code wiki / _hdl_build / nx_claude_harvest_evidence_t45.nx
nx_claude_harvest_evidence_t45.nx source
↩ module page · 3504 lines · 171680 B
1// nx_claude_harvest.nx -- CLAUDE TRANSCRIPT HARVESTER + OUTSIDE-GAUGE (miner-sota lane F964/F973, 2026-07-23).
2// PORTABLE organ (gen-image pattern: runs where the transcripts live -- laptop WSL today, NAS, any host):
3// parses Claude Code transcript JSONL into sovereign actlog frames, bulk-ingests staged frames into a
4// journal (validated, marker-idempotent), and derives the outside_permil gauge (nishi vs outside tool
5// split) that MUST FALL as capabilities move inside (MG00 baseline 651, 2026-07-23).
6// Composes nx_sovjson_lib (sj_*) -- no helper dup (D001 discipline). State derived; journals append-only
7// (O_APPEND, conflict-free, ws_sync lineage). No hw writes (Rule 26).
8// frames <transcript.jsonl> <ws> <outjournal> -> parse transcript, append actlog frames; HARVEST OK
9// ingest <framesfile> <journal> -> validated bulk append, idempotent by marker frame
10// gauge <journal> [days] -> JSON outside_permil (0 days = all frames)
11// beat <chbeat.conf> -> DM1 session->NAS capture beat (devmgmt rung, 2026-08-20):
12// walk EVERY transcript under root (all depths, getdents
13// looped until 0), ch_delta each against a per-transcript
14// byte HWM, split the fresh frames into ts-day PIECES sized
15// under the MCP body cliff, ingest each piece (ch_ingest,
16// marker-idempotent) into per-day journals -- the local twin
17// always, the NAS landing via the forked wire when push=1.
18// Pieces are the chunk unit AND the ingest unit, so the
19// pipeline is resumable at every stage with no append
20// primitive over the wire. Counters partition and SUM;
21// unknown head-types bucket UNKNOWN with a named worklist.
22// selftest <scratch-prefix> -> gate T1..T8 + beat teeth (unique per-run scratch names)
23// SSOT for this source is buildroot/runtime/_hdl_build/ on the NAS; the laptop nxc2 tree is a build twin
24// (synced per edit, video-lane pattern) because the beat RUNS WHERE THE TRANSCRIPTS LIVE (laptop WSL).
25// license_tier: ORIGINAL
26import "nx_sovjson_lib.nx"
27import "nx_syscalls.nx"
28import "nx_gate_verdict.nx"
29import "nx_tool_run.nx"
30import "nx_mccabe_lib.nx"
31const CH_MAGIC_146097: i64 = 146097
32const CH_MAGIC_719468: i64 = 719468
33const CH_MAGIC_86400: i64 = 86400
34const CH_MAGIC_3600: i64 = 3600
35const CH_MAGIC_1784764900: i64 = 1784764900
36const CH_MAGIC_1784764901: i64 = 1784764901
37const CH_MAGIC_1784764803: i64 = 1784764803
38
39const CH_WIN: i64 = 67108864
40const CH_JWIN: i64 = 4194304
41const CH_OUT: i64 = 65536
42const CH_LINE: i64 = 4096
43const CH_NAME_MAX: i64 = 120
44const CH_NAME_SCAN: i64 = 400
45const CH_MODE_644: i64 = 420
46// ---- CE1 leg 2 (ce_author_health) consts: declared here, above the selftest that reads them (single-pass parser) ----
47const CH_AH_MAXPATHS: i64 = 8192
48const CH_AH_PATHCELL: i64 = 512
49const CH_AH_MAXSESS: i64 = 1024
50const CH_AH_SESSCELL: i64 = 64
51const CH_AH_CTRS: i64 = 32
52const CH_AH_SPINE: *u8 = "knowledge/status/mccabe.spine"
53const CH_AH_STATUS: *u8 = "knowledge/status/author_health.status"
54const CH_AH_TREE: *u8 = "buildroot/runtime/"
55const CH_AH_RC_UNOBS: i64 = 3
56const CH_AH_RC_NOPATH: i64 = 4
57const CH_AH_FRAMES: i64 = 0
58const CH_AH_PATHFRAMES: i64 = 1
59const CH_AH_UNIQUE: i64 = 2
60const CH_AH_INTREE: i64 = 3
61const CH_AH_OUTSIDE: i64 = 4
62const CH_AH_FIRSTTS: i64 = 5
63const CH_AH_SESSIONS: i64 = 6
64const CH_AH_FILES: i64 = 7
65const CH_AH_FUNCS: i64 = 8
66const CH_AH_SUMVG: i64 = 9
67const CH_AH_ABOVE: i64 = 10
68const CH_AH_DFILES: i64 = 11
69const CH_AH_DFUNCS: i64 = 12
70const CH_AH_DABOVE: i64 = 13
71const CH_AH_DTS: i64 = 14
72const CH_AH_UNREAD: i64 = 15
73const CH_AH_OVERFLOW: i64 = 16
74const CH_AH_FIX_TS: i64 = 1788600000
75const CH_AH_FIX_DFILES: i64 = 10
76const CH_AH_FIX_DFUNCS: i64 = 20
77const CH_AH_FIX_DABOVE: i64 = 3
78const CH_CH_D0: i64 = 48
79const CH_CH_D9: i64 = 57
80const CH_DEC: i64 = 10
81// ---- beat consts (DM1 ch_beat; declared here because the module parser is single-pass and the
82// selftest teeth read them before the beat section) -- each names its derivation ----
83const CH_BT_DIRWIN: i64 = 65536 // getdents64 batch buffer -- LOOPED until 0, never a listing cap
84const CH_BT_PATHMAX: i64 = 512 // one path cell; longest real transcript path measured ~120 B, 4x headroom
85const CH_BT_MAXFILES: i64 = 16384 // walk table capacity (837 files measured 2026-08-20); hitting it REFUSES loudly
86const CH_BT_MAXDIRS: i64 = 4096
87const CH_BT_ARENA: i64 = 8388608 // path arena = CH_BT_MAXFILES * CH_BT_PATHMAX exactly
88const CH_BT_TYPEMAX: i64 = 64 // distinct head-type slots; overflow announces FLOOR-NOT-TOTAL
89const CH_BT_DAYMAX: i64 = 128 // distinct ts-days per run (backfill spans ~60); overflow REFUSES loudly
90const CH_BT_DAYCELL: i64 = 16 // one day-name cell: YYYYMMDD (8) or tszero (6) + NUL, padded
91const CH_MCP_BODY_CLIFF: i64 = 65536 // measured: the MCP write body silently drops beyond ~64 KiB
92const CH_BT_CTRS: i64 = 32 // bcx slot count (map at ch_beat)
93const CH_MODE_755: i64 = 493 // rwxr-xr-x for the beat's own state/spool/journal dirs
94const CH_MAGIC_1460: i64 = 1460 // 4*365 (Hinnant civil-from-days)
95const CH_MAGIC_36524: i64 = 36524 // 100*365 + 24 (Hinnant)
96const CH_MAGIC_146096: i64 = 146096 // CH_MAGIC_146097 - 1 (Hinnant)
97
98func ch_read(path: *u8, buf: *u8, cap: i64) -> i64 {
99 let fd: i64 = sys_openat_rd(path)
100 if fd < 0 { return -1 }
101 var n: i64 = 0
102 var go: i64 = 1
103 while go == 1 { let r: i64 = sys_read(fd, ((buf as i64)+n) as *u8, cap-n); if r <= 0 { go = 0 } else { n = n + r } if n >= cap { go = 0 } }
104 sys_close(fd)
105 return n
106}
107// substring search in q[from..endlim) -> position or -1
108func ch_find_from(q: *u8, from: i64, endlim: i64, lit: *u8) -> i64 {
109 var i: i64 = from
110 while i < endlim {
111 var k: i64 = 0
112 var ok: i64 = 1
113 var go: i64 = 1
114 while go == 1 {
115 if lit[k] == (0 as u8) { go = 0 } else {
116 if i + k >= endlim { ok = 0; go = 0 } else {
117 if q[i+k] != lit[k] { ok = 0; go = 0 } else { k = k + 1 }
118 }
119 }
120 }
121 if ok == 1 { return i }
122 i = i + 1
123 }
124 return -1
125}
126func ch_find(q: *u8, n: i64, lit: *u8) -> i64 {
127 if ch_find_from(q, 0, n, lit) >= 0 { return 1 }
128 return 0
129}
130// span q[s..e) begins with lit?
131func ch_starts(q: *u8, s: i64, e: i64, lit: *u8) -> i64 {
132 var k: i64 = 0
133 while lit[k] != (0 as u8) {
134 if s + k >= e { return 0 }
135 if q[s+k] != lit[k] { return 0 }
136 k = k + 1
137 }
138 return 1
139}
140func ch_digits(q: *u8, s: i64, e: i64) -> i64 {
141 if e <= s { return 0 }
142 var i: i64 = s
143 while i < e { let c: i64 = q[i] as i64; if c < 48 { return 0 } if c > 57 { return 0 } i = i + 1 }
144 return 1
145}
146// civil date -> unix epoch (Hinnant days-from-civil, integer only; years >= 1970 here)
147func ch_epoch_ymdhms(y: i64, mo: i64, d: i64, h: i64, mi: i64, s: i64) -> i64 {
148 var yy: i64 = y
149 var mp: i64 = 0
150 if mo > 2 { mp = mo - 3 } else { mp = mo + 9; yy = yy - 1 }
151 let era: i64 = yy / 400
152 let yoe: i64 = yy - era * 400
153 let doy: i64 = (153 * mp + 2) / 5 + d - 1
154 let doe: i64 = yoe * 365 + yoe / 4 - yoe / 100 + doy
155 let days: i64 = era * CH_MAGIC_146097 + doe - CH_MAGIC_719468
156 return days * CH_MAGIC_86400 + h * CH_MAGIC_3600 + mi * 60 + s
157}
158// parse ISO "YYYY-MM-DDTHH:MM:SS" at q[s..] (lim-bounded) -> epoch, 0 if malformed
159func ch_iso_epoch(q: *u8, s: i64, lim: i64) -> i64 {
160 if s + 19 > lim { return 0 }
161 if ch_digits(q, s, s+4) == 0 { return 0 }
162 if q[s+4] != (45 as u8) { return 0 }
163 if ch_digits(q, s+5, s+7) == 0 { return 0 }
164 if q[s+7] != (45 as u8) { return 0 }
165 if ch_digits(q, s+8, s+10) == 0 { return 0 }
166 if q[s+10] != (84 as u8) { return 0 }
167 if ch_digits(q, s+11, s+13) == 0 { return 0 }
168 if q[s+13] != (58 as u8) { return 0 }
169 if ch_digits(q, s+14, s+16) == 0 { return 0 }
170 if q[s+16] != (58 as u8) { return 0 }
171 if ch_digits(q, s+17, s+19) == 0 { return 0 }
172 let y: i64 = sj_atoi_span(q, s, s+4)
173 let mo: i64 = sj_atoi_span(q, s+5, s+7)
174 let d: i64 = sj_atoi_span(q, s+8, s+10)
175 let h: i64 = sj_atoi_span(q, s+11, s+13)
176 let mi: i64 = sj_atoi_span(q, s+14, s+16)
177 let se: i64 = sj_atoi_span(q, s+17, s+19)
178 if mo < 1 { return 0 }
179 if mo > 12 { return 0 }
180 if d < 1 { return 0 }
181 if d > 31 { return 0 }
182 return ch_epoch_ymdhms(y, mo, d, h, mi, se)
183}
184// write one actlog frame line to an open fd: <ts>TAB<ws>TAB<tool>TAB<verb>TAB<outcome>TAB<note>NL
185func ch_frame_write(fd: i64, ln: *u8, ts: i64, ws: *u8, tool: *u8, verb: *u8, outcome: *u8, note: *u8) -> i64 {
186 var o: i64 = 0
187 o = sj_catn(ln, o, ts)
188 ln[o] = 9 as u8; o = o + 1
189 o = sj_cat(ln, o, ws)
190 ln[o] = 9 as u8; o = o + 1
191 o = sj_cat(ln, o, tool)
192 ln[o] = 9 as u8; o = o + 1
193 o = sj_cat(ln, o, verb)
194 ln[o] = 9 as u8; o = o + 1
195 o = sj_cat(ln, o, outcome)
196 ln[o] = 9 as u8; o = o + 1
197 o = sj_cat(ln, o, note)
198 ln[o] = 10 as u8; o = o + 1
199 sys_write(fd, ln, o)
200 return 0
201}
202func ch_frame_append(path: *u8, ts: i64, ws: *u8, tool: *u8, verb: *u8, outcome: *u8, note: *u8) -> i64 {
203 let fd: i64 = sys_openat_append(path, CH_MODE_644)
204 if fd < 0 { return -1 }
205 let ln: *u8 = sys_mmap(CH_LINE)
206 ch_frame_write(fd, ln, ts, ws, tool, verb, outcome, note)
207 sys_close(fd)
208 return 0
209}
210// ---------- CE1 leg 2 (codeeffectiveness, 2026-09-05): the PATH a write tool touched ----------
211// Every frame used to carry `tool use - <verb>` and nothing else, so WHICH FILE a seat wrote was not in the
212// NAS record at all (735 nx_fs_write frames on 2026-09-05, none with a path). The path lives in the tool_use's
213// own input: nx_fs_write carries it as argv[1] (argv[0] is the verb), Write and Edit as file_path. It is read
214// from a BOUNDED window after the tool's name (the input keys come before any content string, so the FIRST
215// match is the input's own key, never a content byte). ADDITIVE: the note gains one space-separated token
216// `path=<p>`; no column moves, every existing reader sees one more token. A non-writer frame is unchanged.
217const CH_PATH_SCAN: i64 = 4096 // one transcript line can carry the write's CONTENT before its path key; the frame line is CH_LINE anyway
218const CH_PATH_MAX: i64 = 512
219const CH_CH_BSL: i64 = 92
220const CH_WK_NONE: i64 = 0
221const CH_WK_ARGV: i64 = 1
222const CH_WK_FILEPATH: i64 = 2
223func ch_tool_writer_kind(nm: *u8) -> i64 {
224 let nl: i64 = sj_vlen(nm)
225 if sj_lit_eq(nm, 0, nl, "mcp__nishi__nx_fs_write" as *u8) == 1 { return CH_WK_ARGV }
226 if sj_lit_eq(nm, 0, nl, "Write" as *u8) == 1 { return CH_WK_FILEPATH }
227 if sj_lit_eq(nm, 0, nl, "Edit" as *u8) == 1 { return CH_WK_FILEPATH }
228 return CH_WK_NONE
229}
230// copy a JSON string body that starts at k0 (just past the opening quote) up to its closing unescaped quote
231func ch_json_str_copy(buf: *u8, k0: i64, le: i64, pb: *u8, cap: i64) -> i64 {
232 var k: i64 = k0
233 var o: i64 = 0
234 var g: i64 = 1
235 while g == 1 {
236 if k >= le { g = 0 } else {
237 if buf[k] == (34 as u8) { g = 0 } else {
238 if buf[k] == (CH_CH_BSL as u8) { k = k + 1 }
239 if k < le { if o < cap { pb[o] = buf[k]; o = o + 1 } }
240 k = k + 1
241 }
242 }
243 }
244 pb[o] = 0 as u8
245 return o
246}
247// the path for a writer frame: np is the offset of the tool's name key, le the line end. 0 = no path.
248func ch_tool_path(buf: *u8, np: i64, le: i64, kind: i64, pb: *u8) -> i64 {
249 pb[0] = 0 as u8
250 if kind == CH_WK_NONE { return 0 }
251 var scanend: i64 = np + CH_PATH_SCAN
252 if scanend > le { scanend = le }
253 if kind == CH_WK_ARGV {
254 let akey: *u8 = "\"argv\":[\"" as *u8
255 let ap: i64 = ch_find_from(buf, np, scanend, akey)
256 if ap < 0 { return 0 }
257 var k: i64 = ap + sj_vlen(akey)
258 var g: i64 = 1
259 while g == 1 { if k >= scanend { g = 0 } else { if buf[k] == (34 as u8) { g = 0 } else { if buf[k] == (CH_CH_BSL as u8) { k = k + 1 } k = k + 1 } } }
260 let q2: i64 = ch_find_from(buf, k + 1, scanend, "\"" as *u8)
261 if q2 < 0 { return 0 }
262 return ch_json_str_copy(buf, q2 + 1, scanend, pb, CH_PATH_MAX)
263 }
264 let fkey: *u8 = "\"file_path\":\"" as *u8
265 let fp: i64 = ch_find_from(buf, np, scanend, fkey)
266 if fp < 0 { return 0 }
267 return ch_json_str_copy(buf, fp + sj_vlen(fkey), scanend, pb, CH_PATH_MAX)
268}
269// the note for one frame: the verb literal, plus ` path=<p>` when the tool is a writer whose path was read
270func ch_frame_note(buf: *u8, np: i64, le: i64, nm: *u8, verb: *u8, pb: *u8, nb: *u8) -> *u8 {
271 let wk: i64 = ch_tool_writer_kind(nm)
272 if wk == CH_WK_NONE { return verb }
273 if ch_tool_path(buf, np, le, wk, pb) <= 0 { return verb }
274 var no: i64 = sj_cat(nb, 0, verb)
275 no = sj_cat(nb, no, " path=" as *u8)
276 no = sj_cat(nb, no, pb)
277 nb[no] = 0 as u8
278 return nb
279}
280// ---------- frames: transcript JSONL -> actlog frames ----------
281// returns frames harvested, -1 missing/empty transcript, -3 cannot open out journal.
282// tcx[0] receives truncated flag.
283func ch_frames(tpath: *u8, ws: *u8, outj: *u8, tcx: *i64) -> i64 {
284 let buf: *u8 = sys_mmap(CH_WIN)
285 let cap: i64 = CH_WIN - 8
286 let n: i64 = ch_read(tpath, buf, cap)
287 tcx[0] = 0
288 if n <= 0 { return -1 }
289 if n >= cap { tcx[0] = 1 }
290 let fd: i64 = sys_openat_append(outj, CH_MODE_644)
291 if fd < 0 { return -3 }
292 let ln: *u8 = sys_mmap(CH_LINE)
293 let nm: *u8 = sys_mmap(256)
294 let pb: *u8 = sys_mmap(CH_PATH_MAX + 8)
295 let nb: *u8 = sys_mmap(CH_PATH_MAX + 64)
296 var frames: i64 = 0
297 var i: i64 = 0
298 while i < n {
299 let le: i64 = sj_le(buf, i, n)
300 var ts: i64 = 0
301 let tp: i64 = ch_find_from(buf, i, le, "\"timestamp\":\"" as *u8)
302 if tp >= 0 { ts = ch_iso_epoch(buf, tp + 13, le) }
303 var j: i64 = i
304 var go: i64 = 1
305 while go == 1 {
306 let tu: i64 = ch_find_from(buf, j, le, "\"type\":\"tool_use\"" as *u8)
307 if tu < 0 { go = 0 } else {
308 var scanend: i64 = tu + CH_NAME_SCAN
309 if scanend > le { scanend = le }
310 let np: i64 = ch_find_from(buf, tu, scanend, "\"name\":\"" as *u8)
311 if np >= 0 {
312 var k: i64 = np + 8
313 var o: i64 = 0
314 var g2: i64 = 1
315 while g2 == 1 {
316 if k >= le { g2 = 0 } else {
317 if buf[k] == (34 as u8) { g2 = 0 } else {
318 if o < CH_NAME_MAX { nm[o] = buf[k]; o = o + 1 }
319 k = k + 1
320 }
321 }
322 }
323 nm[o] = 0 as u8
324 if o > 0 {
325 ch_frame_write(fd, ln, ts, ws, nm, "use" as *u8, "-" as *u8, ch_frame_note(buf, np, le, nm, "harvest" as *u8, pb, nb))
326 frames = frames + 1
327 }
328 }
329 j = tu + 17
330 }
331 }
332 i = le + 1
333 }
334 sys_close(fd)
335 return frames
336}
337// ---------- delta: HIGH-WATER-MARK harvest, the F973 self-sufficiency half ----------
338// The ongoing-harvest loop lived in a laptop PowerShell parser (MG03: Claude hand-writes miners).
339// This puts the byte-offset high-water mark INSIDE the organ, so the harvester is self-sufficient on
340// ANY host that holds transcripts: run the ELF, it consumes only what grew since last time.
341// EXACTLY-ONCE BY CONSTRUCTION: only COMPLETE lines are consumed (a partial trailing line stays below
342// the mark for the next run), and the mark advances only over what was actually parsed. A re-run on an
343// unchanged transcript yields 0 frames -- idempotent without needing a marker.
344// hcx[0]=frames hcx[1]=new_hwm hcx[2]=old_hwm hcx[3]=truncated
345func ch_hwm_read(path: *u8) -> i64 {
346 let b: *u8 = sys_mmap(CH_LINE)
347 let fd: i64 = sys_openat_rd(path)
348 if fd < 0 { return 0 }
349 let r: i64 = sys_read(fd, b, CH_LINE - 8)
350 sys_close(fd)
351 if r <= 0 { return 0 }
352 var v: i64 = 0
353 var i: i64 = 0
354 while i < r { let c: i64 = b[i] as i64; if c >= 48 { if c <= 57 { v = v * 10 + (c - 48) } } i = i + 1 }
355 return v
356}
357func ch_hwm_write(path: *u8, v: i64) -> i64 {
358 let fd: i64 = sys_openat_wr(path, CH_MODE_644)
359 if fd < 0 { return -1 }
360 let b: *u8 = sys_mmap(CH_LINE)
361 var o: i64 = sj_catn(b, 0, v)
362 b[o] = 10 as u8
363 sys_write(fd, b, o + 1)
364 sys_close(fd)
365 return 0
366}
367func ch_delta(tpath: *u8, ws: *u8, outj: *u8, hwmpath: *u8, hcx: *i64) -> i64 {
368 hcx[0] = 0
369 hcx[1] = 0
370 hcx[2] = 0
371 hcx[3] = 0
372 // read sized-by-file (2026-08-20): the old fixed CH_WIN window silently stopped harvesting past
373 // 64 MiB (largest real transcript measured 55.8 MB the same day -- the cliff was DAYS away).
374 // sys_map_file is read-only/zero-copy and every parse below is span-bounded, never NUL-reliant.
375 // hcx[3] (truncated) is structurally 0 now; the slot stays for contract stability.
376 let nn: *i64 = sys_mmap(16) as *i64
377 let buf: *u8 = sys_map_file(tpath, nn)
378 let n: i64 = nn[0]
379 if n <= 0 { return -1 }
380 var hwm: i64 = ch_hwm_read(hwmpath)
381 if hwm < 0 { hwm = 0 }
382 if hwm > n { hwm = 0 }
383 hcx[2] = hwm
384 hcx[1] = hwm
385 if hwm >= n { sys_munmap(buf, n); return 0 }
386 // consume only up to the LAST newline: a partial trailing line waits for the next run
387 var lastnl: i64 = 0 - 1
388 var z: i64 = n - 1
389 while z >= hwm { if lastnl < 0 { if buf[z] == (10 as u8) { lastnl = z } } z = z - 1 }
390 if lastnl < 0 { sys_munmap(buf, n); return 0 }
391 let fd: i64 = sys_openat_append(outj, CH_MODE_644)
392 if fd < 0 { sys_munmap(buf, n); return -3 }
393 let ln: *u8 = sys_mmap(CH_LINE)
394 let nm: *u8 = sys_mmap(256)
395 let pb: *u8 = sys_mmap(CH_PATH_MAX + 8)
396 let nb: *u8 = sys_mmap(CH_PATH_MAX + 64)
397 var frames: i64 = 0
398 var i: i64 = hwm
399 while i <= lastnl {
400 let le: i64 = sj_le(buf, i, lastnl + 1)
401 var ts: i64 = 0
402 let tp: i64 = ch_find_from(buf, i, le, "\"timestamp\":\"" as *u8)
403 if tp >= 0 { ts = ch_iso_epoch(buf, tp + 13, le) }
404 var j: i64 = i
405 var go: i64 = 1
406 while go == 1 {
407 let tu: i64 = ch_find_from(buf, j, le, "\"type\":\"tool_use\"" as *u8)
408 if tu < 0 { go = 0 } else {
409 var scanend: i64 = tu + CH_NAME_SCAN
410 if scanend > le { scanend = le }
411 let np: i64 = ch_find_from(buf, tu, scanend, "\"name\":\"" as *u8)
412 if np >= 0 {
413 var k: i64 = np + 8
414 var o: i64 = 0
415 var g2: i64 = 1
416 while g2 == 1 {
417 if k >= le { g2 = 0 } else {
418 if buf[k] == (34 as u8) { g2 = 0 } else {
419 if o < CH_NAME_MAX { nm[o] = buf[k]; o = o + 1 }
420 k = k + 1
421 }
422 }
423 }
424 nm[o] = 0 as u8
425 if o > 0 {
426 ch_frame_write(fd, ln, ts, ws, nm, "use" as *u8, "-" as *u8, ch_frame_note(buf, np, le, nm, "delta" as *u8, pb, nb))
427 frames = frames + 1
428 }
429 }
430 j = tu + 17
431 }
432 }
433 i = le + 1
434 }
435 sys_close(fd)
436 sys_munmap(buf, n)
437 hcx[0] = frames
438 hcx[1] = lastnl + 1
439 ch_hwm_write(hwmpath, lastnl + 1)
440 return 0
441}
442// ---------- ingest: validated bulk append of a staged frames file, marker-idempotent ----------
443// returns >=0 ingested count (mcx[0]=malformed), -1 missing frames file, -2 already ingested,
444// -4 cannot open journal. (-3 window-exceeded was RETIRED 2026-08-20: the marker-verify read is now
445// sized by the journal itself via sys_map_file, so idempotence is verifiable at any journal size.)
446func ch_ingest(fpath: *u8, jpath: *u8, mcx: *i64) -> i64 {
447 mcx[0] = 0
448 // marker = "harvest-ingest:" + basename(fpath)
449 var bs: i64 = 0
450 var i: i64 = 0
451 while fpath[i] != (0 as u8) { if fpath[i] == (47 as u8) { bs = i + 1 } i = i + 1 }
452 let marker: *u8 = sys_mmap(512)
453 var mo: i64 = sj_cat(marker, 0, "harvest-ingest:" as *u8)
454 mo = sj_cat(marker, mo, ((fpath as i64) + bs) as *u8)
455 marker[mo] = 0 as u8
456 let jnn: *i64 = sys_mmap(16) as *i64
457 let jbuf: *u8 = sys_map_file(jpath, jnn)
458 let jn: i64 = jnn[0]
459 if jn > 0 {
460 if ch_find(jbuf, jn, marker) == 1 { sys_munmap(jbuf, jn); return -2 }
461 sys_munmap(jbuf, jn)
462 }
463 let fbuf: *u8 = sys_mmap(CH_WIN)
464 let fcap: i64 = CH_WIN - 8
465 let fn: i64 = ch_read(fpath, fbuf, fcap)
466 if fn <= 0 { return -1 }
467 let fd: i64 = sys_openat_append(jpath, CH_MODE_644)
468 if fd < 0 { return -4 }
469 let sp: *i64 = sys_mmap(16) as *i64
470 let nl: *u8 = sys_mmap(8)
471 nl[0] = 10 as u8
472 var ing: i64 = 0
473 var p: i64 = 0
474 while p < fn {
475 let le: i64 = sj_le(fbuf, p, fn)
476 var ok: i64 = 0
477 if le > p {
478 if sj_col(fbuf, p, le, 5, sp) == 1 {
479 if sj_col(fbuf, p, le, 6, sp) == 0 {
480 if sj_col(fbuf, p, le, 0, sp) == 1 {
481 if ch_digits(fbuf, sp[0], sp[1]) == 1 { ok = 1 }
482 }
483 }
484 }
485 }
486 if ok == 1 {
487 sys_write(fd, ((fbuf as i64) + p) as *u8, le - p)
488 sys_write(fd, nl, 1)
489 ing = ing + 1
490 } else {
491 if le > p { mcx[0] = mcx[0] + 1 }
492 }
493 p = le + 1
494 }
495 let ln: *u8 = sys_mmap(CH_LINE)
496 ch_frame_write(fd, ln, sys_now_realtime_sec(), "harvest" as *u8, "nx_claude_harvest" as *u8, "ingest" as *u8, "ok" as *u8, marker)
497 sys_close(fd)
498 return ing
499}
500// ---------- gauge: outside_permil JSON from a frames journal ----------
501func ch_nishi_tool(q: *u8, s: i64, e: i64) -> i64 {
502 if ch_starts(q, s, e, "mcp__nishi__" as *u8) == 1 { return 1 }
503 if ch_starts(q, s, e, "nx_" as *u8) == 1 { return 1 }
504 if ch_starts(q, s, e, "nishi" as *u8) == 1 { return 1 }
505 if ch_starts(q, s, e, "vizsla" as *u8) == 1 { return 1 }
506 return 0
507}
508func ch_key(d: *u8, o: i64, name: *u8) -> i64 {
509 d[o] = 34 as u8
510 var p: i64 = o + 1
511 p = sj_cat(d, p, name)
512 d[p] = 34 as u8
513 p = p + 1
514 d[p] = 58 as u8
515 p = p + 1
516 return p
517}
518// ---------- bootgauge: SOTA-FROM-THE-FIRST-BYTE (operator 2026-07-24 'go SOTA from the first byte up') ----------
519// For each session (ws) is the FIRST tool nishi-native? A session that opens with nx_seat boot is SOTA
520// from byte 1; one that opens by reading 40KB of memory / scratchpadding is LEGACY. Measures the
521// SOTA-boot ratio + the softer nishi-within-first-K signal. Sessions interned by ws span (bounded, declared).
522const CH_WS_MAX: i64 = 4096
523func ch_bg_intern(q: *u8, cs: i64, ce: i64, wss: *i64, wse: *i64, np: *i64) -> i64 {
524 var i: i64 = 0
525 while i < np[0] {
526 if ce - cs == wse[i] - wss[i] {
527 var m: i64 = 0
528 var eq: i64 = 1
529 while m < ce - cs { if q[cs+m] != q[wss[i]+m] { eq = 0; m = ce - cs } else { m = m + 1 } }
530 if eq == 1 { return i }
531 }
532 i = i + 1
533 }
534 if np[0] >= CH_WS_MAX { return -1 }
535 wss[np[0]] = cs
536 wse[np[0]] = ce
537 np[0] = np[0] + 1
538 return np[0] - 1
539}
540func ch_bootgauge(journal: *u8, k: i64, d: *u8) -> i64 {
541 let q: *u8 = sys_mmap(CH_JWIN)
542 let cap: i64 = CH_JWIN - 8
543 var n: i64 = ch_read(journal, q, cap)
544 if n < 0 { n = 0 }
545 var trunc: i64 = 0
546 if n >= cap { trunc = 1 }
547 let wss: *i64 = sys_mmap(8 * CH_WS_MAX) as *i64
548 let wse: *i64 = sys_mmap(8 * CH_WS_MAX) as *i64
549 let wfn: *i64 = sys_mmap(8 * CH_WS_MAX) as *i64
550 let wnk: *i64 = sys_mmap(8 * CH_WS_MAX) as *i64
551 let wc: *i64 = sys_mmap(8 * CH_WS_MAX) as *i64
552 let np: *i64 = sys_mmap(16) as *i64
553 let sp: *i64 = sys_mmap(16) as *i64
554 var frames: i64 = 0
555 var malformed: i64 = 0
556 var capped: i64 = 0
557 var i: i64 = 0
558 while i < n {
559 let le: i64 = sj_le(q, i, n)
560 if le > i {
561 if sj_col(q, i, le, 1, sp) == 1 {
562 let ws0: i64 = sp[0]
563 let ws1: i64 = sp[1]
564 if sj_col(q, i, le, 2, sp) == 1 {
565 frames = frames + 1
566 let wi: i64 = ch_bg_intern(q, ws0, ws1, wss, wse, np)
567 if wi < 0 { capped = 1 } else {
568 let isn: i64 = ch_nishi_tool(q, sp[0], sp[1])
569 let c: i64 = wc[wi]
570 wc[wi] = c + 1
571 if c == 0 { wfn[wi] = isn }
572 if c < k { if isn == 1 { wnk[wi] = 1 } }
573 }
574 } else { malformed = malformed + 1 }
575 } else { malformed = malformed + 1 }
576 }
577 i = le + 1
578 }
579 var sota: i64 = 0
580 var nishik: i64 = 0
581 var kk: i64 = 0
582 while kk < np[0] {
583 if wfn[kk] == 1 { sota = sota + 1 }
584 if wnk[kk] == 1 { nishik = nishik + 1 }
585 kk = kk + 1
586 }
587 let total: i64 = np[0]
588 var sotaperm: i64 = 0 - 1
589 var nkperm: i64 = 0 - 1
590 if total > 0 { sotaperm = sota * 1000 / total; nkperm = nishik * 1000 / total }
591 var p: i64 = 0
592 d[p] = 123 as u8; p = p + 1
593 p = ch_key(d, p, "v" as *u8); p = sj_catn(d, p, 1); d[p] = 44 as u8; p = p + 1
594 p = ch_key(d, p, "tool" as *u8); d[p]=34 as u8;p=p+1; p = sj_cat(d,p,"nx_claude_harvest" as *u8); d[p]=34 as u8;p=p+1; d[p]=44 as u8;p=p+1
595 p = ch_key(d, p, "averb" as *u8); d[p]=34 as u8;p=p+1; p = sj_cat(d,p,"bootgauge" as *u8); d[p]=34 as u8;p=p+1; d[p]=44 as u8;p=p+1
596 p = ch_key(d, p, "journal_bytes" as *u8); p = sj_catn(d,p,n); d[p]=44 as u8;p=p+1
597 p = ch_key(d, p, "truncated" as *u8); p = sj_catn(d,p,trunc); d[p]=44 as u8;p=p+1
598 p = ch_key(d, p, "k" as *u8); p = sj_catn(d,p,k); d[p]=44 as u8;p=p+1
599 p = ch_key(d, p, "frames" as *u8); p = sj_catn(d,p,frames); d[p]=44 as u8;p=p+1
600 p = ch_key(d, p, "malformed" as *u8); p = sj_catn(d,p,malformed); d[p]=44 as u8;p=p+1
601 p = ch_key(d, p, "sessions" as *u8); p = sj_catn(d,p,total); d[p]=44 as u8;p=p+1
602 p = ch_key(d, p, "sota_first" as *u8); p = sj_catn(d,p,sota); d[p]=44 as u8;p=p+1
603 p = ch_key(d, p, "legacy_first" as *u8); p = sj_catn(d,p,total-sota); d[p]=44 as u8;p=p+1
604 p = ch_key(d, p, "sota_boot_permil" as *u8); p = sj_catn(d,p,sotaperm); d[p]=44 as u8;p=p+1
605 p = ch_key(d, p, "nishi_within_k" as *u8); p = sj_catn(d,p,nishik); d[p]=44 as u8;p=p+1
606 p = ch_key(d, p, "nishi_within_k_permil" as *u8); p = sj_catn(d,p,nkperm); d[p]=44 as u8;p=p+1
607 p = ch_key(d, p, "sessions_capped" as *u8); p = sj_catn(d,p,capped)
608 d[p] = 125 as u8; p = p + 1
609 d[p] = 10 as u8; p = p + 1
610 return p
611}
612// gauge core: g slots 0 total 1 nishi 2 outside 3 permil(legacy,all) 4 malformed 5 trunc 6 bytes
613// 7 beats(verb=run: estate autonomy) 8 claude_actions 9 claude_outside 10 claude_outside_permil
614// FULL journal read via sys_read_file (the 4MB cap SAMPLED THE JULY HEAD -- fixed 2026-09-05).
615// Reliance is measured over CLAUDE-ACTION frames ONLY; estate :run beats are the estate running
616// ITSELF (sovereign) and would dilute the denominator (measured law 2026-09-05).
617func ch_gauge_calc(jpath: *u8, days: i64, g: *i64) -> i64 {
618 let nn: *i64 = sys_mmap(16) as *i64
619 let q: *u8 = sys_read_file(jpath, nn)
620 var n: i64 = nn[0]
621 if n < 0 { n = 0 }
622 let trunc: i64 = 0
623 var cutoff: i64 = 0
624 if days > 0 { cutoff = sys_now_realtime_sec() - days * CH_MAGIC_86400 }
625 let sp: *i64 = sys_mmap(16) as *i64
626 let vp: *i64 = sys_mmap(16) as *i64
627 var total: i64 = 0
628 var nishi: i64 = 0
629 var outside: i64 = 0
630 var malformed: i64 = 0
631 var beats: i64 = 0
632 var cl_total: i64 = 0
633 var cl_outside: i64 = 0
634 var i: i64 = 0
635 while i < n {
636 let le: i64 = sj_le(q, i, n)
637 if le > i {
638 var ok: i64 = 0
639 var ts: i64 = 0
640 var isnishi: i64 = 0
641 var isbeat: i64 = 0
642 if sj_col(q, i, le, 0, sp) == 1 {
643 if ch_digits(q, sp[0], sp[1]) == 1 {
644 ts = sj_atoi_span(q, sp[0], sp[1])
645 if sj_col(q, i, le, 2, sp) == 1 { ok = 1 }
646 }
647 }
648 if ok == 1 {
649 isnishi = ch_nishi_tool(q, sp[0], sp[1])
650 if sj_col(q, i, le, 3, vp) == 1 {
651 if (vp[1] - vp[0]) == 3 { if ch_starts(q, vp[0], vp[1], "run" as *u8) == 1 { isbeat = 1 } }
652 }
653 if ts >= cutoff {
654 total = total + 1
655 if isnishi == 1 { nishi = nishi + 1 } else { outside = outside + 1 }
656 if isbeat == 1 { beats = beats + 1 } else {
657 cl_total = cl_total + 1
658 if isnishi == 0 { cl_outside = cl_outside + 1 }
659 }
660 }
661 } else { malformed = malformed + 1 }
662 }
663 i = le + 1
664 }
665 var permil: i64 = 0 - 1
666 if total > 0 { permil = outside * 1000 / total }
667 var clperm: i64 = 0 - 1
668 if cl_total > 0 { clperm = cl_outside * 1000 / cl_total }
669 g[0] = total
670 g[1] = nishi
671 g[2] = outside
672 g[3] = permil
673 g[4] = malformed
674 g[5] = trunc
675 g[6] = n
676 g[7] = beats
677 g[8] = cl_total
678 g[9] = cl_outside
679 g[10] = clperm
680 g[11] = 0
681 if (q as i64) == 0 { g[11] = 1; return -1 }
682 return 0
683}
684func ch_gauge_json(jpath: *u8, days: i64, d: *u8) -> i64 {
685 let g: *i64 = sys_mmap(128) as *i64
686 ch_gauge_calc(jpath, days, g)
687 let total: i64 = g[0]
688 let nishi: i64 = g[1]
689 let outside: i64 = g[2]
690 let permil: i64 = g[3]
691 let malformed: i64 = g[4]
692 let trunc: i64 = g[5]
693 let n: i64 = g[6]
694 var p: i64 = 0
695 d[p] = 123 as u8; p = p + 1
696 p = ch_key(d, p, "v" as *u8); p = sj_catn(d, p, 1); d[p] = 44 as u8; p = p + 1
697 p = ch_key(d, p, "tool" as *u8)
698 d[p] = 34 as u8; p = p + 1
699 p = sj_cat(d, p, "nx_claude_harvest" as *u8)
700 d[p] = 34 as u8; p = p + 1
701 d[p] = 44 as u8; p = p + 1
702 p = ch_key(d, p, "averb" as *u8)
703 d[p] = 34 as u8; p = p + 1
704 p = sj_cat(d, p, "gauge" as *u8)
705 d[p] = 34 as u8; p = p + 1
706 d[p] = 44 as u8; p = p + 1
707 p = ch_key(d, p, "journal" as *u8)
708 d[p] = 34 as u8; p = p + 1
709 p = sj_cat_esc(d, p, jpath, 0, sj_vlen(jpath), 200)
710 d[p] = 34 as u8; p = p + 1
711 d[p] = 44 as u8; p = p + 1
712 p = ch_key(d, p, "journal_bytes" as *u8); p = sj_catn(d, p, n); d[p] = 44 as u8; p = p + 1
713 p = ch_key(d, p, "truncated" as *u8); p = sj_catn(d, p, trunc); d[p] = 44 as u8; p = p + 1
714 p = ch_key(d, p, "days" as *u8); p = sj_catn(d, p, days); d[p] = 44 as u8; p = p + 1
715 p = ch_key(d, p, "frames_total" as *u8); p = sj_catn(d, p, total); d[p] = 44 as u8; p = p + 1
716 p = ch_key(d, p, "malformed" as *u8); p = sj_catn(d, p, malformed); d[p] = 44 as u8; p = p + 1
717 p = ch_key(d, p, "nishi" as *u8); p = sj_catn(d, p, nishi); d[p] = 44 as u8; p = p + 1
718 p = ch_key(d, p, "outside" as *u8); p = sj_catn(d, p, outside); d[p] = 44 as u8; p = p + 1
719 p = ch_key(d, p, "outside_permil" as *u8); p = sj_catn(d, p, permil); d[p] = 44 as u8; p = p + 1
720 p = ch_key(d, p, "beats" as *u8); p = sj_catn(d, p, g[7]); d[p] = 44 as u8; p = p + 1
721 p = ch_key(d, p, "claude_actions" as *u8); p = sj_catn(d, p, g[8]); d[p] = 44 as u8; p = p + 1
722 p = ch_key(d, p, "claude_outside" as *u8); p = sj_catn(d, p, g[9]); d[p] = 44 as u8; p = p + 1
723 p = ch_key(d, p, "claude_outside_permil" as *u8); p = sj_catn(d, p, g[10])
724 p = sj_cat(d, p, ",\"evidence_state\":\"" as *u8)
725 if g[11] == 1 { p = sj_cat(d, p, "source_open_failed" as *u8) } else { p = sj_cat(d, p, "source_opened" as *u8) }
726 p = sj_cat(d, p, "\",\"measurement_scope\":\"observed_journal_tool_frames\",\"actor_work_share\":null,\"token_cost\":null,\"verified_delivery_share\":null,\"read_integrity_verified\":false" as *u8)
727 d[p] = 125 as u8; p = p + 1
728 d[p] = 10 as u8; p = p + 1
729 return p
730}
731// ---------- page: the F965 watch-it-fall surface (HTML, minimal; U2/U3 restyle rides ui-debt lane) ----------
732func ch_page(jpath: *u8, outp: *u8, days: i64) -> i64 {
733 let g: *i64 = sys_mmap(128) as *i64
734 ch_gauge_calc(jpath, days, g)
735 let d: *u8 = sys_mmap(CH_OUT)
736 var p: i64 = 0
737 d[p] = 60 as u8; p = p + 1
738 d[p] = 33 as u8; p = p + 1
739 p = sj_cat(d, p, "doctype html><html><head><meta charset=\"utf-8\"><title>Outside Gauge</title></head><body>" as *u8)
740 p = sj_cat(d, p, "<h1>Outside Gauge</h1><p>share of observed tool actions still OUTSIDE the nishi ecosystem (permil, derived from the sovereign actlog)</p>" as *u8)
741 p = sj_cat(d, p, "<p style=\"font-size:64px;margin:8px 0\">" as *u8)
742 p = sj_catn(d, p, g[10])
743 p = sj_cat(d, p, "‰</p>" as *u8)
744 p = sj_cat(d, p, "<p>outside_permil=" as *u8)
745 p = sj_catn(d, p, g[3])
746 p = sj_cat(d, p, " (frames=" as *u8)
747 p = sj_catn(d, p, g[0])
748 p = sj_cat(d, p, " nishi=" as *u8)
749 p = sj_catn(d, p, g[1])
750 p = sj_cat(d, p, " outside=" as *u8)
751 p = sj_catn(d, p, g[2])
752 p = sj_cat(d, p, " malformed=" as *u8)
753 p = sj_catn(d, p, g[4])
754 p = sj_cat(d, p, " truncated=" as *u8)
755 p = sj_catn(d, p, g[5])
756 p = sj_cat(d, p, " days=" as *u8)
757 p = sj_catn(d, p, days)
758 p = sj_cat(d, p, ")</p>" as *u8)
759 p = sj_cat(d, p, "<p>claude_outside_permil=" as *u8)
760 p = sj_catn(d, p, g[10])
761 p = sj_cat(d, p, " (claude_actions=" as *u8)
762 p = sj_catn(d, p, g[8])
763 p = sj_cat(d, p, " claude_outside=" as *u8)
764 p = sj_catn(d, p, g[9])
765 p = sj_cat(d, p, " estate_beats_excluded=" as *u8)
766 p = sj_catn(d, p, g[7])
767 p = sj_cat(d, p, ")</p>" as *u8)
768 p = sj_cat(d, p, "<p>Baseline 2026-07-23: laptop 651 / sovereign 643. This number must FALL as capabilities move inside (minergap- MG00-MG11; frontier F964-F973).</p>" as *u8)
769 p = sj_cat(d, p, "<p><a href=\"/wsmine\">wsmine</a> <a href=\"/claims\">claims</a> <a href=\"/intake\">intake</a> <a href=\"/frontier\">frontier</a></p>" as *u8)
770 p = sj_cat(d, p, "<p>emitted by nx_claude_harvest page (hourly beat); journal " as *u8)
771 p = sj_cat(d, p, jpath)
772 p = sj_cat(d, p, "</p></body></html>" as *u8)
773 let fd: i64 = sys_openat_wr(outp, CH_MODE_644)
774 if fd < 0 { return -1 }
775 sys_write(fd, d, p)
776 sys_close(fd)
777 return 0
778}
779// ---------- classes: the residual BY TOOL, whole partition (SV2, 2026-09-05) ----------
780// Over CLAUDE-ACTION frames only (estate :run beats excluded), count outside frames per tool name.
781// The emitted list is the top CH_CLS_SHOW by count plus an OTHER bucket so the partition SUMS to
782// claude_outside; the table cap is named and frames beyond it are COUNTED (classes_unnamed_overflow),
783// never silently dropped. Today (2026-09-05) nx_actlog freq could only show the top 30 of 1,635 tool:verb
784// pairs across ALL frames; this verb answers the residual question directly and feeds the journal row.
785const CH_CLS_MAX: i64 = 512 // distinct outside tool names tracked (transcript tool names measured ~60 distinct)
786const CH_CLS_NAME: i64 = 64 // one name cell; longest builtin tool name measured well under this
787const CH_CLS_SHOW: i64 = 12 // JSON shows this many, the rest fold into other
788const CH_CLS_JSHOW: i64 = 6 // the journal row shows this many, the rest fold into other
789func ch_classes_calc(jpath: *u8, names: *u8, counts: *i64, c: *i64) -> i64 {
790 let nn: *i64 = sys_mmap(16) as *i64
791 let q: *u8 = sys_read_file(jpath, nn)
792 var n: i64 = nn[0]
793 if n < 0 { n = 0 }
794 let sp: *i64 = sys_mmap(16) as *i64
795 let vp: *i64 = sys_mmap(16) as *i64
796 var ncls: i64 = 0
797 var ovf: i64 = 0
798 var outside: i64 = 0
799 var i: i64 = 0
800 while i < n {
801 let le: i64 = sj_le(q, i, n)
802 if le > i {
803 var ok: i64 = 0
804 if sj_col(q, i, le, 0, sp) == 1 { if ch_digits(q, sp[0], sp[1]) == 1 { if sj_col(q, i, le, 2, sp) == 1 { ok = 1 } } }
805 if ok == 1 {
806 var isbeat: i64 = 0
807 if sj_col(q, i, le, 3, vp) == 1 { if (vp[1] - vp[0]) == 3 { if ch_starts(q, vp[0], vp[1], "run" as *u8) == 1 { isbeat = 1 } } }
808 if isbeat == 0 { if ch_nishi_tool(q, sp[0], sp[1]) == 0 {
809 outside = outside + 1
810 var tl: i64 = sp[1] - sp[0]
811 if tl > CH_CLS_NAME - 1 { tl = CH_CLS_NAME - 1 }
812 var hit: i64 = 0 - 1
813 var k: i64 = 0
814 while k < ncls {
815 let nm: *u8 = ((names as i64) + k * CH_CLS_NAME) as *u8
816 var m: i64 = 0
817 var same: i64 = 1
818 while m < tl { if nm[m] != q[sp[0] + m] { same = 0; m = tl } else { m = m + 1 } }
819 if same == 1 { if nm[tl] == (0 as u8) { hit = k; k = ncls } }
820 k = k + 1
821 }
822 if hit >= 0 { counts[hit] = counts[hit] + 1 } else {
823 if ncls < CH_CLS_MAX {
824 let nm2: *u8 = ((names as i64) + ncls * CH_CLS_NAME) as *u8
825 var m2: i64 = 0
826 while m2 < tl { nm2[m2] = q[sp[0] + m2]; m2 = m2 + 1 }
827 nm2[tl] = 0 as u8
828 counts[ncls] = 1
829 ncls = ncls + 1
830 } else { ovf = ovf + 1 }
831 }
832 } }
833 }
834 }
835 i = le + 1
836 }
837 c[0] = ncls
838 c[1] = ovf
839 return outside
840}
841func ch_classes_top(counts: *i64, used: *i64, ncls: i64) -> i64 {
842 var best: i64 = 0 - 1
843 var k: i64 = 0
844 while k < ncls { if used[k] == 0 { if best < 0 { best = k } else { if counts[k] > counts[best] { best = k } } } k = k + 1 }
845 return best
846}
847func ch_classes_cat(d: *u8, o0: i64, names: *u8, counts: *i64, ncls: i64, show: i64, outside: i64) -> i64 {
848 var o: i64 = o0
849 let used: *i64 = sys_mmap(CH_CLS_MAX * 8) as *i64
850 var shown: i64 = 0
851 var acc: i64 = 0
852 var s: i64 = 0
853 while s < show {
854 let b: i64 = ch_classes_top(counts, used, ncls)
855 if b >= 0 {
856 used[b] = 1
857 if shown > 0 { o = sj_cat(d, o, "," as *u8) }
858 o = sj_cat(d, o, ((names as i64) + b * CH_CLS_NAME) as *u8)
859 o = sj_cat(d, o, ":" as *u8)
860 o = sj_catn(d, o, counts[b])
861 acc = acc + counts[b]
862 shown = shown + 1
863 }
864 s = s + 1
865 }
866 if shown > 0 { o = sj_cat(d, o, "," as *u8) }
867 o = sj_cat(d, o, "other:" as *u8)
868 o = sj_catn(d, o, outside - acc)
869 return o
870}
871func ch_classes_json(jpath: *u8, d: *u8) -> i64 {
872 let names: *u8 = sys_mmap(CH_CLS_MAX * CH_CLS_NAME)
873 let counts: *i64 = sys_mmap(CH_CLS_MAX * 8) as *i64
874 let c: *i64 = sys_mmap(16) as *i64
875 let outside: i64 = ch_classes_calc(jpath, names, counts, c)
876 var p: i64 = 0
877 d[p] = 123 as u8; p = p + 1
878 p = ch_key(d, p, "v" as *u8); p = sj_catn(d, p, 1); d[p] = 44 as u8; p = p + 1
879 p = ch_key(d, p, "tool" as *u8); d[p] = 34 as u8; p = p + 1; p = sj_cat(d, p, "nx_claude_harvest" as *u8); d[p] = 34 as u8; p = p + 1; d[p] = 44 as u8; p = p + 1
880 p = ch_key(d, p, "averb" as *u8); d[p] = 34 as u8; p = p + 1; p = sj_cat(d, p, "classes" as *u8); d[p] = 34 as u8; p = p + 1; d[p] = 44 as u8; p = p + 1
881 p = ch_key(d, p, "claude_outside" as *u8); p = sj_catn(d, p, outside); d[p] = 44 as u8; p = p + 1
882 p = ch_key(d, p, "classes_distinct" as *u8); p = sj_catn(d, p, c[0]); d[p] = 44 as u8; p = p + 1
883 p = ch_key(d, p, "classes_table_cap" as *u8); p = sj_catn(d, p, CH_CLS_MAX); d[p] = 44 as u8; p = p + 1
884 p = ch_key(d, p, "classes_unnamed_overflow" as *u8); p = sj_catn(d, p, c[1]); d[p] = 44 as u8; p = p + 1
885 var show: i64 = CH_CLS_SHOW
886 if c[0] < show { show = c[0] }
887 p = ch_key(d, p, "classes_shown" as *u8); p = sj_catn(d, p, show); d[p] = 44 as u8; p = p + 1
888 p = ch_key(d, p, "top_and_other" as *u8); d[p] = 34 as u8; p = p + 1
889 p = ch_classes_cat(d, p, names, counts, c[0], show, outside)
890 d[p] = 34 as u8; p = p + 1
891 d[p] = 125 as u8; p = p + 1
892 d[p] = 10 as u8; p = p + 1
893 return p
894}
895// ch_classes: THE CONTRACT SYMBOL named by the sovereignty board (SV2, watch _ABSENT_:ch_classes). The symbol
896// ruler (nx_symdecl_lib sd_present) applies the DECLARATION rule to a .nx organ and never falls back to a
897// substring for a lowercase identifier, so ch_classes_json alone can never flip the cell: the board named
898// ch_classes, so ch_classes is what ships. One entry point over the verb, declared here AND called by main.
899func ch_classes(jpath: *u8, d: *u8) -> i64 { return ch_classes_json(jpath, d) }
900// ---------- journal: the SELF-UPDATING number on /compare (2026-09-05) ----------
901// Appends ONE `log|<epoch>|<rung>|measure|...` row to a domain .plan per UTC day (idempotent by a day
902// marker carried in the row), so the compare emitter renders the live reliance number beside the rung
903// with ZERO seat tokens. Wired on the plan-wsmine- beat. Codes: 0 written | 1 plan missing or unwritable
904// (a beat NEVER creates a plan) | 4 already journaled today | 5 insufficient data (never journal a -1).
905func ch_journal(jpath: *u8, planpath: *u8, rung: *u8) -> i64 {
906 let g: *i64 = sys_mmap(128) as *i64
907 ch_gauge_calc(jpath, 0, g)
908 if g[8] <= 0 { return 5 }
909 let now: i64 = sys_now_realtime_sec()
910 let day: i64 = now / CH_MAGIC_86400
911 let nn: *i64 = sys_mmap(16) as *i64
912 let pb: *u8 = sys_read_file(planpath, nn)
913 let pn: i64 = nn[0]
914 if pn <= 0 { return 1 }
915 let mk: *u8 = sys_mmap(128)
916 var mo: i64 = sj_cat(mk, 0, "[HARV:journal:day=" as *u8)
917 mo = sj_catn(mk, mo, day)
918 mo = sj_cat(mk, mo, "]" as *u8)
919 mk[mo] = 0 as u8
920 if ch_find(pb, pn, mk) == 1 { return 4 }
921 let row: *u8 = sys_mmap(CH_LINE)
922 var o: i64 = sj_cat(row, 0, "log|" as *u8)
923 o = sj_catn(row, o, now)
924 o = sj_cat(row, o, "|" as *u8)
925 o = sj_cat(row, o, rung)
926 o = sj_cat(row, o, "|measure|" as *u8)
927 o = sj_cat(row, o, mk)
928 o = sj_cat(row, o, " claude_outside_permil=" as *u8)
929 o = sj_catn(row, o, g[10])
930 o = sj_cat(row, o, " claude_actions=" as *u8)
931 o = sj_catn(row, o, g[8])
932 o = sj_cat(row, o, " claude_outside=" as *u8)
933 o = sj_catn(row, o, g[9])
934 o = sj_cat(row, o, " estate_beats_excluded=" as *u8)
935 o = sj_catn(row, o, g[7])
936 o = sj_cat(row, o, " frames_total=" as *u8)
937 o = sj_catn(row, o, g[0])
938 o = sj_cat(row, o, " journal_bytes=" as *u8)
939 o = sj_catn(row, o, g[6])
940 let cn: *u8 = sys_mmap(CH_CLS_MAX * CH_CLS_NAME)
941 let cc: *i64 = sys_mmap(CH_CLS_MAX * 8) as *i64
942 let cx: *i64 = sys_mmap(16) as *i64
943 let cout2: i64 = ch_classes_calc(jpath, cn, cc, cx)
944 o = sj_cat(row, o, " outside_by_tool=" as *u8)
945 var jshow: i64 = CH_CLS_JSHOW
946 if cx[0] < jshow { jshow = cx[0] }
947 o = ch_classes_cat(row, o, cn, cc, cx[0], jshow, cout2)
948 o = sj_cat(row, o, " (nx_claude_harvest journal: full read, estate beats excluded, one row per UTC day)" as *u8)
949 row[o] = 10 as u8
950 o = o + 1
951 let fd: i64 = sys_openat_append(planpath, CH_MODE_644)
952 if fd < 0 { return 1 }
953 sys_write(fd, row, o)
954 sys_close(fd)
955 return 0
956}
957// ---------- F971 propose: the gauge FILES its own migration work (feeder pattern) ----------
958// codes: 0 filed | 1 filer-fail | 2 below-threshold | 3 intake-window-exceeded (fail closed) |
959// 4 already-proposed (marker) | 5 insufficient-data. Filer is INJECTABLE (argecho in the
960// gate) and ALLOWLIST-RESOLVED (never a hardcoded sibling path). Marker [HARV:outsidegap:v1]
961// makes re-runs never re-file. NOTE ch_allow_path duplicates nx_actlog al_allow_path -- the
962// shared nx_jrnl_lib extraction is the filed rule-15 residual.
963// DELEGATES to the shared base (rule-15 extraction 2026-07-23)
964func ch_allow_path(name: *u8, outp: *u8) -> i64 { return sj_allow_path(name, outp) }
965func ch_propose(jpath: *u8, ipath: *u8, thr: i64, filer: *u8, cout: *u8, colen: *i64) -> i64 {
966 colen[0] = 0
967 let g: *i64 = sys_mmap(128) as *i64
968 ch_gauge_calc(jpath, 0, g)
969 if g[3] < 0 { return 5 }
970 if g[3] < thr { return 2 }
971 let jb: *u8 = sys_mmap(CH_JWIN)
972 let jcap: i64 = CH_JWIN - 8
973 let jn: i64 = ch_read(ipath, jb, jcap)
974 if jn >= jcap { return 3 }
975 if jn > 0 { if ch_find(jb, jn, "[HARV:outsidegap:v1]" as *u8) == 1 { return 4 } }
976 let fpath: *u8 = sys_mmap(512)
977 if ch_allow_path(filer, fpath) == 0 { return 1 }
978 let txt: *u8 = sys_mmap(CH_LINE)
979 var o: i64 = sj_cat(txt, 0, "[HARV:outsidegap:v1] outside_permil=" as *u8)
980 o = sj_catn(txt, o, g[3])
981 o = sj_cat(txt, o, " over threshold " as *u8)
982 o = sj_catn(txt, o, thr)
983 o = sj_cat(txt, o, " (frames=" as *u8)
984 o = sj_catn(txt, o, g[0])
985 o = sj_cat(txt, o, " nishi=" as *u8)
986 o = sj_catn(txt, o, g[1])
987 o = sj_cat(txt, o, " outside=" as *u8)
988 o = sj_catn(txt, o, g[2])
989 o = sj_cat(txt, o, ") - drive capability-migration from the minergap- catalog MG01-MG11 / frontier F964-F973; auto-filed by nx_claude_harvest propose" as *u8)
990 txt[o] = 0 as u8
991 let av: *i64 = sys_mmap(64) as *i64
992 av[0] = fpath as i64
993 av[1] = "ask" as *u8 as i64
994 av[2] = ipath as i64
995 av[3] = "nx_claude_harvest" as *u8 as i64
996 av[4] = txt as i64
997 av[5] = 0
998 let ex: i64 = tr_run_capture(fpath, av, cout, CH_LINE - 8, colen)
999 if ex != 0 { return 1 }
1000 return 0
1001}
1002// ---------- selftest ----------
1003func ch_selftest(prefix: *u8) -> i64 {
1004 let ctr: *i64 = gv_ctr()
1005 gv_head("nx_claude_harvest selftest -- transcript parse + ingest + gauge teeth (unique scratch per run)" as *u8)
1006 // MICROSECOND stamp (2026-09-05): a second-resolution scratch name collided when nx_behaveprobe ran the live and the
1007 // staged selftest inside one second -- the second run found the first run's T15 marker already seeded and T14 refused.
1008 // The beat fixed this exact class on its piece names; the selftest now stamps the same way.
1009 let now: i64 = sys_now_realtime_us()
1010 let tj: *u8 = sys_mmap(512)
1011 var o: i64 = sj_cat(tj, 0, prefix)
1012 o = sj_catn(tj, o, now)
1013 o = sj_cat(tj, o, ".jsonl" as *u8)
1014 tj[o] = 0 as u8
1015 let fr: *u8 = sys_mmap(512)
1016 o = sj_cat(fr, 0, prefix)
1017 o = sj_catn(fr, o, now)
1018 o = sj_cat(fr, o, ".frames" as *u8)
1019 fr[o] = 0 as u8
1020 let st: *u8 = sys_mmap(512)
1021 o = sj_cat(st, 0, prefix)
1022 o = sj_catn(st, o, now)
1023 o = sj_cat(st, o, ".staged" as *u8)
1024 st[o] = 0 as u8
1025 let jr: *u8 = sys_mmap(512)
1026 o = sj_cat(jr, 0, prefix)
1027 o = sj_catn(jr, o, now)
1028 o = sj_cat(jr, o, ".jrnl" as *u8)
1029 jr[o] = 0 as u8
1030 // fixture transcript: decoy name outside tool_use + 2 tool_use on one line + 1 on another
1031 let tfd: i64 = sys_openat_append(tj, CH_MODE_644)
1032 let lb: *u8 = sys_mmap(CH_LINE)
1033 var lo: i64 = sj_cat(lb, 0, "{\"type\":\"user\",\"name\":\"decoy1\",\"timestamp\":\"2026-07-23T00:00:00Z\"}" as *u8)
1034 lb[lo] = 10 as u8
1035 sys_write(tfd, lb, lo + 1)
1036 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:01Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"a\",\"name\":\"Edit\"},{\"type\":\"tool_use\",\"id\":\"b\",\"name\":\"PowerShell\"}]}" as *u8)
1037 lb[lo] = 10 as u8
1038 sys_write(tfd, lb, lo + 1)
1039 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:02Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"c\",\"name\":\"mcp__nishi__nx_fs\"}]}" as *u8)
1040 lb[lo] = 10 as u8
1041 sys_write(tfd, lb, lo + 1)
1042 sys_close(tfd)
1043 // T1 harvest exact: 3 frames, decoy never harvested
1044 let tcx: *i64 = sys_mmap(16) as *i64
1045 let got: i64 = ch_frames(tj, "wtest" as *u8, fr, tcx)
1046 let fb: *u8 = sys_mmap(CH_JWIN)
1047 let fn: i64 = ch_read(fr, fb, CH_JWIN - 8)
1048 var ok1: i64 = 0
1049 if got == 3 { if fn > 0 { if ch_find(fb, fn, "Edit" as *u8) == 1 { if ch_find(fb, fn, "PowerShell" as *u8) == 1 { if ch_find(fb, fn, "decoy1" as *u8) == 0 { ok1 = 1 } } } } }
1050 gv_check("T1 harvest exactly the 3 tool_use names, decoy name never fabricated" as *u8, ok1, ctr)
1051 // T2 iso timestamp -> epoch propagated (2026-07-23T00:00:01Z = 1784764801)
1052 var ok2: i64 = 0
1053 if ch_find(fb, fn, "1784764801" as *u8) == 1 { if ch_find(fb, fn, "1784764802" as *u8) == 1 { ok2 = 1 } }
1054 gv_check("T2 iso timestamps parsed to exact epochs" as *u8, ok2, ctr)
1055 // T3 gauge exact split: Edit+PowerShell outside, nx_fs nishi -> 666 permil
1056 let d: *u8 = sys_mmap(CH_OUT)
1057 var dl: i64 = ch_gauge_json(fr, 0, d)
1058 var ok3: i64 = 0
1059 if dl > 0 { if ch_find(d, dl, "\"frames_total\":3" as *u8) == 1 { if ch_find(d, dl, "\"outside_permil\":666" as *u8) == 1 { ok3 = 1 } } }
1060 gv_check("T3 gauge exact: 2 outside 1 nishi = 666 permil" as *u8, ok3, ctr)
1061 // T4 gauge on missing journal refuses a number (-1, insufficient data honesty)
1062 let miss: *u8 = sys_mmap(512)
1063 o = sj_cat(miss, 0, prefix)
1064 o = sj_catn(miss, o, now)
1065 o = sj_cat(miss, o, ".absent" as *u8)
1066 miss[o] = 0 as u8
1067 dl = ch_gauge_json(miss, 0, d)
1068 var ok4: i64 = 0
1069 if dl > 0 { if ch_find(d, dl, "\"frames_total\":0" as *u8) == 1 { if ch_find(d, dl, "\"outside_permil\":-1" as *u8) == 1 { ok4 = 1 } } }
1070 gv_check("T4 empty journal refuses permil (-1) never fabricates" as *u8, ok4, ctr)
1071 gv_check("T4a missing source is explicitly unavailable", ch_find(d, dl, "\"evidence_state\":\"source_open_failed\"" as *u8), ctr)
1072 let empty45: *u8 = sys_mmap(CH_PATH_MAX)
1073 var e45: i64 = sj_cat(empty45, 0, miss)
1074 e45 = sj_cat(empty45, e45, ".empty" as *u8)
1075 empty45[e45] = 0 as u8
1076 let emptyfd45: i64 = sys_openat_wr(empty45, CH_MODE_644)
1077 var emptyok45: i64 = 0
1078 if emptyfd45 >= 0 {
1079 sys_close(emptyfd45)
1080 dl = ch_gauge_json(empty45, 0, d)
1081 emptyok45 = ch_find(d, dl, "\"evidence_state\":\"source_opened\"" as *u8)
1082 }
1083 gv_check("T4b readable empty source differs from missing source", emptyok45, ctr)
1084 gv_check("T4c activity is not presented as delivery or cost", ch_find(d, dl, "\"verified_delivery_share\":null" as *u8), ctr)
1085 // T5 ingest: 2 valid + 1 malformed staged line -> journal gains exactly the 2 + marker
1086 ch_frame_append(st, CH_MAGIC_1784764900, "w2" as *u8, "Read" as *u8, "use" as *u8, "-" as *u8, "harvest" as *u8)
1087 ch_frame_append(st, CH_MAGIC_1784764901, "w2" as *u8, "nx_fs_write" as *u8, "use" as *u8, "-" as *u8, "harvest" as *u8)
1088 let sfd: i64 = sys_openat_append(st, CH_MODE_644)
1089 var go2: i64 = sj_cat(lb, 0, "garbage-no-tabs" as *u8)
1090 lb[go2] = 10 as u8
1091 sys_write(sfd, lb, go2 + 1)
1092 sys_close(sfd)
1093 let mcx: *i64 = sys_mmap(16) as *i64
1094 let r5: i64 = ch_ingest(st, jr, mcx)
1095 let jb: *u8 = sys_mmap(CH_JWIN)
1096 var jn: i64 = ch_read(jr, jb, CH_JWIN - 8)
1097 var ok5: i64 = 0
1098 if r5 == 2 { if mcx[0] == 1 { if ch_find(jb, jn, "Read" as *u8) == 1 { if ch_find(jb, jn, "harvest-ingest:" as *u8) == 1 { if ch_find(jb, jn, "garbage-no-tabs" as *u8) == 0 { ok5 = 1 } } } } }
1099 gv_check("T5 ingest validates: 2 in, malformed counted out, marker banked" as *u8, ok5, ctr)
1100 // T6 idempotent: second ingest refuses, journal bytes unchanged
1101 let r6: i64 = ch_ingest(st, jr, mcx)
1102 let jn2: i64 = ch_read(jr, jb, CH_JWIN - 8)
1103 var ok6: i64 = 0
1104 if r6 == (0 - 2) { if jn2 == jn { ok6 = 1 } }
1105 gv_check("T6 re-ingest ALREADY, journal byte-identical" as *u8, ok6, ctr)
1106 // T7 missing transcript fails closed
1107 let r7: i64 = ch_frames(miss, "w" as *u8, fr, tcx)
1108 var ok7: i64 = 0
1109 if r7 == (0 - 1) { ok7 = 1 }
1110 gv_check("T7 missing transcript refused (-1) fail closed" as *u8, ok7, ctr)
1111 // T8 sovereign-organ frames (nx_ prefix) classify as nishi: add one -> 2 outside / 2 nishi = 500
1112 ch_frame_append(fr, CH_MAGIC_1784764803, "wtest" as *u8, "nx_shelltool" as *u8, "use" as *u8, "-" as *u8, "harvest" as *u8)
1113 dl = ch_gauge_json(fr, 0, d)
1114 var ok8: i64 = 0
1115 if dl > 0 { if ch_find(d, dl, "\"frames_total\":4" as *u8) == 1 { if ch_find(d, dl, "\"outside_permil\":500" as *u8) == 1 { ok8 = 1 } } }
1116 gv_check("T8 nx_-prefixed frames count as nishi (500 permil exact)" as *u8, ok8, ctr)
1117 // T9 page emits the exact gauge + title (from the T8 journal: permil 500)
1118 let pg: *u8 = sys_mmap(512)
1119 o = sj_cat(pg, 0, prefix)
1120 o = sj_catn(pg, o, now)
1121 o = sj_cat(pg, o, ".html" as *u8)
1122 pg[o] = 0 as u8
1123 let r9: i64 = ch_page(fr, pg, 0)
1124 let pb: *u8 = sys_mmap(CH_OUT)
1125 let pn: i64 = ch_read(pg, pb, CH_OUT - 8)
1126 var ok9: i64 = 0
1127 if r9 == 0 { if pn > 0 { if ch_find(pb, pn, "outside_permil=500" as *u8) == 1 { if ch_find(pb, pn, "Outside Gauge" as *u8) == 1 { ok9 = 1 } } } }
1128 gv_check("T9 page emits the exact gauge + title" as *u8, ok9, ctr)
1129 // T13-T16 propose (F971): threshold honesty, injectable filer, marker idempotence, insufficient refuse
1130 let ijr: *u8 = sys_mmap(512)
1131 o = sj_cat(ijr, 0, prefix)
1132 o = sj_catn(ijr, o, now)
1133 o = sj_cat(ijr, o, ".ijr" as *u8)
1134 ijr[o] = 0 as u8
1135 let pcl: *i64 = sys_mmap(16) as *i64
1136 let r13: i64 = ch_propose(fr, ijr, 600, "argecho" as *u8, d, pcl)
1137 var ok13: i64 = 0
1138 if r13 == 2 { ok13 = 1 }
1139 gv_check("T13 below threshold never files (code 2)" as *u8, ok13, ctr)
1140 // T14 needs a RESOLVABLE filer, and resolution runs through sj_allow_path, which opens
1141 // "tool_allowlist.conf" as a BARE path -- i.e. relative to the CWD. On any host/CWD without one
1142 // (every WSL run of this gate) the filer cannot be resolved, and this tooth then reported the
1143 // ORGAN as broken when only its environment was absent: the same binary reads 39/40 RED from /tmp
1144 // and 40/40 GREEN from a CWD holding one row. MEASURED 2026-08-20.
1145 // ***** AN AXIS THAT CANNOT SEE MUST ABSTAIN, NOT CONVICT -- and a gate that goes RED on its own
1146 // environment is the permanently-red detector everyone learns to ignore.
1147 let t14p: *u8 = sys_mmap(CH_BT_PATHMAX)
1148 if gv_need("propose filer resolvable via a CWD-relative tool_allowlist.conf" as *u8, ch_allow_path("argecho" as *u8, t14p), ctr) == 1 {
1149 let r14: i64 = ch_propose(fr, ijr, 400, "argecho" as *u8, d, pcl)
1150 var ok14: i64 = 0
1151 if r14 == 0 { if pcl[0] > 0 { if ch_find(d, pcl[0], "[HARV:outsidegap:v1] outside_permil=500" as *u8) == 1 { ok14 = 1 } } }
1152 gv_check("T14 above threshold files through the injected filer w/ exact marker+permil" as *u8, ok14, ctr)
1153 }
1154 let mfd: i64 = sys_openat_append(ijr, CH_MODE_644)
1155 let mln: *u8 = sys_mmap(256)
1156 var mo2: i64 = sj_cat(mln, 0, "1 seeded [HARV:outsidegap:v1] marker" as *u8)
1157 mln[mo2] = 10 as u8
1158 sys_write(mfd, mln, mo2 + 1)
1159 sys_close(mfd)
1160 let r15: i64 = ch_propose(fr, ijr, 400, "argecho" as *u8, d, pcl)
1161 var ok15: i64 = 0
1162 if r15 == 4 { ok15 = 1 }
1163 gv_check("T15 marker present refuses re-file (code 4, idempotent)" as *u8, ok15, ctr)
1164 let r16: i64 = ch_propose(miss, ijr, 400, "argecho" as *u8, d, pcl)
1165 var ok16: i64 = 0
1166 if r16 == 5 { ok16 = 1 }
1167 gv_check("T16 insufficient data refuses to propose (code 5)" as *u8, ok16, ctr)
1168 // T17-T20 DELTA (F973): exactly-once harvest by byte high-water mark
1169 let dj: *u8 = sys_mmap(512)
1170 o = sj_cat(dj, 0, prefix)
1171 o = sj_catn(dj, o, now)
1172 o = sj_cat(dj, o, ".dj" as *u8)
1173 dj[o] = 0 as u8
1174 let hw: *u8 = sys_mmap(512)
1175 o = sj_cat(hw, 0, prefix)
1176 o = sj_catn(hw, o, now)
1177 o = sj_cat(hw, o, ".hwm" as *u8)
1178 hw[o] = 0 as u8
1179 let hcx: *i64 = sys_mmap(64) as *i64
1180 // tj holds 3 lines / 3 tool_use frames from T1
1181 let rd1: i64 = ch_delta(tj, "wd" as *u8, dj, hw, hcx)
1182 var ok17: i64 = 0
1183 if rd1 == 0 { if hcx[0] == 3 { if hcx[2] == 0 { if hcx[1] > 0 { ok17 = 1 } } } }
1184 gv_check("T17 first delta harvests all 3 frames and banks a high-water mark" as *u8, ok17, ctr)
1185 let firsthwm: i64 = hcx[1]
1186 let rd2: i64 = ch_delta(tj, "wd" as *u8, dj, hw, hcx)
1187 var ok18: i64 = 0
1188 if rd2 == 0 { if hcx[0] == 0 { if hcx[1] == firsthwm { ok18 = 1 } } }
1189 gv_check("T18 re-run on an unchanged transcript harvests ZERO (exactly-once, no marker needed)" as *u8, ok18, ctr)
1190 // grow the transcript by ONE complete line (1 tool_use) + a PARTIAL trailing line
1191 let gfd: i64 = sys_openat_append(tj, CH_MODE_644)
1192 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:03Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"g\",\"name\":\"Grep\"}]}" as *u8)
1193 lb[lo] = 10 as u8
1194 sys_write(gfd, lb, lo + 1)
1195 lo = sj_cat(lb, 0, "{\"type\":\"tool_use\",\"name\":\"PartialNeverCounted\"" as *u8)
1196 sys_write(gfd, lb, lo)
1197 sys_close(gfd)
1198 let rd3: i64 = ch_delta(tj, "wd" as *u8, dj, hw, hcx)
1199 var ok19: i64 = 0
1200 if rd3 == 0 { if hcx[0] == 1 { if hcx[2] == firsthwm { ok19 = 1 } } }
1201 gv_check("T19 growth harvests ONLY the new line (1 frame), resuming from the banked mark" as *u8, ok19, ctr)
1202 let db: *u8 = sys_mmap(CH_JWIN)
1203 let dn: i64 = ch_read(dj, db, CH_JWIN - 8)
1204 var ok20: i64 = 0
1205 if dn > 0 { if ch_find(db, dn, "Grep" as *u8) == 1 { if ch_find(db, dn, "PartialNeverCounted" as *u8) == 0 { ok20 = 1 } } }
1206 gv_check("T20 a PARTIAL trailing line is never consumed (waits below the mark)" as *u8, ok20, ctr)
1207 // T21-T23 PARTITION (2026-09-05): estate :run beats excluded from the reliance denominator.
1208 // Fixture: 1 outside claude action + 1 nishi claude action + 3 nishi estate beats (verb run).
1209 // Legacy outside_permil counts all 5 (nishi beats dilute -> 200); claude_outside_permil counts
1210 // ONLY the 2 claude actions -> 500 (beats=3). 500 != 200 proves the partition actually fired.
1211 let pj: *u8 = sys_mmap(512)
1212 var po: i64 = sj_cat(pj, 0, prefix)
1213 po = sj_catn(pj, po, now)
1214 po = sj_cat(pj, po, ".pj" as *u8)
1215 pj[po] = 0 as u8
1216 ch_frame_append(pj, CH_MAGIC_1784764900, "wp" as *u8, "PowerShell" as *u8, "use" as *u8, "-" as *u8, "act" as *u8)
1217 ch_frame_append(pj, CH_MAGIC_1784764901, "wp" as *u8, "nx_fs" as *u8, "call" as *u8, "-" as *u8, "act" as *u8)
1218 ch_frame_append(pj, CH_MAGIC_1784764803, "wp" as *u8, "nx_netobs.elf" as *u8, "run" as *u8, "-" as *u8, "beat" as *u8)
1219 ch_frame_append(pj, CH_MAGIC_1784764803, "wp" as *u8, "nx_resmon.elf" as *u8, "run" as *u8, "-" as *u8, "beat" as *u8)
1220 ch_frame_append(pj, CH_MAGIC_1784764803, "wp" as *u8, "nx_memvel.elf" as *u8, "run" as *u8, "-" as *u8, "beat" as *u8)
1221 dl = ch_gauge_json(pj, 0, d)
1222 var ok21: i64 = 0
1223 if dl > 0 { if ch_find(d, dl, "\"frames_total\":5" as *u8) == 1 { if ch_find(d, dl, "\"beats\":3" as *u8) == 1 { if ch_find(d, dl, "\"claude_actions\":2" as *u8) == 1 { ok21 = 1 } } } }
1224 gv_check("T21 estate :run beats partitioned out: 5 frames, 3 beats, 2 claude actions" as *u8, ok21, ctr)
1225 var ok22: i64 = 0
1226 if dl > 0 { if ch_find(d, dl, "\"claude_outside_permil\":500" as *u8) == 1 { if ch_find(d, dl, "\"outside_permil\":200" as *u8) == 1 { ok22 = 1 } } }
1227 gv_check("T22 reliance over claude actions (500) NOT diluted by nishi beats (legacy 200)" as *u8, ok22, ctr)
1228 var ok23: i64 = 0
1229 if dl > 0 { if ch_find(d, dl, "\"claude_outside_permil\":200" as *u8) == 0 { ok23 = 1 } }
1230 gv_check("T23 non-vacuity: claude_outside_permil 500 != legacy diluted 200 (partition fired)" as *u8, ok23, ctr)
1231 // J1-J3 JOURNAL (2026-09-05): one measure row per UTC day on a .plan, idempotent, never a -1.
1232 let pl: *u8 = sys_mmap(512)
1233 var plo: i64 = sj_cat(pl, 0, prefix)
1234 plo = sj_catn(pl, plo, now)
1235 plo = sj_cat(pl, plo, ".plan" as *u8)
1236 pl[plo] = 0 as u8
1237 let pfd: i64 = sys_openat_wr(pl, CH_MODE_644)
1238 var seedo: i64 = sj_cat(lb, 0, "pos|seed plan for the journal teeth" as *u8)
1239 lb[seedo] = 10 as u8
1240 sys_write(pfd, lb, seedo + 1)
1241 sys_close(pfd)
1242 let rj1: i64 = ch_journal(pj, pl, "SV0" as *u8)
1243 let jb2: *u8 = sys_mmap(CH_JWIN)
1244 let jn3: i64 = ch_read(pl, jb2, CH_JWIN - 8)
1245 var okj1: i64 = 0
1246 if rj1 == 0 { if ch_find(jb2, jn3, "|SV0|measure|" as *u8) == 1 { if ch_find(jb2, jn3, "claude_outside_permil=500" as *u8) == 1 { okj1 = 1 } } }
1247 gv_check("J1 journal appends one measure row carrying the exact honest permil (500, partition fixture)" as *u8, okj1, ctr)
1248 let rj2: i64 = ch_journal(pj, pl, "SV0" as *u8)
1249 let jn4: i64 = ch_read(pl, jb2, CH_JWIN - 8)
1250 var okj2: i64 = 0
1251 if rj2 == 4 { if jn4 == jn3 { okj2 = 1 } }
1252 gv_check("J2 second journal the same day refused (4), plan byte-identical (idempotent)" as *u8, okj2, ctr)
1253 let rj3: i64 = ch_journal(miss, pl, "SV0" as *u8)
1254 let jn5: i64 = ch_read(pl, jb2, CH_JWIN - 8)
1255 var okj3: i64 = 0
1256 if rj3 == 5 { if jn5 == jn4 { okj3 = 1 } }
1257 gv_check("J3 neg-control-insufficient: a missing journal refuses (5) and writes nothing, never a -1 row" as *u8, okj3, ctr)
1258 // C1-C3 CLASSES (SV2, 2026-09-05): the residual by tool over claude actions; the partition sums; beats
1259 // and nishi tools are never a class; the list is sorted by count descending.
1260 dl = ch_classes_json(pj, d)
1261 var okc1: i64 = 0
1262 if dl > 0 { if ch_find(d, dl, "\"claude_outside\":1" as *u8) == 1 { if ch_find(d, dl, "\"classes_distinct\":1" as *u8) == 1 { if ch_find(d, dl, "PowerShell:1,other:0" as *u8) == 1 { okc1 = 1 } } } }
1263 gv_check("C1 classes on the partition fixture: one outside tool (PowerShell:1) and the partition sums (other:0)" as *u8, okc1, ctr)
1264 var okc2: i64 = 0
1265 if dl > 0 { if ch_find(d, dl, "nx_netobs" as *u8) == 0 { if ch_find(d, dl, "nx_fs" as *u8) == 0 { okc2 = 1 } } }
1266 gv_check("C2 neg-control: estate beats and nishi tools are never a residual class" as *u8, okc2, ctr)
1267 let cj3: *u8 = sys_mmap(512)
1268 var co3: i64 = sj_cat(cj3, 0, prefix)
1269 co3 = sj_catn(cj3, co3, now)
1270 co3 = sj_cat(cj3, co3, ".cls" as *u8)
1271 cj3[co3] = 0 as u8
1272 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Edit" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1273 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Bash" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1274 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Grep" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1275 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Bash" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1276 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Edit" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1277 ch_frame_append(cj3, CH_MAGIC_1784764900, "wc" as *u8, "Bash" as *u8, "use" as *u8, "-" as *u8, "a" as *u8)
1278 dl = ch_classes_json(cj3, d)
1279 var okc3: i64 = 0
1280 if dl > 0 { if ch_find(d, dl, "\"top_and_other\":\"Bash:3,Edit:2,Grep:1,other:0\"" as *u8) == 1 { if ch_find(d, dl, "\"claude_outside\":6" as *u8) == 1 { okc3 = 1 } } }
1281 gv_check("C3 classes sorted by count descending with an exact sum: Bash:3,Edit:2,Grep:1,other:0 of 6" as *u8, okc3, ctr)
1282 // T21/T22 BOOTGAUGE (SOTA-from-the-first-byte): s1 opens nishi-native (nx_seat), s2 opens legacy
1283 // (Read) but touches nishi within K, s3 stays outside => sota_first 1/3=333, nishi_within_k 2/3=666.
1284 let bj: *u8 = sys_mmap(512)
1285 o = sj_cat(bj, 0, prefix)
1286 o = sj_catn(bj, o, now)
1287 o = sj_cat(bj, o, ".bj" as *u8)
1288 bj[o] = 0 as u8
1289 ch_frame_append(bj, CH_MAGIC_1784764900, "s1" as *u8, "nx_seat" as *u8, "boot" as *u8, "-" as *u8, "-" as *u8)
1290 ch_frame_append(bj, CH_MAGIC_1784764900, "s1" as *u8, "mcp__nishi__nx_fs" as *u8, "lines" as *u8, "-" as *u8, "-" as *u8)
1291 ch_frame_append(bj, CH_MAGIC_1784764900, "s2" as *u8, "Read" as *u8, "use" as *u8, "-" as *u8, "-" as *u8)
1292 ch_frame_append(bj, CH_MAGIC_1784764900, "s2" as *u8, "mcp__nishi__nx_store_put" as *u8, "put" as *u8, "-" as *u8, "-" as *u8)
1293 ch_frame_append(bj, CH_MAGIC_1784764900, "s3" as *u8, "PowerShell" as *u8, "use" as *u8, "-" as *u8, "-" as *u8)
1294 ch_frame_append(bj, CH_MAGIC_1784764900, "s3" as *u8, "Bash" as *u8, "use" as *u8, "-" as *u8, "-" as *u8)
1295 let bd: i64 = ch_bootgauge(bj, 3, d)
1296 var ok21: i64 = 0
1297 if bd > 0 { if ch_find(d, bd, "\"sessions\":3,\"sota_first\":1,\"legacy_first\":2,\"sota_boot_permil\":333" as *u8) == 1 { ok21 = 1 } }
1298 gv_check("T21 bootgauge: first tool nishi in 1 of 3 sessions = 333 permil SOTA-boot" as *u8, ok21, ctr)
1299 var ok22: i64 = 0
1300 if bd > 0 { if ch_find(d, bd, "\"nishi_within_k\":2,\"nishi_within_k_permil\":666" as *u8) == 1 { ok22 = 1 } }
1301 gv_check("T22 nishi-within-first-K = 2 of 3 = 666 permil (the softer signal)" as *u8, ok22, ctr)
1302 let lc: *u8 = sys_mmap(512)
1303 o = sj_cat(lc, 0, prefix)
1304 o = sj_catn(lc, o, now)
1305 o = sj_cat(lc, o, ".lconf" as *u8)
1306 lc[o] = 0 as u8
1307 let lt: *u8 = sys_mmap(512)
1308 o = sj_cat(lt, 0, prefix)
1309 o = sj_catn(lt, o, now)
1310 o = sj_cat(lt, o, ".ltx" as *u8)
1311 lt[o] = 0 as u8
1312 let lo2: *u8 = sys_mmap(512)
1313 o = sj_cat(lo2, 0, prefix)
1314 o = sj_catn(lo2, o, now)
1315 o = sj_cat(lo2, o, ".lout" as *u8)
1316 lo2[o] = 0 as u8
1317 let cfd: i64 = sys_openat_append(lc, CH_MODE_644)
1318 let cb2: *u8 = sys_mmap(CH_LINE)
1319 var co: i64 = sj_cat(cb2, 0, "marker=LAW:|6\nmarker=ROOT CAUSE|5\nmarker=MEASURED|3\nstar_char=★\nwarn_char=⚠\nwarn_bonus=2\nstar_max=6\nmin_rank_store=3\nmin_len=40\nmax_len=400\n" as *u8)
1320 sys_write(cfd, cb2, co)
1321 sys_close(cfd)
1322 let tfd2: i64 = sys_openat_append(lt, CH_MODE_644)
1323 let tb2: *u8 = sys_mmap(CH_LINE)
1324 var to2: i64 = sj_cat(tb2, 0, "{\"timestamp\":\"2026-07-23T00:00:00Z\",\"c\":[{\"type\":\"text\",\"text\":\"LAW: a guard placed after the act it guards is not a guard\"}]}\n" as *u8)
1325 to2 = sj_cat(tb2, to2, "{\"timestamp\":\"2026-07-23T00:00:01Z\",\"c\":[{\"type\":\"text\",\"text\":\"we then opened the file and looked at it for a while and moved on\"}]}\n" as *u8)
1326 to2 = sj_cat(tb2, to2, "{\"timestamp\":\"2026-07-23T00:00:02Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"a\",\"name\":\"Edit\"}]}\n" as *u8)
1327 to2 = sj_cat(tb2, to2, "{\"timestamp\":\"2026-07-23T00:00:03Z\",\"c\":[{\"type\":\"text\",\"text\":\"★★★★ gate on the resource the work actually consumes\"}]}\n" as *u8)
1328 to2 = sj_cat(tb2, to2, "{\"timestamp\":\"2026-07-23T00:00:04Z\",\"c\":[{\"type\":\"text\",\"text\":\"the axes run 0..1000 and -1 means UNMEASURED for this row\"}]}\n" as *u8)
1329 to2 = sj_cat(tb2, to2, "{\"timestamp\":\"2026-07-23T00:00:05Z\",\"c\":[{\"type\":\"text\",\"text\":\"LAW: an echoed frame must not become two separate records\"},{\"type\":\"text\",\"text\":\"LAW: an echoed frame must not become two separate records\"}]}\n" as *u8)
1330 sys_write(tfd2, tb2, to2)
1331 sys_close(tfd2)
1332 let lcx2: *i64 = sys_mmap(64) as *i64
1333 let lgot: i64 = ch_learn(lt, "lw" as *u8, lo2, lc, lcx2)
1334 let lb2: *u8 = sys_mmap(CH_JWIN)
1335 let ln2: i64 = ch_read(lo2, lb2, CH_JWIN - 8)
1336 var ok23: i64 = 0
1337 if ln2 > 0 { if ch_find(lb2, ln2, "\"rank\":6" as *u8) == 1 { ok23 = 1 } }
1338 gv_check("T23 learn captures a LAW: PROSE line at rank 6 (the thing frames/delta never could)" as *u8, ok23, ctr)
1339 var ok24: i64 = 1
1340 if ln2 > 0 { if ch_find(lb2, ln2, "looked at it for a while" as *u8) == 1 { ok24 = 0 } }
1341 gv_check("T24 NEG-CONTROL: unmarked prose ABOVE min_len is REJECTED -- the ranker can fail" as *u8, ok24, ctr)
1342 var ok25: i64 = 1
1343 if ln2 > 0 { if ch_find(lb2, ln2, "Edit" as *u8) == 1 { ok25 = 0 } }
1344 gv_check("T25 learn ignores tool_use frames entirely -- learn is not a second frames" as *u8, ok25, ctr)
1345 var ok26: i64 = 0
1346 if lcx2[1] >= 2 { ok26 = 1 }
1347 gv_check("T26 markers/weights come from the conf file, never compiled in (rule 11)" as *u8, ok26, ctr)
1348 var ok27: i64 = 0
1349 if ln2 > 0 { if ch_find(lb2, ln2, "\"rank\":4" as *u8) == 1 { ok27 = 1 } }
1350 gv_check("T27 a 4-star run ranks 4 -- multi-byte glyph run counted as bytes, not chars" as *u8, ok27, ctr)
1351 var ok28: i64 = 0
1352 if lgot == 3 { ok28 = 1 }
1353 gv_check("T28 exactly 3 of 6 transcript lines clear the floor (kept count is not a dump)" as *u8, ok28, ctr)
1354 var ok29: i64 = 1
1355 if ln2 > 0 { if ch_find(lb2, ln2, "axes run 0..1000" as *u8) == 1 { ok29 = 0 } }
1356 gv_check("T29 WORD BOUNDARY: UNMEASURED does not match the marker MEASURED (substring flattery)" as *u8, ok29, ctr)
1357 var ok30: i64 = 0
1358 var dcount: i64 = 0
1359 var dp: i64 = 0
1360 while dp < ln2 {
1361 let dq: i64 = ch_find_from(lb2, dp, ln2, "an echoed frame must not become" as *u8)
1362 if dq < 0 { dp = ln2 } else { dcount = dcount + 1; dp = dq + 20 }
1363 }
1364 if dcount == 1 { ok30 = 1 }
1365 gv_check("T30 an echoed payload emits ONCE, not twice (adjacent-duplicate suppression)" as *u8, ok30, ctr)
1366 // ================= beat teeth (DM1 ch_beat, 2026-08-20; fixtures assembled at RUNTIME) =================
1367 let btroot: *u8 = sys_mmap(512)
1368 o = sj_cat(btroot, 0, prefix)
1369 o = sj_catn(btroot, o, now)
1370 o = sj_cat(btroot, o, "btroot" as *u8)
1371 btroot[o] = 0 as u8
1372 let btpa: *u8 = sys_mmap(512)
1373 o = sj_cat(btpa, 0, btroot)
1374 o = sj_cat(btpa, o, "/pA" as *u8)
1375 btpa[o] = 0 as u8
1376 let btsub: *u8 = sys_mmap(512)
1377 o = sj_cat(btsub, 0, btpa)
1378 o = sj_cat(btsub, o, "/subagents" as *u8)
1379 btsub[o] = 0 as u8
1380 let btstate: *u8 = sys_mmap(512)
1381 o = sj_cat(btstate, 0, prefix)
1382 o = sj_catn(btstate, o, now)
1383 o = sj_cat(btstate, o, "btstate" as *u8)
1384 btstate[o] = 0 as u8
1385 let btspool: *u8 = sys_mmap(512)
1386 o = sj_cat(btspool, 0, prefix)
1387 o = sj_catn(btspool, o, now)
1388 o = sj_cat(btspool, o, "btspool" as *u8)
1389 btspool[o] = 0 as u8
1390 let btdone: *u8 = sys_mmap(512)
1391 o = sj_cat(btdone, 0, prefix)
1392 o = sj_catn(btdone, o, now)
1393 o = sj_cat(btdone, o, "btdone" as *u8)
1394 btdone[o] = 0 as u8
1395 let btjrnl: *u8 = sys_mmap(512)
1396 o = sj_cat(btjrnl, 0, prefix)
1397 o = sj_catn(btjrnl, o, now)
1398 o = sj_cat(btjrnl, o, "btjrnl" as *u8)
1399 btjrnl[o] = 0 as u8
1400 let bttwin: *u8 = sys_mmap(512)
1401 o = sj_cat(bttwin, 0, prefix)
1402 o = sj_catn(bttwin, o, now)
1403 o = sj_cat(bttwin, o, "bttwin" as *u8)
1404 bttwin[o] = 0 as u8
1405 sys_mkdir(btroot, CH_MODE_755)
1406 sys_mkdir(btpa, CH_MODE_755)
1407 sys_mkdir(btsub, CH_MODE_755)
1408 sys_mkdir(bttwin, CH_MODE_755)
1409 let bts1: *u8 = sys_mmap(512)
1410 o = sj_cat(bts1, 0, btpa)
1411 o = sj_cat(bts1, o, "/s1.jsonl" as *u8)
1412 bts1[o] = 0 as u8
1413 let bts2: *u8 = sys_mmap(512)
1414 o = sj_cat(bts2, 0, btsub)
1415 o = sj_cat(bts2, o, "/s2.jsonl" as *u8)
1416 bts2[o] = 0 as u8
1417 let btfd: i64 = sys_openat_append(bts1, CH_MODE_644)
1418 lo = sj_cat(lb, 0, "{\"type\":\"zzz-newtype\",\"x\":1}" as *u8)
1419 lb[lo] = 10 as u8
1420 sys_write(btfd, lb, lo + 1)
1421 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:01Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"a\",\"name\":\"Edit\"},{\"type\":\"tool_use\",\"id\":\"b\",\"name\":\"PowerShell\"}]}" as *u8)
1422 lb[lo] = 10 as u8
1423 sys_write(btfd, lb, lo + 1)
1424 lo = sj_cat(lb, 0, "{\"type\":\"user\",\"uuid\":\"u1\"}" as *u8)
1425 lb[lo] = 10 as u8
1426 sys_write(btfd, lb, lo + 1)
1427 sys_close(btfd)
1428 let btfd2: i64 = sys_openat_append(bts2, CH_MODE_644)
1429 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-08-19T10:00:01Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"c\",\"name\":\"mcp__nishi__nx_fs\"}]}" as *u8)
1430 lb[lo] = 10 as u8
1431 sys_write(btfd2, lb, lo + 1)
1432 sys_close(btfd2)
1433 // conf assembled at runtime (rule 11 even in the fixture)
1434 let btconf: *u8 = sys_mmap(512)
1435 o = sj_cat(btconf, 0, prefix)
1436 o = sj_catn(btconf, o, now)
1437 o = sj_cat(btconf, o, "btconf" as *u8)
1438 btconf[o] = 0 as u8
1439 let btcb: *u8 = sys_mmap(4096)
1440 var bo: i64 = sj_cat(btcb, 0, "root=" as *u8)
1441 bo = sj_cat(btcb, bo, btroot)
1442 btcb[bo] = 10 as u8
1443 bo = bo + 1
1444 bo = sj_cat(btcb, bo, "state=" as *u8)
1445 bo = sj_cat(btcb, bo, btstate)
1446 btcb[bo] = 10 as u8
1447 bo = bo + 1
1448 bo = sj_cat(btcb, bo, "spool=" as *u8)
1449 bo = sj_cat(btcb, bo, btspool)
1450 btcb[bo] = 10 as u8
1451 bo = bo + 1
1452 bo = sj_cat(btcb, bo, "done=" as *u8)
1453 bo = sj_cat(btcb, bo, btdone)
1454 btcb[bo] = 10 as u8
1455 bo = bo + 1
1456 bo = sj_cat(btcb, bo, "journal=" as *u8)
1457 bo = sj_cat(btcb, bo, btjrnl)
1458 btcb[bo] = 10 as u8
1459 bo = bo + 1
1460 bo = sj_cat(btcb, bo, "push=0" as *u8)
1461 btcb[bo] = 10 as u8
1462 bo = bo + 1
1463 bo = sj_cat(btcb, bo, "known_type=user" as *u8)
1464 btcb[bo] = 10 as u8
1465 bo = bo + 1
1466 bo = sj_cat(btcb, bo, "known_type=assistant" as *u8)
1467 btcb[bo] = 10 as u8
1468 bo = bo + 1
1469 let btcfd: i64 = sys_openat_wr(btconf, CH_MODE_644)
1470 sys_write(btcfd, btcb, bo)
1471 sys_close(btcfd)
1472 let bcx1: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1473 let brc1: i64 = ch_beat(btconf, bcx1)
1474 var ok31: i64 = 0
1475 if brc1 == 0 { if bcx1[0] == 2 { if bcx1[1] == 2 { if bcx1[2] == 0 { if bcx1[3] == 0 { if bcx1[27] == 1 { ok31 = 1 } } } } } }
1476 gv_check("T31 beat walks every transcript at every depth and the file partition SUMS" as *u8, ok31, ctr)
1477 var ok32: i64 = 0
1478 if bcx1[4] == 3 { if bcx1[5] == 3 { ok32 = 1 } }
1479 gv_check("T32 frames reconcile against the independent tooluse-mark census (two counters, free audit)" as *u8, ok32, ctr)
1480 var ok33: i64 = 0
1481 if bcx1[6] == 4 { if bcx1[8] == 1 { if bcx1[9] == 1 { if bcx1[10] == 2 { ok33 = 1 } } } }
1482 gv_check("T33 head-type census: known/UNKNOWN/headless partition sums; nested types never read as record types" as *u8, ok33, ctr)
1483 let btj1: *u8 = sys_mmap(512)
1484 o = sj_cat(btj1, 0, btjrnl)
1485 o = sj_cat(btj1, o, "/chbeat_20260723.jrnl" as *u8)
1486 btj1[o] = 0 as u8
1487 let btj2: *u8 = sys_mmap(512)
1488 o = sj_cat(btj2, 0, btjrnl)
1489 o = sj_cat(btj2, o, "/chbeat_20260819.jrnl" as *u8)
1490 btj2[o] = 0 as u8
1491 let btb1: *u8 = sys_mmap(CH_JWIN)
1492 let btn1: i64 = ch_read(btj1, btb1, CH_JWIN - 8)
1493 let btb2: *u8 = sys_mmap(CH_JWIN)
1494 var btn2: i64 = ch_read(btj2, btb2, CH_JWIN - 8)
1495 var ok34: i64 = 0
1496 if btn1 > 0 { if btn2 > 0 { if ch_find(btb1, btn1, "Edit" as *u8) == 1 { if ch_find(btb1, btn1, "mcp__nishi__nx_fs" as *u8) == 0 { if ch_find(btb2, btn2, "mcp__nishi__nx_fs" as *u8) == 1 { ok34 = 1 } } } } }
1497 gv_check("T34 ts-day routing: each frame lands in its OWN day journal, never cross-filed" as *u8, ok34, ctr)
1498 let bcx2: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1499 let brc2: i64 = ch_beat(btconf, bcx2)
1500 let btn1b: i64 = ch_read(btj1, btb1, CH_JWIN - 8)
1501 var ok35: i64 = 0
1502 if brc2 == 0 { if bcx2[2] == 2 { if bcx2[4] == 0 { if bcx2[12] == 0 { if btn1b == btn1 { ok35 = 1 } } } } }
1503 gv_check("T35 re-run is exactly-once: all files skipped-unchanged, zero frames, journal byte-identical" as *u8, ok35, ctr)
1504 let btfd3: i64 = sys_openat_append(bts2, CH_MODE_644)
1505 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-08-19T11:00:00Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"d\",\"name\":\"Grep\"}]}" as *u8)
1506 lb[lo] = 10 as u8
1507 sys_write(btfd3, lb, lo + 1)
1508 lo = sj_cat(lb, 0, "{\"c\":[{\"type\":\"tool_use\",\"id\":\"e\",\"name\":\"NoTsTool\"}]}" as *u8)
1509 lb[lo] = 10 as u8
1510 sys_write(btfd3, lb, lo + 1)
1511 sys_close(btfd3)
1512 let bcx3: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1513 let brc3: i64 = ch_beat(btconf, bcx3)
1514 var ok36: i64 = 0
1515 if brc3 == 0 { if bcx3[1] == 1 { if bcx3[2] == 1 { if bcx3[4] == 2 { if bcx3[15] == 1 { ok36 = 1 } } } } }
1516 gv_check("T36 growth delta-harvests ONLY the new lines from the banked mark" as *u8, ok36, ctr)
1517 let btjz: *u8 = sys_mmap(512)
1518 o = sj_cat(btjz, 0, btjrnl)
1519 o = sj_cat(btjz, o, "/chbeat_tszero.jrnl" as *u8)
1520 btjz[o] = 0 as u8
1521 let btnz: i64 = ch_read(btjz, btb1, CH_JWIN - 8)
1522 btn2 = ch_read(btj2, btb2, CH_JWIN - 8)
1523 var ok37: i64 = 0
1524 if btnz > 0 { if ch_find(btb1, btnz, "NoTsTool" as *u8) == 1 { if btn2 > 0 { if ch_find(btb2, btn2, "Grep" as *u8) == 1 { if ch_find(btb2, btn2, "NoTsTool" as *u8) == 0 { ok37 = 1 } } } } }
1525 gv_check("T37 a frame without a parseable timestamp lands in chbeat_tszero.jrnl -- its OWN bucket, never folded" as *u8, ok37, ctr)
1526 // twin landing: ingest the SAME pieces into a second journal dir and demand gauge agreement
1527 let btar: *u8 = sys_mmap(CH_BT_ARENA)
1528 let btfo: *i64 = sys_mmap(8 * CH_BT_MAXFILES) as *i64
1529 let btwcx: *i64 = sys_mmap(64) as *i64
1530 let btnp: i64 = ch_bt_walk(btspool, ".frames" as *u8, btar, btfo, btwcx)
1531 let btmcx: *i64 = sys_mmap(16) as *i64
1532 let btday: *u8 = sys_mmap(CH_BT_DAYCELL)
1533 let bttj: *u8 = sys_mmap(512)
1534 var bpi: i64 = 0
1535 while bpi < btnp {
1536 let bpp: *u8 = ((btar as i64) + btfo[bpi]) as *u8
1537 let bpb: *u8 = ch_bt_base(bpp)
1538 if ch_starts(bpb, 0, sj_vlen(bpb), "cb" as *u8) == 1 {
1539 ch_bt_pieceday(bpb, btday)
1540 var oz: i64 = sj_cat(bttj, 0, bttwin)
1541 bttj[oz] = 47 as u8
1542 oz = oz + 1
1543 oz = sj_cat(bttj, oz, "chbeat_" as *u8)
1544 oz = sj_cat(bttj, oz, btday)
1545 oz = sj_cat(bttj, oz, ".jrnl" as *u8)
1546 bttj[oz] = 0 as u8
1547 ch_ingest(bpp, bttj, btmcx)
1548 }
1549 bpi = bpi + 1
1550 }
1551 var oz2: i64 = sj_cat(bttj, 0, bttwin)
1552 bttj[oz2] = 47 as u8
1553 oz2 = oz2 + 1
1554 oz2 = sj_cat(bttj, oz2, "chbeat_20260819.jrnl" as *u8)
1555 bttj[oz2] = 0 as u8
1556 var dlA: i64 = ch_gauge_json(btj2, 0, d)
1557 let gfA: i64 = ch_bt_int_after(d, dlA, "\"frames_total\":" as *u8)
1558 let goA: i64 = ch_bt_int_after(d, dlA, "\"outside\":" as *u8)
1559 let gpA: i64 = ch_bt_int_after(d, dlA, "\"outside_permil\":" as *u8)
1560 var dlB: i64 = ch_gauge_json(bttj, 0, d)
1561 let gfB: i64 = ch_bt_int_after(d, dlB, "\"frames_total\":" as *u8)
1562 let goB: i64 = ch_bt_int_after(d, dlB, "\"outside\":" as *u8)
1563 let gpB: i64 = ch_bt_int_after(d, dlB, "\"outside_permil\":" as *u8)
1564 var ok38: i64 = 0
1565 if gfA > 0 { if gfA == gfB { if goA == goB { if gpA == gpB { ok38 = 1 } } } }
1566 gv_check("T38 gauge over the landing twin agrees EXACTLY with gauge over the local journal (the NAS-vs-laptop instrument agreement, in fixture)" as *u8, ok38, ctr)
1567 // plant a truncated landing: the reconcile MUST catch it, and the gauges MUST diverge
1568 let btp1: *u8 = sys_mmap(512)
1569 var btp1n: i64 = 0
1570 bpi = 0
1571 while bpi < btnp {
1572 let bpp2: *u8 = ((btar as i64) + btfo[bpi]) as *u8
1573 let bpb2: *u8 = ch_bt_base(bpp2)
1574 if ch_starts(bpb2, 0, sj_vlen(bpb2), "cb20260723" as *u8) == 1 { btp1n = sj_cat(btp1, 0, bpp2); btp1[btp1n] = 0 as u8 }
1575 bpi = bpi + 1
1576 }
1577 let btpb: *u8 = sys_mmap(CH_JWIN)
1578 let btpn: i64 = ch_read(btp1, btpb, CH_JWIN - 8)
1579 let btcut: *u8 = sys_mmap(512)
1580 o = sj_cat(btcut, 0, prefix)
1581 o = sj_catn(btcut, o, now)
1582 o = sj_cat(btcut, o, "cut1.frames" as *u8)
1583 btcut[o] = 0 as u8
1584 let btcfd2: i64 = sys_openat_wr(btcut, CH_MODE_644)
1585 sys_write(btcfd2, btpb, btpn - 10)
1586 sys_close(btcfd2)
1587 let bttj2: *u8 = sys_mmap(512)
1588 o = sj_cat(bttj2, 0, bttwin)
1589 o = sj_cat(bttj2, o, "/chbeat_cutcase.jrnl" as *u8)
1590 bttj2[o] = 0 as u8
1591 let btr9: i64 = ch_ingest(btcut, bttj2, btmcx)
1592 let btpl: i64 = ch_bt_lines(btp1)
1593 var ok39: i64 = 0
1594 if btpl == 2 { if btr9 == 1 { if btmcx[0] == 1 { if btr9 != btpl { ok39 = 1 } } } }
1595 gv_check("T39 neg-control-truncated-landing: ingested-frames != staged-frames and malformed counted -- the push reconcile catches a cut landing" as *u8, ok39, ctr)
1596 // conf missing a required key refuses, NAMING it
1597 let btconf2: *u8 = sys_mmap(512)
1598 o = sj_cat(btconf2, 0, prefix)
1599 o = sj_catn(btconf2, o, now)
1600 o = sj_cat(btconf2, o, "btconf2" as *u8)
1601 btconf2[o] = 0 as u8
1602 bo = sj_cat(btcb, 0, "root=" as *u8)
1603 bo = sj_cat(btcb, bo, btroot)
1604 btcb[bo] = 10 as u8
1605 bo = bo + 1
1606 bo = sj_cat(btcb, bo, "state=" as *u8)
1607 bo = sj_cat(btcb, bo, btstate)
1608 btcb[bo] = 10 as u8
1609 bo = bo + 1
1610 let btcfd3: i64 = sys_openat_wr(btconf2, CH_MODE_644)
1611 sys_write(btcfd3, btcb, bo)
1612 sys_close(btcfd3)
1613 let bcx4: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1614 let brc4: i64 = ch_beat(btconf2, bcx4)
1615 var ok40: i64 = 0
1616 if brc4 == 2 { ok40 = 1 }
1617 gv_check("T40 neg-control-conf-missing-required-key refuses fail-closed (never invents a path)" as *u8, ok40, ctr)
1618 // push with a DEAD wire: every piece stays spooled -- wrong only toward doing nothing
1619 let btconf3: *u8 = sys_mmap(512)
1620 o = sj_cat(btconf3, 0, prefix)
1621 o = sj_catn(btconf3, o, now)
1622 o = sj_cat(btconf3, o, "btconf3" as *u8)
1623 btconf3[o] = 0 as u8
1624 bo = sj_cat(btcb, 0, "root=" as *u8)
1625 bo = sj_cat(btcb, bo, btroot)
1626 btcb[bo] = 10 as u8
1627 bo = bo + 1
1628 bo = sj_cat(btcb, bo, "state=" as *u8)
1629 bo = sj_cat(btcb, bo, btstate)
1630 btcb[bo] = 10 as u8
1631 bo = bo + 1
1632 bo = sj_cat(btcb, bo, "spool=" as *u8)
1633 bo = sj_cat(btcb, bo, btspool)
1634 btcb[bo] = 10 as u8
1635 bo = bo + 1
1636 bo = sj_cat(btcb, bo, "done=" as *u8)
1637 bo = sj_cat(btcb, bo, btdone)
1638 btcb[bo] = 10 as u8
1639 bo = bo + 1
1640 bo = sj_cat(btcb, bo, "journal=" as *u8)
1641 bo = sj_cat(btcb, bo, btjrnl)
1642 btcb[bo] = 10 as u8
1643 bo = bo + 1
1644 bo = sj_cat(btcb, bo, "push=1" as *u8)
1645 btcb[bo] = 10 as u8
1646 bo = bo + 1
1647 bo = sj_cat(btcb, bo, "push_max=8" as *u8)
1648 btcb[bo] = 10 as u8
1649 bo = bo + 1
1650 bo = sj_cat(btcb, bo, "nas_stage=knowledge/status/chbeat/stage" as *u8)
1651 btcb[bo] = 10 as u8
1652 bo = bo + 1
1653 bo = sj_cat(btcb, bo, "nas_journal=knowledge/status/chbeat" as *u8)
1654 btcb[bo] = 10 as u8
1655 bo = bo + 1
1656 bo = sj_cat(btcb, bo, "wire=" as *u8)
1657 bo = sj_cat(btcb, bo, prefix)
1658 bo = sj_catn(btcb, bo, now)
1659 bo = sj_cat(btcb, bo, "nowire" as *u8)
1660 btcb[bo] = 10 as u8
1661 bo = bo + 1
1662 bo = sj_cat(btcb, bo, "wire_script=x" as *u8)
1663 btcb[bo] = 10 as u8
1664 bo = bo + 1
1665 bo = sj_cat(btcb, bo, "cap_write=x" as *u8)
1666 btcb[bo] = 10 as u8
1667 bo = bo + 1
1668 bo = sj_cat(btcb, bo, "cap_ingest=x" as *u8)
1669 btcb[bo] = 10 as u8
1670 bo = bo + 1
1671 bo = sj_cat(btcb, bo, "cap_read=x" as *u8)
1672 btcb[bo] = 10 as u8
1673 bo = bo + 1
1674 bo = sj_cat(btcb, bo, "hash_elf=" as *u8)
1675 bo = sj_cat(btcb, bo, prefix)
1676 bo = sj_catn(btcb, bo, now)
1677 bo = sj_cat(btcb, bo, "nohash" as *u8)
1678 btcb[bo] = 10 as u8
1679 bo = bo + 1
1680 let btcfd4: i64 = sys_openat_wr(btconf3, CH_MODE_644)
1681 sys_write(btcfd4, btcb, bo)
1682 sys_close(btcfd4)
1683 let bcx5: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1684 let brc5: i64 = ch_beat(btconf3, bcx5)
1685 var ok41: i64 = 0
1686 if brc5 == 1 { if bcx5[16] > 0 { if bcx5[17] == 0 { if bcx5[18] == bcx5[16] { if bcx5[19] > 0 { ok41 = 1 } } } } }
1687 gv_check("T41 neg-control-push-wire-dead: every piece stays spooled and every failure is counted -- wrong only toward doing nothing" as *u8, ok41, ctr)
1688 // journal cliff budget rides the conf and announces
1689 let btconf4: *u8 = sys_mmap(512)
1690 o = sj_cat(btconf4, 0, prefix)
1691 o = sj_catn(btconf4, o, now)
1692 o = sj_cat(btconf4, o, "btconf4" as *u8)
1693 btconf4[o] = 0 as u8
1694 bo = sj_cat(btcb, 0, "root=" as *u8)
1695 bo = sj_cat(btcb, bo, btroot)
1696 btcb[bo] = 10 as u8
1697 bo = bo + 1
1698 bo = sj_cat(btcb, bo, "state=" as *u8)
1699 bo = sj_cat(btcb, bo, btstate)
1700 btcb[bo] = 10 as u8
1701 bo = bo + 1
1702 bo = sj_cat(btcb, bo, "spool=" as *u8)
1703 bo = sj_cat(btcb, bo, btspool)
1704 btcb[bo] = 10 as u8
1705 bo = bo + 1
1706 bo = sj_cat(btcb, bo, "done=" as *u8)
1707 bo = sj_cat(btcb, bo, btdone)
1708 btcb[bo] = 10 as u8
1709 bo = bo + 1
1710 bo = sj_cat(btcb, bo, "journal=" as *u8)
1711 bo = sj_cat(btcb, bo, btjrnl)
1712 btcb[bo] = 10 as u8
1713 bo = bo + 1
1714 bo = sj_cat(btcb, bo, "push=0" as *u8)
1715 btcb[bo] = 10 as u8
1716 bo = bo + 1
1717 bo = sj_cat(btcb, bo, "jrnl_cliff=64" as *u8)
1718 btcb[bo] = 10 as u8
1719 bo = bo + 1
1720 let btcfd5: i64 = sys_openat_wr(btconf4, CH_MODE_644)
1721 sys_write(btcfd5, btcb, bo)
1722 sys_close(btcfd5)
1723 let bcx6: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
1724 let brc6: i64 = ch_beat(btconf4, bcx6)
1725 var ok42: i64 = 0
1726 if brc6 == 0 { if bcx6[28] > 1000 { ok42 = 1 } }
1727 gv_check("T42 the journal cliff budget rides the conf and the fill announce fires PAST-CLIFF on a tiny budget" as *u8, ok42, ctr)
1728 // push-parser teeth: each decision parser must be able to FAIL
1729 let btpp: *u8 = sys_mmap(256)
1730 var btppn: i64 = sj_cat(btpp, 0, "{\"organ\":\"nx_filehash\",\"sha256\":\"0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\",\"bytes\":7}" as *u8)
1731 let btsha: *u8 = sys_mmap(80)
1732 var ok43: i64 = 0
1733 if ch_bt_parse_sha(btpp, btppn, btsha) == 1 {
1734 btppn = sj_cat(btpp, 0, "{\"sha256\":\"zz\"}" as *u8)
1735 if ch_bt_parse_sha(btpp, btppn, btsha) == 0 {
1736 btppn = sj_cat(btpp, 0, "INGEST OK frames=42 malformed=0" as *u8)
1737 if ch_bt_int_after(btpp, btppn, "INGEST OK frames=" as *u8) == 42 {
1738 if ch_bt_int_after(btpp, btppn, "bytes=" as *u8) == (0 - 1) { ok43 = 1 }
1739 }
1740 }
1741 }
1742 gv_check("T43 push decision parsers accept the real shapes and REFUSE malformed ones (a parser that cannot fail is not a parser)" as *u8, ok43, ctr)
1743 // T44 the push-reason truth table. The defect this replaces answered "fail-verify" for an upload
1744 // that never landed, so the two ABSENT causes -- which have OPPOSITE remedies (retry the write vs
1745 // investigate a write that lied) -- shared one name. Walk the whole table, then assert they differ.
1746 var ok44: i64 = 0
1747 if ch_bt_zeq(ch_bt_pushreason(0, 0, 0), "fail-write" as *u8) == 1 {
1748 if ch_bt_zeq(ch_bt_pushreason(1, 0, 0), "fail-verify-absent" as *u8) == 1 {
1749 if ch_bt_zeq(ch_bt_pushreason(1, 1, 0), "fail-verify-mismatch" as *u8) == 1 {
1750 if ch_bt_zeq(ch_bt_pushreason(1, 1, 1), "ok" as *u8) == 1 {
1751 if ch_bt_zeq(ch_bt_pushreason(0, 0, 0), ch_bt_pushreason(1, 0, 0)) == 0 { ok44 = 1 }
1752 }
1753 }
1754 }
1755 }
1756 gv_check("T44 neg-control-push-reason-distinct: a write that never landed and a write that lied get DIFFERENT names (the wrong-stage defect cannot return)" as *u8, ok44, ctr)
1757 // ---- CE1 leg 2: write frames carry the PATH they touched (additive note token) ----
1758 let tj2: *u8 = sys_mmap(512)
1759 o = sj_cat(tj2, 0, prefix)
1760 o = sj_catn(tj2, o, now)
1761 o = sj_cat(tj2, o, ".t2" as *u8)
1762 tj2[o] = 0 as u8
1763 let fr2: *u8 = sys_mmap(512)
1764 o = sj_cat(fr2, 0, prefix)
1765 o = sj_catn(fr2, o, now)
1766 o = sj_cat(fr2, o, ".frames2" as *u8)
1767 fr2[o] = 0 as u8
1768 let t2fd: i64 = sys_openat_append(tj2, CH_MODE_644)
1769 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:05Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"w1\",\"name\":\"mcp__nishi__nx_fs_write\",\"input\":{\"argv\":[\"edit\",\"buildroot/runtime/x_fixture.nx\",\"old\",\"new\"],\"_cap\":\"zz\"}}]}" as *u8)
1770 lb[lo] = 10 as u8
1771 sys_write(t2fd, lb, lo + 1)
1772 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:06Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"w2\",\"name\":\"Write\",\"input\":{\"file_path\":\"C:/Users/e/m.md\",\"content\":\"x \\\"file_path\\\":\\\"decoy\\\" y\"}}]}" as *u8)
1773 lb[lo] = 10 as u8
1774 sys_write(t2fd, lb, lo + 1)
1775 lo = sj_cat(lb, 0, "{\"timestamp\":\"2026-07-23T00:00:07Z\",\"c\":[{\"type\":\"tool_use\",\"id\":\"r1\",\"name\":\"mcp__nishi__nx_fs\",\"input\":{\"argv\":[\"read\",\"buildroot/runtime/x_fixture.nx\"]}}]}" as *u8)
1776 lb[lo] = 10 as u8
1777 sys_write(t2fd, lb, lo + 1)
1778 sys_close(t2fd)
1779 let tcx2: *i64 = sys_mmap(16) as *i64
1780 let got2: i64 = ch_frames(tj2, "wpath" as *u8, fr2, tcx2)
1781 let fb2: *u8 = sys_mmap(CH_JWIN)
1782 let fn2: i64 = ch_read(fr2, fb2, CH_JWIN - 8)
1783 var ok45: i64 = 0
1784 if got2 == 3 { if fn2 > 0 { if ch_find(fb2, fn2, "path=buildroot/runtime/x_fixture.nx" as *u8) == 1 { ok45 = 1 } } }
1785 gv_check("T45 an nx_fs_write frame carries path= from argv[1], the verb in argv[0] never mistaken for it" as *u8, ok45, ctr)
1786 var ok46: i64 = 0
1787 if fn2 > 0 { if ch_find(fb2, fn2, "path=C:/Users/e/m.md" as *u8) == 1 { if ch_find(fb2, fn2, "path=decoy" as *u8) == 0 { ok46 = 1 } } }
1788 gv_check("T46 a Write frame carries path= from file_path and a decoy key inside its CONTENT is never read as the path" as *u8, ok46, ctr)
1789 var pc: i64 = 0
1790 var px: i64 = 0
1791 var pg: i64 = 1
1792 let pkey: *u8 = "path=" as *u8
1793 while pg == 1 { if fn2 <= 0 { pg = 0 } else { let pf: i64 = ch_find_from(fb2, px, fn2, pkey); if pf < 0 { pg = 0 } else { pc = pc + 1; px = pf + sj_vlen(pkey) } } }
1794 var ok47: i64 = 0
1795 if pc == 2 { ok47 = 1 }
1796 gv_check("T47 NEG-CONTROL: a READER frame (nx_fs) carries no path token -- exactly two of three frames do" as *u8, ok47, ctr)
1797 // ---- CE1 leg 2: ce_author_health on a PLANTED tree prefix, a planted journal and a planted spine ----
1798 let ahp: *u8 = sys_mmap(512)
1799 o = sj_cat(ahp, 0, prefix); o = sj_catn(ahp, o, now); o = sj_cat(ahp, o, "ah_" as *u8); ahp[o] = 0 as u8
1800 let aha: *u8 = sys_mmap(512); o = sj_cat(aha, 0, ahp); o = sj_cat(aha, o, "a.nx" as *u8); aha[o] = 0 as u8
1801 let ahb: *u8 = sys_mmap(512); o = sj_cat(ahb, 0, ahp); o = sj_cat(ahb, o, "b.nx" as *u8); ahb[o] = 0 as u8
1802 let ahc: *u8 = sys_mmap(512); o = sj_cat(ahc, 0, ahp); o = sj_cat(ahc, o, "c.txt" as *u8); ahc[o] = 0 as u8
1803 let ahj: *u8 = sys_mmap(512); o = sj_cat(ahj, 0, ahp); o = sj_cat(ahj, o, "frames.jrnl" as *u8); ahj[o] = 0 as u8
1804 let ahs: *u8 = sys_mmap(512); o = sj_cat(ahs, 0, ahp); o = sj_cat(ahs, o, "mccabe.spine" as *u8); ahs[o] = 0 as u8
1805 let ahn: *u8 = sys_mmap(512); o = sj_cat(ahn, 0, ahp); o = sj_cat(ahn, o, "nope.spine" as *u8); ahn[o] = 0 as u8
1806 let ahfa: i64 = sys_openat_wr(aha, CH_MODE_644)
1807 lo = sj_cat(lb, 0, "func t(a: i64) -> i64 {\n if a>0 { return 1 }\n return 0\n}\n" as *u8)
1808 sys_write(ahfa, lb, lo); sys_close(ahfa)
1809 let ahfb: i64 = sys_openat_wr(ahb, CH_MODE_644)
1810 lo = sj_cat(lb, 0, "func t() -> i64 {\n return 0\n}\n" as *u8)
1811 sys_write(ahfb, lb, lo); sys_close(ahfb)
1812 let ahfc: i64 = sys_openat_wr(ahc, CH_MODE_644)
1813 lo = sj_cat(lb, 0, "not nishilang\n" as *u8)
1814 sys_write(ahfc, lb, lo); sys_close(ahfc)
1815 let ahfs: i64 = sys_openat_wr(ahs, CH_MODE_644)
1816 lo = sj_cat(lb, 0, "1788600000|files=10|funcs=20|above_10=3|permille=150|classes=0|UNMARKED:10:20:3\n" as *u8)
1817 sys_write(ahfs, lb, lo); sys_close(ahfs)
1818 let ahnb: *u8 = sys_mmap(1024)
1819 let ahfj: i64 = sys_openat_append(ahj, CH_MODE_644)
1820 var ano: i64 = sj_cat(ahnb, 0, "delta path=" as *u8); ano = sj_cat(ahnb, ano, aha); ahnb[ano] = 0 as u8
1821 ch_frame_write(ahfj, lb, CH_AH_FIX_TS, "sessA" as *u8, "mcp__nishi__nx_fs_write" as *u8, "use" as *u8, "-" as *u8, ahnb)
1822 ch_frame_write(ahfj, lb, CH_AH_FIX_TS + 1, "sessA" as *u8, "mcp__nishi__nx_fs_write" as *u8, "use" as *u8, "-" as *u8, ahnb)
1823 ano = sj_cat(ahnb, 0, "delta path=" as *u8); ano = sj_cat(ahnb, ano, ahb); ahnb[ano] = 0 as u8
1824 ch_frame_write(ahfj, lb, CH_AH_FIX_TS + 2, "sessB" as *u8, "Write" as *u8, "use" as *u8, "-" as *u8, ahnb)
1825 ano = sj_cat(ahnb, 0, "delta path=" as *u8); ano = sj_cat(ahnb, ano, ahc); ahnb[ano] = 0 as u8
1826 ch_frame_write(ahfj, lb, CH_AH_FIX_TS + 3, "sessB" as *u8, "mcp__nishi__nx_fs_write" as *u8, "use" as *u8, "-" as *u8, ahnb)
1827 ch_frame_write(ahfj, lb, CH_AH_FIX_TS + 4, "sessB" as *u8, "mcp__nishi__nx_fs" as *u8, "use" as *u8, "-" as *u8, "delta" as *u8)
1828 sys_close(ahfj)
1829 let acx: *i64 = sys_mmap(8 * CH_AH_CTRS) as *i64
1830 let aob: *u8 = sys_mmap(CH_OUT)
1831 let arc: i64 = ce_author_health(ahj, ahp, ahs, acx, aob)
1832 var ok48: i64 = 0
1833 if arc == 0 { if acx[CH_AH_FILES] == 2 { if acx[CH_AH_FUNCS] == 2 { if acx[CH_AH_SUMVG] == 3 { if acx[CH_AH_ABOVE] == 0 { if acx[CH_AH_DFILES] == CH_AH_FIX_DFILES { if acx[CH_AH_DFUNCS] == CH_AH_FIX_DFUNCS { if acx[CH_AH_DABOVE] == CH_AH_FIX_DABOVE { ok48 = 1 } } } } } } } }
1834 gv_check("T48 author-health: two seat-written .nx files scanned once, vG 2+1 hand-computed, denominator read from the spine's LAST row" as *u8, ok48, ctr)
1835 var ok49: i64 = 0
1836 if acx[CH_AH_FRAMES] == 5 { if acx[CH_AH_PATHFRAMES] == 4 { if acx[CH_AH_UNIQUE] == 3 { if acx[CH_AH_INTREE] == 2 { if acx[CH_AH_OUTSIDE] == 1 { if acx[CH_AH_SESSIONS] == 2 { if acx[CH_AH_FIRSTTS] == CH_AH_FIX_TS { ok49 = 1 } } } } } } }
1837 gv_check("T49 author-health partition: a duplicate write counts ONCE, a non-.nx path is counted apart, sessions and first ts are exact" as *u8, ok49, ctr)
1838 let arc2: i64 = ce_author_health(ahj, ahp, ahn, acx, aob)
1839 var ok50: i64 = 0
1840 if arc2 == CH_AH_RC_UNOBS { if acx[CH_AH_DFILES] == 0 { if acx[CH_AH_FILES] == 2 { ok50 = 1 } } }
1841 gv_check("T50 NEG-CONTROL: an absent spine reads UNOBSERVABLE-DENOMINATOR (rc 3) with NO fabricated denominator, seat figures still measured" as *u8, ok50, ctr)
1842 let arc3: i64 = ce_author_health(fr, ahp, ahs, acx, aob)
1843 var ok51: i64 = 0
1844 if arc3 == CH_AH_RC_NOPATH { if acx[CH_AH_PATHFRAMES] == 0 { if acx[CH_AH_FILES] == 0 { ok51 = 1 } } }
1845 gv_check("T51 NEG-CONTROL: a journal whose frames carry no path reads NO-PATH-FRAMES (rc 4), never a zero that looks measured" as *u8, ok51, ctr)
1846 let rc: i64 = gv_verdict("CLAWHARV-GATE" as *u8, ctr, "transcript parse + delta hwm + ingest + gauge + page + propose + bootgauge + capture-beat teeth green" as *u8)
1847 return rc
1848}
1849
1850// ---------- learn: LEARNING-TEXT harvest (root fix for debt 1785525736) ----------
1851// Every other verb in this organ extracts "type":"tool_use" NAMES. That is tool TELEMETRY, not
1852// learning capture: ch_frame_write puts '-' in the two columns where a lesson would go, and the
1853// 6-hourly beat reported fail=0 for weeks while moving ZERO learnings, over transcripts holding
1854// ~40k LAW:/LESSON/ROOT CAUSE/FINDING: statements. This verb reads the PROSE instead -- the "text"
1855// payloads written by the assistant and the operator -- ranks each line, and keeps only what clears
1856// the floor. Because it CAN reject plain prose, its output is evidence rather than a transcript dump.
1857// Rule 11: every marker, weight and floor is loaded from a conf file. No weight is written in code.
1858const CH_MK_MAX: i64 = 64
1859const CH_CONF_WIN: i64 = 65536
1860const CH_TXTWIN: i64 = 262144
1861
1862// longest run of CONSECUTIVE occurrences of a (possibly multi-byte) glyph in q[s..e)
1863// the star/warn glyphs are 3-byte UTF-8, so this compares byte sequences, never single chars.
1864func ch_run_of(q: *u8, s: i64, e: i64, g: *u8) -> i64 {
1865 let gl: i64 = sj_vlen(g)
1866 if gl <= 0 { return 0 }
1867 var best: i64 = 0
1868 var i: i64 = s
1869 while i < e {
1870 var run: i64 = 0
1871 var j: i64 = i
1872 var go: i64 = 1
1873 while go == 1 {
1874 if j + gl > e { go = 0 } else {
1875 var k: i64 = 0
1876 var same: i64 = 1
1877 while k < gl {
1878 if q[j+k] != g[k] { same = 0; k = gl } else { k = k + 1 }
1879 }
1880 if same == 1 { run = run + 1; j = j + gl } else { go = 0 }
1881 }
1882 }
1883 if run > best { best = run }
1884 if run > 0 { i = j } else { i = i + 1 }
1885 }
1886 return best
1887}
1888
1889// conf loader. mk is INTERLEAVED (mk[2k]=literal offset into cbuf, mk[2k+1]=weight) so this stays
1890// at 4 params; sc carries the scalars: 0=warn_bonus 1=min_rank 2=min_len 3=max_len 4=star_off
1891// 5=warn_off 6=star_max 7=marker_count. Returns marker count, or -1 if the conf cannot be read --
1892// FAIL-CLOSED: no conf means no ranking basis, so the verb refuses rather than inventing weights.
1893func ch_conf_load(path: *u8, cbuf: *u8, mk: *i64, sc: *i64) -> i64 {
1894 let n: i64 = ch_read(path, cbuf, CH_CONF_WIN - 8)
1895 if n <= 0 { return 0 - 1 }
1896 sc[0] = 2
1897 sc[1] = 3
1898 sc[2] = 40
1899 sc[3] = 400
1900 sc[4] = 0 - 1
1901 sc[5] = 0 - 1
1902 sc[6] = 6
1903 var cnt: i64 = 0
1904 var i: i64 = 0
1905 while i < n {
1906 let le: i64 = sj_le(cbuf, i, n)
1907 if cbuf[i] != (35 as u8) {
1908 if ch_starts(cbuf, i, le, "marker=" as *u8) == 1 {
1909 if cnt < CH_MK_MAX {
1910 let vs: i64 = i + 7
1911 var bar: i64 = 0 - 1
1912 var p: i64 = vs
1913 while p < le { if cbuf[p] == (124 as u8) { bar = p } p = p + 1 }
1914 if bar > vs {
1915 cbuf[bar] = 0 as u8
1916 cbuf[le] = 0 as u8
1917 mk[cnt*2] = vs
1918 mk[cnt*2+1] = sj_atoi_z(((cbuf as i64) + bar + 1) as *u8)
1919 cnt = cnt + 1
1920 }
1921 }
1922 }
1923 if ch_starts(cbuf, i, le, "star_char=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[4] = i + 10 }
1924 if ch_starts(cbuf, i, le, "warn_char=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[5] = i + 10 }
1925 if ch_starts(cbuf, i, le, "warn_bonus=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[0] = sj_atoi_z(((cbuf as i64) + i + 11) as *u8) }
1926 if ch_starts(cbuf, i, le, "min_rank_store=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[1] = sj_atoi_z(((cbuf as i64) + i + 15) as *u8) }
1927 if ch_starts(cbuf, i, le, "min_len=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[2] = sj_atoi_z(((cbuf as i64) + i + 8) as *u8) }
1928 if ch_starts(cbuf, i, le, "max_len=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[3] = sj_atoi_z(((cbuf as i64) + i + 8) as *u8) }
1929 if ch_starts(cbuf, i, le, "star_max=" as *u8) == 1 { cbuf[le] = 0 as u8; sc[6] = sj_atoi_z(((cbuf as i64) + i + 9) as *u8) }
1930 }
1931 i = le + 1
1932 }
1933 sc[7] = cnt
1934 return cnt
1935}
1936
1937// a marker must sit on a WORD BOUNDARY. Measured on real prose: the naive substring test scored
1938// "UNMEASURED" as the marker "MEASURED" and promoted a doc line to rank 3 -- a substring needle
1939// flatters silently. Only the left edge needs guarding (markers are prefixes like "LAW:").
1940func ch_isalpha(c: u8) -> i64 {
1941 if c >= (65 as u8) { if c <= (90 as u8) { return 1 } }
1942 if c >= (97 as u8) { if c <= (122 as u8) { return 1 } }
1943 return 0
1944}
1945
1946// rank = the MAX of the signals, never the mean (banked law): a star run is the operator's own
1947// ranking convention, a warn glyph is a callout worth rank+bonus, and marker phrases carry their
1948// configured weight. Capped at star_max so a decorative row of stars cannot outrank a real law.
1949func ch_rank_text(q: *u8, s: i64, e: i64, cbuf: *u8, mk: *i64, sc: *i64) -> i64 {
1950 var r: i64 = 0
1951 if sc[4] >= 0 {
1952 let sr: i64 = ch_run_of(q, s, e, ((cbuf as i64) + sc[4]) as *u8)
1953 if sr > r { r = sr }
1954 }
1955 if sc[5] >= 0 {
1956 let wr: i64 = ch_run_of(q, s, e, ((cbuf as i64) + sc[5]) as *u8)
1957 if wr > 0 { let wv: i64 = wr + sc[0]; if wv > r { r = wv } }
1958 }
1959 var k: i64 = 0
1960 while k < sc[7] {
1961 let lit: *u8 = ((cbuf as i64) + mk[k*2]) as *u8
1962 var from: i64 = s
1963 var hit: i64 = 0
1964 while hit == 0 {
1965 let hp: i64 = ch_find_from(q, from, e, lit)
1966 if hp < 0 { hit = 0 - 1 } else {
1967 var okb: i64 = 1
1968 if hp > s { if ch_isalpha(q[hp-1]) == 1 { okb = 0 } }
1969 if okb == 1 { hit = 1 } else { from = hp + 1 }
1970 }
1971 }
1972 if hit == 1 { if mk[k*2+1] > r { r = mk[k*2+1] } }
1973 k = k + 1
1974 }
1975 if r > sc[6] { r = sc[6] }
1976 return r
1977}
1978
1979func ch_learn(tpath: *u8, ws: *u8, outp: *u8, confp: *u8, cx: *i64) -> i64 {
1980 let cbuf: *u8 = sys_mmap(CH_CONF_WIN)
1981 let mk: *i64 = sys_mmap(CH_MK_MAX * 16) as *i64
1982 let sc: *i64 = sys_mmap(128) as *i64
1983 let cnt: i64 = ch_conf_load(confp, cbuf, mk, sc)
1984 if cnt < 0 { return 0 - 4 }
1985 cx[1] = cnt
1986 let buf: *u8 = sys_mmap(CH_WIN)
1987 let cap: i64 = CH_WIN - 8
1988 let n: i64 = ch_read(tpath, buf, cap)
1989 cx[0] = 0
1990 if n <= 0 { return 0 - 1 }
1991 if n >= cap { cx[0] = 1 }
1992 let fd: i64 = sys_openat_append(outp, CH_MODE_644)
1993 if fd < 0 { return 0 - 3 }
1994 let tb: *u8 = sys_mmap(CH_TXTWIN)
1995 let ob: *u8 = sys_mmap(CH_TXTWIN)
1996 // last emitted segment. A real transcript frame carries the same assistant text more than once
1997 // (the message and its echo), so without this the organ emits provable duplicates -- measured 2
1998 // identical records from one real line. Adjacent-compare, not a full set: the echo is adjacent.
1999 let pb: *u8 = sys_mmap(CH_TXTWIN)
2000 var pl: i64 = 0
2001 var kept: i64 = 0
2002 var i: i64 = 0
2003 while i < n {
2004 let le: i64 = sj_le(buf, i, n)
2005 var ts: i64 = 0
2006 let tp: i64 = ch_find_from(buf, i, le, "\"timestamp\":\"" as *u8)
2007 if tp >= 0 { ts = ch_iso_epoch(buf, tp + 13, le) }
2008 var j: i64 = i
2009 var go: i64 = 1
2010 while go == 1 {
2011 let xp: i64 = ch_find_from(buf, j, le, "\"text\":\"" as *u8)
2012 if xp < 0 { go = 0 } else {
2013 var p: i64 = xp + 8
2014 var to: i64 = 0
2015 var g2: i64 = 1
2016 while g2 == 1 {
2017 if p >= le { g2 = 0 } else {
2018 let c: u8 = buf[p]
2019 if c == (34 as u8) { g2 = 0 } else {
2020 if c == (92 as u8) {
2021 let d2: u8 = buf[p+1]
2022 var em: u8 = d2
2023 if d2 == (110 as u8) { em = 10 as u8 }
2024 if d2 == (116 as u8) { em = 32 as u8 }
2025 if d2 == (114 as u8) { em = 32 as u8 }
2026 if to < CH_TXTWIN - 4 { tb[to] = em; to = to + 1 }
2027 p = p + 2
2028 } else {
2029 if to < CH_TXTWIN - 4 { tb[to] = c; to = to + 1 }
2030 p = p + 1
2031 }
2032 }
2033 }
2034 }
2035 var q: i64 = 0
2036 while q < to {
2037 let qe: i64 = sj_le(tb, q, to)
2038 let seg: i64 = qe - q
2039 if seg >= sc[2] {
2040 var endq: i64 = qe
2041 if seg > sc[3] { endq = q + sc[3] }
2042 let r: i64 = ch_rank_text(tb, q, endq, cbuf, mk, sc)
2043 var dup: i64 = 0
2044 if pl == (endq - q) {
2045 var z: i64 = 0
2046 var sm: i64 = 1
2047 while z < pl { if pb[z] != tb[q+z] { sm = 0; z = pl } else { z = z + 1 } }
2048 if sm == 1 { dup = 1 }
2049 }
2050 if r >= sc[1] { if dup == 0 {
2051 var o: i64 = sj_cat(ob, 0, "{\"ts\":" as *u8)
2052 o = sj_catn(ob, o, ts)
2053 o = sj_cat(ob, o, ",\"ws\":\"" as *u8)
2054 o = sj_cat(ob, o, ws)
2055 o = sj_cat(ob, o, "\",\"src\":\"transcript\",\"rank\":" as *u8)
2056 o = sj_catn(ob, o, r)
2057 o = sj_cat(ob, o, ",\"text\":\"" as *u8)
2058 var k2: i64 = q
2059 while k2 < endq {
2060 let c2: u8 = tb[k2]
2061 if c2 == (34 as u8) { ob[o] = 92 as u8; o = o + 1; ob[o] = 34 as u8; o = o + 1 } else {
2062 if c2 == (92 as u8) { ob[o] = 92 as u8; o = o + 1; ob[o] = 92 as u8; o = o + 1 } else {
2063 if c2 < (32 as u8) { ob[o] = 32 as u8; o = o + 1 } else { ob[o] = c2; o = o + 1 }
2064 }
2065 }
2066 k2 = k2 + 1
2067 }
2068 o = sj_cat(ob, o, "\"}" as *u8)
2069 ob[o] = 10 as u8
2070 sys_write(fd, ob, o + 1)
2071 pl = endq - q
2072 var z3: i64 = 0
2073 while z3 < pl { pb[z3] = tb[q+z3]; z3 = z3 + 1 }
2074 kept = kept + 1
2075 } }
2076 }
2077 q = qe + 1
2078 }
2079 j = p + 1
2080 }
2081 }
2082 i = le + 1
2083 }
2084 sys_close(fd)
2085 return kept
2086}
2087
2088// ================= beat: DM1 session->NAS capture (devmgmt /compare rung, 2026-08-20) =================
2089// The dev record is laptop-local (837 transcripts / 2.29 GB measured 2026-08-20 under
2090// ~/.claude/projects, at THREE depths: sessions, subagents/, subagents/workflows/); the NAS clock plane
2091// cannot reach the laptop, so the beat RUNS WHERE THE TRANSCRIPTS LIVE (this organ is portable by
2092// design) and PUSHES. Pipeline: walk -> ch_delta per transcript (per-transcript byte HWM in state/)
2093// -> split fresh frames into ts-day PIECES -> ingest every piece into the LOCAL per-day journal twin
2094// -> when push=1, per piece: upload via the forked MCP wire (nx_fs_write), byte-verify with
2095// nx_filehash on BOTH sides (one ruler), NAS-side ch_ingest into the per-day NAS journal, announce
2096// journal fill. PIECES ARE THE CHUNK UNIT AND THE INGEST UNIT: each stays under the MCP body cliff
2097// and is marker-idempotent via ch_ingest, so the pipeline is resumable at every stage with no append
2098// primitive over the wire. A piece leaves the spool only after the NAS leg confirms; every failure
2099// leaves it spooled -- wrong only toward doing nothing.
2100// DAY PARTITION DERIVATION: heaviest measured day (2026-08-19: 32,122 MCP calls / 836,673 transcript
2101// lines across 7 seats) stages ~2-4 MB of frames -- a day is the largest calendar unit whose worst
2102// measured case still fits the 4 MiB gauge window (CH_JWIN), so per-day journals keep the NAS-side
2103// gauge untruncated. Frames whose timestamp cannot parse route to chbeat_tszero.jrnl -- their own
2104// bucket, never folded.
2105// Rule 11: every path, bound and cadence datum rides chbeat.conf; the beat consts live in the module
2106// const block at the top (single-pass parser: the selftest teeth read them first).
2107
2108func ch_bt_zeq(a: *u8, b: *u8) -> i64 {
2109 var i: i64 = 0
2110 while a[i] == b[i] { if a[i] == (0 as u8) { return 1 } i = i + 1 }
2111 return 0
2112}
2113func ch_bt_ends(s: *u8, sfx: *u8) -> i64 {
2114 let n: i64 = sj_vlen(s)
2115 let m: i64 = sj_vlen(sfx)
2116 if n < m { return 0 }
2117 return sj_lit_eq(s, n - m, n, sfx)
2118}
2119func ch_bt_le16(b: *u8, off: i64) -> i64 { return (b[off] as i64) + (b[off+1] as i64) * 256 }
2120func ch_bt_le64(b: *u8, off: i64) -> i64 {
2121 var v: i64 = 0
2122 var i: i64 = 7
2123 while i >= 0 { v = v * 256 + (b[off+i] as i64); i = i - 1 }
2124 return v
2125}
2126// stat: k[0]=file kind as the DT_* value ((st_mode>>12)&0xF equals DT_DIR/DT_REG numerically by Linux
2127// design), k[1]=size. sb = caller scratch >= 160 B (never allocated here -- runs once per dirent).
2128// st_mode u16 at offset 24, st_size i64 at offset 48 (x86_64 struct stat; the same offsets
2129// nx_artifactdrift ps_execbit reads). Arithmetic field extraction, no bitwise ops needed.
2130func ch_bt_stat(path: *u8, sb: *u8, k: *i64) -> i64 {
2131 k[0] = 0
2132 k[1] = 0 - 1
2133 if sys_fstatat(path, sb) != 0 { return 0 - 1 }
2134 let mode: i64 = ch_bt_le16(sb, 24)
2135 k[0] = (mode / 4096) % 16
2136 k[1] = ch_bt_le64(sb, 48)
2137 return 0
2138}
2139// recursive walk: every file ending <sfx> under root, ANY depth (sessions, subagents/, workflows/).
2140// getdents64 LOOPED until 0 per directory (one call is a prefix -- banked law); d_type on 9p/drvfs is
2141// often DT_UNKNOWN -> fstatat fallback, counted. fo[i] = arena offset of file path i.
2142// Returns file count, or -1 = table/arena overflow (caller REFUSES loudly -- never a silent cap).
2143// wcx: 0=dirs_walked 1=dir_open_errors 2=stat_fallbacks 3=arena_used
2144func ch_bt_walk(root: *u8, sfx: *u8, ar: *u8, fo: *i64, wcx: *i64) -> i64 {
2145 let dq: *i64 = sys_mmap(8 * CH_BT_MAXDIRS) as *i64
2146 let db: *u8 = sys_mmap(CH_BT_DIRWIN)
2147 let sb: *u8 = sys_mmap(256)
2148 let kk: *i64 = sys_mmap(16) as *i64
2149 var ap: i64 = 0
2150 var dh: i64 = 0
2151 var dt2: i64 = 0
2152 var nf: i64 = 0
2153 wcx[0] = 0
2154 wcx[1] = 0
2155 wcx[2] = 0
2156 wcx[3] = 0
2157 let rl: i64 = sj_vlen(root)
2158 if rl + 2 > CH_BT_ARENA { return 0 - 1 }
2159 dq[dt2] = ap
2160 var o: i64 = sj_cat(ar, ap, root)
2161 ar[o] = 0 as u8
2162 ap = o + 1
2163 dt2 = dt2 + 1
2164 while dh < dt2 {
2165 let dpo: i64 = dq[dh]
2166 dh = dh + 1
2167 let dpath: *u8 = ((ar as i64) + dpo) as *u8
2168 let dl: i64 = sj_vlen(dpath)
2169 let fd: i64 = sys_openat_rd(dpath)
2170 if fd < 0 { wcx[1] = wcx[1] + 1 } else {
2171 var more: i64 = 1
2172 while more == 1 {
2173 let r: i64 = sys_getdents64(fd, db, CH_BT_DIRWIN)
2174 if r <= 0 { more = 0 } else {
2175 var p: i64 = 0
2176 while p < r {
2177 let rec: *u8 = ((db as i64) + p) as *u8
2178 let rl2: i64 = dirent_reclen(rec)
2179 if rl2 <= 0 { p = r; more = 0 } else {
2180 var ty: i64 = dirent_type(rec)
2181 let nm: *u8 = dirent_name(rec)
2182 var dot: i64 = 0
2183 if nm[0] == (46 as u8) {
2184 if nm[1] == (0 as u8) { dot = 1 }
2185 if nm[1] == (46 as u8) { if nm[2] == (0 as u8) { dot = 1 } }
2186 }
2187 if dot == 0 {
2188 let nl: i64 = sj_vlen(nm)
2189 if ap + dl + nl + 2 > CH_BT_ARENA { sys_close(fd); return 0 - 1 }
2190 let po: i64 = ap
2191 var q: i64 = sj_cat(ar, po, dpath)
2192 ar[q] = 47 as u8
2193 q = q + 1
2194 q = sj_cat(ar, q, nm)
2195 ar[q] = 0 as u8
2196 let full: *u8 = ((ar as i64) + po) as *u8
2197 if ty == 0 { wcx[2] = wcx[2] + 1; if ch_bt_stat(full, sb, kk) == 0 { ty = kk[0] } }
2198 var keep: i64 = 0
2199 if ty == DT_DIR {
2200 if dt2 >= CH_BT_MAXDIRS { sys_close(fd); return 0 - 1 }
2201 dq[dt2] = po
2202 dt2 = dt2 + 1
2203 keep = 1
2204 } else {
2205 if ty == DT_REG { if ch_bt_ends(full, sfx) == 1 {
2206 if nf >= CH_BT_MAXFILES { sys_close(fd); return 0 - 1 }
2207 fo[nf] = po
2208 nf = nf + 1
2209 keep = 1
2210 } }
2211 }
2212 if keep == 1 { ap = q + 1 }
2213 }
2214 p = p + rl2
2215 }
2216 }
2217 }
2218 }
2219 sys_close(fd)
2220 wcx[0] = wcx[0] + 1
2221 }
2222 }
2223 wcx[3] = ap
2224 return nf
2225}
2226// epoch -> zero-padded YYYYMMDD (Hinnant civil-from-days, the exact inverse of ch_epoch_ymdhms).
2227// ts <= 0 -> "tszero": frames without a parseable timestamp keep their OWN journal bucket.
2228func ch_bt_day(ts: i64, d: *u8) -> i64 {
2229 if ts <= 0 { let o: i64 = sj_cat(d, 0, "tszero" as *u8); d[o] = 0 as u8; return o }
2230 let z: i64 = ts / CH_MAGIC_86400 + CH_MAGIC_719468
2231 let era: i64 = z / CH_MAGIC_146097
2232 let doe: i64 = z - era * CH_MAGIC_146097
2233 let yoe: i64 = (doe - doe / CH_MAGIC_1460 + doe / CH_MAGIC_36524 - doe / CH_MAGIC_146096) / 365
2234 var y: i64 = yoe + era * 400
2235 let doy: i64 = doe - (365 * yoe + yoe / 4 - yoe / 100)
2236 let mp: i64 = (5 * doy + 2) / 153
2237 let dd: i64 = doy - (153 * mp + 2) / 5 + 1
2238 var m: i64 = 0
2239 if mp < 10 { m = mp + 3 } else { m = mp - 9 }
2240 if m <= 2 { y = y + 1 }
2241 d[0] = (48 + (y / 1000) % 10) as u8
2242 d[1] = (48 + (y / 100) % 10) as u8
2243 d[2] = (48 + (y / 10) % 10) as u8
2244 d[3] = (48 + y % 10) as u8
2245 d[4] = (48 + (m / 10) % 10) as u8
2246 d[5] = (48 + m % 10) as u8
2247 d[6] = (48 + (dd / 10) % 10) as u8
2248 d[7] = (48 + dd % 10) as u8
2249 d[8] = 0 as u8
2250 return 8
2251}
2252// conf: key=value rows; '#' comments. Values zero-terminate IN cbuf; the value offset is DERIVED from
2253// the key literal's own length (sj_vlen) -- never a hand-counted twin beside the literal (banked law).
2254func ch_bt_kv(cbuf: *u8, i: i64, le: i64, key: *u8) -> i64 {
2255 if ch_starts(cbuf, i, le, key) == 1 { cbuf[le] = 0 as u8; return i + sj_vlen(key) }
2256 return 0 - 1
2257}
2258// off: 0 root 1 state 2 spool 3 done 4 journal 5 nas_stage 6 nas_journal 7 wire 8 wire_script
2259// 9 cap_write 10 cap_ingest 11 cap_read 12 hash_elf (-1 = absent)
2260// iv: 0 push 1 push_max 2 piece_raw 3 wire_timeout_ms 4 jrnl_cliff 5 jrnl_warn_permil
2261// kt interleaved known_type rows (offset,count); count in kcx[0]
2262// returns 0, -1 unreadable conf, -2 required key missing (NAMED on stdout) -- fail-closed both ways.
2263func ch_bt_conf(path: *u8, cbuf: *u8, off: *i64, iv: *i64, kt: *i64, kcx: *i64) -> i64 {
2264 let n: i64 = ch_read(path, cbuf, CH_CONF_WIN - 8)
2265 if n <= 0 { return 0 - 1 }
2266 var w: i64 = 0
2267 while w < 13 { off[w] = 0 - 1; w = w + 1 }
2268 iv[0] = 0
2269 iv[1] = 0
2270 // derived default: ~9% JSON-escape inflation on the 6 control bytes per ~80 B frame plus a ~1 KiB
2271 // rpc envelope cannot push 3/4 of the measured body cliff across it
2272 iv[2] = CH_MCP_BODY_CLIFF * 3 / 4
2273 // derived default: matches the estate MCP client's own 120000 ms call deadline
2274 iv[3] = 120000
2275 // derived default: the day-journal cliff IS the gauge/verify window
2276 iv[4] = CH_JWIN
2277 // derived default: AMBER from four fifths of the cliff (the sizeguard amber-before-red shape)
2278 iv[5] = 1000 * 4 / 5
2279 kcx[0] = 0
2280 var i: i64 = 0
2281 while i < n {
2282 let le: i64 = sj_le(cbuf, i, n)
2283 if cbuf[i] != (35 as u8) {
2284 var v: i64 = ch_bt_kv(cbuf, i, le, "root=" as *u8)
2285 if v >= 0 { off[0] = v }
2286 v = ch_bt_kv(cbuf, i, le, "state=" as *u8)
2287 if v >= 0 { off[1] = v }
2288 v = ch_bt_kv(cbuf, i, le, "spool=" as *u8)
2289 if v >= 0 { off[2] = v }
2290 v = ch_bt_kv(cbuf, i, le, "done=" as *u8)
2291 if v >= 0 { off[3] = v }
2292 v = ch_bt_kv(cbuf, i, le, "journal=" as *u8)
2293 if v >= 0 { off[4] = v }
2294 v = ch_bt_kv(cbuf, i, le, "nas_stage=" as *u8)
2295 if v >= 0 { off[5] = v }
2296 v = ch_bt_kv(cbuf, i, le, "nas_journal=" as *u8)
2297 if v >= 0 { off[6] = v }
2298 v = ch_bt_kv(cbuf, i, le, "wire=" as *u8)
2299 if v >= 0 { off[7] = v }
2300 v = ch_bt_kv(cbuf, i, le, "wire_script=" as *u8)
2301 if v >= 0 { off[8] = v }
2302 v = ch_bt_kv(cbuf, i, le, "cap_write=" as *u8)
2303 if v >= 0 { off[9] = v }
2304 v = ch_bt_kv(cbuf, i, le, "cap_ingest=" as *u8)
2305 if v >= 0 { off[10] = v }
2306 v = ch_bt_kv(cbuf, i, le, "cap_read=" as *u8)
2307 if v >= 0 { off[11] = v }
2308 v = ch_bt_kv(cbuf, i, le, "hash_elf=" as *u8)
2309 if v >= 0 { off[12] = v }
2310 v = ch_bt_kv(cbuf, i, le, "push=" as *u8)
2311 if v >= 0 { iv[0] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2312 v = ch_bt_kv(cbuf, i, le, "push_max=" as *u8)
2313 if v >= 0 { iv[1] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2314 v = ch_bt_kv(cbuf, i, le, "piece_raw=" as *u8)
2315 if v >= 0 { iv[2] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2316 v = ch_bt_kv(cbuf, i, le, "wire_timeout_ms=" as *u8)
2317 if v >= 0 { iv[3] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2318 v = ch_bt_kv(cbuf, i, le, "jrnl_cliff=" as *u8)
2319 if v >= 0 { iv[4] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2320 v = ch_bt_kv(cbuf, i, le, "jrnl_warn_permil=" as *u8)
2321 if v >= 0 { iv[5] = sj_atoi_z(((cbuf as i64) + v) as *u8) }
2322 v = ch_bt_kv(cbuf, i, le, "known_type=" as *u8)
2323 if v >= 0 { if kcx[0] < CH_MK_MAX { kt[kcx[0] * 2] = v; kt[kcx[0] * 2 + 1] = 0; kcx[0] = kcx[0] + 1 } }
2324 }
2325 i = le + 1
2326 }
2327 var miss: i64 = 0 - 1
2328 if off[0] < 0 { miss = 0 }
2329 if off[1] < 0 { if miss < 0 { miss = 1 } }
2330 if off[2] < 0 { if miss < 0 { miss = 2 } }
2331 if off[3] < 0 { if miss < 0 { miss = 3 } }
2332 if off[4] < 0 { if miss < 0 { miss = 4 } }
2333 if miss >= 0 {
2334 let eb: *u8 = sys_mmap(256)
2335 var o2: i64 = sj_cat(eb, 0, "CHBEAT CONF-MISSING key=" as *u8)
2336 if miss == 0 { o2 = sj_cat(eb, o2, "root" as *u8) }
2337 if miss == 1 { o2 = sj_cat(eb, o2, "state" as *u8) }
2338 if miss == 2 { o2 = sj_cat(eb, o2, "spool" as *u8) }
2339 if miss == 3 { o2 = sj_cat(eb, o2, "done" as *u8) }
2340 if miss == 4 { o2 = sj_cat(eb, o2, "journal" as *u8) }
2341 eb[o2] = 10 as u8
2342 sys_write(1, eb, o2 + 1)
2343 return 0 - 2
2344 }
2345 return 0
2346}
2347// head-type census + tool_use marks over the freshly harvested window [from,to) of ONE transcript.
2348// ANCHORED at line position 0 -- a nested "type" deeper in the line can never be read as the record
2349// type (measured 2026-08-20: attachment lines carry a NESTED type FIRST, so a first-occurrence scan
2350// answers the wrong field). Lines whose type is not the first key count HEADLESS -- named for what was
2351// measured; the head census watches the head-shaped population only, and that imprecision is declared
2352// here. Unknown head-types intern into their own worklist (ua/uo/ucx), never folded into a known one.
2353// ccx: 0=lines 1=tooluse_lines 2=tooluse_marks 3=head_known 4=head_unknown 5=headless
2354// 6=census_read_fail 7=type_table_overflow(FLOOR flag) ucx: 0=distinct_unknown 1=ua_cursor
2355func ch_bt_census(tpath: *u8, from: i64, to: i64, cbuf: *u8, kt: *i64, kn: i64, ua: *u8, uo: *i64, ucx: *i64, ccx: *i64) -> i64 {
2356 let nn: *i64 = sys_mmap(16) as *i64
2357 let buf: *u8 = sys_map_file(tpath, nn)
2358 let n: i64 = nn[0]
2359 if n <= 0 { ccx[6] = ccx[6] + 1; return 0 - 1 }
2360 var lim: i64 = to
2361 if lim > n { lim = n }
2362 let tul: *u8 = "\"type\":\"tool_use\"" as *u8
2363 let tuln: i64 = sj_vlen(tul)
2364 let hl: *u8 = "{\"type\":\"" as *u8
2365 let hln: i64 = sj_vlen(hl)
2366 var i: i64 = from
2367 if i < 0 { i = 0 }
2368 while i < lim {
2369 let le: i64 = sj_le(buf, i, lim)
2370 if le > i {
2371 ccx[0] = ccx[0] + 1
2372 var marks: i64 = 0
2373 var j: i64 = i
2374 var go: i64 = 1
2375 while go == 1 {
2376 let tu: i64 = ch_find_from(buf, j, le, tul)
2377 if tu < 0 { go = 0 } else { marks = marks + 1; j = tu + tuln }
2378 }
2379 if marks > 0 { ccx[1] = ccx[1] + 1; ccx[2] = ccx[2] + marks }
2380 if ch_starts(buf, i, le, hl) == 1 {
2381 let vs: i64 = i + hln
2382 var ve: i64 = vs
2383 var g2: i64 = 1
2384 while g2 == 1 {
2385 if ve >= le { g2 = 0 } else { if buf[ve] == (34 as u8) { g2 = 0 } else { ve = ve + 1 } }
2386 }
2387 var hit: i64 = 0
2388 var k: i64 = 0
2389 while k < kn {
2390 let lit: *u8 = ((cbuf as i64) + kt[k * 2]) as *u8
2391 if sj_lit_eq(buf, vs, ve, lit) == 1 { kt[k * 2 + 1] = kt[k * 2 + 1] + 1; hit = 1; k = kn } else { k = k + 1 }
2392 }
2393 if hit == 1 { ccx[3] = ccx[3] + 1 } else {
2394 ccx[4] = ccx[4] + 1
2395 var f: i64 = 0 - 1
2396 var k2: i64 = 0
2397 while k2 < ucx[0] {
2398 let ul: *u8 = ((ua as i64) + uo[k2 * 2]) as *u8
2399 if sj_lit_eq(buf, vs, ve, ul) == 1 { f = k2; k2 = ucx[0] } else { k2 = k2 + 1 }
2400 }
2401 if f >= 0 { uo[f * 2 + 1] = uo[f * 2 + 1] + 1 } else {
2402 if ucx[0] < CH_BT_TYPEMAX {
2403 var vl2: i64 = ve - vs
2404 if vl2 > CH_NAME_MAX { vl2 = CH_NAME_MAX }
2405 uo[ucx[0] * 2] = ucx[1]
2406 uo[ucx[0] * 2 + 1] = 1
2407 var c2: i64 = 0
2408 while c2 < vl2 { ua[ucx[1] + c2] = buf[vs + c2]; c2 = c2 + 1 }
2409 ua[ucx[1] + vl2] = 0 as u8
2410 ucx[1] = ucx[1] + vl2 + 1
2411 ucx[0] = ucx[0] + 1
2412 } else { ccx[7] = 1 }
2413 }
2414 }
2415 } else { ccx[5] = ccx[5] + 1 }
2416 }
2417 i = le + 1
2418 }
2419 sys_munmap(buf, n)
2420 return 0
2421}
2422func ch_bt_path2(out: *u8, a: *u8, b: *u8) -> i64 {
2423 var o: i64 = sj_cat(out, 0, a)
2424 out[o] = 47 as u8
2425 o = o + 1
2426 o = sj_cat(out, o, b)
2427 out[o] = 0 as u8
2428 return o
2429}
2430func ch_bt_base(path: *u8) -> *u8 {
2431 var bs: i64 = 0
2432 var i: i64 = 0
2433 while path[i] != (0 as u8) { if path[i] == (47 as u8) { bs = i + 1 } i = i + 1 }
2434 return ((path as i64) + bs) as *u8
2435}
2436func ch_bt_stem(path: *u8, out: *u8) -> i64 {
2437 let b: *u8 = ch_bt_base(path)
2438 let n: i64 = sj_vlen(b)
2439 var e: i64 = n - sj_vlen(".jsonl" as *u8)
2440 if e < 0 { e = n }
2441 var o: i64 = 0
2442 while o < e { out[o] = b[o]; o = o + 1 }
2443 out[o] = 0 as u8
2444 return o
2445}
2446func ch_bt_hwmpath(state: *u8, rel: *u8, out: *u8) -> i64 {
2447 var o: i64 = sj_cat(out, 0, state)
2448 out[o] = 47 as u8
2449 o = o + 1
2450 var i: i64 = 0
2451 while rel[i] != (0 as u8) {
2452 var c: u8 = rel[i]
2453 if c == (47 as u8) { c = 95 as u8 }
2454 if c == (92 as u8) { c = 95 as u8 }
2455 out[o] = c
2456 o = o + 1
2457 i = i + 1
2458 }
2459 o = sj_cat(out, o, ".hwm" as *u8)
2460 out[o] = 0 as u8
2461 return o
2462}
2463// frame count of a piece (pieces are written by ch_bt_split, every line newline-terminated)
2464func ch_bt_lines(path: *u8) -> i64 {
2465 let nn: *i64 = sys_mmap(16) as *i64
2466 let buf: *u8 = sys_map_file(path, nn)
2467 let n: i64 = nn[0]
2468 if n <= 0 { return 0 }
2469 var c: i64 = 0
2470 var i: i64 = 0
2471 while i < n {
2472 let le: i64 = sj_le(buf, i, n)
2473 if le > i { c = c + 1 }
2474 i = le + 1
2475 }
2476 sys_munmap(buf, n)
2477 return c
2478}
2479// first integer right after <key> in b[0..n) -> value, or -1 when key or digits absent
2480func ch_bt_int_after(b: *u8, n: i64, key: *u8) -> i64 {
2481 let p: i64 = ch_find_from(b, 0, n, key)
2482 if p < 0 { return 0 - 1 }
2483 var i: i64 = p + sj_vlen(key)
2484 var v: i64 = 0
2485 var any: i64 = 0
2486 var go: i64 = 1
2487 while go == 1 {
2488 if i >= n { go = 0 } else {
2489 let c: i64 = b[i] as i64
2490 var dig: i64 = 0
2491 if c >= 48 { if c <= 57 { dig = 1 } }
2492 if dig == 1 { v = v * 10 + (c - 48); any = 1; i = i + 1 } else { go = 0 }
2493 }
2494 }
2495 if any == 0 { return 0 - 1 }
2496 return v
2497}
2498// sha256 hex right after "sha256":" -> out (65 B incl NUL); 1 ok, 0 absent/short/non-hex
2499func ch_bt_parse_sha(b: *u8, n: i64, out: *u8) -> i64 {
2500 let key: *u8 = "\"sha256\":\"" as *u8
2501 let p: i64 = ch_find_from(b, 0, n, key)
2502 if p < 0 { return 0 }
2503 let s: i64 = p + sj_vlen(key)
2504 var i: i64 = 0
2505 while i < 64 {
2506 if s + i >= n { return 0 }
2507 let c: i64 = b[s + i] as i64
2508 var okc: i64 = 0
2509 if c >= 48 { if c <= 57 { okc = 1 } }
2510 if c >= 97 { if c <= 102 { okc = 1 } }
2511 if okc == 0 { return 0 }
2512 out[i] = b[s + i]
2513 i = i + 1
2514 }
2515 out[64] = 0 as u8
2516 return 1
2517}
2518// forked call through the MCP wire: <wire> <script> <tool> <cap> [a1..a4]; captures stdout+stderr.
2519// Returns the child's exit code (127 = wire absent). The wire is TRANSPORT ONLY -- every decision
2520// over its output happens in this organ (shell-is-break-glass discipline; the wire is the sanctioned
2521// MCP client, nxmcp.py, forked with a clean argv, no shell interpretation anywhere).
2522func ch_bt_wire(wire: *u8, script: *u8, tool: *u8, cap: *u8, a1: *u8, a2: *u8, a3: *u8, a4: *u8, tmo: i64, cout: *u8, colen: *i64) -> i64 {
2523 let av: *i64 = sys_mmap(96) as *i64
2524 av[0] = wire as i64
2525 av[1] = script as i64
2526 av[2] = tool as i64
2527 av[3] = cap as i64
2528 var k: i64 = 4
2529 if (a1 as i64) != 0 { av[k] = a1 as i64; k = k + 1 }
2530 if (a2 as i64) != 0 { av[k] = a2 as i64; k = k + 1 }
2531 if (a3 as i64) != 0 { av[k] = a3 as i64; k = k + 1 }
2532 if (a4 as i64) != 0 { av[k] = a4 as i64; k = k + 1 }
2533 av[k] = 0
2534 return tr_run_capture_to(wire, av, cout, CH_OUT - 8, colen, tmo)
2535}
2536func ch_bt_flushp(spool: *u8, day: *u8, stamp: i64, seq: i64, cell: *u8, clen: i64) -> i64 {
2537 let pp: *u8 = sys_mmap(CH_BT_PATHMAX)
2538 var o: i64 = sj_cat(pp, 0, spool)
2539 pp[o] = 47 as u8
2540 o = o + 1
2541 o = sj_cat(pp, o, "cb" as *u8)
2542 o = sj_cat(pp, o, day)
2543 pp[o] = 95 as u8
2544 o = o + 1
2545 o = sj_catn(pp, o, stamp)
2546 pp[o] = 95 as u8
2547 o = o + 1
2548 o = sj_catn(pp, o, seq)
2549 o = sj_cat(pp, o, ".frames" as *u8)
2550 pp[o] = 0 as u8
2551 let fd: i64 = sys_openat_wr(pp, CH_MODE_644)
2552 if fd < 0 { return 0 - 3 }
2553 sys_write(fd, cell, clen)
2554 sys_close(fd)
2555 return 0
2556}
2557// split a raw delta-frames file into ts-day pieces, each under piece_raw bytes at a FRAME boundary.
2558// Piece names cb<day>_<stamp>_<seq>.frames are DETERMINISTIC from the raw file's stamp, so a re-split
2559// after a crash rewrites identical names and content and every downstream stage stays idempotent by
2560// marker. dcx: 0=pieces 1=bytes 2=days 3=tszero_frames 4=frames
2561// returns 0, -2 day-table overflow (REFUSED loudly), -3 piece write fail
2562func ch_bt_split(rawpath: *u8, spool: *u8, stamp: i64, piece_raw: i64, dcx: *i64) -> i64 {
2563 dcx[0] = 0
2564 dcx[1] = 0
2565 dcx[2] = 0
2566 dcx[3] = 0
2567 dcx[4] = 0
2568 let nn: *i64 = sys_mmap(16) as *i64
2569 let buf: *u8 = sys_map_file(rawpath, nn)
2570 let n: i64 = nn[0]
2571 if n <= 0 { return 0 }
2572 let cellsz: i64 = piece_raw + CH_LINE
2573 let dayn: *u8 = sys_mmap(CH_BT_DAYMAX * CH_BT_DAYCELL)
2574 let dbuf: *u8 = sys_mmap(CH_BT_DAYMAX * cellsz)
2575 let dlen: *i64 = sys_mmap(8 * CH_BT_DAYMAX) as *i64
2576 let dseq: *i64 = sys_mmap(8 * CH_BT_DAYMAX) as *i64
2577 let sp: *i64 = sys_mmap(16) as *i64
2578 let dstr: *u8 = sys_mmap(CH_BT_DAYCELL)
2579 var nd: i64 = 0
2580 var i: i64 = 0
2581 while i < n {
2582 let le: i64 = sj_le(buf, i, n)
2583 if le > i {
2584 var ts: i64 = 0
2585 if sj_col(buf, i, le, 0, sp) == 1 { if ch_digits(buf, sp[0], sp[1]) == 1 { ts = sj_atoi_span(buf, sp[0], sp[1]) } }
2586 ch_bt_day(ts, dstr)
2587 if ts <= 0 { dcx[3] = dcx[3] + 1 }
2588 var di: i64 = 0 - 1
2589 var k: i64 = 0
2590 while k < nd {
2591 if ch_bt_zeq(((dayn as i64) + k * CH_BT_DAYCELL) as *u8, dstr) == 1 { di = k; k = nd } else { k = k + 1 }
2592 }
2593 if di < 0 {
2594 if nd >= CH_BT_DAYMAX { sys_munmap(buf, n); return 0 - 2 }
2595 var c3: i64 = 0
2596 var g3: i64 = 1
2597 while g3 == 1 {
2598 let ch: u8 = dstr[c3]
2599 dayn[nd * CH_BT_DAYCELL + c3] = ch
2600 if ch == (0 as u8) { g3 = 0 } else { c3 = c3 + 1 }
2601 }
2602 dlen[nd] = 0
2603 dseq[nd] = 0
2604 di = nd
2605 nd = nd + 1
2606 }
2607 let ll2: i64 = le - i
2608 if dlen[di] + ll2 + 1 > piece_raw {
2609 if dlen[di] > 0 {
2610 let fr: i64 = ch_bt_flushp(spool, ((dayn as i64) + di * CH_BT_DAYCELL) as *u8, stamp, dseq[di], ((dbuf as i64) + di * cellsz) as *u8, dlen[di])
2611 if fr != 0 { sys_munmap(buf, n); return fr }
2612 dcx[0] = dcx[0] + 1
2613 dseq[di] = dseq[di] + 1
2614 dlen[di] = 0
2615 }
2616 }
2617 let cell: *u8 = ((dbuf as i64) + di * cellsz) as *u8
2618 var c4: i64 = 0
2619 while c4 < ll2 { cell[dlen[di] + c4] = buf[i + c4]; c4 = c4 + 1 }
2620 cell[dlen[di] + ll2] = 10 as u8
2621 dlen[di] = dlen[di] + ll2 + 1
2622 dcx[1] = dcx[1] + ll2 + 1
2623 dcx[4] = dcx[4] + 1
2624 }
2625 i = le + 1
2626 }
2627 var k5: i64 = 0
2628 while k5 < nd {
2629 if dlen[k5] > 0 {
2630 let fr2: i64 = ch_bt_flushp(spool, ((dayn as i64) + k5 * CH_BT_DAYCELL) as *u8, stamp, dseq[k5], ((dbuf as i64) + k5 * cellsz) as *u8, dlen[k5])
2631 if fr2 != 0 { sys_munmap(buf, n); return fr2 }
2632 dcx[0] = dcx[0] + 1
2633 }
2634 k5 = k5 + 1
2635 }
2636 dcx[2] = nd
2637 sys_munmap(buf, n)
2638 return 0
2639}
2640// copy the day span out of a piece basename cb<day>_... into db (NUL-terminated)
2641func ch_bt_pieceday(pbase: *u8, db: *u8) -> i64 {
2642 var di: i64 = sj_vlen("cb" as *u8)
2643 var o: i64 = 0
2644 var g: i64 = 1
2645 while g == 1 {
2646 let c: u8 = pbase[di]
2647 if c == (95 as u8) { g = 0 } else {
2648 if c == (0 as u8) { g = 0 } else {
2649 if o < CH_BT_DAYCELL - 2 { db[o] = c; o = o + 1 }
2650 di = di + 1
2651 }
2652 }
2653 }
2654 db[o] = 0 as u8
2655 return o
2656}
2657// WHICH STAGE OWNS A FAILED PUSH? Three causes with three DIFFERENT remedies, so three names --
2658// never one bucket. Until 2026-08-20 an upload that never landed was journalled as "fail-verify",
2659// blaming the verifier for the writer's failure; it cost a real investigation (the artifact was simply
2660// ABSENT and the journal pointed at the wrong leg).
2661// * A MESSAGE THAT NAMES THE WRONG STAGE COSTS THE READER THE INVESTIGATION IT WAS WRITTEN TO SAVE
2662// THEM, and two causes with opposite remedies must never share one counter.
2663// This is a TEXT read, not an rc read, and that is measured, not assumed: nx_fs_write returns rc=0
2664// EVEN WHEN IT REFUSES (`REFUSED would-clobber ... (file unchanged)`), so a guard branching on rc
2665// would never have fired. A would-clobber refusal is ALSO not a failure here -- it is the idempotent
2666// re-push of a piece that already landed, and the hash verify is what adjudicates it, which is why
2667// this function decides from the VERIFY's findings and uses the write's own line only to attribute
2668// the ABSENT case. Pure and total so the gate can walk the whole truth table.
2669// wrote_ok the upload leg printed its own OK line
2670// okr the remote artifact could be hashed at all (0 = nothing is there)
2671// same remote bytes == local bytes
2672func ch_bt_pushreason(wrote_ok: i64, okr: i64, same: i64) -> *u8 {
2673 if okr == 0 {
2674 if wrote_ok == 1 { return "fail-verify-absent" as *u8 }
2675 return "fail-write" as *u8
2676 }
2677 if same == 0 { return "fail-verify-mismatch" as *u8 }
2678 return "ok" as *u8
2679}
2680// push one piece: local-hash -> upload -> remote-hash-verify -> NAS ingest -> journal-fill announce.
2681// Returns 0 = NAS leg confirmed (piece may leave the spool), 1 = left spooled (stage named in the
2682// push journal). Every stage is idempotent: re-upload of a landed piece is refused-then-verified
2683// equal by hash, re-ingest answers ALREADY. Wrong only toward doing nothing.
2684func ch_bt_push1(ppath: *u8, cbuf: *u8, off: *i64, iv: *i64, pjr: *u8, bcx: *i64) -> i64 {
2685 let pbase: *u8 = ch_bt_base(ppath)
2686 let cout: *u8 = sys_mmap(CH_OUT)
2687 let colen: *i64 = sys_mmap(16) as *i64
2688 let lsha: *u8 = sys_mmap(80)
2689 let rsha: *u8 = sys_mmap(80)
2690 let napath: *u8 = sys_mmap(CH_BT_PATHMAX)
2691 let njpath: *u8 = sys_mmap(CH_BT_PATHMAX)
2692 let ob: *u8 = sys_mmap(CH_LINE)
2693 let wire: *u8 = ((cbuf as i64) + off[7]) as *u8
2694 let script: *u8 = ((cbuf as i64) + off[8]) as *u8
2695 let capw: *u8 = ((cbuf as i64) + off[9]) as *u8
2696 let capi: *u8 = ((cbuf as i64) + off[10]) as *u8
2697 let capr: *u8 = ((cbuf as i64) + off[11]) as *u8
2698 let helf: *u8 = ((cbuf as i64) + off[12]) as *u8
2699 let tmo: i64 = iv[3]
2700 let plines: i64 = ch_bt_lines(ppath)
2701 let db2: *u8 = sys_mmap(CH_BT_DAYCELL)
2702 ch_bt_pieceday(pbase, db2)
2703 var o3: i64 = sj_cat(napath, 0, ((cbuf as i64) + off[5]) as *u8)
2704 napath[o3] = 47 as u8
2705 o3 = o3 + 1
2706 o3 = sj_cat(napath, o3, pbase)
2707 napath[o3] = 0 as u8
2708 var o4: i64 = sj_cat(njpath, 0, ((cbuf as i64) + off[6]) as *u8)
2709 njpath[o4] = 47 as u8
2710 o4 = o4 + 1
2711 o4 = sj_cat(njpath, o4, "chbeat_" as *u8)
2712 o4 = sj_cat(njpath, o4, db2)
2713 o4 = sj_cat(njpath, o4, ".jrnl" as *u8)
2714 njpath[o4] = 0 as u8
2715 // 1) local sha -- ONE ruler, nx_filehash, forked on both sides
2716 let hav: *i64 = sys_mmap(32) as *i64
2717 hav[0] = helf as i64
2718 hav[1] = ppath as i64
2719 hav[2] = 0
2720 let hrc: i64 = tr_run_capture_to(helf, hav, cout, CH_OUT - 8, colen, tmo)
2721 var okl: i64 = 0
2722 if hrc == 0 { okl = ch_bt_parse_sha(cout, colen[0], lsha) }
2723 if okl == 0 { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "fail-localhash" as *u8, ppath); return 1 }
2724 // 2) upload (@@FILE: substitution puts the piece CONTENT into the write argv); a refusal
2725 // (already-landed / CAS) is decided by the hash verify below -- only a DEAD wire is fatal here
2726 let atf: *u8 = sys_mmap(CH_BT_PATHMAX)
2727 var o5: i64 = sj_cat(atf, 0, "@@FILE:" as *u8)
2728 o5 = sj_cat(atf, o5, ppath)
2729 atf[o5] = 0 as u8
2730 let wrc: i64 = ch_bt_wire(wire, script, "nx_fs_write" as *u8, capw, "write" as *u8, napath, atf, 0 as *u8, tmo, cout, colen)
2731 if wrc == 127 { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "fail-wire-absent" as *u8, ppath); return 1 }
2732 // the write's OWN verdict, read BEFORE the verify overwrites the shared capture buffer
2733 let wrote_ok: i64 = ch_find(cout, colen[0], "NX-FS-WRITE OK" as *u8)
2734 // 3) remote hash verify -- the artifact, never the receipt
2735 let vrc: i64 = ch_bt_wire(wire, script, "nx_filehash" as *u8, capr, napath, 0 as *u8, 0 as *u8, 0 as *u8, tmo, cout, colen)
2736 var okr: i64 = 0
2737 if vrc == 0 { okr = ch_bt_parse_sha(cout, colen[0], rsha) }
2738 var same: i64 = 0
2739 if okr == 1 { same = ch_bt_zeq(lsha, rsha) }
2740 if same == 0 { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, ch_bt_pushreason(wrote_ok, okr, same), napath); return 1 }
2741 // 4) NAS ingest (ch_ingest server-side: validated, marker-idempotent)
2742 let irc: i64 = ch_bt_wire(wire, script, "nx_claude_harvest" as *u8, capi, "ingest" as *u8, napath, njpath, 0 as *u8, tmo, cout, colen)
2743 if irc != 0 { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "fail-ingest-wire" as *u8, njpath); return 1 }
2744 var infr: i64 = 0 - 1
2745 if ch_find(cout, colen[0], "ALREADY-INGESTED" as *u8) == 1 { infr = plines } else { infr = ch_bt_int_after(cout, colen[0], "INGEST OK frames=" as *u8) }
2746 let mal: i64 = ch_bt_int_after(cout, colen[0], " malformed=" as *u8)
2747 if infr != plines { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "fail-reconcile" as *u8, njpath); return 1 }
2748 if mal > 0 { ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "fail-malformed" as *u8, njpath); return 1 }
2749 // 5) journal fill announce from the NAS's own size read; an unreadable size is ANNOUNCED, not skipped
2750 let src2: i64 = ch_bt_wire(wire, script, "nx_fs" as *u8, capr, "size" as *u8, njpath, 0 as *u8, 0 as *u8, tmo, cout, colen)
2751 var jb2: i64 = 0 - 1
2752 if src2 == 0 { jb2 = ch_bt_int_after(cout, colen[0], "bytes=" as *u8) }
2753 if jb2 >= 0 {
2754 let fill: i64 = jb2 * 1000 / iv[4]
2755 if fill > bcx[28] { bcx[28] = fill }
2756 var o6: i64 = sj_cat(ob, 0, "CHBEAT JOURNAL day=" as *u8)
2757 o6 = sj_cat(ob, o6, db2)
2758 o6 = sj_cat(ob, o6, " nas_bytes=" as *u8)
2759 o6 = sj_catn(ob, o6, jb2)
2760 o6 = sj_cat(ob, o6, " fill_permil=" as *u8)
2761 o6 = sj_catn(ob, o6, fill)
2762 if fill >= 1000 { o6 = sj_cat(ob, o6, " RED-PAST-CLIFF (gauge window truncates: partition finer than a day)" as *u8) } else {
2763 if fill >= iv[5] { o6 = sj_cat(ob, o6, " AMBER-NEAR-CLIFF" as *u8) }
2764 }
2765 ob[o6] = 10 as u8
2766 sys_write(1, ob, o6 + 1)
2767 } else {
2768 var o7: i64 = sj_cat(ob, 0, "CHBEAT JOURNAL day=" as *u8)
2769 o7 = sj_cat(ob, o7, db2)
2770 o7 = sj_cat(ob, o7, " nas_bytes=UNREAD (size call failed; fill unobserved this beat)" as *u8)
2771 ob[o7] = 10 as u8
2772 sys_write(1, ob, o7 + 1)
2773 }
2774 ch_frame_append(pjr, sys_now_realtime_sec(), pbase, "nx_claude_harvest" as *u8, "push" as *u8, "ok" as *u8, njpath)
2775 bcx[21] = bcx[21] + plines
2776 return 0
2777}
2778// ---------- the beat orchestrator ----------
2779// bcx map (CH_BT_CTRS slots):
2780// 0 files_seen 1 harvested 2 skipped_unchanged 3 errors 4 frames 5 tooluse_marks 6 lines
2781// 7 tooluse_lines 8 head_known 9 head_unknown 10 headless 11 truncated_files 12 pieces_spooled
2782// 13 bytes_staged 14 days_touched 15 tszero_frames 16 push_attempted 17 push_done 18 push_left
2783// 19 spool_remaining 20 local_ingested_frames 21 nas_confirmed_frames 22 local_malformed
2784// 23 census_read_fail 24 walk_dirs 25 walk_direrrs 26 stat_fallbacks 27 partition_ok
2785// 28 worst_journal_fill_permil 29 type_table_overflow 30 raws_recovered
2786func ch_beat(confpath: *u8, bcx: *i64) -> i64 {
2787 var w0: i64 = 0
2788 while w0 < CH_BT_CTRS { bcx[w0] = 0; w0 = w0 + 1 }
2789 let cbuf: *u8 = sys_mmap(CH_CONF_WIN)
2790 let off: *i64 = sys_mmap(128) as *i64
2791 let iv: *i64 = sys_mmap(64) as *i64
2792 let kt: *i64 = sys_mmap(CH_MK_MAX * 16) as *i64
2793 let kcx: *i64 = sys_mmap(16) as *i64
2794 let crc: i64 = ch_bt_conf(confpath, cbuf, off, iv, kt, kcx)
2795 if crc == (0 - 1) { sj_puts("CHBEAT CONF-UNREADABLE (fail closed)\n" as *u8); return 2 }
2796 if crc == (0 - 2) { return 2 }
2797 let root: *u8 = ((cbuf as i64) + off[0]) as *u8
2798 let state: *u8 = ((cbuf as i64) + off[1]) as *u8
2799 let spool: *u8 = ((cbuf as i64) + off[2]) as *u8
2800 let done: *u8 = ((cbuf as i64) + off[3]) as *u8
2801 let jdir: *u8 = ((cbuf as i64) + off[4]) as *u8
2802 sys_mkdir(state, CH_MODE_755)
2803 sys_mkdir(spool, CH_MODE_755)
2804 sys_mkdir(done, CH_MODE_755)
2805 sys_mkdir(jdir, CH_MODE_755)
2806 if iv[0] == 1 {
2807 var pm: i64 = 0 - 1
2808 if off[5] < 0 { pm = 5 }
2809 if off[6] < 0 { if pm < 0 { pm = 6 } }
2810 if off[7] < 0 { if pm < 0 { pm = 7 } }
2811 if off[8] < 0 { if pm < 0 { pm = 8 } }
2812 if off[9] < 0 { if pm < 0 { pm = 9 } }
2813 if off[10] < 0 { if pm < 0 { pm = 10 } }
2814 if off[11] < 0 { if pm < 0 { pm = 11 } }
2815 if off[12] < 0 { if pm < 0 { pm = 12 } }
2816 if pm >= 0 { sj_puts("CHBEAT CONF-MISSING push=1 needs nas_stage nas_journal wire wire_script cap_write cap_ingest cap_read hash_elf (fail closed)\n" as *u8); return 2 }
2817 }
2818 // MICROSECOND stamp: piece and raw names must be unique ACROSS beats -- a second-resolution stamp
2819 // collided two beats in one second, the truncating rewrite replaced a piece, and the ingest marker
2820 // (keyed on the basename) then silently dropped the replaced frames. Caught by teeth T37/T38.
2821 // Re-split of the SAME raw still reproduces identical names (stamp parsed from the raw's own name).
2822 let now: i64 = sys_now_realtime_us()
2823 let ob: *u8 = sys_mmap(CH_OUT)
2824 let p2: *u8 = sys_mmap(CH_BT_PATHMAX)
2825 let dcx: *i64 = sys_mmap(64) as *i64
2826 // ---- recover: split any crashed raw files left in the spool (deterministic piece names) ----
2827 let sar: *u8 = sys_mmap(CH_BT_ARENA)
2828 let sfo: *i64 = sys_mmap(8 * CH_BT_MAXFILES) as *i64
2829 let swcx: *i64 = sys_mmap(64) as *i64
2830 let ns: i64 = ch_bt_walk(spool, ".frames" as *u8, sar, sfo, swcx)
2831 if ns < 0 { sj_puts("CHBEAT REFUSED spool walk overflow\n" as *u8); return 2 }
2832 var si: i64 = 0
2833 while si < ns {
2834 let sp2: *u8 = ((sar as i64) + sfo[si]) as *u8
2835 let sb2: *u8 = ch_bt_base(sp2)
2836 if ch_starts(sb2, 0, sj_vlen(sb2), "raw_" as *u8) == 1 {
2837 let stamp2: i64 = sj_atoi_z(((sb2 as i64) + sj_vlen("raw_" as *u8)) as *u8)
2838 let rr: i64 = ch_bt_split(sp2, spool, stamp2, iv[2], dcx)
2839 if rr == 0 {
2840 bcx[30] = bcx[30] + 1
2841 ch_bt_path2(p2, done, sb2)
2842 sys_renameat(sp2, p2)
2843 }
2844 }
2845 si = si + 1
2846 }
2847 // ---- walk + delta-harvest EVERY transcript (full population, never a sample) ----
2848 let ar: *u8 = sys_mmap(CH_BT_ARENA)
2849 let fo: *i64 = sys_mmap(8 * CH_BT_MAXFILES) as *i64
2850 let wcx: *i64 = sys_mmap(64) as *i64
2851 let nf: i64 = ch_bt_walk(root, ".jsonl" as *u8, ar, fo, wcx)
2852 if nf < 0 { sj_puts("CHBEAT REFUSED transcript walk overflow (raise CH_BT_MAXFILES/CH_BT_ARENA -- never harvest a prefix)\n" as *u8); return 2 }
2853 bcx[0] = nf
2854 bcx[24] = wcx[0]
2855 bcx[25] = wcx[1]
2856 bcx[26] = wcx[2]
2857 let rootl: i64 = sj_vlen(root)
2858 let raw: *u8 = sys_mmap(CH_BT_PATHMAX)
2859 var o7: i64 = sj_cat(raw, 0, spool)
2860 raw[o7] = 47 as u8
2861 o7 = o7 + 1
2862 o7 = sj_cat(raw, o7, "raw_" as *u8)
2863 o7 = sj_catn(raw, o7, now)
2864 o7 = sj_cat(raw, o7, ".frames" as *u8)
2865 raw[o7] = 0 as u8
2866 let sbuf: *u8 = sys_mmap(256)
2867 let kk2: *i64 = sys_mmap(16) as *i64
2868 let hcx: *i64 = sys_mmap(64) as *i64
2869 let ccx: *i64 = sys_mmap(64) as *i64
2870 let ua: *u8 = sys_mmap(CH_BT_TYPEMAX * (CH_NAME_MAX + 8))
2871 let uo: *i64 = sys_mmap(16 * CH_BT_TYPEMAX) as *i64
2872 let ucx: *i64 = sys_mmap(16) as *i64
2873 let hwmp: *u8 = sys_mmap(CH_BT_PATHMAX * 2)
2874 let stem: *u8 = sys_mmap(CH_BT_PATHMAX)
2875 var fi: i64 = 0
2876 while fi < nf {
2877 let tp: *u8 = ((ar as i64) + fo[fi]) as *u8
2878 let rel: *u8 = ((tp as i64) + rootl + 1) as *u8
2879 ch_bt_hwmpath(state, rel, hwmp)
2880 ch_bt_stat(tp, sbuf, kk2)
2881 let hwm0: i64 = ch_hwm_read(hwmp)
2882 var did: i64 = 0
2883 if kk2[1] >= 0 { if kk2[1] == hwm0 { bcx[2] = bcx[2] + 1; did = 1 } }
2884 if did == 0 {
2885 ch_bt_stem(tp, stem)
2886 let dr: i64 = ch_delta(tp, stem, raw, hwmp, hcx)
2887 if dr < 0 {
2888 bcx[3] = bcx[3] + 1
2889 var oe: i64 = sj_cat(ob, 0, "CHBEAT ERR delta rc=" as *u8)
2890 oe = sj_catn(ob, oe, dr)
2891 oe = sj_cat(ob, oe, " file=" as *u8)
2892 oe = sj_cat(ob, oe, tp)
2893 ob[oe] = 10 as u8
2894 sys_write(1, ob, oe + 1)
2895 } else {
2896 bcx[1] = bcx[1] + 1
2897 bcx[4] = bcx[4] + hcx[0]
2898 if hcx[3] == 1 {
2899 bcx[11] = bcx[11] + 1
2900 var ot: i64 = sj_cat(ob, 0, "CHBEAT TRUNC file=" as *u8)
2901 ot = sj_cat(ob, ot, tp)
2902 ob[ot] = 10 as u8
2903 sys_write(1, ob, ot + 1)
2904 }
2905 if hcx[1] > hcx[2] { ch_bt_census(tp, hcx[2], hcx[1], cbuf, kt, kcx[0], ua, uo, ucx, ccx) }
2906 }
2907 }
2908 fi = fi + 1
2909 }
2910 bcx[5] = ccx[2]
2911 bcx[6] = ccx[0]
2912 bcx[7] = ccx[1]
2913 bcx[8] = ccx[3]
2914 bcx[9] = ccx[4]
2915 bcx[10] = ccx[5]
2916 bcx[23] = ccx[6]
2917 bcx[29] = ccx[7]
2918 // ---- split this run's raw into ts-day pieces (the split re-counts what ch_delta emitted:
2919 // two counters over one population = a free audit) ----
2920 let src: i64 = ch_bt_split(raw, spool, now, iv[2], dcx)
2921 if src == (0 - 2) { sj_puts("CHBEAT REFUSED day-table overflow (CH_BT_DAYMAX) -- run the backfill in date batches\n" as *u8); return 2 }
2922 if src == (0 - 3) { sj_puts("CHBEAT ERR piece write failed\n" as *u8); return 1 }
2923 bcx[12] = dcx[0]
2924 bcx[13] = dcx[1]
2925 bcx[14] = dcx[2]
2926 bcx[15] = dcx[3]
2927 var recon_ok: i64 = 1
2928 if dcx[4] != bcx[4] { recon_ok = 0 }
2929 ch_bt_path2(p2, done, ch_bt_base(raw))
2930 sys_renameat(raw, p2)
2931 // ---- ingest every spooled piece locally; push up to push_max to the NAS ----
2932 let par: *u8 = sys_mmap(CH_BT_ARENA)
2933 let pfo: *i64 = sys_mmap(8 * CH_BT_MAXFILES) as *i64
2934 let pwcx: *i64 = sys_mmap(64) as *i64
2935 let np: i64 = ch_bt_walk(spool, ".frames" as *u8, par, pfo, pwcx)
2936 if np < 0 { sj_puts("CHBEAT REFUSED spool walk overflow\n" as *u8); return 2 }
2937 let mcx: *i64 = sys_mmap(16) as *i64
2938 let ljp: *u8 = sys_mmap(CH_BT_PATHMAX)
2939 let db3: *u8 = sys_mmap(CH_BT_DAYCELL)
2940 let pjr: *u8 = sys_mmap(CH_BT_PATHMAX)
2941 ch_bt_path2(pjr, state, "push.jrnl" as *u8)
2942 var pi: i64 = 0
2943 while pi < np {
2944 let pp: *u8 = ((par as i64) + pfo[pi]) as *u8
2945 let pb: *u8 = ch_bt_base(pp)
2946 if ch_starts(pb, 0, sj_vlen(pb), "cb" as *u8) == 1 {
2947 ch_bt_pieceday(pb, db3)
2948 var o9: i64 = sj_cat(ljp, 0, jdir)
2949 ljp[o9] = 47 as u8
2950 o9 = o9 + 1
2951 o9 = sj_cat(ljp, o9, "chbeat_" as *u8)
2952 o9 = sj_cat(ljp, o9, db3)
2953 o9 = sj_cat(ljp, o9, ".jrnl" as *u8)
2954 ljp[o9] = 0 as u8
2955 let lr: i64 = ch_ingest(pp, ljp, mcx)
2956 if lr >= 0 { bcx[20] = bcx[20] + lr; bcx[22] = bcx[22] + mcx[0] }
2957 var moved: i64 = 0
2958 if iv[0] == 1 {
2959 if bcx[16] < iv[1] {
2960 bcx[16] = bcx[16] + 1
2961 let prc: i64 = ch_bt_push1(pp, cbuf, off, iv, pjr, bcx)
2962 if prc == 0 {
2963 bcx[17] = bcx[17] + 1
2964 ch_bt_path2(p2, done, pb)
2965 sys_renameat(pp, p2)
2966 moved = 1
2967 } else { bcx[18] = bcx[18] + 1 }
2968 }
2969 }
2970 if moved == 0 { bcx[19] = bcx[19] + 1 }
2971 }
2972 pi = pi + 1
2973 }
2974 // ---- local journal fill (every day journal present, from its own stat; budget rides the conf) ----
2975 let jar: *u8 = sys_mmap(CH_BT_ARENA)
2976 let jfo: *i64 = sys_mmap(8 * CH_BT_MAXFILES) as *i64
2977 let jwcx: *i64 = sys_mmap(64) as *i64
2978 let nj: i64 = ch_bt_walk(jdir, ".jrnl" as *u8, jar, jfo, jwcx)
2979 var ji: i64 = 0
2980 while ji < nj {
2981 let jp2: *u8 = ((jar as i64) + jfo[ji]) as *u8
2982 ch_bt_stat(jp2, sbuf, kk2)
2983 if kk2[1] >= 0 {
2984 let fill2: i64 = kk2[1] * 1000 / iv[4]
2985 if fill2 > bcx[28] { bcx[28] = fill2 }
2986 if fill2 >= iv[5] {
2987 var oa: i64 = sj_cat(ob, 0, "CHBEAT JOURNAL local=" as *u8)
2988 oa = sj_cat(ob, oa, jp2)
2989 oa = sj_cat(ob, oa, " bytes=" as *u8)
2990 oa = sj_catn(ob, oa, kk2[1])
2991 oa = sj_cat(ob, oa, " fill_permil=" as *u8)
2992 oa = sj_catn(ob, oa, fill2)
2993 if fill2 >= 1000 { oa = sj_cat(ob, oa, " RED-PAST-CLIFF (gauge window truncates: partition finer than a day)" as *u8) } else { oa = sj_cat(ob, oa, " AMBER-NEAR-CLIFF" as *u8) }
2994 ob[oa] = 10 as u8
2995 sys_write(1, ob, oa + 1)
2996 }
2997 }
2998 ji = ji + 1
2999 }
3000 // ---- worklists: the reason travels with the count ----
3001 var ui: i64 = 0
3002 while ui < ucx[0] {
3003 var ou: i64 = sj_cat(ob, 0, "CHBEAT UNKNOWN-TYPE name=" as *u8)
3004 ou = sj_cat(ob, ou, ((ua as i64) + uo[ui * 2]) as *u8)
3005 ou = sj_cat(ob, ou, " count=" as *u8)
3006 ou = sj_catn(ob, ou, uo[ui * 2 + 1])
3007 ob[ou] = 10 as u8
3008 sys_write(1, ob, ou + 1)
3009 ui = ui + 1
3010 }
3011 if bcx[29] == 1 { sj_puts("CHBEAT UNKNOWN-TYPE table full -- the distinct list above is a FLOOR, not a total\n" as *u8) }
3012 // ---- partitions: print the sums, not just a verdict ----
3013 var pok: i64 = 1
3014 if bcx[0] != bcx[1] + bcx[2] + bcx[3] { pok = 0 }
3015 if bcx[5] < bcx[4] { pok = 0 }
3016 if bcx[6] != bcx[8] + bcx[9] + bcx[10] { pok = 0 }
3017 if recon_ok == 0 { pok = 0 }
3018 bcx[27] = pok
3019 var op: i64 = sj_cat(ob, 0, "CHBEAT files seen=" as *u8)
3020 op = sj_catn(ob, op, bcx[0])
3021 op = sj_cat(ob, op, " = harvested=" as *u8)
3022 op = sj_catn(ob, op, bcx[1])
3023 op = sj_cat(ob, op, " + skipped_unchanged=" as *u8)
3024 op = sj_catn(ob, op, bcx[2])
3025 op = sj_cat(ob, op, " + errors=" as *u8)
3026 op = sj_catn(ob, op, bcx[3])
3027 op = sj_cat(ob, op, " (dirs=" as *u8)
3028 op = sj_catn(ob, op, bcx[24])
3029 op = sj_cat(ob, op, " direrrs=" as *u8)
3030 op = sj_catn(ob, op, bcx[25])
3031 op = sj_cat(ob, op, " statfb=" as *u8)
3032 op = sj_catn(ob, op, bcx[26])
3033 op = sj_cat(ob, op, ")" as *u8)
3034 ob[op] = 10 as u8
3035 sys_write(1, ob, op + 1)
3036 op = sj_cat(ob, 0, "CHBEAT frames harvested=" as *u8)
3037 op = sj_catn(ob, op, bcx[4])
3038 op = sj_cat(ob, op, " split_recount=" as *u8)
3039 op = sj_catn(ob, op, dcx[4])
3040 op = sj_cat(ob, op, " tooluse_marks=" as *u8)
3041 op = sj_catn(ob, op, bcx[5])
3042 op = sj_cat(ob, op, " unnamed_tooluse=" as *u8)
3043 op = sj_catn(ob, op, bcx[5] - bcx[4])
3044 op = sj_cat(ob, op, " tszero=" as *u8)
3045 op = sj_catn(ob, op, bcx[15])
3046 op = sj_cat(ob, op, " truncated_files=" as *u8)
3047 op = sj_catn(ob, op, bcx[11])
3048 ob[op] = 10 as u8
3049 sys_write(1, ob, op + 1)
3050 op = sj_cat(ob, 0, "CHBEAT lines=" as *u8)
3051 op = sj_catn(ob, op, bcx[6])
3052 op = sj_cat(ob, op, " = head_known=" as *u8)
3053 op = sj_catn(ob, op, bcx[8])
3054 op = sj_cat(ob, op, " + head_unknown=" as *u8)
3055 op = sj_catn(ob, op, bcx[9])
3056 op = sj_cat(ob, op, " + headless=" as *u8)
3057 op = sj_catn(ob, op, bcx[10])
3058 op = sj_cat(ob, op, " (tooluse_lines=" as *u8)
3059 op = sj_catn(ob, op, bcx[7])
3060 op = sj_cat(ob, op, " census_read_fail=" as *u8)
3061 op = sj_catn(ob, op, bcx[23])
3062 op = sj_cat(ob, op, ")" as *u8)
3063 ob[op] = 10 as u8
3064 sys_write(1, ob, op + 1)
3065 op = sj_cat(ob, 0, "CHBEAT staged pieces=" as *u8)
3066 op = sj_catn(ob, op, bcx[12])
3067 op = sj_cat(ob, op, " bytes=" as *u8)
3068 op = sj_catn(ob, op, bcx[13])
3069 op = sj_cat(ob, op, " days=" as *u8)
3070 op = sj_catn(ob, op, bcx[14])
3071 op = sj_cat(ob, op, " raws_recovered=" as *u8)
3072 op = sj_catn(ob, op, bcx[30])
3073 op = sj_cat(ob, op, " local_ingested_frames=" as *u8)
3074 op = sj_catn(ob, op, bcx[20])
3075 op = sj_cat(ob, op, " local_malformed=" as *u8)
3076 op = sj_catn(ob, op, bcx[22])
3077 ob[op] = 10 as u8
3078 sys_write(1, ob, op + 1)
3079 op = sj_cat(ob, 0, "CHBEAT push attempted=" as *u8)
3080 op = sj_catn(ob, op, bcx[16])
3081 op = sj_cat(ob, op, " done=" as *u8)
3082 op = sj_catn(ob, op, bcx[17])
3083 op = sj_cat(ob, op, " left=" as *u8)
3084 op = sj_catn(ob, op, bcx[18])
3085 op = sj_cat(ob, op, " nas_confirmed_frames=" as *u8)
3086 op = sj_catn(ob, op, bcx[21])
3087 op = sj_cat(ob, op, " spool_remaining=" as *u8)
3088 op = sj_catn(ob, op, bcx[19])
3089 if iv[0] == 0 { op = sj_cat(ob, op, " (push=0 staging mode declared)" as *u8) }
3090 ob[op] = 10 as u8
3091 sys_write(1, ob, op + 1)
3092 // LAST LINE (positional readers). A failed push is a PARTIAL beat, never an OK one --
3093 // the pieces are safe in the spool, but the NAS record is behind and the verdict says so.
3094 var ov: i64 = 0
3095 if pok == 1 { if bcx[3] == 0 { if bcx[18] == 0 { ov = 1 } } }
3096 var ol: i64 = 0
3097 if ov == 1 { ol = sj_cat(ob, 0, "CHBEAT OK" as *u8) } else { ol = sj_cat(ob, 0, "CHBEAT PARTIAL" as *u8) }
3098 ol = sj_cat(ob, ol, " files=" as *u8)
3099 ol = sj_catn(ob, ol, bcx[0])
3100 ol = sj_cat(ob, ol, " frames=" as *u8)
3101 ol = sj_catn(ob, ol, bcx[4])
3102 ol = sj_cat(ob, ol, " pieces=" as *u8)
3103 ol = sj_catn(ob, ol, bcx[12])
3104 ol = sj_cat(ob, ol, " pushed=" as *u8)
3105 ol = sj_catn(ob, ol, bcx[17])
3106 ol = sj_cat(ob, ol, " spool=" as *u8)
3107 ol = sj_catn(ob, ol, bcx[19])
3108 ol = sj_cat(ob, ol, " worst_fill_permil=" as *u8)
3109 ol = sj_catn(ob, ol, bcx[28])
3110 ob[ol] = 10 as u8
3111 sys_write(1, ob, ol + 1)
3112 if ov == 1 { return 0 }
3113 return 1
3114}
3115
3116// ---------- CE1 leg 2: ce_author_health -- seat-written NishiLang joined to its complexity (2026-09-05) ----------
3117// Frames carry `path=<p>` for writes since ch_frame_note landed. Every UNIQUE .nx path under the tree prefix that a seat
3118// session wrote is scanned ONCE with the complexity ruler (mc_scan_file -- the one ruler nx_mccabe and its gate share),
3119// and the figures are set against the census's LAST spine row so the board can say what share of the estate's
3120// complexity is seat-written. The complement is NOT "human": it is everything the frames cannot attribute -- human-
3121// authored files AND every write before the first path-bearing frame -- and it is named so, never guessed. A seat is
3122// AI at a seat by definition of the transcript. Counters partition and SUM; a path outside the tree or not .nx is
3123// counted apart; an unreadable path is counted apart; an absent spine makes the denominator UNOBSERVABLE (rc 3), a
3124// journal with no path frames is NO-PATH-FRAMES (rc 4) -- neither ever fabricates a number.
3125// (the CH_AH_* consts sit at the top of the file beside the beat consts: the module parser is single-pass and the
3126// selftest teeth read them before this section)
3127func ch_ah_prefix(p: *u8, pre: *u8) -> i64 {
3128 var i: i64 = 0
3129 while pre[i] != (0 as u8) { if p[i] != pre[i] { return 0 } i = i + 1 }
3130 return 1
3131}
3132// n-th TAB-separated field of line [i,le) -> out (NUL-terminated); returns its length, 0 if absent
3133func ch_ah_field_n(buf: *u8, i: i64, le: i64, want: i64, out: *u8, cap: i64) -> i64 {
3134 var f: i64 = 0
3135 var s: i64 = i
3136 var k: i64 = i
3137 var o: i64 = 0
3138 while k <= le {
3139 var endf: i64 = 0
3140 if k == le { endf = 1 } else { if buf[k] == (9 as u8) { endf = 1 } }
3141 if endf == 1 {
3142 if f == want {
3143 var q: i64 = s
3144 while q < k { if o < cap - 1 { out[o] = buf[q]; o = o + 1 } q = q + 1 }
3145 out[o] = 0 as u8
3146 return o
3147 }
3148 f = f + 1
3149 s = k + 1
3150 }
3151 k = k + 1
3152 }
3153 out[0] = 0 as u8
3154 return 0
3155}
3156// linear lookup in a table of NUL-terminated cells; small tables, no second ruler
3157func ch_ah_find(tab: *u8, n: i64, cell: i64, p: *u8) -> i64 {
3158 var k: i64 = 0
3159 while k < n {
3160 let q: *u8 = ((tab as i64) + k*cell) as *u8
3161 if sj_lit_eq(q, 0, sj_vlen(q), p) == 1 { return k }
3162 k = k + 1
3163 }
3164 return 0 - 1
3165}
3166func ch_ah_lastline(buf: *u8, n: i64) -> i64 {
3167 var i: i64 = 0
3168 var last: i64 = 0 - 1
3169 while i < n { let le: i64 = sj_le(buf, i, n); if le > i { last = i } i = le + 1 }
3170 return last
3171}
3172// a BOUNDED digit run: stops at the first non-digit or at `to` (sj_atoi_z concatenates every digit up to the NUL,
3173// so on a `k=10|j=20` row it would read 1020 -- measured, not assumed)
3174func ch_ah_num(buf: *u8, p0: i64, to: i64) -> i64 {
3175 var v: i64 = 0
3176 var p: i64 = p0
3177 var g: i64 = 1
3178 while g == 1 {
3179 if p >= to { g = 0 } else {
3180 let c: i64 = buf[p] as i64
3181 if c < CH_CH_D0 { g = 0 } else { if c > CH_CH_D9 { g = 0 } else { v = v*CH_DEC + (c - CH_CH_D0); p = p + 1 } }
3182 }
3183 }
3184 return v
3185}
3186func ch_ah_field(buf: *u8, from: i64, to: i64, key: *u8) -> i64 {
3187 let p: i64 = ch_find_from(buf, from, to, key)
3188 if p < 0 { return 0 - 1 }
3189 return ch_ah_num(buf, p + sj_vlen(key), to)
3190}
3191func ce_author_health(jpath: *u8, pre: *u8, spine: *u8, cx: *i64, ob: *u8) -> i64 {
3192 var z: i64 = 0
3193 while z < CH_AH_CTRS { cx[z] = 0; z = z + 1 }
3194 cx[CH_AH_FIRSTTS] = 0 - 1
3195 let lp: *i64 = sys_mmap(16) as *i64
3196 lp[0] = 0
3197 let jb: *u8 = sys_read_file(jpath, lp)
3198 var jn: i64 = lp[0]
3199 if jn < 0 { jn = 0 }
3200 let tab: *u8 = sys_mmap(CH_AH_MAXPATHS * CH_AH_PATHCELL)
3201 var nt: i64 = 0
3202 let stab: *u8 = sys_mmap(CH_AH_MAXSESS * CH_AH_SESSCELL)
3203 var ns: i64 = 0
3204 let pkey: *u8 = "path=" as *u8
3205 let pkl: i64 = sj_vlen(pkey)
3206 let pc: *u8 = sys_mmap(CH_AH_PATHCELL + 8)
3207 let sc: *u8 = sys_mmap(CH_AH_SESSCELL + 8)
3208 var i: i64 = 0
3209 while i < jn {
3210 let le: i64 = sj_le(jb, i, jn)
3211 if le > i {
3212 cx[CH_AH_FRAMES] = cx[CH_AH_FRAMES] + 1
3213 let pp: i64 = ch_find_from(jb, i, le, pkey)
3214 if pp >= 0 {
3215 cx[CH_AH_PATHFRAMES] = cx[CH_AH_PATHFRAMES] + 1
3216 let ts: i64 = ch_ah_num(jb, i, le)
3217 if cx[CH_AH_FIRSTTS] < 0 { cx[CH_AH_FIRSTTS] = ts } else { if ts < cx[CH_AH_FIRSTTS] { cx[CH_AH_FIRSTTS] = ts } }
3218 let sl: i64 = ch_ah_field_n(jb, i, le, 1, sc, CH_AH_SESSCELL)
3219 if sl > 0 { if ch_ah_find(stab, ns, CH_AH_SESSCELL, sc) < 0 { if ns < CH_AH_MAXSESS {
3220 let scell: *u8 = ((stab as i64) + ns*CH_AH_SESSCELL) as *u8
3221 let scl: i64 = sj_cat(scell, 0, sc)
3222 scell[scl] = 0 as u8
3223 ns = ns + 1
3224 } } }
3225 var pl: i64 = le - (pp + pkl)
3226 if pl > CH_AH_PATHCELL - 1 { pl = CH_AH_PATHCELL - 1 }
3227 var q: i64 = 0
3228 while q < pl { pc[q] = jb[pp + pkl + q]; q = q + 1 }
3229 if pl > 0 { if pc[pl-1] == (13 as u8) { pl = pl - 1 } }
3230 pc[pl] = 0 as u8
3231 if pl > 0 { if ch_ah_find(tab, nt, CH_AH_PATHCELL, pc) < 0 {
3232 if nt < CH_AH_MAXPATHS {
3233 let pcell: *u8 = ((tab as i64) + nt*CH_AH_PATHCELL) as *u8
3234 let pcl: i64 = sj_cat(pcell, 0, pc)
3235 pcell[pcl] = 0 as u8
3236 nt = nt + 1
3237 } else { cx[CH_AH_OVERFLOW] = cx[CH_AH_OVERFLOW] + 1 }
3238 } }
3239 }
3240 }
3241 i = le + 1
3242 }
3243 cx[CH_AH_UNIQUE] = nt
3244 cx[CH_AH_SESSIONS] = ns
3245 let hist: *i64 = sys_mmap(MC_HIST_MAX*8 + 64) as *i64
3246 let mc: *i64 = sys_mmap(MC_C_SLOTS*8) as *i64
3247 let work: *u8 = sys_mmap(MC_WORKCAP)
3248 let wo: *i64 = sys_mmap(16) as *i64
3249 wo[0] = 0
3250 var k: i64 = 0
3251 while k < nt {
3252 let p: *u8 = ((tab as i64) + k*CH_AH_PATHCELL) as *u8
3253 var intree: i64 = 0
3254 if ch_ah_prefix(p, pre) == 1 { if mc_ends_nx(p, sj_vlen(p)) == 1 { intree = 1 } }
3255 if intree == 1 {
3256 cx[CH_AH_INTREE] = cx[CH_AH_INTREE] + 1
3257 let f0: i64 = mc[MC_C_FILES]
3258 let n0: i64 = mc[MC_C_FUNCS]
3259 let s0: i64 = mc[MC_C_SUMVG]
3260 let a0: i64 = mc[MC_C_ABOVE]
3261 mc_scan_file(p, hist, mc, work, wo)
3262 if mc[MC_C_FILES] > f0 {
3263 cx[CH_AH_FILES] = cx[CH_AH_FILES] + 1
3264 cx[CH_AH_FUNCS] = cx[CH_AH_FUNCS] + (mc[MC_C_FUNCS] - n0)
3265 cx[CH_AH_SUMVG] = cx[CH_AH_SUMVG] + (mc[MC_C_SUMVG] - s0)
3266 cx[CH_AH_ABOVE] = cx[CH_AH_ABOVE] + (mc[MC_C_ABOVE] - a0)
3267 } else { cx[CH_AH_UNREAD] = cx[CH_AH_UNREAD] + 1 }
3268 } else { cx[CH_AH_OUTSIDE] = cx[CH_AH_OUTSIDE] + 1 }
3269 k = k + 1
3270 }
3271 let sp: *i64 = sys_mmap(16) as *i64
3272 sp[0] = 0
3273 let sb: *u8 = sys_read_file(spine, sp)
3274 let sn: i64 = sp[0]
3275 var den: i64 = 0
3276 if sn > 0 {
3277 let ls: i64 = ch_ah_lastline(sb, sn)
3278 if ls >= 0 {
3279 let lse: i64 = sj_le(sb, ls, sn)
3280 cx[CH_AH_DTS] = ch_ah_num(sb, ls, lse)
3281 cx[CH_AH_DFILES] = ch_ah_field(sb, ls, lse, "files=" as *u8)
3282 cx[CH_AH_DFUNCS] = ch_ah_field(sb, ls, lse, "funcs=" as *u8)
3283 cx[CH_AH_DABOVE] = ch_ah_field(sb, ls, lse, "above_10=" as *u8)
3284 if cx[CH_AH_DFILES] > 0 { den = 1 }
3285 }
3286 }
3287 if den == 0 { cx[CH_AH_DFILES] = 0; cx[CH_AH_DFUNCS] = 0; cx[CH_AH_DABOVE] = 0 }
3288 var rc: i64 = 0
3289 if cx[CH_AH_PATHFRAMES] == 0 { rc = CH_AH_RC_NOPATH } else { if den == 0 { rc = CH_AH_RC_UNOBS } }
3290 var o: i64 = 0
3291 o = sj_cat(ob, o, "=== NX-AUTHOR-HEALTH -- seat-written NishiLang joined to its complexity (codeeffectiveness CE1 leg 2) ===\n" as *u8)
3292 o = sj_cat(ob, o, " journal=" as *u8); o = sj_cat(ob, o, jpath)
3293 o = sj_cat(ob, o, " frames=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FRAMES])
3294 o = sj_cat(ob, o, " path_frames=" as *u8); o = sj_catn(ob, o, cx[CH_AH_PATHFRAMES])
3295 o = sj_cat(ob, o, " unique_paths=" as *u8); o = sj_catn(ob, o, cx[CH_AH_UNIQUE])
3296 o = sj_cat(ob, o, " nx_in_tree=" as *u8); o = sj_catn(ob, o, cx[CH_AH_INTREE])
3297 o = sj_cat(ob, o, " outside_tree_or_not_nx=" as *u8); o = sj_catn(ob, o, cx[CH_AH_OUTSIDE])
3298 o = sj_cat(ob, o, " unreadable=" as *u8); o = sj_catn(ob, o, cx[CH_AH_UNREAD])
3299 o = sj_cat(ob, o, " overflow=" as *u8); o = sj_catn(ob, o, cx[CH_AH_OVERFLOW])
3300 o = sj_cat(ob, o, " sessions=" as *u8); o = sj_catn(ob, o, cx[CH_AH_SESSIONS])
3301 o = sj_cat(ob, o, " first_path_frame_ts=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FIRSTTS])
3302 o = sj_cat(ob, o, "\n tree=" as *u8); o = sj_cat(ob, o, pre)
3303 o = sj_cat(ob, o, "\n seat_written: files=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FILES])
3304 o = sj_cat(ob, o, " funcs=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FUNCS])
3305 o = sj_cat(ob, o, " sum_vG=" as *u8); o = sj_catn(ob, o, cx[CH_AH_SUMVG])
3306 o = sj_cat(ob, o, " above_10=" as *u8); o = sj_catn(ob, o, cx[CH_AH_ABOVE])
3307 if cx[CH_AH_FUNCS] > 0 { o = sj_cat(ob, o, " permille=" as *u8); o = sj_catn(ob, o, (cx[CH_AH_ABOVE]*MC_PERMILLE)/cx[CH_AH_FUNCS]) }
3308 if den == 1 {
3309 o = sj_cat(ob, o, "\n denominator (mccabe spine row ts=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DTS])
3310 o = sj_cat(ob, o, "): files=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFILES])
3311 o = sj_cat(ob, o, " funcs=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFUNCS])
3312 o = sj_cat(ob, o, " above_10=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DABOVE])
3313 o = sj_cat(ob, o, "\n not_seat_attributed: files=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFILES] - cx[CH_AH_FILES])
3314 o = sj_cat(ob, o, " funcs=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFUNCS] - cx[CH_AH_FUNCS])
3315 o = sj_cat(ob, o, " above_10=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DABOVE] - cx[CH_AH_ABOVE])
3316 o = sj_cat(ob, o, " (human-authored PLUS every write before ts=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FIRSTTS])
3317 o = sj_cat(ob, o, ", which carried no path -- UNATTRIBUTED, never guessed)\n partition: seat_written + not_seat_attributed = denominator, by construction\n" as *u8)
3318 } else {
3319 o = sj_cat(ob, o, "\n denominator: UNOBSERVABLE (no mccabe spine row at " as *u8); o = sj_cat(ob, o, spine); o = sj_cat(ob, o, " -- run nx_mccabe first; nothing is fabricated)\n" as *u8)
3320 }
3321 o = sj_cat(ob, o, "NX-AUTHOR-HEALTH frames=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FRAMES])
3322 o = sj_cat(ob, o, " path_frames=" as *u8); o = sj_catn(ob, o, cx[CH_AH_PATHFRAMES])
3323 o = sj_cat(ob, o, " unique_paths=" as *u8); o = sj_catn(ob, o, cx[CH_AH_UNIQUE])
3324 o = sj_cat(ob, o, " seat_files=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FILES])
3325 o = sj_cat(ob, o, " seat_funcs=" as *u8); o = sj_catn(ob, o, cx[CH_AH_FUNCS])
3326 o = sj_cat(ob, o, " seat_above_10=" as *u8); o = sj_catn(ob, o, cx[CH_AH_ABOVE])
3327 o = sj_cat(ob, o, " den_files=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFILES])
3328 o = sj_cat(ob, o, " den_funcs=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DFUNCS])
3329 o = sj_cat(ob, o, " den_above_10=" as *u8); o = sj_catn(ob, o, cx[CH_AH_DABOVE])
3330 o = sj_cat(ob, o, " verdict=" as *u8)
3331 if rc == 0 { o = sj_cat(ob, o, "MEASURED" as *u8) }
3332 if rc == CH_AH_RC_UNOBS { o = sj_cat(ob, o, "UNOBSERVABLE-DENOMINATOR" as *u8) }
3333 if rc == CH_AH_RC_NOPATH { o = sj_cat(ob, o, "NO-PATH-FRAMES" as *u8) }
3334 o = sj_cat(ob, o, "\n" as *u8)
3335 ob[o] = 0 as u8
3336 return rc
3337}
3338
3339func main(argc: i64, argv: *i64) -> i64 {
3340 if argc < 3 { sj_puts("usage: nx_claude_harvest {frames <transcript.jsonl> <ws> <outjournal> | delta <transcript.jsonl> <ws> <outjournal> <hwmfile> | ingest <framesfile> <journal> | gauge <journal> [days] | page <journal> <outfile> [days] | propose <journal> <intake_jrnl> <threshold_permil> [filer] | bootgauge <framesjournal> [k] | learn <transcript.jsonl> <ws> <outfile> <markersconf> | beat <chbeat.conf> | journal <journal> <planpath> <rung> | classes <journal> | selftest <scratch-prefix>}\n" as *u8); sys_exit(2); return 2 }
3341 let verb: *u8 = argv[1] as *u8
3342 let vl: i64 = sj_vlen(verb)
3343 if sj_lit_eq(verb, 0, vl, "selftest" as *u8) == 1 {
3344 let rc: i64 = ch_selftest(argv[2] as *u8)
3345 sys_exit(rc)
3346 return rc
3347 }
3348 if sj_lit_eq(verb, 0, vl, "authorhealth" as *u8) == 1 {
3349 if argc < 3 { sj_puts("authorhealth needs <journal> [treeprefix] [spine]\n" as *u8); sys_exit(2); return 2 }
3350 var ahpre: *u8 = CH_AH_TREE as *u8
3351 if argc >= 4 { ahpre = argv[3] as *u8 }
3352 var ahspn: *u8 = CH_AH_SPINE as *u8
3353 if argc >= 5 { ahspn = argv[4] as *u8 }
3354 let acx: *i64 = sys_mmap(8 * CH_AH_CTRS) as *i64
3355 let aob: *u8 = sys_mmap(CH_OUT)
3356 let arc: i64 = ce_author_health(argv[2] as *u8, ahpre, ahspn, acx, aob)
3357 sys_write(1, aob, sj_vlen(aob))
3358 let ahfd: i64 = sys_openat_wr(CH_AH_STATUS as *u8, CH_MODE_644)
3359 if ahfd >= 0 { sys_write(ahfd, aob, sj_vlen(aob)); sys_close(ahfd) }
3360 sys_exit(arc)
3361 return arc
3362 }
3363 if sj_lit_eq(verb, 0, vl, "classes" as *u8) == 1 {
3364 let dc: *u8 = sys_mmap(CH_OUT)
3365 let dcl: i64 = ch_classes(argv[2] as *u8, dc)
3366 sys_write(1, dc, dcl)
3367 sys_exit(0)
3368 return 0
3369 }
3370 if sj_lit_eq(verb, 0, vl, "journal" as *u8) == 1 {
3371 if argc < 5 { sj_puts("journal needs <journal> <planpath> <rung>\n" as *u8); sys_exit(2); return 2 }
3372 let rj: i64 = ch_journal(argv[2] as *u8, argv[3] as *u8, argv[4] as *u8)
3373 if rj == 0 { sj_puts("JOURNAL OK one measure row appended\n" as *u8) }
3374 if rj == 4 { sj_puts("JOURNAL ALREADY today (idempotent, plan unchanged)\n" as *u8) }
3375 if rj == 5 { sj_puts("JOURNAL REFUSED insufficient data (no claude actions) -- nothing written\n" as *u8) }
3376 if rj == 1 { sj_puts("JOURNAL FAIL plan missing or unwritable (a beat never creates a plan)\n" as *u8) }
3377 sys_exit(rj)
3378 return rj
3379 }
3380 if sj_lit_eq(verb, 0, vl, "beat" as *u8) == 1 {
3381 let bcx: *i64 = sys_mmap(8 * CH_BT_CTRS) as *i64
3382 let rc: i64 = ch_beat(argv[2] as *u8, bcx)
3383 sys_exit(rc)
3384 return rc
3385 }
3386 if sj_lit_eq(verb, 0, vl, "bootgauge" as *u8) == 1 {
3387 var k: i64 = 3
3388 if argc >= 4 { let kz: i64 = sj_atoi_z(argv[3] as *u8); if kz > 0 { k = kz } }
3389 let d: *u8 = sys_mmap(CH_OUT)
3390 let dl: i64 = ch_bootgauge(argv[2] as *u8, k, d)
3391 sys_write(1, d, dl)
3392 sys_exit(0)
3393 return 0
3394 }
3395 if sj_lit_eq(verb, 0, vl, "learn" as *u8) == 1 {
3396 if argc < 6 { sj_puts("learn needs <transcript.jsonl> <ws> <outfile> <markersconf>\n" as *u8); sys_exit(2); return 2 }
3397 let lcx: *i64 = sys_mmap(64) as *i64
3398 let lg: i64 = ch_learn(argv[2] as *u8, argv[3] as *u8, argv[4] as *u8, argv[5] as *u8, lcx)
3399 if lg < 0 { sj_puts("LEARN FAIL rc=" as *u8); let eb4: *u8 = sys_mmap(32); var e4: i64 = sj_catn(eb4, 0, lg); eb4[e4] = 10 as u8; sys_write(1, eb4, e4 + 1); sys_exit(1); return 1 }
3400 let ob4: *u8 = sys_mmap(256)
3401 var o4: i64 = sj_cat(ob4, 0, "LEARN OK kept=" as *u8)
3402 o4 = sj_catn(ob4, o4, lg)
3403 o4 = sj_cat(ob4, o4, " markers=" as *u8)
3404 o4 = sj_catn(ob4, o4, lcx[1])
3405 o4 = sj_cat(ob4, o4, " truncated=" as *u8)
3406 o4 = sj_catn(ob4, o4, lcx[0])
3407 ob4[o4] = 10 as u8
3408 sys_write(1, ob4, o4 + 1)
3409 sys_exit(0)
3410 return 0
3411 }
3412 if sj_lit_eq(verb, 0, vl, "frames" as *u8) == 1 {
3413 if argc < 5 { sj_puts("frames needs <transcript.jsonl> <ws> <outjournal>\n" as *u8); sys_exit(2); return 2 }
3414 let tcx: *i64 = sys_mmap(16) as *i64
3415 let got: i64 = ch_frames(argv[2] as *u8, argv[3] as *u8, argv[4] as *u8, tcx)
3416 if got < 0 { sj_puts("HARVEST FAIL rc=" as *u8); let eb: *u8 = sys_mmap(32); var eo: i64 = sj_catn(eb, 0, got); eb[eo] = 10 as u8; sys_write(1, eb, eo + 1); sys_exit(1); return 1 }
3417 let ob: *u8 = sys_mmap(256)
3418 var oo: i64 = sj_cat(ob, 0, "HARVEST OK frames=" as *u8)
3419 oo = sj_catn(ob, oo, got)
3420 oo = sj_cat(ob, oo, " truncated=" as *u8)
3421 oo = sj_catn(ob, oo, tcx[0])
3422 ob[oo] = 10 as u8
3423 sys_write(1, ob, oo + 1)
3424 sys_exit(0)
3425 return 0
3426 }
3427 if sj_lit_eq(verb, 0, vl, "ingest" as *u8) == 1 {
3428 if argc < 4 { sj_puts("ingest needs <framesfile> <journal>\n" as *u8); sys_exit(2); return 2 }
3429 let mcx: *i64 = sys_mmap(16) as *i64
3430 let r: i64 = ch_ingest(argv[2] as *u8, argv[3] as *u8, mcx)
3431 if r == (0 - 2) { sj_puts("ALREADY-INGESTED (marker present, journal untouched)\n" as *u8); sys_exit(0); return 0 }
3432 if r < 0 { sj_puts("INGEST FAIL rc=" as *u8); let eb2: *u8 = sys_mmap(32); var e2: i64 = sj_catn(eb2, 0, r); eb2[e2] = 10 as u8; sys_write(1, eb2, e2 + 1); sys_exit(1); return 1 }
3433 let ob2: *u8 = sys_mmap(256)
3434 var o2: i64 = sj_cat(ob2, 0, "INGEST OK frames=" as *u8)
3435 o2 = sj_catn(ob2, o2, r)
3436 o2 = sj_cat(ob2, o2, " malformed=" as *u8)
3437 o2 = sj_catn(ob2, o2, mcx[0])
3438 ob2[o2] = 10 as u8
3439 sys_write(1, ob2, o2 + 1)
3440 sys_exit(0)
3441 return 0
3442 }
3443 if sj_lit_eq(verb, 0, vl, "gauge" as *u8) == 1 {
3444 var days: i64 = 0
3445 if argc >= 4 { days = sj_atoi_z(argv[3] as *u8) }
3446 let d: *u8 = sys_mmap(CH_OUT)
3447 let dl: i64 = ch_gauge_json(argv[2] as *u8, days, d)
3448 sys_write(1, d, dl)
3449 if ch_find(d, dl, "\"evidence_state\":\"source_open_failed\"" as *u8) == 1 { sys_exit(CH_AH_RC_UNOBS); return CH_AH_RC_UNOBS }
3450 sys_exit(0)
3451 return 0
3452 }
3453 if sj_lit_eq(verb, 0, vl, "page" as *u8) == 1 {
3454 if argc < 4 { sj_puts("page needs <journal> <outfile> [days]\n" as *u8); sys_exit(2); return 2 }
3455 var days2: i64 = 0
3456 if argc >= 5 { days2 = sj_atoi_z(argv[4] as *u8) }
3457 let rp: i64 = ch_page(argv[2] as *u8, argv[3] as *u8, days2)
3458 if rp != 0 { sj_puts("PAGE FAIL\n" as *u8); sys_exit(1); return 1 }
3459 sj_puts("PAGE OK\n" as *u8)
3460 sys_exit(0)
3461 return 0
3462 }
3463 if sj_lit_eq(verb, 0, vl, "delta" as *u8) == 1 {
3464 if argc < 6 { sj_puts("delta needs <transcript.jsonl> <ws> <outjournal> <hwmfile>\n" as *u8); sys_exit(2); return 2 }
3465 let hcx: *i64 = sys_mmap(64) as *i64
3466 let r: i64 = ch_delta(argv[2] as *u8, argv[3] as *u8, argv[4] as *u8, argv[5] as *u8, hcx)
3467 if r < 0 { sj_puts("DELTA FAIL (missing transcript or unwritable journal)\n" as *u8); sys_exit(1); return 1 }
3468 let ob: *u8 = sys_mmap(256)
3469 var oo: i64 = sj_cat(ob, 0, "DELTA OK frames=" as *u8)
3470 oo = sj_catn(ob, oo, hcx[0])
3471 oo = sj_cat(ob, oo, " from_hwm=" as *u8)
3472 oo = sj_catn(ob, oo, hcx[2])
3473 oo = sj_cat(ob, oo, " new_hwm=" as *u8)
3474 oo = sj_catn(ob, oo, hcx[1])
3475 oo = sj_cat(ob, oo, " truncated=" as *u8)
3476 oo = sj_catn(ob, oo, hcx[3])
3477 ob[oo] = 10 as u8
3478 sys_write(1, ob, oo + 1)
3479 sys_exit(0)
3480 return 0
3481 }
3482 if sj_lit_eq(verb, 0, vl, "propose" as *u8) == 1 {
3483 if argc < 5 { sj_puts("propose needs <journal> <intake_jrnl> <threshold_permil> [filer]\n" as *u8); sys_exit(2); return 2 }
3484 let thr: i64 = sj_atoi_z(argv[4] as *u8)
3485 let filer: *u8 = sys_mmap(128)
3486 var fo: i64 = 0
3487 if argc >= 6 { fo = sj_cat(filer, 0, argv[5] as *u8) } else { fo = sj_cat(filer, 0, "nx_pm_intake" as *u8) }
3488 filer[fo] = 0 as u8
3489 let co: *u8 = sys_mmap(CH_OUT)
3490 let cl: *i64 = sys_mmap(16) as *i64
3491 let r: i64 = ch_propose(argv[2] as *u8, argv[3] as *u8, thr, filer, co, cl)
3492 if r == 0 { sj_puts("PROPOSED " as *u8); if cl[0] > 0 { sys_write(1, co, cl[0]) } sj_puts("\n" as *u8); sys_exit(0); return 0 }
3493 if r == 2 { sj_puts("BELOW-THRESHOLD\n" as *u8); sys_exit(0); return 0 }
3494 if r == 4 { sj_puts("ALREADY-PROPOSED (marker present)\n" as *u8); sys_exit(0); return 0 }
3495 if r == 5 { sj_puts("SKIP-INSUFFICIENT (no frames)\n" as *u8); sys_exit(0); return 0 }
3496 if r == 3 { sj_puts("REFUSED intake window exceeded\n" as *u8); sys_exit(3); return 3 }
3497 sj_puts("PROPOSE FAIL (filer)\n" as *u8)
3498 sys_exit(1)
3499 return 1
3500 }
3501 sj_puts("unknown verb\n" as *u8)
3502 sys_exit(2)
3503 return 2
3504}