@gamaze/hicortex 0.11.1 → 0.12.1

package/README.md

@@ -110,7 +110,7 @@ The run is resumable — interrupt it any time and it continues where it stopped
 8 tools available via MCP:
 
 - **hicortex_search** — Semantic search across all stored memories
-- **hicortex_context** — Get recent decisions and project state
+- **hicortex_recent** — Get recent decisions and project state (queryless recall; renamed in 0.12)
 - **hicortex_ingest** — Store a memory directly
 - **hicortex_lessons** — Get actionable lessons from reflection
 - **hicortex_index** — Get the knowledge domain index (what topics are stored)
@@ -120,6 +120,15 @@ The run is resumable — interrupt it any time and it continues where it stopped
 
 Skills: `/learn` to save explicit learnings.
 
+## Context Layer
+
+Beyond auto-distilled memories and lessons, Hicortex holds a **hand-edited context layer** — standing "who you are + how to work" Markdown injected into every session at start. Unlike memories, it is **never distilled, scored, or decayed**: what you write stays verbatim until you change it.
+
+- **Storage:** plain files on the server at `~/.hicortex/context/*.md` — one file per section (recommended starter sections `user.md` + `rules.md`, which you create — nothing is pre-populated; add more by dropping in a file). It lives outside the memories table; consolidation never touches it.
+- **Edit:** the web editor at `http://localhost:8787/context/ui` (one tab per section, Save), or the CLI `hicortex context show [name]` / `hicortex context edit <name>`.
+- **Delivery:** injected into the harnesses listed in `contextClients` (default `["cc"]` — Claude Code only in v1; `"all"` or any subset of `cc`/`hermes`/`oc`).
+- **Deletion** is filesystem-only — remove the file on the server (as the daemon user).
+
 ## CLI Commands
 
 ```bash
@@ -130,6 +139,8 @@ npx @gamaze/hicortex nightly                   # Run distill + consolidate (full
 npx @gamaze/hicortex nightly --capture-only    # Capture only, skip consolidation (safe for sub-daily runs)
 npx @gamaze/hicortex nightly --dry-run         # Preview without changes
 npx @gamaze/hicortex classify-domains          # Backfill domain tags over the corpus (see Memory Domains & Tags)
+npx @gamaze/hicortex context show [name]       # Print the standing context layer (see Context Layer)
+npx @gamaze/hicortex context edit <name>       # Edit a context section in $EDITOR
 npx @gamaze/hicortex status                    # Show config, DB stats
 npx @gamaze/hicortex uninstall                 # Remove CC integration (keeps DB)
 ```
@@ -174,6 +185,7 @@ Config at `~/.hicortex/config.json`. Created by `init`. Key options:
 | `domains` | Your memory domain list (`[{name, description}]`). Scaffolded by `init`; edit freely — see [Memory Domains & Tags](#memory-domains--tags) |
 | `weakPrimaryFloor` | Minimum similarity for a no-fit memory to keep a weak domain association (default: 0.45) |
 | `moduleIndexTokenBudget` | Max tokens for domain index in lessons context (default: 500) |
+| `contextClients` | Which harnesses inject the [context layer](#context-layer) at session start (default `["cc"]`; `"all"` or any subset of `cc`/`hermes`/`oc`) |
 | `nightlyHour` | Local hour (0–23) for the nightly job installed by `init` (defaults: client 2, server 3). Applied on fresh installs; existing schedules are never overwritten |
 | `telemetry` | Anonymous usage telemetry, `false` to opt out |
 
@@ -186,7 +198,9 @@ Full docs: [hicortex.gamaze.com/docs/configuration.html](https://hicortex.gamaze
 | `/health` | GET | No | Server status, memory count, version |
 | `/distill` | POST | Yes | Canonical capture endpoint (0.9.0+). Accepts denoised session text (`text` string or `messages` array), distills server-side, stores. Used by both server-mode and client-mode nightly jobs. |
 | `/search` | GET | Yes | Semantic memory search |
-| `/context` | GET | Yes | Recent context memories |
+| `/recent` | GET | Yes | Recent memories, queryless recall (renamed from `/context` in 0.12) |
+| `/context` | GET / PUT | Yes | Standing [context layer](#context-layer): read all sections / partial-upsert named sections. Recall-style query params on GET → 400 (use `/recent`) |
+| `/context/ui` | GET | No* | Web editor for the context layer (shell served without auth, like `/viz`; data via `/context`) |
 | `/lessons` | GET | Yes | Lessons + memory index (used by CC SessionStart hook) |
 | `/ingest` | POST | Yes | Legacy: accept a single pre-distilled memory from older clients |
 | `/sse` | GET | Yes | MCP SSE stream for agent connections |

package/assets/context.html

@@ -0,0 +1,487 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Hicortex — context</title>
+<!--
+  Hicortex standing-context editor (#165, 0.12 — spec 2026-07-12 §5).
+  Self-contained: inline CSS/JS, ZERO external requests (CSP-safe). The PRIMARY
+  edit surface for the context layer.
+
+  One tab per section, tabs built dynamically from GET /context `sections`
+  (the server serves any allowlist-named *.md as a section — nothing hardcoded).
+  Each tab is a <textarea>; Save PUTs only the active section (partial upsert).
+
+  The page SHELL is public (exempted in createAuthMiddleware like /viz); the
+  GET/PUT /context data calls are bearer-only with a localhost bypass, so on the
+  server box no token is needed. Remote browsers hand off a token via
+  ?token=<t> (stripped from the URL on load), localStorage, or a 401 prompt.
+
+  Security: section content is only ever read/written through textarea .value —
+  never innerHTML. Tab labels and messages use textContent. No markdown preview
+  in v1 (spec §5).
+-->
+<style>
+  :root {
+    --bg: #ffffff;
+    --panel: #f6f7f9;
+    --panel-border: #d9dce2;
+    --text: #1c1f26;
+    --text-dim: #656d7a;
+    --accent: #2f6fb0;
+    --accent-text: #ffffff;
+    --danger: #c0392b;
+    --ok: #2f8f4e;
+    --tab-active: #ffffff;
+  }
+  @media (prefers-color-scheme: dark) {
+    :root {
+      --bg: #0f1117;
+      --panel: #161a23;
+      --panel-border: #262c3a;
+      --text: #d5dae4;
+      --text-dim: #8b93a5;
+      --accent: #5b9dd9;
+      --accent-text: #0b0d12;
+      --danger: #e05555;
+      --ok: #5fbf77;
+      --tab-active: #0f1117;
+    }
+  }
+  /* Explicit theme override wins over the media default in BOTH directions. */
+  :root[data-theme="light"] {
+    --bg: #ffffff; --panel: #f6f7f9; --panel-border: #d9dce2;
+    --text: #1c1f26; --text-dim: #656d7a; --accent: #2f6fb0;
+    --accent-text: #ffffff; --danger: #c0392b; --ok: #2f8f4e; --tab-active: #ffffff;
+  }
+  :root[data-theme="dark"] {
+    --bg: #0f1117; --panel: #161a23; --panel-border: #262c3a;
+    --text: #d5dae4; --text-dim: #8b93a5; --accent: #5b9dd9;
+    --accent-text: #0b0d12; --danger: #e05555; --ok: #5fbf77; --tab-active: #0f1117;
+  }
+
+  * { box-sizing: border-box; margin: 0; padding: 0; }
+  html, body { height: 100%; }
+  body {
+    background: var(--bg);
+    color: var(--text);
+    font: 14px/1.5 -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+    display: flex; flex-direction: column;
+  }
+
+  header {
+    display: flex; align-items: baseline; gap: 12px;
+    padding: 12px 18px; border-bottom: 1px solid var(--panel-border);
+  }
+  header h1 { font-size: 15px; font-weight: 600; white-space: nowrap; }
+  header .meta { color: var(--text-dim); font-size: 12px; white-space: nowrap; }
+  header .spacer { flex: 1; }
+
+  main { flex: 1; display: flex; flex-direction: column; padding: 14px 18px; gap: 12px; min-height: 0; }
+
+  #tabs {
+    display: flex; flex-wrap: wrap; gap: 4px; align-items: center;
+    border-bottom: 1px solid var(--panel-border); padding-bottom: 0;
+  }
+  .tab {
+    background: transparent; color: var(--text-dim);
+    border: 1px solid transparent; border-bottom: none;
+    border-radius: 6px 6px 0 0; padding: 6px 14px; cursor: pointer;
+    font: inherit; font-size: 13px; position: relative; top: 1px;
+  }
+  .tab:hover { color: var(--text); }
+  .tab.active {
+    color: var(--text); background: var(--tab-active);
+    border-color: var(--panel-border); border-bottom: 1px solid var(--tab-active);
+  }
+  .tab .dirty { color: var(--accent); margin-left: 5px; }
+
+  #addwrap { margin-left: auto; display: flex; gap: 6px; align-items: center; }
+  #addname {
+    background: var(--bg); color: var(--text);
+    border: 1px solid var(--panel-border); border-radius: 5px;
+    padding: 5px 8px; font: inherit; font-size: 13px; width: 150px;
+  }
+
+  button.btn {
+    background: var(--accent); color: var(--accent-text);
+    border: none; border-radius: 5px; padding: 6px 14px;
+    font: inherit; font-size: 13px; font-weight: 600; cursor: pointer;
+  }
+  button.btn:hover { filter: brightness(1.08); }
+  button.btn.secondary {
+    background: transparent; color: var(--text);
+    border: 1px solid var(--panel-border); font-weight: 500;
+  }
+  button.btn:disabled { opacity: 0.5; cursor: default; filter: none; }
+
+  #editor { flex: 1; display: flex; flex-direction: column; min-height: 0; }
+  textarea {
+    flex: 1; width: 100%; min-height: 240px; resize: vertical;
+    background: var(--panel); color: var(--text);
+    border: 1px solid var(--panel-border); border-radius: 6px;
+    padding: 12px; font: 13px/1.55 ui-monospace, SFMono-Regular, Menlo, Consolas, "Liberation Mono", monospace;
+    tab-size: 2;
+  }
+  textarea:focus { outline: 2px solid var(--accent); outline-offset: -1px; }
+
+  #bar { display: flex; align-items: center; gap: 12px; flex-wrap: wrap; }
+  #bar .grow { flex: 1; }
+  #msg { font-size: 13px; min-height: 18px; }
+  #msg.ok { color: var(--ok); }
+  #msg.err { color: var(--danger); }
+  #msg.dim { color: var(--text-dim); }
+
+  #empty { color: var(--text-dim); padding: 24px 0; }
+  #empty code { background: var(--panel); padding: 1px 5px; border-radius: 3px; }
+
+  /* token overlay */
+  #overlay {
+    position: fixed; inset: 0; display: none; z-index: 30;
+    align-items: center; justify-content: center;
+    background: rgba(0, 0, 0, 0.55);
+  }
+  #overlay.open { display: flex; }
+  #overlay .box {
+    background: var(--panel); border: 1px solid var(--panel-border);
+    border-radius: 8px; padding: 22px; max-width: 420px; width: 90%;
+  }
+  #overlay .box h2 { font-size: 15px; margin-bottom: 8px; }
+  #overlay .box p { color: var(--text-dim); margin-bottom: 12px; font-size: 13px; }
+  #overlay .box code { background: var(--bg); padding: 1px 5px; border-radius: 3px; }
+  #overlay input {
+    width: 100%; background: var(--bg); color: var(--text);
+    border: 1px solid var(--panel-border); border-radius: 5px;
+    padding: 8px; font: inherit; margin-bottom: 10px;
+  }
+  #token-err { color: var(--danger); font-size: 13px; margin-top: 8px; display: none; }
+</style>
+</head>
+<body>
+<header>
+  <h1>Hicortex — context</h1>
+  <span class="meta" id="clients"></span>
+  <div class="spacer"></div>
+  <span class="meta" id="updated"></span>
+</header>
+
+<main>
+  <div id="tabs">
+    <div id="addwrap">
+      <input type="text" id="addname" placeholder="new-section-name" autocomplete="off" spellcheck="false">
+      <button class="btn secondary" id="add">Add</button>
+    </div>
+  </div>
+
+  <div id="empty" style="display:none">
+    No sections yet. Add one above (e.g. <code>user</code> or <code>rules</code>) — a lowercase name
+    of letters, digits, <code>-</code> or <code>_</code>.
+  </div>
+
+  <div id="editor" style="display:none">
+    <textarea id="area" spellcheck="false" placeholder="# Markdown…"></textarea>
+    <div id="bar" style="margin-top:12px">
+      <button class="btn" id="save">Save</button>
+      <span class="grow"></span>
+      <span id="msg" class="dim"></span>
+    </div>
+  </div>
+</main>
+
+<div id="overlay">
+  <div class="box">
+    <h2>Authentication required</h2>
+    <p>This server needs a token for remote access.
+       Run <code>hicortex status</code> on the server to get it.</p>
+    <input type="password" id="token-input" placeholder="hctx-…" autocomplete="off">
+    <button class="btn" id="token-submit">Connect</button>
+    <div id="token-err">Still unauthorized — check the token.</div>
+  </div>
+</div>
+
+<script>
+"use strict";
+(function () {
+  // =========================================================================
+  // Section-name allowlist — mirrors the server contract (context-store.ts
+  // SECTION_NAME_RE / SECTION_NAME_MAX). Client check is UX; the server also
+  // enforces it and is the authority.
+  // =========================================================================
+  var NAME_RE = /^[a-z0-9][a-z0-9_-]*$/;
+  var NAME_MAX = 64;
+  function validName(n) {
+    return typeof n === "string" && n.length >= 1 && n.length <= NAME_MAX && NAME_RE.test(n);
+  }
+
+  // =========================================================================
+  // Auth token handling — mirrors assets/viz.html: ?token= handoff (stripped
+  // from history immediately), localStorage persistence, in-page 401 prompt.
+  // On localhost the server bypasses auth, so tokenless fetches just work and
+  // the prompt only appears on a real 401.
+  // =========================================================================
+  var token = null;
+  (function initToken() {
+    var params = new URLSearchParams(window.location.search);
+    var fromUrl = params.get("token");
+    if (fromUrl) {
+      token = fromUrl;
+      try { localStorage.setItem("hicortexToken", fromUrl); } catch (e) { /* private mode */ }
+      params.delete("token");
+      var qs = params.toString();
+      history.replaceState(null, "", window.location.pathname + (qs ? "?" + qs : ""));
+    } else {
+      try { token = localStorage.getItem("hicortexToken"); } catch (e) { token = null; }
+    }
+  })();
+
+  function authHeaders(extra) {
+    var h = extra ? Object.assign({}, extra) : {};
+    if (token) h["Authorization"] = "Bearer " + token;
+    return h;
+  }
+
+  // =========================================================================
+  // DOM refs
+  // =========================================================================
+  var tabsEl = document.getElementById("tabs");
+  var addWrap = document.getElementById("addwrap");
+  var addName = document.getElementById("addname");
+  var addBtn = document.getElementById("add");
+  var emptyEl = document.getElementById("empty");
+  var editorEl = document.getElementById("editor");
+  var area = document.getElementById("area");
+  var saveBtn = document.getElementById("save");
+  var msgEl = document.getElementById("msg");
+  var clientsEl = document.getElementById("clients");
+  var updatedEl = document.getElementById("updated");
+  var overlay = document.getElementById("overlay");
+  var tokenInput = document.getElementById("token-input");
+  var tokenErr = document.getElementById("token-err");
+
+  // =========================================================================
+  // State — sections is name -> { saved, draft, isNew }
+  // =========================================================================
+  var sections = {};        // name -> { saved: string, draft: string, isNew: bool }
+  var order = [];           // tab order (section names)
+  var active = null;        // active section name
+  var afterAuth = null;     // action to retry after a successful token prompt
+
+  function setMsg(text, cls) {
+    msgEl.textContent = text || "";
+    msgEl.className = cls || "dim";
+  }
+
+  function isDirty(name) {
+    var s = sections[name];
+    return !!s && (s.isNew || s.draft !== s.saved);
+  }
+
+  // =========================================================================
+  // Rendering — tab labels are textContent only (never innerHTML). Section
+  // content lives exclusively in the textarea .value.
+  // =========================================================================
+  function renderTabs() {
+    // Remove existing tab buttons but keep the add-section control.
+    var btns = tabsEl.querySelectorAll(".tab");
+    for (var i = 0; i < btns.length; i++) tabsEl.removeChild(btns[i]);
+
+    order.forEach(function (name) {
+      var b = document.createElement("button");
+      b.className = "tab" + (name === active ? " active" : "");
+      b.type = "button";
+      b.appendChild(document.createTextNode(name));
+      if (isDirty(name)) {
+        var dot = document.createElement("span");
+        dot.className = "dirty";
+        dot.textContent = "•"; // bullet = unsaved
+        b.appendChild(dot);
+      }
+      b.addEventListener("click", function () { selectTab(name); });
+      tabsEl.insertBefore(b, addWrap);
+    });
+
+    var hasTabs = order.length > 0;
+    emptyEl.style.display = hasTabs ? "none" : "block";
+    editorEl.style.display = hasTabs && active ? "flex" : "none";
+  }
+
+  function selectTab(name) {
+    // Persist the current textarea into the draft before switching.
+    if (active && sections[active]) sections[active].draft = area.value;
+    active = name;
+    area.value = sections[name] ? sections[name].draft : "";
+    setMsg("", "dim");
+    renderTabs();
+    area.focus();
+  }
+
+  function updateMeta(clients, updatedAt) {
+    if (Array.isArray(clients)) {
+      clientsEl.textContent = clients.length ? "clients: " + clients.join(", ") : "clients: none";
+    }
+    if (updatedAt !== undefined) {
+      updatedEl.textContent = updatedAt ? "updated " + updatedAt : "";
+    }
+  }
+
+  // =========================================================================
+  // Load — GET /context, build tabs from the returned sections keys.
+  // =========================================================================
+  function load() {
+    setMsg("Loading…", "dim");
+    fetch("/context", { headers: authHeaders() })
+      .then(function (resp) {
+        if (resp.status === 401) { afterAuth = load; showTokenPrompt(); throw new Error("unauthorized"); }
+        if (!resp.ok) {
+          return resp.json().catch(function () { return {}; }).then(function (body) {
+            throw new Error(body.error || ("Server error " + resp.status));
+          });
+        }
+        return resp.json();
+      })
+      .then(function (data) {
+        overlay.classList.remove("open");
+        var incoming = data.sections || {};
+        var names = Object.keys(incoming).sort();
+        sections = {};
+        order = [];
+        names.forEach(function (n) {
+          sections[n] = { saved: incoming[n], draft: incoming[n], isNew: false };
+          order.push(n);
+        });
+        // Keep the active tab if it still exists, else pick the first.
+        if (!active || order.indexOf(active) < 0) active = order.length ? order[0] : null;
+        if (active) area.value = sections[active].draft;
+        updateMeta(data.clients, data.updated_at || null);
+        renderTabs();
+        setMsg(order.length ? "" : "", "dim");
+      })
+      .catch(function (err) {
+        if (err.message === "unauthorized") return;
+        setMsg("Failed to load: " + err.message, "err");
+      });
+  }
+
+  // =========================================================================
+  // Save — PUT /context with ONLY the active section (partial upsert).
+  // =========================================================================
+  function save() {
+    if (!active) return;
+    if (sections[active]) sections[active].draft = area.value;
+    var name = active;
+    var value = area.value;
+
+    if (!validName(name)) {
+      setMsg("Invalid section name: " + name, "err");
+      return;
+    }
+
+    var payload = { sections: {} };
+    payload.sections[name] = value;
+
+    saveBtn.disabled = true;
+    setMsg("Saving…", "dim");
+    fetch("/context", {
+      method: "PUT",
+      headers: authHeaders({ "Content-Type": "application/json" }),
+      body: JSON.stringify(payload),
+    })
+      .then(function (resp) {
+        if (resp.status === 401) {
+          afterAuth = save;
+          showTokenPrompt();
+          throw new Error("unauthorized");
+        }
+        return resp.json().catch(function () { return {}; }).then(function (body) {
+          if (!resp.ok) throw new Error(body.error || ("Server error " + resp.status));
+          return body;
+        });
+      })
+      .then(function (body) {
+        overlay.classList.remove("open");
+        var s = sections[name];
+        if (s) { s.saved = value; s.isNew = false; }
+        updateMeta(undefined, body.updated_at || null);
+        setMsg("Saved" + (body.updated_at ? " · " + body.updated_at : ""), "ok");
+        renderTabs();
+      })
+      .catch(function (err) {
+        if (err.message !== "unauthorized") setMsg("Save failed: " + err.message, "err");
+      })
+      .then(function () { saveBtn.disabled = false; });
+  }
+
+  // =========================================================================
+  // Add a new section (client-side; created on first Save). Validated against
+  // the same allowlist BEFORE it can be edited — inline error otherwise.
+  // =========================================================================
+  function addSection() {
+    var name = addName.value.trim();
+    if (!validName(name)) {
+      setMsg("Invalid name — use lowercase letters, digits, - or _ (max 64, no leading - or _).", "err");
+      addName.focus();
+      return;
+    }
+    if (sections[name]) {
+      // Already exists — just switch to it.
+      addName.value = "";
+      selectTab(name);
+      return;
+    }
+    sections[name] = { saved: "", draft: "", isNew: true };
+    order.push(name);
+    addName.value = "";
+    selectTab(name);
+    setMsg("New section “" + name + "” — edit and Save to create it.", "dim");
+  }
+
+  // =========================================================================
+  // Token prompt (remote only — localhost bypasses auth)
+  // =========================================================================
+  function showTokenPrompt() {
+    setMsg("", "dim");
+    overlay.classList.add("open");
+    tokenInput.focus();
+  }
+  function submitToken() {
+    var v = tokenInput.value.trim();
+    if (!v) return;
+    token = v;
+    try { localStorage.setItem("hicortexToken", v); } catch (e) { /* ignore */ }
+    tokenErr.style.display = "none";
+    // Verify with a cheap GET before closing; retry the pending action on success.
+    fetch("/context", { headers: authHeaders() }).then(function (resp) {
+      if (resp.status === 401) { tokenErr.style.display = "block"; return; }
+      overlay.classList.remove("open");
+      var next = afterAuth || load;
+      afterAuth = null;
+      next();
+    }).catch(function () { tokenErr.style.display = "block"; });
+  }
+
+  // =========================================================================
+  // Wiring
+  // =========================================================================
+  saveBtn.addEventListener("click", save);
+  addBtn.addEventListener("click", addSection);
+  addName.addEventListener("keydown", function (e) { if (e.key === "Enter") addSection(); });
+  area.addEventListener("input", function () {
+    if (active && sections[active]) sections[active].draft = area.value;
+    renderTabs();
+  });
+  // Cmd/Ctrl+S saves the active tab.
+  window.addEventListener("keydown", function (e) {
+    if ((e.metaKey || e.ctrlKey) && (e.key === "s" || e.key === "S")) {
+      e.preventDefault();
+      save();
+    }
+  });
+  document.getElementById("token-submit").addEventListener("click", submitToken);
+  tokenInput.addEventListener("keydown", function (e) { if (e.key === "Enter") submitToken(); });
+
+  load();
+})();
+</script>
+</body>
+</html>

package/dist/classify-domains.js

@@ -73,9 +73,9 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runClassifyDomains = runClassifyDomains;
+const paths_js_1 = require("./paths.js");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
-const node_os_1 = require("node:os");
 const db_js_1 = require("./db.js");
 const state_js_1 = require("./state.js");
 const storage = __importStar(require("./storage.js"));
@@ -84,7 +84,7 @@ const domain_classify_js_1 = require("./domain-classify.js");
 const consolidate_js_1 = require("./consolidate.js");
 const schema_prototypes_js_1 = require("./schema-prototypes.js");
 const nofit_js_1 = require("./nofit.js");
-const HICORTEX_HOME = (0, node_path_1.join)((0, node_os_1.homedir)(), ".hicortex");
+const HICORTEX_HOME = (0, paths_js_1.hicortexHome)();
 function readConfig(stateDir) {
     try {
         return JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(stateDir, "config.json"), "utf-8"));

package/dist/cli.js

@@ -114,6 +114,21 @@ switch (command) {
         });
         break;
     }
+    case "context": {
+        // Standing context layer edit surface (spec §6): show|edit against the
+        // configured server. Secondary to the /context/ui Web UI; for headless boxes.
+        const args = process.argv.slice(3);
+        import("./context-cli.js").then(({ runContextCommand, ContextCliError }) => {
+            runContextCommand(args).catch((err) => {
+                if (err instanceof ContextCliError)
+                    console.error(err.message);
+                else
+                    console.error("[hicortex] context command failed:", err instanceof Error ? err.message : err);
+                process.exit(1);
+            });
+        });
+        break;
+    }
     case "status":
         import("./status.js").then(({ runStatus }) => {
             runStatus().catch((err) => {
@@ -159,6 +174,7 @@ Commands:
   relink          Resumable link-discovery pass over the ENTIRE corpus (server mode)
   classify-domains  Backfill content-based domain tags over the corpus (server mode, needs config.domains)
   lessons-context Fetch lessons and print Markdown to stdout (CC SessionStart hook)
+  context         Standing context layer (show|edit) against the configured server
   status          Show current configuration and stats
   uninstall       Remove CC integration (preserves DB)
 
@@ -174,6 +190,8 @@ Options:
   classify-domains --all    Reclassify every memory (default: only NULL/stale-domain rows)
   classify-domains --batch <n>  Memories per batch (default: 200)
   classify-domains --reset  Restart from the beginning (ignore saved cursor)
+  context show [name]       Print all context sections, or just <name> (raw, pipeable)
+  context edit <name>       Edit a section in $EDITOR; PUT only if changed
 
 Examples:
   npx @gamaze/hicortex server

package/dist/context-cli.d.ts

@@ -0,0 +1,58 @@
+/**
+ * context-cli — `hicortex context show|edit`, the secondary/headless edit
+ * surface for the standing context layer (spec 2026-07-12 §6). The Web UI
+ * (`/context/ui`) is primary; this exists for boxes without a browser.
+ *
+ *   hicortex context show [name]   GET /context → print all sections, or one
+ *   hicortex context edit <name>   GET section → $EDITOR → PUT if changed
+ *
+ * URL/token resolution mirrors lessons-context.ts:44-49 (client mode →
+ * config.serverUrl; server mode → http://127.0.0.1:<port>; token from
+ * config.authToken) — explicitly NOT the hardcoded 127.0.0.1:8787 of
+ * status.ts. Fails soft with a clear message + non-zero exit on any server
+ * error, distinguishing a down server from an HTTP error (esp. 404 = server
+ * too old / wrong endpoint), like the OC plugin's describeGetFailure.
+ */
+/** Thrown for any expected, user-facing failure. cli.ts prints .message + exits 1. */
+export declare class ContextCliError extends Error {
+}
+export interface ContextServerTarget {
+    baseUrl: string;
+    authToken?: string;
+}
+/**
+ * Resolve the server URL + token from a parsed config object. Pure + exported
+ * so it is unit-testable without a live config. Follows lessons-context.ts.
+ */
+export declare function resolveContextTarget(config: Record<string, unknown>): ContextServerTarget;
+/** Read ~/.hicortex/config.json (or $HICORTEX_HOME/config.json). Missing → {}. */
+export declare function loadConfig(): Record<string, unknown>;
+/** The Save decision: PUT only when the edited content differs. Pure + tested. */
+export declare function sectionChanged(before: string, after: string): boolean;
+export interface ContextGetResponse {
+    sections: Record<string, string>;
+    updated_at: string | null;
+    clients: string[];
+}
+/** GET /context. Throws ContextCliError with a clear message on any failure. */
+export declare function getContext(target: ContextServerTarget): Promise<ContextGetResponse>;
+/** PUT one section. Throws ContextCliError with a clear message on any failure. */
+export declare function putSection(target: ContextServerTarget, name: string, content: string): Promise<void>;
+/** Readable rendering of every section + the resolved clients line (show, no name). */
+export declare function formatAllSections(data: ContextGetResponse): string;
+/** Raw markdown for one section (show <name>), or null if it does not exist. */
+export declare function formatOneSection(data: ContextGetResponse, name: string): string | null;
+/**
+ * Default editor spawn: opens `file` in the first available editor, blocking
+ * until it exits. Returns true if an editor ran, false if none was found.
+ * Injectable so tests never actually spawn an editor.
+ */
+export type EditorSpawn = (file: string) => boolean;
+/**
+ * `edit <name>`: validate name (fast-fail; the server enforces too) → fetch
+ * current content → $EDITOR on a temp file → PUT only if changed. Temp file is
+ * always cleaned up. `spawn` is injectable for tests.
+ */
+export declare function runEdit(name: string, spawn?: EditorSpawn): Promise<void>;
+/** Dispatch for `hicortex context <sub>`. Throws ContextCliError on bad usage/failure. */
+export declare function runContextCommand(args: string[]): Promise<void>;