fix(bolt): compile hot splits once without reverting main

[seonghobae]

Summary

• Carry the only valid delta from ⚡ Bolt: 문자열 분리 및 치환 시 인라인 정규표현식 오버헤드 최적화 #2205 onto current main: compile the hot hash, package-name, clause, and sentence splits once, and collapse receipt-tool whitespace with str.split / str.join.
• Leave ⚡ Bolt: 문자열 분리 및 치환 시 인라인 정규표현식 오버헤드 최적화 #2205 unmerged. Commit 85dc0f3aa on that branch deletes queue-health, Strix evidence binding, CodeQL identity, and other control-plane files that current main still owns. This branch does not contain that commit.
• anyio==4.14.2 and the Noema document hash installs are already on main, so those later bolt commits are not repeated here.

Tests

• test_requirement_splits_are_compiled_once_and_keep_pin_behavior locks the compiled hash delimiter and package-name pattern, including a mixed-whitespace hash line.
• test_runtime_boundaries_are_compiled_once_and_slugs_stay_stable locks native tool slugs, case-insensitive clause splits, and sentence splits.
• Related materializer, uv-export, and runtime-claim tests passed locally (177 passed). The two touched modules' changed lines are covered; a subset run still leaves pre-existing uncovered lines in materialize_base_python_requirements.py that this diff does not touch.

Developer experience

Reviewers can see the intended regex change without a 12k-line control-plane deletion in the same pull request.

User experience

Hash-pin detection, VCS import names, and browser-receipt tool slugs stay the same. The hot paths no longer recompile those patterns on each call.

[coderabbitai]

Warning

Review limit reached

Next included review available in 17 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 9626ba5a-289e-458f-923f-14416c339de7

📥 Commits

Reviewing files that changed from the base of the PR and between 3295c25 and 1505df5.

📒 Files selected for processing (5)

• .jules/bolt.md
• scripts/ci/materialize_base_python_requirements.py
• scripts/ci/opencode_review_normalize_output.py
• tests/test_materialize_base_python_requirements.py
• tests/test_opencode_review_normalize_output.py

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Exact-head admission correction — 1505df5dad73d86cb438be74d75ace2043e12cc3

Ready is review admission only. Fresh audit against base 3295c259bcb688673170a1902f46d1d6c775bad4 found:

• latest terminal workflow blockers: SAST Semgrep 36422000731=failure, Trusted uv Materializer Quality CI 36422000733=failure, Security Scan 36422000767=failure, Python Security 36422000677=failure, CodeQL PR 36422000811=failure

This PR is moved to Draft/Proposed until the causal owner repair is present on a successor exact head and re-audited. Queued/pending work is neither an additional blocker nor passing evidence. No Close, force push, destructive rebase, manual rerun, synthetic status/approval, merge, auto-merge, or bypass was performed.