feat(server): add guarded prompt retrieval adapter

[lightcloud00]

Summary

• add an optional loopback-only prompt retrieval adapter for OpenMausBot
• retrieve after durable message handling and append bounded context only to provider-bound text
• validate the exact no-authority/no-retention response contract and fail open without logging prompts
• keep the owner-dirty app workspace untouched

Safety boundaries

• endpoint must be loopback and exact /v1/retrieve
• 8 KB prompt input, 2.5 second deadline, and 2 KB maximum returned context
• retrieval context is never written back into OpenMaus chat history
• no tools, writes, selector authority, or promotion authority

Verification

• full test floor: 1,676 passed, 13 skipped (1,689 counted; floor 1,070)
• focused retrieval/index tests: 112 passed
• both TypeScript configs passed
• Vite UI, server bundle, packaged-server smoke, updater/viewer, broker, and Electron syntax checks passed
• exact branch SHA: f3034061fe8eabd01ea90d3f6a31d2a3ab66e8f0

Refs lightcloud00/claudecode-workspace#1498
Refs lightcloud00/claudecode-workspace#1535

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 203e1600-d122-4a52-bb51-4660e1b57f87

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}