@compr/opscontext-mcp 2.7.0 → 2.7.1

package/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to OpsContext for AI Agents (previously ContextEngine — MC
 
 > Entries for 2.2.0 through 2.4.0 were not backfilled here; see `docs/sessions/SESSION_19` through `SESSION_21` for those releases.
 
+## [2.7.1] 2026-09-06: the autostart agent is the standing indexer; servers --cost
+
+### Changed
+
+- **`install-autostart` writes a plist that makes the agent the standing indexer**
+  (`[AUTOSTART-IS-THE-STANDING-INDEXER]`): `ProcessType Standard` instead of `Background` (as
+  Background it got 2.5 s of CPU in 15 minutes under load and served nobody),
+  `CONTEXTENGINE_SHARED_INDEX=1`, and `CONTEXTENGINE_CONFIG` / `CONTEXTENGINE_WORKSPACES` passed
+  through from the installing shell so its corpus id equals the chats'. The Claude-memory skip is
+  no longer a default; it is passed through only when the installer itself ran with it. Re-run
+  `install-autostart --force` to pick this up.
+- **`contextengine servers --cost`**: CPU time and resident memory per server and in total, the
+  number that was invisible on 2026-09-05 until someone ran `ps` by hand.
+- **The session-gate wrapper prefers a global install** of the CLI (`npm root -g`) over the
+  directory the installer ran from, so an npx cache prune cannot break the Stop hook.
+
 ## [2.7.0] 2026-09-06: the session gate ships in the package
 
 ### Added

package/README.md

@@ -162,9 +162,11 @@ Companion commands: `uninstall-autostart`, `autostart-status`.
 **3c. Wire Claude Code terminal sessions**
 
 ```bash
-npx @compr/opscontext-mcp install-claude-hook
+npm i -g @compr/opscontext-mcp && opscontext install-claude-hook
 ```
 
+(Prefer the global install here: the hook scripts keep absolute paths to the CLI, and an `npx` cache copy can be pruned.)
+
 Adds `UserPromptSubmit`, `PostToolUse`, and `SessionStart` hook entries to `~/.claude/settings.json` so every Claude Code prompt + tool call lands in the same audit log as the browser events, plus a `Stop` entry: the **session gate** (2.7.0). A Claude Code turn cannot end while the repo's OpsContext session is older than the last commit; the agent is told which session to save, which session doc to update, and how far the agent docs are behind. No more "did you save the session?" at the end of a day. Details: `npx @compr/opscontext-mcp session-gate --help`.
 
 Verify:

package/dist/cli.js

@@ -2527,7 +2527,7 @@ Usage:
                                        Export hash-chained audit log (evidence aligned with
                                        SOC 2 CC7.2 + ISO 27001 A.12.4.1 — not a certification)
   contextengine audit-verify           Verify audit log chain integrity (tamper detection)
-  contextengine servers                List running MCP servers, their build vs the file on disk
+  contextengine servers [--cost]       List running MCP servers, their build vs the file on disk, role; --cost adds CPU time and memory
   contextengine audit-redact-ack       Acknowledge deliberately redacted records on the chain (--index i,j --reason "...")
   contextengine audit-rotate [--keep-days N] [--max-records N] [--dry-run]
                                        Move old history into an archive segment. Archives
@@ -2742,7 +2742,7 @@ else if (command === "audit-rotate") {
 }
 else if (command === "servers") {
     const fleet = listServers();
-    console.log(formatServers(fleet));
+    console.log(formatServers(fleet, undefined, { cost: process.argv.includes("--cost") }));
     process.exit(fleet.warnings.length > 0 ? 1 : 0);
 }
 else if (command === "audit-verify") {

package/dist/index.js

@@ -1402,6 +1402,14 @@ async function main() {
     else
         startIndexPolling();
     startRolePolling();
+    // 5b. A daemon (launchd, OPSCONTEXT_DAEMON=1) has stdin on /dev/null, so the stdio transport
+    // closes at once; as a reader it holds no watchers and every poller is unref'd, and the loop
+    // would drain and exit 0, which KeepAlive turns into a restart every 10 s. Hold the loop open.
+    // [LOCK] [AUTOSTART-IS-THE-STANDING-INDEXER]
+    if (process.env.OPSCONTEXT_DAEMON === "1") {
+        setInterval(() => { }, 60_000);
+        console.error("[ContextEngine] 🛡 Daemon mode: staying alive without an MCP client");
+    }
     // 6. Boot the local HTTP event-ingest endpoint for the browser extension.
     // Local 127.0.0.1:7842 only; auth via shared secret at
     // ~/.contextengine/extension-secret (see init-extension-secret CLI).

package/dist/install-autostart.d.ts

@@ -1,3 +1,4 @@
+export declare function buildPlist(nodePath: string, entryPath: string, nodeBinDir: string, env?: NodeJS.ProcessEnv): string;
 export declare function cliInstallAutostart(args: string[]): Promise<void>;
 export declare function cliUninstallAutostart(args: string[]): Promise<void>;
 export declare function cliAutostartStatus(args: string[]): Promise<void>;

package/dist/install-autostart.js

@@ -87,7 +87,30 @@ function detectOpscontextEntry() {
     }
     return null;
 }
-function buildPlist(nodePath, entryPath, nodeBinDir) {
+// [LOCKED] [AUTOSTART-IS-THE-STANDING-INDEXER] 2026-09-06
+// [NEVER] run the agent as ProcessType Background, drop CONTEXTENGINE_SHARED_INDEX from its
+//         environment, or give it a corpus the chats do not have.
+// WHY: measured 2026-09-05 (SESSION_26): as Background the agent got 2.5 s of CPU in 15 minutes
+//      under load, took 4.5 min from exec to main(), served no MCP client (stdin is /dev/null),
+//      lost the browser-event port to whichever chat started first, and, with the memory skip and
+//      no config, indexed a corpus no chat used. It burned CPU keeping a cache warm that never
+//      hit. As the standing indexer it is the oldest server at every login, so it wins the
+//      election, every chat opens onto a ready index, and it owns the port from boot.
+// FIX: Standard priority; the shared-index flag; CONTEXTENGINE_CONFIG passed through from the
+//      installing shell so its corpus id equals the chats'; the memory skip only if the installer
+//      was itself run with it (an explicit choice, not a default).
+export function buildPlist(nodePath, entryPath, nodeBinDir, env = process.env) {
+    // OPSCONTEXT_DAEMON tells the server it has no MCP client on stdin and must stay alive on its
+    // own: as a reader it holds no file watchers, and every poller is unref'd, so without this the
+    // event loop drained and launchd restarted it every 10 s (found 2026-09-06, first real run).
+    const passthrough = [["CONTEXTENGINE_SHARED_INDEX", "1"], ["OPSCONTEXT_DAEMON", "1"]];
+    if (env.CONTEXTENGINE_CONFIG)
+        passthrough.push(["CONTEXTENGINE_CONFIG", env.CONTEXTENGINE_CONFIG]);
+    if (env.CONTEXTENGINE_WORKSPACES)
+        passthrough.push(["CONTEXTENGINE_WORKSPACES", env.CONTEXTENGINE_WORKSPACES]);
+    if (env.OPSCONTEXT_SKIP_CLAUDE_MEMORY === "1")
+        passthrough.push(["OPSCONTEXT_SKIP_CLAUDE_MEMORY", "1"]);
+    const extraEnv = passthrough.map(([k, v]) => `        <key>${k}</key>\n        <string>${v.replace(/&/g, "&amp;").replace(/</g, "&lt;")}</string>`).join("\n");
     return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -107,8 +130,7 @@ function buildPlist(nodePath, entryPath, nodeBinDir) {
         <string>${nodeBinDir}:/usr/local/bin:/usr/bin:/bin</string>
         <key>HOME</key>
         <string>${homedir()}</string>
-        <key>OPSCONTEXT_SKIP_CLAUDE_MEMORY</key>
-        <string>1</string>
+${extraEnv}
     </dict>
 
     <key>WorkingDirectory</key>
@@ -130,7 +152,7 @@ function buildPlist(nodePath, entryPath, nodeBinDir) {
     <string>${join(LOG_DIR, "mcp-stderr.log")}</string>
 
     <key>ProcessType</key>
-    <string>Background</string>
+    <string>Standard</string>
 </dict>
 </plist>
 `;

package/dist/install-claude-hook.js

@@ -18,6 +18,7 @@ import { existsSync, readFileSync, writeFileSync, copyFileSync, chmodSync, mkdir
 import { join, dirname } from "path";
 import { homedir } from "os";
 import { fileURLToPath } from "url";
+import { execSync } from "child_process";
 // [LOCK] [M2-ESM-FILENAME-FIX]: the package is "type": "module", so a bare __dirname is a
 // ReferenceError at runtime. Found 2026-09-06 while adding the Stop gate: the defaults/ lookup
 // below used `__dirname_esm`, and a real run against a throwaway HOME died with
@@ -70,6 +71,17 @@ function bundledHookSource() {
     }
     return null;
 }
+/** dist/cli.js of a global install, when there is one (same preference as install-autostart). */
+function globalCliPath() {
+    try {
+        const root = execSync("npm root -g 2>/dev/null", { encoding: "utf-8" }).trim();
+        const c = join(root, "@compr", "opscontext-mcp", "dist", "cli.js");
+        return existsSync(c) ? c : null;
+    }
+    catch {
+        return null;
+    }
+}
 export async function cliInstallClaudeHook(args) {
     const help = args.includes("-h") || args.includes("--help");
     if (help) {
@@ -143,7 +155,8 @@ Run: opscontext install-autostart
         added++;
     }
     // Step 3: the Stop gate. Absolute node + CLI paths: hooks run without the user's shell PATH.
-    const cliPath = join(__dirname_esm, "cli.js");
+    // Prefer the global install: an npx cache copy can be pruned and the hook would then exit 127.
+    const cliPath = globalCliPath() ?? join(__dirname_esm, "cli.js");
     writeFileSync(GATE_SCRIPT, `#!/bin/sh\n# Generated by \`opscontext install-claude-hook\`: the CE session gate on Claude Code Stop.\n# Exit 2 = the turn may not end yet (reason on stderr). See: contextengine session-gate --help\nexec "${process.execPath}" "${cliPath}" session-gate\n`);
     chmodSync(GATE_SCRIPT, 0o755);
     settings.hooks.Stop ??= [];

package/dist/server-registry.d.ts

@@ -43,5 +43,17 @@ export declare function registerServer(opts: {
 };
 /** Read every record, drop the dead ones, compare builds with the files on disk now. */
 export declare function listServers(): ServerReport;
-export declare function formatServers(report: ServerReport, home?: string): string;
+/** CPU seconds consumed and resident memory of a live pid, from ps (hardcoded argv, no shell). */
+export declare function processCost(pid: number): {
+    cpuSeconds: number;
+    rssMb: number;
+} | null;
+/**
+ * The listing. With `cost`, each line also carries CPU time and memory, and the total: this is
+ * the number that was invisible on 2026-09-05 (9.3 CPU-hours across eleven servers) until
+ * someone ran ps by hand. [LOCK] [ONE-INDEXER-MANY-READERS]
+ */
+export declare function formatServers(report: ServerReport, home?: string, opts?: {
+    cost?: boolean;
+}): string;
 //# sourceMappingURL=server-registry.d.ts.map

package/dist/server-registry.js

@@ -145,16 +145,57 @@ export function listServers() {
     }
     return report;
 }
-export function formatServers(report, home = homedir()) {
+/** CPU seconds consumed and resident memory of a live pid, from ps (hardcoded argv, no shell). */
+export function processCost(pid) {
+    try {
+        const out = execFileSync("ps", ["-o", "time=,rss=", "-p", String(pid)], { encoding: "utf8", timeout: 2000 }).trim();
+        const [time, rss] = out.split(/\s+/);
+        if (!time)
+            return null;
+        const parts = time.split(":").map(Number);
+        const cpuSeconds = parts.length === 3 ? parts[0] * 3600 + parts[1] * 60 + parts[2] : parts[0] * 60 + (parts[1] || 0);
+        return { cpuSeconds, rssMb: Math.round(Number(rss || 0) / 1024) };
+    }
+    catch {
+        return null;
+    }
+}
+function fmtCpu(s) {
+    if (s >= 3600)
+        return `${(s / 3600).toFixed(1)} CPU-h`;
+    if (s >= 60)
+        return `${Math.round(s / 60)} CPU-min`;
+    return `${Math.round(s)} CPU-s`;
+}
+/**
+ * The listing. With `cost`, each line also carries CPU time and memory, and the total: this is
+ * the number that was invisible on 2026-09-05 (9.3 CPU-hours across eleven servers) until
+ * someone ran ps by hand. [LOCK] [ONE-INDEXER-MANY-READERS]
+ */
+export function formatServers(report, home = homedir(), opts = {}) {
     const short = (p) => p.startsWith(home) ? "~" + p.slice(home.length) : p;
     const lines = [];
     lines.push(`${report.servers.length} server(s) running${report.removed ? `, ${report.removed} dead record(s) removed` : ""}`);
+    let cpuTotal = 0, rssTotal = 0;
     for (const s of report.servers) {
         const t = s.started.slice(11, 19) + "Z";
         const flag = s.staleBuild ? `STALE BUILD (disk ${s.currentBuild})` : s.currentBuild === null ? "script missing on disk" : "current";
         const role = s.role ? `  ${s.role.padEnd(7)} corpus ${s.corpus ?? "?"}` : "";
-        lines.push(`  pid ${String(s.pid).padEnd(6)} ${t}  v${s.version}  build ${s.build}  ${flag}${role}  parent ${s.parent}  cwd ${short(s.cwd)}`);
+        let cost = "";
+        if (opts.cost) {
+            const c = processCost(s.pid);
+            if (c) {
+                cpuTotal += c.cpuSeconds;
+                rssTotal += c.rssMb;
+                cost = `  ${fmtCpu(c.cpuSeconds).padStart(11)} ${String(c.rssMb).padStart(5)} MB`;
+            }
+            else
+                cost = "  (cost unknown)";
+        }
+        lines.push(`  pid ${String(s.pid).padEnd(6)} ${t}  v${s.version}  build ${s.build}  ${flag}${role}${cost}  parent ${s.parent}  cwd ${short(s.cwd)}`);
     }
+    if (opts.cost && report.servers.length > 0)
+        lines.push(`  total: ${fmtCpu(cpuTotal)}, ${rssTotal} MB resident, across ${report.servers.length} server(s)`);
     for (const w of report.warnings)
         lines.push(`  ⚠ ${w}`);
     return lines.join("\n");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@compr/opscontext-mcp",
-  "version": "2.7.0",
+  "version": "2.7.1",
   "description": "OpsContext for AI Agents — read-only fleet visibility (PM2/nginx/Docker/git/cron) + tamper-evident audit log + policy-as-code hooks. The ops + compliance layer Claude Code can't grow natively.",
   "type": "module",
   "main": "dist/index.js",