freeharness 0.4.1

package/provenance/claude-mem.LICENSE.upstream

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/provenance/memory.PROVENANCE.yaml

@@ -0,0 +1,399 @@
+# Provenance for the vendored claude-mem daemon. `freeharness sync check memory`
+# diffs upstream against this baseline (P5), limited to the vendored paths.
+upstream:
+  name: "claude-mem"
+  repo: https://github.com/thedotmack/claude-mem
+  fork: https://github.com/anegrelli/claude-mem
+  baseline_version: "13.25.1"
+  baseline_commit: "dcfc4422"
+
+runtime_prerequisites:
+  - "Bun >= 1.0 (plugin bundles are `bun build` CJS; hooks run worker-service.cjs through bun-runner.js)"
+  - "uv / Python (Chroma vector store)"
+  - "Claude Agent SDK (worker generation)"
+
+status: "V3-P0 memory-runtime DONE + recall verified on the dev machine (2026-08-15). V3-P0b memory-slim DONE (2026-09-04): engine trimmed to the single capture->store->recall path (216 -> 141 .ts, deps 8 -> 4, plugin dir 70 MB -> 3.1 MB), hooks.json/.mcp.json rewritten to deterministic ${CLAUDE_PLUGIN_ROOT} commands, skill dir aligned to upstream layout. Audit: vendor/claude-mem/SLIM-AUDIT.md; trim record: FIXUP.md section 7. Recall re-verified on the dev machine after the trim (2026-09-04); FreeHarness viewer added (FIXUP §8). V4-P3 memory-quality (2026-09-06): engine hunks ported from claude-mem 13.24.0 (be44b6c8) — bounded observer generations (#3800), field-optimizer, quota guard (#3838), observer-health + quota-cooldown ledgers, uvx-env, kill-process-tree + process-identity, silent observer role + FreeHarness verbatim/English rule, skip_summary noise, single-read transcript parser; port list, ignored set and settings in FIXUP.md section 9; plugin version 13.24.0. Recall re-verify after the port = task 3.6 [machine]. v4.1 memory-local-provider (2026-09-17): FreeHarness-authored opt-in local provider (CLAUDE_MEM_PROVIDER=local) serving the simple tier over a local OpenAI-compatible endpoint, with Claude as the per-batch fallback on local failure; provider interface, session runner, batch routing and health reporting; per-file record in FIXUP.md section 12 and freeharness_local_provider below."
+
+vendored:
+  control_plane:
+    - path: vendor/claude-mem/plugin/hooks/hooks.json
+      note: "lifecycle hooks (Setup/SessionStart/UserPromptSubmit/PostToolUse/PreToolUse:Read/Stop). DIVERGENT since memory-slim: same events/matchers/timeouts/async as upstream, commands rewritten to `node ${CLAUDE_PLUGIN_ROOT}/scripts/bun-runner.js ... <cmd>` with a static PATH prefix (no login shell, no plugin-cache enumeration). On upstream changes compare the event set and command verbs by hand; never copy the upstream blobs back."
+    - path: vendor/claude-mem/plugin/.mcp.json
+      note: "recall MCP registration (stdio). DIVERGENT: spawns ${CLAUDE_PLUGIN_ROOT}/scripts/mcp-server.cjs directly"
+    - path: vendor/claude-mem/plugin/.claude-plugin/plugin.json
+      note: "plugin manifest shape"
+    - path: vendor/claude-mem/plugin/skills/mem-search
+      note: "the mem-search skill (the recall entry point FreeHarness calls); the only kept plugin skill; upstream layout"
+    - path: vendor/claude-mem/plugin/modes
+      note: "code.json (+ pt-br, chill variants) — the worker's ModeManager fails init without code.json"
+    - path: vendor/claude-mem/.claude-plugin/marketplace.json
+      note: "marketplace manifest (owner thedotmack, plugin ./plugin) copied to <cfg>/plugins/marketplaces/thedotmack/"
+    - path: vendor/claude-mem/engine/scripts/plain
+      note: "bun-runner.js, version-check.js, worker-wrapper.cjs — verbatim upstream plugin/scripts launchers (NOT bundled); copied to plugin/scripts by build:plugin. bun-runner must stay pre-ES2020-parsable and keep fixBrokenScriptPath"
+    - path: vendor/claude-mem/shared
+      note: "config/paths conventions: paths.ts, path-utils.ts, SettingsDefaultsManager.ts, EnvManager.ts, hook-io.ts, hook-constants.ts, hook-settings.ts, atomic-json.ts (small, stable, high-value to own)"
+
+increment_2:
+  engine_vendored:
+    - path: vendor/claude-mem/engine
+      note: "141 .ts after memory-slim (+8 with the 13.24 port, FIXUP.md section 9): services (worker [ClaudeProvider only] + context/transcripts/infrastructure/sqlite/sync[Chroma]/server[worker-local HTTP]) + cli (claude-code hook runtime only) + supervisor + utils + types + sdk + servers/mcp-server. Removed set recorded in FIXUP.md section 7 (providers, cloud sync, corpus, smart-file-read, SaaS /v1, other-IDE adapters, viewer/SSE, CLAUDE.md writer, npx-cli). Type gate: `tsc -p engine/tsconfig.check.json` (bun build does not type-check)."
+    - path: vendor/claude-mem/SLIM-AUDIT.md
+      note: "memory-slim audit: baseline metrics, keep set, trim set with reachability evidence"
+  plugin_build:
+    script: vendor/claude-mem/engine/scripts/build-plugin.ts
+    command: "cd vendor/claude-mem/engine && bun install && bun run build:plugin"
+    mirrors: "upstream scripts/build-hooks.js (esbuild) minus server-service (SaaS), viewer, npx-cli/openclaw/opencode bundles, hooks.json regeneration"
+    modules:
+      - { name: worker-service, source: services/worker-service.ts, out: plugin/scripts/worker-service.cjs, target: bun }
+      - { name: sqlite/SessionStore, source: services/sqlite/SessionStore.ts, out: plugin/sqlite/SessionStore.js, target: bun }
+      - { name: sqlite/observations/files, source: services/sqlite/observations/files.ts, out: plugin/sqlite/observations/files.js, target: bun }
+      - { name: mcp-server, source: servers/mcp-server.ts, out: plugin/scripts/mcp-server.cjs, target: node }
+      - { name: context-generator, source: services/context-generator.ts, out: plugin/scripts/context-generator.cjs, target: bun }
+      - { name: transcript-watcher, source: services/transcripts/transcript-watcher-entry.ts, out: plugin/scripts/transcript-watcher.cjs, target: bun }
+    generated: "plugin/package.json (type: module; dep zod only)"
+  install_mechanism:
+    adapter: packages/cli/src/adapters/memory/vendored.ts (VendoredMemory implements MemoryPort)
+    identity: "thedotmack/claude-mem, key claude-mem@thedotmack (kept so hooks.json/.mcp.json resolvers work unmodified)"
+    config_dir: "$CLAUDE_CONFIG_DIR or ~/.claude"
+    steps:
+      - "ensurePrerequisites: probe bun (blocks) + uv (warns)"
+      - "migrateExisting: keep ~/.claude-mem (or CLAUDE_MEM_DATA_DIR); report only"
+      - "install: bun run build:plugin; rm+cp plugin/ -> <cfg>/plugins/cache/thedotmack/claude-mem/<version>/; cp plugin/ + .claude-plugin/marketplace.json -> <cfg>/plugins/marketplaces/thedotmack/; bun install --ignore-scripts in cache; .install-version markers {version,bun,uv,installedAt}"
+      - "registerHooks (additive merges): known_marketplaces.json[thedotmack]={source:{source:github,repo:thedotmack/claude-mem},installLocation,lastUpdated,autoUpdate:false}; installed_plugins.json{version:2,plugins['claude-mem@thedotmack']:[{scope:user,installPath,version,installedAt,lastUpdated}]}; settings.json enabledPlugins['claude-mem@thedotmack']=true"
+    divergence: "autoUpdate:false (upstream true) so Claude Code never overwrites our build with upstream"
+    dry_run: "writes nothing; previews every path"
+    bridge: "`npx claude-mem install` only when packages/memory/vendor/claude-mem/engine is absent"
+  machine_steps_done:
+    - "Import trim: ~17 kept files still import dropped modules (telemetry/integrations/postgres/server-SaaS) — see vendor/claude-mem/FIXUP.md; Bun/tsc flags each."
+    - "Build config: add a trimmed package.json (keep the bun build script + runtime deps: express, chroma client, @anthropic-ai/claude-agent-sdk, tree-sitter, zod); bunfig.toml + tsconfig.json copied for reference."
+    - "Bun build (bun install && bun run build) -> worker + mcp artifacts that plugin/hooks/hooks.json + plugin/.mcp.json invoke."
+    - "MemoryPort concrete adapter (cli): ensurePrerequisites (bun/uv) / install (plugin + build) / registerHooks (additive) / migrateExisting (~/.claude-mem). Until then the memory capability bridges via `npx claude-mem install`."
+
+freeharness_own:
+  # FreeHarness-authored files inside the vendor tree (NOT upstream; excluded from
+  # `sync check memory` diffs). Record: vendor/claude-mem/FIXUP.md section 8.
+  - path: vendor/claude-mem/plugin/ui/viewer.html
+    note: "FreeHarness memory viewer page — single self-contained HTML (inline CSS/JS, no CDN, dark neutral theme). Served by the worker on GET /. Version-controlled source, not a build output; build:plugin only asserts it exists."
+  - path: vendor/claude-mem/engine/services/worker/http/routes/ViewerRoutes.ts
+    note: "Own ViewerRoutes: GET / (page) + read-only, localhost-only /api/viewer/{projects,feed,item,search,stats}. SQL over SessionStore.db + SearchManager.search delegation. No SSE, no writes. Replaces the upstream React viewer removed in memory-slim."
+
+skipped:
+  - "src/server + src/storage/postgres + better-auth + bullmq/ioredis/pg (hosted SaaS)"
+  - "docker/ + docker-compose + Dockerfile.test-installer"
+  - "src/ui (React viewer); cursor-hooks/ + openclaw/ + src/integrations (other-IDE)"
+  - "telemetry (src/services/telemetry, PostHog, cmem-pro costs/pro prompts)"
+  - "marketplace/release scripts; docs i18n translations"
+  - "plugin skills except mem-search (babysit, wowerpoint, standup, weekly-digests, etc.)"
+  - "memory-slim (engine): Gemini/OpenRouter/OpenAI providers, cloud sync, knowledge corpus, smart-file-read (tree-sitter), SaaS /v1 + server runtime, other-IDE hook adapters, viewer/SSE routes, CLAUDE.md/AGENTS.md auto-writer, npx-cli/install, codex-hooks.json, statusline-counts.js"
+  - "OpenCode memory wiring (the `npx claude-mem install --ide opencode` bridge) — seam"
+  - "13.24 port (V4-P3, FIXUP §9 ignored set): installer/OAuth sign-in + PRO/trial settings keys, PostHog telemetry (usage_limit_hit, observed_model/observed_billing + schema v50), cmem-gateway provider-dispatch, Cursor/Grok Bot marketplace plugins, Telegram notifier, viewer/restart page, WorkerRef SSE broadcasts, codex bounded startup"
+
+# vendor-sync-2026-09 ports from upstream dcfc4422 (13.25.1, Apache-2.0). Each entry names
+# the upstream commit/PR, the vendored target, and status: port (verbatim), adapted (scoped
+# subset), or ignored (with reason). `sync adopt memory` never touches this list.
+ports_13_25:
+  - commit: "cd8258f6 (#3629)"
+    upstream: services/worker/ClaudeProvider.ts
+    target: engine/services/worker/ClaudeProvider.ts
+    status: port
+  - commit: "7d3f0047 (#4027)"
+    upstream: services/sqlite/SessionStore.ts
+    target: engine/services/sqlite/SessionStore.ts
+    status: port
+    note: "this commit's only hunk in this file; a second, unrelated port to this same file (streamRows() Bun-version fallback) lands under commit c340932c below"
+  - commit: "7d3f0047 (#4027)"
+    upstream: services/worker/ClaudeProvider.ts
+    target: engine/services/worker/ClaudeProvider.ts
+    status: port
+  - commit: "7d3f0047 (#4027)"
+    upstream: services/worker/agents/ResponseProcessor.ts
+    target: engine/services/worker/agents/ResponseProcessor.ts
+    status: port
+  - commit: "65eb1943 (#3998)"
+    upstream: sdk/output-classifier.ts
+    target: engine/sdk/output-classifier.ts
+    status: port
+    note: "isTransportFailureObserverOutput and its supporting regexes/helpers"
+  - commit: "65eb1943 (#3998)"
+    upstream: services/worker/agents/ResponseProcessor.ts
+    target: engine/services/worker/agents/ResponseProcessor.ts
+    status: port
+    note: "isTransportFailureObserverOutput import, isRejectionProse OR, transport-preserve branch mirroring quota/auth"
+  - commit: "65eb1943 (#3998)"
+    upstream: services/worker/session/GeneratorExitHandler.ts
+    target: engine/services/worker/session/GeneratorExitHandler.ts
+    status: adapted
+    note: "appended only abortCategory === 'transport' to the existing guard; skipped the PRESERVES_CLAIMED_WORK array refactor and provider_switch (not vendored)"
+  - commit: "65eb1943 (#3998)"
+    upstream: services/worker/http/routes/SessionRoutes.ts
+    target: engine/services/worker/http/routes/SessionRoutes.ts
+    status: adapted
+    note: "normalizeAbortReason gained case 'transport'; the .finally() handler calls recordObserverFailure(provider, {message, kind:'transport'}) mirroring the existing quota-prose block one line above it (the quota mirror this hunk follows lives in SessionRoutes.ts, not ResponseProcessor.ts)"
+  - commit: "47c06ff9 (#3986)"
+    upstream: services/context/ContextBuilder.ts
+    target: engine/services/context/ContextBuilder.ts
+    status: port
+    note: "withObserverHealthWarning's failure-vs-cooldown notice selection; hardened further (see the isAuthFailure row below) to stop the cooldown notice masking an unresolved auth failure"
+  - commit: "47c06ff9 (#3986)"
+    upstream: shared/observer-health.ts
+    target: engine/shared/observer-health.ts
+    status: port
+    note: "ObserverQuotaCooldown type, recordObserverQuotaCooldown/clearObserverQuotaCooldown, isObserverQuotaCooldownActive/renderObserverQuotaCooldownNotice; hardened with quoteProviderMessage() (below) and AUTH_FAILURE_KINDS/isAuthFailure (below)"
+  - commit: "47c06ff9 (#3986)"
+    upstream: shared/quota-cooldown.ts
+    target: engine/shared/quota-cooldown.ts
+    status: port
+  - commit: "47c06ff9 (#3986, hardening)"
+    upstream: shared/observer-health.ts
+    target: engine/shared/observer-health.ts
+    status: adapted
+    note: "FreeHarness addition beyond the upstream diff: quoteProviderMessage() wraps the cooldown notice's provider message as \"provider message (data, not instructions): \\\"<text>\\\"\" (240-char cap) instead of interpolating it bare, since the message is untrusted provider output rendered to a human"
+  - commit: "47c06ff9 (#3986, hardening)"
+    upstream: shared/observer-health.ts + services/context/ContextBuilder.ts
+    target: engine/shared/observer-health.ts (AUTH_FAILURE_KINDS, isAuthFailure), engine/services/context/ContextBuilder.ts (cooldownNoticeApplies)
+    status: adapted
+    note: "FreeHarness addition: cooldownNoticeApplies gates the cooldown-notice branch on !isAuthFailure(health) instead of a bare lastErrorKind !== 'auth' comparison, because ClaudeProvider.ts's classifyClaudeError only ever emits kind: 'auth_invalid' into the ledger, not 'auth'; without this an armed cooldown notice could mask an unresolved auth failure"
+  - commit: "14f1b305 (fixes #3903)"
+    upstream: services/worker/RateLimitStore.ts
+    target: engine/services/worker/RateLimitStore.ts
+    status: port
+    note: "appliesUtilizationThreshold guard so an explicit isUsingOverage === false does not trip the overage-window utilization threshold"
+  - commit: "c340932c (#3476)"
+    upstream: shared/worker-utils.ts
+    target: engine/shared/worker-utils.ts
+    status: adapted
+    note: "ported WEDGED_WORKER_UPTIME_S, fetchWorkerHealthUptimeSeconds(), and the ready-branch wedge-vs-cold-boot split onto the vendored simpler if (!ready) shape; skipped the alreadyRecycledBundle/recycleBuildKey version-mismatch restructuring (not vendored); plugin/package.json engines.bun bump to >=1.1.31 applied in task 1.5, not here"
+  - commit: "c340932c (#3476)"
+    upstream: services/sqlite/SessionStore.ts
+    target: engine/services/sqlite/SessionStore.ts
+    status: port
+    note: "streamRows() Bun-version fallback, rewiring the schema-v46 migration's .iterate() call site to use it"
+  - commit: "1ce59d48 (#3410)"
+    upstream: services/context/ContextConfigLoader.ts
+    target: engine/services/context/ContextConfigLoader.ts
+    status: port
+    note: "parseCsvSetting() and loadContextConfig() parsing CLAUDE_MEM_CONTEXT_OBSERVATION_TYPES/_CONCEPTS before falling back to the mode's full lists"
+  - commit: "1ce59d48 (#3410, hardening)"
+    upstream: services/context/ContextConfigLoader.ts
+    target: engine/services/context/ContextConfigLoader.ts
+    status: adapted
+    note: "FreeHarness addition beyond the upstream diff: resolveIdSet() helper — when the configured CSV ids intersect nothing in the active mode's list, logs a CONFIG warning naming the configured/mode ids and falls back to the full mode list instead of silently returning an empty set; a partial match is kept as-is"
+  - commit: "1ce59d48 (#3410)"
+    upstream: shared/SettingsDefaultsManager.ts
+    target: engine/shared/SettingsDefaultsManager.ts
+    status: port
+    note: "engine copy only; the top-level control-plane packages/memory/vendor/claude-mem/shared/SettingsDefaultsManager.ts is out of this port's write scope and now diverges on these two keys"
+  - commit: "e88258e5 (#3996)"
+    upstream: sdk/prompts.ts
+    target: engine/sdk/prompts.ts
+    status: port
+    note: "stripImagePayloads()/isDataUrl/elideImageSource wired into buildObservationPrompt's toolInput/toolOutput before truncateObservationField"
+  - commit: "d6e4e845 (#3985)"
+    target: "(none)"
+    status: ignored
+    note: "every hunk audited to ignored — smart-file-read and SettingsRoutes.ts are both removed in memory-slim; no credential-leak path exists in the kept files"
+  - commit: "57d86561 (#4018)"
+    upstream: engine/package.json (dependencies)
+    target: engine/package.json
+    status: ignored
+    note: "shell-quote confirmed absent from dependencies/devDependencies; nothing to pin"
+  - commit: "4e966e15 (#3999)"
+    upstream: services/worker/OpenAICompatibleProvider.ts
+    target: "(none)"
+    status: ignored
+    note: "alt-provider file removed in memory-slim (single-provider Claude engine); touches only the dropped alt-provider path"
+  - commit: "65eb1943 (#3998, hardening)"
+    upstream: sdk/output-classifier.ts, sdk/prompts.ts
+    target: engine/sdk/output-classifier.ts, engine/sdk/prompts.ts
+    status: adapted
+    note: "restored the dropped upstream issue references confirmed byte-for-byte against the sibling checkout: \"permanent data loss.\" -> \"permanent data loss (#3752).\"; \"Two things compound:\" -> \"Two things compound (#3730):\""
+
+# memory-observer-economy: FreeHarness-authored economy + health-honesty
+# changes (no upstream commit). Same row shape as ports_13_25; status is
+# always freeharness. Restated for the vendor tree in FIXUP.md section 11.
+freeharness_13_25:
+  - commit: "memory-observer-economy 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/SettingsDefaultsManager.ts
+    status: freeharness
+    note: "CLAUDE_MEM_SKIP_TOOLS extended with Read, Glob, Grep, ListAgents, SendMessage, Monitor, TaskOutput, ToolSearch, TaskStop on top of the upstream five; an owner list in settings.json still replaces the default outright"
+  - commit: "memory-observer-economy 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: shared/SettingsDefaultsManager.ts
+    status: freeharness
+    note: "top-level control-plane copy carries the same extended default so the two copies agree (memory-quality 3.1 pattern)"
+  - commit: "memory-observer-economy 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: plugin/modes/code.json
+    status: freeharness
+    note: "discovery removed from observation_types and from the type_guidance prompt's enumerated list and count (9 -> 8); ResponseProcessor.ts is the storage-side safety net if a model still emits it"
+  - commit: "memory-observer-economy 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/agents/ResponseProcessor.ts
+    status: freeharness
+    note: "drops a stored observation whose type is outside the active mode's observation_types before it reaches storeObservations, logging the dropped type(s) once per batch"
+  - commit: "memory-observer-economy 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/agents/ObservationModeFilter.ts
+    status: freeharness
+    note: "new pure filterObservationsByMode() helper, extracted so the drop logic is testable under plain Node without the worker's bun:sqlite import chain"
+  - commit: "memory-observer-economy 1.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/observer-health.ts
+    status: freeharness
+    note: "OBSERVER_STALE_AFTER_MS (12h) bounds isObserverUnhealthy's verdict age; ObserverFailureKind gains quota_guard; renderObserverHealthWarning renders a guard copy naming the window, the utilization percentage and the cooldown ledger's until time, with no allowance-is-used-up sentence"
+  - commit: "memory-observer-economy 1.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/routes/SessionRoutes.ts
+    status: freeharness
+    note: "the local quota guard's own abort path (RateLimitStore.shouldAbortForQuota, aborted before any request is sent) now records kind quota_guard with the window and utilization folded into the message, distinct from the unchanged provider-refusal-as-prose path (quota_exhausted)"
+  - commit: "memory-observer-economy 1.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/context/ContextBuilder.ts
+    status: freeharness
+    note: "passes Date.now() explicitly to isObserverUnhealthy so the stale bound is evaluated against the call site's own clock"
+  - commit: "memory-observer-economy 4.1"
+    upstream: "(none — FreeHarness authored)"
+    target: plugin/.claude-plugin/plugin.json
+    status: freeharness
+    note: "name free-mem; description names the FreeHarness build of claude-mem; repository and homepage stay the upstream thedotmack/claude-mem URLs"
+  - commit: "memory-observer-economy 4.1"
+    upstream: "(none — FreeHarness authored)"
+    target: .claude-plugin/marketplace.json
+    status: freeharness
+    note: "marketplace name freeharness; plugin entry name free-mem"
+  - commit: "memory-observer-economy 4.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/plugin-state.ts
+    status: freeharness
+    note: "PLUGIN_SETTINGS_KEY = 'free-mem@freeharness'"
+  - commit: "memory-observer-economy 4.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/paths.ts
+    status: freeharness
+    note: "MARKETPLACE_ROOT under plugins/marketplaces/freeharness"
+  - commit: "memory-observer-economy 4.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/worker-utils.ts
+    status: freeharness
+    note: "cacheWorkerScriptCandidates default cache root cache/freeharness/free-mem"
+  - commit: "memory-observer-economy 4.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/servers/mcp-server.ts
+    status: freeharness
+    note: "marketplace and cache candidate paths under freeharness/free-mem; missing-marketplace warning text and self-heal command follow the new id"
+  - commit: "memory-observer-economy 4.1"
+    upstream: "(none — FreeHarness authored)"
+    target: plugin/scripts/bun-runner.js (and engine/scripts/plain/bun-runner.js, its build source)
+    status: freeharness
+    note: "disabled-plugin check reads enabledPlugins['free-mem@freeharness']"
+  - commit: "memory-observer-economy 4.1"
+    upstream: "(none — FreeHarness authored)"
+    target: plugin/scripts/version-check.js (and engine/scripts/plain/version-check.js, its build source)
+    status: freeharness
+    note: "upgrade-hint text runs freeharness init --only memory or freeharness memory activate instead of npx claude-mem@latest install"
+  - commit: "memory-observer-economy 4.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/context/ContextBuilder.ts
+    status: freeharness
+    note: "VERSION_MARKER_PATH derives from MARKETPLACE_ROOT (paths.ts) instead of a hard-coded marketplaces/thedotmack literal, so the ERR_DLOPEN_FAILED self-heal unlinkSync targets the real install-version marker under the freeharness marketplace root"
+
+# memory-local-provider: FreeHarness-authored local model fallback and routing.
+# One-turn provider interface, local implementation over HTTP, session runner, batch
+# telemetry. Same row shape as freeharness_13_25; status is always freeharness.
+# Restated for the vendor tree in FIXUP.md section 12.
+freeharness_local_provider:
+  - commit: "memory-local-provider 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/Provider.ts
+    status: freeharness
+    note: "Provider interface, providerFactory, runOneTurn contract and one-turn loop seam for provider-agnostic session routing"
+  - commit: "memory-local-provider 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/LocalProvider.ts
+    status: freeharness
+    note: "LocalProvider implements Provider with startSession, ingest, stop, complete methods; ingest() batches a session's pending messages against the local endpoint; complete() refuses one-shot completions (handed to the Claude fallback instead)"
+  - commit: "memory-local-provider 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/ClaudeProvider.ts
+    status: freeharness
+    note: "implements Provider, readonly name = 'claude', getModelId() public, complete(system, user, model) one-turn method for fallback and standalone use"
+  - commit: "memory-local-provider 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker-service.ts
+    status: freeharness
+    note: "sdkAgent typed as Provider and built by providerFactory; local provider built with claude as fallback; settings load hoisted into factory call; getAiStatus() reports this.sdkAgent.name so GET /api/health names the provider actually serving the worker"
+  - commit: "memory-local-provider 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker-types.ts
+    status: freeharness
+    note: "ActiveSession.currentProvider widened to ProviderName (imported from worker/Provider.ts); ActiveSession.localSwitchedToClaude flag"
+  - commit: "memory-local-provider 1.1"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/quota-cooldown.ts
+    status: freeharness
+    note: "QuotaProvider = 'claude' | 'local' type, quota cooldown logic accepts both names"
+  - commit: "memory-local-provider 1.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/SettingsDefaultsManager.ts
+    status: freeharness
+    note: "nine CLAUDE_MEM_LOCAL_* keys (model, timeout, prompt budget, max lag, max prompt tokens); CLAUDE_MEM_PROVIDER typed to 'claude' | 'local'; removed alt-provider Gemini/OpenRouter keys"
+  - commit: "memory-local-provider 1.2"
+    upstream: "(none — FreeHarness authored)"
+    target: shared/SettingsDefaultsManager.ts
+    status: freeharness
+    note: "top-level control-plane copy carries the same nine local keys and provider type; removed alt-provider Gemini/OpenRouter keys; the two copies stay in sync"
+  - commit: "memory-local-provider 1.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/EnvManager.ts
+    status: freeharness
+    note: "removed GEMINI_API_KEY and OPENROUTER_API_KEY from ClaudeMemEnv and CREDENTIAL_KEYS; memory-slim single-provider consolidation"
+  - commit: "memory-local-provider 1.2"
+    upstream: "(none — FreeHarness authored)"
+    target: shared/EnvManager.ts
+    status: freeharness
+    note: "top-level control-plane copy same removal (Gemini/OpenRouter keys); the two copies stay byte-identical"
+  - commit: "memory-local-provider 1.3"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/LocalProvider.ts
+    status: freeharness
+    note: "full implementation replacing the 1.1 stub; Semaphore and per-session promise chain; trimToBudget, LocalBatch, failure kinds (local_unreachable, local_timeout, local_unparseable, local_over_budget, local_stopped)"
+  - commit: "memory-local-provider 1.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/LocalSessionRunner.ts
+    status: freeharness
+    note: "runLocalSession(session, deps) routes pending messages to local or fallback based on tier and budget; records local failures; switches provider on breaker (three timeouts) or lag (oldest-pending age limit)"
+  - commit: "memory-local-provider 1.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/local-provider-log.ts
+    status: freeharness
+    note: "LocalProviderLogLine type and appendLocalProviderLine to log each batch to <data-dir>/local-provider.jsonl with routing decision and outcome"
+  - commit: "memory-local-provider 1.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/http/routes/SessionRoutes.ts
+    status: freeharness
+    note: "startGeneratorWithProvider routes local provider through runLocalGenerator (probe + session start + runner); records local_unreachable and runs fallback on failed start"
+  - commit: "memory-local-provider 1.4"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/worker/agents/ResponseProcessor.ts
+    status: freeharness
+    note: "processAgentResponse gains provider?: ProviderName option; skips quota-prose and auth-prose classifiers for local replies (text, not refusals)"
+  - commit: "memory-local-provider 1.5"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/shared/observer-health.ts
+    status: freeharness
+    note: "five local_* failure kinds (local_unreachable, local_timeout, local_unparseable, local_breaker, local_lag); isLocalFailureKind() type guard; renderLocalObserverNotice() for local provider health messages"
+  - commit: "memory-local-provider 1.5"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/services/context/ContextBuilder.ts
+    status: freeharness
+    note: "localNoticeApplies() helper; withObserverHealthWarning branch for renderLocalObserverNotice to report local provider state"
+  - commit: "memory-local-provider 4.2"
+    upstream: "(none — FreeHarness authored)"
+    target: engine/supervisor/process-registry.ts
+    status: freeharness
+    note: "spawnSdkProcess and createSdkSpawnFactory take an optional label (default session-<id>) used in the SDK_SPAWN log lines, so a completion's negative spawn id renders as [completion-<n>] instead of the unlabeled [session--1]; the registry key and duplicate scan keep the numeric id"
+
+roadmap:
+  - "P4 inc.2 / V3-P0: DONE (engine + plugin build + MemoryPort install/register). Machine-only: observation generation + Chroma recall (Agent-SDK creds, uvx network)."
+  - "vendor-sync-2026-09: DONE — 13.25.1 port (ports_13_25 above); FIXUP.md section 10 (the same port list, restated for the vendor tree) blocked by the memory-guard hook's path exception (task 1.1); plugin manifests + engine/package.json at 13.25.1 (task 1.5); sync adopt memory bumped baseline_commit/baseline_version above."