@c4a/context-cli 0.6.1-beta.4 → 0.6.1-beta.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c4a/context-cli",
-  "version": "0.6.1-beta.4",
+  "version": "0.6.1-beta.5",
   "type": "module",
   "description": "Local CLI for capturing, compiling, and governing knowledge workspaces",
   "license": "MIT",
@@ -21,8 +21,9 @@
   },
   "dependencies": {
     "@c4a/agent-graph": "0.2.3",
-    "@c4a/context": "0.6.1-beta.4",
+    "@c4a/context": "0.6.1-beta.5",
     "commander": "^11.0.0",
+    "fast-xml-parser": "^5.10.1",
     "handlebars": "^4.7.8",
     "ink": "^5.0.0",
     "jiti": "^2.7.0",

package/plugins/VERSION

@@ -1 +1 @@
-0.6.1-beta.4
+0.6.1-beta.5

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "context",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
-  "version": "0.6.1-beta.4",
+  "version": "0.6.1-beta.5",
   "author": {
     "name": "c4a"
   },

package/plugins/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "context",
-  "version": "0.6.1-beta.4",
+  "version": "0.6.1-beta.5",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
   "author": {
     "name": "c4a"
@@ -18,7 +18,7 @@
   "skills": "./skills/",
   "interface": {
     "displayName": "C4A Context",
-    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.6.1-beta.4",
+    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.6.1-beta.5",
     "longDescription": "Create a Context workspace and use agent-guided next steps to register sources, run extraction, review candidates, build package outputs, and verify health without silently mutating source repositories.",
     "developerName": "c4a",
     "category": "Productivity",

package/plugins/cursor/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "context",
   "displayName": "C4A Context",
-  "version": "0.6.1-beta.4",
+  "version": "0.6.1-beta.5",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
   "author": {
     "name": "Context4AI",

package/providers/context/manifest.json

@@ -2,7 +2,7 @@
   "schema": "agent-graph.bundle.v1",
   "provider": {
     "id": "c4a/context",
-    "version": "0.6.1-beta.4"
+    "version": "0.6.1-beta.5"
   },
   "providerManifest": "provider.yaml",
   "graphs": [
@@ -153,7 +153,7 @@
     {
       "id": "context.sdk.project-api",
       "path": "resources/manuals/reference/project-api.md",
-      "digest": "sha256:9156aeb7142cfe1412d20378564f6c04645015d86bde51d004852d3478c2013c"
+      "digest": "sha256:c3a306c5022de31f501211a23bdbceb741d6069b087c138a6db70bd8071e87dd"
     },
     {
       "id": "context.sdk.template-variables",
@@ -273,7 +273,7 @@
     {
       "id": "procedure.code-extraction",
       "path": "resources/procedures/code-extraction.md",
-      "digest": "sha256:35e32f68c2e3142271e178964fb08079e340cf2b7ea3f7714121e951248d2e08"
+      "digest": "sha256:0563be260b3c37f1c7a1a9c831ba3a0c01a872ec3ddc64fd28d414e3c876f7e2"
     },
     {
       "id": "procedure.document-capture",
@@ -318,12 +318,12 @@
     {
       "id": "procedure.source-boundary",
       "path": "resources/procedures/source-boundary.md",
-      "digest": "sha256:6ae8d7f2477fedf32c5550adb8b7ab79d5fd1ab74c8748bc56b2fcfcd2734330"
+      "digest": "sha256:ccd32232599c90312a1fac930363bc7486ede1842a702a524cdc2fe4ce9a1467"
     },
     {
       "id": "procedure.source-capture-detailed",
       "path": "resources/procedures/source-capture-detailed.md",
-      "digest": "sha256:fa7e10572ecec08e5fda44a0e6ff38d019ff6d35a7533f8185f743bca835c196"
+      "digest": "sha256:c62f54d99adc3d4e7902e10ed3bf4ca066ddb5d85949d8ea44e6800f8c699c3f"
     },
     {
       "id": "procedure.verify-and-repair",
@@ -451,7 +451,7 @@
     },
     {
       "path": "provider.yaml",
-      "digest": "sha256:eeb8cce29af50ee696ff1594ab705992afac9c04ac2ad48831f0bd69aeb99f78"
+      "digest": "sha256:6c17411a95ef31e6b29eff1bc4a2ed89421cb126852cfaffd6fb5c553ef96cd8"
     },
     {
       "path": "resources/diagnostics/projection-stale.md",
@@ -511,7 +511,7 @@
     },
     {
       "path": "resources/manuals/reference/project-api.md",
-      "digest": "sha256:9156aeb7142cfe1412d20378564f6c04645015d86bde51d004852d3478c2013c"
+      "digest": "sha256:c3a306c5022de31f501211a23bdbceb741d6069b087c138a6db70bd8071e87dd"
     },
     {
       "path": "resources/manuals/reference/template-variables.md",
@@ -523,7 +523,7 @@
     },
     {
       "path": "resources/procedures/code-extraction.md",
-      "digest": "sha256:35e32f68c2e3142271e178964fb08079e340cf2b7ea3f7714121e951248d2e08"
+      "digest": "sha256:0563be260b3c37f1c7a1a9c831ba3a0c01a872ec3ddc64fd28d414e3c876f7e2"
     },
     {
       "path": "resources/procedures/document-capture.md",
@@ -559,11 +559,11 @@
     },
     {
       "path": "resources/procedures/source-boundary.md",
-      "digest": "sha256:6ae8d7f2477fedf32c5550adb8b7ab79d5fd1ab74c8748bc56b2fcfcd2734330"
+      "digest": "sha256:ccd32232599c90312a1fac930363bc7486ede1842a702a524cdc2fe4ce9a1467"
     },
     {
       "path": "resources/procedures/source-capture-detailed.md",
-      "digest": "sha256:fa7e10572ecec08e5fda44a0e6ff38d019ff6d35a7533f8185f743bca835c196"
+      "digest": "sha256:c62f54d99adc3d4e7902e10ed3bf4ca066ddb5d85949d8ea44e6800f8c699c3f"
     },
     {
       "path": "resources/procedures/verify-and-repair.md",
@@ -633,5 +633,5 @@
   "graphDependencies": {
     "workspace": []
   },
-  "digest": "sha256:205b1a6b67593d9ef793fb6468bb5bb03f534bd37a16aa762cb6689a43bc2a00"
+  "digest": "sha256:219c68c8c55ac6cfe34d968bc96271fc418ad31f0b6bf4c5ef48998292a2dad9"
 }

package/providers/context/provider.yaml

@@ -1,6 +1,6 @@
 schema: agent-graph.provider.v1
 id: c4a/context
-version: 0.6.1-beta.4
+version: 0.6.1-beta.5
 name: Context workflow
 description: Internal work contract for Context knowledge workspaces.
 graphs:

package/providers/context/resources/manuals/reference/project-api.md

@@ -338,9 +338,17 @@ Register each source with
 flag: `--url`, `--doc-token`, or `--wiki-token`. Multiple documents may share
 one date batch; when `--module` is omitted, the CLI derives an opaque,
 credential-safe module id. Capture reads the
-remote document through the CLI runner, writes normalized snapshot files under
-`sources/lark/<date>/` as sibling document files tracked by one date-level `manifest.json`, and does not write access credentials into the
-workspace.
+remote document through the CLI runner as structured Docx XML. Context keeps a
+redacted XML audit asset, projects supported blocks deterministically into
+readable Markdown, and registers external resources such as document citations,
+images, video, whiteboards, and Base references in the snapshot manifest even
+when their binary content is not downloaded. The projection does not infer or
+summarize document meaning. Its fidelity report closes discovered blocks against
+converted and intentionally skipped blocks; a non-empty unsupported block is a
+fidelity error and prevents downstream Review until capture support is fixed.
+Snapshot files live under `sources/lark/<date>/` as sibling document files
+tracked by one date-level `manifest.json`. Access credentials and transient
+signed media URLs are not written into the workspace.
 
 Use a typed document reference in project declarations:
 
@@ -648,6 +656,56 @@ lookup exact when multiple files contain the same symbol name, kind, and digest;
 the complete ref remains opaque to agents. New pages keep only top-level
 `candidate_fingerprint` and do not emit `code_origin`.
 
+### `extractCustom`
+
+Use a project-owned extractor when code facts cannot be represented by the
+TypeScript symbol extractor, for example a language-specific parser or an
+aggregated repository protocol:
+
+```ts
+extractCustom({
+  id: "extract:service:protocol",
+  sources: [service],
+  collection: "codegraph",
+  extract: async ({ projectRoot }) => ({
+    candidates: [{
+      nodeRef: "service/protocol",
+      kind: "protocol",
+      visibility: "exported",
+      module: "service",
+      markdown: renderProtocol(projectRoot),
+      evidence: [{
+        source: "20260811/service",
+        file: "src/protocol.ts",
+        symbol: "protocol",
+        kind: "variable",
+        digest: "0123456789ab",
+      }],
+      review: {
+        title: "Service protocol",
+        summary: "Aggregated protocol boundary.",
+        signals: ["source-backed"],
+        reason: "Review the project-owned extraction.",
+      },
+    }],
+  }),
+});
+```
+
+`sources` is the complete registered repo scope for the phase. Every candidate
+and edge carries structured `evidence`; the CLI validates that evidence against
+the declared sources, creates canonical `source_ref` values, writes the symbol
+index, candidate ledger and Review snapshots atomically, and records a phase
+fingerprint. `context status` therefore treats this phase exactly like another
+pending code extraction target, and Review can verify snapshot freshness
+without a placeholder `extractTs` phase.
+
+The extractor returns knowledge semantics (`nodeRef`, rendered Markdown,
+Review summary and source-backed evidence). It must not write `knowledge/`,
+`.tmp/context-runtime/lifecycle/candidates.jsonl`, extraction fingerprints or
+Review snapshots directly. Context owns those files and preserves rejected and
+unchanged-approved decisions across reruns.
+
 ### `reviewValidity`
 
 Declare the review step for a collection:
@@ -719,8 +777,9 @@ customPhase("custom:20260712/sample:review", async (ctx) => {
 });
 ```
 
-Custom phases are an escape hatch. Prefer built-in factories for source,
-extract, review, and package workflows. The supported runtime helpers are:
+Custom phases are an orchestration escape hatch. Use `extractCustom()` instead
+when project code needs to publish codegraph candidates. The supported runtime
+helpers are:
 
 - `ctx.ensureSources(...)` for repo source readiness.
 - `ctx.extract.ts(...)` for declared TypeScript extraction.

package/providers/context/resources/procedures/code-extraction.md

@@ -42,3 +42,9 @@ package inventory's `structure.relationship_coverage` to distinguish a current
 source-backed extraction that found no approved edges from an older or
 otherwise unknown relationship mode. Never infer missing edges from symbol
 co-occurrence, filenames, or package size.
+
+When the built-in TypeScript extractor cannot represent the code source, use a
+declared `extractCustom` phase. The project-owned callback returns candidate
+semantics plus structured source evidence; Context owns canonical refs,
+fingerprints, candidate storage, Review snapshots, freshness, and rerun cleanup.
+Do not use a generic `customPhase` callback to write lifecycle files directly.

package/providers/context/resources/procedures/source-boundary.md

@@ -30,6 +30,12 @@ them. A date-only inspection addresses the batch; `<date>/<module>` addresses
 one source. Register a confirmed multi-source request as one serial batch
 mutation instead of running registry writes in parallel.
 
+To retire a registered source, first run `context source remove <source-id>
+--format json`. This is a read-only preview that lists every project, candidate,
+or approved-knowledge reference. Only after those references are intentionally
+resolved may the route use `--yes`; the CLI never silently deletes referenced
+knowledge or another source's materialized files.
+
 Repository readiness checks are mechanical and may run after the boundary is
 registered. Clone, fetch, checkout, install, build, test, and other external
 repository operations need separate authority. File and remote-document

package/providers/context/resources/procedures/source-capture-detailed.md

@@ -51,6 +51,16 @@ user's language. Never hand-write captured source snapshots: the
 CLI owns normalisation (NFC, BOM strip, line endings) and the `content_hash`
 contract, so any manual edit breaks idempotency.
 
+Lark capture obtains the structured XML representation and produces two
+separate artifacts: XML audit evidence and a deterministic readable Markdown
+projection. Do not treat raw XML as Markdown and do not rewrite it yourself.
+Inspect the returned fidelity status and diagnostics. Warnings describe an
+explicitly skipped empty block; errors mean non-empty evidence or a resource
+locator could not be preserved and the workflow must not proceed to Align,
+Compile, or Review. The CLI, not the plugin, parses the document. The plugin
+only displays the structured counts and diagnostics returned by the current
+source resource.
+
 ### Code capture diagnostics
 
 Do not run hand-written dependency preflight commands before code extraction or