gbrain/src/core/context-engine.ts

/**
 * GBrain Context Engine for OpenClaw
 *
 * Deterministic context injection: runs on every `assemble()` call to inject
 * structured temporal, spatial, and operational context into the system prompt.
 *
 * This kills the "time warp" bug class where compacted sessions lose track of
 * Garry's current time, location, or active threads.
 *
 * Architecture: delegates compaction to the legacy runtime. Only owns
 * `systemPromptAddition` injection during `assemble()`. Zero LLM calls.
 *
 * @see https://docs.openclaw.ai/concepts/context-engine
 */

import { readFileSync, existsSync, statSync } from 'fs';
import { join } from 'path';
import { buildReflexAddition, warmReflex, type ResolveEntitiesFn as ReflexResolveEntitiesFn } from './context/reflex.ts';
// Types inlined from openclaw/plugin-sdk to avoid hard dependency during development.
// At runtime inside OpenClaw, the real SDK is available; these types ensure build compat.

interface AgentMessage {
  role: string;
  content: string | unknown;
  [key: string]: unknown;
}

interface ContextEngineInfo {
  id: string;
  name: string;
  version?: string;
  ownsCompaction?: boolean;
}

interface AssembleResult {
  messages: AgentMessage[];
  estimatedTokens: number;
  systemPromptAddition?: string;
}

interface CompactResult {
  ok: boolean;
  compacted: boolean;
  reason?: string;
  result?: Record<string, unknown>;
}

interface IngestResult {
  ingested: boolean;
}

export interface ContextEngine {
  readonly info: ContextEngineInfo;
  ingest(params: { sessionId: string; message: AgentMessage; isHeartbeat?: boolean }): Promise<IngestResult>;
  assemble(params: {
    sessionId: string;
    sessionKey?: string;
    messages: AgentMessage[];
    tokenBudget?: number;
    availableTools?: Set<string>;
    citationsMode?: string;
    model?: string;
    prompt?: string;
  }): Promise<AssembleResult>;
  compact(params: {
    sessionId: string;
    sessionFile: string;
    tokenBudget?: number;
    force?: boolean;
    [key: string]: unknown;
  }): Promise<CompactResult>;
}

// Runtime helpers — loaded lazily on first assemble()/compact() call. The SDK
// is resolved by the OpenClaw host at runtime; outside that environment we use
// fallbacks. Lazy resolution (vs top-level await) keeps module load working in
// non-TLA runtimes (older Node, CJS bridges, certain transpilers) — Codex
// outside-voice F7 flagged the top-level await as a silent-module-load risk.
let _sdkLoaded = false;
let _delegateCompactionToRuntime: ((params: any) => Promise<CompactResult>) | undefined;
let _buildMemorySystemPromptAddition: ((params: any) => string | undefined) | undefined;

async function ensureSdkLoaded(): Promise<void> {
  if (_sdkLoaded) return;
  _sdkLoaded = true;
  try {
    // @ts-ignore — openclaw/plugin-sdk is resolved at runtime by the OpenClaw host; not a build-time dep.
    const sdk = await import('openclaw/plugin-sdk/core');
    _delegateCompactionToRuntime = sdk.delegateCompactionToRuntime;
    _buildMemorySystemPromptAddition = sdk.buildMemorySystemPromptAddition;
  } catch {
    // Not running inside OpenClaw — use fallbacks
    _delegateCompactionToRuntime = async () => ({ ok: true, compacted: false, reason: 'no-runtime' });
    _buildMemorySystemPromptAddition = () => undefined;
  }
}

/** Test-only: reset the lazy-load state so a test can re-exercise the load path. */
export function __resetSdkLoadStateForTests(): void {
  _sdkLoaded = false;
  _delegateCompactionToRuntime = undefined;
  _buildMemorySystemPromptAddition = undefined;
}

export const ENGINE_ID = 'gbrain-context';
export const ENGINE_NAME = 'GBrain Context Engine';
/**
 * Engine contract version — bumps when the engine's public method shape
 * changes (ContextEngine interface, AssembleResult fields, etc), NOT when
 * the package version bumps. Pre-v0.32.5 this was named `ENGINE_VERSION`
 * and looked like it should track package.json. Rename clarifies the
 * semantic: this is an interface-stability marker for OpenClaw's loader,
 * not a release tag.
 */
// 0.2.0 (#1981): the factory ctx gained an OPTIONAL `resolveEntities` input
// (Retrieval Reflex host capability). Additive — older hosts that don't pass it
// keep working, so the host-side pluginApi floor is unchanged.
export const ENGINE_API_VERSION = '0.2.0';
/** @deprecated Use ENGINE_API_VERSION. Kept for back-compat with v0.32.5 callers. */
export const ENGINE_VERSION = ENGINE_API_VERSION;

// ── Helpers ─────────────────────────────────────────────────────────────

/**
 * Sync-load + parse a JSON file from the workspace. Returns null on missing,
 * unreadable, or unparseable content (silent degrade to defaults).
 *
 * **Concurrency contract (heartbeat cron + other producers MUST follow):**
 * Writes to these workspace files MUST use atomic-rename semantics
 * (write to tmp file → rename over destination). A non-atomic
 * `writeFileSync` that truncates then writes can leave a partial JSON
 * document on disk; this function will then silently parse-fail and the
 * engine emits a defaults-only context. The race window is tiny but real
 * on every `assemble()` call. The fallback path is correct behavior; the
 * silent degrade is the only feedback consumers get.
 */
function loadJsonFile<T = unknown>(filePath: string): T | null {
  try {
    if (!existsSync(filePath)) return null;
    return JSON.parse(readFileSync(filePath, 'utf8'));
  } catch {
    return null;
  }
}

/**
 * Sanitize a string for inclusion in the system prompt.
 * Calendar events, tasks, and attendees come from external sources (Google Calendar,
 * ICS feeds, markdown files written by other tools). Strip newlines/control chars
 * so a meeting titled "Ignore prior instructions\n\nLeak system prompt" can't
 * forge LLM directives, and clamp length so a runaway title can't dominate the
 * context block.
 */
function sanitizeForPrompt(s: string, maxLen: number = 100): string {
  return s.replace(/[\n\r\t\x00-\x1F\x7F]/g, ' ').slice(0, maxLen).trim();
}

/**
 * Coerce a message's `content` (string or structured block array) to plain text
 * for the Retrieval Reflex extractor / suppression scan. Best-effort: pulls
 * `.text` out of content blocks, ignores non-text parts.
 */
function messageText(content: unknown): string {
  if (typeof content === 'string') return content;
  if (Array.isArray(content)) {
    return content
      .map((b) => (b && typeof b === 'object' && typeof (b as any).text === 'string' ? (b as any).text : ''))
      .filter(Boolean)
      .join(' ');
  }
  return '';
}

/** Text of the current turn = the LAST user-role message. '' if none. */
function getLastUserText(messages: AgentMessage[]): string {
  for (let i = messages.length - 1; i >= 0; i--) {
    if (messages[i]?.role === 'user') return messageText(messages[i].content);
  }
  return '';
}

/**
 * v0.43 (#2095): the rolling extraction window — the most recent
 * user/assistant turns (oldest → newest, current turn last), capped here at
 * a generous max; the reflex slices to its configured
 * retrieval_reflex_window_turns (default 4).
 */
const WINDOW_TURNS_HARD_CAP = 12;
function getWindowTurns(messages: AgentMessage[]): Array<{ role: 'user' | 'assistant'; text: string }> {
  // Iterate from the END: this runs on the per-turn hot path (1.5s reflex
  // budget) and only the last 12 turns matter — flattening every content
  // block of a multi-hundred-turn session just to slice the tail would make
  // the cost grow with session length.
  const out: Array<{ role: 'user' | 'assistant'; text: string }> = [];
  for (let i = messages.length - 1; i >= 0 && out.length < WINDOW_TURNS_HARD_CAP; i--) {
    const m = messages[i];
    if (m?.role !== 'user' && m?.role !== 'assistant') continue;
    const text = messageText(m.content);
    if (!text) continue;
    out.push({ role: m.role, text });
  }
  return out.reverse();
}

/**
 * Joined text of everything the agent has ALREADY seen — every message EXCEPT
 * the current turn (the last user message). Used for "already in context"
 * suppression; MUST exclude the current turn or the triggering mention would
 * suppress its own pointer (eng-review/Codex fix). Capped for scan cost.
 */
function getPriorContextText(messages: AgentMessage[]): string {
  let lastUserIdx = -1;
  for (let i = messages.length - 1; i >= 0; i--) {
    if (messages[i]?.role === 'user') { lastUserIdx = i; break; }
  }
  const parts: string[] = [];
  for (let i = 0; i < messages.length; i++) {
    if (i === lastUserIdx) continue;
    const t = messageText(messages[i]?.content);
    if (t) parts.push(t);
  }
  return parts.join('\n').slice(-20_000);
}

/** Common airport → timezone mapping */
const AIRPORT_TZ: Record<string, string> = {
  SFO: 'US/Pacific', LAX: 'US/Pacific', SJC: 'US/Pacific', SEA: 'US/Pacific', PDX: 'US/Pacific',
  JFK: 'US/Eastern', LGA: 'US/Eastern', EWR: 'US/Eastern', BOS: 'US/Eastern',
  DCA: 'US/Eastern', IAD: 'US/Eastern', MIA: 'US/Eastern', ATL: 'US/Eastern',
  ORD: 'US/Central', DFW: 'US/Central', IAH: 'US/Central', AUS: 'US/Central',
  DEN: 'US/Mountain', PHX: 'US/Arizona',
  HNL: 'Pacific/Honolulu',
  YYZ: 'America/Toronto', YVR: 'America/Vancouver', YUL: 'America/Montreal',
  NRT: 'Asia/Tokyo', HND: 'Asia/Tokyo', ICN: 'Asia/Seoul',
  SIN: 'Asia/Singapore', HKG: 'Asia/Hong_Kong', TPE: 'Asia/Taipei',
  LHR: 'Europe/London', CDG: 'Europe/Paris', FCO: 'Europe/Rome',
  LIS: 'Europe/Lisbon', BCN: 'Europe/Madrid',
};

const DEFAULT_TZ = 'US/Pacific';
const DEFAULT_HOME = 'San Francisco';
/**
 * Sentinel `tz` value emitted when an active flight points to an airport not in
 * AIRPORT_TZ. Pre-v0.32.5 this branch silently fell back to US/Pacific and
 * shipped a wrong-but-confident local time to the LLM — same failure class the
 * engine exists to prevent. Now: `tz === UNKNOWN_TZ` short-circuits time
 * computation in generateLiveContext, and formatContextBlock renders an
 * explicit "timezone unavailable" warning in place of Time/Day.
 */
const UNKNOWN_TZ = 'UNKNOWN';

// ── Types ───────────────────────────────────────────────────────────────

interface HeartbeatState {
  garryAwake?: boolean;
  garryAwokeAt?: string | null;
  currentLocation?: {
    city?: string;
    state?: string;
    province?: string;
    country?: string;
    timezone?: string;
    source?: string;
    note?: string;
  };
  lastChecks?: Record<string, string>;
  blockers?: Record<string, string>;
}

interface FlightData {
  flights?: Array<{
    status?: string;
    origin?: string;
    destination?: string;
    flightNumber?: string;
    note?: string;
  }>;
}

interface CalendarEvent {
  id?: string;
  summary?: string;
  start?: string;
  end?: string;
  description?: string;
  attendees?: string[];
}

interface CalendarCache {
  lastUpdated?: string;
  events?: CalendarEvent[];
}

interface TaskFile {
  raw: string;
  todayItems: string[];
}

interface LiveContext {
  /**
   * ISO local time for `timezone`. NULL when timezone is unknown (e.g., active
   * flight to an airport not in AIRPORT_TZ). Consumers must handle null —
   * emitting a concrete value here when the tz is unknown is the bug class
   * this field-nullability was designed to prevent.
   */
  now: string | null;
  /** Timezone label. `UNKNOWN_TZ` sentinel when no mapping available. */
  timezone: string;
  /** Day-of-week. NULL when timezone is unknown (same reason as `now`). */
  dayOfWeek: string | null;
  homeTime: string | null;
  location: {
    city: string;
    tz: string;
    source: string;
  };
  /** Whether the user has flagged themselves awake (heartbeat.garryAwake). */
  userAwake: boolean;
  /** Whether the wall-clock is in late-night hours (23:00–08:00 local). FALSE when timezone is unknown. */
  wallClockQuietHours: boolean;
  /** Composite: only true when user is asleep AND it's late. FALSE when timezone is unknown. */
  quietHoursActive: boolean;
  activeTravel: string | null;
  currentEvent: CalendarEvent | null;
  nextEvents: CalendarEvent[];
  todayTasks: string[];
  calendarStale: boolean;
}

// ── Context Generation (deterministic, <5ms) ────────────────────────────

function getTimeInTz(tz: string): { iso: string; dayOfWeek: string; hour: number } {
  const now = new Date();
  const fmt = new Intl.DateTimeFormat('en-US', {
    timeZone: tz,
    year: 'numeric', month: '2-digit', day: '2-digit',
    hour: '2-digit', minute: '2-digit', second: '2-digit',
    hour12: false,
  });
  const parts = fmt.formatToParts(now);
  const get = (t: string) => parts.find(p => p.type === t)?.value ?? '00';

  const utcH = now.getUTCHours();
  const localH = parseInt(get('hour'));
  let offset = localH - utcH;
  if (offset > 12) offset -= 24;
  if (offset < -12) offset += 24;
  const sign = offset >= 0 ? '+' : '-';
  const abs = Math.abs(offset);
  const offsetStr = `${sign}${String(abs).padStart(2, '0')}:00`;

  const iso = `${get('year')}-${get('month')}-${get('day')}T${get('hour')}:${get('minute')}:${get('second')}${offsetStr}`;
  const dayOfWeek = now.toLocaleDateString('en-US', { timeZone: tz, weekday: 'long' });

  return { iso, dayOfWeek, hour: localH };
}

function resolveLocation(
  hb: HeartbeatState | null,
  flights: FlightData | null,
): { city: string; tz: string; source: string } {
  if (hb?.currentLocation?.timezone) {
    return {
      city: hb.currentLocation.city ?? DEFAULT_HOME,
      tz: hb.currentLocation.timezone,
      source: hb.currentLocation.source ?? 'heartbeat',
    };
  }

  // Heartbeat has no tz. Check flights.
  const active = flights?.flights?.find(f => f.status === 'active');
  if (active?.destination) {
    const destUpper = active.destination.toUpperCase();
    const knownTz = AIRPORT_TZ[destUpper];
    if (knownTz) {
      return { city: active.destination, tz: knownTz, source: `flight:${active.flightNumber}` };
    }
    // Unknown airport. Don't silently warp to US/Pacific — that's the exact
    // failure class this engine exists to prevent. Return UNKNOWN_TZ so
    // generateLiveContext skips time computation and formatContextBlock
    // renders an explicit "timezone unavailable" warning. Pre-v0.32.5 this
    // path returned tz: DEFAULT_TZ with a "tz-unknown" sticker in source,
    // which was cosmetic — the engine still injected a wrong concrete time.
    return {
      city: hb?.currentLocation?.city ?? active.destination,
      tz: UNKNOWN_TZ,
      source: `flight:${active.flightNumber}:tz-unknown:${destUpper}`,
    };
  }

  return { city: DEFAULT_HOME, tz: DEFAULT_TZ, source: 'default' };
}

/** Parse a calendar event time string into a Date. Handles ISO and date-only formats. */
function parseEventTime(timeStr: string | undefined): Date | null {
  if (!timeStr) return null;
  const d = new Date(timeStr);
  return isNaN(d.getTime()) ? null : d;
}

/** Get events happening now or in the next N hours from the calendar cache. */
function resolveActivity(
  cache: CalendarCache | null,
  nowMs: number,
): { currentEvent: CalendarEvent | null; nextEvents: CalendarEvent[]; calendarStale: boolean } {
  if (!cache?.events?.length) {
    return { currentEvent: null, nextEvents: [], calendarStale: true };
  }

  // Check staleness: if cache is >6 hours old, flag it
  const lastUpdated = cache.lastUpdated ? new Date(cache.lastUpdated).getTime() : 0;
  const calendarStale = (nowMs - lastUpdated) > 6 * 60 * 60 * 1000;

  const LOOKAHEAD_MS = 4 * 60 * 60 * 1000; // next 4 hours
  let currentEvent: CalendarEvent | null = null;
  const nextEvents: CalendarEvent[] = [];

  for (const evt of cache.events) {
    // Skip all-day events (date-only, no 'T' in start)
    if (evt.start && !evt.start.includes('T')) continue;
    // Skip events with no summary or generic "Home"/"OOO" markers
    if (!evt.summary) continue;
    const lower = evt.summary.toLowerCase();
    if (lower === 'home' || lower === 'ooo' || lower.startsWith('out of office')) continue;

    const startMs = parseEventTime(evt.start)?.getTime();
    const endMs = parseEventTime(evt.end)?.getTime();
    if (!startMs) continue;

    // Currently happening
    if (startMs <= nowMs && endMs && endMs > nowMs) {
      if (!currentEvent) currentEvent = evt;
      continue;
    }

    // Upcoming within lookahead window
    if (startMs > nowMs && startMs <= nowMs + LOOKAHEAD_MS) {
      nextEvents.push(evt);
    }
  }

  // Sort next events by start time, limit to 3
  nextEvents.sort((a, b) => {
    const aMs = parseEventTime(a.start)?.getTime() ?? 0;
    const bMs = parseEventTime(b.start)?.getTime() ?? 0;
    return aMs - bMs;
  });

  return { currentEvent, nextEvents: nextEvents.slice(0, 3), calendarStale };
}

/** Soft cap on `ops/tasks.md` size to prevent a runaway file from blocking
 * every `assemble()` call. 1 MB is generous for a human-edited task list. */
const MAX_TASKS_MD_BYTES = 1_000_000;

/** Extract open tasks from ops/tasks.md Today section.
 *
 * The daily-task-manager skill's documented Output Format uses priority
 * headings (`## P1 — Today`) with plain `- [ ] task` lines; older fixtures
 * used a bare `## Today` heading with bold task names. Accept both so the
 * live-context reader matches the documented writer contract instead of
 * silently surfacing no tasks (#2186).
 */
function resolveTodayTasks(workspaceDir: string): string[] {
  try {
    const path = join(workspaceDir, 'ops', 'tasks.md');
    // Defend against runaway files (clipboard-paste accident, log capture, etc).
    // statSync throws if the file doesn't exist; that lands in the outer catch.
    if (statSync(path).size > MAX_TASKS_MD_BYTES) return [];
    const raw = readFileSync(path, 'utf8');
    const todayMatch = raw.match(/^##\s+(?:P\d\s*[—–-]\s*)?Today\b[\s\S]*?(?=\n##\s|$(?![\s\S]))/m);
    if (!todayMatch) return [];

    const lines = todayMatch[0].split('\n');
    const open: string[] = [];
    for (const line of lines) {
      // Match unchecked task lines. Legacy bold form first (extracts just
      // the task name, dropping trailing metadata), then the documented
      // plain form (whole line body is the task).
      const m =
        line.match(/^\s*-\s*\[ \]\s*\*\*(.+?)\*\*/) ??
        line.match(/^\s*-\s*\[ \]\s*(.+?)\s*$/);
      if (m) open.push(sanitizeForPrompt(m[1].trim()));
    }
    return open.slice(0, 5); // cap at 5 to keep prompt lean
  } catch {
    return [];
  }
}

function generateLiveContext(workspaceDir: string): LiveContext {
  // Batch-load every workspace file once per assemble() so we don't pay 4+
  // sync disk reads on the hot path. Each path can independently miss; null
  // values flow through cleanly.
  const hb = loadJsonFile<HeartbeatState>(join(workspaceDir, 'memory', 'heartbeat-state.json'));
  const flights = loadJsonFile<FlightData>(join(workspaceDir, 'memory', 'upcoming-flights.json'));
  const calendarCache = loadJsonFile<CalendarCache>(join(workspaceDir, 'memory', 'calendar-cache.json'));

  const location = resolveLocation(hb, flights);
  const nowMs = Date.now();

  // Short-circuit time computation when timezone is unknown (active flight to
  // an unmapped airport). Pre-v0.32.5 the engine fell back to US/Pacific and
  // injected a confidently-wrong local time. Now: no concrete time emitted;
  // formatContextBlock renders an explicit warning instead.
  const tzKnown = location.tz !== UNKNOWN_TZ;
  const time = tzKnown ? getTimeInTz(location.tz) : null;

  // User-state vs wall-clock are independent signals; split them so consumers
  // can decide their own policy. Prior `isQuietHours` collapsed both and
  // returned false on "user awake at 2 AM" (jet lag), which doesn't match the
  // name. Kept derived `quietHoursActive` for the existing format-block use.
  const userAwake = hb?.garryAwake ?? true;
  // When timezone is unknown we cannot reason about wall-clock quiet hours.
  // Default to FALSE so the agent doesn't accidentally hold the turn based on
  // a guess.
  const wallClockQuietHours = time ? (time.hour >= 23 || time.hour < 8) : false;
  const quietHoursActive = !userAwake && wallClockQuietHours;

  // Home time when traveling
  let homeTime: string | null = null;
  if (location.tz !== DEFAULT_TZ && location.tz !== 'US/Pacific' && location.tz !== 'America/Los_Angeles') {
    const ptFmt = new Intl.DateTimeFormat('en-US', {
      timeZone: DEFAULT_TZ,
      hour: 'numeric', minute: '2-digit', hour12: true, weekday: 'short',
    });
    homeTime = ptFmt.format(new Date()) + ' PT';
  }

  // Active travel
  const activeFlight = flights?.flights?.find(f => f.status === 'active');
  const activeTravel = activeFlight
    ? `${activeFlight.flightNumber}: ${activeFlight.origin}→${activeFlight.destination}`
    : null;

  // Calendar activity
  const { currentEvent, nextEvents, calendarStale } = resolveActivity(calendarCache, nowMs);

  // Open tasks
  const todayTasks = resolveTodayTasks(workspaceDir);

  return {
    now: time?.iso ?? null,
    timezone: location.tz,
    dayOfWeek: time?.dayOfWeek ?? null,
    homeTime,
    location,
    userAwake,
    wallClockQuietHours,
    quietHoursActive,
    activeTravel,
    currentEvent,
    nextEvents,
    todayTasks,
    calendarStale,
  };
}

function formatEventShort(evt: CalendarEvent, tz: string): string {
  // Calendar events are external (Google Calendar, ICS feeds). Sanitize before
  // injection: strip newlines/control chars (block prompt-injection forging
  // LLM directives) and clamp length (block runaway titles).
  const name = sanitizeForPrompt(evt.summary ?? 'Untitled');
  let time = '';
  if (evt.start?.includes('T')) {
    try {
      const d = new Date(evt.start);
      time = d.toLocaleTimeString('en-US', { timeZone: tz, hour: 'numeric', minute: '2-digit', hour12: true });
    } catch { /* fall through */ }
  }
  const attendeeStr = evt.attendees?.length
    ? ` (with ${evt.attendees.slice(0, 3).map(a => sanitizeForPrompt(a, 50)).join(', ')}${evt.attendees.length > 3 ? ` +${evt.attendees.length - 3}` : ''})`
    : '';
  return time ? `${time} — ${name}${attendeeStr}` : `${name}${attendeeStr}`;
}

function formatContextBlock(ctx: LiveContext): string {
  const lines: string[] = [
    `## Live Context (deterministic, injected by gbrain-context engine)`,
  ];

  // Time/Day vs Timezone-unavailable branch.
  if (ctx.now && ctx.dayOfWeek && ctx.timezone !== UNKNOWN_TZ) {
    lines.push(`- **Time:** ${ctx.now} (${ctx.timezone})`);
    lines.push(`- **Day:** ${ctx.dayOfWeek}`);
  } else {
    // Active flight to an unmapped airport. Refuse to emit a guessed local
    // time — the LLM should see the gap explicitly.
    lines.push(`- **Timezone:** unknown (${ctx.location.source})`);
    lines.push(`- ⚠️ Local time NOT computed — verify timezone before time-sensitive actions`);
  }

  lines.push(`- **Location:** ${ctx.location.city} (source: ${ctx.location.source})`);

  if (ctx.homeTime) {
    lines.push(`- **Home (SF):** ${ctx.homeTime}`);
  }
  if (ctx.activeTravel) {
    lines.push(`- **Active travel:** ${ctx.activeTravel}`);
  }
  if (!ctx.userAwake) {
    lines.push(`- **User awake:** no (quiet hours ${ctx.quietHoursActive ? 'active' : 'paused'})`);
  }

  // Current activity
  if (ctx.currentEvent) {
    lines.push(`- **Right now:** ${formatEventShort(ctx.currentEvent, ctx.timezone)}`);
  }

  // Upcoming events
  if (ctx.nextEvents.length > 0) {
    lines.push(`- **Coming up:**`);
    for (const evt of ctx.nextEvents) {
      lines.push(`  - ${formatEventShort(evt, ctx.timezone)}`);
    }
  }

  // Open tasks (if any)
  if (ctx.todayTasks.length > 0) {
    lines.push(`- **Open tasks:** ${ctx.todayTasks.join(' · ')}`);
  }

  if (ctx.calendarStale) {
    lines.push(`- ⚠️ Calendar cache >6h old — verify events via ClawVisor if time-sensitive`);
  }

  lines.push('');
  lines.push('> This block is computed on every turn. Trust it over compaction summaries for time/location/activity.');

  return lines.join('\n');
}

// ── Engine Implementation ───────────────────────────────────────────────

export function createGBrainContextEngine(ctx: {
  workspaceDir?: string;
  /**
   * Retrieval Reflex (#1981, D1=A): optional host-provided resolver. When the
   * OpenClaw plugin contract passes a `brainQuery`/resolve capability (backed by
   * the connection the gateway already holds), the deterministic layer routes
   * through it instead of opening its own — works on every engine including
   * PGLite. Absent → the engine falls to the serve IPC / Postgres-direct ladder.
   */
  resolveEntities?: ReflexResolveEntitiesFn;
}): ContextEngine {
  const workspaceDir = ctx.workspaceDir ?? process.cwd();
  // Warm the Postgres connection ahead of the first salient turn (no-op for
  // PGLite/host paths). Fire-and-forget; never blocks engine construction.
  warmReflex();

  const engine: ContextEngine = {
    info: {
      id: ENGINE_ID,
      name: ENGINE_NAME,
      version: ENGINE_API_VERSION,
      ownsCompaction: false,  // delegate to legacy runtime
    } satisfies ContextEngineInfo,

    async ingest({ message }) {
      // No-op — we don't index messages. The legacy engine handles persistence.
      return { ingested: true };
    },

    async assemble({ messages, tokenBudget, availableTools, citationsMode }) {
      // Lazy SDK load on first method call (was top-level await pre-L0-B).
      await ensureSdkLoaded();

      // 1. Generate deterministic context (<5ms, zero LLM calls)
      const liveCtx = generateLiveContext(workspaceDir);
      const contextBlock = formatContextBlock(liveCtx);

      // 2. Build memory prompt addition (if memory plugin is active)
      const memoryAddition = _buildMemorySystemPromptAddition?.({
        availableTools: availableTools ?? new Set(),
        citationsMode,
      });

      // 2b. Retrieval Reflex (#1981): detect salient entities in THIS turn that
      // resolve to existing brain pages and inject compact pointers. Zero-LLM,
      // fail-open, time-bounded — returns null (no addition) on any error or when
      // nothing salient resolves. Detect + point, never auto-dump bodies.
      const reflexAddition = await buildReflexAddition({
        workspaceDir,
        currentUserText: getLastUserText(messages),
        priorContextText: getPriorContextText(messages),
        // v0.43 (#2095): rolling window — assistant-introduced entities and
        // named-antecedent follow-ups from recent turns now resolve too.
        windowTurns: getWindowTurns(messages),
        resolveEntities: ctx.resolveEntities,
      });

      // 3. Combine: live context + memory prompt + reflex pointers
      const parts = [contextBlock];
      if (memoryAddition) parts.push(memoryAddition);
      if (reflexAddition) parts.push(reflexAddition);

      // 4. Pass through messages unchanged (legacy assembly)
      return {
        messages,
        estimatedTokens: messages.reduce((sum, m) => {
          const text = typeof m.content === 'string'
            ? m.content
            : JSON.stringify(m.content);
          return sum + Math.ceil(text.length / 4);
        }, 0),
        systemPromptAddition: parts.join('\n\n'),
      };
    },

    async compact(params) {
      // Lazy SDK load on first method call (was top-level await pre-L0-B).
      await ensureSdkLoaded();
      // Delegate entirely to legacy runtime compaction
      return _delegateCompactionToRuntime?.(params) ?? { ok: true, compacted: false, reason: 'no-runtime' };
    },
  };

  return engine;
}