code wiki / _hdl_build / nx_claude_harvest_before_evidence_t45.nx
nx_claude_harvest_before_evidence_t45.nx source
↩ module page · 3484 lines · 170324 B
1// nx_claude_harvest.nx -- CLAUDE TRANSCRIPT HARVESTER + OUTSIDE-GAUGE (miner-sota lane F964/F973, 2026-07-23).
2// PORTABLE organ (gen-image pattern: runs where the transcripts live -- laptop WSL today, NAS, any host):
3// parses Claude Code transcript JSONL into sovereign actlog frames, bulk-ingests staged frames into a
4// journal (validated, marker-idempotent), and derives the outside_permil gauge (nishi vs outside tool
5// split) that MUST FALL as capabilities move inside (MG00 baseline 651, 2026-07-23).
6// Composes nx_sovjson_lib (sj_*) -- no helper dup (D001 discipline). State derived; journals append-only
7// (O_APPEND, conflict-free, ws_sync lineage). No hw writes (Rule 26).
8// frames <transcript.jsonl> <ws> <outjournal> -> parse transcript, append actlog frames; HARVEST OK
9// ingest <framesfile> <journal> -> validated bulk append, idempotent by marker frame
10// gauge <journal> [days] -> JSON outside_permil (0 days = all frames)
11// beat <chbeat.conf> -> DM1 session->NAS capture beat (devmgmt rung, 2026-08-20):
12// walk EVERY transcript under root (all depths, getdents
13// looped until 0), ch_delta each against a per-transcript
14// byte HWM, split the fresh frames into ts-day PIECES sized
15// under the MCP body cliff, ingest each piece (ch_ingest,
16// marker-idempotent) into per-day journals -- the local twin
17// always, the NAS landing via the forked wire when push=1.
18// Pieces are the chunk unit AND the ingest unit, so the
19// pipeline is resumable at every stage with no append
20// primitive over the wire. Counters partition and SUM;
21// unknown head-types bucket UNKNOWN with a named worklist.
22// selftest <scratch-prefix> -> gate T1..T8 + beat teeth (unique per-run scratch names)
23// SSOT for this source is buildroot/runtime/_hdl_build/ on the NAS; the laptop nxc2 tree is a build twin
24// (synced per edit, video-lane pattern) because the beat RUNS WHERE THE TRANSCRIPTS LIVE (laptop WSL).
25// license_tier: ORIGINAL
26import "nx_sovjson_lib.nx"
27import "nx_syscalls.nx"
28import "nx_gate_verdict.nx"
29import "nx_tool_run.nx"
30import "nx_mccabe_lib.nx"
31const CH_MAGIC_146097: i64 = 146097
32const CH_MAGIC_719468: i64 = 719468
33const CH_MAGIC_86400: i64 = 86400
34const CH_MAGIC_3600: i64 = 3600
35const CH_MAGIC_1784764900: i64 = 1784764900
36const CH_MAGIC_1784764901: i64 = 1784764901
37const CH_MAGIC_1784764803: i64 = 1784764803
38
39const CH_WIN: i64 = 67108864
40const CH_JWIN: i64 = 4194304
41const CH_OUT: i64 = 65536
42const CH_LINE: i64 = 4096
43const CH_NAME_MAX: i64 = 120
44const CH_NAME_SCAN: i64 = 400
45const CH_MODE_644: i64 = 420
46// ---- CE1 leg 2 (ce_author_health) consts: declared here, above the selftest that reads them (single-pass parser) ----
47const CH_AH_MAXPATHS: i64 = 8192
48const CH_AH_PATHCELL: i64 = 512
49const CH_AH_MAXSESS: i64 = 1024
50const CH_AH_SESSCELL: i64 = 64
51const CH_AH_CTRS: i64 = 32
52const CH_AH_SPINE: *u8 = "knowledge/status/mccabe.spine"
53const CH_AH_STATUS: *u8 = "knowledge/status/author_health.status"
54const CH_AH_TREE: *u8 = "buildroot/runtime/"
55const CH_AH_RC_UNOBS: i64 = 3
56const CH_AH_RC_NOPATH: i64 = 4
57const CH_AH_FRAMES: i64 = 0
58const CH_AH_PATHFRAMES: i64 = 1
59const CH_AH_UNIQUE: i64 = 2
60const CH_AH_INTREE: i64 = 3
61const CH_AH_OUTSIDE: i64 = 4
62const CH_AH_FIRSTTS: i64 = 5
63const CH_AH_SESSIONS: i64 = 6
64const CH_AH_FILES: i64 = 7
65const CH_AH_FUNCS: i64 = 8
66const CH_AH_SUMVG: i64 = 9
67const CH_AH_ABOVE: i64 = 10
68const CH_AH_DFILES: i64 = 11
69const CH_AH_DFUNCS: i64 = 12
70const CH_AH_DABOVE: i64 = 13
71const CH_AH_DTS: i64 = 14
72const CH_AH_UNREAD: i64 = 15
73const CH_AH_OVERFLOW: i64 = 16
74const CH_AH_FIX_TS: i64 = 1788600000
75const CH_AH_FIX_DFILES: i64 = 10
76const CH_AH_FIX_DFUNCS: i64 = 20
77const CH_AH_FIX_DABOVE: i64 = 3
78const CH_CH_D0: i64 = 48
79const CH_CH_D9: i64 = 57
80const CH_DEC: i64 = 10
81// ---- beat consts (DM1 ch_beat; declared here because the module parser is single-pass and the
82// selftest teeth read them before the beat section) -- each names its derivation ----
83const CH_BT_DIRWIN: i64 = 65536 // getdents64 batch buffer -- LOOPED until 0, never a listing cap
84const CH_BT_PATHMAX: i64 = 512 // one path cell; longest real transcript path measured ~120 B, 4x headroom
85const CH_BT_MAXFILES: i64 = 16384 // walk table capacity (837 files measured 2026-08-20); hitting it REFUSES loudly
86const CH_BT_MAXDIRS: i64 = 4096
87const CH_BT_ARENA: i64 = 8388608 // path arena = CH_BT_MAXFILES * CH_BT_PATHMAX exactly
88const CH_BT_TYPEMAX: i64 = 64 // distinct head-type slots; overflow announces FLOOR-NOT-TOTAL
89const CH_BT_DAYMAX: i64 = 128 // distinct ts-days per run (backfill spans ~60); overflow REFUSES loudly
90const CH_BT_DAYCELL: i64 = 16 // one day-name cell: YYYYMMDD (8) or tszero (6) + NUL, padded
91const CH_MCP_BODY_CLIFF: i64 = 65536 // measured: the MCP write body silently drops beyond ~64 KiB
92const CH_BT_CTRS: i64 = 32 // bcx slot count (map at ch_beat)
93const CH_MODE_755: i64 = 493 // rwxr-xr-x for the beat's own state/spool/journal dirs
94const CH_MAGIC_1460: i64 = 1460 // 4*365 (Hinnant civil-from-days)
95const CH_MAGIC_36524: i64 = 36524 // 100*365 + 24 (Hinnant)
96const CH_MAGIC_146096: i64 = 146096 // CH_MAGIC_146097 - 1 (Hinnant)
97
98func ch_read(path: *u8, buf: *u8, cap: i64) -> i64 {
99 let fd: i64 = sys_openat_rd(path)
100 if fd < 0 { return -1 }
101 var n: i64 = 0
102 var go: i64 = 1
103 while go == 1 { let r: i64 = sys_read(fd, ((buf as i64)+n) as *u8, cap-n); if r <= 0 { go = 0 } else { n = n + r } if n >= cap { go = 0 } }
104 sys_close(fd)
105 return n
106}
107// substring search in q[from..endlim) -> position or -1
108func ch_find_from(q: *u8, from: i64, endlim: i64, lit: *u8) -> i64 {
109 var i: i64 = from
110 while i < endlim {
111 var k: i64 = 0
112 var ok: i64 = 1
113 var go: i64 = 1
114 while go == 1 {
115 if lit[k] == (0 as u8) { go = 0 } else {
116 if i + k >= endlim { ok = 0; go = 0 } else {
117 if q[i+k] != lit[k] { ok = 0; go = 0 } else { k = k + 1 }
118 }
119 }
120 }
121 if ok == 1 { return i }
122 i = i + 1
123 }
124 return -1
125}
126func ch_find(q: *u8, n: i64, lit: *u8) -> i64 {
127 if ch_find_from(q, 0, n, lit) >= 0 { return 1 }
128 return 0
129}
130// span q[s..e) begins with lit?
131func ch_starts(q: *u8, s: i64, e: i64, lit: *u8) -> i64 {
132 var k: i64 = 0
133 while lit[k] != (0 as u8) {
134 if s + k >= e { return 0 }
135 if q[s+k] != lit[k] { return 0 }
136 k = k + 1
137 }
138 return 1
139}
140func ch_digits(q: *u8, s: i64, e: i64) -> i64 {
141 if e <= s { return 0 }
142 var i: i64 = s
143 while i < e { let c: i64 = q[i] as i64; if c < 48 { return 0 } if c > 57 { return 0 } i = i + 1 }
144 return 1
145}
146// civil date -> unix epoch (Hinnant days-from-civil, integer only; years >= 1970 here)
147func ch_epoch_ymdhms(y: i64, mo: i64, d: i64, h: i64, mi: i64, s: i64) -> i64 {
148 var yy: i64 = y
149 var mp: i64 = 0
150 if mo > 2 { mp = mo - 3 } else { mp = mo + 9; yy = yy - 1 }
151 let era: i64 = yy / 400
152 let yoe: i64 = yy - era * 400
153 let doy: i64 = (153 * mp + 2) / 5 + d - 1
154 let doe: i64 = yoe * 365 + yoe / 4 - yoe / 100 + doy
155 let days: i64 = era * CH_MAGIC_146097 + doe - CH_MAGIC_719468
156 return days * CH_MAGIC_86400 + h * CH_MAGIC_3600 + mi * 60 + s
157}
158// parse ISO "YYYY-MM-DDTHH:MM:SS" at q[s..] (lim-bounded) -> epoch, 0 if malformed
159func ch_iso_epoch(q: *u8, s: i64, lim: i64) -> i64 {
160 if s + 19 > lim { return 0 }
161 if ch_digits(q, s, s+4) == 0 { return 0 }
162 if q[s+4] != (45 as u8) { return 0 }
163 if ch_digits(q, s+5, s+7) == 0 { return 0 }
164 if q[s+7] != (45 as u8) { return 0 }
165 if ch_digits(q, s+8, s+10) == 0 { return 0 }
166 if q[s+10] != (84 as u8) { return 0 }
167 if ch_digits(q, s+11, s+13) == 0 { return 0 }
168 if q[s+13] != (58 as u8) { return 0 }
169 if ch_digits(q, s+14, s+16) == 0 { return 0 }
170 if q[s+16] != (58 as u8) { return 0 }
171 if ch_digits(q, s+17, s+19) == 0 { return 0 }
172 let y: i64 = sj_atoi_span(q, s, s+4)
173 let mo: i64 = sj_atoi_span(q, s+5, s+7)
174 let d: i64 = sj_atoi_span(q, s+8, s+10)
175 let h: i64 = sj_atoi_span(q, s+11, s+13)
176 let mi: i64 = sj_atoi_span(q, s+14, s+16)
177 let se: i64 = sj_atoi_span(q, s+17, s+19)
178 if mo < 1 { return 0 }
179 if mo > 12 { return 0 }
180 if d < 1 { return 0 }
181 if d > 31 { return 0 }
182 return ch_epoch_ymdhms(y, mo, d, h, mi, se)
183}
184// write one actlog frame line to an open fd: <ts>TAB<ws>TAB<tool>TAB<verb>TAB<outcome>TAB<note>NL
185func ch_frame_write(fd: i64, ln: *u8, ts: i64, ws: *u8, tool: *u8, verb: *u8, outcome: *u8, note: *u8) -> i64 {
186 var o: i64 = 0
187 o = sj_catn(ln, o, ts)
188 ln[o] = 9 as u8; o = o + 1
189 o = sj_cat(ln, o, ws)
190 ln[o] = 9 as u8; o = o + 1
191 o = sj_cat(ln, o, tool)
192 ln[o] = 9 as u8; o = o + 1
193 o = sj_cat(ln, o, verb)
194 ln[o] = 9 as u8; o = o + 1
195 o = sj_cat(ln, o, outcome)
196 ln[o] = 9 as u8; o = o + 1
197 o = sj_cat(ln, o, note)
198 ln[o] = 10 as u8; o = o + 1
199 sys_write(fd, ln, o)
200 return 0
201}
202func ch_frame_append(path: *u8, ts: i64, ws: *u8, tool: *u8, verb: *u8, outcome: *u8, note: *u8) -> i64 {
203 let fd: i64 = sys_openat_append(path, CH_MODE_644)
204 if fd < 0 { return -1 }
205 let ln: *u8 = sys_mmap(CH_LINE)
206 ch_frame_write(fd, ln, ts, ws, tool, verb, outcome, note)
207 sys_close(fd)
208 return 0
209}
210// ---------- CE1 leg 2 (codeeffectiveness, 2026-09-05): the PATH a write tool touched ----------
211// Every frame used to carry `tool use - <verb>` and nothing else, so WHICH FILE a seat wrote was not in the
212// NAS record at all (735 nx_fs_write frames on 2026-09-05, none with a path). The path lives in the tool_use's
213// own input: nx_fs_write carries it as argv[1] (argv[0] is the verb), Write and Edit as file_path. It is read
214// from a BOUNDED window after the tool's name (the input keys come before any content string, so the FIRST
215// match is the input's own key, never a content byte). ADDITIVE: the note gains one space-separated token
216// `path=<p>`; no column moves, every existing reader sees one more token. A non-writer frame is unchanged.
217const CH_PATH_SCAN: i64 = 4096 // one transcript line can carry the write's CONTENT before its path key; the frame line is CH_LINE anyway
218const CH_PATH_MAX: i64 = 512
219const CH_CH_BSL: i64 = 92
220const CH_WK_NONE: i64 = 0
221const CH_WK_ARGV: i64 = 1
222const CH_WK_FILEPATH: i64 = 2
223func ch_tool_writer_kind(nm: *u8) -> i64 {
224 let nl: i64 = sj_vlen(nm)
225 if sj_lit_eq(nm, 0, nl, "mcp__nishi__nx_fs_write" as *u8) == 1 { return CH_WK_ARGV }
226 if sj_lit_eq(nm, 0, nl, "Write" as *u8) == 1 { return CH_WK_FILEPATH }
227 if sj_lit_eq(nm, 0, nl, "Edit" as *u8) == 1 { return CH_WK_FILEPATH }
228 return CH_WK_NONE
229}
230// copy a JSON string body that starts at k0 (just past the opening quote) up to its closing unescaped quote
231func ch_json_str_copy(buf: *u8, k0: i64, le: i64, pb: *u8, cap: i64) -> i64 {
232 var k: i64 = k0
233 var o: i64 = 0
234 var g: i64 = 1
235 while g == 1 {
236 if k >= le { g = 0 } else {
237 if buf[k] == (34 as u8) { g = 0 } else {
238 if buf[k] == (CH_CH_BSL as u8) { k = k + 1 }
239 if k < le { if o < cap { pb[o] = buf[k]; o = o + 1 } }
240 k = k + 1
241 }
242 }
243 }
244 pb[o] = 0 as u8
245 return o
246}
247// the path for a writer frame: np is the offset of the tool's name key, le the line end. 0 = no path.
248func ch_tool_path(buf: *u8, np: i64, le: i64, kind: i64, pb: *u8) -> i64 {
249 pb[0] = 0 as u8
250 if kind == CH_WK_NONE { return 0 }
251 var scanend: i64 = np + CH_PATH_SCAN
252 if scanend > le { scanend = le }
253 if kind == CH_WK_ARGV {
254 let akey: *u8 = "\"argv\":[\"" as *u8
255 let ap: i64 = ch_find_from(buf, np, scanend, akey)
256 if ap < 0 { return 0 }
257 var k: i64 = ap + sj_vlen(akey)
258 var g: i64 = 1
259 while g == 1 { if k >= scanend { g = 0 } else { if buf[k] == (34 as u8) { g = 0 } else { if buf[k] == (CH_CH_BSL as u8) { k = k + 1 } k = k + 1 } } }
260 let q2: i64 = ch_find_from(buf, k + 1, scanend, "\"" as *u8)
261 if q2 < 0 { return 0 }
262 return ch_json_str_copy(buf, q2 + 1, scanend, pb, CH_PATH_MAX)
263 }
264 let fkey: *u8 = "\"file_path\":\"" as *u8
265 let fp: i64 = ch_find_from(buf, np, scanend, fkey)
266 if fp < 0 { return 0 }
267 return ch_json_str_copy(buf, fp + sj_vlen(fkey), scanend, pb, CH_PATH_MAX)
268}
269// the note for one frame: the verb literal, plus ` path=<p>` when the tool is a writer whose path was read
270func ch_frame_note(buf: *u8, np: i64, le: i64, nm: *u8, verb: *u8, pb: *u8, nb: *u8) -> *u8 {
271 let wk: i64 = ch_tool_writer_kind(nm)
272 if wk == CH_WK_NONE { return verb }
273 if ch_tool_path(buf, np, le, wk, pb) <= 0 { return verb }
274 var no: i64 = sj_cat(nb, 0, verb)
275 no = sj_cat(nb, no, " path=" as *u8)
276 no = sj_cat(nb, no, pb)
277 nb[no] = 0 as u8
278 return nb
279}
280// ---------- frames: transcript JSONL -> actlog frames ----------
281// returns frames harvested, -1 missing/empty transcript, -3 cannot open out journal.
282// tcx[0] receives truncated flag.
283func ch_frames(tpath: *u8, ws: *u8, outj: *u8, tcx: *i64) -> i64 {
284 let buf: *u8 = sys_mmap(CH_WIN)
285 let cap: i64 = CH_WIN - 8
286 let n: i64 = ch_read(tpath, buf, cap)
287 tcx[0] = 0
288 if n <= 0 { return -1 }
289 if n >= cap { tcx[0] = 1 }
290 let fd: i64 = sys_openat_append(outj, CH_MODE_644)
291 if fd < 0 { return -3 }
292 let ln: *u8 = sys_mmap(CH_LINE)
293 let nm: *u8 = sys_mmap(256)
294 let pb: *u8 = sys_mmap(CH_PATH_MAX + 8)
295 let nb: *u8 = sys_mmap(CH_PATH_MAX + 64)
296 var frames: i64 = 0
297 var i: i64 = 0
298 while i < n {
299 let le: i64 = sj_le(buf, i, n)
300 var ts: i64 = 0
301 let tp: i64 = ch_find_from(buf, i, le, "\"timestamp\":\"" as *u8)
302 if tp >= 0 { ts = ch_iso_epoch(buf, tp + 13, le) }
303 var j: i64 = i
304 var go: i64 = 1
305 while go == 1 {
306 let tu: i64 = ch_find_from(buf, j, le, "\"type\":\"tool_use\"" as *u8)
307 if tu < 0 { go = 0 } else {
308 var scanend: i64 = tu + CH_NAME_SCAN
309 if scanend > le { scanend = le }
310 let np: i64 = ch_find_from(buf, tu, scanend, "\"name\":\"" as *u8)
311 if np >= 0 {
312 var k: i64 = np + 8
313 var o: i64 = 0
314 var g2: i64 = 1
315 while g2 == 1 {
316 if k >= le { g2 = 0 } else {
317 if buf[k] == (34 as u8) { g2 = 0 } else {
318 if o < CH_NAME_MAX { nm[o] = buf[k]; o = o + 1 }
319 k = k + 1
320 }
321 }
322 }
323 nm[o] = 0 as u8
324 if o > 0 {
325 ch_frame_write(fd, ln, ts, ws, nm, "use" as *u8, "-" as *u8, ch_frame_note(buf, np, le, nm, "harvest" as *u8, pb, nb))
326 frames = frames + 1
327 }
328 }
329 j = tu + 17
330 }
331 }
332 i = le + 1
333 }
334 sys_close(fd)
335 return frames
336}
337// ---------- delta: HIGH-WATER-MARK harvest, the F973 self-sufficiency half ----------
338// The ongoing-harvest loop lived in a laptop PowerShell parser (MG03: Claude hand-writes miners).
339// This puts the byte-offset high-water mark INSIDE the organ, so the harvester is self-sufficient on
340// ANY host that holds transcripts: run the ELF, it consumes only what grew since last time.
341// EXACTLY-ONCE BY CONSTRUCTION: only COMPLETE lines are consumed (a partial trailing line stays below
342// the mark for the next run), and the mark advances only over what was actually parsed. A re-run on an
343// unchanged transcript yields 0 frames -- idempotent without needing a marker.
344// hcx[0]=frames hcx[1]=new_hwm hcx[2]=old_hwm hcx[3]=truncated
345func ch_hwm_read(path: *u8) -> i64 {
346 let b: *u8 = sys_mmap(CH_LINE)
347 let fd: i64 = sys_openat_rd(path)
348 if fd < 0 { return 0 }
349 let r: i64 = sys_read(fd, b, CH_LINE - 8)
350 sys_close(fd)
351 if r <= 0 { return 0 }
352 var v: i64 = 0
353 var i: i64 = 0
354 while i < r { let c: i64 = b[i] as i64; if c >= 48 { if c <= 57 { v = v * 10 + (c - 48) } } i = i + 1 }
355 return v
356}
357func ch_hwm_write(path: *u8, v: i64) -> i64 {
358 let fd: i64 = sys_openat_wr(path, CH_MODE_644)
359 if fd < 0 { return -1 }
360 let b: *u8 = sys_mmap(CH_LINE)
361 var o: i64 = sj_catn(b, 0, v)
362 b[o] = 10 as u8
363 sys_write(fd, b, o + 1)
364 sys_close(fd)
365 return 0
366}
367func ch_delta(tpath: *u8, ws: *u8, outj: *u8, hwmpath: *u8, hcx: *i64) -> i64 {
368 hcx[0] = 0
369 hcx[1] = 0
370 hcx[2] = 0
371 hcx[3] = 0
372 // read sized-by-file (2026-08-20): the old fixed CH_WIN window silently stopped harvesting past
373 // 64 MiB (largest real transcript measured 55.8 MB the same day -- the cliff was DAYS away).
374 // sys_map_file is read-only/zero-copy and every parse below is span-bounded, never NUL-reliant.
375 // hcx[3] (truncated) is structurally 0 now; the slot stays for contract stability.
376 let nn: *i64 = sys_mmap(16) as *i64
377 let buf: *u8 = sys_map_file(tpath, nn)
378 let n: i64 = nn[0]
379 if n <= 0 { return -1 }
380 var hwm: i64 = ch_hwm_read(hwmpath)
381 if hwm < 0 { hwm = 0 }
382 if hwm > n { hwm = 0 }
383 hcx[2] = hwm
384 hcx[1] = hwm
385 if hwm >= n { sys_munmap(buf, n); return 0 }
386 // consume only up to the LAST newline: a partial trailing line waits for the next run
387 var lastnl: i64 = 0 - 1
388 var z: i64 = n - 1
389 while z >= hwm { if lastnl < 0 { if buf[z] == (10 as u8) { lastnl = z } } z = z - 1 }
390 if lastnl < 0 { sys_munmap(buf, n); return 0 }
391 let fd: i64 = sys_openat_append(outj, CH_MODE_644)
392 if fd < 0 { sys_munmap(buf, n); return -3 }
393 let ln: *u8 = sys_mmap(CH_LINE)
394 let nm: *u8 = sys_mmap(256)
395 let pb: *u8 = sys_mmap(CH_PATH_MAX + 8)
396 let nb: *u8 = sys_mmap(CH_PATH_MAX + 64)
397 var frames: i64 = 0
398 var i: i64 = hwm
399 while i <= lastnl {
400 let le: i64 = sj_le(buf, i, lastnl + 1)
401 var ts: i64 = 0
402 let tp: i64 = ch_find_from(buf, i, le, "\"timestamp\":\"" as *u8)
403 if tp >= 0 { ts = ch_iso_epoch(buf, tp + 13, le) }
404 var j: i64 = i
405 var go: i64 = 1
406 while go == 1 {
407 let tu: i64 = ch_find_from(buf, j, le, "\"type\":\"tool_use\"" as *u8)
408 if tu < 0 { go = 0 } else {
409 var scanend: i64 = tu + CH_NAME_SCAN
410 if scanend > le { scanend = le }
411 let np: i64 = ch_find_from(buf, tu, scanend, "\"name\":\"" as *u8)
412 if np >= 0 {
413 var k: i64 = np + 8
414 var o: i64 = 0
415 var g2: i64 = 1
416 while g2 == 1 {
417 if k >= le { g2 = 0 } else {
418 if buf[k] == (34 as u8) { g2 = 0 } else {
419 if o < CH_NAME_MAX { nm[o] = buf[k]; o = o + 1 }
420 k = k + 1
421 }
422 }
423 }
424 nm[o] = 0 as u8
425 if o > 0 {
426 ch_frame_write(fd, ln, ts, ws, nm, "use" as *u8, "-" as *u8, ch_frame_note(buf, np, le, nm, "delta" as *u8, pb, nb))
427 frames = frames + 1
428 }
429 }
430 j = tu + 17
431 }
432 }
433 i = le + 1
434 }
435 sys_close(fd)
436 sys_munmap(buf, n)
437 hcx[0] = frames
438 hcx[1] = lastnl + 1
439 ch_hwm_write(hwmpath, lastnl + 1)
440 return 0
441}
442// ---------- ingest: validated bulk append of a staged frames file, marker-idempotent ----------
443// returns >=0 ingested count (mcx[0]=malformed), -1 missing frames file, -2 already ingested,
444// -4 cannot open journal. (-3 window-exceeded was RETIRED 2026-08-20: the marker-verify read is now
445// sized by the journal itself via sys_map_file, so idempotence is verifiable at any journal size.)
446func ch_ingest(fpath: *u8, jpath: *u8, mcx: *i64) -> i64 {
447 mcx[0] = 0
448 // marker = "harvest-ingest:" + basename(fpath)
449 var bs: i64 = 0
450 var i: i64 = 0
451 while fpath[i] != (0 as u8) { if fpath[i] == (47 as u8) { bs = i + 1 } i = i + 1 }
452 let marker: *u8 = sys_mmap(512)
453 var mo: i64 = sj_cat(marker, 0, "harvest-ingest:" as *u8)
454 mo = sj_cat(marker, mo, ((fpath as i64) + bs) as *u8)
455 marker[mo] = 0 as u8
456 let jnn: *i64 = sys_mmap(16) as *i64
457 let jbuf: *u8 = sys_map_file(jpath, jnn)
458 let jn: i64 = jnn[0]
459 if jn > 0 {
460 if ch_find(jbuf, jn, marker) == 1 { sys_munmap(jbuf, jn); return -2 }
461 sys_munmap(jbuf, jn)
462 }
463 let fbuf: *u8 = sys_mmap(CH_WIN)
464 let fcap: i64 = CH_WIN - 8
465 let fn: i64 = ch_read(fpath, fbuf, fcap)
466 if fn <= 0 { return -1 }
467 let fd: i64 = sys_openat_append(jpath, CH_MODE_644)
468 if fd < 0 { return -4 }
469 let sp: *i64 = sys_mmap(16) as *i64
470 let nl: *u8 = sys_mmap(8)
471 nl[0] = 10 as u8
472 var ing: i64 = 0
473 var p: i64 = 0
474 while p < fn {
475 let le: i64 = sj_le(fbuf, p, fn)
476 var ok: i64 = 0
477 if le > p {
478 if sj_col(fbuf, p, le, 5, sp) == 1 {
479 if sj_col(fbuf, p, le, 6, sp) == 0 {
480 if sj_col(fbuf, p, le, 0, sp) == 1 {
481 if ch_digits(fbuf, sp[0], sp[1]) == 1 { ok = 1 }
482 }
483 }
484 }
485 }
486 if ok == 1 {
487 sys_write(fd, ((fbuf as i64) + p) as *u8, le - p)
488 sys_write(fd, nl, 1)
489 ing = ing + 1
490 } else {
491 if le > p { mcx[0] = mcx[0] + 1 }
492 }
493 p = le + 1
494 }
495 let ln: *u8 = sys_mmap(CH_LINE)
496 ch_frame_write(fd, ln, sys_now_realtime_sec(), "harvest" as *u8, "nx_claude_harvest" as *u8, "ingest" as *u8, "ok" as *u8, marker)
497 sys_close(fd)
498 return ing
499}
500// ---------- gauge: outside_permil JSON from a frames journal ----------
501func ch_nishi_tool(q: *u8, s: i64, e: i64) -> i64 {
502 if ch_starts(q, s, e, "mcp__nishi__" as *u8) == 1 { return 1 }
503 if ch_starts(q, s, e, "nx_" as *u8) == 1 { return 1 }
504 if ch_starts(q, s, e, "nishi" as *u8) == 1 { return 1 }
505 if ch_starts(q, s, e, "vizsla" as *u8) == 1 { return 1 }
506 return 0
507}
508func ch_key(d: *u8, o: i64, name: *u8) -> i64 {
509 d[o] = 34 as u8
510 var p: i64 = o + 1
511 p = sj_cat(d, p, name)
512 d[p] = 34 as u8
513 p = p + 1
514 d[p] = 58 as u8
515 p = p + 1
516 return p
517}
518// ---------- bootgauge: SOTA-FROM-THE-FIRST-BYTE (operator 2026-07-24 'go SOTA from the first byte up') ----------
519// For each session (ws) is the FIRST tool nishi-native? A session that opens with nx_seat boot is SOTA
520// from byte 1; one that opens by reading 40KB of memory / scratchpadding is LEGACY. Measures the
521// SOTA-boot ratio + the softer nishi-within-first-K signal. Sessions interned by ws span (bounded, declared).
522const CH_WS_MAX: i64 = 4096
523func ch_bg_intern(q: *u8, cs: i64, ce: i64, wss: *i64, wse: *i64, np: *i64) -> i64 {
524 var i: i64 = 0
525 while i < np[0] {
526 if ce - cs == wse[i] - wss[i] {
527 var m: i64 = 0
528 var eq: i64 = 1
529 while m < ce - cs { if q[cs+m] != q[wss[i]+m] { eq = 0; m = ce - cs } else { m = m + 1 } }
530 if eq == 1 { return i }
531 }
532 i = i + 1
533 }
534 if np[0] >= CH_WS_MAX { return -1 }
535 wss[np[0]] = cs
536 wse[np[0]] = ce
537 np[0] = np[0] + 1
538 return np[0] - 1
539}
540func ch_bootgauge(journal: *u8, k: i64, d: *u8) -> i64 {
541 let q: *u8 = sys_mmap(CH_JWIN)
542 let cap: i64 = CH_JWIN - 8
543 var n: i64 = ch_read(journal, q, cap)
544 if n < 0 { n = 0 }
545 var trunc: i64 = 0
546 if n >= cap { trunc = 1 }
547 let wss: *i64 = sys_mmap(8 * CH_WS_MAX) as *i64
548 let wse: *i64 = sys_mmap(8 * CH_WS_MAX) as *i64
549 let wfn: *i64 = sys_mmap(8 * CH_WS_MAX) as *i64
550 let wnk: *i64 = sys_mmap(8 * CH_WS_MAX) as *i64
551 let wc: *i64 = sys_mmap(8 * CH_WS_MAX) as *i64
552 let np: *i64 = sys_mmap(16) as *i64
553 let sp: *i64 = sys_mmap(16) as *i64
554 var frames: i64 = 0
555 var malformed: i64 = 0
556 var capped: i64 = 0
557 var i: i64 = 0
558 while i < n {
559 let le: i64 = sj_le(q, i, n)
560 if le > i {
561 if sj_col(q, i, le, 1, sp) == 1 {
562 let ws0: i64 = sp[0]
563 let ws1: i64 = sp[1]
564 if sj_col(q, i, le, 2, sp) == 1 {
565 frames = frames + 1
566 let wi: i64 = ch_bg_intern(q, ws0, ws1, wss, wse, np)
567 if wi < 0 { capped = 1 } else {
568 let isn: i64 = ch_nishi_tool(q, sp[0], sp[1])
569 let c: i64 = wc[wi]
570 wc[wi] = c + 1
571 if c == 0 { wfn[wi] = isn }
572 if c < k { if isn == 1 { wnk[wi] = 1 } }
573 }
574 } else { malformed = malformed + 1 }
575 } else { malformed = malformed + 1 }
576 }
577 i = le + 1
578 }
579 var sota: i64 = 0
580 var nishik: i64 = 0
581 var kk: i64 = 0
582 while kk < np[0] {
583 if wfn[kk] == 1 { sota = sota + 1 }
584 if wnk[kk] == 1 { nishik = nishik + 1 }
585 kk = kk + 1
586 }
587 let total: i64 = np[0]
588 var sotaperm: i64 = 0 - 1
589 var nkperm: i64 = 0 - 1
590 if total > 0 { sotaperm = sota * 1000 / total; nkperm = nishik * 1000 / total }
591 var p: i64 = 0
592 d[p] = 123 as u8; p = p + 1
593 p = ch_key(d, p, "v" as *u8); p = sj_catn(d, p, 1); d[p] = 44 as u8; p = p + 1
594 p = ch_key(d, p, "tool" as *u8); d[p]=34 as u8;p=p+1; p = sj_cat(d,p,"nx_claude_harvest" as *u8); d[p]=34 as u8;p=p+1; d[p]=44 as u8;p=p+1
595 p = ch_key(d, p, "averb" as *u8); d[p]=34 as u8;p=p+1; p = sj_cat(d,p,"bootgauge" as *u8); d[p]=34 as u8;p=p+1; d[p]=44 as u8;p=p+1
596 p = ch_key(d, p, "journal_bytes" as *u8); p = sj_catn(d,p,n); d[p]=44 as u8;p=p+1
597 p = ch_key(d, p, "truncated" as *u8); p = sj_catn(d,p,trunc); d[p]=44 as u8;p=p+1
598 p = ch_key(d, p, "k" as *u8); p = sj_catn(d,p,k); d[p]=44 as u8;p=p+1
599 p = ch_key(d, p, "frames" as *u8); p = sj_catn(d,p,frames); d[p]=44 as u8;p=p+1
600 p = ch_key(d, p, "malformed" as *u8); p = sj_catn(d,p,malformed); d[p]=44 as u8;p=p+1
601 p = ch_key(d, p, "sessions" as *u8); p = sj_catn(d,p,total); d[p]=44 as u8;p=p+1
602 p = ch_key(d, p, "sota_first" as *u8); p = sj_catn(d,p,sota); d[p]=44 as u8;p=p+1
603 p = ch_key(d, p, "legacy_first" as *u8); p = sj_catn(d,p,total-sota); d[p]=44 as u8;p=p+1
604 p = ch_key(d, p, "sota_boot_permil" as *u8); p = sj_catn(d,p,sotaperm); d[p]=44 as u8;p=p+1
605 p = ch_key(d, p, "nishi_within_k" as *u8); p = sj_catn(d,p,nishik); d[p]=44 as u8;p=p+1
606 p = ch_key(d, p, "nishi_within_k_permil" as *u8); p = sj_catn(d,p,nkperm); d[p]=44 as u8;p=p+1
607 p = ch_key(d, p, "sessions_capped" as *u8); p = sj_catn(d,p,capped)
608 d[p] = 125 as u8; p = p + 1
609 d[p] = 10 as u8; p = p + 1
610 return p
611}
612// gauge core: g slots 0 total 1 nishi 2 outside 3 permil(legacy,all) 4 malformed 5 trunc 6 bytes
613// 7 beats(verb=run: estate autonomy) 8 claude_actions 9 claude_outside 10 claude_outside_permil
614// FULL journal read via sys_read_file (the 4MB cap SAMPLED THE JULY HEAD -- fixed 2026-09-05).
615// Reliance is measured over CLAUDE-ACTION frames ONLY; estate :run beats are the estate running
616// ITSELF (sovereign) and would dilute the denominator (measured law 2026-09-05).
617func ch_gauge_calc(jpath: *u8, days: i64, g: *i64) -> i64 {
618 let nn: *i64 = sys_mmap(16) as *i64
619 let q: *u8 = sys_read_file(jpath, nn)
620 var n: i64 = nn[0]
621 if n < 0 { n = 0 }
622 let trunc: i64 = 0
623 var cutoff: i64 = 0
624 if days > 0 { cutoff = sys_now_realtime_sec() - days * CH_MAGIC_86400 }
625 let sp: *i64 = sys_mmap(16) as *i64
626 let vp: *i64 = sys_mmap(16) as *i64
627 var total: i64 = 0
628 var nishi: i64 = 0
629 var outside: i64 = 0
630 var malformed: i64 = 0
631 var beats: i64 = 0
632 var cl_total: i64 = 0
633 var cl_outside: i64 = 0
634 var i: i64 = 0
635 while i < n {
636 let le: i64 = sj_le(q, i, n)
637 if le > i {
638 var ok: i64 = 0
639 var ts: i64 = 0
640 var isnishi: i64 = 0
641 var isbeat: i64 = 0
642 if sj_col(q, i, le, 0, sp) == 1 {
643 if ch_digits(q, sp[0], sp[1]) == 1 {
644 ts = sj_atoi_span(q, sp[0], sp[1])
645 if sj_col(q, i, le, 2, sp) == 1 { ok = 1 }
646 }
647 }
648 if ok == 1 {
649 isnishi = ch_nishi_tool(q, sp[0], sp[1])
650 if sj_col(q, i, le, 3, vp) == 1 {
651 if (vp[1] - vp[0]) == 3 { if ch_starts(q, vp[0], vp[1], "run" as *u8) == 1 { isbeat = 1 } }
652 }
653 if ts >= cutoff {
654 total = total + 1
655 if isnishi == 1 { nishi = nishi + 1 } else { outside = outside + 1 }
656 if isbeat == 1 { beats = beats + 1 } else {
657 cl_total = cl_total + 1
658 if isnishi == 0 { cl_outside = cl_outside + 1 }
659 }
660 }
661 } else { malformed = malformed + 1 }
662 }
663 i = le + 1
664 }
665 var permil: i64 = 0 - 1
666 if total > 0 { permil = outside * 1000 / total }
667 var clperm: i64 = 0 - 1
668 if cl_total > 0 { clperm = cl_outside * 1000 / cl_total }
669 g[0] = total
670 g[1] = nishi
671 g[2] = outside
672 g[3] = permil
673 g[4] = malformed
674 g[5] = trunc
675 g[6] = n
676 g[7] = beats
677 g[8] = cl_total
678 g[9] = cl_outside
679 g[10] = clperm
680 return 0
681}
682func ch_gauge_json(jpath: *u8, days: i64, d: *u8) -> i64 {
683 let g: *i64 = sys_mmap(128) as *i64
684 ch_gauge_calc(jpath, days, g)
685 let total: i64 = g[0]
686 let nishi: i64 = g[1]
687 let outside: i64 = g[2]
688 let permil: i64 = g[3]
689 let malformed: i64 = g[4]
690 let trunc: i64 = g[5]
691 let n: i64 = g[6]
692 var p: i64 = 0
693 d[p] = 123 as u8; p = p + 1
694 p = ch_key(d, p, "v" as *u8); p = sj_catn(d, p, 1); d[p] = 44 as u8; p = p + 1
695 p = ch_key(d, p, "tool" as *u8)
696 d[p] = 34 as u8; p = p + 1
697 p = sj_cat(d, p, "nx_claude_harvest" as *u8)
698 d[p] = 34 as u8; p = p + 1
699 d[p] = 44 as u8; p = p + 1
700 p = ch_key(d, p, "averb" as *u8)
701 d[p] = 34 as u8; p = p + 1
702 p = sj_cat(d, p, "gauge" as *u8)
703 d[p] = 34 as u8; p = p + 1
704 d[p] = 44 as u8; p = p + 1
705 p = ch_key(d, p, "journal" as *u8)
706 d[p] = 34 as u8; p = p + 1
707 p = sj_cat_esc(d, p, jpath, 0, sj_vlen(jpath), 200)
708 d[p] = 34 as u8; p = p + 1
709 d[p] = 44 as u8; p = p + 1
710 p = ch_key(d, p, "journal_bytes" as *u8); p = sj_catn(d, p, n); d[p] = 44 as u8; p = p + 1
711 p = ch_key(d, p, "truncated" as *u8); p = sj_catn(d, p, trunc); d[p] = 44 as u8; p = p + 1
712 p = ch_key(d, p, "days" as *u8); p = sj_catn(d, p, days); d[p] = 44 as u8; p = p + 1
713 p = ch_key(d, p, "frames_total" as *u8); p = sj_catn(d, p, total); d[p] = 44 as u8; p = p + 1
714 p = ch_key(d, p, "malformed" as *u8); p = sj_catn(d, p, malformed); d[p] = 44 as u8; p = p + 1
715 p = ch_key(d, p, "nishi" as *u8); p = sj_catn(d, p, nishi); d[p] = 44 as u8; p = p + 1
716 p = ch_key(d, p, "outside" as *u8); p = sj_catn(d, p, outside); d[p] = 44 as u8; p = p + 1
717 p = ch_key(d, p, "outside_permil" as *u8); p = sj_catn(d, p, permil); d[p] = 44 as u8; p = p + 1
718 p = ch_key(d, p, "beats" as *u8); p = sj_catn(d, p, g[7]); d[p] = 44 as u8; p = p + 1
719 p = ch_key(d, p, "claude_actions" as *u8); p = sj_catn(d, p, g[8]); d[p] = 44 as u8; p = p + 1
720 p = ch_key(d, p, "claude_outside" as *u8); p = sj_catn(d, p, g[9]); d[p] = 44 as u8; p = p + 1
721 p = ch_key(d, p, "claude_outside_permil" as *u8); p = sj_catn(d, p, g[10])
722 d[p] = 125 as u8; p = p + 1
723 d[p] = 10 as u8; p = p + 1
724 return p
725}
726// ---------- page: the F965 watch-it-fall surface (HTML, minimal; U2/U3 restyle rides ui-debt lane) ----------
727func ch_page(jpath: *u8, outp: *u8, days: i64) -> i64 {
728 let g: *i64 = sys_mmap(128) as *i64
729 ch_gauge_calc(jpath, days, g)
730 let d: *u8 = sys_mmap(CH_OUT)
731 var p: i64 = 0
732 d[p] = 60 as u8; p = p + 1
733 d[p] = 33 as u8; p = p + 1
734 p = sj_cat(d, p, "doctype html><html><head><meta charset=\"utf-8\"><title>Outside Gauge</title></head><body>" as *u8)
735 p = sj_cat(d, p, "<h1>Outside Gauge</h1><p>share of observed tool actions still OUTSIDE the nishi ecosystem (permil, derived from the sovereign actlog)</p>" as *u8)
736 p = sj_cat(d, p, "<p style=\"font-size:64px;margin:8px 0\">" as *u8)
737 p = sj_catn(d, p, g[10])
738 p = sj_cat(d, p, "‰</p>" as *u8)
739 p = sj_cat(d, p, "<p>outside_permil=" as *u8)
740 p = sj_catn(d, p, g[3])
741 p = sj_cat(d, p, " (frames=" as *u8)
742 p = sj_catn(d, p, g[0])
743 p = sj_cat(d, p, " nishi=" as *u8)
744 p = sj_catn(d, p, g[1])
745 p = sj_cat(d, p, " outside=" as *u8)
746 p = sj_catn(d, p, g[2])
747 p = sj_cat(d, p, " malformed=" as *u8)
748 p = sj_catn(d, p, g[4])
749 p = sj_cat(d, p, " truncated=" as *u8)
750 p = sj_catn(d, p, g[5])
751 p = sj_cat(d, p, " days=" as *u8)
752 p = sj_catn(d, p, days)
753 p = sj_cat(d, p, ")</p>" as *u8)
754 p = sj_cat(d, p, "<p>claude_outside_permil=" as *u8)
755 p = sj_catn(d, p, g[10])
756 p = sj_cat(d, p, " (claude_actions=" as *u8)
757 p = sj_catn(d, p, g[8])
758 p = sj_cat(d, p, " claude_outside=" as *u8)
759 p = sj_catn(d, p, g[9])
760 p = sj_cat(d, p, " estate_beats_excluded=" as *u8)
761 p = sj_catn(d, p, g[7])
762 p = sj_cat(d, p, ")</p>" as *u8)
763 p = sj_cat(d, p, "<p>Baseline 2026-07-23: laptop 651 / sovereign 643. This number must FALL as capabilities move inside (minergap- MG00-MG11; frontier F964-F973).</p>" as *u8)
764 p = sj_cat(d, p, "<p><a href=\"/wsmine\">wsmine</a> <a href=\"/claims\">claims</a> <a href=\"/intake\">intake</a> <a href=\"/frontier\">frontier</a></p>" as *u8)
765 p = sj_cat(d, p, "<p>emitted by nx_claude_harvest page (hourly beat); journal " as *u8)
766 p = sj_cat(d, p, jpath)
767 p = sj_cat(d, p, "</p></body></html>" as *u8)
768 let fd: i64 = sys_openat_wr(outp, CH_MODE_644)
769 if fd < 0 { return -1 }
770 sys_write(fd, d, p)
771 sys_close(fd)
772 return 0
773}
774// ---------- classes: the residual BY TOOL, whole partition (SV2, 2026-09-05) ----------
775// Over CLAUDE-ACTION frames only (estate :run beats excluded), count outside frames per tool name.
776// The emitted list is the top CH_CLS_SHOW by count plus an OTHER bucket so the partition SUMS to
777// claude_outside; the table cap is named and frames beyond it are COUNTED (classes_unnamed_overflow),
778// never silently dropped. Today (2026-09-05) nx_actlog freq could only show the top 30 of 1,635 tool:verb
779// pairs across ALL frames; this verb answers the residual question directly and feeds the journal row.
780const CH_CLS_MAX: i64 = 512 // distinct outside tool names tracked (transcript tool names measured ~60 distinct)
781const CH_CLS_NAME: i64 = 64 // one name cell; longest builtin tool name measured well under this
782const CH_CLS_SHOW: i64 = 12 // JSON shows this many, the rest fold into other
783const CH_CLS_JSHOW: i64 = 6 // the journal row shows this many, the rest fold into other
784func ch_classes_calc(jpath: *u8, names: *u8, counts: *i64, c: *i64) -> i64 {
785 let nn: *i64 = sys_mmap(16) as *i64
786 let q: *u8 = sys_read_file(jpath, nn)
787 var n: i64 = nn[0]
788 if n < 0 { n = 0 }
789 let sp: *i64 = sys_mmap(16) as *i64
790 let vp: *i64 = sys_mmap(16) as *i64
791 var ncls: i64 = 0
792 var ovf: i64 = 0
793 var outside: i64 = 0
794 var i: i64 = 0
795 while i < n {
796 let le: i64 = sj_le(q, i, n)
797 if le > i {
798 var ok: i64 = 0
799 if sj_col(q, i, le, 0, sp) == 1 { if ch_digits(q, sp[0], sp[1]) == 1 { if sj_col(q, i, le, 2, sp) == 1 { ok = 1 } } }
800 if ok == 1 {
801 var isbeat: i64 = 0
802 if sj_col(q, i, le, 3, vp) == 1 { if (vp[1] - vp[0]) == 3 { if ch_starts(q, vp[0], vp[1], "run" as *u8) == 1 { isbeat = 1 } } }
803 if isbeat == 0 { if ch_nishi_tool(q, sp[0], sp[1]) == 0 {
804 outside = outside + 1
805 var tl: i64 = sp[1] - sp[0]
806 if tl > CH_CLS_NAME - 1 { tl = CH_CLS_NAME - 1 }
807 var hit: i64 = 0 - 1
808 var k: i64 = 0
809 while k < ncls {
810 let nm: *u8 = ((names as i64) + k * CH_CLS_NAME) as *u8
811 var m: i64 = 0
812 var same: i64 = 1
813 while m < tl { if nm[m] != q[sp[0] + m] { same = 0; m = tl } else { m = m + 1 } }
814 if same == 1 { if nm[tl] == (0 as u8) { hit = k; k = ncls } }
815 k = k + 1
816 }
817 if hit >= 0 { counts[hit] = counts[hit] + 1 } else {
818 if ncls < CH_CLS_MAX {
819 let nm2: *u8 = ((names as i64) + ncls * CH_CLS_NAME) as *u8
820 var m2: i64 = 0
821 while m2 < tl { nm2[m2] = q[sp[0] + m2]; m2 = m2 + 1 }
822 nm2[tl] = 0 as u8
823 counts[ncls] = 1
824 ncls = ncls + 1
825 } else { ovf = ovf + 1 }
826 }
827 } }
828 }
829 }
830 i = le + 1
831 }
832 c[0] = ncls
833 c[1] = ovf
834 return outside
835}
836func ch_classes_top(counts: *i64, used: *i64, ncls: i64) -> i64 {
837 var best: i64 = 0 - 1
838 var k: i64 = 0
839 while k < ncls { if used[k] == 0 { if best < 0 { best = k } else { if counts[k] > counts[best] { best = k } } } k = k + 1 }
840 return best
841}
842func ch_classes_cat(d: *u8, o0: i64, names: *u8, counts: *i64, ncls: i64, show: i64, outside: i64) -> i64 {
843 var o: i64 = o0
844 let used: *i64 = sys_mmap(CH_CLS_MAX * 8) as *i64
845 var shown: i64 = 0
846 var acc: i64 = 0
847 var s: i64 = 0
848 while s < show {
849 let b: i64 = ch_classes_top(counts, used, ncls)
850 if b >= 0 {
851 used[b] = 1
852 if shown > 0 { o = sj_cat(d, o, "," as *u8) }
853 o = sj_cat(d, o, ((names as i64) + b * CH_CLS_NAME) as *u8)
854 o = sj_cat(d, o, ":" as *u8)
855 o = sj_catn(d, o, counts[b])
856 acc = acc + counts[b]
857 shown = shown + 1
858 }
859 s = s + 1
860 }
861 if shown > 0 { o = sj_cat(d, o, "," as *u8) }
862 o = sj_cat(d, o, "other:" as *u8)
863 o = sj_catn(d, o, outside - acc)
864 return o
865}
866func ch_classes_json(jpath: *u8, d: *u8) -> i64 {
867 let names: *u8 = sys_mmap(CH_CLS_MAX * CH_CLS_NAME)
868 let counts: *i64 = sys_mmap(CH_CLS_MAX * 8) as *i64
869 let c: *i64 = sys_mmap(16) as *i64
870 let outside: i64 = ch_classes_calc(jpath, names, counts, c)
871 var p: i64 = 0
872 d[p] = 123 as u8; p = p + 1
873 p = ch_key(d, p, "v" as *u8); p = sj_catn(d, p, 1); d[p] = 44 as u8; p = p + 1
874 p = ch_key(d, p, "tool" as *u8); d[p] = 34 as u8; p = p + 1; p = sj_cat(d, p, "nx_claude_harvest" as *u8); d[p] = 34 as u8; p = p + 1; d[p] = 44 as u8; p = p + 1
875 p = ch_key(d, p, "averb" as *u8); d[p] = 34 as u8; p = p + 1; p = sj_cat(d, p, "classes" as *u8); d[p] = 34 as u8; p = p + 1; d[p] = 44 as u8; p = p + 1
876 p = ch_key(d, p, "claude_outside" as *u8); p = sj_catn(d, p, outside); d[p] = 44 as u8; p = p + 1
877 p = ch_key(d, p, "classes_distinct" as *u8); p = sj_catn(d, p, c[0]); d[p] = 44 as u8; p = p + 1
878 p = ch_key(d, p, "classes_table_cap" as *u8); p = sj_catn(d, p, CH_CLS_MAX); d[p] = 44 as u8; p = p + 1
879 p = ch_key(d, p, "classes_unnamed_overflow" as *u8); p = sj_catn(d, p, c[1]); d[p] = 44 as u8; p = p + 1
880 var show: i64 = CH_CLS_SHOW
881 if c[0] < show { show = c[0] }
882 p = ch_key(d, p, "classes_shown" as *u8); p = sj_catn(d, p, show); d[p] = 44 as u8; p = p + 1
883 p = ch_key(d, p, "top_and_other" as *u8); d[p] = 34 as u8; p = p + 1
884 p = ch_classes_cat(d, p, names, counts, c[0], show, outside)
885 d[p] = 34 as u8; p = p + 1
886 d[p] = 125 as u8; p = p + 1
887 d[p] = 10 as u8; p = p + 1
888 return p
889}
890// ch_classes: THE CONTRACT SYMBOL named by the sovereignty board (SV2, watch _ABSENT_:ch_classes). The symbol
891// ruler (nx_symdecl_lib sd_present) applies the DECLARATION rule to a .nx organ and never falls back to a
892// substring for a lowercase identifier, so ch_classes_json alone can never flip the cell: the board named
893// ch_classes, so ch_classes is what ships. One entry point over the verb, declared here AND called by main.
894func ch_classes(jpath: *u8, d: *u8) -> i64 { return ch_classes_json(jpath, d) }
895// ---------- journal: the SELF-UPDATING number on /compare (2026-09-05) ----------
896// Appends ONE `log|<epoch>|<rung>|measure|...` row to a domain .plan per UTC day (idempotent by a day
897// marker carried in the row), so the compare emitter renders the live reliance number beside the rung
898// with ZERO seat tokens. Wired on the plan-wsmine- beat. Codes: 0 written | 1 plan missing or unwritable
899// (a beat NEVER creates a plan) | 4 already journaled today | 5 insufficient data (never journal a -1).
900func ch_journal(jpath: *u8, planpath: *u8, rung: *u8) -> i64 {
901 let g: *i64 = sys_mmap(128) as *i64
902 ch_gauge_calc(jpath, 0, g)
903 if g[8] <= 0 { return 5 }
904 let now: i64 = sys_now_realtime_sec()
905 let day: i64 = now / CH_MAGIC_86400
906 let nn: *i64 = sys_mmap(16) as *i64
907 let pb: *u8 = sys_read_file(planpath, nn)
908 let pn: i64 = nn[0]
909 if pn <= 0 { return 1 }
910 let mk: *u8 = sys_mmap(128)
911 var mo: i64 = sj_cat(mk, 0, "[HARV:journal:day=" as *u8)
912 mo = sj_catn(mk, mo, day)
913 mo = sj_cat(mk, mo, "]" as *u8)
914 mk[mo] = 0 as u8
915 if ch_find(pb, pn, mk) == 1 { return 4 }
916 let row: *u8 = sys_mmap(CH_LINE)
917 var o: i64 = sj_cat(row, 0, "log|" as *u8)
918 o = sj_catn(row, o, now)
919 o = sj_cat(row, o, "|" as *u8)
920 o = sj_cat(row, o, rung)
921 o = sj_cat(row, o, "|measure|" as *u8)
922 o = sj_cat(row, o, mk)
923 o = sj_cat(row, o, " claude_outside_permil=" as *u8)
924 o = sj_catn(row, o, g[10])
925 o = sj_cat(row, o, " claude_actions=" as *u8)
926 o = sj_catn(row, o, g[8])
927 o = sj_cat(row, o, " claude_outside=" as *u8)
928 o = sj_catn(row, o, g[9])
929 o = sj_cat(row, o, " estate_beats_excluded=" as *u8)
930 o = sj_catn(row, o, g[7])
931 o = sj_cat(row, o, " frames_total=" as *u8)
932 o = sj_catn(row, o, g[0])
933 o = sj_cat(row, o, " journal_bytes=" as *u8)
934 o = sj_catn(row, o, g[6])
935 let cn: *u8 = sys_mmap(CH_CLS_MAX * CH_CLS_NAME)
936 let cc: *i64 = sys_mmap(CH_CLS_MAX * 8) as *i64
937 let cx: *i64 = sys_mmap(16) as *i64
938 let cout2: i64 = ch_classes_calc(jpath, cn, cc, cx)
939 o = sj_cat(row, o, " outside_by_tool=" as *u8)
940 var jshow: i64 = CH_CLS_JSHOW
941 if cx[0] < jshow { jshow = cx[0] }
942 o = ch_classes_cat(row, o, cn, cc, cx[0], jshow, cout2)
943 o = sj_cat(row, o, " (nx_claude_harvest journal: full read, estate beats excluded, one row per UTC day)" as *u8)
944 row[o] = 10 as u8
945 o = o + 1
946 let fd: i64 = sys_openat_append(planpath, CH_MODE_644)
947 if fd < 0 { return 1 }
948 sys_write(fd, row, o)
949 sys_close(fd)
950 return 0
951}
952// ---------- F971 propose: the gauge FILES its own migration work (feeder pattern) ----------
953// codes: 0 filed | 1 filer-fail | 2 below-threshold | 3 intake-window-exceeded (fail closed) |
954// 4 already-proposed (marker) | 5 insufficient-data. Filer is INJECTABLE (argecho in the
955// gate) and ALLOWLIST-RESOLVED (never a hardcoded sibling path). Marker [HARV:outsidegap:v1]
956// makes re-runs never re-file. NOTE ch_allow_path duplicates nx_actlog al_allow_path -- the
957// shared nx_jrnl_lib extraction is the filed rule-15 residual.
958// DELEGATES to the shared base (rule-15 extraction 2026-07-23)
959func ch_allow_path(name: *u8, outp: *u8) -> i64 { return sj_allow_path(name, outp) }
960func ch_propose(jpath: *u8, ipath: *u8, thr: i64, filer: *u8, cout: *u8, colen: *i64) -> i64 {
961 colen[0] = 0
962 let g: *i64 = sys_mmap(128) as *i64
963 ch_gauge_calc(jpath, 0, g)
964 if g[3] < 0 { return 5 }
965 if g[3] < thr { return 2 }
966 let jb: *u8 = sys_mmap(CH_JWIN)
967 let jcap: i64 = CH_JWIN - 8
968 let jn: i64 = ch_read(ipath, jb, jcap)
969 if jn >= jcap { return 3 }
970 if jn > 0 { if ch_find(jb, jn, "[HARV:outsidegap:v1]" as *u8) == 1 { return 4 } }
971 let fpath: *u8 = sys_mmap(512)
972 if ch_allow_path(filer, fpath) == 0 { return 1 }
973 let txt: *u8 = sys_mmap(CH_LINE)
974 var o: i64 = sj_cat(txt, 0, "[HARV:outsidegap:v1] outside_permil=" as *u8)
975 o = sj_catn(txt, o, g[3])
976 o = sj_cat(txt, o, " over threshold " as *u8)
977 o = sj_catn(txt, o, thr)
978 o = sj_cat(txt, o, " (frames=" as *u8)
979 o = sj_catn(txt, o, g[0])
980 o = sj_cat(txt, o, " nishi=" as *u8)
981 o = sj_catn(txt, o, g[1])
982 o = sj_cat(txt, o, " outside=" as *u8)
983 o = sj_catn(txt, o, g[2])
984 o = sj_cat(txt, o, ") - drive capability-migration from the minergap- catalog MG01-MG11 / frontier F964-F973; auto-filed by nx_claude_harvest propose" as *u8)
985 txt[o] = 0 as u8
986 let av: *i64 = sys_mmap(64) as *i64
987 av[0] = fpath as i64
988 av[1] = "ask" as *u8 as i64
989 av[2] = ipath as i64
990 av[3] = "nx_claude_harvest" as *u8 as i64
991 av[4] = txt as i64
992 av[5] = 0
993 let ex: i64 = tr_run_capture(fpath, av, cout, CH_LINE - 8, colen)
994 if ex != 0 { return 1 }
995 return 0
996}
997// ---------- selftest ----------
998func ch_selftest(prefix: *u8) -> i64 {
999 let ctr: *i64 = gv_ctr()
1000 gv_head("nx_claude_harvest selftest -- transcript parse + ingest + gauge teeth (unique scratch per run)" as *u8)
1001 // MICROSECOND stamp (2026-09-05): a second-resolution scratch name collided when nx_behaveprobe ran the live and the
1002 // staged selftest inside one second -- the second run found the first run's T15 marker already seeded and T14 refused.
1003 // The beat fixed this exact class on its piece names; the selftest now stamps the same way.
1004 let now: i64 = sys_now_realtime_us()
1005 let tj: *u8 = sys_mmap(512)
1006 var o: i64 = sj_cat(tj, 0, prefix)
1007 o = sj_catn(tj, o, now)
1008 o = sj_cat(tj, o, ".jsonl" as *u8)
1009 tj[o] = 0 as u8
1010 let fr: *u8 = sys_mmap(512)
1011 o = sj_cat(fr, 0, prefix)
1012 o = sj_catn(fr, o, now)
1013 o = sj_cat(fr, o, ".frames" as *u8)
1014 fr[o] = 0 as u8
1015 let st: *u8 = sys_mmap(512)
1016 o = sj_cat(st, 0, prefix)
1017 o = sj_catn(st, o, now)
1018 o = sj_cat(st, o, ".staged" as *u8)
1019 st[o] = 0 as u8
1020 let jr: *u8 = sys_mmap(512)
1021 o = sj_cat(jr, 0, prefix)
1022 o = sj_catn(jr, o, now)
1023 o = sj_cat(jr, o, ".jrnl" as *u8)
1024 jr[o] = 0 as u8
1025 // fixture transcript: decoy name outside tool_use + 2 tool_use on one line + 1 on another
1026 let tfd: i64 = sys_openat_append(tj, CH_MODE_644)
1027 let lb: *u8 = sys_mmap(CH_LINE)
1028 var lo: i64 = sj_cat(lb, 0, "{\"type\":\"user\",\"name\":\"decoy1\",\"timestamp\":\"2026-07-23T00:00:00Z\"}" as *u8)
1029 lb[lo] = 10 as u8
1030 sys_write(tfd, lb, lo + 1)
1031 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:01Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"a\",\"name\":\"Edit\"},{\"type\":\"tool_use\",\"id\":\"b\",\"name\":\"PowerShell\"}]}" as *u8)
1032 lb[lo] = 10 as u8
1033 sys_write(tfd, lb, lo + 1)
1034 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:02Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"c\",\"name\":\"mcp__nishi__nx_fs\"}]}" as *u8)
1035 lb[lo] = 10 as u8
1036 sys_write(tfd, lb, lo + 1)
1037 sys_close(tfd)
1038 // T1 harvest exact: 3 frames, decoy never harvested
1039 let tcx: *i64 = sys_mmap(16) as *i64
1040 let got: i64 = ch_frames(tj, "wtest" as *u8, fr, tcx)
1041 let fb: *u8 = sys_mmap(CH_JWIN)
1042 let fn: i64 = ch_read(fr, fb, CH_JWIN - 8)
1043 var ok1: i64 = 0
1044 if got == 3 { if fn > 0 { if ch_find(fb, fn, "Edit" as *u8) == 1 { if ch_find(fb, fn, "PowerShell" as *u8) == 1 { if ch_find(fb, fn, "decoy1" as *u8) == 0 { ok1 = 1 } } } } }
1045 gv_check("T1 harvest exactly the 3 tool_use names, decoy name never fabricated" as *u8, ok1, ctr)
1046 // T2 iso timestamp -> epoch propagated (2026-07-23T00:00:01Z = 1784764801)
1047 var ok2: i64 = 0
1048 if ch_find(fb, fn, "1784764801" as *u8) == 1 { if ch_find(fb, fn, "1784764802" as *u8) == 1 { ok2 = 1 } }
1049 gv_check("T2 iso timestamps parsed to exact epochs" as *u8, ok2, ctr)
1050 // T3 gauge exact split: Edit+PowerShell outside, nx_fs nishi -> 666 permil
1051 let d: *u8 = sys_mmap(CH_OUT)
1052 var dl: i64 = ch_gauge_json(fr, 0, d)
1053 var ok3: i64 = 0
1054 if dl > 0 { if ch_find(d, dl, "\"frames_total\":3" as *u8) == 1 { if ch_find(d, dl, "\"outside_permil\":666" as *u8) == 1 { ok3 = 1 } } }
1055 gv_check("T3 gauge exact: 2 outside 1 nishi = 666 permil" as *u8, ok3, ctr)
1056 // T4 gauge on missing journal refuses a number (-1, insufficient data honesty)
1057 let miss: *u8 = sys_mmap(512)
1058 o = sj_cat(miss, 0, prefix)
1059 o = sj_catn(miss, o, now)
1060 o = sj_cat(miss, o, ".absent" as *u8)
1061 miss[o] = 0 as u8
1062 dl = ch_gauge_json(miss, 0, d)
1063 var ok4: i64 = 0
1064 if dl > 0 { if ch_find(d, dl, "\"frames_total\":0" as *u8) == 1 { if ch_find(d, dl, "\"outside_permil\":-1" as *u8) == 1 { ok4 = 1 } } }
1065 gv_check("T4 empty journal refuses permil (-1) never fabricates" as *u8, ok4, ctr)
1066 // T5 ingest: 2 valid + 1 malformed staged line -> journal gains exactly the 2 + marker
1067 ch_frame_append(st, CH_MAGIC_1784764900, "w2" as *u8, "Read" as *u8, "use" as *u8, "-" as *u8, "harvest" as *u8)
1068 ch_frame_append(st, CH_MAGIC_1784764901, "w2" as *u8, "nx_fs_write" as *u8, "use" as *u8, "-" as *u8, "harvest" as *u8)
1069 let sfd: i64 = sys_openat_append(st, CH_MODE_644)
1070 var go2: i64 = sj_cat(lb, 0, "garbage-no-tabs" as *u8)
1071 lb[go2] = 10 as u8
1072 sys_write(sfd, lb, go2 + 1)
1073 sys_close(sfd)
1074 let mcx: *i64 = sys_mmap(16) as *i64
1075 let r5: i64 = ch_ingest(st, jr, mcx)
1076 let jb: *u8 = sys_mmap(CH_JWIN)
1077 var jn: i64 = ch_read(jr, jb, CH_JWIN - 8)
1078 var ok5: i64 = 0
1079 if r5 == 2 { if mcx[0] == 1 { if ch_find(jb, jn, "Read" as *u8) == 1 { if ch_find(jb, jn, "harvest-ingest:" as *u8) == 1 { if ch_find(jb, jn, "garbage-no-tabs" as *u8) == 0 { ok5 = 1 } } } } }
1080 gv_check("T5 ingest validates: 2 in, malformed counted out, marker banked" as *u8, ok5, ctr)
1081 // T6 idempotent: second ingest refuses, journal bytes unchanged
1082 let r6: i64 = ch_ingest(st, jr, mcx)
1083 let jn2: i64 = ch_read(jr, jb, CH_JWIN - 8)
1084 var ok6: i64 = 0
1085 if r6 == (0 - 2) { if jn2 == jn { ok6 = 1 } }
1086 gv_check("T6 re-ingest ALREADY, journal byte-identical" as *u8, ok6, ctr)
1087 // T7 missing transcript fails closed
1088 let r7: i64 = ch_frames(miss, "w" as *u8, fr, tcx)
1089 var ok7: i64 = 0
1090 if r7 == (0 - 1) { ok7 = 1 }
1091 gv_check("T7 missing transcript refused (-1) fail closed" as *u8, ok7, ctr)
1092 // T8 sovereign-organ frames (nx_ prefix) classify as nishi: add one -> 2 outside / 2 nishi = 500
1093 ch_frame_append(fr, CH_MAGIC_1784764803, "wtest" as *u8, "nx_shelltool" as *u8, "use" as *u8, "-" as *u8, "harvest" as *u8)
1094 dl = ch_gauge_json(fr, 0, d)
1095 var ok8: i64 = 0
1096 if dl > 0 { if ch_find(d, dl, "\"frames_total\":4" as *u8) == 1 { if ch_find(d, dl, "\"outside_permil\":500" as *u8) == 1 { ok8 = 1 } } }
1097 gv_check("T8 nx_-prefixed frames count as nishi (500 permil exact)" as *u8, ok8, ctr)
1098 // T9 page emits the exact gauge + title (from the T8 journal: permil 500)
1099 let pg: *u8 = sys_mmap(512)
1100 o = sj_cat(pg, 0, prefix)
1101 o = sj_catn(pg, o, now)
1102 o = sj_cat(pg, o, ".html" as *u8)
1103 pg[o] = 0 as u8
1104 let r9: i64 = ch_page(fr, pg, 0)
1105 let pb: *u8 = sys_mmap(CH_OUT)
1106 let pn: i64 = ch_read(pg, pb, CH_OUT - 8)
1107 var ok9: i64 = 0
1108 if r9 == 0 { if pn > 0 { if ch_find(pb, pn, "outside_permil=500" as *u8) == 1 { if ch_find(pb, pn, "Outside Gauge" as *u8) == 1 { ok9 = 1 } } } }
1109 gv_check("T9 page emits the exact gauge + title" as *u8, ok9, ctr)
1110 // T13-T16 propose (F971): threshold honesty, injectable filer, marker idempotence, insufficient refuse
1111 let ijr: *u8 = sys_mmap(512)
1112 o = sj_cat(ijr, 0, prefix)
1113 o = sj_catn(ijr, o, now)
1114 o = sj_cat(ijr, o, ".ijr" as *u8)
1115 ijr[o] = 0 as u8
1116 let pcl: *i64 = sys_mmap(16) as *i64
1117 let r13: i64 = ch_propose(fr, ijr, 600, "argecho" as *u8, d, pcl)
1118 var ok13: i64 = 0
1119 if r13 == 2 { ok13 = 1 }
1120 gv_check("T13 below threshold never files (code 2)" as *u8, ok13, ctr)
1121 // T14 needs a RESOLVABLE filer, and resolution runs through sj_allow_path, which opens
1122 // "tool_allowlist.conf" as a BARE path -- i.e. relative to the CWD. On any host/CWD without one
1123 // (every WSL run of this gate) the filer cannot be resolved, and this tooth then reported the
1124 // ORGAN as broken when only its environment was absent: the same binary reads 39/40 RED from /tmp
1125 // and 40/40 GREEN from a CWD holding one row. MEASURED 2026-08-20.
1126 // ***** AN AXIS THAT CANNOT SEE MUST ABSTAIN, NOT CONVICT -- and a gate that goes RED on its own
1127 // environment is the permanently-red detector everyone learns to ignore.
1128 let t14p: *u8 = sys_mmap(CH_BT_PATHMAX)
1129 if gv_need("propose filer resolvable via a CWD-relative tool_allowlist.conf" as *u8, ch_allow_path("argecho" as *u8, t14p), ctr) == 1 {
1130 let r14: i64 = ch_propose(fr, ijr, 400, "argecho" as *u8, d, pcl)
1131 var ok14: i64 = 0
1132 if r14 == 0 { if pcl[0] > 0 { if ch_find(d, pcl[0], "[HARV:outsidegap:v1] outside_permil=500" as *u8) == 1 { ok14 = 1 } } }
1133 gv_check("T14 above threshold files through the injected filer w/ exact marker+permil" as *u8, ok14, ctr)
1134 }
1135 let mfd: i64 = sys_openat_append(ijr, CH_MODE_644)
1136 let mln: *u8 = sys_mmap(256)
1137 var mo2: i64 = sj_cat(mln, 0, "1 seeded [HARV:outsidegap:v1] marker" as *u8)
1138 mln[mo2] = 10 as u8
1139 sys_write(mfd, mln, mo2 + 1)
1140 sys_close(mfd)
1141 let r15: i64 = ch_propose(fr, ijr, 400, "argecho" as *u8, d, pcl)
1142 var ok15: i64 = 0
1143 if r15 == 4 { ok15 = 1 }
1144 gv_check("T15 marker present refuses re-file (code 4, idempotent)" as *u8, ok15, ctr)
1145 let r16: i64 = ch_propose(miss, ijr, 400, "argecho" as *u8, d, pcl)
1146 var ok16: i64 = 0
1147 if r16 == 5 { ok16 = 1 }
1148 gv_check("T16 insufficient data refuses to propose (code 5)" as *u8, ok16, ctr)
1149 // T17-T20 DELTA (F973): exactly-once harvest by byte high-water mark
1150 let dj: *u8 = sys_mmap(512)
1151 o = sj_cat(dj, 0, prefix)
1152 o = sj_catn(dj, o, now)
1153 o = sj_cat(dj, o, ".dj" as *u8)
1154 dj[o] = 0 as u8
1155 let hw: *u8 = sys_mmap(512)
1156 o = sj_cat(hw, 0, prefix)
1157 o = sj_catn(hw, o, now)
1158 o = sj_cat(hw, o, ".hwm" as *u8)
1159 hw[o] = 0 as u8
1160 let hcx: *i64 = sys_mmap(64) as *i64
1161 // tj holds 3 lines / 3 tool_use frames from T1
1162 let rd1: i64 = ch_delta(tj, "wd" as *u8, dj, hw, hcx)
1163 var ok17: i64 = 0
1164 if rd1 == 0 { if hcx[0] == 3 { if hcx[2] == 0 { if hcx[1] > 0 { ok17 = 1 } } } }
1165 gv_check("T17 first delta harvests all 3 frames and banks a high-water mark" as *u8, ok17, ctr)
1166 let firsthwm: i64 = hcx[1]
1167 let rd2: i64 = ch_delta(tj, "wd" as *u8, dj, hw, hcx)
1168 var ok18: i64 = 0
1169 if rd2 == 0 { if hcx[0] == 0 { if hcx[1] == firsthwm { ok18 = 1 } } }
1170 gv_check("T18 re-run on an unchanged transcript harvests ZERO (exactly-once, no marker needed)" as *u8, ok18, ctr)
1171 // grow the transcript by ONE complete line (1 tool_use) + a PARTIAL trailing line
1172 let gfd: i64 = sys_openat_append(tj, CH_MODE_644)
1173 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:03Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"g\",\"name\":\"Grep\"}]}" as *u8)
1174 lb[lo] = 10 as u8
1175 sys_write(gfd, lb, lo + 1)
1176 lo = sj_cat(lb, 0, "{\"type\":\"tool_use\",\"name\":\"PartialNeverCounted\"" as *u8)
1177 sys_write(gfd, lb, lo)
1178 sys_close(gfd)
1179 let rd3: i64 = ch_delta(tj, "wd" as *u8, dj, hw, hcx)
1180 var ok19: i64 = 0
1181 if rd3 == 0 { if hcx[0] == 1 { if hcx[2] == firsthwm { ok19 = 1 } } }
1182 gv_check("T19 growth harvests ONLY the new line (1 frame), resuming from the banked mark" as *u8, ok19, ctr)
1183 let db: *u8 = sys_mmap(CH_JWIN)
1184 let dn: i64 = ch_read(dj, db, CH_JWIN - 8)
1185 var ok20: i64 = 0
1186 if dn > 0 { if ch_find(db, dn, "Grep" as *u8) == 1 { if ch_find(db, dn, "PartialNeverCounted" as *u8) == 0 { ok20 = 1 } } }
1187 gv_check("T20 a PARTIAL trailing line is never consumed (waits below the mark)" as *u8, ok20, ctr)
1188 // T21-T23 PARTITION (2026-09-05): estate :run beats excluded from the reliance denominator.
1189 // Fixture: 1 outside claude action + 1 nishi claude action + 3 nishi estate beats (verb run).
1190 // Legacy outside_permil counts all 5 (nishi beats dilute -> 200); claude_outside_permil counts
1191 // ONLY the 2 claude actions -> 500 (beats=3). 500 != 200 proves the partition actually fired.
1192 let pj: *u8 = sys_mmap(512)
1193 var po: i64 = sj_cat(pj, 0, prefix)
1194 po = sj_catn(pj, po, now)
1195 po = sj_cat(pj, po, ".pj" as *u8)
1196 pj[po] = 0 as u8
1197 ch_frame_append(pj, CH_MAGIC_1784764900, "wp" as *u8, "PowerShell" as *u8, "use" as *u8, "-" as *u8, "act" as *u8)
1198 ch_frame_append(pj, CH_MAGIC_1784764901, "wp" as *u8, "nx_fs" as *u8, "call" as *u8, "-" as *u8, "act" as *u8)
1199 ch_frame_append(pj, CH_MAGIC_1784764803, "wp" as *u8, "nx_netobs.elf" as *u8, "run" as *u8, "-" as *u8, "beat" as *u8)
1200 ch_frame_append(pj, CH_MAGIC_1784764803, "wp" as *u8, "nx_resmon.elf" as *u8, "run" as *u8, "-" as *u8, "beat" as *u8)
1201 ch_frame_append(pj, CH_MAGIC_1784764803, "wp" as *u8, "nx_memvel.elf" as *u8, "run" as *u8, "-" as *u8, "beat" as *u8)
1202 dl = ch_gauge_json(pj, 0, d)
1203 var ok21: i64 = 0
1204 if dl > 0 { if ch_find(d, dl, "\"frames_total\":5" as *u8) == 1 { if ch_find(d, dl, "\"beats\":3" as *u8) == 1 { if ch_find(d, dl, "\"claude_actions\":2" as *u8) == 1 { ok21 = 1 } } } }
1205 gv_check("T21 estate :run beats partitioned out: 5 frames, 3 beats, 2 claude actions" as *u8, ok21, ctr)
1206 var ok22: i64 = 0
1207 if dl > 0 { if ch_find(d, dl, "\"claude_outside_permil\":500" as *u8) == 1 { if ch_find(d, dl, "\"outside_permil\":200" as *u8) == 1 { ok22 = 1 } } }
1208 gv_check("T22 reliance over claude actions (500) NOT diluted by nishi beats (legacy 200)" as *u8, ok22, ctr)
1209 var ok23: i64 = 0
1210 if dl > 0 { if ch_find(d, dl, "\"claude_outside_permil\":200" as *u8) == 0 { ok23 = 1 } }
1211 gv_check("T23 non-vacuity: claude_outside_permil 500 != legacy diluted 200 (partition fired)" as *u8, ok23, ctr)
1212 // J1-J3 JOURNAL (2026-09-05): one measure row per UTC day on a .plan, idempotent, never a -1.
1213 let pl: *u8 = sys_mmap(512)
1214 var plo: i64 = sj_cat(pl, 0, prefix)
1215 plo = sj_catn(pl, plo, now)
1216 plo = sj_cat(pl, plo, ".plan" as *u8)
1217 pl[plo] = 0 as u8
1218 let pfd: i64 = sys_openat_wr(pl, CH_MODE_644)
1219 var seedo: i64 = sj_cat(lb, 0, "pos|seed plan for the journal teeth" as *u8)
1220 lb[seedo] = 10 as u8
1221 sys_write(pfd, lb, seedo + 1)
1222 sys_close(pfd)
1223 let rj1: i64 = ch_journal(pj, pl, "SV0" as *u8)
1224 let jb2: *u8 = sys_mmap(CH_JWIN)
1225 let jn3: i64 = ch_read(pl, jb2, CH_JWIN - 8)
1226 var okj1: i64 = 0
1227 if rj1 == 0 { if ch_find(jb2, jn3, "|SV0|measure|" as *u8) == 1 { if ch_find(jb2, jn3, "claude_outside_permil=500" as *u8) == 1 { okj1 = 1 } } }
1228 gv_check("J1 journal appends one measure row carrying the exact honest permil (500, partition fixture)" as *u8, okj1, ctr)
1229 let rj2: i64 = ch_journal(pj, pl, "SV0" as *u8)
1230 let jn4: i64 = ch_read(pl, jb2, CH_JWIN - 8)
1231 var okj2: i64 = 0
1232 if rj2 == 4 { if jn4 == jn3 { okj2 = 1 } }
1233 gv_check("J2 second journal the same day refused (4), plan byte-identical (idempotent)" as *u8, okj2, ctr)
1234 let rj3: i64 = ch_journal(miss, pl, "SV0" as *u8)
1235 let jn5: i64 = ch_read(pl, jb2, CH_JWIN - 8)
1236 var okj3: i64 = 0
1237 if rj3 == 5 { if jn5 == jn4 { okj3 = 1 } }
1238 gv_check("J3 neg-control-insufficient: a missing journal refuses (5) and writes nothing, never a -1 row" as *u8, okj3, ctr)
1239 // C1-C3 CLASSES (SV2, 2026-09-05): the residual by tool over claude actions; the partition sums; beats
1240 // and nishi tools are never a class; the list is sorted by count descending.
1241 dl = ch_classes_json(pj, d)
1242 var okc1: i64 = 0
1243 if dl > 0 { if ch_find(d, dl, "\"claude_outside\":1" as *u8) == 1 { if ch_find(d, dl, "\"classes_distinct\":1" as *u8) == 1 { if ch_find(d, dl, "PowerShell:1,other:0" as *u8) == 1 { okc1 = 1 } } } }
1244 gv_check("C1 classes on the partition fixture: one outside tool (PowerShell:1) and the partition sums (other:0)" as *u8, okc1, ctr)
1245 var okc2: i64 = 0
1246 if dl > 0 { if ch_find(d, dl, "nx_netobs" as *u8) == 0 { if ch_find(d, dl, "nx_fs" as *u8) == 0 { okc2 = 1 } } }
1247 gv_check("C2 neg-control: estate beats and nishi tools are never a residual class" as *u8, okc2, ctr)
1248 let cj3: *u8 = sys_mmap(512)
1249 var co3: i64 = sj_cat(cj3, 0, prefix)
1250 co3 = sj_catn(cj3, co3, now)
1251 co3 = sj_cat(cj3, co3, ".cls" as *u8)
1252 cj3[co3] = 0 as u8
1253 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Edit" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1254 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Bash" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1255 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Grep" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1256 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Bash" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1257 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Edit" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1258 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Bash" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1259 dl = ch_classes_json(cj3, d)
1260 var okc3: i64 = 0
1261 if dl > 0 { if ch_find(d, dl, "\"top_and_other\":\"Bash:3,Edit:2,Grep:1,other:0\"" as *u8) == 1 { if ch_find(d, dl, "\"claude_outside\":6" as *u8) == 1 { okc3 = 1 } } }
1262 gv_check("C3 classes sorted by count descending with an exact sum: Bash:3,Edit:2,Grep:1,other:0 of 6" as *u8, okc3, ctr)
1263 // T21/T22 BOOTGAUGE (SOTA-from-the-first-byte): s1 opens nishi-native (nx_seat), s2 opens legacy
1264 // (Read) but touches nishi within K, s3 stays outside => sota_first 1/3=333, nishi_within_k 2/3=666.
1265 let bj: *u8 = sys_mmap(512)
1266 o = sj_cat(bj, 0, prefix)
1267 o = sj_catn(bj, o, now)
1268 o = sj_cat(bj, o, ".bj" as *u8)
1269 bj[o] = 0 as u8
1270 ch_frame_append(bj, CH_MAGIC_1784764900, "s1" as *u8, "nx_seat" as *u8, "boot" as *u8, "-" as *u8, "-" as *u8)
1271 ch_frame_append(bj, CH_MAGIC_1784764900, "s1" as *u8, "mcp__nishi__nx_fs" as *u8, "lines" as *u8, "-" as *u8, "-" as *u8)
1272 ch_frame_append(bj, CH_MAGIC_1784764900, "s2" as *u8, "Read" as *u8, "use" as *u8, "-" as *u8, "-" as *u8)
1273 ch_frame_append(bj, CH_MAGIC_1784764900, "s2" as *u8, "mcp__nishi__nx_store_put" as *u8, "put" as *u8, "-" as *u8, "-" as *u8)
1274 ch_frame_append(bj, CH_MAGIC_1784764900, "s3" as *u8, "PowerShell" as *u8, "use" as *u8, "-" as *u8, "-" as *u8)
1275 ch_frame_append(bj, CH_MAGIC_1784764900, "s3" as *u8, "Bash" as *u8, "use" as *u8, "-" as *u8, "-" as *u8)
1276 let bd: i64 = ch_bootgauge(bj, 3, d)
1277 var ok21: i64 = 0
1278 if bd > 0 { if ch_find(d, bd, "\"sessions\":3,\"sota_first\":1,\"legacy_first\":2,\"sota_boot_permil\":333" as *u8) == 1 { ok21 = 1 } }
1279 gv_check("T21 bootgauge: first tool nishi in 1 of 3 sessions = 333 permil SOTA-boot" as *u8, ok21, ctr)
1280 var ok22: i64 = 0
1281 if bd > 0 { if ch_find(d, bd, "\"nishi_within_k\":2,\"nishi_within_k_permil\":666" as *u8) == 1 { ok22 = 1 } }
1282 gv_check("T22 nishi-within-first-K = 2 of 3 = 666 permil (the softer signal)" as *u8, ok22, ctr)
1283 let lc: *u8 = sys_mmap(512)
1284 o = sj_cat(lc, 0, prefix)
1285 o = sj_catn(lc, o, now)
1286 o = sj_cat(lc, o, ".lconf" as *u8)
1287 lc[o] = 0 as u8
1288 let lt: *u8 = sys_mmap(512)
1289 o = sj_cat(lt, 0, prefix)
1290 o = sj_catn(lt, o, now)
1291 o = sj_cat(lt, o, ".ltx" as *u8)
1292 lt[o] = 0 as u8
1293 let lo2: *u8 = sys_mmap(512)
1294 o = sj_cat(lo2, 0, prefix)
1295 o = sj_catn(lo2, o, now)
1296 o = sj_cat(lo2, o, ".lout" as *u8)
1297 lo2[o] = 0 as u8
1298 let cfd: i64 = sys_openat_append(lc, CH_MODE_644)
1299 let cb2: *u8 = sys_mmap(CH_LINE)
1300 var co: i64 = sj_cat(cb2, 0, "marker=LAW:|6\nmarker=ROOT CAUSE|5\nmarker=MEASURED|3\nstar_char=★\nwarn_char=⚠\nwarn_bonus=2\nstar_max=6\nmin_rank_store=3\nmin_len=40\nmax_len=400\n" as *u8)
1301 sys_write(cfd, cb2, co)
1302 sys_close(cfd)
1303 let tfd2: i64 = sys_openat_append(lt, CH_MODE_644)
1304 let tb2: *u8 = sys_mmap(CH_LINE)
1305 var to2: i64 = sj_cat(tb2, 0, "{\"timestamp\":\"2026-07-23T00:00:00Z\",\"c\":[{\"type\":\"text\",\"text\":\"LAW: a guard placed after the act it guards is not a guard\"}]}\n" as *u8)
1306 to2 = sj_cat(tb2, to2, "{\"timestamp\":\"2026-07-23T00:00:01Z\",\"c\":[{\"type\":\"text\",\"text\":\"we then opened the file and looked at it for a while and moved on\"}]}\n" as *u8)
1307 to2 = sj_cat(tb2, to2, "{\"timestamp\":\"2026-07-23T00:00:02Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"a\",\"name\":\"Edit\"}]}\n" as *u8)
1308 to2 = sj_cat(tb2, to2, "{\"timestamp\":\"2026-07-23T00:00:03Z\",\"c\":[{\"type\":\"text\",\"text\":\"★★★★ gate on the resource the work actually consumes\"}]}\n" as *u8)
1309 to2 = sj_cat(tb2, to2, "{\"timestamp\":\"2026-07-23T00:00:04Z\",\"c\":[{\"type\":\"text\",\"text\":\"the axes run 0..1000 and -1 means UNMEASURED for this row\"}]}\n" as *u8)
1310 to2 = sj_cat(tb2, to2, "{\"timestamp\":\"2026-07-23T00:00:05Z\",\"c\":[{\"type\":\"text\",\"text\":\"LAW: an echoed frame must not become two separate records\"},{\"type\":\"text\",\"text\":\"LAW: an echoed frame must not become two separate records\"}]}\n" as *u8)
1311 sys_write(tfd2, tb2, to2)
1312 sys_close(tfd2)
1313 let lcx2: *i64 = sys_mmap(64) as *i64
1314 let lgot: i64 = ch_learn(lt, "lw" as *u8, lo2, lc, lcx2)
1315 let lb2: *u8 = sys_mmap(CH_JWIN)
1316 let ln2: i64 = ch_read(lo2, lb2, CH_JWIN - 8)
1317 var ok23: i64 = 0
1318 if ln2 > 0 { if ch_find(lb2, ln2, "\"rank\":6" as *u8) == 1 { ok23 = 1 } }
1319 gv_check("T23 learn captures a LAW: PROSE line at rank 6 (the thing frames/delta never could)" as *u8, ok23, ctr)
1320 var ok24: i64 = 1
1321 if ln2 > 0 { if ch_find(lb2, ln2, "looked at it for a while" as *u8) == 1 { ok24 = 0 } }
1322 gv_check("T24 NEG-CONTROL: unmarked prose ABOVE min_len is REJECTED -- the ranker can fail" as *u8, ok24, ctr)
1323 var ok25: i64 = 1
1324 if ln2 > 0 { if ch_find(lb2, ln2, "Edit" as *u8) == 1 { ok25 = 0 } }
1325 gv_check("T25 learn ignores tool_use frames entirely -- learn is not a second frames" as *u8, ok25, ctr)
1326 var ok26: i64 = 0
1327 if lcx2[1] >= 2 { ok26 = 1 }
1328 gv_check("T26 markers/weights come from the conf file, never compiled in (rule 11)" as *u8, ok26, ctr)
1329 var ok27: i64 = 0
1330 if ln2 > 0 { if ch_find(lb2, ln2, "\"rank\":4" as *u8) == 1 { ok27 = 1 } }
1331 gv_check("T27 a 4-star run ranks 4 -- multi-byte glyph run counted as bytes, not chars" as *u8, ok27, ctr)
1332 var ok28: i64 = 0
1333 if lgot == 3 { ok28 = 1 }
1334 gv_check("T28 exactly 3 of 6 transcript lines clear the floor (kept count is not a dump)" as *u8, ok28, ctr)
1335 var ok29: i64 = 1
1336 if ln2 > 0 { if ch_find(lb2, ln2, "axes run 0..1000" as *u8) == 1 { ok29 = 0 } }
1337 gv_check("T29 WORD BOUNDARY: UNMEASURED does not match the marker MEASURED (substring flattery)" as *u8, ok29, ctr)
1338 var ok30: i64 = 0
1339 var dcount: i64 = 0
1340 var dp: i64 = 0
1341 while dp < ln2 {
1342 let dq: i64 = ch_find_from(lb2, dp, ln2, "an echoed frame must not become" as *u8)
1343 if dq < 0 { dp = ln2 } else { dcount = dcount + 1; dp = dq + 20 }
1344 }
1345 if dcount == 1 { ok30 = 1 }
1346 gv_check("T30 an echoed payload emits ONCE, not twice (adjacent-duplicate suppression)" as *u8, ok30, ctr)
1347 // ================= beat teeth (DM1 ch_beat, 2026-08-20; fixtures assembled at RUNTIME) =================
1348 let btroot: *u8 = sys_mmap(512)
1349 o = sj_cat(btroot, 0, prefix)
1350 o = sj_catn(btroot, o, now)
1351 o = sj_cat(btroot, o, "btroot" as *u8)
1352 btroot[o] = 0 as u8
1353 let btpa: *u8 = sys_mmap(512)
1354 o = sj_cat(btpa, 0, btroot)
1355 o = sj_cat(btpa, o, "/pA" as *u8)
1356 btpa[o] = 0 as u8
1357 let btsub: *u8 = sys_mmap(512)
1358 o = sj_cat(btsub, 0, btpa)
1359 o = sj_cat(btsub, o, "/subagents" as *u8)
1360 btsub[o] = 0 as u8
1361 let btstate: *u8 = sys_mmap(512)
1362 o = sj_cat(btstate, 0, prefix)
1363 o = sj_catn(btstate, o, now)
1364 o = sj_cat(btstate, o, "btstate" as *u8)
1365 btstate[o] = 0 as u8
1366 let btspool: *u8 = sys_mmap(512)
1367 o = sj_cat(btspool, 0, prefix)
1368 o = sj_catn(btspool, o, now)
1369 o = sj_cat(btspool, o, "btspool" as *u8)
1370 btspool[o] = 0 as u8
1371 let btdone: *u8 = sys_mmap(512)
1372 o = sj_cat(btdone, 0, prefix)
1373 o = sj_catn(btdone, o, now)
1374 o = sj_cat(btdone, o, "btdone" as *u8)
1375 btdone[o] = 0 as u8
1376 let btjrnl: *u8 = sys_mmap(512)
1377 o = sj_cat(btjrnl, 0, prefix)
1378 o = sj_catn(btjrnl, o, now)
1379 o = sj_cat(btjrnl, o, "btjrnl" as *u8)
1380 btjrnl[o] = 0 as u8
1381 let bttwin: *u8 = sys_mmap(512)
1382 o = sj_cat(bttwin, 0, prefix)
1383 o = sj_catn(bttwin, o, now)
1384 o = sj_cat(bttwin, o, "bttwin" as *u8)
1385 bttwin[o] = 0 as u8
1386 sys_mkdir(btroot, CH_MODE_755)
1387 sys_mkdir(btpa, CH_MODE_755)
1388 sys_mkdir(btsub, CH_MODE_755)
1389 sys_mkdir(bttwin, CH_MODE_755)
1390 let bts1: *u8 = sys_mmap(512)
1391 o = sj_cat(bts1, 0, btpa)
1392 o = sj_cat(bts1, o, "/s1.jsonl" as *u8)
1393 bts1[o] = 0 as u8
1394 let bts2: *u8 = sys_mmap(512)
1395 o = sj_cat(bts2, 0, btsub)
1396 o = sj_cat(bts2, o, "/s2.jsonl" as *u8)
1397 bts2[o] = 0 as u8
1398 let btfd: i64 = sys_openat_append(bts1, CH_MODE_644)
1399 lo = sj_cat(lb, 0, "{\"type\":\"zzz-newtype\",\"x\":1}" as *u8)
1400 lb[lo] = 10 as u8
1401 sys_write(btfd, lb, lo + 1)
1402 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:01Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"a\",\"name\":\"Edit\"},{\"type\":\"tool_use\",\"id\":\"b\",\"name\":\"PowerShell\"}]}" as *u8)
1403 lb[lo] = 10 as u8
1404 sys_write(btfd, lb, lo + 1)
1405 lo = sj_cat(lb, 0, "{\"type\":\"user\",\"uuid\":\"u1\"}" as *u8)
1406 lb[lo] = 10 as u8
1407 sys_write(btfd, lb, lo + 1)
1408 sys_close(btfd)
1409 let btfd2: i64 = sys_openat_append(bts2, CH_MODE_644)
1410 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-08-19T10:00:01Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"c\",\"name\":\"mcp__nishi__nx_fs\"}]}" as *u8)
1411 lb[lo] = 10 as u8
1412 sys_write(btfd2, lb, lo + 1)
1413 sys_close(btfd2)
1414 // conf assembled at runtime (rule 11 even in the fixture)
1415 let btconf: *u8 = sys_mmap(512)
1416 o = sj_cat(btconf, 0, prefix)
1417 o = sj_catn(btconf, o, now)
1418 o = sj_cat(btconf, o, "btconf" as *u8)
1419 btconf[o] = 0 as u8
1420 let btcb: *u8 = sys_mmap(4096)
1421 var bo: i64 = sj_cat(btcb, 0, "root=" as *u8)
1422 bo = sj_cat(btcb, bo, btroot)
1423 btcb[bo] = 10 as u8
1424 bo = bo + 1
1425 bo = sj_cat(btcb, bo, "state=" as *u8)
1426 bo = sj_cat(btcb, bo, btstate)
1427 btcb[bo] = 10 as u8
1428 bo = bo + 1
1429 bo = sj_cat(btcb, bo, "spool=" as *u8)
1430 bo = sj_cat(btcb, bo, btspool)
1431 btcb[bo] = 10 as u8
1432 bo = bo + 1
1433 bo = sj_cat(btcb, bo, "done=" as *u8)
1434 bo = sj_cat(btcb, bo, btdone)
1435 btcb[bo] = 10 as u8
1436 bo = bo + 1
1437 bo = sj_cat(btcb, bo, "journal=" as *u8)
1438 bo = sj_cat(btcb, bo, btjrnl)
1439 btcb[bo] = 10 as u8
1440 bo = bo + 1
1441 bo = sj_cat(btcb, bo, "push=0" as *u8)
1442 btcb[bo] = 10 as u8
1443 bo = bo + 1
1444 bo = sj_cat(btcb, bo, "known_type=user" as *u8)
1445 btcb[bo] = 10 as u8
1446 bo = bo + 1
1447 bo = sj_cat(btcb, bo, "known_type=assistant" as *u8)
1448 btcb[bo] = 10 as u8
1449 bo = bo + 1
1450 let btcfd: i64 = sys_openat_wr(btconf, CH_MODE_644)
1451 sys_write(btcfd, btcb, bo)
1452 sys_close(btcfd)
1453 let bcx1: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1454 let brc1: i64 = ch_beat(btconf, bcx1)
1455 var ok31: i64 = 0
1456 if brc1 == 0 { if bcx1[0] == 2 { if bcx1[1] == 2 { if bcx1[2] == 0 { if bcx1[3] == 0 { if bcx1[27] == 1 { ok31 = 1 } } } } } }
1457 gv_check("T31 beat walks every transcript at every depth and the file partition SUMS" as *u8, ok31, ctr)
1458 var ok32: i64 = 0
1459 if bcx1[4] == 3 { if bcx1[5] == 3 { ok32 = 1 } }
1460 gv_check("T32 frames reconcile against the independent tooluse-mark census (two counters, free audit)" as *u8, ok32, ctr)
1461 var ok33: i64 = 0
1462 if bcx1[6] == 4 { if bcx1[8] == 1 { if bcx1[9] == 1 { if bcx1[10] == 2 { ok33 = 1 } } } }
1463 gv_check("T33 head-type census: known/UNKNOWN/headless partition sums; nested types never read as record types" as *u8, ok33, ctr)
1464 let btj1: *u8 = sys_mmap(512)
1465 o = sj_cat(btj1, 0, btjrnl)
1466 o = sj_cat(btj1, o, "/chbeat_20260723.jrnl" as *u8)
1467 btj1[o] = 0 as u8
1468 let btj2: *u8 = sys_mmap(512)
1469 o = sj_cat(btj2, 0, btjrnl)
1470 o = sj_cat(btj2, o, "/chbeat_20260819.jrnl" as *u8)
1471 btj2[o] = 0 as u8
1472 let btb1: *u8 = sys_mmap(CH_JWIN)
1473 let btn1: i64 = ch_read(btj1, btb1, CH_JWIN - 8)
1474 let btb2: *u8 = sys_mmap(CH_JWIN)
1475 var btn2: i64 = ch_read(btj2, btb2, CH_JWIN - 8)
1476 var ok34: i64 = 0
1477 if btn1 > 0 { if btn2 > 0 { if ch_find(btb1, btn1, "Edit" as *u8) == 1 { if ch_find(btb1, btn1, "mcp__nishi__nx_fs" as *u8) == 0 { if ch_find(btb2, btn2, "mcp__nishi__nx_fs" as *u8) == 1 { ok34 = 1 } } } } }
1478 gv_check("T34 ts-day routing: each frame lands in its OWN day journal, never cross-filed" as *u8, ok34, ctr)
1479 let bcx2: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1480 let brc2: i64 = ch_beat(btconf, bcx2)
1481 let btn1b: i64 = ch_read(btj1, btb1, CH_JWIN - 8)
1482 var ok35: i64 = 0
1483 if brc2 == 0 { if bcx2[2] == 2 { if bcx2[4] == 0 { if bcx2[12] == 0 { if btn1b == btn1 { ok35 = 1 } } } } }
1484 gv_check("T35 re-run is exactly-once: all files skipped-unchanged, zero frames, journal byte-identical" as *u8, ok35, ctr)
1485 let btfd3: i64 = sys_openat_append(bts2, CH_MODE_644)
1486 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-08-19T11:00:00Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"d\",\"name\":\"Grep\"}]}" as *u8)
1487 lb[lo] = 10 as u8
1488 sys_write(btfd3, lb, lo + 1)
1489 lo = sj_cat(lb, 0, "{\"c\":[{\"type\":\"tool_use\",\"id\":\"e\",\"name\":\"NoTsTool\"}]}" as *u8)
1490 lb[lo] = 10 as u8
1491 sys_write(btfd3, lb, lo + 1)
1492 sys_close(btfd3)
1493 let bcx3: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1494 let brc3: i64 = ch_beat(btconf, bcx3)
1495 var ok36: i64 = 0
1496 if brc3 == 0 { if bcx3[1] == 1 { if bcx3[2] == 1 { if bcx3[4] == 2 { if bcx3[15] == 1 { ok36 = 1 } } } } }
1497 gv_check("T36 growth delta-harvests ONLY the new lines from the banked mark" as *u8, ok36, ctr)
1498 let btjz: *u8 = sys_mmap(512)
1499 o = sj_cat(btjz, 0, btjrnl)
1500 o = sj_cat(btjz, o, "/chbeat_tszero.jrnl" as *u8)
1501 btjz[o] = 0 as u8
1502 let btnz: i64 = ch_read(btjz, btb1, CH_JWIN - 8)
1503 btn2 = ch_read(btj2, btb2, CH_JWIN - 8)
1504 var ok37: i64 = 0
1505 if btnz > 0 { if ch_find(btb1, btnz, "NoTsTool" as *u8) == 1 { if btn2 > 0 { if ch_find(btb2, btn2, "Grep" as *u8) == 1 { if ch_find(btb2, btn2, "NoTsTool" as *u8) == 0 { ok37 = 1 } } } } }
1506 gv_check("T37 a frame without a parseable timestamp lands in chbeat_tszero.jrnl -- its OWN bucket, never folded" as *u8, ok37, ctr)
1507 // twin landing: ingest the SAME pieces into a second journal dir and demand gauge agreement
1508 let btar: *u8 = sys_mmap(CH_BT_ARENA)
1509 let btfo: *i64 = sys_mmap(8 * CH_BT_MAXFILES) as *i64
1510 let btwcx: *i64 = sys_mmap(64) as *i64
1511 let btnp: i64 = ch_bt_walk(btspool, ".frames" as *u8, btar, btfo, btwcx)
1512 let btmcx: *i64 = sys_mmap(16) as *i64
1513 let btday: *u8 = sys_mmap(CH_BT_DAYCELL)
1514 let bttj: *u8 = sys_mmap(512)
1515 var bpi: i64 = 0
1516 while bpi < btnp {
1517 let bpp: *u8 = ((btar as i64) + btfo[bpi]) as *u8
1518 let bpb: *u8 = ch_bt_base(bpp)
1519 if ch_starts(bpb, 0, sj_vlen(bpb), "cb" as *u8) == 1 {
1520 ch_bt_pieceday(bpb, btday)
1521 var oz: i64 = sj_cat(bttj, 0, bttwin)
1522 bttj[oz] = 47 as u8
1523 oz = oz + 1
1524 oz = sj_cat(bttj, oz, "chbeat_" as *u8)
1525 oz = sj_cat(bttj, oz, btday)
1526 oz = sj_cat(bttj, oz, ".jrnl" as *u8)
1527 bttj[oz] = 0 as u8
1528 ch_ingest(bpp, bttj, btmcx)
1529 }
1530 bpi = bpi + 1
1531 }
1532 var oz2: i64 = sj_cat(bttj, 0, bttwin)
1533 bttj[oz2] = 47 as u8
1534 oz2 = oz2 + 1
1535 oz2 = sj_cat(bttj, oz2, "chbeat_20260819.jrnl" as *u8)
1536 bttj[oz2] = 0 as u8
1537 var dlA: i64 = ch_gauge_json(btj2, 0, d)
1538 let gfA: i64 = ch_bt_int_after(d, dlA, "\"frames_total\":" as *u8)
1539 let goA: i64 = ch_bt_int_after(d, dlA, "\"outside\":" as *u8)
1540 let gpA: i64 = ch_bt_int_after(d, dlA, "\"outside_permil\":" as *u8)
1541 var dlB: i64 = ch_gauge_json(bttj, 0, d)
1542 let gfB: i64 = ch_bt_int_after(d, dlB, "\"frames_total\":" as *u8)
1543 let goB: i64 = ch_bt_int_after(d, dlB, "\"outside\":" as *u8)
1544 let gpB: i64 = ch_bt_int_after(d, dlB, "\"outside_permil\":" as *u8)
1545 var ok38: i64 = 0
1546 if gfA > 0 { if gfA == gfB { if goA == goB { if gpA == gpB { ok38 = 1 } } } }
1547 gv_check("T38 gauge over the landing twin agrees EXACTLY with gauge over the local journal (the NAS-vs-laptop instrument agreement, in fixture)" as *u8, ok38, ctr)
1548 // plant a truncated landing: the reconcile MUST catch it, and the gauges MUST diverge
1549 let btp1: *u8 = sys_mmap(512)
1550 var btp1n: i64 = 0
1551 bpi = 0
1552 while bpi < btnp {
1553 let bpp2: *u8 = ((btar as i64) + btfo[bpi]) as *u8
1554 let bpb2: *u8 = ch_bt_base(bpp2)
1555 if ch_starts(bpb2, 0, sj_vlen(bpb2), "cb20260723" as *u8) == 1 { btp1n = sj_cat(btp1, 0, bpp2); btp1[btp1n] = 0 as u8 }
1556 bpi = bpi + 1
1557 }
1558 let btpb: *u8 = sys_mmap(CH_JWIN)
1559 let btpn: i64 = ch_read(btp1, btpb, CH_JWIN - 8)
1560 let btcut: *u8 = sys_mmap(512)
1561 o = sj_cat(btcut, 0, prefix)
1562 o = sj_catn(btcut, o, now)
1563 o = sj_cat(btcut, o, "cut1.frames" as *u8)
1564 btcut[o] = 0 as u8
1565 let btcfd2: i64 = sys_openat_wr(btcut, CH_MODE_644)
1566 sys_write(btcfd2, btpb, btpn - 10)
1567 sys_close(btcfd2)
1568 let bttj2: *u8 = sys_mmap(512)
1569 o = sj_cat(bttj2, 0, bttwin)
1570 o = sj_cat(bttj2, o, "/chbeat_cutcase.jrnl" as *u8)
1571 bttj2[o] = 0 as u8
1572 let btr9: i64 = ch_ingest(btcut, bttj2, btmcx)
1573 let btpl: i64 = ch_bt_lines(btp1)
1574 var ok39: i64 = 0
1575 if btpl == 2 { if btr9 == 1 { if btmcx[0] == 1 { if btr9 != btpl { ok39 = 1 } } } }
1576 gv_check("T39 neg-control-truncated-landing: ingested-frames != staged-frames and malformed counted -- the push reconcile catches a cut landing" as *u8, ok39, ctr)
1577 // conf missing a required key refuses, NAMING it
1578 let btconf2: *u8 = sys_mmap(512)
1579 o = sj_cat(btconf2, 0, prefix)
1580 o = sj_catn(btconf2, o, now)
1581 o = sj_cat(btconf2, o, "btconf2" as *u8)
1582 btconf2[o] = 0 as u8
1583 bo = sj_cat(btcb, 0, "root=" as *u8)
1584 bo = sj_cat(btcb, bo, btroot)
1585 btcb[bo] = 10 as u8
1586 bo = bo + 1
1587 bo = sj_cat(btcb, bo, "state=" as *u8)
1588 bo = sj_cat(btcb, bo, btstate)
1589 btcb[bo] = 10 as u8
1590 bo = bo + 1
1591 let btcfd3: i64 = sys_openat_wr(btconf2, CH_MODE_644)
1592 sys_write(btcfd3, btcb, bo)
1593 sys_close(btcfd3)
1594 let bcx4: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1595 let brc4: i64 = ch_beat(btconf2, bcx4)
1596 var ok40: i64 = 0
1597 if brc4 == 2 { ok40 = 1 }
1598 gv_check("T40 neg-control-conf-missing-required-key refuses fail-closed (never invents a path)" as *u8, ok40, ctr)
1599 // push with a DEAD wire: every piece stays spooled -- wrong only toward doing nothing
1600 let btconf3: *u8 = sys_mmap(512)
1601 o = sj_cat(btconf3, 0, prefix)
1602 o = sj_catn(btconf3, o, now)
1603 o = sj_cat(btconf3, o, "btconf3" as *u8)
1604 btconf3[o] = 0 as u8
1605 bo = sj_cat(btcb, 0, "root=" as *u8)
1606 bo = sj_cat(btcb, bo, btroot)
1607 btcb[bo] = 10 as u8
1608 bo = bo + 1
1609 bo = sj_cat(btcb, bo, "state=" as *u8)
1610 bo = sj_cat(btcb, bo, btstate)
1611 btcb[bo] = 10 as u8
1612 bo = bo + 1
1613 bo = sj_cat(btcb, bo, "spool=" as *u8)
1614 bo = sj_cat(btcb, bo, btspool)
1615 btcb[bo] = 10 as u8
1616 bo = bo + 1
1617 bo = sj_cat(btcb, bo, "done=" as *u8)
1618 bo = sj_cat(btcb, bo, btdone)
1619 btcb[bo] = 10 as u8
1620 bo = bo + 1
1621 bo = sj_cat(btcb, bo, "journal=" as *u8)
1622 bo = sj_cat(btcb, bo, btjrnl)
1623 btcb[bo] = 10 as u8
1624 bo = bo + 1
1625 bo = sj_cat(btcb, bo, "push=1" as *u8)
1626 btcb[bo] = 10 as u8
1627 bo = bo + 1
1628 bo = sj_cat(btcb, bo, "push_max=8" as *u8)
1629 btcb[bo] = 10 as u8
1630 bo = bo + 1
1631 bo = sj_cat(btcb, bo, "nas_stage=knowledge/status/chbeat/stage" as *u8)
1632 btcb[bo] = 10 as u8
1633 bo = bo + 1
1634 bo = sj_cat(btcb, bo, "nas_journal=knowledge/status/chbeat" as *u8)
1635 btcb[bo] = 10 as u8
1636 bo = bo + 1
1637 bo = sj_cat(btcb, bo, "wire=" as *u8)
1638 bo = sj_cat(btcb, bo, prefix)
1639 bo = sj_catn(btcb, bo, now)
1640 bo = sj_cat(btcb, bo, "nowire" as *u8)
1641 btcb[bo] = 10 as u8
1642 bo = bo + 1
1643 bo = sj_cat(btcb, bo, "wire_script=x" as *u8)
1644 btcb[bo] = 10 as u8
1645 bo = bo + 1
1646 bo = sj_cat(btcb, bo, "cap_write=x" as *u8)
1647 btcb[bo] = 10 as u8
1648 bo = bo + 1
1649 bo = sj_cat(btcb, bo, "cap_ingest=x" as *u8)
1650 btcb[bo] = 10 as u8
1651 bo = bo + 1
1652 bo = sj_cat(btcb, bo, "cap_read=x" as *u8)
1653 btcb[bo] = 10 as u8
1654 bo = bo + 1
1655 bo = sj_cat(btcb, bo, "hash_elf=" as *u8)
1656 bo = sj_cat(btcb, bo, prefix)
1657 bo = sj_catn(btcb, bo, now)
1658 bo = sj_cat(btcb, bo, "nohash" as *u8)
1659 btcb[bo] = 10 as u8
1660 bo = bo + 1
1661 let btcfd4: i64 = sys_openat_wr(btconf3, CH_MODE_644)
1662 sys_write(btcfd4, btcb, bo)
1663 sys_close(btcfd4)
1664 let bcx5: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1665 let brc5: i64 = ch_beat(btconf3, bcx5)
1666 var ok41: i64 = 0
1667 if brc5 == 1 { if bcx5[16] > 0 { if bcx5[17] == 0 { if bcx5[18] == bcx5[16] { if bcx5[19] > 0 { ok41 = 1 } } } } }
1668 gv_check("T41 neg-control-push-wire-dead: every piece stays spooled and every failure is counted -- wrong only toward doing nothing" as *u8, ok41, ctr)
1669 // journal cliff budget rides the conf and announces
1670 let btconf4: *u8 = sys_mmap(512)
1671 o = sj_cat(btconf4, 0, prefix)
1672 o = sj_catn(btconf4, o, now)
1673 o = sj_cat(btconf4, o, "btconf4" as *u8)
1674 btconf4[o] = 0 as u8
1675 bo = sj_cat(btcb, 0, "root=" as *u8)
1676 bo = sj_cat(btcb, bo, btroot)
1677 btcb[bo] = 10 as u8
1678 bo = bo + 1
1679 bo = sj_cat(btcb, bo, "state=" as *u8)
1680 bo = sj_cat(btcb, bo, btstate)
1681 btcb[bo] = 10 as u8
1682 bo = bo + 1
1683 bo = sj_cat(btcb, bo, "spool=" as *u8)
1684 bo = sj_cat(btcb, bo, btspool)
1685 btcb[bo] = 10 as u8
1686 bo = bo + 1
1687 bo = sj_cat(btcb, bo, "done=" as *u8)
1688 bo = sj_cat(btcb, bo, btdone)
1689 btcb[bo] = 10 as u8
1690 bo = bo + 1
1691 bo = sj_cat(btcb, bo, "journal=" as *u8)
1692 bo = sj_cat(btcb, bo, btjrnl)
1693 btcb[bo] = 10 as u8
1694 bo = bo + 1
1695 bo = sj_cat(btcb, bo, "push=0" as *u8)
1696 btcb[bo] = 10 as u8
1697 bo = bo + 1
1698 bo = sj_cat(btcb, bo, "jrnl_cliff=64" as *u8)
1699 btcb[bo] = 10 as u8
1700 bo = bo + 1
1701 let btcfd5: i64 = sys_openat_wr(btconf4, CH_MODE_644)
1702 sys_write(btcfd5, btcb, bo)
1703 sys_close(btcfd5)
1704 let bcx6: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1705 let brc6: i64 = ch_beat(btconf4, bcx6)
1706 var ok42: i64 = 0
1707 if brc6 == 0 { if bcx6[28] > 1000 { ok42 = 1 } }
1708 gv_check("T42 the journal cliff budget rides the conf and the fill announce fires PAST-CLIFF on a tiny budget" as *u8, ok42, ctr)
1709 // push-parser teeth: each decision parser must be able to FAIL
1710 let btpp: *u8 = sys_mmap(256)
1711 var btppn: i64 = sj_cat(btpp, 0, "{\"organ\":\"nx_filehash\",\"sha256\":\"0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\",\"bytes\":7}" as *u8)
1712 let btsha: *u8 = sys_mmap(80)
1713 var ok43: i64 = 0
1714 if ch_bt_parse_sha(btpp, btppn, btsha) == 1 {
1715 btppn = sj_cat(btpp, 0, "{\"sha256\":\"zz\"}" as *u8)
1716 if ch_bt_parse_sha(btpp, btppn, btsha) == 0 {
1717 btppn = sj_cat(btpp, 0, "INGEST OK frames=42 malformed=0" as *u8)
1718 if ch_bt_int_after(btpp, btppn, "INGEST OK frames=" as *u8) == 42 {
1719 if ch_bt_int_after(btpp, btppn, "bytes=" as *u8) == (0 - 1) { ok43 = 1 }
1720 }
1721 }
1722 }
1723 gv_check("T43 push decision parsers accept the real shapes and REFUSE malformed ones (a parser that cannot fail is not a parser)" as *u8, ok43, ctr)
1724 // T44 the push-reason truth table. The defect this replaces answered "fail-verify" for an upload
1725 // that never landed, so the two ABSENT causes -- which have OPPOSITE remedies (retry the write vs
1726 // investigate a write that lied) -- shared one name. Walk the whole table, then assert they differ.
1727 var ok44: i64 = 0
1728 if ch_bt_zeq(ch_bt_pushreason(0, 0, 0), "fail-write" as *u8) == 1 {
1729 if ch_bt_zeq(ch_bt_pushreason(1, 0, 0), "fail-verify-absent" as *u8) == 1 {
1730 if ch_bt_zeq(ch_bt_pushreason(1, 1, 0), "fail-verify-mismatch" as *u8) == 1 {
1731 if ch_bt_zeq(ch_bt_pushreason(1, 1, 1), "ok" as *u8) == 1 {
1732 if ch_bt_zeq(ch_bt_pushreason(0, 0, 0), ch_bt_pushreason(1, 0, 0)) == 0 { ok44 = 1 }
1733 }
1734 }
1735 }
1736 }
1737 gv_check("T44 neg-control-push-reason-distinct: a write that never landed and a write that lied get DIFFERENT names (the wrong-stage defect cannot return)" as *u8, ok44, ctr)
1738 // ---- CE1 leg 2: write frames carry the PATH they touched (additive note token) ----
1739 let tj2: *u8 = sys_mmap(512)
1740 o = sj_cat(tj2, 0, prefix)
1741 o = sj_catn(tj2, o, now)
1742 o = sj_cat(tj2, o, ".t2" as *u8)
1743 tj2[o] = 0 as u8
1744 let fr2: *u8 = sys_mmap(512)
1745 o = sj_cat(fr2, 0, prefix)
1746 o = sj_catn(fr2, o, now)
1747 o = sj_cat(fr2, o, ".frames2" as *u8)
1748 fr2[o] = 0 as u8
1749 let t2fd: i64 = sys_openat_append(tj2, CH_MODE_644)
1750 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:05Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"w1\",\"name\":\"mcp__nishi__nx_fs_write\",\"input\":{\"argv\":[\"edit\",\"buildroot/runtime/x_fixture.nx\",\"old\",\"new\"],\"_cap\":\"zz\"}}]}" as *u8)
1751 lb[lo] = 10 as u8
1752 sys_write(t2fd, lb, lo + 1)
1753 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:06Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"w2\",\"name\":\"Write\",\"input\":{\"file_path\":\"C:/Users/e/m.md\",\"content\":\"x \\\"file_path\\\":\\\"decoy\\\" y\"}}]}" as *u8)
1754 lb[lo] = 10 as u8
1755 sys_write(t2fd, lb, lo + 1)
1756 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:07Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"r1\",\"name\":\"mcp__nishi__nx_fs\",\"input\":{\"argv\":[\"read\",\"buildroot/runtime/x_fixture.nx\"]}}]}" as *u8)
1757 lb[lo] = 10 as u8
1758 sys_write(t2fd, lb, lo + 1)
1759 sys_close(t2fd)
1760 let tcx2: *i64 = sys_mmap(16) as *i64
1761 let got2: i64 = ch_frames(tj2, "wpath" as *u8, fr2, tcx2)
1762 let fb2: *u8 = sys_mmap(CH_JWIN)
1763 let fn2: i64 = ch_read(fr2, fb2, CH_JWIN - 8)
1764 var ok45: i64 = 0
1765 if got2 == 3 { if fn2 > 0 { if ch_find(fb2, fn2, "path=buildroot/runtime/x_fixture.nx" as *u8) == 1 { ok45 = 1 } } }
1766 gv_check("T45 an nx_fs_write frame carries path= from argv[1], the verb in argv[0] never mistaken for it" as *u8, ok45, ctr)
1767 var ok46: i64 = 0
1768 if fn2 > 0 { if ch_find(fb2, fn2, "path=C:/Users/e/m.md" as *u8) == 1 { if ch_find(fb2, fn2, "path=decoy" as *u8) == 0 { ok46 = 1 } } }
1769 gv_check("T46 a Write frame carries path= from file_path and a decoy key inside its CONTENT is never read as the path" as *u8, ok46, ctr)
1770 var pc: i64 = 0
1771 var px: i64 = 0
1772 var pg: i64 = 1
1773 let pkey: *u8 = "path=" as *u8
1774 while pg == 1 { if fn2 <= 0 { pg = 0 } else { let pf: i64 = ch_find_from(fb2, px, fn2, pkey); if pf < 0 { pg = 0 } else { pc = pc + 1; px = pf + sj_vlen(pkey) } } }
1775 var ok47: i64 = 0
1776 if pc == 2 { ok47 = 1 }
1777 gv_check("T47 NEG-CONTROL: a READER frame (nx_fs) carries no path token -- exactly two of three frames do" as *u8, ok47, ctr)
1778 // ---- CE1 leg 2: ce_author_health on a PLANTED tree prefix, a planted journal and a planted spine ----
1779 let ahp: *u8 = sys_mmap(512)
1780 o = sj_cat(ahp, 0, prefix); o = sj_catn(ahp, o, now); o = sj_cat(ahp, o, "ah_" as *u8); ahp[o] = 0 as u8
1781 let aha: *u8 = sys_mmap(512); o = sj_cat(aha, 0, ahp); o = sj_cat(aha, o, "a.nx" as *u8); aha[o] = 0 as u8
1782 let ahb: *u8 = sys_mmap(512); o = sj_cat(ahb, 0, ahp); o = sj_cat(ahb, o, "b.nx" as *u8); ahb[o] = 0 as u8
1783 let ahc: *u8 = sys_mmap(512); o = sj_cat(ahc, 0, ahp); o = sj_cat(ahc, o, "c.txt" as *u8); ahc[o] = 0 as u8
1784 let ahj: *u8 = sys_mmap(512); o = sj_cat(ahj, 0, ahp); o = sj_cat(ahj, o, "frames.jrnl" as *u8); ahj[o] = 0 as u8
1785 let ahs: *u8 = sys_mmap(512); o = sj_cat(ahs, 0, ahp); o = sj_cat(ahs, o, "mccabe.spine" as *u8); ahs[o] = 0 as u8
1786 let ahn: *u8 = sys_mmap(512); o = sj_cat(ahn, 0, ahp); o = sj_cat(ahn, o, "nope.spine" as *u8); ahn[o] = 0 as u8
1787 let ahfa: i64 = sys_openat_wr(aha, CH_MODE_644)
1788 lo = sj_cat(lb, 0, "func t(a: i64) -> i64 {\n if a>0 { return 1 }\n return 0\n}\n" as *u8)
1789 sys_write(ahfa, lb, lo); sys_close(ahfa)
1790 let ahfb: i64 = sys_openat_wr(ahb, CH_MODE_644)
1791 lo = sj_cat(lb, 0, "func t() -> i64 {\n return 0\n}\n" as *u8)
1792 sys_write(ahfb, lb, lo); sys_close(ahfb)
1793 let ahfc: i64 = sys_openat_wr(ahc, CH_MODE_644)
1794 lo = sj_cat(lb, 0, "not nishilang\n" as *u8)
1795 sys_write(ahfc, lb, lo); sys_close(ahfc)
1796 let ahfs: i64 = sys_openat_wr(ahs, CH_MODE_644)
1797 lo = sj_cat(lb, 0, "1788600000|files=10|funcs=20|above_10=3|permille=150|classes=0|UNMARKED:10:20:3\n" as *u8)
1798 sys_write(ahfs, lb, lo); sys_close(ahfs)
1799 let ahnb: *u8 = sys_mmap(1024)
1800 let ahfj: i64 = sys_openat_append(ahj, CH_MODE_644)
1801 var ano: i64 = sj_cat(ahnb, 0, "delta path=" as *u8); ano = sj_cat(ahnb, ano, aha); ahnb[ano] = 0 as u8
1802 ch_frame_write(ahfj, lb, CH_AH_FIX_TS, "sessA" as *u8, "mcp__nishi__nx_fs_write" as *u8, "use" as *u8, "-" as *u8, ahnb)
1803 ch_frame_write(ahfj, lb, CH_AH_FIX_TS + 1, "sessA" as *u8, "mcp__nishi__nx_fs_write" as *u8, "use" as *u8, "-" as *u8, ahnb)
1804 ano = sj_cat(ahnb, 0, "delta path=" as *u8); ano = sj_cat(ahnb, ano, ahb); ahnb[ano] = 0 as u8
1805 ch_frame_write(ahfj, lb, CH_AH_FIX_TS + 2, "sessB" as *u8, "Write" as *u8, "use" as *u8, "-" as *u8, ahnb)
1806 ano = sj_cat(ahnb, 0, "delta path=" as *u8); ano = sj_cat(ahnb, ano, ahc); ahnb[ano] = 0 as u8
1807 ch_frame_write(ahfj, lb, CH_AH_FIX_TS + 3, "sessB" as *u8, "mcp__nishi__nx_fs_write" as *u8, "use" as *u8, "-" as *u8, ahnb)
1808 ch_frame_write(ahfj, lb, CH_AH_FIX_TS + 4, "sessB" as *u8, "mcp__nishi__nx_fs" as *u8, "use" as *u8, "-" as *u8, "delta" as *u8)
1809 sys_close(ahfj)
1810 let acx: *i64 = sys_mmap(8 * CH_AH_CTRS) as *i64
1811 let aob: *u8 = sys_mmap(CH_OUT)
1812 let arc: i64 = ce_author_health(ahj, ahp, ahs, acx, aob)
1813 var ok48: i64 = 0
1814 if arc == 0 { if acx[CH_AH_FILES] == 2 { if acx[CH_AH_FUNCS] == 2 { if acx[CH_AH_SUMVG] == 3 { if acx[CH_AH_ABOVE] == 0 { if acx[CH_AH_DFILES] == CH_AH_FIX_DFILES { if acx[CH_AH_DFUNCS] == CH_AH_FIX_DFUNCS { if acx[CH_AH_DABOVE] == CH_AH_FIX_DABOVE { ok48 = 1 } } } } } } } }
1815 gv_check("T48 author-health: two seat-written .nx files scanned once, vG 2+1 hand-computed, denominator read from the spine's LAST row" as *u8, ok48, ctr)
1816 var ok49: i64 = 0
1817 if acx[CH_AH_FRAMES] == 5 { if acx[CH_AH_PATHFRAMES] == 4 { if acx[CH_AH_UNIQUE] == 3 { if acx[CH_AH_INTREE] == 2 { if acx[CH_AH_OUTSIDE] == 1 { if acx[CH_AH_SESSIONS] == 2 { if acx[CH_AH_FIRSTTS] == CH_AH_FIX_TS { ok49 = 1 } } } } } } }
1818 gv_check("T49 author-health partition: a duplicate write counts ONCE, a non-.nx path is counted apart, sessions and first ts are exact" as *u8, ok49, ctr)
1819 let arc2: i64 = ce_author_health(ahj, ahp, ahn, acx, aob)
1820 var ok50: i64 = 0
1821 if arc2 == CH_AH_RC_UNOBS { if acx[CH_AH_DFILES] == 0 { if acx[CH_AH_FILES] == 2 { ok50 = 1 } } }
1822 gv_check("T50 NEG-CONTROL: an absent spine reads UNOBSERVABLE-DENOMINATOR (rc 3) with NO fabricated denominator, seat figures still measured" as *u8, ok50, ctr)
1823 let arc3: i64 = ce_author_health(fr, ahp, ahs, acx, aob)
1824 var ok51: i64 = 0
1825 if arc3 == CH_AH_RC_NOPATH { if acx[CH_AH_PATHFRAMES] == 0 { if acx[CH_AH_FILES] == 0 { ok51 = 1 } } }
1826 gv_check("T51 NEG-CONTROL: a journal whose frames carry no path reads NO-PATH-FRAMES (rc 4), never a zero that looks measured" as *u8, ok51, ctr)
1827 let rc: i64 = gv_verdict("CLAWHARV-GATE" as *u8, ctr, "transcript parse + delta hwm + ingest + gauge + page + propose + bootgauge + capture-beat teeth green" as *u8)
1828 return rc
1829}
1830
1831// ---------- learn: LEARNING-TEXT harvest (root fix for debt 1785525736) ----------
1832// Every other verb in this organ extracts "type":"tool_use" NAMES. That is tool TELEMETRY, not
1833// learning capture: ch_frame_write puts '-' in the two columns where a lesson would go, and the
1834// 6-hourly beat reported fail=0 for weeks while moving ZERO learnings, over transcripts holding
1835// ~40k LAW:/LESSON/ROOT CAUSE/FINDING: statements. This verb reads the PROSE instead -- the "text"
1836// payloads written by the assistant and the operator -- ranks each line, and keeps only what clears
1837// the floor. Because it CAN reject plain prose, its output is evidence rather than a transcript dump.
1838// Rule 11: every marker, weight and floor is loaded from a conf file. No weight is written in code.
1839const CH_MK_MAX: i64 = 64
1840const CH_CONF_WIN: i64 = 65536
1841const CH_TXTWIN: i64 = 262144
1842
1843// longest run of CONSECUTIVE occurrences of a (possibly multi-byte) glyph in q[s..e)
1844// the star/warn glyphs are 3-byte UTF-8, so this compares byte sequences, never single chars.
1845func ch_run_of(q: *u8, s: i64, e: i64, g: *u8) -> i64 {
1846 let gl: i64 = sj_vlen(g)
1847 if gl <= 0 { return 0 }
1848 var best: i64 = 0
1849 var i: i64 = s
1850 while i < e {
1851 var run: i64 = 0
1852 var j: i64 = i
1853 var go: i64 = 1
1854 while go == 1 {
1855 if j + gl > e { go = 0 } else {
1856 var k: i64 = 0
1857 var same: i64 = 1
1858 while k < gl {
1859 if q[j+k] != g[k] { same = 0; k = gl } else { k = k + 1 }
1860 }
1861 if same == 1 { run = run + 1; j = j + gl } else { go = 0 }
1862 }
1863 }
1864 if run > best { best = run }
1865 if run > 0 { i = j } else { i = i + 1 }
1866 }
1867 return best
1868}
1869
1870// conf loader. mk is INTERLEAVED (mk[2k]=literal offset into cbuf, mk[2k+1]=weight) so this stays
1871// at 4 params; sc carries the scalars: 0=warn_bonus 1=min_rank 2=min_len 3=max_len 4=star_off
1872// 5=warn_off 6=star_max 7=marker_count. Returns marker count, or -1 if the conf cannot be read --
1873// FAIL-CLOSED: no conf means no ranking basis, so the verb refuses rather than inventing weights.
1874func ch_conf_load(path: *u8, cbuf: *u8, mk: *i64, sc: *i64) -> i64 {
1875 let n: i64 = ch_read(path, cbuf, CH_CONF_WIN - 8)
1876 if n <= 0 { return 0 - 1 }
1877 sc[0] = 2
1878 sc[1] = 3
1879 sc[2] = 40
1880 sc[3] = 400
1881 sc[4] = 0 - 1
1882 sc[5] = 0 - 1
1883 sc[6] = 6
1884 var cnt: i64 = 0
1885 var i: i64 = 0
1886 while i < n {
1887 let le: i64 = sj_le(cbuf, i, n)
1888 if cbuf[i] != (35 as u8) {
1889 if ch_starts(cbuf, i, le, "marker=" as *u8) == 1 {
1890 if cnt < CH_MK_MAX {
1891 let vs: i64 = i + 7
1892 var bar: i64 = 0 - 1
1893 var p: i64 = vs
1894 while p < le { if cbuf[p] == (124 as u8) { bar = p } p = p + 1 }
1895 if bar > vs {
1896 cbuf[bar] = 0 as u8
1897 cbuf[le] = 0 as u8
1898 mk[cnt*2] = vs
1899 mk[cnt*2+1] = sj_atoi_z(((cbuf as i64) + bar + 1) as *u8)
1900 cnt = cnt + 1
1901 }
1902 }
1903 }
1904 if ch_starts(cbuf, i, le, "star_char=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[4] = i + 10 }
1905 if ch_starts(cbuf, i, le, "warn_char=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[5] = i + 10 }
1906 if ch_starts(cbuf, i, le, "warn_bonus=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[0] = sj_atoi_z(((cbuf as i64) + i + 11) as *u8) }
1907 if ch_starts(cbuf, i, le, "min_rank_store=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[1] = sj_atoi_z(((cbuf as i64) + i + 15) as *u8) }
1908 if ch_starts(cbuf, i, le, "min_len=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[2] = sj_atoi_z(((cbuf as i64) + i + 8) as *u8) }
1909 if ch_starts(cbuf, i, le, "max_len=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[3] = sj_atoi_z(((cbuf as i64) + i + 8) as *u8) }
1910 if ch_starts(cbuf, i, le, "star_max=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[6] = sj_atoi_z(((cbuf as i64) + i + 9) as *u8) }
1911 }
1912 i = le + 1
1913 }
1914 sc[7] = cnt
1915 return cnt
1916}
1917
1918// a marker must sit on a WORD BOUNDARY. Measured on real prose: the naive substring test scored
1919// "UNMEASURED" as the marker "MEASURED" and promoted a doc line to rank 3 -- a substring needle
1920// flatters silently. Only the left edge needs guarding (markers are prefixes like "LAW:").
1921func ch_isalpha(c: u8) -> i64 {
1922 if c >= (65 as u8) { if c <= (90 as u8) { return 1 } }
1923 if c >= (97 as u8) { if c <= (122 as u8) { return 1 } }
1924 return 0
1925}
1926
1927// rank = the MAX of the signals, never the mean (banked law): a star run is the operator's own
1928// ranking convention, a warn glyph is a callout worth rank+bonus, and marker phrases carry their
1929// configured weight. Capped at star_max so a decorative row of stars cannot outrank a real law.
1930func ch_rank_text(q: *u8, s: i64, e: i64, cbuf: *u8, mk: *i64, sc: *i64) -> i64 {
1931 var r: i64 = 0
1932 if sc[4] >= 0 {
1933 let sr: i64 = ch_run_of(q, s, e, ((cbuf as i64) + sc[4]) as *u8)
1934 if sr > r { r = sr }
1935 }
1936 if sc[5] >= 0 {
1937 let wr: i64 = ch_run_of(q, s, e, ((cbuf as i64) + sc[5]) as *u8)
1938 if wr > 0 { let wv: i64 = wr + sc[0]; if wv > r { r = wv } }
1939 }
1940 var k: i64 = 0
1941 while k < sc[7] {
1942 let lit: *u8 = ((cbuf as i64) + mk[k*2]) as *u8
1943 var from: i64 = s
1944 var hit: i64 = 0
1945 while hit == 0 {
1946 let hp: i64 = ch_find_from(q, from, e, lit)
1947 if hp < 0 { hit = 0 - 1 } else {
1948 var okb: i64 = 1
1949 if hp > s { if ch_isalpha(q[hp-1]) == 1 { okb = 0 } }
1950 if okb == 1 { hit = 1 } else { from = hp + 1 }
1951 }
1952 }
1953 if hit == 1 { if mk[k*2+1] > r { r = mk[k*2+1] } }
1954 k = k + 1
1955 }
1956 if r > sc[6] { r = sc[6] }
1957 return r
1958}
1959
1960func ch_learn(tpath: *u8, ws: *u8, outp: *u8, confp: *u8, cx: *i64) -> i64 {
1961 let cbuf: *u8 = sys_mmap(CH_CONF_WIN)
1962 let mk: *i64 = sys_mmap(CH_MK_MAX * 16) as *i64
1963 let sc: *i64 = sys_mmap(128) as *i64
1964 let cnt: i64 = ch_conf_load(confp, cbuf, mk, sc)
1965 if cnt < 0 { return 0 - 4 }
1966 cx[1] = cnt
1967 let buf: *u8 = sys_mmap(CH_WIN)
1968 let cap: i64 = CH_WIN - 8
1969 let n: i64 = ch_read(tpath, buf, cap)
1970 cx[0] = 0
1971 if n <= 0 { return 0 - 1 }
1972 if n >= cap { cx[0] = 1 }
1973 let fd: i64 = sys_openat_append(outp, CH_MODE_644)
1974 if fd < 0 { return 0 - 3 }
1975 let tb: *u8 = sys_mmap(CH_TXTWIN)
1976 let ob: *u8 = sys_mmap(CH_TXTWIN)
1977 // last emitted segment. A real transcript frame carries the same assistant text more than once
1978 // (the message and its echo), so without this the organ emits provable duplicates -- measured 2
1979 // identical records from one real line. Adjacent-compare, not a full set: the echo is adjacent.
1980 let pb: *u8 = sys_mmap(CH_TXTWIN)
1981 var pl: i64 = 0
1982 var kept: i64 = 0
1983 var i: i64 = 0
1984 while i < n {
1985 let le: i64 = sj_le(buf, i, n)
1986 var ts: i64 = 0
1987 let tp: i64 = ch_find_from(buf, i, le, "\"timestamp\":\"" as *u8)
1988 if tp >= 0 { ts = ch_iso_epoch(buf, tp + 13, le) }
1989 var j: i64 = i
1990 var go: i64 = 1
1991 while go == 1 {
1992 let xp: i64 = ch_find_from(buf, j, le, "\"text\":\"" as *u8)
1993 if xp < 0 { go = 0 } else {
1994 var p: i64 = xp + 8
1995 var to: i64 = 0
1996 var g2: i64 = 1
1997 while g2 == 1 {
1998 if p >= le { g2 = 0 } else {
1999 let c: u8 = buf[p]
2000 if c == (34 as u8) { g2 = 0 } else {
2001 if c == (92 as u8) {
2002 let d2: u8 = buf[p+1]
2003 var em: u8 = d2
2004 if d2 == (110 as u8) { em = 10 as u8 }
2005 if d2 == (116 as u8) { em = 32 as u8 }
2006 if d2 == (114 as u8) { em = 32 as u8 }
2007 if to < CH_TXTWIN - 4 { tb[to] = em; to = to + 1 }
2008 p = p + 2
2009 } else {
2010 if to < CH_TXTWIN - 4 { tb[to] = c; to = to + 1 }
2011 p = p + 1
2012 }
2013 }
2014 }
2015 }
2016 var q: i64 = 0
2017 while q < to {
2018 let qe: i64 = sj_le(tb, q, to)
2019 let seg: i64 = qe - q
2020 if seg >= sc[2] {
2021 var endq: i64 = qe
2022 if seg > sc[3] { endq = q + sc[3] }
2023 let r: i64 = ch_rank_text(tb, q, endq, cbuf, mk, sc)
2024 var dup: i64 = 0
2025 if pl == (endq - q) {
2026 var z: i64 = 0
2027 var sm: i64 = 1
2028 while z < pl { if pb[z] != tb[q+z] { sm = 0; z = pl } else { z = z + 1 } }
2029 if sm == 1 { dup = 1 }
2030 }
2031 if r >= sc[1] { if dup == 0 {
2032 var o: i64 = sj_cat(ob, 0, "{\"ts\":" as *u8)
2033 o = sj_catn(ob, o, ts)
2034 o = sj_cat(ob, o, ",\"ws\":\"" as *u8)
2035 o = sj_cat(ob, o, ws)
2036 o = sj_cat(ob, o, "\",\"src\":\"transcript\",\"rank\":" as *u8)
2037 o = sj_catn(ob, o, r)
2038 o = sj_cat(ob, o, ",\"text\":\"" as *u8)
2039 var k2: i64 = q
2040 while k2 < endq {
2041 let c2: u8 = tb[k2]
2042 if c2 == (34 as u8) { ob[o] = 92 as u8; o = o + 1; ob[o] = 34 as u8; o = o + 1 } else {
2043 if c2 == (92 as u8) { ob[o] = 92 as u8; o = o + 1; ob[o] = 92 as u8; o = o + 1 } else {
2044 if c2 < (32 as u8) { ob[o] = 32 as u8; o = o + 1 } else { ob[o] = c2; o = o + 1 }
2045 }
2046 }
2047 k2 = k2 + 1
2048 }
2049 o = sj_cat(ob, o, "\"}" as *u8)
2050 ob[o] = 10 as u8
2051 sys_write(fd, ob, o + 1)
2052 pl = endq - q
2053 var z3: i64 = 0
2054 while z3 < pl { pb[z3] = tb[q+z3]; z3 = z3 + 1 }
2055 kept = kept + 1
2056 } }
2057 }
2058 q = qe + 1
2059 }
2060 j = p + 1
2061 }
2062 }
2063 i = le + 1
2064 }
2065 sys_close(fd)
2066 return kept
2067}
2068
2069// ================= beat: DM1 session->NAS capture (devmgmt /compare rung, 2026-08-20) =================
2070// The dev record is laptop-local (837 transcripts / 2.29 GB measured 2026-08-20 under
2071// ~/.claude/projects, at THREE depths: sessions, subagents/, subagents/workflows/); the NAS clock plane
2072// cannot reach the laptop, so the beat RUNS WHERE THE TRANSCRIPTS LIVE (this organ is portable by
2073// design) and PUSHES. Pipeline: walk -> ch_delta per transcript (per-transcript byte HWM in state/)
2074// -> split fresh frames into ts-day PIECES -> ingest every piece into the LOCAL per-day journal twin
2075// -> when push=1, per piece: upload via the forked MCP wire (nx_fs_write), byte-verify with
2076// nx_filehash on BOTH sides (one ruler), NAS-side ch_ingest into the per-day NAS journal, announce
2077// journal fill. PIECES ARE THE CHUNK UNIT AND THE INGEST UNIT: each stays under the MCP body cliff
2078// and is marker-idempotent via ch_ingest, so the pipeline is resumable at every stage with no append
2079// primitive over the wire. A piece leaves the spool only after the NAS leg confirms; every failure
2080// leaves it spooled -- wrong only toward doing nothing.
2081// DAY PARTITION DERIVATION: heaviest measured day (2026-08-19: 32,122 MCP calls / 836,673 transcript
2082// lines across 7 seats) stages ~2-4 MB of frames -- a day is the largest calendar unit whose worst
2083// measured case still fits the 4 MiB gauge window (CH_JWIN), so per-day journals keep the NAS-side
2084// gauge untruncated. Frames whose timestamp cannot parse route to chbeat_tszero.jrnl -- their own
2085// bucket, never folded.
2086// Rule 11: every path, bound and cadence datum rides chbeat.conf; the beat consts live in the module
2087// const block at the top (single-pass parser: the selftest teeth read them first).
2088
2089func ch_bt_zeq(a: *u8, b: *u8) -> i64 {
2090 var i: i64 = 0
2091 while a[i] == b[i] { if a[i] == (0 as u8) { return 1 } i = i + 1 }
2092 return 0
2093}
2094func ch_bt_ends(s: *u8, sfx: *u8) -> i64 {
2095 let n: i64 = sj_vlen(s)
2096 let m: i64 = sj_vlen(sfx)
2097 if n < m { return 0 }
2098 return sj_lit_eq(s, n - m, n, sfx)
2099}
2100func ch_bt_le16(b: *u8, off: i64) -> i64 { return (b[off] as i64) + (b[off+1] as i64) * 256 }
2101func ch_bt_le64(b: *u8, off: i64) -> i64 {
2102 var v: i64 = 0
2103 var i: i64 = 7
2104 while i >= 0 { v = v * 256 + (b[off+i] as i64); i = i - 1 }
2105 return v
2106}
2107// stat: k[0]=file kind as the DT_* value ((st_mode>>12)&0xF equals DT_DIR/DT_REG numerically by Linux
2108// design), k[1]=size. sb = caller scratch >= 160 B (never allocated here -- runs once per dirent).
2109// st_mode u16 at offset 24, st_size i64 at offset 48 (x86_64 struct stat; the same offsets
2110// nx_artifactdrift ps_execbit reads). Arithmetic field extraction, no bitwise ops needed.
2111func ch_bt_stat(path: *u8, sb: *u8, k: *i64) -> i64 {
2112 k[0] = 0
2113 k[1] = 0 - 1
2114 if sys_fstatat(path, sb) != 0 { return 0 - 1 }
2115 let mode: i64 = ch_bt_le16(sb, 24)
2116 k[0] = (mode / 4096) % 16
2117 k[1] = ch_bt_le64(sb, 48)
2118 return 0
2119}
2120// recursive walk: every file ending <sfx> under root, ANY depth (sessions, subagents/, workflows/).
2121// getdents64 LOOPED until 0 per directory (one call is a prefix -- banked law); d_type on 9p/drvfs is
2122// often DT_UNKNOWN -> fstatat fallback, counted. fo[i] = arena offset of file path i.
2123// Returns file count, or -1 = table/arena overflow (caller REFUSES loudly -- never a silent cap).
2124// wcx: 0=dirs_walked 1=dir_open_errors 2=stat_fallbacks 3=arena_used
2125func ch_bt_walk(root: *u8, sfx: *u8, ar: *u8, fo: *i64, wcx: *i64) -> i64 {
2126 let dq: *i64 = sys_mmap(8 * CH_BT_MAXDIRS) as *i64
2127 let db: *u8 = sys_mmap(CH_BT_DIRWIN)
2128 let sb: *u8 = sys_mmap(256)
2129 let kk: *i64 = sys_mmap(16) as *i64
2130 var ap: i64 = 0
2131 var dh: i64 = 0
2132 var dt2: i64 = 0
2133 var nf: i64 = 0
2134 wcx[0] = 0
2135 wcx[1] = 0
2136 wcx[2] = 0
2137 wcx[3] = 0
2138 let rl: i64 = sj_vlen(root)
2139 if rl + 2 > CH_BT_ARENA { return 0 - 1 }
2140 dq[dt2] = ap
2141 var o: i64 = sj_cat(ar, ap, root)
2142 ar[o] = 0 as u8
2143 ap = o + 1
2144 dt2 = dt2 + 1
2145 while dh < dt2 {
2146 let dpo: i64 = dq[dh]
2147 dh = dh + 1
2148 let dpath: *u8 = ((ar as i64) + dpo) as *u8
2149 let dl: i64 = sj_vlen(dpath)
2150 let fd: i64 = sys_openat_rd(dpath)
2151 if fd < 0 { wcx[1] = wcx[1] + 1 } else {
2152 var more: i64 = 1
2153 while more == 1 {
2154 let r: i64 = sys_getdents64(fd, db, CH_BT_DIRWIN)
2155 if r <= 0 { more = 0 } else {
2156 var p: i64 = 0
2157 while p < r {
2158 let rec: *u8 = ((db as i64) + p) as *u8
2159 let rl2: i64 = dirent_reclen(rec)
2160 if rl2 <= 0 { p = r; more = 0 } else {
2161 var ty: i64 = dirent_type(rec)
2162 let nm: *u8 = dirent_name(rec)
2163 var dot: i64 = 0
2164 if nm[0] == (46 as u8) {
2165 if nm[1] == (0 as u8) { dot = 1 }
2166 if nm[1] == (46 as u8) { if nm[2] == (0 as u8) { dot = 1 } }
2167 }
2168 if dot == 0 {
2169 let nl: i64 = sj_vlen(nm)
2170 if ap + dl + nl + 2 > CH_BT_ARENA { sys_close(fd); return 0 - 1 }
2171 let po: i64 = ap
2172 var q: i64 = sj_cat(ar, po, dpath)
2173 ar[q] = 47 as u8
2174 q = q + 1
2175 q = sj_cat(ar, q, nm)
2176 ar[q] = 0 as u8
2177 let full: *u8 = ((ar as i64) + po) as *u8
2178 if ty == 0 { wcx[2] = wcx[2] + 1; if ch_bt_stat(full, sb, kk) == 0 { ty = kk[0] } }
2179 var keep: i64 = 0
2180 if ty == DT_DIR {
2181 if dt2 >= CH_BT_MAXDIRS { sys_close(fd); return 0 - 1 }
2182 dq[dt2] = po
2183 dt2 = dt2 + 1
2184 keep = 1
2185 } else {
2186 if ty == DT_REG { if ch_bt_ends(full, sfx) == 1 {
2187 if nf >= CH_BT_MAXFILES { sys_close(fd); return 0 - 1 }
2188 fo[nf] = po
2189 nf = nf + 1
2190 keep = 1
2191 } }
2192 }
2193 if keep == 1 { ap = q + 1 }
2194 }
2195 p = p + rl2
2196 }
2197 }
2198 }
2199 }
2200 sys_close(fd)
2201 wcx[0] = wcx[0] + 1
2202 }
2203 }
2204 wcx[3] = ap
2205 return nf
2206}
2207// epoch -> zero-padded YYYYMMDD (Hinnant civil-from-days, the exact inverse of ch_epoch_ymdhms).
2208// ts <= 0 -> "tszero": frames without a parseable timestamp keep their OWN journal bucket.
2209func ch_bt_day(ts: i64, d: *u8) -> i64 {
2210 if ts <= 0 { let o: i64 = sj_cat(d, 0, "tszero" as *u8); d[o] = 0 as u8; return o }
2211 let z: i64 = ts / CH_MAGIC_86400 + CH_MAGIC_719468
2212 let era: i64 = z / CH_MAGIC_146097
2213 let doe: i64 = z - era * CH_MAGIC_146097
2214 let yoe: i64 = (doe - doe / CH_MAGIC_1460 + doe / CH_MAGIC_36524 - doe / CH_MAGIC_146096) / 365
2215 var y: i64 = yoe + era * 400
2216 let doy: i64 = doe - (365 * yoe + yoe / 4 - yoe / 100)
2217 let mp: i64 = (5 * doy + 2) / 153
2218 let dd: i64 = doy - (153 * mp + 2) / 5 + 1
2219 var m: i64 = 0
2220 if mp < 10 { m = mp + 3 } else { m = mp - 9 }
2221 if m <= 2 { y = y + 1 }
2222 d[0] = (48 + (y / 1000) % 10) as u8
2223 d[1] = (48 + (y / 100) % 10) as u8
2224 d[2] = (48 + (y / 10) % 10) as u8
2225 d[3] = (48 + y % 10) as u8
2226 d[4] = (48 + (m / 10) % 10) as u8
2227 d[5] = (48 + m % 10) as u8
2228 d[6] = (48 + (dd / 10) % 10) as u8
2229 d[7] = (48 + dd % 10) as u8
2230 d[8] = 0 as u8
2231 return 8
2232}
2233// conf: key=value rows; '#' comments. Values zero-terminate IN cbuf; the value offset is DERIVED from
2234// the key literal's own length (sj_vlen) -- never a hand-counted twin beside the literal (banked law).
2235func ch_bt_kv(cbuf: *u8, i: i64, le: i64, key: *u8) -> i64 {
2236 if ch_starts(cbuf, i, le, key) == 1 { cbuf[le] = 0 as u8; return i + sj_vlen(key) }
2237 return 0 - 1
2238}
2239// off: 0 root 1 state 2 spool 3 done 4 journal 5 nas_stage 6 nas_journal 7 wire 8 wire_script
2240// 9 cap_write 10 cap_ingest 11 cap_read 12 hash_elf (-1 = absent)
2241// iv: 0 push 1 push_max 2 piece_raw 3 wire_timeout_ms 4 jrnl_cliff 5 jrnl_warn_permil
2242// kt interleaved known_type rows (offset,count); count in kcx[0]
2243// returns 0, -1 unreadable conf, -2 required key missing (NAMED on stdout) -- fail-closed both ways.
2244func ch_bt_conf(path: *u8, cbuf: *u8, off: *i64, iv: *i64, kt: *i64, kcx: *i64) -> i64 {
2245 let n: i64 = ch_read(path, cbuf, CH_CONF_WIN - 8)
2246 if n <= 0 { return 0 - 1 }
2247 var w: i64 = 0
2248 while w < 13 { off[w] = 0 - 1; w = w + 1 }
2249 iv[0] = 0
2250 iv[1] = 0
2251 // derived default: ~9% JSON-escape inflation on the 6 control bytes per ~80 B frame plus a ~1 KiB
2252 // rpc envelope cannot push 3/4 of the measured body cliff across it
2253 iv[2] = CH_MCP_BODY_CLIFF * 3 / 4
2254 // derived default: matches the estate MCP client's own 120000 ms call deadline
2255 iv[3] = 120000
2256 // derived default: the day-journal cliff IS the gauge/verify window
2257 iv[4] = CH_JWIN
2258 // derived default: AMBER from four fifths of the cliff (the sizeguard amber-before-red shape)
2259 iv[5] = 1000 * 4 / 5
2260 kcx[0] = 0
2261 var i: i64 = 0
2262 while i < n {
2263 let le: i64 = sj_le(cbuf, i, n)
2264 if cbuf[i] != (35 as u8) {
2265 var v: i64 = ch_bt_kv(cbuf, i, le, "root=" as *u8)
2266 if v >= 0 { off[0] = v }
2267 v = ch_bt_kv(cbuf, i, le, "state=" as *u8)
2268 if v >= 0 { off[1] = v }
2269 v = ch_bt_kv(cbuf, i, le, "spool=" as *u8)
2270 if v >= 0 { off[2] = v }
2271 v = ch_bt_kv(cbuf, i, le, "done=" as *u8)
2272 if v >= 0 { off[3] = v }
2273 v = ch_bt_kv(cbuf, i, le, "journal=" as *u8)
2274 if v >= 0 { off[4] = v }
2275 v = ch_bt_kv(cbuf, i, le, "nas_stage=" as *u8)
2276 if v >= 0 { off[5] = v }
2277 v = ch_bt_kv(cbuf, i, le, "nas_journal=" as *u8)
2278 if v >= 0 { off[6] = v }
2279 v = ch_bt_kv(cbuf, i, le, "wire=" as *u8)
2280 if v >= 0 { off[7] = v }
2281 v = ch_bt_kv(cbuf, i, le, "wire_script=" as *u8)
2282 if v >= 0 { off[8] = v }
2283 v = ch_bt_kv(cbuf, i, le, "cap_write=" as *u8)
2284 if v >= 0 { off[9] = v }
2285 v = ch_bt_kv(cbuf, i, le, "cap_ingest=" as *u8)
2286 if v >= 0 { off[10] = v }
2287 v = ch_bt_kv(cbuf, i, le, "cap_read=" as *u8)
2288 if v >= 0 { off[11] = v }
2289 v = ch_bt_kv(cbuf, i, le, "hash_elf=" as *u8)
2290 if v >= 0 { off[12] = v }
2291 v = ch_bt_kv(cbuf, i, le, "push=" as *u8)
2292 if v >= 0 { iv[0] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2293 v = ch_bt_kv(cbuf, i, le, "push_max=" as *u8)
2294 if v >= 0 { iv[1] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2295 v = ch_bt_kv(cbuf, i, le, "piece_raw=" as *u8)
2296 if v >= 0 { iv[2] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2297 v = ch_bt_kv(cbuf, i, le, "wire_timeout_ms=" as *u8)
2298 if v >= 0 { iv[3] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2299 v = ch_bt_kv(cbuf, i, le, "jrnl_cliff=" as *u8)
2300 if v >= 0 { iv[4] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2301 v = ch_bt_kv(cbuf, i, le, "jrnl_warn_permil=" as *u8)
2302 if v >= 0 { iv[5] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2303 v = ch_bt_kv(cbuf, i, le, "known_type=" as *u8)
2304 if v >= 0 { if kcx[0] < CH_MK_MAX { kt[kcx[0] * 2] = v; kt[kcx[0] * 2 + 1] = 0; kcx[0] = kcx[0] + 1 } }
2305 }
2306 i = le + 1
2307 }
2308 var miss: i64 = 0 - 1
2309 if off[0] < 0 { miss = 0 }
2310 if off[1] < 0 { if miss < 0 { miss = 1 } }
2311 if off[2] < 0 { if miss < 0 { miss = 2 } }
2312 if off[3] < 0 { if miss < 0 { miss = 3 } }
2313 if off[4] < 0 { if miss < 0 { miss = 4 } }
2314 if miss >= 0 {
2315 let eb: *u8 = sys_mmap(256)
2316 var o2: i64 = sj_cat(eb, 0, "CHBEAT CONF-MISSING key=" as *u8)
2317 if miss == 0 { o2 = sj_cat(eb, o2, "root" as *u8) }
2318 if miss == 1 { o2 = sj_cat(eb, o2, "state" as *u8) }
2319 if miss == 2 { o2 = sj_cat(eb, o2, "spool" as *u8) }
2320 if miss == 3 { o2 = sj_cat(eb, o2, "done" as *u8) }
2321 if miss == 4 { o2 = sj_cat(eb, o2, "journal" as *u8) }
2322 eb[o2] = 10 as u8
2323 sys_write(1, eb, o2 + 1)
2324 return 0 - 2
2325 }
2326 return 0
2327}
2328// head-type census + tool_use marks over the freshly harvested window [from,to) of ONE transcript.
2329// ANCHORED at line position 0 -- a nested "type" deeper in the line can never be read as the record
2330// type (measured 2026-08-20: attachment lines carry a NESTED type FIRST, so a first-occurrence scan
2331// answers the wrong field). Lines whose type is not the first key count HEADLESS -- named for what was
2332// measured; the head census watches the head-shaped population only, and that imprecision is declared
2333// here. Unknown head-types intern into their own worklist (ua/uo/ucx), never folded into a known one.
2334// ccx: 0=lines 1=tooluse_lines 2=tooluse_marks 3=head_known 4=head_unknown 5=headless
2335// 6=census_read_fail 7=type_table_overflow(FLOOR flag) ucx: 0=distinct_unknown 1=ua_cursor
2336func ch_bt_census(tpath: *u8, from: i64, to: i64, cbuf: *u8, kt: *i64, kn: i64, ua: *u8, uo: *i64, ucx: *i64, ccx: *i64) -> i64 {
2337 let nn: *i64 = sys_mmap(16) as *i64
2338 let buf: *u8 = sys_map_file(tpath, nn)
2339 let n: i64 = nn[0]
2340 if n <= 0 { ccx[6] = ccx[6] + 1; return 0 - 1 }
2341 var lim: i64 = to
2342 if lim > n { lim = n }
2343 let tul: *u8 = "\"type\":\"tool_use\"" as *u8
2344 let tuln: i64 = sj_vlen(tul)
2345 let hl: *u8 = "{\"type\":\"" as *u8
2346 let hln: i64 = sj_vlen(hl)
2347 var i: i64 = from
2348 if i < 0 { i = 0 }
2349 while i < lim {
2350 let le: i64 = sj_le(buf, i, lim)
2351 if le > i {
2352 ccx[0] = ccx[0] + 1
2353 var marks: i64 = 0
2354 var j: i64 = i
2355 var go: i64 = 1
2356 while go == 1 {
2357 let tu: i64 = ch_find_from(buf, j, le, tul)
2358 if tu < 0 { go = 0 } else { marks = marks + 1; j = tu + tuln }
2359 }
2360 if marks > 0 { ccx[1] = ccx[1] + 1; ccx[2] = ccx[2] + marks }
2361 if ch_starts(buf, i, le, hl) == 1 {
2362 let vs: i64 = i + hln
2363 var ve: i64 = vs
2364 var g2: i64 = 1
2365 while g2 == 1 {
2366 if ve >= le { g2 = 0 } else { if buf[ve] == (34 as u8) { g2 = 0 } else { ve = ve + 1 } }
2367 }
2368 var hit: i64 = 0
2369 var k: i64 = 0
2370 while k < kn {
2371 let lit: *u8 = ((cbuf as i64) + kt[k * 2]) as *u8
2372 if sj_lit_eq(buf, vs, ve, lit) == 1 { kt[k * 2 + 1] = kt[k * 2 + 1] + 1; hit = 1; k = kn } else { k = k + 1 }
2373 }
2374 if hit == 1 { ccx[3] = ccx[3] + 1 } else {
2375 ccx[4] = ccx[4] + 1
2376 var f: i64 = 0 - 1
2377 var k2: i64 = 0
2378 while k2 < ucx[0] {
2379 let ul: *u8 = ((ua as i64) + uo[k2 * 2]) as *u8
2380 if sj_lit_eq(buf, vs, ve, ul) == 1 { f = k2; k2 = ucx[0] } else { k2 = k2 + 1 }
2381 }
2382 if f >= 0 { uo[f * 2 + 1] = uo[f * 2 + 1] + 1 } else {
2383 if ucx[0] < CH_BT_TYPEMAX {
2384 var vl2: i64 = ve - vs
2385 if vl2 > CH_NAME_MAX { vl2 = CH_NAME_MAX }
2386 uo[ucx[0] * 2] = ucx[1]
2387 uo[ucx[0] * 2 + 1] = 1
2388 var c2: i64 = 0
2389 while c2 < vl2 { ua[ucx[1] + c2] = buf[vs + c2]; c2 = c2 + 1 }
2390 ua[ucx[1] + vl2] = 0 as u8
2391 ucx[1] = ucx[1] + vl2 + 1
2392 ucx[0] = ucx[0] + 1
2393 } else { ccx[7] = 1 }
2394 }
2395 }
2396 } else { ccx[5] = ccx[5] + 1 }
2397 }
2398 i = le + 1
2399 }
2400 sys_munmap(buf, n)
2401 return 0
2402}
2403func ch_bt_path2(out: *u8, a: *u8, b: *u8) -> i64 {
2404 var o: i64 = sj_cat(out, 0, a)
2405 out[o] = 47 as u8
2406 o = o + 1
2407 o = sj_cat(out, o, b)
2408 out[o] = 0 as u8
2409 return o
2410}
2411func ch_bt_base(path: *u8) -> *u8 {
2412 var bs: i64 = 0
2413 var i: i64 = 0
2414 while path[i] != (0 as u8) { if path[i] == (47 as u8) { bs = i + 1 } i = i + 1 }
2415 return ((path as i64) + bs) as *u8
2416}
2417func ch_bt_stem(path: *u8, out: *u8) -> i64 {
2418 let b: *u8 = ch_bt_base(path)
2419 let n: i64 = sj_vlen(b)
2420 var e: i64 = n - sj_vlen(".jsonl" as *u8)
2421 if e < 0 { e = n }
2422 var o: i64 = 0
2423 while o < e { out[o] = b[o]; o = o + 1 }
2424 out[o] = 0 as u8
2425 return o
2426}
2427func ch_bt_hwmpath(state: *u8, rel: *u8, out: *u8) -> i64 {
2428 var o: i64 = sj_cat(out, 0, state)
2429 out[o] = 47 as u8
2430 o = o + 1
2431 var i: i64 = 0
2432 while rel[i] != (0 as u8) {
2433 var c: u8 = rel[i]
2434 if c == (47 as u8) { c = 95 as u8 }
2435 if c == (92 as u8) { c = 95 as u8 }
2436 out[o] = c
2437 o = o + 1
2438 i = i + 1
2439 }
2440 o = sj_cat(out, o, ".hwm" as *u8)
2441 out[o] = 0 as u8
2442 return o
2443}
2444// frame count of a piece (pieces are written by ch_bt_split, every line newline-terminated)
2445func ch_bt_lines(path: *u8) -> i64 {
2446 let nn: *i64 = sys_mmap(16) as *i64
2447 let buf: *u8 = sys_map_file(path, nn)
2448 let n: i64 = nn[0]
2449 if n <= 0 { return 0 }
2450 var c: i64 = 0
2451 var i: i64 = 0
2452 while i < n {
2453 let le: i64 = sj_le(buf, i, n)
2454 if le > i { c = c + 1 }
2455 i = le + 1
2456 }
2457 sys_munmap(buf, n)
2458 return c
2459}
2460// first integer right after <key> in b[0..n) -> value, or -1 when key or digits absent
2461func ch_bt_int_after(b: *u8, n: i64, key: *u8) -> i64 {
2462 let p: i64 = ch_find_from(b, 0, n, key)
2463 if p < 0 { return 0 - 1 }
2464 var i: i64 = p + sj_vlen(key)
2465 var v: i64 = 0
2466 var any: i64 = 0
2467 var go: i64 = 1
2468 while go == 1 {
2469 if i >= n { go = 0 } else {
2470 let c: i64 = b[i] as i64
2471 var dig: i64 = 0
2472 if c >= 48 { if c <= 57 { dig = 1 } }
2473 if dig == 1 { v = v * 10 + (c - 48); any = 1; i = i + 1 } else { go = 0 }
2474 }
2475 }
2476 if any == 0 { return 0 - 1 }
2477 return v
2478}
2479// sha256 hex right after "sha256":" -> out (65 B incl NUL); 1 ok, 0 absent/short/non-hex
2480func ch_bt_parse_sha(b: *u8, n: i64, out: *u8) -> i64 {
2481 let key: *u8 = "\"sha256\":\"" as *u8
2482 let p: i64 = ch_find_from(b, 0, n, key)
2483 if p < 0 { return 0 }
2484 let s: i64 = p + sj_vlen(key)
2485 var i: i64 = 0
2486 while i < 64 {
2487 if s + i >= n { return 0 }
2488 let c: i64 = b[s + i] as i64
2489 var okc: i64 = 0
2490 if c >= 48 { if c <= 57 { okc = 1 } }
2491 if c >= 97 { if c <= 102 { okc = 1 } }
2492 if okc == 0 { return 0 }
2493 out[i] = b[s + i]
2494 i = i + 1
2495 }
2496 out[64] = 0 as u8
2497 return 1
2498}
2499// forked call through the MCP wire: <wire> <script> <tool> <cap> [a1..a4]; captures stdout+stderr.
2500// Returns the child's exit code (127 = wire absent). The wire is TRANSPORT ONLY -- every decision
2501// over its output happens in this organ (shell-is-break-glass discipline; the wire is the sanctioned
2502// MCP client, nxmcp.py, forked with a clean argv, no shell interpretation anywhere).
2503func ch_bt_wire(wire: *u8, script: *u8, tool: *u8, cap: *u8, a1: *u8, a2: *u8, a3: *u8, a4: *u8, tmo: i64, cout: *u8, colen: *i64) -> i64 {
2504 let av: *i64 = sys_mmap(96) as *i64
2505 av[0] = wire as i64
2506 av[1] = script as i64
2507 av[2] = tool as i64
2508 av[3] = cap as i64
2509 var k: i64 = 4
2510 if (a1 as i64) != 0 { av[k] = a1 as i64; k = k + 1 }
2511 if (a2 as i64) != 0 { av[k] = a2 as i64; k = k + 1 }
2512 if (a3 as i64) != 0 { av[k] = a3 as i64; k = k + 1 }
2513 if (a4 as i64) != 0 { av[k] = a4 as i64; k = k + 1 }
2514 av[k] = 0
2515 return tr_run_capture_to(wire, av, cout, CH_OUT - 8, colen, tmo)
2516}
2517func ch_bt_flushp(spool: *u8, day: *u8, stamp: i64, seq: i64, cell: *u8, clen: i64) -> i64 {
2518 let pp: *u8 = sys_mmap(CH_BT_PATHMAX)
2519 var o: i64 = sj_cat(pp, 0, spool)
2520 pp[o] = 47 as u8
2521 o = o + 1
2522 o = sj_cat(pp, o, "cb" as *u8)
2523 o = sj_cat(pp, o, day)
2524 pp[o] = 95 as u8
2525 o = o + 1
2526 o = sj_catn(pp, o, stamp)
2527 pp[o] = 95 as u8
2528 o = o + 1
2529 o = sj_catn(pp, o, seq)
2530 o = sj_cat(pp, o, ".frames" as *u8)
2531 pp[o] = 0 as u8
2532 let fd: i64 = sys_openat_wr(pp, CH_MODE_644)
2533 if fd < 0 { return 0 - 3 }
2534 sys_write(fd, cell, clen)
2535 sys_close(fd)
2536 return 0
2537}
2538// split a raw delta-frames file into ts-day pieces, each under piece_raw bytes at a FRAME boundary.
2539// Piece names cb<day>_<stamp>_<seq>.frames are DETERMINISTIC from the raw file's stamp, so a re-split
2540// after a crash rewrites identical names and content and every downstream stage stays idempotent by
2541// marker. dcx: 0=pieces 1=bytes 2=days 3=tszero_frames 4=frames
2542// returns 0, -2 day-table overflow (REFUSED loudly), -3 piece write fail
2543func ch_bt_split(rawpath: *u8, spool: *u8, stamp: i64, piece_raw: i64, dcx: *i64) -> i64 {
2544 dcx[0] = 0
2545 dcx[1] = 0
2546 dcx[2] = 0
2547 dcx[3] = 0
2548 dcx[4] = 0
2549 let nn: *i64 = sys_mmap(16) as *i64
2550 let buf: *u8 = sys_map_file(rawpath, nn)
2551 let n: i64 = nn[0]
2552 if n <= 0 { return 0 }
2553 let cellsz: i64 = piece_raw + CH_LINE
2554 let dayn: *u8 = sys_mmap(CH_BT_DAYMAX * CH_BT_DAYCELL)
2555 let dbuf: *u8 = sys_mmap(CH_BT_DAYMAX * cellsz)
2556 let dlen: *i64 = sys_mmap(8 * CH_BT_DAYMAX) as *i64
2557 let dseq: *i64 = sys_mmap(8 * CH_BT_DAYMAX) as *i64
2558 let sp: *i64 = sys_mmap(16) as *i64
2559 let dstr: *u8 = sys_mmap(CH_BT_DAYCELL)
2560 var nd: i64 = 0
2561 var i: i64 = 0
2562 while i < n {
2563 let le: i64 = sj_le(buf, i, n)
2564 if le > i {
2565 var ts: i64 = 0
2566 if sj_col(buf, i, le, 0, sp) == 1 { if ch_digits(buf, sp[0], sp[1]) == 1 { ts = sj_atoi_span(buf, sp[0], sp[1]) } }
2567 ch_bt_day(ts, dstr)
2568 if ts <= 0 { dcx[3] = dcx[3] + 1 }
2569 var di: i64 = 0 - 1
2570 var k: i64 = 0
2571 while k < nd {
2572 if ch_bt_zeq(((dayn as i64) + k * CH_BT_DAYCELL) as *u8, dstr) == 1 { di = k; k = nd } else { k = k + 1 }
2573 }
2574 if di < 0 {
2575 if nd >= CH_BT_DAYMAX { sys_munmap(buf, n); return 0 - 2 }
2576 var c3: i64 = 0
2577 var g3: i64 = 1
2578 while g3 == 1 {
2579 let ch: u8 = dstr[c3]
2580 dayn[nd * CH_BT_DAYCELL + c3] = ch
2581 if ch == (0 as u8) { g3 = 0 } else { c3 = c3 + 1 }
2582 }
2583 dlen[nd] = 0
2584 dseq[nd] = 0
2585 di = nd
2586 nd = nd + 1
2587 }
2588 let ll2: i64 = le - i
2589 if dlen[di] + ll2 + 1 > piece_raw {
2590 if dlen[di] > 0 {
2591 let fr: i64 = ch_bt_flushp(spool, ((dayn as i64) + di * CH_BT_DAYCELL) as *u8, stamp, dseq[di], ((dbuf as i64) + di * cellsz) as *u8, dlen[di])
2592 if fr != 0 { sys_munmap(buf, n); return fr }
2593 dcx[0] = dcx[0] + 1
2594 dseq[di] = dseq[di] + 1
2595 dlen[di] = 0
2596 }
2597 }
2598 let cell: *u8 = ((dbuf as i64) + di * cellsz) as *u8
2599 var c4: i64 = 0
2600 while c4 < ll2 { cell[dlen[di] + c4] = buf[i + c4]; c4 = c4 + 1 }
2601 cell[dlen[di] + ll2] = 10 as u8
2602 dlen[di] = dlen[di] + ll2 + 1
2603 dcx[1] = dcx[1] + ll2 + 1
2604 dcx[4] = dcx[4] + 1
2605 }
2606 i = le + 1
2607 }
2608 var k5: i64 = 0
2609 while k5 < nd {
2610 if dlen[k5] > 0 {
2611 let fr2: i64 = ch_bt_flushp(spool, ((dayn as i64) + k5 * CH_BT_DAYCELL) as *u8, stamp, dseq[k5], ((dbuf as i64) + k5 * cellsz) as *u8, dlen[k5])
2612 if fr2 != 0 { sys_munmap(buf, n); return fr2 }
2613 dcx[0] = dcx[0] + 1
2614 }
2615 k5 = k5 + 1
2616 }
2617 dcx[2] = nd
2618 sys_munmap(buf, n)
2619 return 0
2620}
2621// copy the day span out of a piece basename cb<day>_... into db (NUL-terminated)
2622func ch_bt_pieceday(pbase: *u8, db: *u8) -> i64 {
2623 var di: i64 = sj_vlen("cb" as *u8)
2624 var o: i64 = 0
2625 var g: i64 = 1
2626 while g == 1 {
2627 let c: u8 = pbase[di]
2628 if c == (95 as u8) { g = 0 } else {
2629 if c == (0 as u8) { g = 0 } else {
2630 if o < CH_BT_DAYCELL - 2 { db[o] = c; o = o + 1 }
2631 di = di + 1
2632 }
2633 }
2634 }
2635 db[o] = 0 as u8
2636 return o
2637}
2638// WHICH STAGE OWNS A FAILED PUSH? Three causes with three DIFFERENT remedies, so three names --
2639// never one bucket. Until 2026-08-20 an upload that never landed was journalled as "fail-verify",
2640// blaming the verifier for the writer's failure; it cost a real investigation (the artifact was simply
2641// ABSENT and the journal pointed at the wrong leg).
2642// * A MESSAGE THAT NAMES THE WRONG STAGE COSTS THE READER THE INVESTIGATION IT WAS WRITTEN TO SAVE
2643// THEM, and two causes with opposite remedies must never share one counter.
2644// This is a TEXT read, not an rc read, and that is measured, not assumed: nx_fs_write returns rc=0
2645// EVEN WHEN IT REFUSES (`REFUSED would-clobber ... (file unchanged)`), so a guard branching on rc
2646// would never have fired. A would-clobber refusal is ALSO not a failure here -- it is the idempotent
2647// re-push of a piece that already landed, and the hash verify is what adjudicates it, which is why
2648// this function decides from the VERIFY's findings and uses the write's own line only to attribute
2649// the ABSENT case. Pure and total so the gate can walk the whole truth table.
2650// wrote_ok the upload leg printed its own OK line
2651// okr the remote artifact could be hashed at all (0 = nothing is there)
2652// same remote bytes == local bytes
2653func ch_bt_pushreason(wrote_ok: i64, okr: i64, same: i64) -> *u8 {
2654 if okr == 0 {
2655 if wrote_ok == 1 { return "fail-verify-absent" as *u8 }
2656 return "fail-write" as *u8
2657 }
2658 if same == 0 { return "fail-verify-mismatch" as *u8 }
2659 return "ok" as *u8
2660}
2661// push one piece: local-hash -> upload -> remote-hash-verify -> NAS ingest -> journal-fill announce.
2662// Returns 0 = NAS leg confirmed (piece may leave the spool), 1 = left spooled (stage named in the
2663// push journal). Every stage is idempotent: re-upload of a landed piece is refused-then-verified
2664// equal by hash, re-ingest answers ALREADY. Wrong only toward doing nothing.
2665func ch_bt_push1(ppath: *u8, cbuf: *u8, off: *i64, iv: *i64, pjr: *u8, bcx: *i64) -> i64 {
2666 let pbase: *u8 = ch_bt_base(ppath)
2667 let cout: *u8 = sys_mmap(CH_OUT)
2668 let colen: *i64 = sys_mmap(16) as *i64
2669 let lsha: *u8 = sys_mmap(80)
2670 let rsha: *u8 = sys_mmap(80)
2671 let napath: *u8 = sys_mmap(CH_BT_PATHMAX)
2672 let njpath: *u8 = sys_mmap(CH_BT_PATHMAX)
2673 let ob: *u8 = sys_mmap(CH_LINE)
2674 let wire: *u8 = ((cbuf as i64) + off[7]) as *u8
2675 let script: *u8 = ((cbuf as i64) + off[8]) as *u8
2676 let capw: *u8 = ((cbuf as i64) + off[9]) as *u8
2677 let capi: *u8 = ((cbuf as i64) + off[10]) as *u8
2678 let capr: *u8 = ((cbuf as i64) + off[11]) as *u8
2679 let helf: *u8 = ((cbuf as i64) + off[12]) as *u8
2680 let tmo: i64 = iv[3]
2681 let plines: i64 = ch_bt_lines(ppath)
2682 let db2: *u8 = sys_mmap(CH_BT_DAYCELL)
2683 ch_bt_pieceday(pbase, db2)
2684 var o3: i64 = sj_cat(napath, 0, ((cbuf as i64) + off[5]) as *u8)
2685 napath[o3] = 47 as u8
2686 o3 = o3 + 1
2687 o3 = sj_cat(napath, o3, pbase)
2688 napath[o3] = 0 as u8
2689 var o4: i64 = sj_cat(njpath, 0, ((cbuf as i64) + off[6]) as *u8)
2690 njpath[o4] = 47 as u8
2691 o4 = o4 + 1
2692 o4 = sj_cat(njpath, o4, "chbeat_" as *u8)
2693 o4 = sj_cat(njpath, o4, db2)
2694 o4 = sj_cat(njpath, o4, ".jrnl" as *u8)
2695 njpath[o4] = 0 as u8
2696 // 1) local sha -- ONE ruler, nx_filehash, forked on both sides
2697 let hav: *i64 = sys_mmap(32) as *i64
2698 hav[0] = helf as i64
2699 hav[1] = ppath as i64
2700 hav[2] = 0
2701 let hrc: i64 = tr_run_capture_to(helf, hav, cout, CH_OUT - 8, colen, tmo)
2702 var okl: i64 = 0
2703 if hrc == 0 { okl = ch_bt_parse_sha(cout, colen[0], lsha) }
2704 if okl == 0 { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "fail-localhash" as *u8, ppath); return 1 }
2705 // 2) upload (@@FILE: substitution puts the piece CONTENT into the write argv); a refusal
2706 // (already-landed / CAS) is decided by the hash verify below -- only a DEAD wire is fatal here
2707 let atf: *u8 = sys_mmap(CH_BT_PATHMAX)
2708 var o5: i64 = sj_cat(atf, 0, "@@FILE:" as *u8)
2709 o5 = sj_cat(atf, o5, ppath)
2710 atf[o5] = 0 as u8
2711 let wrc: i64 = ch_bt_wire(wire, script, "nx_fs_write" as *u8, capw, "write" as *u8, napath, atf, 0 as *u8, tmo, cout, colen)
2712 if wrc == 127 { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "fail-wire-absent" as *u8, ppath); return 1 }
2713 // the write's OWN verdict, read BEFORE the verify overwrites the shared capture buffer
2714 let wrote_ok: i64 = ch_find(cout, colen[0], "NX-FS-WRITE OK" as *u8)
2715 // 3) remote hash verify -- the artifact, never the receipt
2716 let vrc: i64 = ch_bt_wire(wire, script, "nx_filehash" as *u8, capr, napath, 0 as *u8, 0 as *u8, 0 as *u8, tmo, cout, colen)
2717 var okr: i64 = 0
2718 if vrc == 0 { okr = ch_bt_parse_sha(cout, colen[0], rsha) }
2719 var same: i64 = 0
2720 if okr == 1 { same = ch_bt_zeq(lsha, rsha) }
2721 if same == 0 { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, ch_bt_pushreason(wrote_ok, okr, same), napath); return 1 }
2722 // 4) NAS ingest (ch_ingest server-side: validated, marker-idempotent)
2723 let irc: i64 = ch_bt_wire(wire, script, "nx_claude_harvest" as *u8, capi, "ingest" as *u8, napath, njpath, 0 as *u8, tmo, cout, colen)
2724 if irc != 0 { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "fail-ingest-wire" as *u8, njpath); return 1 }
2725 var infr: i64 = 0 - 1
2726 if ch_find(cout, colen[0], "ALREADY-INGESTED" as *u8) == 1 { infr = plines } else { infr = ch_bt_int_after(cout, colen[0], "INGEST OK frames=" as *u8) }
2727 let mal: i64 = ch_bt_int_after(cout, colen[0], " malformed=" as *u8)
2728 if infr != plines { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "fail-reconcile" as *u8, njpath); return 1 }
2729 if mal > 0 { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "fail-malformed" as *u8, njpath); return 1 }
2730 // 5) journal fill announce from the NAS's own size read; an unreadable size is ANNOUNCED, not skipped
2731 let src2: i64 = ch_bt_wire(wire, script, "nx_fs" as *u8, capr, "size" as *u8, njpath, 0 as *u8, 0 as *u8, tmo, cout, colen)
2732 var jb2: i64 = 0 - 1
2733 if src2 == 0 { jb2 = ch_bt_int_after(cout, colen[0], "bytes=" as *u8) }
2734 if jb2 >= 0 {
2735 let fill: i64 = jb2 * 1000 / iv[4]
2736 if fill > bcx[28] { bcx[28] = fill }
2737 var o6: i64 = sj_cat(ob, 0, "CHBEAT JOURNAL day=" as *u8)
2738 o6 = sj_cat(ob, o6, db2)
2739 o6 = sj_cat(ob, o6, " nas_bytes=" as *u8)
2740 o6 = sj_catn(ob, o6, jb2)
2741 o6 = sj_cat(ob, o6, " fill_permil=" as *u8)
2742 o6 = sj_catn(ob, o6, fill)
2743 if fill >= 1000 { o6 = sj_cat(ob, o6, " RED-PAST-CLIFF (gauge window truncates: partition finer than a day)" as *u8) } else {
2744 if fill >= iv[5] { o6 = sj_cat(ob, o6, " AMBER-NEAR-CLIFF" as *u8) }
2745 }
2746 ob[o6] = 10 as u8
2747 sys_write(1, ob, o6 + 1)
2748 } else {
2749 var o7: i64 = sj_cat(ob, 0, "CHBEAT JOURNAL day=" as *u8)
2750 o7 = sj_cat(ob, o7, db2)
2751 o7 = sj_cat(ob, o7, " nas_bytes=UNREAD (size call failed; fill unobserved this beat)" as *u8)
2752 ob[o7] = 10 as u8
2753 sys_write(1, ob, o7 + 1)
2754 }
2755 ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "ok" as *u8, njpath)
2756 bcx[21] = bcx[21] + plines
2757 return 0
2758}
2759// ---------- the beat orchestrator ----------
2760// bcx map (CH_BT_CTRS slots):
2761// 0 files_seen 1 harvested 2 skipped_unchanged 3 errors 4 frames 5 tooluse_marks 6 lines
2762// 7 tooluse_lines 8 head_known 9 head_unknown 10 headless 11 truncated_files 12 pieces_spooled
2763// 13 bytes_staged 14 days_touched 15 tszero_frames 16 push_attempted 17 push_done 18 push_left
2764// 19 spool_remaining 20 local_ingested_frames 21 nas_confirmed_frames 22 local_malformed
2765// 23 census_read_fail 24 walk_dirs 25 walk_direrrs 26 stat_fallbacks 27 partition_ok
2766// 28 worst_journal_fill_permil 29 type_table_overflow 30 raws_recovered
2767func ch_beat(confpath: *u8, bcx: *i64) -> i64 {
2768 var w0: i64 = 0
2769 while w0 < CH_BT_CTRS { bcx[w0] = 0; w0 = w0 + 1 }
2770 let cbuf: *u8 = sys_mmap(CH_CONF_WIN)
2771 let off: *i64 = sys_mmap(128) as *i64
2772 let iv: *i64 = sys_mmap(64) as *i64
2773 let kt: *i64 = sys_mmap(CH_MK_MAX * 16) as *i64
2774 let kcx: *i64 = sys_mmap(16) as *i64
2775 let crc: i64 = ch_bt_conf(confpath, cbuf, off, iv, kt, kcx)
2776 if crc == (0 - 1) { sj_puts("CHBEAT CONF-UNREADABLE (fail closed)\n" as *u8); return 2 }
2777 if crc == (0 - 2) { return 2 }
2778 let root: *u8 = ((cbuf as i64) + off[0]) as *u8
2779 let state: *u8 = ((cbuf as i64) + off[1]) as *u8
2780 let spool: *u8 = ((cbuf as i64) + off[2]) as *u8
2781 let done: *u8 = ((cbuf as i64) + off[3]) as *u8
2782 let jdir: *u8 = ((cbuf as i64) + off[4]) as *u8
2783 sys_mkdir(state, CH_MODE_755)
2784 sys_mkdir(spool, CH_MODE_755)
2785 sys_mkdir(done, CH_MODE_755)
2786 sys_mkdir(jdir, CH_MODE_755)
2787 if iv[0] == 1 {
2788 var pm: i64 = 0 - 1
2789 if off[5] < 0 { pm = 5 }
2790 if off[6] < 0 { if pm < 0 { pm = 6 } }
2791 if off[7] < 0 { if pm < 0 { pm = 7 } }
2792 if off[8] < 0 { if pm < 0 { pm = 8 } }
2793 if off[9] < 0 { if pm < 0 { pm = 9 } }
2794 if off[10] < 0 { if pm < 0 { pm = 10 } }
2795 if off[11] < 0 { if pm < 0 { pm = 11 } }
2796 if off[12] < 0 { if pm < 0 { pm = 12 } }
2797 if pm >= 0 { sj_puts("CHBEAT CONF-MISSING push=1 needs nas_stage nas_journal wire wire_script cap_write cap_ingest cap_read hash_elf (fail closed)\n" as *u8); return 2 }
2798 }
2799 // MICROSECOND stamp: piece and raw names must be unique ACROSS beats -- a second-resolution stamp
2800 // collided two beats in one second, the truncating rewrite replaced a piece, and the ingest marker
2801 // (keyed on the basename) then silently dropped the replaced frames. Caught by teeth T37/T38.
2802 // Re-split of the SAME raw still reproduces identical names (stamp parsed from the raw's own name).
2803 let now: i64 = sys_now_realtime_us()
2804 let ob: *u8 = sys_mmap(CH_OUT)
2805 let p2: *u8 = sys_mmap(CH_BT_PATHMAX)
2806 let dcx: *i64 = sys_mmap(64) as *i64
2807 // ---- recover: split any crashed raw files left in the spool (deterministic piece names) ----
2808 let sar: *u8 = sys_mmap(CH_BT_ARENA)
2809 let sfo: *i64 = sys_mmap(8 * CH_BT_MAXFILES) as *i64
2810 let swcx: *i64 = sys_mmap(64) as *i64
2811 let ns: i64 = ch_bt_walk(spool, ".frames" as *u8, sar, sfo, swcx)
2812 if ns < 0 { sj_puts("CHBEAT REFUSED spool walk overflow\n" as *u8); return 2 }
2813 var si: i64 = 0
2814 while si < ns {
2815 let sp2: *u8 = ((sar as i64) + sfo[si]) as *u8
2816 let sb2: *u8 = ch_bt_base(sp2)
2817 if ch_starts(sb2, 0, sj_vlen(sb2), "raw_" as *u8) == 1 {
2818 let stamp2: i64 = sj_atoi_z(((sb2 as i64) + sj_vlen("raw_" as *u8)) as *u8)
2819 let rr: i64 = ch_bt_split(sp2, spool, stamp2, iv[2], dcx)
2820 if rr == 0 {
2821 bcx[30] = bcx[30] + 1
2822 ch_bt_path2(p2, done, sb2)
2823 sys_renameat(sp2, p2)
2824 }
2825 }
2826 si = si + 1
2827 }
2828 // ---- walk + delta-harvest EVERY transcript (full population, never a sample) ----
2829 let ar: *u8 = sys_mmap(CH_BT_ARENA)
2830 let fo: *i64 = sys_mmap(8 * CH_BT_MAXFILES) as *i64
2831 let wcx: *i64 = sys_mmap(64) as *i64
2832 let nf: i64 = ch_bt_walk(root, ".jsonl" as *u8, ar, fo, wcx)
2833 if nf < 0 { sj_puts("CHBEAT REFUSED transcript walk overflow (raise CH_BT_MAXFILES/CH_BT_ARENA -- never harvest a prefix)\n" as *u8); return 2 }
2834 bcx[0] = nf
2835 bcx[24] = wcx[0]
2836 bcx[25] = wcx[1]
2837 bcx[26] = wcx[2]
2838 let rootl: i64 = sj_vlen(root)
2839 let raw: *u8 = sys_mmap(CH_BT_PATHMAX)
2840 var o7: i64 = sj_cat(raw, 0, spool)
2841 raw[o7] = 47 as u8
2842 o7 = o7 + 1
2843 o7 = sj_cat(raw, o7, "raw_" as *u8)
2844 o7 = sj_catn(raw, o7, now)
2845 o7 = sj_cat(raw, o7, ".frames" as *u8)
2846 raw[o7] = 0 as u8
2847 let sbuf: *u8 = sys_mmap(256)
2848 let kk2: *i64 = sys_mmap(16) as *i64
2849 let hcx: *i64 = sys_mmap(64) as *i64
2850 let ccx: *i64 = sys_mmap(64) as *i64
2851 let ua: *u8 = sys_mmap(CH_BT_TYPEMAX * (CH_NAME_MAX + 8))
2852 let uo: *i64 = sys_mmap(16 * CH_BT_TYPEMAX) as *i64
2853 let ucx: *i64 = sys_mmap(16) as *i64
2854 let hwmp: *u8 = sys_mmap(CH_BT_PATHMAX * 2)
2855 let stem: *u8 = sys_mmap(CH_BT_PATHMAX)
2856 var fi: i64 = 0
2857 while fi < nf {
2858 let tp: *u8 = ((ar as i64) + fo[fi]) as *u8
2859 let rel: *u8 = ((tp as i64) + rootl + 1) as *u8
2860 ch_bt_hwmpath(state, rel, hwmp)
2861 ch_bt_stat(tp, sbuf, kk2)
2862 let hwm0: i64 = ch_hwm_read(hwmp)
2863 var did: i64 = 0
2864 if kk2[1] >= 0 { if kk2[1] == hwm0 { bcx[2] = bcx[2] + 1; did = 1 } }
2865 if did == 0 {
2866 ch_bt_stem(tp, stem)
2867 let dr: i64 = ch_delta(tp, stem, raw, hwmp, hcx)
2868 if dr < 0 {
2869 bcx[3] = bcx[3] + 1
2870 var oe: i64 = sj_cat(ob, 0, "CHBEAT ERR delta rc=" as *u8)
2871 oe = sj_catn(ob, oe, dr)
2872 oe = sj_cat(ob, oe, " file=" as *u8)
2873 oe = sj_cat(ob, oe, tp)
2874 ob[oe] = 10 as u8
2875 sys_write(1, ob, oe + 1)
2876 } else {
2877 bcx[1] = bcx[1] + 1
2878 bcx[4] = bcx[4] + hcx[0]
2879 if hcx[3] == 1 {
2880 bcx[11] = bcx[11] + 1
2881 var ot: i64 = sj_cat(ob, 0, "CHBEAT TRUNC file=" as *u8)
2882 ot = sj_cat(ob, ot, tp)
2883 ob[ot] = 10 as u8
2884 sys_write(1, ob, ot + 1)
2885 }
2886 if hcx[1] > hcx[2] { ch_bt_census(tp, hcx[2], hcx[1], cbuf, kt, kcx[0], ua, uo, ucx, ccx) }
2887 }
2888 }
2889 fi = fi + 1
2890 }
2891 bcx[5] = ccx[2]
2892 bcx[6] = ccx[0]
2893 bcx[7] = ccx[1]
2894 bcx[8] = ccx[3]
2895 bcx[9] = ccx[4]
2896 bcx[10] = ccx[5]
2897 bcx[23] = ccx[6]
2898 bcx[29] = ccx[7]
2899 // ---- split this run's raw into ts-day pieces (the split re-counts what ch_delta emitted:
2900 // two counters over one population = a free audit) ----
2901 let src: i64 = ch_bt_split(raw, spool, now, iv[2], dcx)
2902 if src == (0 - 2) { sj_puts("CHBEAT REFUSED day-table overflow (CH_BT_DAYMAX) -- run the backfill in date batches\n" as *u8); return 2 }
2903 if src == (0 - 3) { sj_puts("CHBEAT ERR piece write failed\n" as *u8); return 1 }
2904 bcx[12] = dcx[0]
2905 bcx[13] = dcx[1]
2906 bcx[14] = dcx[2]
2907 bcx[15] = dcx[3]
2908 var recon_ok: i64 = 1
2909 if dcx[4] != bcx[4] { recon_ok = 0 }
2910 ch_bt_path2(p2, done, ch_bt_base(raw))
2911 sys_renameat(raw, p2)
2912 // ---- ingest every spooled piece locally; push up to push_max to the NAS ----
2913 let par: *u8 = sys_mmap(CH_BT_ARENA)
2914 let pfo: *i64 = sys_mmap(8 * CH_BT_MAXFILES) as *i64
2915 let pwcx: *i64 = sys_mmap(64) as *i64
2916 let np: i64 = ch_bt_walk(spool, ".frames" as *u8, par, pfo, pwcx)
2917 if np < 0 { sj_puts("CHBEAT REFUSED spool walk overflow\n" as *u8); return 2 }
2918 let mcx: *i64 = sys_mmap(16) as *i64
2919 let ljp: *u8 = sys_mmap(CH_BT_PATHMAX)
2920 let db3: *u8 = sys_mmap(CH_BT_DAYCELL)
2921 let pjr: *u8 = sys_mmap(CH_BT_PATHMAX)
2922 ch_bt_path2(pjr, state, "push.jrnl" as *u8)
2923 var pi: i64 = 0
2924 while pi < np {
2925 let pp: *u8 = ((par as i64) + pfo[pi]) as *u8
2926 let pb: *u8 = ch_bt_base(pp)
2927 if ch_starts(pb, 0, sj_vlen(pb), "cb" as *u8) == 1 {
2928 ch_bt_pieceday(pb, db3)
2929 var o9: i64 = sj_cat(ljp, 0, jdir)
2930 ljp[o9] = 47 as u8
2931 o9 = o9 + 1
2932 o9 = sj_cat(ljp, o9, "chbeat_" as *u8)
2933 o9 = sj_cat(ljp, o9, db3)
2934 o9 = sj_cat(ljp, o9, ".jrnl" as *u8)
2935 ljp[o9] = 0 as u8
2936 let lr: i64 = ch_ingest(pp, ljp, mcx)
2937 if lr >= 0 { bcx[20] = bcx[20] + lr; bcx[22] = bcx[22] + mcx[0] }
2938 var moved: i64 = 0
2939 if iv[0] == 1 {
2940 if bcx[16] < iv[1] {
2941 bcx[16] = bcx[16] + 1
2942 let prc: i64 = ch_bt_push1(pp, cbuf, off, iv, pjr, bcx)
2943 if prc == 0 {
2944 bcx[17] = bcx[17] + 1
2945 ch_bt_path2(p2, done, pb)
2946 sys_renameat(pp, p2)
2947 moved = 1
2948 } else { bcx[18] = bcx[18] + 1 }
2949 }
2950 }
2951 if moved == 0 { bcx[19] = bcx[19] + 1 }
2952 }
2953 pi = pi + 1
2954 }
2955 // ---- local journal fill (every day journal present, from its own stat; budget rides the conf) ----
2956 let jar: *u8 = sys_mmap(CH_BT_ARENA)
2957 let jfo: *i64 = sys_mmap(8 * CH_BT_MAXFILES) as *i64
2958 let jwcx: *i64 = sys_mmap(64) as *i64
2959 let nj: i64 = ch_bt_walk(jdir, ".jrnl" as *u8, jar, jfo, jwcx)
2960 var ji: i64 = 0
2961 while ji < nj {
2962 let jp2: *u8 = ((jar as i64) + jfo[ji]) as *u8
2963 ch_bt_stat(jp2, sbuf, kk2)
2964 if kk2[1] >= 0 {
2965 let fill2: i64 = kk2[1] * 1000 / iv[4]
2966 if fill2 > bcx[28] { bcx[28] = fill2 }
2967 if fill2 >= iv[5] {
2968 var oa: i64 = sj_cat(ob, 0, "CHBEAT JOURNAL local=" as *u8)
2969 oa = sj_cat(ob, oa, jp2)
2970 oa = sj_cat(ob, oa, " bytes=" as *u8)
2971 oa = sj_catn(ob, oa, kk2[1])
2972 oa = sj_cat(ob, oa, " fill_permil=" as *u8)
2973 oa = sj_catn(ob, oa, fill2)
2974 if fill2 >= 1000 { oa = sj_cat(ob, oa, " RED-PAST-CLIFF (gauge window truncates: partition finer than a day)" as *u8) } else { oa = sj_cat(ob, oa, " AMBER-NEAR-CLIFF" as *u8) }
2975 ob[oa] = 10 as u8
2976 sys_write(1, ob, oa + 1)
2977 }
2978 }
2979 ji = ji + 1
2980 }
2981 // ---- worklists: the reason travels with the count ----
2982 var ui: i64 = 0
2983 while ui < ucx[0] {
2984 var ou: i64 = sj_cat(ob, 0, "CHBEAT UNKNOWN-TYPE name=" as *u8)
2985 ou = sj_cat(ob, ou, ((ua as i64) + uo[ui * 2]) as *u8)
2986 ou = sj_cat(ob, ou, " count=" as *u8)
2987 ou = sj_catn(ob, ou, uo[ui * 2 + 1])
2988 ob[ou] = 10 as u8
2989 sys_write(1, ob, ou + 1)
2990 ui = ui + 1
2991 }
2992 if bcx[29] == 1 { sj_puts("CHBEAT UNKNOWN-TYPE table full -- the distinct list above is a FLOOR, not a total\n" as *u8) }
2993 // ---- partitions: print the sums, not just a verdict ----
2994 var pok: i64 = 1
2995 if bcx[0] != bcx[1] + bcx[2] + bcx[3] { pok = 0 }
2996 if bcx[5] < bcx[4] { pok = 0 }
2997 if bcx[6] != bcx[8] + bcx[9] + bcx[10] { pok = 0 }
2998 if recon_ok == 0 { pok = 0 }
2999 bcx[27] = pok
3000 var op: i64 = sj_cat(ob, 0, "CHBEAT files seen=" as *u8)
3001 op = sj_catn(ob, op, bcx[0])
3002 op = sj_cat(ob, op, " = harvested=" as *u8)
3003 op = sj_catn(ob, op, bcx[1])
3004 op = sj_cat(ob, op, " + skipped_unchanged=" as *u8)
3005 op = sj_catn(ob, op, bcx[2])
3006 op = sj_cat(ob, op, " + errors=" as *u8)
3007 op = sj_catn(ob, op, bcx[3])
3008 op = sj_cat(ob, op, " (dirs=" as *u8)
3009 op = sj_catn(ob, op, bcx[24])
3010 op = sj_cat(ob, op, " direrrs=" as *u8)
3011 op = sj_catn(ob, op, bcx[25])
3012 op = sj_cat(ob, op, " statfb=" as *u8)
3013 op = sj_catn(ob, op, bcx[26])
3014 op = sj_cat(ob, op, ")" as *u8)
3015 ob[op] = 10 as u8
3016 sys_write(1, ob, op + 1)
3017 op = sj_cat(ob, 0, "CHBEAT frames harvested=" as *u8)
3018 op = sj_catn(ob, op, bcx[4])
3019 op = sj_cat(ob, op, " split_recount=" as *u8)
3020 op = sj_catn(ob, op, dcx[4])
3021 op = sj_cat(ob, op, " tooluse_marks=" as *u8)
3022 op = sj_catn(ob, op, bcx[5])
3023 op = sj_cat(ob, op, " unnamed_tooluse=" as *u8)
3024 op = sj_catn(ob, op, bcx[5] - bcx[4])
3025 op = sj_cat(ob, op, " tszero=" as *u8)
3026 op = sj_catn(ob, op, bcx[15])
3027 op = sj_cat(ob, op, " truncated_files=" as *u8)
3028 op = sj_catn(ob, op, bcx[11])
3029 ob[op] = 10 as u8
3030 sys_write(1, ob, op + 1)
3031 op = sj_cat(ob, 0, "CHBEAT lines=" as *u8)
3032 op = sj_catn(ob, op, bcx[6])
3033 op = sj_cat(ob, op, " = head_known=" as *u8)
3034 op = sj_catn(ob, op, bcx[8])
3035 op = sj_cat(ob, op, " + head_unknown=" as *u8)
3036 op = sj_catn(ob, op, bcx[9])
3037 op = sj_cat(ob, op, " + headless=" as *u8)
3038 op = sj_catn(ob, op, bcx[10])
3039 op = sj_cat(ob, op, " (tooluse_lines=" as *u8)
3040 op = sj_catn(ob, op, bcx[7])
3041 op = sj_cat(ob, op, " census_read_fail=" as *u8)
3042 op = sj_catn(ob, op, bcx[23])
3043 op = sj_cat(ob, op, ")" as *u8)
3044 ob[op] = 10 as u8
3045 sys_write(1, ob, op + 1)
3046 op = sj_cat(ob, 0, "CHBEAT staged pieces=" as *u8)
3047 op = sj_catn(ob, op, bcx[12])
3048 op = sj_cat(ob, op, " bytes=" as *u8)
3049 op = sj_catn(ob, op, bcx[13])
3050 op = sj_cat(ob, op, " days=" as *u8)
3051 op = sj_catn(ob, op, bcx[14])
3052 op = sj_cat(ob, op, " raws_recovered=" as *u8)
3053 op = sj_catn(ob, op, bcx[30])
3054 op = sj_cat(ob, op, " local_ingested_frames=" as *u8)
3055 op = sj_catn(ob, op, bcx[20])
3056 op = sj_cat(ob, op, " local_malformed=" as *u8)
3057 op = sj_catn(ob, op, bcx[22])
3058 ob[op] = 10 as u8
3059 sys_write(1, ob, op + 1)
3060 op = sj_cat(ob, 0, "CHBEAT push attempted=" as *u8)
3061 op = sj_catn(ob, op, bcx[16])
3062 op = sj_cat(ob, op, " done=" as *u8)
3063 op = sj_catn(ob, op, bcx[17])
3064 op = sj_cat(ob, op, " left=" as *u8)
3065 op = sj_catn(ob, op, bcx[18])
3066 op = sj_cat(ob, op, " nas_confirmed_frames=" as *u8)
3067 op = sj_catn(ob, op, bcx[21])
3068 op = sj_cat(ob, op, " spool_remaining=" as *u8)
3069 op = sj_catn(ob, op, bcx[19])
3070 if iv[0] == 0 { op = sj_cat(ob, op, " (push=0 staging mode declared)" as *u8) }
3071 ob[op] = 10 as u8
3072 sys_write(1, ob, op + 1)
3073 // LAST LINE (positional readers). A failed push is a PARTIAL beat, never an OK one --
3074 // the pieces are safe in the spool, but the NAS record is behind and the verdict says so.
3075 var ov: i64 = 0
3076 if pok == 1 { if bcx[3] == 0 { if bcx[18] == 0 { ov = 1 } } }
3077 var ol: i64 = 0
3078 if ov == 1 { ol = sj_cat(ob, 0, "CHBEAT OK" as *u8) } else { ol = sj_cat(ob, 0, "CHBEAT PARTIAL" as *u8) }
3079 ol = sj_cat(ob, ol, " files=" as *u8)
3080 ol = sj_catn(ob, ol, bcx[0])
3081 ol = sj_cat(ob, ol, " frames=" as *u8)
3082 ol = sj_catn(ob, ol, bcx[4])
3083 ol = sj_cat(ob, ol, " pieces=" as *u8)
3084 ol = sj_catn(ob, ol, bcx[12])
3085 ol = sj_cat(ob, ol, " pushed=" as *u8)
3086 ol = sj_catn(ob, ol, bcx[17])
3087 ol = sj_cat(ob, ol, " spool=" as *u8)
3088 ol = sj_catn(ob, ol, bcx[19])
3089 ol = sj_cat(ob, ol, " worst_fill_permil=" as *u8)
3090 ol = sj_catn(ob, ol, bcx[28])
3091 ob[ol] = 10 as u8
3092 sys_write(1, ob, ol + 1)
3093 if ov == 1 { return 0 }
3094 return 1
3095}
3096
3097// ---------- CE1 leg 2: ce_author_health -- seat-written NishiLang joined to its complexity (2026-09-05) ----------
3098// Frames carry `path=<p>` for writes since ch_frame_note landed. Every UNIQUE .nx path under the tree prefix that a seat
3099// session wrote is scanned ONCE with the complexity ruler (mc_scan_file -- the one ruler nx_mccabe and its gate share),
3100// and the figures are set against the census's LAST spine row so the board can say what share of the estate's
3101// complexity is seat-written. The complement is NOT "human": it is everything the frames cannot attribute -- human-
3102// authored files AND every write before the first path-bearing frame -- and it is named so, never guessed. A seat is
3103// AI at a seat by definition of the transcript. Counters partition and SUM; a path outside the tree or not .nx is
3104// counted apart; an unreadable path is counted apart; an absent spine makes the denominator UNOBSERVABLE (rc 3), a
3105// journal with no path frames is NO-PATH-FRAMES (rc 4) -- neither ever fabricates a number.
3106// (the CH_AH_* consts sit at the top of the file beside the beat consts: the module parser is single-pass and the
3107// selftest teeth read them before this section)
3108func ch_ah_prefix(p: *u8, pre: *u8) -> i64 {
3109 var i: i64 = 0
3110 while pre[i] != (0 as u8) { if p[i] != pre[i] { return 0 } i = i + 1 }
3111 return 1
3112}
3113// n-th TAB-separated field of line [i,le) -> out (NUL-terminated); returns its length, 0 if absent
3114func ch_ah_field_n(buf: *u8, i: i64, le: i64, want: i64, out: *u8, cap: i64) -> i64 {
3115 var f: i64 = 0
3116 var s: i64 = i
3117 var k: i64 = i
3118 var o: i64 = 0
3119 while k <= le {
3120 var endf: i64 = 0
3121 if k == le { endf = 1 } else { if buf[k] == (9 as u8) { endf = 1 } }
3122 if endf == 1 {
3123 if f == want {
3124 var q: i64 = s
3125 while q < k { if o < cap - 1 { out[o] = buf[q]; o = o + 1 } q = q + 1 }
3126 out[o] = 0 as u8
3127 return o
3128 }
3129 f = f + 1
3130 s = k + 1
3131 }
3132 k = k + 1
3133 }
3134 out[0] = 0 as u8
3135 return 0
3136}
3137// linear lookup in a table of NUL-terminated cells; small tables, no second ruler
3138func ch_ah_find(tab: *u8, n: i64, cell: i64, p: *u8) -> i64 {
3139 var k: i64 = 0
3140 while k < n {
3141 let q: *u8 = ((tab as i64) + k*cell) as *u8
3142 if sj_lit_eq(q, 0, sj_vlen(q), p) == 1 { return k }
3143 k = k + 1
3144 }
3145 return 0 - 1
3146}
3147func ch_ah_lastline(buf: *u8, n: i64) -> i64 {
3148 var i: i64 = 0
3149 var last: i64 = 0 - 1
3150 while i < n { let le: i64 = sj_le(buf, i, n); if le > i { last = i } i = le + 1 }
3151 return last
3152}
3153// a BOUNDED digit run: stops at the first non-digit or at `to` (sj_atoi_z concatenates every digit up to the NUL,
3154// so on a `k=10|j=20` row it would read 1020 -- measured, not assumed)
3155func ch_ah_num(buf: *u8, p0: i64, to: i64) -> i64 {
3156 var v: i64 = 0
3157 var p: i64 = p0
3158 var g: i64 = 1
3159 while g == 1 {
3160 if p >= to { g = 0 } else {
3161 let c: i64 = buf[p] as i64
3162 if c < CH_CH_D0 { g = 0 } else { if c > CH_CH_D9 { g = 0 } else { v = v*CH_DEC + (c - CH_CH_D0); p = p + 1 } }
3163 }
3164 }
3165 return v
3166}
3167func ch_ah_field(buf: *u8, from: i64, to: i64, key: *u8) -> i64 {
3168 let p: i64 = ch_find_from(buf, from, to, key)
3169 if p < 0 { return 0 - 1 }
3170 return ch_ah_num(buf, p + sj_vlen(key), to)
3171}
3172func ce_author_health(jpath: *u8, pre: *u8, spine: *u8, cx: *i64, ob: *u8) -> i64 {
3173 var z: i64 = 0
3174 while z < CH_AH_CTRS { cx[z] = 0; z = z + 1 }
3175 cx[CH_AH_FIRSTTS] = 0 - 1
3176 let lp: *i64 = sys_mmap(16) as *i64
3177 lp[0] = 0
3178 let jb: *u8 = sys_read_file(jpath, lp)
3179 var jn: i64 = lp[0]
3180 if jn < 0 { jn = 0 }
3181 let tab: *u8 = sys_mmap(CH_AH_MAXPATHS * CH_AH_PATHCELL)
3182 var nt: i64 = 0
3183 let stab: *u8 = sys_mmap(CH_AH_MAXSESS * CH_AH_SESSCELL)
3184 var ns: i64 = 0
3185 let pkey: *u8 = "path=" as *u8
3186 let pkl: i64 = sj_vlen(pkey)
3187 let pc: *u8 = sys_mmap(CH_AH_PATHCELL + 8)
3188 let sc: *u8 = sys_mmap(CH_AH_SESSCELL + 8)
3189 var i: i64 = 0
3190 while i < jn {
3191 let le: i64 = sj_le(jb, i, jn)
3192 if le > i {
3193 cx[CH_AH_FRAMES] = cx[CH_AH_FRAMES] + 1
3194 let pp: i64 = ch_find_from(jb, i, le, pkey)
3195 if pp >= 0 {
3196 cx[CH_AH_PATHFRAMES] = cx[CH_AH_PATHFRAMES] + 1
3197 let ts: i64 = ch_ah_num(jb, i, le)
3198 if cx[CH_AH_FIRSTTS] < 0 { cx[CH_AH_FIRSTTS] = ts } else { if ts < cx[CH_AH_FIRSTTS] { cx[CH_AH_FIRSTTS] = ts } }
3199 let sl: i64 = ch_ah_field_n(jb, i, le, 1, sc, CH_AH_SESSCELL)
3200 if sl > 0 { if ch_ah_find(stab, ns, CH_AH_SESSCELL, sc) < 0 { if ns < CH_AH_MAXSESS {
3201 let scell: *u8 = ((stab as i64) + ns*CH_AH_SESSCELL) as *u8
3202 let scl: i64 = sj_cat(scell, 0, sc)
3203 scell[scl] = 0 as u8
3204 ns = ns + 1
3205 } } }
3206 var pl: i64 = le - (pp + pkl)
3207 if pl > CH_AH_PATHCELL - 1 { pl = CH_AH_PATHCELL - 1 }
3208 var q: i64 = 0
3209 while q < pl { pc[q] = jb[pp + pkl + q]; q = q + 1 }
3210 if pl > 0 { if pc[pl-1] == (13 as u8) { pl = pl - 1 } }
3211 pc[pl] = 0 as u8
3212 if pl > 0 { if ch_ah_find(tab, nt, CH_AH_PATHCELL, pc) < 0 {
3213 if nt < CH_AH_MAXPATHS {
3214 let pcell: *u8 = ((tab as i64) + nt*CH_AH_PATHCELL) as *u8
3215 let pcl: i64 = sj_cat(pcell, 0, pc)
3216 pcell[pcl] = 0 as u8
3217 nt = nt + 1
3218 } else { cx[CH_AH_OVERFLOW] = cx[CH_AH_OVERFLOW] + 1 }
3219 } }
3220 }
3221 }
3222 i = le + 1
3223 }
3224 cx[CH_AH_UNIQUE] = nt
3225 cx[CH_AH_SESSIONS] = ns
3226 let hist: *i64 = sys_mmap(MC_HIST_MAX*8 + 64) as *i64
3227 let mc: *i64 = sys_mmap(MC_C_SLOTS*8) as *i64
3228 let work: *u8 = sys_mmap(MC_WORKCAP)
3229 let wo: *i64 = sys_mmap(16) as *i64
3230 wo[0] = 0
3231 var k: i64 = 0
3232 while k < nt {
3233 let p: *u8 = ((tab as i64) + k*CH_AH_PATHCELL) as *u8
3234 var intree: i64 = 0
3235 if ch_ah_prefix(p, pre) == 1 { if mc_ends_nx(p, sj_vlen(p)) == 1 { intree = 1 } }
3236 if intree == 1 {
3237 cx[CH_AH_INTREE] = cx[CH_AH_INTREE] + 1
3238 let f0: i64 = mc[MC_C_FILES]
3239 let n0: i64 = mc[MC_C_FUNCS]
3240 let s0: i64 = mc[MC_C_SUMVG]
3241 let a0: i64 = mc[MC_C_ABOVE]
3242 mc_scan_file(p, hist, mc, work, wo)
3243 if mc[MC_C_FILES] > f0 {
3244 cx[CH_AH_FILES] = cx[CH_AH_FILES] + 1
3245 cx[CH_AH_FUNCS] = cx[CH_AH_FUNCS] + (mc[MC_C_FUNCS] - n0)
3246 cx[CH_AH_SUMVG] = cx[CH_AH_SUMVG] + (mc[MC_C_SUMVG] - s0)
3247 cx[CH_AH_ABOVE] = cx[CH_AH_ABOVE] + (mc[MC_C_ABOVE] - a0)
3248 } else { cx[CH_AH_UNREAD] = cx[CH_AH_UNREAD] + 1 }
3249 } else { cx[CH_AH_OUTSIDE] = cx[CH_AH_OUTSIDE] + 1 }
3250 k = k + 1
3251 }
3252 let sp: *i64 = sys_mmap(16) as *i64
3253 sp[0] = 0
3254 let sb: *u8 = sys_read_file(spine, sp)
3255 let sn: i64 = sp[0]
3256 var den: i64 = 0
3257 if sn > 0 {
3258 let ls: i64 = ch_ah_lastline(sb, sn)
3259 if ls >= 0 {
3260 let lse: i64 = sj_le(sb, ls, sn)
3261 cx[CH_AH_DTS] = ch_ah_num(sb, ls, lse)
3262 cx[CH_AH_DFILES] = ch_ah_field(sb, ls, lse, "files=" as *u8)
3263 cx[CH_AH_DFUNCS] = ch_ah_field(sb, ls, lse, "funcs=" as *u8)
3264 cx[CH_AH_DABOVE] = ch_ah_field(sb, ls, lse, "above_10=" as *u8)
3265 if cx[CH_AH_DFILES] > 0 { den = 1 }
3266 }
3267 }
3268 if den == 0 { cx[CH_AH_DFILES] = 0; cx[CH_AH_DFUNCS] = 0; cx[CH_AH_DABOVE] = 0 }
3269 var rc: i64 = 0
3270 if cx[CH_AH_PATHFRAMES] == 0 { rc = CH_AH_RC_NOPATH } else { if den == 0 { rc = CH_AH_RC_UNOBS } }
3271 var o: i64 = 0
3272 o = sj_cat(ob, o, "=== NX-AUTHOR-HEALTH -- seat-written NishiLang joined to its complexity (codeeffectiveness CE1 leg 2) ===\n" as *u8)
3273 o = sj_cat(ob, o, " journal=" as *u8); o = sj_cat(ob, o, jpath)
3274 o = sj_cat(ob, o, " frames=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FRAMES])
3275 o = sj_cat(ob, o, " path_frames=" as *u8); o = sj_catn(ob, o, cx[CH_AH_PATHFRAMES])
3276 o = sj_cat(ob, o, " unique_paths=" as *u8); o = sj_catn(ob, o, cx[CH_AH_UNIQUE])
3277 o = sj_cat(ob, o, " nx_in_tree=" as *u8); o = sj_catn(ob, o, cx[CH_AH_INTREE])
3278 o = sj_cat(ob, o, " outside_tree_or_not_nx=" as *u8); o = sj_catn(ob, o, cx[CH_AH_OUTSIDE])
3279 o = sj_cat(ob, o, " unreadable=" as *u8); o = sj_catn(ob, o, cx[CH_AH_UNREAD])
3280 o = sj_cat(ob, o, " overflow=" as *u8); o = sj_catn(ob, o, cx[CH_AH_OVERFLOW])
3281 o = sj_cat(ob, o, " sessions=" as *u8); o = sj_catn(ob, o, cx[CH_AH_SESSIONS])
3282 o = sj_cat(ob, o, " first_path_frame_ts=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FIRSTTS])
3283 o = sj_cat(ob, o, "\n tree=" as *u8); o = sj_cat(ob, o, pre)
3284 o = sj_cat(ob, o, "\n seat_written: files=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FILES])
3285 o = sj_cat(ob, o, " funcs=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FUNCS])
3286 o = sj_cat(ob, o, " sum_vG=" as *u8); o = sj_catn(ob, o, cx[CH_AH_SUMVG])
3287 o = sj_cat(ob, o, " above_10=" as *u8); o = sj_catn(ob, o, cx[CH_AH_ABOVE])
3288 if cx[CH_AH_FUNCS] > 0 { o = sj_cat(ob, o, " permille=" as *u8); o = sj_catn(ob, o, (cx[CH_AH_ABOVE]*MC_PERMILLE)/cx[CH_AH_FUNCS]) }
3289 if den == 1 {
3290 o = sj_cat(ob, o, "\n denominator (mccabe spine row ts=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DTS])
3291 o = sj_cat(ob, o, "): files=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFILES])
3292 o = sj_cat(ob, o, " funcs=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFUNCS])
3293 o = sj_cat(ob, o, " above_10=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DABOVE])
3294 o = sj_cat(ob, o, "\n not_seat_attributed: files=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFILES] - cx[CH_AH_FILES])
3295 o = sj_cat(ob, o, " funcs=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFUNCS] - cx[CH_AH_FUNCS])
3296 o = sj_cat(ob, o, " above_10=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DABOVE] - cx[CH_AH_ABOVE])
3297 o = sj_cat(ob, o, " (human-authored PLUS every write before ts=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FIRSTTS])
3298 o = sj_cat(ob, o, ", which carried no path -- UNATTRIBUTED, never guessed)\n partition: seat_written + not_seat_attributed = denominator, by construction\n" as *u8)
3299 } else {
3300 o = sj_cat(ob, o, "\n denominator: UNOBSERVABLE (no mccabe spine row at " as *u8); o = sj_cat(ob, o, spine); o = sj_cat(ob, o, " -- run nx_mccabe first; nothing is fabricated)\n" as *u8)
3301 }
3302 o = sj_cat(ob, o, "NX-AUTHOR-HEALTH frames=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FRAMES])
3303 o = sj_cat(ob, o, " path_frames=" as *u8); o = sj_catn(ob, o, cx[CH_AH_PATHFRAMES])
3304 o = sj_cat(ob, o, " unique_paths=" as *u8); o = sj_catn(ob, o, cx[CH_AH_UNIQUE])
3305 o = sj_cat(ob, o, " seat_files=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FILES])
3306 o = sj_cat(ob, o, " seat_funcs=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FUNCS])
3307 o = sj_cat(ob, o, " seat_above_10=" as *u8); o = sj_catn(ob, o, cx[CH_AH_ABOVE])
3308 o = sj_cat(ob, o, " den_files=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFILES])
3309 o = sj_cat(ob, o, " den_funcs=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFUNCS])
3310 o = sj_cat(ob, o, " den_above_10=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DABOVE])
3311 o = sj_cat(ob, o, " verdict=" as *u8)
3312 if rc == 0 { o = sj_cat(ob, o, "MEASURED" as *u8) }
3313 if rc == CH_AH_RC_UNOBS { o = sj_cat(ob, o, "UNOBSERVABLE-DENOMINATOR" as *u8) }
3314 if rc == CH_AH_RC_NOPATH { o = sj_cat(ob, o, "NO-PATH-FRAMES" as *u8) }
3315 o = sj_cat(ob, o, "\n" as *u8)
3316 ob[o] = 0 as u8
3317 return rc
3318}
3319
3320func main(argc: i64, argv: *i64) -> i64 {
3321 if argc < 3 { sj_puts("usage: nx_claude_harvest {frames <transcript.jsonl> <ws> <outjournal> | delta <transcript.jsonl> <ws> <outjournal> <hwmfile> | ingest <framesfile> <journal> | gauge <journal> [days] | page <journal> <outfile> [days] | propose <journal> <intake_jrnl> <threshold_permil> [filer] | bootgauge <framesjournal> [k] | learn <transcript.jsonl> <ws> <outfile> <markersconf> | beat <chbeat.conf> | journal <journal> <planpath> <rung> | classes <journal> | selftest <scratch-prefix>}\n" as *u8); sys_exit(2); return 2 }
3322 let verb: *u8 = argv[1] as *u8
3323 let vl: i64 = sj_vlen(verb)
3324 if sj_lit_eq(verb, 0, vl, "selftest" as *u8) == 1 {
3325 let rc: i64 = ch_selftest(argv[2] as *u8)
3326 sys_exit(rc)
3327 return rc
3328 }
3329 if sj_lit_eq(verb, 0, vl, "authorhealth" as *u8) == 1 {
3330 if argc < 3 { sj_puts("authorhealth needs <journal> [treeprefix] [spine]\n" as *u8); sys_exit(2); return 2 }
3331 var ahpre: *u8 = CH_AH_TREE as *u8
3332 if argc >= 4 { ahpre = argv[3] as *u8 }
3333 var ahspn: *u8 = CH_AH_SPINE as *u8
3334 if argc >= 5 { ahspn = argv[4] as *u8 }
3335 let acx: *i64 = sys_mmap(8 * CH_AH_CTRS) as *i64
3336 let aob: *u8 = sys_mmap(CH_OUT)
3337 let arc: i64 = ce_author_health(argv[2] as *u8, ahpre, ahspn, acx, aob)
3338 sys_write(1, aob, sj_vlen(aob))
3339 let ahfd: i64 = sys_openat_wr(CH_AH_STATUS as *u8, CH_MODE_644)
3340 if ahfd >= 0 { sys_write(ahfd, aob, sj_vlen(aob)); sys_close(ahfd) }
3341 sys_exit(arc)
3342 return arc
3343 }
3344 if sj_lit_eq(verb, 0, vl, "classes" as *u8) == 1 {
3345 let dc: *u8 = sys_mmap(CH_OUT)
3346 let dcl: i64 = ch_classes(argv[2] as *u8, dc)
3347 sys_write(1, dc, dcl)
3348 sys_exit(0)
3349 return 0
3350 }
3351 if sj_lit_eq(verb, 0, vl, "journal" as *u8) == 1 {
3352 if argc < 5 { sj_puts("journal needs <journal> <planpath> <rung>\n" as *u8); sys_exit(2); return 2 }
3353 let rj: i64 = ch_journal(argv[2] as *u8, argv[3] as *u8, argv[4] as *u8)
3354 if rj == 0 { sj_puts("JOURNAL OK one measure row appended\n" as *u8) }
3355 if rj == 4 { sj_puts("JOURNAL ALREADY today (idempotent, plan unchanged)\n" as *u8) }
3356 if rj == 5 { sj_puts("JOURNAL REFUSED insufficient data (no claude actions) -- nothing written\n" as *u8) }
3357 if rj == 1 { sj_puts("JOURNAL FAIL plan missing or unwritable (a beat never creates a plan)\n" as *u8) }
3358 sys_exit(rj)
3359 return rj
3360 }
3361 if sj_lit_eq(verb, 0, vl, "beat" as *u8) == 1 {
3362 let bcx: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
3363 let rc: i64 = ch_beat(argv[2] as *u8, bcx)
3364 sys_exit(rc)
3365 return rc
3366 }
3367 if sj_lit_eq(verb, 0, vl, "bootgauge" as *u8) == 1 {
3368 var k: i64 = 3
3369 if argc >= 4 { let kz: i64 = sj_atoi_z(argv[3] as *u8); if kz > 0 { k = kz } }
3370 let d: *u8 = sys_mmap(CH_OUT)
3371 let dl: i64 = ch_bootgauge(argv[2] as *u8, k, d)
3372 sys_write(1, d, dl)
3373 sys_exit(0)
3374 return 0
3375 }
3376 if sj_lit_eq(verb, 0, vl, "learn" as *u8) == 1 {
3377 if argc < 6 { sj_puts("learn needs <transcript.jsonl> <ws> <outfile> <markersconf>\n" as *u8); sys_exit(2); return 2 }
3378 let lcx: *i64 = sys_mmap(64) as *i64
3379 let lg: i64 = ch_learn(argv[2] as *u8, argv[3] as *u8, argv[4] as *u8, argv[5] as *u8, lcx)
3380 if lg < 0 { sj_puts("LEARN FAIL rc=" as *u8); let eb4: *u8 = sys_mmap(32); var e4: i64 = sj_catn(eb4, 0, lg); eb4[e4] = 10 as u8; sys_write(1, eb4, e4 + 1); sys_exit(1); return 1 }
3381 let ob4: *u8 = sys_mmap(256)
3382 var o4: i64 = sj_cat(ob4, 0, "LEARN OK kept=" as *u8)
3383 o4 = sj_catn(ob4, o4, lg)
3384 o4 = sj_cat(ob4, o4, " markers=" as *u8)
3385 o4 = sj_catn(ob4, o4, lcx[1])
3386 o4 = sj_cat(ob4, o4, " truncated=" as *u8)
3387 o4 = sj_catn(ob4, o4, lcx[0])
3388 ob4[o4] = 10 as u8
3389 sys_write(1, ob4, o4 + 1)
3390 sys_exit(0)
3391 return 0
3392 }
3393 if sj_lit_eq(verb, 0, vl, "frames" as *u8) == 1 {
3394 if argc < 5 { sj_puts("frames needs <transcript.jsonl> <ws> <outjournal>\n" as *u8); sys_exit(2); return 2 }
3395 let tcx: *i64 = sys_mmap(16) as *i64
3396 let got: i64 = ch_frames(argv[2] as *u8, argv[3] as *u8, argv[4] as *u8, tcx)
3397 if got < 0 { sj_puts("HARVEST FAIL rc=" as *u8); let eb: *u8 = sys_mmap(32); var eo: i64 = sj_catn(eb, 0, got); eb[eo] = 10 as u8; sys_write(1, eb, eo + 1); sys_exit(1); return 1 }
3398 let ob: *u8 = sys_mmap(256)
3399 var oo: i64 = sj_cat(ob, 0, "HARVEST OK frames=" as *u8)
3400 oo = sj_catn(ob, oo, got)
3401 oo = sj_cat(ob, oo, " truncated=" as *u8)
3402 oo = sj_catn(ob, oo, tcx[0])
3403 ob[oo] = 10 as u8
3404 sys_write(1, ob, oo + 1)
3405 sys_exit(0)
3406 return 0
3407 }
3408 if sj_lit_eq(verb, 0, vl, "ingest" as *u8) == 1 {
3409 if argc < 4 { sj_puts("ingest needs <framesfile> <journal>\n" as *u8); sys_exit(2); return 2 }
3410 let mcx: *i64 = sys_mmap(16) as *i64
3411 let r: i64 = ch_ingest(argv[2] as *u8, argv[3] as *u8, mcx)
3412 if r == (0 - 2) { sj_puts("ALREADY-INGESTED (marker present, journal untouched)\n" as *u8); sys_exit(0); return 0 }
3413 if r < 0 { sj_puts("INGEST FAIL rc=" as *u8); let eb2: *u8 = sys_mmap(32); var e2: i64 = sj_catn(eb2, 0, r); eb2[e2] = 10 as u8; sys_write(1, eb2, e2 + 1); sys_exit(1); return 1 }
3414 let ob2: *u8 = sys_mmap(256)
3415 var o2: i64 = sj_cat(ob2, 0, "INGEST OK frames=" as *u8)
3416 o2 = sj_catn(ob2, o2, r)
3417 o2 = sj_cat(ob2, o2, " malformed=" as *u8)
3418 o2 = sj_catn(ob2, o2, mcx[0])
3419 ob2[o2] = 10 as u8
3420 sys_write(1, ob2, o2 + 1)
3421 sys_exit(0)
3422 return 0
3423 }
3424 if sj_lit_eq(verb, 0, vl, "gauge" as *u8) == 1 {
3425 var days: i64 = 0
3426 if argc >= 4 { days = sj_atoi_z(argv[3] as *u8) }
3427 let d: *u8 = sys_mmap(CH_OUT)
3428 let dl: i64 = ch_gauge_json(argv[2] as *u8, days, d)
3429 sys_write(1, d, dl)
3430 sys_exit(0)
3431 return 0
3432 }
3433 if sj_lit_eq(verb, 0, vl, "page" as *u8) == 1 {
3434 if argc < 4 { sj_puts("page needs <journal> <outfile> [days]\n" as *u8); sys_exit(2); return 2 }
3435 var days2: i64 = 0
3436 if argc >= 5 { days2 = sj_atoi_z(argv[4] as *u8) }
3437 let rp: i64 = ch_page(argv[2] as *u8, argv[3] as *u8, days2)
3438 if rp != 0 { sj_puts("PAGE FAIL\n" as *u8); sys_exit(1); return 1 }
3439 sj_puts("PAGE OK\n" as *u8)
3440 sys_exit(0)
3441 return 0
3442 }
3443 if sj_lit_eq(verb, 0, vl, "delta" as *u8) == 1 {
3444 if argc < 6 { sj_puts("delta needs <transcript.jsonl> <ws> <outjournal> <hwmfile>\n" as *u8); sys_exit(2); return 2 }
3445 let hcx: *i64 = sys_mmap(64) as *i64
3446 let r: i64 = ch_delta(argv[2] as *u8, argv[3] as *u8, argv[4] as *u8, argv[5] as *u8, hcx)
3447 if r < 0 { sj_puts("DELTA FAIL (missing transcript or unwritable journal)\n" as *u8); sys_exit(1); return 1 }
3448 let ob: *u8 = sys_mmap(256)
3449 var oo: i64 = sj_cat(ob, 0, "DELTA OK frames=" as *u8)
3450 oo = sj_catn(ob, oo, hcx[0])
3451 oo = sj_cat(ob, oo, " from_hwm=" as *u8)
3452 oo = sj_catn(ob, oo, hcx[2])
3453 oo = sj_cat(ob, oo, " new_hwm=" as *u8)
3454 oo = sj_catn(ob, oo, hcx[1])
3455 oo = sj_cat(ob, oo, " truncated=" as *u8)
3456 oo = sj_catn(ob, oo, hcx[3])
3457 ob[oo] = 10 as u8
3458 sys_write(1, ob, oo + 1)
3459 sys_exit(0)
3460 return 0
3461 }
3462 if sj_lit_eq(verb, 0, vl, "propose" as *u8) == 1 {
3463 if argc < 5 { sj_puts("propose needs <journal> <intake_jrnl> <threshold_permil> [filer]\n" as *u8); sys_exit(2); return 2 }
3464 let thr: i64 = sj_atoi_z(argv[4] as *u8)
3465 let filer: *u8 = sys_mmap(128)
3466 var fo: i64 = 0
3467 if argc >= 6 { fo = sj_cat(filer, 0, argv[5] as *u8) } else { fo = sj_cat(filer, 0, "nx_pm_intake" as *u8) }
3468 filer[fo] = 0 as u8
3469 let co: *u8 = sys_mmap(CH_OUT)
3470 let cl: *i64 = sys_mmap(16) as *i64
3471 let r: i64 = ch_propose(argv[2] as *u8, argv[3] as *u8, thr, filer, co, cl)
3472 if r == 0 { sj_puts("PROPOSED " as *u8); if cl[0] > 0 { sys_write(1, co, cl[0]) } sj_puts("\n" as *u8); sys_exit(0); return 0 }
3473 if r == 2 { sj_puts("BELOW-THRESHOLD\n" as *u8); sys_exit(0); return 0 }
3474 if r == 4 { sj_puts("ALREADY-PROPOSED (marker present)\n" as *u8); sys_exit(0); return 0 }
3475 if r == 5 { sj_puts("SKIP-INSUFFICIENT (no frames)\n" as *u8); sys_exit(0); return 0 }
3476 if r == 3 { sj_puts("REFUSED intake window exceeded\n" as *u8); sys_exit(3); return 3 }
3477 sj_puts("PROPOSE FAIL (filer)\n" as *u8)
3478 sys_exit(1)
3479 return 1
3480 }
3481 sj_puts("unknown verb\n" as *u8)
3482 sys_exit(2)
3483 return 2
3484}