dsh-context-compression-improved 0.5.0 → 0.5.2

package/CHANGELOG.ja.md

@@ -2,6 +2,57 @@
 
 > 完全な履歴（アップストリーム 0.1.0 以前を含む）は [CHANGELOG.md](CHANGELOG.md) を参照。このファイルはフォークの追加エントリーのみを翻訳したものです。 · [English](CHANGELOG.md) · [中文](CHANGELOG.zh.md) · [한국어](CHANGELOG.ko.md)
 
+## 0.5.2 - 2026-09-20
+
+### Changed（変更）
+
+- 人手ゲート付きレビューパイプライン（review gate、beta）を**廃止**しました。その意味論は
+  「助言」に置き換わります。便益モデルは従来どおり 1 パスを 1 回の統合 mutation として
+  価格付けしますが、算出したバンド（`profitable` / `high-impact` / `slow-payback` /
+  `unpriceable` / `not-worth-it`）は `reduction-advice` 監査レコードとして公開され、
+  advisor レポートルートにスナップショットされるだけになりました——reduction を保留・遅延・
+  書き換えることはありません。この gate は機能自身の要件（削減は自動処理を妨げない）と矛盾し、
+  出荷既定（`reviewMode` 有効 + 4,000 トークンの高影響しきい値に対し 8,192 トークンの
+  fresh トリガー）では fresh バッチを 100% 人手レビューへ迂回させ、有効化した利用者から
+  自動経路を事実上奪っていました。助言のしきい値はモジュール定数（α `0.1`、高影響
+  `4,000` トークン）になりました。何もこれに従って動作しないため、設定項目ではなくなります。
+- gate とともに削除：レビューキューとその `storageDomain` アダプタ、プロセス全体の
+  レジストリ、`review-queue` / `review-decide` の HTTP ルートと `reviewQueueRoute` 配置
+  フラグ、`shell.overlay` クライアントパネル、`reviewMode` / `reviewTimeoutTurns` /
+  `cacheHitDiscountAlpha` / `reviewHighImpactTokens` の設定キー、`review-outcome` 監査種別。
+  4 つの設定キーは**両方のデコーダで引き続き受理され無視されます**——既存の文書（稼働中は
+  `reviewMode: false` を含む）はそのまま読み込まれ、設定カードも表示されます——そして解決済み
+  policy には決して到達しません。読み取り専用の `GET .../advisor-report` は `lastAdvice` も
+  返します。
+
+### Added（追加）
+
+- 廃止に対する回帰ピン：かつて全量を迂回させていた設定（`reviewMode: true`、
+  `reviewHighImpactTokens: 1`）で fresh バッチが**そのまま着地**し、`high-impact` の助言
+  レコードがそれを記述することをホスト統合テストで固定。ランタイムパーサとブラウザデコーダの
+  両側で「受理して無視」を固定する非推奨契約テストも追加。
+
+### Rollback（ロールバック）
+
+- gate を含む最後のリリースへ戻す：`npm dist-tag add
+  dsh-context-compression-improved@0.5.1 dsh-0.1.5 --registry https://registry.npmjs.org/`
+  の後、`dsh plugin --profile web add dsh-context-compression-improved@0.5.1`。
+
+## 0.5.1 - 2026-09-20
+
+### Fixed（修正）
+
+- 同一 identity を並行して compose する preset-overlay が Windows で失敗しなくなりました。
+  公開は宛先パスごとに直列化し、それでも原子的 rename が競合に敗れた場合は、宛先が
+  このステージングファイルと同じ `{mtimeMs, size}` standing key を既に持っていることを
+  確認してから成功と見なします。Windows の `MoveFileEx` はこの競合を `EPERM`/`EBUSY` と
+  して報告しますが、POSIX の `rename` は単に置き換えます——これが並行セッション開始時に
+  `standingKeyFor()` を投げさせていました。一致しない宛先はこれまで通り明確に失敗し、
+  静かな世代の再利用は禁止されたままです。
+- この問題と他の既存レッドゲートを覆い隠していたリリースゲート／テストの修正
+  （packed smoke の陳旧な識別子と廃止済み audit reason、古い client inject 期待値、
+  Windows 限定の spawn トラップ）。
+
 ## 0.5.0 - 2026-09-20
 
 ### Added（追加）

package/CHANGELOG.ko.md

@@ -2,6 +2,57 @@
 
 > 전체 히스토리(업스트림 0.1.0 이전 포함)는 [CHANGELOG.md](CHANGELOG.md)를 참고하세요. 이 파일은 포크의 추가 항목만 번역한 것입니다. · [English](CHANGELOG.md) · [中文](CHANGELOG.zh.md) · [日本語](CHANGELOG.ja.md)
 
+## 0.5.2 - 2026-09-20
+
+### Changed(변경)
+
+- 사람이 승인하는 리뷰 파이프라인(review gate, beta)을 **폐기**했습니다. 그 의미론은
+  "조언"으로 대체됩니다. 이익 모델은 여전히 한 패스를 하나의 병합 mutation으로 가격
+  책정하지만, 계산한 밴드(`profitable` / `high-impact` / `slow-payback` /
+  `unpriceable` / `not-worth-it`)는 이제 `reduction-advice` 감사 레코드로 게시되고 advisor
+  리포트 라우트에 스냅샷될 뿐입니다——reduction을 보류·지연·재작성하지 않습니다. 이 gate는
+  기능 자체의 요구(축소는 자동 처리를 막지 않는다)와 모순되었고, 출하 기본값(`reviewMode`
+  켬 + 4,000 토큰 고영향 임계값 대 8,192 토큰 fresh 트리거)에서는 fresh 배치를 100% 사람
+  리뷰로 우회시켜, 이를 켠 사용자에게서 자동 경로를 사실상 빼앗았습니다. 조언 임계값은 이제
+  모듈 상수(α `0.1`, 고영향 `4,000` 토큰)입니다. 아무 경로도 이에 따라 동작하지 않으므로
+  더 이상 설정 항목이 아닙니다.
+- gate와 함께 제거: 리뷰 큐와 그 `storageDomain` 어댑터, 프로세스 전역 레지스트리,
+  `review-queue` / `review-decide` HTTP 라우트와 `reviewQueueRoute` 배포 플래그,
+  `shell.overlay` 클라이언트 패널, `reviewMode` / `reviewTimeoutTurns` /
+  `cacheHitDiscountAlpha` / `reviewHighImpactTokens` 설정 키, `review-outcome` 감사 종류.
+  네 개의 설정 키는 **두 디코더 모두에서 계속 허용되고 무시됩니다**——기존 문서(운영 중인
+  문서에는 `reviewMode: false`가 있음)는 그대로 로드되고 설정 카드도 렌더링됩니다——그리고
+  해석된 policy에는 결코 도달하지 않습니다. 읽기 전용 `GET .../advisor-report`는
+  `lastAdvice`도 함께 제공합니다.
+
+### Added(추가)
+
+- 폐기에 대한 회귀 고정: 예전에 전량을 우회시키던 설정(`reviewMode: true`,
+  `reviewHighImpactTokens: 1`)으로 fresh 배치가 **그대로 착지**하고 `high-impact` 조언
+  레코드가 이를 설명함을 호스트 통합 테스트로 고정했습니다. 런타임 파서와 브라우저 디코더
+  양쪽에서 "허용 후 무시"를 고정하는 폐기 계약 테스트도 추가했습니다.
+
+### Rollback(롤백)
+
+- gate를 포함한 마지막 릴리스로 되돌리기: `npm dist-tag add
+  dsh-context-compression-improved@0.5.1 dsh-0.1.5 --registry https://registry.npmjs.org/`
+  후 `dsh plugin --profile web add dsh-context-compression-improved@0.5.1`.
+
+## 0.5.1 - 2026-09-20
+
+### Fixed(수정)
+
+- 동일 identity를 동시에 compose하는 preset-overlay가 Windows에서 더 이상 실패하지
+  않습니다. 게시는 대상 경로별로 직렬화되며, 그래도 원자적 rename이 경쟁에서 지면 대상이
+  이미 이 스테이징 파일과 같은 `{mtimeMs, size}` standing key를 가지고 있는지 확인한 뒤에만
+  성공으로 간주합니다. Windows의 `MoveFileEx`는 이 경쟁을 `EPERM`/`EBUSY`로 보고하지만
+  POSIX `rename`은 대상을 그대로 교체합니다——이 때문에 동시 세션 시작 시
+  `standingKeyFor()`가 예외를 던졌습니다. 일치하지 않는 대상은 여전히 명확히 실패하며,
+  조용한 세대 재사용은 계속 금지됩니다.
+- 이 문제와 다른 기존 레드 게이트를 가리던 릴리스 게이트/테스트 수정
+  (packed smoke의 오래된 식별자와 폐기된 audit reason, 낡은 client inject 기대값,
+  Windows 전용 spawn 함정).
+
 ## 0.5.0 - 2026-09-20
 
 ### Added(추가)

package/CHANGELOG.md

@@ -2,6 +2,61 @@
 
 All notable changes use this file. The project follows semantic versioning after `0.1.0`.
 
+## 0.5.2 - 2026-09-20
+
+### Changed
+
+- The human-gated review pipeline (beta) is **retired**. Its semantics are replaced by
+  advice: the benefit model still prices every pass as ONE merged mutation, but the band it
+  computes (`profitable` / `high-impact` / `slow-payback` / `unpriceable` / `not-worth-it`)
+  is now published as a `reduction-advice` audit record and snapshotted onto the advisor
+  report route — it never withholds, delays, or rewrites a reduction. The gate contradicted
+  the feature's own requirement (a reduction must never block automatic processing) and, with
+  the shipped defaults (`reviewMode` on plus a 4,000-token high-impact threshold against an
+  8,192-token fresh trigger), diverted 100% of a fresh batch into human review, leaving the
+  automatic path effectively off for anyone who opted in. The advice thresholds are now
+  module constants (α `0.1`, high-impact `4,000` tokens): nothing acts on them, so they are
+  no longer settings.
+- Removed with the gate: the review queue and its `storageDomain` adapter, the process-wide
+  registry, the `review-queue` / `review-decide` HTTP routes and the `reviewQueueRoute`
+  deployment flag, the `shell.overlay` client panel, the `reviewMode` /
+  `reviewTimeoutTurns` / `cacheHitDiscountAlpha` / `reviewHighImpactTokens` settings keys,
+  and the `review-outcome` audit kind. The four settings keys stay ACCEPTED and IGNORED by
+  both decoders — an existing document (the live one carries `reviewMode: false`) still loads
+  and still renders its settings card — and never reach the resolved policy. The read-only
+  `GET .../advisor-report` route additionally serves `lastAdvice`.
+
+### Added
+
+- Regression pins for the retirement: a host-integration spec drives the exact settings that
+  used to divert everything (`reviewMode: true`, `reviewHighImpactTokens: 1`) and asserts the
+  fresh batch LANDS, described by a `high-impact` advice record; a deprecation-contract spec
+  pins accept-and-ignore for the retired keys on both the runtime parser and the browser
+  decoder.
+
+### Rollback
+
+- Reinstall the last release that still ships the gate: `npm dist-tag add
+  dsh-context-compression-improved@0.5.1 dsh-0.1.5 --registry https://registry.npmjs.org/`
+  then `dsh plugin --profile web add dsh-context-compression-improved@0.5.1`.
+
+## 0.5.1 - 2026-09-20
+
+### Fixed
+
+- Concurrent preset-overlay composition of one identity no longer fails on Windows.
+  Publication is now serialized per destination path, and when the atomic rename still
+  loses the race the destination is confirmed to already carry this staging file's
+  `{mtimeMs, size}` standing key before the publish reports success. Windows `MoveFileEx`
+  reports that lost race as `EPERM`/`EBUSY` where POSIX `rename` simply replaces the
+  destination, which made `standingKeyFor()` throw during concurrent session start. A
+  destination that does not match still fails loudly, so a silently reused generation
+  stays forbidden.
+- Release-gate and test repairs that had been hiding this and other pre-existing red
+  gates: stale identifiers and a retired audit reason in the packed smokes, a stale
+  client-inject expectation, and Windows-only spawn traps (`git` and multi-line
+  `node -e` scripts were routed through `cmd.exe`, which rewrote their arguments).
+
 ## 0.5.0 - 2026-09-20
 
 ### Added

package/CHANGELOG.zh.md

@@ -2,6 +2,51 @@
 
 > 完整历史（含上游 0.1.0 及更早版本）见 [CHANGELOG.md](CHANGELOG.md)。本文件只翻译本 fork 的新增条目。 · [English](CHANGELOG.md) · [日本語](CHANGELOG.ja.md) · [한국어](CHANGELOG.ko.md)
 
+## 0.5.2 - 2026-09-20
+
+### Changed
+
+- **退役**人工审查管线（review gate，beta）。其语义由"建议"取代：收益模型仍按"整批一次
+  mutation"定价，但它算出的分带（`profitable` / `high-impact` / `slow-payback` /
+  `unpriceable` / `not-worth-it`）现在只作为 `reduction-advice` 审计记录发布，并在 advisor
+  报告路由上留一份快照——绝不扣留、延迟或改写任何 reduction。该 gate 与本功能自身的要求
+  （缩减不阻断自动处理）相矛盾，且在出厂默认下（`reviewMode` 开 + 4000 token 高影响阈值
+  对 8192 token 的 fresh 门槛）会把整批 fresh 100% 改道进人审，等于让选择开启它的用户失去
+  自动路径。建议阈值改为模块常量（α `0.1`、高影响 `4000` token）：没有任何路径依据它们
+  行动，因此不再作为配置项。
+- 随 gate 一并移除：审查队列及其 `storageDomain` 适配器、进程级注册表、
+  `review-queue` / `review-decide` 两条 HTTP 路由与 `reviewQueueRoute` 部署开关、
+  `shell.overlay` 客户端浮窗、`reviewMode` / `reviewTimeoutTurns` /
+  `cacheHitDiscountAlpha` / `reviewHighImpactTokens` 四个 settings 键，以及
+  `review-outcome` 审计类型。这四个键在**两个解码器**中仍被接受但被忽略——既有配置文档
+  （线上即带 `reviewMode: false`）照常加载、设置卡照常渲染——且永不进入已解析的 policy。
+  只读路由 `GET .../advisor-report` 额外提供 `lastAdvice`。
+
+### Added
+
+- 退役的回归钉桩：一条宿主集成测试用**当年会全量改道的那套配置**（`reviewMode: true`、
+  `reviewHighImpactTokens: 1`）断言 fresh 批次**照常落地**并附带 `high-impact` 建议记录；
+  另一条弃用契约测试在运行时解析器与浏览器解码器两侧钉死"接受但忽略"。
+
+### Rollback
+
+- 回退到仍带 gate 的最后一个版本：`npm dist-tag add
+  dsh-context-compression-improved@0.5.1 dsh-0.1.5 --registry https://registry.npmjs.org/`，
+  然后 `dsh plugin --profile web add dsh-context-compression-improved@0.5.1`。
+
+## 0.5.1 - 2026-09-20
+
+### Fixed
+
+- 同一 identity 的并发 preset-overlay 组装在 Windows 上不再失败：发布改为按目标路径串行，
+  且当原子 rename 仍然竞争失败时，会先确认目标文件已带有本 staging 文件的
+  `{mtimeMs, size}` standing key 才判定发布成功。Windows 的 `MoveFileEx` 会把这种竞争
+  失败报成 `EPERM`/`EBUSY`，而 POSIX `rename` 只是覆盖目标——这曾导致并发启动会话时
+  `standingKeyFor()` 抛错。目标不匹配时仍会明确失败，静默复用世代依旧被禁止。
+- 一并修复了长期掩盖该问题及其它预存红灯的发布门禁与测试：packed smoke 中陈旧的标识符与
+  已退役的审计 reason、过期的客户端 inject 断言，以及仅 Windows 触发的 spawn 陷阱
+  （`git` 与多行 `node -e` 脚本经 `cmd.exe` 转发会被改写参数）。
+
 ## 0.5.0 - 2026-09-20
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-context-compression-improved",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "publishConfig": {
     "registry": "https://registry.npmjs.org",
     "access": "public",

package/packages/selector/lib/advisor-state.js

@@ -408,8 +408,7 @@ function parsePresetOptionsSettings(value) {
 		"dedupeToolResults",
 		"summaryLocator",
 		"prefixStabilizer",
-		"readState",
-		"reviewMode"
+		"readState"
 	]) {
 		const entry = value[key];
 		if (entry !== void 0 && typeof entry !== "boolean") throw new TypeError(`Context-compression presetOptions.${key} must be a boolean`);
@@ -430,12 +429,6 @@ function parsePresetOptionsSettings(value) {
 	if (advisorMinTokens !== void 0 && (typeof advisorMinTokens !== "number" || !Number.isSafeInteger(advisorMinTokens) || advisorMinTokens < 1)) throw new TypeError("Context-compression presetOptions.advisorMinTokens must be a positive integer");
 	const estimatorTimeoutMs = value.estimatorTimeoutMs;
 	if (estimatorTimeoutMs !== void 0 && (typeof estimatorTimeoutMs !== "number" || !Number.isSafeInteger(estimatorTimeoutMs) || estimatorTimeoutMs < 100 || estimatorTimeoutMs > 6e4)) throw new TypeError("Context-compression presetOptions.estimatorTimeoutMs must be an integer between 100 and 60000");
-	const reviewTimeoutTurns = value.reviewTimeoutTurns;
-	if (reviewTimeoutTurns !== void 0 && (typeof reviewTimeoutTurns !== "number" || !Number.isSafeInteger(reviewTimeoutTurns) || reviewTimeoutTurns < 1)) throw new TypeError("Context-compression presetOptions.reviewTimeoutTurns must be an integer of at least 1");
-	const cacheHitDiscountAlpha = value.cacheHitDiscountAlpha;
-	if (cacheHitDiscountAlpha !== void 0 && (typeof cacheHitDiscountAlpha !== "number" || !Number.isFinite(cacheHitDiscountAlpha) || cacheHitDiscountAlpha <= 0 || cacheHitDiscountAlpha >= 1)) throw new TypeError("Context-compression presetOptions.cacheHitDiscountAlpha must be a number strictly between 0 and 1");
-	const reviewHighImpactTokens = value.reviewHighImpactTokens;
-	if (reviewHighImpactTokens !== void 0 && (typeof reviewHighImpactTokens !== "number" || !Number.isSafeInteger(reviewHighImpactTokens) || reviewHighImpactTokens < 0)) throw new TypeError("Context-compression presetOptions.reviewHighImpactTokens must be a non-negative integer");
 	for (const key of [
 		"estimatorProvider",
 		"estimatorModel",
@@ -456,10 +449,6 @@ function parsePresetOptionsSettings(value) {
 	if (value.estimatorBaseUrl !== void 0) result.estimatorBaseUrl = value.estimatorBaseUrl;
 	if (value.estimatorApiKey !== void 0) result.estimatorApiKey = value.estimatorApiKey;
 	if (estimatorTimeoutMs !== void 0) result.estimatorTimeoutMs = estimatorTimeoutMs;
-	if (value.reviewMode !== void 0) result.reviewMode = value.reviewMode;
-	if (reviewTimeoutTurns !== void 0) result.reviewTimeoutTurns = reviewTimeoutTurns;
-	if (cacheHitDiscountAlpha !== void 0) result.cacheHitDiscountAlpha = cacheHitDiscountAlpha;
-	if (reviewHighImpactTokens !== void 0) result.reviewHighImpactTokens = reviewHighImpactTokens;
 	if (advisorMode !== void 0) result.advisorMode = advisorMode;
 	if (advisorTimeoutMs !== void 0) result.advisorTimeoutMs = advisorTimeoutMs;
 	if (advisorRefreshTurns !== void 0) result.advisorRefreshTurns = advisorRefreshTurns;
@@ -681,10 +670,6 @@ const PRESET_OPTION_DEFAULTS = deepFreeze({
 	prefixStabilizer: true,
 	readState: true,
 	estimator: { mode: "" },
-	reviewMode: false,
-	reviewTimeoutTurns: 6,
-	cacheHitDiscountAlpha: .1,
-	reviewHighImpactTokens: 4e3,
 	advisor: {
 		mode: "",
 		timeoutMs: 8e3,
@@ -709,10 +694,6 @@ function mergePresetOptions(overrides) {
 		prefixStabilizer: overrides.prefixStabilizer ?? PRESET_OPTION_DEFAULTS.prefixStabilizer,
 		readState: overrides.readState ?? PRESET_OPTION_DEFAULTS.readState,
 		estimator: { mode: overrides.estimatorMode ?? PRESET_OPTION_DEFAULTS.estimator.mode },
-		reviewMode: overrides.reviewMode ?? PRESET_OPTION_DEFAULTS.reviewMode,
-		reviewTimeoutTurns: overrides.reviewTimeoutTurns ?? PRESET_OPTION_DEFAULTS.reviewTimeoutTurns,
-		cacheHitDiscountAlpha: overrides.cacheHitDiscountAlpha ?? PRESET_OPTION_DEFAULTS.cacheHitDiscountAlpha,
-		reviewHighImpactTokens: overrides.reviewHighImpactTokens ?? PRESET_OPTION_DEFAULTS.reviewHighImpactTokens,
 		advisor: {
 			mode: overrides.advisorMode ?? PRESET_OPTION_DEFAULTS.advisor.mode,
 			timeoutMs: overrides.advisorTimeoutMs ?? PRESET_OPTION_DEFAULTS.advisor.timeoutMs,
@@ -915,215 +896,6 @@ function assertPositiveInteger(name, value) {
 function assertNonNegativeInteger(name, value) {
 	if (!Number.isSafeInteger(value) || value < 0) throw new Error(`ToolResultPruneConfig: ${name} (${String(value)}) must be a non-negative safe integer`);
 }
-//#endregion
-//#region src/runtime/tokenpilot/review-queue.ts
-/** In-memory store: the fail-open fallback when no durable seam is available. */
-var MemoryReviewStore = class {
-	sessions = /* @__PURE__ */ new Map();
-	load(sessionId) {
-		return this.sessions.get(sessionId);
-	}
-	save(sessionId, record) {
-		this.sessions.set(sessionId, record);
-	}
-	ids() {
-		return [...this.sessions.keys()];
-	}
-};
-var ReviewQueue = class {
-	store;
-	options;
-	constructor(store, options) {
-		this.store = store;
-		this.options = options;
-	}
-	/**
-	* Fail-open store access: a throwing seam must never break the compression
-	* pipeline. Reads degrade to "no stored record"; writes degrade to losing
-	* durability for that call (the store itself is expected to warn).
-	*/
-	safeLoad(sessionId) {
-		try {
-			return this.store.load(sessionId);
-		} catch {
-			return;
-		}
-	}
-	safeSave(sessionId, record) {
-		try {
-			this.store.save(sessionId, record);
-		} catch {}
-	}
-	sessionRecord(sessionId) {
-		return this.safeLoad(sessionId) ?? {
-			version: 1,
-			proposals: []
-		};
-	}
-	/**
-	* Queue one classified proposal. A repeated classification of the same
-	* content re-does nothing but refresh the patience clock, so re-enqueue
-	* cannot duplicate a live proposal.
-	* @returns `false` when an identical live proposal already exists.
-	*/
-	enqueue(sessionId, skeleton, turnIndex) {
-		const record = this.sessionRecord(sessionId);
-		const existing = record.proposals.find((entry) => entry.id === skeleton.id);
-		if (existing !== void 0 && existing.status !== "expired") {
-			existing.lastTurnIndex = turnIndex;
-			this.safeSave(sessionId, record);
-			return false;
-		}
-		const proposal = {
-			id: skeleton.id,
-			sessionId,
-			kind: skeleton.kind,
-			items: skeleton.items.map((item) => ({ ...item })),
-			benefit: { ...skeleton.benefit },
-			status: "pending",
-			enqueuedTurn: turnIndex,
-			lastTurnIndex: turnIndex
-		};
-		this.safeSave(sessionId, {
-			version: 1,
-			proposals: [...record.proposals.filter((entry) => entry.id !== skeleton.id), proposal]
-		});
-		return true;
-	}
-	/** Live pending proposals of one session, oldest enqueue first. */
-	listPending(sessionId) {
-		return this.sessionRecord(sessionId).proposals.filter((entry) => entry.status === "pending").sort((left, right) => left.enqueuedTurn - right.enqueuedTurn);
-	}
-	/** Approved proposals waiting for the next turn-boundary batch. */
-	listApproved(sessionId) {
-		return this.sessionRecord(sessionId).proposals.filter((entry) => entry.status === "approved").sort((left, right) => left.enqueuedTurn - right.enqueuedTurn);
-	}
-	/**
-	* Transition one pending proposal. Idempotent: deciding an unknown id or a
-	* non-pending proposal changes nothing and reports the miss.
-	*/
-	decide(sessionId, id, decision) {
-		const record = this.sessionRecord(sessionId);
-		const proposal = record.proposals.find((entry) => entry.id === id);
-		if (proposal === void 0) return {
-			ok: false,
-			reason: "unknown-proposal"
-		};
-		if (proposal.status !== "pending") return {
-			ok: false,
-			reason: "not-pending"
-		};
-		proposal.status = decision;
-		this.safeSave(sessionId, record);
-		return { ok: true };
-	}
-	/**
-	* Expire every pending proposal whose patience has run out at this turn
-	* boundary. Expired proposals are removed from the store (the summary view
-	* aggregates them from the audit log instead).
-	* @returns the expired proposals, for the caller's audit emission.
-	*/
-	expireTurn(sessionId, turnIndex) {
-		const record = this.sessionRecord(sessionId);
-		const keep = [];
-		const expired = [];
-		for (const proposal of record.proposals) {
-			if (proposal.status === "pending" && turnIndex - proposal.lastTurnIndex > this.options.timeoutTurns) {
-				expired.push({
-					...proposal,
-					status: "expired"
-				});
-				continue;
-			}
-			keep.push(proposal);
-		}
-		if (expired.length > 0) this.safeSave(sessionId, {
-			version: 1,
-			proposals: keep
-		});
-		return expired;
-	}
-	/**
-	* Settle an approved proposal with its execution receipt and retire it from
-	* the live store. The caller is responsible for auditing the receipt; the
-	* queue only records which proposal left and why.
-	*/
-	recordReceipt(sessionId, id, receipt) {
-		const record = this.sessionRecord(sessionId);
-		const proposal = record.proposals.find((entry) => entry.id === id);
-		if (proposal === void 0 || proposal.status !== "approved") return void 0;
-		this.safeSave(sessionId, {
-			version: 1,
-			proposals: record.proposals.filter((entry) => entry.id !== id)
-		});
-		return {
-			...proposal,
-			receipt
-		};
-	}
-};
-//#endregion
-//#region src/runtime/tokenpilot/review-registry.ts
-/**
-* Scope-independent handle on the live review pipeline.
-*
-* The R4 HTTP routes are registered on the plugin's TOP-LEVEL fiber
-* (`cordis.patch.yml` → `context-compression-improved-estimator-catalog`),
-* but every `ToolResultPruner` is mounted inside an agent preset's isolated
-* group — `canonicalCompressionRows()` declares
-* `isolate: { compaction: true, toolResultPruner: true }` — so
-* `ctx.get('toolResultPruner')` at the top level is always `undefined` and the
-* queue route could only ever answer 503 "review pipeline unavailable".
-*
-* Ownership, not transport, was in the wrong place: the queue records are
-* already keyed by session id, so the store belongs to the plugin rather than
-* to one pruner instance. Every instance shares one store and publishes itself
-* here, which lets a top-level reader reach whichever instance currently holds
-* a session's proposals.
-*
-* The durable seam already behaves this way — `REVIEW_STORAGE_DOMAIN` /
-* `REVIEW_STORAGE_TABLE` are constants, so every instance opens the same table.
-* Only the in-memory fallback was per-instance, and that is what this module
-* makes shared.
-*
-* @module dsh-context-compression-improved/review-registry
-*/
-/**
-* The one in-memory fallback every pruner instance starts from. Session ids are
-* globally unique and `ReviewSessionRecord` is keyed by them, so a single store
-* is semantically identical to one store per instance — except that a reader
-* reaching any instance now observes every session.
-*/
-const sharedStore = new MemoryReviewStore();
-const live = /* @__PURE__ */ new Set();
-/** The process-wide review queue store shared by every pruner instance. */
-function sharedReviewStore() {
-	return sharedStore;
-}
-/**
-* Publish one pruner instance for scope-independent readers.
-* @param pruner - the instance to publish.
-* @returns the disposer removing it, for `ctx.effect`.
-*/
-function registerReviewPruner(pruner) {
-	live.add(pruner);
-	return () => {
-		live.delete(pruner);
-	};
-}
-/**
-* Resolve a live pruner instance for the top-level routes.
-*
-* Any instance can serve an aggregate read because the store is shared, and a
-* session-scoped read is answered from that same store. Instances that have
-* upgraded to the durable seam read the same table, so the answer does not
-* depend on which instance this happens to return.
-*
-* @returns a live instance, or `undefined` when no preset has been composed yet.
-*/
-function resolveReviewPruner() {
-	return live.values().next().value;
-}
 const advisorStates = /* @__PURE__ */ new WeakMap();
 /**
 * The per-session advisor state, created on first touch.
@@ -1141,7 +913,8 @@ function getAdvisorState(session) {
 			recertified: /* @__PURE__ */ new Map(),
 			failures: void 0,
 			inFlight: false,
-			lastDecay: void 0
+			lastDecay: void 0,
+			lastAdvice: void 0
 		};
 		advisorStates.set(session, state);
 	}
@@ -1186,4 +959,4 @@ function invalidateOnTaskChange(state, todoVersion) {
 	return true;
 }
 //#endregion
-export { DEFAULT_CUSTOM_COMPRESSION_POLICY as C, COMPRESSION_PROFILES as D, deepFreeze as E, CustomCompressionPolicySchema as S, assertNever as T, isCompressionProfile as _, registerReviewPruner as a, resolveConfig as b, ReviewQueue as c, ContextCompressionSettingsSchema as d, DEFAULTS as f, codePointLength as g, charsToTokens as h, recordScore as i, AUTO_COMPACT_THRESHOLD_LIMITS as l, charsForTokens as m, invalidateOnTaskChange as n, resolveReviewPruner as o, PRUNE_MARKER as p, recordRecertified as r, sharedReviewStore as s, getAdvisorState as t, CONTEXT_COMPRESSION_SETTINGS_NAMESPACE as u, isValidAutoCompactThresholdPercent as v, resolveCustomPolicy as w, resolvePolicy as x, parseContextCompressionSettings as y };
+export { COMPRESSION_PROFILES as C, deepFreeze as S, resolvePolicy as _, AUTO_COMPACT_THRESHOLD_LIMITS as a, resolveCustomPolicy as b, DEFAULTS as c, charsToTokens as d, codePointLength as f, resolveConfig as g, parseContextCompressionSettings as h, recordScore as i, PRUNE_MARKER as l, isValidAutoCompactThresholdPercent as m, invalidateOnTaskChange as n, CONTEXT_COMPRESSION_SETTINGS_NAMESPACE as o, isCompressionProfile as p, recordRecertified as r, ContextCompressionSettingsSchema as s, getAdvisorState as t, charsForTokens as u, CustomCompressionPolicySchema as v, assertNever as x, DEFAULT_CUSTOM_COMPRESSION_POLICY as y };

package/packages/selector/lib/client.d.ts

@@ -84,11 +84,6 @@ interface PresetOptionsSettings {
   readonly estimatorBaseUrl?: string;
   readonly estimatorApiKey?: string;
   readonly estimatorTimeoutMs?: number;
-  /** Review-mode overrides (beta); mirrors the runtime PresetOptions.reviewMode. */
-  readonly reviewMode?: boolean;
-  readonly reviewTimeoutTurns?: number;
-  readonly cacheHitDiscountAlpha?: number;
-  readonly reviewHighImpactTokens?: number;
   /** Advisory advisor channel; `''` (the default) keeps the advisor off. */
   readonly advisorMode?: '' | 'host' | 'direct';
   readonly advisorTimeoutMs?: number;
@@ -153,25 +148,6 @@ declare const zh: {
   'estimator.apiKey.set': string;
   'estimator.apiKey.clear': string;
   'estimator.apiKey.overwrite': string;
-  'review.title': string;
-  'review.description': string;
-  'review.enabled': string;
-  'review.enabled.on': string;
-  'review.enabled.off': string;
-  'review.timeoutTurns': string;
-  'review.alpha': string;
-  'review.highImpact': string;
-  'review.badge': string;
-  'review.summary.autoApplied': string;
-  'review.summary.reviewApplied': string;
-  'review.summary.expired': string;
-  'review.summary.voided': string;
-  'review.row.payback': string;
-  'review.row.expectedSaving': string;
-  'review.row.estimated': string;
-  'review.action.approve': string;
-  'review.action.reject': string;
-  'review.action.ignore': string;
   'detail.tokenpilot-inspired': string;
   'profile.custom': string;
   'profile.native': string;