visionclaw 0.1.209 → 0.1.210-beta.2

package/dist/factcheck/sidecar.js

@@ -1,348 +0,0 @@
-/**
- * Async Fact-Check Sidecar (issue #530).
- *
- * Decoupled from the main agent turn, this sidecar audits the agent's recent
- * *assertions* (its reasoning, prose, and notify_user messages — not tool
- * inputs/results), then surfaces corrections before the next reasoning step. It
- * runs in-process (matching the EventTriggerSidecar / CalendarInterruptPoller
- * pattern) but every audit executes asynchronously off the agent's critical
- * path.
- *
- * Triggers (any fires an audit):
- *   1. Counter-based: N consecutive whitelisted tool calls (config N, default
- *      5) *arm* the trigger; the audit fires on the next agent assertion so the
- *      snapshot contains the claim the tool results produced, not the
- *      pre-tool-call state.
- *   2. Compaction: context compaction detected → force audit + reset counter.
- *   3. Engine switch: engine change detected → force audit + reset counter.
- *   4. Turn end: the agent finished its turn → audit any not-yet-audited
- *      assertions, so the final user-facing claim (often a blacklisted
- *      notify_user that never trips the counter) is still checked.
- *
- * Concurrency: strictly serial. While an audit runs, at most one further
- * trigger is held pending (coalesced); it runs immediately after the current
- * audit completes. This keeps the corrections file write conflict-free and the
- * behaviour predictable.
- */
-import { logger } from "../logger.js";
-import { runFactCheckAudit } from "./agent.js";
-import { appendAuditLog, appendPendingCorrections } from "./store.js";
-/**
- * Tool names (bare, sans `mcp__visionclaw__` prefix) that do NOT count toward
- * the audit trigger. Matched against the suffix of the fully qualified tool
- * name (see {@link isBlacklisted}).
- *
- * Design: the counter trigger is a *blacklist*, not a whitelist — any tool we
- * don't recognise (e.g. third-party MCP servers, Playwright `browser_*`, file
- * reads) is assumed to do external work that could surface a fact, so it
- * counts. We only exclude tools that, by construction, introduce no new
- * verifiable fact:
- *
- *   - Control flow / turn management: finish, wait, switch_session, upgrade.
- *   - Messaging / notifications: notify_user (also covered by the turn-end
- *     trigger, which audits the final user-facing claim).
- *   - Bookkeeping / configuration (no external data): memory, TaskCreate/
- *     Update/List, manage_skills, manage_mcp_servers, manage_event_trigger,
- *     manage_totp, manage_calendar, manage_email, remote_desktop.
- *   - Pure GUI/device *actions* (operate, don't observe): the computer_use_* /
- *     android_use_* click/move/scroll/drag/type/key/press/long_press/open
- *     family. Their matching *_screenshot variants are intentionally NOT
- *     blacklisted — a screenshot surfaces new on-screen facts the agent may
- *     then assert.
- *
- * Note: since the counter only *arms* the trigger and the audit fires on the
- * next agent assertion (with the turn-end trigger as a backstop), this list
- * just needs to be roughly right — an over/under-count shifts an audit's
- * timing, it never drops the final claim.
- */
-const BLACKLIST = new Set([
-    // Control flow / turn management
-    "finish",
-    "wait",
-    "switch_session",
-    "upgrade",
-    // Messaging / notifications
-    "notify_user",
-    // Bookkeeping / configuration (introduce no external fact)
-    "memory",
-    "TaskCreate",
-    "TaskUpdate",
-    "TaskList",
-    "manage_email",
-    "manage_calendar",
-    "manage_totp",
-    "manage_skills",
-    "manage_mcp_servers",
-    "manage_event_trigger",
-    "remote_desktop",
-    // Pure GUI/device actions (operate, don't observe). The *_screenshot
-    // variants are deliberately omitted so on-screen facts still count.
-    "computer_use_click",
-    "computer_use_move",
-    "computer_use_scroll",
-    "computer_use_drag",
-    "computer_use_type",
-    "computer_use_key",
-    "android_use_click",
-    "android_use_long_press",
-    "android_use_type",
-    "android_use_scroll",
-    "android_use_drag",
-    "android_use_press",
-    "android_use_open",
-]);
-export class FactCheckSidecar {
-    config;
-    deps;
-    whitelistCount = 0;
-    running = false;
-    stopped = false;
-    /**
-     * The counter threshold has been reached but we are waiting for the agent's
-     * next assertion before auditing — so the snapshot contains the claim the
-     * tool results produced rather than the stale pre-tool-call state.
-     */
-    counterArmed = false;
-    /**
-     * An assertion has been recorded since the last audit started. Gates the
-     * turn-end trigger so an idle/empty turn doesn't fire a pointless audit, and
-     * ensures the final user-facing claim is always covered by at least one audit.
-     */
-    hasUnauditedAssertions = false;
-    /** At most one coalesced pending trigger while an audit is in flight. */
-    pendingTrigger = null;
-    /**
-     * AbortController for the currently-running audit, if any. Lets {@link stop}
-     * cancel in-flight LLM/MCP work so a disabled sidecar doesn't keep burning
-     * tokens or persist stale findings after the user toggles it off.
-     */
-    activeController = null;
-    constructor(deps) {
-        this.config = deps.config;
-        this.deps = deps;
-    }
-    get enabled() {
-        return this.config.factCheck.enabled;
-    }
-    get threshold() {
-        return this.config.factCheck.triggerEveryNToolCalls;
-    }
-    /** Returns true when the sidecar is active for this profile. */
-    start() {
-        if (!this.enabled) {
-            logger.debug("[factcheck] sidecar disabled");
-            return false;
-        }
-        this.stopped = false;
-        this.whitelistCount = 0;
-        this.counterArmed = false;
-        this.hasUnauditedAssertions = false;
-        logger.system(`[factcheck] sidecar started (trigger every ${this.threshold} whitelisted tool call(s))`);
-        return true;
-    }
-    stop() {
-        this.stopped = true;
-        // Cancel any in-flight audit so it doesn't keep running (and persisting
-        // findings) after the feature has been toggled off. The audit's own
-        // catch/finally handles the abort; we just need the signal to fire.
-        this.activeController?.abort();
-    }
-    /**
-     * Observe a single top-level tool call. Increments the whitelist counter for
-     * non-blacklisted tools; when the threshold is reached it *arms* the counter
-     * trigger rather than auditing immediately. The audit fires on the next
-     * agent assertion ({@link recordAssertion}) so the snapshot reflects the
-     * claim the tool results produced, not the pre-tool-call state. Safe to call
-     * on the agent's hot path — it never blocks.
-     */
-    recordToolCall(toolName) {
-        if (!this.enabled || this.stopped)
-            return;
-        if (isBlacklisted(toolName))
-            return;
-        this.whitelistCount += 1;
-        if (this.whitelistCount >= this.threshold) {
-            this.whitelistCount = 0;
-            this.counterArmed = true;
-        }
-    }
-    /**
-     * Observe a top-level agent assertion (reasoning / prose / notify_user). This
-     * is where the verifiable claims live, so it both (a) fires an armed counter
-     * audit now that the claim exists in the snapshot, and (b) marks that there
-     * is fresh content for a turn-end audit to cover.
-     */
-    recordAssertion() {
-        if (!this.enabled || this.stopped)
-            return;
-        this.hasUnauditedAssertions = true;
-        if (this.counterArmed) {
-            this.counterArmed = false;
-            this.fire("counter");
-        }
-    }
-    /**
-     * The agent finished its turn. Audit any assertions not yet covered by an
-     * audit — notably the final notify_user answer, which is blacklisted from the
-     * counter and would otherwise never be checked.
-     */
-    onTurnEnd() {
-        if (!this.enabled || this.stopped)
-            return;
-        if (!this.hasUnauditedAssertions)
-            return;
-        this.fire("turn_end");
-    }
-    /** Force an audit on context compaction, resetting the counter. */
-    onCompaction() {
-        if (!this.enabled || this.stopped)
-            return;
-        this.whitelistCount = 0;
-        this.counterArmed = false;
-        this.fire("compaction");
-    }
-    /** Force an audit on engine switch, resetting the counter. */
-    onEngineSwitch() {
-        if (!this.enabled || this.stopped)
-            return;
-        this.whitelistCount = 0;
-        this.counterArmed = false;
-        this.fire("engine_switch");
-    }
-    /**
-     * Schedule an audit. If one is already running, record (coalesce) the
-     * trigger and return — it will run once the current audit finishes. Counter
-     * triggers never overwrite a higher-priority forced trigger that is already
-     * pending.
-     */
-    fire(trigger) {
-        if (this.running) {
-            // Coalesce: keep a forced trigger over a counter trigger if both queue up.
-            if (this.pendingTrigger === null || (this.pendingTrigger === "counter" && trigger !== "counter")) {
-                this.pendingTrigger = trigger;
-            }
-            logger.debug(`[factcheck] audit in flight; coalesced trigger=${trigger}`);
-            return;
-        }
-        void this.runAudit(trigger);
-    }
-    async runAudit(trigger) {
-        this.running = true;
-        // Hard-bound the audit with an AbortController. On timeout we abort the
-        // in-flight work (LLM + MCP/HTTP calls observe the signal) AND we await the
-        // audit promise to actually settle before releasing the serial lock — so a
-        // slow audit can never overlap the next one (#2). The same controller is
-        // also aborted by {@link stop}, so a disabled sidecar cancels its running
-        // audit instead of letting it finish (and persist stale findings) detached.
-        const controller = new AbortController();
-        this.activeController = controller;
-        const timer = setTimeout(() => {
-            logger.warn(`[factcheck] audit exceeded ${this.config.factCheck.auditTimeoutMs}ms; aborting`);
-            controller.abort();
-        }, this.config.factCheck.auditTimeoutMs);
-        timer.unref();
-        try {
-            const snapshot = this.deps.getSnapshot();
-            // The snapshot now covers the current assertions, so clear the turn-end
-            // gate. Assertions recorded after this point re-arm it for a later audit.
-            this.hasUnauditedAssertions = false;
-            logger.debug(`[factcheck] starting audit (trigger=${trigger}, ${snapshot.length} chars)`);
-            const { findings, claimResults } = await runFactCheckAudit({
-                config: this.config,
-                snapshot,
-                financialVerification: this.config.factCheck.financialVerification,
-                signal: controller.signal,
-            });
-            // Record the full audit (every claim + outcome) to the operator-facing
-            // append-only history, regardless of how findings are delivered. Skip
-            // when stopped so a disabled sidecar leaves no trailing records. This is
-            // independent of corrections.json (which is read-then-deleted).
-            if (claimResults.length > 0 && !this.stopped) {
-                await appendAuditLog({
-                    at: new Date().toISOString(),
-                    trigger,
-                    claims: claimResults,
-                });
-            }
-            if (findings.length > 0) {
-                // Try the live path first. Persist as the durable backstop only when it
-                // was not handled live (idle / injection failed / handler threw), so a
-                // correction is delivered exactly once and never lost. The
-                // `!this.stopped && this.enabled` guard also covers the race where the
-                // audit settled (e.g. timed out then resolved) right after `stop()`:
-                // we don't want a disabled sidecar to write findings that would later
-                // surface out of context when the feature is re-enabled.
-                //
-                // A `turn_end` audit deliberately skips the live path: the turn it
-                // covers is already over, so mid-turn injection is conceptually wrong
-                // and racy (the input generator is closing). Route it straight to the
-                // durable backstop, which the next wake cycle injects when idle.
-                let handledLive = false;
-                if (!this.stopped && trigger !== "turn_end") {
-                    try {
-                        handledLive = await this.deps.onFindings(findings);
-                    }
-                    catch (err) {
-                        logger.warn(`[factcheck] onFindings handler threw: ${err instanceof Error ? err.message : String(err)}`);
-                    }
-                }
-                if (!handledLive && !this.stopped && this.enabled) {
-                    await appendPendingCorrections({
-                        generatedAt: Date.now(),
-                        trigger,
-                        findings,
-                    });
-                    // A persisted (not live-injected) batch only reaches the agent on
-                    // the next wake. If it contains a hard factual error, proactively
-                    // wake the idle agent so it reconciles the contradiction promptly
-                    // rather than waiting for the next message/heartbeat. Warnings
-                    // (unverifiable) are low-signal and never wake — they ride along on
-                    // the next natural wake. The handler itself re-checks agent state, so
-                    // we don't re-check stopped/enabled here (a stop() racing the persist
-                    // await at worst yields one harmless extra wake into an empty cycle).
-                    if (findings.some((f) => f.severity === "error")) {
-                        try {
-                            this.deps.onPersistedError?.();
-                        }
-                        catch (err) {
-                            logger.warn(`[factcheck] onPersistedError handler threw: ${err instanceof Error ? err.message : String(err)}`);
-                        }
-                    }
-                }
-            }
-        }
-        catch (err) {
-            logger.warn(`[factcheck] audit failed: ${err instanceof Error ? err.message : String(err)}`);
-        }
-        finally {
-            clearTimeout(timer);
-            this.running = false;
-            if (this.activeController === controller) {
-                this.activeController = null;
-            }
-            // Drain a coalesced trigger, if any, immediately after completion. Skip
-            // when stopped so a disabled sidecar doesn't kick off follow-up audits.
-            const next = this.pendingTrigger;
-            this.pendingTrigger = null;
-            if (next && !this.stopped) {
-                void this.runAudit(next);
-            }
-        }
-    }
-}
-/**
- * Whether a tool call is excluded from the counter trigger. Tool names arrive
- * fully qualified (e.g. `mcp__visionclaw__notify_user`); we match against the
- * bare suffix so the blacklist stays engine- and prefix-agnostic. Unknown
- * tools (third-party MCP, browser, file reads) are NOT blacklisted — see
- * {@link BLACKLIST}.
- */
-export function isBlacklisted(toolName) {
-    if (BLACKLIST.has(toolName))
-        return true;
-    const lastSegment = toolName.includes("__")
-        ? toolName.slice(toolName.lastIndexOf("__") + 2)
-        : toolName;
-    return BLACKLIST.has(lastSegment);
-}
-//# sourceMappingURL=sidecar.js.map

package/dist/factcheck/sidecar.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sidecar.js","sourceRoot":"","sources":["../../src/factcheck/sidecar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAyB,MAAM,YAAY,CAAC;AAE7F;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,iCAAiC;IACjC,QAAQ;IACR,MAAM;IACN,gBAAgB;IAChB,SAAS;IACT,4BAA4B;IAC5B,aAAa;IACb,2DAA2D;IAC3D,QAAQ;IACR,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,cAAc;IACd,iBAAiB;IACjB,aAAa;IACb,eAAe;IACf,oBAAoB;IACpB,sBAAsB;IACtB,gBAAgB;IAChB,qEAAqE;IACrE,oEAAoE;IACpE,oBAAoB;IACpB,mBAAmB;IACnB,qBAAqB;IACrB,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;IAClB,mBAAmB;IACnB,wBAAwB;IACxB,kBAAkB;IAClB,oBAAoB;IACpB,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;CACnB,CAAC,CAAC;AAgCH,MAAM,OAAO,gBAAgB;IACV,MAAM,CAAmB;IACzB,IAAI,CAAuB;IAEpC,cAAc,GAAG,CAAC,CAAC;IACnB,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IACxB;;;;OAIG;IACK,YAAY,GAAG,KAAK,CAAC;IAC7B;;;;OAIG;IACK,sBAAsB,GAAG,KAAK,CAAC;IACvC,yEAAyE;IACjE,cAAc,GAAmB,IAAI,CAAC;IAC9C;;;;OAIG;IACK,gBAAgB,GAA2B,IAAI,CAAC;IAExD,YAAY,IAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAY,OAAO;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;IACvC,CAAC;IAED,IAAY,SAAS;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC;IACtD,CAAC;IAED,gEAAgE;IAChE,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC;QACpC,MAAM,CAAC,MAAM,CACX,8CAA8C,IAAI,CAAC,SAAS,4BAA4B,CACzF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,wEAAwE;QACxE,oEAAoE;QACpE,oEAAoE;QACpE,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,QAAgB;QAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,aAAa,CAAC,QAAQ,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,eAAe;QACb,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACnC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS;QACP,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,IAAI,CAAC,sBAAsB;YAAE,OAAO;QACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IAED,mEAAmE;IACnE,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC;IAED,8DAA8D;IAC9D,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACK,IAAI,CAAC,OAAgB;QAC3B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,2EAA2E;YAC3E,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;gBACjG,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;YAChC,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAgB;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,wEAAwE;QACxE,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,4EAA4E;QAC5E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,cAAc,CAAC,CAAC;YAC9F,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACzC,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACzC,wEAAwE;YACxE,0EAA0E;YAC1E,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,uCAAuC,OAAO,KAAK,QAAQ,CAAC,MAAM,SAAS,CAAC,CAAC;YAE1F,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,iBAAiB,CAAC;gBACzD,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ;gBACR,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,qBAAqB;gBAClE,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,uEAAuE;YACvE,sEAAsE;YACtE,yEAAyE;YACzE,gEAAgE;YAChE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7C,MAAM,cAAc,CAAC;oBACnB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,OAAO;oBACP,MAAM,EAAE,YAAY;iBACrB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,wEAAwE;gBACxE,uEAAuE;gBACvE,2DAA2D;gBAC3D,uEAAuE;gBACvE,qEAAqE;gBACrE,sEAAsE;gBACtE,yDAAyD;gBACzD,EAAE;gBACF,mEAAmE;gBACnE,sEAAsE;gBACtE,sEAAsE;gBACtE,iEAAiE;gBACjE,IAAI,WAAW,GAAG,KAAK,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;oBAC5C,IAAI,CAAC;wBACH,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACrD,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,CAAC,IAAI,CACT,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5F,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClD,MAAM,wBAAwB,CAAC;wBAC7B,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;wBACvB,OAAO;wBACP,QAAQ;qBACT,CAAC,CAAC;oBACH,kEAAkE;oBAClE,kEAAkE;oBAClE,kEAAkE;oBAClE,+DAA+D;oBAC/D,oEAAoE;oBACpE,sEAAsE;oBACtE,sEAAsE;oBACtE,sEAAsE;oBACtE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;wBACjD,IAAI,CAAC;4BACH,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;wBACjC,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,MAAM,CAAC,IAAI,CACT,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClG,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,IAAI,IAAI,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;gBACzC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC/B,CAAC;YACD,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC;YACjC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC1B,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC,CAAC,QAAQ,CAAC;IACb,OAAO,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC"}

package/dist/factcheck/store.d.ts

@@ -1,111 +0,0 @@
-/**
- * File-backed store for the Async Fact-Check Sidecar (issue #530).
- *
- * The sidecar keeps durable state under the active profile directory
- * (`~/.visionclaw/profiles/<profile>/factcheck/`):
- *
- *   - `corrections.json` — pending corrections produced by the most recent
- *     audit(s) that have not yet been consumed by the main agent. The main
- *     agent reads + clears this at the start of each wake cycle (or as soon
- *     as an active turn picks them up mid-turn). This is transient: read-then-
- *     delete.
- *   - `audit-log.jsonl` — append-only history of every completed audit (its
- *     trigger + every claim checked and that claim's outcome/detail), so an
- *     operator can review what the fact-checker examined and concluded long
- *     after the corrections themselves were consumed. Size-rotated; never read
- *     back by the agent.
- *
- * The whitelist tool-call counter intentionally lives in-process (not on
- * disk): it is a transient signal that resets whenever the process restarts,
- * and writing it on every tool call would be wasteful.
- *
- * All file access is best-effort and resilient to a missing/corrupt file —
- * a fact-check store failure must never take down the agent.
- */
-import { z } from "zod";
-/** Severity of a single fact-check finding. */
-export type FactCheckSeverity = "warning" | "error";
-declare const FactCheckFindingSchema: z.ZodObject<{
-    severity: z.ZodEnum<{
-        error: "error";
-        warning: "warning";
-    }>;
-    claim: z.ZodString;
-    detail: z.ZodString;
-}, z.core.$strip>;
-declare const PendingCorrectionsSchema: z.ZodObject<{
-    generatedAt: z.ZodNumber;
-    trigger: z.ZodString;
-    findings: z.ZodArray<z.ZodObject<{
-        severity: z.ZodEnum<{
-            error: "error";
-            warning: "warning";
-        }>;
-        claim: z.ZodString;
-        detail: z.ZodString;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
-/** One finding produced by an audit. */
-export type FactCheckFinding = z.infer<typeof FactCheckFindingSchema>;
-/**
- * Compact severity breakdown for logs, e.g. `1 error, 2 warning`. Lets
- * operators tell at a glance whether an audit surfaced a hard contradiction
- * (error) or just an unverifiable note (warning) without opening
- * corrections.json. Returns `0 findings` when empty.
- */
-export declare function summarizeFindings(findings: readonly FactCheckFinding[]): string;
-/** A batch of corrections from a single completed audit. */
-export type PendingCorrections = z.infer<typeof PendingCorrectionsSchema>;
-/**
- * Append a batch of findings to the pending-corrections file. Multiple audits
- * may complete before the main agent consumes them, so findings accumulate.
- * No-op when `findings` is empty.
- */
-export declare function appendPendingCorrections(batch: PendingCorrections): Promise<void>;
-/**
- * Read all pending correction batches. Returns `[]` when the file is missing,
- * unreadable, or fails schema validation (so a partially-written or corrupt
- * file can never surface malformed findings to the injector).
- */
-export declare function readPendingCorrections(): Promise<PendingCorrections[]>;
-/**
- * Atomically read + clear pending corrections. Used by the main agent at the
- * point it injects them so the same findings are never injected twice.
- */
-export declare function consumePendingCorrections(): Promise<PendingCorrections[]>;
-export declare function clearPendingCorrections(): Promise<void>;
-/** Outcome of verifying a single claim. */
-export type FactCheckOutcome = "verified" | "unverifiable" | "contradicted";
-/** Per-claim result captured in the audit log (includes verified claims). */
-export interface FactCheckClaimResult {
-    claim: string;
-    outcome: FactCheckOutcome;
-    /** Why it was contradicted/unverifiable; empty for verified. */
-    detail: string;
-    isFinancial: boolean;
-    symbols: string[];
-}
-/** One completed-audit record, appended to `audit-log.jsonl`. */
-export interface FactCheckAuditRecord {
-    /** ISO-8601 timestamp of when the audit completed. */
-    at: string;
-    /** What triggered the audit (counter / compaction / engine_switch / turn_end). */
-    trigger: string;
-    /** Every claim the audit checked, with its outcome. Empty if none extracted. */
-    claims: FactCheckClaimResult[];
-}
-/**
- * Append one completed-audit record to the append-only `audit-log.jsonl`.
- * Best-effort and never throws: an audit-log failure must not affect the audit
- * itself. Independent of the corrections file — this is operator-facing history
- * and is never consumed/cleared by the agent.
- */
-export declare function appendAuditLog(record: FactCheckAuditRecord): Promise<void>;
-/**
- * Render pending corrections as an engine-agnostic plain-text block, matching
- * the `[FACT-CHECK ALERT]` format described in the issue. Returns `null` when
- * there is nothing to render.
- */
-export declare function formatCorrections(batches: PendingCorrections[]): string | null;
-export {};
-//# sourceMappingURL=store.d.ts.map

package/dist/factcheck/store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/factcheck/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,+CAA+C;AAC/C,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAAC;AAEpD,QAAA,MAAM,sBAAsB;;;;;;;iBAS1B,CAAC;AAEH,QAAA,MAAM,wBAAwB;;;;;;;;;;;iBAM5B,CAAC;AAIH,wCAAwC;AACxC,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,CAY/E;AAED,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAuC1E;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBvF;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAE5E;AAqBD;;;GAGG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQ/E;AAED,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE7D;AAUD,2CAA2C;AAC3C,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,cAAc,GAAG,cAAc,CAAC;AAE5E,6EAA6E;AAC7E,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,iEAAiE;AACjE,MAAM,WAAW,oBAAoB;IACnC,sDAAsD;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,MAAM,EAAE,oBAAoB,EAAE,CAAC;CAChC;AAQD;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhF;AAuBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,MAAM,GAAG,IAAI,CAkB9E"}