@nurix/etna 0.18.15 → 0.18.16

package/data/harnesses/mobile/skills/brainstorm/exit-artifacts.md

@@ -58,5 +58,5 @@ Append a changelog entry at `docs/history/changelog/YYYY-MM-DD-brainstorm-{slug}
 
 **Keep `docs/brainstorm/{topic}/` — never delete it.** The exit artifacts now carry the distilled
 conclusions, but the record stays committed as their provenance: a traceable source for every published
-headline, the seed the next `/brainstorm start` on this topic resumes from, and a high-surprisal input the
-`distiller` ingests. Retire a topic's folder by hand only when the design line is truly dead.
+headline, and the seed the next `/brainstorm start` on this topic resumes from. Retire a topic's folder
+by hand only when the design line is truly dead.

package/data/harnesses/mobile/skills/documentation/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: documentation
-description: Template & generator library for technical docs — the skill agents call to produce a doc from a template. Use to (1) document a feature or module, (2) create or update a changelog entry, (3) document data flows or Redux state, (4) add to protected files, (5) record an architecture decision (ADR), (6) create or update the project root README, (7) create or update a plan, (8) derive a feature doc's `owns:` frontmatter (the code-path globs it owns) from code, (9) scaffold a standard doc (README, structure.md, CHANGELOG, backlog, memory) from its template, or (10) co-author any technical doc. Baselining / reconciling a repo's docs to the installed harness version is the **`maintenance` agent (baseline mode)** (which calls this skill for each template) — this skill does not orchestrate baseline. Triggers on "document this", "create docs", "update changelog", "add to protected files", "ADR", "architecture decision", "root README", "plan", "feature doc".
+description: Template & generator library for technical docs — the skill agents call to produce a doc from a template. Use to (1) document a feature or module (the feature doc is the feature's LLD — low-level design — written in LLD Mode), (2) create or update a changelog entry, (3) document data flows or Redux state, (4) add to protected files, (5) record an architecture decision (ADR), (6) create or update the project root README, (7) create or update a plan, (8) derive a feature doc's `owns:` frontmatter (the code-path globs it owns) from code, (9) scaffold a standard doc (README, structure.md, CHANGELOG, backlog, memory) from its template, or (10) co-author any technical doc. Baselining / reconciling a repo's docs to the installed harness version is the **`maintenance` agent (baseline mode)** (which calls this skill for each template) — this skill does not orchestrate baseline. Triggers on "document this", "create docs", "update changelog", "add to protected files", "ADR", "architecture decision", "root README", "plan", "feature doc", "LLD".
 ---
 
 # Technical Documentation Skill
@@ -22,7 +22,7 @@ User request
     │
     ├─ "Baseline/reconcile docs" ──────▶ maintenance agent (baseline mode) (it calls this skill per template)
     │
-    ├─ "Document feature/module" ──────▶ Module Template
+    ├─ "Document feature/module (LLD)" ▶ Module Template
     │
     ├─ "Create/update changelog" ──────▶ Changelog Template
     │

package/data/harnesses/mobile/skills/documentation/references/templates.md

@@ -112,7 +112,7 @@ Plan (Status: Draft) → Implementation → Feature Doc or Architecture Update
 
 ## Folder Rules
 
-- `docs/features/`: Living reference for implemented features. Each feature doc **carries** the `owns:` / `module:` / `keywords:` / `status:` frontmatter — `owns:` declares the code-path globs it owns (the only ownership key), `module:` is an optional bounded-context label, `keywords:` are discovery terms, `status:` is `active`/`draft`/`deprecated`. The SessionStart hook unions every feature's `owns:` globs into the injected ownership index. (An optional `anchors:` block — a qmd drift tripwire, see §3 — is a separate tooling key a doc may additionally carry.)
+- `docs/features/`: Living reference for implemented features. Each feature doc **carries** the `owns:` / `module:` / `keywords:` / `status:` frontmatter — `owns:` declares the code-path globs it owns (the only ownership key), `module:` is an optional bounded-context label, `keywords:` are discovery terms, `status:` is `active`/`draft`/`deprecated`. The SessionStart hook unions every feature's `owns:` globs into the injected ownership index.
 - `docs/architecture/`: System-wide patterns and the cross-module steering layer (domain model, glossary, non-goals, references, ADRs). A module's cross-cutting prose lives here (or in a browse-folder `Readme.md`). Update when cross-cutting concerns change.
 - `docs/operations/`: How-to procedures for setup, development, and deployment. Update when workflows change.
 - `docs/history/plans/`: Historical. Must have `Status:` field. Never modify after completion.
@@ -131,21 +131,10 @@ Plan (Status: Draft) → Implementation → Feature Doc or Architecture Update
 
 ---
 
-## 3. Code-Path Ownership & Anchors
+## 3. Code-Path Ownership
 
 **Ownership.** A feature doc is the canonical reference for the code paths in its **`owns:` frontmatter** — the only ownership key. To find what a doc owns, read its `owns:` globs; to find the doc for a path, match the path against the injected ownership index (the union of every feature's `owns:` globs), narrower glob wins. See **Frontmatter Derivation** in `SKILL.md` for turning code into `owns:` globs.
 
-**Anchors (optional tooling key).** A doc may additionally carry an `anchors:` block — a qmd drift tripwire, orthogonal to ownership:
-
-```yaml
----
-anchors:
-  - "qmd query: feature-name persistence shape"
----
-```
-
-`anchors` is an optional list of qmd queries (or `#docid`s) that re-resolve to the code a doc abstracts as it moves. It is a drift tripwire, never a contract — an anchor that returns nothing IS the drift signal, and nothing auto-rewrites from an anchor result. It is read on demand by the maintenance anchor-drift check, never injected, and inert when qmd is absent.
-
 ---
 
 ## 4. Scaffold Files (create if missing)
@@ -241,14 +230,6 @@ description: Shared knowledge accumulated across agent sessions. All agents shou
 - **Spec version:** v{harness-version}
 <!-- v{harness-version} resolves to the installed harness version — read it from `.claude/harness.json` (`version`) / `docs/structure.md` frontmatter (`harness-version`); never hardcode a literal version here. -->
 
-## Knowledge Tiers
-
-Memory is a gradient — volume falls, signal rises, one hop down each tier. Tiers describe themselves here even before they fill:
-
-- **Inbox** (`docs/memory/inbox/`) — per-actor queue of session lessons, written by the `session-reflect` hook at session end and consumed by the distiller on digestion. Transient by design, rarely read directly.
-- **Fact-cards** (`docs/memory/facts/`) — distilled, provenance-linked atomic facts, written by the distiller (`facts` mode) from inbox entries and resurfaced at prompt time by the `prompt-recall` hook.
-- **This index** — the curated read tier: the learnings list below, distilled from the colder tiers and hand-appended.
-
 ## Learnings
 
 {Agents append learnings here as they discover gotchas, patterns, and architecture notes}
@@ -278,15 +259,13 @@ Append entries below, oldest at bottom. Format:
 Memory file initialized during documentation baseline.
 ```
 
-> The per-actor memory **inbox** (`docs/memory/inbox/`) is _not_ a baseline scaffold — the `session-reflect` hook creates it mechanically on the first reflected session. See **§11 Memory inbox entry** for its format.
-
 ---
 
-## 5. Feature Documentation (docs/features/{feature}.md)
+## 5. Feature Documentation — the LLD (docs/features/{feature}.md)
 
-Use for: every feature in `docs/features/`. The same file persists from design (Status: Draft) through implementation to live reference (Status: Active). Sections fill in as the feature matures — no template swap.
+Use for: every feature in `docs/features/`. The feature doc is the feature's **LLD (low-level design)**: the same file persists from design (Status: Draft, written in LLD Mode) through implementation to live reference (Status: Active). Sections fill in as the feature matures — no template swap.
 
-The four research-derived sections (**Affected Modules**, **Conventions to Follow**, **Current Behavior**, **Ownership Conflicts**) map 1:1 to spec-mode's return shape. The orchestrator drops spec-mode's findings into those slots without restructuring.
+The four research-derived sections (**Affected Modules**, **Conventions to Follow**, **Current Behavior**, **Ownership Conflicts**) map 1:1 to the `lld-mode` agent's return shape. The orchestrator drops its findings into those slots without restructuring.
 
 ```yaml
 ---
@@ -294,8 +273,6 @@ owns: ["src/feature/**", "src/other/file.ts"]   # required — code-path globs t
 module: billing                                  # optional — single bounded-context label; omit if cross-cutting
 keywords: [invoice, pdf]                         # required — discovery terms
 status: active                                   # required — active | draft | deprecated
-anchors:                                         # optional extra — a qmd drift tripwire; see §3
-  - "qmd query: wire envelope invariants"
 ---
 ```
 
@@ -332,22 +309,22 @@ High-level shape of the solution. ASCII diagram if it helps. Implementation spec
 
 ## Affected Modules
 
-(From spec-mode research) Files, routes, components, slices this feature involves. Group by module.
+(From lld-mode research) Files, routes, components, slices this feature involves. Group by module.
 
 | Module | Path | Role in this feature |
 |--------|------|----------------------|
 
 ## Conventions to Follow
 
-(From spec-mode research) Naming patterns, structural patterns, doc-fit heuristics confirmed for the area being touched. Cite the source file(s) where the convention is established.
+(From lld-mode research) Naming patterns, structural patterns, doc-fit heuristics confirmed for the area being touched. Cite the source file(s) where the convention is established.
 
 ## Current Behavior
 
-(From spec-mode research) How the relevant part of the system works *today*, before this feature lands. Without this baseline the design intent is hard to evaluate.
+(From lld-mode research) How the relevant part of the system works *today*, before this feature lands. Without this baseline the design intent is hard to evaluate.
 
 ## Ownership Conflicts
 
-(From spec-mode research) Existing feature docs whose `owns:` globs overlap with the projected scope. Resolve before the plan starts — leave nothing unresolved.
+(From lld-mode research) Existing feature docs whose `owns:` globs overlap with the projected scope. Resolve before the plan starts — leave nothing unresolved.
 
 | Conflicting doc | Overlapping path(s) | Resolution |
 |-----------------|---------------------|------------|
@@ -426,7 +403,7 @@ Sections fill in across the feature's lifecycle. No template swap — they accum
 | When | Sections written | Source |
 | --- | --- | --- |
 | Status: Draft (design) | Goal, Goals & Non-Goals, Background, Approach, Open Questions, Risks | User interview |
-| Status: Draft (research) | Affected Modules, Conventions to Follow, Current Behavior, Ownership Conflicts | spec-mode agent |
+| Status: Draft (research) | Affected Modules, Conventions to Follow, Current Behavior, Ownership Conflicts | lld-mode agent |
 | Status: Draft → Active (implementation lands) | Architecture, Key Functions, State, Redux, Files; `owns:` globs confirmed against real code | Main agent (from actual code) |
 
 Resolved Open Questions can be summarized into Background; unresolved ones stay visible.
@@ -807,47 +784,3 @@ The full surface lives in [`{path/to/public-index}`]({path/to/public-index}).
 The baseline audit **does** scaffold the project root README when missing. The risk this template guards against — template-shaped placeholders that look abandoned — is mitigated by the writing rules above: fill every section with concrete details from the repo (real package manager from the lockfile, real scripts, real layout, real status). Skip sections that genuinely don't apply rather than leaving stubs.
 
 **Never overwrite an existing root README** during a baseline. If one is present — even sparse or outdated — leave it untouched. Treat updates to a pre-existing root README as a separate, explicit request.
-
----
-
-## 11. Memory inbox entry (docs/memory/inbox/{actor}.md)
-
-Use for: the capture tier of the knowledge gradient — the durable lessons of each session (corrections, root-caused failures, decisions with rationale, discovered constraints), reflected by the `session-reflect` hook at session end. It is the raw input to distillation: `distiller facts` digests entries into fact-cards and **consumes** them, so the file holds exactly what is undigested.
-
-### File grain
-
-One file **per actor**: `docs/memory/inbox/{actor}.md`. `actor` is `git config user.name` lowercased and kebab-slugged; fall back to `$USER`, then `agent`. Two actors write to different files, so the inbox is **append-only without merge conflicts** — no shared file to contend over, no lock, no last-writer-wins.
-
-### File header
-
-Written once, on the first entry:
-
-```
-# Memory inbox — {actor}
-Session lessons awaiting distillation — appended by the session-reflect hook, consumed by `distiller facts`.
-```
-
-### Entry shape
-
-One block per reflected session, at most 6 bullets. Each bullet is one complete, self-contained sentence tagged `[project]` (true of the repo or its tooling) or `[user]` (true of the user) — the tag routes it at distillation: project facts → `docs/memory/facts/`, user facts → user-level memory.
-
-```
-## YYYY-MM-DD HH:MM · session <id> · {repo}@{branch}
-- [project] <one self-contained sentence, names and identifiers spelled out>
-- [user] <one self-contained sentence>
-```
-
-### Examples
-
-```
-## 2026-06-08 22:26 · session bc06c4fc · etna@dev
-- [project] The read_network_requests Chrome CDP tool only captures after its first call — arm it, trigger traffic, then read.
-- [user] jane-doe prefers minimal fixes over defensive machinery; fail loudly instead of engineering around a problem.
-```
-
-### Rules
-
-- **Hooks append, the distiller consumes.** A digested entry block is deleted by `distiller facts`; nothing else edits or reorders the file. A human may hand-append a lesson in the same shape — it rides the same queue.
-- **Sessions are deduped by id.** The reflect hook skips a session whose id already appears in the file (SessionEnd re-fires on resume).
-- **Secrets are redacted on write.** The privacy filter replaces secret shapes with `[redacted:{kind}]` (e.g. `[redacted:api-key]`, `[redacted:bearer]`, `[redacted:pem]`) before any line is appended — never paste a raw token in by hand either.
-- **Don't curate here.** Promotion to fact-cards and `docs/memory/main.md` happens at distillation; the inbox stays a transient queue.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@nurix/etna",
-    "version": "0.18.15",
+    "version": "0.18.16",
     "description": "Bootstrap a project with a Nurix harness — copies the harness's CLAUDE.md, skills, agents, rules, and hooks directly into the project from a bundled payload (no marketplace fetch, no network).",
     "type": "module",
     "bin": {

package/data/harnesses/code/hooks/lib/redact.mjs

@@ -1,35 +0,0 @@
-// harness/code/hooks/lib/redact.mjs — shared privacy filter: redacts secret shapes before ledger append.
-
-// Patterns ordered most-specific first; each replaces a match with [redacted:{kind}].
-const RULES = [
-  // PEM private/public key blocks (multiline).
-  { kind: "pem", re: /-----BEGIN[\s\S]*?-----END[^-]*-----/g },
-  // OpenAI / Anthropic-style keys (sk-..., sk-ant-...).
-  { kind: "api-key", re: /\bsk-(?:ant-)?[A-Za-z0-9_-]{8,}\b/g },
-  // AWS access key IDs.
-  { kind: "aws-key", re: /\bAKIA[0-9A-Z]{16}\b/g },
-  // Bearer tokens in Authorization context.
-  { kind: "bearer", re: /\bBearer\s+[A-Za-z0-9._~+/=-]{8,}/gi },
-  // password= / passwd= / secret= / token= / api_key= style assignments (= or :).
-  {
-    kind: "credential",
-    re: /\b(?:password|passwd|pwd|secret|token|api[_-]?key|access[_-]?key|client[_-]?secret)\b\s*[:=]\s*["']?[^\s"'&)\]},;[]{3,}/gi,
-  },
-  // Generic long hex/base64 token ONLY in a key-value credential context.
-  {
-    kind: "credential",
-    re: /\b(?:key|auth|cred|credential|signature|sig)\b\s*[:=]\s*["']?[A-Za-z0-9+/=_-]{32,}/gi,
-  },
-];
-
-// Redact secret shapes in arbitrary text; returns a string with placeholders.
-function redact(text) {
-  if (text == null) return "";
-  let out = String(text);
-  for (const rule of RULES) {
-    out = out.replace(rule.re, `[redacted:${rule.kind}]`);
-  }
-  return out;
-}
-
-export { redact };

package/data/harnesses/code/hooks/prompt-recall.mjs

@@ -1,155 +0,0 @@
-// plugins/code/hooks/prompt-recall.mjs — UserPromptSubmit hook: surface fact-cards relevant to the prompt via qmd BM25; stdout is injected as context.
-
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { execFileSync } from "node:child_process";
-
-const MIN_PROMPT_CHARS = 24;
-const MIN_SCORE = 0.45;
-const MAX_CARDS = 3;
-const MAX_STATEMENT_CHARS = 300;
-const MAX_KEYWORDS = 8;
-
-const STOPWORDS = new Set(
-  "a an and are as at be but by can could do does for from has have how i in is it its me my of on or our should so that the their then there these this to was we what when where which who why will with would you your".split(
-    " ",
-  ),
-);
-
-// Read all of stdin synchronously; returns "" if nothing is piped.
-function readStdin() {
-  try {
-    return fs.readFileSync(0, "utf8");
-  } catch (e) {
-    return "";
-  }
-}
-
-// Resolve the project root: CLAUDE_PROJECT_DIR env, else payload cwd, else process cwd.
-function resolveProjectDir(payload) {
-  return process.env.CLAUDE_PROJECT_DIR || (payload && payload.cwd) || process.cwd();
-}
-
-// Map a qmd://collection/relpath hit URI to the card file under docs/memory/facts/.
-function cardPath(factsDir, fileUri) {
-  return path.join(factsDir, String(fileUri || "").replace(/^qmd:\/\/[^/]+\//, ""));
-}
-
-// A card's atomic statement: the body after frontmatter, whitespace-flattened and clipped.
-function cardStatement(file) {
-  try {
-    const body = fs
-      .readFileSync(file, "utf8")
-      .replace(/^---\n[\s\S]*?\n---\n?/, "")
-      .replace(/\s+/g, " ")
-      .trim();
-    return body.length > MAX_STATEMENT_CHARS ? body.slice(0, MAX_STATEMENT_CHARS) + "…" : body;
-  } catch (e) {
-    return "";
-  }
-}
-
-// Run one qmd search mode against the facts collection; [] on any failure — recall is strictly optional.
-function qmdHits(mode, query, collection) {
-  try {
-    const out = JSON.parse(
-      execFileSync("qmd", [mode, query, "--format", "json", "-n", String(MAX_CARDS + 2), "-c", collection], {
-        encoding: "utf8",
-        timeout: 10000,
-        stdio: ["ignore", "pipe", "ignore"],
-      }),
-    );
-    return Array.isArray(out) ? out : [];
-  } catch (e) {
-    return [];
-  }
-}
-
-// Main: search the facts collection for the prompt and emit unseen high-score cards.
-function main() {
-  if (process.env.ETNA_REFLECT) return;
-
-  const raw = readStdin();
-  let payload = {};
-  try {
-    payload = raw ? JSON.parse(raw) : {};
-  } catch (e) {
-    payload = {};
-  }
-
-  const prompt = String(payload.prompt || "").trim();
-  if (!prompt || prompt.startsWith("/") || prompt.length < MIN_PROMPT_CHARS) return;
-
-  const projectDir = resolveProjectDir(payload);
-  const factsDir = path.join(projectDir, "docs", "memory", "facts");
-  let hasCards = false;
-  try {
-    hasCards = fs.readdirSync(factsDir).some((f) => f.endsWith(".md"));
-  } catch (e) {
-    return;
-  }
-  if (!hasCards) return;
-
-  // BM25 keywords first (fast, strict-AND), vector similarity as the natural-language
-  // fallback (~1s warm) — `qmd query` (LLM expansion + rerank) is too slow to block a prompt.
-  const collection = `${path.basename(projectDir)}-facts`;
-  const keywords = Array.from(
-    new Set(
-      prompt
-        .toLowerCase()
-        .replace(/[^a-z0-9\s_./-]/g, " ")
-        .split(/\s+/)
-        .filter((w) => w.length > 2 && !STOPWORDS.has(w)),
-    ),
-  )
-    .slice(0, MAX_KEYWORDS)
-    .join(" ");
-  let hits = keywords ? qmdHits("search", keywords, collection) : [];
-  if (!hits.length) hits = qmdHits("vsearch", prompt.replace(/\s+/g, " ").slice(0, 300), collection);
-  if (!hits.length) return;
-
-  // Inject each card at most once per session.
-  const sessionKey = String(payload.session_id || "any").replace(/[^a-zA-Z0-9-]/g, "");
-  const stateFile = path.join(os.tmpdir(), `etna-recall-${sessionKey}.txt`);
-  let seen = [];
-  try {
-    seen = fs.readFileSync(stateFile, "utf8").split("\n").filter(Boolean);
-  } catch (e) {
-    seen = [];
-  }
-
-  const fresh = hits
-    .filter((h) => h && h.score >= MIN_SCORE && h.file && !seen.includes(h.file))
-    .slice(0, MAX_CARDS);
-  const lines = [];
-  for (const hit of fresh) {
-    const statement = cardStatement(cardPath(factsDir, hit.file));
-    if (statement) {
-      lines.push(`- ${statement} [${String(hit.file).replace(/^qmd:\/\/[^/]+\//, "docs/memory/facts/")}]`);
-    }
-  }
-  if (!lines.length) return;
-
-  try {
-    fs.appendFileSync(stateFile, fresh.map((h) => h.file).join("\n") + "\n", "utf8");
-  } catch (e) {
-    // Dedupe state is best-effort; a re-injection is harmless.
-  }
-
-  process.stdout.write(
-    `<memory-recall>\nProject memory possibly relevant to this prompt (distilled fact-cards):\n${lines.join("\n")}\n</memory-recall>\n`,
-  );
-}
-
-try {
-  main();
-} catch (e) {
-  try {
-    process.stderr.write(`prompt-recall hook: ${e && e.message ? e.message : e}\n`);
-  } catch (e2) {
-    // Nothing more we can do.
-  }
-} finally {
-  process.exit(0);
-}

package/data/harnesses/code/hooks/session-reflect.mjs

@@ -1,285 +0,0 @@
-// plugins/code/hooks/session-reflect.mjs — SessionEnd hook: reflect the session into durable lessons (headless haiku pass) appended to the actor's memory inbox.
-
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { execFileSync, spawn } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import { redact } from "./lib/redact.mjs";
-
-// ESM has no __filename; derive it from this module's URL for the detached worker re-spawn.
-const __filename = fileURLToPath(import.meta.url);
-
-// A session below all three thresholds carries no lesson worth a model call.
-const MIN_TURNS = 8;
-const MAX_MESSAGE_CHARS = 1500;
-const MAX_DIGEST_CHARS = 80000;
-const MAX_LESSONS = 6;
-
-// Read all of stdin synchronously; returns "" if nothing is piped.
-function readStdin() {
-  try {
-    return fs.readFileSync(0, "utf8");
-  } catch (e) {
-    return "";
-  }
-}
-
-// Resolve the project root: CLAUDE_PROJECT_DIR env, else payload cwd, else process cwd.
-function resolveProjectDir(payload) {
-  return process.env.CLAUDE_PROJECT_DIR || (payload && payload.cwd) || process.cwd();
-}
-
-// Run a git command in projectDir; returns trimmed stdout or fallback on any error.
-function git(projectDir, args, fallback) {
-  try {
-    return execFileSync("git", ["-C", projectDir, ...args], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"],
-    }).trim() || fallback;
-  } catch (e) {
-    return fallback;
-  }
-}
-
-// Slug a raw actor name into kebab-case ASCII.
-function slugActor(name) {
-  return String(name || "")
-    .toLowerCase()
-    .replace(/[^a-z0-9]+/g, "-")
-    .replace(/^-+|-+$/g, "");
-}
-
-// Determine the actor: git user.name (slugged) → $USER → "agent".
-function resolveActor(projectDir) {
-  const fromGit = slugActor(git(projectDir, ["config", "user.name"], ""));
-  if (fromGit) return fromGit;
-  const fromEnv = slugActor(process.env.USER || "");
-  if (fromEnv) return fromEnv;
-  return "agent";
-}
-
-// Truncate a single line to n chars with an ellipsis marker.
-function clip(text, n) {
-  const clean = String(text || "").replace(/\s+/g, " ").trim();
-  return clean.length > n ? clean.slice(0, n) + "…" : clean;
-}
-
-// Extract plain text from a message whose content is a string or content-block array.
-function extractText(msg) {
-  if (!msg || !msg.content) return "";
-  if (typeof msg.content === "string") return msg.content;
-  if (Array.isArray(msg.content)) {
-    return msg.content
-      .filter((b) => b && b.type === "text" && typeof b.text === "string")
-      .map((b) => b.text)
-      .join(" ");
-  }
-  return "";
-}
-
-// Strip harness-injected wrappers so only what the user actually typed survives.
-function stripInjected(text) {
-  return String(text || "")
-    .replace(/<system-reminder>[\s\S]*?<\/system-reminder>/g, "")
-    .replace(/<(local-command-caveat|local-command-stdout|local-command-stderr|command-name|command-message|command-args|command-contents)>[\s\S]*?<\/\1>/g, "")
-    .trim();
-}
-
-// Scan an assistant message's tool_use blocks for edited files and git commits.
-function collectToolUse(msg, summary) {
-  if (!msg || !Array.isArray(msg.content)) return;
-  for (const block of msg.content) {
-    if (!block || block.type !== "tool_use") continue;
-    const name = block.name || "";
-    const input = block.input || {};
-    if (/^(Edit|Write|MultiEdit|NotebookEdit)$/.test(name) && input.file_path) {
-      summary.files.add(input.file_path);
-    }
-    if (name === "Bash" && typeof input.command === "string" && /\bgit\s+commit\b/.test(input.command)) {
-      summary.sawCommit = true;
-    }
-  }
-}
-
-// Walk the JSONL transcript once: turn/edit/commit counts plus a USER/ASSISTANT text digest.
-function digestTranscript(transcriptPath) {
-  const out = { turns: 0, files: new Set(), sawCommit: false, lines: [] };
-  if (!transcriptPath || !fs.existsSync(transcriptPath)) return out;
-  for (const line of fs.readFileSync(transcriptPath, "utf8").split("\n")) {
-    if (!line.trim()) continue;
-    let row;
-    try {
-      row = JSON.parse(line);
-    } catch (e) {
-      continue;
-    }
-    if (row.isSidechain) continue;
-    const msg = row && row.message ? row.message : row;
-    const role = (msg && msg.role) || row.type;
-    if (role === "user") {
-      const text = stripInjected(extractText(msg));
-      if (!text || text.startsWith("Caveat: The messages below")) continue;
-      out.lines.push("USER: " + clip(text, MAX_MESSAGE_CHARS));
-    } else if (role === "assistant") {
-      out.turns += 1;
-      collectToolUse(msg, out);
-      const text = extractText(msg);
-      if (text) out.lines.push("ASSISTANT: " + clip(text, MAX_MESSAGE_CHARS));
-    }
-  }
-  return out;
-}
-
-// Compute the per-actor inbox file path.
-function inboxPath(projectDir, actor) {
-  const dir = path.join(projectDir, "docs", "memory", "inbox");
-  return { dir, file: path.join(dir, `${actor}.md`) };
-}
-
-// True when this session already wrote an inbox entry (SessionEnd re-fires on resume).
-function alreadyReflected(file, sessionId) {
-  try {
-    return Boolean(sessionId) && fs.existsSync(file) && fs.readFileSync(file, "utf8").includes(`session ${sessionId}`);
-  } catch (e) {
-    return false;
-  }
-}
-
-// Build the inbox file header block.
-function inboxHeader(actor) {
-  return `# Memory inbox — ${actor}\nSession lessons awaiting distillation — appended by the session-reflect hook, consumed by \`distiller facts\`.\n`;
-}
-
-// The full output contract sits AFTER the transcript — with it only up front, the model
-// continues the conversation in the transcript instead of reflecting on it.
-const PROMPT_HEADER = [
-  "You are a memory reflector. Below is the transcript of a FINISHED coding session,",
-  "delimited by <transcript> tags. Do not reply to it or continue it — you will be asked",
-  "to extract durable lessons from it after the closing tag.",
-  "",
-  "<transcript>",
-  "",
-].join("\n");
-
-const PROMPT_FOOTER = [
-  "",
-  "</transcript>",
-  "",
-  "The session above is over. Extract ONLY durable lessons a future session in this",
-  "repository would benefit from knowing:",
-  "- corrections or preferences the user stated",
-  "- failures whose root cause was found, with the fix",
-  "- decisions made, with their rationale",
-  "- discovered constraints or non-obvious facts about the project or its tooling",
-  "Rules:",
-  "- Most sessions contain none. If nothing qualifies, output exactly: NONE",
-  `- Otherwise output at most ${MAX_LESSONS} bullets and nothing else — no preamble, no headers.`,
-  '- Each bullet starts with "- [project]" (true of this repo or its tooling) or "- [user]" (true of this user).',
-  "- Each bullet is one complete, self-contained sentence with names and identifiers spelled out.",
-  "- Routine work (commits made, files edited, tasks completed) is NOT a lesson. Never include secrets.",
-].join("\n");
-
-// Hook mode: stash the payload and hand off to a detached worker so session exit is never delayed.
-function hook() {
-  const raw = readStdin();
-  let payload = {};
-  try {
-    payload = raw ? JSON.parse(raw) : {};
-  } catch (e) {
-    payload = {};
-  }
-  if (!payload.transcript_path) return;
-
-  const stash = {
-    projectDir: resolveProjectDir(payload),
-    transcriptPath: payload.transcript_path,
-    sessionId: payload.session_id || "",
-  };
-  const stashFile = path.join(os.tmpdir(), `etna-reflect-${stash.sessionId || process.pid}.json`);
-  fs.writeFileSync(stashFile, JSON.stringify(stash), "utf8");
-  spawn(process.execPath, [__filename, "--worker", stashFile], { detached: true, stdio: "ignore" }).unref();
-}
-
-// Worker mode: filter, digest, run the reflection model, append surviving lessons to the inbox.
-function worker(stashFile) {
-  let stash;
-  try {
-    stash = JSON.parse(fs.readFileSync(stashFile, "utf8"));
-  } finally {
-    try {
-      fs.rmSync(stashFile, { force: true });
-    } catch (e) {
-      // Stale stash files are harmless.
-    }
-  }
-
-  const { projectDir, transcriptPath, sessionId } = stash;
-  const digest = digestTranscript(transcriptPath);
-  if (digest.turns < MIN_TURNS && digest.files.size === 0 && !digest.sawCommit) return;
-
-  const actor = resolveActor(projectDir);
-  const { dir, file } = inboxPath(projectDir, actor);
-  if (alreadyReflected(file, sessionId)) return;
-
-  let text = redact(digest.lines.join("\n"));
-  if (text.length > MAX_DIGEST_CHARS) {
-    text = text.slice(0, 8000) + "\n[... middle of session elided ...]\n" + text.slice(-(MAX_DIGEST_CHARS - 8000));
-  }
-
-  const output = execFileSync("claude", ["-p", "--model", "haiku"], {
-    input: PROMPT_HEADER + text + PROMPT_FOOTER,
-    encoding: "utf8",
-    cwd: os.tmpdir(),
-    env: Object.assign({}, process.env, { ETNA_REFLECT: "1" }),
-    timeout: 240000,
-    maxBuffer: 4 * 1024 * 1024,
-    stdio: ["pipe", "pipe", "ignore"],
-  });
-
-  const lessons = output
-    .split("\n")
-    .map((l) => l.trim())
-    .filter((l) => /^- \[(project|user)\]\s+\S/.test(l))
-    .slice(0, MAX_LESSONS)
-    .map((l) => redact(l));
-  if (!lessons.length) return;
-
-  const repo = path.basename(projectDir);
-  const branch = git(projectDir, ["rev-parse", "--abbrev-ref", "HEAD"], "-");
-  const now = new Date();
-  const pad = (n) => String(n).padStart(2, "0");
-  const stamp = `${now.getFullYear()}-${pad(now.getMonth() + 1)}-${pad(now.getDate())} ${pad(now.getHours())}:${pad(now.getMinutes())}`;
-
-  fs.mkdirSync(dir, { recursive: true });
-  if (alreadyReflected(file, sessionId)) return;
-  const exists = fs.existsSync(file);
-  const block =
-    (exists ? "\n" : inboxHeader(actor) + "\n") +
-    `## ${stamp} · session ${sessionId || "unknown"} · ${repo}@${branch}\n` +
-    lessons.join("\n") +
-    "\n";
-  fs.appendFileSync(file, block, "utf8");
-}
-
-function main() {
-  if (process.env.ETNA_REFLECT) return;
-  const workerIdx = process.argv.indexOf("--worker");
-  if (workerIdx !== -1) {
-    worker(process.argv[workerIdx + 1]);
-  } else {
-    hook();
-  }
-}
-
-try {
-  main();
-} catch (e) {
-  try {
-    process.stderr.write(`session-reflect hook: ${e && e.message ? e.message : e}\n`);
-  } catch (e2) {
-    // Nothing more we can do.
-  }
-} finally {
-  process.exit(0);
-}