@jmtrin/opencode-kevin 1.0.0 → 1.2.0

package/dist/migrations/007_v06_pull.sql

@@ -1,145 +1,145 @@
--- ============================================================================
--- 007_v06_pull.sql — v0.6.0 "Pull"
---
--- Distribution: curated artifacts instead of a per-prompt token tax.
---
--- Section 1: curation_proposals — the persisted human decision record.
--- Section 2: artifact_writes — the disk audit trail, including refusals.
--- Section 3: memories curation + inferability columns.
--- Section 4: metric seeds.
--- Section 5: setting seeds.
--- Section 6: conditional push-budget demotion.
--- Section 7: schema_version.
---
--- Additive only. Every CHECK constraint introduced here is on a NEW table;
--- no existing constraint is widened, so unlike migration 006 there is no
--- table rebuild in this file.
--- ============================================================================
-
--- ---------------------------------------------------------------------------
--- 1. curation_proposals — one row per proposed artifact change.
---
---    This table is the "explicit human decision between generation and
---    application" of Principle 22. `kevin_propose` writes 'pending' rows and
---    nothing else; `kevin_approve` moves them to 'approved' → 'applied' or to
---    'rejected'. Rows are never deleted: rejection history is the evidence
---    base for roadmap kill criterion K4 ("proposals rejected more often than
---    approved"), which is uncheckable if rejections are discarded.
---
---    memory_id has no REFERENCES clause. Store sets PRAGMA foreign_keys = ON,
---    and a hard FK would block deleting a memory that a historical proposal
---    once mentioned — the same reasoning as superseded_by in migration 006.
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS curation_proposals (
-  id            TEXT PRIMARY KEY,
-  project_id    TEXT NOT NULL,
-  memory_id     TEXT NOT NULL,
-  kind          TEXT NOT NULL CHECK (kind IN ('agents_md','skill','reference')),
-  target_path   TEXT NOT NULL,
-  proposed_text TEXT NOT NULL,
-  diff          TEXT NOT NULL,
-  status        TEXT NOT NULL DEFAULT 'pending'
-                CHECK (status IN ('pending','approved','rejected','applied','superseded')),
-  created_at    TEXT NOT NULL DEFAULT (datetime('now')),
-  decided_at    TEXT,
-  applied_at    TEXT
-);
-CREATE INDEX IF NOT EXISTS idx_proposals_status  ON curation_proposals(status);
-CREATE INDEX IF NOT EXISTS idx_proposals_memory  ON curation_proposals(memory_id);
-CREATE INDEX IF NOT EXISTS idx_proposals_project ON curation_proposals(project_id);
-
--- ---------------------------------------------------------------------------
--- 2. artifact_writes — the append-only audit trail for every disk operation.
---
---    A row is written for EVERY ArtifactWriter.apply() call, including
---    outcome='noop' and outcome='refused'. A refusal that leaves no trace is
---    indistinguishable from a write that never happened, and the whole point
---    of §5.1 rule 3 is that a refusal is a reportable event.
---
---    hash_before / hash_after are SHA-256 of the full file contents, not of
---    the marker block. That is what makes rule 4 (bytes outside the markers
---    are byte-identical) auditable after the fact rather than only at test
---    time.
--- ---------------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS artifact_writes (
-  id           TEXT PRIMARY KEY,
-  proposal_id  TEXT,
-  project_id   TEXT NOT NULL,
-  path         TEXT NOT NULL,
-  bytes_before INTEGER,
-  bytes_after  INTEGER,
-  hash_before  TEXT,
-  hash_after   TEXT,
-  outcome      TEXT NOT NULL CHECK (outcome IN ('written','noop','refused')),
-  reason       TEXT,
-  wrote_at     TEXT NOT NULL DEFAULT (datetime('now'))
-);
-CREATE INDEX IF NOT EXISTS idx_artifact_writes_path ON artifact_writes(path);
-
--- ---------------------------------------------------------------------------
--- 3. memories: curation state and inferability.
---
---    curated / curated_at record that a memory has already been published,
---    so the Curator does not re-propose it on every session idle.
---
---    inferable is deliberately NULLABLE with no default. Three states are
---    needed, not two: 1 = inferable (a self-describing diagnostic the model
---    resolves for free), 0 = non-inferable (project truth), NULL = unknown
---    (not yet classified, or classified as 'unknown'). The Curator predicate
---    is `inferable != 1`, so NULL rows stay eligible — an unclassified memory
---    must not be silently withheld from curation.
--- ---------------------------------------------------------------------------
-ALTER TABLE memories ADD COLUMN curated    INTEGER NOT NULL DEFAULT 0;
-ALTER TABLE memories ADD COLUMN curated_at TEXT;
-ALTER TABLE memories ADD COLUMN inferable  INTEGER;
-
-CREATE INDEX IF NOT EXISTS idx_memories_curated   ON memories(curated);
-CREATE INDEX IF NOT EXISTS idx_memories_inferable ON memories(inferable);
-
--- ---------------------------------------------------------------------------
--- 4. Metric seeds. Order matches the additions to METRIC_KEYS in metrics.ts.
---    injections_blocked_confidence is the sixth member of the v0.5 blocked
---    family and MUST be counted like the other five (Principle 16).
--- ---------------------------------------------------------------------------
-INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES
-  ('proposals_created',             0),
-  ('proposals_approved',            0),
-  ('proposals_rejected',            0),
-  ('artifact_writes_total',         0),
-  ('artifact_writes_noop',          0),
-  ('injections_blocked_confidence', 0);
-
--- ---------------------------------------------------------------------------
--- 5. Setting seeds. Values are TEXT, always. Read them with an explicit
---    string comparison or an explicit Number() parse — never `=== 1`.
---    (That exact mistake kept cross_project_enabled unreachable for the
---    whole of v0.3.0.)
---
---    skill_emission_enabled and reference_emission_enabled default to '0':
---    the pull channels ship OFF and are opted into, because they depend on a
---    v2 domain Kevin does not pin.
--- ---------------------------------------------------------------------------
-INSERT OR IGNORE INTO kevin_settings (key, value) VALUES
-  ('curation_enabled',           '1'),
-  ('agents_md_path',             'AGENTS.md'),
-  ('skill_emission_enabled',     '0'),
-  ('reference_emission_enabled', '0'),
-  ('injection_confidence_floor', '0.6');
-
--- ---------------------------------------------------------------------------
--- 6. Push-budget demotion.
---
---    Lower the default push budget only where the user has not overridden it.
---    A user who deliberately set 1200 (or 1500, or 200) keeps their value;
---    only an installation still sitting on the v0.5 default of '900' is
---    moved to '400'. An unconditional UPDATE here would silently discard a
---    deliberate configuration choice, which is a worse defect than the token
---    cost it would save.
--- ---------------------------------------------------------------------------
-UPDATE kevin_settings SET value = '400'
- WHERE key = 'pre_prompt_budget_tokens' AND value = '900';
-
--- ---------------------------------------------------------------------------
--- 7. Version marker.
--- ---------------------------------------------------------------------------
+-- ============================================================================
+-- 007_v06_pull.sql — v0.6.0 "Pull"
+--
+-- Distribution: curated artifacts instead of a per-prompt token tax.
+--
+-- Section 1: curation_proposals — the persisted human decision record.
+-- Section 2: artifact_writes — the disk audit trail, including refusals.
+-- Section 3: memories curation + inferability columns.
+-- Section 4: metric seeds.
+-- Section 5: setting seeds.
+-- Section 6: conditional push-budget demotion.
+-- Section 7: schema_version.
+--
+-- Additive only. Every CHECK constraint introduced here is on a NEW table;
+-- no existing constraint is widened, so unlike migration 006 there is no
+-- table rebuild in this file.
+-- ============================================================================
+
+-- ---------------------------------------------------------------------------
+-- 1. curation_proposals — one row per proposed artifact change.
+--
+--    This table is the "explicit human decision between generation and
+--    application" of Principle 22. `kevin_propose` writes 'pending' rows and
+--    nothing else; `kevin_approve` moves them to 'approved' → 'applied' or to
+--    'rejected'. Rows are never deleted: rejection history is the evidence
+--    base for roadmap kill criterion K4 ("proposals rejected more often than
+--    approved"), which is uncheckable if rejections are discarded.
+--
+--    memory_id has no REFERENCES clause. Store sets PRAGMA foreign_keys = ON,
+--    and a hard FK would block deleting a memory that a historical proposal
+--    once mentioned — the same reasoning as superseded_by in migration 006.
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS curation_proposals (
+  id            TEXT PRIMARY KEY,
+  project_id    TEXT NOT NULL,
+  memory_id     TEXT NOT NULL,
+  kind          TEXT NOT NULL CHECK (kind IN ('agents_md','skill','reference')),
+  target_path   TEXT NOT NULL,
+  proposed_text TEXT NOT NULL,
+  diff          TEXT NOT NULL,
+  status        TEXT NOT NULL DEFAULT 'pending'
+                CHECK (status IN ('pending','approved','rejected','applied','superseded')),
+  created_at    TEXT NOT NULL DEFAULT (datetime('now')),
+  decided_at    TEXT,
+  applied_at    TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_proposals_status  ON curation_proposals(status);
+CREATE INDEX IF NOT EXISTS idx_proposals_memory  ON curation_proposals(memory_id);
+CREATE INDEX IF NOT EXISTS idx_proposals_project ON curation_proposals(project_id);
+
+-- ---------------------------------------------------------------------------
+-- 2. artifact_writes — the append-only audit trail for every disk operation.
+--
+--    A row is written for EVERY ArtifactWriter.apply() call, including
+--    outcome='noop' and outcome='refused'. A refusal that leaves no trace is
+--    indistinguishable from a write that never happened, and the whole point
+--    of §5.1 rule 3 is that a refusal is a reportable event.
+--
+--    hash_before / hash_after are SHA-256 of the full file contents, not of
+--    the marker block. That is what makes rule 4 (bytes outside the markers
+--    are byte-identical) auditable after the fact rather than only at test
+--    time.
+-- ---------------------------------------------------------------------------
+CREATE TABLE IF NOT EXISTS artifact_writes (
+  id           TEXT PRIMARY KEY,
+  proposal_id  TEXT,
+  project_id   TEXT NOT NULL,
+  path         TEXT NOT NULL,
+  bytes_before INTEGER,
+  bytes_after  INTEGER,
+  hash_before  TEXT,
+  hash_after   TEXT,
+  outcome      TEXT NOT NULL CHECK (outcome IN ('written','noop','refused')),
+  reason       TEXT,
+  wrote_at     TEXT NOT NULL DEFAULT (datetime('now'))
+);
+CREATE INDEX IF NOT EXISTS idx_artifact_writes_path ON artifact_writes(path);
+
+-- ---------------------------------------------------------------------------
+-- 3. memories: curation state and inferability.
+--
+--    curated / curated_at record that a memory has already been published,
+--    so the Curator does not re-propose it on every session idle.
+--
+--    inferable is deliberately NULLABLE with no default. Three states are
+--    needed, not two: 1 = inferable (a self-describing diagnostic the model
+--    resolves for free), 0 = non-inferable (project truth), NULL = unknown
+--    (not yet classified, or classified as 'unknown'). The Curator predicate
+--    is `inferable != 1`, so NULL rows stay eligible — an unclassified memory
+--    must not be silently withheld from curation.
+-- ---------------------------------------------------------------------------
+ALTER TABLE memories ADD COLUMN curated    INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE memories ADD COLUMN curated_at TEXT;
+ALTER TABLE memories ADD COLUMN inferable  INTEGER;
+
+CREATE INDEX IF NOT EXISTS idx_memories_curated   ON memories(curated);
+CREATE INDEX IF NOT EXISTS idx_memories_inferable ON memories(inferable);
+
+-- ---------------------------------------------------------------------------
+-- 4. Metric seeds. Order matches the additions to METRIC_KEYS in metrics.ts.
+--    injections_blocked_confidence is the sixth member of the v0.5 blocked
+--    family and MUST be counted like the other five (Principle 16).
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_metrics (key, value) VALUES
+  ('proposals_created',             0),
+  ('proposals_approved',            0),
+  ('proposals_rejected',            0),
+  ('artifact_writes_total',         0),
+  ('artifact_writes_noop',          0),
+  ('injections_blocked_confidence', 0);
+
+-- ---------------------------------------------------------------------------
+-- 5. Setting seeds. Values are TEXT, always. Read them with an explicit
+--    string comparison or an explicit Number() parse — never `=== 1`.
+--    (That exact mistake kept cross_project_enabled unreachable for the
+--    whole of v0.3.0.)
+--
+--    skill_emission_enabled and reference_emission_enabled default to '0':
+--    the pull channels ship OFF and are opted into, because they depend on a
+--    v2 domain Kevin does not pin.
+-- ---------------------------------------------------------------------------
+INSERT OR IGNORE INTO kevin_settings (key, value) VALUES
+  ('curation_enabled',           '1'),
+  ('agents_md_path',             'AGENTS.md'),
+  ('skill_emission_enabled',     '0'),
+  ('reference_emission_enabled', '0'),
+  ('injection_confidence_floor', '0.6');
+
+-- ---------------------------------------------------------------------------
+-- 6. Push-budget demotion.
+--
+--    Lower the default push budget only where the user has not overridden it.
+--    A user who deliberately set 1200 (or 1500, or 200) keeps their value;
+--    only an installation still sitting on the v0.5 default of '900' is
+--    moved to '400'. An unconditional UPDATE here would silently discard a
+--    deliberate configuration choice, which is a worse defect than the token
+--    cost it would save.
+-- ---------------------------------------------------------------------------
+UPDATE kevin_settings SET value = '400'
+ WHERE key = 'pre_prompt_budget_tokens' AND value = '900';
+
+-- ---------------------------------------------------------------------------
+-- 7. Version marker.
+-- ---------------------------------------------------------------------------
 INSERT OR IGNORE INTO schema_version (version) VALUES ('007');

package/dist/migrations/012_v11_drift.sql

@@ -0,0 +1,24 @@
+-- millisecond companions for the two tables whose ORDERING decides outcomes.
+ALTER TABLE tool_calls       ADD COLUMN ts_ms           INTEGER;
+ALTER TABLE kevin_injections ADD COLUMN injected_at_ms  INTEGER;
+
+-- conservative backfill: seconds -> ms (x1000). Rows keep their original
+-- second-granularity value in the old column; nothing is rewritten there.
+UPDATE tool_calls SET ts_ms =
+  CAST(strftime('%s', ts) AS INTEGER) * 1000
+WHERE ts_ms IS NULL AND ts IS NOT NULL;
+
+UPDATE kevin_injections SET injected_at_ms =
+  CAST(strftime('%s', injected_at) AS INTEGER) * 1000
+WHERE injected_at_ms IS NULL AND injected_at IS NOT NULL;
+
+CREATE INDEX idx_tool_calls_ts_ms        ON tool_calls(ts_ms);
+CREATE INDEX idx_injections_injected_ms  ON kevin_injections(injected_at_ms);
+
+-- metric seeds (C-05 additions carry since=1.1.0 in contract)
+INSERT INTO kevin_metrics (key, value, updated_at) VALUES
+  ('bench_regression_failures',    0, datetime('now')),
+  ('forget_requests_total',        0, datetime('now')),
+  ('forget_tombstones_published',  0, datetime('now'));
+
+INSERT INTO schema_version (version) VALUES ('012');

package/dist/plugin/Archiver.js

@@ -1,3 +1,4 @@
+import { hasArchivedColumn } from "./columns.js";
 /**
  * v0.5.0 Archiver (K5-012 / plan §5.4, D5-05).
  *
@@ -71,23 +72,7 @@ export class Archiver {
         }
     }
     hasArchivedColumn() {
-        return hasArchivedColumnCached(this.store);
-    }
-}
-// v0.6.0 (K6-001a) — positive-only caching: a successful probe is cached,
-// a failed probe is NOT. A Store migrated in place heals on the next call.
-const archivedColumnCache = new WeakMap();
-function hasArchivedColumnCached(store) {
-    const cached = archivedColumnCache.get(store);
-    if (cached === true)
-        return true;
-    try {
-        store.prepare("SELECT archived_at FROM memories LIMIT 1").get();
-        archivedColumnCache.set(store, true);
-        return true;
-    }
-    catch {
-        return false;
+        return hasArchivedColumn(this.store);
     }
 }
 /** 'YYYY-MM-DD HH:MM:SS' UTC — the format SQLite `datetime('now')` uses,

package/dist/plugin/CausalChain.js

@@ -1,4 +1,6 @@
 import { extractFixArgs, } from "./LessonFixer.js";
+import { hasColumn } from "./columns.js";
+import { toMs } from "./time-ms.js";
 /** K3-007 — a success only links to a failure within this many calls. */
 const MAX_LINK_DISTANCE = 10;
 export class CausalChain {
@@ -24,11 +26,15 @@ export class CausalChain {
     // distance, so an unrelated success (e.g. an `ls` run after a
     // typecheck failure) was stamped as the fix for that error.
     onSuccess(_tool, _args, _projectId, sessionId) {
-        const successRow = this.store
-            .prepare(`SELECT rowid, tool, args_summary FROM tool_calls
-				 WHERE session_id = ? AND success = 1
-				 ORDER BY rowid DESC LIMIT 1`)
-            .get(sessionId);
+        // v1.1.0 (K11-004 / plan §5.2, D11-01/D11-07) — ms-aware window: prefer _ms
+        const hasTsMs = hasColumn(this.store, "tool_calls", "ts_ms");
+        const successRow = (hasTsMs
+            ? this.store.prepare(`SELECT rowid, tool, args_summary, ts, ts_ms FROM tool_calls
+						 WHERE session_id = ? AND success = 1
+						 ORDER BY rowid DESC LIMIT 1`)
+            : this.store.prepare(`SELECT rowid, tool, args_summary, ts FROM tool_calls
+						 WHERE session_id = ? AND success = 1
+						 ORDER BY rowid DESC LIMIT 1`)).get(sessionId);
         if (!successRow)
             return;
         const linkedFps = new Set(this.store
@@ -40,20 +46,33 @@ export class CausalChain {
         // onLinkError) is the SAME identity dimension the error memory
         // uses; `fingerprint` is the legacy tool|args|success hash and
         // simply never matches a reflector error memory.
-        const failRows = this.store
-            .prepare(`SELECT rowid, COALESCE(error_fingerprint, fingerprint) AS fp
-				 FROM tool_calls
-				 WHERE session_id = ?
-				   AND success = 0
-				   AND (error_fingerprint IS NOT NULL OR fingerprint IS NOT NULL)
-				 ORDER BY rowid DESC LIMIT ?`)
-            .all(sessionId, MAX_LINK_DISTANCE);
+        const failRows = (hasTsMs
+            ? this.store.prepare(`SELECT rowid, COALESCE(error_fingerprint, fingerprint) AS fp, ts, ts_ms
+						 FROM tool_calls
+						 WHERE session_id = ?
+						   AND success = 0
+						   AND (error_fingerprint IS NOT NULL OR fingerprint IS NOT NULL)
+						 ORDER BY rowid DESC LIMIT ?`)
+            : this.store.prepare(`SELECT rowid, COALESCE(error_fingerprint, fingerprint) AS fp, ts
+						 FROM tool_calls
+						 WHERE session_id = ?
+						   AND success = 0
+						   AND (error_fingerprint IS NOT NULL OR fingerprint IS NOT NULL)
+						 ORDER BY rowid DESC LIMIT ?`)).all(sessionId, MAX_LINK_DISTANCE);
         for (const fail of failRows) {
             if (!fail.fp || linkedFps.has(fail.fp))
                 continue;
             const dist = successRow.rowid - fail.rowid;
             if (dist <= 0 || dist > MAX_LINK_DISTANCE)
                 continue;
+            // v1.1.0 — ≤24h window uses ms when available
+            const successMs = toMs(successRow.ts, successRow.ts_ms ?? null);
+            const failMs = toMs(fail.ts, fail.ts_ms ?? null);
+            if (successMs !== null && failMs !== null) {
+                const diff = successMs - failMs;
+                if (diff < 0 || diff > 86_400_000)
+                    continue;
+            }
             const mem = this.store
                 .prepare(`SELECT 1 FROM memories
 					 WHERE fingerprint = ? AND type = 'error'

package/dist/plugin/ChatBridge.d.ts

@@ -0,0 +1,41 @@
+import { type PendingProposal } from "./TuiActions.js";
+export type BridgeDeps = {
+    readonly getPending: () => readonly PendingProposal[];
+    readonly approve: (proposalId: string) => unknown;
+    readonly reject: (proposalId: string, note?: string) => unknown;
+    readonly acknowledge: (conflictId: string) => unknown;
+    readonly metrics?: {
+        incr: (key: "tui_actions_invoked", by?: number) => void;
+    } | null;
+};
+export type ParsedBridgeCommand = {
+    readonly type: "approve";
+    readonly proposalId: string;
+    readonly token: string;
+    readonly note?: string;
+} | {
+    readonly type: "reject";
+    readonly proposalId: string;
+    readonly token: string;
+    readonly note?: string;
+} | {
+    readonly type: "ack";
+    readonly conflictId: string;
+};
+export declare function parseBridgeCommand(text: string): ParsedBridgeCommand | null;
+export declare const KEVIN_COMMAND_RE: RegExp;
+export interface BridgeResult {
+    readonly handled: boolean;
+    readonly status?: "applied" | "rejected" | "stale_skipped" | "error";
+    readonly detail?: string;
+}
+/**
+ * Execute a chat message through the bridge.
+ * - Non-matching → {handled:false} (byte-identical pass-through)
+ * - Matching but stale/invalid → {handled:false, status:"stale_skipped"} (pass-through + counter)
+ * - Valid → executes via deps handlers, {handled:true}
+ *
+ * Valid commands are SWALLOWED — caller must not forward to model.
+ * Invalid/stale commands pass through untouched (D12-09).
+ */
+export declare function handleBridgeCommand(text: string, deps: BridgeDeps): BridgeResult;

package/dist/plugin/ChatBridge.js

@@ -0,0 +1,103 @@
+// v1.2.0 (K12-018 / plan §4.4 R3, D12-09) — chat-command bridge (universal actions).
+// Hot path: ONE regex test on non-match, allocation-free.
+import { verifyFresh, } from "./TuiActions.js";
+// Exact regex for approve/reject (require 16-hex token, optional note capture).
+// Ack variant is token-free (acknowledge is non-destructive, matches mailbox).
+const APPROVE_REJECT_RE = /^\/kevin-(approve|reject)\s+(\S+)\s+([0-9a-f]{16})(?:\s+([\s\S]+))?$/;
+const ACK_RE = /^\/kevin-ack\s+(\S+)\s*$/;
+// Combined pattern for documentation / static analysis (covers both forms).
+// eslint-disable-next-line @typescript-eslint/no-unused-vars
+const _DOC_RE = /^\/kevin-(approve|reject|ack)\s+(\S+)\s+([0-9a-f]{16})(?:\s+([\s\S]+))?$/;
+export function parseBridgeCommand(text) {
+    // Approve / reject — require token
+    const m = APPROVE_REJECT_RE.exec(text);
+    if (m) {
+        const type = m[1];
+        const proposalId = m[2];
+        const token = m[3];
+        const note = m[4] !== undefined ? m[4] : undefined;
+        if (type === "approve")
+            return {
+                type: "approve",
+                proposalId,
+                token,
+                ...(note !== undefined ? { note } : {}),
+            };
+        return {
+            type: "reject",
+            proposalId,
+            token,
+            ...(note !== undefined ? { note } : {}),
+        };
+    }
+    const ack = ACK_RE.exec(text);
+    if (ack) {
+        return { type: "ack", conflictId: ack[1] };
+    }
+    return null;
+}
+// Backward alias for tests that import by plan name
+export const KEVIN_COMMAND_RE = APPROVE_REJECT_RE;
+/**
+ * Execute a chat message through the bridge.
+ * - Non-matching → {handled:false} (byte-identical pass-through)
+ * - Matching but stale/invalid → {handled:false, status:"stale_skipped"} (pass-through + counter)
+ * - Valid → executes via deps handlers, {handled:true}
+ *
+ * Valid commands are SWALLOWED — caller must not forward to model.
+ * Invalid/stale commands pass through untouched (D12-09).
+ */
+export function handleBridgeCommand(text, deps) {
+    const parsed = parseBridgeCommand(text);
+    if (!parsed)
+        return { handled: false };
+    if (parsed.type === "ack") {
+        // Ack is non-destructive, no token verification — matches mailbox acknowledge semantics.
+        try {
+            deps.acknowledge(parsed.conflictId);
+            try {
+                deps.metrics?.incr("tui_actions_invoked", 1);
+            }
+            catch { }
+            return { handled: true, status: "applied" };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return { handled: true, status: "error", detail: msg };
+        }
+    }
+    // approve / reject — verify token against CURRENT pending state (same as mailbox)
+    const pending = deps.getPending();
+    const action = {
+        type: parsed.type,
+        proposalId: parsed.proposalId,
+        token: parsed.token,
+        ...(parsed.note !== undefined ? { note: parsed.note } : {}),
+    };
+    const fresh = verifyFresh(action, pending);
+    if (!fresh.ok) {
+        // Invalid/stale → pass-through untouched (do NOT swallow). Caller should forward byte-identically.
+        // Audit counter could be incremented here, but not as contract metric (blockedSnapshot-style internal).
+        return { handled: false, status: "stale_skipped", detail: fresh.reason };
+    }
+    try {
+        if (parsed.type === "approve") {
+            deps.approve(parsed.proposalId);
+            try {
+                deps.metrics?.incr("tui_actions_invoked", 1);
+            }
+            catch { }
+            return { handled: true, status: "applied" };
+        }
+        deps.reject(parsed.proposalId, parsed.note);
+        try {
+            deps.metrics?.incr("tui_actions_invoked", 1);
+        }
+        catch { }
+        return { handled: true, status: "rejected" };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { handled: true, status: "error", detail: msg };
+    }
+}

package/dist/plugin/ConflictDetector.js

@@ -1,4 +1,6 @@
+import { mapRow } from "./MemoryService.js";
 import { normalize } from "./fingerprint.js";
+import { STOP_WORDS } from "./query-tokenizer.js";
 import { uuidv7 } from "./uuid.js";
 const POLARITY_RULES = [
     {
@@ -14,33 +16,6 @@ const POLARITY_RULES = [
     { positive: ["enable"], negative: [["disable"]] },
     { positive: ["prefer"], negative: [["avoid"]] },
 ];
-const STOP_WORDS = new Set([
-    "a",
-    "an",
-    "and",
-    "are",
-    "as",
-    "at",
-    "be",
-    "by",
-    "for",
-    "from",
-    "in",
-    "is",
-    "it",
-    "of",
-    "on",
-    "or",
-    "that",
-    "the",
-    "this",
-    "to",
-    "with",
-    "we",
-    "when",
-    "where",
-    "you",
-]);
 const POLARITY_WORDS = new Set([
     "use",
     "do",
@@ -157,9 +132,12 @@ export class ConflictDetector {
 				 FROM memories WHERE project_id = ? AND status = 'active'`)
             .all(this.projectId);
         return rows.flatMap((row) => {
-            const memory = row;
+            // v1.1.0 (K11-014) — route through mapRow so metadata is parsed and confidence derived
+            const memory = mapRow(row);
             const reasons = this.repoTruth?.contradictions(memory) ?? [];
-            return reasons.length > 0 ? [{ memoryId: row.id, reasons }] : [];
+            return reasons.length > 0
+                ? [{ memoryId: row.id, reasons }]
+                : [];
         });
     }
     detectDecisionPairs() {

package/dist/plugin/DashboardHtml.d.ts

@@ -0,0 +1,5 @@
+import type { TuiSnapshotSet } from "./tui-types.js";
+export declare function escapeHtml(text: string): string;
+export declare function proposalToken(proposalId: string, proposedText: string): string;
+export declare function renderDashboard(views: TuiSnapshotSet): string;
+export declare function writeDashboard(root: string, views: TuiSnapshotSet): string;