@openmixer/plugin-qualify 0.9.0 → 0.10.1

package/src/host-profiles.ts

@@ -54,6 +54,17 @@ export const OMX_CLAP_HOST_EXTENSIONS: readonly string[] = [
   "clap.state",
 ];
 
+/**
+ * The three host extensions omx-clap-host turns on beyond the library's own (omx-clap-core
+ * `src/effects.c` `configure_core`: `preset_load`, `track_info`, `remote_controls`), by the ids
+ * its host object answers (`src/clap_host.c`); the prober offers them with `--offer`.
+ */
+export const OMX_CLAP_HOST_CONFIGURED_EXTENSIONS: readonly string[] = [
+  "clap.preset-load/2",
+  "clap.track-info/1",
+  "clap.remote-controls/2",
+];
+
 /** The LV2 extension namespace the jalv and mod-host lists are spelled in. */
 const LV2_EXT = "http://lv2plug.in/ns/ext/";
 const BUF_SIZE_ALL = ["powerOf2BlockLength", "fixedBlockLength", "boundedBlockLength"].map((f) => `${LV2_EXT}buf-size#${f}`);
@@ -113,8 +124,25 @@ export const MOD_HOST_PROFILE: HostProfile = {
   isolation: "shared-process",
 };
 
+/**
+ * omx-clap-host, alone or as plugin-hostd's CLAP worker: one JACK client per plugin in a host
+ * process that several plugins may share (a plugin-hostd pool), instruments fed through each
+ * client's `midi_in`, latency published on the JACK ports. Its CLAP host object is the library's
+ * plus the three it configures; its LV2 plugins run through the same feature provider as the
+ * console's in-process stage.
+ */
+export const OMX_CLAP_HOST_PROFILE: HostProfile = {
+  id: "omx-clap-host",
+  lv2Features: OMX_INPROCESS_FEATURES,
+  clapExtensions: [...OMX_CLAP_HOST_EXTENSIONS, ...OMX_CLAP_HOST_CONFIGURED_EXTENSIONS],
+  instruments: true,
+  cost: HOST_BUDGETS["omx-clap-host"],
+  latency: "uncompensated",
+  isolation: "shared-process",
+};
+
 /** Every profile the tool ships, by id. */
-export const HOST_PROFILES: readonly HostProfile[] = [OPENMIXER_CONSOLE_PROFILE, JALV_PROFILE, MOD_HOST_PROFILE];
+export const HOST_PROFILES: readonly HostProfile[] = [OPENMIXER_CONSOLE_PROFILE, JALV_PROFILE, MOD_HOST_PROFILE, OMX_CLAP_HOST_PROFILE];
 
 /** A shipped profile by id, or `undefined`. */
 export function shippedHostProfile(id: string): HostProfile | undefined {

package/src/hosting-codes.ts

@@ -1,10 +1,10 @@
 // SPDX-License-Identifier: GPL-3.0-or-later
 // Copyright (C) 2026 Pau Aliagas <linuxnow@gmail.com>
 /**
- * The hosting verdict's message codes (2026-09-04-lv2-hosting-path.md). Codes, never prose: the
+ * The hosting verdict's message codes. Codes, never prose: the
  * surface renders the operator's locale.
  *
- * A UNION list file (2026-09-15-no-stored-derivations.md §9): `.gitattributes` marks it
+ * A UNION list file: `.gitattributes` marks it
  * `merge=union`, so two lanes that each add a code merge with both kept. Only the table lives
  * here, one `key: 'code',` per line, with keys and codes unique; the registry-hotspots gate
  * refuses anything else.
@@ -24,6 +24,10 @@ export const HOSTING_CODE = {
   rtSafetyViolations: 'hosting.rt-safety.violations-in-run',
   rtSafetyUnmeasured: 'hosting.rt-safety.unmeasured',
   rtSafetyNotReproducible: 'hosting.rt-safety.not-reproducible',
+  // The note sweep: an instrument played under the interposer, a count of its own.
+  rtSafetyNotesClean: 'hosting.rt-safety.clean-under-notes',
+  rtSafetyNotesViolations: 'hosting.rt-safety.violations-under-notes',
+  rtSafetyNotesUnmeasured: 'hosting.rt-safety.notes-unmeasured',
   featuresProvided: 'hosting.features.all-provided',
   featuresMissing: 'hosting.features.required-not-provided',
   featuresDisqualifying: 'hosting.features.host-not-provided',
@@ -44,7 +48,7 @@ export const HOSTING_CODE = {
   topologyNoAudioOutput: 'hosting.topology.no-audio-output',
   topologyExtraInputs: 'hosting.topology.extra-inputs-fed-silence',
   topologyInstrument: 'hosting.topology.instrument',
-  // The CLAP arm (2026-09-26-clap-hosting-path.md §3): the SAME dimensions fed from CLAP facts,
+  // The CLAP arm: the SAME dimensions fed from CLAP facts,
   // minted here where the LV2 table has no code for the fact.
   topologyWiderThanStrip: 'hosting.topology.wider-than-strip',
   clapLatencyMismatch: 'hosting.clap.latency-mismatch',
@@ -72,6 +76,6 @@ export const HOSTING_CODE = {
   noRealisation: 'hosting.no-realisation',
   realisedInProcess: 'hosting.realised.in-process',
   // A plugin LINKED into the engine (the static-link registry) runs in-process without a
-  // verdict: the library's oracles are its proof (`2026-09-26-clap-hosting-path.md` §7).
+  // verdict: the library's oracles are its proof.
   linked: 'hosting.linked',
 } as const;

package/src/hosting-suitability.ts

@@ -199,12 +199,12 @@ export interface CrashSignature {
   /** The top plugin-owned stack frame, or a host frame that exonerates the plugin. */
   readonly topFrame: string;
   readonly signal?: "SIGSEGV" | "SIGABRT" | "SIGBUS";
-  /** The note that recorded this cluster. Provenance, so a row is never folklore. */
+  /** What was found about this cluster. Provenance, so a row is never folklore. */
   readonly note: string;
 }
 
 /**
- * Seeded from the crash notes of 2026-09-03/04. A raw crash matching NO row is
+ * Seeded from the crashes investigated on 2026-09-03/04. A raw crash matching NO row is
  * `unknown` — the table blames a plugin only where a named investigation did.
  */
 export const CRASH_SIGNATURES: readonly CrashSignature[] = [
@@ -213,26 +213,26 @@ export const CRASH_SIGNATURES: readonly CrashSignature[] = [
     attribution: "host",
     topFrame: "pw_memmap_free",
     signal: "SIGSEGV",
-    note: "2026-09-04-pipewire-jack-client-close-double-free.md",
+    note: "closing a PipeWire JACK client frees a memory map twice; the host crashes, not the plugin",
   },
   {
     id: "pipewire-jack-close-double-free-abort",
     attribution: "host",
     topFrame: "tcache_double_free_verify",
     signal: "SIGABRT",
-    note: "2026-09-04-pipewire-jack-client-close-double-free.md",
+    note: "the same double free in PipeWire's JACK client close, caught by glibc's tcache check as an abort",
   },
   {
     id: "mod-host-effects-remove",
     attribution: "host",
     topFrame: "effects_remove",
-    note: "2026-09-03-mod-host-crash-cluster2-3-investigation.md",
+    note: "mod-host crashes in effects_remove while removing an effect; the host is at fault",
   },
   {
     id: "plugin-instantiate-layout",
     attribution: "plugin",
     topFrame: "lilv_instance_instantiate",
-    note: "2026-09-03-mod-host-crash-cluster2-3-investigation.md",
+    note: "the plugin crashes while lilv instantiates it, on a port layout it cannot host",
   },
 ];
 
@@ -342,6 +342,28 @@ export interface PluginClapMeasurement {
   readonly processCalls: number;
 }
 
+/**
+ * The note sweep of a CLAP plugin with a note input (plugin-qualify's prober): the plugin played at
+ * every rate — a chord, bend and a controller, pressure, the chord let go, a burst of note ons and
+ * their offs, all notes off — in the dialect its first note input reads, counted under the
+ * interposer apart from the parameter sweep. `applicable: false` is a plugin the prober could not
+ * play: no note input, or none in a dialect it speaks.
+ */
+export interface PluginNoteSweepMeasurement {
+  readonly applicable: boolean;
+  readonly dialect?: "clap" | "midi";
+  readonly blocks?: number;
+  readonly blockFrames?: number;
+  /** Note, expression and MIDI events the sweep sent. */
+  readonly noteEvents?: number;
+  readonly processErrors?: number;
+  readonly nonFinite?: boolean;
+  readonly interposer?: boolean;
+  readonly allocationsInRun?: number;
+  readonly locksInRun?: number;
+  readonly syscallsInRun?: number;
+}
+
 /** What the classifier is told about the console asking. */
 export interface HostingClassifyOptions {
   /** The LIVE rate. Cost is read here and nowhere else — never projected. */
@@ -888,6 +910,37 @@ export function clapRtReasons(clap: PluginClapMeasurement | undefined): readonly
   return out;
 }
 
+/**
+ * The rtSafety reasons of the note sweep, for a plugin with `noteInputs` note inputs: none for a
+ * plugin that takes no notes; `unknown` when it takes notes and was not played under the
+ * interposer (an instrument is cheap and clean at rest, so the parameter sweep alone says nothing
+ * about a voice); `unsuitable` on any allocation, lock or syscall while it was played, or a process
+ * error; `suitable` on a clean count.
+ */
+export function noteSweepReasons(sweep: PluginNoteSweepMeasurement | undefined, noteInputs: number): readonly HostingReason[] {
+  if (noteInputs === 0) return [];
+  if (sweep === undefined || !sweep.applicable || sweep.interposer !== true || !sweep.blocks ||
+      sweep.allocationsInRun === undefined || sweep.locksInRun === undefined || sweep.syscallsInRun === undefined) {
+    return [reason("rtSafety", "objective", "unknown", HOSTING_CODE.rtSafetyNotesUnmeasured)];
+  }
+  const out: HostingReason[] = [];
+  if (sweep.allocationsInRun + sweep.locksInRun + sweep.syscallsInRun > 0) {
+    out.push(
+      reason("rtSafety", "objective", "unsuitable", HOSTING_CODE.rtSafetyNotesViolations, {
+        allocations: sweep.allocationsInRun,
+        syscalls: sweep.syscallsInRun,
+        locks: sweep.locksInRun,
+      }),
+    );
+  }
+  if ((sweep.processErrors ?? 0) > 0) {
+    out.push(reason("rtSafety", "objective", "unsuitable", HOSTING_CODE.clapProcessError, { errors: sweep.processErrors ?? 0 }));
+  }
+  return out.length > 0
+    ? out
+    : [reason("rtSafety", "objective", "suitable", HOSTING_CODE.rtSafetyNotesClean, { blocks: sweep.blocks, events: sweep.noteEvents ?? 0 })];
+}
+
 /**
  * The verdict. Worst-wins across every dimension, exactly as `classifyForRole` folds — with
  * three gates that can poison the whole result before the fold is even read: a curator
@@ -905,7 +958,7 @@ export function classifyPluginHosting(
   // interchange's one door (`measurement-catalog.ts`), whose per-dimension precedence is the
   // only precedence there is. A second "passed measurements win" seam here was how an offline
   // report could agree with itself while every served descriptor read unknown.
-  // The CLAP arm (2026-09-26-clap-hosting-path.md §3): the SAME six dimensions, fed from the
+  // The CLAP arm: the SAME six dimensions, fed from the
   // qualifier's CLAP facts where the LV2 scan's facts do not exist for the format. Stability,
   // the interposer's counts and the cost are format-blind and read unchanged.
   const reasons: HostingReason[] = descriptor.format === "clap"
@@ -988,7 +1041,7 @@ export interface HostingRealisation {
   readonly inProcessAvailable: boolean;
   /**
    * Whether the plugin is LINKED into the engine (its static-link registry): it needs no verdict
-   * to run in-process (`2026-09-26-clap-hosting-path.md` §7). Absent reads as not linked.
+   * to run in-process. Absent reads as not linked.
    */
   readonly linked?: boolean;
 }

package/src/measure-host.ts

@@ -1,8 +1,8 @@
 // SPDX-License-Identifier: GPL-3.0-or-later
 // Copyright (C) 2026 Pau Aliagas <linuxnow@gmail.com>
 /**
- * Reading what the measuring host (`lv2_measure`) prints and supervising how long it may take
- * (`2026-09-25-plugin-qualify.md` §2a). Pure functions: the runner spawns, these decide.
+ * Reading what the measuring host (`lv2_measure`) prints and supervising how long it may take.
+ * Pure functions: the runner spawns, these decide.
  */
 import { isRecord } from "./measurement/guards.js";
 import { SOAK_SWEEP_DB, SOAK_SWEEP_RATIO, SOAK_TIMEOUT_FLOOR_S, SOAK_TIMEOUT_MARGIN } from "./qualify-declarations.js";

package/src/measurement/format.ts

@@ -464,7 +464,7 @@ export interface HostBudget {
 }
 
 /**
- * A HOST PROFILE (`2026-09-25-plugin-qualify.md` §3a; §3b here): the host a verdict was judged
+ * A HOST PROFILE: the host a verdict was judged
  * against — only what differs between hosts. A document carries every profile its verdicts name,
  * in full, so a verdict against a project's own profile is reproducible from the document alone.
  */

package/src/measurement/vocabulary.ts

@@ -302,7 +302,7 @@ export function readDimension(value: unknown): MeasurementDimension | undefined
 export const VERDICT_RATINGS = ["suitable", "conditional", "unknown", "unsuitable"] as const;
 export type VerdictRating = (typeof VERDICT_RATINGS)[number];
 
-/** How a host runs its plugins (`2026-09-25-plugin-qualify.md` §3a). */
+/** How a host runs its plugins. */
 export const HOST_ISOLATIONS = ["in-process", "per-process", "shared-process"] as const;
 export type HostIsolation = (typeof HOST_ISOLATIONS)[number];
 

package/src/qualify-declarations.ts

@@ -82,18 +82,22 @@ export const CLAP_SYSTEM_DIR = "/usr/lib/clap";
 export const CLAP_SCAN_TIMEOUT_S = 300;
 
 /**
- * The CLAP prober (`native/clap-qualify.c`), the LV2 measurer (`native/lv2-measure.c`) and the
- * interposer both run under (`native/rt-interpose.c`): each located by one environment variable, else
- * the package's own build in `native/build/`, else the first of `NATIVE_TOOL_DIRS` that holds it.
+ * The CLAP prober (`native/clap-qualify.c`), the LV2 measurer (`native/lv2-measure.c`), the
+ * interposer both run under (`native/rt-interpose.c`) and the LV2 host probe
+ * (`native/lv2-host-probe.c`, a worker plugin driven through lilv as a host drives it, for a console
+ * that exports an LV2 plugin to test its host-facing half): each located by one environment variable,
+ * else the package's own build in `native/build/`, else the first of `NATIVE_TOOL_DIRS` that holds it.
  */
 export const CLAP_QUALIFY_TOOL_ENV = "OMX_CLAP_QUALIFY";
 export const LV2_MEASURE_TOOL_ENV = "OMX_LV2_MEASURE";
 export const RT_INTERPOSE_ENV = "OMX_RT_INTERPOSE";
+export const LV2_HOST_PROBE_TOOL_ENV = "OMX_LV2_HOST_PROBE";
 
 /** The file names of the native tools, in every place they are looked for. */
 export const CLAP_QUALIFY_TOOL_NAME = "clap-qualify";
 export const LV2_MEASURE_TOOL_NAME = "lv2_measure";
 export const RT_INTERPOSE_NAME = "rt_interpose.so";
+export const LV2_HOST_PROBE_TOOL_NAME = "lv2_host_probe";
 
 /**
  * The ONE list of the native tools the packages install, each with the setting that names it.
@@ -103,6 +107,7 @@ export const NATIVE_TOOLS: readonly { readonly name: string; readonly env: strin
   { name: CLAP_QUALIFY_TOOL_NAME, env: CLAP_QUALIFY_TOOL_ENV },
   { name: LV2_MEASURE_TOOL_NAME, env: LV2_MEASURE_TOOL_ENV },
   { name: RT_INTERPOSE_NAME, env: RT_INTERPOSE_ENV },
+  { name: LV2_HOST_PROBE_TOOL_NAME, env: LV2_HOST_PROBE_TOOL_ENV },
 ];
 
 /**
@@ -162,7 +167,7 @@ export const DEFAULT_HOSTING_POLICY: HostingPolicy = {
   soakDeadDropDb: 40,
 };
 
-/** What a host spends on one plugin instance (`2026-09-25-plugin-qualify.md` §3a) — the
+/** What a host spends on one plugin instance — the
  *  interchange's shape, since a document carries each profile's budget. */
 import type { HostBudget } from "./measurement/format.js";
 export type { HostBudget };
@@ -173,10 +178,13 @@ export type { HostBudget };
  * so it gets the same per-instance share, at 48 kHz / 128 frames. `jalv` gives each plugin its own
  * process and client, so a quarter core per instance, at 48 kHz / 256 frames. The last two are
  * declared defaults, not a measurement of anyone's board — a project brings its own profile file.
+ * `omx-clap-host` runs its plugins one JACK client each, called in turn on the server's one cycle,
+ * so it gets mod-host's share and pair.
  */
 export const HOST_BUDGETS = {
   "openmixer-console": { coreFractionCeiling: 0.05, rate: COST_REFERENCE_RATE, quantum: QUANTUM_FRAMES },
   jalv: { coreFractionCeiling: 0.25, rate: MEASURE_BASE_RATE, quantum: 256 },
   "mod-host": { coreFractionCeiling: 0.05, rate: MEASURE_BASE_RATE, quantum: 128 },
+  "omx-clap-host": { coreFractionCeiling: 0.05, rate: MEASURE_BASE_RATE, quantum: 128 },
 } as const satisfies Readonly<Record<string, HostBudget>>;
 

package/tools/ai-trace-commit-check.sh

@@ -0,0 +1,114 @@
+#!/bin/bash
+# SPDX-License-Identifier: GPL-3.0-or-later
+# Copyright (C) 2026 Pau Aliagas <linuxnow@gmail.com>
+#
+# ai-trace-commit-check.sh: fail when a commit message carries an AI-attribution line.
+#
+#   ai-trace-commit-check.sh <range>          every commit in the range (e.g. origin/main..HEAD)
+#   ai-trace-commit-check.sh --msg-file FILE  one message (the commit-msg hook; # lines are git comments, skipped)
+#   ai-trace-commit-check.sh --text-file FILE any text, every line judged (pull request titles and bodies)
+#   ai-trace-commit-check.sh --selftest       fixtures plus a sabotage run
+#
+# Exit 0 clean, 1 a hit (each commit and offending line is named), 2 a range, file or pattern list that cannot be read
+# (any crash is 2). A caller refuses on 2: a checker that cannot judge is never a pass.
+# The patterns are ai-trace-patterns.json beside this script; AI_TRACE_PATTERNS names another JSON (self-tests).
+set -euo pipefail
+export AI_TRACE_SELF="${BASH_SOURCE[0]}"
+exec python3 -I - "$@" <<'PY'
+import json, os, re, subprocess, sys
+
+here = os.path.dirname(os.path.realpath(os.environ["AI_TRACE_SELF"]))
+pfile = os.environ.get("AI_TRACE_PATTERNS") or os.path.join(here, "ai-trace-patterns.json")
+
+
+def load():
+    with open(pfile, encoding="utf-8") as f:
+        return [(m["name"], re.compile(m["pattern"], re.I | re.M)) for m in json.load(f)["markers"]]
+
+
+def hits(text, markers):
+    out = []
+    for n, line in enumerate(text.splitlines(), 1):
+        for name, rx in markers:
+            if rx.search(line):
+                out.append((n, name, line.strip()))
+    return out
+
+
+def report(label, text, markers):
+    h = hits(text, markers)
+    for n, name, line in h:
+        print(f"{label}: line {n} [{name}]: {line}")
+    return len(h)
+
+
+def git(*a):
+    p = subprocess.run(["git", *a], capture_output=True, text=True)
+    if p.returncode:
+        print(f"ai-trace-commit-check: git {' '.join(a[:3])}: {p.stderr.strip()}", file=sys.stderr)
+        sys.exit(2)
+    return p.stdout
+
+
+def selftest():
+    # built from fragments: this file must not itself carry an attribution line
+    co, by, ai = "Co-Authored-", "By: ", "Cl" + "aude"
+    sess = "Cl" + "aude-Session: https://cl" + "aude.ai/code/session_01"
+    fx = {
+        "co-authored-by": f"Fix x\n\n{co}{by}{ai} Opus <noreply@anthro" + "pic.com>\n",
+        "claude-session": f"Fix x\n\n{sess}\n",
+        "generated-footer": f"Fix x\n\n\U0001F916 Generated with [{ai} Code](https://{ai.lower()}.com/{ai.lower()}-code)\n",
+        "claude.ai/code": f"Fix x\n\nsee https://{ai.lower()}.ai/code/session_9\n",
+    }
+    clean = f"Fix x\n\nGenerated by the build; mentions a hidden directory and a {co}{by}Pau line.\n"
+    def run(markers):
+        bad = [k for k, v in fx.items() if not hits(v, markers)]
+        if hits(clean, markers):
+            bad.append("clean-flagged")
+        return bad
+    m = load()
+    first = run(m)
+    print("selftest:", "GREEN" if not first else f"RED {first}")
+    sab = run([x for x in m if x[0] not in ("co-authored-by", "ai-co-author", "anthropic-noreply", "claude-session")])
+    print("sabotage (the co-author, email and session patterns removed):", "RED as expected" if sab else "still GREEN: blind")
+    return 0 if not first and sab else 1
+
+
+def main(a):
+    if a == ["--selftest"]:
+        return selftest()
+    markers = load()
+    if len(a) == 2 and a[0] == "--msg-file":
+        try:
+            text = open(a[1], encoding="utf-8", errors="replace").read()
+        except OSError as e:
+            print(f"ai-trace-commit-check: {e}", file=sys.stderr)
+            return 2
+        # lines git adds as comments are not part of the message
+        text = "\n".join(l for l in text.splitlines() if not l.startswith("#"))
+        return 1 if report("commit message", text, markers) else 0
+    if len(a) == 2 and a[0] == "--text-file":
+        try:
+            text = open(a[1], encoding="utf-8", errors="replace").read()
+        except OSError as e:
+            print(f"ai-trace-commit-check: {e}", file=sys.stderr)
+            return 2
+        return 1 if report("text", text, markers) else 0
+    if len(a) == 1 and not a[0].startswith("-"):
+        shas = git("rev-list", a[0]).split()
+        bad = 0
+        for sha in shas:
+            bad += report(sha[:12], git("log", "-1", "--format=%B", sha), markers)
+        print(f"ai-trace-commit-check: {len(shas)} commits, {bad} offending lines")
+        return 1 if bad else 0
+    print(__doc__ if False else "usage: ai-trace-commit-check.sh <range> | --msg-file FILE | --text-file FILE | --selftest", file=sys.stderr)
+    return 2
+
+
+try:
+    rc = main(sys.argv[1:])
+except Exception as e:  # a bad or missing pattern file, a decode error: unreadable, never "a hit"
+    print(f"ai-trace-commit-check: {type(e).__name__}: {e}", file=sys.stderr)
+    rc = 2
+sys.exit(rc)
+PY

package/tools/ai-trace-patterns.json

@@ -0,0 +1,33 @@
+{
+ "$comment": "SPDX-License-Identifier: GPL-3.0-or-later. The AI-attribution patterns (Python re, flags IGNORECASE|MULTILINE) read by ai-trace-commit-check.sh. Edit here only.",
+ "markers": [
+  {
+   "name": "robot-footer",
+   "pattern": "^[^\\S\\r\\n]*[_*>]*[^\\S\\r\\n]*🤖[^\\r\\n]*?(?:Claude|claude\\.(?:ai|com))[^\\r\\n]*"
+  },
+  {
+   "name": "generated-footer",
+   "pattern": "(?:🤖[^\\S\\r\\n]*)?Generated[^\\S\\r\\n]+(?:with|by)[^\\S\\r\\n]+\\[?Claude[^\\S\\r\\n]+Code\\]?(?:\\([^)\\s]*\\))?"
+  },
+  {
+   "name": "co-authored-by",
+   "pattern": "Co-Authored-By:[^\\S\\r\\n]*Claude\\b[^\\r\\n<`]*(?:<[^>\\r\\n]*>)?"
+  },
+  {
+   "name": "ai-co-author",
+   "pattern": "Co-Authored-By:[^\\S\\r\\n]*(?:Anthropic|OpenAI|ChatGPT|Copilot|Gemini|Codex|Cursor|Aider|Devin)\\b[^\\r\\n<`]*(?:<[^>\\r\\n]*>)?"
+  },
+  {
+   "name": "anthropic-noreply",
+   "pattern": "noreply@anthropic\\.com"
+  },
+  {
+   "name": "claude-session",
+   "pattern": "Claude-Session:[^\\S\\r\\n]*[^\\s`]*"
+  },
+  {
+   "name": "claude.ai/code",
+   "pattern": "\\[[^\\]\\r\\n]*\\]\\([^\\S\\r\\n]*<?https?://claude\\.ai/code[^)\\s]*>?[^\\S\\r\\n]*\\)|<?https?://claude\\.ai/code\\b[^\\s)>`]*>?"
+  }
+ ]
+}

package/tools/benchmark.py

@@ -1095,7 +1095,7 @@ LV2_WORKER_ERR_NO_SPACE = 3
 class WorkerQueue:
     """The host half of `worker:schedule`: jobs are QUEUED, and run between blocks, off `run()`.
 
-    Spec 2a (`2026-09-25-plugin-qualify.md`): a schedule that accepts a job and
+    A schedule that accepts a job and
     drops it measures an UNBUILT plugin — the Hex Chain amp read 0.9 us/sample that way against 5.4
     built. After every block the host calls `pump(interface)`: the plugin's `work()` for each
     queued job, then `work_response()` with whatever it answered, then `end_run()` once every answer

package/tools/private-refs-check.sh

@@ -0,0 +1,90 @@
+#!/usr/bin/env bash
+# SPDX-License-Identifier: GPL-3.0-or-later
+# Copyright (C) 2026 Pau Aliagas <linuxnow@gmail.com>
+#
+# private-refs-check.sh — this repository is public, so its tracked files state facts and never point
+# into a private repository: no private repository name, no private issue or pull request number, no
+# private branch name or file path, no name of a private specification file. Say what the value is and
+# why instead, and cite only public repositories (omx-dsp, omx-contract, omx-plugins, omx-clap-core, plugin-qualify).
+# Product-name mentions of OpenMixer, and values such as the org.openmixer.* CLAP ids, the
+# urn:openmixer:* LV2 URIs and the @openmixer npm scope, are not pointers and are not matched.
+#
+#   tools/private-refs-check.sh              the check, over every tracked file (generated ones included)
+#   tools/private-refs-check.sh --self-test  each sabotage, in every kind of file, must go red
+#
+# ALLOW lists the tracked files exempt from the check, each with the reason; nothing else is.
+set -euo pipefail
+HERE="$(cd "$(dirname "$0")/.." && pwd)"
+
+# <file> — <why it may name them>
+ALLOW=(
+  "tools/private-refs-check.sh"   # it spells the patterns it looks for
+)
+EXTRA_PATHSPEC=()                 # the self-test sets a bad one, to prove a git grep error is red
+
+# Extended regexps, matched case-insensitively. A new kind of pointer is one line here.
+PATTERNS=(
+  'FreeMixer/openmixer([^A-Za-z0-9_-]|$)'             # the private repository
+  'openmixer-ops'                                     # the private operations repository
+  'openmixer ?#[0-9]'                                 # one of its issues or pull requests
+  '[A-Za-z0-9_.]-dev#[0-9]'                           # an issue of a private *-dev repository
+  'integration/[A-Za-z0-9]'                           # a private integration branch
+  'packages/[a-z][a-z0-9-]+'                          # a path into the private repository's packages
+  '\.vue([^A-Za-z0-9_]|$)'                            # its web UI components
+  "openmixer's spec"                                  # its specification files
+  'docs/design/'                                      # its design documents
+  'harness/'                                          # its test harness
+  '20[0-9]{2}-[0-9]{2}-[0-9]{2}-[a-z][a-z0-9-]+\.md'  # a dated specification file name
+  'spec 20[0-9]{2}-[0-9]{2}-[0-9]{2}'                 # a citation of one
+)
+
+check() { # <root>
+  local root="$1" fail=0 args=() p a hits
+  for p in "${PATTERNS[@]}"; do args+=(-e "$p"); done
+  local excl=()
+  for a in "${ALLOW[@]}"; do excl+=(":(exclude)${a%% *}"); done
+  [ -n "$(git -C "$root" ls-files)" ] || { echo "private-refs-check: git lists no file" >&2; return 1; }
+  # git grep exits 1 for no match and 128 or more for an error; an error must not read as "no hits"
+  hits=$(git -C "$root" grep -nIiE "${args[@]}" -- . "${excl[@]}" "${EXTRA_PATHSPEC[@]}") || rc=$?
+  case "${rc:-0}" in 0|1) ;; *) echo "private-refs-check: git grep failed (exit $rc)" >&2; return 1 ;; esac
+  hits=$(printf '%s' "$hits" | cut -c1-200)
+  [ -z "$hits" ] || { printf '%s\n' "$hits" >&2; fail=1; }
+  [ "$fail" = 0 ] || { echo "private-refs-check: the lines above point into private repositories; state the fact instead" >&2; return 1; }
+  echo "private-refs-check: no tracked file points into a private repository"
+}
+
+if [ "${1:-}" = --self-test ]; then
+  scratch="$(mktemp -d)"; trap 'rm -rf "$scratch"' EXIT
+  fail=0
+  # a clean tree with one file of each kind the repository tracks; every sabotage writes one private pointer into one
+  mk() { rm -rf "$scratch/t"; mkdir -p "$scratch/t/src" "$scratch/t/tools" "$scratch/t/docs"
+    git -C "$scratch" init -q t
+    printf 'rdfs:comment "The OpenMixer console x." ;\nlv2:binary <x.so> ; # urn:openmixer:x\n' > "$scratch/t/src/x.ttl"
+    printf '// org.openmixer.x, @openmixer/x\n' > "$scratch/t/tools/gen.mjs"
+    printf '# Docs\n\nOpenMixer plugins.\n' > "$scratch/t/docs/a.md"
+    printf '/* x */\n' > "$scratch/t/src/x.h"; printf '#!/bin/sh\n# x\n' > "$scratch/t/tools/x.sh"; }
+  sab() { # <name> <file> <line>
+    mk; printf '%s\n' "$3" >> "$scratch/t/$2"; git -C "$scratch/t" add -A
+    if check "$scratch/t" >/dev/null 2>&1; then echo "SABOTAGE $1: STAYED GREEN"; fail=1; else echo "SABOTAGE $1: red"; fi; }
+  mk; git -C "$scratch/t" add -A
+  check "$scratch/t" >/dev/null || { echo "self-test: the clean tree is not green" >&2; exit 1; }
+  sab repo-in-header src/x.h                         '/* as FreeMixer/openmixer draws it */'
+  sab branch-in-sh   tools/x.sh                      '# drawn on integration/lean-engine'
+  sab issue-in-md    docs/a.md                       'see openmixer#1580'
+  sab path-in-md     docs/a.md                       'packages/web-ui/Foo.vue'
+  sab default-path   tools/x.sh                      'plugin=${P:-$root/../openmixer/packages/omx-plugins/bin/omx-delay.clap}'
+  sab ops-in-mjs     tools/gen.mjs                   '// see openmixer-ops'
+  sab dev-in-mjs     tools/gen.mjs                   '// omx-dsp-dev#32'
+  sab spec-in-mjs    tools/gen.mjs                   "// openmixer's spec 2026-10-09-plugin-from-contract.md"
+  sab ttl            src/x.ttl       'rdfs:comment "see FreeMixer/openmixer#12" ;'
+  sab header         src/x.h         '/* packages/core/src/x.ts */'
+  sab design-dir     docs/a.md                       'the notes in docs/design/specs'
+  sab harness-dir    tools/gen.mjs                   '// harness/dsp-check.sh'
+  mk; git -C "$scratch/t" add -A
+  if ( EXTRA_PATHSPEC=(":(bogus)x"); check "$scratch/t" >/dev/null 2>&1 ); then echo "SABOTAGE git-grep-error: STAYED GREEN"; fail=1; else echo "SABOTAGE git-grep-error: red"; fi
+  [ "$fail" = 0 ] || exit 1
+  check "$HERE" >/dev/null || { echo "self-test: the repository is not green" >&2; exit 1; }
+  echo "private-refs-check self-test: every sabotage red"
+  exit 0
+fi
+check "$HERE"