@remnic/core 9.7.15 → 9.9.0

package/src/storage-behavior-signals-cache.test.ts

@@ -0,0 +1,237 @@
+import assert from "node:assert/strict";
+import { appendFile, mkdtemp, mkdir, readFile, rm, utimes, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import test from "node:test";
+
+import { StorageManager } from "./storage.js";
+import { SecureStoreLockedError } from "./secure-store/secure-fs.js";
+import type { BehaviorSignalEvent } from "./types.js";
+
+// Issue #1909 (Part C): appendBehaviorSignals used to re-read + JSON.parse the
+// whole (unbounded) behavior-signals.jsonl on EVERY append to rebuild a dedup
+// key set. It now keeps the key set in memory, validated by (size, mtime) file
+// identity; a foreign write forces a reload, matching the catalog cache pattern.
+
+function signal(memoryId: string, signalHash: string): BehaviorSignalEvent {
+  return {
+    timestamp: "2026-01-01T00:00:00.000Z",
+    namespace: "default",
+    memoryId,
+    category: "preference",
+    signalType: "preference_affinity",
+    direction: "positive",
+    confidence: 0.9,
+    signalHash,
+    source: "extraction",
+  };
+}
+
+interface BehaviorSignalsCacheOwner {
+  behaviorSignalsKeyCache:
+    | { identity: { size: number; mtimeMs: number }; keys: Set<string> }
+    | null;
+}
+
+function cacheOf(storage: StorageManager): BehaviorSignalsCacheOwner {
+  return storage as unknown as BehaviorSignalsCacheOwner;
+}
+
+async function withMemoryDir(run: (dir: string) => Promise<void>): Promise<void> {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-behavior-cache-"));
+  try {
+    await run(dir);
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+}
+
+async function readRows(filePath: string): Promise<string[]> {
+  const raw = await readFile(filePath, "utf8");
+  return raw.split("\n").map((l) => l.trim()).filter(Boolean);
+}
+
+test("steady-state appends reuse the cached key set — no full-file reload", async () => {
+  await withMemoryDir(async (dir) => {
+    const storage = new StorageManager(dir);
+    const signalsPath = path.join(dir, "state", "behavior-signals.jsonl");
+
+    await storage.appendBehaviorSignals([signal("m1", "h1")]);
+    const owner = cacheOf(storage);
+    assert.ok(owner.behaviorSignalsKeyCache, "cache populated after first append");
+    const firstKeySet = owner.behaviorSignalsKeyCache.keys;
+
+    await storage.appendBehaviorSignals([signal("m2", "h2")]);
+    assert.strictEqual(
+      owner.behaviorSignalsKeyCache?.keys,
+      firstKeySet,
+      "the same in-memory key set is reused across appends (no reload/re-parse)",
+    );
+
+    // Duplicate memoryId:signalHash is still suppressed via the cached set.
+    const appended = await storage.appendBehaviorSignals([signal("m1", "h1")]);
+    assert.equal(appended, 0, "duplicate signal is deduped against the cached set");
+    assert.strictEqual(owner.behaviorSignalsKeyCache?.keys, firstKeySet, "still no reload");
+
+    const rows = await readRows(signalsPath);
+    assert.equal(rows.length, 2, "only the two distinct signals are on disk");
+  });
+});
+
+test("a foreign modification (changed size/mtime) forces a reload and dedups against it", async () => {
+  await withMemoryDir(async (dir) => {
+    const storage = new StorageManager(dir);
+    const signalsPath = path.join(dir, "state", "behavior-signals.jsonl");
+
+    await storage.appendBehaviorSignals([signal("m1", "h1")]);
+    const owner = cacheOf(storage);
+    const firstKeySet = owner.behaviorSignalsKeyCache?.keys;
+
+    // Another process appends a row out-of-band, changing size + mtime.
+    await appendFile(signalsPath, `${JSON.stringify(signal("m-foreign", "h-foreign"))}\n`, "utf8");
+    // Ensure mtime advances even on coarse-grained clocks.
+    const future = new Date(Date.now() + 5_000);
+    await utimes(signalsPath, future, future);
+
+    // Appending the foreign row again must be deduped — proving we reloaded.
+    const appended = await storage.appendBehaviorSignals([signal("m-foreign", "h-foreign")]);
+    assert.equal(appended, 0, "foreign row was reloaded and recognized as a duplicate");
+    assert.notStrictEqual(
+      owner.behaviorSignalsKeyCache?.keys,
+      firstKeySet,
+      "the key set was rebuilt after the foreign change",
+    );
+
+    const rows = await readRows(signalsPath);
+    assert.equal(rows.length, 2, "no duplicate foreign row was written");
+  });
+});
+
+test("first write (ENOENT) creates the file and seeds the cache", async () => {
+  await withMemoryDir(async (dir) => {
+    const storage = new StorageManager(dir);
+    const signalsPath = path.join(dir, "state", "behavior-signals.jsonl");
+
+    const n = await storage.appendBehaviorSignals([signal("m1", "h1")]);
+    assert.equal(n, 1);
+    assert.ok(cacheOf(storage).behaviorSignalsKeyCache, "cache seeded after first write");
+    const rows = await readRows(signalsPath);
+    assert.equal(rows.length, 1);
+  });
+});
+
+test("malformed rows on disk are skipped (fail-open) and do not block deduping valid rows", async () => {
+  await withMemoryDir(async (dir) => {
+    const signalsPath = path.join(dir, "state", "behavior-signals.jsonl");
+    await mkdir(path.dirname(signalsPath), { recursive: true });
+    await writeFile(
+      signalsPath,
+      `{not json\n${JSON.stringify(signal("m1", "h1"))}\n   \n`,
+      "utf8",
+    );
+
+    const storage = new StorageManager(dir);
+    // m1:h1 already present (valid row) → deduped despite the malformed line.
+    const dup = await storage.appendBehaviorSignals([signal("m1", "h1")]);
+    assert.equal(dup, 0, "valid existing row is recognized; malformed row ignored");
+    // A new distinct signal appends fine.
+    const fresh = await storage.appendBehaviorSignals([signal("m2", "h2")]);
+    assert.equal(fresh, 1);
+  });
+});
+
+test("SecureStoreLockedError propagates when reading an encrypted ledger while locked", async () => {
+  await withMemoryDir(async (dir) => {
+    // Write an encrypted behavior-signals ledger under a key.
+    const writer = new StorageManager(dir);
+    writer.setSecureStoreKey(Buffer.alloc(32, 3));
+    await writer.appendBehaviorSignals([signal("m1", "h1")]);
+
+    // A fresh, locked, secure-required store must not silently read plaintext —
+    // reading the encrypted ledger to rebuild the dedup set throws.
+    const locked = new StorageManager(dir);
+    locked.setSecureStoreRequired(true);
+    locked.setSecureStoreKey(null);
+    await assert.rejects(
+      () => locked.appendBehaviorSignals([signal("m2", "h2")]),
+      SecureStoreLockedError,
+    );
+  });
+});
+
+test("a failed append leaves the dedup cache clean so a retry persists the events", async () => {
+  // Issue #1909 review finding 4 (HIGH data-loss): on a cache hit the dedup set
+  // must NOT be mutated before the append is durable. Otherwise a failed append
+  // (unchanged size/mtime) leaves the next call cache-hitting a poisoned set and
+  // silently dropping the events forever.
+  await withMemoryDir(async (dir) => {
+    const storage = new StorageManager(dir);
+    // Seed a row so the in-memory dedup cache is populated (exercise the hit path).
+    await storage.appendBehaviorSignals([signal("m0", "h0")]);
+    const owner = cacheOf(storage);
+    const cachedKeys = owner.behaviorSignalsKeyCache?.keys;
+    assert.ok(cachedKeys, "cache seeded");
+    const sizeBefore = cachedKeys.size;
+
+    // Force the next underlying secure append to fail.
+    const appendOwner = storage as unknown as {
+      appendStorageSecureFile: (filePath: string, content: string) => Promise<void>;
+    };
+    const realAppend = appendOwner.appendStorageSecureFile.bind(storage);
+    let failNext = true;
+    appendOwner.appendStorageSecureFile = async (filePath: string, content: string) => {
+      if (failNext) {
+        failNext = false;
+        throw new Error("simulated disk full");
+      }
+      return realAppend(filePath, content);
+    };
+
+    await assert.rejects(
+      () => storage.appendBehaviorSignals([signal("m1", "h1")]),
+      /simulated disk full/,
+    );
+    assert.equal(
+      owner.behaviorSignalsKeyCache?.keys.has("m1:h1"),
+      false,
+      "the failed append must not add its key to the cached dedup set",
+    );
+    assert.equal(
+      owner.behaviorSignalsKeyCache?.keys.size,
+      sizeBefore,
+      "cache size is unchanged after the failed append",
+    );
+
+    // The retry (append now succeeds) persists the previously-dropped event.
+    const n = await storage.appendBehaviorSignals([signal("m1", "h1")]);
+    assert.equal(n, 1, "the retry is NOT deduped away — the event is persisted");
+    const rows = await readRows(path.join(dir, "state", "behavior-signals.jsonl"));
+    assert.equal(rows.length, 2, "both distinct signals are on disk after the retry");
+  });
+});
+
+test("concurrent appends serialize: both batches persist once and a later append dedups against their union", async () => {
+  // Issue #1909 review round 3: without a per-instance mutex, two concurrent
+  // appends each snapshot their own dedup set before the writes serialize; the
+  // later completion commits an INCOMPLETE set under the final file identity, so
+  // a subsequent call cache-hits a set missing the first batch and writes
+  // duplicate signals.
+  await withMemoryDir(async (dir) => {
+    const storage = new StorageManager(dir);
+    const signalsPath = path.join(dir, "state", "behavior-signals.jsonl");
+
+    const [n1, n2] = await Promise.all([
+      storage.appendBehaviorSignals([signal("mA", "hA")]),
+      storage.appendBehaviorSignals([signal("mB", "hB")]),
+    ]);
+    assert.equal(n1, 1, "first concurrent batch persisted");
+    assert.equal(n2, 1, "second concurrent batch persisted");
+    assert.equal((await readRows(signalsPath)).length, 2, "both concurrent batches written exactly once");
+
+    // Re-submitting BOTH keys must dedup against the UNION of the two batches —
+    // proving the cache reflects everything actually on disk.
+    const n3 = await storage.appendBehaviorSignals([signal("mA", "hA"), signal("mB", "hB")]);
+    assert.equal(n3, 0, "later append deduped against the union of both concurrent batches");
+    assert.equal((await readRows(signalsPath)).length, 2, "no duplicate rows written");
+  });
+});

package/src/storage-contract/cache-coherence.test.ts

@@ -10,7 +10,7 @@
 
 import assert from "node:assert/strict";
 import test from "node:test";
-import { appendFile, mkdtemp, rm, mkdir, writeFile } from "node:fs/promises";
+import { appendFile, mkdtemp, readFile, rm, mkdir, writeFile } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 
@@ -340,3 +340,98 @@ test("hot cache (#1902): an empty corpus is served from cache, not rescanned (ki
     await rm(dir, { recursive: true, force: true });
   }
 });
+test("hot cache (#2020): path-scoped access flush updates the cited duplicate ID file", async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-hot-access-path-"));
+  try {
+    resetStaticCaches();
+    const sm = new StorageManager(dir);
+    await sm.ensureDirectories();
+    await sm.writeMemory("fact", "first duplicate");
+    await sm.writeMemory("fact", "second duplicate");
+    const initial = await sm.readAllMemories();
+    const first = initial.find((memory) => memory.content === "first duplicate");
+    const second = initial.find((memory) => memory.content === "second duplicate");
+    assert.ok(first);
+    assert.ok(second);
+
+    const secondFile = await readFile(second.path, "utf8");
+    await writeFile(second.path, secondFile.replace(/^id: .*$/m, `id: ${first.frontmatter.id}`));
+    resetStaticCaches();
+    const fresh = new StorageManager(dir);
+    await fresh.ensureDirectories();
+    await fresh.flushAccessTracking([
+      {
+        memoryId: first.frontmatter.id,
+        memoryPath: first.path,
+        newCount: 17,
+        lastAccessed: "2026-07-19T00:00:00.000Z",
+      },
+    ]);
+
+    const after = await fresh.readAllMemories();
+    assert.equal(after.find((memory) => memory.path === first.path)?.frontmatter.accessCount, 17);
+    assert.notEqual(after.find((memory) => memory.path === second.path)?.frontmatter.accessCount, 17);
+  } finally {
+    resetStaticCaches();
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+test("citation path lookup returns every duplicate when no preferred path matches", async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-citation-duplicates-"));
+  try {
+    resetStaticCaches();
+    const storage = new StorageManager(dir);
+    await storage.ensureDirectories();
+    await storage.writeMemory("fact", "first duplicate");
+    await storage.writeMemory("fact", "second duplicate");
+    const initial = await storage.readAllMemories();
+    const first = initial.find((memory) => memory.content === "first duplicate");
+    const second = initial.find((memory) => memory.content === "second duplicate");
+    assert.ok(first);
+    assert.ok(second);
+
+    const secondFile = await readFile(second.path, "utf8");
+    const duplicatePath = path.join(dir, "facts", "duplicate", path.basename(first.path));
+    await mkdir(path.dirname(duplicatePath), { recursive: true });
+    await writeFile(
+      duplicatePath,
+      secondFile.replace(/^id: .*$/m, `id: ${first.frontmatter.id}`),
+    );
+    await rm(second.path);
+    resetStaticCaches();
+    const fresh = new StorageManager(dir);
+    await fresh.ensureDirectories();
+
+    const found = await fresh.findExistingMemoryPaths(
+      [first.frontmatter.id],
+      new Map([[first.frontmatter.id, ["/missing/preferred/path.md"]]]),
+    );
+
+    assert.deepEqual(found.get(first.frontmatter.id)?.sort(), [first.path, duplicatePath].sort());
+  } finally {
+    resetStaticCaches();
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("citation path lookup resolves collection-prefixed QMD paths", async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-citation-path-"));
+  try {
+    resetStaticCaches();
+    const storage = new StorageManager(dir);
+    await storage.ensureDirectories();
+    const { id } = await storage.writeMemory("fact", "citation target");
+    const [memory] = await storage.readAllMemories();
+    assert.ok(memory);
+
+    const found = await storage.findExistingMemoryPaths(
+      [id],
+      new Map([[id, [`collection/${path.relative(dir, memory.path)}`]]]),
+    );
+
+    assert.deepEqual(found.get(id), [memory.path]);
+  } finally {
+    resetStaticCaches();
+    await rm(dir, { recursive: true, force: true });
+  }
+});

package/src/storage-contract/content-hash.test.ts

@@ -63,14 +63,59 @@ test("content-hash: contentHashSource overrides the persisted body for dedup (ru
   }
 });
 
-test("content-hash: non-fact categories do not register a content hash", async () => {
+test("content-hash: the shared dedup index covers every active category, but hasFactContentHash stays fact-only (#2016)", async () => {
   const { storage, cleanup } = await makeStorage();
   try {
     await storage.writeMemory("decision", "we chose option B");
+    // writeMemory only registers facts on the write hot path, but the
+    // authoritative corpus rebuild (first fact-hash use) indexes EVERY active
+    // registered category (PR #2016) so a restart never re-creates an identical
+    // decision/preference/commitment. The SHARED content-hash index is therefore
+    // category-agnostic — probe it directly.
+    const shared = await storage.getAuthoritativeFactHashIndex();
+    assert.equal(
+      shared.has("we chose option B"),
+      true,
+      "the shared dedup index must cover all active categories, not only facts",
+    );
+    // hasFactContentHash, however, is fact-ONLY (PR #2016): a non-fact body must
+    // NOT satisfy a fact-hash check, or an unrelated decision/preference/note
+    // would suppress a real fact candidate for direct consumers (wearable/native
+    // writers, explicit-capture) that trust a hit before their own category or
+    // source confirmation.
     assert.equal(
       await storage.hasFactContentHash("we chose option B"),
       false,
-      "non-fact categories must not enter the fact dedup index",
+      "a decision body must not satisfy the fact-only hasFactContentHash",
+    );
+  } finally {
+    await cleanup();
+  }
+});
+
+test("content-hash: hasFactContentHash is fact-only — a non-fact body sharing a fact's content never suppresses the fact (#2016)", async () => {
+  const { storage, cleanup } = await makeStorage();
+  try {
+    const body = "the launch window closes on friday";
+    // An unrelated non-fact memory shares the normalized body.
+    await storage.writeMemory("preference", body);
+    const shared = await storage.getAuthoritativeFactHashIndex();
+    assert.equal(
+      shared.has(body),
+      true,
+      "the shared dedup index carries the non-fact hash (cross-category dedup preserved)",
+    );
+    assert.equal(
+      await storage.hasFactContentHash(body),
+      false,
+      "a preference must not satisfy hasFactContentHash — a direct consumer would else skip a real fact",
+    );
+    // A genuine active fact with the same body DOES satisfy the fact-only check.
+    await storage.writeMemory("fact", body);
+    assert.equal(
+      await storage.hasFactContentHash(body),
+      true,
+      "an active fact with the body satisfies the fact-only check",
     );
   } finally {
     await cleanup();