onadit 0.0.1 → 1.0.0

package/dist/src/capture/triage-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-provider.d.ts","sourceRoot":"","sources":["../../../src/capture/triage-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACxB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAElD,8DAA8D;AAC9D,eAAO,MAAM,cAAc,MAAM,CAAC;AAElC,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,oDAAoD;IACpD,eAAe,EAAE,oBAAoB,CAAC;IACtC,+DAA+D;IAC/D,KAAK,EAAE,kBAAkB,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACnD;AAED;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;aAG7B,QAAQ,EAAE,MAAM;aAChB,MAAM,EAAE,MAAM;gBAF9B,OAAO,EAAE,MAAM,EACC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM;CAKjC;AAED;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;aAGxB,OAAO,EAAE,MAAM;gBAD/B,OAAO,EAAE,MAAM,EACC,OAAO,EAAE,MAAM,EAC/B,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAKhC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAyDlE"}

package/dist/src/capture/triage-provider.js

@@ -0,0 +1,126 @@
+/**
+ * Triage provider interface — Slice 5 contract.
+ *
+ * Locked shape: every triage result must carry decision + confidence +
+ * rationale + model + provider + version. summary and topics are kept
+ * additively for review-queue display.
+ *
+ * Providers are the only place model IDs and provider strings are minted.
+ * Callers consume TriageResult; they don't know whether the call hit
+ * OpenAI, a stub, or a legacy code path.
+ */
+import { decisionToLane, resolveLane, } from "./triage-lane.js";
+/** Bumped whenever the prompt or scoring contract changes. */
+export const TRIAGE_VERSION = "2";
+/**
+ * Marker error: a batch hit its cost ceiling. The batch must stop
+ * admitting new triage calls; callers handle this fail-closed.
+ */
+export class BatchCostExceededError extends Error {
+    spentUsd;
+    capUsd;
+    constructor(message, spentUsd, capUsd) {
+        super(message);
+        this.spentUsd = spentUsd;
+        this.capUsd = capUsd;
+        this.name = "BatchCostExceededError";
+    }
+}
+/**
+ * Failure that carries the actual USD cost the upstream API already
+ * billed. Thrown when an HTTP 200 response with a token-usage block
+ * fails to parse — the API keeps the money even though we can't use
+ * the result, and the budget must reflect that.
+ */
+export class BilledOpenAIError extends Error {
+    costUsd;
+    constructor(message, costUsd, options) {
+        super(message, options);
+        this.costUsd = costUsd;
+        this.name = "BilledOpenAIError";
+    }
+}
+/**
+ * Dual-read helper for persisted triage payloads while `lane` rolls out.
+ * Old rows may only carry `decision`; new rows must carry both.
+ */
+export function normalizeTriageResult(value) {
+    const t = (value ?? {});
+    const decision = t.decision === "save" || t.decision === "discard" || t.decision === "review"
+        ? t.decision
+        : "review";
+    const lane = resolveLane({ lane: t.lane, decision });
+    const score = typeof t.score === "number"
+        ? t.score
+        : lane === decisionToLane(decision)
+            ? defaultScoreForLane(lane)
+            : defaultScoreForLane(decisionToLane(decision));
+    const scoreBreakdown = isScoreBreakdown(t.score_breakdown)
+        ? t.score_breakdown
+        : {
+            heuristics: 0,
+            source_quality: 0,
+            conversation_density: 0,
+            repo_file_references: 0,
+            decision_language: 0,
+            model_judgment: 0,
+            total: score,
+        };
+    const debug = isScoringDebug(t.debug)
+        ? t.debug
+        : {
+            score_breakdown: scoreBreakdown,
+            signals: [],
+        };
+    return {
+        decision,
+        lane,
+        confidence: typeof t.confidence === "number" ? t.confidence : 0,
+        score,
+        rationale: typeof t.rationale === "string" ? t.rationale : "",
+        summary: typeof t.summary === "string" ? t.summary : "",
+        topics: Array.isArray(t.topics) ? t.topics.map(String) : [],
+        ...(Array.isArray(t.user_decisions)
+            ? { user_decisions: t.user_decisions.map(String) }
+            : {}),
+        ...(Array.isArray(t.user_constraints)
+            ? { user_constraints: t.user_constraints.map(String) }
+            : {}),
+        model: typeof t.model === "string" ? t.model : "unknown",
+        provider: typeof t.provider === "string" && t.provider.length > 0
+            ? t.provider
+            : "claude_cli_legacy",
+        version: typeof t.version === "string" && t.version.length > 0 ? t.version : "0",
+        score_breakdown: scoreBreakdown,
+        debug,
+    };
+}
+function defaultScoreForLane(lane) {
+    switch (lane) {
+        case "archive_only":
+            return 0.15;
+        case "review":
+            return 0.5;
+        case "promote_to_extract":
+            return 0.85;
+    }
+}
+function isScoreBreakdown(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const v = value;
+    return (typeof v.heuristics === "number" &&
+        typeof v.source_quality === "number" &&
+        typeof v.conversation_density === "number" &&
+        typeof v.repo_file_references === "number" &&
+        typeof v.decision_language === "number" &&
+        typeof v.model_judgment === "number" &&
+        typeof v.total === "number");
+}
+function isScoringDebug(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const v = value;
+    return isScoreBreakdown(v.score_breakdown) && Array.isArray(v.signals);
+}
+//# sourceMappingURL=triage-provider.js.map

package/dist/src/capture/triage-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-provider.js","sourceRoot":"","sources":["../../../src/capture/triage-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,cAAc,EACd,WAAW,GAKZ,MAAM,kBAAkB,CAAC;AAI1B,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AA6ClC;;;GAGG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAG7B;IACA;IAHlB,YACE,OAAe,EACC,QAAgB,EAChB,MAAc;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAGxB;IAFlB,YACE,OAAe,EACC,OAAe,EAC/B,OAA6B;QAE7B,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAHR,YAAO,GAAP,OAAO,CAAQ;QAI/B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAoD,CAAC;IAC3E,MAAM,QAAQ,GACZ,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC1E,CAAC,CAAC,CAAC,CAAC,QAAQ;QACZ,CAAC,CAAC,QAAQ,CAAC;IACf,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GACT,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,CAAC,CAAC,KAAK;QACT,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,QAAQ,CAAC;YACjC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAC3B,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEtD,MAAM,cAAc,GAAG,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC;QACxD,CAAC,CAAC,CAAC,CAAC,eAAe;QACnB,CAAC,CAAC;YACE,UAAU,EAAE,CAAC;YACb,cAAc,EAAE,CAAC;YACjB,oBAAoB,EAAE,CAAC;YACvB,oBAAoB,EAAE,CAAC;YACvB,iBAAiB,EAAE,CAAC;YACpB,cAAc,EAAE,CAAC;YACjB,KAAK,EAAE,KAAK;SACb,CAAC;IAEN,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC;QACnC,CAAC,CAAC,CAAC,CAAC,KAAK;QACT,CAAC,CAAC;YACE,eAAe,EAAE,cAAc;YAC/B,OAAO,EAAE,EAAE;SACZ,CAAC;IAEN,OAAO;QACL,QAAQ;QACR,IAAI;QACJ,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/D,KAAK;QACL,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;QAC7D,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACvD,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC3D,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YACjC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACnC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACxD,QAAQ,EACN,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YACrD,CAAC,CAAC,CAAC,CAAC,QAAQ;YACZ,CAAC,CAAC,mBAAmB;QACzB,OAAO,EACL,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;QACzE,eAAe,EAAE,cAAc;QAC/B,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAgB;IAC3C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,GAAG,CAAC;QACb,KAAK,oBAAoB;YACvB,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;QACpC,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ;QAC1C,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ;QAC1C,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ;QACvC,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;QACpC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAC5B,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACzE,CAAC"}

package/dist/src/capture/triage.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Triage entry point. Re-exports the Slice 5 contract and provides
+ * a default Codex-CLI-backed `triageConversation()` for callers that
+ * don't manage their own provider lifecycle (e.g. auto-capture).
+ *
+ * Batch operators that explicitly need OpenAI should construct an
+ * OpenAITriageProvider directly, wrap it with withBatchGuards(), and
+ * reuse it across the batch so cost cap + parallelism are enforced at
+ * the batch boundary.
+ */
+import type { TriageInput, TriageProvider, TriageResult } from "./triage-provider.js";
+export { TRIAGE_VERSION, BatchCostExceededError, normalizeTriageResult, } from "./triage-provider.js";
+export type { TriageDecision, TriageInput, TriageProvider, TriageResult, } from "./triage-provider.js";
+export { ARCHIVE_ONLY_THRESHOLD, PROMOTE_TO_EXTRACT_THRESHOLD, decisionToLane, laneFromScore, laneToDecision, resolveLane, scoreHistoricalTriage, } from "./triage-lane.js";
+export type { TriageLane, TriageScoreBreakdown, TriageScoringDebug, } from "./triage-lane.js";
+/**
+ * Test-only seam: install a custom provider as the module default.
+ * Call with `null` to reset to the configured-selector-backed provider.
+ */
+export declare function setDefaultTriageProvider(provider: TriageProvider | null): void;
+/**
+ * Triage a conversation using the default Codex CLI provider.
+ */
+export declare function triageConversation(content: string): Promise<TriageResult>;
+/**
+ * Triage with a caller-supplied provider. Used when the caller manages
+ * batch budget + parallelism, or wants to inject a stub.
+ */
+export declare function triageWith(provider: TriageProvider, input: TriageInput): Promise<TriageResult>;
+//# sourceMappingURL=triage.d.ts.map

package/dist/src/capture/triage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage.d.ts","sourceRoot":"","sources":["../../../src/capture/triage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACd,YAAY,EACb,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,cAAc,EACd,WAAW,EACX,cAAc,EACd,YAAY,GACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,cAAc,EACd,aAAa,EACb,cAAc,EACd,WAAW,EACX,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,UAAU,EACV,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAoB1B;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAE9E;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,CAAC,CAEvB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,YAAY,CAAC,CAEvB"}

package/dist/src/capture/triage.js

@@ -0,0 +1,50 @@
+/**
+ * Triage entry point. Re-exports the Slice 5 contract and provides
+ * a default Codex-CLI-backed `triageConversation()` for callers that
+ * don't manage their own provider lifecycle (e.g. auto-capture).
+ *
+ * Batch operators that explicitly need OpenAI should construct an
+ * OpenAITriageProvider directly, wrap it with withBatchGuards(), and
+ * reuse it across the batch so cost cap + parallelism are enforced at
+ * the batch boundary.
+ */
+import { createConfiguredTriageProvider } from "./triage-provider-factory.js";
+export { TRIAGE_VERSION, BatchCostExceededError, normalizeTriageResult, } from "./triage-provider.js";
+export { ARCHIVE_ONLY_THRESHOLD, PROMOTE_TO_EXTRACT_THRESHOLD, decisionToLane, laneFromScore, laneToDecision, resolveLane, scoreHistoricalTriage, } from "./triage-lane.js";
+let defaultProvider = null;
+/**
+ * Lazily constructed default provider — fallback only.
+ *
+ * The daemon's main.ts installs the configured provider at boot. This lazy
+ * fallback exists for tests and one-shot CLI uses where main.ts hasn't run;
+ * it honours the same `capture.triage.provider` selector via the factory's
+ * process-wide configured name (codex_cli unless something set it otherwise),
+ * so a one-shot run picks the same worker the daemon would.
+ */
+function getDefaultProvider() {
+    if (defaultProvider === null) {
+        defaultProvider = createConfiguredTriageProvider();
+    }
+    return defaultProvider;
+}
+/**
+ * Test-only seam: install a custom provider as the module default.
+ * Call with `null` to reset to the configured-selector-backed provider.
+ */
+export function setDefaultTriageProvider(provider) {
+    defaultProvider = provider;
+}
+/**
+ * Triage a conversation using the default Codex CLI provider.
+ */
+export async function triageConversation(content) {
+    return getDefaultProvider().triage({ content });
+}
+/**
+ * Triage with a caller-supplied provider. Used when the caller manages
+ * batch budget + parallelism, or wants to inject a stub.
+ */
+export async function triageWith(provider, input) {
+    return provider.triage(input);
+}
+//# sourceMappingURL=triage.js.map

package/dist/src/capture/triage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage.js","sourceRoot":"","sources":["../../../src/capture/triage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAO9E,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAO9B,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,cAAc,EACd,aAAa,EACb,cAAc,EACd,WAAW,EACX,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAO1B,IAAI,eAAe,GAA0B,IAAI,CAAC;AAElD;;;;;;;;GAQG;AACH,SAAS,kBAAkB;IACzB,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,eAAe,GAAG,8BAA8B,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAA+B;IACtE,eAAe,GAAG,QAAQ,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe;IAEf,OAAO,kBAAkB,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAwB,EACxB,KAAkB;IAElB,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC"}

package/dist/src/capture/user-statements-recheck.d.ts

@@ -0,0 +1,22 @@
+import type { AssistantTextLookup } from "./assistant-text-lookup.js";
+/** Bump when `verifyUserStatements` starts refusing something it used to keep. */
+export declare const USER_STATEMENT_RULES = "4";
+export interface RecheckReport {
+    /** Conversations that held at least one marked entry. */
+    conversations: number;
+    /** Marked entries removed because the current rules refuse them. */
+    removed: number;
+    /** Conversations left as they were because they could not be re-read whole. */
+    skipped: number;
+}
+/**
+ * The entries that stay, in order. An entry goes only on positive grounds:
+ * its user turn marks it as not the user's (a paste tag, a quotation), or it
+ * can be re-read as a typed sentence and today's rules refuse it. An entry no
+ * readable user turn holds (a recovered session keeps excerpts, not turns)
+ * stays: missing context is not proof of wrong authorship.
+ */
+export declare function stillAttributable(content: string, decisions: readonly string[], lookup?: AssistantTextLookup): Promise<string[]>;
+/** Null when this data directory was already fully checked under the current rules. */
+export declare function recheckStoredUserStatements(dataDir: string, lookup?: AssistantTextLookup): Promise<RecheckReport | null>;
+//# sourceMappingURL=user-statements-recheck.d.ts.map

package/dist/src/capture/user-statements-recheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-statements-recheck.d.ts","sourceRoot":"","sources":["../../../src/capture/user-statements-recheck.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAOtE,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAIxC,MAAM,WAAW,aAAa;IAC5B,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;CACjB;AAqBD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,MAAM,EAAE,CAAC,CAoBnB;AAwCD,uFAAuF;AACvF,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CA8E/B"}

package/dist/src/capture/user-statements-recheck.js

@@ -0,0 +1,181 @@
+/**
+ * Re-check stored "said by the user" entries when the attribution rules change.
+ *
+ * An entry kept under older rules can be one the current rules refuse (a
+ * sentence from a report the user forwarded). Such an entry, and only such an
+ * entry, is removed from
+ * the conversation's raw artifact and from every row of it. The conversation
+ * text itself is untouched, so the passage stays available as source evidence.
+ *
+ * Runs in the serving daemon only and never calls a model: it only re-reads
+ * what is already stored. It is marked done for a rules version only when
+ * every conversation was fully corrected, so a rebuild from the raw artifacts
+ * cannot bring a refused entry back.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { eqFilter } from "../storage/filter.js";
+import { getTable } from "../storage/tables.js";
+import { decodeUserStatement, readBackUserStatement, verifyUserStatementsWithEvidence, } from "./user-statements.js";
+/** Bump when `verifyUserStatements` starts refusing something it used to keep. */
+export const USER_STATEMENT_RULES = "4";
+const RULES_FILE = "user-statements.rules";
+const TABLES = ["conversations_hot", "conversations_cold"];
+/**
+ * The user turns of a stored transcript, read back from its turn labels. Good
+ * enough for a re-check, which can only remove entries: a wrong split never
+ * creates a "said by the user" claim.
+ */
+function storedUserSpans(content) {
+    // A recovered session stores separate excerpts: a turn stops where the next
+    // excerpt starts, so one excerpt's marks never hide another's text.
+    const labels = [...content.matchAll(/(?:^|\n\n)(User|Assistant): |\n### Passage \d+\n/g)];
+    const spans = [];
+    labels.forEach((label, i) => {
+        if (label[1] !== "User")
+            return;
+        const start = label.index + label[0].length;
+        const next = labels[i + 1];
+        spans.push({ start, end: next ? next.index : content.length });
+    });
+    return spans;
+}
+/**
+ * The entries that stay, in order. An entry goes only on positive grounds:
+ * its user turn marks it as not the user's (a paste tag, a quotation), or it
+ * can be re-read as a typed sentence and today's rules refuse it. An entry no
+ * readable user turn holds (a recovered session keeps excerpts, not turns)
+ * stays: missing context is not proof of wrong authorship.
+ */
+export async function stillAttributable(content, decisions, lookup) {
+    const userSpans = storedUserSpans(content);
+    const kept = [];
+    for (const entry of decisions) {
+        const statement = decodeUserStatement(entry);
+        if (statement) {
+            const claim = {
+                content,
+                userSpans,
+                decisions: statement.kind === "decision" ? [statement.quote] : [],
+                constraints: statement.kind === "constraint" ? [statement.quote] : [],
+            };
+            const same = (v) => v.quote === statement.quote;
+            const read = readBackUserStatement(content, userSpans, statement.quote);
+            if (read === "marked")
+                continue;
+            if (read === "typed" && !(await verifyUserStatementsWithEvidence(claim, lookup)).some(same))
+                continue;
+        }
+        kept.push(entry);
+    }
+    return kept;
+}
+function rawArtifactPath(dataDir, source, conversationId) {
+    const rawDir = path.join(dataDir, "raw", "conversations", source);
+    if (!fs.existsSync(rawDir))
+        return null;
+    const name = fs.readdirSync(rawDir).find((f) => f.endsWith(`_${conversationId}.json`));
+    return name ? path.join(rawDir, name) : null;
+}
+async function conversationsWithStatements() {
+    const byId = new Map();
+    for (const tableName of TABLES) {
+        const rows = await getTable(tableName)
+            .query()
+            // A coarse prefilter (the column holds JSON, so the quote is escaped);
+            // `decodeUserStatement` below decides.
+            .where("decisions LIKE '%User decision: %' OR decisions LIKE '%User constraint: %'")
+            .select(["id", "source", "content", "decisions", "parent_id"])
+            .toArray();
+        for (const row of rows) {
+            const decisions = JSON.parse(String(row["decisions"]));
+            if (!decisions.some((entry) => decodeUserStatement(entry)))
+                continue;
+            const parent = typeof row["parent_id"] === "string" ? row["parent_id"] : "";
+            const id = parent || String(row["id"]);
+            const conversation = byId.get(id) ?? { id, source: String(row["source"]), chunked: Boolean(parent), rows: [] };
+            conversation.rows.push({ table: tableName, id: String(row["id"]), content: String(row["content"]), decisions });
+            byId.set(id, conversation);
+        }
+    }
+    return [...byId.values()];
+}
+/** Null when this data directory was already fully checked under the current rules. */
+export async function recheckStoredUserStatements(dataDir, lookup) {
+    const rulesFile = path.join(dataDir, RULES_FILE);
+    if (fs.existsSync(rulesFile) && fs.readFileSync(rulesFile, "utf8").trim() === USER_STATEMENT_RULES) {
+        return null;
+    }
+    const report = { conversations: 0, removed: 0, skipped: 0 };
+    const readable = [];
+    for (const conversation of await conversationsWithStatements()) {
+        report.conversations++;
+        // The raw artifact holds the whole transcript and is what a rebuild reads.
+        const rawPath = rawArtifactPath(dataDir, conversation.source, conversation.id);
+        const raw = rawPath
+            ? JSON.parse(fs.readFileSync(rawPath, "utf8"))
+            : null;
+        // A chunk holds part of the transcript: without the artifact a chunked
+        // conversation cannot be re-read whole, so it is left for a later run.
+        if (!raw && conversation.chunked) {
+            report.skipped++;
+            continue;
+        }
+        readable.push({
+            conversation,
+            rawPath,
+            raw,
+            content: raw && typeof raw["content"] === "string" ? raw["content"] : conversation.rows[0].content,
+            stored: raw && Array.isArray(raw["decisions"]) ? raw["decisions"] : conversation.rows[0].decisions,
+        });
+    }
+    if (lookup) {
+        // Ask for every passage at once: one pass over the session files, not one
+        // per entry. The lookup remembers its answers for the pass below.
+        const asked = [];
+        const collector = {
+            find: async (passages) => {
+                asked.push(...passages);
+                return new Set();
+            },
+        };
+        for (const { content, stored } of readable)
+            await stillAttributable(content, stored, collector);
+        await lookup.find(asked);
+    }
+    for (const { conversation, rawPath, raw, content, stored } of readable) {
+        const refused = new Set(stored);
+        for (const entry of await stillAttributable(content, stored, lookup))
+            refused.delete(entry);
+        for (const row of conversation.rows) {
+            for (const entry of row.decisions) {
+                // A row entry the artifact no longer vouches for is refused too.
+                if (decodeUserStatement(entry) && !stored.includes(entry))
+                    refused.add(entry);
+            }
+        }
+        if (refused.size === 0)
+            continue;
+        report.removed += refused.size;
+        if (raw && rawPath) {
+            raw["decisions"] = stored.filter((entry) => !refused.has(entry));
+            const tmp = `${rawPath}.tmp.${process.pid}`;
+            fs.writeFileSync(tmp, JSON.stringify(raw, null, 2));
+            fs.renameSync(tmp, rawPath);
+        }
+        for (const row of conversation.rows) {
+            const kept = row.decisions.filter((entry) => !refused.has(entry));
+            if (kept.length === row.decisions.length)
+                continue;
+            await getTable(row.table).update({
+                where: eqFilter("id", row.id),
+                values: { decisions: JSON.stringify(kept) },
+            });
+        }
+    }
+    // Done only when nothing was left behind; otherwise the next start retries.
+    if (report.skipped === 0)
+        fs.writeFileSync(rulesFile, USER_STATEMENT_RULES);
+    return report;
+}
+//# sourceMappingURL=user-statements-recheck.js.map

package/dist/src/capture/user-statements-recheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-statements-recheck.js","sourceRoot":"","sources":["../../../src/capture/user-statements-recheck.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAC3C,MAAM,MAAM,GAAG,CAAC,mBAAmB,EAAE,oBAAoB,CAAU,CAAC;AAWpE;;;;GAIG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,SAA4B,EAC5B,MAA4B;IAE5B,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,KAAK,GAAG;gBACZ,OAAO;gBACP,SAAS;gBACT,SAAS,EAAE,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;gBACjE,WAAW,EAAE,SAAS,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;aACtE,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC;YACnE,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YACxE,IAAI,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAChC,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,gCAAgC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;QACxG,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,MAAc,EAAE,cAAsB;IAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,cAAc,OAAO,CAAC,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAUD,KAAK,UAAU,2BAA2B;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8B,CAAC;IACnD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC;aACnC,KAAK,EAAE;YACR,uEAAuE;YACvE,uCAAuC;aACtC,KAAK,CAAC,4EAA4E,CAAC;aACnF,MAAM,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;aAC7D,OAAO,EAAE,CAAC;QACb,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAa,CAAC;YACnE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;gBAAE,SAAS;YACrE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,MAAM,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YACvC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAC/G,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YAChH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAe,EACf,MAA4B;IAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,oBAAoB,EAAE,CAAC;QACnG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAkB,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAMT,EAAE,CAAC;IACR,KAAK,MAAM,YAAY,IAAI,MAAM,2BAA2B,EAAE,EAAE,CAAC;QAC/D,MAAM,CAAC,aAAa,EAAE,CAAC;QACvB,2EAA2E;QAC3E,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,OAAO;YACjB,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAA6B;YAC3E,CAAC,CAAC,IAAI,CAAC;QACT,uEAAuE;QACvE,uEAAuE;QACvE,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,YAAY;YACZ,OAAO;YACP,GAAG;YACH,OAAO,EAAE,GAAG,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,OAAO;YACnG,MAAM,EAAE,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,WAAW,CAAc,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,SAAS;SAClH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,0EAA0E;QAC1E,kEAAkE;QAClE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAwB;YACrC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBACvB,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBACxB,OAAO,IAAI,GAAG,EAAE,CAAC;YACnB,CAAC;SACF,CAAC;QACF,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,QAAQ;YAAE,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAChG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5F,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;YACpC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClC,iEAAiE;gBACjE,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;QAC/B,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,GAAG,OAAO,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;YAC5C,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACpD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YAClE,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,MAAM;gBAAE,SAAS;YACnD,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;gBAC/B,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/capture/user-statements.d.ts

@@ -0,0 +1,84 @@
+import type { TextSpan } from "../ingestion/parsers/types.js";
+import { type AssistantTextLookup } from "./assistant-text-lookup.js";
+export type UserStatementKind = "decision" | "constraint";
+export interface UserStatement {
+    kind: UserStatementKind;
+    /** The user's words, exactly as they appear in the stored transcript. */
+    quote: string;
+}
+/** A kept statement, with where its quote starts in the transcript. */
+export interface VerifiedUserStatement extends UserStatement {
+    offset: number;
+}
+/**
+ * Longest sentence kept. Recall shows a kept quote whole or not at all, so
+ * this is also the most one card can cost.
+ */
+export declare const MAX_QUOTE_CHARS = 400;
+export declare function encodeUserStatement(statement: UserStatement): string;
+/** Null for any entry capture did not write (manual saves, imports, older rows). */
+export declare function decodeUserStatement(entry: string): UserStatement | null;
+/**
+ * Keep the proposed quotes that the user demonstrably wrote. Without
+ * `userSpans` (a source whose parser cannot tell who typed what) nothing is
+ * kept.
+ */
+export declare function verifyUserStatements(input: {
+    content: string;
+    userSpans: readonly TextSpan[] | undefined;
+    decisions: readonly string[] | undefined;
+    constraints: readonly string[] | undefined;
+    /**
+     * The statements stored for this session at its previous capture. They are
+     * checked like a new proposal and stay when they pass: the worker proposes
+     * anew each time a session grows, and a sentence it leaves out this time was
+     * not withdrawn by the user.
+     */
+    earlier?: readonly UserStatement[] | undefined;
+    /** Whether an assistant message in another session holds this passage. */
+    assistantWrote?: ((passage: string) => boolean) | undefined;
+}): VerifiedUserStatement[];
+/**
+ * `verifyUserStatements`, with the question "did an assistant write this
+ * passage?" answered from other sessions. The passages are collected first,
+ * looked up in one pass, then the statements are verified against the answers.
+ */
+export declare function verifyUserStatementsWithEvidence(input: Omit<Parameters<typeof verifyUserStatements>[0], "assistantWrote">, lookup: AssistantTextLookup | undefined): Promise<VerifiedUserStatement[]>;
+/**
+ * How a stored quote reads back from its transcript:
+ * - "typed": it sits in a user turn, outside anything marked as not theirs;
+ * - "marked": it sits in a user turn only inside a region marked as not theirs
+ *   (a paste tag, a blockquote, a code fence, a pasted transcript);
+ * - "absent": no readable user turn holds it (a recovered session keeps
+ *   excerpts, not turns), so nothing can be said about who wrote it.
+ */
+export type ReadBack = "typed" | "marked" | "absent";
+export declare function readBackUserStatement(content: string, userSpans: readonly TextSpan[], quote: string): ReadBack;
+/**
+ * Whether a typed turn holds the passage as the user's own words, going by the
+ * turn alone: outside anything marked as not theirs (a paste tag, a blockquote,
+ * a code fence, a pasted transcript, a quotation) and not under a sentence
+ * that names what follows as someone else's or only points at it. A claim to
+ * the text ("these are my decisions") is not taken on trust here.
+ *
+ * It answers one question for the assistant-text lookup: can this turn show
+ * that the user wrote the passage before an assistant in another session did?
+ */
+export declare function ownsPassage(turn: string, passage: string): boolean;
+/**
+ * Sign the marked entries capture verified, bound to the transcript they were
+ * verified against.
+ */
+export declare function sealUserStatements(dataDir: string, decisions: readonly string[], content: string): string;
+/** A marked entry read as the plain text it claims, with no speaker. */
+export declare function withoutUserMarkers(decisions: readonly string[]): string[];
+/**
+ * The decisions a save may store: marked entries are kept only with the seal
+ * capture gave them for this exact transcript.
+ */
+export declare function sealedDecisions(dataDir: string, payload: {
+    decisions?: string[] | undefined;
+    content?: string | undefined;
+    user_statements_seal?: string | undefined;
+}): string[] | undefined;
+//# sourceMappingURL=user-statements.d.ts.map

package/dist/src/capture/user-statements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-statements.d.ts","sourceRoot":"","sources":["../../../src/capture/user-statements.ts"],"names":[],"mappings":"AAgDA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAkC,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtG,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,YAAY,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;CACf;AAOD,uEAAuE;AACvE,MAAM,WAAW,qBAAsB,SAAQ,aAAa;IAC1D,MAAM,EAAE,MAAM,CAAC;CAChB;AAGD;;;GAGG;AACH,eAAO,MAAM,eAAe,MAAM,CAAC;AAUnC,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,aAAa,GAAG,MAAM,CAEpE;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CASvE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,SAAS,QAAQ,EAAE,GAAG,SAAS,CAAC;IAC3C,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACzC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3C;;;;;OAKG;IACH,OAAO,CAAC,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,CAAC;IAC/C,0EAA0E;IAC1E,cAAc,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;CAC7D,GAAG,qBAAqB,EAAE,CA0D1B;AAED;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,EACzE,MAAM,EAAE,mBAAmB,GAAG,SAAS,GACtC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAmBlC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAErD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,SAAS,QAAQ,EAAE,EAC9B,KAAK,EAAE,MAAM,GACZ,QAAQ,CAeV;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAsBlE;AAoZD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,OAAO,EAAE,MAAM,GACd,MAAM,CAMR;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAEzE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GACrH,MAAM,EAAE,GAAG,SAAS,CAUtB"}