md_path',             'AGENTS.md'),
-  ('skill_emission_enabled',     '0'),
-  ('reference_emission_enabled', '0'),
-  ('injection_confidence_floor', '0.6');
-
--- ---------------------------------------------------------------------------
--- 6. Push-budget demotion.
---
---    Lower the default push budget only where the user has not overridden it.
---    A user who deliberately set 1200 (or 1500, or 200) keeps their value;
---    only an installation still sitting on the v0.5 default of '900' is
---    moved to '400'. An unconditional UPDATE here would silently discard a
---    deliberate configuration choice, which is a worse defect than the token
---    cost it would save.
--- ---------------------------------------------------------------------------
-UPDATE kevin_settings SET value = '400'
- WHERE key = 'pre_prompt_budget_tokens' AND value = '900';
-
--- ---------------------------------------------------------------------------
--- 7. Version marker.
--- ---------------------------------------------------------------------------
+-- ============================================================================
+-- 007_v06_pull.sql — v0.6.0 "Pull"
+--
+-- Distribution: curated artifacts instead of a per-prompt token tax.
+--
+-- Section 1: curation_proposals — the persisted human decision record.
+-- Section 2: artifact_writes — the disk audit trail, including refusals.
+-- Section 3: memories curation + inferability columns.
+-- Section 4: metric seeds.
+-- Section 5: setting seeds.
+-- Section 6: conditional push-budget demotion.
+-- Section 7: schema_version.
+--
+-- Additive only. Every CHECK constraint introduced here is on a NEW table;
+-- no existing constraint is widened, so unlike migration 006 there is no
+-- table rebuild in this file.
+-- ============================================================================
+
+-- ---------------------------------------------------------------------------
+-- 1. curation_proposals — one row per proposed artifact change.
+--
+--    This table is the "explicit human decision between generation and
+--    application" of Principle 22. `kevin_propose` writes 'pending' rows and
+--    nothing else; `kevin_approve` moves them to 'approved' → 'applied' or to
+--    'rejected'. Rows are never deleted: rejection history is the evidence
+--    base for roadmap kill criterion K4 ("proposals rejected more often than
+--    approved"), which is uncheckable if rejections are discarded.
+--
+--    memory_id has no REFERENCES clause. Store sets PRAGMA foreign_keys = ON,
+--    and a hard FK would block deleting a memory that a historical proposal
+--    once mentioned — the same reasoning as superseded_by in migration 006.
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS curation_proposals (
+  id            TEXT PRIMARY KEY,
+  project_id    TEXT NOT NULL,
+  memory_id     TEXT NOT NULL,
+  kind          TEXT NOT NULL CHECK (kind IN ('agents_md','skill','reference')),
+  target_path   TEXT NOT NULL,
+  proposed_text TEXT NOT NULL,
+  diff          TEXT NOT NULL,
+  status        TEXT NOT NULL DEFAULT 'pending'
+                CHECK (status IN ('pending','approved','rejected','applied','superseded')),
+  created_at    TEXT NOT NULL DEFAULT (datetime('now')),
+  decided_at    TEXT,
+  applied_at    TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_proposals_status  ON curation_proposals(status);
+CREATE INDEX IF NOT EXISTS idx_proposals_memory  ON curation_proposals(memory_id);
+CREATE INDEX IF NOT EXISTS idx_proposals_project ON curation_proposals(project_id);
+
+-- ---------------------------------------------------------------------------
+-- 2. artifact_writes — the append-only audit trail for every disk operation.
+--
+--    A row is written for EVERY ArtifactWriter.apply() call, including
+--    outcome='noop' and outcome='refused'. A refusal that leaves no trace is
+--    indistinguishable from a write that never happened, and the whole point
+--    of §5.1 rule 3 is that a refusal is a reportable event.
+--
+--    hash_before / hash_after are SHA-256 of the full file contents, not of
+--    the marker block. That is what makes rule 4 (bytes outside the markers
+--    are byte-identical) auditable after the fact rather than only at test
+--    time.
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS artifact_writes (
+  id           TEXT PRIMARY KEY,
+  proposal_id  TEXT,
+  project_id   TEXT NOT NULL,
+  path         TEXT NOT NULL,
+  bytes_before INTEGER,
+  bytes_after  INTEGER,
+  hash_before  TEXT,
+  hash_after   TEXT,
+  outcome      TEXT NOT NULL CHECK (outcome IN ('written','noop','refused')),
+  reason       TEXT,
+  wrote_at     TEXT NOT NULL DEFAULT (datetime('now'))
+);
+CREATE INDEX IF NOT EXISTS idx_artifact_writes_path ON artifact_writes(path);
+
+-- ---------------------------------------------------------------------------
+-- 3. memories: curation state and inferability.
+--
+--    curated / curated_at record that a memory has already been published,
+--    so the Curator does not re-propose it on every session idle.
+--
+--    inferable is deliberately NULLABLE with no default. Three states are
+--    needed, not two: 1 = inferable (a self-describing diagnostic the model
+--    resolves for free), 0 = non-inferable (project truth), NULL = unknown
+--    (not yet classified, or classified as 'unknown'). The Curator predicate
+--    is `inferable != 1`, so NULL rows stay eligible — an unclassified memory
+--    must not be silently withheld from curation.
+-- ---------------------------------------------------------------------------
+ALTER TABLE memories ADD COLUMN curated    INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE memories ADD COLUMN curated_at TEXT;
+ALTER TABLE memories ADD COLUMN inferable  INTEGER;
+
+CREATE INDEX IF NOT EXISTS idx_memories_curated   ON memories(curated);
+CREATE INDEX IF NOT EXISTS idx_memories_inferable ON memories(inferable);
+
+-- ---------------------------------------------------------------------------
+-- 4. Metric seeds. Order matches the additions to METRIC_KEYS in metrics.ts.
+--    injections_blocked_confidence is the sixth member of the v0.5 blocked
+--    family and MUST be counted like the other five (Principle 16).
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES
+  ('proposals_created',             0),
+  ('proposals_approved',            0),
+  ('proposals_rejected',            0),
+  ('artifact_writes_total',         0),
+  ('artifact_writes_noop',          0),
+  ('injections_blocked_confidence', 0);
+
+-- ---------------------------------------------------------------------------
+-- 5. Setting seeds. Values are TEXT, always. Read them with an explicit
+--    string comparison or an explicit Number() parse — never `=== 1`.
+--    (That exact mistake kept cross_project_enabled unreachable for the
+--    whole of v0.3.0.)
+--
+--    skill_emission_enabled and reference_emission_enabled default to '0':
+--    the pull channels ship OFF and are opted into, because they depend on a
+--    v2 domain Kevin does not pin.
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES
+  ('curation_enabled',           '1'),
+  ('agents_md_path',             'AGENTS.md'),
+  ('skill_emission_enabled',     '0'),
+  ('reference_emission_enabled', '0'),
+  ('injection_confidence_floor', '0.6');
+
+-- ---------------------------------------------------------------------------
+-- 6. Push-budget demotion.
+--
+--    Lower the default push budget only where the user has not overridden it.
+--    A user who deliberately set 1200 (or 1500, or 200) keeps their value;
+--    only an installation still sitting on the v0.5 default of '900' is
+--    moved to '400'. An unconditional UPDATE here would silently discard a
+--    deliberate configuration choice, which is a worse defect than the token
+--    cost it would save.
+-- ---------------------------------------------------------------------------
+UPDATE kevin_settings SET value = '400'
+ WHERE key = 'pre_prompt_budget_tokens' AND value = '900';
+
+-- ---------------------------------------------------------------------------
+-- 7. Version marker.
+-- ---------------------------------------------------------------------------
 INSERT OR IGNORE INTO schema_version (version) VALUES ('007');

package/migrations/008_v07_truth.sql

@@ -0,0 +1,124 @@
+-- ============================================================
+-- Kevin 0.7.0 — Migration 008: Project Truth (additive)
+-- ============================================================
+-- Backward-compatible, additive only. Two new tables, two new
+-- nullable/defaulted columns on `memories`, one index, five
+-- metric seeds, four setting seeds. NO table rebuild: nothing
+-- here widens a CHECK constraint on an existing table.
+--
+-- Section 1: repo_facts — the ground-truth store.
+-- Section 2: memory_conflicts — surfaced, never auto-resolved.
+-- Section 3: memories truth columns.
+-- Section 4: metric seeds.
+-- Section 5: setting seeds.
+-- Section 6: schema_version.
+-- ============================================================
+
+-- ------------------------------------------------------------
+-- 1. repo_facts — facts extracted from package.json and
+--    tsconfig.json. Both are JSON, parsed with JSON.parse; this
+--    release adds NO parser and NO runtime dependency.
+--
+--    The UNIQUE index INCLUDES project_id and that is load-
+--    bearing (D7-02). Kevin's DB is global
+--    (~/.opencode-kevin/kevin.db, projectId =
+--    fingerprint(process.cwd())). Without project_id, project A's
+--    packageManager=npm would overwrite project B's
+--    packageManager=pnpm and contradictions() would then flag A's
+--    memories against B's repository.
+--
+--    source_mtime lets scan() skip re-parsing an unchanged file.
+-- ------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS repo_facts (
+  id           TEXT PRIMARY KEY,
+  project_id   TEXT NOT NULL,
+  file         TEXT NOT NULL,
+  key_path     TEXT NOT NULL,
+  value        TEXT NOT NULL,
+  fingerprint  TEXT NOT NULL,
+  source_mtime TEXT,
+  scanned_at   TEXT NOT NULL DEFAULT (datetime('now'))
+);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_repo_facts    ON repo_facts(project_id, file, key_path);
+CREATE INDEX        IF NOT EXISTS idx_repo_facts_fp ON repo_facts(fingerprint);
+
+-- ------------------------------------------------------------
+-- 2. memory_conflicts — detection only. status moves
+--    open → acknowledged → resolved, and ONLY the kevin_conflicts
+--    tool may move it to 'resolved' (D7-06). No session.idle path
+--    writes 'resolved'.
+--
+--    memory_a / memory_b / fact_id carry NO REFERENCES clause on
+--    purpose: Store sets PRAGMA foreign_keys = ON, and a hard FK
+--    would block deleting a memory that participates in a
+--    conflict.
+-- ------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS memory_conflicts (
+  id          TEXT PRIMARY KEY,
+  project_id  TEXT NOT NULL,
+  memory_a    TEXT NOT NULL,
+  memory_b    TEXT,
+  fact_id     TEXT,
+  kind        TEXT NOT NULL CHECK (kind IN ('repo_truth','decision_pair','temporal')),
+  detail      TEXT,
+  status      TEXT NOT NULL DEFAULT 'open' CHECK (status IN ('open','acknowledged','resolved')),
+  detected_at TEXT NOT NULL DEFAULT (datetime('now')),
+  resolved_at TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_conflicts_status ON memory_conflicts(status);
+CREATE INDEX IF NOT EXISTS idx_conflicts_memory ON memory_conflicts(memory_a);
+
+-- ------------------------------------------------------------
+-- 3. memories: the de-ranking column and its timestamp.
+--
+--    truth_penalty is clamped by application code to [0, 0.5] and
+--    multiplies rankScore as (1 - truth_penalty), AFTER the
+--    existing BM25 × origin_boost × recency_decay chain. At 0.0
+--    the v0.6.0 ranking is reproduced exactly (D7-04).
+--
+--    There is deliberately no status transition here. Contra-
+--    diction de-ranks; it never deletes (Principle 24, D7-03).
+-- ------------------------------------------------------------
+ALTER TABLE memories ADD COLUMN truth_penalty   REAL NOT NULL DEFAULT 0.0;
+ALTER TABLE memories ADD COLUMN contradicted_at TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_memories_truth_penalty ON memories(truth_penalty);
+
+-- ------------------------------------------------------------
+-- 4. Metric seeds. Order matches the additions to METRIC_KEYS
+--    in metrics.ts (28 → 33).
+-- ------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES
+  ('repo_facts_scanned',       0),
+  ('memories_contradicted',    0),
+  ('conventions_mined',        0),
+  ('conflicts_detected',       0),
+  ('error_lessons_suppressed', 0);
+
+-- ------------------------------------------------------------
+-- 5. Setting seeds. Values are TEXT, always. Read them with an
+--    explicit string comparison or an explicit Number() parse —
+--    never `=== 1`, and never for truthiness.
+--
+--    error_lesson_mode is a TEXT ENUM ('all' | 'triage_only').
+--    `if (mode)` is true for BOTH values and would put every
+--    installation into triage mode on upgrade. Compare with
+--    === "triage_only" (D7-12). Defaults to 'all', preserving
+--    v0.6.0 behaviour exactly.
+--
+--    The three feature flags default to '0' (off): a release that
+--    changes nothing until asked must not silently start scanning
+--    the repository or mining conventions on upgrade. They are
+--    opted into explicitly. (Task K7-001 / plan §5 & §12.)
+-- ------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES
+  ('repo_truth_enabled',         '0'),
+  ('convention_mining_enabled',  '0'),
+  ('conflict_detection_enabled', '0'),
+  ('error_lesson_mode',          'all');
+
+-- ------------------------------------------------------------
+-- 6. Version marker.
+-- ------------------------------------------------------------
+INSERT OR IGNORE INTO schema_version (version) VALUES ('008');

package/migrations/009_v08_team.sql

@@ -0,0 +1,100 @@
+-- ============================================================
+-- Kevin 0.8.0 - Migration 009: Team (additive)
+-- ============================================================
+-- Backward-compatible, additive only. All new columns are
+-- nullable or carry a NOT NULL DEFAULT so legacy rows keep
+-- working without a destructive rebuild.
+--
+-- Scope note: this migration introduces `repo_id`, a SECOND
+-- scoping dimension. `project_id` is retained on every table,
+-- unchanged, as local-path provenance (D8-02). Nothing that
+-- reads `project_id` today stops working.
+-- ============================================================
+
+-- 1. shared_entries: the local projection of the committed OKF file.
+--    One row per (repo_id, entry_id). Rewritten by SharedLayer.import(),
+--    never edited by hand, never the source of truth - the file is.
+--    No REFERENCES to memories: an entry may arrive from a teammate
+--    before any local memory corresponds to it (D8-12).
+CREATE TABLE IF NOT EXISTS shared_entries (
+  id           TEXT PRIMARY KEY,
+  repo_id      TEXT NOT NULL,
+  entry_id     TEXT NOT NULL,
+  type         TEXT NOT NULL CHECK (type IN ('decision', 'rule', 'pattern', 'solution')),
+  statement    TEXT NOT NULL,
+  scope        TEXT,
+  confidence   REAL NOT NULL DEFAULT 0.0,
+  evidence     INTEGER NOT NULL DEFAULT 0,
+  origin       TEXT NOT NULL DEFAULT 'shared',
+  author_hash  TEXT,
+  op           TEXT NOT NULL CHECK (op IN ('assert', 'tombstone')) DEFAULT 'assert',
+  supersedes   TEXT,
+  created_at   TEXT NOT NULL,
+  imported_at  TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+-- 1b. Identity is (repo_id, entry_id). The UNIQUE index is what makes
+--     import() an idempotent upsert instead of an append.
+CREATE UNIQUE INDEX IF NOT EXISTS uq_shared_entries
+  ON shared_entries(repo_id, entry_id);
+CREATE INDEX IF NOT EXISTS idx_shared_entries_op
+  ON shared_entries(op);
+CREATE INDEX IF NOT EXISTS idx_shared_entries_type
+  ON shared_entries(type);
+
+-- 2. okf_imports: append-only audit of every read of the shared file,
+--    including no-op reads and refusals. `file_hash` drives the skip
+--    path in SharedLayer.import() (D8-14).
+CREATE TABLE IF NOT EXISTS okf_imports (
+  id               TEXT PRIMARY KEY,
+  repo_id          TEXT NOT NULL,
+  path             TEXT NOT NULL,
+  file_hash        TEXT,
+  entries_parsed   INTEGER NOT NULL DEFAULT 0,
+  entries_folded   INTEGER NOT NULL DEFAULT 0,
+  entries_rejected INTEGER NOT NULL DEFAULT 0,
+  skipped          INTEGER NOT NULL DEFAULT 0,
+  imported_at      TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_okf_imports_repo
+  ON okf_imports(repo_id, imported_at);
+
+-- 3. memories: the second scoping dimension and the layer marker.
+--    repo_id is NULLABLE and back-filled by the post-apply hook, not by
+--    a DEFAULT: the value depends on the row's existing project_id and
+--    SQLite cannot express that in a column default.
+--    layer carries NO CHECK constraint - widening it later would force
+--    the migration-004 rebuild path (D8-07). Enforced in TypeScript.
+ALTER TABLE memories ADD COLUMN repo_id TEXT;
+ALTER TABLE memories ADD COLUMN layer TEXT NOT NULL DEFAULT 'local';
+ALTER TABLE memories ADD COLUMN shared_entry_id TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_memories_repo_id
+  ON memories(repo_id, status);
+CREATE INDEX IF NOT EXISTS idx_memories_layer
+  ON memories(layer);
+
+-- 4. kevin_metrics: seed the six v0.8 counters (33 -> 39).
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES
+  ('shared_entries_total',    0),
+  ('shared_entries_imported', 0),
+  ('shared_entries_exported', 0),
+  ('okf_merge_folds',         0),
+  ('rekey_events',            0),
+  ('injections_from_shared',  0);
+
+-- 5. kevin_settings: seed the five v0.8 flags (18 -> 23).
+--    shared_layer_enabled defaults OFF: this release must be opted into,
+--    because its first side effect is a new file in the user's repository.
+--    shared_confidence_floor (0.7) is deliberately STRICTER than
+--    injection_confidence_floor (0.6) - see 5.7.
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES
+  ('shared_layer_enabled',     '0'),
+  ('okf_path',                 '.kevin/knowledge.okf'),
+  ('share_requires_approval',  '1'),
+  ('author_identity_mode',     'hashed'),
+  ('shared_confidence_floor',  '0.7');
+
+-- 6. Seed version 009.
+INSERT OR IGNORE INTO schema_version (version) VALUES ('009');

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@jmtrin/opencode-kevin",
-	"version": "0.6.0",
+	"version": "0.8.0",
 	"description": "Kevin — Observa y aprende: capa de aprendizaje para OpenCode",
 	"type": "module",
 	"main": "dist/plugin/index.js",
@@ -22,11 +22,11 @@
 		"lint": "biome check .",
 		"format": "biome format --write .",
 		"verify": "node --import tsx scripts/verify-install.ts",
-		"replay": "node --import tsx scripts/replay.ts"
+		"replay": "node --import tsx scripts/replay.ts",
+		"measure:mix": "node --import tsx scripts/measure-mix.ts"
 	},
 	"dependencies": {
-		"@opencode-ai/plugin": "^1.17.6",
-		"zod": "^3.23.8"
+		"@opencode-ai/plugin": "^1.17.6"
 	},
 	"optionalDependencies": {
 		"better-sqlite3": "^12.11.0"