sawbuck 0.1.43 → 0.1.45

package/shape.mjs

@@ -1,17 +1,17 @@
-// Your steering shape: what you push on, as 12 spokes in 4 groups. The model labels a sample of your messages; only the
-// totals are kept. Two models agree on single messages about half the time and on the shape at 0.93, so a single label is
-// never shown. It says what you pushed on, not how good you are. Each run is saved with its date to compare later.
-import { readFileSync, writeFileSync, appendFileSync, mkdirSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
+// Your steering shape: what you push on, as 11 spokes in 4 groups. The model labels a sample of your messages; only the
+// totals are kept. Three models agreed on single messages about 70% of the time and on the shape at 0.87 or better, so a
+// single label is never shown. It says what you pushed on, not how good you are. Each run is saved with its date.
+import { readFileSync, writeFileSync, appendFileSync, mkdirSync, existsSync, rmSync, copyFileSync } from 'node:fs';
+import { execFileSync } from 'node:child_process';
+import { join, dirname } from 'node:path';
 import { homedir } from 'node:os';
 import { prepareRules } from './rules.mjs';
-import { exposure, writtenRules } from './exposure.mjs';
 
-export const GROUPS = { Truth: ['correctness', 'proof', 'honesty'], Intent: ['direction', 'scope', 'autonomy'], Craft: ['voice', 'naming', 'visual', 'simplicity'], Control: ['process', 'safety'] };
+export const GROUPS = { Truth: ['correctness', 'proof', 'honesty'], Intent: ['scope', 'autonomy'], Craft: ['voice', 'naming', 'visual', 'simplicity'], Control: ['process', 'safety'] };
 const SPOKES = Object.values(GROUPS).flat();
 const MIN_SPOKES = 200;   // below this, spokes are noise: show the 4 groups
 const SAMPLE = 600;
-const paths = (home) => ({ dir: join(home, '.sawbuck'), rules: join(home, '.sawbuck', 'rule-input.txt'), input: join(home, '.sawbuck', 'shape-input.txt'), hist: join(home, '.sawbuck', 'shape-history.jsonl'), expo: join(home, '.sawbuck', 'shape-exposure.json'), svg: join(home, '.sawbuck', 'shape.svg') });
+const paths = (home) => ({ dir: join(home, '.sawbuck'), rules: join(home, '.sawbuck', 'rule-input.txt'), input: join(home, '.sawbuck', 'shape-input.txt'), hist: join(home, '.sawbuck', 'shape-history.jsonl'), svg: join(home, '.sawbuck', 'shape.svg') });
 const title = (s) => s[0].toUpperCase() + s.slice(1);
 
 export function prepareShape({ home = homedir() } = {}) {
@@ -21,14 +21,14 @@ export function prepareShape({ home = homedir() } = {}) {
   for (let i = lines.length - 1; i > 0; i--) { const j = Math.floor(Math.random() * (i + 1)); [lines[i], lines[j]] = [lines[j], lines[i]]; }
   const pick = lines.slice(0, SAMPLE);
   writeFileSync(p.input, pick.map((l, i) => `${i + 1}\t${l}`).join('\n') + '\n', { mode: 0o600 });
-  writeFileSync(p.expo, JSON.stringify({ ...exposure({ root: join(home, '.claude', 'projects') }), written: writtenRules({ home }) }) + '\n');
   return { input: p.input, lines: pick.length, secrets: r.secrets };
 }
 
 export function tally(labels) {
   const counts = Object.fromEntries(SPOKES.map((s) => [s, 0]));
   let none = 0;
-  for (const v of Object.values(labels)) { if (v === 'none') none++; else if (v in counts) counts[v]++; }
+  // two models split scope and direction at random (shape r 0.55 with both, 0.97 merged), so they count as one
+  for (const raw of Object.values(labels)) { const v = raw === 'direction' ? 'scope' : raw; if (v === 'none') none++; else if (v in counts) counts[v]++; }
   const total = SPOKES.reduce((a, s) => a + counts[s], 0);
   const groups = Object.fromEntries(Object.entries(GROUPS).map(([g, ss]) => [g, total ? Math.round(100 * ss.reduce((a, s) => a + counts[s], 0) / total) : 0]));
   const top = Math.max(1, ...SPOKES.map((s) => counts[s]));
@@ -39,39 +39,32 @@ export function tally(labels) {
 }
 
 // What was not said: each spoke we can measure from what the agent did, read against how often you push on it.
-const HIGH_PUSH = 8, HIGH_DOING = 10, HIGH_FAULT = 5;   // a fault counts sooner than plain activity
-const SEEN = {
-  proof: { fault: true, of: 'code', n: 'unverified', says: 'changed code and ran no check within 3 turns', rule: 'Run the tests before saying a change works.' },
-  safety: { fault: true, of: 'working', n: 'risky', says: 'touched something risky', rule: 'Ask before force pushing, deleting outside temp folders, or touching secrets, workflows or deploy files.' },
-  process: { of: 'working', n: 'shipped', says: 'committed, pushed or published', rule: 'Do not commit or push unless I ask.' },
-  voice: { of: 'working', n: 'copy', says: 'wrote docs or copy', rule: 'Write docs in plain, short sentences.' },
-  visual: { of: 'working', n: 'ui', says: 'changed the interface', rule: 'Show me interface changes before calling them done.' },
-  simplicity: { fault: true, of: 'working', n: 'big', says: 'added 200 lines or more', rule: 'Keep changes small. Ask before adding more than 200 lines.' },
-  naming: { of: 'working', n: 'renames', says: 'renamed something', rule: 'Ask before renaming anything public.' },
-  autonomy: { of: 'working', n: 'asked', says: 'stopped to ask you', rule: 'Keep going on reversible work without asking.' },
-};
-export function patterns(t, c) {
-  if (!c || !c.working) return [];
-  return Object.entries(SEEN).map(([s, m]) => {
-    const pct = Math.round(100 * (c[m.n] || 0) / Math.max(1, c[m.of]));
-    const push = t.shares[s], often = pct >= (m.fault ? HIGH_FAULT : HIGH_DOING), pushed = push >= HIGH_PUSH;
-    // a fault you keep raising is a fight; activity you raise is just attention, since committing is not a failure
-    const has = !!(c.written && c.written[s]);
-    const kind = often && pushed ? (m.fault ? 'fighting it' : 'watched') : often ? (has ? 'covered' : 'blind spot') : pushed ? 'handled' : 'quiet';
-    return { spoke: s, kind, pct, count: c[m.n] || 0, of: c[m.of], push, says: m.says, rule: m.rule, has };
-  });
-}
-
-export function shapeSvg(t, found = []) {
+export function shapeSvg(t) {
   const names = t.spokes ? SPOKES : Object.keys(GROUPS);
   const vals = t.spokes ? names.map((s) => t.ratings[s] / 99) : names.map((g) => 0.25 + 0.75 * t.groups[g] / Math.max(1, ...Object.values(t.groups)));
   const pt = (i, v) => { const a = 2 * Math.PI * i / names.length; return [(500 + 330 * v * Math.sin(a)).toFixed(1), (520 - 330 * v * Math.cos(a)).toFixed(1)]; };
-  const doing = Object.fromEntries(found.map((f) => [f.spoke, f.pct]));
-  const topDoing = Math.max(1, ...Object.values(doing));
-  const seenPts = t.spokes && found.length ? names.flatMap((n, i) => (n in doing ? [pt(i, 0.4 + 0.59 * Math.sqrt(doing[n] / topDoing))] : [])) : [];
   const ring = (v) => names.map((_, i) => pt(i, v).join(',')).join(' ');
   const labels = names.map((n, i) => { const [x, y] = pt(i, 1.14); return `<text x="${x}" y="${y}" text-anchor="middle" fill="#e8e6e1" font-size="22" font-weight="700">${title(n)}</text><text x="${x}" y="${+y + 28}" text-anchor="middle" fill="#c9a24a" font-size="24" font-weight="700">${t.spokes ? t.ratings[n] : t.groups[n] + '%'}</text>`; }).join('');
-  return `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1000 1000" font-family="system-ui,sans-serif"><rect width="1000" height="1000" fill="#0b0e13"/><text x="50" y="70" fill="#e8e6e1" font-size="40" font-weight="700">My steering shape</text>${[0.25, 0.5, 0.75, 1].map((v) => `<polygon points="${ring(v)}" fill="none" stroke="#2a313b"/>`).join('')}<polygon points="${names.map((_, i) => pt(i, vals[i]).join(',')).join(' ')}" fill="#c9a24a" fill-opacity="0.35" stroke="#c9a24a" stroke-width="4"/>${seenPts.map(([x, y]) => `<circle cx="${x}" cy="${y}" r="9" fill="#4fb3a5"/>`).join('')}${labels}<text x="50" y="960" fill="#8d94a0" font-size="19">Gold: what I push on, from ${t.n} messages.${seenPts.length ? ' Teal dots: what the agent did.' : ''} Relative to my own top. Not a score. sawbuck.ai</text></svg>\n`;
+  return `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1000 1000" font-family="system-ui,sans-serif"><rect width="1000" height="1000" fill="#0b0e13"/><text x="50" y="70" fill="#e8e6e1" font-size="40" font-weight="700">My steering shape</text>${[0.25, 0.5, 0.75, 1].map((v) => `<polygon points="${ring(v)}" fill="none" stroke="#2a313b"/>`).join('')}<polygon points="${names.map((_, i) => pt(i, vals[i]).join(',')).join(' ')}" fill="#c9a24a" fill-opacity="0.35" stroke="#c9a24a" stroke-width="4"/>${labels}<text x="50" y="960" fill="#8d94a0" font-size="19">Gold: what I push on, from ${t.n} messages. Relative to my own top. Not a score. sawbuck.ai</text></svg>\n`;
+}
+
+// A PNG of the card, with what is already on the machine: sawbuck ships no image library. A snap browser sees neither
+// a hidden folder nor the real /tmp, so it works in a plain folder in home and the result is copied over.
+function pngCard(svg) {
+  const png = svg.replace(/\.svg$/, '.png');
+  rmSync(png, { force: true });
+  const run = (bin, args) => { try { execFileSync(bin, args, { stdio: 'ignore', timeout: 30000 }); return true; } catch { return false; } };
+  if (run('rsvg-convert', ['-w', '1200', '-o', png, svg]) && existsSync(png)) return png;
+  const tmp = join(dirname(dirname(svg)), `sawbuck-shape-${process.pid}`);
+  try {
+    mkdirSync(tmp, { recursive: true });
+    const a = join(tmp, 'shape.svg'), b = join(tmp, 'shape.png');
+    copyFileSync(svg, a);
+    for (const bin of ['google-chrome', 'chromium', 'chromium-browser']) {
+      if (run(bin, ['--headless', '--disable-gpu', '--hide-scrollbars', '--window-size=1000,1000', `--screenshot=${b}`, `file://${a}`]) && existsSync(b)) { copyFileSync(b, png); return png; }
+    }
+  } catch {} finally { rmSync(tmp, { recursive: true, force: true }); }
+  return '';
 }
 
 export function shapeCli(args, { home = homedir() } = {}) {
@@ -87,24 +80,16 @@ export function shapeCli(args, { home = homedir() } = {}) {
   mkdirSync(p.dir, { recursive: true });
   let prev = null;
   if (existsSync(p.hist)) { const l = readFileSync(p.hist, 'utf8').trim().split('\n').filter(Boolean); if (l.length) prev = JSON.parse(l[l.length - 1]); }
-  let c = null; try { c = JSON.parse(readFileSync(p.expo, 'utf8')); } catch {}
-  const found = patterns(t, c);
-  writeFileSync(p.svg, shapeSvg(t, found));
+  writeFileSync(p.svg, shapeSvg(t));
   const out = [`🐴 your steering shape, from ${t.n} messages that pushed on something (${t.none} did not). What you push on, not a score.`, ''];
   for (const [g, ss] of Object.entries(GROUPS)) {
     const was = prev && prev.groups[g] != null ? `  (was ${prev.groups[g]}%)` : '';
     out.push(`  ${g.padEnd(8)} ${String(t.groups[g]).padStart(3)}%${was}`);
     if (t.spokes) out.push(`    ${ss.map((s) => `${title(s)} ${t.ratings[s]}`).join('  ')}`);
   }
-  if (!t.spokes) out.push('', `  Too few messages for the 12 spokes (${t.n} of ${MIN_SPOKES}), so this shows the 4 groups.`);
-  appendFileSync(p.hist, JSON.stringify({ at: new Date().toISOString(), n: t.n, groups: t.groups, shares: t.shares, ...(c ? { exposure: c } : {}) }) + '\n');
-  const fight = found.filter((f) => f.kind === 'fighting it'), blind = found.filter((f) => f.kind === 'blind spot');
-  if (fight.length || blind.length) out.push('', '  Patterns to work on:');
-  for (const f of fight) out.push(`    Fighting it: ${title(f.spoke)}. You push on it (${f.push}%), and the agent still ${f.says} in ${f.pct}% of turns (${f.count} of ${f.of}).`, f.has ? '      You seem to have a written rule on this already, and it is not holding. Make it specific, or protect it in the contract.' : `      Try: ${f.rule}`);
-  for (const f of blind) out.push(`    Not said: ${title(f.spoke)}. The agent ${f.says} in ${f.pct}% of turns (${f.count} of ${f.of}), and only ${f.push}% of your pushes touch it. Is that what you want?`, `      Try: ${f.rule}`);
-  const covered = found.filter((f) => f.kind === 'covered');
-  if (covered.length) out.push('', `  Written down already, so left out: ${covered.map((f) => title(f.spoke)).join(', ')}. Matched by keyword, so check they say what you mean.`);
-  if (found.length) out.push('', '  What the agent did covers your last 90 days, not counting scratch work. Direction, scope, correctness and honesty have no behaviour signal, so they show only what you said.');
+  if (!t.spokes) out.push('', `  Too few messages for the 11 spokes (${t.n} of ${MIN_SPOKES}), so this shows the 4 groups.`);
+  appendFileSync(p.hist, JSON.stringify({ at: new Date().toISOString(), n: t.n, groups: t.groups, shares: t.shares }) + '\n');
   out.push('', `  Card: ${p.svg}`);
+  if (args.includes('--png')) { const png = pngCard(p.svg); out.push(png ? `  Image to share: ${png}` : '  No image tool here (rsvg-convert or Chrome): open the card in a browser to save an image.'); }
   return out.join('\n');
 }

package/status.mjs

@@ -12,6 +12,7 @@ import { execFileSync } from 'node:child_process';
 import { readFileSync, existsSync } from 'node:fs';
 import { join, dirname, resolve, basename } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { repoState } from './repo-state.mjs';
 
 const HERE = dirname(fileURLToPath(import.meta.url));
 const flag = (n, d) => { const i = process.argv.indexOf(n); return i > -1 ? (process.argv[i + 1] ?? true) : d; };
@@ -27,26 +28,19 @@ const ICON = { verified: '✓', gamed: '🚩', regression: '✗', inconclusive:
 // --- 1) the outcome record: what the check has done here -------------------
 // results.json holds the all-time catch tally (gamed + regression, never trimmed); activity.jsonl is
 // the recent per-check feed (verified included, capped ~200). We read both and keep each honest.
-const results = readJSON(join(repo, '.sawbuck', 'results.json')) || {};
+const { results, caught: catchesAllTime, state: kind, steer, armed, hasConfig } = repoState(repo);
 const feed = readLines(join(repo, '.sawbuck', 'activity.jsonl')).map((l) => { try { return JSON.parse(l); } catch { return null; } }).filter(Boolean);
 const tally = { verified: 0, gamed: 0, regression: 0, inconclusive: 0, allowed: 0, mandate: 0 };
 for (const e of feed) if (e && tally[e.kind] != null) tally[e.kind]++;
 const seen = feed.length;
-const catchesAllTime = (results.regressions || 0) + (results.gamed || 0) + (results.mandates || 0);
 const latest = results.latest || (feed.length ? feed[feed.length - 1] : null);
 const since = feed.length ? (feed[0].at || '').slice(0, 10) : null;
-// the steer rate, if the reins judge has been scoring turns here (an OFFLINE read of its file; the
+// the steer rate, if the reins judge has been scoring turns here (an OFFLINE read of its file, in repoState; the
 // recent-window average over roughly the last twenty scored turns, as the band and statusline show it)
-const steerRec = readJSON(join(repo, '.sawbuck', 'steer.json'));
-const steer = steerRec && steerRec.scored ? { rate: Math.round(((steerRec.ema != null ? steerRec.ema : steerRec.steeringRate) || 0) * 100), scored: steerRec.scored } : null;
 
-// --- 2) the armed state: what it can measure here (mirror of statusline) ---
+// --- 2) the armed state: what it can measure here (shared with the statusline) ---
 const isGit = !!existsSync(join(repo, '.git'));
-const hasConfig = existsSync(join(repo, 'promptwheel.config.json'));
-const watching = existsSync(join(repo, '.sawbuck', 'state.json'));
-const armed = hasConfig || existsSync(join(repo, 'package.json'));
-const mem = existsSync(join(repo, 'LOGBOOK.md')) || existsSync(join(repo, 'events.jsonl'));
-const state = watching ? 'watching' : armed ? 'ready' : mem ? 'memory' : 'unarmed';
+const state = kind || 'unarmed';
 
 // --- 3) the live debt ledger: best-effort, bounded -------------------------
 // A full-repo HEAD grep + gating; fast on normal repos, can be heavy on a giant one. Bounded so
@@ -143,7 +137,7 @@ if (!isGit) {
 } else if (state === 'watching') {
   out.push(`   Measuring here  ·  ${hasConfig ? '✓ wired in with a contract (promptwheel.config.json)' : '✓ wired in (zero-config auto-detect)'}. It verifies each commit/turn automatically.`);
 } else if (state === 'ready') {
-  out.push(`   Measuring here  ·  checkable but not wired yet. Try it now: \`sawbuck check\`  •  make it automatic: \`sawbuck attach --claude\``);
+  out.push(`   Measuring here  ·  checkable but not wired yet. Try it now: \`sawbuck check\`  •  make it automatic: \`sawbuck attach\``);
 } else {
   out.push(`   Measuring here  ·  ${hasConfig ? 'a contract exists' : 'no test command detected yet'}. \`sawbuck init\` to set up the check, or \`sawbuck context\` for the history alone.`);
 }

package/steers.mjs

@@ -37,7 +37,7 @@ export function steersReport({ json = false, home } = {}) {
   const groups = groupSteers(steers);
   const repeated = groups.filter((g) => g.n >= 3 && g.sessions >= 2);
   if (json) return JSON.stringify({ steers: steers.length, scored: stats.scored, unscored: stats.lost, repeated });
-  if (!steers.length && !stats.scored) return '🐴 sawbuck: no steers recorded yet. They appear here as you work with the plugin\'s judge on.';
+  if (!steers.length && !stats.scored) return '🐴 sawbuck: no steers recorded. The plugin\'s live judge is off by default; /sawbuck-reins:rules reads your history instead.';
   const out = [`🐴 ${steers.length} steers kept, from ${stats.scored} replies scored${stats.lost ? ` (${stats.lost} could not be scored, so this undercounts)` : ''}. Measured, not estimated.`];
   if (repeated.length) {
     out.push('', 'You keep saying:');

package/dispatch.mjs

@@ -1,34 +0,0 @@
-#!/usr/bin/env node
-// dispatch.mjs, the dispatch: a compact proof-of-work receipt from the results.
-// A receipt, not an ad. Silent when nothing's been recorded to show (unless --force).
-// Zero-dep. Usage: node dispatch.mjs [--repo <path>] [--force] [--json]
-
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-
-const flag = (n, d) => { const i = process.argv.indexOf(n); return i > -1 ? (process.argv[i + 1] ?? true) : d; };
-const repo = flag('--repo', process.cwd());
-const force = process.argv.includes('--force');
-
-let rec = null;
-try { rec = JSON.parse(readFileSync(join(repo, '.sawbuck', 'results.json'), 'utf8')); } catch {}
-
-const total = rec ? (rec.regressions || 0) + (rec.gamed || 0) + (rec.mandates || 0) : 0;
-if (!rec || (!total && !force)) process.exit(0);          // nothing recorded → stay quiet
-if (process.argv.includes('--json')) { console.log(JSON.stringify(rec)); process.exit(0); }
-
-const n = (x, s) => `${x} ${s}${x === 1 ? '' : 's'}`;
-const L = rec.latest;
-// Attribute the latest catch to the agent that made it (the Claude hook passes 'claude').
-let head;
-if (L && L.kind === 'gamed') head = L.by ? `🐴 Sawbuck caught ${L.by} gaming a metric` : `🐴 Sawbuck caught a gamed change`;
-else if (L && L.kind === 'regression') head = L.by ? `🐴 Sawbuck caught a regression from ${L.by}` : `🐴 Sawbuck caught a regression`;
-else head = `🐴 Sawbuck`;
-let line = head;
-if (L) {
-  const why = String(L.reason || L.kind).replace(/^a change here was gamed,\s*/i, '').replace(/^a change here\s+/i, '');
-  line += `\n   ${L.file}: ${why}`;
-}
-const tally = [rec.gamed ? n(rec.gamed, 'gamed change') : '', rec.regressions ? n(rec.regressions, 'regression') : ''].filter(Boolean).join(', ');
-if (tally) line += `\n   (${tally} caught here so far)`;
-console.log(line);

package/exposure.mjs

@@ -1,104 +0,0 @@
-// What was not said. The shape records what you pushed on; this records what the agent did, from your transcripts, so a
-// spoke can be read against its opportunity: an agent that often changes code and runs nothing, in history where you
-// rarely ask for proof, is a blind spot. Plain counting of tool calls. No model, nothing leaves this machine.
-import { readdirSync, readFileSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-import { readHistory, typedText } from './history.mjs';
-
-const VERIFY = /\b(test|tests|pytest|vitest|jest|mocha|ava|playwright|cargo (test|check)|go (test|vet)|tsc|eslint|lint|typecheck|npm run (build|check)|curl|sawbuck check|promptwheel run|make (test|check))\b/i;
-const RISKY_PATH = /(^|\/)(\.env[^/]*|\.npmrc|\.yarnrc(\.yml)?|\.github\/workflows\/[^/]+|Dockerfile[^/]*|docker-compose[^/]*|CODEOWNERS|\.claude\/settings(\.local)?\.json|[^/]*(secret|credential)[^/]*)$/i;
-const RISKY_CMD = /(git push[^|;&]*(--force|-f\b)|git reset --hard|curl[^|]*\|\s*(sh|bash)|sudo |drop table|chmod 777)/i;
-// deleting a temp or build folder is housekeeping, not risk: on real history two thirds of rm -rf were that
-const RM = /rm -rf\s+(\S+)/i, RM_SAFE = /tmp|scratch|\$|dist|build|node_modules|cache|\.next|coverage/i;
-const SHIP = /\b(git commit|git push|npm publish|gh pr (create|merge)|gh release|vercel|deploy)\b/i;
-const UI = /\.(css|scss|sass|less|tsx|jsx|vue|svelte|astro|html|svg)$/i;
-const COPY = /\.(md|mdx|txt|rst)$/i;
-const CODE = /\.(m?[jt]sx?|py|go|rs|rb|java|kt|cs|php|c|cc|cpp|h|swift|sh)$/i;
-const BIG = 200;
-const SCRATCH = /(^|\/)(tmp|scratchpad|scratch)\/|^\/tmp\/|\/\.claude\//;   // throwaway work does not need a test run
-const DAYS = 90;   // what to work on now, not what happened last year
-
-// Rules you have already written, by spoke. A plain keyword match on your own files, so it is a hint: it finds that a
-// rule on the subject exists, not that it says the right thing.
-const WRITTEN = {
-  proof: /\b(verify|verified|run the tests?|tests? pass|prove|proof|before claiming|before trusting)\b/i,
-  safety: /\b(secrets?|credentials?|force.?push|destructive|protected paths?|never delete|before deleting)\b/i,
-  simplicity: /\b(simple|simplify|bloat|smallest|minimal|keep it short|overengineer\w*)\b/i,
-  process: /\b(commit|push|publish|release|deploy)\b/i,
-  voice: /\b(em dash\w*|plain (words|language|voice)|tone|wording|ai tells?|voice)\b/i,
-  visual: /\b(design|layout|css|ui|colou?rs?|spacing)\b/i,
-  naming: /\b(naming|names?|rename)\b/i,
-  autonomy: /\b(do not ask|don't ask|ask first|ask before|proceed without|keep going)\b/i,
-};
-export function writtenRules({ home = homedir(), repo = process.cwd() } = {}) {
-  const files = [join(home, '.claude', 'CLAUDE.md'), join(home, '.sawbuck', 'rules.md'), join(repo, 'CLAUDE.md'), join(repo, 'AGENTS.md')];
-  const root = join(home, '.claude', 'projects');
-  try { for (const d of readdirSync(root)) { const m = join(root, d, 'memory'); if (existsSync(m)) for (const f of readdirSync(m)) if (/^feedback.*\.md$/.test(f)) files.push(join(m, f)); } } catch {}
-  let text = '';
-  for (const f of files) { try { text += '\n' + readFileSync(f, 'utf8'); } catch {} }
-  return Object.fromEntries(Object.entries(WRITTEN).map(([s, re]) => [s, re.test(text)]));
-}
-
-function lines(s) { return s ? String(s).split('\n').length : 0; }
-
-export function exposure({ root = join(homedir(), '.claude', 'projects'), days = DAYS } = {}) {
-  const since = days ? Date.now() - days * 864e5 : 0;
-  const WINDOW = 3;   // a check may come a turn or two later: count code as unchecked only if none ran in the next 3 turns
-  const c = { turns: 0, working: 0, code: 0, unverified: 0, risky: 0, big: 0, shipped: 0, ui: 0, copy: 0, renames: 0, asked: 0 };
-  let turn = null, T = [];
-  const close = () => {
-    if (!turn) return;
-    c.turns++; T.push(turn);
-    if (turn.tools) {
-      c.working++;
-      if (turn.code) c.code++;
-      if (turn.risky) c.risky++; if (turn.added >= BIG) c.big++; if (turn.ship) c.shipped++; if (turn.ui) c.ui++; if (turn.copy) c.copy++; if (turn.rename) c.renames++;
-      if (/\?\s*$/.test(turn.last)) c.asked++;
-    }
-    turn = null;
-  };
-  const endSession = () => {
-    close();
-    T.forEach((t, i) => { if (t.code && !T.slice(i, i + 1 + WINDOW).some((x) => x.verified)) c.unverified++; });
-    T = [];
-  };
-  const onTool = (b) => {
-    turn.tools++;
-    const i = b.input || {};
-    if (b.name === 'Bash') {
-      const cmd = String(i.command || '');
-      if (VERIFY.test(cmd)) turn.verified = true;
-      const rm = cmd.match(RM);
-      if (RISKY_CMD.test(cmd) || (rm && !RM_SAFE.test(rm[1]))) turn.risky = true;
-      if (SHIP.test(cmd)) turn.ship = true;
-      if (/\bgit mv\b/.test(cmd)) turn.rename = true;
-    } else if (b.name === 'Edit' || b.name === 'Write' || b.name === 'MultiEdit') {
-      const p = String(i.file_path || '');
-      if (CODE.test(p) && !SCRATCH.test(p)) turn.code++;
-      if (UI.test(p)) turn.ui = true;
-      if (COPY.test(p)) turn.copy = true;
-      if (RISKY_PATH.test(p)) turn.risky = true;
-      if (i.replace_all) turn.rename = true;
-      turn.added += Math.max(0, lines(i.content || i.new_string) - lines(i.old_string));
-    }
-  };
-  readHistory(root, {
-    onSession: endSession,
-    onEvent: (e) => {
-      if (since && e.timestamp && Date.parse(e.timestamp) < since) return;
-      if (e.type === 'user') {
-        if (typedText(e.message) === null) return;
-        close();
-        turn = { tools: 0, code: 0, verified: false, risky: false, added: 0, ship: false, ui: false, copy: false, rename: false, last: '' };
-      } else if (turn && Array.isArray(e.message && e.message.content)) {
-        for (const b of e.message.content) {
-          if (b.type === 'text') turn.last = b.text || turn.last;
-          if (b.type === 'tool_use') onTool(b);
-        }
-      }
-    },
-  });
-  return c;
-}
-if (import.meta.url === `file://${process.argv[1]}`) console.log(JSON.stringify(exposure()));

package/providers/claude.mjs

@@ -1,49 +0,0 @@
-#!/usr/bin/env node
-// claude.mjs, a REFERENCE read-only memory provider: your project's Claude Code memory (CLAUDE.md,
-// AGENTS.md, and top-level .claude/*.md) as a recall source. It is the most UBIQUITOUS local memory -
-// a Claude Code repo already has it - so it is zero-setup. READ-ONLY by design: recall only; debt and
-// record EXIT NONZERO (unsupported). This is a view of memory you already keep, not a write target
-// (writing findings into CLAUDE.md would bloat the always-loaded project context), and the contract
-// lets a provider implement a subset. Inherently leaf-scoped (reads only this repo's files, so no
-// cross-repo leak). Zero-dep, offline, local-notes axis.
-//
-//   recall --file P [--file Q] --json   relevant lines from your project memory -> Finding[] (kind note)
-//   debt | record                        EXIT NONZERO (unsupported)
-
-import { readFileSync, readdirSync, existsSync, statSync } from 'node:fs';
-import { join, basename, extname } from 'node:path';
-
-const argv = process.argv.slice(2);
-const cmd = argv[0];
-const flagAll = (n) => argv.reduce((a, v, i) => (argv[i - 1] === n ? [...a, v] : a), []);
-const die = (m, c = 2) => { process.stderr.write(`claude provider: ${m}\n`); process.exit(c); };
-const CWD = process.cwd();
-
-if (cmd === 'debt' || cmd === 'record') die(`${cmd} is unsupported (claude memory is a read-only recall source)`, 2);
-
-if (cmd === 'recall') {
-  const paths = flagAll('--file');
-  if (!paths.length) { console.log('[]'); process.exit(0); }
-  const matches = (l) => paths.find((p) => l.includes(p) || (basename(p).length > 2 && l.includes(basename(p)))) || null;
-  // the project's Claude Code memory: CLAUDE.md / AGENTS.md at the root, plus top-level .claude/*.md.
-  const sources = [];
-  for (const f of ['CLAUDE.md', 'AGENTS.md']) { const p = join(CWD, f); if (existsSync(p)) sources.push(p); }
-  try { for (const e of readdirSync(join(CWD, '.claude'))) if (extname(e).toLowerCase() === '.md') sources.push(join(CWD, '.claude', e)); } catch {}
-  const out = [];
-  for (const src of sources) {
-    let text = ''; try { if (statSync(src).size > 512 * 1024) continue; text = readFileSync(src, 'utf8'); } catch { continue; }
-    const lines = text.split('\n');
-    let heading = basename(src);
-    for (let i = 0; i < lines.length; i++) {
-      const h = lines[i].match(/^#{1,6}\s+(.+)/);
-      if (h) { heading = h[1].trim(); continue; }
-      const hit = matches(lines[i]);
-      if (!hit) continue;
-      out.push({ kind: 'note', path: hit, ref: `${basename(src)}:${i + 1}`, date: null, summary: `${heading}: ${lines[i].trim()}`.slice(0, 280), score: 0.4 });
-    }
-  }
-  console.log(JSON.stringify(out.slice(0, 8)));
-  process.exit(0);
-}
-
-die(`unknown command '${cmd || ''}' (recall | debt | record)`, 2);

package/providers/local.mjs

@@ -1,55 +0,0 @@
-#!/usr/bin/env node
-// local.mjs, a REFERENCE minimal local-file memory provider: the simplest way to fill the socket with
-// no external tool. Findings live as JSON in <repo>/.sawbuck/memory-notes.json (git-excluded by attach).
-// It is the cleanest conformance target and a "bring your own, just a file" option. Zero-dep, offline,
-// in the local-notes axis alongside obsidian. Folder-scoped like the others.
-//
-//   recall --file P [--scope ID ...] --json   -> Finding[] (kind note)
-//   record --ref SHA --summary S [--scope ID] [--side X] [--evidence-file F] --by WHO
-//   debt   --json                              EXITS NONZERO (a note store is not git-aware)
-//
-// Store: SAWBUCK_LOCAL_MEMORY, else <cwd>/.sawbuck/memory-notes.json.
-
-import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
-import { join, basename, dirname } from 'node:path';
-
-const argv = process.argv.slice(2);
-const cmd = argv[0];
-const flagAll = (n) => argv.reduce((a, v, i) => (argv[i - 1] === n ? [...a, v] : a), []);
-const flag = (n, d) => { const i = argv.indexOf(n); return i > -1 ? (argv[i + 1] ?? true) : d; };
-const die = (m, c = 2) => { process.stderr.write(`local provider: ${m}\n`); process.exit(c); };
-
-const STORE = process.env.SAWBUCK_LOCAL_MEMORY || join(process.cwd(), '.sawbuck', 'memory-notes.json');
-const load = () => { try { const v = JSON.parse(readFileSync(STORE, 'utf8')); return Array.isArray(v) ? v : []; } catch { return []; } };
-
-if (cmd === 'debt') die('debt is unsupported by a note store (git-truth lives in a git provider like logbook)', 2);
-
-if (cmd === 'recall') {
-  const paths = flagAll('--file');
-  if (!paths.length) { console.log('[]'); process.exit(0); }
-  const scopes = new Set(flagAll('--scope'));            // self + ancestors; empty (direct call) = match any
-  const bases = paths.map((p) => basename(p));
-  const out = [];
-  for (const f of load()) {
-    if (scopes.size && f.scope != null && !scopes.has(f.scope)) continue;   // isolation: a sibling scope is excluded
-    const hit = (f.path && paths.includes(f.path)) || (f.summary && bases.some((b) => f.summary.includes(b)));
-    if (!hit) continue;
-    out.push({ kind: 'note', path: f.path ?? null, ref: f.ref ?? null, date: f.date ?? null, summary: String(f.summary || '').slice(0, 280), scope: f.scope ?? '', score: 0.5 });
-  }
-  out.sort((a, b) => String(b.date).localeCompare(String(a.date)));
-  console.log(JSON.stringify(out.slice(0, 8)));
-  process.exit(0);
-}
-
-if (cmd === 'record') {
-  const ref = String(flag('--ref', '')), summary = String(flag('--summary', '')), by = String(flag('--by', 'sawbuck'));
-  const scope = flagAll('--scope')[0] ?? '';
-  const side = flag('--side', ''), evidence = flag('--evidence-file', '');
-  const notes = load();
-  if (notes.some((f) => f.ref === ref && f.summary === summary && f.scope === scope)) { console.log('recorded (already present)'); process.exit(0); }
-  notes.push({ ref, summary, path: evidence || null, scope, by, ...(side ? { side: String(side) } : {}), date: new Date().toISOString().slice(0, 10) });
-  try { mkdirSync(dirname(STORE), { recursive: true }); writeFileSync(STORE, JSON.stringify(notes, null, 2) + '\n'); console.log('recorded'); process.exit(0); }
-  catch (e) { die(`write failed: ${String(e.message).split('\n')[0]}`, 1); }
-}
-
-die(`unknown command '${cmd || ''}' (recall | debt | record)`, 2);

package/providers/mem0.mjs

@@ -1,120 +0,0 @@
-#!/usr/bin/env node
-// mem0.mjs, a REFERENCE semantic memory provider for Sawbuck's Memory Contract: Mem0 (mem0.ai) as the
-// memory.
-//
-// STATUS: VERIFIED against the live Mem0 platform v3 API on 2026-10-31. /v3/memories/search/ and
-// /v3/memories/add/ both returned 200 with the documented shapes (search -> { results: [...] }, add ->
-// { event_id, ... }) using the Token auth header. Offline degrade (no key -> [], debt unsupported) is
-// also tested. Adapt the query/scoping to taste; the wire calls are known-good.
-//
-// It is the THIRD contract implementation and a deliberately DIFFERENT axis from the other two:
-// a networked, LLM-backed semantic store, where logbook is deterministic git-truth and obsidian is
-// local notes. Because of that it is the one provider that is NOT offline: it needs the NETWORK and a
-// MEM0_API_KEY. So it is an OPTIONAL provider isolated behind the socket, never part of the zero-network
-// glue. Zero npm deps (Node >= 18 global fetch).
-//
-// Opt in: SAWBUCK_MEMORY=logbook,mem0 and MEM0_API_KEY=... (compose it WITH logbook so logbook stays the
-// git-truth + debt provider and Mem0 adds recalled semantic context).
-//
-//   recall --file P [--file Q] --json   semantic search of your Mem0 memories -> Finding[] (kind note)
-//   record --ref SHA --summary S --by WHO [--side X] [--evidence-file F]   add the finding as a memory
-//   debt   --json                        EXITS NONZERO: a semantic store is not git-aware (git-truth
-//                                         lives in a git provider like logbook); the contract skips it.
-//
-// Config: MEM0_API_KEY, or a `~/.mem0` key file (a plain token, or JSON with api_key/key); without a
-// key recall degrades to [] and record errors. Also MEM0_USER_ID (scope override), MEM0_NAMESPACE
-// (id prefix), MEM0_BASE_URL (default https://api.mem0.ai), MEM0_TIMEOUT_MS (default 8000). NOTE:
-// record SENDS the finding text to Mem0's service (your opt-in).
-
-import { readFileSync } from 'node:fs';
-import { basename, join } from 'node:path';
-import { homedir } from 'node:os';
-
-// the API key: MEM0_API_KEY, else a ~/.mem0 file (a plain token, or JSON with api_key/apiKey/key).
-function mem0Key() {
-  if (process.env.MEM0_API_KEY) return process.env.MEM0_API_KEY;
-  try {
-    const raw = readFileSync(join(homedir(), '.mem0'), 'utf8').trim();
-    if (raw.startsWith('{')) { const j = JSON.parse(raw); return j.api_key || j.apiKey || j.key || ''; }
-    return raw.split(/\s+/)[0] || '';
-  } catch { return ''; }
-}
-
-const argv = process.argv.slice(2);
-const cmd = argv[0];
-const flagAll = (n) => argv.reduce((a, v, i) => (argv[i - 1] === n ? [...a, v] : a), []);
-const flag = (n, d) => { const i = argv.indexOf(n); return i > -1 ? (argv[i + 1] ?? true) : d; };
-const die = (msg, code = 2) => { process.stderr.write(`mem0 provider: ${msg}\n`); process.exit(code); };
-
-// FOLDER SCOPING: each folder scope maps to a Mem0 user_id. --scope carries the chain, leaf-first
-// (paths relative to the memory root; "" is the root/shared scope). recall queries self + ancestors
-// and merges; record writes to the LEAF scope. MEM0_NAMESPACE prefixes the ids (keep them from
-// colliding with other Mem0 usage in the same account); MEM0_USER_ID, if set, overrides to a single
-// flat scope. With no --scope (direct call), it falls back to the repo folder name.
-const NS = process.env.MEM0_NAMESPACE || '';
-const scopeUid = (id) => process.env.MEM0_USER_ID || [NS, id || 'root'].filter(Boolean).join(':');
-const scopeUids = (scopes) => {
-  if (process.env.MEM0_USER_ID) return [process.env.MEM0_USER_ID];
-  if (scopes.length) return [...new Set(scopes.map(scopeUid))];
-  return [basename(process.cwd()) || 'sawbuck']; // back-compat: no scope passed
-};
-
-// one bounded POST to the Mem0 platform; null on any network/HTTP/auth failure, so a read never hangs
-// or crashes the caller. (A semantic recall is on-demand, never per-turn, so the timeout is generous.)
-async function post(path, body, key) {
-  const base = (process.env.MEM0_BASE_URL || 'https://api.mem0.ai').replace(/\/$/, '');
-  const ctrl = new AbortController();
-  const timer = setTimeout(() => ctrl.abort(), +(process.env.MEM0_TIMEOUT_MS) || 8000);
-  try {
-    const r = await fetch(base + path, {
-      method: 'POST',
-      headers: { Authorization: `Token ${key}`, 'Content-Type': 'application/json', Accept: 'application/json' },
-      body: JSON.stringify(body),
-      signal: ctrl.signal,
-    });
-    if (!r.ok) return null;
-    return await r.json();
-  } catch { return null; } finally { clearTimeout(timer); }
-}
-
-if (cmd === 'debt') {
-  die('debt is unsupported by a semantic store (git-truth lives in a git provider like logbook)', 2);
-}
-
-if (cmd === 'recall') {
-  const key = mem0Key();
-  if (!key) { console.log('[]'); process.exit(0); }                 // no key -> no memories, not an error
-  const paths = flagAll('--file');
-  if (!paths.length) { console.log('[]'); process.exit(0); }
-  const query = `code, decisions, and gotchas related to: ${paths.map((p) => basename(p)).join(', ')}`;
-  const seen = new Set();
-  const findings = [];
-  // one search per scope's user_id (self + ancestors), merged; isolated from sibling scopes.
-  for (const uid of scopeUids(flagAll('--scope'))) {
-    const res = await post('/v3/memories/search/', { query, filters: { user_id: uid }, top_k: 8 }, key);
-    for (const m of (res && Array.isArray(res.results) ? res.results : [])) {
-      if (!m.memory || seen.has(m.id)) continue;
-      seen.add(m.id);
-      findings.push({ kind: 'note', path: null, ref: m.id || null, date: (m.created_at || '').slice(0, 10) || null, summary: String(m.memory).slice(0, 280), scope: uid, score: typeof m.score === 'number' ? m.score : null });
-    }
-  }
-  console.log(JSON.stringify(findings.slice(0, 8)));
-  process.exit(0);
-}
-
-if (cmd === 'record') {
-  const key = mem0Key();
-  if (!key) die('cannot record: MEM0_API_KEY is unset', 2);
-  const ref = String(flag('--ref', '')), summary = String(flag('--summary', '')), by = String(flag('--by', 'sawbuck'));
-  const side = flag('--side', ''), evidence = flag('--evidence-file', '');
-  const leaf = flagAll('--scope')[0];
-  const userId = process.env.MEM0_USER_ID || (leaf !== undefined ? scopeUid(leaf) : (basename(process.cwd()) || 'sawbuck'));
-  const metadata = { sawbuck: 'finding', ref, by, scope: leaf ?? '', ...(side ? { side: String(side) } : {}), ...(evidence ? { evidence: String(evidence) } : {}) };
-  // infer:false stores the finding verbatim (no LLM extraction); we want the exact note, not a paraphrase.
-  const res = await post('/v3/memories/add/', { messages: [{ role: 'user', content: summary }], user_id: userId, metadata, infer: false }, key);
-  if (res === null) die('record failed (network or auth)', 1);
-  console.log('recorded');
-  process.exit(0);
-}
-
-die(`unknown command '${cmd || ''}' (recall | debt | record)`, 2);