@gamaze/hicortex 0.15.3 → 0.16.0

package/dist/init.d.ts

@@ -13,7 +13,7 @@
  *   - Register MCP server in CC settings
  *   - Install CC SessionStart hook for query-time lessons
  *   - Strip old static CLAUDE.md learnings block if present
- *   - Install CC custom commands (/learn, /hicortex-activate)
+ *   - Remove legacy pre-0.10 CC commands (/learn, /hicortex-activate) if present
  */
 import type { DomainDef } from "./types.js";
 /**

package/dist/init.js

@@ -14,7 +14,7 @@
  *   - Register MCP server in CC settings
  *   - Install CC SessionStart hook for query-time lessons
  *   - Strip old static CLAUDE.md learnings block if present
- *   - Install CC custom commands (/learn, /hicortex-activate)
+ *   - Remove legacy pre-0.10 CC commands (/learn, /hicortex-activate) if present
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.GENERIC_DEFAULT_DOMAINS = void 0;
@@ -255,98 +255,50 @@ function allowHicortexTools() {
         console.log(`  ✓ Added Hicortex tool permissions to ${CC_SETTINGS}`);
     }
 }
-function installCcCommands() {
-    (0, node_fs_1.mkdirSync)(CC_COMMANDS_DIR, { recursive: true });
-    // /learn command
-    const learnContent = `---
-name: learn
-description: Save an explicit learning/insight to Hicortex long-term memory. Immediate storage, no nightly wait. Use when you discover something worth remembering across sessions.
-argument-hint: <learning to save>
-allowed-tools: mcp__hicortex__hicortex_ingest, mcp__hicortex__hicortex_search, mcp__hicortex__hicortex_recent, mcp__hicortex__hicortex_lessons
----
-
-# Save Learning to Hicortex
-
-When invoked with \`/learn <text>\`, store the learning in long-term memory via the Hicortex MCP tool.
-
-## Steps
-
-1. Parse the text after \`/learn\`
-2. Clean it up into a clear, self-contained statement that will make sense months from now
-3. Include the "why" when relevant
-4. Add today's date for temporal context
-5. Call the \`hicortex_ingest\` tool with:
-   - \`content\`: The learning text prefixed with "LEARNING: " and suffixed with the date
-   - \`project\`: "global" (unless clearly project-specific)
-   - \`memory_type\`: "lesson"
-6. Confirm what was saved (brief, one line)
-
-## Example
-
-\`/learn always check provider docs before assuming an API uses the same auth scheme as OpenAI\`
-
-Becomes a call to hicortex_ingest with:
-- content: "LEARNING: always check provider docs before assuming an API uses the same auth scheme as OpenAI — header names and token formats vary widely (Bearer vs x-api-key vs custom)."
-- memory_type: "lesson"
-`;
-    const learnPath = (0, node_path_1.join)(CC_COMMANDS_DIR, "learn.md");
-    if ((0, node_fs_1.existsSync)(learnPath)) {
-        // Check if it's ours (contains hicortex_ingest)
-        const existing = (0, node_fs_1.readFileSync)(learnPath, "utf-8");
-        if (!existing.includes("hicortex_ingest") && !existing.includes("hicortex")) {
-            console.log(`  ⚠ Skipping /learn — existing command found (not Hicortex). Won't overwrite.`);
+function cleanupLegacyCcCommands() {
+    // Pre-0.10 installs wrote two CC slash commands that are now RETIRED:
+    //   - /learn            : manual immediate ingest. Capture has been automatic
+    //                         (nightly-from-logs) since 0.9; hicortex_ingest
+    //                         remains for *explicitly requested* learnings, but
+    //                         no longer warrants a slash command.
+    //   - /hicortex-activate : registered a commercial license key. licenseKey
+    //                         gates nothing now (the per-install auth TOKEN is
+    //                         the credential, auto-generated at init), so the
+    //                         command is dead.
+    // Remove stale copies so upgraders don't keep dead commands. Idempotent —
+    // a best-effort cleanup of our own files; never throws.
+    for (const name of ["learn.md", "hicortex-activate.md"]) {
+        const p = (0, node_path_1.join)(CC_COMMANDS_DIR, name);
+        if (!(0, node_fs_1.existsSync)(p))
+            continue;
+        // Ownership guard: only remove a file we actually wrote. `learn.md` is a
+        // generic command name a user may own independently — deleting by filename
+        // alone would silently destroy their file. The retired writer always
+        // embedded "hicortex" (the ingest tool + prose); mirror the same marker the
+        // old installer used before overwriting. Skip + warn on anything else.
+        try {
+            if (!(0, node_fs_1.readFileSync)(p, "utf-8").toLowerCase().includes("hicortex")) {
+                console.log(`  ⚠ Skipping ${name} in ${CC_COMMANDS_DIR} — not a Hicortex file, left untouched`);
+                continue;
+            }
         }
-        else {
-            (0, node_fs_1.writeFileSync)(learnPath, learnContent);
+        catch {
+            // Unreadable — do not delete blind; leave it and move on.
+            continue;
+        }
+        try {
+            (0, node_fs_1.rmSync)(p);
+            console.log(`  ✓ Removed legacy command ${name} from ${CC_COMMANDS_DIR} (retired pre-0.10)`);
+        }
+        catch (err) {
+            // ENOENT = already gone (fine, idempotent). Anything else (EACCES, EBUSY)
+            // is worth a line so a stuck stale file is diagnosable — but never fatal
+            // to init (best-effort cleanup of our own file).
+            if (err?.code !== "ENOENT") {
+                console.log(`  ⚠ Could not remove legacy command ${name}: ${err?.message ?? err}`);
+            }
         }
     }
-    else {
-        (0, node_fs_1.writeFileSync)(learnPath, learnContent);
-    }
-    // /hicortex-activate command — registers a commercial license key for display in status
-    const activateContent = `---
-name: hicortex-activate
-description: Register a Hicortex commercial license key. Personal and noncommercial use is free; commercial use requires a per-seat license from hicortex.gamaze.com.
-argument-hint: <license-key>
-allowed-tools: Bash(mkdir:*), Bash(echo:*), Bash(launchctl:*), Bash(systemctl:*), Bash(curl:*), mcp__hicortex__hicortex_ingest, mcp__hicortex__hicortex_search, mcp__hicortex__hicortex_recent, mcp__hicortex__hicortex_lessons
----
-
-# Register Hicortex Commercial License
-
-## If key provided (e.g. /hicortex-activate hctx-abc123)
-
-1. Write the key to the config file:
-
-\`\`\`bash
-mkdir -p ~/.hicortex
-echo '{ "licenseKey": "THE_KEY_HERE" }' > ~/.hicortex/config.json
-\`\`\`
-
-2. Restart the server to apply:
-
-On macOS:
-\`\`\`bash
-launchctl kickstart -k gui/$(id -u)/com.gamaze.hicortex
-\`\`\`
-
-On Linux:
-\`\`\`bash
-systemctl --user restart hicortex
-\`\`\`
-
-3. Verify the key is recognised:
-\`\`\`bash
-hicortex status
-\`\`\`
-
-4. Tell the user: "Commercial license registered. The license tier will appear in \`hicortex status\`."
-
-## If no key provided
-
-Tell them: "Hicortex is free for personal and noncommercial use. Commercial use requires a per-seat license — see https://hicortex.gamaze.com/. After purchase you will receive a key; pass it here and I'll register it."
-`;
-    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(CC_COMMANDS_DIR, "hicortex-activate.md"), activateContent);
-    console.log(`  ✓ Installed /learn and /hicortex-activate commands in ${CC_COMMANDS_DIR}`);
 }
 // ---------------------------------------------------------------------------
 // Hermes setup
@@ -1211,7 +1163,6 @@ async function runInit(options = {}) {
         actions.push("Register MCP server in CC settings");
     if (d.hermesFound)
         actions.push("Install Hermes plugin + configure");
-    actions.push("Install /learn and /hicortex-activate commands");
     actions.push("Install SessionStart hook (query-time lessons)");
     if (actions.length === 0) {
         console.log("Everything is already configured. Nothing to do.");
@@ -1294,8 +1245,8 @@ async function runInit(options = {}) {
     }
     // Ensure tool permissions are set (also needed for users upgrading from older versions)
     allowHicortexTools();
-    // Install CC commands
-    installCcCommands();
+    // Remove legacy pre-0.10 CC commands (/learn, /hicortex-activate) if present
+    cleanupLegacyCcCommands();
     // Setup Hermes if detected
     if (d.hermesFound) {
         // localhost bypass makes the token optional for co-located installs;
@@ -1325,13 +1276,15 @@ async function runInit(options = {}) {
     // failures are swallowed inside sendLifecycleEvent.
     await (0, telemetry_js_1.sendLifecycleEvent)("install", HICORTEX_HOME, readHomeConfig(HICORTEX_HOME), pkgVersion());
     console.log("Next steps:");
-    console.log("  1. Restart Claude Code to pick up the new MCP server and SessionStart hook");
+    // Counter-based so the list stays contiguous (1,2,3,4) whether or not Hermes
+    // was detected — a conditional middle step used to leave a "1, 3, 4" gap.
+    let step = 1;
+    console.log(`  ${step++}. Restart Claude Code to pick up the new MCP server and SessionStart hook`);
     if (d.hermesFound) {
-        console.log("  2. Activate the Hermes plugin: run `hermes memory setup`, select 'hicortex', then restart the gateway(s)");
+        console.log(`  ${step++}. Activate the Hermes plugin: run \`hermes memory setup\`, select 'hicortex', then restart the gateway(s)`);
     }
-    console.log("  3. Ask your agent: 'What Hicortex tools do you have?'");
-    console.log("  4. Try /learn to save something to long-term memory");
-    console.log(`  5. Check server: curl ${serverUrl}/health`);
+    console.log(`  ${step++}. Ask your agent: 'What Hicortex tools do you have?'`);
+    console.log(`  ${step++}. Check server: curl ${serverUrl}/health`);
 }
 // ---------------------------------------------------------------------------
 // Client Mode Init
@@ -1470,8 +1423,8 @@ async function runClientInit(serverUrl, agentName) {
         registerCcMcp(serverUrl);
     }
     allowHicortexTools();
-    // Step 5: Install CC commands
-    installCcCommands();
+    // Step 5: Remove legacy pre-0.10 CC commands if present
+    cleanupLegacyCcCommands();
     // Step 6: Install SessionStart hook for query-time lessons + the #192
     // per-prompt pushed-recall hooks.
     installSessionStartHook();

package/dist/llm.d.ts

@@ -191,8 +191,10 @@ export declare class RateLimitError extends Error {
 }
 export declare class LlmClient {
     private config;
-    private rateLimitedUntil;
     constructor(config: LlmConfig);
+    /** Endpoint identity for shared rate-limit state (provider + base URL). */
+    private get endpointKey();
+    private get rateLimitedUntil();
     /** Check if we're currently rate limited */
     get isRateLimited(): boolean;
     private handleRateLimit;

package/dist/llm.js

@@ -466,12 +466,25 @@ class RateLimitError extends Error {
     }
 }
 exports.RateLimitError = RateLimitError;
+// Rate-limit backoff is shared across all LlmClient instances that target the
+// same endpoint, keyed by provider@baseUrl. completeWithOverride() spins up a
+// throwaway client per call for the distill/reflect/classify override tiers;
+// with per-instance state each throwaway started un-rate-limited and re-hit a
+// 429'd provider immediately, defeating the backoff on exactly the configs
+// (e.g. z.ai via distillBaseUrl/reflectBaseUrl) that route through those tiers.
+const rateLimitedUntilByEndpoint = new Map();
 class LlmClient {
     config;
-    rateLimitedUntil = 0;
     constructor(config) {
         this.config = config;
     }
+    /** Endpoint identity for shared rate-limit state (provider + base URL). */
+    get endpointKey() {
+        return `${this.config.provider}@${this.config.baseUrl ?? ""}`;
+    }
+    get rateLimitedUntil() {
+        return rateLimitedUntilByEndpoint.get(this.endpointKey) ?? 0;
+    }
     /** Check if we're currently rate limited */
     get isRateLimited() {
         return Date.now() < this.rateLimitedUntil;
@@ -482,9 +495,10 @@ class LlmClient {
         const retryMs = retryAfter
             ? parseInt(retryAfter, 10) * 1000
             : DEFAULT_RATE_LIMIT_RETRY_MS;
-        this.rateLimitedUntil = Date.now() + retryMs;
-        console.log(`[hicortex] Rate limited by LLM provider. ` +
-            `Will retry after ${new Date(this.rateLimitedUntil).toISOString()}`);
+        const until = Date.now() + retryMs;
+        rateLimitedUntilByEndpoint.set(this.endpointKey, until);
+        console.log(`[hicortex] Rate limited by LLM provider (${this.endpointKey}). ` +
+            `Will retry after ${new Date(until).toISOString()}`);
         throw new RateLimitError(retryMs);
     }
     /**

package/dist/mcp-server.js

@@ -128,27 +128,18 @@ function createMcpServer() {
         }
     });
     // -- hicortex_get --
-    server.tool("hicortex_get", "Fetch ONE memory's full content by id — use this to lazy-load entries from the '## Memory recall (auto)' index or from search results whose snippet was not enough. Fetching a memory marks it as used (strengthens it), so fetch entries that could change your action — not every shown one. When the memory shapes your answer, cite it to the user (id + date + origin agent).", {
+    server.tool("hicortex_get", "Fetch ONE memory's full content by id — use this to lazy-load entries from the '## Memory recall (auto)' index or from search results whose snippet was not enough. Fetching a memory marks it as used (strengthens it), so fetch entries that could change your action — not every shown one. When the memory shapes your answer, cite it to the user (id + date + origin agent) — mark a fetched memory `FETCHED` and a one-line entry cited unread `SNIPPET`; don't pass SNIPPET off as established.", {
         id: zod_1.z.string().describe("Memory id (as shown in recall index/search results)"),
     }, async ({ id }) => {
         if (!db)
             return { content: [{ type: "text", text: "Hicortex not initialized" }], isError: true };
+        // Delegates to formatMemoryGetText → handleMemoryGet, so the citation
+        // (incl. the #204 FETCHED marker) is built in ONE place shared with the
+        // REST GET /memory path. CC reaches Hicortex through THIS MCP tool;
+        // before #207's fix it got a marker-less citation built inline here.
         try {
-            // Prefix ids resolve (F6): citations show the 8-char id, so this tool
-            // must accept it like /update and /delete do.
-            const fullId = storage.resolveMemoryId(db, id);
-            const mem = fullId ? storage.getMemory(db, fullId) : null;
-            if (!mem)
-                return { content: [{ type: "text", text: `No memory with id ${id}` }], isError: true };
-            // Real use → full strengthen (access_count + hardening + prune shield).
-            storage.strengthenMemory(db, mem.id, new Date().toISOString());
-            // Provenance header (built-in citing norm, 0.14.1): id, type, project,
-            // ORIGIN AGENT (shared brain — the memory may come from another
-            // agent's session), and date, plus the explicit citation instruction.
-            const date = (mem.created_at ?? "").slice(0, 10);
-            const header = `[memory ${mem.id} | ${mem.memory_type ?? "episode"} | ${mem.project ?? "-"} | from ${mem.source_agent ?? "unknown"} | ${date}]\n` +
-                `Cite as (memory ${String(mem.id).slice(0, 8)}, ${date}) where this shapes your answer; it may be stale — newer memories supersede older.`;
-            return { content: [{ type: "text", text: `${header}\n\n${mem.content ?? ""}` }] };
+            const r = (0, recall_index_js_1.formatMemoryGetText)(db, { id });
+            return { content: [{ type: "text", text: r.text }], isError: r.status !== 200 };
         }
         catch (err) {
             return { content: [{ type: "text", text: `Get failed: ${err instanceof Error ? err.message : String(err)}` }], isError: true };
@@ -513,14 +504,24 @@ async function startServer(options = {}) {
     const app = (0, express_1.default)();
     // Raise the body limit — whole-session denoised transcripts exceed the 100 kB default.
     app.use(express_1.default.json({ limit: "25mb" }));
-    // CORS: must be before auth so preflight OPTIONS requests get proper headers
+    // CORS: reflect ONLY explicitly-allowlisted origins (config.corsAllowedOrigins),
+    // and never send Access-Control-Allow-Credentials. Reflecting any origin with
+    // credentials — combined with the localhost auth bypass and the default 0.0.0.0
+    // bind — let any web page the user visits read/mutate the memory store via
+    // fetch() to localhost with no token (the browser connects from 127.0.0.1, so
+    // the bypass grants access, and the reflected Allow-Origin let the page read the
+    // response). The bundled UIs (/viz, /context/ui) are same-origin and need no CORS
+    // headers at all; cross-origin access is opt-in per the hosted plan (#110 §2).
+    // Must run before auth so allowlisted preflight OPTIONS get their headers.
+    const corsAllowedOrigins = Array.isArray(savedConfig?.corsAllowedOrigins)
+        ? savedConfig.corsAllowedOrigins.filter((o) => typeof o === "string")
+        : [];
     app.use((req, res, next) => {
         const origin = req.headers.origin;
-        if (origin) {
+        if (origin && corsAllowedOrigins.includes(origin)) {
             res.setHeader("Access-Control-Allow-Origin", origin);
             res.setHeader("Access-Control-Allow-Methods", "GET, PUT, POST, OPTIONS");
             res.setHeader("Access-Control-Allow-Headers", "Content-Type, Accept, Authorization");
-            res.setHeader("Access-Control-Allow-Credentials", "true");
             res.setHeader("Vary", "Origin");
         }
         if (req.method === "OPTIONS") {
@@ -689,8 +690,11 @@ async function startServer(options = {}) {
                 return retrieval.retrieve(db, embedder_js_1.embed, query, {
                     limit,
                     noStrengthen: true,
+                    // #203: project + mission_domains are SOFT affinity (zero-boost
+                    // neutral), threaded into computeScore. privacy stays a hard filter.
                     project: filters?.project,
                     privacy: filters?.privacy,
+                    missionDomains: filters?.mission_domains,
                     queryEmbedding: queryVec,
                 });
             },

package/dist/memory-instructions.js

@@ -33,7 +33,7 @@ function renderMemoryInstructions() {
         "Your long-term memory is Hicortex — shared across all agents and sessions.",
         "- A `## Memory recall (auto)` index may arrive with prompts: it is a MENU, not content. Fetch a full memory with `hicortex_get(id)` when the entry could change how you handle the current task.",
         "- Recall before assuming: `hicortex_search` for prior decisions/facts/preferences, `hicortex_recent` to catch up on a project.",
-        "- Cite any memory you rely on (id, date); on conflicts, newer memories supersede older.",
+        "- Cite any memory you rely on by id + date, and mark it `FETCHED` (you read the full memory via `hicortex_get`) or `SNIPPET` (the one-line entry only). Don't present a SNIPPET citation as established. On conflicts, newer memories supersede older.",
         "- Capture is automatic (nightly). Do not manually ingest routine content — `hicortex_ingest` is for explicitly requested learnings only.",
         "- Never inspect, test, or modify memory/plugin/gateway infrastructure (configs, services, tokens). If a memory tool seems missing or broken, say so and stop.",
     ].join("\n");

package/dist/recall-hook-cli.d.ts

@@ -23,6 +23,6 @@ interface HookPayload {
  * there is nothing to send (no session id, or an unhandled event). Exported
  * for tests.
  */
-export declare function buildHookRequest(payload: HookPayload): Record<string, unknown> | null;
+export declare function buildHookRequest(payload: HookPayload, cwd?: string): Record<string, unknown> | null;
 export declare function runRecallHook(): Promise<void>;
 export {};

package/dist/recall-hook-cli.js

@@ -17,6 +17,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildHookRequest = buildHookRequest;
 exports.runRecallHook = runRecallHook;
 const lessons_context_js_1 = require("./lessons-context.js");
+const node_path_1 = require("node:path");
 const FETCH_TIMEOUT_MS = 1000;
 /** Read all of stdin (CC pipes the hook payload JSON). */
 async function readStdin() {
@@ -31,7 +32,7 @@ async function readStdin() {
  * there is nothing to send (no session id, or an unhandled event). Exported
  * for tests.
  */
-function buildHookRequest(payload) {
+function buildHookRequest(payload, cwd = process.cwd()) {
     const sessionId = typeof payload.session_id === "string" && payload.session_id
         ? payload.session_id
         : null;
@@ -43,7 +44,11 @@ function buildHookRequest(payload) {
     const prompt = typeof payload.prompt === "string" ? payload.prompt : "";
     if (!prompt)
         return null;
-    return { session_id: sessionId, prompt };
+    // #203 scope: derive project from the session cwd so retrieval can apply a
+    // soft project-affinity boost. basename(cwd) matches capture's
+    // decodeProjectDirName for non-hyphenated dirs (the common case); a hyphen
+    // edge case is a pre-existing capture bug, filed separately.
+    return { session_id: sessionId, prompt, project: (0, node_path_1.basename)(cwd) };
 }
 async function runRecallHook() {
     const cfg = (0, lessons_context_js_1.resolveConfig)();

package/dist/recall-index.d.ts

@@ -44,10 +44,18 @@ export declare function passesRelevanceGate(r: MemorySearchResult, minSimilarity
 /** Recall filters a client may push per request (#193 review F1): a scoped
  *  plugin (Hermes privacy_filter / default_project) must be able to narrow
  *  recall exactly like the legacy /search prefetch did — dropping them
- *  silently would leak out-of-scope memory titles into the injected index. */
+ *  silently would leak out-of-scope memory titles into the injected index.
+ *
+ *  #203: `project` and `mission_domains` are now SOFT affinity signals in
+ *  retrieval (zero-boost neutral, never a filter / penalty); `privacy` stays a
+ *  hard filter (security boundary). They ride the body → retrieveFn →
+ *  retrieve() → computeScore path unchanged in shape. */
 export interface RecallFilters {
     project?: string;
     privacy?: string[];
+    /** #203: Hermes mission domains (declared in plugin config). Soft domain
+     *  affinity in computeScore via max overlapping memory_tags.weight. */
+    mission_domains?: string[];
 }
 export interface RecallIndexDeps {
     db: Database.Database;
@@ -58,9 +66,15 @@ export interface RecallIndexDeps {
     retrieveFn: (query: string, limit: number, filters: RecallFilters | undefined, sessionId: string) => Promise<MemorySearchResult[]>;
     options?: RecallIndexOptions;
 }
+/** Normalize a request-supplied string-list param: array of strings or a CSV
+ *  string → string[] | undefined. Anything else (or an empty result) means
+ *  "absent" — never a partial guess. Shared by `parsePrivacyParam` and
+ *  `mission_domains` (#203) so both accept `["A","B"]` and `"A, B"` alike. */
+export declare function parseStringListParam(v: unknown): string[] | undefined;
 /** Normalize a request-supplied privacy filter: array of strings or a CSV
  *  string → string[] | undefined. Anything else (or an empty result) means
- *  "no filter" — never a partial guess. */
+ *  "no filter" — never a partial guess. Delegates to parseStringListParam;
+ *  kept as a named export for tests and handleMemoryGet callers. */
 export declare function parsePrivacyParam(v: unknown): string[] | undefined;
 /**
  * Handle a /recall-index request body. Thin Express adapter in mcp-server.ts;
@@ -83,3 +97,20 @@ export declare function handleMemoryGet(db: Database.Database, query: {
     id?: unknown;
     privacy?: unknown;
 }): RecallIndexResult;
+/**
+ * MCP `hicortex_get` presentation: handleMemoryGet's result framed as the
+ * text block the MCP tool returns (provenance header + the SHARED citation +
+ * content). Extracted from the MCP tool handler so its output — incl. the
+ * #204 FETCHED marker, which rides on handleMemoryGet's citation — is unit-
+ * testable. The citation string is built ONCE (handleMemoryGet); this only
+ * frames it, mirroring how /recall-index is shared across harnesses. The
+ * extraction closes the #207 gap (CC's MCP path had a marker-less citation
+ * built inline, while the REST path used handleMemoryGet — same contract, two
+ * implementations, one updated).
+ */
+export declare function formatMemoryGetText(db: Database.Database, query: {
+    id?: unknown;
+}): {
+    status: number;
+    text: string;
+};

package/dist/recall-index.js

@@ -56,9 +56,11 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.memoryTitle = memoryTitle;
 exports.passesRelevanceGate = passesRelevanceGate;
+exports.parseStringListParam = parseStringListParam;
 exports.parsePrivacyParam = parsePrivacyParam;
 exports.handleRecallIndex = handleRecallIndex;
 exports.handleMemoryGet = handleMemoryGet;
+exports.formatMemoryGetText = formatMemoryGetText;
 const storage = __importStar(require("./storage.js"));
 const DEFAULT_MIN_SIMILARITY = 0.55;
 const DEFAULT_MAX_ITEMS = 6;
@@ -87,7 +89,15 @@ function formatDate(iso) {
     return `${dd}.${mm}.${d.getFullYear()}`;
 }
 function formatIndexLine(r) {
-    const meta = [formatDate(r.created_at), r.domain ?? r.project ?? undefined, r.memory_type]
+    // Provenance (#202): date, scope (domain else project), ORIGIN AGENT, type.
+    // The origin agent lets a reader calibrate trust — "from my session" vs
+    // another agent/project — before fetching or acting on an entry.
+    const meta = [
+        formatDate(r.created_at),
+        r.domain ?? r.project ?? undefined,
+        r.source_agent ?? undefined,
+        r.memory_type,
+    ]
         .filter(Boolean)
         .join(", ");
     return `- [${r.id}] ${memoryTitle(r.content)}${meta ? ` (${meta})` : ""}`;
@@ -98,10 +108,11 @@ function passesRelevanceGate(r, minSimilarity) {
         return true;
     return typeof r.similarity === "number" && r.similarity >= minSimilarity;
 }
-/** Normalize a request-supplied privacy filter: array of strings or a CSV
+/** Normalize a request-supplied string-list param: array of strings or a CSV
  *  string → string[] | undefined. Anything else (or an empty result) means
- *  "no filter" — never a partial guess. */
-function parsePrivacyParam(v) {
+ *  "absent" — never a partial guess. Shared by `parsePrivacyParam` and
+ *  `mission_domains` (#203) so both accept `["A","B"]` and `"A, B"` alike. */
+function parseStringListParam(v) {
     const items = Array.isArray(v)
         ? v.filter((x) => typeof x === "string")
         : typeof v === "string"
@@ -110,6 +121,13 @@ function parsePrivacyParam(v) {
     const cleaned = items.map((s) => s.trim()).filter(Boolean);
     return cleaned.length > 0 ? cleaned : undefined;
 }
+/** Normalize a request-supplied privacy filter: array of strings or a CSV
+ *  string → string[] | undefined. Anything else (or an empty result) means
+ *  "no filter" — never a partial guess. Delegates to parseStringListParam;
+ *  kept as a named export for tests and handleMemoryGet callers. */
+function parsePrivacyParam(v) {
+    return parseStringListParam(v);
+}
 /**
  * Handle a /recall-index request body. Thin Express adapter in mcp-server.ts;
  * all behavior lives here so tests exercise it directly.
@@ -134,11 +152,15 @@ async function handleRecallIndex(deps, body) {
     const maxItems = clampInt(deps.options?.maxItems, DEFAULT_MAX_ITEMS, 1, 20);
     const minSimilarity = clampNumber(deps.options?.minSimilarity, DEFAULT_MIN_SIMILARITY, 0, 1);
     const turn = deps.registry.beginTurn(sessionId);
-    // Optional client-side scoping (F1): project + privacy ride the body and
-    // are pushed into retrieval (which handles filtered over-fetch itself).
+    // Optional client-side scoping (F1 + #203): project + mission_domains (soft
+    // affinity) and privacy (hard filter) ride the body and are pushed into
+    // retrieval. project is cwd-derived (CC/OC) or gateway-supplied; mission_domains
+    // is Hermes-declared (plugin config). Neither excludes anything — both are
+    // zero-boost-neutral score terms in computeScore.
     const filters = {
         project: typeof req.project === "string" && req.project ? req.project : undefined,
         privacy: parsePrivacyParam(req.privacy),
+        mission_domains: parseStringListParam(req.mission_domains),
     };
     let results;
     try {
@@ -164,13 +186,15 @@ async function handleRecallIndex(deps, body) {
     const lines = picked.map((r) => formatIndexLine(r));
     const block = [
         "## Memory recall (auto)",
-        // Provenance is BUILT IN, split by function (owner decision 27.07,
-        // option D): this header carries only the SELECTION-time rules —
-        // supersession (the one moment competing dates are visible side by side)
-        // and cite-what-you-rely-on (covers snippet-only use, the common case per
-        // the 0.14.0 field test). The full citation format + origin agent ride on
-        // the hicortex_get response / GET /memory `citation` field (use-time).
-        "Possibly relevant memories — dates matter, newer supersedes older. Fetch full content with `hicortex_get(id)` when an entry could change your action; cite any memory you rely on (id, date):",
+        // Provenance is BUILT IN (owner decision 27.07, option D; extended #202/#204):
+        //   - #202: origin agent in each one-liner (formatIndexLine) — trust calibration.
+        //   - #204: confidence levels — FETCHED (read in full) vs SNIPPET (one-line entry only),
+        //     so "the agent cited a memory" can no longer pass as "the agent read it".
+        // This header carries the SELECTION-time rules: supersession (the one moment
+        // competing dates are visible side by side) and cite-with-confidence. The
+        // full citation format rides on the hicortex_get response / GET /memory
+        // `citation` field (use-time, marked FETCHED).
+        "Possibly relevant memories — dates matter, newer supersedes older. Fetch with `hicortex_get(id)` when an entry could change your action. Cite what you rely on by id + date, and mark it `FETCHED` if you read the full memory or `SNIPPET` if you're citing the one-line entry unread — don't pass a SNIPPET citation off as established fact.",
         ...lines,
     ].join("\n");
     return { status: 200, body: { block, shown: ids, turn } };
@@ -212,10 +236,33 @@ function handleMemoryGet(db, query) {
         status: 200,
         body: {
             memory: mem,
-            citation: `(memory ${String(mem.id).slice(0, 8)}, ${date}, from ${mem.source_agent ?? "unknown"})`,
+            citation: `(memory ${String(mem.id).slice(0, 8)}, ${date}, from ${mem.source_agent ?? "unknown"}, FETCHED)`,
         },
     };
 }
+/**
+ * MCP `hicortex_get` presentation: handleMemoryGet's result framed as the
+ * text block the MCP tool returns (provenance header + the SHARED citation +
+ * content). Extracted from the MCP tool handler so its output — incl. the
+ * #204 FETCHED marker, which rides on handleMemoryGet's citation — is unit-
+ * testable. The citation string is built ONCE (handleMemoryGet); this only
+ * frames it, mirroring how /recall-index is shared across harnesses. The
+ * extraction closes the #207 gap (CC's MCP path had a marker-less citation
+ * built inline, while the REST path used handleMemoryGet — same contract, two
+ * implementations, one updated).
+ */
+function formatMemoryGetText(db, query) {
+    const r = handleMemoryGet(db, query);
+    if (r.status !== 200) {
+        return { status: r.status, text: String(r.body.error ?? `No memory with id ${query.id ?? ""}`) };
+    }
+    const mem = r.body.memory;
+    const citation = r.body.citation; // carries FETCHED (#204)
+    const date = (mem.created_at ?? "").slice(0, 10);
+    const header = `[memory ${mem.id} | ${mem.memory_type ?? "episode"} | ${mem.project ?? "-"} | from ${mem.source_agent ?? "unknown"} | ${date}]\n` +
+        `Cite as ${citation} where this shapes your answer; it may be stale — newer memories supersede older.`;
+    return { status: 200, text: `${header}\n\n${mem.content ?? ""}` };
+}
 function clampInt(v, dflt, min, max) {
     const n = Number(v);
     if (!Number.isFinite(n))