chore: sync latest atomic memory changes

Author: frf12

.github/workflows/e2e-harness.yml

@@ -163,6 +163,127 @@ jobs:
         if: always()
         run: docker rm --force recall-effort-oceanbase || true
 
+  atomic-memory-clean-oceanbase:
+    name: Atomic Memory clean migration (OceanBase)
+    if: github.event_name != 'workflow_dispatch' || inputs.suite != 'recall-effort'
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    env:
+      OCEANBASE_IMAGE: ghcr.io/oceanbase/oceanbase-ce:4.3.5.6-106000012026040916
+      POWERCONTEXT_TEST_MIGRATION_OCEANBASE_URL: >-
+        mysql+aoceanbase://root%40test:powercontext-e2e@127.0.0.1:2881/powercontext_test?charset=utf8mb4
+      PYTHONUNBUFFERED: "1"
+      MIGRATION_REPORTS: ${{ github.workspace }}/.powercontext/atomic-memory-clean-oceanbase
+    steps:
+      - name: Check out
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          persist-credentials: false
+
+      - name: Set up the environment
+        uses: ./.github/actions/setup-python-env
+        with:
+          python-version: "3.12"
+
+      - name: Start the isolated OceanBase test instance
+        run: |
+          docker run --detach --name atomic-memory-clean-oceanbase \
+            --publish 127.0.0.1:2881:2881 \
+            --ulimit nofile=65536:65536 \
+            --env MODE=slim \
+            --env OB_DATABASE=powercontext_test \
+            --env OB_TENANT_PASSWORD=powercontext-e2e \
+            "$OCEANBASE_IMAGE"
+          for attempt in $(seq 1 120); do
+            if docker exec atomic-memory-clean-oceanbase \
+              obclient -h127.0.0.1 -P2881 -uroot@test -ppowercontext-e2e \
+              -Dpowercontext_test -e 'SELECT 1' >/dev/null 2>&1; then
+              # The slim image's default 1 GB maximum is too small for the
+              # indexes created across the clean migration acceptance cases.
+              docker exec atomic-memory-clean-oceanbase \
+                obclient -h127.0.0.1 -P2881 -uroot@sys \
+                -e "ALTER SYSTEM SET datafile_maxsize='8G'; ALTER SYSTEM SET datafile_next='512M'; ALTER SYSTEM SET datafile_size='4G';"
+              datafile_ready=false
+              for config_attempt in $(seq 1 30); do
+                docker exec atomic-memory-clean-oceanbase \
+                  obclient -h127.0.0.1 -P2881 -uroot@sys --batch --skip-column-names \
+                  -e "SHOW PARAMETERS WHERE name IN ('datafile_size', 'datafile_maxsize', 'datafile_next');" \
+                  > "$RUNNER_TEMP/atomic-memory-datafile.tsv"
+                if awk '
+                  $5 == "datafile_size" && $7 == "4G" { size = 1 }
+                  $5 == "datafile_maxsize" && $7 == "8G" { maximum = 1 }
+                  $5 == "datafile_next" && $7 == "512M" { increment = 1 }
+                  END { exit !(size && maximum && increment) }
+                ' "$RUNNER_TEMP/atomic-memory-datafile.tsv"; then
+                  datafile_ready=true
+                  break
+                fi
+                sleep 2
+              done
+              cat "$RUNNER_TEMP/atomic-memory-datafile.tsv"
+              if [ "$datafile_ready" != true ]; then
+                echo 'OceanBase datafile configuration did not become effective within one minute.' >&2
+                exit 1
+              fi
+              docker exec atomic-memory-clean-oceanbase \
+                obclient -h127.0.0.1 -P2881 -uroot@test -ppowercontext-e2e \
+                -Dpowercontext_test \
+                -e "SET GLOBAL recyclebin=OFF; SELECT VERSION(); SHOW VARIABLES LIKE 'ob_compatibility_mode'; SHOW VARIABLES LIKE 'recyclebin';"
+              exit 0
+            fi
+            if [ "$(docker inspect --format '{{.State.Running}}' atomic-memory-clean-oceanbase)" != true ]; then
+              echo 'OceanBase exited before becoming ready.' >&2
+              exit 1
+            fi
+            sleep 5
+          done
+          echo 'OceanBase did not become ready within 10 minutes.' >&2
+          exit 1
+
+      - name: Run clean migration evidence, grants and vectors without skips
+        timeout-minutes: 45
+        run: |
+          uv run --locked python scripts/run_atomic_memory_clean_migration.py \
+            oceanbase --output "$MIGRATION_REPORTS"
+
+      - name: Collect the database log
+        if: always()
+        run: |
+          mkdir -p "$MIGRATION_REPORTS"
+          docker logs atomic-memory-clean-oceanbase > "$MIGRATION_REPORTS/oceanbase.log" 2>&1 || true
+          for logfile in observer.log observer.log.wf; do
+            docker exec atomic-memory-clean-oceanbase tail -n 20000 "/root/demo/log/$logfile" \
+              > "$MIGRATION_REPORTS/$logfile" 2>&1 || true
+          done
+          docker inspect --format 'MemoryBytes={{.HostConfig.Memory}} NanoCpus={{.HostConfig.NanoCpus}} CpuQuota={{.HostConfig.CpuQuota}}' \
+            atomic-memory-clean-oceanbase > "$MIGRATION_REPORTS/container-resources.txt" 2>&1 || true
+          docker stats --no-stream atomic-memory-clean-oceanbase \
+            > "$MIGRATION_REPORTS/container-stats.txt" 2>&1 || true
+          docker exec atomic-memory-clean-oceanbase \
+            obclient -h127.0.0.1 -P2881 -uroot@sys \
+            -e "SHOW PARAMETERS WHERE name IN ('datafile_size', 'datafile_maxsize', 'datafile_next', 'memory_limit', 'system_memory', 'cpu_count');" \
+            > "$MIGRATION_REPORTS/database-parameters.txt" 2>&1 || true
+
+      - name: Save complete observer logs on failure
+        if: failure()
+        run: |
+          mkdir -p "$MIGRATION_REPORTS/observer"
+          docker cp atomic-memory-clean-oceanbase:/root/demo/log/. "$MIGRATION_REPORTS/observer/" || true
+
+      - name: Save clean migration reports
+        if: always()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: atomic-memory-clean-oceanbase-${{ github.sha }}
+          path: ${{ env.MIGRATION_REPORTS }}/
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 7
+
+      - name: Stop and remove the test instance
+        if: always()
+        run: docker rm --force atomic-memory-clean-oceanbase || true
+
   acceptance:
     needs: validate
     runs-on: ubuntu-latest

.github/workflows/master.yml

@@ -205,6 +205,56 @@ jobs:
             seekdb-native.log
           if-no-files-found: ignore
 
+  atomic-memory-clean-seekdb:
+    name: Atomic Memory clean migration (SeekDB)
+    timeout-minutes: 40
+    runs-on: ubuntu-latest
+    env:
+      POWERCONTEXT_TEST_MIGRATION_SEEKDB: "1"
+      PYTHONUNBUFFERED: "1"
+      MIGRATION_REPORTS: ${{ github.workspace }}/.powercontext/atomic-memory-clean-seekdb
+    steps:
+      - name: Check out
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          persist-credentials: false
+
+      - name: Set up the environment
+        uses: ./.github/actions/setup-python-env
+        with:
+          python-version: "3.12"
+
+      - name: Run clean migration evidence, grants and vectors without skips
+        timeout-minutes: 35
+        env:
+          TMPDIR: ${{ runner.temp }}/am-seekdb
+        run: |
+          mkdir -p "$TMPDIR"
+          uv run --locked --extra seekdb python scripts/run_atomic_memory_clean_migration.py \
+            seekdb --output "$MIGRATION_REPORTS"
+
+      - name: Collect native diagnostics
+        if: always()
+        env:
+          TMPDIR: ${{ runner.temp }}/am-seekdb
+        run: |
+          mkdir -p "$MIGRATION_REPORTS"
+          df -h . /tmp > "$MIGRATION_REPORTS/disk.txt"
+          if [ -d "$TMPDIR" ]; then
+            find "$TMPDIR" -type f \( -name '*.log' -o -name '*.log.wf' \) \
+              -print -exec tail -c 8388608 {} \; > "$MIGRATION_REPORTS/seekdb-native.log"
+          fi
+
+      - name: Save clean migration reports
+        if: always()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: atomic-memory-clean-seekdb-${{ github.sha }}
+          path: ${{ env.MIGRATION_REPORTS }}/
+          include-hidden-files: true
+          if-no-files-found: error
+          retention-days: 7
+
   windows-unit-portability:
     timeout-minutes: 20
     runs-on: windows-latest

desktop/src-tauri/src/transport/operations.json

@@ -1,5 +1,5 @@
 {
-  "contractSha256": "14042de547922b20804bd5503a5eeb2e2ad29079156135a1566e03567d3aa7f1",
+  "contractSha256": "6ac34926b9c7f4fa975512833ca026ec43da9073e92b53068e2a987b730f2bb8",
   "operations": {
     "get_liveness": {
       "method": "GET",

desktop/ui/src/generated/api.d.ts

@@ -989,7 +989,7 @@ export interface paths {
         put?: never;
         /**
          * Unsupported continuous legacy collection changes
-         * @description Continuous legacy collection changes have no Atomic equivalent and return operation_not_supported. Exact historical references remain readable.
+         * @description Continuous legacy collection changes have no Atomic equivalent and return operation_not_supported. Legacy collection history is archived offline; read exact Atomic Memory revisions through the Artifact API.
          */
         post: operations["list_memory_changes"];
         delete?: never;
@@ -6552,7 +6552,7 @@ export interface operations {
             };
         };
         responses: {
-            /** @description Compact changes through the selected Memory Revision. */
+            /** @description Reserved legacy response shape; this operation returns operation_not_supported. */
             200: {
                 headers: {
                     "X-PowerContext-Request-ID": components["headers"]["RequestId"];

desktop/ui/src/generated/operations.ts

@@ -15,7 +15,7 @@
  */
 
 // Generated from openapi/powercontext.yaml. Do not edit.
-export const contractSha256 = "14042de547922b20804bd5503a5eeb2e2ad29079156135a1566e03567d3aa7f1";
+export const contractSha256 = "6ac34926b9c7f4fa975512833ca026ec43da9073e92b53068e2a987b730f2bb8";
 export const operations = {
   "get_liveness": {
     "method": "GET",

docs/en/docs/operate/atomic-memory-migration.md

@@ -107,11 +107,11 @@ Apply runs these steps in order; each can be repeated after an interruption:
    from online lineage, Candidate `artifact_refs`, Task Outcome `produced_artifacts`, and `kind: artifact`
    citations of a whole collection in Handoff content and Work claims or checks. A Handoff receipt's
    `unavailable_evidence` records evidence that was unavailable rather than support: its collection references
-   move unchanged into the receipt's `historical_data` (format `powercontext.handoff-receipt-history.v1`), which
-   is shown as history and never resolved.
+   remain unchanged in that field as historical unavailable addresses. Reading the receipt does not query
+   the archive, and these addresses cannot support new requests. Exact entry citations still become Atomic references.
 5. Finished Dream runs move to a historical format: the original request, input manifest and request digest
-   move to `historical_data` and are no longer read as an executable request. Unfinished runs drop the empty
-   legacy entry citation fields from their request and input manifest. Request digests are recomputed in the
+   move to `historical_data` and are no longer read as an executable request. Unfinished runs without legacy
+   snapshots drop the empty entry citation field from their request. Request digests are recomputed in the
    current request format, so retrying the same request with the same idempotency key still replays the run.
    A request that cited legacy entries cannot be sent again; its run keeps the accepted digest, so reusing its
    key conflicts.
@@ -136,7 +136,12 @@ reference that does not resolve to an exact imported Atomic revision; a Handoff
 claim or check left without evidence once collection citations are removed; and a Candidate version left
 without any Source or Artifact evidence once its collection references are removed.
 
-The last case requires a decision file, passed with `--decisions`, that names replacement evidence for each
+Finish unfinished Dream runs that have saved an input manifest in the legacy format before migration,
+even if they selected only Experiences without Memory citations. Their Artifact digests include the empty
+legacy lineage field, so removing it invalidates those snapshots. Queued runs without a saved manifest can
+migrate when their selected inputs are unaffected; current-format snapshots remain usable when their inputs are unchanged.
+
+Candidates left without evidence require a decision file, passed with `--decisions`, that names replacement evidence for each
 blocked Candidate version:
 
 ```json
@@ -203,14 +208,16 @@ Use the target deployment configuration:
 powercontext server atomic-memory-rebuild-projection --env-file .env --maintenance-confirmed
 ```
 
-This command requires completed legacy history migration, valid authoritative content revisions and head
-lifecycle data. It rebuilds only active current rows and removes nonactive or orphan current rows. Heads, content
-revisions, lifecycle states, retained history and Source/processing progress keep their exact identities and
-values. It cannot repair or bypass missing legacy history imports.
+This command checks that legacy objects, columns and foreign keys have been removed from public storage and
+that Atomic heads, content revisions and head lifecycle data are valid. It rebuilds only active current rows and removes nonactive
+or orphan current rows. Heads, content revisions, lifecycle states, retained history and Source/processing
+progress keep their exact identities and values. Rebuilding reads neither the archive nor legacy entry tables.
+The offline migration `verify` command checks whether legacy history was imported completely; projection
+rebuilding cannot supply missing history.
 
 Each active body's embedding is prepared outside the write transaction. Before publishing, the command
 locks and rechecks its exact revision, state version and deployment profile, then loads the latest formal
-tags and immutable Owner in that transaction. With vectors disabled, it retains body/full-text
+tags in that transaction. With vectors disabled, it retains body/full-text
 data and clears embedding, profile and input hashes. SQLite refreshes its derived FTS helper using stable
 Scope/Artifact identity tokens, independent of rowids changed by `VACUUM`.
 

docs/en/rfcs/1809-atomic-memory.md

@@ -240,8 +240,10 @@ writing, tags, and authorization, and restart queries and pagination under the n
 target the same Atomic Memory.
 
 The SDK and runtime do not retain the legacy Memory domain model, `MemoryCitation`, or other legacy typed Memory references.
-Terminal Dream runs and historical receipts with old structures are converted offline into explicit untyped historical
-data. They are for display only, without evidence resolution, execution, or recovery.
+Terminal Dream runs with old structures are converted offline into explicit untyped historical data for display only,
+without evidence resolution, execution, or recovery. Historical receipts retain unavailable collection addresses in
+`unavailable_evidence` as descriptions of what was unavailable. These addresses are not resolved or accepted as new evidence;
+exact entry citations are converted to Atomic references.
 Frozen legacy decoding belongs only to offline migration tools. The runtime keeps no legacy decoder and depends on
 neither old tables nor online mapping tables.