@quickchatai/quickreview 0.0.0-stage → 1.2.0

package/dist/extensions/vendor/openviking-pi/qcr-lesson.js

@@ -0,0 +1,216 @@
+// QCR FORK — file added by PATCH 10 (typed lessons). Not upstream.
+// a curated lesson carries a machine header, written by the tool.
+//
+// The pure half, kept free of pi and of the OV client so
+// `tests/openviking-fork.test.ts` can exercise it (`tools.ts` cannot be
+// imported from a test).
+//
+// The EOD curator wrote its lessons as prose: 10 of 17 carried no machine
+// header, the rest spelled type, lens and evidence three ways in the body, and
+// nothing could tell which lens a lesson was for or which human evidence it
+// rested on. `viking_write` now takes a structured `lesson` parameter and
+// RENDERS the header itself, on the entry's first line:
+//
+//   #lesson kind=<repo-fact|look-for|dont-raise|convention> lens=<ids>
+//           class=<slug> paths=<globs> evidence=<refs>
+//
+// (one line; lists comma-separated; no whitespace in a value). The daemon's
+// reader is `src/memory/lessons.ts` (`parseLesson`); the test suite pins this
+// renderer against it, and `LESSON_LENS_IDS` here equal to the daemon's built
+// passes (`ALL_PASSES`) — one list, two readers, like PATCH 9's areas. An
+// unknown lens id is REFUSED: a lesson for a lens nobody runs would be
+// delivered to nobody. A lesson is written into `experiences/` and nowhere
+// else, and its content may not carry a header of its own.
+/** The lesson kinds — the daemon's `LESSON_KINDS`. */
+export const LESSON_KINDS = ["repo-fact", "look-for", "dont-raise", "convention"];
+/** The lens ids a lesson may name: every pass the daemon builds, the
+ * validator included. Pinned equal to `src/passes.ts` `ALL_PASSES`. */
+export const LESSON_LENS_IDS = [
+    "pass-baseline",
+    "pass-ui",
+    "pass-contracts",
+    "pass-data-safety",
+    "pass-security",
+    "pass-statelessness",
+    "pass-prod-risk",
+    "pass-delivery",
+    "pass-intent",
+    "pass-placement",
+    "pass-simplicity",
+    "pass-backcompat",
+    "pass-concurrency",
+    "pass-ask-human",
+    "pass-widened",
+    "pass-roundtrip",
+    "pass-deferred",
+    "pass-bounds",
+    "pass-claims",
+    "pass-rollout",
+    "pass-behaviour-delta",
+    "pass-sweep",
+    "pass-tests",
+    "pass-maintainability",
+    "pass-duplication",
+    "pass-abstraction",
+    "pass-consistency",
+    "pass-style",
+    "pass-lint-conformance",
+    "pass-validate",
+];
+const CLASS_RE = /^[a-z0-9][a-z0-9._-]{0,79}$/;
+const GLOB_RE = /^[^\s,]{1,200}$/;
+const REF_RE = /^[a-z][a-z0-9-]{0,19}:[^\s,]{1,200}$/;
+const LIMITS = { lenses: 8, paths: 12, evidence: 16 };
+/** Where a lesson may be written: a file directly in a user's
+ * `memories/experiences/`. */
+const LESSON_URI_RE = /^viking:\/\/user\/[^/\s]+\/memories\/experiences\/[^/\s]+$/;
+function list(raw) {
+    if (raw === undefined || raw === null)
+        return [];
+    const items = Array.isArray(raw) ? raw : typeof raw === "string" ? raw.split(",") : null;
+    if (!items)
+        return null;
+    const out = [];
+    for (const v of items) {
+        if (typeof v !== "string")
+            return null;
+        const t = v.trim();
+        if (t !== "" && !out.includes(t))
+            out.push(t);
+    }
+    return out;
+}
+/**
+ * The header line for a structured `lesson`, or the sentence saying what is
+ * wrong with it. Every field is required; `baseline` is read as
+ * `pass-baseline`; nothing unknown is accepted.
+ */
+export function buildLessonHeader(raw, known = LESSON_LENS_IDS) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return { ok: false, error: "`lesson` must be an object {kind, lens, class, paths, evidence}." };
+    const o = raw;
+    const unknown = Object.keys(o).filter((k) => !["kind", "lens", "class", "paths", "evidence"].includes(k));
+    if (unknown.length > 0)
+        return { ok: false, error: `Unknown lesson field(s): ${unknown.join(", ")}.` };
+    const kind = typeof o["kind"] === "string" ? o["kind"].trim().toLowerCase() : "";
+    if (!LESSON_KINDS.includes(kind))
+        return { ok: false, error: `lesson.kind must be one of ${LESSON_KINDS.join(", ")}.` };
+    const lensRaw = list(o["lens"]);
+    if (!lensRaw || lensRaw.length === 0)
+        return { ok: false, error: "lesson.lens must name at least one lens id (e.g. pass-baseline)." };
+    if (lensRaw.length > LIMITS.lenses)
+        return { ok: false, error: `lesson.lens names ${lensRaw.length} lenses; at most ${LIMITS.lenses}.` };
+    const lens = [];
+    const bad = [];
+    for (const id of lensRaw) {
+        const t = id.toLowerCase();
+        const k = known.includes(t) ? t : known.includes(`pass-${t}`) ? `pass-${t}` : null;
+        if (k === null)
+            bad.push(id);
+        else if (!lens.includes(k))
+            lens.push(k);
+    }
+    if (bad.length > 0)
+        return {
+            ok: false,
+            error: `Unknown lens id(s): ${bad.join(", ")}. A lesson names built passes only (${known.join(", ")}).`,
+        };
+    const cls = typeof o["class"] === "string" ? o["class"].trim().toLowerCase() : "";
+    if (!CLASS_RE.test(cls))
+        return {
+            ok: false,
+            error: "lesson.class must be a slug: lowercase letters, digits, '.', '_' or '-' (e.g. baseline.pre-existing-scope).",
+        };
+    const paths = list(o["paths"]);
+    if (!paths || paths.length === 0)
+        return { ok: false, error: "lesson.paths must name at least one path glob (`**` for the whole repo)." };
+    if (paths.length > LIMITS.paths)
+        return { ok: false, error: `lesson.paths names ${paths.length} globs; at most ${LIMITS.paths}.` };
+    const badGlob = paths.find((p) => !GLOB_RE.test(p));
+    if (badGlob !== undefined)
+        return {
+            ok: false,
+            error: `Path glob "${badGlob}" may not contain whitespace or a comma (write a brace expansion as separate globs).`,
+        };
+    const evidence = list(o["evidence"]);
+    if (!evidence || evidence.length === 0)
+        return {
+            ok: false,
+            error: "lesson.evidence must cite at least one ref (pr:<n>, comment:<id>, case:<name>, commit:<sha>, cand:<id>) — no lesson without evidence.",
+        };
+    if (evidence.length > LIMITS.evidence)
+        return { ok: false, error: `lesson.evidence cites ${evidence.length} refs; at most ${LIMITS.evidence}.` };
+    const badRef = evidence.find((r) => !REF_RE.test(r));
+    if (badRef !== undefined)
+        return {
+            ok: false,
+            error: `Evidence ref "${badRef}" must be <kind>:<id> with no whitespace or comma (e.g. pr:5312, cand:c42).`,
+        };
+    return {
+        ok: true,
+        header: [
+            "#lesson",
+            `kind=${kind}`,
+            `lens=${lens.join(",")}`,
+            `class=${cls}`,
+            `paths=${paths.join(",")}`,
+            `evidence=${evidence.join(",")}`,
+        ].join(" "),
+    };
+}
+/**
+ * [QCR PATCH 11] The `#hash` tags an entry's HEADER carries — the leading run
+ * of `#…` tokens, exactly the daemon's reader (src/memory/eventtags.ts
+ * `parseHashTags`, pinned equal by test). A typed lesson is an entry whose
+ * header carries `#lesson`.
+ */
+export function headerHashTags(text) {
+    const out = [];
+    for (const token of String(text ?? "").split(/\s+/)) {
+        if (token === "")
+            continue;
+        if (!token.startsWith("#"))
+            break;
+        const tag = token.slice(1).toLowerCase();
+        if (tag !== "" && !out.includes(tag))
+            out.push(tag);
+    }
+    return out;
+}
+/** [QCR PATCH 11] The refusal for content that types a lesson header by hand
+ * (no `lesson` parameter), or null. The header is the tool's to write: a
+ * hand-typed `#lesson … evidence=cand:c<id>` line would adopt learner
+ * candidates with no field checked — and a review session reading untrusted
+ * PR text could be talked into writing one (integration review). */
+export function handTypedLessonRefusal(content) {
+    if (!headerHashTags(String(content ?? "").trim()).includes("lesson"))
+        return null;
+    return "Refusing a hand-typed `#lesson` header: write a lesson with the `lesson` parameter {kind, lens, class, paths, evidence} — the tool writes the header — and start `content` with the lesson's prose.";
+}
+/**
+ * The content of a lesson entry: the rendered header on the first line, the
+ * author's prose after it. Refused when the target is not in `experiences/`
+ * or the prose already opens with a header of its own — the header is the
+ * tool's to write, so a hand-typed one can neither duplicate nor contradict
+ * it.
+ */
+export function withLessonHeader(uri, content, lesson, known = LESSON_LENS_IDS) {
+    if (!LESSON_URI_RE.test(uri))
+        return {
+            ok: false,
+            error: `A lesson is written into experiences/ (viking://user/<user>/memories/experiences/<name>.md); got "${uri}".`,
+        };
+    const built = buildLessonHeader(lesson, known);
+    if (!built.ok)
+        return built;
+    const prose = String(content ?? "").trim();
+    if (prose === "")
+        return { ok: false, error: "A lesson needs its one-sentence rule in `content`." };
+    if (/^#lesson\b/i.test(prose) || /^#[a-z0-9-]+\s+kind=/i.test(prose))
+        return {
+            ok: false,
+            error: "Leave the header out of `content` — the tool writes it from `lesson`. Start `content` with the lesson's prose.",
+        };
+    return { ok: true, content: `${built.header}\n\n${prose}` };
+}
+//# sourceMappingURL=qcr-lesson.js.map

package/dist/extensions/vendor/openviking-pi/qcr-lesson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qcr-lesson.js","sourceRoot":"","sources":["../../../../extensions/vendor/openviking-pi/qcr-lesson.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,kEAAkE;AAClE,EAAE;AACF,yDAAyD;AACzD,wEAAwE;AACxE,yBAAyB;AACzB,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,4EAA4E;AAC5E,0EAA0E;AAC1E,wDAAwD;AACxD,EAAE;AACF,uEAAuE;AACvE,uDAAuD;AACvD,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,uEAAuE;AACvE,2EAA2E;AAC3E,2DAA2D;AAE3D,sDAAsD;AACtD,MAAM,CAAC,MAAM,YAAY,GAAsB,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAErG;uEACuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,eAAe;IACf,SAAS;IACT,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;IACf,oBAAoB;IACpB,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,aAAa;IACb,cAAc;IACd,sBAAsB;IACtB,YAAY;IACZ,YAAY;IACZ,sBAAsB;IACtB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,YAAY;IACZ,uBAAuB;IACvB,eAAe;CAChB,CAAC;AAEF,MAAM,QAAQ,GAAG,6BAA6B,CAAC;AAC/C,MAAM,OAAO,GAAG,iBAAiB,CAAC;AAClC,MAAM,MAAM,GAAG,sCAAsC,CAAC;AACtD,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAEtD;8BAC8B;AAC9B,MAAM,aAAa,GAAG,4DAA4D,CAAC;AAYnF,SAAS,IAAI,CAAC,GAAY;IACxB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAY,EACZ,QAA2B,eAAe;IAE1C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kEAAkE,EAAE,CAAC;IAClG,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CACnE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACvG,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACxF,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kEAAkE,EAAE,CAAC;IAClG,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,OAAO,CAAC,MAAM,oBAAoB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACvG,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACnF,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,uBAAuB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACxG,CAAC;IACJ,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,6GAA6G;SACrH,CAAC;IACJ,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0EAA0E,EAAE,CAAC;IAC1G,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,KAAK,CAAC,MAAM,mBAAmB,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;IACpG,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,SAAS;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,cAAc,OAAO,sFAAsF;SACnH,CAAC;IACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,uIAAuI;SAC/I,CAAC;IACJ,IAAI,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,QAAQ,CAAC,MAAM,kBAAkB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IAC5G,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,SAAS;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,iBAAiB,MAAM,6EAA6E;SAC5G,CAAC;IACJ,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,SAAS;YACT,QAAQ,IAAI,EAAE;YACd,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACxB,SAAS,GAAG,EAAE;YACd,SAAS,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC1B,YAAY,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SACjC,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;oEAIoE;AACpE,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,OAAO,qMAAqM,CAAC;AAC/M,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,OAAgB,EAChB,MAAe,EACf,QAA2B,eAAe;IAE1C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,qGAAqG,GAAG,IAAI;SACpH,CAAC;IACJ,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAC;IACpG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QAClE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,gHAAgH;SACxH,CAAC;IACJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,OAAO,KAAK,EAAE,EAAE,CAAC;AAC9D,CAAC"}

package/dist/extensions/vendor/openviking-pi/qcr-namespaces.js

@@ -0,0 +1,154 @@
+// QCR FORK — file added by PATCH 5 (a second memory namespace). Not upstream.
+//
+// WHAT THIS SOLVES. Upstream builds ONE `OVClient` from ONE key, so a pi can
+// only ever reach the user tree that key owns. The companion on the owner's PC
+// holds TWO OpenViking USER keys — its own (`user/companion/`) and the
+// reviewer's (`user/reviewer/`, the key the daemon and every review session
+// hold) — because the ratified design is that the companion and the TUI can do
+// EVERYTHING with memory, read and write, over every piece of it, while
+// automated review sessions hold the reviewer key alone and stay confined
+// server-side (docs/companion-memory-access.md).
+//
+// The second key was already delivered to the companion container as
+// `OPENVIKING_REVIEWER_KEY` and proven usable; nothing consumed it. This file
+// is the pure half of consuming it: which extra namespaces exist, and which
+// namespace a given tool call is addressing. The clients themselves are built
+// in `index.ts` and handed to `tools.ts` — pure logic lives here so
+// `tests/openviking-fork.test.ts` can exercise it (`tools.ts` and `index.ts`
+// cannot be imported from a test; they pull typebox and the pi packages).
+//
+// SHAPE BORROWED, NOT INVENTED. The TUI solved the same problem first
+// (`src/tui/memory.ts`): one client per namespace, keys read by env
+// name from the shared keys file, and every addressed operation prefixed with
+// the namespace that owns it so a verb routes back to the right key. A
+// namespace-prefixed address is the established convention; here the address
+// the model already types is a `viking://user/<namespace>/…` URI, so the URI
+// carries the prefix and an explicit `namespace` parameter settles the rest.
+//
+// THREE PROPERTIES THIS FILE IS RESPONSIBLE FOR:
+//
+//   1. A LEAF NEVER GETS A SECOND NAMESPACE. PATCH 2 stops all ambient work in
+//      a pi-subagents leaf and PATCH 4 withholds the write tool there; a second
+//      client must not become a way around either. `resolveExtraNamespaces`
+//      returns [] for a leaf, `index.ts` does not even call it in the leaf
+//      path, and `tools.ts` discards any namespaces handed to a leaf.
+//   2. THE ROOT-KEY GUARD COVERS BOTH KEYS. Upstream's resolver ends its
+//      fallback chain at the server's `root_api_key`, which our state-volume
+//      symlink puts within reach. The second key goes through the SAME
+//      `withoutRootKey` guard as the first — a new key must not reopen the hole
+//      PATCH 0000 closed.
+//   3. A REVIEW SESSION IS UNCHANGED. A PR session's own identity already IS
+//      `reviewer` (`OPENVIKING_USER=reviewer`, key in a 0600 ovcli.conf, and
+//      the daemon never puts `OPENVIKING_REVIEWER_KEY` in a session env), so a
+//      namespace whose user equals our own is dropped rather than duplicated:
+//      even if that variable ever appeared in a session, it would add nothing.
+//      And with a single namespace, routing is a constant and the tools keep
+//      the exact parameters and text they have today.
+import { withoutRootKey } from "./config.js";
+/** The extra namespace this fork knows how to build. */
+export const REVIEWER_NAMESPACE = "reviewer";
+/** Env name carrying the reviewer USER key. Spelled the same in
+ * `src/tui/companion.ts` (`KEY_NAMES`), `src/tui/memory.ts` (`USER_KEY_ENV`)
+ * and the keys file — do not invent a second spelling. */
+export const REVIEWER_KEY_ENV = "OPENVIKING_REVIEWER_KEY";
+/** Which OpenViking USER the reviewer key owns. Overridable only because the
+ * user name is a deployment fact; the default is what the daemon uses. */
+export const REVIEWER_USER_ENV = "OPENVIKING_REVIEWER_USER";
+function trimmed(value) {
+    return typeof value === "string" ? value.trim() : "";
+}
+/** What the model calls the namespace this pi authenticates as. `own` only
+ * when no `OPENVIKING_USER` was configured at all. */
+export function ownNamespaceName(user) {
+    return trimmed(user).toLowerCase() || "own";
+}
+/**
+ * The namespaces this process can reach BESIDES its own identity.
+ *
+ * Today that is at most one — `reviewer`, when `OPENVIKING_REVIEWER_KEY` is in
+ * the environment. Its ABSENCE is a normal state, not an error: the process
+ * then reaches its own tree only, exactly as before this patch.
+ */
+export function resolveExtraNamespaces(config, env = process.env, opts = {}) {
+    // (1) A leaf gets nothing ambient and no second key. See PATCH 2.
+    if (opts.leaf === true)
+        return [];
+    const rawKey = trimmed(env[REVIEWER_KEY_ENV]);
+    if (!rawKey)
+        return [];
+    // (2) The same guard the primary key goes through. If this IS the server's
+    // root key it is dropped and the namespace simply does not exist — the fork
+    // never authenticates as ROOT, by any route, including a new one.
+    const guard = opts.guardRootKey ?? withoutRootKey;
+    const guarded = guard({ apiKey: rawKey, hasApiKey: true }, env);
+    if (!guarded.hasApiKey || !guarded.apiKey)
+        return [];
+    const user = trimmed(env[REVIEWER_USER_ENV]).toLowerCase() || REVIEWER_NAMESPACE;
+    // (3) Never a second client for the tree we already are. This is what keeps
+    // a review session (whose own user IS `reviewer`) structurally single-keyed.
+    if (ownNamespaceName(config.user) === user)
+        return [];
+    return [{ name: REVIEWER_NAMESPACE, user, apiKey: guarded.apiKey }];
+}
+/** The user tree a `viking://user/<space>/…` URI names, lowercased. `null`
+ * for anything else — including the reserved-word form (`viking://user/
+ * memories/…`) the client expands server-side, which names no namespace. */
+export function namespaceOfUri(uri) {
+    const match = /^\s*viking:\/\/user\/([A-Za-z0-9._-]+)/i.exec(String(uri ?? ""));
+    return match ? match[1].toLowerCase() : null;
+}
+/**
+ * Which namespace a tool call is touching.
+ *
+ * `names[0]` is this pi's own identity and the default. Two ways to name
+ * another one, and they must agree:
+ *
+ *   * `namespace: "reviewer"` — explicit, and what the tool schema advertises;
+ *   * a `viking://user/reviewer/…` URI — implicit, because the address the
+ *     model already types carries the namespace prefix.
+ *
+ * Disagreement is REFUSED rather than resolved by precedence: writing to the
+ * wrong memory tree is silent, and a rule the model has to remember is exactly
+ * the kind of thing it will get wrong at 3am.
+ *
+ * With ONE namespace this is a constant function that never fails — the
+ * single-key case (every review session) keeps today's behaviour exactly.
+ */
+export function routeNamespace(params, names) {
+    const known = names.map((n) => n.toLowerCase());
+    const fallback = known[0] ?? "";
+    if (known.length <= 1)
+        return { ok: true, namespace: fallback };
+    const explicit = trimmed(params.namespace).toLowerCase();
+    if (explicit && !known.includes(explicit)) {
+        return {
+            ok: false,
+            error: `Unknown memory namespace "${explicit}". This pi reaches: ${known.join(", ")}.` +
+                (explicit === REVIEWER_NAMESPACE ? ` Reviewer memory needs ${REVIEWER_KEY_ENV} in this process's environment.` : ""),
+        };
+    }
+    const implied = namespaceOfUri(params.uri) ?? namespaceOfUri(params.scope);
+    if (implied && known.includes(implied)) {
+        if (explicit && explicit !== implied) {
+            return {
+                ok: false,
+                error: `That URI is in the ${implied} memory tree but namespace says "${explicit}". ` +
+                    "Pass one or the other, not two different answers.",
+            };
+        }
+        return { ok: true, namespace: implied };
+    }
+    return { ok: true, namespace: explicit || fallback };
+}
+/** The sentence appended to every namespace-aware tool description. Written
+ * once so the four tools cannot drift apart on what they tell the model. */
+export function namespaceNote(names) {
+    if (names.length <= 1)
+        return "";
+    const own = names[0];
+    const others = names.slice(1);
+    return (` MEMORY NAMESPACES: this pi reaches ${names.join(" and ")} — ${own} is your own memory and the default, ` +
+        `${others.join(" and ")} is the review system's. Pick one with \`namespace\`, or address a ` +
+        "viking://user/<namespace>/… URI (the two must agree); every answer is prefixed with the tree it came from.");
+}
+//# sourceMappingURL=qcr-namespaces.js.map

package/dist/extensions/vendor/openviking-pi/qcr-namespaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qcr-namespaces.js","sourceRoot":"","sources":["../../../../extensions/vendor/openviking-pi/qcr-namespaces.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,uEAAuE;AACvE,4EAA4E;AAC5E,+EAA+E;AAC/E,wEAAwE;AACxE,0EAA0E;AAC1E,iDAAiD;AACjD,EAAE;AACF,qEAAqE;AACrE,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,oEAAoE;AACpE,6EAA6E;AAC7E,0EAA0E;AAC1E,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,8EAA8E;AAC9E,uEAAuE;AACvE,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC3E,sEAAsE;AACtE,yEAAyE;AACzE,6EAA6E;AAC7E,uEAAuE;AACvE,gFAAgF;AAChF,0BAA0B;AAC1B,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,sDAAsD;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,wDAAwD;AACxD,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAE7C;;0DAE0D;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAE1D;0EAC0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAmB5D,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED;sDACsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAyB,EACzB,MAA0C,OAAO,CAAC,GAAG,EACrD,OAAgC,EAAE;IAElC,kEAAkE;IAClE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,2EAA2E;IAC3E,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC;IAClD,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAErD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,kBAAkB,CAAC;IAEjF,4EAA4E;IAC5E,6EAA6E;IAC7E,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAEtD,OAAO,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACtE,CAAC;AAQD;;4EAE4E;AAC5E,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,KAAK,GAAG,yCAAyC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA+D,EAC/D,KAAwB;IAExB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAEhE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,6BAA6B,QAAQ,uBAAuB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC/E,CAAC,QAAQ,KAAK,kBAAkB,CAAC,CAAC,CAAC,0BAA0B,gBAAgB,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;SACvH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,QAAQ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACrC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,sBAAsB,OAAO,oCAAoC,QAAQ,KAAK;oBAC9E,mDAAmD;aACtD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,IAAI,QAAQ,EAAE,CAAC;AACvD,CAAC;AAED;4EAC4E;AAC5E,MAAM,UAAU,aAAa,CAAC,KAAwB;IACpD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACtB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,CACL,uCAAuC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,uCAAuC;QAC1G,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,qEAAqE;QAC5F,4GAA4G,CAC7G,CAAC;AACJ,CAAC"}

package/dist/extensions/vendor/openviking-pi/qcr-recall.js

@@ -0,0 +1,254 @@
+// QCR FORK — file added by PATCH 7 (bounded recall, no commit). Not upstream.
+// S3, owner ruling R3: "PR sessions keep the OpenViking extension,
+// bounded: the per-turn recall wait is capped at 500 ms and query expansion is
+// off."
+//
+// The pure half of three fixes, kept free of pi and of the OV client so
+// `tests/openviking-fork.test.ts` can exercise it (`index.ts` cannot be
+// imported from a test).
+//
+// 1. RECALL NEVER HOLDS A TURN PAST ITS BUDGET. The `context` hook awaited
+//    the recall search before every provider request, and that search could
+//    spend a 15 s expansion fuse and then a `/search/recall` fallback with its
+//    own 10 s — on a server whose local embedder blocks its one event loop
+//    (search p50 22 s, max 155 s, 2026-10-03..06). `budgetedFetch` gives every
+//    request of one recall the time left on ONE deadline and starts nothing
+//    once it has passed (it throws, which ends the fallback chain before it
+//    sends a request); `raceBudget` is the belt that returns the hook on time
+//    whatever the chain is doing.
+// 2. A RETIRED ENTRY IS NEVER RECALLED. Retire is a `#retired` header tag and
+//    the file stays in the indexed root, so a semantic search finds it. The
+//    daemon already knows the retired set (its store sweep) and publishes the
+//    URIs to a file beside the sessions' ovcli.conf (`QCR_OV_RETIRED_FILE`);
+//    `retiredGuard` sends them as `exclude_uris`, and drops any recalled entry
+//    whose own text opens with the tag (the header-only rule of
+//    `src/memory/eventtags.ts` `parseHashTags` — a `#retired` quoted further
+//    in is prose, not a retirement).
+// 3. NOTHING COMMITS.: commit exists to PROMOTE session notes into
+//    memories through an extraction model this deployment never configures,
+//    so every commit archived the raw notes and produced nothing (143 archives
+//    on the VM, 0 overviews). The commit calls are gone from sync/index; a
+//    commit queued on disk by an older build is refused here, never replayed.
+import { readFileSync } from "node:fs";
+/** The longest the `context` hook waits for recall before the turn proceeds
+ * without it (R3). A cap: a caller may ask for less, never for more. */
+export const RECALL_WAIT_MS = 500;
+/** The server's `MAX_EXCLUDE_URIS` (context_assembler/params.py). */
+export const MAX_RECALL_EXCLUSIONS = 200;
+/** Where the daemon publishes the retired URIs. Not a secret: the URIs of
+ * retired entries the session's own key can already list. */
+export const RETIRED_FILE_ENV = "QCR_OV_RETIRED_FILE";
+/** The seam's retirement tag (src/openviking/store.ts `RETIRED_TAG`). */
+export const RETIRED_TAG = "retired";
+/** Thrown by a budgeted fetch once the deadline has passed. It ends the
+ * recall chain where it stands — nothing further is sent, and nothing is
+ * cached from a request that was never made — and `raceBudget` turns it into
+ * "no recall this turn". */
+export class RecallBudgetSpent extends Error {
+    constructor() {
+        super("recall budget spent");
+        this.name = "RecallBudgetSpent";
+    }
+}
+/**
+ * Every request of one recall shares ONE deadline. A request gets the time
+ * left on it as its own timeout (the client aborts it there), and once none is
+ * left nothing is started — the `/search/recall` and raw-find fallbacks
+ * included, which used to double the load exactly when the server was slow.
+ */
+export function budgetedFetch(inner, deadlineAt, now = Date.now) {
+    return async (path, init, options) => {
+        const remaining = Math.floor(deadlineAt - now());
+        if (remaining < 5)
+            throw new RecallBudgetSpent(); // a few ms only race the abort that just fired
+        const asked = Number(options?.timeoutMs);
+        const timeoutMs = Number.isFinite(asked) && asked > 0 ? Math.min(asked, remaining) : remaining;
+        return inner(path, init, { ...(options ?? {}), timeoutMs });
+    };
+}
+/**
+ * `work`, or `fallback` once `ms` have passed. Never rejects: a recall that
+ * throws is a recall that found nothing. The work is NOT cancelled — under a
+ * `budgetedFetch` it has nothing left to send by then — and a late answer is
+ * discarded, never injected into a later turn of the same run (that would
+ * rewrite a message the provider has already cached).
+ */
+export async function raceBudget(work, ms, fallback) {
+    const settled = work.then((value) => ({ value, timedOut: false }), () => ({ value: fallback, timedOut: false }));
+    if (!(ms > 0))
+        return { value: fallback, timedOut: true };
+    let timer;
+    try {
+        return await Promise.race([
+            settled,
+            new Promise((resolve) => {
+                timer = setTimeout(() => resolve({ value: fallback, timedOut: true }), ms);
+                timer.unref?.();
+            }),
+        ]);
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    }
+}
+/**
+ * Does this text OPEN with the `#retired` tag? Header-only, exactly like
+ * `parseHashTags` (src/memory/eventtags.ts): the leading run of `#tag` tokens
+ * is the header and the scan stops at the first word that is not one, so a
+ * `[feedback]` entry quoting "mark it #retired" is not hidden by its prose.
+ * `tests/openviking-fork.test.ts` pins the two parsers against each other.
+ */
+export function hasRetiredHeader(text) {
+    for (const token of String(text ?? "").split(/\s+/)) {
+        if (token === "")
+            continue;
+        if (!token.startsWith("#"))
+            return false;
+        if (token.slice(1).toLowerCase() === RETIRED_TAG)
+            return true;
+    }
+    return false;
+}
+/**
+ * The retired URIs the daemon published (`{"uris": [...]}`), or `[]`.
+ * Total: no path, no file, a garbled file — all mean "no exclusions", and the
+ * header filter in `retiredGuard` still applies.
+ */
+export function readRetiredUris(path, read = defaultRead) {
+    if (!path || path.trim() === "")
+        return [];
+    let parsed;
+    try {
+        parsed = JSON.parse(read(path.trim()));
+    }
+    catch {
+        return [];
+    }
+    const raw = parsed?.uris;
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const uri of raw) {
+        if (typeof uri !== "string" || !uri.startsWith("viking://") || out.includes(uri))
+            continue;
+        out.push(uri);
+        if (out.length >= MAX_RECALL_EXCLUSIONS)
+            break;
+    }
+    return out;
+}
+function defaultRead(p) {
+    return readFileSync(p, "utf8");
+}
+/** One assembled entry exactly as the server renders it
+ * (`retrieve/context_assembler/render.py` `render_entry`), so a block we had
+ * to re-render after dropping a retired entry reads like the server's. */
+export function renderContextEntry(entry) {
+    const attr = (v) => String(v ?? "")
+        .replace(/&/g, "&amp;")
+        .replace(/"/g, "&quot;")
+        .replace(/</g, "&lt;");
+    const score = Number(entry.score);
+    const head = `<memory uri="${attr(entry.uri)}" type="${attr(entry.category)}"` +
+        ` score="${(Number.isFinite(score) ? score : 0).toFixed(2)}" detail="${String(entry.detail ?? "")}"`;
+    const text = String(entry.text ?? "");
+    if (text === "")
+        return `${head} />`;
+    return `${head}>\n${text.replace(/<(\/?)memory(?=[\s/>])/gi, "<\\$1memory")}\n</memory>`;
+}
+const CONTEXT_PATHS = new Set(["/api/v1/search/search", "/api/v1/search/recall"]);
+const FIND_PATH = "/api/v1/search/find";
+/**
+ * Retired entries out of every recall request this fetch carries:
+ *   * a context search or the `/search/recall` preset is SENT the published
+ *     retired URIs as `exclude_uris` (merged with any it already carried,
+ *     capped at the server's 200) — list-mode search rejects the field, so
+ *     only a `mode: "context"` body gets it;
+ *   * whatever comes back is FILTERED: an entry the list names, or whose own
+ *     text opens with `#retired`, is dropped, and the rendered block is
+ *     rebuilt from what is left (the digest with it — it was written from the
+ *     dropped entry too);
+ *   * the raw-find fallback's `memories` are filtered the same way.
+ */
+export function retiredGuard(inner, retired) {
+    return async (path, init, options) => {
+        let excluded = [];
+        try {
+            excluded = retired();
+        }
+        catch {
+            excluded = [];
+        }
+        const excludedSet = new Set(excluded);
+        let sent = init;
+        if (CONTEXT_PATHS.has(path) && typeof init?.body === "string" && excluded.length > 0) {
+            try {
+                const body = JSON.parse(init.body);
+                if (path !== "/api/v1/search/search" || body["mode"] === "context") {
+                    const have = Array.isArray(body["exclude_uris"])
+                        ? body["exclude_uris"].filter((u) => typeof u === "string")
+                        : [];
+                    body["exclude_uris"] = [...new Set([...have, ...excluded])].slice(0, MAX_RECALL_EXCLUSIONS);
+                    sent = { ...init, body: JSON.stringify(body) };
+                }
+            }
+            catch {
+                sent = init;
+            }
+        }
+        const res = await inner(path, sent, options);
+        if (!res?.ok || !res.result || typeof res.result !== "object")
+            return res;
+        const isRetired = (uri, text) => (typeof uri === "string" && excludedSet.has(uri)) || hasRetiredHeader(text);
+        if (CONTEXT_PATHS.has(path) && Array.isArray(res.result.entries)) {
+            const entries = res.result.entries;
+            const kept = entries.filter((e) => !isRetired(e?.["uri"], e?.["text"] ?? e?.["content"]));
+            if (kept.length === entries.length)
+                return res;
+            return {
+                ...res,
+                result: {
+                    ...res.result,
+                    entries: kept,
+                    rendered: kept.map(renderContextEntry).join("\n"),
+                    digest: "",
+                },
+            };
+        }
+        if (path === FIND_PATH && Array.isArray(res.result.memories)) {
+            const memories = res.result.memories;
+            const kept = memories.filter((m) => !isRetired(m?.["uri"], m?.["abstract"] ?? m?.["overview"]));
+            if (kept.length === memories.length)
+                return res;
+            return { ...res, result: { ...res.result, memories: kept } };
+        }
+        return res;
+    };
+}
+/** Is this the commit route of a session? */
+export function isCommitPath(path) {
+    return /^\/api\/v1\/sessions\/[^/]+\/commit(?:[?#].*)?$/.test(path);
+}
+/** What a refused commit answers: a 400 the pending queue treats as final
+ * (`retryable.mjs`), so a commit an older build queued is dropped, not
+ * retried. */
+export const COMMIT_REFUSED = Object.freeze({
+    ok: false,
+    status: 400,
+    result: null,
+    error: Object.freeze({
+        code: "QCR_COMMIT_DISABLED",
+        message: "session commit is disabled in this fork: it only promotes notes through an " +
+            "extraction model this deployment does not run",
+    }),
+});
+/** A fetch that never sends a session commit. */
+export function refuseCommits(inner) {
+    return async (path, init, options) => {
+        if (isCommitPath(path))
+            return { ...COMMIT_REFUSED };
+        return inner(path, init, options);
+    };
+}
+//# sourceMappingURL=qcr-recall.js.map