@quickchatai/quickreview 0.0.0-stage → 1.1.0

package/dist/src/openviking/lessonfind.js

@@ -0,0 +1,54 @@
+import { OpenVikingClient } from "./client.js";
+/**
+ * The lesson prefetch's OWN client: no `onRequest` (the memory-health
+ * window), no `onGap` (the counted `openviking_gap`). A shadow find aborted at
+ * the round's budget therefore never reads as memory failing.
+ */
+export function lessonFindClient(opts) {
+    // Copied without the two observers, so an options object that happens to
+    // carry one (a spread of the shared client's) still cannot pass it on.
+    const rest = { ...opts };
+    delete rest.onGap;
+    delete rest.onRequest;
+    return new OpenVikingClient(rest);
+}
+export function openVikingLessonEngine(client, store) {
+    return {
+        // The lesson find's limit is sized from the store's own count
+        // of the area (its last sweep — no request, no wait); a store that cannot
+        // count says unknown, and the find asks for the ceiling.
+        corpusSize: (area) => {
+            try {
+                return store.areaSize ? store.areaSize(area) : null;
+            }
+            catch {
+                return null;
+            }
+        },
+        root: () => client.memoriesRoot(),
+        async find(area, query, opts) {
+            try {
+                const res = await client.find(query, {
+                    targetUri: `${client.memoriesRoot()}/${area}`,
+                    limit: opts.limit,
+                    timeoutMs: opts.timeoutMs,
+                });
+                if (!res.ok)
+                    return { ok: false, reason: `find ${res.code}: ${res.message}` };
+                const hits = res.result.map((h) => ({
+                    uri: h.uri,
+                    score: h.score,
+                    text: h.text,
+                }));
+                return { ok: true, hits };
+            }
+            catch (err) {
+                return { ok: false, reason: String(err) };
+            }
+        },
+        // A failure rejects: the prefetch then records that the list did not
+        // arrive (the entries' own `#retired`/`#moved` headers still exclude).
+        retiredUris: () => store.retiredUris(),
+    };
+}
+//# sourceMappingURL=lessonfind.js.map

package/dist/src/openviking/lessonfind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lessonfind.js","sourceRoot":"","sources":["../../../src/openviking/lessonfind.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,gBAAgB,EAAgC,MAAM,aAAa,CAAC;AAO7E;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA6B;IAC5D,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,IAAI,GAA4B,EAAE,GAAI,IAAgC,EAAE,CAAC;IAC/E,OAAO,IAAI,CAAC,KAAK,CAAC;IAClB,OAAO,IAAI,CAAC,SAAS,CAAC;IACtB,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAuD,EACvD,KAAwF;IAExF,OAAO;QACL,8DAA8D;QAC9D,0EAA0E;QAC1E,yDAAyD;QACzD,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;YACnB,IAAI,CAAC;gBACH,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE;QACjC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;oBACnC,SAAS,EAAE,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,IAAI,EAAE;oBAC7C,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC9E,MAAM,IAAI,GAAc,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC7C,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,IAAI,EAAE,CAAC,CAAC,IAAI;iBACb,CAAC,CAAC,CAAC;gBACJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,qEAAqE;QACrE,uEAAuE;QACvE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;KACvC,CAAC;AACJ,CAAC"}

package/dist/src/openviking/probe.js

@@ -0,0 +1,89 @@
+import { OpenVikingClient, isAuthFailure, isNotFound, } from "./client.js";
+/** A plain key source as a probe key: `null`/empty is "no key", never absent. */
+export function probeKeyFrom(source) {
+    return () => {
+        const value = typeof source === "function" ? source() : source;
+        return { state: "key", key: value ?? "" };
+    };
+}
+/**
+ * Classify one listing answer. Exported so the classification is testable
+ * without a fetch:
+ *
+ *   * 2xx → `ok`;
+ *   * `NOT_FOUND` with a key → `ok` too: the server authenticates before it
+ *     resolves a path, so that envelope proves the key works and only says nothing has
+ *     created the root yet (a fresh server: empty is not degraded);
+ *   * 401/403, an auth code or "Invalid API Key" → `auth_failed`;
+ *   * `no_key` (nothing to send) → `no_key`;
+ *   * no answer at all → `unreachable`;
+ *   * anything else (5xx, 422, a body that is not an envelope) → `error`.
+ */
+export function classifyProbe(ok, status, code, message) {
+    if (ok)
+        return "ok";
+    if (code === "no_key")
+        return "no_key";
+    if (isAuthFailure(status, code, message))
+        return "auth_failed";
+    if (isNotFound(status, code))
+        return "ok";
+    if (status === 0)
+        return "unreachable";
+    return "error";
+}
+/**
+ * One credential's probe: `fs/ls` of `viking://user/<user>/memories` with that
+ * credential's key, classified. The client is built per call on purpose — a
+ * probe must not share a key cache, a gap sink or a request counter with the
+ * code it is checking (its own requests are counted by the monitor as `probe`).
+ */
+export function credentialProbe(opts) {
+    const clock = opts.clock ?? Date.now;
+    return async () => {
+        const k = opts.key();
+        if (k.state === "absent") {
+            return { result: "absent", status: 0, code: "absent", ms: 0, detail: "no credential file" };
+        }
+        if (k.state === "unreadable") {
+            return { result: "no_key", status: 0, code: "unreadable", ms: 0, detail: k.detail };
+        }
+        if (k.key.trim() === "") {
+            return { result: "no_key", status: 0, code: "no_key", ms: 0, detail: "no key in it" };
+        }
+        const client = new OpenVikingClient({
+            baseUrl: opts.baseUrl,
+            apiKey: k.key,
+            user: opts.user,
+            ...(opts.account ? { account: opts.account } : {}),
+            timeoutMs: opts.timeoutMs,
+            ...(opts.fetchFn ? { fetchFn: opts.fetchFn } : {}),
+        });
+        const started = clock();
+        let res;
+        try {
+            res = await client.ls(client.memoriesRoot());
+        }
+        catch (err) {
+            // `ls` is total; a caller-supplied fetch seam need not be.
+            return {
+                result: "unreachable",
+                status: 0,
+                code: "transport",
+                ms: clock() - started,
+                detail: err instanceof Error ? err.message : String(err),
+            };
+        }
+        const ms = clock() - started;
+        if (res.ok)
+            return { result: "ok", status: res.status, code: "", ms };
+        return {
+            result: classifyProbe(false, res.status, res.code, res.message),
+            status: res.status,
+            code: res.code,
+            ms,
+            detail: res.message,
+        };
+    };
+}
+//# sourceMappingURL=probe.js.map

package/dist/src/openviking/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../../src/openviking/probe.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,UAAU,GAGX,MAAM,aAAa,CAAC;AAsBrB,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,MAAiB;IAC5C,OAAO,GAAG,EAAE;QACV,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAC3B,EAAW,EACX,MAAc,EACd,IAAY,EACZ,OAAe;IAEf,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACvC,IAAI,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;QAAE,OAAO,aAAa,CAAC;IAC/D,IAAI,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAA4B;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC;IACrC,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACxF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC;YAClC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,CAAC,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC;QACxB,IAAI,GAAgD,CAAC;QACrD,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2DAA2D;YAC3D,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,CAAC;gBACT,IAAI,EAAE,WAAW;gBACjB,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO;gBACrB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;QAC7B,IAAI,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QACtE,OAAO;YACL,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC;YAC/D,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,EAAE;YACF,MAAM,EAAE,GAAG,CAAC,OAAO;SACpB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/openviking/proc.js

@@ -0,0 +1,95 @@
+// RSS + CPU sampling for the supervised OpenViking process.
+//
+// CPU is the cost to watch, not RAM: the server measured about 400 MiB idle /
+// 460 MiB warm against an 8 GiB container, but ~1.6 core-seconds per ~500 B
+// write on a 2-core quota. So the heartbeat carries both, and CPU is a RATE — which
+// needs two samples, hence the small stateful sampler rather than a pure read.
+//
+// Monitoring only: there is deliberately no RSS watchdog and no auto-restart
+// on a memory budget; do not add one under another name.
+import { readFileSync } from "node:fs";
+/** Linux USER_HZ. Fixed at 100 on every architecture Docker runs here. */
+const TICKS_PER_SEC = 100;
+/** Page size behind `/proc/<pid>/stat` field 24 (rss, in pages). */
+const PAGE_BYTES = 4096;
+/**
+ * Parse `/proc/<pid>/stat`.
+ *
+ * Field 2 (`comm`) is the executable name in parentheses and may contain
+ * spaces and parentheses, which is why this splits after the LAST `)` instead
+ * of tokenising the whole line — the classic way this parse goes wrong.
+ * Fields are 1-based per proc(5): 14 utime, 15 stime, 24 rss (pages).
+ */
+export function parseProcStat(raw) {
+    const close = raw.lastIndexOf(")");
+    if (close < 0)
+        return undefined;
+    // After the closing paren comes " S 4 5 …": rest[0] is field 3 (state).
+    const rest = raw
+        .slice(close + 1)
+        .trim()
+        .split(/\s+/);
+    const field = (n) => Number(rest[n - 3]);
+    const utimeTicks = field(14);
+    const stimeTicks = field(15);
+    const rssPages = field(24);
+    if (![utimeTicks, stimeTicks, rssPages].every((n) => Number.isFinite(n)))
+        return undefined;
+    return { utimeTicks, stimeTicks, rssPages };
+}
+/**
+ * Stateful `/proc` sampler: RSS straight off the read, CPU as a delta against
+ * the previous sample of the SAME pid. A pid change (i.e. a restart) resets the
+ * baseline, so a fresh child never inherits the dead one's tick counter.
+ */
+export class ProcSampler {
+    readStat;
+    now;
+    prev = null;
+    constructor(deps = {}) {
+        this.readStat =
+            deps.readStat ??
+                ((pid) => {
+                    try {
+                        return readFileSync(`/proc/${pid}/stat`, "utf8");
+                    }
+                    catch {
+                        return undefined;
+                    }
+                });
+        this.now = deps.now ?? (() => Date.now());
+    }
+    /** Never throws; undefined simply means "no numbers this tick". */
+    sample(pid) {
+        let stat;
+        try {
+            const raw = this.readStat(pid);
+            stat = raw ? parseProcStat(raw) : undefined;
+        }
+        catch {
+            stat = undefined;
+        }
+        if (!stat) {
+            this.prev = null;
+            return undefined;
+        }
+        const at = this.now();
+        const ticks = stat.utimeTicks + stat.stimeTicks;
+        const prev = this.prev;
+        this.prev = { pid, ticks, at };
+        const out = { rss_bytes: stat.rssPages * PAGE_BYTES };
+        if (prev && prev.pid === pid && at > prev.at) {
+            const coreSeconds = (ticks - prev.ticks) / TICKS_PER_SEC;
+            const wallSeconds = (at - prev.at) / 1000;
+            // Counters are monotonic; a negative delta means the pid was recycled.
+            if (coreSeconds >= 0)
+                out.cpu_pct = Math.round((coreSeconds / wallSeconds) * 1000) / 10;
+        }
+        return out;
+    }
+    /** Drop the baseline (called on every respawn). */
+    reset() {
+        this.prev = null;
+    }
+}
+//# sourceMappingURL=proc.js.map

package/dist/src/openviking/proc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proc.js","sourceRoot":"","sources":["../../../src/openviking/proc.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,oFAAoF;AACpF,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,yDAAyD;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,0EAA0E;AAC1E,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,oEAAoE;AACpE,MAAM,UAAU,GAAG,IAAI,CAAC;AAQxB;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChC,wEAAwE;IACxE,MAAM,IAAI,GAAG,GAAG;SACb,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;SAChB,IAAI,EAAE;SACN,KAAK,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3F,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC;AASD;;;;GAIG;AACH,MAAM,OAAO,WAAW;IACL,QAAQ,CAAsC;IAC9C,GAAG,CAAe;IAC3B,IAAI,GAAsD,IAAI,CAAC;IAEvE,YAAY,OAAwB,EAAE;QACpC,IAAI,CAAC,QAAQ;YACX,IAAI,CAAC,QAAQ;gBACb,CAAC,CAAC,GAAW,EAAsB,EAAE;oBACnC,IAAI,CAAC;wBACH,OAAO,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;oBACnD,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,SAAS,CAAC;oBACnB,CAAC;gBACH,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,mEAAmE;IACnE,MAAM,CAAC,GAAW;QAChB,IAAI,IAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAE/B,MAAM,GAAG,GAAe,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC;QAClE,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC;YACzD,MAAM,WAAW,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;YAC1C,uEAAuE;YACvE,IAAI,WAAW,IAAI,CAAC;gBAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1F,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mDAAmD;IACnD,KAAK;QACH,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/src/openviking/provisionreport.js

@@ -0,0 +1,144 @@
+// The boot provisioning report, read by the daemon.
+//
+// `scripts/openviking-provision.mjs` runs in the entrypoint before the daemon
+// exists. What it finds — a reviewer key that does not authenticate, a user it
+// could not create, a user it had to CREATE (which means the server lost it —
+// the key the server minted for the new user is discarded, by design, so every
+// distributed copy of the old key is now wrong) — must reach a person, and
+// nobody reads a boot log. So the script writes
+// `state/openviking/provision.json`; the daemon reads it once at boot, puts it
+// in status.json `memory.provision`, and wakes `memory_provision_failed` when
+// it says anything is wrong. The "never mint, never rotate" rule holds:
+// a recreated user is SURFACED, loudly, never repaired here.
+//
+// The report carries no key — the script never writes one anywhere.
+import { createHash } from "node:crypto";
+import { readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { MEMORY_WAKE } from "../memory/health.js";
+/** Where the script writes its report, relative to the sandbox root (the
+ * script resolves the same path from its own location — see
+ * `provisionReportPath` in `scripts/openviking-provision.mjs`). */
+export function provisionReportPath(root) {
+    return join(root, "state", "openviking", "provision.json");
+}
+function strings(v) {
+    return Array.isArray(v) ? v.filter((x) => typeof x === "string") : [];
+}
+/** A file that could not be READ still has an identity: what stat says, or
+ * the error itself — so the once-per-report mark holds for it too. */
+function unreadIdentity(path, err) {
+    try {
+        const st = statSync(path);
+        return `stat:${st.ino}:${st.size}:${st.mtimeMs}`;
+    }
+    catch {
+        return `error:${err.code ?? "unknown"}`;
+    }
+}
+/** Read and classify the report. Total: a missing file is `absent`, a file
+ * that is not a report is `unreadable` — never a throw, never "ok". Every
+ * report that exists carries an `id` (a fingerprint of its bytes), which is
+ * what makes the wake fire ONCE per report — a file with no parseable `at`
+ * included, which would otherwise wake again on every daemon restart. */
+export function readProvisionReport(path) {
+    let raw;
+    try {
+        raw = readFileSync(path, "utf8");
+    }
+    catch (err) {
+        return err.code === "ENOENT"
+            ? { state: "absent" }
+            : {
+                state: "unreadable",
+                id: unreadIdentity(path, err),
+                errors: [String(err.message ?? err)],
+            };
+    }
+    const id = `sha256:${createHash("sha256").update(raw).digest("hex").slice(0, 16)}`;
+    let body;
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+            throw new Error("not an object");
+        body = parsed;
+    }
+    catch (err) {
+        return { state: "unreadable", id, errors: [`provision.json is not a report: ${String(err)}`] };
+    }
+    if (typeof body["ok"] !== "boolean") {
+        return { state: "unreadable", id, errors: ["provision.json carries no ok verdict"] };
+    }
+    return {
+        state: body["ok"] === true ? "ok" : "failed",
+        id,
+        ...(typeof body["at"] === "string" ? { at: body["at"] } : {}),
+        created: strings(body["created"]),
+        failed: strings(body["failed"]),
+        ...(typeof body["reviewer"] === "string" ? { reviewer: body["reviewer"] } : {}),
+        errors: strings(body["errors"]),
+    };
+}
+/**
+ * The wake a report calls for, or null. Wakes on a failed report, an
+ * unreadable one, and — even when the report says ok — on any user the boot
+ * had to CREATE: on a running install a user only goes missing when the store
+ * lost it, and the server's fresh key for it was discarded (never replace a
+ * distributed key), so whoever holds the old key is now locked out.
+ */
+export function provisionWake(s) {
+    if (s.state === "absent")
+        return null;
+    const created = s.created ?? [];
+    if (s.state === "ok" && created.length === 0)
+        return null;
+    const errors = s.errors ?? [];
+    const what = s.state === "unreadable"
+        ? "the boot provisioning report could not be read"
+        : s.state === "failed"
+            ? "boot provisioning FAILED"
+            : `boot provisioning had to CREATE ${created.join(", ")}`;
+    const detail = [
+        what,
+        ...(created.length > 0 && s.state !== "ok" ? [`created: ${created.join(", ")}`] : []),
+        ...((s.failed ?? []).length > 0 ? [`not ensured: ${s.failed.join(", ")}`] : []),
+        ...(s.reviewer && s.reviewer !== "reach" ? [`reviewer key: ${s.reviewer}`] : []),
+        ...errors.slice(0, 4),
+    ].join("; ");
+    return {
+        kind: MEMORY_WAKE.provision,
+        detail,
+        message: [
+            `MEMORY PROVISIONING — ${what}${s.at ? ` (report ${s.at})` : ""}.`,
+            ...errors.slice(0, 6).map((e) => `  ${e}`),
+            ...(created.length > 0
+                ? [
+                    `A user that had to be created (${created.join(", ")}) means the server lost it: the key it minted for the new user was discarded on purpose (keys are never rotated from here), so every distributed copy of the OLD key no longer authenticates. Re-mint and re-distribute through the onboarding memory step (docs/companion-memory-access.md) — on a first install this is expected once.`,
+                ]
+                : []),
+            "Rounds are not blocked; memory degrades until this is fixed. The report rides status.json `memory.provision`.",
+        ].join("\n"),
+    };
+}
+/** The event that marks a report as already woken on (its payload's `id`). */
+export const PROVISION_WOKEN_EVENT = "memory_provision_woken";
+/**
+ * The daemon's boot step over this boot's report: raise `memory_provision_failed`
+ * through the anomaly funnel when the report calls for it — ONCE per report.
+ * The report's `id` is the key (its timestamp is not enough: a file that cannot
+ * be parsed has none), recorded in `memory_provision_woken`, so a daemon
+ * restart inside the same container never repeats a wake for the same file.
+ * Returns whether it woke.
+ */
+export function raiseProvisionWake(store, s) {
+    const wake = provisionWake(s);
+    if (!wake)
+        return false;
+    const key = s.id ?? s.at ?? null;
+    if (key !== null && store.lastEventPayload(PROVISION_WOKEN_EVENT)?.["id"] === key)
+        return false;
+    store.logAnomaly(wake.kind, null, null, wake.detail, wake.message);
+    store.logEvent(PROVISION_WOKEN_EVENT, null, { id: key, at: s.at ?? null, state: s.state });
+    return true;
+}
+//# sourceMappingURL=provisionreport.js.map

package/dist/src/openviking/provisionreport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisionreport.js","sourceRoot":"","sources":["../../../src/openviking/provisionreport.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,gDAAgD;AAChD,+EAA+E;AAC/E,8EAA8E;AAC9E,wEAAwE;AACxE,6DAA6D;AAC7D,EAAE;AACF,oEAAoE;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAyB,MAAM,qBAAqB,CAAC;AAEzE;;mEAEmE;AACnE,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrF,CAAC;AAED;sEACsE;AACtE,SAAS,cAAc,CAAC,IAAY,EAAE,GAAY;IAChD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAU,GAA6B,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;;;yEAIyE;AACzE,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,QAAQ;YACrD,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE;YACrB,CAAC,CAAC;gBACE,KAAK,EAAE,YAAY;gBACnB,EAAE,EAAE,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC;gBAC7B,MAAM,EAAE,CAAC,MAAM,CAAE,GAAa,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;aAChD,CAAC;IACR,CAAC;IACD,MAAM,EAAE,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACnF,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,IAAI,GAAG,MAAiC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,mCAAmC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,sCAAsC,CAAC,EAAE,CAAC;IACvF,CAAC;IACD,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;QAC5C,EAAE;QACF,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,CAAmB;IAEnB,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;IAC9B,MAAM,IAAI,GACR,CAAC,CAAC,KAAK,KAAK,YAAY;QACtB,CAAC,CAAC,gDAAgD;QAClD,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ;YACpB,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG;QACb,IAAI;QACJ,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO;QACL,IAAI,EAAE,WAAW,CAAC,SAAS;QAC3B,MAAM;QACN,OAAO,EAAE;YACP,yBAAyB,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG;YAClE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBACpB,CAAC,CAAC;oBACE,kCAAkC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,0UAA0U;iBAC/X;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,+GAA+G;SAChH,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAgB9D;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAyB,EAAE,CAAmB;IAC/E,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC;IACjC,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAChG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACnE,KAAK,CAAC,QAAQ,CAAC,qBAAqB,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC;AACd,CAAC"}