S21: wire knowledge records into repo memory (SHIP_KNOWLEDGE_PROVENANCE=shadow|on)

[im-tyler]

Changes

• New src/knowledge-store.ts: KnowledgeStore with in-memory, file (<state>/knowledge-records/*.jsonl) and Nucleus (NEW table ship_knowledge_records, CREATE TABLE IF NOT EXISTS, no migration, no ALTER) implementations. Provenance is a sidecar keyed by noteId; existing notes/rows are untouched.
• New src/knowledge-provenance.ts: SHIP_KNOWLEDGE_PROVENANCE (off default | shadow | on), KnowledgeProvenance (recordNote, recordSummary, screen via visibleTo + freshness, redact via redactionPlan/applyRedactionPlan). Project is optional ("" = repo-only, since repoKeyOf is repo-only); documented in the header.
• ScopedRepoMemory: optional provenance arg; record strips the hint and writes a hypothesis record (run as source); recent(..., {context}) screens only context reads (dashboard listing never filtered); remove(id, repo?) redacts derived records.
• loadRepoContext: with mode != off resolves git rev-parse HEAD and labels notes (fresh|stale|unknown) only in on.
• condenseIfNeeded: optional observe-only onSummary; durable records summaries as derivation:'summary', agent-claim, derivedFrom = injected note ids, idempotent by id.
• durable publish note passes the pushed sha as revision only when mode != off. Dashboard Knowledge delete passes repo. runtime.ts builds the store only when mode != off.
• Shadow: writes records, logs one JSON line per context retrieval (knowledge-provenance: wouldHide, wouldLabel, unrecorded); never changes retrieved context.

Checks

• lint clean; root dist tests 2069/2069 (after merging main); web 165/165 + web build OK; scripts (excluding grader-sensitivity and pj-b-deploy-recovery, fixed port 8901) 117 pass, 1 skip.
• 25 new tests (stores x3 contract, off byte-identical, shadow identical to off, on filtering/labels, fail-closed, redaction cascade, summary not evidence, real durable repo run with identical step sequence).
• Negative controls (mutate, watch fail, restore): on ignoring visibility (7 fail), redaction skipping cascade (3), off still writing (1), unresolved head reported fresh (2), on failing open on store error (1), shadow returning screened list (1).

Not verified / still open

• No live Nucleus (fake only); no verified-outcome. Freshness is coarse (head vs pushed sha: most older notes read stale).
• Summary derivedFrom is exact only on first execution (replay keeps the first record). Legacy notes have no record: shown as unknown in on.
• cli.ts notes get no revision hint. Embedding/export derivations have no producer yet.

🤖 Generated with Claude Code

https://claude.ai/code/session_01VqsBNqvaWezf1DwQrAnVgX

---

Generated by Claude Code