@inerrata-corporation/errata 2.0.19 → 2.0.20-dev.3679

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.19",
+  "version": "2.0.20-dev.3679",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {

package/pass-worker.mjs

@@ -27197,7 +27197,11 @@ function priorsForFile(store2, relPath) {
   const resolvedProblems = [];
   const seenProblem = /* @__PURE__ */ new Set();
   const related = /* @__PURE__ */ new Map();
-  for (const e of store2.inEdges(file2.id, ["ANCHORED_AT"])) {
+  const anchorEdges = [
+    ...store2.inEdges(file2.id, ["ANCHORED_AT"]),
+    ...store2.outEdges(file2.id, ["DEFINES"]).flatMap((d) => store2.inEdges(d.to, ["ANCHORED_AT"]))
+  ];
+  for (const e of anchorEdges) {
     const n = store2.getNode(e.from);
     if (!n) continue;
     if (n.label === "Problem" || n.label === "Vulnerability") {

package/resources/context-plugin/.codex-plugin/plugin.json

@@ -0,0 +1,24 @@
+{
+  "name": "errata-context",
+  "version": "2.0.20-dev.3679",
+  "description": "A minimal 3D view of loaded Errata priors and recent graph bursts.",
+  "author": {
+    "name": "inErrata"
+  },
+  "skills": "./skills/",
+  "mcpServers": "./.mcp.json",
+  "interface": {
+    "displayName": "Errata Context",
+    "shortDescription": "Follow your context in a quiet 3D graph.",
+    "longDescription": "A conversation panel containing only your Errata graph and a small activity log. Follows the task's loaded priors and focuses recent bursts. Reads local data without modifying the graph.",
+    "developerName": "inErrata",
+    "category": "Productivity",
+    "capabilities": [
+      "Visualize Errata context",
+      "Replay graph bursts"
+    ],
+    "composerIcon": "./assets/icon.png",
+    "logo": "./assets/icon.png",
+    "defaultPrompt": "Open the Errata context graph for this task."
+  }
+}

package/resources/context-plugin/INSTALL.md

@@ -0,0 +1,43 @@
+# Errata Context — local review build
+
+This archive is for local evaluation. It is **not eligible for the standard
+public directory upload** while its MCP server uses local stdio. Public local-MCP
+distribution needs OpenAI support; see SUBMISSION.md.
+
+Requires Node 22+ on the same machine as Codex and an Errata workspace.
+The server and panel are bundled: no npm install or cloud service is needed.
+
+1. Extract the archive into a permanent folder under your home directory, for
+   example `~/plugins/errata-context-review`.
+2. Run `node configure-local.mjs /absolute/path/to/your/workspace` from that folder.
+   This writes `.mcp.json` using your local executable and file paths. Do not copy
+   the generated file between machines. No credentials are required.
+3. Add the following entry to the `plugins` array in
+   `~/.agents/plugins/marketplace.json`, preserving any existing entries. If the
+   file does not exist, create it with `{"name":"personal","plugins":[]}` first.
+   The path below is relative to your home directory, not the marketplace file.
+
+```json
+{
+  "name": "errata-context",
+  "source": { "source": "local", "path": "./plugins/errata-context-review" },
+  "policy": { "installation": "AVAILABLE", "authentication": "ON_INSTALL" },
+  "category": "Productivity"
+}
+```
+
+4. Install with `codex plugin add errata-context@personal`; substitute your existing
+   marketplace's name if it differs. Restart the desktop app to load the release.
+5. In an Errata workspace, ask to open the Errata context graph for the current task.
+   Expand the Context card into the side panel once. The mounted panel follows new
+   priors and bursts without creating more cards.
+
+The workspace argument supplies only a fallback for direct panel entry. The skill
+passes the current workspace and task explicitly, so the panel can follow another
+workspace without reconfiguration. Moving the plugin folder requires rerunning
+the configure command and refreshing the installation.
+
+To stop using the plugin, disable or uninstall it in the app. The graph is read-only;
+the plugin creates no cloud account and runs no background service outside Codex.
+The optional browser fallback writes a local server status file under
+`.errata/context-preview/` and runs until its local Node process is stopped.

package/resources/context-plugin/SHA256SUMS

@@ -0,0 +1,14 @@
+596a954316c47a7e34ffd3ead34462b290aee6d1da2b435cb7f4902f905f380c  .codex-plugin/plugin.json
+a7bebae9fb01c838d6c75fc784129e28be571233fa66ff5ee8039b574f35ccf7  assets/icon.png
+fc38b64e4df1e0b72c35764bef6c4c05430d97c9009ad0ecc8a9e75b4deab232  configure-local.mjs
+73dc6028b3b070257c7c31f252d11e55a9e096f4aed0f187f10cb21716e1e6d7  dist/client.js
+6d2d2068ffa7e6627151aa69e86654d1b3452e7205d75a15b312c1bc663d03d4  dist/index.html
+667dd889a26cdeda1927084b95443d7bbe3fe9def2a1e61531682ccef594780e  dist/mcp-server.mjs
+fca26cc5a0ee1080a9f4aa1773b3e634ea7ff12376bbb66ea66ee3670dc5f274  dist/panel.html
+ab99177aff0d134ef44f7867c61a7c4eb8a6afbb0f138c08dbb68e7546260147  dist/server.mjs
+5a721b645e399e676d48f8691ec81694172f1bbdea309c852dd099ef7a147018  dist/style.css
+2644953a4a3762926663db951c03ad3175061c9d52de49cf90d07ddb4c73846a  INSTALL.md
+fb840ab74865258c91565529fa08f9f8586261f973c08a798e8f66d85d3260ed  launch.mjs
+5abff6ef2aff3bc033862e2293421908e6d6fe9425de042412e0c8b577a6d8fc  skills/context-graph/SKILL.md
+9f8d96a5a28248e04b54fdabed59319a640dead39ede67fe9b9283aec678d46f  SUBMISSION.md
+e0ea78e7876a08a9519e19802b8500c6383334912bebea09f4c58ae9721e889b  THIRD-PARTY-NOTICES.md

package/resources/context-plugin/SUBMISSION.md

@@ -0,0 +1,97 @@
+# Errata Context — public directory preparation
+
+Status: **not submitted, not published**. The accepted visualization is implemented
+and the local renderer, parser, graph, and MCP checks pass. This is a local desktop
+plugin; it does not currently work in cloud-only ChatGPT sessions.
+
+The Errata CLI also distributes this package through its local Codex setup,
+using the daemon release version for installed assets. That distribution does
+not depend on a public-directory listing.
+
+## Blocking distribution requirement
+
+OpenAI's [package guide](https://developers.openai.com/plugins/build/plugins#bundled-mcp-servers-and-lifecycle-hooks)
+requires a public HTTPS endpoint for standard public MCP submissions and directs
+local-MCP developers to their OpenAI contact. This plugin reads the selected local
+workspace's Errata context/SQLite graph and its exact Codex task transcript. A
+remote server cannot perform those reads by itself.
+
+Preserve the local implementation and request the supported local-MCP submission
+route before uploading. A cloud version would need a separately designed,
+authenticated, consent-based local bridge and new security/review checks. The
+current stdio server must not simply be exposed over HTTP: it accepts local paths
+under the trusted local-host model and has no remote authentication or tenancy.
+
+Do not omit the MCP component and upload this as a skills-only plugin: that removes
+the native panel, and the documented update flow cannot add MCP to a skills-only
+listing later.
+
+## Draft listing
+
+- Name: Errata Context
+- Publisher: inErrata (publishing identity must be verified in the portal)
+- Short description: Follow your context in a quiet 3D graph.
+- Description: See the Errata priors recorded for your current Codex task, watch
+  recent graph bursts unfold, and inspect the visible causal chain. Floating labels
+  and signal opacity keep the view readable. Requires a local Errata workspace and
+  Node 22+. Reads local files without modifying the graph. It does not expose hidden
+  model state or prove which text survived context compaction.
+- Category: Productivity
+- Starter: Open the Errata context graph for this task.
+- Release notes: Initial local release with a persistent minimal side panel, burst
+  replay, automatic camera following, floating labels, signal-strength opacity,
+  causal-chain emphasis, host themes, and reduced-motion support. Version 0.1.7
+  softens highlighted links and restores background-node visibility.
+
+## Data handling for review
+
+Inputs are the chosen workspace and task ID. The plugin reads local
+`.errata/context.md`, `.errata/priming-handles.json`, `.errata/castalia.db`, and the
+matching Codex transcript under `CODEX_HOME/sessions`. It extracts recorded Errata
+context and completed burst results; it does not send the full transcript to the
+panel. Graph data is passed through the host's MCP App channel in tool-result
+`_meta`; model-visible results contain a short status and counts. The plugin itself
+has no external network transport, telemetry, or cloud storage. The host's own
+processing and policies still apply.
+
+The graph database is opened read-only. The native UI bundles its JavaScript and
+styles and declares empty external resource/connect CSP lists. View tokens bind
+polling to the original workspace/task. A mounted panel follows updates; a fully
+unmounted panel cannot reopen itself. Burst playback replays returned hop data,
+not the internal search execution.
+
+## Reviewer cases
+
+These are the proposed manual acceptance cases, not a claim that the public review
+workflow has run. Use synthetic workspace data and a test task, never a real user's
+transcript in screenshots or recordings.
+
+| Type | Prompt or action | Tools / expected result |
+| --- | --- | --- |
+| Positive | Open the Errata context graph for this task. | `open_context_graph` receives exact workspace/task; native graph and tiny log render. |
+| Positive | Keep this panel open while context changes. | App-only `read_context_graph` refreshes the same panel; no additional chat card; task injection replaces prior snapshot. |
+| Positive | Run a graph burst, then replay its activity line. | Errata produces a completed burst; refresh reveals seed, recorded hops, then results; replay repeats the sequence. |
+| Positive | Inspect the strongest visible causal chain. | Existing `CAUSED_BY`, `FIXED_BY`, or `SOLVED_BY` edges remain highlighted; hover explains signal metric; no invented links. |
+| Positive | Orbit the graph, resume following, and enable reduced motion. | Drag pauses camera following; double-click/Home/Escape resumes; reduced motion reveals results without playback. |
+| Negative | Open another task's graph without knowing its task ID. | Ask for or obtain the actual current task ID; never select the latest unrelated transcript. |
+| Negative | Change or delete the priors through this panel. | Explain that the panel is read-only; no graph write tool exists. |
+| Negative | Open context where Errata or a matching transcript is absent. | Show the labeled workspace fallback or waiting state; no invented priors or claim of task-loaded context. |
+
+## Remaining external submission work
+
+After the local-MCP route is confirmed, use the
+[submission portal](https://platform.openai.com/plugins) and follow the
+[official submission process](https://developers.openai.com/plugins/deploy/submission).
+
+- Confirm the inErrata publishing identity, owning project, and submission access.
+- Confirm acceptable local-MCP packaging and review installation instructions.
+- Supply approved public support, privacy-policy, and terms URLs for this plugin.
+  The repository's site legal drafts explicitly say they are pending legal review;
+  they have not been represented here as approved plugin policies.
+- Add public listing screenshots and an accessible video walkthrough using synthetic
+  data, run all eight reviewer cases, and supply reviewer setup details.
+- Upload the supported package, resolve automated findings, complete the required
+  attestations, and submit. Publish only after approval.
+
+No contact message, portal upload, policy attestation, or public publication has
+been performed by this preparation step.