Commit Graph

953 Commits

Author SHA1 Message Date
claude d70cb7e9ab Merge the clock invention fix (#231)
A parked clarify ate a foreign utterance and the clock answered for him.

Root cause was a step earlier than filed. ownContent("что у меня сегодня?")
returns empty, every token being frame, so needsRoute said no and no route was
computed at all. classifyTurnRole fell through to roleAnswer, the extractor read
сегодня, and the date parser answered a bare day word with that day at the
current minute.

needsRoute now routes a question shape even when every token is frame, and the
route decides when the utterance fills nothing she asked about. A frame match is
a hint, not a decision. roleAside is new: a note or fact stated mid-flow is
stored and the question comes back on the same reply.

router.NamesAnHour is the single gate on the reminder time slot, so a sentence
naming no hour never fills it. IsClockEcho is deleted; it could not catch на
завтра on the stub, which returns midnight rather than the clock. на joins в and
во as a frame around a spoken hour.

The owner's rule, ruled on 2026-08-06: a reminder commits only when what, what
time and what day are all answered, and every time question opens by stating the
clock. He confirmed both derived cases himself, so завтра в 15:00 and через час
commit with no question.

A global assertion in checkEnd now fails any trace whose reminder fires at the
current clock.

(V-577) (V-579)
2026-08-06 02:22:09 +04:00
claude c0aee1558f Merge the delivery and loop sweep (#230)
Almost nothing to do, which is the finding. Both packages already name every
literal beside its reason, every comment still describes its code, and the
three reaches share one dispatcher that owns retry, outbox bookkeeping and
error classification. The phraser's one-transport-logs-and-one-does-not shape
was looked for here and is absent.

One dead import removed. voicesink held internal/audio alive with a placeholder
var whose comment claimed a method call needed it. Calling a method on a value
never requires importing the package that defines the type.

Left alone: loop.Gate and explain.ExplainGate are two hand-maintained copies of
the same restraint checks, and ExplainGate says outright that it mirrors Gate.
Unifying them is a refactor of the trace path, not a sweep.

(V-581)
2026-08-06 02:21:12 +04:00
claude 0d49745a17 dialogue traces cover the owner's four reminder cases (V-579)
His two asks and his two commits, plus the check that no trace anywhere ends
with a reminder firing at the current clock. The transcript row from V-561 keeps
his verbatim words and loses its skip: "на 9" is read now, and under the commit
rule it is a question rather than a reminder.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-06 02:20:33 +04:00
claude 2063f8e770 delivery: drop the dead audio import placeholder in voicesink (V-581)
audio.PCM16kMono was only referenced by a `var _ =` placeholder whose
comment claimed to keep the import "honest" for a method call that
doesn't need it — out.Format's IsValid() is a method value, calling it
never requires importing the package that defines the type. The import
had no other use in the file, so both it and the placeholder were dead.
2026-08-06 02:20:23 +04:00
claude 173531be8c a reminder commits on what, what time and what day (V-579)
The owner's rule of 2026-08-06. Anything of the three that is missing is asked
for, and every ask states the current time so he can tell what she is reasoning
from. A bare hour is asked which half of the day it is. A time with no day named
is asked which day, because today being a valid reading is not him saying it.

Two things go straight through, both his call: a time that already reads only
one way, and an interval, which resolves to one instant and answers all three at
once.

An answer about the time is read against the whole request rather than alone.
"вечера" says which nine and names no hour by itself, so the answers accumulate
on the parked question and the newest statement wins.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-06 02:20:23 +04:00
claude 01c78ef369 a time slot naming no hour is asked about, never filled (V-579)
Both parsers answer a bare day word with that day at the current minute, so "на
завтра" set a reminder at 01:38, the minute he happened to be speaking. The gate
is textual now: NamesAnHour reads the sentence, and the slot stays empty when
nobody said an hour.

Beside it, NamesAnInterval and HourIsAmbiguous, which the owner's commit rule
reads. "на" joins "в" as a frame around a spoken hour in both parsers, a clock
keeps its meaning with a full stop after it, and the stub applies a day word and
a part-of-day qualifier from anywhere in the sentence rather than only from the
token after the hour.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-06 02:20:13 +04:00
claude bac8673f05 a routed intent beats a frame match mid-flow (V-577)
Every token of "что у меня сегодня?" is frame, so ownContent left nothing,
needsRoute returned false and no route was computed at all. The parked reminder
then read "сегодня" as its time and the question was answered nowhere.

A question shape now gets routed even when it leaves no content of its own, and
a role that fills nothing she asked about is decided by the route. A statement
he makes mid-flow gets a role of its own, roleAside, so a note or a fact is
stored and the question comes back instead of being dropped in silence.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-06 02:20:03 +04:00
claude 5cc51c5b6e Merge the arbitration kernel study (#229)
docs/plans/20-two-artifacts-and-neither-is-spring.md. No Go changed.

The thesis holds for the routing cascade, querySources and the pre-route
ladder, and is refuted for reach selection: ChannelsFor is a total pure
function that returns several winners, so nothing claims and nothing loses.
The digestion tick is not the odd seam out but the one already done right, and
the proposal is that the other three come to look like it.

The strongest finding is not the shape. The three structural holes that make a
route untrustworthy are written three times for three consumers with three
return types. internal/claim is built and tested and has no callers.

(V-585)
2026-08-06 02:19:59 +04:00
claude be869c6a48 docs: the arbitration kernel and the ecosystem client (V-585)
Two theses, tested against the code.

Thesis one, one recurring claimant shape, holds for four seams and fails for
one. The routing cascade, the query source chain, the pre-route resolver ladder
and the digestion tick are one shape. Reach selection is not: ChannelsFor is a
total pure function with no claimants and no losers, and it returns several
winners rather than one.

The digestion tick corrects the brief. loop.Tick is not a first-to-claim walk.
It already has a declared comparator, a gate with named reasons, a loser trace
with LostTo and a loser rescue path. It is the model, not a candidate.

Thesis two holds. The kernel is a package and a convention inside one program.
The framework-sized artifact is the ecosystem contract, and Maven implements its
side twice and a half: Nexus and Praxis share one embedded client, Hexis is a
vendored client in another repo with eleven divergences, four of them defects.

Abstractions: Claim, Record, Arbiter. Claim and Record already exist and neither
is wired. Drop Claimant, because every seam already rejected an interface for
the same reason.

Authorization stays out of both artifacts.

Plan 19 was already taken by 19-dialogue-arbitration.md, so this is 20.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-06 02:19:25 +04:00
claude 8559f1f450 Merge the eval checks sweep (#228)
Named three repeated thresholds in the persona checks: the shortest a word can
be and still carry a matched suffix, the word window around a self-reference
marker, and the plural-verb length floor. Five bare length tests and three bare
window bounds now read from them. One doubled sentence in checkAddress's doc
block, left by an edit that did not fully replace the old text, is now stated
once.

No word list moved. They are scoring data and moving one changes what the eval
measures.

The brief asked for a word-boundary defect and there is none here. The cringe
patterns already omit the ASCII-only \b around their Cyrillic alternatives and
say why, and the tokenizers match Cyrillic character classes rather than
boundaries.

(V-581)
2026-08-06 02:14:36 +04:00
claude b908c39e45 Merge the clarify and voice sweep (#228)
chatHistory's doc comment pointed at a line range that had moved. It now names
runTurn's step 6, which survives the next edit. chatHistory and rememberTurn
each built the same dialogue.Turn projection inline; one sessionAsTurn helper
now serves both. The history cap was a bare 3 with no tie to the four turns
both doc comments quote.

The clarify decision points are left untouched. V-577 and V-579 own them.

(V-581)
2026-08-06 02:14:25 +04:00
claude 8c774abe5b sweep: name the repeated length/window thresholds in eval checks (V-581)
Five near-duplicate magic-number checks (< 3 runes for a suffix to be
grammar, +/-3 word windows around a self-reference marker, < 5 runes
for a plural verb ending) get named constants with the reasoning
beside them: minInflectedRunes, selfRefWindow, minPluralVerbRunes.
Also dedupes a doubled sentence in the checkAddress comment block that
said the same thing about time-word stoplisting twice. No check logic
changed; word lists and check firing behaviour are untouched.
2026-08-06 02:14:02 +04:00
claude e2777177b0 sweep: dedup session->Turn conversion, fix drifted line reference (V-581)
chatHistory (voice.go) and rememberTurn (clarify.go) both built the same
dialogue.Turn{Intent, Slots, Text} projection of a *dialogue.Session
inline; factor it into sessionAsTurn and use it in both. Also name the
history-depth cap (previously a bare "3") as maxCarriedHistory, and fix
chatHistory's doc comment, which cited "lines 373-395" for the dialogue
merge in runTurn -- that block has since moved to lines 385-394. Point
at the step-6 comment instead of a line range so the reference survives
future edits. No behavior change; bookkeeping only, not the clarify/
reminder slot-decision logic.
2026-08-06 02:13:51 +04:00
claude b8250a8711 Merge the store and recalleval sweep (#227)
lookupLiveTaskByNorm wrote its live-status predicate as a SQL literal beside
the named liveTaskStatuses constants ListTasks already binds for the same
predicate. bestRecall carried two stacked doc comments, both opening the same
way, from an edit that appended rather than replaced. The daemon top-k was a
bare 3 with no tie to memoryRecallWidth, which holds the same value.

Nothing that decides what recalleval measures was touched.

(V-581)
2026-08-06 02:10:50 +04:00
claude 02ce730cb2 recalleval: fold a doubled doc comment, name the top-k literal (V-581)
bestRecall carried two stacked doc comments (both starting "bestRecall
mirrors...") from a prior edit that appended rather than replaced;
folded into one. Also named the literal 3 passed to Search as
daemonTopK, mirroring memoryRecallWidth in actions_query.go, so the
Recall3 doc and the call site cannot drift from each other again.
2026-08-06 02:10:22 +04:00
claude aaf1f0236b store/tasks: dedupe live-status literal against the named constants (V-581)
lookupLiveTaskByNorm hardcoded 'candidate','open' in SQL, drifting from
liveTaskStatuses which ListTasks already uses for the same query. Bind
the constants instead so there is one place that names the live set.
2026-08-06 02:10:22 +04:00
claude e488ee2285 Merge the tick and voicewire sweep (#226)
Comment drift and one duplication, no behaviour change. buildRouter's doc
described a hardcoded bootstrap seeding scheme that no longer exists, and
seedClassifier's own comment named five seed files where the code seeds seven.
The dialogue session TTL was written twice, once per branch of one if/else.
stopFinishedAlarms and repeatableRules each rebuilt the same rules-by-name map.

(V-581)
2026-08-06 02:08:27 +04:00
claude b6680398c3 tick: dedupe rule-by-name map building (V-581)
stopFinishedAlarms and repeatableRules each built their own
map[string]rule (one keyed to loop.Rule, one to bool) from t.rules on
every call. Factored into rulesByName(), one map[string]loop.Rule both
callers read.
2026-08-06 02:08:05 +04:00
claude 0feb8d3dbd voicewire: fix drifted seed comments, dedupe dialogue TTL (V-581)
buildRouter's third bullet described a hardcoded 6-example bootstrap
set that predates seedClassifier's file-based loader; seedClassifier's
own comment named 5 seed files where there are 7 (chat.txt and
system.txt were missing). Also named the repeated 2*time.Minute
dialogue session TTL literal as dialogueSessionTTL so the two call
sites can't drift apart.
2026-08-06 02:05:01 +04:00
claude 0886662360 Merge the mcp and media sweep (#225)
internal/media/store.go and internal/mcp/manager.go, behaviour preserving.
Put and PutFile shared reserve/release/bucket/newBlob; List and pruneOrphans
share one walkKind. The mcp manager opens its connection map once per call
rather than three times. The stat result in both media writers was named
'already' and meant the opposite at every use.

V-584 filed rather than fixed: a budget reservation leaks when writeMeta or
os.Chmod fails, so a full disk can answer ErrStoreFull with room free.

(V-581)
2026-08-06 02:00:52 +04:00
claude 439ceb5d8e mcp manager: one lookup for the call paths, and split dial (V-581)
Call, ReadResource and CallPositional each opened the connection map by
hand, and Call took the mutex twice to answer one question. They now
share lookup, which returns the client, the config and the tool in one
critical section.

dial did three things. Choosing the transport is openTransport, and
recording a live connection is succeed, so the function reads as
handshake then discovery.

Also: argv is a method rather than an append repeated in dial and
Status, the transport strings are constants, and the tail binding comes
out of bindPositional as bindOne. The comment on filterTools claimed it
drops nameless tools, which it never did.

No behaviour change.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-06 01:57:27 +04:00
claude ecaf3407fa media store: name the constants and fold the shared write path (V-581)
Put and PutFile were the same function twice: cap check, path build,
blob description, budget claim, sidecar first. Extract reserve, release,
bucket and newBlob so each caller reads as its own difference. List and
pruneOrphans walked a kind's tree with the same skeleton, so that is now
walkSidecars and walkBlobFiles over one walkKind.

Name what was a literal in five places: 0o700, 0o600, ".json", "spool",
the two-character bucket and the 64-character id. The kind list is one
var rather than four copies.

Rename the stat result in both writers. It was called "already", and
"already != nil" meant the blob was NOT already there, which reads
backwards at every use. It is now statErr with a fresh bool beside it.

No behaviour change. The reservation leak on a failed writeMeta is
preserved on purpose and filed as V-584.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-06 01:57:18 +04:00
claude b60264701c CLAUDE.md: mavpoll is the env poller, not a Telegram reach (V-583)
Found by the capture and mavpoll sweep. The daemon table called mavpoll the
Telegram long-poll reach. It polls netdata, uptime-kuma, zenmoney and wireguard,
writes facts and sends nothing. Telegram is internal/delivery/telegramsink.

An agent reading that table would have gone to the wrong file to change how
Telegram behaves.

--no-verify: the pre-commit hook refuses master, and this unattended run merges
to master by the owner's instruction.
2026-08-06 01:55:42 +04:00
claude 60540fa934 Merge the capture and mavpoll sweep (#224)
V-581. Session.discard replaces the finish-unlink-remove block that reapLocked
and Abort each spelled out. One abandon closure covers the two Start failure
paths that close and remove the spool. The third closes without removing, and
that was left exactly as it was rather than silently changing what it deletes.

bytesPerSample and bytesPerSecond replace three copies of the byte-rate
arithmetic. The two spellings differed in where the divide by 8 fell, which only
matters for a sample width that is not a multiple of 8 bits. Every format in the
package is 16-bit, so this is arithmetically identical.

In mavpoll, four writers each built their own WriteFactReq literal and three
repeated a redundant error check, where isNoFact is errors.Is and already
covered the equality arm. unchanged and writeFact hold that now, so each writer
keeps only its log line. run lost the zenmoney setup and the ticker, so it is
flag parsing and wiring.

Two stale comments corrected. The package doc said two sources, listed three,
and polls four.

Filed V-583: CLAUDE.md's daemon table calls mavpoll the Telegram long-poll
reach. It is the env poller. Telegram is internal/delivery/telegramsink.
2026-08-06 01:55:18 +04:00
claude db8cbdc20a sweep capture and mavpoll for duplication and magic values (V-581)
capture: one Session.discard for the reaper and Abort, which both closed
the spool and deleted it by hand. One abandon closure for the two failed
Start paths. bytesPerSample and bytesPerSecond replace three copies of
the byte-rate arithmetic.

mavpoll: unchanged and writeFact hold the read-compare and the row shape,
so the three fact writers keep only what differs between them, their log
line. The wg key and source are named constants. Named coreDialWait,
zenTimeoutFactor, maxBodyBytes and factConfidence. run lost the zenmoney
setup to newZenClient and the ticker to loop.

Comments only where they were stale: the package doc counted two sources
and there are four.
2026-08-06 01:54:38 +04:00
claude 91f6ea84a0 Merge the query chain sweep (#223)
V-581. Two comments in querySources sat above the wrong entries, so the money
argument read against the list source and the shopping argument read second. No
entry moved, only the paragraphs.

recallOnTopic holds the topic veto that queryMemory and queryNotes each called,
logging the same rejection in two spellings. Six timeouts and widths got names
beside their source, matching kiwixTimeout and searchTimeout above them.
readBack holds the read-the-evidence fallback that querySearch and queryKiwix
share. queryWeb keeps its own, because its phrase key differs.

Order, the boundary position, Response.Empty as the whole gate and every
claim-or-pass condition are untouched.

The agent listed four differences between sources it could not justify rather
than unifying them silently, which is the right call. Two are now V-582.
2026-08-06 01:52:42 +04:00
claude b726658692 query chain: name the magic values, one topic veto (V-581)
The two recall sources ran the same topic veto with the same log line
spelled two ways. It is one helper now.

Timeouts and read-back budgets that were literals get names beside the
source that spends them. The money and list comments in querySources sat
above the wrong entries, so the ordering argument read backwards.

No source moved, no gate changed.
2026-08-06 01:52:08 +04:00
claude 5f5f14eba7 mavweb: /events gets its page chrome (V-578)
Found by the mavweb sweep. The key was in the sidebar and absent from the chrome
table, so the tab read lowercase and the icon fell through to the default while
the link said Intake. Title now matches the link, and i-download is the closest
symbol ethos-icons.svg has to an inbox.

--no-verify: the pre-commit hook refuses master, and this unattended run merges
to master by the owner's instruction.
2026-08-06 01:51:25 +04:00
claude 59b98d5c4d Merge the config.go sweep (#222)
V-410. internal/config/config.go went from 1827 lines to 484 and is now the
loader and nothing else. Thirteen files each carry their struct, their Default
constants, a normaliseX and a validateX. applyDefaults and validate are ordered
lists of those calls.

The brief's premise did not hold and the agent said so. There are eight
accessors in the package, not forty, and they mean four different things. Three
are pointer-bool with absent meaning on, three are enabled-and-has-its-path, one
converts units. A generic accessor would collapse those and cost the ability to
grep the name. What repeated was the normalise-and-validate shape inlined forty
times, and that is what was extracted.

Five in-code comments had drifted from the code and are fixed. RouterThreshold
said 0.35 and said 0.0 meant permissive, where the default is 0.55 and anything
at or below zero is replaced. PhraserConfig documented three defaults that are
applied nowhere. KiwixConfig still said the ZIMs answer before the network.
NetScanConfig said 50 where the default is 100. Nothing in CLAUDE.md or docs
disagreed with the code.

Filed V-580 rather than fixing it: phraser.n_gpu_layers has no default, so an
omitted key reaches llama-server as CPU-only. deploy/mavend.json sets 99, which
is why nobody noticed. Applying the -1 would change behaviour on any box that
omitted the key, so that is the owner's call.

TestDeployConfigLoads is new. It parses the real deploy/mavend.json through the
Load the daemon calls, because every other test built its own JSON and a renamed
key would have gone unnoticed until startup.

No key removed. make build and go test -race both pass.
2026-08-06 01:43:41 +04:00
claude 59210cf07d config: applyDefaults reads as one list (V-410)
Every normalise fills in one block and none of them reads another, so the blank
lines between them were suggesting an order that does not exist. Grouped by
what the block is instead: the surface, the schedule, the notify policy, the
background loops, the reaches, the world. No arm was added, removed or moved
past one it depends on.
2026-08-06 01:42:12 +04:00
claude 828e034c96 Merge: nothing the model writes reaches a note (#221)
V-576. The diagnosis in the task was wrong and the agent said so. The stored
body was never generated: actions_note.go writes dec.Utterance and always has.

The invention was one layer up, in the two places the owner hears. llmrouter.go
set a note's Slots.Text to firstNonEmpty(a.Text, utterance), where a.Text is the
router model's own free-text field. replier.go renders that slot into the
confirmation. So a fragment with no content let the router write anything into
the payload slot and then had it read back. Two runs, two different inventions,
which is what was measured.

A note's Slots.Text is now the utterance, unconditionally.

A correction fragment also writes nothing at all. correctionFragment uses no new
Russian stem patterns: the first token is a one-word refusal from the confirm_no
lexicon, the sentence negates and then contrasts, and no token is a verb form
per morph.IsVerbForm. The verb test is what spares a real note, so "нет, я не
поеду, а останусь" is still stored.

The repair path is left to V-573. This fragment carries no intent word, so
parseRepair correctly declines it, and widening repair to claim fragments it
cannot redo would be the wrong fix.
2026-08-06 01:40:38 +04:00
claude c699c139b4 Merge the ecosystem sweep (#220)
V-575. Nexus and Praxis were the same JSON transport written twice.
ecosystemHTTP holds the base URL, token, client, service name and version
header, and exposes setHeaders, call, getJSON and postJSON. Both clients embed
it, so Resolve, Health and the four lifecycle posts are one or two lines each.

setEcosystemHeaders became a method reading req.Context(), which is the same
value with no way to pass a context the request never carried.

Three degrade paths repeated the same rule: unauthorized means EcoDenied,
anything else means EcoDown, and name the service. That is ecosystemGap now. The
failed Nexus resolve was traced identically in two places, so nexusResolveFailed
holds it and keeps the rune-count redaction. The surface-a-spoken-item block was
written twice and is now surfaceSpoken, which calls Surface and nothing else.

Every lifecycle verb call site is untouched. Surface is still Surface. So are
the confirm and risk tier gate, scopedToEntity's refusal to relabel an unscoped
response, attentionCannotTell's hedge rules, and the demonstrative rules in
resolveSurfacedPosition.

One shape did change: a malformed Nexus base URL used to return a plain wrapped
error and now returns an ecosystemError like every other failure on that path.
No test exercises it and every caller already treats a non-nil error as a
dependency failure.
2026-08-06 01:39:52 +04:00
claude b705a786ef a note stores his words, not the model's (V-576)
The note body was already the utterance. Two other holes were not.

The LLM router filled Slots.Text for a note from the model's own text
field, and that slot is what the replier reads out. So the confirmation
he heard named things he never said, twice over, differently each time.
The note payload is now the utterance and the model cannot touch it.

A correction with no referent is also not a note. 'нет, не маме, а папе'
names no intent, so parseRepair declines it and it routed as a fresh
note. actionNote now declines it and asks instead of filing it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-06 01:39:38 +04:00
claude 20fe909f76 gofmt clarify_test.go, which broke make test's fmt-check (V-575)
Two sweep agents reported the same thing independently: make test fails at
fmt-check on this file, and it is unrelated to their work. It went unformatted
onto master earlier. gofmt only, no test changed.

--no-verify: the pre-commit hook refuses master, and this unattended run merges
to master by the owner's instruction.
2026-08-06 01:38:54 +04:00
claude ceba69c4bb config: a test parses the real deploy config (V-410)
Every other test in the package builds its own JSON, so a key renamed on one
side and not the other went unnoticed until the daemon refused to start. This
reads deploy/mavend.json through the same Load, and asserts the settings whose
absence would be a silent behaviour change rather than an error: n_gpu_layers
being 0 means CPU-only inference, and nothing defaults it.
2026-08-06 01:37:41 +04:00
claude 95eeef13dd every ecosystem degrade path names the gap the same way (V-575)
Three call sites wrote the same two lines: a rejected credential says
eco_denied, anything else says eco_down, and both name the service.
That is ecosystemGap now, so a fourth caller cannot get it half right.

The failed Nexus resolve was also traced twice in the same shape, once
in the entity attention arm and once in the Hexis act. Both now go
through nexusResolveFailed, which keeps the rune count redaction.

Surfacing a spoken item was written twice as well. surfaceSpoken calls
Surface and nothing else, because reading an item aloud is not an
acknowledgement.

No behaviour change: same lifecycle verbs, same replies, same trace
fields. traceErrorFields lost a duplicated default and returns what it
returned before.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-06 01:37:30 +04:00
claude cfbef45feb ecosystem clients share one JSON transport (V-575)
Nexus and Praxis were the same HTTP client written twice: build the
request, stamp the headers, send it, check the status, decode the body,
and wrap each failure in an ecosystemError. They differ only in the
service name and the version header, so both now embed ecosystemHTTP and
call getJSON or postJSON.

setEcosystemHeaders took a context beside the request it was stamping.
It now reads req.Context(), which is the same value, so a caller cannot
pass a context the request never carried.

No behaviour change. Same headers, same statuses, same error types. One
error changed shape: a malformed base URL used to come back from Nexus
resolve as a plain wrapped error and is now an ecosystemError like every
other failure on that path.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-06 01:37:20 +04:00
claude 3bb82a90db config: the two silent background loops move to their own file (V-410)
MemoryEvalConfig and EmailConfig, with their two constants and their normalise
arms. Neither loop can speak, which is why they read together.

The shared defaults const block now holds only the core daemon's own; every
other block keeps its defaults beside its struct.
2026-08-06 01:37:01 +04:00
claude abbf0fe60d config: digest and pattern proposals move to their own file (V-410)
Both shape what reaches him unasked, so they read together.

The digest defaults were three literals inline in applyDefaults; they are now
named next to the struct like every other block's, at the same values (30m, 5,
sev 2). normaliseDigest is the one normalise that materialises an absent block
instead of folding it to nil, because the dispatcher reads Digest.Enabled with
no nil check — noted in the comment so the next block does not copy it.
2026-08-06 01:35:49 +04:00
claude b46bab99f7 Merge suspend and resume (#219)
V-561, and the owner's acceptance transcript. A side query no longer kills the
flow it interrupted. The answer comes first and the parked question comes back
in the same reply.

  напомни позвонить маме        -> Когда?
  какая сейчас погода в Риме?   -> погода не настроена, на какое время
                                   поставить напоминание?
  в 21:00                       -> хорошо, напомню сегодня в 21:00.

The owner rejected "Прошлую просьбу отпускаю." for this shape. It is kept for
new_request and cancel, where something really was dropped, and gone for
side_query.

clarifyResumedVariants is a new deck, one wording per slot, all infinitive so
there is no gender to get wrong. A resume spends no attempt, so it is not an
attempt ladder.

Resume is a deferred call in runTurn rather than a call at each exit. Eight
returns sit between the fall-through and the replier, and one that forgot would
park a request for ever.

askClarify pushes rather than puts when a side query needs clarifying of its
own. Put would replace the top, which is the flow the side query was allowed to
interrupt rather than kill.

TakeExpired returns a count, not a bool. The stack holds two and drops both when
the top times out, so the singular "прошлую просьбу" would have been a lie
about the number. clarifyExpiredPluralVariants covers it.

The contract row for a nested question is green and unskipped. The owner's own
transcript stays skipped, because StubDateTimeParser reads neither "на 9" nor
"на завтра". That is V-543 and V-562, and the skip reason now says so.
2026-08-06 01:34:32 +04:00
claude b9ee858421 Merge the phraser sweep (#218)
V-397. llmphraser.go went from 1296 lines to 446 and now holds the type, its
construction and the six entry points. The reply contract, the llama-server
backend, the wire structs, the nudge floor and the prompts each got a file.

The brief's premise was wrong and the agent said so. replier_llm.go parses
nothing and already called the shared parser, so there was no second copy. The
real drift was one layer down. chatWithSystem and chatWithMessages were two
transports that had diverged twice: only one logged the raw generation, so an
unparseable nudge left nothing to read, and they labelled truncation
differently. Both go through postChat now, which always logs.

PhraseNudge and PhraseReminder took their fallback in silence when the model
returned a parsed but empty response. They log it now. What the owner hears is
unchanged.

The legacy body/summary parser is deleted. It predates the response/mood shape,
no prompt asks for it, and the grammar cannot emit it.

make eval-phrasing is 15/15 before and after with the same strings.
2026-08-06 01:34:17 +04:00
claude 594bfc2bc3 config: routines and quiet hours move to their own file (V-410)
RoutineConfig, MorningRoutineConfig, MorningRoutineItemConfig, QuietHoursConfig,
the two mappers, and the severity-floor and cron-parse arms as normaliseRoutines
and validateRoutines. config.go drops the morning and cron imports.
2026-08-06 01:34:10 +04:00
claude c600b426f3 Merge the mavweb file split (#217)
V-409. cmd/mavweb/main.go went from 1868 lines to 265, split along seams that
were already there: shell, pages, tasks, routines, the voice proxy, and one file
per write surface. The last two markup constants moved into passkey.html and
models.html, so no page markup lives in Go any more.

Four hand-written shapes became one function each. parsePage and renderPage had
13 copies, requireCore had 12, stepUpGate had 6. The route table lost about 20
identical closures. The parallel title and icon switches merged into one
pageChrome table, so a page can no longer have a title and no icon.

The server struct that would hold core, session and voiceAddr was left undone.
Four test files call the handlers with their full parameter lists, and those
signatures are contract.

Found and filed V-578: /events has no chrome entry, so its tab is lowercase and
its icon falls through to the default.

Conflict resolved by hand. V-564 grew /trace a turn-decisions table in
main.go while this branch was moving handleTrace to pages.go. The split file
wins and V-564's read plus traceData were ported onto it, so the page keeps
both tables.

--no-verify: the pre-commit hook refuses master, and this unattended run merges
to master by the owner's instruction.
2026-08-06 01:34:06 +04:00
claude b95566aa98 Merge the internal/ipc sweep (#216)
V-575. dispatch held 13 arms of one shape: nil check, unmarshal, call, marshal,
and a hand-written unknown-method error repeated eight times. callDirect,
callDirectNoParams, callDirectVoid and unknownMethod give the switch one line
per method naming the Server field behind it. The nil-field-means-unconfigured
contract is unchanged.

withParamsSlice holds the nil-slice normalisation the method table repeated 14
times. MethodTurnDecisions and MethodMorningStatus keep their own, because one
normalises on error and the other must still emit null.

mapRows replaces the same three lines in 11 store methods. RevertFact sent a
map[string]string against a server marshalling map[string]int64, so both sides
now share revertReq and revertResp. Wire bytes are identical throughout.

The 45 client shims stay. They mirror CoreAPI one to one on purpose.

156 insertions, 362 deletions. go test -race passes.
2026-08-06 01:33:05 +04:00
claude 795ecf67a5 config: phraser block moves to its own file (V-410)
Its validate arm goes with it as validatePhraser.

The doc drifted on every numeric field. It claimed NGpuLayers defaults to -1,
NCtx to 2048 and Timeout to 30s. Nothing in this package defaults any of them:
phraser.DefaultConfig sets -1 and has no callers, and cmd/mavend builds a
phraser.Config literally. So an omitted n_gpu_layers reaches llama-server as
-ngl 0, CPU-only, masked here only because deploy/mavend.json sets 99. Fixed
the comment and left the code, and the discrepancy is filed.
2026-08-06 01:32:21 +04:00
claude cb3b507ed5 ipc: one row mapper for the store adapter's list reads (V-575)
Eleven methods repeated the same body: run mapErr over the store's error,
allocate a slice of the wire type, convert row by row. mapRows holds it, and
each method is now the read plus the conversion it uses.

ListProposedRoutines had a conditional copy of ReminderID, which was a nil
pointer assigned over a nil pointer whenever it did not fire. It is
unconditional now and the result is the same.
2026-08-06 01:31:19 +04:00
claude 7262310fce ipc: the capability methods share one dispatch shape (V-575)
Thirteen arms of dispatch spelled out the same handler: nil check, unmarshal,
call, marshal, and a hand-written unknown-method error at the bottom of each.
callDirect, callDirectNoParams and callDirectVoid hold the three shapes those
arms come in, so the switch now says which Server field backs which method and
nothing else.

The nil check is the load-bearing part and it is unchanged: a nil field is the
capability being unconfigured on this box, and the wire still answers
ErrUnknownMethod. WrapKeyFn and UnlockFn keep their own arms because they take
apart the request rather than passing it through. No wire change.
2026-08-06 01:31:03 +04:00
claude 69eda3ceee config: the blocks nested under voice move with it (V-410)
WorkerConfig, TtsConfig, EmbedderConfig, WeatherConfig and ToolConfig. None of
them is reachable except through a voice block, so they read better beside it.
2026-08-06 01:30:56 +04:00
claude 43dc487113 ipc: one helper for the list reads on the wire (V-575)
Fourteen table entries carried the same four lines: call the CoreAPI method,
return early on error, swap a nil slice for an empty one so the wire says []
and not null. withParamsSlice holds that once and each entry is now the call
it makes.

Three id-only request types were the same struct under three names, so the
routine transitions use the idReq that was already declared and unused. The
revert reply was a map literal on one side and an anonymous struct on the
other; revertResp names it. Both are wire-identical.
2026-08-06 01:30:41 +04:00
claude 22a8eed1c3 evals: nine claimants interrupting a parked reminder (V-577)
Measured on the box against master at 70b32af. Six of nine scenarios answer the
interrupting utterance, which is what V-560 bought. Three fail: an agenda
question completes the reminder at the current clock, a note stated mid-flow is
dropped in silence, and a repair fragment writes a note nobody dictated.

V-572 is confirmed to hold for every spoken time form, not only the one it was
measured on, including the spelled-out девять.

--no-verify: the pre-commit hook refuses master, and this is an unattended run
where the merge target is master by the owner's instruction.
2026-08-06 01:30:16 +04:00