From 27dd3bbbb4e33a16138df3b2c28ad47a99f04a8d Mon Sep 17 00:00:00 2001
From: Codex <snider@host.uk.com>
Date: Fri, 24 Apr 2026 19:26:24 +0100
Subject: [PATCH] fix(go-session): annotate intrinsic banned imports per AX-6

Closes tasks.lthn.sh/view.php?id=668

Co-authored-by: Codex <noreply@openai.com>
---
 analytics.go    |  6 +++---
 core_helpers.go |  2 +-
 html.go         |  6 +++---
 parser.go       | 16 ++++++++--------
 search.go       |  8 ++++----
 video.go        |  6 +++---
 6 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/analytics.go b/analytics.go
index 98d2af7..40b4d14 100644
--- a/analytics.go
+++ b/analytics.go
@@ -2,9 +2,9 @@
 package session
 
 import (
-	"maps"
-	"slices"
-	"time"
+	"maps"   // Note: intrinsic — maps.Keys exposes tool names for deterministic analytics output; no core equivalent
+	"slices" // Note: intrinsic — slices.Sorted orders analytics rows deterministically; no core equivalent
+	"time"   // Note: intrinsic — time.Duration arithmetic for session, active-time, and latency metrics; no core equivalent
 
 	core "dappco.re/go/core"
 )
diff --git a/core_helpers.go b/core_helpers.go
index af0040b..886374a 100644
--- a/core_helpers.go
+++ b/core_helpers.go
@@ -2,7 +2,7 @@
 package session
 
 import (
-	"bytes"
+	"bytes" // Note: intrinsic — byte-slice helpers implement local string primitives without strings import; no core equivalent
 
 	core "dappco.re/go/core"
 )
diff --git a/html.go b/html.go
index 431ee5e..44bb358 100644
--- a/html.go
+++ b/html.go
@@ -2,9 +2,9 @@
 package session
 
 import (
-	"html"
-	"path"
-	"time"
+	"html" // Note: intrinsic — escaping transcript content for generated HTML; stdlib encoder is the output contract
+	"path" // Note: intrinsic — output parent directory derivation for slash-separated paths; no core equivalent
+	"time" // Note: intrinsic — duration formatting thresholds for rendered summaries; no core equivalent
 
 	core "dappco.re/go/core"
 )
diff --git a/parser.go b/parser.go
index 761ea40..3e6bd5e 100644
--- a/parser.go
+++ b/parser.go
@@ -2,14 +2,14 @@
 package session
 
 import (
-	"bufio"
-	"io"
-	"io/fs"
-	"iter"
-	"maps"
-	"path"
-	"slices"
-	"time"
+	"bufio"  // Note: intrinsic — streaming JSONL scan with an explicit bounded buffer; no core equivalent
+	"io"     // Note: intrinsic — Reader and ReadCloser contracts for transcript streams and hostFS handles; no core equivalent
+	"io/fs"  // Note: intrinsic — fs.FileInfo metadata returned from hostFS.Stat; no core equivalent
+	"iter"   // Note: intrinsic — public lazy sequence API for sessions and events; no core equivalent
+	"maps"   // Note: intrinsic — maps.Keys exposes JSON fallback key sets for deterministic output; no core equivalent
+	"path"   // Note: intrinsic — slash-separated transcript path joining and base-name extraction; no core equivalent
+	"slices" // Note: intrinsic — iterator collection, sorted keys, and session ordering; no core equivalent
+	"time"   // Note: intrinsic — RFC3339 transcript timestamps and session age calculations; no core equivalent
 
 	core "dappco.re/go/core"
 )
diff --git a/search.go b/search.go
index 78d6231..151b437 100644
--- a/search.go
+++ b/search.go
@@ -2,10 +2,10 @@
 package session
 
 import (
-	"iter"
-	"path"
-	"slices"
-	"time"
+	"iter"   // Note: intrinsic — public lazy sequence API for search results; no core equivalent
+	"path"   // Note: intrinsic — slash-separated transcript glob path construction; no core equivalent
+	"slices" // Note: intrinsic — slices.Collect materialises search iterator results; no core equivalent
+	"time"   // Note: intrinsic — search result timestamps mirror parsed transcript event times; no core equivalent
 
 	core "dappco.re/go/core"
 )
diff --git a/video.go b/video.go
index fc7ea70..c06e661 100644
--- a/video.go
+++ b/video.go
@@ -2,9 +2,9 @@
 package session
 
 import (
-	"io/fs"
-	"path"
-	"syscall"
+	"io/fs"   // Note: intrinsic — fs.FileInfo metadata for executable checks from hostFS.Stat; no core equivalent
+	"path"    // Note: intrinsic — PATH candidate and temporary tape path construction; no core equivalent
+	"syscall" // Note: intrinsic — ForkExec/Wait4 invokes VHS without importing banned os/exec; no core equivalent
 
 	core "dappco.re/go/core"
 )