sphica 0.6.35 → 0.6.37

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "sphica",
-  "version": "0.6.35",
+  "version": "0.6.37",
   "description": "Records Claude Code and Codex sessions on your machine and keeps past implementation and decisions, with their sources, for your agent to find.",
   "author": {
     "name": "iroha924",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "sphica",
-  "version": "0.6.35",
+  "version": "0.6.37",
   "description": "Records Claude Code and Codex sessions on your machine and keeps past implementation and decisions, with their sources, for your agent to find.",
   "author": {
     "name": "iroha924",

package/README.md

@@ -74,7 +74,7 @@ In Codex, open `/hooks` and mark Sphica's hooks as trusted. Automatic recording
 **3. Set up in your repository**
 
 ```bash
-cd ~/Projects/your-repo
+cd path/to/your-repo
 sphica init
 ```
 

package/db/migrations/0011.sql

@@ -0,0 +1,26 @@
+-- Revision 10 → 11 of generation 2: a harvest run keeps the sources it may cite, chosen when it begins (harvest_run_source). A running
+-- harvest has none, so it is removed and its session gets "Begin again"; nothing cites a running run (a save also finishes it).
+-- Every statement that stays is the same as in the schema at revision 11.
+
+create temp table sphica_migration_note (rule text, item text, action text);
+
+create table harvest_run_source (
+  run_id integer not null references extraction_run (id) on delete cascade,
+  source_id integer not null references source (id) on delete cascade,
+  primary key (run_id, source_id)
+) strict;
+create index harvest_run_source_source on harvest_run_source (source_id);
+
+create trigger harvest_run_source_run before insert on harvest_run_source begin
+  select raise(abort, 'only a harvest run keeps sources, from its own project')
+  where (select origin from extraction_run where id = new.run_id) is not 'harvest'
+    or (select project_id from source where id = new.source_id) is not (select project_id from extraction_run where id = new.run_id);
+end;
+
+insert into sphica_migration_note
+select 'a harvest run still running, begun before its sources were kept', 'run ' || id || ' ' || target || ' begun ' || started_at,
+  'removed; begin the harvest again'
+from extraction_run where origin = 'harvest' and status = 'running' order by id;
+delete from extraction_run where origin = 'harvest' and status = 'running';
+
+pragma user_version = 11;

package/db/schema.sql

@@ -6,7 +6,7 @@
 --   captured sources   session, source, artifact_link, edit_observation: what was said or written, never rewritten
 --                      (the owner can forget chosen sources: forget_batch and source_forgotten keep what was removed, without its text)
 --   extracted units    unit and its option, evidence, adoption, link, state, anchor, alias tables: what was decided or implemented
---   processing         extraction_run, source_processing: what has been looked at and saved, so gaps are counted
+--   processing         extraction_run, source_processing, harvest_run_source: what has been looked at and saved, so gaps are counted
 --   work and delivery  work, delivery, delivery_unit: the current work status and what the hooks injected
 -- Every table is STRICT and every primary key is not null. Times are ISO 8601 UTC (`Date#toISOString()`); `strftime(...) is column` rejects others.
 -- Paths (a source's, an edit observation's, an anchor's) are repository-relative with forward slashes, in one form, so one place
@@ -293,6 +293,15 @@ create table source_processing (
 ) strict;
 create index source_processing_run on source_processing (run_id);
 
+-- The sources a harvest run may show and cite, chosen when it begins, so another harvest of the same pull request cannot change them.
+-- Ids only; a source the owner forgets leaves with its row
+create table harvest_run_source (
+  run_id integer not null references extraction_run (id) on delete cascade,
+  source_id integer not null references source (id) on delete cascade,
+  primary key (run_id, source_id)
+) strict;
+create index harvest_run_source_source on harvest_run_source (source_id);
+
 -- An extracted unit. Its text is never rewritten: corrections are successors, withdrawals, retractions, and anchor replacements.
 -- extraction: supported (every evidence span was found in retained text) or quarantined (with reason).
 -- lifecycle changes only through unit_state (its trigger sets this column). revision rises with every change to the unit's relations,
@@ -981,6 +990,11 @@ create trigger source_processing_project before insert on source_processing begi
   select raise(abort, 'source and run belong to different projects')
   where (select project_id from source where id = new.source_id) is not (select project_id from extraction_run where id = new.run_id);
 end;
+create trigger harvest_run_source_run before insert on harvest_run_source begin
+  select raise(abort, 'only a harvest run keeps sources, from its own project')
+  where (select origin from extraction_run where id = new.run_id) is not 'harvest'
+    or (select project_id from source where id = new.source_id) is not (select project_id from extraction_run where id = new.run_id);
+end;
 
 -- Every change to a unit's relations raises its revision (stale drafts are refused against it)
 create trigger unit_rev_evidence_i after insert on unit_evidence begin update unit set revision = revision + 1 where id = new.unit_id; end;
@@ -1211,4 +1225,4 @@ create trigger capture_delivery_prune_insert instead of insert on capture_delive
     order by d.at, d.id limit 200);
 end;
 
-pragma user_version = 10;
+pragma user_version = 11;

package/dist/capture.js

@@ -11396,7 +11396,7 @@ var HOST_MARKS = new Set([".orphaned_at", ".in_use"]);
 
 // server/src/sqlite.ts
 var SCHEMA_GENERATION = 2;
-var SCHEMA_REVISION = 10;
+var SCHEMA_REVISION = 11;
 var sphicaHome = () => process.env.SPHICA_HOME || path2.join(os.homedir(), ".sphica");
 var dbFile = () => process.env.SPHICA_DB || path2.join(sphicaHome(), "sphica.db");
 function requireRuntime() {
@@ -11597,6 +11597,7 @@ var INGEST_INSERTS = new Set([
   "ingest_source",
   "extraction_run",
   "source_processing",
+  "harvest_run_source",
   "unit",
   "unit_option",
   "unit_evidence",
@@ -11692,6 +11693,7 @@ var FORGET_WRITES = {
     "unit_evidence",
     "unit_adoption",
     "source_processing",
+    "harvest_run_source",
     "source_fts",
     "field_def",
     "unit_field",

package/dist/cli.js

@@ -93,7 +93,6 @@ var require_src = __commonJS(function(exports, module) {
 
 // server/src/cli.ts
 import fs10 from "node:fs";
-import os4 from "node:os";
 import path10 from "node:path";
 
 // server/node_modules/@clack/core/dist/index.mjs
@@ -4912,7 +4911,7 @@ ${indent}${caution(note)}` : ""}`);
 
 // server/src/sqlite.ts
 var SCHEMA_GENERATION = 2;
-var SCHEMA_REVISION = 10;
+var SCHEMA_REVISION = 11;
 var sphicaHome = () => process.env.SPHICA_HOME || path3.join(os2.homedir(), ".sphica");
 var dbFile = () => process.env.SPHICA_DB || path3.join(sphicaHome(), "sphica.db");
 function requireRuntime() {
@@ -15957,6 +15956,7 @@ var INGEST_INSERTS = new Set([
   "ingest_source",
   "extraction_run",
   "source_processing",
+  "harvest_run_source",
   "unit",
   "unit_option",
   "unit_evidence",
@@ -16052,6 +16052,7 @@ var FORGET_WRITES = {
     "unit_evidence",
     "unit_adoption",
     "source_processing",
+    "harvest_run_source",
     "source_fts",
     "field_def",
     "unit_field",
@@ -16120,7 +16121,6 @@ var sessionId = (projectId, host, externalId) => uuidFrom(String(projectId), hos
 // server/src/project.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
 import fs6 from "node:fs";
-import os3 from "node:os";
 import path6 from "node:path";
 
 // server/src/anchors.ts
@@ -16348,48 +16348,6 @@ function nameLocal(dir, name) {
   });
   return { key: `local:${name}`, root, name };
 }
-function underHome(p, homes, api = path6) {
-  for (const h2 of homes) {
-    const rel = api.relative(h2, p);
-    if (rel === "")
-      return "~";
-    if (rel !== ".." && !rel.startsWith(`..${api.sep}`) && !api.isAbsolute(rel))
-      return `~${api.sep}${rel}`;
-  }
-  return p;
-}
-var projectsDir = () => path6.join(os3.homedir(), "Projects");
-function localRoots(roots = [projectsDir()]) {
-  const seen = new Map;
-  const add = (p) => {
-    if (p)
-      seen.set(p.key, [...new Set([...seen.get(p.key) ?? [], p.root])]);
-  };
-  for (const r2 of roots) {
-    let entries = [];
-    try {
-      entries = fs6.readdirSync(r2, { withFileTypes: true });
-    } catch {
-      continue;
-    }
-    for (const e of entries)
-      if (e.isDirectory() && !e.name.startsWith("."))
-        add(identify(path6.join(r2, e.name)));
-  }
-  for (const [root, name] of Object.entries(localMap())) {
-    if (LOCAL_KEY.test(name) && fs6.existsSync(root))
-      add({ key: `local:${name}`, root, name });
-  }
-  const found = new Map;
-  const ambiguous = new Map;
-  for (const [key, dirs] of seen) {
-    if (dirs.length === 1 && dirs[0])
-      found.set(key, dirs[0]);
-    else
-      ambiguous.set(key, dirs);
-  }
-  return { found, ambiguous };
-}
 function relativeTo(root, file, cwd = root) {
   const abs = path6.resolve(cwd, file);
   const rel = path6.relative(root, abs);
@@ -18769,14 +18727,7 @@ async function doctor(cwd) {
         if (twice.length)
           say2("warn", "Records", `${plural(twice.length, "set")} of live records hold the same words. Read them with Sphica's read and withdraw the extra ones with /sphica:glean`);
         await adoptionStops(db, q.waiting, say2);
-        const { found, ambiguous } = localRoots();
-        const homes = [os4.homedir()];
-        try {
-          homes.push(fs10.realpathSync.native(os4.homedir()));
-        } catch {}
-        const tilde = (p) => underHome(p, homes);
         const rows = await db.selectFrom("project as p").select((eb) => [
-          "p.key",
           "p.name",
           eb.selectFrom("unit as u").select((u3) => u3.fn.countAll().as("n")).whereRef("u.project_id", "=", "p.id").as("records"),
           eb.selectFrom("extraction_run as r").select((r2) => r2.fn.max("r.finished_at").as("at")).whereRef("r.project_id", "=", "p.id").where("r.status", "=", "saved").where("r.origin", "<>", "migration").as("extracted")
@@ -18784,11 +18735,8 @@ async function doctor(cwd) {
         if (rows.length)
           console.log(section("Projects", true));
         const column = Math.max(...rows.map((x) => width(inline(x.name)))) + 2;
-        for (const x of rows) {
-          const copies = ambiguous.get(x.key);
-          const where = copies ? ` (${copies.length} copies: ${copies.map((c) => inline(tilde(c))).sort().join(", ")})` : found.get(x.key) ? "" : ` (not found in ${inline(tilde(projectsDir()))} or the named projects)`;
-          console.log(indent(`  ${mark("none")} ${pad(inline(x.name), column)}${plural(Number(x.records ?? 0), "record")}${x.extracted ? ` / last extraction ${new Date(x.extracted).toLocaleString("sv-SE")}` : ""}${where}`));
-        }
+        for (const x of rows)
+          console.log(indent(`  ${mark("none")} ${pad(inline(x.name), column)}${plural(Number(x.records ?? 0), "record")}${x.extracted ? ` / last extraction ${new Date(x.extracted).toLocaleString("sv-SE")}` : ""}`));
       });
     } catch (e) {
       say2("fail", "DB", `cannot read: ${plain(reason(e))}`);

package/dist/deliver.js

@@ -11427,7 +11427,7 @@ var HOST_MARKS = new Set([".orphaned_at", ".in_use"]);
 
 // server/src/sqlite.ts
 var SCHEMA_GENERATION = 2;
-var SCHEMA_REVISION = 10;
+var SCHEMA_REVISION = 11;
 var sphicaHome = () => process.env.SPHICA_HOME || path3.join(os.homedir(), ".sphica");
 var dbFile = () => process.env.SPHICA_DB || path3.join(sphicaHome(), "sphica.db");
 function requireRuntime() {
@@ -11652,6 +11652,7 @@ var INGEST_INSERTS = new Set([
   "ingest_source",
   "extraction_run",
   "source_processing",
+  "harvest_run_source",
   "unit",
   "unit_option",
   "unit_evidence",
@@ -11747,6 +11748,7 @@ var FORGET_WRITES = {
     "unit_evidence",
     "unit_adoption",
     "source_processing",
+    "harvest_run_source",
     "source_fts",
     "field_def",
     "unit_field",

package/dist/mcp-record.js

@@ -46183,7 +46183,7 @@ var HOST_MARKS = new Set([".orphaned_at", ".in_use"]);
 
 // server/src/sqlite.ts
 var SCHEMA_GENERATION = 2;
-var SCHEMA_REVISION = 10;
+var SCHEMA_REVISION = 11;
 var sphicaHome = () => process.env.SPHICA_HOME || path2.join(os.homedir(), ".sphica");
 var dbFile = () => process.env.SPHICA_DB || path2.join(sphicaHome(), "sphica.db");
 function requireRuntime() {
@@ -46274,6 +46274,20 @@ async function inTransaction(db, fn) {
     }
   });
 }
+async function inRolledBack(db, fn) {
+  return db.connection().execute(async (c) => {
+    await sql`begin immediate`.execute(c);
+    let out;
+    try {
+      out = await fn(c);
+    } catch (e) {
+      await sql`rollback`.execute(c).catch(() => {});
+      throw e;
+    }
+    await sql`rollback`.execute(c);
+    return out;
+  });
+}
 var iso = (d) => {
   const t = new Date(d);
   if (Number.isNaN(t.getTime()))
@@ -46384,6 +46398,7 @@ var INGEST_INSERTS = new Set([
   "ingest_source",
   "extraction_run",
   "source_processing",
+  "harvest_run_source",
   "unit",
   "unit_option",
   "unit_evidence",
@@ -46479,6 +46494,7 @@ var FORGET_WRITES = {
     "unit_evidence",
     "unit_adoption",
     "source_processing",
+    "harvest_run_source",
     "source_fts",
     "field_def",
     "unit_field",
@@ -47787,6 +47803,7 @@ var item = (v) => ({
   commit: null,
   ...v
 });
+var said = (body) => body?.trim() ? body : "";
 var sha = (s) => s && /^[0-9a-f]{40}$/.test(s) ? s : null;
 var cleanPath = (p) => p && !p.startsWith("/") && !p.includes("\\") && !/\p{Cc}/u.test(p) && !p.split("/").some((x) => x === "" || x === "." || x === "..") ? p : null;
 async function readPull(get, number5, repo = null) {
@@ -47807,52 +47824,49 @@ async function readPull(get, number5, repo = null) {
     association: p.author_association ?? null,
     url: p.html_url,
     createdAt: p.created_at,
-    text: p.body?.trim() ? p.body : ""
+    text: said(p.body)
   }));
   for (const c of comments)
-    if (c.body?.trim())
-      items.push(item({
-        kind: "pr_comment",
-        artifact,
-        externalId: `comment:${c.id}`,
-        author: c.user ?? null,
-        association: c.author_association ?? null,
-        url: c.html_url,
-        createdAt: c.created_at,
-        text: c.body
-      }));
+    items.push(item({
+      kind: "pr_comment",
+      artifact,
+      externalId: `comment:${c.id}`,
+      author: c.user ?? null,
+      association: c.author_association ?? null,
+      url: c.html_url,
+      createdAt: c.created_at,
+      text: said(c.body)
+    }));
   for (const r of reviews)
-    if (r.body?.trim())
-      items.push(item({
-        kind: "review",
-        artifact,
-        externalId: `review:${r.id}`,
-        author: r.user ?? null,
-        association: r.author_association ?? null,
-        url: r.html_url,
-        createdAt: r.submitted_at ?? p.created_at,
-        text: r.body
-      }));
-  for (const c of reviewComments)
-    if (c.body?.trim()) {
-      const end = c.line ?? null;
-      const start = c.start_line && c.start_line <= (end ?? 0) && (c.start_side ?? c.side) === c.side ? c.start_line : end;
-      items.push(item({
-        kind: "review_comment",
-        artifact,
-        externalId: `review_comment:${c.id}`,
-        author: c.user ?? null,
-        association: c.author_association ?? null,
-        parent: c.in_reply_to_id ? `review_comment:${c.in_reply_to_id}` : null,
-        url: c.html_url,
-        createdAt: c.created_at,
-        text: c.body,
-        path: cleanPath(c.path),
-        lines: cleanPath(c.path) && end && start ? [start, end] : null,
-        hunk: c.diff_hunk ?? null,
-        commit: sha(c.commit_id)
-      }));
-    }
+    items.push(item({
+      kind: "review",
+      artifact,
+      externalId: `review:${r.id}`,
+      author: r.user ?? null,
+      association: r.author_association ?? null,
+      url: r.html_url,
+      createdAt: r.submitted_at ?? p.created_at,
+      text: said(r.body)
+    }));
+  for (const c of reviewComments) {
+    const end = c.line ?? null;
+    const start = c.start_line && c.start_line <= (end ?? 0) && (c.start_side ?? c.side) === c.side ? c.start_line : end;
+    items.push(item({
+      kind: "review_comment",
+      artifact,
+      externalId: `review_comment:${c.id}`,
+      author: c.user ?? null,
+      association: c.author_association ?? null,
+      parent: c.in_reply_to_id ? `review_comment:${c.in_reply_to_id}` : null,
+      url: c.html_url,
+      createdAt: c.created_at,
+      text: said(c.body),
+      path: cleanPath(c.path),
+      lines: cleanPath(c.path) && end && start ? [start, end] : null,
+      hunk: c.diff_hunk ?? null,
+      commit: sha(c.commit_id)
+    }));
+  }
   for (const c of commits)
     items.push(item({
       kind: "commit_message",
@@ -47885,29 +47899,27 @@ async function readIssue(get, n) {
   const issue2 = await get(`issues/${n}`);
   if (issue2.pull_request)
     return items;
-  if (issue2.body?.trim())
+  items.push(item({
+    kind: "issue_body",
+    artifact: `issue:${n}`,
+    externalId: `issue:${n}`,
+    author: issue2.user ?? null,
+    association: issue2.author_association ?? null,
+    url: issue2.html_url,
+    createdAt: issue2.created_at,
+    text: said(issue2.body)
+  }));
+  for (const c of await get(`issues/${n}/comments?per_page=100`, true))
     items.push(item({
-      kind: "issue_body",
+      kind: "issue_comment",
       artifact: `issue:${n}`,
-      externalId: `issue:${n}`,
-      author: issue2.user ?? null,
-      association: issue2.author_association ?? null,
-      url: issue2.html_url,
-      createdAt: issue2.created_at,
-      text: issue2.body
+      externalId: `comment:${c.id}`,
+      author: c.user ?? null,
+      association: c.author_association ?? null,
+      url: c.html_url,
+      createdAt: c.created_at,
+      text: said(c.body)
     }));
-  for (const c of await get(`issues/${n}/comments?per_page=100`, true))
-    if (c.body?.trim())
-      items.push(item({
-        kind: "issue_comment",
-        artifact: `issue:${n}`,
-        externalId: `comment:${c.id}`,
-        author: c.user ?? null,
-        association: c.author_association ?? null,
-        url: c.html_url,
-        createdAt: c.created_at,
-        text: c.body
-      }));
   return items;
 }
 function githubTarget(repo, url2) {
@@ -47996,12 +48008,16 @@ async function linkIssues(db, projectId2, number5, closes) {
       kind: "closes"
     }).onConflict((oc) => oc.doNothing()).execute();
 }
-async function pullSources(db, projectId2, number5) {
+async function pullSourceIds(db, projectId2, number5) {
   const artifacts = [
     `pr:${number5}`,
     ...(await db.selectFrom("artifact_link").select("to_artifact").where("project_id", "=", projectId2).where("from_artifact", "=", `pr:${number5}`).execute()).map((l) => l.to_artifact)
   ];
-  return db.selectFrom("source as s").where("s.project_id", "=", projectId2).where("s.artifact", "in", artifacts).where(({ not, exists, selectFrom }) => not(exists(selectFrom("source as n").select("n.id").whereRef("n.project_id", "=", "s.project_id").whereRef("n.kind", "=", "s.kind").whereRef("n.external_id", "=", "s.external_id").whereRef("n.revision", ">", "s.revision")))).where(({ not, exists, selectFrom }) => not(exists(selectFrom("source_forgotten as f").select("f.source_id").whereRef("f.project_id", "=", "s.project_id").whereRef("f.kind", "=", "s.kind").whereRef("f.external_id", "=", "s.external_id").whereRef("f.revision", ">", "s.revision")))).select([
+  const rows = await db.selectFrom("source as s").where("s.project_id", "=", projectId2).where("s.artifact", "in", artifacts).where(({ not, exists, selectFrom }) => not(exists(selectFrom("source as n").select("n.id").whereRef("n.project_id", "=", "s.project_id").whereRef("n.kind", "=", "s.kind").whereRef("n.external_id", "=", "s.external_id").whereRef("n.revision", ">", "s.revision")))).where(({ not, exists, selectFrom }) => not(exists(selectFrom("source_forgotten as f").select("f.source_id").whereRef("f.project_id", "=", "s.project_id").whereRef("f.kind", "=", "s.kind").whereRef("f.external_id", "=", "s.external_id").whereRef("f.revision", ">", "s.revision")))).select("s.id").execute();
+  return rows.map((r) => r.id);
+}
+async function runSources(db, runId) {
+  return db.selectFrom("harvest_run_source as h").innerJoin("source as s", "s.id", "h.source_id").where("h.run_id", "=", runId).where(({ not, exists, selectFrom }) => not(exists(selectFrom("source_forgotten as f").select("f.source_id").whereRef("f.project_id", "=", "s.project_id").whereRef("f.kind", "=", "s.kind").whereRef("f.external_id", "=", "s.external_id").whereRef("f.revision", ">", "s.revision")))).select([
     "s.id",
     "s.kind",
     "s.artifact",
@@ -48010,7 +48026,6 @@ async function pullSources(db, projectId2, number5) {
     "s.author_login",
     "s.author_association",
     "s.created_at",
-    "s.captured_at",
     "s.path",
     "s.line_start",
     "s.text"
@@ -48690,9 +48705,7 @@ async function checkRecord(db, target, raw, facts = prepareRecord(target.root, r
     ...new Set(record4.units.flatMap((u) => [...u.supersedes ? [u.supersedes] : [], ...u.conflicts]))
   ];
   const others = new Map((linked.length ? await db.selectFrom("unit as o").select(["o.id", "o.key", "o.kind", "o.lifecycle"]).where("o.project_id", "=", target.projectId).where("o.key", "in", linked).execute() : []).map((u) => [u.key, u]));
-  const holders = new Map((others.size ? await db.selectFrom("unit_replacement as h").innerJoin("unit as n", "n.id", "h.from_unit").select(["h.to_unit", "n.key", "n.lifecycle"]).where("h.ended_at", "is", null).where("h.to_unit", "in", [...others.values()].map((o) => o.id)).execute() : []).map((h) => [h.to_unit, h]));
   const units = [];
-  const claimed = new Set;
   for (const [i, u] of record4.units.entries()) {
     const key = keys[i] ?? "";
     const quarantine = [];
@@ -48850,23 +48863,14 @@ async function checkRecord(db, target, raw, facts = prepareRecord(target.root, r
     let supersedes = null;
     if (u.supersedes) {
       const old = others.get(u.supersedes);
-      const implemented = () => evidence.some((e) => e.role === "implements" && (["commit_message", "file_excerpt"].includes(sources.get(e.source)?.kind ?? "") || anchors.some((a) => a.role === "evidence" && (a.commit || a.observation !== null && sources.get(e.source)?.session_id === target.sessionId)))) || anchors.some((a) => a.role === "evidence" && a.commit);
-      const takes = ["decision", "constraint"].includes(u.kind) ? adoption.some((x) => x.route !== "agent") : u.kind !== "implementation" || implemented();
       if (!old)
         errors3.push(`${key}: supersedes ${u.supersedes}, which is not a record of this project`);
       else if (!["active", "candidate"].includes(old.lifecycle))
         errors3.push(`${key}: ${u.supersedes} is already ${old.lifecycle}`);
-      else if (claimed.has(old.id) && !quarantine.length && takes)
-        errors3.push(`${key}: another record in this save already supersedes ${u.supersedes}`);
       else if (!replaceable(u.kind, old.kind))
         errors3.push(`${key}: a ${u.kind} cannot supersede ${u.supersedes}, a ${old.kind} (a record supersedes one of its own kind; a decision and a constraint can replace each other)`);
-      else if (holders.has(old.id) && !quarantine.length && takes) {
-        const h = holders.get(old.id);
-        errors3.push(`${key}: ${u.supersedes} already has a successor, ${h?.key} (${h?.lifecycle}); withdraw it first, or supersede it instead`);
-      } else
+      else
         supersedes = old.id;
-      if (supersedes !== null && !quarantine.length && takes)
-        claimed.add(supersedes);
     }
     const conflicts = u.conflicts.flatMap((k) => {
       const other = others.get(k);
@@ -49000,12 +49004,20 @@ var contentHash = (u) => sha256(JSON.stringify([
   u.revisit_when ?? null,
   u.options.map((o) => o.reconsider_when === undefined ? [o.text, o.outcome, o.why ?? null] : [o.text, o.outcome, o.why ?? null, o.reconsider_when])
 ]));
+
+class SaveRefused extends Error {
+}
 async function settleSaved(trx, runId, saved, more = {}) {
   const written = new Map(saved.written.map((w) => [w.id, w]));
   const settled2 = await reconcile(trx, [...written.keys(), ...more.seeds ?? []], { runId }, {
     hints: new Map(saved.written.map((w) => [w.id, w.hint])),
     withdraw: more.withdraw
   });
+  const mine = new Set([...written.keys(), ...more.adopted ?? []]);
+  const key = (id) => settled2.keys.get(id) ?? `u${id}`;
+  for (const [id, [to, holder]] of settled2.held)
+    if (mine.has(id))
+      throw new SaveRefused(mine.has(holder) ? `${key(id)}: another record in this save already supersedes ${key(to)}` : `${key(id)}: ${key(to)} already has a successor, ${key(holder)} (in effect); withdraw it first, or supersede it instead`);
   const now = new Map(settled2.changes.map((c) => [c.id, c.after]));
   for (const w of saved.written) {
     if (saved.quarantined.some((q) => q.startsWith(`${w.key} (`)))
@@ -49178,7 +49190,6 @@ ${checked.errors.map((e) => `  ${e}`).join(`
     saved.written.push({
       id,
       key: p.key,
-      adopted: p.adoption.length > 0,
       hint: {
         reason: p.adoption.length ? "evidence and adoption found" : "evidence found",
         source: p.adoption[0]?.source ?? p.evidence[0]?.source ?? null
@@ -49476,9 +49487,6 @@ async function checkGlean(db, target, raw, facts = prepareGlean(target.root, raw
         errors3.push(`${what}: the merge does not adopt a proposal`);
       else if (got && got.s.author_kind !== "owner" && !MAINTAINERS2.has(got.s.author_association ?? ""))
         errors3.push(`${what}: only the owner or a maintainer can adopt`);
-      const held = await db.selectFrom("unit_link as l").innerJoin("unit_replacement as r", (j) => j.onRef("r.to_unit", "=", "l.to_unit").on("r.ended_at", "is", null)).innerJoin("unit as h", "h.id", "r.from_unit").innerJoin("unit as t", "t.id", "l.to_unit").where("l.from_unit", "=", u.id).where("l.kind", "=", "supersedes").where("r.from_unit", "!=", u.id).select(["h.key as holder", "t.key as replaced"]).executeTakeFirst();
-      if (held && !parsed.data.ops.some((o) => o.op === "withdraw" && o.unit === held.holder))
-        errors3.push(`${what}: ${held.replaced} already has a successor, ${held.holder} (in effect); withdraw it first, or supersede it instead`);
     }
     if (op.op === "anchor" && !repoPath(op.path))
       errors3.push(`${what}: the path is not inside the repository`);
@@ -49495,8 +49503,8 @@ async function checkGlean(db, target, raw, facts = prepareGlean(target.root, raw
     if (op.op === "replace_anchor") {
       if (!repoPath(op.to.path))
         errors3.push(`${what}: the path is not inside the repository`);
-      const said = await span(op.source, op.quote, what);
-      if (said && said.s.author_kind !== "owner")
+      const said2 = await span(op.source, op.quote, what);
+      if (said2 && said2.s.author_kind !== "owner")
         errors3.push(`${what}: only the owner's words can move an anchor`);
       const from = repoPath(op.from.path);
       if (!from)
@@ -49772,16 +49780,11 @@ ${c.errors.map((e) => `  ${e}`).join(`
   }
   const settled2 = await settleSaved(trx, runId, units, {
     seeds: [...touched.keys(), ...withdraw.keys()],
-    withdraw
+    withdraw,
+    adopted
   });
   for (const id of settled2.redundant)
     changed2.push(`${settled2.keys.get(id)}: superseded by a record of this save, so not withdrawn`);
-  for (const w of units.written)
-    if (w.adopted)
-      adopted.add(w.id);
-  for (const [id, [to, holder]] of settled2.held)
-    if (adopted.has(id))
-      throw new Error(`${settled2.keys.get(id)}: ${settled2.keys.get(to)} already has a successor, ${settled2.keys.get(holder)} (in effect); withdraw it first, or supersede it instead`);
   const written = new Set(units.written.map((w) => w.id));
   for (const ch of settled2.changes) {
     if (written.has(ch.id))
@@ -49974,7 +49977,7 @@ async function beginHarvest(db, projectId2, number5, get, beginCall) {
     const kept = (await storeItems(trx, projectId2, pull.items)).filter((id) => id !== null).length;
     await linkIssues(trx, projectId2, number5, pull.closes);
     const run = newRunId();
-    await openRun(trx, {
+    const runId = await openRun(trx, {
       projectId: projectId2,
       origin: "harvest",
       target: `pr:${number5}`,
@@ -49982,6 +49985,8 @@ async function beginHarvest(db, projectId2, number5, get, beginCall) {
       draftId: run,
       beginCall
     });
+    for (const sourceId of await pullSourceIds(trx, projectId2, number5))
+      await trx.insertInto("harvest_run_source").values({ run_id: runId, source_id: sourceId }).execute();
     return { run, sources: kept };
   });
 }
@@ -50036,7 +50041,7 @@ async function agentRun(db, run, call) {
 async function scopeOf(db, run, root) {
   if (run.origin === "harvest") {
     const number5 = Number(run.target.slice("pr:".length));
-    const sources2 = (await pullSources(db, run.project_id, number5)).filter((x) => x.captured_at <= run.started_at);
+    const sources2 = await runSources(db, run.id);
     return {
       target: {
         projectId: run.project_id,
@@ -50240,42 +50245,43 @@ function contextOnly(id, items, c) {
     ...c.work && !c.units.length ? ["work: an automatic run updates work only beside a record of the messages it traces"] : []
   ];
 }
-async function checkText(db, id, projectId2, root, record4, call) {
-  const run = await bound(db, id, projectId2);
-  const { target, items } = await scopeOf(db, run, root);
-  target.agent = await agentRun(db, run, call);
-  const c = run.origin === "glean" ? await checkGlean(db, target, record4) : await checkRecord(db, target, record4);
-  if (!("ops" in c))
-    c.errors.push(...contextOnly(id, items, c));
-  const units = "ops" in c ? c.units.units : c.units;
-  const lines = [
-    ...c.errors.map((e) => `✗ ${e}`),
-    ...c.problems.map((p) => `△ ${p}`),
-    ...units.filter((u) => u.quarantine.length).map((u) => `△ ${u.key} will be quarantined: ${u.quarantine.join("; ")}`)
-  ];
-  const summary = c.errors.length ? `✗ ${plural2(c.errors.length, "error")}; fix the record and check again` : `✓ ${plural2(units.length, "record")}${"ops" in c ? ` and ${plural2(c.ops.length, "change")}` : ""} can be saved`;
-  return { ok: c.errors.length === 0, text: [...lines, summary].join(`
-`) };
-}
-async function saveText(db, id, projectId2, root, record4, probe, call) {
+async function prepare2(db, id, projectId2, root, record4, probe, call) {
   const begun = await bound(db, id, projectId2);
   if (call !== undefined && begun.begin_call_id !== null)
     await sameCaller(db, begun.begin_call_id, call);
-  const glean = begun.origin === "glean";
-  const gleanFacts = glean ? prepareGlean(root, record4, probe) : undefined;
-  const facts = gleanFacts ?? prepareRecord(root, record4, probe);
-  const text3 = await inTransaction(db, async (trx) => {
-    const run = await bound(trx, id, projectId2);
-    const scope = await scopeOf(trx, run, root);
-    scope.target.agent = await agentRun(trx, run, call);
-    const lines = [];
-    const notes = [];
-    const saved = run.origin === "glean" ? await saveGlean(trx, scope.target, run.id, await checkGlean(trx, scope.target, record4, gleanFacts)).then((g) => {
-      lines.push(...g.changed.map((c) => `✓ ${c}`));
-      return g.units;
-    }) : await checkRecord(trx, scope.target, record4, facts).then((checked) => {
-      checked.errors.push(...contextOnly(id, scope.items, checked));
-      notes.push(...checked.problems);
+  const gleanFacts = begun.origin === "glean" ? prepareGlean(root, record4, probe) : undefined;
+  return { facts: gleanFacts ?? prepareRecord(root, record4, probe), gleanFacts };
+}
+async function validate2(trx, id, projectId2, root, record4, prepared, call) {
+  const run = await bound(trx, id, projectId2);
+  const scope = await scopeOf(trx, run, root);
+  scope.target.agent = await agentRun(trx, run, call);
+  const quarantine = (units) => units.filter((u) => u.quarantine.length).map((u) => `${u.key} will be quarantined: ${u.quarantine.join("; ")}`);
+  if (run.origin === "glean") {
+    const c = await checkGlean(trx, scope.target, record4, prepared.gleanFacts);
+    return {
+      run,
+      errors: c.errors,
+      problems: c.problems,
+      quarantine: quarantine(c.units.units),
+      units: c.units.units.length,
+      ops: c.ops.length,
+      write: async (w) => {
+        const g = await saveGlean(w, scope.target, run.id, c);
+        return { saved: g.units, changed: g.changed };
+      }
+    };
+  }
+  const checked = await checkRecord(trx, scope.target, record4, prepared.facts);
+  checked.errors.push(...contextOnly(id, scope.items, checked));
+  return {
+    run,
+    errors: checked.errors,
+    problems: checked.problems,
+    quarantine: quarantine(checked.units),
+    units: checked.units.length,
+    ops: null,
+    write: async (w) => {
       const shown = shownTo.get(id)?.sources ?? new Set;
       const cited = new Set([
         ...checked.units.flatMap((u) => [
@@ -50286,17 +50292,62 @@ async function saveText(db, id, projectId2, root, record4, probe, call) {
         ]),
         ...checked.fieldDefs
       ].map((q) => q.source));
-      return saveRecord(trx, scope.target, run.id, checked, scope.looked.filter((s) => shown.has(s) || cited.has(s)));
-    });
-    await finishRun(trx, run.id);
+      const saved = await saveRecord(w, scope.target, run.id, checked, scope.looked.filter((s) => shown.has(s) || cited.has(s)));
+      return { saved, changed: [] };
+    }
+  };
+}
+async function checkText(db, id, projectId2, root, record4, call, probe) {
+  const prepared = await prepare2(db, id, projectId2, root, record4, probe, call);
+  const { v, done, refused } = await inRolledBack(db, async (trx) => {
+    const v2 = await validate2(trx, id, projectId2, root, record4, prepared, call);
+    if (v2.errors.length)
+      return { v: v2, done: null, refused: null };
+    try {
+      const done2 = await v2.write(trx);
+      await finishRun(trx, v2.run.id);
+      return { v: v2, done: done2, refused: null };
+    } catch (e) {
+      if (!(e instanceof SaveRefused))
+        throw e;
+      return { v: v2, done: null, refused: e.message };
+    }
+  });
+  const errors3 = [...v.errors, ...refused === null ? [] : [refused]];
+  const lines = [
+    ...errors3.map((e) => `✗ ${e}`),
+    ...[...new Set(v.problems)].map((p) => `△ ${p}`),
+    ...done ? [
+      ...done.saved.active.map((k) => `✓ would be active: ${k}`),
+      ...done.saved.superseded.map((k) => `✓ would be superseded: ${k}`),
+      ...done.saved.candidates.map((c) => `△ would stay a candidate: ${c.key}: ${c.why}`),
+      ...done.saved.quarantined.map((q) => `△ would be quarantined: ${q}`),
+      ...[...new Set(done.saved.anchorProblems)].filter((a) => !v.problems.some((p) => p === a || p.endsWith(` ${a}`))).map((a) => `△ ${a}`),
+      ...done.changed.map((c) => `✓ would: ${c}`)
+    ] : v.quarantine.map((q) => `△ ${q}`)
+  ];
+  const summary = errors3.length ? `✗ ${plural2(errors3.length, "error")}; fix the record and check again` : `✓ ${plural2(v.units, "record")}${v.ops === null ? "" : ` and ${plural2(v.ops, "change")}`} can be saved`;
+  return { ok: errors3.length === 0, text: [...lines, summary].join(`
+`) };
+}
+async function saveText(db, id, projectId2, root, record4, probe, call) {
+  const prepared = await prepare2(db, id, projectId2, root, record4, probe, call);
+  const text3 = await inTransaction(db, async (trx) => {
+    const v = await validate2(trx, id, projectId2, root, record4, prepared, call);
+    if (v.errors.length)
+      throw new Error(`The record is not valid:
+${v.errors.map((e) => `  ${e}`).join(`
+`)}`);
+    const { saved, changed: changed2 } = await v.write(trx);
+    await finishRun(trx, v.run.id);
     return [
       ...saved.active.map((k) => `✓ ${k} active`),
       ...saved.superseded.map((k) => `✓ ${k} superseded`),
       ...saved.candidates.map((c) => `△ ${c.key} candidate: ${c.why}`),
       ...saved.quarantined.map((q) => `△ ${q} quarantined`),
       ...saved.anchorProblems.map((a) => `△ ${a}`),
-      ...notes.map((n) => `△ ${n}`),
-      ...lines,
+      ...v.ops === null ? v.problems.map((n) => `△ ${n}`) : [],
+      ...changed2.map((c) => `✓ ${c}`),
       "✓ saved"
     ].join(`
 `);
@@ -50595,7 +50646,7 @@ server.registerTool("record_context", {
 }));
 server.registerTool("record_check", {
   title: "Check a record",
-  description: "Checks a record against the run's retained text without saving it.",
+  description: "Checks a record by running the save in a transaction that rolls back: it refuses what record_save would refuse and says what would become of each record (would be active, would stay a candidate, would be superseded), writing nothing.",
   inputSchema: exports_external.object({ run: RUN, record: RECORD, cwd: CWD }).strict(),
   annotations: READ
 }, async (a, extra) => tool(async () => {

package/dist/mcp.js

@@ -46004,7 +46004,7 @@ var HOST_MARKS = new Set([".orphaned_at", ".in_use"]);
 
 // server/src/sqlite.ts
 var SCHEMA_GENERATION = 2;
-var SCHEMA_REVISION = 10;
+var SCHEMA_REVISION = 11;
 var sphicaHome = () => process.env.SPHICA_HOME || path2.join(os.homedir(), ".sphica");
 var dbFile = () => process.env.SPHICA_DB || path2.join(sphicaHome(), "sphica.db");
 function requireRuntime() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sphica",
-  "version": "0.6.35",
+  "version": "0.6.37",
   "description": "Records Claude Code and Codex sessions on your machine and keeps past implementation and decisions, with their sources, for your agent to find.",
   "license": "MIT",
   "type": "module",

package/skills/glean/SKILL.md

@@ -49,8 +49,9 @@ read tools `search` and `read`. Pass the repository root as `cwd` to every tool.
    the owner's message that quotes it
 5. **Read**: `record_context` with the run: the owner's messages in this session with their refs. When a page ends with
    `call record_context with after: "s<N>"`, call it again with that `after`
-6. **Check**: `record_check` with the run and the record below. Fix errors and check again. A note to ask the owner for a source means
-   step 2 is not done
+6. **Check**: `record_check` with the run and the record below. It runs the save in a transaction that rolls back, so it refuses what the
+   save would refuse and lists what would change (`would be active`, `would: <change>`) without writing it. Fix errors and check again. A
+   note to ask the owner for a source means step 2 is not done
 7. **Save**: `record_save`. **Report** what changed, copying save's lines
 
 ## The record

package/skills/harvest/SKILL.md

@@ -37,7 +37,8 @@ as `cwd` to every tool.
    sources an earlier harvest already looked at: what they decided may already be saved, so search before recording it again. Read all of it before writing:
    when a page ends with `call record_context with after: "s<N>"`, call it again with that `after`, until the last page
 4. **Check**: `record_check` with the run and the record as `record`. The shape and fields are trace's ([../trace/SKILL.md](../trace/SKILL.md),
-   "The record"), with `work` left out. Keys are saved as `harvest:<number>/<key>`. Fix and check again until there are no errors.
+   "The record"), with `work` left out. Keys are saved as `harvest:<number>/<key>`. As in trace, check runs the save in a transaction that
+   rolls back and says what would become of each record (`would be active`, ...). Fix and check again until there are no errors.
    A file the pull request touched may have moved since: on a warning that a path is not in the working tree, give the commit that holds it,
    or anchor where the code is now
 5. **Save**: `record_save` with the same run and record

package/skills/trace/SKILL.md

@@ -41,7 +41,9 @@ Everything goes through Sphica's `record` MCP server (its tools are `trace_pendi
    the last page (the one with the live records). Saving marks as looked at only the messages you were shown and those you quote; the
    rest stay pending.
    Use `search` and `read` to look at older records this session may replace
-4. **Check**: `record_check` with the run and the record below as `record`. Errors refuse the save; fix and check again. Warnings say what will be
+4. **Check**: `record_check` with the run and the record below as `record`. It runs the save in a transaction that rolls back, so nothing is
+   written: it refuses what the save would refuse, and says what would become of each record (`would be active`, `would stay a candidate` with
+   the reason, `would be superseded`, `would be quarantined`). Errors refuse the save; fix and check again. Warnings say what will be
    left out, quarantined, or kept as a candidate, and why. An anchor warning (a path not in the working tree, with near paths; a directory; a
    symbol not in the file) means fix the anchor and check again; keep it only when you know it is right
 5. **Save**: `record_save` with the same run and record. A run saves once