onadit 0.0.1 → 1.0.0

package/dist/src/retrieval/stitch-chunks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stitch-chunks.d.ts","sourceRoot":"","sources":["../../../src/retrieval/stitch-chunks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,OAAO,EAAE,OAAO,CAAC;IACjB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAOD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,WAAW,EAAE,EACrB,IAAI,GAAE,aAAkB,GACvB,YAAY,CAoDd"}

package/dist/src/retrieval/stitch-chunks.js

@@ -0,0 +1,113 @@
+/**
+ * Read-side reassembly of chunk siblings for the `expand` path.
+ *
+ * Index-time chunking seeds every chunk N+1 with an overlap tail copied from the
+ * end of chunk N (see `overlapTail` in `../ingestion/chunk-text.ts`): the start of
+ * one chunk literally duplicates a suffix of the previous one. Naively
+ * concatenating adjacent chunks would print that shared region twice and read as
+ * broken. `stitchChunkContents` joins an ordered run of chunks back together,
+ * removing the duplicated seam so each overlap region appears exactly once.
+ *
+ * Only contiguous index ranges are stitched (the `middle`/`full` expand windows
+ * are both contiguous). A genuine gap (a missing index — e.g. a partially-written
+ * set) is rendered with an explicit boundary marker rather than de-overlapped
+ * across, since non-adjacent chunks share no seam.
+ *
+ * Interior gaps fall out naturally (a missing index between two present ones).
+ * Edge gaps do not: chunks present for [1,2] of an expected [0,2] range have no
+ * absent index *between* siblings, so a caller that knows the expected range
+ * passes it via `expectedStart`/`expectedEnd` to render the missing leading or
+ * trailing section explicitly, instead of returning a partial body that reads as
+ * a whole one.
+ */
+/**
+ * Maximum seam length searched when de-overlapping. The index-time overlap tail
+ * is bounded by `DEFAULT_CHUNK_OPTIONS.overlapChars` (216), so a real seam is
+ * always well under this; the cap is generous slack against future chunker
+ * tuning while keeping the longest-common-overlap scan cheap (≤ cap² char
+ * comparisons per seam). We take the LONGEST matching suffix/prefix so a real
+ * 216-char seam is removed in full; a coincidental longer match in prose is
+ * vanishingly unlikely and would only ever drop genuinely duplicated text.
+ */
+export const MAX_SEAM_OVERLAP_CHARS = 512;
+/** Render an "N section(s) omitted" boundary marker. */
+function omissionMarker(missing) {
+    return `[… ${missing} section${missing === 1 ? "" : "s"} omitted …]`;
+}
+/**
+ * Stitch an ordered run of chunk siblings into one body, removing the duplicated
+ * overlap at each adjacent seam. Input need not be pre-sorted; duplicate indices
+ * keep the first occurrence. Returns the empty string for an empty input.
+ *
+ * Pass `expectedStart`/`expectedEnd` to also surface missing leading/trailing
+ * sections (edge gaps) as omission markers; without them only interior gaps are
+ * marked.
+ */
+export function stitchChunkContents(chunks, opts = {}) {
+    const maxSeam = opts.maxSeam ?? MAX_SEAM_OVERLAP_CHARS;
+    const byIndex = new Map();
+    for (const c of chunks) {
+        if (!byIndex.has(c.index))
+            byIndex.set(c.index, c.content);
+    }
+    const sorted = [...byIndex.entries()]
+        .map(([index, content]) => ({ index, content }))
+        .sort((a, b) => a.index - b.index);
+    if (sorted.length === 0)
+        return { text: "", sectionsUsed: 0, hasGaps: false };
+    let text = sorted[0].content;
+    const chunkStarts = new Map([[sorted[0].index, 0]]);
+    let prevIndex = sorted[0].index;
+    let hasGaps = false;
+    for (let i = 1; i < sorted.length; i++) {
+        const { index, content } = sorted[i];
+        if (index === prevIndex + 1) {
+            const joined = joinDeoverlap(text, content, maxSeam);
+            chunkStarts.set(index, joined.length - content.length);
+            text = joined;
+        }
+        else {
+            // A gap: chunks aren't adjacent, so they share no overlap seam. Mark the
+            // omission honestly instead of silently butting the pieces together.
+            const missing = index - prevIndex - 1;
+            text = `${text}\n\n${omissionMarker(missing)}\n\n${content}`;
+            chunkStarts.set(index, text.length - content.length);
+            hasGaps = true;
+        }
+        prevIndex = index;
+    }
+    // Edge gaps: sections expected before the first / after the last present
+    // chunk. A between-siblings scan can't see these, so a partial run looks whole
+    // without them. Only flagged when the caller supplied the expected range.
+    const firstIndex = sorted[0].index;
+    if (opts.expectedStart !== undefined && firstIndex > opts.expectedStart) {
+        const missing = firstIndex - opts.expectedStart;
+        const prefix = `${omissionMarker(missing)}\n\n`;
+        text = prefix + text;
+        for (const [index, start] of chunkStarts)
+            chunkStarts.set(index, start + prefix.length);
+        hasGaps = true;
+    }
+    if (opts.expectedEnd !== undefined && prevIndex < opts.expectedEnd) {
+        const missing = opts.expectedEnd - prevIndex;
+        text = `${text}\n\n${omissionMarker(missing)}`;
+        hasGaps = true;
+    }
+    return { text, sectionsUsed: sorted.length, hasGaps, ...(opts.trackPositions ? { chunkStarts } : {}) };
+}
+/**
+ * Join two adjacent chunks, dropping the longest suffix of `prev` that is also a
+ * prefix of `next` (the duplicated overlap). When no overlap is found the chunks
+ * were paragraph-separated in the source, so rejoin with a paragraph break rather
+ * than fusing the boundary words together.
+ */
+function joinDeoverlap(prev, next, maxSeam) {
+    const cap = Math.min(prev.length, next.length, maxSeam);
+    for (let k = cap; k > 0; k--) {
+        if (prev.slice(prev.length - k) === next.slice(0, k)) {
+            return prev + next.slice(k);
+        }
+    }
+    return `${prev}\n\n${next}`;
+}
+//# sourceMappingURL=stitch-chunks.js.map

package/dist/src/retrieval/stitch-chunks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stitch-chunks.js","sourceRoot":"","sources":["../../../src/retrieval/stitch-chunks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAsC1C,wDAAwD;AACxD,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,MAAM,OAAO,WAAW,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;AACvE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAqB,EACrB,OAAsB,EAAE;IAExB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,sBAAsB,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;SAC/C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAErC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE9E,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC;IAC9B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,GAAG,MAAM,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,qEAAqE;YACrE,MAAM,OAAO,GAAG,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC;YACtC,IAAI,GAAG,GAAG,IAAI,OAAO,cAAc,CAAC,OAAO,CAAC,OAAO,OAAO,EAAE,CAAC;YAC7D,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YACrD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,SAAS,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,yEAAyE;IACzE,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;IACpC,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxE,MAAM,OAAO,GAAG,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC;QAChD,MAAM,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;QAChD,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,WAAW;YAAE,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACxF,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7C,IAAI,GAAG,GAAG,IAAI,OAAO,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzG,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxD,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,IAAI,OAAO,IAAI,EAAE,CAAC;AAC9B,CAAC"}

package/dist/src/retrieval/vector.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Vector search against LanceDB tables.
+ *
+ * Embeds the query via EmbeddingProvider, runs nearestTo() across the
+ * relevant tables based on scope, merges results, sorts by score.
+ *
+ * Deliberately vector-only — no lexical/hybrid/reranking (Slice 7).
+ */
+import type { EmbeddingProvider } from "../providers/types.js";
+import type { TableName } from "../storage/tables.js";
+export type SearchScope = "all" | "clients" | "projects" | "conversations" | "documents";
+export interface SearchOptions {
+    scope: SearchScope;
+    client?: string | undefined;
+    since?: string | undefined;
+    top_k: number;
+    /** When set, only structured_docs rows whose source_path starts with this prefix are returned. */
+    sourcePathPrefix?: string | undefined;
+    /**
+     * When set, structured_docs rows whose source_path starts with this prefix
+     * are left out. Filtering in the query, not after it, keeps `top_k` for the
+     * rows the caller wants: the context pack's other-projects lane would
+     * otherwise fill its candidates with the current project's documents.
+     */
+    excludeSourcePathPrefix?: string | undefined;
+    /**
+     * Restrict the scope's tables to this subset (scope filters still apply).
+     * Lets a caller search one table without changing scope semantics, e.g.
+     * the context pack's documents lane keeps scope="all" (project + client
+     * files) but skips the conversation tables it searches separately.
+     */
+    tables?: readonly TableName[] | undefined;
+    /**
+     * Restrict conversation tables to these row ids (project-scoped lane).
+     * Documents and digests are unaffected.
+     */
+    conversationIds?: readonly string[] | undefined;
+    /**
+     * Leave these conversation rows out (the context pack's other-projects
+     * lane: everything but the current project's sessions).
+     */
+    excludeConversationIds?: readonly string[] | undefined;
+}
+export interface SearchResult {
+    id: string;
+    content: string;
+    score: number;
+    retrieval_method: "vector" | "lexical" | "hybrid";
+    source_table: TableName;
+    /** ISO-8601 indexed_at (or created_at for digests). Passed through for reranker. */
+    indexed_at?: string;
+    /** Conversation quality. Absent for structured_docs/digests. Passed through for reranker. */
+    quality?: string;
+    /** Raw JSON-encoded topics array. Populated for conversation rows. */
+    topics?: string;
+    /** Raw JSON-encoded decisions array. Populated for conversation rows. */
+    decisions?: string;
+}
+export interface SearchResponse {
+    results: SearchResult[];
+    degraded: boolean;
+    degraded_reason?: string | undefined;
+}
+/**
+ * Run vector search across tables for a text query.
+ *
+ * Returns a SearchResponse with results and a response-level `degraded` flag.
+ * In vector-only mode, degraded is always false (Slice 7 adds degraded mode).
+ */
+export declare function vectorSearch(query: string, embedding: EmbeddingProvider, options: SearchOptions): Promise<SearchResponse>;
+//# sourceMappingURL=vector.d.ts.map

package/dist/src/retrieval/vector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vector.d.ts","sourceRoot":"","sources":["../../../src/retrieval/vector.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAStD,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,SAAS,GAAG,UAAU,GAAG,eAAe,GAAG,WAAW,CAAC;AAEzF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,kGAAkG;IAClG,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;IAC1C;;;OAGG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD;;;OAGG;IACH,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACxD;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IAClD,YAAY,EAAE,SAAS,CAAC;IACxB,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAgHD;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,CAAC,CAiBzB"}

package/dist/src/retrieval/vector.js

@@ -0,0 +1,147 @@
+import { getTable } from "../storage/tables.js";
+import { escapeLike } from "./cwd.js";
+import { inFilter } from "../storage/filter.js";
+import { isRiftBasicMetadata } from "../providers/basic-metadata-extraction.js";
+import { RIFT_NONE_VECTOR_EXCLUSION_CLAUSE } from "../providers/placeholder-embed.js";
+import { indexCardsEnabled, REPORT_CARD_SQL_EXCLUSION } from "../ingestion/report-cards.js";
+/**
+ * Determine which tables and filters to apply for a given scope/client/since.
+ */
+function buildTableQueries(options) {
+    const queries = [];
+    const needsStructuredDocs = options.scope === "all" ||
+        options.scope === "documents" ||
+        options.scope === "clients" ||
+        options.scope === "projects";
+    const needsConversations = options.scope === "all" || options.scope === "conversations";
+    if (needsStructuredDocs) {
+        const clauses = [];
+        if (options.scope === "documents") {
+            clauses.push("source_scope = 'document'");
+        }
+        else if (options.scope === "clients") {
+            clauses.push("source_scope = 'client'");
+        }
+        else if (options.scope === "projects") {
+            clauses.push("source_scope = 'project'");
+        }
+        // client filter only applies to structured_docs — conversations don't
+        // carry a client_name field in their schema.
+        if (options.client) {
+            clauses.push(`client_name = '${escapeSql(options.client)}'`);
+        }
+        if (options.sourcePathPrefix) {
+            clauses.push(`source_path LIKE '${escapeSql(escapeLike(options.sourcePathPrefix))}%' ESCAPE '\\'`);
+        }
+        if (options.excludeSourcePathPrefix) {
+            clauses.push(`source_path NOT LIKE '${escapeSql(escapeLike(options.excludeSourcePathPrefix))}%' ESCAPE '\\'`);
+        }
+        if (options.since) {
+            clauses.push(`indexed_at >= '${escapeSql(options.since)}'`);
+        }
+        // beta.28: keep index cards out of retrieval unless RIFT_INDEX_CARDS is on,
+        // so the default (off) pool is byte-identical to pre-card search.
+        if (!indexCardsEnabled()) {
+            clauses.push(REPORT_CARD_SQL_EXCLUSION);
+        }
+        queries.push({
+            table: "structured_docs",
+            whereClause: clauses.length > 0 ? clauses.join(" AND ") : null,
+            dateField: "indexed_at",
+        });
+    }
+    if (needsConversations) {
+        // Exclude no-key placeholder (`rift-none`) rows from vector search — see
+        // RIFT_NONE_VECTOR_EXCLUSION_CLAUSE. conversations_hot carries the column;
+        // digests (below) do not, so they get no such clause.
+        const hotClauses = [RIFT_NONE_VECTOR_EXCLUSION_CLAUSE];
+        if (options.conversationIds?.length) {
+            hotClauses.push(inFilter("id", options.conversationIds, { validateAsRowId: true }));
+        }
+        if (options.excludeConversationIds?.length) {
+            hotClauses.push(`NOT (${inFilter("id", options.excludeConversationIds, { validateAsRowId: true })})`);
+        }
+        if (options.since) {
+            hotClauses.push(`indexed_at >= '${escapeSql(options.since)}'`);
+        }
+        queries.push({
+            table: "conversations_hot",
+            whereClause: hotClauses.length > 0 ? hotClauses.join(" AND ") : null,
+            dateField: "indexed_at",
+        });
+        // Digests use created_at (not indexed_at) because the DigestRow schema
+        // has no indexed_at field — digests are generated artifacts, not raw
+        // ingested records. See storage/tables.ts DigestRow.
+        const digestClauses = [];
+        if (options.since) {
+            digestClauses.push(`created_at >= '${escapeSql(options.since)}'`);
+        }
+        queries.push({
+            table: "digests",
+            whereClause: digestClauses.length > 0 ? digestClauses.join(" AND ") : null,
+            dateField: "created_at",
+        });
+    }
+    return queries;
+}
+/**
+ * Run vector search across tables for a text query.
+ *
+ * Returns a SearchResponse with results and a response-level `degraded` flag.
+ * In vector-only mode, degraded is always false (Slice 7 adds degraded mode).
+ */
+export async function vectorSearch(query, embedding, options) {
+    const queryVec = await embedding.embed(query);
+    const tableQueries = buildTableQueries(options).filter((tq) => !options.tables || options.tables.includes(tq.table));
+    // Query all tables in parallel
+    const perTable = await Promise.all(tableQueries.map((tq) => searchOneTable(tq, queryVec, options.top_k)));
+    // Merge, sort by score descending, take top_k
+    const merged = perTable.flat().sort((a, b) => b.score - a.score);
+    return {
+        results: merged.slice(0, options.top_k),
+        degraded: false,
+    };
+}
+async function searchOneTable(tq, queryVec, limit) {
+    const table = getTable(tq.table);
+    // Never ship the stored vectors back: they are unused here and are the
+    // largest column by far.
+    const columns = (await table.schema()).fields
+        .map((f) => f.name)
+        .filter((name) => name !== "embedding");
+    let vq = table
+        .query()
+        .nearestTo(queryVec)
+        .distanceType("cosine")
+        .select([...columns, "_distance"])
+        .limit(limit);
+    if (tq.whereClause) {
+        vq = vq.where(tq.whereClause);
+    }
+    const rows = await vq.toArray();
+    return rows.map((row) => {
+        const result = {
+            id: row.id,
+            content: row.content || row.summary || "",
+            score: 1 - (row._distance ?? 0),
+            retrieval_method: "vector",
+            source_table: tq.table,
+        };
+        const ts = row.indexed_at || row.created_at;
+        if (ts)
+            result.indexed_at = ts;
+        // Skip the placeholder `quality` on no-AI basic rows so the reranker treats
+        // them as quality-neutral rather than ranking on a fake label. See the
+        // matching guard in lexical.ts.
+        const q = row.quality;
+        if (q && !isRiftBasicMetadata(row.metadata_provider)) {
+            result.quality = q;
+        }
+        return result;
+    });
+}
+/** Minimal SQL value escaping to prevent injection in where clauses. */
+function escapeSql(value) {
+    return value.replace(/'/g, "''");
+}
+//# sourceMappingURL=vector.js.map

package/dist/src/retrieval/vector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vector.js","sourceRoot":"","sources":["../../../src/retrieval/vector.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAqE5F;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAsB;IAC/C,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,MAAM,mBAAmB,GACvB,OAAO,CAAC,KAAK,KAAK,KAAK;QACvB,OAAO,CAAC,KAAK,KAAK,WAAW;QAC7B,OAAO,CAAC,KAAK,KAAK,SAAS;QAC3B,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC;IAE/B,MAAM,kBAAkB,GACtB,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,eAAe,CAAC;IAE/D,IAAI,mBAAmB,EAAE,CAAC;QACxB,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC3C,CAAC;QAED,sEAAsE;QACtE,6CAA6C;QAC7C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,kBAAkB,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CACV,qBAAqB,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,CACrF,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CACV,yBAAyB,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,gBAAgB,CAChG,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,kBAAkB,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,CAAC;QAED,4EAA4E;QAC5E,kEAAkE;QAClE,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;YAC9D,SAAS,EAAE,YAAY;SACxB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,kBAAkB,EAAE,CAAC;QACvB,yEAAyE;QACzE,2EAA2E;QAC3E,sDAAsD;QACtD,MAAM,UAAU,GAAa,CAAC,iCAAiC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,OAAO,CAAC,sBAAsB,EAAE,MAAM,EAAE,CAAC;YAC3C,UAAU,CAAC,IAAI,CACb,QAAQ,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,sBAAsB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,GAAG,CACrF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,kBAAkB,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;YACpE,SAAS,EAAE,YAAY;SACxB,CAAC,CAAC;QAEH,uEAAuE;QACvE,qEAAqE;QACrE,qDAAqD;QACrD,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,aAAa,CAAC,IAAI,CAAC,kBAAkB,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;YAC1E,SAAS,EAAE,YAAY;SACxB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,SAA4B,EAC5B,OAAsB;IAEtB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC,MAAM,CACpD,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAC7D,CAAC;IAEF,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CACtE,CAAC;IAEF,8CAA8C;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACjE,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC;QACvC,QAAQ,EAAE,KAAK;KAChB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,EAAc,EACd,QAAkB,EAClB,KAAa;IAEb,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACjC,uEAAuE;IACvE,yBAAyB;IACzB,MAAM,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM;SAC1C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAC1C,IAAI,EAAE,GAAG,KAAK;SACX,KAAK,EAAE;SACP,SAAS,CAAC,QAAQ,CAAC;SACnB,YAAY,CAAC,QAAQ,CAAC;SACtB,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,WAAW,CAAC,CAAC;SACjC,KAAK,CAAC,KAAK,CAAC,CAAC;IAEhB,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IAEhC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAA4B,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAiB;YAC3B,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,OAAO,EAAG,GAAG,CAAC,OAAkB,IAAK,GAAG,CAAC,OAAkB,IAAI,EAAE;YACjE,KAAK,EAAE,CAAC,GAAG,CAAE,GAAG,CAAC,SAAoB,IAAI,CAAC,CAAC;YAC3C,gBAAgB,EAAE,QAAiB;YACnC,YAAY,EAAE,EAAE,CAAC,KAAK;SACvB,CAAC;QACF,MAAM,EAAE,GAAI,GAAG,CAAC,UAAqB,IAAK,GAAG,CAAC,UAAqB,CAAC;QACpE,IAAI,EAAE;YAAE,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;QAC/B,4EAA4E;QAC5E,uEAAuE;QACvE,gCAAgC;QAChC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAiB,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,iBAAuC,CAAC,EAAE,CAAC;YAC3E,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC"}

package/dist/src/runtime/legacy-migration.d.ts

@@ -0,0 +1,27 @@
+export interface MigrationOptions {
+    /** Home directory, defaults to `os.homedir()`. Test-injectable. */
+    homeDir?: string;
+    /** Data directory (where the JSONL log is written and the capability-map lives). */
+    dataDir: string;
+    /** Stable timestamp source, test-injectable. */
+    now?: () => Date;
+    /** Where friend-visible migration lines are emitted. Defaults to process.stderr. */
+    stderr?: {
+        write(s: string): void;
+    };
+}
+export interface MigrationStepResult {
+    /** Unique stable kind for the JSONL log + tests. */
+    kind: "env_file" | "token_file" | "capability_map";
+    /** Did this step migrate something this run? */
+    migrated: boolean;
+    /** Opaque backup identifier exposed to friends. */
+    backupId?: string;
+}
+export interface MigrationSummary {
+    steps: MigrationStepResult[];
+    /** Number of steps that performed a migration on this run. */
+    migratedCount: number;
+}
+export declare function runLegacyMigration(opts: MigrationOptions): Promise<MigrationSummary>;
+//# sourceMappingURL=legacy-migration.d.ts.map

package/dist/src/runtime/legacy-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-migration.d.ts","sourceRoot":"","sources":["../../../src/runtime/legacy-migration.ts"],"names":[],"mappings":"AAmCA,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,oFAAoF;IACpF,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,IAAI,EAAE,UAAU,GAAG,YAAY,GAAG,gBAAgB,CAAC;IACnD,gDAAgD;IAChD,QAAQ,EAAE,OAAO,CAAC;IAClB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,aAAa,EAAE,MAAM,CAAC;CACvB;AAmBD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAgG3B"}

package/dist/src/runtime/legacy-migration.js

@@ -0,0 +1,140 @@
+/**
+ * Hidden legacy migration. Runs once-per-boot, idempotent on re-run.
+ *
+ * Carries pre-rename state forward without ever surfacing the legacy
+ * names to a friend. Three steps live here (the ones safe to run on
+ * every daemon boot):
+ *
+ * 1. Env file:           ~/.life-brain.env       → ~/.rift.env       (mode 0600)
+ * 2. Token file:         ~/.life-brain/token     → ~/.rift/token     (mode 0600)
+ * 3. Capability map:     data/life-context.md    → data/rift-context.md
+ *
+ * Plist takeover (Slice 2 / install.sh) and MCP-client config takeover
+ * (Slice 5 / `onadit mcp install`) are NOT run from the daemon — they
+ * belong to their own slices because they require root-relative paths
+ * and client-config awareness that the daemon process does not have.
+ *
+ * Output contract:
+ * - **Friend-visible stderr:** Onadit-only wording. Single line per
+ *   migrated artifact (`Found a legacy env file — migrated to
+ *   ~/.rift.env.`). Never names the legacy path. Backups referenced
+ *   by opaque ID only (`Backup ID: rift-migration-<iso>-<n>`).
+ * - **Operator-only JSONL:** every migration step appends one row to
+ *   `data/observability/legacy-migration.jsonl` with the actual legacy
+ *   path, the new path, and the opaque backup ID. This artifact is
+ *   not surfaced through any CLI/HTTP/MCP path; it exists for Clem to
+ *   inspect operator-side if a friend pings for recovery.
+ *
+ * Idempotency:
+ * - Each step's precondition is "the new file does not yet exist".
+ * - On second run, all three steps no-op and emit no JSONL rows.
+ */
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+const RIFT_ENV_BASENAME = ".rift.env";
+const LEGACY_ENV_BASENAME = ".life-brain.env";
+const RIFT_TOKEN_DIR = ".rift";
+const LEGACY_TOKEN_DIR = ".life-brain";
+const TOKEN_FILE = "token";
+const RIFT_CONTEXT_BASENAME = "rift-context.md";
+const LEGACY_CONTEXT_BASENAME = "life-context.md";
+const JSONL_RELATIVE = path.join("observability", "legacy-migration.jsonl");
+export async function runLegacyMigration(opts) {
+    const homeDir = opts.homeDir ?? os.homedir();
+    const now = (opts.now ?? (() => new Date()))();
+    const stderr = opts.stderr ?? process.stderr;
+    const ts = now.toISOString();
+    // ISO timestamp with colons replaced for filesystem-safety inside backup IDs.
+    const tsToken = ts.replace(/[:.]/g, "-");
+    let backupCounter = 0;
+    const steps = [];
+    const jsonlPath = path.join(opts.dataDir, JSONL_RELATIVE);
+    function appendJsonl(row) {
+        fs.mkdirSync(path.dirname(jsonlPath), { recursive: true });
+        fs.appendFileSync(jsonlPath, JSON.stringify(row) + "\n", {
+            encoding: "utf-8",
+            mode: 0o600,
+        });
+    }
+    // --- 1. Env file ---
+    {
+        const newPath = path.join(homeDir, RIFT_ENV_BASENAME);
+        const legacyPath = path.join(homeDir, LEGACY_ENV_BASENAME);
+        if (!fs.existsSync(newPath) && fs.existsSync(legacyPath)) {
+            backupCounter += 1;
+            const backupId = `rift-migration-${tsToken}-${backupCounter}`;
+            copyFileSecure(legacyPath, newPath, 0o600);
+            stderr.write(`Found a legacy env file — migrated to ~/${RIFT_ENV_BASENAME}. (Backup ID: ${backupId}.)\n`);
+            appendJsonl({
+                ts,
+                kind: "env_file",
+                legacy_path: legacyPath,
+                new_path: newPath,
+                backup_id: backupId,
+            });
+            steps.push({ kind: "env_file", migrated: true, backupId });
+        }
+        else {
+            steps.push({ kind: "env_file", migrated: false });
+        }
+    }
+    // --- 2. Token file ---
+    {
+        const newPath = path.join(homeDir, RIFT_TOKEN_DIR, TOKEN_FILE);
+        const legacyPath = path.join(homeDir, LEGACY_TOKEN_DIR, TOKEN_FILE);
+        if (!fs.existsSync(newPath) && fs.existsSync(legacyPath)) {
+            backupCounter += 1;
+            const backupId = `rift-migration-${tsToken}-${backupCounter}`;
+            copyFileSecure(legacyPath, newPath, 0o600);
+            stderr.write(`Found a legacy token file — migrated to ~/${RIFT_TOKEN_DIR}/${TOKEN_FILE}. (Backup ID: ${backupId}.)\n`);
+            appendJsonl({
+                ts,
+                kind: "token_file",
+                legacy_path: legacyPath,
+                new_path: newPath,
+                backup_id: backupId,
+            });
+            steps.push({ kind: "token_file", migrated: true, backupId });
+        }
+        else {
+            steps.push({ kind: "token_file", migrated: false });
+        }
+    }
+    // --- 3. Capability map ---
+    {
+        const newPath = path.join(opts.dataDir, RIFT_CONTEXT_BASENAME);
+        const legacyPath = path.join(opts.dataDir, LEGACY_CONTEXT_BASENAME);
+        if (!fs.existsSync(newPath) && fs.existsSync(legacyPath)) {
+            backupCounter += 1;
+            const backupId = `rift-migration-${tsToken}-${backupCounter}`;
+            // Rename in place — we do not keep the legacy basename around.
+            fs.renameSync(legacyPath, newPath);
+            stderr.write(`Migrated legacy capability map to data/${RIFT_CONTEXT_BASENAME}. (Backup ID: ${backupId}.)\n`);
+            appendJsonl({
+                ts,
+                kind: "capability_map",
+                legacy_path: legacyPath,
+                new_path: newPath,
+                backup_id: backupId,
+            });
+            steps.push({ kind: "capability_map", migrated: true, backupId });
+        }
+        else {
+            steps.push({ kind: "capability_map", migrated: false });
+        }
+    }
+    const migratedCount = steps.filter((s) => s.migrated).length;
+    return { steps, migratedCount };
+}
+function copyFileSecure(src, dst, mode) {
+    const dir = path.dirname(dst);
+    fs.mkdirSync(dir, { recursive: true });
+    const tmp = `${dst}.tmp.${process.pid}`;
+    const data = fs.readFileSync(src);
+    fs.writeFileSync(tmp, data, { mode });
+    // chmod again — writeFileSync mode is masked by umask on some systems.
+    fs.chmodSync(tmp, mode);
+    fs.renameSync(tmp, dst);
+}
+//# sourceMappingURL=legacy-migration.js.map

package/dist/src/runtime/legacy-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-migration.js","sourceRoot":"","sources":["../../../src/runtime/legacy-migration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAoC7B,MAAM,iBAAiB,GAAG,WAAW,CAAC;AACtC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAC9C,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,gBAAgB,GAAG,aAAa,CAAC;AACvC,MAAM,UAAU,GAAG,OAAO,CAAC;AAC3B,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AAChD,MAAM,uBAAuB,GAAG,iBAAiB,CAAC;AAClD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;AAE5E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAE7C,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC7B,8EAA8E;IAC9E,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAE1D,SAAS,WAAW,CAAC,GAAa;QAChC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE;YACvD,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,CAAC;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACzD,aAAa,IAAI,CAAC,CAAC;YACnB,MAAM,QAAQ,GAAG,kBAAkB,OAAO,IAAI,aAAa,EAAE,CAAC;YAC9D,cAAc,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM,CAAC,KAAK,CACV,2CAA2C,iBAAiB,iBAAiB,QAAQ,MAAM,CAC5F,CAAC;YACF,WAAW,CAAC;gBACV,EAAE;gBACF,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,UAAU;gBACvB,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,CAAC;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACzD,aAAa,IAAI,CAAC,CAAC;YACnB,MAAM,QAAQ,GAAG,kBAAkB,OAAO,IAAI,aAAa,EAAE,CAAC;YAC9D,cAAc,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM,CAAC,KAAK,CACV,6CAA6C,cAAc,IAAI,UAAU,iBAAiB,QAAQ,MAAM,CACzG,CAAC;YACF,WAAW,CAAC;gBACV,EAAE;gBACF,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,UAAU;gBACvB,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,CAAC;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACzD,aAAa,IAAI,CAAC,CAAC;YACnB,MAAM,QAAQ,GAAG,kBAAkB,OAAO,IAAI,aAAa,EAAE,CAAC;YAC9D,+DAA+D;YAC/D,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CACV,0CAA0C,qBAAqB,iBAAiB,QAAQ,MAAM,CAC/F,CAAC;YACF,WAAW,CAAC;gBACV,EAAE;gBACF,IAAI,EAAE,gBAAgB;gBACtB,WAAW,EAAE,UAAU;gBACvB,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC7D,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,GAAW,EAAE,IAAY;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,GAAG,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,uEAAuE;IACvE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/runtime/legacy-name-guard.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Defensive validators for operator-supplied display strings that flow into
+ * friend-visible surfaces. The forbidden-name gate (`pnpm check:rename`)
+ * holds the static codebase free of legacy product names; this module
+ * enforces the same contract at runtime against config values that may have
+ * been hand-edited, copy-pasted, or shipped from an older version.
+ *
+ * Allowlisted at file level — every reference here exists *only* to defend
+ * against legacy strings landing in the friend's terminal.
+ */
+/**
+ * Validator for `voyage.project_label` — the only operator-supplied string
+ * embedded in /status/friend. Anything that violates the contract is dropped
+ * to `null` rather than echoed back: the friend never sees a label
+ * containing a path, a key-like token, or a forbidden legacy name.
+ *
+ * Rules:
+ *   - must be a non-empty trimmed string, at most 32 chars
+ *   - charset is `[A-Za-z0-9_-]` only (blocks `/`, `~`, spaces, dots, quotes)
+ *   - rejects any forbidden-name substring (life-brain / lifebrain /
+ *     second-brain / `life_*`)
+ *   - rejects known secret prefixes (Voyage `pa-`, OpenAI `sk-`, Stripe
+ *     `pk-`/`rk-`, GitHub `ghp_`/`gho_`/`ghs_`/`ghu_`/`ghr_`, Slack `xox?-`,
+ *     bearer-/token- shaped tokens) — matched at the start regardless of
+ *     casing or hyphen-vs-underscore
+ *   - rejects a label whose longest alphanumeric chunk (between `-`/`_`
+ *     separators) is ≥20 chars; catches segmented keys like
+ *     `pa-AbCd…22chars…` after the prefix gate, and uninterrupted opaque
+ *     runs in one shot
+ *
+ * Plan §Slice 0 expects shapes like `rift-beta-<handle>`; this sanitizer
+ * permits exactly that and rejects everything else.
+ */
+export declare function sanitizeProjectLabel(raw: unknown): string | null;
+//# sourceMappingURL=legacy-name-guard.d.ts.map

package/dist/src/runtime/legacy-name-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-name-guard.d.ts","sourceRoot":"","sources":["../../../src/runtime/legacy-name-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAWhE"}

package/dist/src/runtime/legacy-name-guard.js

@@ -0,0 +1,58 @@
+/**
+ * Defensive validators for operator-supplied display strings that flow into
+ * friend-visible surfaces. The forbidden-name gate (`pnpm check:rename`)
+ * holds the static codebase free of legacy product names; this module
+ * enforces the same contract at runtime against config values that may have
+ * been hand-edited, copy-pasted, or shipped from an older version.
+ *
+ * Allowlisted at file level — every reference here exists *only* to defend
+ * against legacy strings landing in the friend's terminal.
+ */
+/**
+ * Validator for `voyage.project_label` — the only operator-supplied string
+ * embedded in /status/friend. Anything that violates the contract is dropped
+ * to `null` rather than echoed back: the friend never sees a label
+ * containing a path, a key-like token, or a forbidden legacy name.
+ *
+ * Rules:
+ *   - must be a non-empty trimmed string, at most 32 chars
+ *   - charset is `[A-Za-z0-9_-]` only (blocks `/`, `~`, spaces, dots, quotes)
+ *   - rejects any forbidden-name substring (life-brain / lifebrain /
+ *     second-brain / `life_*`)
+ *   - rejects known secret prefixes (Voyage `pa-`, OpenAI `sk-`, Stripe
+ *     `pk-`/`rk-`, GitHub `ghp_`/`gho_`/`ghs_`/`ghu_`/`ghr_`, Slack `xox?-`,
+ *     bearer-/token- shaped tokens) — matched at the start regardless of
+ *     casing or hyphen-vs-underscore
+ *   - rejects a label whose longest alphanumeric chunk (between `-`/`_`
+ *     separators) is ≥20 chars; catches segmented keys like
+ *     `pa-AbCd…22chars…` after the prefix gate, and uninterrupted opaque
+ *     runs in one shot
+ *
+ * Plan §Slice 0 expects shapes like `rift-beta-<handle>`; this sanitizer
+ * permits exactly that and rejects everything else.
+ */
+export function sanitizeProjectLabel(raw) {
+    if (typeof raw !== "string")
+        return null;
+    const trimmed = raw.trim();
+    if (trimmed.length === 0 || trimmed.length > 32)
+        return null;
+    if (!/^[A-Za-z0-9_-]+$/.test(trimmed))
+        return null;
+    if (LEGACY_NAME_RE.test(trimmed))
+        return null;
+    if (SECRET_PREFIX_RE.test(trimmed))
+        return null;
+    for (const chunk of trimmed.split(/[-_]/)) {
+        if (chunk.length >= 20)
+            return null;
+    }
+    return trimmed;
+}
+const LEGACY_NAME_RE = /life-brain|lifebrain|second-brain|\blife_[a-z0-9_]+\b/i;
+// Anchored at start; matches both `pa-` and `pa_` shapes case-insensitively.
+// Covers Voyage (`pa-`/`pat-`), OpenAI (`sk-`), Stripe (`pk-`/`rk-`), GitHub
+// (`ghp_`/`gho_`/`ghs_`/`ghu_`/`ghr_`), Slack (`xoxb-`/`xoxp-`/`xoxa-`/`xoxs-`),
+// and generic bearer/token-prefixed pastes.
+const SECRET_PREFIX_RE = /^(pat?|sk|pk|rk|gh[posur]|xox[abps]|bearer|token)[-_]/i;
+//# sourceMappingURL=legacy-name-guard.js.map

package/dist/src/runtime/legacy-name-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-name-guard.js","sourceRoot":"","sources":["../../../src/runtime/legacy-name-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,cAAc,GAAG,wDAAwD,CAAC;AAEhF,6EAA6E;AAC7E,6EAA6E;AAC7E,iFAAiF;AACjF,4CAA4C;AAC5C,MAAM,gBAAgB,GACpB,wDAAwD,CAAC"}