nodedex 0.1.0

package/dist/middleware/reflect/flag-reviewer.js

@@ -0,0 +1,520 @@
+// ═══════════════════════════════════════════════════════════════════════════════
+// DEBT 5 Slice 2 Sub-step 2.2 — ASYNC FLAG REVIEWER
+// ═══════════════════════════════════════════════════════════════════════════════
+//
+// The "reasoning MERGES" half of the user's "system FLAGS, reasoning MERGES"
+// directive. Consumes pipeline_flags rows written by Slice 1's Stage FLAG
+// (atomic_dup_candidate) and Slice 2.3's Stage AUDIT (project_dup_candidate,
+// scope_disagreement, island_candidate). For each pending flag:
+//
+//   1. Build context: load both blocks + scope chains (db reads, no LLM)
+//   2. Call LLM with merge/leave/split prompt — single call per flag
+//   3. Write verdict back via markFlagReviewed (idempotent UPDATE)
+//   4. If verdict='merge' AND auto-merge enabled AND confidence='high':
+//        execute merge — createRelation('supersedes') auto-archives loser
+//        per database.ts:1192-1198 (existing supersedes-archive trigger)
+//
+// Design contract: docs/PIPELINE-SLICE-2-DESIGN.md §2.
+// Worker pattern: flag-reviewer-startup.ts wraps this in setInterval.
+//
+// What this module does NOT do:
+//   - Setinterval / startup (that's flag-reviewer-startup.ts)
+//   - Stage AUDIT graph scanning (that's stage-audit-graph.ts)
+//   - REST endpoints (that's routes/flags.ts)
+//   - island_candidate / entity_unresolved review (different shape — both
+//     deferred to optional Sub-step 2.6 per design doc §8; this reviewer
+//     SKIPS them with verdict='leave' + reason explaining the deferral)
+//
+// Safety levels per design §2.5 (env-controlled):
+//   Level 0 (default): NODEDEX_FLAG_REVIEWER_ENABLED unset/off — worker
+//                      never starts. This module's runFlagReviewerTick can
+//                      still be called manually (e.g., REST sync path).
+//   Level 1: NODEDEX_FLAG_REVIEWER_ENABLED=on, NODEDEX_FLAG_AUTO_MERGE unset
+//            — verdicts written, NO auto-merge fires.
+//   Level 2: + NODEDEX_FLAG_AUTO_MERGE=on — verdict='merge' AND
+//            confidence='high' triggers executeMerge (charter Rule 2: archive
+//            not delete, recoverable via /api/blocks).
+import { getPendingFlags, markFlagReviewed, markFlagPendingClarification } from "./pipeline-flags.js";
+import { extractPrimaryValueFromUnique } from "./dedup-by-source-and-value.js";
+import { reflectTokenStats } from "./context.js";
+import { getThinkingBudget, modelOverride, intFromEnv } from "./config.js";
+import { computeCost } from "./cost-pricing.js";
+// ─── Config (env-controlled) ──────────────────────────────────────────────────
+/** Max flags reviewed per tick. Caps worst-case $$ per tick:
+ *  default 5 × ~$0.02-0.05 per call ≈ $0.10-0.25 / tick.
+ *  Override via NODEDEX_FLAG_REVIEWER_BATCH_SIZE.  */
+function batchSize() {
+    return intFromEnv("NODEDEX_FLAG_REVIEWER_BATCH_SIZE", 5);
+}
+/** Model override for the reviewer. Defaults to whatever the default provider
+ *  uses; opt-in different model via NODEDEX_FLAG_REVIEWER_MODEL.  */
+function reviewerModel() {
+    return modelOverride("NODEDEX_FLAG_REVIEWER_MODEL");
+}
+/** Auto-merge gate. Default OFF — Level 1 behavior. Set to "on" for Level 2. */
+function autoMergeEnabled() {
+    return (process.env.NODEDEX_FLAG_AUTO_MERGE ?? "").toLowerCase() === "on";
+}
+// ─── Prompt + schema ──────────────────────────────────────────────────────────
+const REVIEWER_PROMPT = `You are a graph curator reviewing a candidate-duplicate detection in a knowledge graph.
+
+INPUT: A flag describing two blocks the pipeline (or graph-health audit) suspects might be duplicates, plus the full content + scope of each block.
+
+YOUR DECISION: For this candidate pair, output ONE of three verdicts:
+  - "merge":  The two blocks state the SAME CLAIM at the SAME epistemic role — one is a
+              restatement/rewording of the other (the same constraint phrased two ways; the same
+              fact captured twice). Judge on the \`claim:\` line (the unique{} identity), NOT the
+              topic or the essence wording.
+  - "leave":  NOT the same claim. Three common cases:
+              (a) same topic / surface-similar but a DIFFERENT claim;
+              (b) same claim but DIFFERENT SCOPE (different owner/project) — scope dominates;
+              (c) DIFFERENT EPISTEMIC ROLE about the same topic — a metric (a measurement) vs a
+                  constraint (its implication) vs a fact vs a dead_end vs a hypothesis are NOT
+                  duplicates even when about the same thing. They are LINKED (based_on, etc.), not
+                  merged. Collapsing them DESTROYS information (e.g. a metric's measurement value).
+              When in doubt, LEAVE — a kept pair is recoverable; a wrong merge corrupts the graph.
+  - "split":  Real ambiguity — both blocks should remain, BUT something structural needs to change
+              (e.g., one should be re-parented to a different project). Or it needs human attention.
+
+KEY RULE — compare the CLAIM, preserve the ROLE:
+  Judge sameness on the \`claim:\` line (the unique{} identity = what the block IS), using
+  \`essence:\` only as readable context. A duplicate is the SAME claim restated. Blocks of DIFFERENT
+  \`type\` carry different epistemic roles and are almost never duplicates on the same topic — merge
+  across type ONLY if they are unmistakably the identical claim captured under two type labels.
+  Labels are strict {project}_{type}_{concept} (scope_role_topic), so the label echoes scope, role,
+  and topic — use it consistently with type and project_id.
+
+KEY RULE — scope dominates content similarity:
+  Two blocks with identical content under DIFFERENT scopes (e.g., "auth-service" under Customer-A vs "auth-service" under Customer-B) are NOT duplicates. They serve different graphs. Output "leave".
+
+KEY RULE — winning_block_id required when verdict='merge':
+  If verdict='merge', you MUST set winning_block_id to one of block_a.id or block_b.id. Prefer:
+    (a) the block with more concepts (richer indexed presence)
+    (b) on tie: the block with more content
+    (c) on tie: block_a (deterministic tiebreaker)
+
+KEY RULE — confidence is structural:
+  - "high":    obvious dup (same source_excerpt + same primary_value) OR obvious non-dup (different scope, different domain)
+  - "medium":  content suggests same entity but evidence is partial
+  - "low":     genuine ambiguity — the verdict is your best read but a human might disagree
+
+OUTPUT: JSON per schema. Reason must explain WHY in 1-2 sentences — it's read by future audit + the next reviewer cycle.`;
+const REVIEWER_SCHEMA = {
+    type: "object",
+    properties: {
+        verdict: { type: "string", enum: ["merge", "leave", "split"] },
+        reason: { type: "string" },
+        winning_block_id: { type: "string" },
+        confidence: { type: "string", enum: ["high", "medium", "low"] },
+    },
+    required: ["verdict", "reason", "confidence"],
+};
+// ─── Context loaders (no LLM) ──────────────────────────────────────────────────
+/** Load a BlockReviewSnapshot from the blocks table. Returns null if the block
+ *  was archived/deleted between flag-write and reviewer-tick (we don't
+ *  re-resurrect — the flag becomes stale, reviewer skips it).  */
+export function loadBlockSnapshot(db, blockId) {
+    const row = db.prepare(`
+    SELECT id, label, type, essence, content, concepts, project_id, source, status
+      FROM blocks
+     WHERE id = ?
+  `).get(blockId);
+    if (!row)
+        return null;
+    // Honor this function's contract: an ARCHIVED block reads as STALE → null, so a
+    // block merged earlier in the SAME tick is NOT re-judged/re-merged. The prior SQL
+    // had no status filter → double-archive + archived-winner cascades (2026-06-03
+    // reviewer-precision finding: 8 merges produced an incoherent merge graph).
+    if (row.status === 'archived')
+        return null;
+    let concepts = [];
+    try {
+        concepts = Array.isArray(JSON.parse(row.concepts)) ? JSON.parse(row.concepts) : [];
+    }
+    catch {
+        concepts = [];
+    }
+    // The CLAIM (unique{} identity) — the dedup anchor. SAME extractor as the detector
+    // (Rule 5: one identity definition). Parsed from content.unique{}.
+    let unique = {};
+    try {
+        const c = JSON.parse(row.content ?? "{}");
+        if (c && typeof c.unique === "object" && c.unique)
+            unique = c.unique;
+    }
+    catch { /* tolerate malformed content */ }
+    return {
+        id: row.id,
+        label: row.label,
+        type: row.type,
+        essence: row.essence,
+        content: row.content,
+        concepts,
+        project_id: row.project_id,
+        source: row.source,
+        primary_value: extractPrimaryValueFromUnique(row.type, unique),
+    };
+}
+/** Walk part_of relations up to the project root. Returns the chain of LABELS
+ *  from root → block. Bounded depth (default 8) — graph cycles or pathological
+ *  depths return whatever we walked.  */
+export function loadScopeChain(db, blockId, maxDepth = 8) {
+    const chain = [];
+    let current = blockId;
+    let depth = 0;
+    while (current && depth < maxDepth) {
+        const row = db.prepare(`SELECT label FROM blocks WHERE id = ?`).get(current);
+        if (!row)
+            break;
+        chain.unshift(row.label);
+        const parent = db.prepare(`
+      SELECT target_id FROM relations
+       WHERE source_id = ? AND type = 'part_of' AND valid_to IS NULL
+       LIMIT 1
+    `).get(current);
+        current = parent?.target_id ?? null;
+        depth += 1;
+    }
+    return chain;
+}
+export function buildReviewerContext(db, flag) {
+    const block_a = loadBlockSnapshot(db, flag.block_id_a);
+    if (!block_a)
+        return null; // flag stale — block_a archived/deleted
+    let block_b = null;
+    if (flag.block_id_b) {
+        block_b = loadBlockSnapshot(db, flag.block_id_b);
+        // A 2-block dup flag whose partner is archived/gone is STALE (most often: already
+        // merged by an earlier flag THIS tick) → skip it, don't degrade to a single-block
+        // judgment. This + loadBlockSnapshot's archived-filter is the Problem-2 fix.
+        if (!block_b)
+            return null;
+    }
+    const scope_a_chain = loadScopeChain(db, flag.block_id_a);
+    const scope_b_chain = flag.block_id_b ? loadScopeChain(db, flag.block_id_b) : null;
+    return { flag, block_a, block_b, scope_a_chain, scope_b_chain };
+}
+// ─── LLM call ─────────────────────────────────────────────────────────────────
+function formatBlockForPrompt(b, scope) {
+    return [
+        `  id: ${b.id}`,
+        `  label: ${b.label}`, // strict: {project}_{type}_{concept} = scope_role_topic
+        `  type (epistemic ROLE): ${b.type}`,
+        `  claim (unique{} identity — COMPARE THIS): ${b.primary_value || "(none)"}`,
+        `  essence (readable context only, NOT the identity): ${b.essence}`,
+        `  content: ${b.content.slice(0, 1500)}${b.content.length > 1500 ? " …[truncated]" : ""}`,
+        `  concepts: [${b.concepts.join(", ")}]`,
+        `  project_id (SCOPE): ${b.project_id ?? "(none)"}`,
+        `  source: ${b.source ?? "(none)"}`,
+        `  scope_chain: ${scope ? scope.join(" → ") : "(unknown)"}`,
+    ].join("\n");
+}
+export function buildReviewerInput(ctx) {
+    const sections = [
+        `FLAG TYPE: ${ctx.flag.flag_type}`,
+        `FLAG ORIGIN: ${ctx.flag.origin_writer}`,
+        `SCOPE CHECK (pipeline's pre-LLM read): ${ctx.flag.scope_check}`,
+        `FLAG CRITERIA (what was detected): ${JSON.stringify(ctx.flag.criteria, null, 2)}`,
+        "",
+        "BLOCK A:",
+        formatBlockForPrompt(ctx.block_a, ctx.scope_a_chain),
+    ];
+    if (ctx.block_b) {
+        sections.push("", "BLOCK B:", formatBlockForPrompt(ctx.block_b, ctx.scope_b_chain));
+    }
+    else {
+        sections.push("", "BLOCK B: (none — single-block flag; verdict='split' if uncertain)");
+    }
+    return sections.join("\n");
+}
+export async function callReviewerLLM(provider, ctx) {
+    const userInput = buildReviewerInput(ctx);
+    const r = await provider.generateStructured(REVIEWER_PROMPT, userInput, REVIEWER_SCHEMA, {
+        thinkingBudget: getThinkingBudget(1024), // judgment, not reasoning-heavy
+        maxOutputTokens: 4096, // small JSON output expected
+        modelOverride: reviewerModel(),
+    });
+    if (r.usage) {
+        reflectTokenStats.pass_reviewer.input += r.usage.input ?? 0;
+        reflectTokenStats.pass_reviewer.thinking += r.usage.thinking ?? 0;
+        reflectTokenStats.pass_reviewer.output += r.usage.output ?? 0;
+    }
+    reflectTokenStats.pass_reviewer.calls += 1;
+    return { result: r.result, model: r.model, rateLimited: r.rateLimited };
+}
+// ─── Merge action ──────────────────────────────────────────────────────────────
+/**
+ * Execute a merge verdict — wire supersedes (winner → loser) AND archive the
+ * loser so the duplicate actually collapses.
+ *
+ * ⚠ DESIGN NOTE — relaxes the "facts permanent on supersede" rule for the
+ * confirmed-duplicate-merge case (surfaced to user 2026-05-31):
+ *
+ * database.ts:1192-1199 auto-archives a supersede TARGET only when it's a
+ * 'blueprint' or 'decision' — facts/constraints/dead_ends/questions are
+ * treated as permanent historical records (a contradicted fact stays visible).
+ * That rule is correct for GENERIC supersede ("B replaces A's claim; both are
+ * history"). It is WRONG for a reviewer-confirmed DUPLICATE, which is a
+ * different operation: "A and B are the SAME thing captured twice — collapse
+ * to one." A duplicate fact is not two historical records; keeping both is
+ * noise, not history. Slice 1's atomic_dup_candidate is PRECISELY duplicate
+ * facts (same source_excerpt + same primary_value), so relying on the
+ * type-conditional supersede-archive would leave every confirmed fact-dup
+ * un-merged.
+ *
+ * Therefore executeMerge archives the loser DIRECTLY (db.archiveBlock) instead
+ * of relying on the supersede side-effect. Charter Rule 2 honored: archive
+ * (recoverable via /api/blocks), never delete. Containment: this only runs at
+ * Level 2 (NODEDEX_FLAG_AUTO_MERGE=on, default OFF) on a high-confidence
+ * reviewer 'merge' verdict — both opt-in gates.
+ *
+ * Returns the action_taken value to write to the flag row.
+ */
+export function executeMerge(db, winnerBlockId, loserBlockId) {
+    if (winnerBlockId === loserBlockId)
+        return 'none'; // safety: refuse self-merge
+    // ── Rewire the loser's relations onto the winner BEFORE archiving ──
+    // (1) CONTENT edges (based_on/supports/contradicts/...): archived blocks are filtered
+    //     at read, so an un-rewired loser edge would silently vanish — the cluster would
+    //     LOSE the loser's connections (e.g. loser supports→hypothesis; gone on merge).
+    // (2) the loser's OUTGOING `supersedes` edges (its OWN prior losers, when the loser was
+    //     itself a winner in an earlier merge this tick): re-point them to the winner so a
+    //     TRANSITIVE merge stays FLAT — every collapsed block ends up superseded DIRECTLY by
+    //     the live winner, not via an archived intermediate (A→B, B→C becomes A→C, B→C).
+    //     Without this, resolving "the live version of A" needs multi-hop through archived
+    //     nodes, and single-hop supersedes resolution would land on a dead block.
+    // SKIP only `superseded_by` (createRelation auto-wires that inverse) + `part_of` (the
+    // winner already shares the scope). createRelation is idempotent + existence-guarded.
+    const raw = db.db;
+    const SKIP_REWIRE = new Set(['superseded_by', 'part_of']);
+    let rewired = 0;
+    try {
+        const out = raw.prepare(`SELECT target_id, type FROM relations WHERE source_id = ? AND valid_to IS NULL`).all(loserBlockId);
+        for (const r of out) {
+            if (SKIP_REWIRE.has(r.type) || r.target_id === winnerBlockId || r.target_id === loserBlockId)
+                continue;
+            const rr = db.createRelation({ source_id: winnerBlockId, target_id: r.target_id, type: r.type, created_by: 'flag-reviewer-merge' });
+            if (rr.status !== 'skipped' && rr.id)
+                rewired++;
+        }
+        const inc = raw.prepare(`SELECT source_id, type FROM relations WHERE target_id = ? AND valid_to IS NULL`).all(loserBlockId);
+        for (const r of inc) {
+            if (SKIP_REWIRE.has(r.type) || r.source_id === winnerBlockId || r.source_id === loserBlockId)
+                continue;
+            const rr = db.createRelation({ source_id: r.source_id, target_id: winnerBlockId, type: r.type, created_by: 'flag-reviewer-merge' });
+            if (rr.status !== 'skipped' && rr.id)
+                rewired++;
+        }
+    }
+    catch (e) {
+        console.warn(`[flag-reviewer] rewire failed for loser=${loserBlockId}: ${e?.message ?? e} — proceeding with supersede+archive`);
+    }
+    if (rewired > 0)
+        console.log(`[flag-reviewer] merge rewired ${rewired} relation(s) loser=${loserBlockId} → winner=${winnerBlockId}`);
+    // createRelation verifies both blocks exist (returns a stub status='skipped'
+    // if not) and wires the inverse superseded_by. We do NOT depend on its
+    // type-conditional archive (see DESIGN NOTE above).
+    const rel = db.createRelation({
+        source_id: winnerBlockId,
+        target_id: loserBlockId,
+        type: 'supersedes',
+        created_by: 'flag-reviewer',
+    });
+    if (rel.status === 'skipped' || !rel.id) {
+        console.warn(`[flag-reviewer] merge skipped — one of winner=${winnerBlockId} loser=${loserBlockId} not found`);
+        return 'none';
+    }
+    // Collapse the duplicate: archive the loser regardless of block type. The
+    // supersedes edge above is the durable audit pointer (winner supersedes
+    // loser); this archive is what actually de-duplicates the graph.
+    const archived = db.archiveBlock(loserBlockId, `Merged into ${winnerBlockId} by flag-reviewer (confirmed duplicate)`);
+    if (!archived) {
+        console.warn(`[flag-reviewer] supersedes wired but archive failed for loser=${loserBlockId} — relation persists, block still active`);
+        // Relation IS written; report partial so the flag row reflects reality.
+        return 'none';
+    }
+    return 'archived_loser_and_wired_superseded_by';
+}
+/**
+ * One reviewer tick: read up to N pending flags, review each, write verdicts.
+ * Returns per-tick result for telemetry + log.
+ *
+ * This is the SINGLE PUBLIC entry point — flag-reviewer-startup.ts wraps it
+ * in setInterval, REST /api/flags/:id/review (Sub-step 2.4) can also invoke
+ * it synchronously for a specific flag (via filtered getPendingFlags +
+ * forceAutoMerge from request body).
+ *
+ * Per-flag failure is contained: errors increment the counter and the flag
+ * stays unreviewed (next tick picks it up). One bad flag does NOT crash the
+ * whole tick.
+ */
+export async function runFlagReviewerTick(opts) {
+    const rawDb = opts.db.db;
+    const limit = batchSize();
+    const pending = getPendingFlags(rawDb, { limit });
+    const result = {
+        reviewed: 0,
+        verdicts: { merge: 0, leave: 0, split: 0 },
+        actions_executed: 0,
+        routed_to_agent: 0,
+        errors: 0,
+        cost_usd: 0,
+    };
+    const allowAutoMerge = opts.forceAutoMerge ?? autoMergeEnabled();
+    const inputTokensBefore = reflectTokenStats.pass_reviewer.input;
+    const thinkingTokensBefore = reflectTokenStats.pass_reviewer.thinking;
+    const outputTokensBefore = reflectTokenStats.pass_reviewer.output;
+    let modelUsed;
+    let unpricedHit = false;
+    for (const flag of pending) {
+        // Deferral: island_candidate + entity_unresolved don't fit merge/leave/split
+        // cleanly — design §2.4 + §7 mark Sub-step 2.6 as the optional reviewer for
+        // these. For now: write 'leave' + a deferral reason so they don't re-block
+        // the queue. The flag stays in the DB for audit + future re-review.
+        if (flag.flag_type === 'island_candidate' || flag.flag_type === 'entity_unresolved') {
+            const ok = markFlagReviewed(rawDb, {
+                flag_id: flag.id,
+                verdict: 'leave',
+                reason: `Deferred: ${flag.flag_type} review requires Sub-step 2.6 (design §8 optional). Flag preserved for audit + manual review via /api/flags.`,
+                action_taken: 'none',
+            });
+            if (ok) {
+                result.reviewed += 1;
+                result.verdicts.leave += 1;
+            }
+            continue;
+        }
+        // Owner-unknown → the agent's call, not the autonomous reviewer's. Stage D's
+        // flag_for_review means "identity matches an existing block, but that block's
+        // owner is a catch-all/placeholder (genuinely unknown)". Deciding ownership needs
+        // context the reviewer lacks — the conversation + the ability to ask the user —
+        // so route it to the agent (no LLM, no auto-merge) instead of GUESSING which owner
+        // an orphan belongs to. Leaves reviewed_at NULL so the agent can still resolve via
+        // POST /api/flags/:id/review.
+        //
+        // Trigger is SPECIFIC: origin_writer='stage_d_resolve' AND scope_check='unknown'.
+        // scope_check='unknown' alone is NOT enough — D2 atomic-dups (stage_flag_dedup)
+        // and one AUDIT path also use 'unknown' as a default, but those are same-source /
+        // mechanical, not genuine owner-ambiguity. (Latent cleanup: make those writers
+        // set an honest scope_check so this could key on scope_check alone.)
+        if (flag.origin_writer === 'stage_d_resolve' && flag.scope_check === 'unknown') {
+            const ok = markFlagPendingClarification(rawDb, {
+                flag_id: flag.id,
+                reason: `Owner unknown — routed to the agent to confirm ownership (or ask the user). The reviewer must not guess which owner this matches.`,
+            });
+            if (ok)
+                result.routed_to_agent += 1;
+            continue;
+        }
+        try {
+            const ctx = buildReviewerContext(rawDb, flag);
+            if (!ctx) {
+                // Stale: block_a was archived/deleted between flag-write and review
+                const ok = markFlagReviewed(rawDb, {
+                    flag_id: flag.id,
+                    verdict: 'leave',
+                    reason: `Stale: block_id_a=${flag.block_id_a} not found (archived?). Flag auto-resolved as no-op.`,
+                    action_taken: 'none',
+                });
+                if (ok) {
+                    result.reviewed += 1;
+                    result.verdicts.leave += 1;
+                }
+                continue;
+            }
+            const llmResp = await callReviewerLLM(opts.provider, ctx);
+            if (!llmResp.result) {
+                result.errors += 1;
+                console.warn(`[flag-reviewer] LLM call failed for flag=${flag.id} (rateLimited=${llmResp.rateLimited}) — flag stays unreviewed`);
+                continue;
+            }
+            if (llmResp.model)
+                modelUsed = llmResp.model;
+            const v = llmResp.result;
+            // Safety: validate verdict + winning_block_id consistency. Narrow to the
+            // 3-way reviewer verdict (the schema enum) — ReviewVerdict is broader
+            // ('pending_clarification' | null are persistence states, not reviewer
+            // outputs). Anything off-enum collapses to 'leave' (safe no-op).
+            const validVerdict = (v.verdict === 'merge' || v.verdict === 'split') ? v.verdict : 'leave';
+            const validConfidence = ['high', 'medium', 'low'].includes(v.confidence)
+                ? v.confidence : 'low';
+            // Decide action
+            let actionTaken = 'none';
+            let winningId = null;
+            let routedUnclear = false;
+            if (validVerdict === 'merge' && allowAutoMerge) {
+                // Validate winning_block_id is one of the candidates (defense vs LLM hallucination)
+                const validWinner = !!v.winning_block_id &&
+                    (v.winning_block_id === flag.block_id_a || v.winning_block_id === flag.block_id_b);
+                if (validConfidence === 'high' && validWinner) {
+                    const loser = v.winning_block_id === flag.block_id_a ? flag.block_id_b : flag.block_id_a;
+                    if (loser) {
+                        actionTaken = executeMerge(opts.db, v.winning_block_id, loser);
+                        winningId = v.winning_block_id;
+                        if (actionTaken !== 'none')
+                            result.actions_executed += 1;
+                    }
+                }
+                else {
+                    // Merge-LEAN but not confidently auto-executable: either confidence is
+                    // below 'high' (the reviewer reads SAME claim but isn't sure — a reworded
+                    // / drift dup is 'medium' by the confidence rubric, never 'high'), or the
+                    // LLM named a winner outside the candidate pair. Do NOT silently record-
+                    // and-drop (the dup would persist + re-flag forever) and do NOT auto-archive
+                    // on weak evidence (a wrong merge corrupts the graph). Route to the AGENT,
+                    // which has the conversation + can ask the user. ("system FLAGS, reasoning
+                    // MERGES, the agent resolves the genuinely-unclear ones.")
+                    const why = validConfidence !== 'high'
+                        ? `confidence=${validConfidence} (below the auto-merge bar)`
+                        : `winner="${v.winning_block_id ?? 'none'}" not in the candidate pair`;
+                    const ok = markFlagPendingClarification(rawDb, {
+                        flag_id: flag.id,
+                        reason: `Reviewer leans MERGE but ${why} — routed to the agent to confirm these are the same claim reworded (or to keep them separate). Reviewer reason: ${v.reason || '(none)'}`,
+                    });
+                    if (ok) {
+                        result.routed_to_agent += 1;
+                        routedUnclear = true;
+                    }
+                }
+            }
+            else if (validVerdict === 'merge' && !allowAutoMerge) {
+                // Level 1 verdict-only: record the LLM's choice but DON'T act (operator chose
+                // manual REST review; agent-routing is reserved for the auto-merge path).
+                winningId = v.winning_block_id ?? null;
+            }
+            if (!routedUnclear) {
+                const ok = markFlagReviewed(rawDb, {
+                    flag_id: flag.id,
+                    verdict: validVerdict,
+                    reason: v.reason || `(LLM returned no reason; confidence=${validConfidence})`,
+                    action_taken: actionTaken,
+                    winning_block_id: winningId,
+                });
+                if (ok) {
+                    result.reviewed += 1;
+                    result.verdicts[validVerdict] += 1;
+                }
+            }
+        }
+        catch (e) {
+            result.errors += 1;
+            console.warn(`[flag-reviewer] threw on flag=${flag.id}: ${e?.message ?? e}`);
+        }
+    }
+    // Bill the tick's $$ for telemetry — read the delta of pass_reviewer stats
+    const inputDelta = reflectTokenStats.pass_reviewer.input - inputTokensBefore;
+    const thinkingDelta = reflectTokenStats.pass_reviewer.thinking - thinkingTokensBefore;
+    const outputDelta = reflectTokenStats.pass_reviewer.output - outputTokensBefore;
+    if (modelUsed) {
+        const tickStats = { input: inputDelta, thinking: thinkingDelta, output: outputDelta, calls: result.reviewed };
+        const billed = computeCost(tickStats, modelUsed);
+        if (billed === null)
+            unpricedHit = true;
+        else
+            result.cost_usd = billed;
+    }
+    if (unpricedHit)
+        result.cost_usd = null;
+    return result;
+}
+//# sourceMappingURL=flag-reviewer.js.map

package/dist/middleware/reflect/flag-reviewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flag-reviewer.js","sourceRoot":"","sources":["../../../src/middleware/reflect/flag-reviewer.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,oDAAoD;AACpD,kFAAkF;AAClF,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,gEAAgE;AAChE,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,mEAAmE;AACnE,wEAAwE;AACxE,0EAA0E;AAC1E,yEAAyE;AACzE,EAAE;AACF,uDAAuD;AACvD,sEAAsE;AACtE,EAAE;AACF,gCAAgC;AAChC,8DAA8D;AAC9D,+DAA+D;AAC/D,8CAA8C;AAC9C,0EAA0E;AAC1E,yEAAyE;AACzE,wEAAwE;AACxE,EAAE;AACF,kDAAkD;AAClD,wEAAwE;AACxE,2EAA2E;AAC3E,wEAAwE;AACxE,6EAA6E;AAC7E,sDAAsD;AACtD,gEAAgE;AAChE,8EAA8E;AAC9E,uDAAuD;AAavD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACtG,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,iFAAiF;AAEjF;;sDAEsD;AACtD,SAAS,SAAS;IAChB,OAAO,UAAU,CAAC,kCAAkC,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;qEACqE;AACrE,SAAS,aAAa;IACpB,OAAO,aAAa,CAAC,6BAA6B,CAAC,CAAC;AACtD,CAAC;AAED,gFAAgF;AAChF,SAAS,gBAAgB;IACvB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;AAC5E,CAAC;AAED,iFAAiF;AAEjF,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yHA0CiG,CAAC;AAE1H,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,OAAO,EAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QACvE,MAAM,EAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;QACpC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACpC,UAAU,EAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE;KACtE;IACD,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC;CACrC,CAAC;AAEX,kFAAkF;AAElF;;kEAEkE;AAClE,MAAM,UAAU,iBAAiB,CAC/B,EAAqB,EACrB,OAAe;IAEf,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;;;;GAItB,CAAC,CAAC,GAAG,CAAC,OAAO,CAGD,CAAC;IAEd,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,gFAAgF;IAChF,kFAAkF;IAClF,+EAA+E;IAC/E,4EAA4E;IAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC;QAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAAC,CAAC;IAC3F,MAAM,CAAC;QAAC,QAAQ,GAAG,EAAE,CAAC;IAAC,CAAC;IACxB,mFAAmF;IACnF,mEAAmE;IACnE,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM;YAAE,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAAC,CAAC;IACxH,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;IAC1C,OAAO;QACL,EAAE,EAAU,GAAG,CAAC,EAAE;QAClB,KAAK,EAAO,GAAG,CAAC,KAAK;QACrB,IAAI,EAAQ,GAAG,CAAC,IAAI;QACpB,OAAO,EAAK,GAAG,CAAC,OAAO;QACvB,OAAO,EAAK,GAAG,CAAC,OAAO;QACvB,QAAQ;QACR,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAM,GAAG,CAAC,MAAM;QACtB,aAAa,EAAE,6BAA6B,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED;;yCAEyC;AACzC,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,OAAe,EACf,QAAQ,GAAG,CAAC;IAEZ,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAkB,OAAO,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,OAAO,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAkC,CAAC;QAC9G,IAAI,CAAC,GAAG;YAAE,MAAM;QAChB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;;;;KAIzB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAsC,CAAC;QACrD,OAAO,GAAG,MAAM,EAAE,SAAS,IAAI,IAAI,CAAC;QACpC,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,EAAqB,EACrB,IAAkB;IAElB,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,wCAAwC;IAEnE,IAAI,OAAO,GAA+B,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO,GAAG,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,kFAAkF;QAClF,kFAAkF;QAClF,6EAA6E;QAC7E,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;IAC5B,CAAC;IACD,MAAM,aAAa,GAAG,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;AAClE,CAAC;AAED,iFAAiF;AAEjF,SAAS,oBAAoB,CAAC,CAAsB,EAAE,KAAsB;IAC1E,OAAO;QACL,SAAS,CAAC,CAAC,EAAE,EAAE;QACf,YAAY,CAAC,CAAC,KAAK,EAAE,EAA0B,wDAAwD;QACvG,4BAA4B,CAAC,CAAC,IAAI,EAAE;QACpC,+CAA+C,CAAC,CAAC,aAAa,IAAI,QAAQ,EAAE;QAC5E,wDAAwD,CAAC,CAAC,OAAO,EAAE;QACnE,cAAc,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE;QACzF,gBAAgB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACxC,yBAAyB,CAAC,CAAC,UAAU,IAAI,QAAQ,EAAE;QACnD,aAAa,CAAC,CAAC,MAAM,IAAI,QAAQ,EAAE;QACnC,kBAAkB,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;KAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAoB;IACrD,MAAM,QAAQ,GAAa;QACzB,cAAc,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE;QAClC,gBAAgB,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE;QACxC,0CAA0C,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE;QAChE,sCAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAClF,EAAE;QACF,UAAU;QACV,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC;KACrD,CAAC;IACF,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACtF,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,mEAAmE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAqB,EACrB,GAAoB;IAEpB,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CACzC,eAAe,EACf,SAAS,EACT,eAAe,EACf;QACE,cAAc,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAG,gCAAgC;QAC1E,eAAe,EAAE,IAAI,EAAqB,6BAA6B;QACvE,aAAa,EAAE,aAAa,EAAE;KAC/B,CACF,CAAC;IAEF,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,iBAAiB,CAAC,aAAa,CAAC,KAAK,IAAO,CAAC,CAAC,KAAK,CAAC,KAAK,IAAO,CAAC,CAAC;QAClE,iBAAiB,CAAC,aAAa,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QAClE,iBAAiB,CAAC,aAAa,CAAC,MAAM,IAAM,CAAC,CAAC,KAAK,CAAC,MAAM,IAAM,CAAC,CAAC;IACpE,CAAC;IACD,iBAAiB,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,CAAC;IAE3C,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1E,CAAC;AAED,kFAAkF;AAElF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,YAAY,CAC1B,EAAe,EACf,aAAqB,EACrB,YAAoB;IAEpB,IAAI,aAAa,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC,CAAC,4BAA4B;IAE/E,sEAAsE;IACtE,sFAAsF;IACtF,qFAAqF;IACrF,oFAAoF;IACpF,wFAAwF;IACxF,uFAAuF;IACvF,yFAAyF;IACzF,qFAAqF;IACrF,uFAAuF;IACvF,8EAA8E;IAC9E,sFAAsF;IACtF,sFAAsF;IACtF,MAAM,GAAG,GAAI,EAAU,CAAC,EAAuB,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,gFAAgF,CAAC,CAAC,GAAG,CAAC,YAAY,CAA+C,CAAC;QAC1K,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,aAAa,IAAI,CAAC,CAAC,SAAS,KAAK,YAAY;gBAAE,SAAS;YACvG,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACpI,IAAK,EAAU,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,CAAC,EAAE;gBAAE,OAAO,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,gFAAgF,CAAC,CAAC,GAAG,CAAC,YAAY,CAA+C,CAAC;QAC1K,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,aAAa,IAAI,CAAC,CAAC,SAAS,KAAK,YAAY;gBAAE,SAAS;YACvG,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACpI,IAAK,EAAU,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,CAAC,EAAE;gBAAE,OAAO,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,2CAA2C,YAAY,KAAK,CAAC,EAAE,OAAO,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAClI,CAAC;IACD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,iCAAiC,OAAO,sBAAsB,YAAY,aAAa,aAAa,EAAE,CAAC,CAAC;IAErI,6EAA6E;IAC7E,uEAAuE;IACvE,oDAAoD;IACpD,MAAM,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC;QAC5B,SAAS,EAAE,aAAa;QACxB,SAAS,EAAE,YAAY;QACvB,IAAI,EAAO,YAAY;QACvB,UAAU,EAAE,eAAe;KAC5B,CAAC,CAAC;IACH,IAAK,GAAW,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,iDAAiD,aAAa,UAAU,YAAY,YAAY,CAAC,CAAC;QAC/G,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,0EAA0E;IAC1E,wEAAwE;IACxE,iEAAiE;IACjE,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,eAAe,aAAa,yCAAyC,CAAC,CAAC;IACtH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,iEAAiE,YAAY,0CAA0C,CAAC,CAAC;QACtI,wEAAwE;QACxE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,wCAAwC,CAAC;AAClD,CAAC;AAYD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAyB;IAEzB,MAAM,KAAK,GAAI,IAAI,CAAC,EAAU,CAAC,EAAuB,CAAC;IACvD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAA2B;QACrC,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAC1C,gBAAgB,EAAE,CAAC;QACnB,eAAe,EAAE,CAAC;QAClB,MAAM,EAAE,CAAC;QACT,QAAQ,EAAE,CAAC;KACZ,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,gBAAgB,EAAE,CAAC;IACjE,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,aAAa,CAAC,KAAK,CAAC;IAChE,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,aAAa,CAAC,QAAQ,CAAC;IACtE,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,aAAa,CAAC,MAAM,CAAC;IAClE,IAAI,SAA6B,CAAC;IAClC,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,6EAA6E;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,oEAAoE;QACpE,IAAI,IAAI,CAAC,SAAS,KAAK,kBAAkB,IAAI,IAAI,CAAC,SAAS,KAAK,mBAAmB,EAAE,CAAC;YACpF,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE;gBACjC,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,aAAa,IAAI,CAAC,SAAS,8GAA8G;gBACjJ,YAAY,EAAE,MAAM;aACrB,CAAC,CAAC;YACH,IAAI,EAAE,EAAE,CAAC;gBAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;YAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QAED,6EAA6E;QAC7E,8EAA8E;QAC9E,kFAAkF;QAClF,gFAAgF;QAChF,mFAAmF;QACnF,mFAAmF;QACnF,8BAA8B;QAC9B,EAAE;QACF,kFAAkF;QAClF,gFAAgF;QAChF,kFAAkF;QAClF,+EAA+E;QAC/E,qEAAqE;QACrE,IAAI,IAAI,CAAC,aAAa,KAAK,iBAAiB,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC/E,MAAM,EAAE,GAAG,4BAA4B,CAAC,KAAK,EAAE;gBAC7C,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,mIAAmI;aAC5I,CAAC,CAAC;YACH,IAAI,EAAE;gBAAE,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,oEAAoE;gBACpE,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE;oBACjC,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,qBAAqB,IAAI,CAAC,UAAU,sDAAsD;oBAClG,YAAY,EAAE,MAAM;iBACrB,CAAC,CAAC;gBACH,IAAI,EAAE,EAAE,CAAC;oBAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;oBAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAC7D,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,4CAA4C,IAAI,CAAC,EAAE,iBAAiB,OAAO,CAAC,WAAW,2BAA2B,CAAC,CAAC;gBACjI,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,KAAK;gBAAE,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC;YAE7C,MAAM,CAAC,GAA0B,OAAO,CAAC,MAAM,CAAC;YAChD,yEAAyE;YACzE,sEAAsE;YACtE,uEAAuE;YACvE,iEAAiE;YACjE,MAAM,YAAY,GAChB,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,MAAM,eAAe,GAAwB,CAAC,MAAM,EAAC,QAAQ,EAAC,KAAK,CAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;gBAClH,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;YAEzB,gBAAgB;YAChB,IAAI,WAAW,GAAsD,MAAM,CAAC;YAC5E,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,IAAI,YAAY,KAAK,OAAO,IAAI,cAAc,EAAE,CAAC;gBAC/C,oFAAoF;gBACpF,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB;oBACtC,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC;gBACrF,IAAI,eAAe,KAAK,MAAM,IAAI,WAAW,EAAE,CAAC;oBAC9C,MAAM,KAAK,GAAG,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;oBACzF,IAAI,KAAK,EAAE,CAAC;wBACV,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAiB,EAAE,KAAK,CAAC,CAAC;wBAChE,SAAS,GAAG,CAAC,CAAC,gBAAiB,CAAC;wBAChC,IAAI,WAAW,KAAK,MAAM;4BAAE,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC;oBAC3D,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,uEAAuE;oBACvE,0EAA0E;oBAC1E,0EAA0E;oBAC1E,yEAAyE;oBACzE,6EAA6E;oBAC7E,2EAA2E;oBAC3E,2EAA2E;oBAC3E,2DAA2D;oBAC3D,MAAM,GAAG,GAAG,eAAe,KAAK,MAAM;wBACpC,CAAC,CAAC,cAAc,eAAe,6BAA6B;wBAC5D,CAAC,CAAC,WAAW,CAAC,CAAC,gBAAgB,IAAI,MAAM,6BAA6B,CAAC;oBACzE,MAAM,EAAE,GAAG,4BAA4B,CAAC,KAAK,EAAE;wBAC7C,OAAO,EAAE,IAAI,CAAC,EAAE;wBAChB,MAAM,EAAE,4BAA4B,GAAG,oHAAoH,CAAC,CAAC,MAAM,IAAI,QAAQ,EAAE;qBAClL,CAAC,CAAC;oBACH,IAAI,EAAE,EAAE,CAAC;wBAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;wBAAC,aAAa,GAAG,IAAI,CAAC;oBAAC,CAAC;gBAChE,CAAC;YACH,CAAC;iBAAM,IAAI,YAAY,KAAK,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvD,8EAA8E;gBAC9E,0EAA0E;gBAC1E,SAAS,GAAG,CAAC,CAAC,gBAAgB,IAAI,IAAI,CAAC;YACzC,CAAC;YAED,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE;oBACjC,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,OAAO,EAAE,YAAY;oBACrB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,uCAAuC,eAAe,GAAG;oBAC7E,YAAY,EAAE,WAAW;oBACzB,gBAAgB,EAAE,SAAS;iBAC5B,CAAC,CAAC;gBACH,IAAI,EAAE,EAAE,CAAC;oBACP,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACrB,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,iCAAiC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,MAAM,UAAU,GAAM,iBAAiB,CAAC,aAAa,CAAC,KAAK,GAAM,iBAAiB,CAAC;IACnF,MAAM,aAAa,GAAG,iBAAiB,CAAC,aAAa,CAAC,QAAQ,GAAG,oBAAoB,CAAC;IACtF,MAAM,WAAW,GAAK,iBAAiB,CAAC,aAAa,CAAC,MAAM,GAAK,kBAAkB,CAAC;IACpF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC9G,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,IAAI;YAAE,WAAW,GAAG,IAAI,CAAC;;YACnC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC;IAChC,CAAC;IACD,IAAI,WAAW;QAAE,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;IAExC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/middleware/reflect/inline-dedup.d.ts

@@ -0,0 +1,26 @@
+import type { WorkspaceDB } from "../../store/database.js";
+import type { LLMProvider } from "../../engine/ai-provider.js";
+/** Gate. Default OFF — the inline merge only runs when explicitly opted in. */
+export declare function inlineDedupEnabled(): boolean;
+export interface InlineDedupResult {
+    /** block_dup_candidate flags written this call. */
+    flagsWritten: number;
+    /** Merges the reviewer actually executed (either side may be the loser). */
+    merges: number;
+    /** Flags routed to the agent (merge-lean but not confidently auto-mergeable). */
+    routed: number;
+    /** Ids of the NEW (this-turn) blocks the reviewer archived (merged away). */
+    mergedAway: Set<string>;
+    /** Labels of those same merged-away blocks (so the caller can prune its
+     *  saved_labels precisely, without an id→label re-lookup post-archive). */
+    mergedAwayLabels: Set<string>;
+}
+/**
+ * Dedup this turn's new blocks against the existing graph, BEFORE Pass 4 links.
+ *
+ * @param newBlockIds  the ids Pass 3 just created (still status='pending').
+ * @returns which of those ids the reviewer merged away (archived) — the caller
+ *          drops them from the pending set so they never reach Pass 4 / Pass 5.
+ */
+export declare function dedupNewBlocksInline(db: WorkspaceDB, provider: LLMProvider, newBlockIds: string[]): Promise<InlineDedupResult>;
+//# sourceMappingURL=inline-dedup.d.ts.map

package/dist/middleware/reflect/inline-dedup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-dedup.d.ts","sourceRoot":"","sources":["../../../src/middleware/reflect/inline-dedup.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAY/D,+EAA+E;AAC/E,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAED,MAAM,WAAW,iBAAiB;IAChC,mDAAmD;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB;+EAC2E;IAC3E,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,WAAW,EACf,QAAQ,EAAE,WAAW,EACrB,WAAW,EAAE,MAAM,EAAE,GACpB,OAAO,CAAC,iBAAiB,CAAC,CA4E5B"}