pi-jarvis 1.7.0 → 1.8.0

package/AGENTS.md

@@ -2,7 +2,7 @@
 
 ## Project Scope
 - `pi-jarvis` is a Pi extension that opens a `/jarvis` side-conversation overlay.
-- Core runtime files: `index.ts`, `side-session.ts`, `native-mcp.ts`, `overlay.ts`, `overlay-layout.ts`, `draft-editor.ts`, `transcript-viewport.ts`, `jarvis-branding.ts`, `model-picker.ts`, `jarvis-config.ts`, `session-ref.ts`, and `memory-{types,config,content,store,service,extension}.ts`.
+- Core runtime files: `index.ts`, `side-session.ts`, `native-mcp.ts`, `overlay.ts`, `overlay-layout.ts`, `draft-editor.ts`, `transcript-viewport.ts`, `jarvis-branding.ts`, `model-picker.ts`, `jarvis-config.ts`, `session-ref.ts`, `memory-{types,config,content,store,service,extension}.ts`, and `archive-{types,config,store,service,extension}.ts`.
 - Current baseline: Pi 1.0.0 (`@earendil-works` packages), Node.js >=22.19.0. Older Pi hosts are not supported.
 
 ## Current `/jarvis-model` and `/jarvis-thinking` Behavior
@@ -60,6 +60,15 @@
 - Memory guidance is also request-local: use a custom advisory so Pi's later forced-prompt projection cannot discard it. Preserve other prompt/tool state; a mid-turn disable removes both advisory and recalled records from future requests.
 - Model tools recheck live trust/settings/cancellation and permission generations at execution, including captured definitions. Broadcast observed policy changes across mounted lanes and revoke per-binding generations at session/tree boundaries; don't promise live push delivery across processes. Model forget requires cancellable human review and transactionally compares the reviewed version. Tombstones prevent identical event/title resurrection, not every semantic mention; Pi transcripts, backups and already-sent context remain. Do not promise encryption, a sandbox, or forensic erasure.
 
+## Optional full-session archive (1.8.0)
+- `archive-{types,config,store,service,extension}.ts` implement an independent OFF-by-default archive, explicitly mounted in main and Jarvis. Defaults enabled=false/capture=true/modelAccess=false; per-field project > global > defaults except explicit global enabled=false is master-off. Untrusted/config errors pause everything. Never enable/import real user data in tests.
+- Separate settings: `<agentDir>/extensions/pi-jarvis-archive.json` and `.pi/jarvis-archive.json`, top-level `archive`. Controls default global. on/model-access on/clear require `--confirm-sensitive`; clear removes settings, not data, and fallback can re-enable. Archive tools are read-only and need modelAccess; humans can inspect with only capture/modelAccess off, but not full off.
+- `/jarvis-archive` and overlay `/archive` commands are local, immediate, no provider/boot/queue work. Search/read/session default current-project; all-project access is explicit. Model tools cannot change controls, import, or delete. No auto context injection.
+- Archive accepted finalized journal entries unredacted, including exposed thinking/tool/system/custom/error/inline-image data. Never capture intermediate message_end/tool_result/raw-provider payloads before later redactors. Baseline existing entry IDs on activation, never auto-backfill; parent/header provenance retained. Snapshots are not crash-safe audit logging and cannot recover unpersisted events, earlier truncation or external referenced files. Warn on storage/observation failures, not silent replay.
+- Lazy private SQLite FTS5 at `<agentDir>/extensions/pi-jarvis-archive/archive.sqlite`, no automatic retention eviction. 64 MiB raw-entry/index budgets and 64K UTF-16 normalization-context hard rejection, no truncation of accepted raw JSON or silent partial indexing. Identical serialized payloads deduplicate across lanes; conflicting payloads for one identity fail without replacement. Search/read output max 24,000 JSON bytes plus notice; raw read offsets count Unicode codepoints and preserve pagination through output shrinking. Oversized display provenance is explicitly abbreviated; read(part=metadata) / read --metadata pages exact original metadata so every accepted entry stays accessible. Images/signatures are raw-retained, not text-indexed. Never load full payloads for search or scan all raw bodies on open.
+- Explicit human import streams one selected regular v3 JSONL file, honors its header's project/session provenance, checks live capture/epoch/cancellation at chunk/record boundaries, reports partial commits, never mutates source. No directory scans/legacy auto-migration. Scoped forget-session/prune require --confirm; tombstones stop identical entry resurrection, not all copies. No encryption, sandbox, forensic erase, or hard total-disk-quota claims.
+- Keep live trust/settings and per-binding stale-definition guards independent of Repo tools. Reader permission changes must not discard pending recording. Main owner closes storage after final archive snapshot; the side owner snapshots finalized entries before revoking its lifetime/context, without closing the shared service. Preserve archive finalization before main boot-generation invalidation. Settings observations propagate between mounted lanes, not by a cross-process watcher.
+
 ## Git and Release Policy
 - Every new commit MUST have an annotated **stable version tag `vX.Y.Z`**. No `dev`, alpha, beta, release-candidate, build-metadata, or SHA-only tags. This is a released extension, not a prerelease channel.
 - Before committing, choose the next unused stable version and update package metadata, lockfile, README, and a dated changelog entry together. Tag every commit, including intermediate and merge commits; never leave a new commit untagged. Run `npm run check:tags`, then push the commit and version tag atomically. Do not move or replace existing tags or rewrite shared history.

package/README.md

@@ -6,20 +6,23 @@
 
 ## A cinematic side-conversation overlay for Pi
 
-**Open a second lane of thought without derailing the main session.**
+**A second lane of thought—with shared memory and an optional searchable history archive.**
 
 `pi-jarvis` adds `/jarvis`: a polished overlay where you can ask for status, inspect the repo when you explicitly allow it, and send a quiet note or a confirmed redirect back to the main lane.
 
+**Remember what matters. Find the original history when you need it.** Main Pi and Jarvis share [persistent memory](#shared-memory); the separate, opt-in [full-session archive](#full-session-archive) adds indexed history search across sessions and, when explicitly requested, projects.
+
 [![CI](https://img.shields.io/github/actions/workflow/status/crustyhacker/pi-jarvis/ci.yml?branch=main&style=for-the-badge&label=CI)](https://github.com/crustyhacker/pi-jarvis/actions/workflows/ci.yml)
 [![npm version](https://img.shields.io/npm/v/pi-jarvis?style=for-the-badge&color=7c3aed)](https://www.npmjs.com/package/pi-jarvis)
 [![license](https://img.shields.io/badge/license-MIT-111827?style=for-the-badge)](./LICENSE)
 [![Pi extension](https://img.shields.io/badge/Pi-extension-06b6d4?style=for-the-badge)](https://github.com/crustyhacker/pi-jarvis)
 [![TypeScript](https://img.shields.io/badge/TypeScript-powered-2563eb?style=for-the-badge)](./package.json)
 
-<p><strong>Current version:</strong> 1.7.0</p>
+<p><strong>Current version:</strong> 1.8.0</p>
 
 <p>
   <strong>Shared persistent memory</strong> ·
+  <strong>Optional indexed session archive</strong> ·
   <strong>Persistent side session</strong> ·
   <strong>Live main-session awareness</strong> ·
   <strong>Opt-in local tools + native MCP</strong> ·
@@ -74,11 +77,28 @@ The main Pi session should stay on the critical path.
 
 ---
 
+## Two complementary memory features
+
+| | Shared memory | Optional full-session archive |
+|---|---|---|
+| **Purpose** | Remember useful preferences, corrections, decisions and references | Find original recorded conversations, tool activity and session history |
+| **What it keeps** | Curated notes plus bounded finalized user/assistant text captures | Complete accepted finalized Pi journal entries, with provenance and paged raw reads |
+| **Default** | **On in trusted projects**, with separate capture/recall controls | **Off**; recording and model access are separately controlled |
+| **Retrieval** | Automatic recall from global/current-project memory; explicit broader search | Local indexed search and session browsing; no automatic context injection |
+| **Manage it** | `/jarvis-memory` · overlay `/memory` | `/jarvis-archive` · overlay `/archive` |
+
+Both work across main Pi and Jarvis, independently of **Repo tools** and whether the overlay is open. Each has its own local SQLite store and global/project controls. Turning one off does not turn the other off.
+
+**Privacy matters:** storage is local plaintext. Archive content is unredacted and can include secrets; granting model access can send retrieved content to your model provider. “Full” means accepted finalized data exposed by Pi—not hidden provider reasoning or a crash-safe audit log. Historical import is explicit. See the [memory controls](#shared-memory) and [archive limits](#full-session-archive) before enabling more access.
+
+---
+
 ## At a glance
 
 | Capability | What you get |
 |---|---|
 | **Shared memory** | Main Pi and Jarvis remember useful discussions across sessions; enabled by default, with global/project controls and a master off switch |
+| **Optional full-session archive** | Off by default; raw finalized entries, local indexed cross-session search, separate model permission and explicit historical import |
 | **Persistent side lane** | `/jarvis` keeps its own isolated conversation state and restores prior side-session history |
 | **Live awareness** | Jarvis sees the current main-session summary plus a delta since the last `/jarvis` turn |
 | **Permission-gated tools** | Local `read`, `bash`, `edit`, `write`, and configured native MCP stay off until you enable Repo tools |
@@ -97,6 +117,10 @@ flowchart LR
     M -->|summary + recent delta| J
     M <-->|independent memory controls| S[Shared local memory]
     J <-->|independent memory controls| S
+    M -->|recording opt-in| A[Separate local history archive]
+    J -->|recording opt-in| A
+    A -. separately authorized model reads .-> M
+    A -. separately authorized model reads .-> J
     J -->|Repo tools enabled| R[Local tools\nread • bash • edit • write]
     J -->|Repo tools enabled| C[Configured native MCP\nside-owned connections]
     J -. Note main .-> M
@@ -154,6 +178,8 @@ Requires **Pi 1.0.0** and **Node.js 22.19.0 or newer**. Version **1.6.0** suppor
 `pi install` registers the package automatically. For local development, build and load `./dist/index.js` with `pi -e ./dist/index.js`.
 **New in 1.7.0: shared memory is enabled by default in trusted projects**, including main Pi even if you never open the overlay. A first-use notice explains capture and recall. Already using another memory extension? Run `/jarvis-memory off` before your first prompt; this disables both main and Jarvis memory without deleting anything.
 
+**New in 1.8.0: the separate full-session archive is OFF by default.** Nothing is imported or recorded by that subsystem until you opt in. See [Full-session archive](#full-session-archive).
+
 ### 3) Open Jarvis
 
 ```bash
@@ -207,6 +233,9 @@ Removes the selected scope so `/jarvis` thinking falls back through the remainin
 ### `/jarvis-memory`
 Reports shared-memory status. Use `/jarvis-memory help` for controls and data-management commands. Memory controls default to **global**, unlike model/thinking controls. See [Shared memory](#shared-memory) below.
 
+### `/jarvis-archive`
+Reports the separate full-session archive's status. It defaults **OFF**, with independent capture and model-access controls. `/jarvis-archive help` documents enablement warnings, paging, explicit import, and deletion. See [Full-session archive](#full-session-archive).
+
 ### Side-session commands inside `/jarvis`
 The `/jarvis` input handles a small set of built-in commands against the isolated side-session:
 
@@ -216,6 +245,69 @@ The `/jarvis` input handles a small set of built-in commands against the isolate
 - `/tree --summarize <entry-id> [instructions]` navigates and summarizes the branch being left.
 - `/new` starts a fresh `/jarvis` side-session without changing the main Pi session.
 - `/memory …` or `/jarvis-memory …` manages shared memory immediately, without sending a model prompt or waiting for queued side work. Initial forms such as `/jarvis /memory off` are also handled locally, without booting a side session.
+- `/archive …` or `/jarvis-archive …` manages the separate optional archive locally, without model/queue work; initial `/jarvis /archive …` works without booting a side session.
+
+---
+
+## Full-session archive
+
+This is a **separate, optional subsystem**, not a change to shared memory's curated notes or bounded text captures. It is **OFF by default**, independent of Repo tools, Note main, Redirect, and overlay open/close. Model reads are **also off by default**, even after recording is enabled. No archive content is automatically injected into prompts.
+
+### Enable only after reviewing the risks
+
+```text
+/jarvis-archive                                    # status; no archive-record reads
+/jarvis-archive --project on --confirm-sensitive    # record here only
+/jarvis-archive on --confirm-sensitive              # enable globally
+/jarvis-archive model-access on --confirm-sensitive # allow model search/read; recording alone doesn't
+/jarvis-archive capture off                         # pause recording default, retain access
+/jarvis-archive off                                 # global MASTER OFF; keep stored data
+/jarvis-archive clear --confirm-sensitive           # remove global settings; fallback may re-enable
+```
+
+Controls default to **global**; use `--project` for an override. Resolution is per-field project > global > defaults (`enabled: false`, `capture: true`, `modelAccess: false`), except an **explicit global off overrides every project**. `capture off` and `model-access off` set defaults that a project can override; inspect effective status. Use `clear --confirm-sensitive` to remove a scoped setting, never data. Malformed/unreadable settings and untrusted projects pause **all** archive access. Full off blocks even manual record inspection; recording-only/model-only pauses do not prevent explicit human reads. Separate files avoid interfering with memory/model settings:
+
+- Global: `<active-agent-dir>/extensions/pi-jarvis-archive.json`
+- Project: `.pi/jarvis-archive.json`
+- Shape: `{ "archive": { "enabled": true, "capture": true, "modelAccess": false } }`
+
+Enabling/model-access commands require the literal warning acknowledgment, and direct-file enablement shows a first-use warning. **This archive is unredacted plaintext and may retain passwords, tokens, private files, and sensitive tool output.** Model access can send retrieved data to the active provider. It is not a sandbox, encryption mechanism, or a substitute for carefully managing secrets.
+
+### What “full” means
+
+Accepted **new, finalized Pi journal entries** are retained as complete JSON, without memory's secret filtering, 16 KiB text cap, or 10,000-record eviction. This includes user/assistant/system messages, exposed thinking, tool calls/results and details, failed/aborted output that Pi retained, inline image payloads, custom entries, compaction/context edits, and branch metadata. Session headers retain provenance, including parent-session links. Search indexes textual content locally with SQLite FTS5; binary image data and opaque signatures are retained but not text-indexed. There is no OCR, embedding service, or background model call.
+
+“Full” **does not mean an infallible wire/stream audit log**. Hidden provider reasoning, keystrokes, intermediate stream/tool updates, non-persisted commands/events, external attachment files, and output already truncated by Pi/tools are not recovered. Referenced files are **never automatically opened or copied**. Later message-redaction hooks run before capture. Raw history includes abandoned branches and superseded context, not just the effective current model context.
+
+Recording begins after an activation baseline, never by importing pre-existing entries. Captures occur at finalized turn/settlement and supported session boundaries, not per token. The side owner takes a final snapshot of already-finalized entries before disposal, while recording remains authorized. Crashes, late shutdown hooks, unsupported journal APIs, failed storage, or permission transitions can leave gaps; warnings report observation/storage failures without replaying uncertain writes. Pending/disabled-period content is not backfilled after re-enable. Explicit **64 MiB raw-entry and indexing ceilings reject oversized work rather than truncating it**. Normalization uses bounded chunks; pathological Unicode combining/composition contexts beyond 64K UTF-16 units also reject explicitly. Conservative index budgeting can reject excessive whitespace/normalization expansion even if its final folded text would be smaller. No automatic eviction or strict total-disk quota is imposed: monitor space and prune deliberately. Large synchronous writes/indexing can pause the UI. Search/page order may change as other sessions append/delete records; pagination is not a frozen snapshot.
+
+### Search and inspect
+
+```text
+/jarvis-archive search deployment decision
+/jarvis-archive search --all --offset 20 deployment
+/jarvis-archive session --all <session-id> 0
+/jarvis-archive read --all <record-id> 0
+/jarvis-archive read --all --metadata <record-id> 0
+/jarvis-archive stats --all
+```
+
+Search/session pages return bounded excerpts of normalized indexing text with IDs, project, lane, timestamps and parent entry IDs. Excerpts are not exact quotations; use `read` for original case and content. Follow `nextOffset` to continue. Exceptionally large/escape-heavy provenance is explicitly labeled with `abbreviated` field names, never allowed to block record access; `read --metadata` (model tool `part: "metadata"`) pages the exact original metadata. `read` returns complete raw JSON **through pages**; its offsets count Unicode codepoints, not bytes or UTF-16 units. Results are bounded to 24,000 bytes of JSON plus an untrusted-data notice; stored payloads are not shortened. Use explicit `--all` to access other projects. Models get only three read-only tools—`jarvis_archive_search`, `jarvis_archive_read`, and `jarvis_archive_session`—when model access is enabled. No model controls, import, or deletion tools exist. Tools recheck current permissions/trust/cancellation and reject stale definitions.
+
+Global accessibility is within the **same active Pi agent directory**, not cloud sync or other users' machines. Project controls govern operations initiated here; existing records from a paused project remain accessible through explicit all-project queries from another allowed project. Disabling is not deletion. Returned model-tool results persist normally in Pi and can be captured again as part of a later journal entry.
+
+### Explicit import and retention
+
+```text
+/jarvis-archive import --confirm-sensitive /absolute/path/to/session.jsonl
+/jarvis-archive forget-session --confirm <session-id>
+/jarvis-archive prune --confirm 2026-01-01T00:00:00.000Z
+/jarvis-archive prune --all --confirm 2026-01-01T00:00:00.000Z
+```
+
+Import is **human-only**, requires enabled recording and an explicit regular v3 JSONL file, and preserves the source header's project/session identity—even if different from the current project. No directory scan or silent historical import occurs; legacy session versions require a separately reviewed conversion first. Completed entries survive a partial/cancelled import, with counts reported; duplicate entries are skipped, differing payloads for an existing identity are rejected, and originals are never modified. Deletion defaults to this project; `--all` is explicit. Stable identity tombstones prevent re-import of deleted entries, not every semantic copy or other previously unarchived entry.
+
+Storage is lazy SQLite under `<active-agent-dir>/extensions/pi-jarvis-archive/archive.sqlite`, defaulting to `~/.pi/agent/extensions/pi-jarvis-archive/archive.sqlite`. Owned directories/files use private permissions where supported, with defensive link/type checks and concurrent-writer transactions. There is no background watcher: observed settings changes are propagated between mounted lanes, while other processes recheck at operation boundaries. Deletion does not erase original Pi files, prior search-result copies, already-sent model context or backups, and does not guarantee reclaimed disk space or forensic erasure. For a complete reset, stop all Pi processes using the store and remove only its archive directory yourself; that also removes tombstones. Shared memory stays separate and unchanged. To stop both Jarvis persistence layers, use both `/jarvis-archive off` and `/jarvis-memory off`; neither disables Pi's original session transcripts.
 
 ---
 
@@ -225,7 +317,7 @@ Main Pi and Jarvis use **one local memory service**, independent of the overlay
 
 ### What is remembered
 
-- **Conversation archive:** only newly finalized user/assistant text observed after loading this feature, labeled with project, main/Jarvis lane, session ID, event identity and timestamps. No silent historical import or reconstruction from old session files.
+- **Bounded conversation captures (not the optional full-session archive):** only newly finalized user/assistant text observed after loading this feature, labeled with project, main/Jarvis lane, session ID, event identity and timestamps. No silent historical import or reconstruction from old session files.
 - **Curated notes:** your active model can save concise preferences, corrections, project decisions and references during normal foreground work. Stable scoped titles update/deduplicate notes. You can save or edit notes explicitly too. Curation depends on the model choosing the tool; it is not a separate background summarizer.
 - **Bounded recall:** a small request-local selection of global/current-project notes and matching conversation excerpts, using local keyword search. Other projects are available through explicit `search --all` or the model's cross-project search tool. Project scope uses the canonical working directory, not a remote repository name; separate worktrees remain separate scopes unless a note is global.
 

package/dist/archive-config.d.ts

@@ -0,0 +1,15 @@
+import type { ArchivePolicy, ArchiveScope } from "./archive-types.js";
+type Scope = ArchiveScope;
+/** Caller-spelled settings path, without I/O. Access canonicalizes only the chosen root. */
+export declare function archiveConfigPath(cwd: string, agentDir: string, scope: Scope): string;
+/** Reads settings only. Archiving defaults off; trust/read/validation failures disable every permission. */
+export declare function resolveArchivePolicy(cwd: string, agentDir: string, trusted?: boolean): {
+    policy: ArchivePolicy;
+    errors: string[];
+};
+/** Merges only supplied fields into this scope; never materializes inherited/default values. */
+export declare function saveArchivePolicy(cwd: string, agentDir: string, scope: Scope, patch: Partial<ArchivePolicy>): void;
+/** Removes only archive controls. Corrupt files are never repaired or removed. */
+export declare function clearArchivePolicy(cwd: string, agentDir: string, scope: Scope): void;
+export {};
+//# sourceMappingURL=archive-config.d.ts.map

package/dist/archive-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-config.d.ts","sourceRoot":"","sources":["../archive-config.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEtE,KAAK,KAAK,GAAG,YAAY,CAAC;AAS1B,4FAA4F;AAC5F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,CAGrF;AAED,4GAA4G;AAC5G,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,UAAO,GAAG;IACpF,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;CACxC,CAoBA;AAED,gGAAgG;AAChG,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAOlH;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAMpF"}

package/dist/archive-config.js

@@ -0,0 +1,310 @@
+import { closeSync, constants, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readSync, realpathSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
+import { isUtf8 } from "node:buffer";
+import { randomUUID } from "node:crypto";
+import { basename, dirname, join, parse, resolve } from "node:path";
+const FIELDS = ["enabled", "capture", "modelAccess"];
+const CONFIG_LIMIT_BYTES = 1024 * 1024;
+const LOCK_WAIT_MS = 2_000;
+const LOCK_POLL_MS = 20;
+const sleep = new Int32Array(new SharedArrayBuffer(4));
+const noFollow = constants.O_NOFOLLOW ?? 0;
+/** Caller-spelled settings path, without I/O. Access canonicalizes only the chosen root. */
+export function archiveConfigPath(cwd, agentDir, scope) {
+    if (scope !== "global" && scope !== "project")
+        throw new Error("Invalid archive settings scope.");
+    return scope === "global" ? join(agentDir, "extensions", "pi-jarvis-archive.json") : join(cwd, ".pi", "jarvis-archive.json");
+}
+/** Reads settings only. Archiving defaults off; trust/read/validation failures disable every permission. */
+export function resolveArchivePolicy(cwd, agentDir, trusted = true) {
+    const errors = [];
+    const read = (scope) => {
+        try {
+            return parsePolicy(readConfig(settingsPath(cwd, agentDir, scope))?.archive);
+        }
+        catch {
+            // Never include parser messages, config contents, paths or underlying I/O errors.
+            errors.push(`Cannot read ${scope} archive settings; archive is disabled.`);
+            return {};
+        }
+    };
+    const global = read("global");
+    const project = read("project");
+    if (errors.length || !trusted)
+        return { policy: { enabled: false, capture: false, modelAccess: false }, errors };
+    const base = { enabled: false, capture: true, modelAccess: false, ...global };
+    const policy = { ...base, ...project };
+    // Only explicit global enabled=false is a master switch; other fields remain independent preferences.
+    if (global.enabled === false)
+        policy.enabled = false;
+    return { policy, errors };
+}
+/** Merges only supplied fields into this scope; never materializes inherited/default values. */
+export function saveArchivePolicy(cwd, agentDir, scope, patch) {
+    const parsed = parsePatch(patch);
+    changeConfig(cwd, agentDir, scope, (config) => {
+        if (!Object.keys(parsed).length)
+            return false;
+        config.archive = { ...config.archive, ...parsed };
+        return true;
+    });
+}
+/** Removes only archive controls. Corrupt files are never repaired or removed. */
+export function clearArchivePolicy(cwd, agentDir, scope) {
+    changeConfig(cwd, agentDir, scope, (config) => {
+        if (!Object.hasOwn(config, "archive"))
+            return false;
+        delete config.archive;
+        return true;
+    });
+}
+function parsePolicy(value) {
+    if (value === undefined)
+        return {};
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error("Invalid archive controls.");
+    const policy = {};
+    for (const field of FIELDS) {
+        if (!Object.hasOwn(value, field))
+            continue;
+        const setting = value[field];
+        if (typeof setting !== "boolean")
+            throw new Error("Invalid archive controls.");
+        policy[field] = setting;
+    }
+    return policy;
+}
+function parsePatch(patch) {
+    if (!patch || typeof patch !== "object" || Array.isArray(patch)
+        || Object.keys(patch).some((key) => !FIELDS.includes(key))) {
+        throw new Error("Invalid archive controls patch.");
+    }
+    return parsePolicy(patch);
+}
+function missing(error) {
+    return error?.code === "ENOENT";
+}
+/** Resolve user-selected roots (including ancestor links), but never appended settings paths. */
+function settingsPath(cwd, agentDir, scope) {
+    // Validate scope before choosing/canonicalizing a root.
+    archiveConfigPath(cwd, agentDir, scope);
+    const root = canonicalRoot(scope === "global" ? agentDir : cwd);
+    return scope === "global" ? join(root, "extensions", "pi-jarvis-archive.json") : join(root, ".pi", "jarvis-archive.json");
+}
+/** Missing roots inherit the real path of their nearest existing directory ancestor. */
+function canonicalRoot(path) {
+    let current = resolve(path);
+    const suffix = [];
+    for (;;) {
+        try {
+            lstatSync(current);
+        }
+        catch (error) {
+            if (!missing(error))
+                throw error;
+            const parent = dirname(current);
+            if (parent === current)
+                throw error;
+            suffix.unshift(basename(current));
+            current = parent;
+            continue;
+        }
+        // An existing dangling link or a nondirectory root is an error, not a missing config.
+        const canonical = realpathSync(current);
+        if (!lstatSync(canonical).isDirectory())
+            throw new Error("Unsafe archive settings root.");
+        return join(canonical, ...suffix);
+    }
+}
+/** Validate the canonical ancestry, missing root components and appended settings directories. */
+function directories(path, create) {
+    const absolute = resolve(path);
+    const root = parse(absolute).root;
+    const parts = [];
+    let current = absolute;
+    while (current !== root) {
+        parts.push(current);
+        current = dirname(current);
+    }
+    parts.push(root);
+    for (const directory of parts.reverse()) {
+        let stat;
+        try {
+            stat = lstatSync(directory);
+        }
+        catch (error) {
+            if (!missing(error))
+                throw error;
+            if (!create)
+                return false;
+            try {
+                mkdirSync(directory, { mode: 0o700 });
+            }
+            catch (mkdirError) {
+                if (mkdirError?.code !== "EEXIST")
+                    throw mkdirError;
+            }
+            stat = lstatSync(directory);
+        }
+        if (!stat.isDirectory() || stat.isSymbolicLink())
+            throw new Error("Unsafe archive settings directory.");
+    }
+    return true;
+}
+function regularFile(path) {
+    let stat;
+    try {
+        stat = lstatSync(path);
+    }
+    catch (error) {
+        if (missing(error))
+            return undefined;
+        throw error;
+    }
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1)
+        throw new Error("Unsafe archive settings file.");
+    return stat;
+}
+function readConfig(path) {
+    if (!directories(dirname(path), false))
+        return undefined;
+    const stat = regularFile(path);
+    if (!stat)
+        return undefined;
+    if (stat.size > CONFIG_LIMIT_BYTES)
+        throw new Error("Archive settings exceed the size limit.");
+    // O_NONBLOCK prevents a raced special file from blocking before fstat rejects it.
+    const fd = openSync(path, constants.O_RDONLY | noFollow | constants.O_NONBLOCK);
+    let text;
+    try {
+        const opened = fstatSync(fd);
+        if (!opened.isFile() || opened.nlink !== 1 || opened.dev !== stat.dev || opened.ino !== stat.ino) {
+            throw new Error("Archive settings changed while opening.");
+        }
+        if (opened.size > CONFIG_LIMIT_BYTES)
+            throw new Error("Archive settings exceed the size limit.");
+        // A bounded buffer also handles growth after fstat: readFileSync could allocate
+        // without limit in that race. The extra byte detects growth without reading it all.
+        const bytes = Buffer.alloc(opened.size + 1);
+        let length = 0;
+        while (length < bytes.length) {
+            const count = readSync(fd, bytes, length, bytes.length - length, null);
+            if (!count)
+                break;
+            length += count;
+        }
+        if (length !== opened.size)
+            throw new Error("Archive settings changed while reading.");
+        if (!isUtf8(bytes.subarray(0, length)))
+            throw new Error("Invalid archive settings encoding.");
+        text = bytes.toString("utf8", 0, length);
+    }
+    finally {
+        closeSync(fd);
+    }
+    let config;
+    try {
+        config = JSON.parse(text);
+    }
+    catch {
+        throw new Error("Invalid archive settings JSON.");
+    }
+    if (!config || typeof config !== "object" || Array.isArray(config))
+        throw new Error("Invalid archive settings object.");
+    const record = config;
+    // Validate controls even for clear calls; no operation may repair an invalid file.
+    parsePolicy(record.archive);
+    return record;
+}
+function changeConfig(cwd, agentDir, scope, change) {
+    try {
+        const path = settingsPath(cwd, agentDir, scope);
+        // Avoid creating directories/lock files for absent clears or already-applied changes.
+        const existing = readConfig(path);
+        if (!change({ ...existing }))
+            return;
+        directories(dirname(path), true);
+        withLock(path, () => {
+            const config = readConfig(path) ?? {};
+            if (change(config))
+                writeConfig(path, config);
+        });
+    }
+    catch {
+        throw new Error(`Cannot update ${scope} archive settings.`);
+    }
+}
+/** Cooperative lock for archive writers only. Crashed writers leave locks; never steal a live lock. */
+function withLock(path, run) {
+    const lock = `${path}.archive.lock`;
+    const deadline = performance.now() + LOCK_WAIT_MS;
+    let fd;
+    for (;;) {
+        try {
+            fd = openSync(lock, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | noFollow, 0o600);
+            break;
+        }
+        catch (error) {
+            if (error?.code !== "EEXIST")
+                throw error;
+            regularFile(lock); // Reject symlink/nonregular locks instead of waiting on them.
+            const remaining = deadline - performance.now();
+            if (remaining <= 0)
+                throw new Error("Archive settings lock timed out.");
+            Atomics.wait(sleep, 0, 0, Math.min(LOCK_POLL_MS, remaining));
+        }
+    }
+    let owned;
+    try {
+        owned = fstatSync(fd);
+        if (!owned.isFile() || owned.nlink !== 1)
+            throw new Error("Unsafe archive settings lock.");
+        run();
+    }
+    finally {
+        try {
+            closeSync(fd);
+        }
+        catch { /* Cleanup must not mask the primary failure. */ }
+        try {
+            const current = lstatSync(lock);
+            if (owned && current.dev === owned.dev && current.ino === owned.ino && current.isFile() && !current.isSymbolicLink())
+                unlinkSync(lock);
+        }
+        catch { /* Failed cleanup can leave a lock; bounded waits still fail closed. */ }
+    }
+}
+function writeConfig(path, config) {
+    const text = `${JSON.stringify(config, null, "\t")}\n`;
+    if (Buffer.byteLength(text, "utf8") > CONFIG_LIMIT_BYTES)
+        throw new Error("Archive settings exceed the size limit.");
+    const temporary = `${path}.${randomUUID()}.tmp`;
+    let fd;
+    let created = false;
+    try {
+        fd = openSync(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | noFollow, 0o600);
+        created = true;
+        writeFileSync(fd, text, "utf8");
+        fsyncSync(fd);
+        closeSync(fd);
+        fd = undefined;
+        directories(dirname(path), false);
+        regularFile(path); // Recheck the target before replacement; never replace a symlink.
+        renameSync(temporary, path);
+        created = false;
+    }
+    finally {
+        if (fd !== undefined) {
+            try {
+                closeSync(fd);
+            }
+            catch { /* Keep the primary failure. */ }
+        }
+        if (created) {
+            try {
+                unlinkSync(temporary);
+            }
+            catch { /* Keep the primary failure. */ }
+        }
+    }
+}
+//# sourceMappingURL=archive-config.js.map

package/dist/archive-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-config.js","sourceRoot":"","sources":["../archive-config.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAC1E,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,GAC7D,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpE,MAAM,MAAM,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAU,CAAC;AAC9D,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;AAE3C,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,QAAgB,EAAE,KAAY;IAC5E,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAClG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC;AAC9H,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,QAAgB,EAAE,OAAO,GAAG,IAAI;IAGjF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,CAAC,KAAY,EAA0B,EAAE;QACrD,IAAI,CAAC;YACJ,OAAO,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACR,kFAAkF;YAClF,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,yCAAyC,CAAC,CAAC;YAC3E,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC;IAEjH,MAAM,IAAI,GAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;IAC7F,MAAM,MAAM,GAAkB,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;IACtD,sGAAsG;IACtG,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;QAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;IACrD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,QAAgB,EAAE,KAAY,EAAE,KAA6B;IAC3G,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,CAAC,OAAO,GAAG,EAAE,GAAI,MAAM,CAAC,OAA8B,EAAE,GAAG,MAAM,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,QAAgB,EAAE,KAAY;IAC7E,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;QAC7C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,OAAO,MAAM,CAAC,OAAO,CAAC;QACtB,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9G,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,SAAS;QAC3C,MAAM,OAAO,GAAI,KAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,OAAO,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAA6B;IAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAC3D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAA4B,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC9B,OAAQ,KAA+B,EAAE,IAAI,KAAK,QAAQ,CAAC;AAC5D,CAAC;AAED,iGAAiG;AACjG,SAAS,YAAY,CAAC,GAAW,EAAE,QAAgB,EAAE,KAAY;IAChE,wDAAwD;IACxD,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC;AAC3H,CAAC;AAED,wFAAwF;AACxF,SAAS,aAAa,CAAC,IAAY;IAClC,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,SAAS,CAAC;QACT,IAAI,CAAC;YAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,MAAM,KAAK,OAAO;gBAAE,MAAM,KAAK,CAAC;YACpC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAClC,OAAO,GAAG,MAAM,CAAC;YACjB,SAAS;QACV,CAAC;QACD,sFAAsF;QACtF,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,CAAC;IACnC,CAAC;AACF,CAAC;AAED,kGAAkG;AAClG,SAAS,WAAW,CAAC,IAAY,EAAE,MAAe;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,OAAO,OAAO,KAAK,IAAI,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YAAC,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACnD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACjC,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1B,IAAI,CAAC;gBAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBAClE,IAAK,UAAoC,EAAE,IAAI,KAAK,QAAQ;oBAAE,MAAM,UAAU,CAAC;YAChF,CAAC;YACD,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAChC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACrC,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAClH,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC/B,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC/F,kFAAkF;IAClF,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAChF,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YAClG,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,GAAG,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACjG,gFAAgF;QAChF,oFAAoF;QACpF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;YACvE,IAAI,CAAC,KAAK;gBAAE,MAAM;YAClB,MAAM,IAAI,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACvF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC9F,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAC5B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAAC,CAAC;IAC/F,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxH,MAAM,MAAM,GAAG,MAAgB,CAAC;IAChC,mFAAmF;IACnF,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,QAAgB,EAAE,KAAY,EAAE,MAAmC;IACrG,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChD,sFAAsF;QACtF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;YAAE,OAAO;QACrC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACjC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE;YACnB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,MAAM,CAAC;gBAAE,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,oBAAoB,CAAC,CAAC;IAC7D,CAAC;AACF,CAAC;AAED,uGAAuG;AACvG,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAe;IAC9C,MAAM,IAAI,GAAG,GAAG,IAAI,eAAe,CAAC;IACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IAClD,IAAI,EAAU,CAAC;IACf,SAAS,CAAC;QACT,IAAI,CAAC;YACJ,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;YACjG,MAAM;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,EAAE,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACrE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,8DAA8D;YACjF,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC/C,IAAI,SAAS,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;IACD,IAAI,KAA+C,CAAC;IACpD,IAAI,CAAC;QACJ,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC3F,GAAG,EAAE,CAAC;IACP,CAAC;YAAS,CAAC;QACV,IAAI,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gDAAgD,CAAC,CAAC;QACjF,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,KAAK,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACxI,CAAC;QAAC,MAAM,CAAC,CAAC,uEAAuE,CAAC,CAAC;IACpF,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;IAChD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;IACvD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACrH,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,IAAI,EAAsB,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACJ,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtG,OAAO,GAAG,IAAI,CAAC;QACf,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAChC,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,EAAE,GAAG,SAAS,CAAC;QACf,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAClC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,kEAAkE;QACrF,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5B,OAAO,GAAG,KAAK,CAAC;IACjB,CAAC;YAAS,CAAC;QACV,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/archive-extension.d.ts

@@ -0,0 +1,38 @@
+import type { ExtensionContext, ExtensionFactory } from "@earendil-works/pi-coding-agent";
+import type { ArchivePolicy } from "./archive-types.js";
+export declare const ARCHIVE_TOOL_NAMES: readonly ["jarvis_archive_search", "jarvis_archive_read", "jarvis_archive_session"];
+type PageParameters = {
+    scope?: "current" | "all";
+    offset?: number;
+    limit?: number;
+};
+/** Structural contract: the shared service is owned by the host, not a lane. */
+export interface ArchiveExtensionService {
+    readonly epoch: number;
+    policy(ctx: ExtensionContext): ArchivePolicy;
+    onChange(listener: () => void): () => void;
+    capture(entry: unknown, lane: "main" | "jarvis", ctx: ExtensionContext): void;
+    search(params: PageParameters & {
+        query: string;
+        sessionId?: string;
+    }, ctx: ExtensionContext, model?: boolean): string;
+    read(params: PageParameters & {
+        id: string;
+        part?: "entry" | "metadata";
+    }, ctx: ExtensionContext, model?: boolean): string;
+    session(params: PageParameters & {
+        sessionId: string;
+    }, ctx: ExtensionContext, model?: boolean): string;
+    close(): void;
+}
+export interface ArchiveExtensionOptions {
+    lifetimeSignal?: AbortSignal;
+    isProjectTrusted?: () => boolean;
+    onToolsChanged?: () => void;
+    /** Owner invokes this before SDK disposal/permission lifetime revocation. */
+    registerFinalSnapshot?: (snapshot: () => void) => void;
+}
+/** Mount separately in main and Jarvis. No streams, history import, or recall. */
+export declare function createArchiveExtensionFactory(service: ArchiveExtensionService, lane: "main" | "jarvis", options?: ArchiveExtensionOptions): ExtensionFactory;
+export {};
+//# sourceMappingURL=archive-extension.d.ts.map

package/dist/archive-extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-extension.d.ts","sourceRoot":"","sources":["../archive-extension.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAgB,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,eAAO,MAAM,kBAAkB,qFAAsF,CAAC;AAEtH,KAAK,cAAc,GAAG;IAAE,KAAK,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AACrF,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,aAAa,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC9E,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACvH,IAAI,CAAC,MAAM,EAAE,cAAc,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;KAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3H,OAAO,CAAC,MAAM,EAAE,cAAc,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxG,KAAK,IAAI,IAAI,CAAC;CACd;AACD,MAAM,WAAW,uBAAuB;IACvC,cAAc,CAAC,EAAE,WAAW,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,6EAA6E;IAC7E,qBAAqB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;CACvD;AAMD,kFAAkF;AAClF,wBAAgB,6BAA6B,CAC5C,OAAO,EAAE,uBAAuB,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,OAAO,GAAE,uBAA4B,GAC9F,gBAAgB,CAoQlB"}