opensquid 0.5.395

package/dist/runtime/chat/watch_cli.js

@@ -0,0 +1,124 @@
+/**
+ * `opensquid chat watch` — the inbox stream-source for the harness `Monitor`
+ * tool (Track T-TR, TR.1). Resolves the active project's inbox JSONL and
+ * streams NEW inbound messages to stdout, one formatted line per message.
+ *
+ * This is a NEW top-level `chat` verb group, distinct from `opensquid setup
+ * chat` (the chat-agent wizard). The agent wraps it:
+ *   Monitor({ command: "node dist/cli.js chat watch", persistent: true })
+ * so each appended message → one in-chat event (no cron — see
+ * docs/tasks/T-telegram-realtime.md L3 on why auto-start is an agent
+ * convention, not a CLI side-effect).
+ *
+ * Umbrella resolution (T-CHAT-AS-TERMINAL CAT.1c): chat is keyed by UMBRELLA,
+ * not per-cwd project_uuid. The cwd is resolved to its umbrella via
+ * `loadChannelsConfig()` + `resolveUmbrellaForCwd` (longest-prefix over
+ * `members`). `channels.json` is synthesized at the CAT.1d cutover, so an
+ * absent config / unresolved umbrella exits with a clear message (graceful,
+ * never throws). The `--umbrella` flag overrides resolution for tests + ops.
+ *
+ * Imports from: commander, ../../channels/routing.js, ../paths.js, ./watch.js.
+ * Imported by: src/cli.ts (registers the `chat` parent verb).
+ */
+import { runMigration } from '../../channels/migrate.js';
+import { loadChannelsConfig, resolveUmbrellaForCwd } from '../../channels/routing.js';
+import { umbrellaInboxFile, umbrellaLiveSessionLease } from '../paths.js';
+import { HEARTBEAT_MS, refreshLease, removeLease, resolveSessionId, writeLease, } from './live_session_lease.js';
+import { startInboundWatcher } from './inbound_watch.js';
+import { formatRow, watchInbox } from './watch.js';
+export function registerChatWatch(program, deps = {}) {
+    const watch = deps.watch ?? watchInbox;
+    const startInbound = deps.startInbound ?? startInboundWatcher;
+    const migrate = deps.migrate ?? runMigration;
+    const chat = program.command('chat').description('Live chat inbound/outbound helpers.');
+    // CAT.1d — `opensquid chat migrate [--force]`. One-shot legacy→umbrella
+    // cutover: synthesize `~/.opensquid/channels.json` from the per-project
+    // `chat-routing.json` + `projects.json`, then copy the per-uuid inbox rows
+    // into the umbrella keyspace (non-destructive, idempotent). READ-ONLY w.r.t.
+    // the legacy files. `--force` overwrites an existing channels.json.
+    chat
+        .command('migrate')
+        .description('Synthesize channels.json from legacy per-project routing + copy inbox data.')
+        .option('--force', 'overwrite an existing channels.json', false)
+        .action(async (opts) => {
+        const res = await migrate({ force: opts.force });
+        const out = process.stdout;
+        out.write(res.configWritten
+            ? `channels.json written: ${res.configPath}\n`
+            : `channels.json already present (use --force to overwrite): ${res.configPath}\n`);
+        out.write(`umbrellas: ${String(res.config.umbrellas.length)}\n`);
+        for (const u of res.config.umbrellas) {
+            const rows = res.copied[u.id] ?? 0;
+            out.write(`  ${u.id}: ${String(u.members.length)} member(s), ${String(rows)} inbox row(s) copied\n`);
+        }
+    });
+    chat
+        .command('watch')
+        .description('Stream NEW inbound messages to stdout for the harness Monitor (no cron).')
+        .option('--platform <name>', 'inbox platform (telegram, discord, …)', 'telegram')
+        .option('--raw', 'emit raw JSONL rows instead of the formatted line', false)
+        .option('--mentions-only', 'only emit rows where mentions_bot is true', false)
+        .option('--umbrella <id>', 'override cwd→umbrella resolution')
+        .action(async (opts) => {
+        // CAT.1c: resolve the cwd to its UMBRELLA via channels.json (the single
+        // authoritative routing source). `--umbrella` overrides for tests/ops.
+        // Absent config / unresolved umbrella → exit cleanly (channels.json is
+        // synthesized at the CAT.1d cutover; before then there is no inbox).
+        let umbrellaId = opts.umbrella ?? null;
+        if (umbrellaId === null) {
+            const cfg = await loadChannelsConfig();
+            umbrellaId = cfg === null ? null : resolveUmbrellaForCwd(cfg, process.cwd());
+        }
+        if (umbrellaId === null || umbrellaId === '') {
+            process.stderr.write('chat watch: no umbrella for this cwd. Pass --umbrella, or add a ' +
+                'matching `members` prefix to an umbrella in ~/.opensquid/channels.json ' +
+                '(run `opensquid setup chat` to wire it).\n');
+            process.exitCode = 1;
+            return;
+        }
+        const leasePath = umbrellaLiveSessionLease(umbrellaId);
+        // Claim the live-session lease so the always-on daemon stays silent while
+        // this session handles the umbrella (T-DEL arbitration). Heartbeat keeps it
+        // fresh; cleanup on exit + a SIGINT/SIGTERM handler remove it (staleness is
+        // the fallback if we're killed ungracefully).
+        await writeLease(leasePath, resolveSessionId());
+        const heartbeat = setInterval(() => {
+            void refreshLease(leasePath).catch(() => undefined);
+        }, HEARTBEAT_MS);
+        heartbeat.unref();
+        const stopLease = async () => {
+            clearInterval(heartbeat);
+            process.removeListener('SIGINT', onSignal);
+            process.removeListener('SIGTERM', onSignal);
+            await removeLease(leasePath);
+        };
+        function onSignal() {
+            void stopLease().finally(() => process.exit(0));
+        }
+        process.once('SIGINT', onSignal);
+        process.once('SIGTERM', onSignal);
+        // LL.3 (2026-05-30) — start the per-umbrella inbound watcher in
+        // parallel with the existing stdout streamer. The watcher
+        // dispatches inbound rows as `inbound_channel` events to the
+        // live session's loaded packs; the streamer keeps the
+        // `Monitor`-stdout contract intact for backward-compat with
+        // existing chat watch consumers.
+        const stopInbound = await startInbound();
+        try {
+            await watch({
+                inboxFile: umbrellaInboxFile(umbrellaId, opts.platform),
+                mentionsOnly: opts.mentionsOnly,
+                format: opts.raw ? (r) => JSON.stringify(r) : formatRow,
+                // Flush one line per message — Monitor reads stdout line-delimited.
+                out: (line) => process.stdout.write(line + '\n'),
+                onWarn: (message) => process.stderr.write(message + '\n'),
+            });
+        }
+        finally {
+            await stopInbound().catch(() => undefined);
+            await stopLease();
+        }
+    });
+    return chat;
+}
+//# sourceMappingURL=watch_cli.js.map

package/dist/runtime/chat/watch_cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch_cli.js","sourceRoot":"","sources":["../../../src/runtime/chat/watch_cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,UAAU,GACX,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAsC,MAAM,YAAY,CAAC;AA0BvF,MAAM,UAAU,iBAAiB,CAAC,OAAgB,EAAE,OAAsB,EAAE;IAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;IAExF,wEAAwE;IACxE,wEAAwE;IACxE,2EAA2E;IAC3E,6EAA6E;IAC7E,oEAAoE;IACpE,IAAI;SACD,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6EAA6E,CAAC;SAC1F,MAAM,CAAC,SAAS,EAAE,qCAAqC,EAAE,KAAK,CAAC;SAC/D,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3B,GAAG,CAAC,KAAK,CACP,GAAG,CAAC,aAAa;YACf,CAAC,CAAC,0BAA0B,GAAG,CAAC,UAAU,IAAI;YAC9C,CAAC,CAAC,6DAA6D,GAAG,CAAC,UAAU,IAAI,CACpF,CAAC;QACF,GAAG,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACnC,GAAG,CAAC,KAAK,CACP,KAAK,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,mBAAmB,EAAE,uCAAuC,EAAE,UAAU,CAAC;SAChF,MAAM,CAAC,OAAO,EAAE,mDAAmD,EAAE,KAAK,CAAC;SAC3E,MAAM,CAAC,iBAAiB,EAAE,2CAA2C,EAAE,KAAK,CAAC;SAC7E,MAAM,CAAC,iBAAiB,EAAE,kCAAkC,CAAC;SAC7D,MAAM,CAAC,KAAK,EAAE,IAAsB,EAAE,EAAE;QACvC,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,qEAAqE;QACrE,IAAI,UAAU,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QACvC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACvC,UAAU,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kEAAkE;gBAChE,yEAAyE;gBACzE,4CAA4C,CAC/C,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;QACvD,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,8CAA8C;QAC9C,MAAM,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,KAAK,YAAY,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,CAAC,EAAE,YAAY,CAAC,CAAC;QACjB,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,SAAS,GAAG,KAAK,IAAmB,EAAE;YAC1C,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC5C,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,SAAS,QAAQ;YACf,KAAK,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAElC,gEAAgE;QAChE,0DAA0D;QAC1D,6DAA6D;QAC7D,sDAAsD;QACtD,4DAA4D;QAC5D,iCAAiC;QACjC,MAAM,WAAW,GAAG,MAAM,YAAY,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC;gBACV,SAAS,EAAE,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC;gBACvD,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;gBACjE,oEAAoE;gBACpE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;gBAChD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;aAC1D,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,SAAS,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IACL,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/runtime/compression_orchestrator.d.ts

@@ -0,0 +1,75 @@
+/**
+ * CMP.4 — compression orchestrator (THIN policy caller).
+ *
+ * Authoritative spec: `docs/tasks/T-compression.md` CMP.4 (the
+ * "⚠️ ARCHITECTURE REVISION" block) + pre-research §4 D1/D2/D3
+ * (`docs/research/T-compression-pre-research-2026-05-27.md`).
+ *
+ * ⚠️ ARCHITECTURE REVISION (2026-05-27): the verify+delete safety
+ * contract MOVED INTO the loop-engine (`memory.consolidate`). The
+ * loop-engine is a UNIVERSAL substrate, so recall-replay verification +
+ * gated non-immune predecessor deletion is universal memory INTEGRITY
+ * every consumer needs — NOT opensquid policy. The engine guarantees
+ * the safe-HOW (atomic, race-free, fail-closed); opensquid decides the
+ * WHEN/WHAT.
+ *
+ * THIS MODULE NO LONGER ISSUES ANY `memory.delete` AND NO LONGER RUNS
+ * RECALL-REPLAY. Both now live inside the engine's `memory.consolidate`
+ * op. opensquid's role is purely policy:
+ *
+ *   D1 (WHEN): only run for a group whose satisfaction probe answered
+ *     "satisfied". No satisfied probe → no-op (return []).
+ *   WHAT: read the group's CMP.3 candidate windows; call
+ *     the TS `consolidate(ids)` (RES-4b) per window — engine-free.
+ *   SURFACE: report the engine's outcome (deleted / kept_immune /
+ *     verified); emit a drift event when `!verified` (the engine kept
+ *     `Mc` alongside the predecessors — nothing was lost, but the
+ *     window wasn't safe to consolidate yet).
+ *
+ * The engine's `memory.consolidate` enforces the locked D2/D3 contract
+ * internally: a predecessor is force-deleted ONLY after (a) compression
+ * succeeds, (b) the recall-replay gate passes for EVERY predecessor,
+ * and (c) that predecessor is not user-cited
+ * (`consumed_by_user_lessons === 0`). Any failure → delete nothing,
+ * `verified: false`. The memory trace is never lost.
+ *
+ * Imports from: ../engine/client.js, ./drift_catalog.js,
+ *   ./satisfaction_probe.js, ./wedge/compress_candidates.js.
+ * Imported by: (a session-boundary / automation-cycle trigger, TBD wiring).
+ */
+import type { ConsolidateOutcome } from '../rag/memory/consolidate.js';
+/** Outcome of one window's consolidation attempt — for caller telemetry + tests. */
+export interface CompressionOutcome {
+    group: string;
+    promotedLessonId: string;
+    /** The minted compressed memory id (null only if compression itself failed). */
+    mcId: string | null;
+    /** Predecessors the engine force-deleted (verified + not user-cited). */
+    deleted: string[];
+    /** Predecessors the engine KEPT because they are user-cited (immunity). */
+    keptImmune: string[];
+    /**
+     * True when nothing was deleted for this window — either the engine's
+     * verify gate missed (`verified: false`) or a consolidate error. Mc
+     * (if minted) is kept alongside the predecessors; the trace is intact.
+     */
+    skipped: boolean;
+    /** Reason a window was skipped, for the drift event + telemetry. */
+    reason?: string;
+}
+/**
+ * Run consolidation for one satisfied group. Reads the group's
+ * candidate windows (CMP.3) and calls the engine's atomic
+ * `memory.consolidate` per window (CMP.1 bridge + the revised engine
+ * op). Returns one outcome per window.
+ *
+ * D1: returns an empty result immediately when the group's satisfaction
+ * probe is absent or not "satisfied" — no consolidation requested.
+ *
+ * The orchestrator does NOT verify recall-replay or delete predecessors
+ * — the engine's `memory.consolidate` does both atomically and
+ * fail-closed. opensquid only surfaces the result + emits drift on a
+ * non-verified outcome.
+ */
+export declare function runCompression(sessionId: string, group: string, consolidateWindow: (ids: string[]) => Promise<ConsolidateOutcome>): Promise<CompressionOutcome[]>;
+//# sourceMappingURL=compression_orchestrator.d.ts.map

package/dist/runtime/compression_orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression_orchestrator.d.ts","sourceRoot":"","sources":["../../src/runtime/compression_orchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAUvE,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,gFAAgF;IAChF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,yEAAyE;IACzE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,iBAAiB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,kBAAkB,CAAC,GAChE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAiD/B"}

package/dist/runtime/compression_orchestrator.js

@@ -0,0 +1,127 @@
+/**
+ * CMP.4 — compression orchestrator (THIN policy caller).
+ *
+ * Authoritative spec: `docs/tasks/T-compression.md` CMP.4 (the
+ * "⚠️ ARCHITECTURE REVISION" block) + pre-research §4 D1/D2/D3
+ * (`docs/research/T-compression-pre-research-2026-05-27.md`).
+ *
+ * ⚠️ ARCHITECTURE REVISION (2026-05-27): the verify+delete safety
+ * contract MOVED INTO the loop-engine (`memory.consolidate`). The
+ * loop-engine is a UNIVERSAL substrate, so recall-replay verification +
+ * gated non-immune predecessor deletion is universal memory INTEGRITY
+ * every consumer needs — NOT opensquid policy. The engine guarantees
+ * the safe-HOW (atomic, race-free, fail-closed); opensquid decides the
+ * WHEN/WHAT.
+ *
+ * THIS MODULE NO LONGER ISSUES ANY `memory.delete` AND NO LONGER RUNS
+ * RECALL-REPLAY. Both now live inside the engine's `memory.consolidate`
+ * op. opensquid's role is purely policy:
+ *
+ *   D1 (WHEN): only run for a group whose satisfaction probe answered
+ *     "satisfied". No satisfied probe → no-op (return []).
+ *   WHAT: read the group's CMP.3 candidate windows; call
+ *     the TS `consolidate(ids)` (RES-4b) per window — engine-free.
+ *   SURFACE: report the engine's outcome (deleted / kept_immune /
+ *     verified); emit a drift event when `!verified` (the engine kept
+ *     `Mc` alongside the predecessors — nothing was lost, but the
+ *     window wasn't safe to consolidate yet).
+ *
+ * The engine's `memory.consolidate` enforces the locked D2/D3 contract
+ * internally: a predecessor is force-deleted ONLY after (a) compression
+ * succeeds, (b) the recall-replay gate passes for EVERY predecessor,
+ * and (c) that predecessor is not user-cited
+ * (`consumed_by_user_lessons === 0`). Any failure → delete nothing,
+ * `verified: false`. The memory trace is never lost.
+ *
+ * Imports from: ../engine/client.js, ./drift_catalog.js,
+ *   ./satisfaction_probe.js, ./wedge/compress_candidates.js.
+ * Imported by: (a session-boundary / automation-cycle trigger, TBD wiring).
+ */
+import { appendSessionDriftEvent } from './drift_catalog.js';
+import { readSatisfaction } from './satisfaction_probe.js';
+import { readCandidates } from './wedge/compress_candidates.js';
+/** Drift catalog tags for compression-gate events (surfaced via list_drift_events). */
+const DRIFT_PACK = '<compression>';
+const DRIFT_RULE = 'compression-recall-replay-gate';
+/**
+ * Run consolidation for one satisfied group. Reads the group's
+ * candidate windows (CMP.3) and calls the engine's atomic
+ * `memory.consolidate` per window (CMP.1 bridge + the revised engine
+ * op). Returns one outcome per window.
+ *
+ * D1: returns an empty result immediately when the group's satisfaction
+ * probe is absent or not "satisfied" — no consolidation requested.
+ *
+ * The orchestrator does NOT verify recall-replay or delete predecessors
+ * — the engine's `memory.consolidate` does both atomically and
+ * fail-closed. opensquid only surfaces the result + emits drift on a
+ * non-verified outcome.
+ */
+export async function runCompression(sessionId, group, consolidateWindow) {
+    // D1 — only satisfied groups. No answered "satisfied" probe → no-op.
+    const sat = (await readSatisfaction(sessionId)).find((s) => s.group === group);
+    if (!sat?.satisfied)
+        return [];
+    const windows = await readCandidates(sessionId, group);
+    const outcomes = [];
+    for (const w of windows) {
+        const ids = [...new Set(w.ids)];
+        const outcome = {
+            group,
+            promotedLessonId: w.promotedLessonId,
+            mcId: null,
+            deleted: [],
+            keptImmune: [],
+            skipped: false,
+        };
+        try {
+            // The TS consolidate (RES-4b) atomically: compress → recall-replay verify
+            // → gated delete of non-immune predecessors. Same D2 contract, engine-free;
+            // opensquid issues NO delete here (consolidate owns it, fail-closed).
+            const res = await consolidateWindow(ids);
+            outcome.mcId = res.mcId;
+            outcome.deleted = res.deleted;
+            outcome.keptImmune = res.keptImmune;
+            if (!res.verified) {
+                // Engine kept Mc alongside the predecessors (nothing deleted) —
+                // the window wasn't safe to consolidate yet. Surface drift.
+                outcome.skipped = true;
+                outcome.reason =
+                    'recall-replay gate did not verify: Mc kept alongside predecessors, nothing deleted';
+                await emitDrift(sessionId, group, w.promotedLessonId, res.mcId, ids, outcome.reason);
+            }
+            outcomes.push(outcome);
+        }
+        catch (e) {
+            // A consolidate RPC error is fail-closed on the engine side (it
+            // deletes nothing before it can verify). Surface it as a skipped
+            // window + drift event.
+            outcome.skipped = true;
+            outcome.reason = `consolidate error (nothing deleted): ${String(e)}`;
+            await emitDrift(sessionId, group, w.promotedLessonId, outcome.mcId, ids, outcome.reason);
+            outcomes.push(outcome);
+        }
+    }
+    return outcomes;
+}
+/**
+ * Emit a drift event recording that a window's predecessors were KEPT
+ * alongside Mc (nothing deleted), surfaced to the user via
+ * `list_drift_events`. Best-effort — a drift-write failure must not mask
+ * the safe outcome (the engine already deleted nothing).
+ */
+async function emitDrift(sessionId, group, promotedLessonId, mcId, predecessorIds, reason) {
+    try {
+        await appendSessionDriftEvent(sessionId, {
+            timestamp: new Date().toISOString(),
+            pack: DRIFT_PACK,
+            ruleId: DRIFT_RULE,
+            level: 'surface',
+            message: `compression kept Mc${mcId ? ` (${mcId})` : ''} alongside predecessors [${predecessorIds.join(', ')}] for group ${group} (lesson ${promotedLessonId}); nothing deleted — ${reason}`,
+        });
+    }
+    catch {
+        // never mask the safe (no-deletion) outcome on a logging failure
+    }
+}
+//# sourceMappingURL=compression_orchestrator.js.map

package/dist/runtime/compression_orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression_orchestrator.js","sourceRoot":"","sources":["../../src/runtime/compression_orchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAIH,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEhE,uFAAuF;AACvF,MAAM,UAAU,GAAG,eAAe,CAAC;AACnC,MAAM,UAAU,GAAG,gCAAgC,CAAC;AAsBpD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,KAAa,EACb,iBAAiE;IAEjE,qEAAqE;IACrE,MAAM,GAAG,GAAG,CAAC,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC/E,IAAI,CAAC,GAAG,EAAE,SAAS;QAAE,OAAO,EAAE,CAAC;IAE/B,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,MAAM,OAAO,GAAuB;YAClC,KAAK;YACL,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,EAAE;YACd,OAAO,EAAE,KAAK;SACf,CAAC;QAEF,IAAI,CAAC;YACH,0EAA0E;YAC1E,4EAA4E;YAC5E,sEAAsE;YACtE,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YACxB,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAC9B,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;YAEpC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAClB,gEAAgE;gBAChE,4DAA4D;gBAC5D,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;gBACvB,OAAO,CAAC,MAAM;oBACZ,oFAAoF,CAAC;gBACvF,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,gBAAgB,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACvF,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,gEAAgE;YAChE,iEAAiE;YACjE,wBAAwB;YACxB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YACvB,OAAO,CAAC,MAAM,GAAG,wCAAwC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,gBAAgB,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACzF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CACtB,SAAiB,EACjB,KAAa,EACb,gBAAwB,EACxB,IAAmB,EACnB,cAAwB,EACxB,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,uBAAuB,CAAC,SAAS,EAAE;YACvC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,sBAAsB,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,4BAA4B,cAAc,CAAC,IAAI,CACpG,IAAI,CACL,eAAe,KAAK,YAAY,gBAAgB,wBAAwB,MAAM,EAAE;SAClF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC"}

package/dist/runtime/context_inherit.d.ts

@@ -0,0 +1,65 @@
+/**
+ * `inheritContext` — Mode A context-inheritance filter for subagent spawns.
+ *
+ * Per `docs/opensquid-real-design.md` §"Team modes" Mode A: a subagent does
+ * NOT inherit the parent's full pack stack. It receives a narrowed view —
+ * just enough to operate inside the same project as the parent, plus the
+ * profession layer the parent designated for this role.
+ *
+ * Filter policy (matches the design doc constraint "NOT the parent's full
+ * stack"):
+ *
+ *   - INCLUDE: every pack with `scope === 'project'`. Project scope binds
+ *     to the repo / tenant the parent is operating in; the subagent must
+ *     see the same project context to operate coherently. There is no
+ *     leakage risk: project scope IS the shared workspace by definition.
+ *
+ *   - INCLUDE: specialty + domain packs whose `name` matches the supplied
+ *     `profession`. This is how the parent declares "spawn a code-reviewer"
+ *     — the team role's `pack` field names the profession pack, and this
+ *     filter only lets THAT pack through (not every domain/specialty pack
+ *     the parent happened to load).
+ *
+ *   - EXCLUDE: `universal` packs. The subagent's universal pinned skills
+ *     come from its OWN pack set (loaded via the profession pack's
+ *     `requires` chain), NOT the parent's. Otherwise a parent loading a
+ *     personal-rules universal pack would silently inject those rules into
+ *     every subagent it spawns, breaking the "fresh-eyes" property that
+ *     justifies Mode A in the first place.
+ *
+ *   - EXCLUDE: `workflow` packs. Workflows are parent-task-specific
+ *     (e.g. "ship verified work" tracks the parent's check sequence); a
+ *     subagent operates on its own task within that workflow, not the
+ *     workflow itself. Letting workflow packs through would conflate
+ *     parent + subagent verification state.
+ *
+ *   - EXCLUDE: specialty + domain packs whose name doesn't match the
+ *     profession. The parent may have many specialties loaded; the
+ *     subagent gets exactly the one designated for its role.
+ *
+ * `profession` is OPTIONAL — a subagent spawn that doesn't designate a
+ * profession just gets the project packs (parent and subagent share the
+ * same workspace context but no specialty inheritance). Returning project
+ * packs only in that case is the conservative default.
+ *
+ * Memory layer (relevant context):
+ *   - `project_opensquid_team_modes` — Mode A constraint.
+ *   - `project_opensquid_reduced_context_first_principle` — minimize what
+ *     reaches the subagent's context window.
+ *
+ * Imports from: ./types.js (Pack type).
+ * Imported by: src/runtime/index.ts.
+ */
+import type { Pack } from './types.js';
+/**
+ * Filter a parent's pack list down to the subset a subagent should see.
+ *
+ * @param parentPacks   The parent agent's currently-active pack stack.
+ * @param profession    Optional name of the profession pack designated for
+ *                      this subagent role (matches `Pack.name` for one of
+ *                      the parent's specialty / domain packs).
+ * @returns             The narrowed pack list: project packs + at most one
+ *                      matching specialty-or-domain pack.
+ */
+export declare function inheritContext(parentPacks: Pack[], profession: string | undefined): Pack[];
+//# sourceMappingURL=context_inherit.d.ts.map

package/dist/runtime/context_inherit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context_inherit.d.ts","sourceRoot":"","sources":["../../src/runtime/context_inherit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAAE,CAa1F"}

package/dist/runtime/context_inherit.js

@@ -0,0 +1,76 @@
+/**
+ * `inheritContext` — Mode A context-inheritance filter for subagent spawns.
+ *
+ * Per `docs/opensquid-real-design.md` §"Team modes" Mode A: a subagent does
+ * NOT inherit the parent's full pack stack. It receives a narrowed view —
+ * just enough to operate inside the same project as the parent, plus the
+ * profession layer the parent designated for this role.
+ *
+ * Filter policy (matches the design doc constraint "NOT the parent's full
+ * stack"):
+ *
+ *   - INCLUDE: every pack with `scope === 'project'`. Project scope binds
+ *     to the repo / tenant the parent is operating in; the subagent must
+ *     see the same project context to operate coherently. There is no
+ *     leakage risk: project scope IS the shared workspace by definition.
+ *
+ *   - INCLUDE: specialty + domain packs whose `name` matches the supplied
+ *     `profession`. This is how the parent declares "spawn a code-reviewer"
+ *     — the team role's `pack` field names the profession pack, and this
+ *     filter only lets THAT pack through (not every domain/specialty pack
+ *     the parent happened to load).
+ *
+ *   - EXCLUDE: `universal` packs. The subagent's universal pinned skills
+ *     come from its OWN pack set (loaded via the profession pack's
+ *     `requires` chain), NOT the parent's. Otherwise a parent loading a
+ *     personal-rules universal pack would silently inject those rules into
+ *     every subagent it spawns, breaking the "fresh-eyes" property that
+ *     justifies Mode A in the first place.
+ *
+ *   - EXCLUDE: `workflow` packs. Workflows are parent-task-specific
+ *     (e.g. "ship verified work" tracks the parent's check sequence); a
+ *     subagent operates on its own task within that workflow, not the
+ *     workflow itself. Letting workflow packs through would conflate
+ *     parent + subagent verification state.
+ *
+ *   - EXCLUDE: specialty + domain packs whose name doesn't match the
+ *     profession. The parent may have many specialties loaded; the
+ *     subagent gets exactly the one designated for its role.
+ *
+ * `profession` is OPTIONAL — a subagent spawn that doesn't designate a
+ * profession just gets the project packs (parent and subagent share the
+ * same workspace context but no specialty inheritance). Returning project
+ * packs only in that case is the conservative default.
+ *
+ * Memory layer (relevant context):
+ *   - `project_opensquid_team_modes` — Mode A constraint.
+ *   - `project_opensquid_reduced_context_first_principle` — minimize what
+ *     reaches the subagent's context window.
+ *
+ * Imports from: ./types.js (Pack type).
+ * Imported by: src/runtime/index.ts.
+ */
+/**
+ * Filter a parent's pack list down to the subset a subagent should see.
+ *
+ * @param parentPacks   The parent agent's currently-active pack stack.
+ * @param profession    Optional name of the profession pack designated for
+ *                      this subagent role (matches `Pack.name` for one of
+ *                      the parent's specialty / domain packs).
+ * @returns             The narrowed pack list: project packs + at most one
+ *                      matching specialty-or-domain pack.
+ */
+export function inheritContext(parentPacks, profession) {
+    return parentPacks.filter((p) => {
+        if (p.scope === 'project')
+            return true;
+        if (profession !== undefined &&
+            profession.length > 0 &&
+            (p.scope === 'specialty' || p.scope === 'domain') &&
+            p.name === profession) {
+            return true;
+        }
+        return false;
+    });
+}
+//# sourceMappingURL=context_inherit.js.map

package/dist/runtime/context_inherit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context_inherit.js","sourceRoot":"","sources":["../../src/runtime/context_inherit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAIH;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,UAA8B;IAChF,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvC,IACE,UAAU,KAAK,SAAS;YACxB,UAAU,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;YACjD,CAAC,CAAC,IAAI,KAAK,UAAU,EACrB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}