muonroi-cli 1.4.0 → 1.4.1

package/src/ee/search.ts

@@ -1,259 +0,0 @@
-/**
- * src/ee/search.ts
- *
- * Shared Experience Engine (EE) search/health helpers used by BOTH:
- *   - the MCP `ee.query` / `ee.health` tools (src/mcp/ee-tools.ts), for
- *     external agents driving the CLI over MCP, and
- *   - the in-CLI agent's builtin `ee_query` tool (src/tools/registry.ts), so
- *     the anti-mù protocol's "Use ee_query tool with 'tool-artifact id=XXX'"
- *     instruction is actually executable from inside the agent loop.
- *
- * The EE client returns null on any error/timeout (graceful, circuit-breaker)
- * so callers map null → an "EE unavailable" outcome rather than throwing.
- */
-
-import type { EERecallEntry, EERecallResponse, EESearchResponse } from "./types.js";
-
-/** Char-budget bounds for the agent-facing recall index. */
-const RECALL_FORMAT_MIN_CHARS = 500;
-const RECALL_FORMAT_MAX_CHARS = 20_000;
-const RECALL_FORMAT_DEFAULT_CHARS = 6_000;
-
-function clampRecallChars(n: number | undefined): number {
-  if (typeof n !== "number" || !Number.isFinite(n)) return RECALL_FORMAT_DEFAULT_CHARS;
-  return Math.min(RECALL_FORMAT_MAX_CHARS, Math.max(RECALL_FORMAT_MIN_CHARS, Math.floor(n)));
-}
-
-/**
- * Render an {@link EERecallResponse} into the compact, inline-readable index the
- * agent actually consumes — the same ranked `[id col]` text the exp-recall.js
- * CLI prints, NOT a JSON dump of the whole response.
- *
- * Why this exists: the recallMode pipeline casts a wide net (recallBudgetChars
- * sums to ~30k across the 3 collections), so `resp.text` is routinely ~31k. The
- * MCP `ee.query` tool used to return `JSON.stringify(resp)` verbatim, which
- * (a) blew past the MCP per-result token cap → the client spilled it to a file,
- * and (b) JSON-escaped every newline, making the index unreadable. This caps the
- * text on a line boundary (recall text is cosine-ranked strongest-first, so the
- * tail is the safe thing to drop), preserves every `[id col]` handle in the kept
- * region, and appends a one-line footer with the true count + truncation notice.
- */
-export function formatRecallForAgent(resp: EERecallResponse, opts: { query?: string; maxChars?: number } = {}): string {
-  const maxChars = clampRecallChars(opts.maxChars);
-  const q = opts.query ? ` for "${String(opts.query).slice(0, 80)}"` : "";
-  if (!resp.text || resp.count === 0) {
-    return `[recall: 0 entries${q} — the brain has nothing here; proceed without it.]`;
-  }
-  const full = resp.text.length;
-  let body = resp.text;
-  let truncated = false;
-  if (full > maxChars) {
-    truncated = true;
-    const slice = resp.text.slice(0, maxChars);
-    const lastNl = slice.lastIndexOf("\n");
-    // Cut on the last newline so a `[id col]` handle is never split — unless that
-    // would discard more than half the budget, in which case keep the hard slice.
-    body = lastNl > maxChars * 0.5 ? slice.slice(0, lastNl) : slice;
-  }
-  const footer = truncated
-    ? `[recall: ${resp.count} entries${q} · truncated ${body.length}/${full} chars — narrow the query or raise maxChars; entries are cosine-ranked, strongest first]`
-    : `[recall: ${resp.count} entries${q}]`;
-  return `${body}\n\n${footer}`;
-}
-
-/**
- * Mirror an agent-initiated recall as a LOCAL `op:'recall'` activity row, matching
- * the EE-side buildRecallEvent shape. The server logs recalls into the VPS's
- * activity.jsonl, but the runbook-candidate nudge (stop-extractor) reads the
- * CLIENT-local one — so without this, MCP/builtin recalls (which POST straight to
- * /api/recall) are invisible to the stitch signal, exactly as exp-recall.js was
- * before its own local-log fix. Best-effort: a failed write must never break recall.
- *
- * Exported for unit testing (pass `logPath` to redirect off the real ~/.experience).
- */
-export async function mirrorRecallLocally(
-  query: string,
-  meta: { sourceSession?: string | null; project?: string | null; entries?: EERecallEntry[] },
-  logPath?: string,
-): Promise<void> {
-  try {
-    const fs = await import("node:fs");
-    const os = await import("node:os");
-    const path = await import("node:path");
-    const ids = Array.isArray(meta.entries)
-      ? meta.entries.map((e) => (e && e.id != null ? String(e.id) : "")).filter(Boolean)
-      : [];
-    const row = {
-      ts: new Date().toISOString(),
-      op: "recall",
-      query: String(query || "").slice(0, 200),
-      sourceSession: meta.sourceSession ?? null,
-      project_slug: meta.project ?? null,
-      surfacedIds: ids,
-      count: ids.length,
-    };
-    const target =
-      logPath ?? process.env.EXPERIENCE_ACTIVITY_LOG ?? path.join(os.homedir(), ".experience", "activity.jsonl");
-    await fs.promises.appendFile(target, `${JSON.stringify(row)}\n`);
-  } catch (err) {
-    const { logEeFailure, classifyEeError } = await import("../utils/ee-logger.js");
-    logEeFailure("search.mirrorRecallLocally", classifyEeError(err), err as Error);
-  }
-}
-
-/**
- * Semantic search over the EE brain. Token + base URL are resolved lazily from
- * ~/.experience/config.json (works on thin clients). Returns null on
- * unavailability/timeout — never throws for transport errors.
- */
-export async function searchEE(
-  query: string,
-  opts: { limit?: number; collections?: string[] } = {},
-): Promise<EESearchResponse | null> {
-  const { createEEClient } = await import("./client.js");
-  const { loadEEAuthToken, getCachedServerBaseUrl } = await import("./auth.js");
-  const authToken = (await loadEEAuthToken()) ?? undefined;
-  const baseUrl = getCachedServerBaseUrl() ?? undefined;
-  return createEEClient({ baseUrl, authToken }).search(query, opts);
-}
-
-/**
- * Active recall over the EE brain via /api/recall (recallMode) — the fixed
- * pipeline (3 collections merged by raw cosine, integrity gates, records a
- * surface) that returns the `[id col]` index. This is the recall path the MCP
- * `ee.query` tool and the in-CLI builtin `ee_query` route through, so the
- * agent's tool-driven recall is on par with exp-recall.js. Returns null on
- * unavailability/timeout — never throws for transport errors.
- */
-export async function recallEE(
-  query: string,
-  opts: { project?: string; cwd?: string; sourceSession?: string; timeoutMs?: number } = {},
-): Promise<EERecallResponse | null> {
-  const { createEEClient } = await import("./client.js");
-  const { loadEEAuthToken, getCachedServerBaseUrl } = await import("./auth.js");
-  const authToken = (await loadEEAuthToken()) ?? undefined;
-  const baseUrl = getCachedServerBaseUrl() ?? undefined;
-  const sourceSession = opts.sourceSession ?? process.env.EXP_SESSION;
-  const cwd = opts.cwd ?? process.cwd();
-  const result = await createEEClient({ baseUrl, authToken }).recall(query, {
-    project: opts.project,
-    cwd,
-    sourceSession,
-    timeoutMs: opts.timeoutMs,
-  });
-  // Mirror the recall locally so the session-end runbook-candidate nudge sees
-  // MCP/builtin recalls too (parity with the exp-recall.js CLI path). Only on a
-  // non-null result (a transport failure already returned null to the caller).
-  if (result) {
-    await mirrorRecallLocally(query, { sourceSession, project: opts.project, entries: result.entries });
-  }
-  return result;
-}
-
-// ─── Recall feedback (parity with exp-feedback.js → POST /api/feedback) ───────
-export type FeedbackVerdict = "followed" | "ignored" | "noise";
-export type NoiseReason = "wrong_repo" | "wrong_language" | "wrong_task" | "stale_rule";
-
-const VERDICT_WIRE: Record<FeedbackVerdict, "FOLLOWED" | "IGNORED" | "IRRELEVANT"> = {
-  followed: "FOLLOWED",
-  ignored: "IGNORED",
-  noise: "IRRELEVANT",
-};
-
-export interface FeedbackResult {
-  ok: boolean;
-  resolvedId?: string;
-  verdict?: string;
-  reason?: string;
-  error?: string;
-}
-
-/**
- * Record an agent verdict on a recalled `[id col]` entry, byte-for-byte matching
- * the exp-feedback.js wire shape the server already accepts
- * (`{pointId, collection, verdict: FOLLOWED|IGNORED|IRRELEVANT, reason?}`). The
- * server resolves a short pointId prefix and returns the full `resolvedId`. Never
- * throws (graceful, logged) — returns `{ok:false, error}` on transport failure so
- * the caller can keep the entry as unrated debt instead of clearing it.
- */
-export async function feedbackEE(
-  pointId: string,
-  collection: string,
-  verdict: FeedbackVerdict,
-  reason?: NoiseReason,
-): Promise<FeedbackResult> {
-  const { loadEEAuthToken, getCachedServerBaseUrl } = await import("./auth.js");
-  const authToken = (await loadEEAuthToken()) ?? undefined;
-  const baseUrl = (getCachedServerBaseUrl() ?? "http://localhost:8082").replace(/\/+$/, "");
-  const wire = VERDICT_WIRE[verdict];
-  const body: Record<string, unknown> = { pointId, collection, verdict: wire };
-  if (wire === "IRRELEVANT") body.reason = reason;
-  const headers: Record<string, string> = { "Content-Type": "application/json" };
-  if (authToken) headers.Authorization = `Bearer ${authToken}`;
-  try {
-    const res = await fetch(`${baseUrl}/api/feedback`, {
-      method: "POST",
-      headers,
-      body: JSON.stringify(body),
-    });
-    const text = await res.text();
-    let json: { error?: string; resolvedId?: string; verdict?: string; reason?: string } | null = null;
-    try {
-      json = JSON.parse(text);
-    } catch {
-      /* non-JSON error body — fall through to status-based handling */
-    }
-    if (!res.ok) {
-      return { ok: false, error: json?.error || text || `HTTP ${res.status}` };
-    }
-    const resolvedId = json?.resolvedId || pointId;
-    await mirrorFeedbackLocally(resolvedId, collection, wire, reason);
-    return { ok: true, resolvedId, verdict: json?.verdict || wire, reason };
-  } catch (err) {
-    const { logEeFailure, classifyEeError } = await import("../utils/ee-logger.js");
-    logEeFailure("search.feedbackEE", classifyEeError(err), err as Error);
-    return { ok: false, error: err instanceof Error ? err.message : String(err) };
-  }
-}
-
-/**
- * Mirror a feedback verdict as a LOCAL `op:'feedback'` activity row (parity with
- * mirrorRecallLocally's `op:'recall'`). Lets the session-end nudge + forensics
- * compute unrated-recall debt as recalled ids minus fed-back ids. Best-effort.
- */
-export async function mirrorFeedbackLocally(
-  pointId: string,
-  collection: string,
-  verdict: string,
-  reason?: string | null,
-  logPath?: string,
-): Promise<void> {
-  try {
-    const fs = await import("node:fs");
-    const os = await import("node:os");
-    const path = await import("node:path");
-    const row = {
-      ts: new Date().toISOString(),
-      op: "feedback",
-      pointId: String(pointId),
-      collection: collection ?? null,
-      verdict,
-      ...(reason ? { reason } : {}),
-    };
-    const target =
-      logPath ?? process.env.EXPERIENCE_ACTIVITY_LOG ?? path.join(os.homedir(), ".experience", "activity.jsonl");
-    await fs.promises.appendFile(target, `${JSON.stringify(row)}\n`);
-  } catch (err) {
-    const { logEeFailure, classifyEeError } = await import("../utils/ee-logger.js");
-    logEeFailure("search.mirrorFeedbackLocally", classifyEeError(err), err as Error);
-  }
-}
-
-/** Reachability probe for the EE server. */
-export async function healthEE(): Promise<{ ok: boolean; status: number }> {
-  const { createEEClient } = await import("./client.js");
-  const { loadEEAuthToken, getCachedServerBaseUrl } = await import("./auth.js");
-  const authToken = (await loadEEAuthToken()) ?? undefined;
-  const baseUrl = getCachedServerBaseUrl() ?? undefined;
-  return createEEClient({ baseUrl, authToken }).health();
-}

package/src/ee/session-trajectory.test.ts

@@ -1,139 +0,0 @@
-import { promises as fs } from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import {
-  appendTrajectoryEvent,
-  disableTrajectoryLogging,
-  resetTrajectoryState,
-  rotateOldSessions,
-  setSessionsDir,
-} from "./session-trajectory.js";
-
-let tmp: string;
-
-beforeEach(async () => {
-  tmp = await fs.mkdtemp(path.join(os.tmpdir(), "ee-traj-"));
-  setSessionsDir(tmp);
-  resetTrajectoryState();
-  disableTrajectoryLogging(false);
-});
-
-afterEach(async () => {
-  await fs.rm(tmp, { recursive: true, force: true, maxRetries: 10, retryDelay: 50 }).catch(() => {});
-});
-
-describe("session-trajectory / append", () => {
-  it("appends one JSONL line per event", async () => {
-    await appendTrajectoryEvent({
-      ts: new Date().toISOString(),
-      sessionId: "sess1",
-      kind: "intercept",
-      toolName: "Edit",
-      decision: "allow",
-      matchCount: 1,
-      matchIds: ["abc"],
-    });
-    await appendTrajectoryEvent({
-      ts: new Date().toISOString(),
-      sessionId: "sess1",
-      kind: "posttool",
-      toolName: "Edit",
-      success: true,
-      durationMs: 12,
-    });
-    const file = path.join(tmp, "sess1.jsonl");
-    const content = await fs.readFile(file, "utf8");
-    const lines = content.trim().split("\n");
-    expect(lines.length).toBe(2);
-    const parsed = JSON.parse(lines[0]!);
-    expect(parsed.kind).toBe("intercept");
-  });
-
-  it("sanitizes sessionId for filesystem safety", async () => {
-    await appendTrajectoryEvent({
-      ts: new Date().toISOString(),
-      sessionId: "../../etc/passwd",
-      kind: "user_turn",
-      excerpt: "hello",
-      vetoDetected: false,
-    });
-    // Sanitized name: `..` and `/` replaced with `_` → `_.._.._etc_passwd`
-    const entries = await fs.readdir(tmp);
-    expect(entries.length).toBe(1);
-    expect(entries[0]).toMatch(/^[a-zA-Z0-9_-]+\.jsonl$/);
-    expect(entries[0]).not.toContain("/");
-    expect(entries[0]).not.toContain("..");
-  });
-
-  it("skips events without sessionId", async () => {
-    await appendTrajectoryEvent({
-      ts: new Date().toISOString(),
-      sessionId: "",
-      kind: "user_turn",
-      excerpt: "hi",
-      vetoDetected: false,
-    });
-    const entries = await fs.readdir(tmp).catch(() => []);
-    expect(entries.length).toBe(0);
-  });
-
-  it("respects disable flag", async () => {
-    disableTrajectoryLogging(true);
-    await appendTrajectoryEvent({
-      ts: new Date().toISOString(),
-      sessionId: "sess1",
-      kind: "user_turn",
-      excerpt: "hi",
-      vetoDetected: false,
-    });
-    const entries = await fs.readdir(tmp).catch(() => []);
-    expect(entries.length).toBe(0);
-  });
-});
-
-describe("session-trajectory / rotation", () => {
-  it("removes files older than 30 days", async () => {
-    const fresh = path.join(tmp, "fresh.jsonl");
-    const old = path.join(tmp, "old.jsonl");
-    await fs.writeFile(fresh, "{}\n");
-    await fs.writeFile(old, "{}\n");
-    // Backdate `old` by 31 days.
-    const oldTime = Date.now() - 31 * 24 * 60 * 60 * 1000;
-    await fs.utimes(old, oldTime / 1000, oldTime / 1000);
-
-    const result = await rotateOldSessions();
-    expect(result.removedAge).toBe(1);
-
-    const remaining = await fs.readdir(tmp);
-    expect(remaining).toContain("fresh.jsonl");
-    expect(remaining).not.toContain("old.jsonl");
-  });
-
-  it("evicts oldest files when total size exceeds 100MB", async () => {
-    // Write 3 files of 40MB each → 120MB total → 1 must be evicted (40MB removed).
-    const sizes = [40, 40, 40];
-    const names = ["a.jsonl", "b.jsonl", "c.jsonl"];
-    const buf = Buffer.alloc(40 * 1024 * 1024, "x"); // 40 MB
-
-    for (let i = 0; i < names.length; i++) {
-      const full = path.join(tmp, names[i]!);
-      await fs.writeFile(full, buf);
-      // Stagger mtimes — `a` is oldest.
-      const t = (Date.now() - (sizes.length - i) * 60_000) / 1000;
-      await fs.utimes(full, t, t);
-    }
-
-    const result = await rotateOldSessions();
-    expect(result.removedSize).toBeGreaterThanOrEqual(1);
-    const after = await fs.readdir(tmp);
-    expect(after).not.toContain("a.jsonl"); // oldest evicted first
-  }, 30_000);
-
-  it("returns zero counts when directory does not exist yet", async () => {
-    setSessionsDir(path.join(tmp, "nonexistent"));
-    const result = await rotateOldSessions();
-    expect(result.removedAge).toBe(0);
-    expect(result.removedSize).toBe(0);
-  });
-});

package/src/ee/session-trajectory.ts

@@ -1,226 +0,0 @@
-/**
- * src/ee/session-trajectory.ts
- *
- * P0 native observation — append-only JSONL trajectory log per session.
- *
- * Writes to ~/.experience/sessions/<sessionId>.jsonl. One line per event.
- * Events are NOT sent to the EE server in P0 — this is data capture for the
- * P1 replay harness (novel-case proof per docs/specs/2026-04-22-experience-
- * formation-vnext.md).
- *
- * Why client-side?
- *   - Hooks across runtimes only see {toolName, toolInput, outcome.success}.
- *     The CLI sees PIL output, intercept matches, verifier results, user
- *     turns, and full trajectory. That data is invisible from the server's
- *     perspective and would never reach the brain otherwise.
- *
- * Rotation policy: 30-day age + 100MB total directory cap. Cheap synchronous
- * stat-based rotation runs at most once per process boot.
- *
- * Failure mode: every write is best-effort. Disk full / permission denied
- * is logged once per process and silently skipped — never blocks the agent.
- */
-
-import { promises as fs } from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-
-export interface BaseTrajectoryEvent {
-  ts: string;
-  sessionId: string;
-}
-
-export interface InterceptTrajectoryEvent extends BaseTrajectoryEvent {
-  kind: "intercept";
-  toolName: string;
-  decision: "allow" | "block";
-  matchCount: number;
-  matchIds: string[];
-  reason?: string;
-}
-
-export interface PostToolTrajectoryEvent extends BaseTrajectoryEvent {
-  kind: "posttool";
-  toolName: string;
-  success: boolean;
-  durationMs?: number;
-  mistakeKind?: string;
-  verifyResult?: string;
-  buildExitCode?: number;
-}
-
-export interface UserTurnTrajectoryEvent extends BaseTrajectoryEvent {
-  kind: "user_turn";
-  excerpt: string;
-  vetoDetected: boolean;
-}
-
-export interface VerifyTrajectoryEvent extends BaseTrajectoryEvent {
-  kind: "verify";
-  result: "pass" | "fail" | "skip";
-  detail?: string;
-}
-
-export interface WarningSurfacedTrajectoryEvent extends BaseTrajectoryEvent {
-  kind: "warning_surfaced";
-  principleIds: string[];
-  toolName: string;
-}
-
-export type TrajectoryEvent =
-  | InterceptTrajectoryEvent
-  | PostToolTrajectoryEvent
-  | UserTurnTrajectoryEvent
-  | VerifyTrajectoryEvent
-  | WarningSurfacedTrajectoryEvent;
-
-const DEFAULT_DIR = path.join(os.homedir(), ".experience", "sessions");
-const MAX_AGE_MS = 30 * 24 * 60 * 60 * 1000; // 30 days
-const MAX_TOTAL_BYTES = 100 * 1024 * 1024; // 100 MB
-
-let _sessionsDir = DEFAULT_DIR;
-let _disabled = false;
-let _rotationDone = false;
-let _warnedOnce = false;
-
-/** Override the sessions directory. Test-only — production reads from $HOME. */
-export function setSessionsDir(dir: string): void {
-  _sessionsDir = dir;
-  _rotationDone = false;
-  _disabled = false;
-  _warnedOnce = false;
-}
-
-/** Disable trajectory logging entirely. Useful for tests + opt-out. */
-export function disableTrajectoryLogging(disabled = true): void {
-  _disabled = disabled;
-}
-
-export function getSessionsDir(): string {
-  return _sessionsDir;
-}
-
-/**
- * Append one event to the session JSONL. Best-effort: errors are swallowed
- * after one warning per process. Never throws to the caller.
- */
-export async function appendTrajectoryEvent(event: TrajectoryEvent): Promise<void> {
-  if (_disabled) return;
-  if (!event.sessionId) return;
-
-  try {
-    if (!_rotationDone) {
-      await rotateOldSessions().catch(() => {
-        /* rotation failures must never block writes */
-      });
-      _rotationDone = true;
-    }
-
-    await fs.mkdir(_sessionsDir, { recursive: true });
-    const file = sessionFilePath(event.sessionId);
-    const line = `${JSON.stringify(event)}\n`;
-    await fs.appendFile(file, line, "utf8");
-  } catch (err) {
-    if (!_warnedOnce) {
-      _warnedOnce = true;
-      console.warn(
-        `[muonroi-cli] trajectory log write failed (${(err as Error).message}); subsequent failures will be silent.`,
-      );
-    }
-  }
-}
-
-/** Synchronous-friendly fire-and-forget wrapper for hot paths. */
-export function fireTrajectoryEvent(event: TrajectoryEvent): void {
-  void appendTrajectoryEvent(event);
-}
-
-function sessionFilePath(sessionId: string): string {
-  // Sanitize: only allow [a-zA-Z0-9_-], cap length. Prevents path traversal.
-  const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, 64);
-  return path.join(_sessionsDir, `${safe}.jsonl`);
-}
-
-/**
- * Apply rotation policy. Removes files older than 30 days, then evicts
- * oldest files until directory under 100 MB.
- */
-export async function rotateOldSessions(): Promise<{ removedAge: number; removedSize: number }> {
-  let removedAge = 0;
-  let removedSize = 0;
-
-  let entries: string[];
-  try {
-    entries = await fs.readdir(_sessionsDir);
-  } catch {
-    return { removedAge, removedSize };
-  }
-
-  type Stat = { name: string; full: string; mtimeMs: number; size: number };
-  const stats: Stat[] = [];
-  const now = Date.now();
-  for (const name of entries) {
-    if (!name.endsWith(".jsonl")) continue;
-    const full = path.join(_sessionsDir, name);
-    try {
-      const s = await fs.stat(full);
-      stats.push({ name, full, mtimeMs: s.mtimeMs, size: s.size });
-    } catch {
-      /* unreadable entry — ignore */
-    }
-  }
-
-  // Phase 1: age cull
-  for (const s of stats) {
-    if (now - s.mtimeMs > MAX_AGE_MS) {
-      try {
-        await fs.unlink(s.full);
-        removedAge++;
-      } catch {
-        /* swallow */
-      }
-    }
-  }
-
-  // Phase 2: size cap (oldest-first eviction). Re-stat after age cull.
-  let surviving: Stat[];
-  try {
-    const after = await fs.readdir(_sessionsDir);
-    surviving = [];
-    for (const name of after) {
-      if (!name.endsWith(".jsonl")) continue;
-      const full = path.join(_sessionsDir, name);
-      try {
-        const s = await fs.stat(full);
-        surviving.push({ name, full, mtimeMs: s.mtimeMs, size: s.size });
-      } catch {
-        /* skip */
-      }
-    }
-  } catch {
-    return { removedAge, removedSize };
-  }
-
-  let total = surviving.reduce((acc, s) => acc + s.size, 0);
-  if (total <= MAX_TOTAL_BYTES) return { removedAge, removedSize };
-
-  surviving.sort((a, b) => a.mtimeMs - b.mtimeMs); // oldest first
-  for (const s of surviving) {
-    if (total <= MAX_TOTAL_BYTES) break;
-    try {
-      await fs.unlink(s.full);
-      total -= s.size;
-      removedSize++;
-    } catch {
-      /* skip */
-    }
-  }
-
-  return { removedAge, removedSize };
-}
-
-/** Test-only — force rotation flag back to "not yet run". */
-export function resetTrajectoryState(): void {
-  _rotationDone = false;
-  _warnedOnce = false;
-}

package/src/ee/tenant.ts

@@ -1,14 +0,0 @@
-/**
- * Centralized tenant ID — single source of truth.
- * Default "local" for BYOK/self-hosted mode.
- * Phase 4 cloud mode will call setTenantId() after auth.
- */
-let _tenantId = "local";
-
-export function getTenantId(): string {
-  return _tenantId;
-}
-
-export function setTenantId(id: string): void {
-  _tenantId = id;
-}