nlm-memory 0.21.0 → 0.21.13

package/dist/core/learner/summary.js

@@ -0,0 +1,70 @@
+/**
+ * Learner summary derivation — port of the Gnos deterministic summary rule
+ * (`skills/learner-tracking/references/evidence.md`, MIT, attribution kept).
+ *
+ * Per concept, from events in `listEvents` order ((date, id) ascending):
+ *
+ * - covered, never attempted: **exposed**
+ * - latest attempt assisted, partial, or incorrect: **practicing**
+ * - latest attempt correct + unassisted: **demonstrated**
+ * - latest success is retrieval/transfer on a strictly later date than an
+ *   earlier unassisted success: **retained**
+ *
+ * Latest failure demotes back to practicing; earlier evidence is preserved in
+ * the events, not in the label. These are workflow labels, not calibrated
+ * scores — the summary never issues "mastered".
+ */
+function isUnassistedSuccess(a) {
+    return a.result === "correct" && a.help === "none";
+}
+export function summarizeConcepts(events) {
+    const coveredOn = new Map();
+    const attemptsByConcept = new Map();
+    for (const event of events) {
+        for (const concept of event.covered)
+            coveredOn.set(concept, event.date);
+        for (const attempt of event.attempts) {
+            let list = attemptsByConcept.get(attempt.concept);
+            if (!list) {
+                list = [];
+                attemptsByConcept.set(attempt.concept, list);
+            }
+            list.push({ attempt, date: event.date });
+            if (!coveredOn.has(attempt.concept))
+                coveredOn.set(attempt.concept, event.date);
+        }
+    }
+    const concepts = [...new Set([...coveredOn.keys(), ...attemptsByConcept.keys()])].sort();
+    return concepts.map((concept) => {
+        const attempts = attemptsByConcept.get(concept) ?? [];
+        if (attempts.length === 0) {
+            return {
+                concept,
+                status: "exposed",
+                attemptCount: 0,
+                latestDate: coveredOn.get(concept) ?? null,
+                latestTask: null,
+            };
+        }
+        const latest = attempts[attempts.length - 1];
+        let status;
+        if (!isUnassistedSuccess(latest.attempt)) {
+            status = "practicing";
+        }
+        else if ((latest.attempt.kind === "retrieval" || latest.attempt.kind === "transfer") &&
+            attempts.some((a) => a.date < latest.date && isUnassistedSuccess(a.attempt))) {
+            status = "retained";
+        }
+        else {
+            status = "demonstrated";
+        }
+        return {
+            concept,
+            status,
+            attemptCount: attempts.length,
+            latestDate: latest.date,
+            latestTask: latest.attempt.task,
+        };
+    });
+}
+//# sourceMappingURL=summary.js.map

package/dist/core/learner/summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../../src/core/learner/summary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAqBH,SAAS,mBAAmB,CAAC,CAAU;IACrC,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAoC;IACpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,OAAO;YAAE,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxE,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,EAAE,CAAC;gBACV,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO;gBACP,MAAM,EAAE,SAAkB;gBAC1B,YAAY,EAAE,CAAC;gBACf,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI;gBAC1C,UAAU,EAAE,IAAI;aACjB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAC9C,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,GAAG,YAAY,CAAC;QACxB,CAAC;aAAM,IACL,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC;YAC3E,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAC5E,CAAC;YACD,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,cAAc,CAAC;QAC1B,CAAC;QACD,OAAO;YACL,OAAO;YACP,MAAM;YACN,YAAY,EAAE,QAAQ,CAAC,MAAM;YAC7B,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;SAChC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/learner/validate.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Learner evidence validation — port of the Gnos evidence contract
+ * (`skills/learner-tracking/scripts/learner_state.py`, MIT, attribution kept).
+ *
+ * Shape rules only: slug/concept formats, required fields, enum membership,
+ * real calendar dates that are never in the future. Cross-row rules
+ * (fingerprint match, idempotent retry) live in the store; orchestration in
+ * service.ts. All failures throw `Error`; the MCP layer (M3) maps them to
+ * tool errors.
+ */
+import type { EnrollmentInput, LearnerInit, LearningEventInput } from "../../ports/learner-store.js";
+export declare function assertValidSlug(value: unknown, label: string): asserts value is string;
+export declare function assertValidConceptId(value: unknown): asserts value is string;
+export declare function assertNonempty(value: unknown, label: string): asserts value is string;
+export declare function assertValidDate(value: unknown, label?: string): asserts value is string;
+export declare function assertValidLearnerInit(input: LearnerInit): void;
+export declare function assertValidEnrollmentInput(input: EnrollmentInput): void;
+export declare function assertValidEventInput(event: LearningEventInput): void;

package/dist/core/learner/validate.js

@@ -0,0 +1,95 @@
+/**
+ * Learner evidence validation — port of the Gnos evidence contract
+ * (`skills/learner-tracking/scripts/learner_state.py`, MIT, attribution kept).
+ *
+ * Shape rules only: slug/concept formats, required fields, enum membership,
+ * real calendar dates that are never in the future. Cross-row rules
+ * (fingerprint match, idempotent retry) live in the store; orchestration in
+ * service.ts. All failures throw `Error`; the MCP layer (M3) maps them to
+ * tool errors.
+ */
+const SLUG_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const CONCEPT_PATTERN = /^[a-z][a-z0-9-]*\.[a-z0-9]+(?:[.-][a-z0-9]+)*$/;
+const DATE_PATTERN = /^(\d{4})-(\d{2})-(\d{2})$/;
+const ATTEMPT_RESULTS = ["correct", "partial", "incorrect"];
+const ATTEMPT_HELPS = ["none", "hint", "worked-example"];
+const ATTEMPT_KINDS = ["application", "retrieval", "transfer"];
+export function assertValidSlug(value, label) {
+    if (typeof value !== "string" || value.length > 80 || !SLUG_PATTERN.test(value)) {
+        throw new Error(`learner validation: ${label} must be a lowercase slug of at most 80 characters`);
+    }
+}
+export function assertValidConceptId(value) {
+    if (typeof value !== "string" || !CONCEPT_PATTERN.test(value)) {
+        throw new Error(`learner validation: invalid concept ID: ${JSON.stringify(value)}`);
+    }
+}
+export function assertNonempty(value, label) {
+    if (typeof value !== "string" || value.trim().length === 0) {
+        throw new Error(`learner validation: ${label} must be nonempty text`);
+    }
+}
+export function assertValidDate(value, label = "event.date") {
+    if (typeof value !== "string") {
+        throw new Error(`learner validation: ${label} must be YYYY-MM-DD`);
+    }
+    const match = DATE_PATTERN.exec(value);
+    if (!match)
+        throw new Error(`learner validation: ${label} must be YYYY-MM-DD`);
+    const year = Number(match[1]);
+    const month = Number(match[2]);
+    const day = Number(match[3]);
+    const dt = new Date(Date.UTC(year, month - 1, day));
+    if (dt.getUTCFullYear() !== year || dt.getUTCMonth() !== month - 1 || dt.getUTCDate() !== day) {
+        throw new Error(`learner validation: ${label} is not a real calendar date: ${value}`);
+    }
+    const today = new Date().toISOString().slice(0, 10);
+    if (value > today) {
+        throw new Error(`learner validation: ${label} cannot be in the future: ${value}`);
+    }
+}
+export function assertValidLearnerInit(input) {
+    assertValidSlug(input.id, "learner.id");
+    assertNonempty(input.label, "learner.label");
+}
+export function assertValidEnrollmentInput(input) {
+    assertValidSlug(input.learnerId, "enrollment.learnerId");
+    assertValidSlug(input.courseId, "enrollment.courseId");
+    assertNonempty(input.workstreamId, "enrollment.workstreamId");
+    assertNonempty(input.planRef, "enrollment.planRef");
+    assertNonempty(input.planFingerprint, "enrollment.planFingerprint");
+    if (!Number.isInteger(input.planRevision) || input.planRevision < 1) {
+        throw new Error("learner validation: enrollment.planRevision must be a positive integer");
+    }
+}
+export function assertValidEventInput(event) {
+    assertValidSlug(event.id, "event.id");
+    assertValidDate(event.date);
+    if (!Array.isArray(event.covered)) {
+        throw new Error("learner validation: event.covered must be a list");
+    }
+    for (const concept of event.covered)
+        assertValidConceptId(concept);
+    assertNonempty(event.nextStep, "event.nextStep");
+    if (typeof event.interpretation !== "string") {
+        throw new Error("learner validation: event.interpretation must be text (may be empty)");
+    }
+    if (!Array.isArray(event.attempts)) {
+        throw new Error("learner validation: event.attempts must be a list");
+    }
+    for (const attempt of event.attempts) {
+        assertValidConceptId(attempt.concept);
+        assertNonempty(attempt.task, "attempt.task");
+        assertNonempty(attempt.response, "attempt.response");
+        if (!ATTEMPT_RESULTS.includes(attempt.result)) {
+            throw new Error(`learner validation: attempt.result must be one of ${ATTEMPT_RESULTS.join(", ")}`);
+        }
+        if (!ATTEMPT_HELPS.includes(attempt.help)) {
+            throw new Error(`learner validation: attempt.help must be one of ${ATTEMPT_HELPS.join(", ")}`);
+        }
+        if (!ATTEMPT_KINDS.includes(attempt.kind)) {
+            throw new Error(`learner validation: attempt.kind must be one of ${ATTEMPT_KINDS.join(", ")}`);
+        }
+    }
+}
+//# sourceMappingURL=validate.js.map

package/dist/core/learner/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/core/learner/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAClD,MAAM,eAAe,GAAG,gDAAgD,CAAC;AACzE,MAAM,YAAY,GAAG,2BAA2B,CAAC;AAEjD,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAU,CAAC;AACrE,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAU,CAAC;AAClE,MAAM,aAAa,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,UAAU,CAAU,CAAC;AAExE,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,KAAa;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,oDAAoD,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,KAAa;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,wBAAwB,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,KAAK,GAAG,YAAY;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,qBAAqB,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,qBAAqB,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,EAAE,CAAC,cAAc,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,GAAG,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,iCAAiC,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,6BAA6B,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAkB;IACvD,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACxC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAsB;IAC/D,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IACzD,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACvD,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IAC9D,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IACpD,cAAc,CAAC,KAAK,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAyB;IAC7D,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACtC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,OAAO;QAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACnE,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACjD,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC7C,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACrD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,qDAAqD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,mDAAmD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,mDAAmD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/core/metrics/re-derivation.d.ts

@@ -31,8 +31,25 @@ export interface ReDerivationPair {
 export interface ReDerivationReport {
     readonly rate: number;
     readonly pairs: ReadonlyArray<ReDerivationPair>;
-    /** Denominator: entity-sharing session pairs eligible for the rate. */
+    /**
+     * Denominator of the legacy pair-space rate: entity-sharing session pairs
+     * where BOTH sides carry at least one decision. A pair with a decisionless
+     * side cannot be a re-derivation by construction, and counting it inflated
+     * this figure roughly 3x - measured 2026-08-04 on the live 90-day window,
+     * 1,266,809 of 1,905,497 eligible pairs (66.5%) had a decisionless side.
+     */
     readonly eligible: number;
+    /** Sessions in the window carrying at least one decision. Linear in corpus size. */
+    readonly decisionBearingSessions: number;
+    /** Distinct later-side sessions appearing in `pairs`. Counted once each. */
+    readonly reDerivingSessions: number;
+    /**
+     * reDerivingSessions / decisionBearingSessions. This is the trendable metric:
+     * the pair-space `rate` divides by a denominator that grows quadratically with
+     * the corpus, so it mechanically falls the more the product is used, which is
+     * backwards for a number whose job is to show improvement.
+     */
+    readonly sessionRate: number;
 }
 interface SqliteLike {
     prepare(sql: string): {
@@ -42,7 +59,19 @@ interface SqliteLike {
 /**
  * SQLite-backed deps for the CLI readout. Reads sessions started within the
  * window along with their entity links and decision markers, plus all edges.
+ * `tenantId` scopes the sessions SELECT via tenantClause — the pairs this
+ * produces get persisted to a tenant-derived cache file (see
+ * `@core/storage/sqlite-outcome-store.js`), so an un-tenanted scan here would
+ * leak every tenant's sessions into whichever tenant's file reads it back.
  */
-export declare function sqliteReDerivationDeps(db: SqliteLike): ReDerivationDeps;
+export declare function sqliteReDerivationDeps(db: SqliteLike, tenantId: string): ReDerivationDeps;
+/**
+ * Parses the on-disk cache the 24h corpus-monitor job writes to
+ * (`~/.nlm/re-derivation-pairs.json`, see `src/cli/nlm.ts`) and the SQLite
+ * outcome adapters read back (`@core/storage/sqlite-outcome-store.js`).
+ * The file is a plain `ReDerivationPair[]` - anything else (corrupt JSON,
+ * a non-array shape) is treated as no pairs rather than thrown.
+ */
+export declare function parseReDerivationPairsFile(raw: string): ReadonlyArray<ReDerivationPair>;
 export declare function computeReDerivationRate(deps: ReDerivationDeps, windowDays: number): Promise<ReDerivationReport>;
 export {};

package/dist/core/metrics/re-derivation.js

@@ -7,6 +7,7 @@
  * entity, sit more than GAP_DAYS apart, have decision text overlapping at or
  * above JACCARD_FLOOR, and have no `continues`/`supersedes` edge linking them.
  */
+import { tenantClause } from "../tenancy/tenant-clause.js";
 const JACCARD_FLOOR = 0.5;
 const GAP_DAYS = 7;
 const MS_PER_DAY = 86_400_000;
@@ -28,16 +29,21 @@ function jaccard(a, b) {
 /**
  * SQLite-backed deps for the CLI readout. Reads sessions started within the
  * window along with their entity links and decision markers, plus all edges.
+ * `tenantId` scopes the sessions SELECT via tenantClause — the pairs this
+ * produces get persisted to a tenant-derived cache file (see
+ * `@core/storage/sqlite-outcome-store.js`), so an un-tenanted scan here would
+ * leak every tenant's sessions into whichever tenant's file reads it back.
  */
-export function sqliteReDerivationDeps(db) {
+export function sqliteReDerivationDeps(db, tenantId) {
+    const tc = tenantClause(tenantId);
     return {
         async listSessionsWithin(windowDays) {
             const rows = db
                 .prepare(`SELECT id, started_at AS startedAt
              FROM sessions
-            WHERE started_at >= datetime('now', ?)
+            WHERE started_at >= datetime('now', ?) AND ${tc.sql}
             ORDER BY started_at ASC`)
-                .all(`-${windowDays} days`);
+                .all(`-${windowDays} days`, tc.param);
             const entStmt = db.prepare("SELECT entity_canonical AS e FROM session_entities WHERE session_id = ?");
             const decStmt = db.prepare("SELECT text AS t FROM markers WHERE session_id = ? AND kind = 'decision' ORDER BY position ASC");
             return rows.map((r) => ({
@@ -54,6 +60,17 @@ export function sqliteReDerivationDeps(db) {
         },
     };
 }
+/**
+ * Parses the on-disk cache the 24h corpus-monitor job writes to
+ * (`~/.nlm/re-derivation-pairs.json`, see `src/cli/nlm.ts`) and the SQLite
+ * outcome adapters read back (`@core/storage/sqlite-outcome-store.js`).
+ * The file is a plain `ReDerivationPair[]` - anything else (corrupt JSON,
+ * a non-array shape) is treated as no pairs rather than thrown.
+ */
+export function parseReDerivationPairsFile(raw) {
+    const parsed = JSON.parse(raw);
+    return Array.isArray(parsed) ? parsed : [];
+}
 export async function computeReDerivationRate(deps, windowDays) {
     const sessions = await deps.listSessionsWithin(windowDays);
     const edges = await deps.listEdges();
@@ -61,11 +78,16 @@ export async function computeReDerivationRate(deps, windowDays) {
         .filter((e) => e.kind === "continues" || e.kind === "supersedes")
         .map((e) => [e.from_session, e.to_session].sort().join("|")));
     const pairs = [];
+    const reDeriving = new Set();
     let eligible = 0;
     for (let i = 0; i < sessions.length; i++) {
         for (let j = i + 1; j < sessions.length; j++) {
             const s = sessions[i];
             const t = sessions[j];
+            // A decisionless side can never be a re-derivation, so such a pair does
+            // not belong in the denominator at all.
+            if (s.decisions.length === 0 || t.decisions.length === 0)
+                continue;
             const shared = s.entities.filter((e) => t.entities.includes(e));
             if (shared.length === 0)
                 continue;
@@ -79,9 +101,19 @@ export async function computeReDerivationRate(deps, windowDays) {
             const jac = jaccard(s.decisions, t.decisions);
             if (jac >= JACCARD_FLOOR) {
                 pairs.push({ a: s.id, b: t.id, sharedEntities: shared, jaccard: round2(jac) });
+                const later = new Date(t.startedAt).getTime() >= new Date(s.startedAt).getTime() ? t.id : s.id;
+                reDeriving.add(later);
             }
         }
     }
-    return { rate: eligible ? pairs.length / eligible : 0, pairs, eligible };
+    const decisionBearingSessions = sessions.filter((s) => s.decisions.length > 0).length;
+    return {
+        rate: eligible ? pairs.length / eligible : 0,
+        pairs,
+        eligible,
+        decisionBearingSessions,
+        reDerivingSessions: reDeriving.size,
+        sessionRate: decisionBearingSessions ? reDeriving.size / decisionBearingSessions : 0,
+    };
 }
 //# sourceMappingURL=re-derivation.js.map

package/dist/core/metrics/re-derivation.js.map

@@ -1 +1 @@
-{"version":3,"file":"re-derivation.js","sourceRoot":"","sources":["../../../src/core/metrics/re-derivation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkCH,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACnC,CAAC;AAED,SAAS,OAAO,CAAC,CAAwB,EAAE,CAAwB;IACjE,MAAM,IAAI,GAAG,CAAC,EAAyB,EAAe,EAAE,CACtD,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,KAAK,EAAE,CAAC;IACzC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;AAC3C,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAc;IACnD,OAAO;QACL,KAAK,CAAC,kBAAkB,CAAC,UAAU;YACjC,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CACN;;;oCAG0B,CAC3B;iBACA,GAAG,CAAC,IAAI,UAAU,OAAO,CAA6C,CAAC;YAC1E,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CACxB,yEAAyE,CAC1E,CAAC;YACF,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CACxB,gGAAgG,CACjG,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,QAAQ,EAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrE,SAAS,EAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;aACvE,CAAC,CAAC,CAAC;QACN,CAAC;QACD,KAAK,CAAC,SAAS;YACb,OAAO,EAAE;iBACN,OAAO,CAAC,0DAA0D,CAAC;iBACnE,GAAG,EAA6B,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAsB,EACtB,UAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,KAAK;SACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;SAChE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAC/D,CAAC;IACF,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YACvB,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAClC,QAAQ,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC;YACrG,IAAI,GAAG,IAAI,QAAQ;gBAAE,SAAS;YAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC3E,CAAC"}
+{"version":3,"file":"re-derivation.js","sourceRoot":"","sources":["../../../src/core/metrics/re-derivation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAmD9D,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACnC,CAAC;AAED,SAAS,OAAO,CAAC,CAAwB,EAAE,CAAwB;IACjE,MAAM,IAAI,GAAG,CAAC,EAAyB,EAAe,EAAE,CACtD,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,KAAK,EAAE,CAAC;IACzC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;AAC3C,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAc,EAAE,QAAgB;IACrE,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAClC,OAAO;QACL,KAAK,CAAC,kBAAkB,CAAC,UAAU;YACjC,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CACN;;yDAE+C,EAAE,CAAC,GAAG;oCAC3B,CAC3B;iBACA,GAAG,CAAC,IAAI,UAAU,OAAO,EAAE,EAAE,CAAC,KAAK,CAA6C,CAAC;YACpF,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CACxB,yEAAyE,CAC1E,CAAC;YACF,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CACxB,gGAAgG,CACjG,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,QAAQ,EAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrE,SAAS,EAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;aACvE,CAAC,CAAC,CAAC;QACN,CAAC;QACD,KAAK,CAAC,SAAS;YACb,OAAO,EAAE;iBACN,OAAO,CAAC,0DAA0D,CAAC;iBACnE,GAAG,EAA6B,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAW;IACpD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAsB,EACtB,UAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,KAAK;SACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;SAChE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAC/D,CAAC;IACF,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YACvB,wEAAwE;YACxE,wCAAwC;YACxC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnE,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAClC,QAAQ,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC;YACrG,IAAI,GAAG,IAAI,QAAQ;gBAAE,SAAS;YAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC/E,MAAM,KAAK,GACT,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,uBAAuB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IACtF,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5C,KAAK;QACL,QAAQ;QACR,uBAAuB;QACvB,kBAAkB,EAAE,UAAU,CAAC,IAAI;QACnC,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;KACrF,CAAC;AACJ,CAAC"}

package/dist/core/outcome/coverage.d.ts

@@ -30,4 +30,4 @@ export interface OutcomeCoverage {
     readonly reDerivedLater: number;
     readonly unobserved: number;
 }
-export declare function computeOutcomeCoverage(input: OutcomeCoverageInput): Promise<OutcomeCoverage>;
+export declare function computeOutcomeCoverage(tenantId: string, input: OutcomeCoverageInput): Promise<OutcomeCoverage>;

package/dist/core/outcome/coverage.js

@@ -11,10 +11,10 @@
  * the precedence logic itself is never duplicated, only its I/O is batched.
  */
 import { deriveOutcome } from "./rollup.js";
-export async function computeOutcomeCoverage(input) {
+export async function computeOutcomeCoverage(tenantId, input) {
     const counts = { held: 0, overturned: 0, builtUpon: 0, reDerivedLater: 0, unobserved: 0 };
     for (const session of input.sessions) {
-        const verdict = await deriveOutcome(session.id, {
+        const verdict = await deriveOutcome(tenantId, session.id, {
             sessions: { getById: async () => session },
             signals: { listForSession: async () => input.signalsBySession.get(session.id) ?? [] },
             edges: { listForSession: async () => input.edgesBySession.get(session.id) ?? [] },

package/dist/core/outcome/coverage.js.map

@@ -1 +1 @@
-{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../../../src/core/outcome/coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA6B5C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAA2B;IACtE,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAE1F,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE;YAC9C,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE;YAC1C,OAAO,EAAE,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE;YACrF,KAAK,EAAE,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE;YACjF,SAAS,EAAE,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE;YACzF,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrF,CAAC,CAAC;QAEH,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,MAAM;gBACT,MAAM,CAAC,IAAI,EAAE,CAAC;gBACd,MAAM;YACR,KAAK,YAAY;gBACf,MAAM,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM;YACR,KAAK,YAAY;gBACf,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM;YACR,KAAK,kBAAkB;gBACrB,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM;YACR,KAAK,YAAY;gBACf,MAAM,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;AACrD,CAAC"}
+{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../../../src/core/outcome/coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA6B5C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAAgB,EAAE,KAA2B;IACxF,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAE1F,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE;YACxD,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE;YAC1C,OAAO,EAAE,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE;YACrF,KAAK,EAAE,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE;YACjF,SAAS,EAAE,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE;YACzF,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrF,CAAC,CAAC;QAEH,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,MAAM;gBACT,MAAM,CAAC,IAAI,EAAE,CAAC;gBACd,MAAM;YACR,KAAK,YAAY;gBACf,MAAM,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM;YACR,KAAK,YAAY;gBACf,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM;YACR,KAAK,kBAAkB;gBACrB,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM;YACR,KAAK,YAAY;gBACf,MAAM,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;AACrD,CAAC"}

package/dist/core/outcome/rollup.d.ts

@@ -30,4 +30,4 @@
  * correlation is left to a follow-up task if it proves to matter in practice.
  */
 import type { OutcomeDeps, OutcomeVerdict } from "../../ports/outcome.js";
-export declare function deriveOutcome(sessionId: string, deps: OutcomeDeps): Promise<OutcomeVerdict>;
+export declare function deriveOutcome(tenantId: string, sessionId: string, deps: OutcomeDeps): Promise<OutcomeVerdict>;

package/dist/core/outcome/rollup.js

@@ -31,14 +31,14 @@
  */
 const DEFAULT_HELD_AFTER_DAYS = 14;
 const MS_PER_DAY = 86_400_000;
-export async function deriveOutcome(sessionId, deps) {
-    const session = await deps.sessions.getById(sessionId);
+export async function deriveOutcome(tenantId, sessionId, deps) {
+    const session = await deps.sessions.getById(tenantId, sessionId);
     if (!session) {
         return { verdict: "unobserved", tier: "B", confidence: "low", evidence: [] };
     }
     // 1. Tier A: correlated signal rows are the strongest evidence and settle
     // the verdict outright, ahead of every heuristic below.
-    const signals = await deps.signals.listForSession(sessionId);
+    const signals = await deps.signals.listForSession(tenantId, sessionId);
     if (signals.length > 0) {
         const anyNegative = signals.some((s) => s.outcome !== "pass");
         return {
@@ -48,7 +48,7 @@ export async function deriveOutcome(sessionId, deps) {
             evidence: signals.map((s) => `signal:${s.id}`),
         };
     }
-    const edges = await deps.edges.listForSession(sessionId);
+    const edges = await deps.edges.listForSession(tenantId, sessionId);
     // 2. Supersession beats "held" beats continuation beats re-derivation.
     const supersedingEdge = edges.find((e) => e.toSession === sessionId && (e.kind === "supersedes" || e.kind === "replaces"));
     if (session.status === "superseded" || session.status === "replaced" || supersedingEdge) {

package/dist/core/outcome/rollup.js.map

@@ -1 +1 @@
-{"version":3,"file":"rollup.js","sourceRoot":"","sources":["../../../src/core/outcome/rollup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAIH,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB,EAAE,IAAiB;IACtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC/E,CAAC;IAED,0EAA0E;IAC1E,wDAAwD;IACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;QAC9D,OAAO;YACL,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM;YAC5C,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAEzD,uEAAuE;IACvE,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CACvF,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,eAAe,EAAE,CAAC;QACxF,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE;gBACR,eAAe;oBACb,CAAC,CAAC,QAAQ,eAAe,CAAC,IAAI,IAAI,eAAe,CAAC,WAAW,EAAE;oBAC/D,CAAC,CAAC,kBAAkB,OAAO,CAAC,MAAM,EAAE;aACvC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACpE,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC;QACvF,IAAI,WAAW,IAAI,aAAa,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,GAAG;gBACT,UAAU,EAAE,QAAQ;gBACpB,QAAQ,EAAE,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;aACrD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAC9F,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,CAAC,kBAAkB,cAAc,CAAC,WAAW,EAAE,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACpG,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACzF,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,CAAC,sBAAsB,KAAK,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,cAAc,EAAE,CAAC;YAC9D,gBAAgB,EAAE,IAAI;SACvB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC/E,CAAC"}
+{"version":3,"file":"rollup.js","sourceRoot":"","sources":["../../../src/core/outcome/rollup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAIH,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,SAAiB,EAAE,IAAiB;IACxF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC/E,CAAC;IAED,0EAA0E;IAC1E,wDAAwD;IACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;QAC9D,OAAO;YACL,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM;YAC5C,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEnE,uEAAuE;IACvE,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CACvF,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,eAAe,EAAE,CAAC;QACxF,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE;gBACR,eAAe;oBACb,CAAC,CAAC,QAAQ,eAAe,CAAC,IAAI,IAAI,eAAe,CAAC,WAAW,EAAE;oBAC/D,CAAC,CAAC,kBAAkB,OAAO,CAAC,MAAM,EAAE;aACvC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACpE,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC;QACvF,IAAI,WAAW,IAAI,aAAa,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,GAAG;gBACT,UAAU,EAAE,QAAQ;gBACpB,QAAQ,EAAE,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;aACrD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAC9F,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,CAAC,kBAAkB,cAAc,CAAC,WAAW,EAAE,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACpG,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACzF,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,CAAC,sBAAsB,KAAK,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,cAAc,EAAE,CAAC;YAC9D,gBAAgB,EAAE,IAAI;SACvB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC/E,CAAC"}

package/dist/core/providers/provider-registry.d.ts

@@ -11,11 +11,20 @@
  * `redact()` strips secrets on the way out — every HTTP response sends
  * redacted rows, with the key only retrievable via getSecret() inside the
  * daemon process.
+ *
+ * Tenancy (program spec §4, M2 plan Wave B5): `providers` is a STAMP table.
+ * Every method takes `tenantId` as its non-optional first parameter and
+ * routes its WHERE fragment through `tenantClause`; INSERTs stamp
+ * `tenant_id`. `getSecret` is the top-risk-3 surface (spec §4.5): a
+ * tenant-mismatched id returns the same not-found shape (`null`) as a
+ * missing row — no existence oracle, and no plaintext key crosses a tenant
+ * boundary via an id an attacker merely guessed.
  */
 import type Database from "better-sqlite3";
 export type ProviderKind = "deepseek" | "ollama" | "openai" | "anthropic" | "openrouter" | "openai-compatible";
 export interface ProviderRow {
     readonly id: number;
+    readonly tenantId: string;
     readonly kind: ProviderKind;
     readonly name: string;
     readonly baseUrl: string | null;
@@ -52,32 +61,36 @@ export interface ProviderUpdate {
  * operator's env would be wrong, so the PG adapter never seeds providers.
  */
 export interface ProviderRegistryPort {
-    list(): Promise<ProviderRow[]>;
-    get(id: number): Promise<ProviderRow | null>;
-    getByName(name: string): Promise<ProviderRow | null>;
-    getSecret(id: number): Promise<string | null>;
-    insert(input: ProviderInsert): Promise<ProviderRow>;
-    update(id: number, patch: ProviderUpdate): Promise<ProviderRow | null>;
-    delete(id: number): Promise<boolean>;
+    list(tenantId: string): Promise<ProviderRow[]>;
+    get(tenantId: string, id: number): Promise<ProviderRow | null>;
+    getByName(tenantId: string, name: string): Promise<ProviderRow | null>;
+    getSecret(tenantId: string, id: number): Promise<string | null>;
+    insert(tenantId: string, input: ProviderInsert): Promise<ProviderRow>;
+    update(tenantId: string, id: number, patch: ProviderUpdate): Promise<ProviderRow | null>;
+    delete(tenantId: string, id: number): Promise<boolean>;
 }
 export declare class ProviderRegistry implements ProviderRegistryPort {
     private readonly db;
     constructor(db: Database.Database);
-    list(): Promise<ProviderRow[]>;
-    get(id: number): Promise<ProviderRow | null>;
-    getByName(name: string): Promise<ProviderRow | null>;
-    /** Returns the secret. Use only inside the daemon — never echo to HTTP. */
-    getSecret(id: number): Promise<string | null>;
-    insert(input: ProviderInsert): Promise<ProviderRow>;
-    update(id: number, patch: ProviderUpdate): Promise<ProviderRow | null>;
-    delete(id: number): Promise<boolean>;
+    list(tenantId: string): Promise<ProviderRow[]>;
+    get(tenantId: string, id: number): Promise<ProviderRow | null>;
+    getByName(tenantId: string, name: string): Promise<ProviderRow | null>;
+    /**
+     * Returns the secret. Use only inside the daemon — never echo to HTTP.
+     * A tenant-mismatched id returns null, identical to a missing row (top
+     * risk 3, spec §4.5) — no existence oracle, no cross-tenant key leak.
+     */
+    getSecret(tenantId: string, id: number): Promise<string | null>;
+    insert(tenantId: string, input: ProviderInsert): Promise<ProviderRow>;
+    update(tenantId: string, id: number, patch: ProviderUpdate): Promise<ProviderRow | null>;
+    delete(tenantId: string, id: number): Promise<boolean>;
     /**
      * Seed defaults on an empty registry. Bridges from the legacy env-var
      * setup: if DEEPSEEK_API_KEY is present, the DeepSeek row carries it
      * forward; Ollama is always seeded since it needs no key. SQLite-only —
      * not on ProviderRegistryPort (see the port's doc comment).
      */
-    seedDefaults(): Promise<void>;
+    seedDefaults(tenantId: string): Promise<void>;
 }
 import type { Pool } from "pg";
 /**
@@ -87,11 +100,15 @@ import type { Pool } from "pg";
 export declare class PgProviderRegistry implements ProviderRegistryPort {
     private readonly pool;
     constructor(pool: Pool);
-    list(): Promise<ProviderRow[]>;
-    get(id: number): Promise<ProviderRow | null>;
-    getByName(name: string): Promise<ProviderRow | null>;
-    getSecret(id: number): Promise<string | null>;
-    insert(input: ProviderInsert): Promise<ProviderRow>;
-    update(id: number, patch: ProviderUpdate): Promise<ProviderRow | null>;
-    delete(id: number): Promise<boolean>;
+    list(tenantId: string): Promise<ProviderRow[]>;
+    get(tenantId: string, id: number): Promise<ProviderRow | null>;
+    getByName(tenantId: string, name: string): Promise<ProviderRow | null>;
+    /**
+     * A tenant-mismatched id returns null, identical to a missing row (top
+     * risk 3, spec §4.5) — no existence oracle, no cross-tenant key leak.
+     */
+    getSecret(tenantId: string, id: number): Promise<string | null>;
+    insert(tenantId: string, input: ProviderInsert): Promise<ProviderRow>;
+    update(tenantId: string, id: number, patch: ProviderUpdate): Promise<ProviderRow | null>;
+    delete(tenantId: string, id: number): Promise<boolean>;
 }