@remnic/core 9.69.46 → 9.69.47

package/src/activity/timeline/recap-export.ts

@@ -4,6 +4,12 @@
  * Pure: cards + date + timezone in, stable JSON out. No LLM, no I/O, no
  * persistence. Same cards always serialize to the same bytes, regardless of
  * input array order: cards are sorted by id before serialization.
+ *
+ * Privacy boundary (issue #2053 policy): a card `title` is captured
+ * observation content (the source window title). It is excluded unless the
+ * export explicitly permits observations — the same default as
+ * `activity.exportIncludeObservations`. Evidence references (store row ids,
+ * identity hashes) are always kept: they point at content without copying it.
  */
 import type { TimelineCard } from "./types.js";
 
@@ -11,15 +17,58 @@ export interface DeterministicRecapOptions {
   date: string;
   timezone: string;
   cards: readonly TimelineCard[];
+  /**
+   * Include observation-derived card content (`title`). Default false,
+   * matching the `activity.exportIncludeObservations` policy default.
+   */
+  includeObservations?: boolean;
+}
+
+/** Card projected for export: `title` present only when the policy permits. */
+export interface RecapExportCard extends Omit<TimelineCard, "title"> {
+  title?: string;
 }
 
 export interface DeterministicRecap {
   date: string;
   timezone: string;
-  cards: TimelineCard[];
+  cards: RecapExportCard[];
+}
+
+/**
+ * Project one card for export with a fixed key order. Observation-derived
+ * `title` is dropped unless `includeObservations`; user-authored provenance
+ * (manual edits, pause reasons inside `summary`) stays, and evidence
+ * references always stay.
+ */
+export function projectCardForRecapExport(
+  card: TimelineCard,
+  includeObservations: boolean,
+): RecapExportCard {
+  const projected: RecapExportCard = {
+    id: card.id,
+    kind: card.kind,
+    summary: card.summary,
+    categoryId: card.categoryId,
+    confidence: card.confidence,
+    startUtc: card.startUtc,
+    endUtc: card.endUtc,
+    dayKey: card.dayKey,
+    timezone: card.timezone,
+    machine: card.machine,
+    evidenceIds: card.evidenceIds,
+    evidenceRange: card.evidenceRange,
+  };
+  if (card.manualEdit !== undefined) {
+    projected.manualEdit = card.manualEdit;
+  }
+  if (includeObservations) {
+    projected.title = card.title;
+  }
+  return projected;
 }
 
-function compareCardIds(a: TimelineCard, b: TimelineCard): number {
+function compareCardIds(a: RecapExportCard, b: RecapExportCard): number {
   if (a.id < b.id) return -1;
   if (a.id > b.id) return 1;
   return 0;
@@ -28,14 +77,18 @@ function compareCardIds(a: TimelineCard, b: TimelineCard): number {
 /**
  * Build the byte-stable JSON recap document for one local day.
  * Callers may `JSON.stringify` the returned object; construction order
- * (date, timezone, cards) is fixed, so serialization is deterministic.
+ * (date, timezone, cards, and the per-card key order) is fixed, so
+ * serialization is deterministic.
  */
 export function exportDeterministicRecap(
   options: DeterministicRecapOptions,
 ): DeterministicRecap {
+  const includeObservations = options.includeObservations === true;
   return {
     date: options.date,
     timezone: options.timezone,
-    cards: [...options.cards].sort(compareCardIds),
+    cards: options.cards
+      .map((card) => projectCardForRecapExport(card, includeObservations))
+      .sort(compareCardIds),
   };
 }

package/src/cli/memory-browse-commands.ts

@@ -0,0 +1,77 @@
+/**
+ * Memory-store browse command group (issue #2978) — extracted from cli.ts
+ * so the surface file stays at its structural ceiling (same seam as
+ * cli/recall-navigation-commands.ts). `remnic browse ls|tree|find` runs
+ * through EngramAccessService.memoryStoreBrowse — the same single
+ * implementation MCP and HTTP call, sharing one renderer.
+ */
+
+import type { Orchestrator } from "../orchestrator.js";
+import type { CliCommand } from "../cli.js";
+import { EngramAccessService } from "../access-service.js";
+import type { BrowseVerb } from "../memory-browse.js";
+
+export function registerMemoryBrowseCommands(cmd: CliCommand, orchestrator: Orchestrator): void {
+  const run = async (args: unknown[], verb: BrowseVerb) => {
+    const options = (args[args.length - 1] ?? {}) as Record<string, unknown>;
+    // `browse find <pattern>` takes the pattern as a positional arg; the
+    // options object sits at the END of commander's action args.
+    const pattern = typeof args[0] === "string" && args[0].length > 0
+      ? args[0]
+      : typeof options.pattern === "string"
+        ? options.pattern
+        : "";
+    if (verb === "find" && pattern.trim().length === 0) {
+      console.error("usage: browse <ls|tree|find> [path] [--pattern <glob>] [--depth <n>] [--namespace <ns>] [--json]");
+      process.exitCode = 1;
+      return;
+    }
+    const depth = verb === "tree" && options.depth !== undefined ? Number(options.depth) : undefined;
+    if (depth !== undefined && (!Number.isFinite(depth) || !Number.isInteger(depth) || depth < 1 || depth > 4)) {
+      console.error("--depth must be an integer between 1 and 4");
+      process.exitCode = 1;
+      return;
+    }
+    const service = new EngramAccessService(orchestrator);
+    try {
+      const result = await service.memoryStoreBrowse({
+        verb,
+        ...(typeof args[0] === "string" && args[0].length > 0 ? { path: args[0] } : {}),
+        ...(depth !== undefined ? { depth } : {}),
+        ...(verb === "find" ? { pattern } : {}),
+        ...(typeof options.namespace === "string" && options.namespace.length > 0 ? { namespace: options.namespace } : {}),
+      });
+      if (options.json === true) {
+        console.log(JSON.stringify(result, null, 2));
+      } else {
+        console.log(result.rendered);
+      }
+      if (!result.ok) process.exitCode = 1;
+    } catch (err) {
+      console.error(err instanceof Error ? err.message : String(err));
+      process.exitCode = 1;
+    }
+  };
+
+  cmd
+    .command("browse ls [path]")
+    .description("List children of a store path in your namespace (issue #2978)")
+    .option("--namespace <ns>", "Namespace to scope the browse to")
+    .option("--json", "JSON output (entries + counts + truncated flag)")
+    .action(async (...args: unknown[]) => run(args, "ls"));
+
+  cmd
+    .command("browse tree [path]")
+    .description("Depth-limited store tree under one path (issue #2978)")
+    .option("--depth <n>", "Expansion depth, 1-4 (default 1)")
+    .option("--namespace <ns>", "Namespace to scope the browse to")
+    .option("--json", "JSON output (entries + counts + truncated flag)")
+    .action(async (...args: unknown[]) => run(args, "tree"));
+
+  cmd
+    .command("browse find <pattern>")
+    .description("Deterministic name/path glob or substring lookup (issue #2978)")
+    .option("--namespace <ns>", "Namespace to scope the browse to")
+    .option("--json", "JSON output (entries + counts + truncated flag)")
+    .action(async (...args: unknown[]) => run(args, "find"));
+}

package/src/cli.ts

@@ -14,7 +14,7 @@ import { bumpMemoryCorpusVersionForDir } from "./memory-corpus-version.js";
 import { utcDayRange } from "./transcript.js";
 import { padEndDisplay, truncateGraphemeSafe } from "./whitespace.js";
 import { runWearablesCliCommand } from "./wearables/cli.js";
-import { registerMeetingsCommands } from "./cli/meetings-commands.js"; import { registerDeepRecallCommands } from "./cli/deep-recall-commands.js"; import { registerRecallNavigationCommands } from "./cli/recall-navigation-commands.js";
+import { registerMeetingsCommands } from "./cli/meetings-commands.js"; import { registerDeepRecallCommands } from "./cli/deep-recall-commands.js"; import { registerRecallNavigationCommands } from "./cli/recall-navigation-commands.js"; import { registerMemoryBrowseCommands } from "./cli/memory-browse-commands.js";
 import { registerExportOkfCommand, registerOkfCommands } from "./cli/okf-commands.js";
 import { registerSkillsCommands } from "./cli/skills-commands.js";
 import { registerResearchStatusCommands } from "./cli/research-status-commands.js";
@@ -6230,7 +6230,7 @@ export function registerCli(
 
       registerResearchStatusCommands(cmd, orchestrator);
 
-      registerCreationLedgerCommands(cmd, orchestrator); registerMeetingsCommands(cmd, orchestrator); registerOkfCommands(cmd, orchestrator); registerDeepRecallCommands(cmd, orchestrator); registerTimelineCommands(cmd, orchestrator); registerRecallNavigationCommands(cmd, orchestrator);
+      registerCreationLedgerCommands(cmd, orchestrator); registerMeetingsCommands(cmd, orchestrator); registerOkfCommands(cmd, orchestrator); registerDeepRecallCommands(cmd, orchestrator); registerTimelineCommands(cmd, orchestrator); registerRecallNavigationCommands(cmd, orchestrator); registerMemoryBrowseCommands(cmd, orchestrator);
 
       cmd
         .command("trust-zone-promote")

package/src/config.ts

@@ -41,6 +41,11 @@ import { expandTildePath } from "./utils/path.js";
 import { coerceBool, coerceBooleanLike, coerceInstallExtension, coerceNumber } from "./connectors/coerce.js";
 import { parseSubjectRuntimeConfig } from "./subject-config.js";
 import { parseRecallStateViews } from "./recall-state-view.js";
+import {
+  parseRecallStandingBlock,
+  parseStandingBlockFreshDays,
+  parseStandingBlockMaxChars,
+} from "./standing-memory-block.js";
 import { parseRecallConcurrencyConfig } from "./recall-concurrency-config.js";
 import { parseExtractionFields } from "./extraction-span-config.js";
 import { parseReplicaPeersConfig } from "./replica-peers-config.js";
@@ -1952,6 +1957,12 @@ export function parseConfig(
     // Recall state views (issue #1952). Default false; exact false/0/"false"
     // disable (parseRecallStateViews → coerceBooleanLike).
     recallStateViews: parseRecallStateViews(cfg.recallStateViews),
+    // Prefix-cache-stable standing memory block (issue #2971). Default
+    // false, and nothing on the recall path reads these keys until the
+    // server wiring slice lands — pre-wiring behavior is byte-identical.
+    recallStandingBlock: parseRecallStandingBlock(cfg.recallStandingBlock),
+    standingBlockFreshDays: parseStandingBlockFreshDays(cfg.standingBlockFreshDays),
+    standingBlockMaxChars: parseStandingBlockMaxChars(cfg.standingBlockMaxChars),
     // Disclosure auto-escalation (issue #677 PR 4/4).  Default `manual`
     // so pre-#677 callers see unchanged behavior.  Reject anything
     // outside the allow-list rather than silently defaulting (CLAUDE.md

package/src/extraction-evidence-class.test.ts

@@ -0,0 +1,355 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import {
+  EVIDENCE_CLASSES,
+  applyEvidenceClassRules,
+  classifyEvidenceClasses,
+  deriveFactEvidenceClass,
+  deriveTurnEvidenceClass,
+  echoQuoteKey,
+  evidenceTurnInput,
+  type EvidenceClass,
+  type EvidenceClassTurnInput,
+} from "./extraction-evidence-class.js";
+
+function turn(overrides: Partial<EvidenceClassTurnInput> & Pick<EvidenceClassTurnInput, "content">): EvidenceClassTurnInput {
+  return { role: "assistant", ...overrides };
+}
+
+// ---------------------------------------------------------------------------
+// Deterministic turn-class derivation — table-driven across all classes
+// ---------------------------------------------------------------------------
+
+const DERIVATION_TABLE: ReadonlyArray<{
+  label: string;
+  input: Partial<EvidenceClassTurnInput>;
+  expected: EvidenceClass;
+}> = [
+  { label: "user role", input: { role: "user" }, expected: "user" },
+  { label: "user role despite stray tool flags", input: { role: "user", toolResult: true, toolCall: true }, expected: "user" },
+  { label: "assistant with tool result", input: { role: "assistant", toolResult: true }, expected: "tool" },
+  { label: "assistant with tool result outranks tool call", input: { role: "assistant", toolResult: true, toolCall: true }, expected: "tool" },
+  { label: "assistant with tool call only", input: { role: "assistant", toolCall: true }, expected: "action" },
+  { label: "assistant prose", input: { role: "assistant" }, expected: "agent" },
+  { label: "explicit false flags", input: { role: "assistant", toolResult: false, toolCall: false }, expected: "agent" },
+];
+
+test("deriveTurnEvidenceClass: table-driven classes", () => {
+  for (const row of DERIVATION_TABLE) {
+    const input = turn({ content: "x", ...row.input });
+    assert.equal(
+      deriveTurnEvidenceClass(input),
+      row.expected,
+      `${row.label}: expected ${row.expected}`,
+    );
+  }
+});
+
+test("deriveTurnEvidenceClass: same input always yields the same class (determinism regression)", () => {
+  for (const row of DERIVATION_TABLE) {
+    const input = turn({ content: "x", ...row.input });
+    const first = deriveTurnEvidenceClass(input);
+    for (let i = 0; i < 50; i++) {
+      assert.equal(deriveTurnEvidenceClass(input), first, `${row.label}: call ${i} diverged`);
+    }
+    // A structurally identical clone must not change the class either.
+    const clone = turn({ content: "x", ...row.input });
+    assert.equal(deriveTurnEvidenceClass(clone), first, `${row.label}: clone diverged`);
+  }
+});
+
+test("deriveTurnEvidenceClass: unrelated fields never change the class", () => {
+  const base = turn({ content: "deploy finished", role: "user" });
+  const first = deriveTurnEvidenceClass(base);
+  const noisy: EvidenceClassTurnInput = {
+    ...base,
+    content: "completely different content of a different length",
+  };
+  assert.equal(deriveTurnEvidenceClass(noisy), first);
+});
+
+// ---------------------------------------------------------------------------
+// Buffer-turn adapter — tool part flags map mechanically
+// ---------------------------------------------------------------------------
+
+test("evidenceTurnInput: tool_result part flags the turn as machine output", () => {
+  const input = evidenceTurnInput({
+    role: "assistant",
+    content: "exit 0, 3 files changed",
+    parts: [{ kind: "tool_result" }, { kind: "text" }],
+  });
+  assert.equal(input.toolResult, true);
+  assert.equal(input.toolCall, undefined);
+  assert.equal(deriveTurnEvidenceClass(input), "tool");
+});
+
+test("evidenceTurnInput: tool_call part flags an invocation", () => {
+  const input = evidenceTurnInput({
+    role: "assistant",
+    content: "running the test suite",
+    parts: [{ kind: "tool_call" }],
+  });
+  assert.equal(input.toolCall, true);
+  assert.equal(deriveTurnEvidenceClass(input), "action");
+});
+
+test("evidenceTurnInput: plain parts derive agent prose", () => {
+  const input = evidenceTurnInput({
+    role: "assistant",
+    content: "I think this looks fine",
+    parts: [{ kind: "text" }],
+  });
+  assert.equal(deriveTurnEvidenceClass(input), "agent");
+});
+
+test("evidenceTurnInput: user role passes through", () => {
+  const input = evidenceTurnInput({ role: "user", content: "ship it Friday" });
+  assert.deepEqual(input, { role: "user", content: "ship it Friday" });
+  assert.equal(deriveTurnEvidenceClass(input), "user");
+});
+
+// ---------------------------------------------------------------------------
+// Fact-level span classification — reuses the provenance matcher
+// ---------------------------------------------------------------------------
+
+const USER_TURN = turn({ role: "user", content: "we renewed the license for 40 seats" });
+const TOOL_TURN = turn({ role: "assistant", toolResult: true, content: "invoice total: 40 seats, $12,800 per year" });
+const AGENT_TURN = turn({ role: "assistant", content: "the team seems happy with the current vendor" });
+
+test("classifyEvidenceClasses: quote located in a user turn classifies user", () => {
+  const classes = classifyEvidenceClasses({
+    quote: "renewed the license",
+    turns: [USER_TURN, TOOL_TURN, AGENT_TURN],
+  });
+  assert.deepEqual(classes, ["user"]);
+});
+
+test("classifyEvidenceClasses: quote in tool output classifies tool", () => {
+  const classes = classifyEvidenceClasses({
+    quote: "$12,800 per year",
+    turns: [USER_TURN, TOOL_TURN, AGENT_TURN],
+  });
+  assert.deepEqual(classes, ["tool"]);
+});
+
+test("classifyEvidenceClasses: quote echoed in user and agent turns returns canonical order", () => {
+  const shared = turn({ role: "user", content: "the cache TTL is 300 seconds" });
+  const echo = turn({ role: "assistant", content: "as noted, the cache TTL is 300 seconds" });
+  const classes = classifyEvidenceClasses({ quote: "the cache TTL is 300 seconds", turns: [echo, shared] });
+  assert.deepEqual(classes, ["user", "agent"], "input order must not leak into output order");
+});
+
+test("classifyEvidenceClasses: leading prompt role label is stripped before matching", () => {
+  const classes = classifyEvidenceClasses({
+    quote: "[user] we renewed the license",
+    turns: [USER_TURN],
+  });
+  assert.deepEqual(classes, ["user"]);
+});
+
+test("classifyEvidenceClasses: whitespace and case differences still locate (shared matcher)", () => {
+  const classes = classifyEvidenceClasses({
+    quote: "Invoice  Total:  40 SEATS",
+    turns: [TOOL_TURN],
+  });
+  assert.deepEqual(classes, ["tool"]);
+});
+
+test("classifyEvidenceClasses: no quote and unlocatable quote both yield no classes", () => {
+  assert.deepEqual(classifyEvidenceClasses({ quote: "", turns: [USER_TURN] }), []);
+  assert.deepEqual(classifyEvidenceClasses({ quote: undefined, turns: [USER_TURN] }), []);
+  assert.deepEqual(classifyEvidenceClasses({ quote: "never said this", turns: [USER_TURN] }), []);
+});
+
+test("classifyEvidenceClasses: determinism regression over repeated and reordered calls", () => {
+  const input = { quote: "the cache TTL is 300 seconds", turns: [USER_TURN, TOOL_TURN, AGENT_TURN] };
+  const first = classifyEvidenceClasses(input);
+  for (let i = 0; i < 50; i++) {
+    assert.deepEqual(classifyEvidenceClasses(input), first, `call ${i} diverged`);
+  }
+  const reordered = { quote: input.quote, turns: [...input.turns].reverse() };
+  assert.deepEqual(classifyEvidenceClasses(reordered), first, "turn order must not change the class set");
+});
+
+// ---------------------------------------------------------------------------
+// Fact-level single class — strongest present license wins
+// ---------------------------------------------------------------------------
+
+test("deriveFactEvidenceClass: strongest class present wins in fixed order", () => {
+  assert.equal(deriveFactEvidenceClass(["user", "agent"]), "user");
+  assert.equal(deriveFactEvidenceClass(["tool", "agent"]), "tool");
+  assert.equal(deriveFactEvidenceClass(["action", "agent"]), "action");
+  assert.equal(deriveFactEvidenceClass(["agent"]), "agent");
+});
+
+test("deriveFactEvidenceClass: no located span means agent-asserted", () => {
+  assert.equal(deriveFactEvidenceClass([]), "agent");
+});
+
+test("deriveFactEvidenceClass: every class round-trips through the canonical order", () => {
+  const all = EVIDENCE_CLASSES.slice();
+  for (const cls of all) {
+    assert.equal(deriveFactEvidenceClass([cls, "agent"]), cls);
+  }
+});
+
+// ---------------------------------------------------------------------------
+// Deterministic post-extraction rules — each case a smuggling attempt
+// ---------------------------------------------------------------------------
+
+test("rule: agent-asserted user decision never passes (assertion loop)", () => {
+  // The agent asserts the human decided something; the only surviving span is
+  // agent prose. This is the self-reinforcing loop the rules must break.
+  const findings = applyEvidenceClassRules({
+    content: "The user decided to migrate the database to Postgres",
+    category: "decision",
+    evidenceClasses: ["agent"],
+  });
+  assert.equal(findings.length, 1);
+  assert.equal(findings[0]!.rule, "user_attribution_without_user_span");
+  assert.equal(findings[0]!.action, "refuse");
+});
+
+test("rule: user decision backed by a user span passes the attribution gate", () => {
+  const findings = applyEvidenceClassRules({
+    content: "The user decided to migrate the database to Postgres",
+    category: "decision",
+    evidenceClasses: ["user"],
+  });
+  assert.deepEqual(findings, []);
+});
+
+test("rule: agent-own decision honestly attributed is not refused", () => {
+  const findings = applyEvidenceClassRules({
+    content: "The agent chose the conservative retry policy",
+    category: "decision",
+    subject: "agent",
+    evidenceClasses: ["agent"],
+  });
+  assert.deepEqual(findings, []);
+});
+
+test("rule: preference and commitment are decision-like too", () => {
+  for (const category of ["preference", "commitment"]) {
+    const findings = applyEvidenceClassRules({ content: "wants weekly digests", category, evidenceClasses: ["agent"] });
+    assert.equal(findings[0]?.rule, "user_attribution_without_user_span", category);
+  }
+  const factCategory = applyEvidenceClassRules({ content: "wants weekly digests", category: "fact", evidenceClasses: ["agent"] });
+  assert.deepEqual(factCategory, [], "plain facts are not user attributions");
+});
+
+test("rule: number without tool or action evidence is demoted", () => {
+  const findings = applyEvidenceClassRules({
+    content: "The cluster holds 5000 documents",
+    category: "fact",
+    evidenceClasses: ["agent"],
+  });
+  assert.equal(findings.length, 1);
+  assert.equal(findings[0]!.rule, "numeric_without_tool_evidence");
+  assert.equal(findings[0]!.action, "demote");
+});
+
+test("rule: number with tool evidence passes", () => {
+  assert.deepEqual(
+    applyEvidenceClassRules({ content: "The cluster holds 5000 documents", category: "fact", evidenceClasses: ["tool"] }),
+    [],
+  );
+});
+
+test("rule: number with action evidence passes", () => {
+  assert.deepEqual(
+    applyEvidenceClassRules({ content: "The cluster holds 5000 documents", category: "fact", evidenceClasses: ["action"] }),
+    [],
+  );
+});
+
+test("rule: number in a user-spanned fact still demotes — the human is not a licit number source", () => {
+  const findings = applyEvidenceClassRules({
+    content: "We bought 40 seats",
+    category: "fact",
+    evidenceClasses: ["user"],
+  });
+  assert.equal(findings[0]?.rule, "numeric_without_tool_evidence");
+});
+
+test("rule: no evidence classes at all demotes numeric content", () => {
+  const findings = applyEvidenceClassRules({ content: "cost is 5000", category: "fact", evidenceClasses: [] });
+  assert.equal(findings[0]?.rule, "numeric_without_tool_evidence");
+});
+
+test("rule: echo of existing store content is refused", () => {
+  const existing = new Set([echoQuoteKey("the cache TTL is 300 seconds")]);
+  const findings = applyEvidenceClassRules({
+    content: "The cache TTL is 300 seconds",
+    category: "fact",
+    evidenceClasses: ["tool"],
+    quoteKeys: [echoQuoteKey("the cache TTL is 300 seconds")],
+    existingQuoteKeys: existing,
+  });
+  assert.equal(findings.length, 1);
+  assert.equal(findings[0]!.rule, "echo_of_existing_content");
+  assert.equal(findings[0]!.action, "refuse");
+});
+
+test("rule: one fresh quote survives echo suppression", () => {
+  const existing = new Set([echoQuoteKey("old quote")]);
+  const findings = applyEvidenceClassRules({
+    content: "something new",
+    category: "fact",
+    evidenceClasses: ["tool"],
+    quoteKeys: [echoQuoteKey("old quote"), echoQuoteKey("a brand new observation")],
+    existingQuoteKeys: existing,
+  });
+  assert.deepEqual(findings, []);
+});
+
+test("rule: no quote keys or no index means echo rule stays silent", () => {
+  assert.deepEqual(
+    applyEvidenceClassRules({ content: "x", category: "fact", evidenceClasses: ["tool"] }),
+    [],
+  );
+  assert.deepEqual(
+    applyEvidenceClassRules({
+      content: "x", category: "fact", evidenceClasses: ["tool"], quoteKeys: [echoQuoteKey("q")],
+    }),
+    [],
+  );
+});
+
+test("rule: combined smuggling — agent-asserted decision carrying a number", () => {
+  const findings = applyEvidenceClassRules({
+    content: "The user approved a budget of 9000 for the migration",
+    category: "decision",
+    evidenceClasses: ["agent"],
+  });
+  assert.deepEqual(
+    findings.map((f) => f.rule),
+    ["numeric_without_tool_evidence", "user_attribution_without_user_span"],
+  );
+});
+
+test("rule: same input always yields the same findings (determinism regression)", () => {
+  const input = {
+    content: "The user approved a budget of 9000 for the migration",
+    category: "decision" as const,
+    evidenceClasses: ["agent"] as const,
+    quoteKeys: [echoQuoteKey("q1")] as const,
+    existingQuoteKeys: new Set([echoQuoteKey("q1")]),
+  };
+  const first = applyEvidenceClassRules(input);
+  for (let i = 0; i < 50; i++) {
+    assert.deepEqual(applyEvidenceClassRules(input), first, `call ${i} diverged`);
+  }
+  // Findings order is canonical (rule id order), not input-order dependent.
+  assert.deepEqual(first.map((f) => f.rule), [
+    "numeric_without_tool_evidence",
+    "user_attribution_without_user_span",
+    "echo_of_existing_content",
+  ]);
+});
+
+test("echoQuoteKey is case- and whitespace-insensitive and stable", () => {
+  assert.equal(echoQuoteKey("The  Cache TTL"), echoQuoteKey("the cache ttl"));
+  assert.equal(echoQuoteKey("x"), echoQuoteKey("x"));
+  assert.equal(echoQuoteKey("  spaced  out  "), "spaced out");
+});