@jmtrin/opencode-kevin 1.2.0 → 1.3.0

package/dist/plugin/escape.d.ts

@@ -1,39 +0,0 @@
-/**
- * v1.0.0 (K10-027 / plan §5.7) — the untrusted-input boundary.
- *
- * One pure, total, idempotent escaping function per container Kevin
- * writes stored text into. Every function here is a fixed point after
- * one application — applying it twice equals applying it once — because
- * a re-curated memory passes through the boundary on every regeneration
- * and must not accumulate escaping.
- *
- * This module imports nothing and touches no filesystem. It is the
- * boundary; the single enforcement point is ArtifactWriter (D6-01).
- */
-/**
- * Neutralise text destined for the AGENTS.md marker block: HTML-escape
- * (the memory-format discipline, made idempotent) so the literal
- * `<!-- kevin:end -->` marker sequence and every comment terminator
- * lose their meaning inside the block. The line-level strip of anything
- * containing `kevin:begin`/`kevin:end` stays in
- * ArtifactWriter.sanitizeArtifactBody — it is a filter, not an escape.
- */
-export declare function escapeForMarkerBlock(text: string): string;
-/**
- * Neutralise fenced-code delimiters: any run of three or more backticks
- * or tildes would close (or open) a markdown fence around the rendered
- * block and let stored text masquerade as un-fenced document content.
- * Each byte of the run becomes its numeric HTML entity, which renders
- * identically but can never form a delimiter again.
- */
-export declare function escapeForFence(text: string): string;
-/**
- * Neutralise bytes that would terminate an OKF v2 line: newline,
- * carriage return and every other C0 control character become their
- * JSON-style escapes, so a statement can never split into a second
- * line even if a future writer forgets JSON.stringify. Quotation marks
- * and backslashes are deliberately NOT touched here — the OKF line is
- * canonical JSON and re-escaping them would corrupt parsing; JSON
- * already guarantees they stay inside the string.
- */
-export declare function escapeForOkfLine(text: string): string;

package/dist/plugin/escape.js

@@ -1,60 +0,0 @@
-/**
- * v1.0.0 (K10-027 / plan §5.7) — the untrusted-input boundary.
- *
- * One pure, total, idempotent escaping function per container Kevin
- * writes stored text into. Every function here is a fixed point after
- * one application — applying it twice equals applying it once — because
- * a re-curated memory passes through the boundary on every regeneration
- * and must not accumulate escaping.
- *
- * This module imports nothing and touches no filesystem. It is the
- * boundary; the single enforcement point is ArtifactWriter (D6-01).
- */
-const ENTITY_HEADS = /&(?!(amp|lt|gt|#\d+);)/g;
-/**
- * Neutralise text destined for the AGENTS.md marker block: HTML-escape
- * (the memory-format discipline, made idempotent) so the literal
- * `<!-- kevin:end -->` marker sequence and every comment terminator
- * lose their meaning inside the block. The line-level strip of anything
- * containing `kevin:begin`/`kevin:end` stays in
- * ArtifactWriter.sanitizeArtifactBody — it is a filter, not an escape.
- */
-export function escapeForMarkerBlock(text) {
-    return text
-        .replace(ENTITY_HEADS, "&amp;")
-        .replace(/</g, "&lt;")
-        .replace(/>/g, "&gt;");
-}
-/**
- * Neutralise fenced-code delimiters: any run of three or more backticks
- * or tildes would close (or open) a markdown fence around the rendered
- * block and let stored text masquerade as un-fenced document content.
- * Each byte of the run becomes its numeric HTML entity, which renders
- * identically but can never form a delimiter again.
- */
-export function escapeForFence(text) {
-    return text
-        .replace(/`{3,}/g, (run) => "&#96;".repeat(run.length))
-        .replace(/~{3,}/g, (run) => "&#126;".repeat(run.length));
-}
-/**
- * Neutralise bytes that would terminate an OKF v2 line: newline,
- * carriage return and every other C0 control character become their
- * JSON-style escapes, so a statement can never split into a second
- * line even if a future writer forgets JSON.stringify. Quotation marks
- * and backslashes are deliberately NOT touched here — the OKF line is
- * canonical JSON and re-escaping them would corrupt parsing; JSON
- * already guarantees they stay inside the string.
- */
-export function escapeForOkfLine(text) {
-    // biome-ignore lint/suspicious/noControlCharactersInRegex: neutralising control bytes is this function's entire job
-    return text.replace(/[\u0000-\u001f]/g, (c) => {
-        if (c === "\n")
-            return "\\n";
-        if (c === "\r")
-            return "\\r";
-        if (c === "\t")
-            return "\\t";
-        return `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`;
-    });
-}

package/dist/plugin/fingerprint.d.ts

@@ -1,27 +0,0 @@
-/**
- * Normalize an error/output string before fingerprinting.
- *
- * Steps:
- *   1. Strip ANSI CSI sequences.
- *   2. Lowercase (for case-insensitive matching of paths/extensions).
- *   3. Replace `<path>.<ext>:<line>[:<col>` with `.<ext>` so the same
- *      error thrown from different files hashes the same.
- *   4. Collapse all whitespace runs to a single space and trim.
- */
-export declare function normalize(content: string): string;
-/**
- * Compute the FNV-1a 64-bit hash of `input`, returned as a 16-char
- * lowercase hex string (zero-padded to 64 bits).
- *
- * FNV-1a: hash = offset_basis; for each byte: hash ^= byte; hash *= prime (mod 2^64).
- */
-export declare function fnv1a64(input: string): string;
-/**
- * Fingerprint an error/output string. Optionally salt the hash with
- * `project_id` so the same error text in two different projects
- * produces two distinct fingerprints (per decision D2-11/D2-14).
- *
- * Salt is prepended and separated by a NUL byte to avoid accidental
- * collisions where one project's name is a prefix of another's.
- */
-export declare function fingerprint(content: string, project_id?: string): string;

package/dist/plugin/fingerprint.js

@@ -1,73 +0,0 @@
-// ============================================================
-// Kevin 0.2.0 — fingerprint (K2-003)
-// ============================================================
-// Deterministic, zero-dependency content hash used to dedup
-// error memories and to throttle per-fingerprint reflection.
-//
-// We deliberately avoid node:crypto so the module is portable
-// across plugin hosts and stays cheap. FNV-1a 64-bit gives a
-// decent spread for short-to-medium error strings and is
-// reproducible across runs and platforms (BigInt arithmetic).
-// ============================================================
-const FNV_OFFSET_BASIS = 0xcbf29ce484222325n;
-const FNV_PRIME = 0x100000001b3n;
-const FNV_MOD = 1n << 64n;
-// ANSI CSI sequences (color codes, cursor moves, etc.).
-// biome-ignore lint/suspicious/noControlCharactersInRegex: ANSI stripping requires matching the ESC (\x1b) control char by definition.
-const ANSI_RE = /\x1b\[[0-9;]*[A-Za-z]/g;
-// Path-with-line-and-column references: `src/foo.ts:42:7` -> `.ts`.
-// Matches any non-whitespace path prefix followed by a dotted
-// extension and `:NN` or `:NN:NN` line/column markers. Useful for
-// stripping absolute or per-repo paths before fingerprinting so
-// the same error text in two repos/copy-paste edits hashes alike.
-const PATH_LINE_RE = /[^\s:]*\.([a-z0-9]+):\d+(?::\d+)?/g;
-// Whitespace collapse — preserves token order but ignores
-// line-break and indentation differences.
-const WS_RE = /\s+/g;
-/**
- * Normalize an error/output string before fingerprinting.
- *
- * Steps:
- *   1. Strip ANSI CSI sequences.
- *   2. Lowercase (for case-insensitive matching of paths/extensions).
- *   3. Replace `<path>.<ext>:<line>[:<col>` with `.<ext>` so the same
- *      error thrown from different files hashes the same.
- *   4. Collapse all whitespace runs to a single space and trim.
- */
-export function normalize(content) {
-    return content
-        .replace(ANSI_RE, "")
-        .toLowerCase()
-        .replace(PATH_LINE_RE, ".$1")
-        .replace(WS_RE, " ")
-        .trim();
-}
-/**
- * Compute the FNV-1a 64-bit hash of `input`, returned as a 16-char
- * lowercase hex string (zero-padded to 64 bits).
- *
- * FNV-1a: hash = offset_basis; for each byte: hash ^= byte; hash *= prime (mod 2^64).
- */
-export function fnv1a64(input) {
-    let hash = FNV_OFFSET_BASIS;
-    for (let i = 0; i < input.length; i++) {
-        const byte = input.charCodeAt(i) & 0xff;
-        hash ^= BigInt(byte);
-        hash = (hash * FNV_PRIME) % FNV_MOD;
-    }
-    // Encode as 16-char lowercase hex.
-    return hash.toString(16).padStart(16, "0");
-}
-/**
- * Fingerprint an error/output string. Optionally salt the hash with
- * `project_id` so the same error text in two different projects
- * produces two distinct fingerprints (per decision D2-11/D2-14).
- *
- * Salt is prepended and separated by a NUL byte to avoid accidental
- * collisions where one project's name is a prefix of another's.
- */
-export function fingerprint(content, project_id) {
-    const normalized = normalize(content);
-    const salted = project_id ? `${project_id}\u0000${normalized}` : normalized;
-    return fnv1a64(salted);
-}

package/dist/plugin/inferability.d.ts

@@ -1,32 +0,0 @@
-/**
- * K6-010 — v0.6.0 pull — deterministic error-knowledge classifier (plan §5.3).
- *
- * Pure module: no DB, no clock, no filesystem, no RNG. Fully unit-testable in
- * isolation, and therefore fully unit-tested.
- */
-export type Inferability = "inferable" | "non_inferable" | "unknown";
-/**
- * The `Reflector` dispatch surface of §3.4, restated as data: error codes whose
- * payload IS the knowledge — no project-specific interpretation required.
- */
-export declare const SELF_DESCRIBING_CODES: ReadonlySet<string>;
-/**
- * Rules from plan §5.3, evaluated in order — the ordering is the specification:
- *
- *  1. `type` ∈ decision / rule / solution → `non_inferable`
- *  2. `type` = pattern → `non_inferable`
- *  3. `type` = error and `metadata.dispatch.code` ∈ SELF_DESCRIBING_CODES → `inferable`
- *  4. `type` = error and content names a project-specific path, script or flag → `non_inferable`
- *  5. otherwise → `unknown`
- *
- * Rule 4 beats rule 3: a TS2304 is inferable, but "TS2304 on
- * `./scripts/gen-routes.ts` because the generator must run before tsc" is not —
- * the project-specific script name is the payload, not the code. Rule 3's
- * condition (code membership) is evaluated first for the bare case; rule 4
- * catches what rule 3 does not.
- */
-export declare function classify(memory: {
-    type: string;
-    content: string;
-    metadata?: unknown;
-}): Inferability;

package/dist/plugin/inferability.js

@@ -1,88 +0,0 @@
-/**
- * K6-010 — v0.6.0 pull — deterministic error-knowledge classifier (plan §5.3).
- *
- * Pure module: no DB, no clock, no filesystem, no RNG. Fully unit-testable in
- * isolation, and therefore fully unit-tested.
- */
-/**
- * The `Reflector` dispatch surface of §3.4, restated as data: error codes whose
- * payload IS the knowledge — no project-specific interpretation required.
- */
-export const SELF_DESCRIBING_CODES = new Set([
-    "TS2304",
-    "TS2307",
-    "TS2322",
-    "TS2339",
-    "TS2305",
-    "TS2552",
-    "TS2740",
-    "TS6133",
-    "TS18047",
-    "E0433",
-    "E0432",
-    "command_not_found",
-]);
-/**
- * Rule 4 detector — deliberately conservative. Errs toward `non_inferable`,
- * because a false `inferable` silently withholds real knowledge from curation
- * forever, while a false `non_inferable` costs one line a human rejects.
- */
-const NPM_RUN_RE = /\b(?:npm|pnpm|yarn|bun)(?:\s+(?:run|exec))?\s+[\w@:/-]+/;
-const RELATIVE_PATH_RE = /\.{1,2}\/[\w./@-]+/;
-const FLAG_RE = /(?:^|\s)--[\w-]+/;
-const FILE_EXT_RE = /\b[\w./@-]+\.[a-zA-Z][a-zA-Z0-9]{0,7}\b/;
-function namesProjectSpecific(content) {
-    return (NPM_RUN_RE.test(content) ||
-        RELATIVE_PATH_RE.test(content) ||
-        FLAG_RE.test(content) ||
-        FILE_EXT_RE.test(content));
-}
-function dispatchCode(metadata) {
-    if (metadata === null || typeof metadata !== "object")
-        return null;
-    const dispatch = metadata.dispatch;
-    if (dispatch === null || typeof dispatch !== "object")
-        return null;
-    const code = dispatch.code;
-    return typeof code === "string" && code.length > 0 ? code : null;
-}
-/**
- * Rules from plan §5.3, evaluated in order — the ordering is the specification:
- *
- *  1. `type` ∈ decision / rule / solution → `non_inferable`
- *  2. `type` = pattern → `non_inferable`
- *  3. `type` = error and `metadata.dispatch.code` ∈ SELF_DESCRIBING_CODES → `inferable`
- *  4. `type` = error and content names a project-specific path, script or flag → `non_inferable`
- *  5. otherwise → `unknown`
- *
- * Rule 4 beats rule 3: a TS2304 is inferable, but "TS2304 on
- * `./scripts/gen-routes.ts` because the generator must run before tsc" is not —
- * the project-specific script name is the payload, not the code. Rule 3's
- * condition (code membership) is evaluated first for the bare case; rule 4
- * catches what rule 3 does not.
- */
-export function classify(memory) {
-    // Rule 1 — authored knowledge is never re-derived.
-    if (memory.type === "decision" ||
-        memory.type === "rule" ||
-        memory.type === "solution") {
-        return "non_inferable";
-    }
-    // Rule 2 — a mined sequence is project-specific by construction.
-    if (memory.type === "pattern") {
-        return "non_inferable";
-    }
-    if (memory.type === "error") {
-        const code = dispatchCode(memory.metadata);
-        // Rule 4 — content naming a project-specific path, script or flag.
-        if (namesProjectSpecific(memory.content)) {
-            return "non_inferable";
-        }
-        // Rule 3 — a bare self-describing code is inferable.
-        if (code !== null && SELF_DESCRIBING_CODES.has(code)) {
-            return "inferable";
-        }
-    }
-    // Rule 5.
-    return "unknown";
-}

package/dist/plugin/kevin_approve.d.ts

@@ -1,34 +0,0 @@
-import type { ArtifactWriter } from "./ArtifactWriter.js";
-import type { Curator, ProposalStatus } from "./Curator.js";
-import type { MemoryService } from "./MemoryService.js";
-import type { Store } from "./Store.js";
-import type { Metrics } from "./metrics.js";
-/**
- * K6-014 — v0.6.0 pull — `kevin_approve` tool logic.
- *
- * The ONLY code path in the entire plugin that may call
- * `ArtifactWriter`'s apply method (D6-01; enforced by
- * tests/unit/single_write_path.test.ts).
- *
- * There is deliberately no "trusted mode" and no flag that skips the human:
- * the approval gate is the release's entire safety model.
- */
-export interface ApproveArgs {
-    readonly proposalId: string;
-    readonly decision: "approve" | "reject";
-}
-export type ApproveResult = {
-    readonly proposalId: string;
-    readonly status: "rejected";
-} | {
-    readonly proposalId: string;
-    readonly status: "applied";
-    readonly outcome: string;
-    readonly curated: number;
-} | {
-    readonly error: "not_found" | "not_pending";
-    readonly proposalId: string;
-    readonly status?: ProposalStatus;
-    readonly message: string;
-};
-export declare function kevinApprove(store: Store, memoryService: MemoryService, curator: Curator, writer: ArtifactWriter, metrics: Metrics | null, args: ApproveArgs): ApproveResult;

package/dist/plugin/kevin_approve.js

@@ -1,52 +0,0 @@
-export function kevinApprove(store, memoryService, curator, writer, metrics, args) {
-    const row = store
-        .prepare(`SELECT id, kind, target_path, proposed_text, memory_id, status
-			 FROM curation_proposals WHERE id = ?`)
-        .get(args.proposalId);
-    if (!row) {
-        return {
-            error: "not_found",
-            proposalId: args.proposalId,
-            message: `No proposal with id "${args.proposalId}".`,
-        };
-    }
-    if (row.status !== "pending") {
-        return {
-            error: "not_pending",
-            proposalId: args.proposalId,
-            status: row.status,
-            message: `Proposal "${args.proposalId}" is ${row.status}, not pending.`,
-        };
-    }
-    if (args.decision === "reject") {
-        curator.transition(args.proposalId, "reject");
-        metrics?.incr("proposals_rejected", 1);
-        return { proposalId: args.proposalId, status: "rejected" };
-    }
-    // approve → apply → applied (plan §5.5). The proposed_text is re-planned
-    // at approval time against the file as it is now; write() is atomic and
-    // audits every outcome including noop. The disk write happens BEFORE the
-    // state transitions: if write() throws (e.g. a filesystem error), the
-    // proposal is still 'pending' and the human can retry or reject — a
-    // row stuck in 'approved' with no file written would be a dead end,
-    // since kevin_approve only accepts pending rows.
-    const outcome = writer.write({
-        path: row.target_path,
-        mode: "markers",
-        content: row.proposed_text,
-    }, args.proposalId);
-    curator.transition(args.proposalId, "approve");
-    curator.transition(args.proposalId, "apply");
-    const memoryIds = row.memory_id.split(",").filter((s) => s.length > 0);
-    const curated = memoryService.markCurated(memoryIds, sqliteNow());
-    metrics?.incr("proposals_approved", 1);
-    return {
-        proposalId: args.proposalId,
-        status: "applied",
-        outcome,
-        curated,
-    };
-}
-function sqliteNow() {
-    return new Date().toISOString().slice(0, 19).replace("T", " ");
-}

package/dist/plugin/kevin_audit.d.ts

@@ -1,229 +0,0 @@
-import type { Store } from "./Store.js";
-import type { Capabilities } from "./capabilities.js";
-import type { Metrics } from "./metrics.js";
-/**
- * v0.5.0 (K5-016 / plan §5.7) — `kevin_audit`.
- *
- * Pure SQL over `memories`, `kevin_injections`, `kevin_metrics`,
- * `memory_feedback`. No writes, no LLM, no filesystem access.
- *
- * There is deliberately **no `kevin_context_ratio`** (D5-09): Kevin cannot
- * observe total session input tokens, so any such figure would be fabricated.
- *
- * Pre-006 databases degrade gracefully: any block that fails (missing column
- * or table) falls back to its zero value and the report is flagged
- * `"partial": true` instead of throwing.
- *
- * v0.6.0 (K6-023 / plan §5.8) — the `channels` and `curation` blocks are the
- * release's own scoreboard. On a pre-007 database they are **omitted** (not
- * zero-valued) and `"partial": true` is set: a report that cannot answer
- * "do the pull channels beat push?" must say so rather than suggest it can.
- *
- * v0.7.0 (K7-019 / plan §5.3, K7-006) — the `truth` block is project-scoped:
- * facts scanned, penalized memory count and the truncation flag for the
- * current project. It is omitted (and `"partial": true` set) on a pre-008
- * database, exactly like the conflicts block. `facts_scanned` counts every
- * `repo_facts` row for the project — the same COUNT(*) semantics as the
- * `repo_facts_scanned` metric — while `truncated` reports the scan cap
- * separately, mirroring `kevin_facts`.
- */
-export interface AuditReport {
-    memories: {
-        total: number;
-        by_status: Record<string, number>;
-        by_origin: Record<string, number>;
-        by_type: Record<string, number>;
-        ignored: number;
-        archived: number;
-        with_feedback: number;
-        superseded_with_target: number;
-    };
-    injections: {
-        total: number;
-        effective: number;
-        ineffective: number;
-        inconclusive: number;
-        unmeasured: number;
-        precision_rate: number;
-        coverage_rate: number;
-    };
-    blocked: Record<string, number>;
-    feedback: {
-        positive: number;
-        negative: number;
-        by_verdict: Record<string, number>;
-    };
-    tokens: {
-        pre_prompt: number;
-        compacting: number;
-    };
-    settings: Record<string, string>;
-    conflicts?: {
-        by_kind: Record<string, number>;
-        by_status: Record<string, number>;
-    };
-    truth?: TruthReport;
-    mix?: {
-        injected_by_type: Record<string, number>;
-        injected_total: number;
-        non_error_injected: number;
-        non_error_share: number;
-        precision_error: number;
-        precision_non_error: number;
-        meets_exit_criterion: boolean;
-        reason?: "immature_db";
-    };
-    channels?: ChannelReport;
-    curation?: CurationReport;
-    /**
-     * v0.8.0 (K8-018/023 / plan §5.2, §5.7) — the shared-layer block.
-     * K8-018 kept it minimal (write_refusals); K8-023 extends it with
-     * the full team rollup, computed in pure SQL. On a database below
-     * the v0.7.0 maturity floor the precision numbers are omitted and
-     * `reason: "immature_db"` reported instead.
-     */
-    team?: {
-        write_refusals: number;
-        shared_total?: number;
-        tombstones?: number;
-        distinct_authors?: number;
-        last_import_at?: string | null;
-        last_import_rejected?: number;
-        precision_shared?: number;
-        precision_local?: number;
-        reason?: "immature_db";
-    };
-    /**
-     * v0.9.0 (K9-020 / plan §5.5) — the host block, alongside the v0.7.0
-     * `mix` and v0.8.0 `team` blocks. Pure SQL: hook states in aggregate
-     * (live/dead/unknown counts, fires and errors totals), the resolved
-     * plugin version, native registration outcomes per surface, and the
-     * verdict derivable from the database alone. On a pre-010 database
-     * the block is omitted (not zero-valued) and `"partial": true` set,
-     * following the channels/curation precedent.
-     */
-    host?: {
-        plugin_version: string | null;
-        hooks: {
-            live: number;
-            dead: number;
-            unknown: number;
-            fires_total: number;
-            errors_total: number;
-        };
-        native: {
-            total: number;
-            verified: number;
-            failures: number;
-            by_surface: Record<string, {
-                registered: number;
-                verified: number;
-            }>;
-        };
-        verdict: "healthy" | "degraded" | "unknown";
-    };
-    /**
-     * v1.0.0 (K10-020 / plan §5.6) — the perf block: per scope, the most
-     * recent `perf_samples` aggregate row (count/p50/p95/max) plus the
-     * stored budget and verdict. The stored aggregates are used DIRECTLY —
-     * re-aggregating aggregates would produce a number with no meaning
-     * (plan anti-pattern 42), and using the most recent row per scope is
-     * exactly what `bench:check` does, so `within_budget` agrees with it
-     * on the same data. Omitted (not zero-valued) on a pre-011 database,
-     * following the host precedent.
-     */
-    perf?: {
-        scopes: Record<string, {
-            count: number;
-            p50: number;
-            p95: number;
-            max: number;
-            budget_p95: number;
-            within_budget: boolean;
-        }>;
-    };
-    /**
-     * v1.0.0 (K10-020 / plan §5.6) — the contract block: the live contract's
-     * identity, computed from source rather than the database, so it is
-     * present even on a pre-011 database.
-     */
-    contract?: {
-        contract_version: number;
-        digest: string;
-        clause_count: number;
-        deprecated_count: number;
-    };
-    /**
-     * v1.2.0 (K12-014 / D12-??) — TUI surface block. Read-only introspection:
-     * enabled_setting is the kevin_settings value, last_flush_age_s is seconds
-     * since meta.json generatedAt (null when absent/corrupt), mailbox_depth is
-     * queue length (null when file missing), last_results is the parsed
-     * results.json array (null when absent). Dashboard age and bridge counters
-     * added in K12-019.
-     */
-    tui?: {
-        enabled_setting: string;
-        last_flush_age_s: number | null;
-        mailbox_depth: number | null;
-        last_results: unknown | null;
-        dashboard_last_write_age_s: number | null;
-        bridge_interceptions: number;
-    };
-    partial: boolean;
-}
-/**
- * v0.6.0 (K6-023 / plan §5.8) — three-channel comparison on the same axes.
- * `skill_emission` / `reference_emission` distinguish the three states a
- * channel can be in: "unavailable" (v1 host, no domain on the plugin input),
- * "off" (capable host, setting '0'), "on" (capable host, setting '1').
- * Collapsing "unavailable" and "off" would make "my host is too old"
- * indistinguishable from "I turned it off".
- */
-export type EmissionState = "on" | "off" | "unavailable";
-export interface ChannelReport {
-    push: {
-        tokens_pre_prompt: number;
-        tokens_compacting: number;
-        injections_total: number;
-        precision_rate: number;
-        coverage_rate: number;
-        budget_tokens: number;
-    };
-    pull: {
-        proposals_created: number;
-        proposals_approved: number;
-        proposals_rejected: number;
-        artifact_writes_total: number;
-        artifact_writes_noop: number;
-        references_registered: number;
-        skills_registered: number;
-        skill_emission: EmissionState;
-        reference_emission: EmissionState;
-    };
-}
-export interface CurationReport {
-    eligible: number;
-    curated: number;
-    inferable: number;
-    non_inferable: number;
-    unknown: number;
-    proposals_by_status: Record<string, number>;
-}
-/**
- * v0.7.0 (K7-019 / plan §5.3) — the Project Truth block. The same shape
- * `kevin_facts` exposes: `facts_scanned` counts every repo_facts row for the
- * project (COUNT(*) semantics, matching the `repo_facts_scanned` metric),
- * `penalized_memories` counts memories with `truth_penalty > 0`, and
- * `truncated` reports the 500-fact scan cap from the `_truncated` marker row.
- */
-export interface TruthReport {
-    facts_scanned: number;
-    penalized_memories: number;
-    truncated: {
-        is_truncated: true;
-        count: number;
-    } | {
-        is_truncated: false;
-    };
-}
-export declare function buildAudit(store: Store, metrics: Metrics, capabilities?: Capabilities, projectId?: string, repoId?: string | null, tuiRoot?: string): AuditReport;