it('shows build progress while the local index builds', () => {

useMemoryCloudStore.setState({ status: 'building', buildProgress: 0.42, snapshot });

render(<MemoryExplorerPanel />);

});

it('shows a quiet power-user note on 401/403, never an alert', () => {

expect(env.engines[0].storageKey).toBe('vc-memory-learning:s1');

});

it('records build progress from the engine', async () => {

const store = createMemoryCloudStore(env.deps);

await store.getState().loadSnapshot();

trajectory: TrajectoryModule | null;

/** 0..1 */

buildProgress: number;

health: MemoryCloudHealth | null;

healthError: string | null;

query: QueryState;

set({ status: 'loading', error: null, retryAt: null });

try {

const snap = await deps.fetchSnapshot({ signal: ctl.signal });

let bundle: VectorBundle;

if (get().snapshot?.snapshotId === snap.snapshotId && get().vectors && get().engine) {

bundle = { snapshot: snap, vectors: get().vectors! };

engine: null,

trajectory: null,

buildProgress: 0,

health: null,

healthError: null,

query: emptyQuery(),

import { describe, it, expect } from 'vitest';

import { buildHnsw, searchHnsw, exactTopK, recallAtK } from '../hnsw';

import { buildSearchTree } from '../tree';

import { layoutTree } from '../layout';

import { clusteredVectors, perturbedQueries } from './fixtures';

it('builds and runs one traced query', async () => {

const t0 = performance.now();

const g = await buildHnsw(vs, { M: 12, efConstruction: 80, seed: 1 });

const t1 = performance.now();

for (const q of queries) recall += recallAtK(searchHnsw(g, vs, q, 48, 10).top, exactTopK(vs, q, 10), 10) / queries.length;

const report = {

buildMs: +(t1 - t0).toFixed(1),

tracedQueryMs: +(t3 - t2).toFixed(2),

traceEvents: r.trace.length,

expect(r.top.length).toBe(10);

expect(ex.length).toBe(10);

expect(recall).toBeGreaterThan(0.8);

pub const MIN_SAMPLE_TOTAL: usize = 500;

pub const DEFAULT_REFRESH_SECS: u64 = 900;

#[test]

fn defaults_apply_when_unset() {

let c = cfg(&[]);

assert_eq!(c.refresh_secs, 900);

assert_eq!(c.excluded.as_written(), vec!["personal-context"]);

assert_eq!(c.embed_url, "http://xinference:9997/v1");

fn numeric_values_are_clamped_and_garbage_defaults() {

assert_eq!(

cfg(&[("MEMORY_CLOUD_SAMPLE", "999999")]).sample_total,

);

assert_eq!(cfg(&[("MEMORY_CLOUD_SAMPLE", "12")]).sample_total, 500);

assert_eq!(cfg(&[("MEMORY_CLOUD_SAMPLE", " 7000 ")]).sample_total, 7000);

assert_eq!(cfg(&[("MEMORY_CLOUD_REFRESH_SECS", "5")]).refresh_secs, 60);

assert_eq!(

# sidecar on visionclaw_network. Empty RUVECTOR_PG_CONNINFO disables it

# (data endpoints answer 503). Never put a password default here.

RUVECTOR_PG_CONNINFO: ${RUVECTOR_PG_CONNINFO:-}

MEMORY_CLOUD_REFRESH_SECS: ${MEMORY_CLOUD_REFRESH_SECS:-900}

MEMORY_CLOUD_EXCLUDE_NAMESPACES: ${MEMORY_CLOUD_EXCLUDE_NAMESPACES:-personal-context}

MEMORY_CLOUD_EMBED_URL: ${MEMORY_CLOUD_EMBED_URL:-http://xinference:9997/v1}

# sidecar on visionclaw_network. Empty RUVECTOR_PG_CONNINFO disables it

# (data endpoints answer 503). Never put a password default here.

RUVECTOR_PG_CONNINFO: ${RUVECTOR_PG_CONNINFO:-}

MEMORY_CLOUD_REFRESH_SECS: ${MEMORY_CLOUD_REFRESH_SECS:-900}

MEMORY_CLOUD_EXCLUDE_NAMESPACES: ${MEMORY_CLOUD_EXCLUDE_NAMESPACES:-personal-context}

MEMORY_CLOUD_EMBED_URL: ${MEMORY_CLOUD_EMBED_URL:-http://xinference:9997/v1}

title: XR Client Architecture

doc_id: VC-XR

status: draft-for-ratification

verified_commit:

changelog:

- "0.1.18 (2026-10-08): memory body at half its clear distance (ADR-2135 amendment, MEMORY_DISTANCE_FACTOR 0.5; the ×10 cloud now encloses both graphs) and the headset route lines at a tenth of the desktop thickness and brightness (XR_ROUTE_THICKNESS_SCALE, XR_ROUTE_GLOW_SCALE 0.1; rings and hit marks keep the desktop size). Operator decision. Triangle budget unchanged. No invariant changed."

- "0.1.17 (2026-10-08): always separate, memory ×10, typed search (ADR-2135 amendment, ADR-2136). The separation slider is gone from the HUD Layout page and the desktop (separation_control.gd deleted); the triangle is permanent at the fixed SEPARATION 190 derived from the live graph radii. The memory cloud is MEMORY_BODY_SCALE 10 graphs wide on the memory vertex's ray, clear of both graphs (TriangleFrame::memory_centre); route tubes, beads and rings grow with it (cloud-local), guide dots grow to half the answer ring at the far end, the hover label, its lift and its reach ×10. Memory Search gains a press-fire on-screen keyboard (onscreen_keyboard.gd, in place of the lists, ≤ 532 px); a typed query searches globally. The query response carries query.position (the snapshot's PCA basis), and the headset route runs query point → sidecar top-k in rank order with the answer ring on the top hit. Triangle budget unchanged (scale is free). No invariant changed."

- "0.1.16 (2026-10-07): HUD Graph Separation control (ADR-2135 in the headset) — Sep −/slider/value/Sep + share the Layout Mode row (page stays 529 px); separation_control.gd writes graphSeparationX through the physics PUT at ≤ 4 Hz while dragging plus a final write on release; read-back moves the slider. Memory search from the headset — Query page Graph Query / Memory Search modes; presets POST /api/memory-cloud/query (NIP-98) and draw a sidecar top-k route (sampled hits in rank order, labelled as such) through the same MemoryRoute gate; a hit press retargets the guide cue; shared query-response fixture pins the headset parser to the server's wire types; benchmark route_source=query. No invariant changed."

activation_status: live

supersedes: []

superseded_by: []

verified_paths: [scripts/dev-entrypoint.sh, docker-compose.unified.yml, scripts/rust-backend-wrapper.sh, scripts/lib/dev-inputs.sh, scripts/launch.sh]

owner: jjohare

review_trigger: a dev-loop turnaround that makes on-start compilation intolerable, or a move to pre-baked dev binaries by default

**Deploy path.** `./scripts/launch.sh redeploy dev` publishes, then runs `supervisorctl -c /app/supervisord.dev.conf restart rust-backend` in the running container; it refuses, naming `up dev`, when the compose config drifted. `up` on a running container with newer build inputs now redeploys instead of stopping and starting the container. Pre-existing defect fixed alongside: `up` against a running healthy container never applied compose changes. Both app services carry `visionclaw.compose-hash` (sha256 of the service's resolved `docker compose config`, computed with the label empty), and `up` recreates on mismatch. `needs_recompile` reads this record's build-input inventory and counts a redeploy since start.

**Verification.** `bash scripts/tests/test-dev-inputs.sh`: 83 pass; against the parent's compose file the mount checks fail. `SECRETS_ROOT=<main checkout>` runs the secret scan over the real checkout's mount sources (clean). `python3 scripts/tests/test_dev_launcher.py`: 2 pass (8 consecutive runs). `cargo test -p visionclaw-integration-tests --test dev_build_inputs` 18/18 and `--test prod_ingress` 9/9. No container operation ran. Activation needs a recreate for the new mounts and label (`launch.sh up dev` does it); `LIVE=1 bash scripts/tests/test-dev-inputs.sh` then checks the running container read-only.

activation_status: live

supersedes: []

superseded_by: []

verified_paths: [src/config/security_profile.rs, src/middleware/rbac_gate.rs, src/main.rs, src/services/role_store.rs, src/handlers/socket_flow_handler/position_updates.rs, docker-compose.unified.yml]

owner: jjohare

review_trigger: adding a fourth profile, machine-selecting a profile at boot, or changing a compose security default

`src/main.rs` changes in two hunks only: the RAGFlow start-up match (`:425-446`; an unset `RAGFLOW_API_KEY` is `RAGFlowError::NotConfigured`, logged as one WARN at `:431`, and the service stays `None`) and Step 1 of the data orchestration (`:605-627`; `FileService::initialize_local_storage` takes the corpus source and skips the GitHub markdown mirror for a local corpus, `:606`). No profile, profile default or compose security default changes (`docker-compose.unified.yml` is untouched); the profile is still asserted at `:934-944`. Nothing touches release-build dev-auth exclusion (`enforce_release_env_hygiene`, `:117-169`, called at `:209` before any other start-up work; dev-auth cfg gate at `:293`), the boot profile assertion (`assert_effective_profile_or_exit`, `:934-944`, still before the listener binds) or fail-closed behaviour: no line added or removed in `main.rs` reads a security flag, and an absent RAGFlow key leaves chat off, which widens nothing. Decision holds.