@quickchatai/quickreview 0.0.0-stage → 1.1.0

package/dist/extensions/vendor/openviking-pi/qcr-hint.js

@@ -0,0 +1,290 @@
+// QCR FORK — file added by PATCH 8 (PR-derived recall). Not upstream.
+// a PR session's per-prompt recall searches for ITS PR, and only
+// where a round may look.
+//
+// The pure half, kept free of pi and of the OV client so
+// `tests/openviking-fork.test.ts` can exercise it (`index.ts` cannot be
+// imported from a test).
+//
+// Upstream recalls with the whole delivered prompt. For a PR session that is
+// a 55–80k-character round order, and the local embedder (S4) embeds a query's
+// first 128 tokens — the template's fixed header, the same for every PR, so
+// every PR recalled the same ops notes and feedback events. The daemon already
+// builds a PR-derived query for the round's own context block (the PR title
+// plus the areas and file kinds it touches — `roundContextQuery`,
+// src/memory/context.ts) and publishes it, with the areas a round may search
+// (`experiences/` alone), to a per-session file (`QCR_OV_RECALL_HINT_FILE`).
+// The recall here uses that query and stays inside those areas; with no hint
+// (the overseer, the companion, a session born before its first round) it
+// recalls exactly as before. S3's 500 ms budget is unchanged — the hint
+// changes what is asked, never how long it may take.
+//
+// [QCR PATCH 9] (S7) The same areas bound the session's memory
+// TOOLS: in a PR session `viking_search` keeps only hits inside them and
+// `viking_read` / `viking_browse` refuse a memory URI outside them. Cases
+// (`finding-cases/`, the daemon's finding cases — human replies quoted as data) and
+// feedback events are the learner's context, not a round's, until S9.
+//
+// [QCR PATCH 11] (integration review) Three holes in that boundary:
+//   * the RECALL failed OPEN: a PR session whose hint was not written yet (a
+//     recheck or ping-pong wake before its next full round — every live PR
+//     right after the deploy) recalled across the whole tree, cases and
+//     feedback events included. It now fails CLOSED, as the tools always did
+//     (`recallScope`);
+//   * a scoped SEARCH asked the server for a global top-K and filtered after:
+//     with ~1,800 cases beside ~180 curated entries, the top 10 was mostly
+//     cases and the session's search said "No results found." Both the tool
+//     and the recall's raw-find fallback now name the areas as the server's
+//     `target_uri` list (`scopedFindTargets`, `scopeGuard`);
+//   * a PR session could WRITE a lesson or a pinned entry from its own
+//     conclusions while reading untrusted PR text: `viking_write` now refuses
+//     `experiences/`, `preferences/` (the pinned head included) and
+//     `finding-cases/` in a scoped session (`scopedWriteRefusal`).
+import { readFileSync } from "node:fs";
+import { renderContextEntry } from "./qcr-recall.js";
+/** Where the daemon publishes this session's hint (PR sessions only). */
+export const RECALL_HINT_FILE_ENV = "QCR_OV_RECALL_HINT_FILE";
+/** [QCR PATCH 11] What one recall asks and where: the hint's query and
+ * areas when the daemon published one; for a PR session (the hint variable
+ * set) whose hint cannot be read, the prompt INSIDE the round's areas — never
+ * the whole tree; for any other session (no variable: the overseer, the
+ * companion) the prompt, unscoped, as upstream. Total. */
+export function recallScope(path, prompt, read = defaultRead) {
+    const hint = readRecallHint(path, read);
+    if (hint)
+        return { query: hint.query, areas: hint.areas };
+    if (!path || path.trim() === "")
+        return { query: prompt, areas: null };
+    return { query: prompt, areas: toolScopeAreas(path, read) ?? DEFAULT_ROUND_AREAS };
+}
+/** The daemon caps its query at 600 characters (`ROUND_CONTEXT_DEFAULTS`);
+ * a longer one in the file is cut, not refused. */
+export const MAX_HINT_QUERY_CHARS = 600;
+/** Items per area when the request names no count of its own. */
+export const DEFAULT_AREA_QUOTA = 10;
+const AREA_RE = /^[a-z][a-z0-9_-]*$/;
+/**
+ * The hint the daemon published (`{"query": "...", "areas": ["..."]}`), or
+ * null. Total, and fail-closed toward the old behaviour: no path, no file, a
+ * garbled file, an empty query or no usable area all mean "no hint" — the
+ * recall then uses the prompt, as upstream did.
+ */
+export function readRecallHint(path, read = defaultRead) {
+    if (!path || path.trim() === "")
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(read(path.trim()));
+    }
+    catch {
+        return null;
+    }
+    const raw = parsed;
+    const query = typeof raw?.query === "string"
+        ? raw.query.replace(/\s+/g, " ").trim().slice(0, MAX_HINT_QUERY_CHARS)
+        : "";
+    if (query === "")
+        return null;
+    const areas = Array.isArray(raw?.areas)
+        ? [...new Set(raw.areas.filter((a) => typeof a === "string" && AREA_RE.test(a)))]
+        : [];
+    if (areas.length === 0)
+        return null;
+    return { query, areas };
+}
+function defaultRead(p) {
+    return readFileSync(p, "utf8");
+}
+/** Is this URI inside one of the areas? */
+export function inAreas(uri, areas) {
+    return typeof uri === "string" && areas.some((a) => uri.includes(`/memories/${a}/`));
+}
+const CONTEXT_PATHS = new Set(["/api/v1/search/search", "/api/v1/search/recall"]);
+const FIND_PATH = "/api/v1/search/find";
+/**
+ * Every recall request this fetch carries stays inside `areas`:
+ *   * a context search or the `/search/recall` preset is SENT quotas naming
+ *     those areas alone (the count is the request's own `limit`, else
+ *     `DEFAULT_AREA_QUOTA`) — so the server never fills the block from
+ *     events, preferences or the resources/skills blurbs;
+ *   * whatever comes back from elsewhere anyway is DROPPED, and the rendered
+ *     block is rebuilt from what is left;
+ *   * the raw-find fallback keeps only memories inside the areas, and no
+ *     resources or skills.
+ * `areas()` empty or null = no scoping (the request goes out untouched).
+ */
+export function scopeGuard(inner, areas) {
+    return async (path, init, options) => {
+        let scope = [];
+        try {
+            scope = areas() ?? [];
+        }
+        catch {
+            scope = [];
+        }
+        if (scope.length === 0)
+            return inner(path, init, options);
+        let sent = init;
+        if (CONTEXT_PATHS.has(path) && typeof init?.body === "string") {
+            try {
+                const body = JSON.parse(init.body);
+                if (path !== "/api/v1/search/search" || body["mode"] === "context") {
+                    const n = Math.max(1, Math.floor(Number(body["limit"]) || DEFAULT_AREA_QUOTA));
+                    body["quotas"] = Object.fromEntries(scope.map((a) => [a, n]));
+                    sent = { ...init, body: JSON.stringify(body) };
+                }
+            }
+            catch {
+                sent = init;
+            }
+        }
+        // [QCR PATCH 11] The raw-find fallback names its target: a memories ROOT
+        // becomes the areas inside it (one request, a `target_uri` list — the
+        // server ranks inside them, so cases can never crowd a lesson out of the
+        // top K), and the skills source is not asked at all.
+        if (path === FIND_PATH && typeof init?.body === "string") {
+            try {
+                const body = JSON.parse(init.body);
+                const target = typeof body["target_uri"] === "string" ? body["target_uri"] : "";
+                if (target !== "" && memoryAreaOf(target) === null)
+                    return { ok: true, status: 200, result: { memories: [], resources: [], skills: [] } };
+                if (target === "" || memoryAreaOf(target) === "") {
+                    body["target_uri"] = scopedFindTargets(scope, target === "" ? undefined : target);
+                    sent = { ...init, body: JSON.stringify(body) };
+                }
+            }
+            catch {
+                sent = init;
+            }
+        }
+        const res = await inner(path, sent, options);
+        if (!res?.ok || !res.result || typeof res.result !== "object")
+            return res;
+        if (CONTEXT_PATHS.has(path) && Array.isArray(res.result.entries)) {
+            const entries = res.result.entries;
+            const kept = entries.filter((e) => inAreas(e?.["uri"], scope));
+            if (kept.length === entries.length)
+                return res;
+            return {
+                ...res,
+                result: {
+                    ...res.result,
+                    entries: kept,
+                    rendered: kept.map(renderContextEntry).join("\n"),
+                    digest: "",
+                },
+            };
+        }
+        if (path === FIND_PATH) {
+            const memories = Array.isArray(res.result.memories)
+                ? res.result.memories.filter((m) => inAreas(m?.["uri"], scope))
+                : res.result.memories;
+            return { ...res, result: { ...res.result, memories, resources: [], skills: [] } };
+        }
+        return res;
+    };
+}
+// ---- [QCR PATCH 9] the memory TOOLS of a PR session --------------------------
+/** The areas a PR session's tools are held to when its hint cannot be read
+ * (a session born before its first round): the round's own areas — the
+ * daemon's `ROUND_SEARCH_AREAS` (src/memory/layout.ts), pinned equal by test. */
+export const DEFAULT_ROUND_AREAS = ["experiences"];
+/**
+ * The memory areas this session's TOOLS may reach, or null for no scoping.
+ * The hint variable is set on a PR session only (src/memory/ovsession.ts); a
+ * session without it — the overseer, the companion — is unscoped, as
+ * upstream. Unlike the recall, a PR session whose hint cannot be read FAILS
+ * CLOSED to the round's areas: a recall without a hint merely asks a worse
+ * question, while a tool reaching a case is exactly what is being prevented.
+ * Total: never throws.
+ */
+export function toolScopeAreas(path, read = defaultRead) {
+    if (!path || path.trim() === "")
+        return null;
+    try {
+        const raw = JSON.parse(read(path.trim()));
+        const areas = Array.isArray(raw?.areas)
+            ? [...new Set(raw.areas.filter((a) => typeof a === "string" && AREA_RE.test(a)))]
+            : [];
+        if (areas.length > 0)
+            return areas;
+    }
+    catch {
+        // the round's areas, below
+    }
+    return DEFAULT_ROUND_AREAS;
+}
+/** The memory area a viking:// URI addresses — `experiences` for
+ * `viking://user/reviewer/memories/experiences/x.md`, "" for the memories
+ * root itself — or null for a URI outside memories. */
+export function memoryAreaOf(uri) {
+    const i = uri.indexOf("/memories");
+    if (i < 0)
+        return null;
+    const rest = uri.slice(i + "/memories".length);
+    if (rest !== "" && !rest.startsWith("/"))
+        return null;
+    return rest.replace(/^\/+/, "").split(/[/?#]/)[0] ?? "";
+}
+/** A `.`/`..` path segment, or an encoded dot — never resolved, never let by. */
+const DOT_SEGMENT = /(^|\/)\.\.?(\/|$)|%2e/i;
+/** May a scoped session READ this URI, or see it as a search hit? Only
+ * inside one of its areas. */
+export function readableInScope(uri, areas) {
+    if (typeof uri !== "string" || DOT_SEGMENT.test(uri))
+        return false;
+    const area = memoryAreaOf(uri);
+    return area !== null && area !== "" && areas.includes(area);
+}
+/** May a scoped session LIST (or scope a search to) this URI? Inside one of
+ * its areas, the memories root (which names the areas, nothing in them), or
+ * a URI outside memories altogether. */
+export function browsableInScope(uri, areas) {
+    if (typeof uri !== "string" || DOT_SEGMENT.test(uri))
+        return false;
+    const area = memoryAreaOf(uri);
+    return area === null || area === "" || areas.includes(area);
+}
+/** [QCR PATCH 11] Where a scoped session's search is sent: the model's own
+ * scope when it lies inside one of the areas, else every area under the
+ * memories root it named (or the user's own, `viking://user/memories`) — a
+ * `target_uri` list, so the server ranks INSIDE the areas rather than across
+ * the whole tree with the rest filtered away afterwards. */
+export function scopedFindTargets(areas, scope) {
+    if (typeof scope === "string" && readableInScope(scope, areas))
+        return [scope];
+    let root = "viking://user/memories";
+    if (typeof scope === "string" && memoryAreaOf(scope) === "" && !DOT_SEGMENT.test(scope))
+        root = scope.replace(/\/+$/, "");
+    return areas.map((a) => `${root}/${a}`);
+}
+/** [QCR PATCH 11] The memory areas a scoped (PR) session may never write:
+ * curated lessons and the owner's words — both reach every round — and the
+ * daemon's own finding cases. A review session reads untrusted PR text; what
+ * it concludes is not a lesson until a person's outcome makes it one. */
+export const SCOPED_WRITE_REFUSED_AREAS = [
+    "experiences",
+    "preferences",
+    "finding-cases",
+];
+/** The refusal for a scoped session's write into a protected area, or null. */
+export function scopedWriteRefusal(uris) {
+    const hit = uris.find((u) => {
+        const area = memoryAreaOf(u);
+        return area !== null && SCOPED_WRITE_REFUSED_AREAS.includes(area);
+    });
+    if (hit === undefined)
+        return null;
+    return (`Refusing to write ${hit}: a review session does not write ${SCOPED_WRITE_REFUSED_AREAS.map((a) => `${a}/`).join(", ")} — ` +
+        "lessons are curated from people's outcomes at the end of the day, the pinned instructions are the owner's, and cases are the daemon's. Nothing was written.");
+}
+/** The sentence a refused tool call answers with. */
+export function scopeRefusal(uri, areas) {
+    return (`${uri} is outside this review session's memory (${areas.map((a) => `${a}/`).join(", ")}). ` +
+        "A review round reads curated lessons only; finding cases and feedback events are not its to read.");
+}
+/** One line for the system prompt of a scoped session. */
+export function toolScopeNote(areas) {
+    return `In this review session the memory tools reach ${areas.map((a) => `${a}/`).join(", ")} only.`;
+}
+//# sourceMappingURL=qcr-hint.js.map

package/dist/extensions/vendor/openviking-pi/qcr-hint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qcr-hint.js","sourceRoot":"","sources":["../../../../extensions/vendor/openviking-pi/qcr-hint.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,iEAAiE;AACjE,0BAA0B;AAC1B,EAAE;AACF,yDAAyD;AACzD,wEAAwE;AACxE,yBAAyB;AACzB,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAC/E,4EAA4E;AAC5E,kEAAkE;AAClE,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,0EAA0E;AAC1E,wEAAwE;AACxE,qDAAqD;AACrD,EAAE;AACF,+DAA+D;AAC/D,yEAAyE;AACzE,0EAA0E;AAC1E,oFAAoF;AACpF,sEAAsE;AACtE,EAAE;AACF,oEAAoE;AACpE,6EAA6E;AAC7E,2EAA2E;AAC3E,wEAAwE;AACxE,6EAA6E;AAC7E,uBAAuB;AACvB,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,6DAA6D;AAC7D,uEAAuE;AACvE,8EAA8E;AAC9E,oEAAoE;AACpE,mEAAmE;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAkB,MAAM,iBAAiB,CAAC;AAErE,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAE9D;;;;0DAI0D;AAC1D,MAAM,UAAU,WAAW,CACzB,IAAwB,EACxB,MAAc,EACd,OAA8B,WAAW;IAEzC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC1D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;AACrF,CAAC;AAED;mDACmD;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAExC,iEAAiE;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAQrC,MAAM,OAAO,GAAG,oBAAoB,CAAC;AAErC;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAwB,EACxB,OAA8B,WAAW;IAEzC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,MAAqD,CAAC;IAClE,MAAM,KAAK,GACT,OAAO,GAAG,EAAE,KAAK,KAAK,QAAQ;QAC5B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC;QACtE,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;QACrC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,OAAO,CAAC,GAAY,EAAE,KAAwB;IAC5D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAClF,MAAM,SAAS,GAAG,qBAAqB,CAAC;AAExC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CAAC,KAAgB,EAAE,KAAqC;IAChF,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QACnC,IAAI,KAAK,GAAsB,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,EAAE,CAAC;QACb,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAA4B,CAAC;gBAC9D,IAAI,IAAI,KAAK,uBAAuB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;oBACnE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC;oBAC/E,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9D,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,yEAAyE;QACzE,sEAAsE;QACtE,yEAAyE;QACzE,qDAAqD;QACrD,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAA4B,CAAC;gBAC9D,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,IAAI,MAAM,KAAK,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,IAAI;oBAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;gBACxF,IAAI,MAAM,KAAK,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;oBACjD,IAAI,CAAC,YAAY,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBAClF,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;QAC1E,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAyC,CAAC;YACrE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;gBAAE,OAAO,GAAG,CAAC;YAC/C,OAAO;gBACL,GAAG,GAAG;gBACN,MAAM,EAAE;oBACN,GAAG,GAAG,CAAC,MAAM;oBACb,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBACjD,MAAM,EAAE,EAAE;iBACX;aACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACjD,CAAC,CAAE,GAAG,CAAC,MAAM,CAAC,QAA2C,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACnE,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAC3B;gBACH,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YACxB,OAAO,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QACpF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;iFAEiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAsB,CAAC,aAAa,CAAC,CAAC;AAEtE;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAwB,EACxB,OAA8B,WAAW;IAEzC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAA+B,CAAC;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;YACrC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9F,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;uDAEuD;AACvD,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,iFAAiF;AACjF,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C;8BAC8B;AAC9B,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,KAAwB;IACpE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED;;wCAEwC;AACxC,MAAM,UAAU,gBAAgB,CAAC,GAAY,EAAE,KAAwB;IACrE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED;;;;4DAI4D;AAC5D,MAAM,UAAU,iBAAiB,CAAC,KAAwB,EAAE,KAAc;IACxE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/E,IAAI,IAAI,GAAG,wBAAwB,CAAC;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QACrF,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;yEAGyE;AACzE,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,aAAa;IACb,aAAa;IACb,eAAe;CAChB,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,IAAI,KAAK,IAAI,IAAI,0BAA0B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,CACL,qBAAqB,GAAG,qCAAqC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;QAC3H,6JAA6J,CAC9J,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,KAAwB;IAChE,OAAO,CACL,GAAG,GAAG,6CAA6C,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;QAC5F,mGAAmG,CACpG,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,aAAa,CAAC,KAAwB;IACpD,OAAO,iDAAiD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;AACvG,CAAC"}

package/dist/extensions/vendor/openviking-pi/qcr-honest.js

@@ -0,0 +1,148 @@
+// QCR FORK — file added by PATCH 6 (writes that stick, errors that say so).
+// Not upstream. S2.
+//
+// The pure half of three fixes, kept free of pi and of the OV client so
+// `tests/openviking-fork.test.ts` can exercise it (`tools.ts` cannot be
+// imported from a test: it pulls `typebox` and `@earendil-works/pi-ai`).
+//
+// 1. A BUSY 409 IS RETRIED, A PRECONDITION 409 IS NOT. The server's
+//    batch-write takes a zero-timeout try-lock on its root directory; a
+//    second writer into the same directory gets `409 CONFLICT` with
+//    `details.conflict_type = "path_busy"` and `retryable: true` — nothing was
+//    checked and nothing was written (server/error_mapping.py). The tool used
+//    to tell the model "someone else edited the file — re-read it, never
+//    retry", for a file nobody had touched: 6 of the 8 EOD writes on
+//    2026-10-05 died that way. `withBusyRetry` retries ONLY that answer,
+//    jittered and bounded (≤10 s in total); a hash-precondition 409 carries
+//    the same status and code but no `path_busy`, and stays a refusal.
+// 2. AN ERROR IS NEVER "NO RESULTS". `find()` turned every failure — a
+//    refused key included — into an empty list, so `viking_search` said "No
+//    results found." through five weeks of `Invalid API Key` (every PR-session
+//    memory call in history returned that, or "No content at …").
+//    `failureText` names what actually happened, and says plainly that it is
+//    an outage, not an empty answer.
+// 3. A ROTATED KEY IS PICKED UP. The extension reads its key once, at load;
+//    the daemon rewrites the sessions' ovcli.conf when its key changes
+//    (S1), but a running session kept sending the dead one.
+//    `shouldRekey` is the rule the client applies on an auth failure: re-read
+//    the credential once, and retry once only if it actually changed.
+/** The `details.conflict_type` the server stamps on a lock it could not take. */
+export const BUSY_CONFLICT_TYPE = "path_busy";
+/** Retry bound for a busy answer: at most `retries` more attempts, the n-th
+ * after a jittered `min(capMs, baseMs·2ⁿ)` wait (half to all of it), never
+ * past `budgetMs` from the first attempt. Mirrors the daemon client's
+ * `BUSY_RETRY_DEFAULTS` (src/openviking/client.ts) — two processes, one rule. */
+export const BUSY_RETRY = Object.freeze({
+    retries: 4,
+    baseMs: 250,
+    capMs: 2000,
+    budgetMs: 10_000,
+});
+/** Is this answer the server's "directory busy, try again"? Keyed on
+ * `details.conflict_type` alone — never the message, never the status alone. */
+export function isBusy(res) {
+    if (res.ok || res.status !== 409)
+        return false;
+    const error = res.error;
+    if (!error || typeof error !== "object")
+        return false;
+    const details = error.details;
+    if (!details || typeof details !== "object")
+        return false;
+    return details.conflict_type === BUSY_CONFLICT_TYPE;
+}
+/** Is this answer a precondition refusal — a 409 that is NOT busy? */
+export function isPreconditionConflict(res) {
+    return !res.ok && res.status === 409 && !isBusy(res);
+}
+/** The wait before busy retry `retry` (0-based). Pure — `random` injected. */
+export function busyDelay(retry, random = Math.random) {
+    const step = Math.min(BUSY_RETRY.capMs, BUSY_RETRY.baseMs * 2 ** Math.max(0, retry));
+    const r = Math.min(1, Math.max(0, random()));
+    return Math.round(step * (0.5 + r / 2));
+}
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+/**
+ * Run `attempt` and retry it while — and only while — it answers busy, within
+ * `BUSY_RETRY`. Safe for any request: a busy answer means the server took no
+ * lock, so it checked and wrote nothing, and a repeat cannot double a write.
+ */
+export async function withBusyRetry(attempt, hooks = {}) {
+    const sleep = hooks.sleep ?? defaultSleep;
+    const random = hooks.random ?? Math.random;
+    const now = hooks.now ?? Date.now;
+    const started = now();
+    for (let retry = 0;; retry += 1) {
+        const res = await attempt();
+        if (!isBusy(res))
+            return { ...res, busyRetries: retry, stillBusy: false };
+        const delay = busyDelay(retry, random);
+        if (retry >= BUSY_RETRY.retries || now() - started + delay > BUSY_RETRY.budgetMs) {
+            return { ...res, busyRetries: retry, stillBusy: true };
+        }
+        await sleep(delay);
+    }
+}
+/** Server error codes that mean "this key does not authenticate here". */
+const AUTH_CODES = new Set([
+    "UNAUTHENTICATED",
+    "UNAUTHORIZED",
+    "PERMISSION_DENIED",
+    "FORBIDDEN",
+    "INVALID_API_KEY",
+]);
+function errorField(error, field) {
+    if (!error || typeof error !== "object")
+        return "";
+    const v = error[field];
+    return typeof v === "string" ? v : "";
+}
+/** A refused key: 401/403, an auth code, or the 0.4.15 server's own words
+ * ("Invalid API Key"), which it has been seen to send inside an error
+ * envelope. Same rule as the daemon's `isAuthFailure`. */
+export function isAuthFailure(res) {
+    if (res.ok)
+        return false;
+    if (res.status === 401 || res.status === 403)
+        return true;
+    if (AUTH_CODES.has(errorField(res.error, "code").toUpperCase()))
+        return true;
+    return /invalid api key|unauthenticated|unauthori[sz]ed/i.test(errorField(res.error, "message"));
+}
+/** Should an auth failure be retried with a re-read key? Only once, and only
+ * when the credential source actually yields a DIFFERENT, non-empty key —
+ * re-sending the refused one would just be a second refusal. */
+export function shouldRekey(res, current, reread) {
+    return isAuthFailure(res) && reread !== "" && reread !== current;
+}
+/** Is this answer a NOT_FOUND — the path is not there (an authenticated
+ * answer, not an outage)? */
+export function isNotFound(res) {
+    return !res.ok && (res.status === 404 || errorField(res.error, "code") === "NOT_FOUND");
+}
+/**
+ * The honest sentence for a failed call, rendered to the model verbatim.
+ * `what` completes "nothing was …" — `searched`, `read`, `listed`, `written`.
+ * Never "No results found": an outage must not read like an empty memory.
+ */
+export function failureText(res, what) {
+    const status = res.status ?? 0;
+    const code = errorField(res.error, "code");
+    const message = errorField(res.error, "message").slice(0, 300);
+    const said = [status ? `HTTP ${status}` : "", code].filter((x) => x !== "").join(" ");
+    if (isAuthFailure(res)) {
+        return (`OpenViking REFUSED this session's key (${said || "auth"}${message ? `: ${message}` : ""}) — ` +
+            `memory is unavailable to this session, so nothing was ${what}. ` +
+            "This is an outage, not an empty result; the daemon's memory health reports it.");
+    }
+    if (isBusy(res) || res.stillBusy) {
+        return (`OpenViking kept that memory directory busy (409 ${BUSY_CONFLICT_TYPE}) past the retry budget — ` +
+            `nothing was ${what}. Nobody's edit was refused: another write held the lock. Try again in a minute.`);
+    }
+    if (status === 0) {
+        return (`OpenViking did not answer (${message || "no response"}) — nothing was ${what}. ` +
+            "This is an outage, not an empty result.");
+    }
+    return `OpenViking error (${said}${message ? `: ${message}` : ""}) — nothing was ${what}.`;
+}
+//# sourceMappingURL=qcr-honest.js.map

package/dist/extensions/vendor/openviking-pi/qcr-honest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qcr-honest.js","sourceRoot":"","sources":["../../../../extensions/vendor/openviking-pi/qcr-honest.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,oBAAoB;AACpB,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,yEAAyE;AACzE,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,oEAAoE;AACpE,+EAA+E;AAC/E,8EAA8E;AAC9E,yEAAyE;AACzE,qEAAqE;AACrE,yEAAyE;AACzE,4EAA4E;AAC5E,uEAAuE;AACvE,uEAAuE;AACvE,4EAA4E;AAC5E,+EAA+E;AAC/E,kEAAkE;AAClE,6EAA6E;AAC7E,qCAAqC;AACrC,4EAA4E;AAC5E,uEAAuE;AACvE,4DAA4D;AAC5D,8EAA8E;AAC9E,sEAAsE;AAUtE,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAC;AAE9C;;;iFAGiF;AACjF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,GAAG;IACX,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,MAAM;CACjB,CAAC,CAAC;AAEH;gFACgF;AAChF,MAAM,UAAU,MAAM,CAAC,GAAe;IACpC,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,OAAO,GAAI,KAA+B,CAAC,OAAO,CAAC;IACzD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAQ,OAAuC,CAAC,aAAa,KAAK,kBAAkB,CAAC;AACvF,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB,CAAC,GAAe;IACpD,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,SAAuB,IAAI,CAAC,MAAM;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACrF,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAgBD,MAAM,YAAY,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAE1F;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAyB,EACzB,QAAwB,EAAE;IAE1B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,YAAY,CAAC;IAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;IACtB,KAAK,IAAI,KAAK,GAAG,CAAC,GAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,KAAK,IAAI,UAAU,CAAC,OAAO,IAAI,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC;YACjF,OAAO,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,iBAAiB;IACjB,cAAc;IACd,mBAAmB;IACnB,WAAW;IACX,iBAAiB;CAClB,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,KAAc,EAAE,KAAyB;IAC3D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACnD,MAAM,CAAC,GAAI,KAAiC,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED;;0DAE0D;AAC1D,MAAM,UAAU,aAAa,CAAC,GAAe;IAC3C,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,kDAAkD,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AACnG,CAAC;AAED;;gEAEgE;AAChE,MAAM,UAAU,WAAW,CAAC,GAAe,EAAE,OAAe,EAAE,MAAc;IAC1E,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,OAAO,CAAC;AACnE,CAAC;AAED;6BAC6B;AAC7B,MAAM,UAAU,UAAU,CAAC,GAAe;IACxC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAwC,EAAE,IAAY;IAChF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtF,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CACL,0CAA0C,IAAI,IAAI,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM;YAC9F,yDAAyD,IAAI,IAAI;YACjE,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACjC,OAAO,CACL,mDAAmD,kBAAkB,4BAA4B;YACjG,eAAe,IAAI,kFAAkF,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,CACL,8BAA8B,OAAO,IAAI,aAAa,mBAAmB,IAAI,IAAI;YACjF,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,qBAAqB,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,IAAI,GAAG,CAAC;AAC7F,CAAC"}

package/dist/extensions/vendor/openviking-pi/qcr-hooks.js

@@ -0,0 +1,68 @@
+// QCR FORK — file added by PATCH 12 (createOpenViking). Not upstream.
+//
+// Every hook the extension registers runs inside the review session's process,
+// and upstream registered them bare: an OpenViking call that never answers
+// holds the turn, and one that throws is left to pi's error channel. A review
+// must go on without memory, so each hook gets a deadline and a catch. On
+// either, the hook is treated as having done nothing (no system-prompt
+// addition, no injected recall, no sync) and says so in the debug log.
+//
+// The pure half, free of pi and of the OV client, so tests/openviking-fork.test.ts
+// can call it (`index.ts` wires it in).
+import { RECALL_WAIT_MS } from "./qcr-recall.js";
+/** How long a hook may hold pi. `session_start` and `before_agent_start` share
+ * `start()` (a health probe, the session attach, a bounded replay of the
+ * offline queue, the profile read), so they get the longest. `context` is the
+ * recall wait (R3) plus a second for the rest of the hook. */
+export const HOOK_TIMEOUT_MS = {
+    session_start: 60_000,
+    before_agent_start: 60_000,
+    context: RECALL_WAIT_MS + 1_000,
+    tool_call: 2_000,
+    turn_end: 30_000,
+    session_shutdown: 5_000,
+    agent_end: 1_000,
+    command: 15_000,
+};
+const TIMED_OUT = Symbol("hook timed out");
+/**
+ * Runs `run` under a deadline and a catch. Resolves to its value, or, when it
+ * throws or misses the deadline, to `onFail(reason)` (undefined without one).
+ * The work itself cannot be cancelled: a late result is dropped and a late
+ * rejection is logged, never left unhandled.
+ */
+export async function boundedHook(name, ms, run, log, onFail) {
+    const work = Promise.resolve().then(run);
+    let timer;
+    let timedOut = false;
+    const deadline = new Promise((resolve) => {
+        timer = setTimeout(() => {
+            timedOut = true;
+            resolve(TIMED_OUT);
+        }, ms);
+        timer.unref?.();
+    });
+    work.then(() => { }, (err) => {
+        if (timedOut)
+            log(`hook ${name}: failed after its deadline: ${describe(err)}`);
+    });
+    try {
+        const result = await Promise.race([work, deadline]);
+        if (result === TIMED_OUT) {
+            log(`hook ${name}: no answer in ${ms} ms; carried on without it`);
+            return onFail?.(`timed out after ${ms} ms`);
+        }
+        return result;
+    }
+    catch (err) {
+        log(`hook ${name}: failed: ${describe(err)}`);
+        return onFail?.(describe(err));
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+function describe(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=qcr-hooks.js.map

package/dist/extensions/vendor/openviking-pi/qcr-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qcr-hooks.js","sourceRoot":"","sources":["../../../../extensions/vendor/openviking-pi/qcr-hooks.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,8EAA8E;AAC9E,0EAA0E;AAC1E,uEAAuE;AACvE,uEAAuE;AACvE,EAAE;AACF,mFAAmF;AACnF,wCAAwC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAYjD;;;8DAG8D;AAC9D,MAAM,CAAC,MAAM,eAAe,GAAuC;IACjE,aAAa,EAAE,MAAM;IACrB,kBAAkB,EAAE,MAAM;IAC1B,OAAO,EAAE,cAAc,GAAG,KAAK;IAC/B,SAAS,EAAE,KAAK;IAChB,QAAQ,EAAE,MAAM;IAChB,gBAAgB,EAAE,KAAK;IACvB,SAAS,EAAE,KAAK;IAChB,OAAO,EAAE,MAAM;CAChB,CAAC;AAEF,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,EAAU,EACV,GAAyB,EACzB,GAA8B,EAC9B,MAA8B;IAE9B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,EAAE;QACzD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CACP,GAAG,EAAE,GAAE,CAAC,EACR,CAAC,GAAG,EAAE,EAAE;QACN,IAAI,QAAQ;YAAE,GAAG,CAAC,QAAQ,IAAI,gCAAgC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC,CACF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,QAAQ,IAAI,kBAAkB,EAAE,4BAA4B,CAAC,CAAC;YAClE,OAAO,MAAM,EAAE,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,QAAQ,IAAI,aAAa,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/extensions/vendor/openviking-pi/qcr-leaf.js

@@ -0,0 +1,77 @@
+// QCR FORK — file added by PATCH 2 (leaf isolation). Not upstream.
+//
+// A "leaf" is a pi process that is NOT the shepherd session: a pi-subagents
+// child running one lens pass. Leaves must never do ambient OpenViking work —
+// no recall injection into their context, no turn sync, no commit — because:
+//
+//   * the single-shepherd invariant (AGENTS.md invariant 7) says the PR's ONE
+//     main pi owns the review; a leaf is a stateless evaluator of a diff, and
+//     memory injected under it is unaccounted context;
+//   * a commit from a leaf would archive the SHEPHERD's session (the OV
+//     session id is inherited through the environment), reordering the one
+//     conversation the daemon owns.
+//
+// A pi-subagents child is spawned with `--no-extensions`
+// (assets/findings.md §4.3), so on the tmux bot a leaf structurally
+// never loads this extension. That is one layer. This is the second, for a
+// process that did load it (an operator's `pi -e`, a flag the child argv grows):
+// the child inherits the parent ENVIRONMENT, so anything keyed off env alone
+// would read as "main" inside a leaf. Detection therefore keys off ARGV, which
+// pi-subagents builds from scratch:
+//
+//   [...piBin.baseArgs, "--mode", "json", "-p", "--no-session", "--no-skills",
+//    "--no-extensions", ...allowlisted custom-tool extensions]
+//
+// None of those flags appear in the shepherd argv that `src/sessions.ts`
+// buildPiCommand emits (--approve/--model/--session-dir/--system-prompt/
+// --theme/--extension/--name), so the two are cleanly separable.
+//
+// QCR PATCH 12: only the shim (qcr-shim.ts) calls this, with the argv and env
+// of the pi process that loaded the file. `createOpenViking(cfg)` takes `leaf`
+// as a value and never looks at argv, because an SDK session has no argv of its
+// own (process.argv there is the host's): the SDK host that builds a lens
+// session says `leaf: true`, and nothing here second-guesses it.
+//
+// VERIFY-ON-PIN: the flag set above is pi-subagents @1f54189 as read at pi
+// 0.84.1. It has not been re-read at the pinned 1.3.0; a pi or pi-subagents
+// bump re-verifies it.
+/** Flags that only ever appear on a pi-subagents child command line. */
+export const LEAF_ARGV_FLAGS = [
+    "--no-extensions",
+    "--no-session",
+    "--no-skills",
+    "--print",
+    "-p",
+];
+/** Env var that FORCES leaf mode. There is deliberately no env var that forces
+ * MAIN mode: env is inherited by children, so a "this is the shepherd" marker
+ * would be inherited by every leaf and defeat the whole check. */
+export const FORCE_LEAF_ENV = "QCR_OV_LEAF";
+function truthy(value) {
+    const v = (value ?? "").trim().toLowerCase();
+    return v === "1" || v === "true" || v === "yes" || v === "on";
+}
+/**
+ * True when this process is a pi-subagents leaf (or has been forced to behave
+ * as one). Fail direction: an UNKNOWN argv reads as "main", which is the
+ * shepherd's behaviour — the leaf never loads this extension anyway, so a
+ * false negative costs nothing while a false positive would silently disable
+ * memory for the review session.
+ */
+export function isLeafProcess(argv, env) {
+    if (truthy(env[FORCE_LEAF_ENV]))
+        return true;
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === undefined)
+            continue;
+        if (LEAF_ARGV_FLAGS.includes(arg))
+            return true;
+        if (arg === "--mode=json")
+            return true;
+        if (arg === "--mode" && argv[i + 1] === "json")
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=qcr-leaf.js.map

package/dist/extensions/vendor/openviking-pi/qcr-leaf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qcr-leaf.js","sourceRoot":"","sources":["../../../../extensions/vendor/openviking-pi/qcr-leaf.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,uDAAuD;AACvD,wEAAwE;AACxE,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,yDAAyD;AACzD,oEAAoE;AACpE,2EAA2E;AAC3E,iFAAiF;AACjF,6EAA6E;AAC7E,+EAA+E;AAC/E,oCAAoC;AACpC,EAAE;AACF,+EAA+E;AAC/E,+DAA+D;AAC/D,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,iEAAiE;AACjE,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,0EAA0E;AAC1E,iEAAiE;AACjE,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,uBAAuB;AAEvB,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,iBAAiB;IACjB,cAAc;IACd,aAAa;IACb,SAAS;IACT,IAAI;CACL,CAAC;AAEF;;kEAEkE;AAClE,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;AAE5C,SAAS,MAAM,CAAC,KAAyB;IACvC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAuB,EACvB,GAAuC;IAEvC,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,GAAG,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}