npm - @claude-transcripts/cli - Versions diffs - 0.5.0 → 0.6.1 - Mend

@claude-transcripts/cli 0.5.0 → 0.6.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/dist/{app-2rqkxqp9.js → app-zjbeac0e.js} +1 -1
package/dist/{cli-byvjee1b.js → cli-3frjxyqc.js} +1659 -1279
package/dist/cli.js +2 -2
package/package.json +1 -1

package/dist/{cli-byvjee1b.js → cli-3frjxyqc.js} RENAMED Viewed

@@ -1,5 +1,92 @@
 // @bun
-// packages/shared/src/model/cli-project.ts
+// packages/shared/src/blueprint/actions.ts
+var ACTIONS = [
+  {
+    key: "write-event-marker",
+    summary: "Append a light append-only event marker doc",
+    implemented: true
+  },
+  {
+    key: "update-counts",
+    summary: "Bump per-session counters (events/prompts/errors/tools)",
+    implemented: true
+  },
+  {
+    key: "flush-transcript-chunk",
+    summary: "Tail the transcript \u2192 append chunk docs",
+    implemented: true
+  },
+  { key: "write-summary", summary: "Write summary:<id> at session end", implemented: true },
+  {
+    key: "upload-blobs",
+    summary: "Upload summary.json + transcript.jsonl to S3",
+    implemented: true
+  },
+  {
+    key: "seed-session-start",
+    summary: "Reset counters + seed the chunk offset at start",
+    implemented: true
+  },
+  {
+    key: "announce-recording",
+    summary: "Tell the user, in the transcript, whether and where this session is recorded",
+    implemented: true
+  },
+  {
+    key: "inject-recall-policy",
+    summary: "Prime the session with the recall policy + how much history this cwd has",
+    implemented: true
+  },
+  { key: "enrich-metadata", summary: "Post additional session metadata", implemented: false },
+  {
+    key: "extract-feature",
+    summary: "Map-reduce feature extraction (urls/repos/PRs/\u2026)",
+    implemented: false
+  },
+  { key: "detect-memory-write", summary: "Flag Edit/Write to memory paths", implemented: false },
+  { key: "app-log", summary: "Emit an operational log record (app-logs DB)", implemented: false },
+  {
+    key: "index-for-search",
+    summary: "Push derived content to the search backend",
+    implemented: false
+  },
+  {
+    key: "reconcile-session",
+    summary: "Finalize a stale running session from chunks/S3",
+    implemented: false
+  }
+];
+var BINDINGS = [
+  {
+    event: "SessionStart",
+    actions: [
+      "seed-session-start",
+      "write-event-marker",
+      "announce-recording",
+      "inject-recall-policy"
+    ]
+  },
+  {
+    event: "UserPromptSubmit",
+    actions: ["write-event-marker", "update-counts", "flush-transcript-chunk"]
+  },
+  {
+    event: "PostToolUse",
+    actions: ["write-event-marker", "update-counts", "flush-transcript-chunk"]
+  },
+  {
+    event: "PostToolUseFailure",
+    actions: ["write-event-marker", "update-counts", "flush-transcript-chunk"]
+  },
+  { event: "Stop", actions: ["write-event-marker", "flush-transcript-chunk"] },
+  { event: "SubagentStart", actions: ["write-event-marker", "update-counts"] },
+  { event: "SubagentStop", actions: ["write-event-marker", "update-counts"] },
+  { event: "StopFailure", actions: ["write-event-marker", "update-counts"] },
+  { event: "PreCompact", actions: ["write-event-marker"] },
+  { event: "PostCompact", actions: ["write-event-marker"] },
+  { event: "SessionEnd", actions: ["flush-transcript-chunk", "write-summary", "upload-blobs"] }
+];
+// packages/shared/src/blueprint/cli-project.ts
 var isFlag = (a) => a.name.startsWith("--");
 function cliArgType(a) {
   if (a.type)
@@ -380,7 +467,7 @@ ${lines.join(`
 `;
 }
-// packages/shared/src/model/cli.ts
+// packages/shared/src/blueprint/cli.ts
 var WEBAPI = {
   name: "--webapi",
   type: "string",
@@ -673,14 +760,20 @@ var CLI_SPEC = {
       args: [
         {
           name: "action",
-          choices: ["run", "install", "uninstall", "status"],
+          choices: ["run", "upload", "install", "uninstall", "status"],
           default: "status",
-          description: "`run` reads one event payload from stdin (Claude Code calls this)"
+          description: "`run` reads one event payload from stdin (Claude Code calls this); `upload` " + "ships one transcript to S3 (SessionEnd starts it detached)"
         },
         { name: "--dry-run", description: "with `install`: show the change without writing" },
         {
           name: "--force",
           description: "with `install`: register even if the plugin already does"
+        },
+        { name: "--session", type: "string", description: "with `upload`: the session id" },
+        {
+          name: "--transcript",
+          type: "string",
+          description: "with `upload`: the transcript file to ship"
         }
       ],
       examples: ["hook status", "hook install --dry-run"]
@@ -717,1398 +810,1415 @@ var CLI_SPEC = {
   ]
 };
-// packages/shared/src/couch-url.ts
-var DEFAULT_COUCHDB_HOST = "127.0.0.1";
-var DEFAULT_COUCHDB_PORT = "7652";
-function trimTrailingSlash(url) {
-  return url.replace(/\/+$/, "");
-}
-function resolveCouchUrl(env = {}) {
-  const explicit = env.COUCHDB_URL?.trim();
-  if (explicit) {
-    const withScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(explicit) ? explicit : `http://${explicit}`;
-    return trimTrailingSlash(withScheme);
-  }
-  const host = env.COUCHDB_HOST || DEFAULT_COUCHDB_HOST;
-  const port = env.COUCHDB_PORT || DEFAULT_COUCHDB_PORT;
-  return `http://${host}:${port}`;
-}
-// packages/shared/src/highlight.ts
-var HIGHLIGHT_PRE = "\uE000";
-var HIGHLIGHT_POST = "\uE001";
-function stripHighlightMarks(marked) {
-  return marked.replaceAll(HIGHLIGHT_PRE, "").replaceAll(HIGHLIGHT_POST, "");
-}
-// packages/shared/src/migrations/designs.ts
-var CHUNK_ENTRIES_MAP = `function (doc) {
-  if (doc.type !== "chunk" || !doc.entries) return;
-  for (var i = 0; i < doc.entries.length; i++) {
-    var e = doc.entries[i];
-    if (!e || !e.role) continue;
-    emit([doc.session_id, doc.byte_start, i], {
-      role: e.role,
-      timestamp: e.timestamp || "",
-      text: e.text || "",
-      toolUses: e.toolUses || null,
-      toolUseId: e.toolUseId || null,
-      isError: e.isError || false,
-      isSidechain: e.isSidechain || false,
-      kind: e.kind || null
-    });
-  }
-}`;
-var CHUNKS_DESIGN = {
-  _id: "_design/chunks",
-  language: "javascript",
-  views: {
-    by_session: {
-      map: 'function(doc){if(doc.type==="chunk"){emit([doc.session_id,doc.byte_start],{byte_start:doc.byte_start,byte_end:doc.byte_end,entry_count:doc.entry_count});}}'
-    },
-    entry_count_by_session: {
-      map: 'function(doc){if(doc.type==="chunk"){emit(doc.session_id,doc.entry_count||0);}}',
-      reduce: "_sum"
-    },
-    entries_by_session: { map: CHUNK_ENTRIES_MAP, reduce: "_count" }
-  }
-};
-var INITIAL_DESIGNS = [
+// packages/shared/src/blueprint/env.ts
+var ENV_VARS = [
   {
-    _id: "_design/sessions",
-    language: "javascript",
-    views: {
-      by_date: {
-        map: 'function(doc){if(doc.type==="summary"){var t=doc.timestamp.split(/[-T:]/);emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],{session_id:doc.session_id,event_count:doc.event_count,prompt_count:doc.prompt_count,error_count:doc.error_count,cwd:doc.cwd});}}',
-        reduce: "_count"
-      },
-      by_cwd: {
-        map: 'function(doc){if(doc.type==="summary"){emit([doc.cwd,doc.timestamp],{session_id:doc.session_id,event_count:doc.event_count,prompt_count:doc.prompt_count});}}',
-        reduce: "_count"
-      }
-    }
+    name: "IMAGE_NS",
+    scope: "image",
+    description: "registry host/org for pulled images, e.g. ghcr.io/OWNER"
   },
+  { name: "COUCHDB_TAG", scope: "image", default: "3", description: "CouchDB image tag" },
+  { name: "GARAGE_TAG", scope: "image", default: "v2.3.0", description: "Garage image tag" },
+  { name: "GARAGE_UI_TAG", scope: "image", default: "1.1.0", description: "Garage UI image tag" },
+  { name: "FOSSIL_TAG", scope: "image", default: "2.28", description: "Fossil image tag" },
+  { name: "MEILI_TAG", scope: "image", default: "v1.10", description: "Meilisearch image tag" },
   {
-    _id: "_design/events",
-    language: "javascript",
-    views: {
-      by_session: {
-        map: 'function(doc){if(doc.type==="event"){emit([doc.session_id,doc.timestamp],{event:doc.event,tool_name:doc.tool_name||null,input_preview:doc.input_preview||doc.prompt_preview||doc.error_preview||null});}}'
-      },
-      by_type: {
-        map: 'function(doc){if(doc.type==="event"){var t=doc.timestamp.split(/[-T:]/);emit([doc.event,parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],1);}}',
-        reduce: "_count"
-      }
-    }
+    name: "MEILI_UI_TAG",
+    scope: "image",
+    default: "latest",
+    description: "Meilisearch UI image tag"
   },
+  { name: "APP_TAG", scope: "image", default: "latest", description: "app image tag" },
+  { name: "WEBAPI_PORT", scope: "port", default: "7650", description: "webapi host port" },
+  { name: "WEBUI_PORT", scope: "port", default: "7651", description: "webui dev-server host port" },
+  { name: "COUCHDB_PORT", scope: "port", default: "7652", description: "CouchDB host port" },
   {
-    _id: "_design/tools",
-    language: "javascript",
-    views: {
-      usage: {
-        map: 'function(doc){if(doc.type==="event"&&doc.tool_name){var t=doc.timestamp.split(/[-T:]/);emit([doc.tool_name,parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],1);}}',
-        reduce: "_count"
-      },
-      failures: {
-        map: 'function(doc){if(doc.event==="PostToolUseFailure"){emit([doc.tool_name,doc.timestamp],{session_id:doc.session_id,error_preview:doc.error_preview,cwd:doc.cwd});}}'
-      },
-      errors: {
-        map: 'function(doc){if(doc.event==="PostToolUseFailure"||doc.error){emit([doc.tool_name||"unknown",doc.timestamp],{session_id:doc.session_id,error_preview:doc.error_preview||doc.error,cwd:doc.cwd});}}'
-      }
-    }
+    name: "GARAGE_S3_PORT",
+    scope: "port",
+    default: "7653",
+    description: "Garage S3 API host port"
   },
   {
-    _id: "_design/activity",
-    language: "javascript",
-    views: {
-      timeline: {
-        map: 'function(doc){if(doc.type==="event"){var t=doc.timestamp.split(/[-T:]/);emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2]),parseInt(t[3])],1);}}',
-        reduce: "_count"
-      }
-    }
+    name: "GARAGE_ADMIN_PORT",
+    scope: "port",
+    default: "7654",
+    description: "Garage admin API host port"
   },
-  CHUNKS_DESIGN,
   {
-    _id: "_design/session_meta",
-    language: "javascript",
-    views: {
-      start_meta: {
-        map: 'function(doc){if(doc.event==="SessionStart"){emit(doc.session_id,{timestamp:doc.timestamp,model:doc.model||"",cwd:doc.cwd||"",hostname:doc.hostname||""});}}'
-      },
-      tokens_by_date: {
-        map: 'function(doc){if(doc.type==="summary"&&doc.token_usage){var t=doc.timestamp.split(/[-T:]/);var u=doc.token_usage;emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],{input:u.input||0,output:u.output||0,cacheCreation:u.cacheCreation||0,cacheRead:u.cacheRead||0,total:u.total||0,sessions:1});}}',
-        reduce: "_sum"
-      }
-    }
-  }
-];
-// packages/shared/src/migrations/session-index.ts
-var AGGREGATE_MAP = `function (doc) {
-  if (!doc.session_id) return;
-  // A \`chunk\` doc contributes transcript coverage ONLY \u2014 no timestamps, no counts \u2014
-  // so every other metric keeps the exact meaning it had before chunks were indexed.
-  // \`chunkEntries\` counts turns the chunk view can actually serve (byte-range-only
-  // chunks carry no \`entries[]\`), while \`chunkBytes\` tracks raw byte coverage.
-  if (doc.type === "chunk") {
-    emit(doc.session_id, {
-      ended: 0, events: 0, prompts: 0, errors: 0, started: 0, tools: {},
-      first: "", last: "", model: "", cwd: "", hostname: "",
-      modelAt: "", cwdAt: "", hostnameAt: "", summary: null,
-      chunkEntries: doc.entries ? doc.entries.length : 0,
-      chunkBytes: doc.byte_end || 0
-    });
-    return;
-  }
-  if (doc.type !== "event" && doc.type !== "summary") return;
-  var isSummary = doc.type === "summary";
-  var ts = doc.timestamp || "";
-  var model = (doc.event === "SessionStart" || isSummary) ? (doc.model || "") : "";
-  var tools = {};
-  if (doc.event === "PostToolUse" && doc.tool_name) tools[doc.tool_name] = 1;
-  emit(doc.session_id, {
-    ended: isSummary ? 1 : 0,
-    events: doc.type === "event" ? 1 : 0,
-    prompts: doc.event === "UserPromptSubmit" ? 1 : 0,
-    errors: doc.event === "PostToolUseFailure" ? 1 : 0,
-    started: doc.event === "SessionStart" ? 1 : 0,
-    tools: tools,
-    first: ts,
-    last: ts,
-    model: model,
-    cwd: doc.cwd || "",
-    hostname: doc.hostname || "",
-    modelAt: model ? ts : "",
-    cwdAt: doc.cwd ? ts : "",
-    hostnameAt: doc.hostname ? ts : "",
-    summary: isSummary ? {
-      event_count: doc.event_count || 0,
-      prompt_count: doc.prompt_count || 0,
-      error_count: doc.error_count || 0,
-      tool_counts: doc.tool_counts || {},
-      end_reason: doc.end_reason || "",
-      transcript_bytes: doc.transcript_bytes || 0,
-      token_usage: doc.token_usage || null,
-      timestamp: doc.timestamp || "",
-      source: doc.source || ""
-    } : null,
-    chunkEntries: 0,
-    chunkBytes: 0
-  });
-}`;
-var AGGREGATE_REDUCE = `function (keys, values, rereduce) {
-  var acc = { ended:0, events:0, prompts:0, errors:0, started:0, tools:{}, first:"", last:"", model:"", cwd:"", hostname:"", modelAt:"", cwdAt:"", hostnameAt:"", summary:null, chunkEntries:0, chunkBytes:0 };
-  // Keep the earliest-stamped value; an unstamped one sorts last, ties go to the smaller value.
-  function earliest(v, f) {
-    var val = v[f];
-    if (!val) return;
-    var at = v[f + "At"] || "", a = at || "\\uffff", b = acc[f + "At"] || "\\uffff";
-    if (acc[f] === "" || a < b || (a === b && val < acc[f])) { acc[f] = val; acc[f + "At"] = at; }
-  }
-  for (var i = 0; i < values.length; i++) {
-    var v = values[i];
-    if (!v) continue;
-    acc.chunkEntries += v.chunkEntries || 0;
-    if ((v.chunkBytes || 0) > acc.chunkBytes) acc.chunkBytes = v.chunkBytes;
-    acc.ended += v.ended || 0;
-    acc.events += v.events || 0;
-    acc.prompts += v.prompts || 0;
-    acc.errors += v.errors || 0;
-    acc.started += v.started || 0;
-    if (v.last && v.last > acc.last) acc.last = v.last;
-    if (v.first && (acc.first === "" || v.first < acc.first)) acc.first = v.first;
-    earliest(v, "model");
-    earliest(v, "cwd");
-    earliest(v, "hostname");
-    // A session has one \`summary:<id>\` doc, so there is only ever one to keep.
-    if (v.summary) acc.summary = v.summary;
-    var t = v.tools || {};
-    for (var k in t) { if (t.hasOwnProperty(k)) acc.tools[k] = (acc.tools[k] || 0) + t[k]; }
-  }
-  var names = Object.keys(acc.tools).sort(), tools = {};
-  for (var j = 0; j < names.length; j++) tools[names[j]] = acc.tools[names[j]];
-  acc.tools = tools;
-  return acc;
-}`;
-var EVENT_TIMES_MAP = `function (doc) {
-  if (!doc.session_id || !doc.timestamp) return;
-  if (doc.type !== "event" && doc.type !== "summary") return;
-  emit(doc.session_id, doc.timestamp);
-}`;
-var SESSION_INDEX_DESIGN = {
-  _id: "_design/session_index",
-  language: "javascript",
-  views: {
-    aggregate: { map: AGGREGATE_MAP, reduce: AGGREGATE_REDUCE },
-    event_times: { map: EVENT_TIMES_MAP }
-  }
-};
-// packages/shared/src/migrations/speaker-split.ts
-var BY_ROLE_MAP = `function (doc) {
-  if (doc.type !== "chunk" || !doc.entries) return;
-  for (var i = 0; i < doc.entries.length; i++) {
-    var e = doc.entries[i];
-    if (!e || !e.role) continue;
-    emit([doc.session_id, e.role, doc.byte_start, i], {
-      role: e.role,
-      timestamp: e.timestamp || "",
-      text: e.text || "",
-      toolUses: e.toolUses || null,
-      toolUseId: e.toolUseId || null,
-      isError: e.isError || false
-    });
-  }
-}`;
-var BY_ROLE_TIME_MAP = `function (doc) {
-  if (doc.type !== "chunk" || !doc.entries) return;
-  for (var i = 0; i < doc.entries.length; i++) {
-    var e = doc.entries[i];
-    if (!e || !e.role) continue;
-    emit([e.role, e.timestamp || "", doc.session_id, doc.byte_start, i], {
-      sessionId: doc.session_id,
-      cwd: doc.cwd || "",
-      role: e.role,
-      timestamp: e.timestamp || "",
-      text: e.text || ""
-    });
-  }
-}`;
-var SPEAKER_SPLIT_DESIGN = {
-  _id: "_design/speaker_split",
-  language: "javascript",
-  views: {
-    by_role: { map: BY_ROLE_MAP, reduce: "_count" },
-    by_role_time: { map: BY_ROLE_TIME_MAP, reduce: "_count" }
-  }
-};
-// packages/shared/src/migrations/registry.ts
-var initialSchema = {
-  id: 1,
-  name: "initial-schema",
-  async up(ctx) {
-    for (const design of INITIAL_DESIGNS) {
-      ctx.log(`+ ${design._id}`);
-      const { _rev, ...body } = design;
-      await ctx.putDoc(design._id, body);
-    }
-  },
-  async down(ctx) {
-    for (const design of INITIAL_DESIGNS) {
-      ctx.log(`- ${design._id}`);
-      await ctx.deleteDoc(design._id);
-    }
-  }
-};
-var sessionIndexView = {
-  id: 2,
-  name: "session-index-view",
-  async up(ctx) {
-    ctx.log(`+ ${SESSION_INDEX_DESIGN._id}`);
-    const { _rev, ...body } = SESSION_INDEX_DESIGN;
-    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`- ${SESSION_INDEX_DESIGN._id}`);
-    await ctx.deleteDoc(SESSION_INDEX_DESIGN._id);
-  }
-};
-var sessionIndexSource = {
-  id: 3,
-  name: "session-index-source",
-  async up(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (emit summary.source)`);
-    const { _rev, ...body } = SESSION_INDEX_DESIGN;
-    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (source field left in place \u2014 additive)`);
-  }
-};
-var speakerSplitView = {
-  id: 4,
-  name: "speaker-split-view",
-  async up(ctx) {
-    ctx.log(`+ ${SPEAKER_SPLIT_DESIGN._id}`);
-    const { _rev, ...body } = SPEAKER_SPLIT_DESIGN;
-    await ctx.putDoc(SPEAKER_SPLIT_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`- ${SPEAKER_SPLIT_DESIGN._id}`);
-    await ctx.deleteDoc(SPEAKER_SPLIT_DESIGN._id);
-  }
-};
-var speakerSplitTimeView = {
-  id: 5,
-  name: "speaker-split-time-view",
-  async up(ctx) {
-    ctx.log(`~ ${SPEAKER_SPLIT_DESIGN._id} (add by_role_time)`);
-    const { _rev, ...body } = SPEAKER_SPLIT_DESIGN;
-    await ctx.putDoc(SPEAKER_SPLIT_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`~ ${SPEAKER_SPLIT_DESIGN._id} (by_role_time left in place \u2014 additive)`);
-  }
-};
-var chunkEntriesView = {
-  id: 6,
-  name: "chunk-entries-view",
-  async up(ctx) {
-    ctx.log(`~ ${CHUNKS_DESIGN._id} (add entries_by_session)`);
-    const { _rev, ...body } = CHUNKS_DESIGN;
-    await ctx.putDoc(CHUNKS_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`~ ${CHUNKS_DESIGN._id} (entries_by_session left in place \u2014 additive)`);
-  }
-};
-var sessionIndexChunkCoverage = {
-  id: 7,
-  name: "session-index-chunk-coverage",
-  async up(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (emit chunk coverage)`);
-    const { _rev, ...body } = SESSION_INDEX_DESIGN;
-    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (chunk coverage left in place \u2014 additive)`);
-  }
-};
-var chunkEntryKind = {
-  id: 8,
-  name: "chunk-entry-kind",
-  async up(ctx) {
-    ctx.log(`~ ${CHUNKS_DESIGN._id} (emit entry kind)`);
-    const { _rev, ...body } = CHUNKS_DESIGN;
-    await ctx.putDoc(CHUNKS_DESIGN._id, body);
+    name: "GARAGE_WEBUI_PORT",
+    scope: "port",
+    default: "7655",
+    description: "Garage web UI host port"
   },
-  async down(ctx) {
-    ctx.log(`~ ${CHUNKS_DESIGN._id} (kind left in place \u2014 additive)`);
-  }
-};
-var sessionIndexEventTimes = {
-  id: 9,
-  name: "session-index-event-times",
-  async up(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (add event_times view)`);
-    const { _rev, ...body } = SESSION_INDEX_DESIGN;
-    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
+  { name: "MEILI_PORT", scope: "port", default: "7656", description: "Meilisearch host port" },
+  {
+    name: "MEILI_UI_PORT",
+    scope: "port",
+    default: "7657",
+    description: "Meilisearch UI host port"
   },
-  async down(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (event_times left in place \u2014 additive)`);
-  }
-};
-var sessionIndexDeterministic = {
-  id: 10,
-  name: "session-index-deterministic",
-  async up(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (earliest model/cwd/hostname)`);
-    const { _rev, ...body } = SESSION_INDEX_DESIGN;
-    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
+  {
+    name: "FOSSIL_PORT",
+    scope: "port",
+    default: "7658",
+    description: "Fossil web UI + sync host port"
   },
-  async down(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (deterministic pick left in place)`);
-  }
-};
-var MIGRATIONS = [
-  initialSchema,
-  sessionIndexView,
-  sessionIndexSource,
-  speakerSplitView,
-  speakerSplitTimeView,
-  chunkEntriesView,
-  sessionIndexChunkCoverage,
-  chunkEntryKind,
-  sessionIndexEventTimes,
-  sessionIndexDeterministic
-];
-function latestVersion() {
-  return MIGRATIONS.reduce((max, m) => Math.max(max, m.id), 0);
-}
-function docTransformsBetween(from, to, migrations = MIGRATIONS) {
-  return migrations.filter((m) => m.id > from && m.id <= to && m.transformsDocs === true).sort((a, b) => a.id - b.id).map((m) => ({ id: m.id, name: m.name }));
-}
-// packages/shared/src/model/actions.ts
-var ACTIONS = [
+  { name: "WEBAPI_HOST", scope: "host", default: "127.0.0.1", description: "webapi bind host" },
+  { name: "WEBUI_HOST", scope: "host", default: "127.0.0.1", description: "webui bind host" },
+  { name: "CT_STATIC_DIR", scope: "host", description: "prebuilt SPA dir (prod image only)" },
+  { name: "CT_VERSION", scope: "host", description: "baked release version" },
+  {
+    name: "COUCHDB_URL",
+    scope: "endpoint",
+    description: "full CouchDB base URL; wins over COUCHDB_HOST/PORT (https + path prefix OK)"
+  },
+  { name: "COUCHDB_HOST", scope: "endpoint", default: "127.0.0.1", description: "CouchDB host" },
+  { name: "COUCHDB_USER", scope: "secret", description: "CouchDB admin (blank in bundled dev)" },
   {
-    key: "write-event-marker",
-    summary: "Append a light append-only event marker doc",
-    implemented: true
+    name: "COUCHDB_PASSWORD",
+    scope: "secret",
+    description: "CouchDB password (blank in bundled dev)"
   },
   {
-    key: "update-counts",
-    summary: "Bump per-session counters (events/prompts/errors/tools)",
-    implemented: true
+    name: "S3_ENDPOINT",
+    scope: "endpoint",
+    default: "http://127.0.0.1:7653",
+    description: "S3 endpoint URL"
   },
+  { name: "S3_REGION", scope: "endpoint", default: "garage", description: "S3 region" },
+  { name: "S3_ACCESS_KEY", scope: "secret", description: "app-facing S3 access key" },
+  { name: "S3_SECRET_KEY", scope: "secret", description: "app-facing S3 secret key" },
+  { name: "GARAGE_RPC_SECRET", scope: "secret", description: "Garage internal RPC secret" },
+  { name: "GARAGE_ADMIN_TOKEN", scope: "secret", description: "Garage admin token" },
+  { name: "GARAGE_METRICS_TOKEN", scope: "secret", description: "Garage metrics token" },
   {
-    key: "flush-transcript-chunk",
-    summary: "Tail the transcript \u2192 append chunk docs",
-    implemented: true
+    name: "MEILI_HOST",
+    scope: "endpoint",
+    default: "http://127.0.0.1:7656",
+    description: "Meilisearch endpoint URL"
   },
-  { key: "write-summary", summary: "Write summary:<id> at session end", implemented: true },
   {
-    key: "upload-blobs",
-    summary: "Upload summary.json + transcript.jsonl to S3",
-    implemented: true
+    name: "FOSSIL_URL",
+    scope: "endpoint",
+    default: "http://127.0.0.1:7658",
+    description: "Fossil server base URL (serves each repository at /<name>/)"
   },
   {
-    key: "seed-session-start",
-    summary: "Reset counters + seed the chunk offset at start",
-    implemented: true
+    name: "MEILI_API_KEY",
+    scope: "secret",
+    description: "Meilisearch master key (blank in bundled dev)"
+  }
+];
+// packages/shared/src/blueprint/hooks.ts
+var HOOK_TYPES = [
+  {
+    event: "SessionStart",
+    category: "session-start",
+    canBlock: false,
+    wired: true,
+    summary: "A session begins, resumes, is cleared, or restarts after compaction \u2014 `source` \u2208 `startup`/`resume`/`clear`/`compact`. The per-session entry point."
   },
   {
-    key: "announce-recording",
-    summary: "Tell the user, in the transcript, whether and where this session is recorded",
-    implemented: true
+    event: "Setup",
+    category: "session-start",
+    canBlock: false,
+    wired: false,
+    ignoreReason: "Env/setup signal, not session activity.",
+    summary: "The CLI runs in init/maintenance mode (e.g. `--init-only`) \u2014 one-time environment setup."
   },
   {
-    key: "inject-recall-policy",
-    summary: "Prime the session with the recall policy + how much history this cwd has",
-    implemented: true
+    event: "InstructionsLoaded",
+    category: "session-start",
+    canBlock: false,
+    wired: false,
+    ignoreReason: "Instruction-load audit \u2014 out of Tier-1 scope.",
+    summary: "`CLAUDE.md` / `.claude/rules/*.md` instruction files are loaded \u2014 `load_reason` records why. Observability of which instructions applied."
   },
-  { key: "enrich-metadata", summary: "Post additional session metadata", implemented: false },
   {
-    key: "extract-feature",
-    summary: "Map-reduce feature extraction (urls/repos/PRs/\u2026)",
-    implemented: false
+    event: "UserPromptSubmit",
+    category: "turn-input",
+    canBlock: true,
+    wired: true,
+    summary: "The user submits a prompt, before Claude sees it. Can block or inject context."
   },
-  { key: "detect-memory-write", summary: "Flag Edit/Write to memory paths", implemented: false },
-  { key: "app-log", summary: "Emit an operational log record (app-logs DB)", implemented: false },
   {
-    key: "index-for-search",
-    summary: "Push derived content to the search backend",
-    implemented: false
+    event: "UserPromptExpansion",
+    category: "turn-input",
+    canBlock: true,
+    wired: false,
+    ignoreReason: "Slash-command expansion \u2014 redundant with `UserPromptSubmit`.",
+    summary: "A slash command / skill prompt is expanded/templated before use."
   },
   {
-    key: "reconcile-session",
-    summary: "Finalize a stale running session from chunks/S3",
-    implemented: false
-  }
-];
-var BINDINGS = [
+    event: "PreToolUse",
+    category: "tool",
+    canBlock: true,
+    wired: false,
+    ignoreReason: "Blocking pre-hook; an observe-only writer gains nothing \u2014 `PostToolUse` captures the outcome.",
+    summary: "Before a tool executes \u2014 `tool_name` + `tool_input` available. Can block or modify the input."
+  },
   {
-    event: "SessionStart",
-    actions: [
-      "seed-session-start",
-      "write-event-marker",
-      "announce-recording",
-      "inject-recall-policy"
-    ]
+    event: "PermissionRequest",
+    category: "tool",
+    canBlock: true,
+    wired: false,
+    ignoreReason: "Permission-dialog control hook, not session history.",
+    summary: "A permission dialog is about to be shown for a tool call."
   },
   {
-    event: "UserPromptSubmit",
-    actions: ["write-event-marker", "update-counts", "flush-transcript-chunk"]
+    event: "PermissionDenied",
+    category: "tool",
+    canBlock: false,
+    wired: false,
+    ignoreReason: "Permission control event, not session history.",
+    summary: "A tool call was denied (auto-classifier or user)."
   },
   {
     event: "PostToolUse",
-    actions: ["write-event-marker", "update-counts", "flush-transcript-chunk"]
+    category: "tool",
+    canBlock: false,
+    wired: true,
+    summary: "A tool succeeds \u2014 `tool_output` available. Can post-process the result."
   },
   {
     event: "PostToolUseFailure",
-    actions: ["write-event-marker", "update-counts", "flush-transcript-chunk"]
-  },
-  { event: "Stop", actions: ["write-event-marker", "flush-transcript-chunk"] },
-  { event: "SubagentStart", actions: ["write-event-marker", "update-counts"] },
-  { event: "SubagentStop", actions: ["write-event-marker", "update-counts"] },
-  { event: "StopFailure", actions: ["write-event-marker", "update-counts"] },
-  { event: "PreCompact", actions: ["write-event-marker"] },
-  { event: "PostCompact", actions: ["write-event-marker"] },
-  { event: "SessionEnd", actions: ["flush-transcript-chunk", "write-summary", "upload-blobs"] }
-];
-// packages/shared/src/model/env.ts
-var ENV_VARS = [
-  {
-    name: "IMAGE_NS",
-    scope: "image",
-    description: "registry host/org for pulled images, e.g. ghcr.io/OWNER"
+    category: "tool",
+    canBlock: false,
+    wired: true,
+    summary: "A tool fails \u2014 `error_message` available."
   },
-  { name: "COUCHDB_TAG", scope: "image", default: "3", description: "CouchDB image tag" },
-  { name: "GARAGE_TAG", scope: "image", default: "v2.3.0", description: "Garage image tag" },
-  { name: "GARAGE_UI_TAG", scope: "image", default: "1.1.0", description: "Garage UI image tag" },
-  { name: "MEILI_TAG", scope: "image", default: "v1.10", description: "Meilisearch image tag" },
   {
-    name: "MEILI_UI_TAG",
-    scope: "image",
-    default: "latest",
-    description: "Meilisearch UI image tag"
+    event: "PostToolBatch",
+    category: "tool",
+    canBlock: true,
+    wired: false,
+    ignoreReason: "Batch boundary; the individual `PostToolUse` events are already captured.",
+    summary: "A batch of parallel tool calls resolves."
   },
-  { name: "APP_TAG", scope: "image", default: "latest", description: "app image tag" },
-  { name: "WEBAPI_PORT", scope: "port", default: "7650", description: "webapi host port" },
-  { name: "WEBUI_PORT", scope: "port", default: "7651", description: "webui dev-server host port" },
-  { name: "COUCHDB_PORT", scope: "port", default: "7652", description: "CouchDB host port" },
   {
-    name: "GARAGE_S3_PORT",
-    scope: "port",
-    default: "7653",
-    description: "Garage S3 API host port"
+    event: "SubagentStart",
+    category: "subagent",
+    canBlock: false,
+    wired: true,
+    summary: "A subagent is spawned \u2014 `agent_type`, `agent_id`, `task_description`."
   },
   {
-    name: "GARAGE_ADMIN_PORT",
-    scope: "port",
-    default: "7654",
-    description: "Garage admin API host port"
+    event: "SubagentStop",
+    category: "subagent",
+    canBlock: true,
+    wired: true,
+    summary: "A subagent finishes \u2014 `summary` of its work."
   },
   {
-    name: "GARAGE_WEBUI_PORT",
-    scope: "port",
-    default: "7655",
-    description: "Garage web UI host port"
+    event: "TeammateIdle",
+    category: "subagent",
+    canBlock: true,
+    wired: false,
+    ignoreReason: "Team orchestration, not session history.",
+    summary: "A team teammate goes idle."
   },
-  { name: "MEILI_PORT", scope: "port", default: "7656", description: "Meilisearch host port" },
   {
-    name: "MEILI_UI_PORT",
-    scope: "port",
-    default: "7657",
-    description: "Meilisearch UI host port"
+    event: "TaskCreated",
+    category: "subagent",
+    canBlock: true,
+    wired: false,
+    ignoreReason: "Task orchestration, not session history.",
+    summary: "A task is created via `TaskCreate`."
   },
-  { name: "WEBAPI_HOST", scope: "host", default: "127.0.0.1", description: "webapi bind host" },
-  { name: "WEBUI_HOST", scope: "host", default: "127.0.0.1", description: "webui bind host" },
-  { name: "CT_STATIC_DIR", scope: "host", description: "prebuilt SPA dir (prod image only)" },
-  { name: "CT_VERSION", scope: "host", description: "baked release version" },
   {
-    name: "COUCHDB_URL",
-    scope: "endpoint",
-    description: "full CouchDB base URL; wins over COUCHDB_HOST/PORT (https + path prefix OK)"
+    event: "TaskCompleted",
+    category: "subagent",
+    canBlock: true,
+    wired: false,
+    ignoreReason: "Task orchestration, not session history.",
+    summary: "A task is marked complete."
   },
-  { name: "COUCHDB_HOST", scope: "endpoint", default: "127.0.0.1", description: "CouchDB host" },
-  { name: "COUCHDB_USER", scope: "secret", description: "CouchDB admin (blank in bundled dev)" },
   {
-    name: "COUCHDB_PASSWORD",
-    scope: "secret",
-    description: "CouchDB password (blank in bundled dev)"
+    event: "MessageDisplay",
+    category: "display",
+    canBlock: false,
+    wired: false,
+    ignoreReason: "UX event; the message content is already in the transcript.",
+    summary: "An assistant message is streamed/displayed to the user."
   },
   {
-    name: "S3_ENDPOINT",
-    scope: "endpoint",
-    default: "http://127.0.0.1:7653",
-    description: "S3 endpoint URL"
+    event: "Elicitation",
+    category: "display",
+    canBlock: true,
+    wired: false,
+    ignoreReason: "MCP interaction control hook; an observe-only writer gains nothing.",
+    summary: "An MCP server requests user input."
   },
-  { name: "S3_REGION", scope: "endpoint", default: "garage", description: "S3 region" },
-  { name: "S3_ACCESS_KEY", scope: "secret", description: "app-facing S3 access key" },
-  { name: "S3_SECRET_KEY", scope: "secret", description: "app-facing S3 secret key" },
-  { name: "GARAGE_RPC_SECRET", scope: "secret", description: "Garage internal RPC secret" },
-  { name: "GARAGE_ADMIN_TOKEN", scope: "secret", description: "Garage admin token" },
-  { name: "GARAGE_METRICS_TOKEN", scope: "secret", description: "Garage metrics token" },
   {
-    name: "MEILI_HOST",
-    scope: "endpoint",
-    default: "http://127.0.0.1:7656",
-    description: "Meilisearch endpoint URL"
+    event: "ElicitationResult",
+    category: "display",
+    canBlock: true,
+    wired: false,
+    ignoreReason: "MCP interaction event; the content is in the transcript.",
+    summary: "The user responds to an elicitation."
   },
   {
-    name: "MEILI_API_KEY",
-    scope: "secret",
-    description: "Meilisearch master key (blank in bundled dev)"
-  }
-];
-// packages/shared/src/model/hooks.ts
-var HOOK_TYPES = [
-  {
-    event: "SessionStart",
-    category: "session-start",
+    event: "Notification",
+    category: "display",
     canBlock: false,
-    wired: true,
-    summary: "A session begins, resumes, is cleared, or restarts after compaction \u2014 `source` \u2208 `startup`/`resume`/`clear`/`compact`. The per-session entry point."
+    wired: false,
+    ignoreReason: "UX notification, not session history.",
+    summary: "Claude Code emits a notification (`permission_prompt`, `idle_prompt`, `auth_success`, \u2026)."
   },
   {
-    event: "Setup",
-    category: "session-start",
+    event: "CwdChanged",
+    category: "environment",
     canBlock: false,
     wired: false,
-    ignoreReason: "Env/setup signal, not session activity.",
-    summary: "The CLI runs in init/maintenance mode (e.g. `--init-only`) \u2014 one-time environment setup."
+    ignoreReason: "Host signal, out of session scope.",
+    summary: "The working directory changes during a session."
   },
   {
-    event: "InstructionsLoaded",
-    category: "session-start",
+    event: "FileChanged",
+    category: "environment",
     canBlock: false,
     wired: false,
-    ignoreReason: "Instruction-load audit \u2014 out of Tier-1 scope.",
-    summary: "`CLAUDE.md` / `.claude/rules/*.md` instruction files are loaded \u2014 `load_reason` records why. Observability of which instructions applied."
+    ignoreReason: "Watcher signal, out of session scope.",
+    summary: "A watched file changes on disk."
   },
   {
-    event: "UserPromptSubmit",
-    category: "turn-input",
+    event: "ConfigChange",
+    category: "environment",
     canBlock: true,
-    wired: true,
-    summary: "The user submits a prompt, before Claude sees it. Can block or inject context."
+    wired: false,
+    ignoreReason: "Config-change signal, out of session scope.",
+    summary: "A settings/config/skills file changes during the session (`user_settings`, `project_settings`, \u2026)."
   },
   {
-    event: "UserPromptExpansion",
-    category: "turn-input",
+    event: "WorktreeCreate",
+    category: "worktree",
     canBlock: true,
     wired: false,
-    ignoreReason: "Slash-command expansion \u2014 redundant with `UserPromptSubmit`.",
-    summary: "A slash command / skill prompt is expanded/templated before use."
+    ignoreReason: "Git-worktree lifecycle, irrelevant to session logging.",
+    summary: "A git worktree is created (`--worktree`)."
   },
   {
-    event: "PreToolUse",
-    category: "tool",
-    canBlock: true,
+    event: "WorktreeRemove",
+    category: "worktree",
+    canBlock: false,
     wired: false,
-    ignoreReason: "Blocking pre-hook; an observe-only writer gains nothing \u2014 `PostToolUse` captures the outcome.",
-    summary: "Before a tool executes \u2014 `tool_name` + `tool_input` available. Can block or modify the input."
+    ignoreReason: "Git-worktree lifecycle, irrelevant to session logging.",
+    summary: "A git worktree is removed."
   },
   {
-    event: "PermissionRequest",
-    category: "tool",
+    event: "PreCompact",
+    category: "compaction",
     canBlock: true,
-    wired: false,
-    ignoreReason: "Permission-dialog control hook, not session history.",
-    summary: "A permission dialog is about to be shown for a tool call."
+    wired: true,
+    summary: "Before context compaction \u2014 `trigger` \u2208 `manual`/`auto`."
   },
   {
-    event: "PermissionDenied",
-    category: "tool",
+    event: "PostCompact",
+    category: "compaction",
     canBlock: false,
-    wired: false,
-    ignoreReason: "Permission control event, not session history.",
-    summary: "A tool call was denied (auto-classifier or user)."
+    wired: true,
+    summary: "After compaction completes \u2014 `trigger` \u2208 `manual`/`auto`."
   },
   {
-    event: "PostToolUse",
-    category: "tool",
+    event: "Stop",
+    category: "turn-end",
+    canBlock: true,
+    wired: true,
+    summary: "Claude finishes responding to a turn \u2014 `turn_number`, `assistant_message`."
+  },
+  {
+    event: "StopFailure",
+    category: "turn-end",
     canBlock: false,
     wired: true,
-    summary: "A tool succeeds \u2014 `tool_output` available. Can post-process the result."
+    summary: "A turn ends with an API error \u2014 `rate_limit`, `overloaded`, `max_output_tokens`, \u2026 A turn-level failure (see the crash note in the doc)."
   },
   {
-    event: "PostToolUseFailure",
-    category: "tool",
+    event: "SessionEnd",
+    category: "session-end",
     canBlock: false,
     wired: true,
-    summary: "A tool fails \u2014 `error_message` available."
+    summary: "The session terminates \u2014 `reason` \u2208 `clear`/`resume`/`logout`/`prompt_input_exit`/`bypass_permissions_disabled`/`other`."
+  }
+];
+function hookLaunch(command) {
+  return `cd / && ${command}`;
+}
+var PLUGIN_HOOK_COMMAND = hookLaunch('bun run "${CLAUDE_PLUGIN_ROOT}/scripts/dispatch.ts"');
+// packages/shared/src/blueprint/recall.ts
+var RECALL_MODES = ["off", "suggest", "auto"];
+var RECALL_SCOPES = ["project", "host", "all"];
+var DEFAULT_RECALL = {
+  mode: "auto",
+  scope: "project",
+  maxResults: 5,
+  maxSnippetChars: 400,
+  triggers: { priorWorkQuestion: true, repeatedError: true, beforeRederiving: true },
+  excludeCwdGlobs: [],
+  primer: { onSessionStart: true, maxTokens: 200 }
+};
+var RECALL_ENV = {
+  mode: "CLAUDE_PLUGIN_OPTION_RECALL_MODE",
+  scope: "CLAUDE_PLUGIN_OPTION_RECALL_SCOPE",
+  maxResults: "CLAUDE_PLUGIN_OPTION_MAX_RESULTS"
+};
+function resolveRecall(fromConfig, env = {}) {
+  const c = fromConfig ?? {};
+  const merged = {
+    ...DEFAULT_RECALL,
+    ...stripUndefined(c),
+    triggers: { ...DEFAULT_RECALL.triggers, ...stripUndefined(c.triggers ?? {}) },
+    primer: { ...DEFAULT_RECALL.primer, ...stripUndefined(c.primer ?? {}) },
+    excludeCwdGlobs: c.excludeCwdGlobs ?? DEFAULT_RECALL.excludeCwdGlobs
+  };
+  const mode = env[RECALL_ENV.mode];
+  if (mode && RECALL_MODES.includes(mode))
+    merged.mode = mode;
+  const scope = env[RECALL_ENV.scope];
+  if (scope && RECALL_SCOPES.includes(scope))
+    merged.scope = scope;
+  const max = Number(env[RECALL_ENV.maxResults]);
+  if (Number.isInteger(max) && max > 0)
+    merged.maxResults = max;
+  return merged;
+}
+function stripUndefined(o) {
+  const out = {};
+  for (const [k, v] of Object.entries(o))
+    if (v !== undefined)
+      out[k] = v;
+  return out;
+}
+function scopeFlag(scope, cwd, hostname) {
+  switch (scope) {
+    case "project":
+      return `--cwd "${cwd}"`;
+    case "host":
+      return `--hostname "${hostname}"`;
+    default:
+      return "";
+  }
+}
+function daysAgo(iso, now) {
+  if (!iso)
+    return "";
+  const d = Math.floor((now - Date.parse(iso)) / 86400000);
+  if (!Number.isFinite(d))
+    return "";
+  return d <= 0 ? "today" : d === 1 ? "yesterday" : `${d} days ago`;
+}
+function recallPrimer(policy, facts, where, now = Date.now()) {
+  if (policy.mode === "off" || !policy.primer.onSessionStart)
+    return null;
+  if (facts.sessionCount <= 0)
+    return null;
+  const scopeWord = { project: "this project", host: "this host", all: "all projects" }[policy.scope];
+  const recent = daysAgo(facts.mostRecent, now);
+  const flag = scopeFlag(policy.scope, where.cwd, where.hostname);
+  const when = [];
+  if (policy.triggers.priorWorkQuestion)
+    when.push("a question about why existing code or a decision is the way it is");
+  if (policy.triggers.repeatedError)
+    when.push("an error that looks familiar");
+  if (policy.triggers.beforeRederiving)
+    when.push("re-deriving something that looks like prior work here");
+  const action = policy.mode === "auto" ? "search history first" : "offer to search history, and search if the user agrees";
+  return [
+    `Session history for ${scopeWord} is available via \`claude-transcripts search "<query>" ${flag} --json --limit ${policy.maxResults}\`.`,
+    `${facts.sessionCount} recorded session${facts.sessionCount === 1 ? "" : "s"} in scope${recent ? `, most recent ${recent}` : ""}.`,
+    when.length ? `Before answering ${joinOr(when)}, ${action}.` : "",
+    `Cite the session id and date. Snippets only, never a whole transcript; max ${policy.maxResults} results. See the \`recall\` skill.`
+  ].filter(Boolean).join(" ");
+}
+function joinOr(items) {
+  if (items.length <= 1)
+    return items[0] ?? "";
+  return `${items.slice(0, -1).join(", ")}, or ${items[items.length - 1]}`;
+}
+// packages/shared/src/blueprint/routes.ts
+var ROUTES = [
+  {
+    path: "/",
+    serves: "machine-readable app manifest (agent entrypoint)",
+    nav: { label: "App manifest", section: "Reference" }
   },
   {
-    event: "PostToolBatch",
-    category: "tool",
-    canBlock: true,
-    wired: false,
-    ignoreReason: "Batch boundary; the individual `PostToolUse` events are already captured.",
-    summary: "A batch of parallel tool calls resolves."
+    path: "/health",
+    serves: "liveness + store reachability",
+    nav: { label: "Health", section: "Reference" }
+  },
+  { path: "/api", serves: "app JSON API (the gateway)" },
+  {
+    path: "/api/docs",
+    serves: "Scalar API reference (renders the OpenAPI spec)",
+    nav: { label: "API reference", section: "Reference" }
+  },
+  {
+    path: "/api/openapi.json",
+    serves: "OpenAPI spec (contract source of truth)",
+    nav: { label: "OpenAPI spec", section: "Reference" }
+  },
+  { path: "/api/couch/*", serves: "read-only CouchDB proxy" },
+  { path: "/api/s3/*", serves: "read-only S3 proxy" },
+  { path: "/api/fossil/*", serves: "read-only Fossil JSON API proxy" },
+  { path: "/api/sessions", serves: "session list / detail / transcript / turns" },
+  { path: "/api/turns", serves: "turns across all sessions, time-ordered by speaker" },
+  { path: "/api/search", serves: "full-text search over sessions + conversation content" },
+  {
+    path: "/api/ingest",
+    serves: "curated write surface (summary/events/chunks/transcript, reset)"
+  },
+  { path: "/api/migrate", serves: "schema migration status / up / down" },
+  {
+    path: "/api/blueprint",
+    serves: "app blueprint introspection (services/hooks/actions/env)",
+    nav: { label: "App blueprint", section: "Reference" }
+  },
+  { path: "/app", serves: "webui SPA" },
+  {
+    path: "/docs",
+    serves: "rendered technical docs",
+    nav: { label: "Technical docs", section: "Reference" }
+  },
+  {
+    path: "/cli/download",
+    serves: "the bundled CLI binary",
+    nav: { label: "Download CLI", section: "Install" }
+  }
+];
+// packages/shared/src/blueprint/services.ts
+var RELEASE_IMAGE_NS = "ghcr.io/vredchenko";
+var SERVICES = [
+  {
+    key: "webapi",
+    name: "webapi",
+    role: "gateway",
+    ports: [{ internal: 7650, hostEnv: "WEBAPI_PORT", defaultHost: 7650 }],
+    runsOnHostInDev: true,
+    notes: "The I/O gateway + stability column. In deploy it runs as the `app` image."
+  },
+  {
+    key: "webui",
+    name: "webui",
+    role: "webui",
+    ports: [{ internal: 7651, hostEnv: "WEBUI_PORT", defaultHost: 7651 }],
+    runsOnHostInDev: true,
+    notes: "Vite dev server in dev; built SPA served by the app at /app in prod."
+  },
+  {
+    key: "cli",
+    name: "cli",
+    role: "cli",
+    runsOnHostInDev: true,
+    notes: "User-facing CLI; no port."
+  },
+  {
+    key: "couchdb",
+    name: "CouchDB",
+    role: "backing",
+    image: { name: "couchdb", tagEnv: "COUCHDB_TAG", defaultTag: "3", upstream: "couchdb" },
+    ports: [
+      { internal: 5984, hostEnv: "COUCHDB_PORT", defaultHost: 7652, label: "HTTP API + Fauxton" }
+    ],
+    adminUiServiceKey: "couchdbFauxton",
+    adminUiPath: "/_utils/",
+    holds: "databases",
+    volumes: [{ host: "./data/couchdb", container: "/opt/couchdb/data" }],
+    containerEnv: {
+      COUCHDB_USER: "${COUCHDB_USER:-admin}",
+      COUCHDB_PASSWORD: "${COUCHDB_PASSWORD:-admin}"
+    },
+    healthcheck: { test: ["CMD", "curl", "-f", "http://localhost:5984/_up"] },
+    notes: "Source of truth. Bundled dev = fixed default admin (CouchDB 3 requires one)."
   },
   {
-    event: "SubagentStart",
-    category: "subagent",
-    canBlock: false,
-    wired: true,
-    summary: "A subagent is spawned \u2014 `agent_type`, `agent_id`, `task_description`."
+    key: "garage",
+    name: "Garage (S3)",
+    role: "backing",
+    image: {
+      name: "garage",
+      tagEnv: "GARAGE_TAG",
+      defaultTag: "v2.3.0",
+      upstream: "dxflrs/garage"
+    },
+    ports: [
+      { internal: 3900, hostEnv: "GARAGE_S3_PORT", defaultHost: 7653, label: "S3 API" },
+      { internal: 3903, hostEnv: "GARAGE_ADMIN_PORT", defaultHost: 7654, label: "admin API" }
+    ],
+    holds: "buckets",
+    volumes: [
+      { host: "./data/garage/meta", container: "/var/lib/garage/meta" },
+      { host: "./data/garage/data", container: "/var/lib/garage/data" },
+      { host: "./garage.toml", container: "/etc/garage.toml", readonly: true }
+    ],
+    containerEnv: {
+      GARAGE_RPC_SECRET: "${GARAGE_RPC_SECRET}",
+      GARAGE_ADMIN_TOKEN: "${GARAGE_ADMIN_TOKEN}",
+      GARAGE_METRICS_TOKEN: "${GARAGE_METRICS_TOKEN}"
+    },
+    healthcheck: { test: ["CMD", "/garage", "status"] },
+    notes: "Distroless image \u2014 healthcheck uses the bundled CLI."
   },
   {
-    event: "SubagentStop",
-    category: "subagent",
-    canBlock: true,
-    wired: true,
-    summary: "A subagent finishes \u2014 `summary` of its work."
+    key: "garage-ui",
+    name: "Garage Web UI",
+    role: "admin-ui",
+    image: {
+      name: "garage-ui",
+      tagEnv: "GARAGE_UI_TAG",
+      defaultTag: "1.1.0",
+      upstream: "khairul169/garage-webui"
+    },
+    ports: [{ internal: 3909, hostEnv: "GARAGE_WEBUI_PORT", defaultHost: 7655 }],
+    adminUiServiceKey: "garageWebui",
+    dependsOn: ["garage"],
+    containerEnv: {
+      API_BASE_URL: "http://garage:3903",
+      API_ADMIN_KEY: "${GARAGE_ADMIN_TOKEN}",
+      S3_ENDPOINT_URL: "http://garage:3900",
+      S3_REGION: "garage"
+    }
   },
   {
-    event: "TeammateIdle",
-    category: "subagent",
-    canBlock: true,
-    wired: false,
-    ignoreReason: "Team orchestration, not session history.",
-    summary: "A team teammate goes idle."
+    key: "fossil",
+    name: "Fossil",
+    role: "backing",
+    image: {
+      name: "fossil",
+      tagEnv: "FOSSIL_TAG",
+      defaultTag: "2.28",
+      build: { context: "./fossil" }
+    },
+    ports: [{ internal: 8080, hostEnv: "FOSSIL_PORT", defaultHost: 7658, label: "web UI + sync" }],
+    adminUiServiceKey: "fossil",
+    holds: "repositories",
+    volumes: [{ host: "./data/fossil", container: "/museum" }],
+    containerEnv: { FOSSIL_REPOSITORIES: "${FOSSIL_REPOSITORIES:-claude-transcripts-sessions}" },
+    tcpHealth: { port: 8080 },
+    notes: "Version control (repos + web UI) from one static binary. Read by the webapi (read-only JSON API proxy); nothing writes it yet. Seeds the repositories named in config on start (anonymous read-only); serves every <name>.fossil under /museum."
   },
   {
-    event: "TaskCreated",
-    category: "subagent",
-    canBlock: true,
-    wired: false,
-    ignoreReason: "Task orchestration, not session history.",
-    summary: "A task is created via `TaskCreate`."
+    key: "meilisearch",
+    name: "Meilisearch",
+    role: "backing",
+    image: {
+      name: "meilisearch",
+      tagEnv: "MEILI_TAG",
+      defaultTag: "v1.10",
+      upstream: "getmeili/meilisearch"
+    },
+    ports: [{ internal: 7700, hostEnv: "MEILI_PORT", defaultHost: 7656 }],
+    adminUiServiceKey: "meilisearch",
+    holds: "indexes",
+    volumes: [{ host: "./data/meilisearch", container: "/meili_data" }],
+    containerEnv: { MEILI_ENV: "development" },
+    notes: "Derived search index (optional/removable). Built-in UI on /."
   },
   {
-    event: "TaskCompleted",
-    category: "subagent",
-    canBlock: true,
-    wired: false,
-    ignoreReason: "Task orchestration, not session history.",
-    summary: "A task is marked complete."
+    key: "meilisearch-ui",
+    name: "Meilisearch UI",
+    role: "admin-ui",
+    image: {
+      name: "meilisearch-ui",
+      tagEnv: "MEILI_UI_TAG",
+      defaultTag: "v0.14.1",
+      upstream: "riccoxie/meilisearch-ui"
+    },
+    ports: [{ internal: 24900, hostEnv: "MEILI_UI_PORT", defaultHost: 7657 }],
+    adminUiServiceKey: "meilisearchUi",
+    dependsOn: ["meilisearch"]
   },
   {
-    event: "MessageDisplay",
-    category: "display",
-    canBlock: false,
-    wired: false,
-    ignoreReason: "UX event; the message content is already in the transcript.",
-    summary: "An assistant message is streamed/displayed to the user."
-  },
+    key: "app",
+    name: "app (combined image)",
+    role: "app",
+    image: { name: "app", tagEnv: "APP_TAG", defaultTag: "latest" },
+    ports: [{ internal: 7650, hostEnv: "WEBAPI_PORT", defaultHost: 7650 }],
+    profiles: ["app"],
+    dependsOn: ["couchdb", "garage", "meilisearch", "fossil"],
+    envFile: "../.env",
+    containerEnv: {
+      WEBAPI_HOST: "0.0.0.0",
+      WEBAPI_PORT: "7650",
+      COUCHDB_URL: "http://couchdb:5984",
+      S3_ENDPOINT: "http://garage:3900",
+      MEILI_HOST: "http://meilisearch:7700",
+      FOSSIL_URL: "http://fossil:8080"
+    },
+    httpHealth: { path: "/health", port: 7650 },
+    notes: "webapi + webui SPA + Scalar + bundled CLI; serves /app + /api."
+  }
+];
+// packages/shared/src/blueprint/topology.ts
+var TOPOLOGY_NODES = [
   {
-    event: "Elicitation",
-    category: "display",
-    canBlock: true,
-    wired: false,
-    ignoreReason: "MCP interaction control hook; an observe-only writer gains nothing.",
-    summary: "An MCP server requests user input."
+    key: "claude-code",
+    label: "Claude Code",
+    caption: "your sessions",
+    role: "producer",
+    icon: "claude",
+    rank: 0,
+    lane: "write",
+    level: "compact",
+    summary: "Fires a hook event at each session lifecycle point."
   },
   {
-    event: "ElicitationResult",
-    category: "display",
-    canBlock: true,
-    wired: false,
-    ignoreReason: "MCP interaction event; the content is in the transcript.",
-    summary: "The user responds to an elicitation."
+    key: "webui",
+    serviceKey: "webui",
+    caption: "browse",
+    role: "client",
+    rank: 0,
+    lane: "read",
+    level: "compact",
+    summary: "React SPA. Optional \u2014 losing it costs the UI, not the data."
   },
   {
-    event: "Notification",
-    category: "display",
-    canBlock: false,
-    wired: false,
-    ignoreReason: "UX notification, not session history.",
-    summary: "Claude Code emits a notification (`permission_prompt`, `idle_prompt`, `auth_success`, \u2026)."
+    key: "cli",
+    serviceKey: "cli",
+    caption: "script",
+    role: "client",
+    rank: 0,
+    lane: "read",
+    level: "compact",
+    summary: "User-facing CLI and admin utility."
   },
   {
-    event: "CwdChanged",
-    category: "environment",
-    canBlock: false,
-    wired: false,
-    ignoreReason: "Host signal, out of session scope.",
-    summary: "The working directory changes during a session."
+    key: "agents",
+    label: "agents",
+    caption: "query",
+    role: "client",
+    rank: 0,
+    lane: "read",
+    level: "compact",
+    summary: "Anything that speaks the OpenAPI contract."
   },
   {
-    event: "FileChanged",
-    category: "environment",
-    canBlock: false,
-    wired: false,
-    ignoreReason: "Watcher signal, out of session scope.",
-    summary: "A watched file changes on disk."
+    key: "hook",
+    label: "hook",
+    caption: "the writer",
+    role: "writer",
+    rank: 1,
+    lane: "write",
+    level: "compact",
+    ref: "design/decisions/0016-webapi-is-the-io-gateway.md",
+    summary: "Writes each event, the end-of-session summary and the transcript blob directly, so recording never depends on the webapi being up."
   },
   {
-    event: "ConfigChange",
-    category: "environment",
-    canBlock: true,
-    wired: false,
-    ignoreReason: "Config-change signal, out of session scope.",
-    summary: "A settings/config/skills file changes during the session (`user_settings`, `project_settings`, \u2026)."
+    key: "webapi",
+    serviceKey: "webapi",
+    caption: "the I/O gateway",
+    role: "gateway",
+    icon: "mark",
+    rank: 2,
+    lane: "read",
+    level: "compact",
+    ref: "design/decisions/0016-webapi-is-the-io-gateway.md",
+    summary: "Every read goes through it; writes are never proxied."
   },
   {
-    event: "WorktreeCreate",
-    category: "worktree",
-    canBlock: true,
-    wired: false,
-    ignoreReason: "Git-worktree lifecycle, irrelevant to session logging.",
-    summary: "A git worktree is created (`--worktree`)."
+    key: "couchdb",
+    serviceKey: "couchdb",
+    label: "CouchDB",
+    caption: "source of truth",
+    role: "store",
+    icon: "couchdb",
+    rank: 3,
+    lane: "store",
+    level: "compact",
+    summary: "Events, summaries and chunks. Append-only."
   },
   {
-    event: "WorktreeRemove",
-    category: "worktree",
-    canBlock: false,
-    wired: false,
-    ignoreReason: "Git-worktree lifecycle, irrelevant to session logging.",
-    summary: "A git worktree is removed."
+    key: "garage",
+    serviceKey: "garage",
+    label: "Garage",
+    caption: "transcript blobs",
+    role: "store",
+    icon: "garage",
+    rank: 3,
+    lane: "store",
+    level: "compact",
+    requiresFeature: "s3Blobs",
+    ref: "design/decisions/0014-transcripts-live-in-s3-only.md",
+    summary: "S3-compatible object storage \u2014 the transcript's sole durable home."
   },
   {
-    event: "PreCompact",
-    category: "compaction",
-    canBlock: true,
-    wired: true,
-    summary: "Before context compaction \u2014 `trigger` \u2208 `manual`/`auto`."
+    key: "meilisearch",
+    serviceKey: "meilisearch",
+    label: "Meilisearch",
+    caption: "derived index",
+    role: "index",
+    icon: "meilisearch",
+    rank: 3,
+    lane: "store",
+    level: "compact",
+    requiresFeature: "meilisearch",
+    summary: "Rebuildable full-text index. Optional \u2014 losing it costs search, not history."
   },
   {
-    event: "PostCompact",
-    category: "compaction",
-    canBlock: false,
-    wired: true,
-    summary: "After compaction completes \u2014 `trigger` \u2208 `manual`/`auto`."
+    key: "fossil",
+    serviceKey: "fossil",
+    label: "Fossil",
+    caption: "version control",
+    role: "store",
+    icon: "fossil",
+    rank: 3,
+    lane: "store",
+    level: "compact",
+    summary: "Repositories, wiki and tickets with a web UI, from one binary. Read through the gateway; nothing writes it yet."
   },
   {
-    event: "Stop",
-    category: "turn-end",
-    canBlock: true,
-    wired: true,
-    summary: "Claude finishes responding to a turn \u2014 `turn_number`, `assistant_message`."
+    key: "couchdb-fauxton",
+    serviceKey: "couchdb",
+    label: "Fauxton",
+    role: "admin-ui",
+    rank: 4,
+    lane: "store",
+    level: "expanded",
+    summary: "CouchDB's built-in admin UI, served at /_utils/."
   },
   {
-    event: "StopFailure",
-    category: "turn-end",
-    canBlock: false,
-    wired: true,
-    summary: "A turn ends with an API error \u2014 `rate_limit`, `overloaded`, `max_output_tokens`, \u2026 A turn-level failure (see the crash note in the doc)."
+    key: "garage-ui",
+    serviceKey: "garage-ui",
+    role: "admin-ui",
+    rank: 4,
+    lane: "store",
+    level: "expanded",
+    requiresFeature: "s3Blobs",
+    summary: "Bucket and access-key admin for Garage."
   },
   {
-    event: "SessionEnd",
-    category: "session-end",
-    canBlock: false,
-    wired: true,
-    summary: "The session terminates \u2014 `reason` \u2208 `clear`/`resume`/`logout`/`prompt_input_exit`/`bypass_permissions_disabled`/`other`."
+    key: "meilisearch-ui",
+    serviceKey: "meilisearch-ui",
+    role: "admin-ui",
+    rank: 4,
+    lane: "store",
+    level: "expanded",
+    requiresFeature: "meilisearch",
+    summary: "Index browser for Meilisearch."
   }
 ];
-function hookLaunch(command) {
-  return `cd / && ${command}`;
-}
-var PLUGIN_HOOK_COMMAND = hookLaunch('bun run "${CLAUDE_PLUGIN_ROOT}/scripts/dispatch.ts"');
-// packages/shared/src/model/recall.ts
-var RECALL_MODES = ["off", "suggest", "auto"];
-var RECALL_SCOPES = ["project", "host", "all"];
-var DEFAULT_RECALL = {
-  mode: "auto",
-  scope: "project",
-  maxResults: 5,
-  maxSnippetChars: 400,
-  triggers: { priorWorkQuestion: true, repeatedError: true, beforeRederiving: true },
-  excludeCwdGlobs: [],
-  primer: { onSessionStart: true, maxTokens: 200 }
-};
-var RECALL_ENV = {
-  mode: "CLAUDE_PLUGIN_OPTION_RECALL_MODE",
-  scope: "CLAUDE_PLUGIN_OPTION_RECALL_SCOPE",
-  maxResults: "CLAUDE_PLUGIN_OPTION_MAX_RESULTS"
-};
-function resolveRecall(fromConfig, env = {}) {
-  const c = fromConfig ?? {};
-  const merged = {
-    ...DEFAULT_RECALL,
-    ...stripUndefined(c),
-    triggers: { ...DEFAULT_RECALL.triggers, ...stripUndefined(c.triggers ?? {}) },
-    primer: { ...DEFAULT_RECALL.primer, ...stripUndefined(c.primer ?? {}) },
-    excludeCwdGlobs: c.excludeCwdGlobs ?? DEFAULT_RECALL.excludeCwdGlobs
-  };
-  const mode = env[RECALL_ENV.mode];
-  if (mode && RECALL_MODES.includes(mode))
-    merged.mode = mode;
-  const scope = env[RECALL_ENV.scope];
-  if (scope && RECALL_SCOPES.includes(scope))
-    merged.scope = scope;
-  const max = Number(env[RECALL_ENV.maxResults]);
-  if (Number.isInteger(max) && max > 0)
-    merged.maxResults = max;
-  return merged;
-}
-function stripUndefined(o) {
-  const out = {};
-  for (const [k, v] of Object.entries(o))
-    if (v !== undefined)
-      out[k] = v;
-  return out;
-}
-function scopeFlag(scope, cwd, hostname) {
-  switch (scope) {
-    case "project":
-      return `--cwd "${cwd}"`;
-    case "host":
-      return `--hostname "${hostname}"`;
-    default:
-      return "";
-  }
-}
-function daysAgo(iso, now) {
-  if (!iso)
-    return "";
-  const d = Math.floor((now - Date.parse(iso)) / 86400000);
-  if (!Number.isFinite(d))
-    return "";
-  return d <= 0 ? "today" : d === 1 ? "yesterday" : `${d} days ago`;
-}
-function recallPrimer(policy, facts, where, now = Date.now()) {
-  if (policy.mode === "off" || !policy.primer.onSessionStart)
-    return null;
-  if (facts.sessionCount <= 0)
-    return null;
-  const scopeWord = { project: "this project", host: "this host", all: "all projects" }[policy.scope];
-  const recent = daysAgo(facts.mostRecent, now);
-  const flag = scopeFlag(policy.scope, where.cwd, where.hostname);
-  const when = [];
-  if (policy.triggers.priorWorkQuestion)
-    when.push("a question about why existing code or a decision is the way it is");
-  if (policy.triggers.repeatedError)
-    when.push("an error that looks familiar");
-  if (policy.triggers.beforeRederiving)
-    when.push("re-deriving something that looks like prior work here");
-  const action = policy.mode === "auto" ? "search history first" : "offer to search history, and search if the user agrees";
-  return [
-    `Session history for ${scopeWord} is available via \`claude-transcripts search "<query>" ${flag} --json --limit ${policy.maxResults}\`.`,
-    `${facts.sessionCount} recorded session${facts.sessionCount === 1 ? "" : "s"} in scope${recent ? `, most recent ${recent}` : ""}.`,
-    when.length ? `Before answering ${joinOr(when)}, ${action}.` : "",
-    `Cite the session id and date. Snippets only, never a whole transcript; max ${policy.maxResults} results. See the \`recall\` skill.`
-  ].filter(Boolean).join(" ");
-}
-function joinOr(items) {
-  if (items.length <= 1)
-    return items[0] ?? "";
-  return `${items.slice(0, -1).join(", ")}, or ${items[items.length - 1]}`;
-}
-// packages/shared/src/model/routes.ts
-var ROUTES = [
-  { path: "/", serves: "machine-readable app manifest (agent entrypoint)" },
-  { path: "/health", serves: "liveness + store reachability" },
-  { path: "/api", serves: "app JSON API (the gateway)" },
-  { path: "/api/docs", serves: "Scalar API reference (renders the OpenAPI spec)" },
-  { path: "/api/openapi.json", serves: "OpenAPI spec (contract source of truth)" },
-  { path: "/api/couch/*", serves: "read-only CouchDB proxy" },
-  { path: "/api/s3/*", serves: "read-only S3 proxy" },
-  { path: "/api/sessions", serves: "session list / detail / transcript / turns" },
-  { path: "/api/turns", serves: "turns across all sessions, time-ordered by speaker" },
-  { path: "/api/search", serves: "full-text search over sessions + conversation content" },
+var TOPOLOGY_EDGES = [
   {
-    path: "/api/ingest",
-    serves: "curated write surface (summary/events/chunks/transcript, reset)"
+    from: "claude-code",
+    to: "hook",
+    kind: "emits",
+    label: "each event",
+    level: "compact",
+    note: "hooks/scripts/dispatch.ts pipes the payload to `claude-transcripts hook run` and always exits 0."
   },
-  { path: "/api/migrate", serves: "schema migration status / up / down" },
-  { path: "/api/model", serves: "app model introspection (services/hooks/actions/env)" },
-  { path: "/app", serves: "webui SPA" },
-  { path: "/docs", serves: "rendered technical docs" },
-  { path: "/cli/download", serves: "the bundled CLI binary" }
-];
-// packages/shared/src/model/services.ts
-var RELEASE_IMAGE_NS = "ghcr.io/vredchenko";
-var SERVICES = [
   {
-    key: "webapi",
-    name: "webapi",
-    role: "gateway",
-    ports: [{ internal: 7650, hostEnv: "WEBAPI_PORT", defaultHost: 7650 }],
-    runsOnHostInDev: true,
-    notes: "The I/O gateway + stability column. In deploy it runs as the `app` image."
+    from: "hook",
+    to: "couchdb",
+    kind: "direct-write",
+    label: "events + summary",
+    level: "compact",
+    ref: "design/decisions/0016-webapi-is-the-io-gateway.md",
+    note: "Written directly, not through the gateway, so a webapi outage never loses a session."
   },
   {
-    key: "webui",
-    name: "webui",
-    role: "webui",
-    ports: [{ internal: 7651, hostEnv: "WEBUI_PORT", defaultHost: 7651 }],
-    runsOnHostInDev: true,
-    notes: "Vite dev server in dev; built SPA served by the app at /app in prod."
+    from: "hook",
+    to: "garage",
+    kind: "direct-write",
+    label: "transcript",
+    level: "compact",
+    requiresFeature: "s3Blobs",
+    note: "The same bypass; transcript bytes live only in S3 (ADR 0014)."
   },
+  { from: "webui", to: "webapi", kind: "http-client", label: "HTTP", level: "compact" },
+  { from: "cli", to: "webapi", kind: "http-client", label: "HTTP", level: "compact" },
+  { from: "agents", to: "webapi", kind: "http-client", label: "HTTP", level: "compact" },
   {
-    key: "cli",
-    name: "cli",
-    role: "cli",
-    runsOnHostInDev: true,
-    notes: "User-facing CLI; no port."
+    from: "webapi",
+    to: "couchdb",
+    kind: "read-only-proxy",
+    label: "reads \xB7 /api/couch",
+    level: "compact"
   },
   {
-    key: "couchdb",
-    name: "CouchDB",
-    role: "backing",
-    image: { name: "couchdb", tagEnv: "COUCHDB_TAG", defaultTag: "3", upstream: "couchdb" },
-    ports: [
-      { internal: 5984, hostEnv: "COUCHDB_PORT", defaultHost: 7652, label: "HTTP API + Fauxton" }
-    ],
-    adminUiServiceKey: "couchdbFauxton",
-    adminUiPath: "/_utils/",
-    volumes: [{ host: "./data/couchdb", container: "/opt/couchdb/data" }],
-    containerEnv: {
-      COUCHDB_USER: "${COUCHDB_USER:-admin}",
-      COUCHDB_PASSWORD: "${COUCHDB_PASSWORD:-admin}"
-    },
-    healthcheck: { test: ["CMD", "curl", "-f", "http://localhost:5984/_up"] },
-    notes: "Source of truth. Bundled dev = fixed default admin (CouchDB 3 requires one)."
+    from: "webapi",
+    to: "garage",
+    kind: "read-only-proxy",
+    label: "reads \xB7 /api/s3",
+    level: "compact",
+    requiresFeature: "s3Blobs"
+  },
+  {
+    from: "webapi",
+    to: "fossil",
+    kind: "read-only-proxy",
+    label: "reads \xB7 /api/fossil",
+    level: "compact",
+    note: "Fossil's JSON API, allowlisted to read-only commands: over GET it would otherwise write."
+  },
+  {
+    from: "webapi",
+    to: "meilisearch",
+    kind: "indexes",
+    label: "search",
+    level: "compact",
+    requiresFeature: "meilisearch"
   },
   {
-    key: "garage",
-    name: "Garage (S3)",
-    role: "backing",
-    image: {
-      name: "garage",
-      tagEnv: "GARAGE_TAG",
-      defaultTag: "v2.3.0",
-      upstream: "dxflrs/garage"
-    },
-    ports: [
-      { internal: 3900, hostEnv: "GARAGE_S3_PORT", defaultHost: 7653, label: "S3 API" },
-      { internal: 3903, hostEnv: "GARAGE_ADMIN_PORT", defaultHost: 7654, label: "admin API" }
-    ],
-    volumes: [
-      { host: "./data/garage/meta", container: "/var/lib/garage/meta" },
-      { host: "./data/garage/data", container: "/var/lib/garage/data" },
-      { host: "./garage.toml", container: "/etc/garage.toml", readonly: true }
-    ],
-    containerEnv: {
-      GARAGE_RPC_SECRET: "${GARAGE_RPC_SECRET}",
-      GARAGE_ADMIN_TOKEN: "${GARAGE_ADMIN_TOKEN}",
-      GARAGE_METRICS_TOKEN: "${GARAGE_METRICS_TOKEN}"
-    },
-    healthcheck: { test: ["CMD", "/garage", "status"] },
-    notes: "Distroless image \u2014 healthcheck uses the bundled CLI."
+    from: "webapi",
+    to: "couchdb",
+    kind: "curated-write",
+    label: "/api/ingest",
+    level: "expanded",
+    note: "The curated write surface that owns the document shapes; writes are never proxied."
   },
   {
-    key: "garage-ui",
-    name: "Garage Web UI",
-    role: "admin-ui",
-    image: {
-      name: "garage-ui",
-      tagEnv: "GARAGE_UI_TAG",
-      defaultTag: "1.1.0",
-      upstream: "khairul169/garage-webui"
-    },
-    ports: [{ internal: 3909, hostEnv: "GARAGE_WEBUI_PORT", defaultHost: 7655 }],
-    adminUiServiceKey: "garageWebui",
-    dependsOn: ["garage"],
-    containerEnv: {
-      API_BASE_URL: "http://garage:3903",
-      API_ADMIN_KEY: "${GARAGE_ADMIN_TOKEN}",
-      S3_ENDPOINT_URL: "http://garage:3900",
-      S3_REGION: "garage"
-    }
+    from: "couchdb",
+    to: "webapi",
+    kind: "changes-follower",
+    label: "_changes",
+    level: "expanded",
+    note: "Exists because of the hook bypass: hook-written docs get no write-time validation."
   },
+  { from: "couchdb-fauxton", to: "couchdb", kind: "admin-of", level: "expanded" },
+  { from: "garage-ui", to: "garage", kind: "admin-of", level: "expanded" },
+  { from: "meilisearch-ui", to: "meilisearch", kind: "admin-of", level: "expanded" }
+];
+var TOPOLOGY_GROUPS = [
   {
-    key: "meilisearch",
-    name: "Meilisearch",
-    role: "backing",
-    image: {
-      name: "meilisearch",
-      tagEnv: "MEILI_TAG",
-      defaultTag: "v1.10",
-      upstream: "getmeili/meilisearch"
-    },
-    ports: [{ internal: 7700, hostEnv: "MEILI_PORT", defaultHost: 7656 }],
-    adminUiServiceKey: "meilisearch",
-    volumes: [{ host: "./data/meilisearch", container: "/meili_data" }],
-    containerEnv: { MEILI_ENV: "development" },
-    notes: "Derived search index (optional/removable). Built-in UI on /."
+    key: "clients",
+    title: "read / query",
+    members: ["webui", "cli", "agents"],
+    level: "compact"
   },
   {
-    key: "meilisearch-ui",
-    name: "Meilisearch UI",
-    role: "admin-ui",
-    image: {
-      name: "meilisearch-ui",
-      tagEnv: "MEILI_UI_TAG",
-      defaultTag: "v0.14.1",
-      upstream: "riccoxie/meilisearch-ui"
+    key: "stores",
+    title: "your infrastructure",
+    members: ["couchdb", "garage", "meilisearch", "fossil"],
+    level: "compact"
+  }
+];
+var TOPOLOGY = {
+  nodes: TOPOLOGY_NODES,
+  edges: TOPOLOGY_EDGES,
+  groups: TOPOLOGY_GROUPS
+};
+// packages/shared/src/blueprint/user-settings.ts
+var DEFAULT_USER_SETTINGS = {
+  sessionListPageSize: 100,
+  transcriptPageSize: 100,
+  transcriptAutoLoadMax: 2000
+};
+var LIMITS = {
+  sessionListPageSize: 500,
+  transcriptPageSize: 500,
+  transcriptAutoLoadMax: 50000
+};
+function resolveUserSettings(fromConfig) {
+  const c = fromConfig ?? {};
+  return {
+    sessionListPageSize: clamp(c.sessionListPageSize, "sessionListPageSize"),
+    transcriptPageSize: clamp(c.transcriptPageSize, "transcriptPageSize"),
+    transcriptAutoLoadMax: clamp(c.transcriptAutoLoadMax, "transcriptAutoLoadMax")
+  };
+}
+function clamp(value, key) {
+  const fallback = DEFAULT_USER_SETTINGS[key];
+  if (typeof value !== "number" || !Number.isFinite(value))
+    return fallback;
+  const rounded = Math.floor(value);
+  if (rounded < 1)
+    return fallback;
+  return Math.min(rounded, LIMITS[key]);
+}
+// packages/shared/src/blueprint/build.ts
+var STALE_TEMPLATE_LINKS = {
+  couchdbFauxton: "http://127.0.0.1:7652/_utils/",
+  garageWebui: "http://127.0.0.1:7655/",
+  meilisearch: "http://127.0.0.1:7656/"
+};
+function buildServicesMenu(services, fromConfig) {
+  const derived = {};
+  for (const s of services) {
+    if (!s.adminUiServiceKey)
+      continue;
+    const port = s.resolvedPorts?.[0]?.host;
+    if (!port)
+      continue;
+    const path = s.adminUiPath ?? "/";
+    derived[s.adminUiServiceKey] = `http://127.0.0.1:${port}${path}`;
+  }
+  const configured = Object.entries(fromConfig).filter(([k, v]) => STALE_TEMPLATE_LINKS[k] !== v);
+  return { ...derived, ...Object.fromEntries(configured) };
+}
+var FOSSIL_REPOSITORY_NAME = /^[A-Za-z0-9_][A-Za-z0-9_-]*$/;
+function resolveRepositories(config) {
+  const repositories = {
+    sessions: "claude-transcripts-sessions",
+    ...config.fossil?.repositories ?? {}
+  };
+  for (const [key, name] of Object.entries(repositories)) {
+    if (!FOSSIL_REPOSITORY_NAME.test(name)) {
+      throw new Error(`config: fossil.repositories.${key} = ${JSON.stringify(name)} \u2014 use letters, digits, '-' and '_' (not starting with '-')`);
+    }
+  }
+  return repositories;
+}
+function buildAppBlueprint(config, env = {}) {
+  const version = env.CT_VERSION ?? "0.0.0-dev";
+  const services = SERVICES.map((s) => ({
+    ...s,
+    resolvedPorts: (s.ports ?? []).map((p) => ({
+      internal: p.internal,
+      host: env[p.hostEnv] ? Number(env[p.hostEnv]) : p.defaultHost,
+      label: p.label
+    }))
+  }));
+  return {
+    identity: {
+      codename: "claude-transcripts",
+      slug: config.app?.name ?? "claude-transcripts",
+      title: "Claude Transcripts",
+      version,
+      repository: "https://github.com/vredchenko/claude-transcripts"
     },
-    ports: [{ internal: 24900, hostEnv: "MEILI_UI_PORT", defaultHost: 7657 }],
-    adminUiServiceKey: "meilisearchUi",
-    dependsOn: ["meilisearch"]
-  },
-  {
-    key: "app",
-    name: "app (combined image)",
-    role: "app",
-    image: { name: "app", tagEnv: "APP_TAG", defaultTag: "latest" },
-    ports: [{ internal: 7650, hostEnv: "WEBAPI_PORT", defaultHost: 7650 }],
-    profiles: ["app"],
-    dependsOn: ["couchdb", "garage", "meilisearch"],
-    envFile: "../.env",
-    containerEnv: {
-      WEBAPI_HOST: "0.0.0.0",
-      WEBAPI_PORT: "7650",
-      COUCHDB_URL: "http://couchdb:5984",
-      S3_ENDPOINT: "http://garage:3900",
-      MEILI_HOST: "http://meilisearch:7700"
+    services,
+    stores: {
+      databases: { ...config.couchdb.databases },
+      buckets: { ...config.s3.buckets },
+      indexes: { ...config.meilisearch?.indexes },
+      repositories: resolveRepositories(config)
     },
-    httpHealth: { path: "/health", port: 7650 },
-    notes: "webapi + webui SPA + Scalar + bundled CLI; serves /app + /api."
+    hooks: HOOK_TYPES,
+    actions: ACTIONS,
+    bindings: BINDINGS,
+    routes: ROUTES,
+    topology: TOPOLOGY,
+    env: ENV_VARS,
+    features: config.features,
+    servicesMenu: buildServicesMenu(services, config.servicesMenu),
+    system: config.system,
+    recall: resolveRecall(config.recall, env),
+    userSettings: resolveUserSettings(config.userSettings),
+    cliSpec: CLI_SPEC
+  };
+}
+// packages/shared/src/blueprint/k8s.ts
+var WORKLOAD_ROLES = new Set(["backing", "admin-ui", "app"]);
+// packages/shared/src/blueprint/project.ts
+function toStoreEnv(model) {
+  return { FOSSIL_REPOSITORIES: Object.values(model.stores.repositories).join(",") };
+}
+// packages/shared/src/couch-url.ts
+var DEFAULT_COUCHDB_HOST = "127.0.0.1";
+var DEFAULT_COUCHDB_PORT = "7652";
+function trimTrailingSlash(url) {
+  return url.replace(/\/+$/, "");
+}
+function resolveCouchUrl(env = {}) {
+  const explicit = env.COUCHDB_URL?.trim();
+  if (explicit) {
+    const withScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(explicit) ? explicit : `http://${explicit}`;
+    return trimTrailingSlash(withScheme);
+  }
+  const host = env.COUCHDB_HOST || DEFAULT_COUCHDB_HOST;
+  const port = env.COUCHDB_PORT || DEFAULT_COUCHDB_PORT;
+  return `http://${host}:${port}`;
+}
+// packages/shared/src/highlight.ts
+var HIGHLIGHT_PRE = "\uE000";
+var HIGHLIGHT_POST = "\uE001";
+function stripHighlightMarks(marked) {
+  return marked.replaceAll(HIGHLIGHT_PRE, "").replaceAll(HIGHLIGHT_POST, "");
+}
+// packages/shared/src/migrations/designs.ts
+var CHUNK_ENTRIES_MAP = `function (doc) {
+  if (doc.type !== "chunk" || !doc.entries) return;
+  for (var i = 0; i < doc.entries.length; i++) {
+    var e = doc.entries[i];
+    if (!e || !e.role) continue;
+    emit([doc.session_id, doc.byte_start, i], {
+      role: e.role,
+      timestamp: e.timestamp || "",
+      text: e.text || "",
+      toolUses: e.toolUses || null,
+      toolUseId: e.toolUseId || null,
+      isError: e.isError || false,
+      isSidechain: e.isSidechain || false,
+      kind: e.kind || null
+    });
+  }
+}`;
+var CHUNKS_DESIGN = {
+  _id: "_design/chunks",
+  language: "javascript",
+  views: {
+    by_session: {
+      map: 'function(doc){if(doc.type==="chunk"){emit([doc.session_id,doc.byte_start],{byte_start:doc.byte_start,byte_end:doc.byte_end,entry_count:doc.entry_count});}}'
+    },
+    entry_count_by_session: {
+      map: 'function(doc){if(doc.type==="chunk"){emit(doc.session_id,doc.entry_count||0);}}',
+      reduce: "_sum"
+    },
+    entries_by_session: { map: CHUNK_ENTRIES_MAP, reduce: "_count" }
   }
-];
-// packages/shared/src/model/topology.ts
-var TOPOLOGY_NODES = [
-  {
-    key: "claude-code",
-    label: "Claude Code",
-    caption: "your sessions",
-    role: "producer",
-    icon: "claude",
-    rank: 0,
-    lane: "write",
-    level: "compact",
-    summary: "Fires a hook event at each session lifecycle point."
-  },
-  {
-    key: "webui",
-    serviceKey: "webui",
-    caption: "browse",
-    role: "client",
-    rank: 0,
-    lane: "read",
-    level: "compact",
-    summary: "React SPA. Optional \u2014 losing it costs the UI, not the data."
-  },
-  {
-    key: "cli",
-    serviceKey: "cli",
-    caption: "script",
-    role: "client",
-    rank: 0,
-    lane: "read",
-    level: "compact",
-    summary: "User-facing CLI and admin utility."
-  },
-  {
-    key: "agents",
-    label: "agents",
-    caption: "query",
-    role: "client",
-    rank: 0,
-    lane: "read",
-    level: "compact",
-    summary: "Anything that speaks the OpenAPI contract."
-  },
-  {
-    key: "hook",
-    label: "hook",
-    caption: "the writer",
-    role: "writer",
-    rank: 1,
-    lane: "write",
-    level: "compact",
-    ref: "design/decisions/0016-webapi-is-the-io-gateway.md",
-    summary: "Writes each event, the end-of-session summary and the transcript blob directly, so recording never depends on the webapi being up."
-  },
-  {
-    key: "webapi",
-    serviceKey: "webapi",
-    caption: "the I/O gateway",
-    role: "gateway",
-    icon: "mark",
-    rank: 2,
-    lane: "read",
-    level: "compact",
-    ref: "design/decisions/0016-webapi-is-the-io-gateway.md",
-    summary: "Every read goes through it; writes are never proxied."
-  },
-  {
-    key: "couchdb",
-    serviceKey: "couchdb",
-    label: "CouchDB",
-    caption: "source of truth",
-    role: "store",
-    icon: "couchdb",
-    rank: 3,
-    lane: "store",
-    level: "compact",
-    summary: "Events, summaries and chunks. Append-only."
-  },
+};
+var INITIAL_DESIGNS = [
   {
-    key: "garage",
-    serviceKey: "garage",
-    label: "Garage",
-    caption: "transcript blobs",
-    role: "store",
-    icon: "garage",
-    rank: 3,
-    lane: "store",
-    level: "compact",
-    requiresFeature: "s3Blobs",
-    ref: "design/decisions/0014-transcripts-live-in-s3-only.md",
-    summary: "S3-compatible object storage \u2014 the transcript's sole durable home."
+    _id: "_design/sessions",
+    language: "javascript",
+    views: {
+      by_date: {
+        map: 'function(doc){if(doc.type==="summary"){var t=doc.timestamp.split(/[-T:]/);emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],{session_id:doc.session_id,event_count:doc.event_count,prompt_count:doc.prompt_count,error_count:doc.error_count,cwd:doc.cwd});}}',
+        reduce: "_count"
+      },
+      by_cwd: {
+        map: 'function(doc){if(doc.type==="summary"){emit([doc.cwd,doc.timestamp],{session_id:doc.session_id,event_count:doc.event_count,prompt_count:doc.prompt_count});}}',
+        reduce: "_count"
+      }
+    }
   },
   {
-    key: "meilisearch",
-    serviceKey: "meilisearch",
-    label: "Meilisearch",
-    caption: "derived index",
-    role: "index",
-    icon: "meilisearch",
-    rank: 3,
-    lane: "store",
-    level: "compact",
-    requiresFeature: "meilisearch",
-    summary: "Rebuildable full-text index. Optional \u2014 losing it costs search, not history."
+    _id: "_design/events",
+    language: "javascript",
+    views: {
+      by_session: {
+        map: 'function(doc){if(doc.type==="event"){emit([doc.session_id,doc.timestamp],{event:doc.event,tool_name:doc.tool_name||null,input_preview:doc.input_preview||doc.prompt_preview||doc.error_preview||null});}}'
+      },
+      by_type: {
+        map: 'function(doc){if(doc.type==="event"){var t=doc.timestamp.split(/[-T:]/);emit([doc.event,parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],1);}}',
+        reduce: "_count"
+      }
+    }
   },
   {
-    key: "couchdb-fauxton",
-    serviceKey: "couchdb",
-    label: "Fauxton",
-    role: "admin-ui",
-    rank: 4,
-    lane: "store",
-    level: "expanded",
-    summary: "CouchDB's built-in admin UI, served at /_utils/."
+    _id: "_design/tools",
+    language: "javascript",
+    views: {
+      usage: {
+        map: 'function(doc){if(doc.type==="event"&&doc.tool_name){var t=doc.timestamp.split(/[-T:]/);emit([doc.tool_name,parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],1);}}',
+        reduce: "_count"
+      },
+      failures: {
+        map: 'function(doc){if(doc.event==="PostToolUseFailure"){emit([doc.tool_name,doc.timestamp],{session_id:doc.session_id,error_preview:doc.error_preview,cwd:doc.cwd});}}'
+      },
+      errors: {
+        map: 'function(doc){if(doc.event==="PostToolUseFailure"||doc.error){emit([doc.tool_name||"unknown",doc.timestamp],{session_id:doc.session_id,error_preview:doc.error_preview||doc.error,cwd:doc.cwd});}}'
+      }
+    }
   },
   {
-    key: "garage-ui",
-    serviceKey: "garage-ui",
-    role: "admin-ui",
-    rank: 4,
-    lane: "store",
-    level: "expanded",
-    requiresFeature: "s3Blobs",
-    summary: "Bucket and access-key admin for Garage."
+    _id: "_design/activity",
+    language: "javascript",
+    views: {
+      timeline: {
+        map: 'function(doc){if(doc.type==="event"){var t=doc.timestamp.split(/[-T:]/);emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2]),parseInt(t[3])],1);}}',
+        reduce: "_count"
+      }
+    }
   },
+  CHUNKS_DESIGN,
   {
-    key: "meilisearch-ui",
-    serviceKey: "meilisearch-ui",
-    role: "admin-ui",
-    rank: 4,
-    lane: "store",
-    level: "expanded",
-    requiresFeature: "meilisearch",
-    summary: "Index browser for Meilisearch."
+    _id: "_design/session_meta",
+    language: "javascript",
+    views: {
+      start_meta: {
+        map: 'function(doc){if(doc.event==="SessionStart"){emit(doc.session_id,{timestamp:doc.timestamp,model:doc.model||"",cwd:doc.cwd||"",hostname:doc.hostname||""});}}'
+      },
+      tokens_by_date: {
+        map: 'function(doc){if(doc.type==="summary"&&doc.token_usage){var t=doc.timestamp.split(/[-T:]/);var u=doc.token_usage;emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],{input:u.input||0,output:u.output||0,cacheCreation:u.cacheCreation||0,cacheRead:u.cacheRead||0,total:u.total||0,sessions:1});}}',
+        reduce: "_sum"
+      }
+    }
+  }
+];
+// packages/shared/src/migrations/session-index.ts
+var AGGREGATE_MAP = `function (doc) {
+  if (!doc.session_id) return;
+  // A \`chunk\` doc contributes transcript coverage ONLY \u2014 no timestamps, no counts \u2014
+  // so every other metric keeps the exact meaning it had before chunks were indexed.
+  // \`chunkEntries\` counts turns the chunk view can actually serve (byte-range-only
+  // chunks carry no \`entries[]\`), while \`chunkBytes\` tracks raw byte coverage.
+  if (doc.type === "chunk") {
+    emit(doc.session_id, {
+      ended: 0, events: 0, prompts: 0, errors: 0, started: 0, tools: {},
+      first: "", last: "", model: "", cwd: "", hostname: "",
+      modelAt: "", cwdAt: "", hostnameAt: "", summary: null,
+      chunkEntries: doc.entries ? doc.entries.length : 0,
+      chunkBytes: doc.byte_end || 0
+    });
+    return;
+  }
+  if (doc.type !== "event" && doc.type !== "summary") return;
+  var isSummary = doc.type === "summary";
+  var ts = doc.timestamp || "";
+  var model = (doc.event === "SessionStart" || isSummary) ? (doc.model || "") : "";
+  var tools = {};
+  if (doc.event === "PostToolUse" && doc.tool_name) tools[doc.tool_name] = 1;
+  emit(doc.session_id, {
+    ended: isSummary ? 1 : 0,
+    events: doc.type === "event" ? 1 : 0,
+    prompts: doc.event === "UserPromptSubmit" ? 1 : 0,
+    errors: doc.event === "PostToolUseFailure" ? 1 : 0,
+    started: doc.event === "SessionStart" ? 1 : 0,
+    tools: tools,
+    first: ts,
+    last: ts,
+    model: model,
+    cwd: doc.cwd || "",
+    hostname: doc.hostname || "",
+    modelAt: model ? ts : "",
+    cwdAt: doc.cwd ? ts : "",
+    hostnameAt: doc.hostname ? ts : "",
+    summary: isSummary ? {
+      event_count: doc.event_count || 0,
+      prompt_count: doc.prompt_count || 0,
+      error_count: doc.error_count || 0,
+      tool_counts: doc.tool_counts || {},
+      end_reason: doc.end_reason || "",
+      transcript_bytes: doc.transcript_bytes || 0,
+      token_usage: doc.token_usage || null,
+      timestamp: doc.timestamp || "",
+      source: doc.source || ""
+    } : null,
+    chunkEntries: 0,
+    chunkBytes: 0
+  });
+}`;
+var AGGREGATE_REDUCE = `function (keys, values, rereduce) {
+  var acc = { ended:0, events:0, prompts:0, errors:0, started:0, tools:{}, first:"", last:"", model:"", cwd:"", hostname:"", modelAt:"", cwdAt:"", hostnameAt:"", summary:null, chunkEntries:0, chunkBytes:0 };
+  // Keep the earliest-stamped value; an unstamped one sorts last, ties go to the smaller value.
+  function earliest(v, f) {
+    var val = v[f];
+    if (!val) return;
+    var at = v[f + "At"] || "", a = at || "\\uffff", b = acc[f + "At"] || "\\uffff";
+    if (acc[f] === "" || a < b || (a === b && val < acc[f])) { acc[f] = val; acc[f + "At"] = at; }
+  }
+  for (var i = 0; i < values.length; i++) {
+    var v = values[i];
+    if (!v) continue;
+    acc.chunkEntries += v.chunkEntries || 0;
+    if ((v.chunkBytes || 0) > acc.chunkBytes) acc.chunkBytes = v.chunkBytes;
+    acc.ended += v.ended || 0;
+    acc.events += v.events || 0;
+    acc.prompts += v.prompts || 0;
+    acc.errors += v.errors || 0;
+    acc.started += v.started || 0;
+    if (v.last && v.last > acc.last) acc.last = v.last;
+    if (v.first && (acc.first === "" || v.first < acc.first)) acc.first = v.first;
+    earliest(v, "model");
+    earliest(v, "cwd");
+    earliest(v, "hostname");
+    // A session has one \`summary:<id>\` doc, so there is only ever one to keep.
+    if (v.summary) acc.summary = v.summary;
+    var t = v.tools || {};
+    for (var k in t) { if (t.hasOwnProperty(k)) acc.tools[k] = (acc.tools[k] || 0) + t[k]; }
   }
-];
-var TOPOLOGY_EDGES = [
-  {
-    from: "claude-code",
-    to: "hook",
-    kind: "emits",
-    label: "each event",
-    level: "compact",
-    note: "hooks/scripts/dispatch.ts pipes the payload to `claude-transcripts hook run` and always exits 0."
-  },
-  {
-    from: "hook",
-    to: "couchdb",
-    kind: "direct-write",
-    label: "events + summary",
-    level: "compact",
-    ref: "design/decisions/0016-webapi-is-the-io-gateway.md",
-    note: "Written directly, not through the gateway, so a webapi outage never loses a session."
-  },
-  {
-    from: "hook",
-    to: "garage",
-    kind: "direct-write",
-    label: "transcript",
-    level: "compact",
-    requiresFeature: "s3Blobs",
-    note: "The same bypass; transcript bytes live only in S3 (ADR 0014)."
-  },
-  { from: "webui", to: "webapi", kind: "http-client", label: "HTTP", level: "compact" },
-  { from: "cli", to: "webapi", kind: "http-client", label: "HTTP", level: "compact" },
-  { from: "agents", to: "webapi", kind: "http-client", label: "HTTP", level: "compact" },
-  {
-    from: "webapi",
-    to: "couchdb",
-    kind: "read-only-proxy",
-    label: "reads \xB7 /api/couch",
-    level: "compact"
+  var names = Object.keys(acc.tools).sort(), tools = {};
+  for (var j = 0; j < names.length; j++) tools[names[j]] = acc.tools[names[j]];
+  acc.tools = tools;
+  return acc;
+}`;
+var EVENT_TIMES_MAP = `function (doc) {
+  if (!doc.session_id || !doc.timestamp) return;
+  if (doc.type !== "event" && doc.type !== "summary") return;
+  emit(doc.session_id, doc.timestamp);
+}`;
+var SESSION_INDEX_DESIGN = {
+  _id: "_design/session_index",
+  language: "javascript",
+  views: {
+    aggregate: { map: AGGREGATE_MAP, reduce: AGGREGATE_REDUCE },
+    event_times: { map: EVENT_TIMES_MAP }
+  }
+};
+// packages/shared/src/migrations/speaker-split.ts
+var BY_ROLE_MAP = `function (doc) {
+  if (doc.type !== "chunk" || !doc.entries) return;
+  for (var i = 0; i < doc.entries.length; i++) {
+    var e = doc.entries[i];
+    if (!e || !e.role) continue;
+    emit([doc.session_id, e.role, doc.byte_start, i], {
+      role: e.role,
+      timestamp: e.timestamp || "",
+      text: e.text || "",
+      toolUses: e.toolUses || null,
+      toolUseId: e.toolUseId || null,
+      isError: e.isError || false
+    });
+  }
+}`;
+var BY_ROLE_TIME_MAP = `function (doc) {
+  if (doc.type !== "chunk" || !doc.entries) return;
+  for (var i = 0; i < doc.entries.length; i++) {
+    var e = doc.entries[i];
+    if (!e || !e.role) continue;
+    emit([e.role, e.timestamp || "", doc.session_id, doc.byte_start, i], {
+      sessionId: doc.session_id,
+      cwd: doc.cwd || "",
+      role: e.role,
+      timestamp: e.timestamp || "",
+      text: e.text || ""
+    });
+  }
+}`;
+var SPEAKER_SPLIT_DESIGN = {
+  _id: "_design/speaker_split",
+  language: "javascript",
+  views: {
+    by_role: { map: BY_ROLE_MAP, reduce: "_count" },
+    by_role_time: { map: BY_ROLE_TIME_MAP, reduce: "_count" }
+  }
+};
+// packages/shared/src/migrations/registry.ts
+var initialSchema = {
+  id: 1,
+  name: "initial-schema",
+  async up(ctx) {
+    for (const design of INITIAL_DESIGNS) {
+      ctx.log(`+ ${design._id}`);
+      const { _rev, ...body } = design;
+      await ctx.putDoc(design._id, body);
+    }
   },
-  {
-    from: "webapi",
-    to: "garage",
-    kind: "read-only-proxy",
-    label: "reads \xB7 /api/s3",
-    level: "compact",
-    requiresFeature: "s3Blobs"
+  async down(ctx) {
+    for (const design of INITIAL_DESIGNS) {
+      ctx.log(`- ${design._id}`);
+      await ctx.deleteDoc(design._id);
+    }
+  }
+};
+var sessionIndexView = {
+  id: 2,
+  name: "session-index-view",
+  async up(ctx) {
+    ctx.log(`+ ${SESSION_INDEX_DESIGN._id}`);
+    const { _rev, ...body } = SESSION_INDEX_DESIGN;
+    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
   },
-  {
-    from: "webapi",
-    to: "meilisearch",
-    kind: "indexes",
-    label: "search",
-    level: "compact",
-    requiresFeature: "meilisearch"
+  async down(ctx) {
+    ctx.log(`- ${SESSION_INDEX_DESIGN._id}`);
+    await ctx.deleteDoc(SESSION_INDEX_DESIGN._id);
+  }
+};
+var sessionIndexSource = {
+  id: 3,
+  name: "session-index-source",
+  async up(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (emit summary.source)`);
+    const { _rev, ...body } = SESSION_INDEX_DESIGN;
+    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
   },
-  {
-    from: "webapi",
-    to: "couchdb",
-    kind: "curated-write",
-    label: "/api/ingest",
-    level: "expanded",
-    note: "The curated write surface that owns the document shapes; writes are never proxied."
+  async down(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (source field left in place \u2014 additive)`);
+  }
+};
+var speakerSplitView = {
+  id: 4,
+  name: "speaker-split-view",
+  async up(ctx) {
+    ctx.log(`+ ${SPEAKER_SPLIT_DESIGN._id}`);
+    const { _rev, ...body } = SPEAKER_SPLIT_DESIGN;
+    await ctx.putDoc(SPEAKER_SPLIT_DESIGN._id, body);
   },
-  {
-    from: "couchdb",
-    to: "webapi",
-    kind: "changes-follower",
-    label: "_changes",
-    level: "expanded",
-    note: "Exists because of the hook bypass: hook-written docs get no write-time validation."
+  async down(ctx) {
+    ctx.log(`- ${SPEAKER_SPLIT_DESIGN._id}`);
+    await ctx.deleteDoc(SPEAKER_SPLIT_DESIGN._id);
+  }
+};
+var speakerSplitTimeView = {
+  id: 5,
+  name: "speaker-split-time-view",
+  async up(ctx) {
+    ctx.log(`~ ${SPEAKER_SPLIT_DESIGN._id} (add by_role_time)`);
+    const { _rev, ...body } = SPEAKER_SPLIT_DESIGN;
+    await ctx.putDoc(SPEAKER_SPLIT_DESIGN._id, body);
   },
-  { from: "couchdb-fauxton", to: "couchdb", kind: "admin-of", level: "expanded" },
-  { from: "garage-ui", to: "garage", kind: "admin-of", level: "expanded" },
-  { from: "meilisearch-ui", to: "meilisearch", kind: "admin-of", level: "expanded" }
-];
-var TOPOLOGY_GROUPS = [
-  {
-    key: "clients",
-    title: "read / query",
-    members: ["webui", "cli", "agents"],
-    level: "compact"
+  async down(ctx) {
+    ctx.log(`~ ${SPEAKER_SPLIT_DESIGN._id} (by_role_time left in place \u2014 additive)`);
+  }
+};
+var chunkEntriesView = {
+  id: 6,
+  name: "chunk-entries-view",
+  async up(ctx) {
+    ctx.log(`~ ${CHUNKS_DESIGN._id} (add entries_by_session)`);
+    const { _rev, ...body } = CHUNKS_DESIGN;
+    await ctx.putDoc(CHUNKS_DESIGN._id, body);
   },
-  {
-    key: "stores",
-    title: "your infrastructure",
-    members: ["couchdb", "garage", "meilisearch"],
-    level: "compact"
+  async down(ctx) {
+    ctx.log(`~ ${CHUNKS_DESIGN._id} (entries_by_session left in place \u2014 additive)`);
   }
-];
-var TOPOLOGY = {
-  nodes: TOPOLOGY_NODES,
-  edges: TOPOLOGY_EDGES,
-  groups: TOPOLOGY_GROUPS
 };
-// packages/shared/src/model/user-settings.ts
-var DEFAULT_USER_SETTINGS = {
-  sessionListPageSize: 100,
-  transcriptPageSize: 100,
-  transcriptAutoLoadMax: 2000
+var sessionIndexChunkCoverage = {
+  id: 7,
+  name: "session-index-chunk-coverage",
+  async up(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (emit chunk coverage)`);
+    const { _rev, ...body } = SESSION_INDEX_DESIGN;
+    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
+  },
+  async down(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (chunk coverage left in place \u2014 additive)`);
+  }
 };
-var LIMITS = {
-  sessionListPageSize: 500,
-  transcriptPageSize: 500,
-  transcriptAutoLoadMax: 50000
+var chunkEntryKind = {
+  id: 8,
+  name: "chunk-entry-kind",
+  async up(ctx) {
+    ctx.log(`~ ${CHUNKS_DESIGN._id} (emit entry kind)`);
+    const { _rev, ...body } = CHUNKS_DESIGN;
+    await ctx.putDoc(CHUNKS_DESIGN._id, body);
+  },
+  async down(ctx) {
+    ctx.log(`~ ${CHUNKS_DESIGN._id} (kind left in place \u2014 additive)`);
+  }
 };
-function resolveUserSettings(fromConfig) {
-  const c = fromConfig ?? {};
-  return {
-    sessionListPageSize: clamp(c.sessionListPageSize, "sessionListPageSize"),
-    transcriptPageSize: clamp(c.transcriptPageSize, "transcriptPageSize"),
-    transcriptAutoLoadMax: clamp(c.transcriptAutoLoadMax, "transcriptAutoLoadMax")
-  };
-}
-function clamp(value, key) {
-  const fallback = DEFAULT_USER_SETTINGS[key];
-  if (typeof value !== "number" || !Number.isFinite(value))
-    return fallback;
-  const rounded = Math.floor(value);
-  if (rounded < 1)
-    return fallback;
-  return Math.min(rounded, LIMITS[key]);
-}
-// packages/shared/src/model/build.ts
-var STALE_TEMPLATE_LINKS = {
-  couchdbFauxton: "http://127.0.0.1:7652/_utils/",
-  garageWebui: "http://127.0.0.1:7655/",
-  meilisearch: "http://127.0.0.1:7656/"
+var sessionIndexEventTimes = {
+  id: 9,
+  name: "session-index-event-times",
+  async up(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (add event_times view)`);
+    const { _rev, ...body } = SESSION_INDEX_DESIGN;
+    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
+  },
+  async down(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (event_times left in place \u2014 additive)`);
+  }
 };
-function buildServicesMenu(services, fromConfig) {
-  const derived = {};
-  for (const s of services) {
-    if (!s.adminUiServiceKey)
-      continue;
-    const port = s.resolvedPorts?.[0]?.host;
-    if (!port)
-      continue;
-    const path = s.adminUiPath ?? "/";
-    derived[s.adminUiServiceKey] = `http://127.0.0.1:${port}${path}`;
+var sessionIndexDeterministic = {
+  id: 10,
+  name: "session-index-deterministic",
+  async up(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (earliest model/cwd/hostname)`);
+    const { _rev, ...body } = SESSION_INDEX_DESIGN;
+    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
+  },
+  async down(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (deterministic pick left in place)`);
   }
-  const configured = Object.entries(fromConfig).filter(([k, v]) => STALE_TEMPLATE_LINKS[k] !== v);
-  return { ...derived, ...Object.fromEntries(configured) };
+};
+var MIGRATIONS = [
+  initialSchema,
+  sessionIndexView,
+  sessionIndexSource,
+  speakerSplitView,
+  speakerSplitTimeView,
+  chunkEntriesView,
+  sessionIndexChunkCoverage,
+  chunkEntryKind,
+  sessionIndexEventTimes,
+  sessionIndexDeterministic
+];
+function latestVersion() {
+  return MIGRATIONS.reduce((max, m) => Math.max(max, m.id), 0);
 }
-function buildAppModel(config, env = {}) {
-  const version = env.CT_VERSION ?? "0.0.0-dev";
-  const services = SERVICES.map((s) => ({
-    ...s,
-    resolvedPorts: (s.ports ?? []).map((p) => ({
-      internal: p.internal,
-      host: env[p.hostEnv] ? Number(env[p.hostEnv]) : p.defaultHost,
-      label: p.label
-    }))
-  }));
-  return {
-    identity: {
-      codename: "claude-transcripts",
-      slug: config.app?.name ?? "claude-transcripts",
-      title: "Claude Transcripts",
-      version
-    },
-    services,
-    stores: {
-      databases: { ...config.couchdb.databases },
-      buckets: { ...config.s3.buckets }
-    },
-    hooks: HOOK_TYPES,
-    actions: ACTIONS,
-    bindings: BINDINGS,
-    routes: ROUTES,
-    topology: TOPOLOGY,
-    env: ENV_VARS,
-    features: config.features,
-    servicesMenu: buildServicesMenu(services, config.servicesMenu),
-    system: config.system,
-    recall: resolveRecall(config.recall, env),
-    userSettings: resolveUserSettings(config.userSettings),
-    cliSpec: CLI_SPEC
-  };
+function docTransformsBetween(from, to, migrations = MIGRATIONS) {
+  return migrations.filter((m) => m.id > from && m.id <= to && m.transformsDocs === true).sort((a, b) => a.id - b.id).map((m) => ({ id: m.id, name: m.name }));
 }
-// packages/shared/src/model/k8s.ts
-var WORKLOAD_ROLES = new Set(["backing", "admin-ui", "app"]);
 // packages/shared/src/index.ts
 function usageWeight(u) {
   return (u.input_tokens || 0) + (u.output_tokens || 0) + (u.cache_creation_input_tokens || 0) + (u.cache_read_input_tokens || 0);
@@ -2312,43 +2422,6 @@ function buildChunkEntries(jsonl) {
   return out;
 }
-// packages/cli/src/lib/args.ts
-function parseFlags(argv) {
-  const positionals = [];
-  const options = {};
-  for (let i = 0;i < argv.length; i++) {
-    const a = argv[i];
-    if (a === undefined)
-      continue;
-    if (a.startsWith("--")) {
-      const body = a.slice(2);
-      const eq = body.indexOf("=");
-      if (eq >= 0) {
-        options[body.slice(0, eq)] = body.slice(eq + 1);
-      } else {
-        const next = argv[i + 1];
-        if (next !== undefined && !next.startsWith("--")) {
-          options[body] = next;
-          i++;
-        } else {
-          options[body] = true;
-        }
-      }
-    } else {
-      positionals.push(a);
-    }
-  }
-  return { positionals, options };
-}
-function strOpt(opts, key) {
-  const v = opts[key];
-  return typeof v === "string" ? v : undefined;
-}
-// packages/cli/src/lib/version.ts
-var DEV_VERSION = "0.0.0-dev";
-var VERSION = process.env.CT_VERSION ?? DEV_VERSION;
 // packages/cli/src/commands/backfill.ts
 import { hostname } from "os";
@@ -2512,6 +2585,39 @@ async function putRaw(path, body, contentType) {
   }
 }
+// packages/cli/src/lib/args.ts
+function parseFlags(argv) {
+  const positionals = [];
+  const options = {};
+  for (let i = 0;i < argv.length; i++) {
+    const a = argv[i];
+    if (a === undefined)
+      continue;
+    if (a.startsWith("--")) {
+      const body = a.slice(2);
+      const eq = body.indexOf("=");
+      if (eq >= 0) {
+        options[body.slice(0, eq)] = body.slice(eq + 1);
+      } else {
+        const next = argv[i + 1];
+        if (next !== undefined && !next.startsWith("--")) {
+          options[body] = next;
+          i++;
+        } else {
+          options[body] = true;
+        }
+      }
+    } else {
+      positionals.push(a);
+    }
+  }
+  return { positionals, options };
+}
+function strOpt(opts, key) {
+  const v = opts[key];
+  return typeof v === "string" ? v : undefined;
+}
 // packages/cli/src/lib/claude-fs.ts
 import { readdir, readFile } from "fs/promises";
 import { homedir as homedir2 } from "os";
@@ -3373,9 +3479,9 @@ var EMBEDDED_ASSETS = {
   compose: {
     path: "deploy/docker-compose.yml",
     source: "deploy/docker-compose.yml",
-    content: `# GENERATED from the app model (@claude-transcripts/shared) by scripts/gen-compose.ts.
-# Do NOT edit by hand \u2014 run \`bun run gen:compose\` to regenerate, and change the model
-# (packages/shared/src/model/services.ts) instead. Inline edits here are lost silently.
+    content: `# GENERATED from the blueprint (@claude-transcripts/shared) by scripts/gen-compose.ts.
+# Do NOT edit by hand \u2014 run \`bun run gen:compose\` to regenerate, and change the blueprint
+# (packages/shared/src/blueprint/services.ts) instead. Inline edits here are lost silently.
 # See docs/operate/containers.md.
 #
 # Claude Transcripts \u2014 backing services + app.
@@ -3466,6 +3572,18 @@ services:
     restart: unless-stopped
     networks:
       - claude-transcripts
+  fossil:
+    image: \${IMAGE_NS}/claude-transcripts-fossil:\${FOSSIL_TAG:-2.28}
+    container_name: claude-transcripts-fossil
+    environment:
+      - FOSSIL_REPOSITORIES=\${FOSSIL_REPOSITORIES:-claude-transcripts-sessions}
+    ports:
+      - 127.0.0.1:\${FOSSIL_PORT:-7658}:8080
+    volumes:
+      - ./data/fossil:/museum
+    restart: unless-stopped
+    networks:
+      - claude-transcripts
   meilisearch:
     image: \${IMAGE_NS}/claude-transcripts-meilisearch:\${MEILI_TAG:-v1.10}
     container_name: claude-transcripts-meilisearch
@@ -3497,6 +3615,7 @@ services:
       - couchdb
       - garage
       - meilisearch
+      - fossil
     env_file: ../.env
     environment:
       - WEBAPI_HOST=0.0.0.0
@@ -3504,6 +3623,7 @@ services:
       - COUCHDB_URL=http://couchdb:5984
       - S3_ENDPOINT=http://garage:3900
       - MEILI_HOST=http://meilisearch:7700
+      - FOSSIL_URL=http://fossil:8080
     ports:
       - 127.0.0.1:\${WEBAPI_PORT:-7650}:7650
     restart: unless-stopped
@@ -3518,7 +3638,7 @@ networks:
   composeUpstream: {
     path: "deploy/docker-compose.upstream.yml",
     source: "deploy/docker-compose.upstream.yml",
-    content: `# GENERATED from the app model (@claude-transcripts/shared) by scripts/gen-compose-override.ts.
+    content: `# GENERATED from the blueprint (@claude-transcripts/shared) by scripts/gen-compose-override.ts.
 # Do NOT edit by hand \u2014 run \`bun run gen:compose-override\` to regenerate.
 #
 # Upstream-image dev override: pins each mirrored backing service to its canonical
@@ -3529,7 +3649,7 @@ networks:
 #   bun run scripts/stack.ts up --upstream        # the runner does this for you
 #
 # Tags still come from .env (COUCHDB_TAG, GARAGE_TAG, \u2026). Override an image here by
-# changing its \`upstream\` in packages/shared/src/model/services.ts. The community
+# changing its \`upstream\` in packages/shared/src/blueprint/services.ts. The community
 # admin-UI images are best-effort; swap them if your registry differs.
 name: claude-transcripts
@@ -3540,6 +3660,10 @@ services:
     image: dxflrs/garage:\${GARAGE_TAG:-v2.3.0}
   garage-ui:
     image: khairul169/garage-webui:\${GARAGE_UI_TAG:-1.1.0}
+  fossil:
+    image: claude-transcripts-fossil:\${FOSSIL_TAG:-2.28}-local
+    build:
+      context: ./fossil
   meilisearch:
     image: getmeili/meilisearch:\${MEILI_TAG:-v1.10}
   meilisearch-ui:
@@ -3570,6 +3694,154 @@ api_bind_addr = "[::]:3900"
 [admin]
 api_bind_addr = "[::]:3903"
+`
+  },
+  fossilDockerfile: {
+    path: "deploy/fossil/Dockerfile",
+    source: "deploy/fossil/Dockerfile",
+    content: `# Fossil SCM \u2014 built from the official release source (https://fossil-scm.org).
+#
+# Fossil publishes no container image, only a Dockerfile in its source tree
+# (www/containers.md). This is that file's recipe, pinned to a release instead of
+# trunk and verified by checksum: a static, musl-linked binary on an empty base, so
+# the image holds Fossil and nothing else. Hand-maintained (NOT generated); its
+# version must equal the \`fossil\` service's \`defaultTag\` in
+# packages/shared/src/blueprint/services.ts \u2014 a test holds the two together.
+#
+# Build context is this directory, and only entrypoint.sh is COPY'd from it, so the
+# image builds the same from a repo checkout, a user install (which ships both files),
+# or CI.
+#
+# To bump: take the release's tarball link from https://fossil-scm.org/home/uv/download.html,
+# set FOSSIL_VERSION / FOSSIL_CHECKIN / FOSSIL_SHA256, and the blueprint's defaultTag.
+## \u2500\u2500 build: a static Fossil binary \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+FROM alpine:3.22 AS build
+RUN apk add --no-cache gcc make linux-headers musl-dev \\
+      openssl-dev openssl-libs-static zlib-dev zlib-static
+ARG FOSSIL_VERSION=2.28
+# The release check-in (\`fossil version\` prints its prefix) and the sha256 of the
+# tarball fossil-scm.org serves for it.
+ARG FOSSIL_CHECKIN=52445a27f116603d784ad753c6acd494e0b02aeaf8502ee0fee0aa30030f4c4e
+ARG FOSSIL_SHA256=84c18824ca227e7602d2408b663c3747f754ad306ed5c73ddab959d6589538a6
+WORKDIR /fsl
+ADD --checksum=sha256:\${FOSSIL_SHA256} \\
+    https://fossil-scm.org/home/tarball/\${FOSSIL_CHECKIN}/fossil-src-\${FOSSIL_VERSION}.tar.gz \\
+    src.tar.gz
+RUN tar -xzf src.tar.gz --strip-components=1 \\
+  && ./configure --static --json CFLAGS='-Os -s' \\
+  && make -j"$(nproc)" \\
+  && ./fossil version | grep -q "version \${FOSSIL_VERSION} "
+## \u2500\u2500 os: the few files a scratch image still needs \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+# The musl variant: a static busybox, so the one binary runs on \`scratch\`.
+FROM busybox:1.37-musl AS os
+RUN mkdir -p /e /museum \\
+  && echo "root:x:0:0:Admin:/:/false" > /e/passwd \\
+  && echo "root:x:0:root" > /e/group
+## \u2500\u2500 run \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+FROM scratch
+COPY --from=build --chmod=755 /fsl/fossil /bin/fossil
+COPY --from=os /e/passwd /e/group /etc/
+COPY --from=os --chmod=1777 /tmp /tmp/
+COPY --from=os /museum /museum/
+# Only for the seed script (entrypoint.sh): one static binary, no applet links.
+COPY --from=os /bin/busybox /bin/busybox
+COPY --chmod=755 entrypoint.sh /bin/fossil-entrypoint
+ENV PATH=/bin
+EXPOSE 8080/tcp
+# Runs as root, unlike upstream's image (a fixed UID 499). The repo lives on a
+# bind mount or volume created by whoever runs the stack, and a fixed UID can't write
+# to a directory it doesn't own. Fossil handles root itself: serving a repository
+# file owned by a non-root user, it chroots into the repo's directory and drops to
+# that user (\`chown\` the repo to opt in). See https://fossil-scm.org/home/help/server.
+# Seeds the repositories named in FOSSIL_REPOSITORIES (from \`fossil.repositories\` in
+# config/), then execs \`fossil server\` with CMD \u2014 see entrypoint.sh.
+ENTRYPOINT ["/bin/busybox", "sh", "/bin/fossil-entrypoint"]
+# Serve the directory, not a file: every \`<name>.fossil\` in /museum is served at
+# /<name>/, and "/" lists them. Not upstream's \`--create\`, which makes a generic
+# repository with a generated admin login; ours are made by the seed.
+# --jsmode bundled: one JS file, fewer requests.
+CMD ["--repolist", "--jsmode", "bundled", "/museum"]
+`
+  },
+  fossilEntrypoint: {
+    path: "deploy/fossil/entrypoint.sh",
+    source: "deploy/fossil/entrypoint.sh",
+    content: `#!/bin/sh
+# Seed, then serve. Run by busybox sh inside the Fossil image (deploy/fossil/Dockerfile).
+#
+# FOSSIL_REPOSITORIES names the repositories this instance owns, comma-separated \u2014
+# projected from \`fossil.repositories\` in config/ (ADR 0031). Each one missing from
+# the data directory is created here, because Fossil has no HTTP call that creates a
+# repository: the seed has to run where the binary and the volume are. Existing
+# repositories are never touched, so a restart is a no-op.
+#
+# A seeded repository needs no login to READ: the built-in \`nobody\` user can browse,
+# clone and download (ADR 0020). It can't write. Fossil's JSON API takes parameters
+# from the query string, so with write capabilities a plain GET could change the
+# repository \u2014 and any web page the user visits can send one to a localhost port
+# (an <img> tag is enough). The admin user exists because Fossil requires one; its
+# generated password is discarded, and \`fossil user password\` sets one when needed.
+#
+# FOSSIL_MUSEUM and FOSSIL_BUSYBOX exist for the tests (entrypoint.test.ts); the image
+# uses the defaults.
+set -euf # -f: an entry like \`*\` must stay a (rejected) name, not glob the cwd
+museum="\${FOSSIL_MUSEUM:-/museum}"
+bb="\${FOSSIL_BUSYBOX-/bin/busybox}"
+# Read-only for anonymous visitors: check-out/browse (o), clone (g), wiki (j), tickets
+# (r), hyperlinks (h), zip/tarball downloads (z).
+NOBODY_CAPS="ghjorz"
+# What a new repository holds beyond \`fossil new\` and its users. A placeholder: the
+# seed's contents (users and roles, wiki, ticket schema, tags, settings) are still to
+# be defined \u2014 https://github.com/vredchenko/claude-transcripts/issues/210. Runs once,
+# on the not-yet-served copy, so anything added here must only ever create.
+seed_content() {
+  : "$1"
+}
+trim() {
+  s="$1"
+  while :; do
+    case "$s" in
+      [[:space:]]*) s="\${s#?}" ;;
+      *[[:space:]]) s="\${s%?}" ;;
+      *) break ;;
+    esac
+  done
+  printf '%s' "$s"
+}
+IFS=','
+for entry in \${FOSSIL_REPOSITORIES:-}; do
+  name="$(trim "$entry")"
+  [ -n "$name" ] || continue
+  # The URL rules \`fossil server\` applies to a repository directory, so a name that
+  # can't be served is refused here rather than created and then unreachable.
+  case "$name" in
+    -* | *[!A-Za-z0-9_-]*)
+      echo "fossil-seed: skipping '$name' (letters, digits, '-' and '_' only)" >&2
+      continue
+      ;;
+  esac
+  repo="$museum/$name.fossil"
+  [ -e "$repo" ] && continue
+  # Built under a name \`--repolist\` doesn't serve, then renamed: a seed interrupted
+  # half-way leaves no half-made repository to be served or skipped forever.
+  $bb rm -f "$repo.new"
+  fossil new --admin-user claude-transcripts --project-name "$name" "$repo.new" >/dev/null
+  fossil user capabilities nobody "$NOBODY_CAPS" -R "$repo.new" >/dev/null
+  seed_content "$repo.new"
+  $bb mv "$repo.new" "$repo"
+  echo "fossil-seed: created $repo (anonymous read-only)"
+done
+unset IFS
+exec fossil server "$@"
 `
   },
   appConfig: {
@@ -3602,6 +3874,11 @@ api_bind_addr = "[::]:3903"
       "turns": "claude-transcripts-turns"
     }
   },
+  "fossil": {
+    "repositories": {
+      "sessions": "claude-transcripts-sessions"
+    }
+  },
   "features": {
     "s3Blobs": true,
     "midFlightChunking": true,
@@ -3887,6 +4164,12 @@ import { dirname as dirname2 } from "path";
 // packages/cli/src/lib/statusline.ts
 import { statSync } from "fs";
+// packages/cli/src/lib/version.ts
+var DEV_VERSION = "0.0.0-dev";
+var VERSION = process.env.CT_VERSION ?? DEV_VERSION;
+// packages/cli/src/lib/statusline.ts
 var STALL_AFTER_MS = 60000;
 var HOOK_SILENT_AFTER_MS = 5 * 60000;
 function transcriptMtimeMs(path) {
@@ -4074,6 +4357,31 @@ import {
 import { hostname as hostname4 } from "os";
 var {S3Client } = globalThis.Bun;
+// packages/cli/src/hook/detach.ts
+import { spawn } from "child_process";
+function cliArgv() {
+  const exec = process.execPath;
+  if (!/\/bun$/.test(exec))
+    return [exec];
+  return [exec, "run", Bun.main];
+}
+function spawnDetached(argv) {
+  const [cmd, ...args] = argv;
+  if (!cmd)
+    return false;
+  try {
+    const child = spawn(cmd, args, { detached: true, stdio: "ignore", cwd: "/" });
+    child.on("error", () => {});
+    child.unref();
+    return child.pid !== undefined;
+  } catch {
+    return false;
+  }
+}
+function uploadArgv(sessionId, transcriptPath) {
+  return [...cliArgv(), "hook", "upload", "--session", sessionId, "--transcript", transcriptPath];
+}
 // packages/cli/src/hook/mirror.ts
 var DEFAULT_TIMEOUT_MS = 2000;
 var DEFAULT_BLOB_TIMEOUT_MS = 60000;
@@ -4531,7 +4839,8 @@ function buildContext(payload, config) {
     counts: makeCounts(sessionId),
     targets,
     sessionsDb,
-    sessionsBucket: config.blob?.buckets.sessions
+    sessionsBucket: config.blob?.buckets.sessions,
+    detachUpload: (sid, path) => spawnDetached(uploadArgv(sid, path))
   };
 }
 function commonFields(ctx) {
@@ -4822,16 +5131,21 @@ var writeSummary = async (ctx) => {
   }
   ctx.targets.clear();
 };
-var uploadBlobs = async (ctx) => {
-  if (!ctx.blob.enabled || !ctx.sessionsBucket || !ctx.transcriptPath)
-    return;
+async function uploadTranscript(blob, bucket, sessionId, transcriptPath) {
   let data;
   try {
-    data = readFileSync5(ctx.transcriptPath, "utf8");
+    data = readFileSync5(transcriptPath, "utf8");
   } catch {
     return;
   }
-  await ctx.blob.put(ctx.sessionsBucket, `${ctx.sessionId}/transcript.jsonl`, data, "application/x-ndjson");
+  await blob.put(bucket, `${sessionId}/transcript.jsonl`, data, "application/x-ndjson");
+}
+var uploadBlobs = async (ctx) => {
+  if (!ctx.blob.enabled || !ctx.sessionsBucket || !ctx.transcriptPath)
+    return;
+  if (ctx.detachUpload(ctx.sessionId, ctx.transcriptPath))
+    return;
+  await uploadTranscript(ctx.blob, ctx.sessionsBucket, ctx.sessionId, ctx.transcriptPath);
 };
 var HANDLERS = {
   "seed-session-start": seedSessionStart,
@@ -4846,15 +5160,15 @@ var HANDLERS = {
 // packages/cli/src/hook/index.ts
 function hookBindings() {
-  const model = buildAppModel(loadAppConfig(), process.env);
+  const model = buildAppBlueprint(loadAppConfig(), process.env);
   const out = {};
   for (const b of model.bindings)
     out[b.event] = b.actions;
   return out;
 }
-var LONG_TIMEOUT_EVENTS = new Set(["SessionStart", "SessionEnd"]);
+var TIMEOUTS = { SessionStart: 180, SessionEnd: 60 };
 function hookTimeout(event) {
-  return LONG_TIMEOUT_EVENTS.has(event) ? 180 : 5;
+  return TIMEOUTS[event] ?? 5;
 }
 var SYNCHRONOUS_EVENTS = new Set(["SessionStart", "SessionEnd", "UserPromptSubmit"]);
 function hookAsync(event) {
@@ -4963,11 +5277,8 @@ function hookCommand() {
   return hookLaunch(`${cliInvocation()} hook run`);
 }
 function cliInvocation() {
-  const exec = process.execPath;
-  const isCompiled = !/\/bun$/.test(exec);
-  if (isCompiled)
-    return `"${exec}"`;
-  return `"${exec}" run "${Bun.main}"`;
+  const [exec, , entry] = cliArgv();
+  return entry ? `"${exec}" run "${entry}"` : `"${exec}"`;
 }
 function isOurCommand(command) {
   if (!command?.includes("hook run"))
@@ -5146,11 +5457,34 @@ async function run() {
   }
   return 0;
 }
+var UPLOAD_DEADLINE_MS = 10 * 60000;
+async function upload(argv) {
+  setTimeout(() => process.exit(0), UPLOAD_DEADLINE_MS).unref();
+  const { options } = parseFlags(argv);
+  const sessionId = strOpt(options, "session");
+  const transcriptPath = strOpt(options, "transcript");
+  if (!sessionId || !transcriptPath) {
+    console.error("hook: upload needs --session <id> --transcript <path>");
+    return 0;
+  }
+  try {
+    const config = loadHookConfig(installPaths().hookConfig);
+    const bucket = config?.blob?.buckets.sessions;
+    if (!config || !bucket)
+      return 0;
+    await uploadTranscript(makeBlob(config), bucket, sessionId, transcriptPath);
+  } catch (err) {
+    console.error("[hook] upload failed (ignored):", err);
+  }
+  return 0;
+}
 async function runHook(argv) {
   const [sub = "status", ...rest] = argv;
   switch (sub) {
     case "run":
       return run();
+    case "upload":
+      return upload(rest);
     case "install":
       return install(rest);
     case "uninstall":
@@ -5158,7 +5492,7 @@ async function runHook(argv) {
     case "status":
       return status();
     default:
-      console.error(`hook: unknown subcommand "${sub}" (run | install | uninstall | status)`);
+      console.error(`hook: unknown subcommand "${sub}" (run | upload | install | uninstall | status)`);
       return 2;
   }
 }
@@ -5461,17 +5795,20 @@ function composeFiles(paths, upstream) {
 // packages/cli/src/lib/compose.ts
 var {$ } = globalThis.Bun;
+function storeEnv() {
+  return toStoreEnv(buildAppBlueprint(loadAppConfig(), {}));
+}
 function fileArgs(paths) {
   return composeFiles(paths, true).flatMap((f) => ["-f", f]);
 }
 async function compose(opts, args) {
   const profile = opts.app ? ["--profile", "app"] : [];
-  await $`docker compose --env-file ${opts.paths.instanceEnv} ${fileArgs(opts.paths)} ${profile} ${args}`.env({ ...process.env, ...opts.env });
+  await $`docker compose --env-file ${opts.paths.instanceEnv} ${fileArgs(opts.paths)} ${profile} ${args}`.env({ ...process.env, ...storeEnv(), ...opts.env });
 }
 async function composeQuiet(opts, args) {
   const profile = opts.app ? ["--profile", "app"] : [];
   try {
-    const text = await $`docker compose --env-file ${opts.paths.instanceEnv} ${fileArgs(opts.paths)} ${profile} ${args}`.env({ ...process.env, ...opts.env }).quiet().text();
+    const text = await $`docker compose --env-file ${opts.paths.instanceEnv} ${fileArgs(opts.paths)} ${profile} ${args}`.env({ ...process.env, ...storeEnv(), ...opts.env }).quiet().text();
     return { ok: true, text };
   } catch (err) {
     return { ok: false, text: String(err.stderr ?? err) };
@@ -5659,7 +5996,8 @@ var PORT_KEYS = [
   "GARAGE_ADMIN_PORT",
   "GARAGE_WEBUI_PORT",
   "MEILI_PORT",
-  "MEILI_UI_PORT"
+  "MEILI_UI_PORT",
+  "FOSSIL_PORT"
 ];
 function secret(bytes = 32) {
   return randomBytes(bytes).toString("hex");
@@ -5707,6 +6045,7 @@ function buildInstanceEnv(opts = {}) {
     GARAGE_UI_TAG: "1.1.0",
     MEILI_TAG: "v1.10",
     MEILI_UI_TAG: "latest",
+    FOSSIL_TAG: "2.28",
     COUCHDB_URL: "",
     COUCHDB_HOST: "127.0.0.1",
     COUCHDB_USER: "admin",
@@ -5719,6 +6058,7 @@ function buildInstanceEnv(opts = {}) {
     GARAGE_ADMIN_TOKEN: secret(32),
     GARAGE_METRICS_TOKEN: secret(32),
     MEILI_HOST: `http://127.0.0.1:${ports.MEILI_PORT}`,
+    FOSSIL_URL: `http://127.0.0.1:${ports.FOSSIL_PORT}`,
     MEILI_MASTER_KEY: opts.meiliMasterKey ? secret(24) : "",
     MEILI_API_KEY: ""
   };
@@ -5729,10 +6069,24 @@ var HEADER = [
   "Rotating a secret here does NOT rotate it in an already-provisioned store."
 ];
 var INSTALLER_OWNED = ["APP_TAG"];
+function backfillPorts(existing) {
+  const base = Number(existing.WEBAPI_PORT);
+  if (!Number.isInteger(base) || base <= 0)
+    return {};
+  const out = {};
+  PORT_KEYS.forEach((key, i) => {
+    if (existing[key] === undefined)
+      out[key] = String(base + i);
+  });
+  if (out.FOSSIL_PORT && existing.FOSSIL_URL === undefined) {
+    out.FOSSIL_URL = `http://127.0.0.1:${out.FOSSIL_PORT}`;
+  }
+  return out;
+}
 function loadOrCreateInstanceEnv(path, opts = {}) {
   const generated = buildInstanceEnv(opts);
   const existing = existsSync6(path) ? parseEnv(readFileSync10(path, "utf8")) : {};
-  const merged = { ...generated, ...existing };
+  const merged = { ...generated, ...backfillPorts(existing), ...existing };
   for (const key of INSTALLER_OWNED) {
     if (generated[key] !== undefined)
       merged[key] = generated[key];
@@ -6177,6 +6531,29 @@ async function resolvePortBase(base, span) {
   }
   return null;
 }
+async function relocateAddedPorts(path, env, priorKeys) {
+  const added = PORT_KEYS.filter((k) => !priorKeys.has(k));
+  if (added.length === 0)
+    return env;
+  const own = new Set(PORT_KEYS.map((k) => Number(env[k])));
+  const patch = {};
+  for (const key of added) {
+    let port = Number(env[key]);
+    const isOwnDuplicate = PORT_KEYS.some((k) => k !== key && Number(env[k]) === port);
+    if (!isOwnDuplicate && await isPortFree(port))
+      continue;
+    do
+      port += 1;
+    while (own.has(port) || !await isPortFree(port));
+    own.add(port);
+    patch[key] = String(port);
+    console.log(`  \u2192 ${key} ${env[key]} is taken; using ${port}`);
+  }
+  if (patch.FOSSIL_PORT && !priorKeys.has("FOSSIL_URL")) {
+    patch.FOSSIL_URL = `http://127.0.0.1:${patch.FOSSIL_PORT}`;
+  }
+  return Object.keys(patch).length ? updateInstanceEnv(path, patch) : env;
+}
 async function warnOnVersionSkew(env) {
   try {
     const res = await fetch(`http://127.0.0.1:${env.WEBAPI_PORT}/health`, {
@@ -6248,12 +6625,15 @@ async function runInstall(argv) {
   }
   step(2, TOTAL, "Configuration");
   const firstRun = !existsSync8(paths.instanceEnv);
+  const priorKeys = new Set(firstRun ? [] : Object.keys(parseEnv(readFileSync12(paths.instanceEnv, "utf8"))));
   let env = loadOrCreateInstanceEnv(paths.instanceEnv, {
     portBase,
     appTag: VERSION === DEV_VERSION ? "main" : VERSION,
     meiliMasterKey: meiliKey
   });
   console.log(`  ${firstRun ? "generated" : "reused"} ${paths.instanceEnv}`);
+  if (!firstRun)
+    env = await relocateAddedPorts(paths.instanceEnv, env, priorKeys);
   if (!firstRun && priorAppTag && priorAppTag !== env.APP_TAG) {
     console.log(`  app image pin ${priorAppTag} \u2192 ${env.APP_TAG} (follows this CLI)`);
   }