@gamaze/hicortex 0.11.1 → 0.12.1

package/dist/mcp-server.js

@@ -50,6 +50,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.startServer = startServer;
 const express_1 = __importDefault(require("express"));
+const node_path_1 = require("node:path");
 const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const sse_js_1 = require("@modelcontextprotocol/sdk/server/sse.js");
 const zod_1 = require("zod");
@@ -61,6 +62,7 @@ const embedder_js_1 = require("./embedder.js");
 const storage = __importStar(require("./storage.js"));
 const graph_js_1 = require("./graph.js");
 const viz_js_1 = require("./viz.js");
+const context_store_js_1 = require("./context-store.js");
 const retrieval = __importStar(require("./retrieval.js"));
 const seed_lesson_js_1 = require("./seed-lesson.js");
 const distiller_js_1 = require("./distiller.js");
@@ -76,6 +78,9 @@ let llmConfig = null;
 // immediate abort ("strict", default) or a fallback to the base model ("local").
 let distillFallbackMode = "strict";
 let stateDir = "";
+// Resolved contextClients list (spec §2) — the harness names allowed to inject
+// the standing context layer. Echoed by GET /context so each hook self-gates.
+let contextClients = ["cc"];
 // Cache detectChunkSize results keyed by "<provider>/<model>@<baseUrl>" so we
 // probe each endpoint once per server boot rather than once per /distill request.
 const chunkSizeCache = new Map();
@@ -109,19 +114,19 @@ function createMcpServer() {
             return { content: [{ type: "text", text: `Search failed: ${err instanceof Error ? err.message : String(err)}` }], isError: true };
         }
     });
-    // -- hicortex_context --
-    server.tool("hicortex_context", "Get recent context memories, optionally filtered by project. Useful to recall what happened recently.", {
+    // -- hicortex_recent --
+    server.tool("hicortex_recent", "Get recent memories, optionally filtered by project. Queryless recall of the latest memories by project, ranked by importance. Useful to catch up on what happened recently.", {
         project: zod_1.z.string().optional().describe("Filter by project name"),
         limit: zod_1.z.coerce.number().optional().describe("Max results (default 10)"),
     }, async ({ project, limit }) => {
         if (!db)
             return { content: [{ type: "text", text: "Hicortex not initialized" }], isError: true };
         try {
-            const results = retrieval.searchContext(db, { project, limit });
+            const results = retrieval.searchRecent(db, { project, limit });
             return { content: [{ type: "text", text: formatResults(results) }] };
         }
         catch (err) {
-            return { content: [{ type: "text", text: `Context search failed: ${err instanceof Error ? err.message : String(err)}` }], isError: true };
+            return { content: [{ type: "text", text: `Recent recall failed: ${err instanceof Error ? err.message : String(err)}` }], isError: true };
         }
     });
     // -- hicortex_ingest --
@@ -387,7 +392,7 @@ async function startServer(options = {}) {
         console.warn("╔══════════════════════════════════════════════════════════════╗");
         console.warn("║  NO LLM CONFIGURED — running in recall-only mode            ║");
         console.warn("║                                                              ║");
-        console.warn("║  search / lessons / context: ENABLED                        ║");
+        console.warn("║  search / lessons / recent: ENABLED                         ║");
         console.warn("║  /distill (capture) and consolidation: DISABLED             ║");
         console.warn("║                                                              ║");
         console.warn("║  To enable capture, run:                                    ║");
@@ -422,6 +427,15 @@ async function startServer(options = {}) {
         console.warn("[hicortex] WARNING: no authToken configured — remote connections will be rejected " +
             "(localhost still works). Run `npx @gamaze/hicortex init` to generate a token.");
     }
+    // Context layer (0.12): resolve which harnesses may inject the standing
+    // context. Warn once per boot on unknown names so typos (e.g. "herms")
+    // surface instead of silently dropping.
+    const resolvedClients = (0, context_store_js_1.resolveContextClients)(savedConfig?.contextClients);
+    contextClients = resolvedClients.clients;
+    if (resolvedClients.dropped.length > 0) {
+        console.warn(`[hicortex] Ignoring unknown contextClients: ${resolvedClients.dropped.join(", ")} ` +
+            `(known: cc, hermes, oc)`);
+    }
     // Express app
     const app = (0, express_1.default)();
     // Raise the body limit — whole-session denoised transcripts exceed the 100 kB default.
@@ -431,7 +445,7 @@ async function startServer(options = {}) {
         const origin = req.headers.origin;
         if (origin) {
             res.setHeader("Access-Control-Allow-Origin", origin);
-            res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
+            res.setHeader("Access-Control-Allow-Methods", "GET, PUT, POST, OPTIONS");
             res.setHeader("Access-Control-Allow-Headers", "Content-Type, Accept, Authorization");
             res.setHeader("Access-Control-Allow-Credentials", "true");
             res.setHeader("Vary", "Origin");
@@ -567,8 +581,8 @@ async function startServer(options = {}) {
             res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
         }
     });
-    // REST /context — recent context memories, optionally filtered by project.
-    app.get("/context", (req, res) => {
+    // REST /recent — recent memories, optionally filtered by project.
+    app.get("/recent", (req, res) => {
         if (!db) {
             res.status(503).json({ error: "Server not initialized" });
             return;
@@ -579,13 +593,51 @@ async function startServer(options = {}) {
             ? req.query.privacy.split(",").map((s) => s.trim()).filter(Boolean)
             : undefined;
         try {
-            const results = retrieval.searchContext(db, { project, limit, privacy });
+            const results = retrieval.searchRecent(db, { project, limit, privacy });
             res.json({ results });
         }
         catch (err) {
             res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
         }
     });
+    // -------------------------------------------------------------------------
+    // REST /context — standing context layer (0.12, spec 2026-07-12).
+    //
+    // GET  → { sections, updated_at, clients } read from <hicortex-home>/context/.
+    // PUT  → partial upsert of named sections (allowlisted names, atomic).
+    //
+    // This is NOT recall. The recall endpoint that previously held this name is
+    // now /recent (§Naming). Stale-client tripwire: old recall callers always
+    // send project/limit/privacy query params; context-layer callers never do —
+    // so those params on GET /context return a loud, self-explaining 400 instead
+    // of silently degrading recall to an empty {sections} response.
+    //
+    // Auth is the standard model (bearer; localhost bypass) via the shared
+    // middleware — no special-casing here.
+    // -------------------------------------------------------------------------
+    // Thin adapters: all logic (tripwire, validation, allowlist, atomicity,
+    // symlink safety, size warn) lives in the pure handlers in context-store.ts,
+    // which the tests exercise directly — no mirror-app drift.
+    app.get("/context", (req, res) => {
+        try {
+            const r = (0, context_store_js_1.handleContextGet)((0, node_path_1.join)(stateDir, "context"), contextClients, req.query);
+            res.status(r.status).json(r.body);
+        }
+        catch (err) {
+            res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
+        }
+    });
+    app.put("/context", (req, res) => {
+        try {
+            const r = (0, context_store_js_1.handleContextPut)((0, node_path_1.join)(stateDir, "context"), req.body);
+            if (r.warn)
+                console.warn(`[hicortex] ${r.warn}`);
+            res.status(r.status).json(r.body);
+        }
+        catch (err) {
+            res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
+        }
+    });
     // REST /distill — canonical capture endpoint (0.9.0+).
     // Every machine (including the server itself) POSTs denoised session text here.
     // The server distills, embeds, stores. Body limit: 25 MB (raised at app init).
@@ -916,6 +968,16 @@ async function startServer(options = {}) {
     // (static third-party code from the npm tarball, no data) — the exemption
     // lives in createAuthMiddleware next to the /viz one.
     app.get("/viz/vendor/:file", (0, viz_js_1.vizVendorHandler)());
+    // GET /context/ui — standing-context editor page (0.12, spec 2026-07-12 §5).
+    //
+    // The PRIMARY edit surface for the context layer. Self-contained HTML (inline
+    // CSS/JS, zero external requests) served from assets/context.html; builds one
+    // tab per section from GET /context and saves via PUT /context. The page
+    // SHELL is public (exempted in createAuthMiddleware, like /viz — it carries
+    // no data); the GET/PUT /context data calls stay bearer-only (localhost
+    // bypass). The page collects the token client-side: ?token= URL param
+    // (stripped on load) or an in-page prompt on 401, persisted in localStorage.
+    app.get("/context/ui", (0, viz_js_1.contextUiHandler)());
     // SSE endpoint — each connection gets its own McpServer + transport
     app.get("/sse", async (req, res) => {
         const transport = new sse_js_1.SSEServerTransport("/messages", res);

package/dist/nightly-status.js

@@ -11,13 +11,14 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.showNightlyStatus = showNightlyStatus;
+const paths_js_1 = require("./paths.js");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const node_os_1 = require("node:os");
 const node_child_process_1 = require("node:child_process");
 const db_js_1 = require("./db.js");
 const state_js_1 = require("./state.js");
-const HICORTEX_HOME = (0, node_path_1.join)((0, node_os_1.homedir)(), ".hicortex");
+const HICORTEX_HOME = (0, paths_js_1.hicortexHome)();
 const CONFIG_PATH = (0, node_path_1.join)(HICORTEX_HOME, "config.json");
 async function showNightlyStatus() {
     console.log("Hicortex Nightly Pipeline Status");
@@ -92,6 +93,12 @@ async function showNightlyStatus() {
         catch { /* not installed */ }
     }
     console.log(`Timer:       ${timerInfo}${!timerActive ? " ⚠ Pipeline will NOT run automatically" : ""}`);
+    // Scheduled runs log here (launchd plist / systemd unit both append) —
+    // point operators at it, since the runs' output is not in journalctl.
+    const nightlyLogPath = (0, node_path_1.join)(HICORTEX_HOME, "nightly.log");
+    if ((0, node_fs_1.existsSync)(nightlyLogPath)) {
+        console.log(`Log:         ${nightlyLogPath}`);
+    }
     // DB stats
     const dbPath = (0, db_js_1.resolveDbPath)();
     if ((0, node_fs_1.existsSync)(dbPath)) {

package/dist/nightly.js

@@ -46,9 +46,9 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runNightly = runNightly;
+const paths_js_1 = require("./paths.js");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
-const node_os_1 = require("node:os");
 let VERSION = "0.0.0";
 try {
     VERSION = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(__dirname, "..", "package.json"), "utf-8")).version;
@@ -69,7 +69,7 @@ const oc_transcript_reader_js_1 = require("./oc-transcript-reader.js");
 const features_js_1 = require("./features.js");
 const state_js_1 = require("./state.js");
 const telemetry_js_1 = require("./telemetry.js");
-const HICORTEX_HOME = (0, node_path_1.join)((0, node_os_1.homedir)(), ".hicortex");
+const HICORTEX_HOME = (0, paths_js_1.hicortexHome)();
 function readNightlyConfig(stateDir) {
     try {
         const configPath = (0, node_path_1.join)(stateDir, "config.json");
@@ -103,10 +103,29 @@ function writeLastRun(stateDir = HICORTEX_HOME) {
         return s;
     }, stateDir);
 }
+const NIGHTLY_LOG_MAX_BYTES = 1024 * 1024; // 1 MB — years of normal runs
+/**
+ * Keep ~/.hicortex/nightly.log bounded. The launchd plist and systemd unit
+ * both append to it forever with no rotation, and the typical volatile-journal
+ * target is a Raspberry Pi on a small SD card. Copy-then-truncate (not rename)
+ * because the process's own stdout may hold an O_APPEND fd on this very file —
+ * truncation keeps that fd valid and subsequent writes land at the new end.
+ */
+function rotateNightlyLog(stateDir = HICORTEX_HOME) {
+    const logPath = (0, node_path_1.join)(stateDir, "nightly.log");
+    try {
+        if ((0, node_fs_1.statSync)(logPath).size <= NIGHTLY_LOG_MAX_BYTES)
+            return;
+        (0, node_fs_1.copyFileSync)(logPath, `${logPath}.old`);
+        (0, node_fs_1.truncateSync)(logPath);
+    }
+    catch { /* no log file, or unreadable — nothing to rotate */ }
+}
 async function runNightly(options = {}) {
     const dryRun = options.dryRun ?? false;
     const captureOnly = options.captureOnly ?? false;
     const stateDir = options.stateDir ?? HICORTEX_HOME;
+    rotateNightlyLog(stateDir);
     // One-time migration of legacy state files (no-op if state.json exists)
     (0, state_js_1.migrateLegacyState)(stateDir);
     // Check mode: client or server

package/dist/paths.d.ts

@@ -0,0 +1 @@
+export declare function hicortexHome(): string;

package/dist/paths.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hicortexHome = hicortexHome;
+/**
+ * Canonical Hicortex home resolution — the single source of truth (#174).
+ *
+ * Honors the HICORTEX_HOME env override (a headless/test seam, mirroring the
+ * HICORTEX_DB_PATH convention in db.ts); otherwise defaults to ~/.hicortex.
+ * Every module that needs the home dir routes through here, so the override
+ * behaves consistently across all commands instead of being honored by some
+ * (context-cli, lessons-context) and hardcoded away by others.
+ */
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+function hicortexHome() {
+    return process.env.HICORTEX_HOME ?? (0, node_path_1.join)((0, node_os_1.homedir)(), ".hicortex");
+}

package/dist/relink.js

@@ -74,14 +74,14 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getStoredEmbedding = getStoredEmbedding;
 exports.runRelink = runRelink;
+const paths_js_1 = require("./paths.js");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
-const node_os_1 = require("node:os");
 const db_js_1 = require("./db.js");
 const storage = __importStar(require("./storage.js"));
 const consolidate_js_1 = require("./consolidate.js");
 const state_js_1 = require("./state.js");
-const HICORTEX_HOME = (0, node_path_1.join)((0, node_os_1.homedir)(), ".hicortex");
+const HICORTEX_HOME = (0, paths_js_1.hicortexHome)();
 function readConfig(stateDir) {
     try {
         return JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(stateDir, "config.json"), "utf-8"));

package/dist/retrieval.d.ts

@@ -55,7 +55,7 @@ export declare function retrieve(db: Database.Database, embedFn: EmbedFn, query:
 /**
  * Get recent context, optionally filtered by project and privacy.
  */
-export declare function searchContext(db: Database.Database, options?: {
+export declare function searchRecent(db: Database.Database, options?: {
     project?: string | null;
     limit?: number;
     privacy?: string[];

package/dist/retrieval.js

@@ -52,7 +52,7 @@ exports.l2ToCosine = l2ToCosine;
 exports.effectiveStrength = effectiveStrength;
 exports.computeScore = computeScore;
 exports.retrieve = retrieve;
-exports.searchContext = searchContext;
+exports.searchRecent = searchRecent;
 const storage = __importStar(require("./storage.js"));
 const BASE_DECAY = 0.0005;
 /**
@@ -315,7 +315,7 @@ async function retrieve(db, embedFn, query, options) {
 /**
  * Get recent context, optionally filtered by project and privacy.
  */
-function searchContext(db, options) {
+function searchRecent(db, options) {
     const limit = options?.limit ?? 10;
     const project = options?.project;
     const privacy = options?.privacy;

package/dist/state.js

@@ -23,10 +23,10 @@ exports.saveState = saveState;
 exports.updateState = updateState;
 exports.migrateLegacyState = migrateLegacyState;
 exports.describeLastNightly = describeLastNightly;
+const paths_js_1 = require("./paths.js");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
-const node_os_1 = require("node:os");
-const HICORTEX_HOME = (0, node_path_1.join)((0, node_os_1.homedir)(), ".hicortex");
+const HICORTEX_HOME = (0, paths_js_1.hicortexHome)();
 const STATE_FILE = "state.json";
 /**
  * Load the state file. Returns an empty state if the file is missing

package/dist/status.js

@@ -4,6 +4,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runStatus = runStatus;
+const paths_js_1 = require("./paths.js");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const node_os_1 = require("node:os");
@@ -11,7 +12,7 @@ const node_child_process_1 = require("node:child_process");
 const db_js_1 = require("./db.js");
 const features_js_1 = require("./features.js");
 const state_js_1 = require("./state.js");
-const HICORTEX_HOME = (0, node_path_1.join)((0, node_os_1.homedir)(), ".hicortex");
+const HICORTEX_HOME = (0, paths_js_1.hicortexHome)();
 const CC_SETTINGS = (0, node_path_1.join)((0, node_os_1.homedir)(), ".claude", "settings.json");
 const OC_CONFIG = (0, node_path_1.join)((0, node_os_1.homedir)(), ".openclaw", "openclaw.json");
 async function runStatus() {

package/dist/uninstall.js

@@ -5,13 +5,14 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runUninstall = runUninstall;
+const paths_js_1 = require("./paths.js");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const node_os_1 = require("node:os");
 const node_child_process_1 = require("node:child_process");
 const node_readline_1 = require("node:readline");
 const claude_md_js_1 = require("./claude-md.js");
-const HICORTEX_HOME = (0, node_path_1.join)((0, node_os_1.homedir)(), ".hicortex");
+const HICORTEX_HOME = (0, paths_js_1.hicortexHome)();
 const CC_SETTINGS = (0, node_path_1.join)((0, node_os_1.homedir)(), ".claude", "settings.json");
 const CC_COMMANDS_DIR = (0, node_path_1.join)((0, node_os_1.homedir)(), ".claude", "commands");
 const CLAUDE_MD = (0, node_path_1.join)((0, node_os_1.homedir)(), ".claude", "CLAUDE.md");
@@ -32,29 +33,45 @@ async function runUninstall() {
         return;
     }
     console.log();
-    // 1. Stop and remove daemon
+    // 1. Stop and remove daemon + nightly timer (both units, or the timer
+    //    keeps firing against a half-removed install)
     const os = (0, node_os_1.platform)();
     if (os === "darwin") {
-        const plistPath = (0, node_path_1.join)((0, node_os_1.homedir)(), "Library", "LaunchAgents", "com.gamaze.hicortex.plist");
-        if ((0, node_fs_1.existsSync)(plistPath)) {
-            try {
-                (0, node_child_process_1.execSync)(`launchctl unload ${plistPath} 2>/dev/null`);
+        for (const name of ["com.gamaze.hicortex.plist", "com.gamaze.hicortex-nightly.plist"]) {
+            const plistPath = (0, node_path_1.join)((0, node_os_1.homedir)(), "Library", "LaunchAgents", name);
+            if ((0, node_fs_1.existsSync)(plistPath)) {
+                try {
+                    (0, node_child_process_1.execSync)(`launchctl unload ${plistPath} 2>/dev/null`);
+                }
+                catch { /* not loaded */ }
+                (0, node_fs_1.unlinkSync)(plistPath);
+                console.log(`  ✓ Removed ${name}`);
             }
-            catch { /* not loaded */ }
-            (0, node_fs_1.unlinkSync)(plistPath);
-            console.log("  ✓ Removed launchd daemon");
         }
     }
     else if (os === "linux") {
         try {
             (0, node_child_process_1.execSync)("systemctl --user disable --now hicortex.service 2>/dev/null");
-            const servicePath = (0, node_path_1.join)((0, node_os_1.homedir)(), ".config", "systemd", "user", "hicortex.service");
-            if ((0, node_fs_1.existsSync)(servicePath))
-                (0, node_fs_1.unlinkSync)(servicePath);
-            (0, node_child_process_1.execSync)("systemctl --user daemon-reload 2>/dev/null");
-            console.log("  ✓ Removed systemd service");
         }
         catch { /* not installed */ }
+        try {
+            (0, node_child_process_1.execSync)("systemctl --user disable --now hicortex-nightly.timer 2>/dev/null");
+        }
+        catch { /* not installed */ }
+        const unitDir = (0, node_path_1.join)((0, node_os_1.homedir)(), ".config", "systemd", "user");
+        for (const name of ["hicortex.service", "hicortex-nightly.timer", "hicortex-nightly.service"]) {
+            const unitPath = (0, node_path_1.join)(unitDir, name);
+            try {
+                if ((0, node_fs_1.existsSync)(unitPath))
+                    (0, node_fs_1.unlinkSync)(unitPath);
+            }
+            catch { /* leave it */ }
+        }
+        try {
+            (0, node_child_process_1.execSync)("systemctl --user daemon-reload 2>/dev/null");
+        }
+        catch { /* fine */ }
+        console.log("  ✓ Removed systemd service + nightly timer");
     }
     // 2. Remove MCP from CC
     try {

package/dist/viz.d.ts

@@ -51,6 +51,21 @@ export declare function readVizHtml(): string;
  * when the asset cannot be read.
  */
 export declare function vizHandler(): express.RequestHandler;
+/**
+ * Resolve the on-disk path of the context-layer editor page. Throws (fail
+ * explicitly) when the asset is missing — same contract as resolveVizHtmlPath.
+ * assets/ sits next to both dist/ (dist/viz.js → ../assets/) and src/
+ * (src/viz.ts → ../assets/ under tsx), so one sibling candidate covers both.
+ */
+export declare function resolveContextHtmlPath(): string;
+/** Read the context editor page. Read at request time so a reinstall is live. */
+export declare function readContextHtml(): string;
+/**
+ * Express handler for GET /context/ui — the PRIMARY edit surface for the
+ * standing context layer. 503 with the usual {error} shape when the asset
+ * cannot be read, exactly like vizHandler.
+ */
+export declare function contextUiHandler(): express.RequestHandler;
 /**
  * Resolve the on-disk path of an allowlisted vendor bundle, or null when the
  * requested name is not on the allowlist. The filesystem path is built ONLY

package/dist/viz.js

@@ -31,6 +31,9 @@ exports.createAuthMiddleware = createAuthMiddleware;
 exports.resolveVizHtmlPath = resolveVizHtmlPath;
 exports.readVizHtml = readVizHtml;
 exports.vizHandler = vizHandler;
+exports.resolveContextHtmlPath = resolveContextHtmlPath;
+exports.readContextHtml = readContextHtml;
+exports.contextUiHandler = contextUiHandler;
 exports.resolveVizVendorPath = resolveVizVendorPath;
 exports.vizVendorHandler = vizVendorHandler;
 const node_fs_1 = require("node:fs");
@@ -70,6 +73,14 @@ function createAuthMiddleware(authToken) {
         // normal Authorization header on its data fetches.
         if (req.method === "GET" && req.path === "/viz")
             return next();
+        // The /context/ui page SHELL is public for the same reason as /viz: a
+        // self-contained static editor page, no data and no secrets (it ships
+        // verbatim in the npm tarball). The standing-context DATA it edits comes
+        // from GET/PUT /context, which stay bearer-only (localhost bypass) like
+        // every other data route; the page collects the token client-side and
+        // sends it as a normal Authorization header on its /context fetches.
+        if (req.method === "GET" && req.path === "/context/ui")
+            return next();
         // The pinned renderer bundles the /viz page loads (#139) are public for
         // the same reason as the shell: static third-party code shipped verbatim
         // in the npm tarball, zero data. Kept tight: GET only, and ONLY names on
@@ -136,6 +147,43 @@ function vizHandler() {
         }
     };
 }
+// ---------------------------------------------------------------------------
+// Context layer editor page (/context/ui, 0.12 — spec 2026-07-12 §5)
+// ---------------------------------------------------------------------------
+/**
+ * Resolve the on-disk path of the context-layer editor page. Throws (fail
+ * explicitly) when the asset is missing — same contract as resolveVizHtmlPath.
+ * assets/ sits next to both dist/ (dist/viz.js → ../assets/) and src/
+ * (src/viz.ts → ../assets/ under tsx), so one sibling candidate covers both.
+ */
+function resolveContextHtmlPath() {
+    const candidates = [(0, node_path_1.join)(__dirname, "..", "assets", "context.html")];
+    for (const candidate of candidates) {
+        if ((0, node_fs_1.existsSync)(candidate))
+            return candidate;
+    }
+    throw new Error(`context.html asset not found — looked in: ${candidates.join(", ")}. ` +
+        `The package install is incomplete (assets/ missing).`);
+}
+/** Read the context editor page. Read at request time so a reinstall is live. */
+function readContextHtml() {
+    return (0, node_fs_1.readFileSync)(resolveContextHtmlPath(), "utf-8");
+}
+/**
+ * Express handler for GET /context/ui — the PRIMARY edit surface for the
+ * standing context layer. 503 with the usual {error} shape when the asset
+ * cannot be read, exactly like vizHandler.
+ */
+function contextUiHandler() {
+    return (_req, res) => {
+        try {
+            res.type("html").send(readContextHtml());
+        }
+        catch (err) {
+            res.status(503).json({ error: err instanceof Error ? err.message : String(err) });
+        }
+    };
+}
 /**
  * Resolve the on-disk path of an allowlisted vendor bundle, or null when the
  * requested name is not on the allowlist. The filesystem path is built ONLY

package/hermes-plugin/hicortex/README.md

@@ -15,28 +15,27 @@ Gives [Hermes](https://github.com/nousresearch/hermes-agent) agents self-learnin
 | `prefetch(query)` | recall relevant memories before each turn | `GET /search` |
 | `queue_prefetch(query)` | background recall for the next turn | `GET /search` |
 | `system_prompt_block()` | inject distilled lessons + memory index | `GET /lessons` |
-| `get_tool_schemas()` | exposes the 8 unified tools + `hicortex_recall_recent` | see tool table below |
+| `get_tool_schemas()` | exposes the 8 unified tools | see tool table below |
 
 That's the whole surface. No `sync_turn`, no compaction/session-end capture — those are intentionally absent.
 
-### Tools (unified 8 + 1 Hermes-specific)
+### Tools (unified 8)
 
 | Tool | REST call | Description |
 |---|---|---|
 | `hicortex_search` | `GET /search` | Semantic search over long-term memory |
-| `hicortex_context` | `GET /context` | Recent context memories by project |
+| `hicortex_recent` | `GET /recent` | Recent memories by project (queryless recall; was `hicortex_context`/`hicortex_recall_recent` before 0.12) |
 | `hicortex_ingest` | `POST /ingest` | Store a new memory |
 | `hicortex_lessons` | `GET /lessons` | Get distilled lessons |
 | `hicortex_index` | `GET /index` | Knowledge domain index |
 | `hicortex_graph` | `GET /graph` | Graph queries (neighbors/hubs/path) |
 | `hicortex_update` | `POST /update` | Update a memory (re-embeds on content change) |
 | `hicortex_delete` | `POST /delete` | Permanently delete a memory and its links |
-| `hicortex_recall_recent` | `GET /context` | Hermes-specific alias for context recall |
 
 ## Prerequisites
 
 - A reachable Hicortex server (default `http://localhost:8787`). Stand one up with `npx @gamaze/hicortex init`.
-- The server needs the REST `/search`, `/context`, `/lessons` endpoints (Hicortex ≥ 0.7).
+- The server needs the REST `/search`, `/recent`, `/lessons` endpoints (Hicortex ≥ 0.12 — this plugin version does not talk to older servers; upgrade the server first).
 
 ## Install
 

package/hermes-plugin/hicortex/__init__.py

@@ -1,7 +1,7 @@
 """Hicortex memory provider plugin for Hermes — recall-only.
 
 Recall:   prefetch()          -> GET /search   (relevant memories before each turn)
-          tools               -> hicortex_search / hicortex_recall_recent
+          tools               -> hicortex_search / hicortex_recent
           system_prompt_block -> lessons injected into the system prompt
 
 Capture is NOT the plugin's job. A nightly reader on the Hicortex server

package/hermes-plugin/hicortex/client.py

@@ -83,14 +83,14 @@ class HicortexClient:
             {"query": query, "limit": limit, "project": project, "privacy": privacy},
         ).get("results", [])
 
-    def context(
+    def recent(
         self,
         project: Optional[str] = None,
         limit: int = 10,
         privacy: Optional[str] = None,
     ) -> list[dict]:
         return self._get(
-            "/context", {"project": project, "limit": limit, "privacy": privacy}
+            "/recent", {"project": project, "limit": limit, "privacy": privacy}
         ).get("results", [])
 
     def lessons(self) -> dict[str, Any]:

package/hermes-plugin/hicortex/plugin.yaml

@@ -1,6 +1,6 @@
 name: hicortex
-version: 0.4.0
-description: "Self-learning memory for Hermes agents — every session is distilled into lessons overnight, and your agent wakes up wiser. Injects fresh lessons each turn and exposes the full 8-tool memory surface (search, context, ingest, lessons, index, graph, update, delete) via a shared Hicortex server. Stdlib-only."
+version: 0.5.0
+description: "Self-learning memory for Hermes agents — every session is distilled into lessons overnight, and your agent wakes up wiser. Injects fresh lessons each turn and exposes the full 8-tool memory surface (search, recent, ingest, lessons, index, graph, update, delete) via a shared Hicortex server. Stdlib-only."
 pip_dependencies: []
 hooks: []
 requires_env:

package/hermes-plugin/hicortex/provider.py

@@ -2,7 +2,7 @@
 
 Recall:   prefetch()          -> GET /search   (relevant memories before each turn)
           queue_prefetch()    -> GET /search   (background recall for the next turn)
-          tools               -> hicortex_search / hicortex_recall_recent
+          tools               -> hicortex_search / hicortex_recent
           system_prompt_block -> lessons + memory index injected into the prompt
 
 Capture is NOT the plugin's job. A nightly reader on the Hicortex server
@@ -152,7 +152,7 @@ class HicortexProvider(MemoryProvider):
         lines = [
             "## Hicortex long-term memory",
             "You have shared long-term memory across sessions. Use `hicortex_search` "
-            "for specific recall and `hicortex_recall_recent` for recent context.",
+            "for specific recall and `hicortex_recent` for recent memories by project.",
         ]
         if lessons:
             lines.append("Lessons:")
@@ -188,24 +188,11 @@ class HicortexProvider(MemoryProvider):
                 },
             },
             {
-                "name": "hicortex_recall_recent",
-                "description": "Recall recent context memories, optionally filtered by project.",
-                "parameters": {
-                    "type": "object",
-                    "properties": {
-                        "project": {"type": "string"},
-                        "limit": {
-                            "type": "number",
-                            "description": "Max results (default 10)",
-                        },
-                    },
-                },
-            },
-            {
-                "name": "hicortex_context",
+                "name": "hicortex_recent",
                 "description": (
-                    "Get recent context memories, optionally filtered by project. "
-                    "Useful to recall what happened recently."
+                    "Get recent memories, optionally filtered by project. Queryless recall "
+                    "of the latest memories by project, ranked by importance. Useful to "
+                    "catch up on what happened recently."
                 ),
                 "parameters": {
                     "type": "object",
@@ -335,8 +322,8 @@ class HicortexProvider(MemoryProvider):
                 )
                 return json.dumps(hits)
 
-            elif tool_name in ("hicortex_recall_recent", "hicortex_context"):
-                hits = client.context(
+            elif tool_name == "hicortex_recent":
+                hits = client.recent(
                     project=args.get("project") or self._project,
                     limit=int(args.get("limit", 10)),
                 )