feat(pi-hermes-memory): 导入上游 v0.9.10 源码快照

从官方 Git 仓库导入 chandra447/pi-hermes-memory 在 tag v0.9.10
（df624056a2e8c68bc89ba0a81e1c120856ec9665，2026-10-02）的源码快照。
本次仅导入源码，尚未接入组合包：package.json、加载顺序、依赖与权限策略
均未改动。

- 原样导入 src/、tests/、docs/、scripts/、README、CHANGELOG、PLAN、
  AGENTS 与 LICENSE；该快照共 156 个上游文件。
- 剔除嵌套 .git、上游 .github 工作流、.ralph/、.claude/、node_modules、
  覆盖率与构建产物。
- 新增中文 UPSTREAM.md，记录来源，以及启用前必须完成的待决事项：
  在 pi-compaction 之前注册加载顺序、better-sqlite3 版本与根 allowScripts
  对齐、strip-ansi 解析确认。
- 说明选择 tag 而非 main 的原因：导入时上游 main 已领先至
  24fcd8ad26fc27badb8d7dbaf8034645de07b893（2026-10-11），选 tag 是为
  对应一个已发布、可复现的版本。

尚未接线。启用前还需反转 tests/extension-load.test.ts 中"不得加载
Hermes"的断言，并同步 pi-tool-search 分组、权限策略与文档。

验证：快照 156 个上游文件全部导入，目录内仅多出 UPSTREAM.md 一份；
已确认与上游 main 内容存在差异，证明取的是 tag 而非 main。

pi-hermes-memory/tests/store/atomic-lock-lazy-probe.test.ts

@@ -0,0 +1,80 @@
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+const modulePath = pathToFileURL(
+  path.join(
+    path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../../src"),
+    "store/atomic-lock-coordinator.ts",
+  ),
+).href;
+
+// The Linux probe branch reads /proc inside a try/catch, so an injected error is
+// swallowed there and the call is unobservable. Pinning the platform to a
+// spawnSync branch makes the probe fail loudly on every host instead.
+const POISON_PROBE = [
+  'import { createRequire } from "node:module";',
+  "const require = createRequire(import.meta.url);",
+  'const cp = require("node:child_process");',
+  'cp.spawnSync = () => { throw new Error("EAGER_PROBE_FIRED"); };',
+  'Object.defineProperty(process, "platform", { value: "darwin", configurable: true });',
+  'if (process.platform !== "darwin") { console.error("PLATFORM_OVERRIDE_FAILED"); process.exit(3); }',
+].join("\n");
+
+const platformOverridable = (() => {
+  try {
+    Object.defineProperty(process, "platform", { value: process.platform, configurable: true });
+    return true;
+  } catch {
+    return false;
+  }
+})();
+
+/** Run `body` in a child process where the incarnation probe throws if it runs. */
+function runWithPoisonedProbe(body: string): { status: number | null; output: string } {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "hermes-lazy-probe-"));
+  try {
+    const child = path.join(dir, "probe.mts");
+    fs.writeFileSync(child, `${POISON_PROBE}\n${body}\n`);
+    const result = spawnSync(process.execPath, ["--import", "tsx", child], { encoding: "utf-8" });
+    return { status: result.status, output: `${result.stdout ?? ""}${result.stderr ?? ""}` };
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+  }
+}
+
+/**
+ * Regression guard for issue #245: the process-incarnation probe ran at module
+ * scope, so every pi launch paid a spawnSync (powershell.exe on Windows) before
+ * any hermes code ran, whether or not a lock was ever taken.
+ */
+describe(
+  "process-incarnation probing is deferred past extension load",
+  { skip: platformOverridable ? false : "process.platform cannot be overridden on this runtime" },
+  () => {
+    it("imports the module graph without probing the process incarnation", () => {
+      const { status, output } = runWithPoisonedProbe(
+        [`await import(${JSON.stringify(modulePath)});`, 'console.log("IMPORTED_OK");'].join("\n"),
+      );
+
+      assert.equal(status, 0, output);
+      assert.match(output, /IMPORTED_OK/);
+    });
+
+    it("still probes once a coordinator is constructed", () => {
+      const { status, output } = runWithPoisonedProbe(
+        [
+          `const { AtomicLockCoordinator } = await import(${JSON.stringify(modulePath)});`,
+          'new AtomicLockCoordinator("unused.sqlite");',
+        ].join("\n"),
+      );
+
+      assert.notEqual(status, 0, output);
+      assert.match(output, /EAGER_PROBE_FIRED/);
+    });
+  },
+);