@c4a/context-cli 0.6.1-beta.4 → 0.6.1-beta.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c4a/context-cli",
-  "version": "0.6.1-beta.4",
+  "version": "0.6.1-beta.6",
   "type": "module",
   "description": "Local CLI for capturing, compiling, and governing knowledge workspaces",
   "license": "MIT",
@@ -21,8 +21,9 @@
   },
   "dependencies": {
     "@c4a/agent-graph": "0.2.3",
-    "@c4a/context": "0.6.1-beta.4",
+    "@c4a/context": "0.6.1-beta.6",
     "commander": "^11.0.0",
+    "fast-xml-parser": "^5.10.1",
     "handlebars": "^4.7.8",
     "ink": "^5.0.0",
     "jiti": "^2.7.0",

package/plugins/VERSION

@@ -1 +1 @@
-0.6.1-beta.4
+0.6.1-beta.6

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "context",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
-  "version": "0.6.1-beta.4",
+  "version": "0.6.1-beta.6",
   "author": {
     "name": "c4a"
   },

package/plugins/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "context",
-  "version": "0.6.1-beta.4",
+  "version": "0.6.1-beta.6",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
   "author": {
     "name": "c4a"
@@ -18,7 +18,7 @@
   "skills": "./skills/",
   "interface": {
     "displayName": "C4A Context",
-    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.6.1-beta.4",
+    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.6.1-beta.6",
     "longDescription": "Create a Context workspace and use agent-guided next steps to register sources, run extraction, review candidates, build package outputs, and verify health without silently mutating source repositories.",
     "developerName": "c4a",
     "category": "Productivity",

package/plugins/cursor/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "context",
   "displayName": "C4A Context",
-  "version": "0.6.1-beta.4",
+  "version": "0.6.1-beta.6",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
   "author": {
     "name": "Context4AI",

package/providers/context/graphs/workspace.yaml

@@ -129,8 +129,8 @@ nodes:
     resources:
       required:
         - resources/procedures/prose-compile.md
-        - resources/views/structure-current.yaml
       recommended:
+        - resources/views/structure-current.yaml
         - resources/semantic/compile/index.md
 
   - id: resume-review-current-batch

package/providers/context/manifest.json

@@ -2,14 +2,14 @@
   "schema": "agent-graph.bundle.v1",
   "provider": {
     "id": "c4a/context",
-    "version": "0.6.1-beta.4"
+    "version": "0.6.1-beta.6"
   },
   "providerManifest": "provider.yaml",
   "graphs": [
     {
       "id": "workspace",
       "path": "graphs/workspace.yaml",
-      "digest": "sha256:9f434f63af920ad70aee7bb7b74c3a4be2ecfdad1c9c39a5ee0927f917857325"
+      "digest": "sha256:4b344cb9ecc03990f2a2f35aca372949917510f5957c4760fe69a651368eddbc"
     }
   ],
   "actions": [
@@ -153,7 +153,7 @@
     {
       "id": "context.sdk.project-api",
       "path": "resources/manuals/reference/project-api.md",
-      "digest": "sha256:9156aeb7142cfe1412d20378564f6c04645015d86bde51d004852d3478c2013c"
+      "digest": "sha256:9ab0be26aeccea79f561c7ecd01636beb97b7088ea1ddb141c3cbc96af758508"
     },
     {
       "id": "context.sdk.template-variables",
@@ -273,7 +273,7 @@
     {
       "id": "procedure.code-extraction",
       "path": "resources/procedures/code-extraction.md",
-      "digest": "sha256:35e32f68c2e3142271e178964fb08079e340cf2b7ea3f7714121e951248d2e08"
+      "digest": "sha256:0563be260b3c37f1c7a1a9c831ba3a0c01a872ec3ddc64fd28d414e3c876f7e2"
     },
     {
       "id": "procedure.document-capture",
@@ -313,17 +313,17 @@
     {
       "id": "procedure.prose-compile",
       "path": "resources/procedures/prose-compile.md",
-      "digest": "sha256:a0b2a8142f964732fb634d47f8e0af094a7377ce939b111de8c8f40df7dede02"
+      "digest": "sha256:c36ba3dcf9aa11a8759afaab2c9a99859c31acaf5f06456c4e0e6793130b7d6e"
     },
     {
       "id": "procedure.source-boundary",
       "path": "resources/procedures/source-boundary.md",
-      "digest": "sha256:6ae8d7f2477fedf32c5550adb8b7ab79d5fd1ab74c8748bc56b2fcfcd2734330"
+      "digest": "sha256:99097947961d7fa5b17f9e6b9c9471aac38cec1943bd7feb414b21d6a1e26a49"
     },
     {
       "id": "procedure.source-capture-detailed",
       "path": "resources/procedures/source-capture-detailed.md",
-      "digest": "sha256:fa7e10572ecec08e5fda44a0e6ff38d019ff6d35a7533f8185f743bca835c196"
+      "digest": "sha256:0cf764a43c33fbcf86b32a3731fec5905ebf0d312b7939059aae99a6ab0532e2"
     },
     {
       "id": "procedure.verify-and-repair",
@@ -447,11 +447,11 @@
     },
     {
       "path": "graphs/workspace.yaml",
-      "digest": "sha256:9f434f63af920ad70aee7bb7b74c3a4be2ecfdad1c9c39a5ee0927f917857325"
+      "digest": "sha256:4b344cb9ecc03990f2a2f35aca372949917510f5957c4760fe69a651368eddbc"
     },
     {
       "path": "provider.yaml",
-      "digest": "sha256:eeb8cce29af50ee696ff1594ab705992afac9c04ac2ad48831f0bd69aeb99f78"
+      "digest": "sha256:ad1b825734418814f1ac3673d329070228b6b8004cd821c39a3224c6d30935dd"
     },
     {
       "path": "resources/diagnostics/projection-stale.md",
@@ -511,7 +511,7 @@
     },
     {
       "path": "resources/manuals/reference/project-api.md",
-      "digest": "sha256:9156aeb7142cfe1412d20378564f6c04645015d86bde51d004852d3478c2013c"
+      "digest": "sha256:9ab0be26aeccea79f561c7ecd01636beb97b7088ea1ddb141c3cbc96af758508"
     },
     {
       "path": "resources/manuals/reference/template-variables.md",
@@ -523,7 +523,7 @@
     },
     {
       "path": "resources/procedures/code-extraction.md",
-      "digest": "sha256:35e32f68c2e3142271e178964fb08079e340cf2b7ea3f7714121e951248d2e08"
+      "digest": "sha256:0563be260b3c37f1c7a1a9c831ba3a0c01a872ec3ddc64fd28d414e3c876f7e2"
     },
     {
       "path": "resources/procedures/document-capture.md",
@@ -555,15 +555,15 @@
     },
     {
       "path": "resources/procedures/prose-compile.md",
-      "digest": "sha256:a0b2a8142f964732fb634d47f8e0af094a7377ce939b111de8c8f40df7dede02"
+      "digest": "sha256:c36ba3dcf9aa11a8759afaab2c9a99859c31acaf5f06456c4e0e6793130b7d6e"
     },
     {
       "path": "resources/procedures/source-boundary.md",
-      "digest": "sha256:6ae8d7f2477fedf32c5550adb8b7ab79d5fd1ab74c8748bc56b2fcfcd2734330"
+      "digest": "sha256:99097947961d7fa5b17f9e6b9c9471aac38cec1943bd7feb414b21d6a1e26a49"
     },
     {
       "path": "resources/procedures/source-capture-detailed.md",
-      "digest": "sha256:fa7e10572ecec08e5fda44a0e6ff38d019ff6d35a7533f8185f743bca835c196"
+      "digest": "sha256:0cf764a43c33fbcf86b32a3731fec5905ebf0d312b7939059aae99a6ab0532e2"
     },
     {
       "path": "resources/procedures/verify-and-repair.md",
@@ -633,5 +633,5 @@
   "graphDependencies": {
     "workspace": []
   },
-  "digest": "sha256:205b1a6b67593d9ef793fb6468bb5bb03f534bd37a16aa762cb6689a43bc2a00"
+  "digest": "sha256:9496e5137e372e4711605465046811bf322c53603bc7b8c5fbfa07df0862d0eb"
 }

package/providers/context/provider.yaml

@@ -1,6 +1,6 @@
 schema: agent-graph.provider.v1
 id: c4a/context
-version: 0.6.1-beta.4
+version: 0.6.1-beta.6
 name: Context workflow
 description: Internal work contract for Context knowledge workspaces.
 graphs:

package/providers/context/resources/manuals/reference/project-api.md

@@ -338,9 +338,20 @@ Register each source with
 flag: `--url`, `--doc-token`, or `--wiki-token`. Multiple documents may share
 one date batch; when `--module` is omitted, the CLI derives an opaque,
 credential-safe module id. Capture reads the
-remote document through the CLI runner, writes normalized snapshot files under
-`sources/lark/<date>/` as sibling document files tracked by one date-level `manifest.json`, and does not write access credentials into the
-workspace.
+remote document through the CLI runner as structured Docx XML. Context keeps a
+redacted XML audit asset, projects supported blocks deterministically into
+readable Markdown, and registers external resources such as document citations,
+images, video, whiteboards, and Base references in the snapshot manifest even
+when their binary content is not downloaded. The projection does not infer or
+summarize document meaning. Its fidelity report closes discovered blocks
+against converted and intentionally skipped blocks and reports evidence
+completeness separately from Markdown projection quality. Unknown non-empty XML
+blocks receive a generic, auditable, non-interactive projection and do not block
+downstream work. Missing source content or unresolved external-resource identity
+remains an evidence error and prevents downstream Review.
+Snapshot files live under `sources/lark/<date>/` as sibling document files
+tracked by one date-level `manifest.json`. Access credentials and transient
+signed media URLs are not written into the workspace.
 
 Use a typed document reference in project declarations:
 
@@ -648,6 +659,56 @@ lookup exact when multiple files contain the same symbol name, kind, and digest;
 the complete ref remains opaque to agents. New pages keep only top-level
 `candidate_fingerprint` and do not emit `code_origin`.
 
+### `extractCustom`
+
+Use a project-owned extractor when code facts cannot be represented by the
+TypeScript symbol extractor, for example a language-specific parser or an
+aggregated repository protocol:
+
+```ts
+extractCustom({
+  id: "extract:service:protocol",
+  sources: [service],
+  collection: "codegraph",
+  extract: async ({ projectRoot }) => ({
+    candidates: [{
+      nodeRef: "service/protocol",
+      kind: "protocol",
+      visibility: "exported",
+      module: "service",
+      markdown: renderProtocol(projectRoot),
+      evidence: [{
+        source: "20260811/service",
+        file: "src/protocol.ts",
+        symbol: "protocol",
+        kind: "variable",
+        digest: "0123456789ab",
+      }],
+      review: {
+        title: "Service protocol",
+        summary: "Aggregated protocol boundary.",
+        signals: ["source-backed"],
+        reason: "Review the project-owned extraction.",
+      },
+    }],
+  }),
+});
+```
+
+`sources` is the complete registered repo scope for the phase. Every candidate
+and edge carries structured `evidence`; the CLI validates that evidence against
+the declared sources, creates canonical `source_ref` values, writes the symbol
+index, candidate ledger and Review snapshots atomically, and records a phase
+fingerprint. `context status` therefore treats this phase exactly like another
+pending code extraction target, and Review can verify snapshot freshness
+without a placeholder `extractTs` phase.
+
+The extractor returns knowledge semantics (`nodeRef`, rendered Markdown,
+Review summary and source-backed evidence). It must not write `knowledge/`,
+`.tmp/context-runtime/lifecycle/candidates.jsonl`, extraction fingerprints or
+Review snapshots directly. Context owns those files and preserves rejected and
+unchanged-approved decisions across reruns.
+
 ### `reviewValidity`
 
 Declare the review step for a collection:
@@ -719,8 +780,9 @@ customPhase("custom:20260712/sample:review", async (ctx) => {
 });
 ```
 
-Custom phases are an escape hatch. Prefer built-in factories for source,
-extract, review, and package workflows. The supported runtime helpers are:
+Custom phases are an orchestration escape hatch. Use `extractCustom()` instead
+when project code needs to publish codegraph candidates. The supported runtime
+helpers are:
 
 - `ctx.ensureSources(...)` for repo source readiness.
 - `ctx.extract.ts(...)` for declared TypeScript extraction.

package/providers/context/resources/procedures/code-extraction.md

@@ -42,3 +42,9 @@ package inventory's `structure.relationship_coverage` to distinguish a current
 source-backed extraction that found no approved edges from an older or
 otherwise unknown relationship mode. Never infer missing edges from symbol
 co-occurrence, filenames, or package size.
+
+When the built-in TypeScript extractor cannot represent the code source, use a
+declared `extractCustom` phase. The project-owned callback returns candidate
+semantics plus structured source evidence; Context owns canonical refs,
+fingerprints, candidate storage, Review snapshots, freshness, and rerun cleanup.
+Do not use a generic `customPhase` callback to write lifecycle files directly.

package/providers/context/resources/procedures/prose-compile.md

@@ -15,6 +15,9 @@ by the current Route. Do not create compile-action payloads or rewrite source
 content.
 
 One compile command validates every owned view first, then atomically
-materializes the source/collection candidate batch. Re-evaluate the workspace
-afterward so another structure slot can be routed to its own phase. Do not open
-a partial Review while planned views remain.
+materializes the source/collection candidate batch. In an explicitly managed
+conversation, the host loop may continue across the remaining deterministic
+compile slots after this procedure has been read; it re-evaluates revision and
+validation state after every write. The current structure view is optional
+inspection context because the CLI consumes the confirmed structure directly.
+Do not open a partial Review while planned views remain.

package/providers/context/resources/procedures/source-boundary.md

@@ -30,6 +30,17 @@ them. A date-only inspection addresses the batch; `<date>/<module>` addresses
 one source. Register a confirmed multi-source request as one serial batch
 mutation instead of running registry writes in parallel.
 
+To retire a registered source, first run `context source remove <source-id>
+--format json`. This is a read-only preview that lists every project, candidate,
+or approved-knowledge reference. Only after those references are intentionally
+resolved may the route use `--yes`; the CLI never silently deletes referenced
+knowledge or another source's materialized files. Execute the exact
+digest-bound command returned by the preview. For a shared document batch, the
+manifest entry is the ownership boundary: removal deletes only that entry and
+its explicitly listed files/assets. An uncaptured module has no manifest entry,
+so removal is registry-only; the shared date directory is never inferred as
+module-owned.
+
 Repository readiness checks are mechanical and may run after the boundary is
 registered. Clone, fetch, checkout, install, build, test, and other external
 repository operations need separate authority. File and remote-document

package/providers/context/resources/procedures/source-capture-detailed.md

@@ -51,6 +51,19 @@ user's language. Never hand-write captured source snapshots: the
 CLI owns normalisation (NFC, BOM strip, line endings) and the `content_hash`
 contract, so any manual edit breaks idempotency.
 
+Lark capture obtains the structured XML representation and produces two
+separate artifacts: XML audit evidence and a deterministic readable Markdown
+projection. Do not treat raw XML as Markdown and do not rewrite it yourself.
+Inspect `evidence_status` and `projection_status` separately. An evidence error
+means the source body, external content, or a stable resource locator could not
+be preserved, so the workflow must not proceed to Align, Compile, or Review.
+A projection warning or `generic` status means the original XML is preserved
+and a deterministic non-interactive Markdown fallback was emitted; report the
+diagnostic, but continue through the Route. The CLI, not the plugin, parses the
+document. The plugin only displays the structured counts and diagnostics
+returned by the current source resource. Do not patch the CLI or edit snapshots
+to add a renderer from a user workspace.
+
 ### Code capture diagnostics
 
 Do not run hand-written dependency preflight commands before code extraction or