nlm-memory 0.20.1 → 0.21.12

package/README.md

@@ -11,7 +11,7 @@
   <a href="https://github.com/pbmagnet4/nlm-memory/actions/workflows/ci.yml"><img src="https://github.com/pbmagnet4/nlm-memory/actions/workflows/ci.yml/badge.svg?branch=main" alt="CI status" /></a>
   <a href="https://github.com/pbmagnet4/nlm-memory/blob/main/LICENSE"><img src="https://img.shields.io/github/license/pbmagnet4/nlm-memory?color=blue" alt="License: Apache 2.0" /></a>
   <a href="https://nodejs.org"><img src="https://img.shields.io/node/v/nlm-memory?color=brightgreen" alt="Node 20+" /></a>
-  <img src="https://img.shields.io/badge/tests-1%2C700%2B%20passing-success" alt="1,700+ tests passing" />
+  <img src="https://img.shields.io/badge/tests-2%2C000%2B%20passing-success" alt="2,000+ tests passing" />
   <img src="https://img.shields.io/badge/MCP-9%20runtimes-8A2BE2" alt="MCP across 9 runtimes" />
   <img src="https://img.shields.io/badge/hooks-4%20runtimes-7B2CBF" alt="Hooks on 4 runtimes" />
   <img src="https://img.shields.io/badge/telemetry-none-informational" alt="Zero telemetry" />
@@ -82,7 +82,7 @@ One corpus across every adapter. MCP works against all nine. **Automatic context
 
 | Runtime | Connect | Sessions read from | Hooks |
 |---|---|---|---|
-| **Claude Code** | `nlm connect claude-code` | `~/.claude/projects/**/*.jsonl` | 6 hooks: UserPromptSubmit, SessionStart, SessionEnd, Stop, PreCompact, SubagentStart |
+| **Claude Code** | `nlm connect claude-code` | `~/.claude/projects/**/*.jsonl` | 5 hooks: UserPromptSubmit, SessionStart, SessionEnd, Stop, PreCompact |
 | **Codex CLI** | `nlm connect codex` | `~/.codex/sessions/` | Marketplace plugin (UserPromptSubmit + Stop) |
 | **Hermes** (WebUI) | `nlm connect hermes` | `~/.hermes/sessions/` | MCP only (writes the MCP server block to `~/.hermes/config.yaml`) |
 | **Hermes Agent** (NousResearch CLI) | `nlm connect hermes-agent` | `~/.hermes/state.db` | 6 hooks: pre_llm_call, post_llm_call, on_session_start/end/finalize/reset (Python plugin in `~/.hermes/plugins/nlm-memory/`) |
@@ -102,11 +102,11 @@ Two delivery paths. They share the same index.
 
 ### 1. Hooks — automatic context injection
 
-Hooks deliver memory into agent context. Four runtimes ship hooks today: Claude Code (six-hook lifecycle), Codex CLI (UserPromptSubmit + Stop via the marketplace plugin), Hermes Agent (six parallel hooks), and pi.dev (one `input` hook via [nlm/](nlm/README.md)). Cursor, Windsurf, and OpenCode don't expose a pre-prompt hook today, so the `--with-rules` install path drops a static rules snippet that asks the agent to call `recall_sessions` itself on history-flavored prompts (see [docs/hooks.md](docs/hooks.md) for the snippet). Full lifecycle, modes, logging surface, and the daily liveness canary documented in [docs/hooks.md](docs/hooks.md).
+Hooks deliver memory into agent context. Four runtimes ship hooks today: Claude Code (five-hook lifecycle), Codex CLI (UserPromptSubmit + Stop via the marketplace plugin), Hermes Agent (six parallel hooks), and pi.dev (one `input` hook via [nlm/](nlm/README.md)). Cursor, Windsurf, and OpenCode don't expose a pre-prompt hook today, so the `--with-rules` install path drops a static rules snippet that asks the agent to call `recall_sessions` itself on history-flavored prompts (see [docs/hooks.md](docs/hooks.md) for the snippet). Full lifecycle, modes, logging surface, and the daily liveness canary documented in [docs/hooks.md](docs/hooks.md).
 
 On fresh installs, the **SessionStart** hook injects the pointer block at conversation open. The **UserPromptSubmit** (per-prompt) lane is off by default: measured pulls are 72.4% useful vs 18.2% ambient on the same judge (see [reports/usefulness/2026-07-03-consumption-measurements.md](reports/usefulness/2026-07-03-consumption-measurements.md)), so pull-first via the recall MCP tools is the recommended posture. Set `NLM_HOOK_PROMPT_RECALL=on` to re-enable per-prompt injection.
 
-**Claude Code** — six hooks written to `~/.claude/settings.json` via `nlm connect claude-code`:
+**Claude Code** — five hooks written to `~/.claude/settings.json` via `nlm connect claude-code`:
 
 | Event | What NLM does | Mode |
 |---|---|---|
@@ -115,7 +115,6 @@ On fresh installs, the **SessionStart** hook injects the pointer block at conver
 | **SessionEnd** | Delete the per-conversation memo on session close so state files don't accumulate | always on |
 | **Stop** | Scan the model's response for citations of surfaced session IDs → updates `useful_hit_rate` and builds the reranker training substrate | always on |
 | **PreCompact** | Flush the per-conversation surfaced-IDs memo so post-compaction recalls aren't gated | always on |
-| **SubagentStart** | Record parent→subagent links so threads stay coherent across dispatches | always on |
 
 **Hermes Agent** — six hooks installed to `~/.hermes/plugins/nlm-memory/` via `nlm connect hermes-agent`. All calls are fire-and-forget except `pre_llm_call`, which returns a context string for injection:
 
@@ -134,11 +133,45 @@ On fresh installs, the **SessionStart** hook injects the pointer block at conver
 |---|---|---|
 | **input** | Score user message → if relevant sessions found, prepend pointer block to the prompt text via `{ action: "transform" }` | yes (returns transformed text) |
 
-All three fail-open: any daemon error yields a clean exit and never blocks the model. Switch Claude Code hooks to **shadow** mode (log-only, no injection) with `NLM_HOOK_MODE=shadow`.
+Parent-to-subagent links need no hook: the adapter derives them from the runtime session id at ingest, so subagent threads stay coherent with zero per-dispatch overhead. All hooks fail open: any daemon error yields a clean exit and never blocks the model. Switch Claude Code hooks to **shadow** mode (log-only, no injection) with `NLM_HOOK_MODE=shadow`.
 
 ### 2. MCP — explicit tools any agent can call
 
-Container-hosted agents (Hermes WebUI, Codex CLI, etc.) hit the Streamable-HTTP `POST /mcp` endpoint with `Authorization: Bearer ${NLM_MCP_TOKEN}`. Stdio MCP is also supported for Claude Code via `~/.mcp.json`.
+**Streamable-HTTP `POST /mcp` is the default transport on every runtime.** `nlm connect <runtime>` writes it for you:
+
+```json
+{ "type": "http", "url": "http://127.0.0.1:3940/mcp",
+  "headers": { "Authorization": "Bearer ${NLM_MCP_TOKEN}" } }
+```
+
+One daemon-backed server answers every session on every surface. The endpoint is stateless — a fresh transport and server per request, no session affinity — so it scales from a single laptop to a hosted multi-tenant deployment without changing shape, and the team is resolved from the bearer token rather than assumed. Nothing but the daemon touches the corpus.
+
+Stdio remains available via `nlm connect <runtime> --stdio`. Its one advantage is that it builds its own stack and so works with the daemon stopped. The trade is real: a process per session, each opening the SQLite corpus directly, and no multi-tenancy (the stdio path is pinned to the single local team). Prefer HTTP unless you specifically need to run without a daemon.
+
+Re-running `nlm connect` on an install that predates this default rewrites the old stdio block in place, so upgrades carry over rather than silently keeping the per-session shape.
+
+---
+
+## Does it actually help?
+
+We measured it instead of asserting it. A pre-registered replay eval took 100 real prompts from a live operator's hook log and replayed each one twice with the same generator: once with the context NLM had injected, once without. A judge from a different model family scored each pair blind, with response order randomized. The pass bar was written down before the run and could not move afterward.
+
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="assets/replay-eval-dark.svg" />
+  <source media="(prefers-color-scheme: light)" srcset="assets/replay-eval-light.svg" />
+  <img alt="Recall-impact replay eval results: decisive rate 0.840 against a 0.30 bar, win rate 0.881 against a 0.60 bar, harm check 0.119 against a 0.40 maximum. PASS on every pre-registered gate." src="assets/replay-eval-light.svg" width="720" />
+</picture>
+
+The injected context changed the judged outcome in 84% of pairs. When it did, the memory-armed answer won 88% of blind judgments, and the judge agreed with itself on 20 of 20 double-judged pairs. The known biases in the setup run against the memory arm, not for it: the replay generator is weaker than a production agent, and both arms saw truncated prompt previews.
+
+One corpus and one judge is evidence, not universality. So don't take our number. The harness ships in this repo and runs against your own hook log:
+
+```bash
+npm run eval:recall-impact-replay -- --pilot   # 10-pair mechanics check
+npm run eval:recall-impact-replay              # full pre-registered run
+```
+
+Full method, gates, and declared limitations: [the run report](reports/replay-eval/2026-07-22-recall-impact.md) and [the pre-registered spec](docs/superpowers/specs/2026-07-21-recall-impact-replay-eval-design.md).
 
 ---
 
@@ -199,6 +232,10 @@ NLM aggregates signals into failure modes per `(repo, model)` pair. A mode surfa
 GET /api/signals/failure-modes?repo=<repo>&model=<model>
 ```
 
+### Outcome rollup
+
+Signals also feed a corpus-internal outcome verdict per session, derived from later independent evidence only: a reported signal, supersession, a continuation edge, or nothing yet (`unobserved`, shown honestly). Never the agent's own opinion of its work, and never an LLM's grade of it. `get_session` returns the verdict with its evidence; `nlm digest` reports 30-day coverage. The design is deliberately conservative: a session with no downstream evidence stays `unobserved` instead of guessing.
+
 ### Inspection
 
 ```sh
@@ -233,7 +270,7 @@ Off by default — enable with `NLM_CODE_EXEMPLARS_ENABLED=1`. Capture rides the
 | Tool | What it does |
 |---|---|
 | `recall_sessions` | Hybrid keyword+semantic search across the full session corpus. Returns label, started_at, snippet, match score, `status`, and `superseded_by`. Superseded sessions are included (down-ranked, badged) so a decision investigation sees overturned reasoning; prefer the `superseded_by` successor for current state. |
-| `get_session` | Full body of one session by ID. Includes enriched `supersedes` / `supersededBy` links (id + label + summary) so chasing corrected facts doesn't need a second round-trip. |
+| `get_session` | Full body of one session by ID. Includes enriched `supersedes` / `supersededBy` links (id + label + summary) and a derived `outcome` verdict (held / overturned / built-upon / unobserved, with evidence) from the corpus-internal outcome rollup. |
 | `recall_facts` | Search structured facts: decisions, open questions, project state. Filterable by entity and kind. |
 | `get_fact_history` | Full version history of one fact — how a decision evolved over time. |
 | `cite_session` | Mark a session as explicitly referenced. Drives the `useful_hit_rate` metric and the future learned reranker. |
@@ -241,6 +278,7 @@ Off by default — enable with `NLM_CODE_EXEMPLARS_ENABLED=1`. Capture rides the
 **When to call `cite_session`:** Call it when a surfaced session actually changes what you say — you referenced it explicitly, it corrected a decision, or you called `get_session` to read the full body. Do not call it for sessions you scanned and discarded. The Stop hook auto-detects citation when a session ID appears verbatim in your response; `cite_session` covers the deliberate case where the session influenced your reasoning without being quoted directly. Both paths feed the same signal loop.
 
 | `mark_superseded` | Retroactively retire a stale session and point it at the newer one that replaces it. The editable-timeline write path — see [docs/supersedence.md](docs/supersedence.md). |
+| `report_outcome` | Write an outcome signal (pass / fail / fix / exhausted) for a session or correlation key. The contract surface for deterministic producers: CI, quality gates, automation platforms. Agents rarely self-report; wire your pipelines to this, not your prompts. |
 | `recall_code` | Semantic search over captured code exemplars — "code that passed/failed a gate like this task." Returns positives plus labeled negatives. Registered only when `NLM_CODE_EXEMPLARS_ENABLED=1`. |
 
 ---
@@ -251,7 +289,7 @@ Daemon binds `127.0.0.1:3940` (override with `NLM_PORT`). Selected endpoints:
 
 | Method | Path | Auth | Purpose |
 |---|---|---|---|
-| GET | `/api/health` | Host-only | Liveness probe; returns `{version, status, service}` |
+| GET | `/api/health` | Host-only | Liveness probe: version, warmup + embedding-lane state, corpus stats, `update: {current, latest, behind}` from the daily npm check, and `job: {name, state, processed, total, startedAt, lastAdvanceAt, restarts, restartsTotal} \| null` — the daemon-supervised `reprocess` run (null when idle: never started, or the daemon just restarted, since the supervisor holds no state across restarts). `restarts` is the restarts-without-progress counter (resets on any advance); `restartsTotal` is the run's lifetime respawn count, never reset — it's the one to watch for OOM churn on a run that keeps making progress between crashes. |
 | GET | `/api/recall` | Bearer/Origin | Hybrid recall — `?q=`, `?mode=keyword\|semantic\|hybrid`, `?limit=`, `?include_superseded=true` (default off; opt-in to surface overturned sessions down-ranked, badged with `superseded_by`). Each result carries `status` + `superseded_by`. |
 | GET | `/api/recall/stats` | Bearer/Origin | 7-day stats: total, hit_rate, useful_hit_rate, top queries |
 | GET | `/api/recall/recent` | Bearer/Origin | Last N recall events for live tail/telemetry |
@@ -265,9 +303,11 @@ Daemon binds `127.0.0.1:3940` (override with `NLM_PORT`). Selected endpoints:
 | POST | `/api/data/restore` | Bearer/Origin | Stage a snapshot for apply-on-restart |
 | POST | `/api/citation/explicit` | Bearer/Origin | Log an explicit session citation (the route backing the `cite_session` MCP tool; payload `{id, conversation_id?, reason?}`) |
 | POST | `/api/hook/pre-compact` | Bearer/Origin | Hook endpoint; flushes the surfaced-IDs memo |
-| ALL | `/mcp` | Bearer required | Streamable-HTTP MCP transport for container agents |
+| ALL | `/mcp` | Bearer required | Streamable-HTTP MCP transport — the default for every runtime; stateless, team resolved from the token |
 | GET | `/api/recall-code` | Bearer/Origin | Semantic code-exemplar search — `?q=`, `?repo=`, `?lang=`, `?k=`, `?negatives=0`. Requires `NLM_CODE_EXEMPLARS_ENABLED=1`. |
 | POST | `/api/exemplar` | Bearer/Origin | Direct code-exemplar push (capture also happens automatically from code-bearing signals). Requires the flag. |
+| POST | `/api/jobs/reprocess` | Bearer/Origin | Start a daemon-supervised `reprocess` run (body: optional `{args: string[]}`, forwarded verbatim as CLI flags). 202 + snapshot on start, 409 + snapshot if one's already active. Backs `nlm reprocess --daemon`. |
+| DELETE | `/api/jobs/reprocess` | Bearer/Origin | Stop the active supervised run (no-op if idle/already terminal). 200 + snapshot. |
 
 `/api/*` is gated by three layers: 127.0.0.1 Host check (defeats DNS rebinding), Origin check when the browser sends one (defeats cross-origin drive-by), Bearer fallback when Origin is absent (server-to-server clients).
 
@@ -282,7 +322,7 @@ nlm digest                  # print to stdout
 nlm digest --telegram       # post to Telegram (TELEGRAM_BOT_TOKEN + TELEGRAM_CHAT_ID)
 ```
 
-Reports 24h real-traffic (probes filtered), 7d hit_rate + useful_hit_rate, top 5 queries, and a **`WARN hook silent`** alert when Claude Code ran yesterday but no live hook fires were logged. That alert is the canary for post-install drift — node upgrades, `settings.json` hand-edits, and `dist/` moves silently break the hook while Claude Code keeps working. Setup-time smoke tests can't catch this; only the daily correlation can.
+Reports 24h real-traffic (probes filtered), 7d hit_rate + useful_hit_rate, honest cited-precision, top 5 queries, a tier-B outcome coverage line (held / overturned / built-upon / unobserved over the last 30 days), a `Jobs:` line for the daemon-supervised `reprocess` run (active progress, appending `, N restarts` when the run has OOM-churned at least once, a completed/exhausted/stopped outcome, or "no active job"), and a **`WARN hook silent`** alert when Claude Code ran yesterday but no live hook fires were logged. That alert is the canary for post-install drift — node upgrades, `settings.json` hand-edits, and `dist/` moves silently break the hook while Claude Code keeps working. Setup-time smoke tests can't catch this; only the daily correlation can.
 
 Wire to cron for a morning push:
 
@@ -324,6 +364,7 @@ ingest:  runtime transcript (jsonl/sqlite)
 recall: prompt / query
    -> tokenize + match scoring (label x3, entity-exact x4, decision x2, summary x1, phrase-bonus +5)
    -> hybrid: BM25-style keyword + vector cosine, fused by score
+   -> recency decay (180-day half-life, floored) x supersedence down-rank
    -> select-top-N gate (per-fire cap 3, per-conversation cap 10)
    -> pointer block prepended to model context (hooks) or returned as tool result (MCP)
 ```
@@ -339,6 +380,8 @@ recall: prompt / query
 | `NLM_PORT` | `3940` | Daemon bind port (loopback only) |
 | `NLM_DB_PATH` | `~/.nlm/canonical.sqlite` | SQLite canonical store location |
 | `NLM_HOOK_MODE` | `live` | `live` injects pointer block; `shadow` logs without injecting |
+| `NLM_HOOK_RECALL_TIMEOUT_MS` | `4000` | Hook-side budget for the daemon recall call. Must stay below `NLM_HOOK_DEADLINE_MS` and above the daemon's embed deadline or the pointer block silently empties (#396). |
+| `NLM_HOOK_DEADLINE_MS` | `6000` | Outer wall-clock deadline for the recall + gate stages of a hook fire. Fail-open on expiry. |
 | `NLM_HOOK_PROMPT_RECALL` | `(unset = off)` | Per-prompt ambient recall. Off by default (pull-first); set `on` to inject a pointer block on every prompt. `off` disables explicitly. |
 | `NLM_HOOK_LOG` | `~/.nlm/hook-log.jsonl` | Hook fire log; powers digest's liveness alert |
 | `NLM_USEFUL_HIT_LOG` | `~/.nlm/useful-hit-log.jsonl` | Citation/useful-hit ledger |
@@ -366,6 +409,14 @@ recall: prompt / query
 | `NLM_HOOK_FACT_MIN_CORROBORATION` | `2` | Minimum number of sessions that must have asserted a fact before it qualifies for hook injection. Set to `1` to include single-source facts. |
 | `NLM_HOOK_FACT_MIN_CONFIDENCE` | `0.7` | Minimum classifier confidence for a fact to qualify for hook injection. |
 | `TELEGRAM_BOT_TOKEN` / `TELEGRAM_CHAT_ID` | — | Required for `nlm digest --telegram` |
+| `NLM_ALERT_WEBHOOK` | — | Set to a URL to enable daemon self-reporting: version-drift and embedder-cold transitions POST a CloudEvents-shaped payload here. Unset means zero network calls. |
+| `NLM_ALERT_WEBHOOK_TOKEN` | — | Optional bearer token sent as `Authorization: Bearer <token>` on every `NLM_ALERT_WEBHOOK` POST. Only used when the webhook is set. |
+| `NLM_JOB_STALL_MINUTES` | `20` | Minutes a daemon-supervised `reprocess` run (see `POST /api/jobs/reprocess`) can go without a progress advance before the supervisor calls it stalled and fires `nlm.job.stalled` via `NLM_ALERT_WEBHOOK`. The same event type also fires with `reason: "exhausted"` (restart budget used up) and `reason: "spawn_failed"` (the child process itself never launched — EMFILE/ENOMEM/bad binary). |
+| `NLM_WIKI_DIR` | — (opt-in, off by default) | The wiki projection is off unless this is set. When set, every `NLM_WIKI_INTERVAL_HOURS` the SQLite-backend daemon rolls up fact subjects that cleared the page threshold into a markdown tree at `<dir>/Memory`, reconciled against the previous run so an unchanged page writes zero bytes. Unset means no timer, no directory, no log line — an upgrade never surprises you with new files under your home directory. A failed run leaves the previous tree untouched and fires `nlm.wiki.projection_failed` via `NLM_ALERT_WEBHOOK`; a run whose written page count doesn't match what the corpus currently qualifies for fires `nlm.wiki.coverage_drift`. Postgres backend: not implemented, daemon never starts it. |
+| `NLM_WIKI_INTERVAL_HOURS` | `6` | How often the wiki projection re-runs once `NLM_WIKI_DIR` is set. |
+| `NLM_WIKI_MIN_FACTS` | `3` | Minimum current (non-superseded, non-retired) fact count a subject needs to earn a wiki page. |
+| `NLM_WIKI_MIN_SESSIONS` | `3` | Minimum distinct contributing sessions a subject needs to earn a wiki page. |
+| `NLM_WIKI_LINK_BASE` | `http://127.0.0.1:<NLM_PORT>` | Base URL a wiki page's session links point at. Override when the vault is synced somewhere the daemon's own loopback address won't resolve. |
 
 ### Changing the classifier from the UI
 
@@ -490,8 +541,9 @@ npm install
 npm run build          # compile dist/ — commit the result, it ships in the repo
 npm run dev            # hot-reload daemon
 npm run ui:dev         # hot-reload UI at localhost:5173 (proxies /api to :3940)
-npm test               # 1,700+ tests across 245 files
+npm test               # 2,000+ tests across 240 files
 npm run typecheck
+npm run verify:codex-release  # verify Codex plugin and shared MCP entrypoint
 node dist/cli/nlm.js doctor    # pre-publish: verify DB invariants (exit 1 on violations)
 ```
 
@@ -499,6 +551,11 @@ Architecture: hexagonal. `src/core/` knows about ports (interfaces), not adapter
 
 `dist/` is built on install via the `prepare` script (runs automatically on `npm install` from git or registry) and packed into the published tarball via the `files` field. Not tracked in git.
 
+Releases run `verify:codex-release -- --check-packed` after the distributable
+build and before publishing. It checks the Codex plugin manifest, lifecycle
+hook attribution, the `nlm mcp` shared MCP entrypoint, and the files npm will
+actually ship.
+
 ---
 
 ## License

package/assets/replay-eval-dark.svg

@@ -0,0 +1,26 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="720" height="264" viewBox="0 0 720 264" font-family="-apple-system,Segoe UI,Helvetica,Arial,sans-serif">
+<text x="16" y="28" font-size="15" font-weight="600" fill="#e6edf3">Recall-impact replay eval, pre-registered (n=100, blind judge)</text>
+<text x="16" y="72" font-size="13" font-weight="600" fill="#e6edf3">Decisive rate</text>
+<text x="16" y="88" font-size="11" fill="#9198a1">injection changed the outcome</text>
+<rect x="240" y="62" width="380" height="20" rx="4" fill="#3d444d" opacity="0.35"/>
+<rect x="240" y="62" width="319" height="20" rx="4" fill="#5E97D6"/>
+<line x1="354" y1="56" x2="354" y2="88" stroke="#9198a1" stroke-width="2" stroke-dasharray="3,3"/>
+<text x="360" y="54" font-size="10" fill="#9198a1">bar: at least 0.30</text>
+<text x="569" y="76" font-size="13" font-weight="700" fill="#e6edf3">0.840</text>
+<text x="16" y="130" font-size="13" font-weight="600" fill="#e6edf3">Win rate</text>
+<text x="16" y="146" font-size="11" fill="#9198a1">memory arm won, decisive pairs</text>
+<rect x="240" y="120" width="380" height="20" rx="4" fill="#3d444d" opacity="0.35"/>
+<rect x="240" y="120" width="335" height="20" rx="4" fill="#5E97D6"/>
+<line x1="468" y1="114" x2="468" y2="146" stroke="#9198a1" stroke-width="2" stroke-dasharray="3,3"/>
+<text x="474" y="112" font-size="10" fill="#9198a1">bar: at least 0.60</text>
+<text x="585" y="134" font-size="13" font-weight="700" fill="#e6edf3">0.881</text>
+<text x="16" y="188" font-size="13" font-weight="600" fill="#e6edf3">Harm check</text>
+<text x="16" y="204" font-size="11" fill="#9198a1">baseline arm won</text>
+<rect x="240" y="178" width="380" height="20" rx="4" fill="#3d444d" opacity="0.35"/>
+<rect x="240" y="178" width="45" height="20" rx="4" fill="#5E97D6"/>
+<line x1="392" y1="172" x2="392" y2="204" stroke="#9198a1" stroke-width="2" stroke-dasharray="3,3"/>
+<text x="398" y="170" font-size="10" fill="#9198a1">bar: at most 0.40</text>
+<text x="295" y="192" font-size="13" font-weight="700" fill="#e6edf3">0.119</text>
+<text x="16" y="236" font-size="10" fill="#9198a1">Verdict: PASS on every pre-registered gate. Judge agreement 20/20 on the double-judged subsample.</text>
+<text x="16" y="252" font-size="10" fill="#9198a1">Method and limitations: reports/replay-eval/2026-07-22-recall-impact.md</text>
+</svg>

package/assets/replay-eval-light.svg

@@ -0,0 +1,26 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="720" height="264" viewBox="0 0 720 264" font-family="-apple-system,Segoe UI,Helvetica,Arial,sans-serif">
+<text x="16" y="28" font-size="15" font-weight="600" fill="#1f2328">Recall-impact replay eval, pre-registered (n=100, blind judge)</text>
+<text x="16" y="72" font-size="13" font-weight="600" fill="#1f2328">Decisive rate</text>
+<text x="16" y="88" font-size="11" fill="#59636e">injection changed the outcome</text>
+<rect x="240" y="62" width="380" height="20" rx="4" fill="#d0d7de" opacity="0.35"/>
+<rect x="240" y="62" width="319" height="20" rx="4" fill="#3B6EA5"/>
+<line x1="354" y1="56" x2="354" y2="88" stroke="#59636e" stroke-width="2" stroke-dasharray="3,3"/>
+<text x="360" y="54" font-size="10" fill="#59636e">bar: at least 0.30</text>
+<text x="569" y="76" font-size="13" font-weight="700" fill="#1f2328">0.840</text>
+<text x="16" y="130" font-size="13" font-weight="600" fill="#1f2328">Win rate</text>
+<text x="16" y="146" font-size="11" fill="#59636e">memory arm won, decisive pairs</text>
+<rect x="240" y="120" width="380" height="20" rx="4" fill="#d0d7de" opacity="0.35"/>
+<rect x="240" y="120" width="335" height="20" rx="4" fill="#3B6EA5"/>
+<line x1="468" y1="114" x2="468" y2="146" stroke="#59636e" stroke-width="2" stroke-dasharray="3,3"/>
+<text x="474" y="112" font-size="10" fill="#59636e">bar: at least 0.60</text>
+<text x="585" y="134" font-size="13" font-weight="700" fill="#1f2328">0.881</text>
+<text x="16" y="188" font-size="13" font-weight="600" fill="#1f2328">Harm check</text>
+<text x="16" y="204" font-size="11" fill="#59636e">baseline arm won</text>
+<rect x="240" y="178" width="380" height="20" rx="4" fill="#d0d7de" opacity="0.35"/>
+<rect x="240" y="178" width="45" height="20" rx="4" fill="#3B6EA5"/>
+<line x1="392" y1="172" x2="392" y2="204" stroke="#59636e" stroke-width="2" stroke-dasharray="3,3"/>
+<text x="398" y="170" font-size="10" fill="#59636e">bar: at most 0.40</text>
+<text x="295" y="192" font-size="13" font-weight="700" fill="#1f2328">0.119</text>
+<text x="16" y="236" font-size="10" fill="#59636e">Verdict: PASS on every pre-registered gate. Judge agreement 20/20 on the double-judged subsample.</text>
+<text x="16" y="252" font-size="10" fill="#59636e">Method and limitations: reports/replay-eval/2026-07-22-recall-impact.md</text>
+</svg>

package/dist/cli/digest.js

@@ -10,12 +10,43 @@
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
+import Database from "better-sqlite3";
 import { composeDigest, } from "../core/digest/compose.js";
 import { computePrecision } from "../core/recall/precision.js";
 import { readHookRecallLog } from "../core/recall/hook-recall-log.js";
 import { readCitationLog } from "../core/recall/citation-log.js";
 import { checkHookLiveness } from "../core/digest/hook-liveness.js";
+import { checkHookInjection } from "../core/digest/hook-injection.js";
+import { checkHookVersionParity } from "../core/digest/hook-version-parity.js";
+import { NLM_VERSION } from "../shared/version.js";
 import { hookAuthHeaders } from "../hook/hook-auth.js";
+import { computeOutcomeCoverage } from "../core/outcome/coverage.js";
+import { loadOutcomeCoverageInput } from "../core/storage/sqlite-outcome-store.js";
+import { DEFAULT_TEAM_ID } from "../core/tenancy/default-team.js";
+/** Sessions ended in the last N days count toward the Tier-B coverage block. */
+const OUTCOME_COVERAGE_WINDOW_DAYS = 30;
+function defaultDbPath() {
+    return process.env["NLM_DB_PATH"] ?? join(homedir(), ".nlm", "canonical.sqlite");
+}
+/**
+ * Best-effort, read-only: opens its own SQLite connection directly rather
+ * than round-tripping the daemon (same pattern as the hook-log/citation-log
+ * reads below). A failure here must not break the rest of the digest.
+ */
+async function loadOutcomeCoverage() {
+    const dbPath = defaultDbPath();
+    if (!existsSync(dbPath))
+        return null;
+    const db = new Database(dbPath, { readonly: true });
+    try {
+        const sinceIso = new Date(Date.now() - OUTCOME_COVERAGE_WINDOW_DAYS * 24 * 60 * 60 * 1000).toISOString();
+        const input = await loadOutcomeCoverageInput(db, DEFAULT_TEAM_ID, { sinceIso });
+        return await computeOutcomeCoverage(DEFAULT_TEAM_ID, input);
+    }
+    finally {
+        db.close();
+    }
+}
 export async function runDigest(opts) {
     const base = `http://localhost:${opts.port}`;
     const timeoutMs = opts.timeoutMs ?? 8000;
@@ -26,7 +57,13 @@ export async function runDigest(opts) {
     try {
         const [statsRes, recentRes, datasetRes] = await Promise.all([
             fetchJson(`${base}/api/recall/stats`, timeoutMs),
-            fetchJson(`${base}/api/recall/recent?limit=200`, timeoutMs),
+            // The composer strips probe traffic AFTER this fetch, so the limit has to
+            // cover a full day of RAW entries, probes included. At limit=200 a host
+            // emitting ~800 probes/day filled the whole window with probes: the 200
+            // most recent rows spanned 7h, every one a probe, and the digest reported
+            // "0 queries yesterday (none)" on a day with 27 real pull queries
+            // (observed 2026-08-13). Sized for a noisy day, not a quiet one.
+            fetchJson(`${base}/api/recall/recent?limit=5000`, timeoutMs),
             fetchJson(`${base}/api/dataset`, timeoutMs * 2),
         ]);
         stats = statsRes;
@@ -49,19 +86,27 @@ export async function runDigest(opts) {
     const hookLogPath = process.env["NLM_HOOK_LOG"] ?? join(homedir(), ".nlm", "hook-log.jsonl");
     const hookLogExists = existsSync(hookLogPath);
     const hookLog = hookLogExists ? readHookLog(hookLogPath) : [];
-    const hookAlert = checkHookLiveness({
+    const livenessAlert = checkHookLiveness({
         sessions,
         hookLog,
         hookLogPath,
         hookLogExists,
     });
+    // "off"/"0"/"false" all disable ambient injection; unset means enabled.
+    const promptRecall = (process.env["NLM_HOOK_PROMPT_RECALL"] ?? "").trim().toLowerCase();
+    const ambientRecallEnabled = !["off", "0", "false", "no"].includes(promptRecall);
+    const injectionResult = checkHookInjection(hookLog, undefined, ambientRecallEnabled);
+    // Liveness proves hooks fired; parity proves the CURRENT hooks fired. The
+    // second is what catches an install still pointing at a stale dist/.
+    const versionAlert = checkHookVersionParity(hookLog, NLM_VERSION);
+    const hookAlert = [livenessAlert, injectionResult.message, versionAlert].filter(Boolean).join("\n") || null;
     // True cited-precision over the 7-day window (the honest "was recall useful"
     // metric). Best-effort: a log-read failure must not break the digest.
     let precision = null;
     try {
         const [recallEntries, citationEntries] = await Promise.all([
-            readHookRecallLog(7),
-            readCitationLog(7),
+            readHookRecallLog(DEFAULT_TEAM_ID, 7),
+            readCitationLog(DEFAULT_TEAM_ID, 7),
         ]);
         const result = computePrecision(recallEntries, citationEntries);
         precision = {
@@ -72,12 +117,32 @@ export async function runDigest(opts) {
     catch {
         precision = null;
     }
+    let outcomeCoverage = null;
+    try {
+        outcomeCoverage = await loadOutcomeCoverage();
+    }
+    catch {
+        outcomeCoverage = null;
+    }
+    // Best-effort: a health-fetch failure must not break the rest of the
+    // digest — it just falls back to the same "no active job" line an idle
+    // supervisor would report.
+    let job = null;
+    try {
+        const healthRes = await fetchJson(`${base}/api/health`, timeoutMs);
+        job = healthRes.job ?? null;
+    }
+    catch {
+        job = null;
+    }
     const text = composeDigest({
         stats,
         recent,
         port: opts.port,
         hookAlert,
         precision,
+        outcomeCoverage,
+        job,
     });
     if (opts.telegram) {
         await postTelegram(text);

package/dist/cli/digest.js.map

@@ -1 +1 @@
-{"version":3,"file":"digest.js","sourceRoot":"","sources":["../../src/cli/digest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,aAAa,GAId,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAsC,MAAM,+BAA+B,CAAC;AACtG,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAcvD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAmB;IACjD,MAAM,IAAI,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IAEzC,IAAI,KAAK,GAAuB,IAAI,CAAC;IACrC,IAAI,MAAM,GAA+B,EAAE,CAAC;IAC5C,IAAI,QAAQ,GAA8B,EAAE,CAAC;IAC7C,IAAI,WAAW,GAAkB,IAAI,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,SAAS,CAAC,GAAG,IAAI,mBAAmB,EAAE,SAAS,CAAC;YAChD,SAAS,CAAC,GAAG,IAAI,8BAA8B,EAAE,SAAS,CAAC;YAC3D,SAAS,CAAC,GAAG,IAAI,cAAc,EAAE,SAAS,GAAG,CAAC,CAAC;SAChD,CAAC,CAAC;QACH,KAAK,GAAG,QAAuB,CAAC;QAChC,MAAM,GAAG,CAAE,SAAsD,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjF,QAAQ,GAAG,CAAE,UAAuD,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,WAAW,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,WAAW,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,IAAI,GACR,gBAAgB,QAAQ,EAAE,MAAM;YAChC,yBAAyB,IAAI,KAAK,WAAW,IAAI,mBAAmB,EAAE,CAAC;QACzE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QACvE,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7F,MAAM,aAAa,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAmB,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,SAAS,GAAG,iBAAiB,CAAC;QAClC,QAAQ;QACR,OAAO;QACP,WAAW;QACX,aAAa;KACd,CAAC,CAAC;IAEH,6EAA6E;IAC7E,sEAAsE;IACtE,IAAI,SAAS,GAA2B,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzD,iBAAiB,CAAC,CAAC,CAAC;YACpB,eAAe,CAAC,CAAC,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAChE,SAAS,GAAG;YACV,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC;QACzB,KAAK;QACL,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS;QACT,SAAS;KACV,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,SAAiB;IACrD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,eAAe,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;YAC5D,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,qBAAqB;QACvB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,GAAG,GAAG,+BAA+B,KAAK,cAAc,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,OAAO,EAAE,MAAM;QACf,IAAI;QACJ,wBAAwB,EAAE,MAAM;KACjC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,YAAY,EAAE,gBAAgB;aAC/B;YACD,IAAI;YACJ,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2C,CAAC;QAC7E,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAE,CAAC;IAC/E,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;AACvC,CAAC"}
+{"version":3,"file":"digest.js","sourceRoot":"","sources":["../../src/cli/digest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EACL,aAAa,GAId,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAsC,MAAM,+BAA+B,CAAC;AACtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAwB,MAAM,2BAA2B,CAAC;AACzF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,gFAAgF;AAChF,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAExC,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB;IAChC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,IAAI,CACvB,IAAI,CAAC,GAAG,EAAE,GAAG,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAChE,CAAC,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChF,OAAO,MAAM,sBAAsB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAmB;IACjD,MAAM,IAAI,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IAEzC,IAAI,KAAK,GAAuB,IAAI,CAAC;IACrC,IAAI,MAAM,GAA+B,EAAE,CAAC;IAC5C,IAAI,QAAQ,GAA8B,EAAE,CAAC;IAC7C,IAAI,WAAW,GAAkB,IAAI,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,SAAS,CAAC,GAAG,IAAI,mBAAmB,EAAE,SAAS,CAAC;YAChD,0EAA0E;YAC1E,wEAAwE;YACxE,wEAAwE;YACxE,0EAA0E;YAC1E,kEAAkE;YAClE,iEAAiE;YACjE,SAAS,CAAC,GAAG,IAAI,+BAA+B,EAAE,SAAS,CAAC;YAC5D,SAAS,CAAC,GAAG,IAAI,cAAc,EAAE,SAAS,GAAG,CAAC,CAAC;SAChD,CAAC,CAAC;QACH,KAAK,GAAG,QAAuB,CAAC;QAChC,MAAM,GAAG,CAAE,SAAsD,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjF,QAAQ,GAAG,CAAE,UAAuD,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,WAAW,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,WAAW,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,IAAI,GACR,gBAAgB,QAAQ,EAAE,MAAM;YAChC,yBAAyB,IAAI,KAAK,WAAW,IAAI,mBAAmB,EAAE,CAAC;QACzE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QACvE,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7F,MAAM,aAAa,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAmB,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,aAAa,GAAG,iBAAiB,CAAC;QACtC,QAAQ;QACR,OAAO;QACP,WAAW;QACX,aAAa;KACd,CAAC,CAAC;IACH,wEAAwE;IACxE,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxF,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACjF,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACrF,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAClE,MAAM,SAAS,GACb,CAAC,aAAa,EAAE,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAE5F,6EAA6E;IAC7E,sEAAsE;IACtE,IAAI,SAAS,GAA2B,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzD,iBAAiB,CAAC,eAAe,EAAE,CAAC,CAAC;YACrC,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAChE,SAAS,GAAG;YACV,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,eAAe,GAA2B,IAAI,CAAC;IACnD,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,2BAA2B;IAC3B,IAAI,GAAG,GAAuB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,aAAa,EAAE,SAAS,CAAC,CAAC;QACnE,GAAG,GAAI,SAA0C,CAAC,GAAG,IAAI,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,IAAI,CAAC;IACb,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC;QACzB,KAAK;QACL,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS;QACT,SAAS;QACT,eAAe;QACf,GAAG;KACJ,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,SAAiB;IACrD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,eAAe,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;YAC5D,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,qBAAqB;QACvB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,GAAG,GAAG,+BAA+B,KAAK,cAAc,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,OAAO,EAAE,MAAM;QACf,IAAI;QACJ,wBAAwB,EAAE,MAAM;KACjC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,YAAY,EAAE,gBAAgB;aAC/B;YACD,IAAI;YACJ,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2C,CAAC;QAC7E,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAE,CAAC;IAC/E,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;AACvC,CAAC"}

package/dist/cli/nlm.d.ts

@@ -22,10 +22,24 @@
  *   nlm disconnect claude-code — remove MCP block from ~/.mcp.json
  *   nlm disconnect codex       — remove Codex plugin
  *   nlm digest   — print a daily-activity digest (or --telegram to post)
+ *   nlm reconcile-facts — retire live facts contradicting an authorities file
  *   nlm init     - print (or write) the agent recall contract snippet
  */
+import { computeReDerivationRate, sqliteReDerivationDeps } from "../core/metrics/re-derivation.js";
 export declare function resolveDigestDate(date: string | undefined): string;
 export declare function shouldAppendTrend(lastLineTs: string | null, now: number): boolean;
+/**
+ * Recomputes `computeReDerivationRate` and overwrites the pairs cache file
+ * (#405) that `@core/storage/sqlite-outcome-store.js` reads instead of
+ * recomputing the same O(n^2) scan inline. Called every 24h corpus-monitor
+ * cycle (not gated by `shouldAppendTrend`, which only paces the separate
+ * append-only trend log) so the cache stays ~24h fresh while the monitor
+ * runs. Exported for direct testing and smoke runs against a corpus copy.
+ * `tenantId` scopes both the session scan (sqliteReDerivationDeps) and the
+ * cache file this write targets — two tenants must never compute or read
+ * each other's pairs.
+ */
+export declare function persistReDerivationPairs(rawDb: Parameters<typeof sqliteReDerivationDeps>[0], tenantId: string, pairsPath: string, windowDays: number): Promise<Awaited<ReturnType<typeof computeReDerivationRate>>>;
 export interface ClassifierEvalDeps {
     readonly classify: (transcript: string) => Promise<import("../ports/llm-client.js").ClassifyResult>;
     readonly provider: string;