feat(pi-hermes-memory): 导入上游 v0.9.10 源码快照

从官方 Git 仓库导入 chandra447/pi-hermes-memory 在 tag v0.9.10
（df624056a2e8c68bc89ba0a81e1c120856ec9665，2026-10-02）的源码快照。
本次仅导入源码，尚未接入组合包：package.json、加载顺序、依赖与权限策略
均未改动。

- 原样导入 src/、tests/、docs/、scripts/、README、CHANGELOG、PLAN、
  AGENTS 与 LICENSE；该快照共 156 个上游文件。
- 剔除嵌套 .git、上游 .github 工作流、.ralph/、.claude/、node_modules、
  覆盖率与构建产物。
- 新增中文 UPSTREAM.md，记录来源，以及启用前必须完成的待决事项：
  在 pi-compaction 之前注册加载顺序、better-sqlite3 版本与根 allowScripts
  对齐、strip-ansi 解析确认。
- 说明选择 tag 而非 main 的原因：导入时上游 main 已领先至
  24fcd8ad26fc27badb8d7dbaf8034645de07b893（2026-10-11），选 tag 是为
  对应一个已发布、可复现的版本。

尚未接线。启用前还需反转 tests/extension-load.test.ts 中"不得加载
Hermes"的断言，并同步 pi-tool-search 分组、权限策略与文档。

验证：快照 156 个上游文件全部导入，目录内仅多出 UPSTREAM.md 一份；
已确认与上游 main 内容存在差异，证明取的是 tag 而非 main。

pi-hermes-memory/tests/store/sqlite-lazy-load.test.ts

@@ -0,0 +1,78 @@
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const srcRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../../src");
+
+const POISON_REQUIRE = [
+  'import Module from "node:module";',
+  'import path from "node:path";',
+  "const original = Module.prototype.require;",
+  "Module.prototype.require = function (id: string) {",
+  '  if (id === "better-sqlite3") {',
+  "    throw Object.assign(new Error(\"Cannot find package 'better-sqlite3'\"), { code: \"MODULE_NOT_FOUND\" });",
+  "  }",
+  "  return original.apply(this, arguments as never);",
+  "};",
+].join("\n");
+
+/**
+ * Run `body` in a child process where `require("better-sqlite3")` always fails,
+ * standing in for compiled Pi, whose Bun resolver cannot find the package from
+ * an on-disk extension file.
+ */
+function runWithoutBetterSqlite3(body: string): { status: number | null; output: string } {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "hermes-lazy-sqlite-"));
+  try {
+    const child = path.join(dir, "probe.mts");
+    fs.writeFileSync(child, `${POISON_REQUIRE}\n${body}\n`);
+    const result = spawnSync(process.execPath, ["--import", "tsx", child], { encoding: "utf-8" });
+    return { status: result.status, output: `${result.stdout ?? ""}${result.stderr ?? ""}` };
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+  }
+}
+
+/**
+ * Regression guard for issue #117: a module-scope native load turned an
+ * unresolvable better-sqlite3 into "Failed to load extension", bricking the
+ * extension for every compiled-Pi user instead of failing at the point of use.
+ */
+describe("SQLite native loading is deferred past extension load", () => {
+  it("imports the extension-load module graph without resolving better-sqlite3", () => {
+    // Dynamic import: the specifiers are absolute paths built at runtime so the
+    // poisoned require hook is installed before the graph is evaluated.
+    const body = [
+      `for (const specifier of ${JSON.stringify([
+        path.join(srcRoot, "extension-root-migration.ts"),
+        path.join(srcRoot, "store/db.ts"),
+        path.join(srcRoot, "store/atomic-lock-coordinator.ts"),
+      ])}) {`,
+      "  await import(specifier);",
+      "}",
+      'console.log("IMPORTED_OK");',
+    ].join("\n");
+
+    const { status, output } = runWithoutBetterSqlite3(body);
+    assert.match(output, /IMPORTED_OK/);
+    assert.equal(status, 0);
+  });
+
+  it("still fails loudly when SQLite is actually used", () => {
+    const body = [
+      `const { AtomicLockCoordinator } = await import(${JSON.stringify(path.join(srcRoot, "store/atomic-lock-coordinator.ts"))});`,
+      'const dir = fs.mkdtempSync(path.join(os.tmpdir(), "hermes-lazy-sqlite-use-"));',
+      'new AtomicLockCoordinator(path.join(dir, "locks.sqlite")).tryAcquire("k", { staleMs: 1000 });',
+    ].join("\n");
+
+    const { status, output } = runWithoutBetterSqlite3(
+      `import fs from "node:fs";\nimport os from "node:os";\n${body}`,
+    );
+    assert.notEqual(status, 0);
+    assert.match(output, /better-sqlite3/);
+  });
+});