freeharness 0.4.1 → 0.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "freeharness",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Agnostic agentic engineering framework installer (Claude Code, OpenCode, Claude Code plugin emission)",
   "type": "module",
   "bin": {
@@ -41,7 +41,9 @@
     "verify": "npm run build",
     "clean": "rm -rf dist canonical NOTICE LICENSE README.md provenance node_modules/@freeharness",
     "prepare": "npm run bundle:canonical",
-    "test": "node --import tsx --test test/*.test.ts",
+    "test": "npm run test:parallel && npm run test:integration",
+    "test:parallel": "node -e \"const t=['guard.test.ts','memory-tags.test.ts','quota-tap.test.ts','sdd-context.test.ts'];const all=require('node:fs').readdirSync('test').filter((n)=>n.endsWith('.test.ts')&&n!=='integration.test.ts').sort();const run=(o,l)=>l.length===0?0:require('node:child_process').spawnSync(process.execPath,['--import','tsx','--test',...o,...l.map((n)=>'test/'+n)],{stdio:'inherit'}).status??1;const p=run([],all.filter((n)=>!t.includes(n)));const s=run(['--test-concurrency=1'],all.filter((n)=>t.includes(n)));process.exit(p||s)\"",
+    "test:integration": "node --import tsx --test test/integration.test.ts",
     "pack:stage": "node scripts/prepack.mjs",
     "pack:unstage": "node scripts/postpack.mjs",
     "pack": "node scripts/prepack.mjs && npm pack --ignore-scripts && node scripts/postpack.mjs"
@@ -52,8 +54,8 @@
   "license": "MIT",
   "author": "André Negrelli",
   "dependencies": {
-    "@freeharness/core": "^0.4.1",
-    "@freeharness/sdd": "^0.4.1",
+    "@freeharness/core": "^0.4.2",
+    "@freeharness/sdd": "^0.4.2",
     "commander": "^12.1.0",
     "yaml": "^2",
     "zod": "^4"

package/provenance/canonical.PROVENANCE.yaml

@@ -566,7 +566,7 @@ files:
     commit: "e04ea0b9"
     license: MIT
     rewritten: true
-    note: "Matcher and deny shape only; the 30-minute TTL flag is ours (P2.3)."
+    note: "Matcher and deny shape only; the --ttl flag (240 minutes by default) is ours (P2.3)."
 
   - path: hooks/freeharness-context-monitor.mjs
     source: ecc

package/provenance/memory.PROVENANCE.yaml

@@ -4,26 +4,26 @@ upstream:
   name: "claude-mem"
   repo: https://github.com/thedotmack/claude-mem
   fork: https://github.com/anegrelli/claude-mem
-  baseline_version: "13.25.1"
-  baseline_commit: "dcfc4422"
+  baseline_version: "13.25.3+main"
+  baseline_commit: "c4bfa459"
 
 runtime_prerequisites:
   - "Bun >= 1.0 (plugin bundles are `bun build` CJS; hooks run worker-service.cjs through bun-runner.js)"
   - "uv / Python (Chroma vector store)"
   - "Claude Agent SDK (worker generation)"
 
-status: "V3-P0 memory-runtime DONE + recall verified on the dev machine (2026-08-15). V3-P0b memory-slim DONE (2026-09-04): engine trimmed to the single capture->store->recall path (216 -> 141 .ts, deps 8 -> 4, plugin dir 70 MB -> 3.1 MB), hooks.json/.mcp.json rewritten to deterministic ${CLAUDE_PLUGIN_ROOT} commands, skill dir aligned to upstream layout. Audit: vendor/claude-mem/SLIM-AUDIT.md; trim record: FIXUP.md section 7. Recall re-verified on the dev machine after the trim (2026-09-04); FreeHarness viewer added (FIXUP §8). V4-P3 memory-quality (2026-09-06): engine hunks ported from claude-mem 13.24.0 (be44b6c8) — bounded observer generations (#3800), field-optimizer, quota guard (#3838), observer-health + quota-cooldown ledgers, uvx-env, kill-process-tree + process-identity, silent observer role + FreeHarness verbatim/English rule, skip_summary noise, single-read transcript parser; port list, ignored set and settings in FIXUP.md section 9; plugin version 13.24.0. Recall re-verify after the port = task 3.6 [machine]. v4.1 memory-local-provider (2026-09-17): FreeHarness-authored opt-in local provider (CLAUDE_MEM_PROVIDER=local) serving the simple tier over a local OpenAI-compatible endpoint, with Claude as the per-batch fallback on local failure; provider interface, session runner, batch routing and health reporting; per-file record in FIXUP.md section 12 and freeharness_local_provider below."
+status: "V3-P0 memory-runtime DONE + recall verified on the dev machine (2026-08-15). V3-P0b memory-slim DONE (2026-09-04): engine trimmed to the single capture->store->recall path (216 -> 141 .ts, deps 8 -> 4, plugin dir 70 MB -> 3.1 MB), hooks.json/.mcp.json rewritten to deterministic ${CLAUDE_PLUGIN_ROOT} commands, skill dir aligned to upstream layout. Audit: vendor/claude-mem/SLIM-AUDIT.md; trim record: FIXUP.md section 7. Recall re-verified on the dev machine after the trim (2026-09-04); FreeHarness viewer added (FIXUP §8). V4-P3 memory-quality (2026-09-06): engine hunks ported from claude-mem 13.24.0 (be44b6c8) — bounded observer generations (#3800), field-optimizer, quota guard (#3838), observer-health + quota-cooldown ledgers, uvx-env, kill-process-tree + process-identity, silent observer role + FreeHarness verbatim/English rule, skip_summary noise, single-read transcript parser; port list, ignored set and settings in FIXUP.md section 9; plugin version 13.24.0. Recall re-verify after the port = task 3.6 [machine]. v4.1 memory-local-provider (2026-09-17): FreeHarness-authored opt-in local provider (CLAUDE_MEM_PROVIDER=local) serving the simple tier over a local OpenAI-compatible endpoint, with Claude as the per-batch fallback on local failure; provider interface, session runner, batch routing and health reporting; per-file record in FIXUP.md section 12 and freeharness_local_provider below. memory-observer-pause (2026-09-23): degraded-mode routing serves every batch of a session locally, of any tier, while a quota cooldown withholds Claude admission; each batch reaches a stored, skipped or dropped terminal outcome, with a second local failure while degraded dropping the batch as degraded_local_failed; the worker's log file switches to the day's file at the first write after the UTC date changes. Per-file record in FIXUP.md section 12. vendor-sync-2026-10 (2026-09-24): 13.25.3+main port landed (ports_13_25_3 above, FIXUP.md section 13); `sync adopt memory` preview reported only the two DIVERGENT tracked files (plugin/hooks/hooks.json, plugin/.mcp.json), skipped by design and never adopted, so nothing was adoptable; the baseline was bumped by hand here and in sources.yaml to c4bfa459 / 13.25.3+main, and the plugin manifests (plugin.json, plugin/package.json, .claude-plugin/marketplace.json) carry 13.25.3, the semver part of baseline_version 13.25.3+main (semver has no room for the +main suffix). memory-quota-freshness: FreeHarness-authored quota freshness fixup, where the local quota guard ignores a window snapshot observed more than 60 minutes ago and every rate_limit_event refreshes the other windows named in its unifiedWindows map; per-file record in FIXUP.md section 12 and freeharness_quota_freshness below. radar-w43-fixes: the upstream privacy and tag-stripping fixes (481bcff76, e04dba2c3, 983d6b258, 8ac62b3e6) are hand ports recorded in ports_radar_w43 below and FIXUP.md section 15; the baseline is unchanged at c4bfa459 / 13.25.3+main because the rest of the upstream 14.x/15.x delta is held."
 
 vendored:
   control_plane:
     - path: vendor/claude-mem/plugin/hooks/hooks.json
-      note: "lifecycle hooks (Setup/SessionStart/UserPromptSubmit/PostToolUse/PreToolUse:Read/Stop). DIVERGENT since memory-slim: same events/matchers/timeouts/async as upstream, commands rewritten to `node ${CLAUDE_PLUGIN_ROOT}/scripts/bun-runner.js ... <cmd>` with a static PATH prefix (no login shell, no plugin-cache enumeration). On upstream changes compare the event set and command verbs by hand; never copy the upstream blobs back."
+      note: "lifecycle hooks (Setup/SessionStart/UserPromptSubmit/PostToolUse/PostToolUseFailure/PreToolUse:Read/Stop). DIVERGENT since memory-slim: same events/matchers/timeouts/async as upstream except PostToolUseFailure, a FreeHarness addition (memory-deterministic-tier) that runs the PostToolUse observation command with the same matcher, timeout and async so a failing tool call is captured; commands rewritten to `node ${CLAUDE_PLUGIN_ROOT}/scripts/bun-runner.js ... <cmd>` with a static PATH prefix (no login shell, no plugin-cache enumeration). On upstream changes compare the event set and command verbs by hand; never copy the upstream blobs back."
     - path: vendor/claude-mem/plugin/.mcp.json
       note: "recall MCP registration (stdio). DIVERGENT: spawns ${CLAUDE_PLUGIN_ROOT}/scripts/mcp-server.cjs directly"
     - path: vendor/claude-mem/plugin/.claude-plugin/plugin.json
       note: "plugin manifest shape"
     - path: vendor/claude-mem/plugin/skills/mem-search
-      note: "the mem-search skill (the recall entry point FreeHarness calls); the only kept plugin skill; upstream layout"
+      note: "the mem-search skill (the recall entry point FreeHarness calls); the only kept plugin skill; upstream layout. SKILL.md is DIVERGENT since radar-w43-fixes: it names only the tools the slim MCP server registers (search, timeline, get_observations, important_workflow, session_start_context), so the upstream get_tool_uses and /knowledge-agent passages are dropped (the slim server serves neither). On upstream changes compare the workflow by hand; never copy the upstream SKILL.md back."
     - path: vendor/claude-mem/plugin/modes
       note: "code.json (+ pt-br, chill variants) — the worker's ModeManager fails init without code.json"
     - path: vendor/claude-mem/.claude-plugin/marketplace.json
@@ -36,7 +36,7 @@ vendored:
 increment_2:
   engine_vendored:
     - path: vendor/claude-mem/engine
-      note: "141 .ts after memory-slim (+8 with the 13.24 port, FIXUP.md section 9): services (worker [ClaudeProvider only] + context/transcripts/infrastructure/sqlite/sync[Chroma]/server[worker-local HTTP]) + cli (claude-code hook runtime only) + supervisor + utils + types + sdk + servers/mcp-server. Removed set recorded in FIXUP.md section 7 (providers, cloud sync, corpus, smart-file-read, SaaS /v1, other-IDE adapters, viewer/SSE, CLAUDE.md writer, npx-cli). Type gate: `tsc -p engine/tsconfig.check.json` (bun build does not type-check)."
+      note: "141 .ts after memory-slim (+8 with the 13.24 port, FIXUP.md section 9): services (worker [ClaudeProvider only] + context/transcripts/infrastructure/sqlite/sync[CanonicalContent]/server[worker-local HTTP]) + cli (claude-code hook runtime only) + supervisor + utils + types + sdk + servers/mcp-server. Removed set recorded in FIXUP.md section 7 (providers, cloud sync, corpus, smart-file-read, SaaS /v1, other-IDE adapters, viewer/SSE, CLAUDE.md writer, npx-cli). Type gate: `tsc -p engine/tsconfig.check.json` (bun build does not type-check). Vector store removed 2026-10-31 (memory-retrieval-redesign, owner ruling; FIXUP.md section 25): sync/ChromaMcpManager.ts, sync/ChromaSync.ts, sync/ChromaSyncState.ts, shared/uvx-bin-dirs.ts, shared/uvx-env.ts, worker/search/SearchOrchestrator.ts, worker/search/errors.ts and worker/search/ResultFormatter.ts are gone, their rows below dropped; sync/ keeps CanonicalContent.ts (the sync_outbox content); the CLAUDE_MEM_CHROMA_* settings are gone and ignored when present. Observation vectors are back as SQLite rows (FIXUP.md section 26): the services inventory gains the vector store (sqlite/VectorStore.ts), the embeddings client (embeddings/EmbeddingsClient.ts, over the shared loopback helper http/local-http.ts) and the idle backfill (worker/EmbedBackfill.ts), with vector search feeding the fused search; there is no external vector store and no subprocess."
     - path: vendor/claude-mem/SLIM-AUDIT.md
       note: "memory-slim audit: baseline metrics, keep set, trim set with reachability evidence"
   plugin_build:
@@ -51,6 +51,7 @@ increment_2:
       - { name: context-generator, source: services/context-generator.ts, out: plugin/scripts/context-generator.cjs, target: bun }
       - { name: transcript-watcher, source: services/transcripts/transcript-watcher-entry.ts, out: plugin/scripts/transcript-watcher.cjs, target: bun }
     generated: "plugin/package.json (type: module; dep zod only)"
+    version_source: "cli-hygiene patch (FIXUP.md section 14): every bundle's __DEFAULT_PACKAGE_VERSION__ define, and so the MCP server's serverInfo.version, comes from plugin/.claude-plugin/plugin.json through the exported readPluginVersion(); engine/package.json is never read by the build and may lag a baseline bump. build-plugin.ts builds only when run directly (import.meta.main), so packages/cli/test/memory-build-version.test.ts imports the reader and buildBundles(pluginDir, only?), the bundle step main() runs. No engine runtime file changed."
   install_mechanism:
     adapter: packages/cli/src/adapters/memory/vendored.ts (VendoredMemory implements MemoryPort)
     identity: "thedotmack/claude-mem, key claude-mem@thedotmack (kept so hooks.json/.mcp.json resolvers work unmodified)"
@@ -394,6 +395,457 @@ freeharness_local_provider:
     status: freeharness
     note: "spawnSdkProcess and createSdkSpawnFactory take an optional label (default session-<id>) used in the SDK_SPAWN log lines, so a completion's negative spawn id renders as [completion-<n>] instead of the unlabeled [session--1]; the registry key and duplicate scan keep the numeric id"
 
+# memory-quota-freshness: FreeHarness-authored freshness bound and unified-window refresh
+# for the quota guard. Same row shape as freeharness_13_25; status is always freeharness.
+# Restated for the vendor tree in FIXUP.md section 12.
+freeharness_quota_freshness:
+  - commit: "memory-quota-freshness 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/RateLimitStore.ts
+    status: freeharness
+    note: "every rate_limit_event refreshes the other windows in its unifiedWindows map (skipping a past or zero reset time, a negative or non-finite utilization and the overage window; a utilization above 1 counts as 1), shouldAbortForQuota ignores a snapshot observed more than 60 minutes ago, and rejection dedup is kept apart from the guard snapshot; an event without a numeric utilization takes it from its own valid unified entry, and the stored own snapshot drops the unifiedWindows map"
+  - commit: "memory-quota-freshness 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/routes/SessionRoutes.ts
+    status: freeharness
+    note: "the quota-guard pause message names the observation time of the snapshot that triggered it"
+
+# vendor-sync-2026-10 ports from upstream c4bfa459 (13.25.3 + four untagged main fixes),
+# pre-port baseline dcfc4422 (13.25.1, ports_13_25 above). Same row shape as ports_13_25.
+# `sync adopt memory` never touches this list. Restated for the vendor tree in FIXUP.md
+# section 13.
+ports_13_25_3:
+  - commit: "81ea0a932 (#4124)"
+    upstream: services/context/ContextConfigLoader.ts
+    target: engine/services/context/ContextConfigLoader.ts
+    status: adapted
+    note: "resolveIdSet() (added under 1ce59d48 hardening, ports_13_25 above) now filters a partial match down to only the ids the active mode carries, discarding the rest, instead of keeping the full configured set; a warning still names the discarded ids and a total mismatch still falls back to the full mode list"
+  - commit: "c4bfa4595 (#4202)"
+    upstream: services/worker/RateLimitStore.ts
+    target: engine/services/worker/RateLimitStore.ts
+    status: port
+    note: "normalizeResetTimeMs() extracted from minutesUntilReset; shouldAbortForQuota's per-window loop skips a snapshot whose normalized reset time has already elapsed, without removing it from the store, so a stale rejection cannot repeatedly wedge the observer after its window actually reset, and still dedups as not-new against set()'s telemetry"
+  - commit: "b1b5cd9a0 (#4190)"
+    upstream: supervisor/process-registry.ts
+    target: engine/supervisor/process-registry.ts
+    status: port
+    note: "retainSupersededEntry() re-keys a still-alive process displaced from a fixed registry id (chroma-mcp and similar) to <id>#superseded:<pid> instead of dropping the record on register(); the existing reapers (getAll(), pruneDeadEntries(), isSameProcess-gated shutdown) reach it under its own id and remove it once it exits"
+  - commit: "f9f6dfc7b (#4205)"
+    upstream: services/worker/session/response-pacer.ts
+    target: engine/services/worker/session/response-pacer.ts
+    status: port
+    note: "new module: ObserverResponsePacer (mark/answer/close/activity/waitForAnswer, hasStalled fence), planResponseStallResume(), RESPONSE_STALL_RESUME_DELAY_MS (30 s), MAX_CONSECUTIVE_STALL_RESUMES (3), plus the FreeHarness transportFailureMessage() (observer-health message for a transport:* exit); upstream behavior unchanged, comments condensed to the 20% budget; planResponseStallResume takes Pick<ActiveSession, 'consecutiveResponseStalls'> so the pure module loads under Node"
+  - commit: "f9f6dfc7b (#4205)"
+    upstream: services/worker/ClaudeProvider.ts
+    target: engine/services/worker/ClaudeProvider.ts
+    status: adapted
+    note: "the Claude feed yields at most one unanswered prompt per generation: stale claims reset before the init prompt, awaitObserverAnswer() after every yield, frames fenced after a stall, the stall window re-armed per frame (plus an announced api_retry delay), the gate opened per result frame and closed in finally; an unanswered prompt past IDLE_TIMEOUT_MS aborts with transport:response_stall and returns the batch to pending. Merged with freeharness_13_25 and freeharness_local_provider: no worker parameter (memory-slim) and no compressField signal (e6e4d738f not ported), so the pacer follows the optional compressField (CLAUDE_MEM_FIELD_OPTIMIZER); the gate opens at the end of the existing result branch (the upstream failed-turn re-queue is not vendored); the quota guard, the Provider contract and complete() are untouched"
+  - commit: "f9f6dfc7b (#4205)"
+    upstream: services/worker/agents/ResponseProcessor.ts
+    target: engine/services/worker/agents/ResponseProcessor.ts
+    status: adapted
+    note: "clearDebtForAnsweredWork() resets consecutiveContextOverflows and consecutiveResponseStalls only for a reply to queued work, never an init reply; merged with freeharness_local_provider: a local reply (isLocalReply) always clears, since it answers a batch and has no init prompt; the observation-mode filter (freeharness_13_25) is untouched"
+  - commit: "f9f6dfc7b (#4205)"
+    upstream: services/worker/http/routes/SessionRoutes.ts
+    target: engine/services/worker/http/routes/SessionRoutes.ts
+    status: adapted
+    note: "a starting generator clears a pending stallResumeTimer; a transport:response_stall exit resumes after 30 s, at most 3 times in a row. Merged after the FreeHarness exit accounting: a Claude-run stall also records the existing transport observer-health entry, with a stall-specific message from transportFailureMessage() instead of the transport-failure one, and localRunPause still skips a local run's own pauses; runLocalGenerator and the quota_guard accounting are untouched"
+  - commit: "f9f6dfc7b (#4205)"
+    upstream: services/worker/session/recycle-conversation.ts
+    target: engine/services/worker/session/recycle-conversation.ts
+    status: adapted
+    note: "MAX_CONSECUTIVE_RECYCLES docstring states a fresh generation fits because the feed is paced; condensed to keep the file's comment share at its base"
+  - commit: "f9f6dfc7b (#4205)"
+    upstream: services/worker-types.ts
+    target: engine/services/worker-types.ts
+    status: port
+    note: "ActiveSession.consecutiveResponseStalls? and stallResumeTimer?"
+  - commit: "f9f6dfc7b (#4205)"
+    upstream: services/worker/SessionMessageBuffer.ts
+    target: engine/services/worker/SessionMessageBuffer.ts
+    status: port
+    note: "IDLE_TIMEOUT_MS exported as the response-stall window; the cached-view drain() (freeharness_local_provider) is untouched"
+  - commit: "609da9f94 (#4189)"
+    upstream: sdk/prompts.ts
+    target: engine/sdk/prompts.ts
+    status: port
+    note: "stripImagePayloadsFromField() parses a field stored as JSON text before stripping and hands back the original text when nothing was stripped; buildObservationPrompt uses it; the Read-tool { type: 'image', file: { base64 } } block is elided; elided blocks survive a second pass with their byte count; an untouched value keeps its identity"
+  - commit: "609da9f94 (#4189)"
+    upstream: services/worker/field-optimizer.ts
+    target: engine/services/worker/field-optimizer.ts
+    status: adapted
+    note: "optimizeObservationFields strips both fields before the oversize check and the compressor; the vendored optimizer has no compactEditOutput (e6e4d738f not ported), so the stripped fields feed optimizeField directly; with CLAUDE_MEM_FIELD_OPTIMIZER=false the strip inside buildObservationPrompt still applies"
+  - commit: "4d323afe7 (#4125)"
+    upstream: "retry.ts, services/worker/OpenAICompatibleProvider.ts, shared/SettingsDefaultsManager.ts"
+    target: "(none)"
+    status: ignored
+    note: "the alt-provider retry path; the upstream retry loop (retry.ts) is absent from the slim engine, which ships a single-provider Claude implementation (ports_13_25 above, 4e966e15 row), and the FreeHarness LocalProvider (FIXUP.md section 12) bounds its calls with its own timeout setting, CLAUDE_MEM_LOCAL_TIMEOUT_MS"
+  - commit: "0e7b03f19 (#4166)"
+    upstream: "http/routes/SettingsRoutes.ts, viewer (ContextSettingsModal.tsx, useSettings.ts, types.ts), services/telemetry/error-scrub.ts, services/telemetry/scrub.ts"
+    target: "(none)"
+    status: ignored
+    note: "SettingsRoutes.ts and the React viewer are removed in memory-slim (skipped list below); FreeHarness's own read-only viewer (freeharness_own above) has no settings write route. error-scrub.ts and scrub.ts (the redaction-order hardening and PostHog query/userinfo/assignment-secret scrubbing this commit also carries) are absent from the slim engine's telemetry shim, which is no-op stubs with no redaction code to harden"
+  - commit: "b3f0d7cfa, eb88c1670, 4e98d977c (sync-hub + merge)"
+    upstream: "sync-hub poll-mode projection"
+    target: "(none)"
+    status: ignored
+    note: "the cloud sync-hub is not vendored (memory-slim dropped CloudSync/SyncClient/SyncApply, skipped list below)"
+  - commit: "d8bc9755e"
+    upstream: README.md
+    target: "(none)"
+    status: ignored
+    note: "docs/marketing"
+  - commit: "adce0fdfa, 4520de9e0"
+    upstream: "package.json version bumps"
+    target: "(none)"
+    status: ignored
+    note: "the FreeHarness plugin manifests (plugin/.claude-plugin/plugin.json, plugin/package.json, .claude-plugin/marketplace.json) carry the semver part (13.25.3) of baseline_version 13.25.3+main above, bumped with the rest of this range's baseline move, not per commit"
+
+# Hand ports of the upstream privacy and tag-stripping fixes landed after the
+# 13.25.3+main baseline. The baseline stays c4bfa459: the rest of the upstream 14.x/15.x
+# delta is held. Restated for the vendor tree in FIXUP.md section 15.
+ports_radar_w43:
+  - commit: "481bcff76 (#4761)"
+    upstream: utils/tag-stripping.ts
+    target: "engine/utils/memory-tag-scanner.ts, engine/utils/tag-stripping.ts"
+    status: adapted
+    note: "stripTags pairs nested and overlapping memory tags with a balanced scanner instead of a lazy back-referenced regex; the scanner lives in the import-free module memory-tag-scanner.ts so Node tests load it without the logger, and tag-stripping.ts delegates to it (no STRIP_REGEX exists)"
+  - commit: "e04dba2c3 (#4897)"
+    upstream: utils/tag-stripping.ts
+    target: engine/utils/memory-tag-scanner.ts
+    status: port
+    note: "a closing tag may carry whitespace before the > (</private >); the scanner's close matcher is </name\\s*>"
+  - commit: "e04dba2c3 (#4897)"
+    upstream: "utils/tag-stripping.ts (JSON-node sanitizer probe)"
+    target: "(none)"
+    status: ignored
+    note: "the slim engine has no JSON-node sanitizer, so the hunk has nothing to apply to"
+  - commit: "983d6b258 (#4801)"
+    upstream: utils/tag-stripping.ts, shared/transcript-parser.ts, services/context/ObservationCompiler.ts
+    target: "engine/utils/memory-tag-scanner.ts, engine/utils/tag-stripping.ts, engine/shared/transcript-parser.ts, engine/services/context/ObservationCompiler.ts"
+    status: port
+    note: "system-reminder blocks are stripped by a linear indexOf scan (stripSystemReminderBlocks) instead of a lazy regex that goes quadratic on unclosed openers; the transcript parser and the observation compiler call it, and tag-stripping.ts exports no reminder regex. shared/advisor-transcript.ts is not vendored, so that hunk has no target"
+  - commit: "8ac62b3e6 (#4899)"
+    upstream: services/sqlite/prompt-storage.ts
+    target: engine/services/sqlite/prompt-storage.ts
+    status: port
+    note: "the prompt normalizer returns the stripped, trimmed text (empty string when the prompt is fully private) so a fully private prompt is never stored raw as the session's user_prompt"
+
+# radar-w43-fixes: FreeHarness-authored privacy import paths (no upstream commit).
+# Same row shape as freeharness_13_25; status is always freeharness. Restated for the
+# vendor tree in FIXUP.md section 15.
+freeharness_radar_w43:
+  - commit: "radar-w43-fixes 1.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/sqlite/SessionStore.ts
+    status: freeharness
+    note: "importSdkSession and importUserPrompt, which upstream leaves unreachable from the normalizer, bind a normalized user_prompt and prompt_text; importSdkSession keeps a null user_prompt as null"
+
+# memory-recall-everywhere: FreeHarness-authored subagent recall (no upstream commit). Same
+# row shape as freeharness_radar_w43; status is always freeharness. Restated for the vendor
+# tree in FIXUP.md section 18. The additive agent_tags table is migration 9001.
+freeharness_recall:
+  - commit: "memory-recall-everywhere 2.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/sqlite/agent-filters.ts
+    status: freeharness
+    note: "new, import-free: AGENT_ID_PATTERN, TAG_PATTERN, AgentFilters, hasAgentFilters and agentFilterClause, which ANDs exact agent_type, exact agent_id and an EXISTS over agent_tags joined to sdk_sessions"
+  - commit: "memory-recall-everywhere 2.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/sqlite/SessionStore.ts
+    status: freeharness
+    note: "ensureAgentTagsTable (agent_tags, idx_agent_tags_tag, migration 9001) ends the constructor chain; addAgentTags validates before the first insert and counts newly stored tags; agentTags lists them; getObservationsByIds and the timeline readers take agent filters, drop the project under a tag and return no summaries or prompts under any filter"
+  - commit: "memory-recall-everywhere 2.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/sqlite/SessionSearch.ts
+    status: freeharness
+    note: "buildFilterClause appends agentFilterClause for the observation alias and drops the project under a tag; searchSessions and searchUserPrompts return empty under any agent filter"
+  - commit: "memory-recall-everywhere 2.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/sqlite/types.ts
+    status: freeharness
+    note: "SearchFilters extends AgentFilters"
+  - commit: "memory-recall-everywhere 2.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/search/strategies/SQLiteSearchStrategy.ts
+    status: freeharness
+    note: "search passes agentType, agentId and tag to the observation search and skips session and prompt searches when any is set"
+  - commit: "memory-recall-everywhere 2.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/SearchManager.ts
+    status: freeharness
+    note: "normalizeParams accepts only snake_case agent filters; search skips sessions and prompts and uses FTS5 instead of Chroma under a filter; timeline passes the filters to the anchor search, the anchor lookup and every getTimelineAround call"
+  - commit: "memory-recall-everywhere 2.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/servers/mcp-server.ts
+    status: freeharness
+    note: "search and timeline tool descriptions and schemas list agent_type, agent_id and tag"
+  - commit: "memory-recall-everywhere 2.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/routes/SearchRoutes.ts
+    status: freeharness
+    note: "invalidAgentFilter validates agent_type, agent_id and tag (a repeated parameter is invalid); search and timeline answer 400 before any query"
+  - commit: "memory-recall-everywhere 2.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/routes/DataRoutes.ts
+    status: freeharness
+    note: "observationsBatchSchema accepts agent_type, agent_id and tag and handleGetObservationsByIds forwards them to getObservationsByIds"
+  - commit: "memory-recall-everywhere 2.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/shared.ts
+    status: freeharness
+    note: "ingestObservation sends a payload with an agentId to storeSubagentRule unless CLAUDE_MEM_SUBAGENT_CAPTURE is observer; storeSubagentRule keeps only the changed path of a Write, Edit, MultiEdit or NotebookEdit call as one rules observation and skips other tools with reason subagent_rules; first drift candidate at the next sync"
+  - commit: "memory-recall-everywhere 2.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/SettingsDefaultsManager.ts, shared/SettingsDefaultsManager.ts
+    status: freeharness
+    note: "CLAUDE_MEM_SUBAGENT_CAPTURE field and default rules, the same in the engine copy and the vendor copy"
+  - commit: "memory-recall-everywhere 2.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/routes/SubagentRoutes.ts
+    status: freeharness
+    note: "new: POST /api/subagents/start stores tags and answers a deterministic capped brief built from stored rows; POST /api/subagents/stop stores the final report as one rules observation (stripped, cut, fenced, privacy-checked, repeat told apart by content hash); excluded projects answer empty"
+  - commit: "memory-recall-everywhere 2.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/routes/ImportRoutes.ts
+    status: freeharness
+    note: "exports StoredObservation and syncStoredObservation (fire-and-log Chroma sync); importObservations syncs each freshly stored row; ImportRoutes takes getChromaSync"
+  - commit: "memory-recall-everywhere 2.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker-service.ts
+    status: freeharness
+    note: "registerRoutes registers SubagentRoutes right after ImportRoutes"
+
+# subagent-input-sanitize: FreeHarness-authored folding of untrusted subagent text (no upstream
+# commit). Same row shape as freeharness_recall; status is always freeharness. Restated for the
+# vendor tree in FIXUP.md section 19.
+freeharness_sanitize:
+  - commit: "subagent-input-sanitize 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/utils/untrusted-text.ts
+    status: freeharness
+    note: "new, import-free: UNSAFE_RANGES (C0 controls, DEL and C1 controls, bidi and invisible marks), hasUnsafeChar, foldUntrusted (collapse whitespace, trim, swap each unsafe code unit for one replacement character), TASK_BRIEF_CAP and PROJECT_BRIEF_CAP; callers strip memory tags first"
+  - commit: "subagent-input-sanitize 1.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/shared.ts
+    status: freeharness
+    note: "storeSubagentRule requires AGENT_ID_PATTERN and folds the changed path and agent type before any column or repeat key; the upstream session-memory gate in ingestObservation reads file_path or notebook_path only when a non-empty string, so a non-string path is absent instead of throwing; re-apply the gate guard after an adopt"
+  - commit: "subagent-input-sanitize 1.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/routes/SubagentRoutes.ts
+    status: freeharness
+    note: "agentType holding an unsafe character is refused with a fixed message; foldLine strips memory tags then folds with foldUntrusted; the brief caps, 4000 for a task tag and 2000 otherwise, are imported from untrusted-text.ts"
+
+# memory-hard-fork: FreeHarness-authored free-mem identity for the engine (data directory,
+# database, log, MCP server name, FREE_MEM_ names) with CLAUDE_MEM_ fallbacks (no upstream
+# commit). Same row shape as freeharness_sanitize; status is freeharness, except the two
+# tracked shared/ contract copies, which are DIVERGENT and never adopted. Restated for the
+# vendor tree in FIXUP.md section 20.
+freeharness_hard_fork:
+  - commit: "memory-hard-fork 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/data-dir.ts
+    status: freeharness
+    note: "new leaf module: expandHome, publicSettingName, envGet (FREE_MEM_ then CLAUDE_MEM_, empty as unset), toPublicSettings, resolveDataDir (FREE_MEM_DATA_DIR, CLAUDE_MEM_DATA_DIR, settings redirect, ~/.free-mem, legacy ~/.claude-mem while it alone exists)"
+  - commit: "memory-hard-fork 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/paths.ts
+    status: freeharness
+    note: "re-exports expandHome and resolveDataDir from data-dir.ts; DB_FILENAME free-mem.db, LEGACY_DB_FILENAME claude-mem.db, resolveDbPath picks the legacy file only while it alone exists; DB_PATH and paths.database() use it"
+  - commit: "memory-hard-fork 1.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/SettingsDefaultsManager.ts
+    status: freeharness
+    note: "data dir defaults from resolveDataDir; get() and applyEnvOverrides read through envGet; loadFromFile reads both name families and every rewrite writes FREE_MEM_ keys and drops the CLAUDE_MEM_ twin; internal keys stay CLAUDE_MEM_*"
+  - commit: "memory-hard-fork 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/utils/logger.ts
+    status: freeharness
+    note: "log file is free-mem-<date>.log"
+  - commit: "memory-hard-fork 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/infrastructure/ProcessManager.ts
+    status: freeharness
+    note: "runOneTimeCwdRemap opens the database through resolveDbPath"
+  - commit: "memory-hard-fork 1.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/servers/mcp-server.ts
+    status: freeharness
+    note: "MCP server name is free-mem"
+  - commit: "memory-hard-fork 1.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/scripts/plain/bun-runner.js
+    status: freeharness
+    note: "crash-log data directory resolved inline, mirroring resolveDataDir (env, settings redirect, ~/.free-mem, legacy directory while it alone exists)"
+  - commit: "memory-hard-fork 1.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/scripts/plain/version-check.js
+    status: freeharness
+    note: "Codex hook flag reads FREE_MEM_CODEX_HOOK then CLAUDE_MEM_CODEX_HOOK inline"
+  - commit: "memory-hard-fork 3.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/utils/untrusted-text.ts
+    status: freeharness
+    note: "unsafe set by code point: adds U+00AD, U+180E, variation selectors U+FE00 to U+FE0E (U+FE0F stays), tag characters U+E0000 to U+E007F, variation selectors supplement U+E0100 to U+E01EF; unpaired surrogates are unsafe; one U+FFFD per unsafe code point"
+  - commit: "memory-hard-fork 1.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/ClaudeProvider.ts
+    status: freeharness
+    note: "messages name USER_SETTINGS_PATH and the resolved .env path instead of ~/.claude-mem"
+  - commit: "memory-hard-fork 1.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/routes/SearchRoutes.ts
+    status: freeharness
+    note: "welcome-hint switch reads through envGet"
+  - commit: "memory-hard-fork 1.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker-service.ts
+    status: freeharness
+    note: "Codex hook flag and managed-mode check read through envGet"
+  - commit: "memory-hard-fork 1.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/server/Server.ts
+    status: freeharness
+    note: "the three CLAUDE_MEM_MANAGED checks read through envGet"
+  - commit: "memory-hard-fork 1.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/domain/ModeManager.ts
+    status: freeharness
+    note: "modes directory override reads through envGet"
+  - commit: "memory-hard-fork 1.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/dependency-health.ts
+    status: freeharness
+    note: "Claude CLI setup remediation names USER_SETTINGS_PATH"
+  - commit: "memory-hard-fork 1.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/find-claude-executable.ts
+    status: freeharness
+    note: "CLAUDE_CODE_PATH hints name USER_SETTINGS_PATH"
+  - commit: "memory-hard-fork 1.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/mcp-client.ts
+    status: freeharness
+    note: "resolveNodeCommand reads CLAUDE_MEM_NODE_PATH through envGet"
+  - commit: "memory-hard-fork 1.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/observer-health.ts
+    status: freeharness
+    note: "observer-health warning names USER_SETTINGS_PATH"
+  - commit: "memory-hard-fork 1.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/should-track-project.ts
+    status: freeharness
+    note: "CLAUDE_MEM_INTERNAL reads through envGet"
+  - commit: "memory-hard-fork 1.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/worker-utils.ts
+    status: freeharness
+    note: "CLAUDE_MEM_WORKER_SCRIPT_PATH reads through envGet"
+  - commit: "memory-hard-fork 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: shared/paths.ts
+    status: DIVERGENT
+    note: "tracked contract copy, not edited; differs from engine/shared/paths.ts by the marketplace directory, the resolver, the database name and the re-exports"
+  - commit: "memory-hard-fork 1.2"
+    upstream: "(none — FreeHarness authored)"
+    target: shared/SettingsDefaultsManager.ts
+    status: DIVERGENT
+    note: "tracked contract copy, not edited; lacks the FREE_MEM_ boundary and the two context-observation keys the engine copy adds"
+
+# recall-privacy-fixes: FreeHarness-authored privacy fixes in the engine (no upstream commit).
+# The tag-name rule diverges from upstream, which matches names case-sensitively and exactly;
+# an adopt re-applies it. Same row shape as freeharness_hard_fork; status is freeharness.
+# Restated for the vendor tree in FIXUP.md section 21.
+freeharness_recall_privacy:
+  - commit: "recall-privacy-fixes 2.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/utils/memory-tag-scanner.ts
+    status: freeharness
+    note: "tag names match a listed name case-insensitively or by the listed-name- prefix, longest first; diverges from upstream's exact, case-sensitive match"
+  - commit: "recall-privacy-fixes 2.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/routes/SessionRoutes.ts
+    status: freeharness
+    note: "prompt tags stripped until unchanged, at most 8 passes, before the cap, log, rows and observer; a prompt still changing at the limit is withheld; an empty stripped prompt saves an empty prompt row"
+  - commit: "recall-privacy-fixes 1.1, 2.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/routes/SubagentRoutes.ts
+    status: freeharness
+    note: "stop route accepts optional tags and records them before the report; exclusion goes through isCwdExcluded"
+  - commit: "recall-privacy-fixes 2.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/utils/project-filter.ts
+    status: freeharness
+    note: "isCwdExcluded matches the cwd and the parent path of a git worktree; git is consulted only when a pattern is set"
+  - commit: "recall-privacy-fixes 2.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/shared.ts
+    status: freeharness
+    note: "ingestObservation checks the project exclusion through isCwdExcluded"
+  - commit: "recall-privacy-fixes 2.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/should-track-project.ts
+    status: freeharness
+    note: "shouldTrackProject uses isCwdExcluded"
+
+# memory-worker-identity: FreeHarness-authored worker identity in the engine (no upstream commit).
+# /api/health carries product "free-mem"; one classifier tells our worker from another program on
+# the port, and a foreign responder is never waited on, spawned over or recycled. Search paging
+# values are coerced by a shared reader. Same row shape as freeharness_recall_privacy.
+# Restated for the vendor tree in FIXUP.md section 27.
+freeharness_worker_identity:
+  - commit: "memory-worker-identity 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/worker-identity.ts
+    status: freeharness
+    note: "new; classifyWorker (ours, ours-stale, foreign), filterForeignText and foreignWorkerLine"
+  - commit: "memory-worker-identity 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/server/Server.ts
+    status: freeharness
+    note: "/api/health adds product: free-mem"
+  - commit: "memory-worker-identity 1.2.1, 1.5"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/worker-utils.ts
+    status: freeharness
+    note: "ensureWorker returns a WorkerCheck; the health body is classified before the PID-file check; a foreign responder is never recycled or spawned over; WorkerFallback gains foreign facts and reason worker_foreign"
+  - commit: "memory-worker-identity 1.2.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/cli/handlers/context.ts
+    status: freeharness
+    note: "worker_foreign returns an empty context plus the foreign-worker line as a user-only system message"
+  - commit: "memory-worker-identity 1.2.2, 1.5"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker-spawner.ts
+    status: freeharness
+    note: "WorkerStartResult gains foreign; a responder on the configured worker host is classified before each readiness wait, with no wait, spawn or lock for a foreign one"
+  - commit: "memory-worker-identity 1.2.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker-service.ts
+    status: freeharness
+    note: "start command and hook command handle foreign with a fixed message"
+  - commit: "memory-worker-identity 1.3, 1.5"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/servers/mcp-server.ts
+    status: freeharness
+    note: "per-call health check replaces verifyWorkerConnection; a foreign responder gets a fixed tool refusal naming only our port and skips the auto-start"
+  - commit: "memory-worker-identity 5.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/numbers.ts
+    status: freeharness
+    note: "new; wholeNumber, the one reader of route values that arrive as text"
+  - commit: "memory-worker-identity 5.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/search/fused-request.ts
+    status: freeharness
+    note: "wholeNumber moved to numbers.ts and re-exported"
+  - commit: "memory-worker-identity 5.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/sqlite/SessionSearch.ts
+    status: freeharness
+    note: "searchSessions and searchUserPrompts read limit and offset through wholeNumber"
+
 roadmap:
   - "P4 inc.2 / V3-P0: DONE (engine + plugin build + MemoryPort install/register). Machine-only: observation generation + Chroma recall (Agent-SDK creds, uvx network)."
   - "vendor-sync-2026-09: DONE — 13.25.1 port (ports_13_25 above); FIXUP.md section 10 (the same port list, restated for the vendor tree) blocked by the memory-guard hook's path exception (task 1.1); plugin manifests + engine/package.json at 13.25.1 (task 1.5); sync adopt memory bumped baseline_commit/baseline_version above."