@jmtrin/opencode-kevin 0.8.0 → 1.0.0

package/dist/migrations/010_v09_native.sql

@@ -0,0 +1,78 @@
+-- ============================================================
+-- Kevin v0.9.0 "Native" — host surface and hook liveness
+-- Migration 010. Additive only. No table rebuild.
+-- ============================================================
+
+-- 1. Hook liveness. Deliberately NOT project-scoped: a hook is a
+--    property of the host binary, not of a checkout. One row per
+--    hook name, updated in place. See D9-08.
+CREATE TABLE IF NOT EXISTS hook_liveness (
+	hook            TEXT PRIMARY KEY,
+	experimental    INTEGER NOT NULL DEFAULT 0,
+	fire_count      INTEGER NOT NULL DEFAULT 0,
+	error_count     INTEGER NOT NULL DEFAULT 0,
+	expected_count  INTEGER NOT NULL DEFAULT 0,
+	first_seen_at   TEXT,
+	last_seen_at    TEXT,
+	dead_since      TEXT,
+	plugin_version  TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_hook_liveness_dead
+	ON hook_liveness(dead_since);
+
+-- 2. Host probe history. Append-only. Off by default; exists so a
+--    user chasing an intermittent fault can turn it on and get a
+--    timeline instead of a single current value.
+CREATE TABLE IF NOT EXISTS host_probes (
+	id              TEXT PRIMARY KEY,
+	probed_at       TEXT NOT NULL DEFAULT (datetime('now')),
+	plugin_version  TEXT,
+	flavour         TEXT NOT NULL,
+	has_shell       INTEGER NOT NULL DEFAULT 0,
+	v2_skill        INTEGER NOT NULL DEFAULT 0,
+	v2_reference    INTEGER NOT NULL DEFAULT 0,
+	notes           TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_host_probes_at
+	ON host_probes(probed_at);
+
+-- 3. Native registration outcomes. One row per attach attempt, so
+--    "registered but unverified" is a queryable state rather than a
+--    log line.
+CREATE TABLE IF NOT EXISTS native_registrations (
+	id              TEXT PRIMARY KEY,
+	attached_at     TEXT NOT NULL DEFAULT (datetime('now')),
+	surface         TEXT NOT NULL CHECK (surface IN ('skill', 'reference')),
+	registered      INTEGER NOT NULL DEFAULT 0,
+	verified        INTEGER NOT NULL DEFAULT 0,
+	note            TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_native_registrations_surface
+	ON native_registrations(surface, attached_at);
+
+-- 4. Metric seeds (39 -> 45).
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES
+	('hook_fires_total',                0),
+	('hook_errors_total',               0),
+	('hooks_dead_total',                0),
+	('injections_suppressed_dead_hook', 0),
+	('native_registrations_total',      0),
+	('native_registration_failures',    0);
+
+-- 5. Setting seeds (23 -> 27).
+--    hook_liveness_enabled defaults ON: it is a read-only instrument
+--    on the success path, and an instrument nobody switches on is an
+--    instrument nobody has.
+--    native_registration_enabled defaults OFF: it changes where a
+--    curated skill comes from, and that is a change a user opts into.
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES
+	('hook_liveness_enabled',       '1'),
+	('native_registration_enabled', '0'),
+	('host_probe_history_enabled',  '0'),
+	('dead_hook_report_threshold',  '3');
+
+-- 6. Version marker.
+INSERT OR IGNORE INTO schema_version (version) VALUES ('010');

package/dist/migrations/011_v10_proven.sql

@@ -0,0 +1,69 @@
+-- =============================================================
+-- Kevin v1.0.0 "Proven" — migration 011
+-- Adds: perf sampling, benchmark results.
+-- No ALTER TABLE (second release running); no column is retyped.
+-- =============================================================
+
+-- 1. Per-scope latency aggregates, flushed at session.idle.
+--    Machine-scoped: no project_id, for the same reason hook_liveness
+--    has none (v0.9.0 D9-08) — latency is a property of the install.
+CREATE TABLE IF NOT EXISTS perf_samples (
+    id             INTEGER PRIMARY KEY AUTOINCREMENT,
+    scope          TEXT    NOT NULL,
+    sample_count   INTEGER NOT NULL,
+    p50_ms         REAL    NOT NULL,
+    p95_ms         REAL    NOT NULL,
+    max_ms         REAL    NOT NULL,
+    budget_p95_ms  REAL    NOT NULL,
+    within_budget  INTEGER NOT NULL DEFAULT 1,
+    recorded_at    TEXT    NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_perf_samples_scope
+    ON perf_samples(scope, recorded_at DESC);
+CREATE INDEX IF NOT EXISTS idx_perf_samples_breach
+    ON perf_samples(within_budget) WHERE within_budget = 0;
+
+-- 2. Benchmark results. Append-only. One row per arm per run.
+--    arm CHECK is closed by the plan; widening requires a table rebuild (intentional friction).
+--    scope CHECK is intentionally absent: the scope union may gain members in a 1.x minor.
+CREATE TABLE IF NOT EXISTS bench_runs (
+    id               INTEGER PRIMARY KEY AUTOINCREMENT,
+    corpus_digest    TEXT    NOT NULL,
+    contract_digest  TEXT    NOT NULL,
+    package_version  TEXT    NOT NULL,
+    runtime          TEXT    NOT NULL,
+    arm              TEXT    NOT NULL,
+    k                INTEGER NOT NULL,
+    precision_at_k   REAL    NOT NULL,
+    recall_at_k      REAL    NOT NULL,
+    mrr              REAL    NOT NULL,
+    ran_at           TEXT    NOT NULL DEFAULT (datetime('now')),
+    CHECK (arm IN ('none', 'recent-k', 'random-k', 'kevin'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_bench_runs_corpus
+    ON bench_runs(corpus_digest, ran_at DESC);
+CREATE INDEX IF NOT EXISTS idx_bench_runs_arm
+    ON bench_runs(arm, ran_at DESC);
+
+-- 3. Metric seeds (45 -> 51).
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES ('perf_samples_recorded', 0);
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES ('perf_budget_breaches', 0);
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES ('dispose_fires_total', 0);
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES ('dispose_misses_total', 0);
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES ('contract_digest_changes', 0);
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES ('bench_runs_total', 0);
+
+-- 4. Setting seeds (27 -> 31). All TEXT; '0'/'1' are strings.
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES ('perf_enabled', '1');
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES ('perf_ring_capacity', '512');
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES ('perf_flush_on_idle', '1');
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES ('contract_report_enabled', '1');
+
+-- 5. `dispose` becomes the seventh instrumented hook (v0.9.0 migration 010
+--    seeded six rows; this is a data seed, not a schema change).
+INSERT OR IGNORE INTO hook_liveness (hook) VALUES ('dispose');
+
+-- 6. Schema version.
+INSERT OR IGNORE INTO schema_version (version) VALUES ('011');

package/dist/plugin/Archiver.js

@@ -96,4 +96,3 @@ function formatSqliteUtc(d) {
     const pad = (n) => String(n).padStart(2, "0");
     return `${d.getUTCFullYear()}-${pad(d.getUTCMonth() + 1)}-${pad(d.getUTCDate())} ${pad(d.getUTCHours())}:${pad(d.getUTCMinutes())}:${pad(d.getUTCSeconds())}`;
 }
-//# sourceMappingURL=Archiver.js.map

package/dist/plugin/ArtifactWriter.d.ts

@@ -35,18 +35,33 @@ export interface WritePlan {
     readonly hashAfter: string;
 }
 /**
- * Rule 9 (K6-009 / plan §5.1, D6-02) — three layers applied to the body
- * before splicing:
- *   (a) the escaping discipline of `plugin/memory-format.ts`;
- *   (b) strip any line containing `kevin:begin` or `kevin:end`, in any
- *       casing, anywhere in the line;
- *   (c) strip HTML comment terminators (`-->`).
- * Without this, a memory containing a literal `<!-- kevin:end -->` line would
- * close the marker comment early and let subsequent content escape the
- * curated region on the next regeneration — a marker-injection variant of the
- * v0.1.5 prompt-injection defect (plan §3.5).
+ * Rule 9, layer (a) — superseded in v1.0.0 by `escapeForMarkerBlock`
+ * in `plugin/escape.ts` (K10-027), which carries the same idempotent
+ * entity discipline.
+ */
+/**
+ * v1.0.0 (K10-027 / plan §5.7) — the boundary functions now live in
+ * `plugin/escape.ts`; this composer applies them in fence-then-marker
+ * order. Layer (b) — strip any line containing `kevin:begin` or
+ * `kevin:end`, in any casing — is a filter rather than an escape and
+ * stays here. Without layer (b), a memory containing a literal
+ * `<!-- kevin:end -->` line would close the marker comment early and
+ * let subsequent content escape the curated region on the next
+ * regeneration — a marker-injection variant of the v0.1.5
+ * prompt-injection defect (plan §3.5). The trailing `-->` strip is kept
+ * as defence in depth although `escapeForMarkerBlock` already escapes
+ * every `>` that could form one.
  */
 export declare function sanitizeArtifactBody(body: string): string;
+/**
+ * v1.0.0 (K10-027 / plan §5.7, rule 2) — whole-file writes escape by
+ * container. Only `.okf` files are line-oriented JSON: each line gets
+ * `escapeForOkfLine`, which is the identity on a well-formed OKF line
+ * (canonical JSON never contains raw control characters) and therefore
+ * preserves the re-render `noop`. Kevin-owned markdown paths keep their
+ * bytes — fences there are legitimate content.
+ */
+export declare function escapeForContainer(path: string, content: string): string;
 /**
  * v0.6.0 (K6-005 / plan §5.1) — the single write path to disk (D6-01).
  *

package/dist/plugin/ArtifactWriter.js

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
 import { closeSync, fsyncSync, openSync, readFileSync, renameSync, unlinkSync, writeSync, } from "node:fs";
 import { unifiedDiff } from "./diff.js";
+import { escapeForFence, escapeForMarkerBlock, escapeForOkfLine, } from "./escape.js";
 import { uuidv7 } from "./uuid.js";
 // v0.6.0 (K6-005 / plan §5.1, D6-02) — the frozen marker contract. The exact
 // byte sequences are load-bearing: README, v1.0.0 plan C-01 and the round-trip
@@ -30,39 +31,55 @@ function normalizeEol(body, eol) {
     return body.replace(/\r\n/g, "\n").replace(/\n/g, eol);
 }
 /**
- * Rule 9, layer (a) — the escaping discipline of `plugin/memory-format.ts`
- * (`&`, `<`, `>`) made idempotent: an ampersand that already heads a known
- * entity (`&amp;`, `&lt;`, `&gt;`, `&#NNN;`) is left alone, so sanitizing
- * sanitized output is a fixed point. The round-trip property of the marker
- * block depends on this: a non-idempotent escape would grow `&amp;lt;` on
- * every regeneration (K6-009 / plan §5.1 rule 9).
+ * Rule 9, layer (a) — superseded in v1.0.0 by `escapeForMarkerBlock`
+ * in `plugin/escape.ts` (K10-027), which carries the same idempotent
+ * entity discipline.
  */
-function escapeIdempotent(text) {
-    return text
-        .replace(/&(?!(amp|lt|gt|#\d+);)/g, "&amp;")
-        .replace(/</g, "&lt;")
-        .replace(/>/g, "&gt;");
-}
 /**
- * Rule 9 (K6-009 / plan §5.1, D6-02) — three layers applied to the body
- * before splicing:
- *   (a) the escaping discipline of `plugin/memory-format.ts`;
- *   (b) strip any line containing `kevin:begin` or `kevin:end`, in any
- *       casing, anywhere in the line;
- *   (c) strip HTML comment terminators (`-->`).
- * Without this, a memory containing a literal `<!-- kevin:end -->` line would
- * close the marker comment early and let subsequent content escape the
- * curated region on the next regeneration — a marker-injection variant of the
- * v0.1.5 prompt-injection defect (plan §3.5).
+ * v1.0.0 (K10-027 / plan §5.7) — the boundary functions now live in
+ * `plugin/escape.ts`; this composer applies them in fence-then-marker
+ * order. Layer (b) — strip any line containing `kevin:begin` or
+ * `kevin:end`, in any casing — is a filter rather than an escape and
+ * stays here. Without layer (b), a memory containing a literal
+ * `<!-- kevin:end -->` line would close the marker comment early and
+ * let subsequent content escape the curated region on the next
+ * regeneration — a marker-injection variant of the v0.1.5
+ * prompt-injection defect (plan §3.5). The trailing `-->` strip is kept
+ * as defence in depth although `escapeForMarkerBlock` already escapes
+ * every `>` that could form one.
  */
 export function sanitizeArtifactBody(body) {
-    const escaped = escapeIdempotent(body);
+    const escaped = escapeForMarkerBlock(escapeForFence(body));
     const kept = escaped
         .split("\n")
         .filter((line) => !/kevin:begin|kevin:end/i.test(line))
         .join("\n");
     return kept.replace(/-->/g, "");
 }
+/**
+ * v1.0.0 (K10-027 / plan §5.7, rule 2) — whole-file writes escape by
+ * container. Only `.okf` files are line-oriented JSON: each line gets
+ * `escapeForOkfLine`, which is the identity on a well-formed OKF line
+ * (canonical JSON never contains raw control characters) and therefore
+ * preserves the re-render `noop`. Kevin-owned markdown paths keep their
+ * bytes — fences there are legitimate content.
+ */
+export function escapeForContainer(path, content) {
+    if (!path.endsWith(".okf"))
+        return content;
+    return content
+        .split("\n")
+        .map((line) => {
+        // A CRLF file (healHeader preserves the original EOL) leaves a
+        // trailing \r on each line after the split — it is line-ending
+        // bytes, not statement content, so it must survive untouched.
+        if (line.endsWith("\r")) {
+            return `${escapeForOkfLine(line.slice(0, -1))}\r`;
+        }
+        return escapeForOkfLine(line);
+    })
+        .join("\n");
+}
 /**
  * v0.6.0 (K6-005 / plan §5.1) — the single write path to disk (D6-01).
  *
@@ -113,7 +130,9 @@ export class ArtifactWriter {
             // like any other refusal: after = before, both hashes recorded.
             const refusal = request.refusal;
             const refused = refusal !== undefined;
-            const after = refused ? before : content;
+            // K10-027 — the container boundary: OKF lines are escaped at the
+            // single write path, never by callers.
+            const after = refused ? before : escapeForContainer(path, content);
             return {
                 path,
                 before,
@@ -270,4 +289,3 @@ export class ArtifactWriter {
             .run(uuidv7(), proposalId ?? null, this.projectId, plan.path, Buffer.byteLength(plan.before, "utf8"), Buffer.byteLength(plan.after, "utf8"), plan.hashBefore, plan.hashAfter, plan.outcome, plan.reason ?? null);
     }
 }
-//# sourceMappingURL=ArtifactWriter.js.map

package/dist/plugin/CausalChain.js

@@ -176,4 +176,3 @@ export class CausalChain {
         return row?.value === "1";
     }
 }
-//# sourceMappingURL=CausalChain.js.map

package/dist/plugin/ConflictDetector.js

@@ -280,4 +280,3 @@ function oppositePair(a, b) {
     }
     return null;
 }
-//# sourceMappingURL=ConflictDetector.js.map

package/dist/plugin/ContextInjector.js

@@ -531,4 +531,3 @@ Consider adding this convention to AGENTS.md:
             output.context.push(block);
     }
 }
-//# sourceMappingURL=ContextInjector.js.map

package/dist/plugin/ConventionMiner.js

@@ -240,4 +240,3 @@ function statementForSequence(a, b) {
 function statementForSequence3(a, b, c) {
     return `every ${a} is followed by ${b} and then ${c}`;
 }
-//# sourceMappingURL=ConventionMiner.js.map

package/dist/plugin/Curator.js

@@ -322,4 +322,3 @@ function normalizeBullet(line) {
         .replace(/\s+\((?:verified|feedback)[^)]*\)\s*$/i, "");
     return normalize(statement);
 }
-//# sourceMappingURL=Curator.js.map

package/dist/plugin/Feedback.js

@@ -135,4 +135,3 @@ export class Feedback {
             .run(memoryId, memoryId, memoryId);
     }
 }
-//# sourceMappingURL=Feedback.js.map

package/dist/plugin/HookLiveness.d.ts

@@ -0,0 +1,87 @@
+import { HOOK_NAMES } from "./Migrate.js";
+import type { Store } from "./Store.js";
+export type HookName = (typeof HOOK_NAMES)[number];
+export type LivenessState = "live" | "dead" | "unknown";
+export interface HookReport {
+    hook: HookName;
+    experimental: boolean;
+    state: LivenessState;
+    firstSeenAt: string | null;
+    lastSeenAt: string | null;
+    fireCount: number;
+    expectedCount: number;
+    /** v0.9.0 (K9-012) — set once when the hook went dead; never cleared. */
+    deadSince: string | null;
+}
+/**
+ * v0.9.0 (K9-010 / plan §5.3, D9-09) — parse the TEXT setting
+ * `dead_hook_report_threshold` into the [1, 1000] clamp. NaN and empty
+ * fall back to 3 (never 0: a zero threshold would report every hook dead
+ * before a single session completes a checkpoint).
+ */
+export declare function parseThreshold(text: string | null | undefined): number;
+interface HookLivenessOptions {
+    /** `hook_liveness_enabled === "1"` (TEXT comparison, decided at construction). */
+    enabled: boolean;
+    /** Raw TEXT of `dead_hook_report_threshold`; parsed+clamped in report(). */
+    thresholdText: string | null | undefined;
+    /** `host.pluginVersion` at construction, stored on every flushed row. */
+    pluginVersion: string | null;
+}
+/**
+ * v0.9.0 (K9-009/K9-010 / plan §5.3) — wraps the plugin's hooks with a
+ * success-path recorder, dedups per-session checkpoints, and reports each
+ * hook's liveness state. Persistence is machine-scoped: the hook_liveness
+ * table carries no project_id or repo_id (D9-08).
+ */
+export declare class HookLiveness {
+    private readonly store;
+    private readonly options;
+    private readonly counters;
+    private readonly seenSessions;
+    private readonly suppressedSessions;
+    private readonly threshold;
+    private readonly pluginVersion;
+    constructor(store: Store, options: HookLivenessOptions);
+    /**
+     * Returns a new object with the same keys; function values are replaced
+     * by delegating wrappers, non-function values (the tool map) pass by
+     * reference. When liveness is disabled, returns the argument unchanged —
+     * the same object, not a copy.
+     */
+    wrap<T>(hooks: T): T;
+    /**
+     * v0.9.0 (K9-010 / plan §5.3) — a checkpoint: the session reached a
+     * model turn (tool.execute.after fired), so the system prompt was
+     * assembled and `experimental.chat.system.transform` MUST have been
+     * offered. Deduped per session: 20 tool calls in one session count
+     * exactly one expectation.
+     */
+    expect(hook: HookName, sessionID: string): void;
+    /**
+     * Per-hook liveness verdicts in canonical HOOK_NAMES order.
+     * A hook that fired once is live forever; dead requires both zero fires
+     * and `expectedCount >= threshold`; everything else is unknown — and
+     * unknown is never rounded to healthy (D9-09).
+     */
+    report(): HookReport[];
+    /** Persists every counter row. Called on the metrics.flush() cadence. */
+    flush(): void;
+    private makeWrapper;
+    /**
+     * v1.0.0 (K10-013 / plan §5.3) — records the `dispose` fire and
+     * flushes immediately, from inside the dispose delegate: this is the
+     * last write of the process, and nothing after it can persist.
+     */
+    recordDispose(): void;
+    private recordSuccess;
+    private recordError;
+    private loadFromDb;
+}
+export type HostVerdict = "healthy" | "degraded" | "unknown";
+export interface HostVerdictResult {
+    verdict: HostVerdict;
+    reason: string;
+}
+export declare function reduceVerdict(reports: readonly HookReport[]): HostVerdictResult;
+export {};