@inerrata-corporation/errata 2.0.6-dev.2752 → 2.0.6-dev.2766

package/README.txt

@@ -34,9 +34,12 @@ errata link flows also refresh detected Codex hooks; --skip-hooks opts out of
 either automatic install. The installer preserves other config and writes its
 Node relay into .codex/hooks/errata-relay.mjs. No curl or Bash dependency.
 
-Restart/resume Codex after installing, and review/trust the hooks with /hooks.
-If your Codex build gates hooks, enable [features] codex_hooks = true. Update
-older Codex builds if UserPromptSubmit or tool hooks are unsupported.
+Codex desktop: open Settings > Hooks, select the project, expand each event,
+and review/Trust its Errata hook. Use Reload hooks after installation. No
+standalone Codex CLI is required. CLI users can use /hooks instead.
+Restarting or reinstalling does not grant trust. Run errata doctor to check
+activation; it discovers the Windows desktop runtime even without a CLI on PATH.
+Respect explicitly disabled hooks ([features] hooks = false).
 
 SessionStart injects .errata/context.md, including startup/resume/compaction.
 UserPromptSubmit and PostToolUse inject it again only when it changes. Tool

package/errata.mjs

@@ -17038,6 +17038,11 @@ var init_context_file = __esm({
       "Live agent context for this checkout \u2014 priors, open problems, the capture",
       "protocol \u2014 is maintained by the errata daemon at `.errata/context.md`.",
       "",
+      "At the beginning of each task and each new user turn, read that file before",
+      "substantive work. Use the current file in preference to an earlier snapshot.",
+      "If it is absent, continue normally. In Codex, an `@` mention alone does not",
+      "load the file; read it explicitly.",
+      "",
       "It is gitignored ON PURPOSE: it is this machine's runtime state, not repo",
       "content. Committing it would prime your teammates with your graph.",
       "",
@@ -71187,9 +71192,9 @@ var init_report_render = __esm({
 
 // src/cli.ts
 init_src6();
-import { closeSync as closeSync2, existsSync as existsSync34, openSync as openSync2, readFileSync as readFileSync35, renameSync as renameSync4, statSync as statSync8 } from "node:fs";
-import { join as join40, resolve as pathResolve2 } from "node:path";
-import { spawn as spawn4 } from "node:child_process";
+import { closeSync as closeSync2, existsSync as existsSync34, openSync as openSync2, readFileSync as readFileSync35, renameSync as renameSync4, statSync as statSync9 } from "node:fs";
+import { join as join41, resolve as pathResolve2 } from "node:path";
+import { spawn as spawn5 } from "node:child_process";
 
 // src/daemon.ts
 import { existsSync as existsSync26, writeFileSync as writeFileSync22 } from "node:fs";
@@ -73721,6 +73726,7 @@ init_src10();
 init_review2();
 
 // src/turn.ts
+init_checkout_root();
 import { closeSync, existsSync as existsSync16, fstatSync, openSync, readdirSync as readdirSync6, readSync, realpathSync, statSync as statSync5 } from "node:fs";
 import { basename as basename5, delimiter, dirname as dirname10, join as join19, normalize as normalize3 } from "node:path";
 import { homedir as homedir4 } from "node:os";
@@ -74205,6 +74211,8 @@ function codexRolloutsForCwd(cwd, opts = {}) {
   const sinceMs = opts.sinceMs ?? 0;
   const limit = opts.limit ?? 25;
   const out2 = [];
+  const owner = checkoutRootOf(cwd);
+  const owners = /* @__PURE__ */ new Map();
   for (const root of codexSessionRoots(opts.env, opts.home)) {
     if (!existsSync16(root)) continue;
     const stack = [{ dir: root, depth: 0 }];
@@ -74231,7 +74239,14 @@ function codexRolloutsForCwd(cwd, opts = {}) {
         if (depth < 3) continue;
         if (!name2.startsWith("rollout-") || !name2.endsWith(".jsonl")) continue;
         if (st.mtimeMs < sinceMs) continue;
-        if (readCodexRolloutCwd(full) !== cwd) continue;
+        const sessionCwd = readCodexRolloutCwd(full);
+        if (sessionCwd === null) continue;
+        let sessionOwner = owners.get(sessionCwd);
+        if (sessionOwner === void 0) {
+          sessionOwner = checkoutRootOf(sessionCwd);
+          owners.set(sessionCwd, sessionOwner);
+        }
+        if (sessionOwner !== owner) continue;
         out2.push({ path: full, sessionId: `codex:${basename5(name2, ".jsonl")}`, mtimeMs: st.mtimeMs });
       }
     }
@@ -79907,7 +79922,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.6-dev.2752" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.6-dev.2766" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -85577,6 +85592,7 @@ var SessionAffinity = class {
 };
 
 // src/multi.ts
+init_checkout_root();
 var PROCESS_STARTED_AT = Date.now();
 var SELF_ENTRY = process.argv[1] ? pathResolve(process.argv[1]) : "";
 var LOCAL_BUILD_ENTRY = SELF_ENTRY && !isInstalledEntry(SELF_ENTRY) ? SELF_ENTRY : void 0;
@@ -86124,6 +86140,19 @@ async function startMultiDaemon(opts = {}) {
       if (owner) break;
       owner = ownerOf(records, p);
     }
+    if (!owner) {
+      for (const p of [primary, ...others]) {
+        if (!p) continue;
+        const gitRoot = nearestGitRoot(p);
+        const main2 = gitRoot ? mainCheckoutOfWorktree(gitRoot) : null;
+        if (!main2) continue;
+        owner = ownerOf(records, main2);
+        if (!owner && listWorkspaceEntries().some((e) => pickOwnerRoot([e.path], main2))) {
+          if (attachWorkspace(main2).attached) owner = ownerOf(records, main2);
+        }
+        if (owner) break;
+      }
+    }
     if (!owner && others.length > 0) {
       const registryRoots = listWorkspaceEntries().map((e) => e.path);
       const registered = others.map((p) => pickOwnerRoot(registryRoots, p)).find((r) => r != null);
@@ -87552,9 +87581,9 @@ function deriveAuthBase(verificationUri) {
 }
 function openInBrowser(url2) {
   try {
-    void import("node:child_process").then(({ spawn: spawn5 }) => {
+    void import("node:child_process").then(({ spawn: spawn6 }) => {
       const [cmd2, args2] = process.platform === "win32" ? ["cmd", ["/c", "start", "", url2]] : process.platform === "darwin" ? ["open", [url2]] : ["xdg-open", [url2]];
-      spawn5(cmd2, args2, { detached: true, stdio: "ignore" }).unref();
+      spawn6(cmd2, args2, { detached: true, stdio: "ignore" }).unref();
     });
   } catch {
   }
@@ -87622,9 +87651,41 @@ function shouldUseOAuthLogin(flags2, env2 = process.env) {
 
 // src/doctor.ts
 import { spawnSync } from "node:child_process";
+
+// src/codex-runtime.ts
+import { readdirSync as readdirSync12, statSync as statSync8 } from "node:fs";
+import { join as join39 } from "node:path";
+function resolveCodexExecutable(options = {}) {
+  const platform = options.platform ?? process.platform;
+  const env2 = options.env ?? process.env;
+  if (platform !== "win32") return "codex";
+  const fileTime = (path2) => {
+    try {
+      const s = statSync8(path2);
+      return s.isFile() ? s.mtimeMs : null;
+    } catch {
+      return null;
+    }
+  };
+  for (const dir of (env2["PATH"] ?? env2["Path"] ?? "").split(";")) {
+    if (!dir.trim()) continue;
+    const path2 = join39(dir.trim().replace(/^"|"$/g, ""), "codex.exe");
+    if (fileTime(path2) !== null) return path2;
+  }
+  if (!env2["LOCALAPPDATA"]) return "codex";
+  const root = join39(env2["LOCALAPPDATA"], "OpenAI", "Codex", "bin");
+  try {
+    const candidates = readdirSync12(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => join39(root, entry.name, "codex.exe")).map((path2) => ({ path: path2, mtime: fileTime(path2) })).filter((candidate) => candidate.mtime !== null).sort((a, b) => b.mtime - a.mtime || a.path.localeCompare(b.path));
+    return candidates[0]?.path ?? "codex";
+  } catch {
+    return "codex";
+  }
+}
+
+// src/doctor.ts
 function installedHarnessVersion(bin) {
   try {
-    const r = spawnSync(bin, ["--version"], { encoding: "utf8", timeout: 3e3 });
+    const r = spawnSync(bin === "codex" ? resolveCodexExecutable() : bin, ["--version"], { encoding: "utf8", timeout: 3e3, windowsHide: true });
     if (r.status !== 0 && !r.stdout) return null;
     const m = /(\d+\.\d+\.\d+)/.exec(`${r.stdout ?? ""}${r.stderr ?? ""}`);
     return m ? m[1] : null;
@@ -87634,6 +87695,7 @@ function installedHarnessVersion(bin) {
 }
 async function diagnoseInstallation(cfg, dependencies) {
   const checks = [];
+  if (dependencies.codexHooks) checks.push(...await dependencies.codexHooks());
   const profileName = cfg.activeInstallationProfile;
   const profile = profileName ? cfg.installationProfiles[profileName] : void 0;
   checks.push(
@@ -87727,75 +87789,14 @@ async function diagnoseInstallation(cfg, dependencies) {
   };
 }
 
-// src/whoami.ts
-async function resolveWhoami(client, actingHandle) {
-  return actingHandle ? client.contextAs(actingHandle) : client.context();
-}
-function targetLabel(context) {
-  const target = context.default_write_target;
-  if (!target) return "read-only";
-  if (target.visibility === "public") return "public graph";
-  if (target.visibility === "org") return `organization graph (${target.org_id})`;
-  return `private Team graph (${target.team_id})`;
-}
-function formatWhoami(response, localProfile) {
-  const { context, identity } = response;
-  return [
-    `inErrata context \u2014 ${context.profile_name ?? localProfile ?? "unbound credential"}`,
-    `  workspace:    ${context.workspace_kind} \xB7 ${context.org_id}`,
-    `  team:         ${context.team_id ?? "(none)"}`,
-    `  agent:        ${context.agent_id ?? "(default identity)"}`,
-    `  installation: ${context.installation_id ?? "(unbound)"}`,
-    `  environment:  ${context.environment} \xB7 ${context.client_kind}`,
-    `  reads:        ${context.read_visibilities.join(" + ")}`,
-    `  contributes:  ${targetLabel(context)}`,
-    `  policy:       ${context.policy_version ?? "(legacy)"}`,
-    `  credential:   ${identity.credential_type} \xB7 ${identity.credential_id}`,
-    `  actor:        ${identity.actor_type} \xB7 ${identity.actor_id}`
-  ];
-}
+// src/codex-doctor.ts
+import { spawn as spawn4 } from "node:child_process";
+import { createInterface } from "node:readline";
 
-// src/consolidation-trigger.ts
-function effectiveMomentumThreshold(policy, liveNodes) {
-  return Math.max(policy.momentumThreshold, Math.ceil(liveNodes * policy.momentumRatio));
-}
-function nextMomentumThreshold(args2) {
-  const { current, consumed, landmarkFlips, floor, cap } = args2;
-  const next = landmarkFlips > 0 ? Math.min(current, Math.round(consumed / 2)) : Math.max(current, Math.round(consumed * 1.5));
-  return Math.max(floor, Math.min(cap, next));
-}
-var DEFAULT_CONSOLIDATION_POLICY = {
-  baseFloorMs: 6e4,
-  dutyFactor: 20,
-  // ≤5% worst-case duty at any graph size (crater guard)
-  momentumThreshold: 500,
-  // POLICY freshness bound — the gate never demands less
-  momentumRatio: 0.01,
-  // cold-start PRIOR only; calibration replaces it after the first pass
-  momentumRatioCap: 0.05,
-  // POLICY staleness bound — refresh by 5% churn no matter what
-  quiescenceMs: 6e4
-  // sim preferred 60s over 90s (fresher, esp. heavy-code)
-};
-function numEnv5(env2, key, fallback) {
-  const raw2 = env2[key];
-  if (raw2 == null || raw2.trim() === "") return fallback;
-  const n = Number(raw2);
-  return Number.isFinite(n) && n >= 0 ? n : fallback;
-}
-function consolidationPolicyFromEnv(env2 = process.env) {
-  return {
-    baseFloorMs: numEnv5(env2, "ERRATA_CONSOLIDATE_BASE_FLOOR_MS", DEFAULT_CONSOLIDATION_POLICY.baseFloorMs),
-    dutyFactor: numEnv5(env2, "ERRATA_CONSOLIDATE_DUTY_FACTOR", DEFAULT_CONSOLIDATION_POLICY.dutyFactor),
-    momentumThreshold: numEnv5(env2, "ERRATA_CONSOLIDATE_MOMENTUM", DEFAULT_CONSOLIDATION_POLICY.momentumThreshold),
-    momentumRatio: numEnv5(env2, "ERRATA_CONSOLIDATE_MOMENTUM_RATIO", DEFAULT_CONSOLIDATION_POLICY.momentumRatio),
-    momentumRatioCap: numEnv5(env2, "ERRATA_CONSOLIDATE_MOMENTUM_RATIO_CAP", DEFAULT_CONSOLIDATION_POLICY.momentumRatioCap),
-    quiescenceMs: numEnv5(env2, "ERRATA_CONSOLIDATE_QUIESCENCE_MS", DEFAULT_CONSOLIDATION_POLICY.quiescenceMs)
-  };
-}
-function consolidationGapMs(lastPassMs, policy) {
-  return Math.max(policy.baseFloorMs, lastPassMs * policy.dutyFactor);
-}
+// src/codex-hooks.ts
+import { existsSync as existsSync33, mkdirSync as mkdirSync9, readFileSync as readFileSync34, writeFileSync as writeFileSync25 } from "node:fs";
+import { homedir as homedir7 } from "node:os";
+import { join as join40 } from "node:path";
 
 // src/hook-commands.ts
 function hookCurlCommand(port, path2 = "/api/hook") {
@@ -87819,17 +87820,12 @@ function buildCodexHooksToml(port, options) {
   };
   if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error("Invalid hook port");
   const command = quote(options.nodePath) + " " + quote(options.relayPath) + " " + port;
-  const handlers = ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse"].map(
-    (event) => "[[hooks." + event + "]]\n" + (event === "UserPromptSubmit" ? "" : 'matcher = ".*"\n') + "\n[[hooks." + event + '.hooks]]\ntype = "command"\ncommand = ' + JSON.stringify(command) + "\ntimeout = 10\nadditionalContextLimit = 5000\n"
+  const handlers = ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop"].map(
+    (event) => "[[hooks." + event + "]]\n" + (["UserPromptSubmit", "Stop"].includes(event) ? "" : 'matcher = ".*"\n') + "\n[[hooks." + event + '.hooks]]\ntype = "command"\ncommand = ' + JSON.stringify(command) + "\ntimeout = 10\nadditionalContextLimit = 5000\n"
   );
   return CODEX_HOOKS_BEGIN + "\n" + handlers.join("\n") + CODEX_HOOKS_END + "\n";
 }
 
-// src/codex-hooks.ts
-import { existsSync as existsSync33, mkdirSync as mkdirSync9, readFileSync as readFileSync34, writeFileSync as writeFileSync25 } from "node:fs";
-import { homedir as homedir7 } from "node:os";
-import { join as join39 } from "node:path";
-
 // src/codex-hook-relay.ts
 var CODEX_RELAY_SOURCE = String.raw`// errata-managed: regenerated by errata install-hooks codex
 import { readFileSync } from 'node:fs';
@@ -87853,7 +87849,8 @@ try {
     } catch { /* An unavailable daemon must never block the agent. */ }
   };
   if (event === 'PreToolUse' || event === 'PostToolUse') await post('hook', true);
-  if (event === 'PostToolUse') await post('turn');
+  // Stop sees the final assistant message, including turns with no tools.
+  if (event === 'PostToolUse' || event === 'Stop') await post('turn');
   if (['SessionStart', 'UserPromptSubmit', 'PostToolUse'].includes(event)) {
     // Run after capture, so changes already rendered by the daemon arrive now.
     // Background extraction finishing later arrives at the next tool boundary.
@@ -87868,8 +87865,9 @@ try {
 `;
 
 // src/codex-hooks.ts
-function hasCodexConfig(root, codexHome = process.env["CODEX_HOME"] || join39(homedir7(), ".codex")) {
-  return existsSync33(join39(root, ".codex")) || existsSync33(codexHome);
+var CODEX_HOOK_REVIEW_HELP = "Codex desktop: Settings > Hooks, select this project, expand each event and Trust the Errata hook. CLI users can use /hooks.";
+function hasCodexConfig(root, codexHome = process.env["CODEX_HOME"] || join40(homedir7(), ".codex")) {
+  return existsSync33(join40(root, ".codex")) || existsSync33(codexHome);
 }
 function replaceCodexHooks(existing, block) {
   const begin = existing.indexOf(CODEX_HOOKS_BEGIN);
@@ -87885,17 +87883,176 @@ function replaceCodexHooks(existing, block) {
   return existing.trimEnd() + (existing.trim() ? "\n\n" : "") + block;
 }
 function writeCodexHooks(root, port, nodePath = process.execPath) {
-  const dir = join39(root, ".codex");
-  const file2 = join39(dir, "config.toml");
-  const relay = join39(dir, "hooks", "errata-relay.mjs");
+  const dir = join40(root, ".codex");
+  const file2 = join40(dir, "config.toml");
+  const relay = join40(dir, "hooks", "errata-relay.mjs");
   const block = buildCodexHooksToml(port, { nodePath, relayPath: relay });
   const final = replaceCodexHooks(existsSync33(file2) ? readFileSync34(file2, "utf8") : "", block);
-  mkdirSync9(join39(dir, "hooks"), { recursive: true });
+  mkdirSync9(join40(dir, "hooks"), { recursive: true });
   writeFileSync25(relay, CODEX_RELAY_SOURCE, "utf8");
   writeFileSync25(file2, final, "utf8");
   return file2;
 }
 
+// src/codex-doctor.ts
+function readCodexHookState(cwd, options = {}) {
+  return new Promise((resolve7, reject) => {
+    const child = spawn4(options.bin ?? resolveCodexExecutable(), options.args ?? ["app-server", "--stdio"], {
+      cwd,
+      windowsHide: true,
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    const lines = createInterface({ input: child.stdout });
+    let settled = false;
+    let size = 0;
+    let hooks;
+    let features;
+    const finish = (error48) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      lines.close();
+      child.kill();
+      if (error48) reject(error48);
+      else resolve7({ ...hooks, features });
+    };
+    const timer = setTimeout(() => finish(new Error("Codex hook inspection timed out")), options.timeoutMs ?? 1e4);
+    const send = (id, method, params) => {
+      child.stdin.write(JSON.stringify({ id, method, params }) + "\n");
+    };
+    child.on("error", () => finish(new Error(`Codex could not be started for hook inspection. ${CODEX_HOOK_REVIEW_HELP}`)));
+    child.on("exit", () => finish(new Error("Codex exited before returning its hook state")));
+    child.stdin.on("error", () => finish(new Error("Codex hook inspection connection closed")));
+    child.stderr.resume();
+    child.stdout.on("data", (chunk) => {
+      size += chunk.length;
+      if (size > 2e6) finish(new Error("Codex hook inspection exceeded its response budget"));
+    });
+    lines.on("line", (line) => {
+      if (settled) return;
+      let message2;
+      try {
+        message2 = JSON.parse(line);
+      } catch {
+        return;
+      }
+      if (![1, 2, 3].includes(message2.id)) return;
+      if (message2.error) return finish(new Error(`Codex does not support hook inspection. ${CODEX_HOOK_REVIEW_HELP}`));
+      if (message2.id === 1) {
+        child.stdin.write(JSON.stringify({ method: "initialized" }) + "\n");
+        send(2, "hooks/list", { cwds: [cwd] });
+        send(3, "config/read", { cwd, includeLayers: false });
+      } else if (message2.id === 2) {
+        const entry = message2.result?.data?.[0];
+        if (!Array.isArray(entry?.hooks)) return finish(new Error("Codex returned no hook inspection result"));
+        hooks = { hooks: entry.hooks, errors: entry.errors };
+      } else {
+        if (!message2.result?.config) return finish(new Error("Codex returned no effective configuration"));
+        features = message2.result.config.features ?? {};
+      }
+      if (hooks && features) finish();
+    });
+    send(1, "initialize", {
+      clientInfo: { name: "errata_doctor", version: "1.0.0" },
+      capabilities: { experimentalApi: true }
+    });
+  });
+}
+function assessCodexHooks(state) {
+  const check2 = (status, detail) => [{ id: "codex_hooks", status, detail }];
+  if (state.errors?.length) return check2("fail", `Codex could not load hook configuration. ${CODEX_HOOK_REVIEW_HELP}`);
+  if ((state.features?.hooks ?? state.features?.codex_hooks) === false) {
+    return check2("fail", "Codex hooks are explicitly disabled; left unchanged");
+  }
+  const hooks = state.hooks.filter((h) => h.command?.includes("errata-relay.mjs"));
+  const required2 = ["sessionStart", "userPromptSubmit", "preToolUse", "postToolUse", "stop"];
+  const missing = required2.filter((event) => !hooks.some((h) => h.eventName === event));
+  const checks = [];
+  if (missing.length) checks.push(...check2("fail", `Errata hooks missing or outdated in this checkout (${missing.join(", ")}); run errata install-hooks codex here`));
+  if (hooks.some((h) => !h.enabled)) checks.push(...check2("fail", `Errata hooks are disabled in Codex; left unchanged. ${CODEX_HOOK_REVIEW_HELP}`));
+  if (hooks.some((h) => !["trusted", "managed"].includes(h.trustStatus))) {
+    checks.push(...check2("fail", `Errata hooks need review/trust before they can run; project trust is separate. ${CODEX_HOOK_REVIEW_HELP}`));
+  }
+  return checks.length ? checks : check2("pass", "Codex discovers enabled, trusted Errata hooks; verify live context and capture in a session");
+}
+async function diagnoseCodexHooks(cwd) {
+  try {
+    return assessCodexHooks(await readCodexHookState(cwd));
+  } catch (error48) {
+    return [{ id: "codex_hooks", status: "fail", detail: error48 instanceof Error ? error48.message : "Cannot verify Codex hooks" }];
+  }
+}
+
+// src/whoami.ts
+async function resolveWhoami(client, actingHandle) {
+  return actingHandle ? client.contextAs(actingHandle) : client.context();
+}
+function targetLabel(context) {
+  const target = context.default_write_target;
+  if (!target) return "read-only";
+  if (target.visibility === "public") return "public graph";
+  if (target.visibility === "org") return `organization graph (${target.org_id})`;
+  return `private Team graph (${target.team_id})`;
+}
+function formatWhoami(response, localProfile) {
+  const { context, identity } = response;
+  return [
+    `inErrata context \u2014 ${context.profile_name ?? localProfile ?? "unbound credential"}`,
+    `  workspace:    ${context.workspace_kind} \xB7 ${context.org_id}`,
+    `  team:         ${context.team_id ?? "(none)"}`,
+    `  agent:        ${context.agent_id ?? "(default identity)"}`,
+    `  installation: ${context.installation_id ?? "(unbound)"}`,
+    `  environment:  ${context.environment} \xB7 ${context.client_kind}`,
+    `  reads:        ${context.read_visibilities.join(" + ")}`,
+    `  contributes:  ${targetLabel(context)}`,
+    `  policy:       ${context.policy_version ?? "(legacy)"}`,
+    `  credential:   ${identity.credential_type} \xB7 ${identity.credential_id}`,
+    `  actor:        ${identity.actor_type} \xB7 ${identity.actor_id}`
+  ];
+}
+
+// src/consolidation-trigger.ts
+function effectiveMomentumThreshold(policy, liveNodes) {
+  return Math.max(policy.momentumThreshold, Math.ceil(liveNodes * policy.momentumRatio));
+}
+function nextMomentumThreshold(args2) {
+  const { current, consumed, landmarkFlips, floor, cap } = args2;
+  const next = landmarkFlips > 0 ? Math.min(current, Math.round(consumed / 2)) : Math.max(current, Math.round(consumed * 1.5));
+  return Math.max(floor, Math.min(cap, next));
+}
+var DEFAULT_CONSOLIDATION_POLICY = {
+  baseFloorMs: 6e4,
+  dutyFactor: 20,
+  // ≤5% worst-case duty at any graph size (crater guard)
+  momentumThreshold: 500,
+  // POLICY freshness bound — the gate never demands less
+  momentumRatio: 0.01,
+  // cold-start PRIOR only; calibration replaces it after the first pass
+  momentumRatioCap: 0.05,
+  // POLICY staleness bound — refresh by 5% churn no matter what
+  quiescenceMs: 6e4
+  // sim preferred 60s over 90s (fresher, esp. heavy-code)
+};
+function numEnv5(env2, key, fallback) {
+  const raw2 = env2[key];
+  if (raw2 == null || raw2.trim() === "") return fallback;
+  const n = Number(raw2);
+  return Number.isFinite(n) && n >= 0 ? n : fallback;
+}
+function consolidationPolicyFromEnv(env2 = process.env) {
+  return {
+    baseFloorMs: numEnv5(env2, "ERRATA_CONSOLIDATE_BASE_FLOOR_MS", DEFAULT_CONSOLIDATION_POLICY.baseFloorMs),
+    dutyFactor: numEnv5(env2, "ERRATA_CONSOLIDATE_DUTY_FACTOR", DEFAULT_CONSOLIDATION_POLICY.dutyFactor),
+    momentumThreshold: numEnv5(env2, "ERRATA_CONSOLIDATE_MOMENTUM", DEFAULT_CONSOLIDATION_POLICY.momentumThreshold),
+    momentumRatio: numEnv5(env2, "ERRATA_CONSOLIDATE_MOMENTUM_RATIO", DEFAULT_CONSOLIDATION_POLICY.momentumRatio),
+    momentumRatioCap: numEnv5(env2, "ERRATA_CONSOLIDATE_MOMENTUM_RATIO_CAP", DEFAULT_CONSOLIDATION_POLICY.momentumRatioCap),
+    quiescenceMs: numEnv5(env2, "ERRATA_CONSOLIDATE_QUIESCENCE_MS", DEFAULT_CONSOLIDATION_POLICY.quiescenceMs)
+  };
+}
+function consolidationGapMs(lastPassMs, policy) {
+  return Math.max(policy.baseFloorMs, lastPassMs * policy.dutyFactor);
+}
+
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "// @inerrata opencode plugin \u2014 errata-managed (errata install-hooks opencode)";
 var OPENCODE_D1_CONTRACT = "Behavioral contract: (1) On ANY error, call search() BEFORE debugging \u2014 costs ~400 tokens vs 5,000\u201350,000 cold. (2) After solving non-trivial problems, contribute back: if your harness emits typed nodes (canonicalId + label + attrs), use ingest \u2014 the typed door; otherwise call contribute(), the prose fallback. (3) Before web search, try search() first \u2014 graph is 2\u201315\xD7 cheaper. (4) At session end, review what you solved and contribute anything novel.";
@@ -88302,13 +88459,13 @@ async function cmdInit() {
     console.log("");
     console.log("installing harness hooks...");
     const { existsSync: existsSync35 } = await import("node:fs");
-    const { join: join41 } = await import("node:path");
+    const { join: join42 } = await import("node:path");
     try {
       await installClaudeHooks(port);
     } catch (err2) {
       console.warn(`  \u26A0\uFE0F  Claude hook install failed: ${err2 instanceof Error ? err2.message : err2}`);
     }
-    if (existsSync35(join41(ROOT, ".cursor"))) {
+    if (existsSync35(join42(ROOT, ".cursor"))) {
       try {
         await installCursorMcpConfig();
       } catch (err2) {
@@ -88752,6 +88909,7 @@ async function cmdWhoami(args2) {
 async function cmdDoctor(args2) {
   const cfg = loadConfig();
   const report = await diagnoseInstallation(cfg, {
+    ...hasCodexConfig(process.cwd()) ? { codexHooks: () => diagnoseCodexHooks(process.cwd()) } : {},
     inspect: () => inspectCloudEndpoint(cfg.cloudUrl),
     authenticate: async () => {
       const me = await authedCloudClient(cfg).me();
@@ -90135,8 +90293,8 @@ async function cmdReport(args2) {
   const outDir = workspacePaths(ROOT).configDir;
   mkdirSync10(outDir, { recursive: true });
   const files = renderReport2(data, { includeFutureVerbs });
-  for (const f of files) writeFileSync26(join40(outDir, f.name), f.html, "utf8");
-  const indexPath = join40(outDir, "report.html");
+  for (const f of files) writeFileSync26(join41(outDir, f.name), f.html, "utf8");
+  const indexPath = join41(outDir, "report.html");
   console.log(`report \u2192 ${indexPath}`);
   console.log(
     `  ${data.repos.length} repo(s) \xB7 ${files.length} file(s) \xB7 ${data.rollup.nodes.toLocaleString("en-US")} nodes`
@@ -90191,13 +90349,13 @@ function spawnDaemonDetached(options = {}) {
   try {
     const logPath = daemonLogPath();
     try {
-      if (statSync8(logPath).size > 5 * 1024 * 1024) renameSync4(logPath, `${logPath}.1`);
+      if (statSync9(logPath).size > 5 * 1024 * 1024) renameSync4(logPath, `${logPath}.1`);
     } catch {
     }
     out2 = openSync2(logPath, "a");
   } catch {
   }
-  spawn4(cmd2, args2, {
+  spawn5(cmd2, args2, {
     detached: true,
     stdio: ["ignore", out2, out2],
     windowsHide: true,
@@ -90257,10 +90415,10 @@ async function cmdInstallHooks(args2) {
 }
 async function installOpencodePlugin(port) {
   const { mkdirSync: mkdirSync10, existsSync: existsSync35, readFileSync: readFileSync36, writeFileSync: writeFileSync26 } = await import("node:fs");
-  const { join: join41 } = await import("node:path");
-  const dir = join41(ROOT, ".opencode", "plugin");
+  const { join: join42 } = await import("node:path");
+  const dir = join42(ROOT, ".opencode", "plugin");
   if (!existsSync35(dir)) mkdirSync10(dir, { recursive: true });
-  const file2 = join41(dir, "inerrata.js");
+  const file2 = join42(dir, "inerrata.js");
   if (existsSync35(file2)) {
     const head2 = readFileSync36(file2, "utf8").split("\n")[0] ?? "";
     if (head2.trim() !== OPENCODE_PLUGIN_MARKER) {
@@ -90269,7 +90427,7 @@ async function installOpencodePlugin(port) {
     }
   }
   writeFileSync26(file2, buildOpencodePluginSource(port, { version: DAEMON_VERSION }), "utf8");
-  const cfgFile = join41(ROOT, "opencode.json");
+  const cfgFile = join42(ROOT, "opencode.json");
   let cfg = { $schema: "https://opencode.ai/config.json" };
   if (existsSync35(cfgFile)) {
     try {
@@ -90305,10 +90463,10 @@ function errataMcpInvocation() {
 }
 async function installClaudeHooks(port) {
   const { mkdirSync: mkdirSync10, existsSync: existsSync35, readFileSync: readFileSync36, writeFileSync: writeFileSync26 } = await import("node:fs");
-  const { join: join41 } = await import("node:path");
-  const dir = join41(ROOT, ".claude");
+  const { join: join42 } = await import("node:path");
+  const dir = join42(ROOT, ".claude");
   if (!existsSync35(dir)) mkdirSync10(dir, { recursive: true });
-  const file2 = join41(dir, "settings.json");
+  const file2 = join42(dir, "settings.json");
   let settings = {};
   if (existsSync35(file2)) {
     try {
@@ -90361,7 +90519,7 @@ async function installClaudeHooks(port) {
   writeFileSync26(file2, JSON.stringify(settings, null, 2) + "\n", "utf8");
   console.log(`installed Claude Code hooks \u2192 ${file2}`);
   await installClaudeMcpConfig();
-  const claudeMd = join41(ROOT, "CLAUDE.md");
+  const claudeMd = join42(ROOT, "CLAUDE.md");
   const recall = writeManagedBlock(claudeMd, { body: RECALL_FIRST_BLOCK });
   if (recall.kind === "collision") {
     console.warn(
@@ -90374,8 +90532,8 @@ async function installClaudeHooks(port) {
 }
 async function installClaudeMcpConfig() {
   const { mkdirSync: mkdirSync10, existsSync: existsSync35, readFileSync: readFileSync36, writeFileSync: writeFileSync26 } = await import("node:fs");
-  const { join: join41, dirname: dirname13 } = await import("node:path");
-  const file2 = join41(ROOT, ".mcp.json");
+  const { join: join42, dirname: dirname13 } = await import("node:path");
+  const file2 = join42(ROOT, ".mcp.json");
   const dir = dirname13(file2);
   if (!existsSync35(dir)) mkdirSync10(dir, { recursive: true });
   let cfg = {};
@@ -90396,10 +90554,10 @@ async function installClaudeMcpConfig() {
 }
 async function installCursorMcpConfig() {
   const { mkdirSync: mkdirSync10, existsSync: existsSync35, readFileSync: readFileSync36, writeFileSync: writeFileSync26 } = await import("node:fs");
-  const { join: join41 } = await import("node:path");
-  const dir = join41(ROOT, ".cursor");
+  const { join: join42 } = await import("node:path");
+  const dir = join42(ROOT, ".cursor");
   if (!existsSync35(dir)) mkdirSync10(dir, { recursive: true });
-  const file2 = join41(dir, "mcp.json");
+  const file2 = join42(dir, "mcp.json");
   let cfg = {};
   if (existsSync35(file2)) {
     try {
@@ -90419,12 +90577,26 @@ async function installCursorMcpConfig() {
   console.log(`  \u26A0\uFE0F  reload Cursor (Cmd/Ctrl-Shift-P \u2192 "Reload Window") to pick it up.`);
 }
 async function installCodexHooks(port) {
-  const file2 = writeCodexHooks(ROOT, port);
+  const gitRoot = nearestGitRoot(process.cwd());
+  const hookRoot = gitRoot && mainCheckoutOfWorktree(gitRoot) ? gitRoot : ROOT;
+  const file2 = writeCodexHooks(hookRoot, port);
+  const instructions = writeManagedBlock(join41(hookRoot, "AGENTS.md"), {
+    body: AGENTS_POINTER_BODY,
+    stable: true
+  });
   console.log(`installed Codex hooks \u2192 ${file2}`);
+  if (instructions.kind === "collision") {
+    console.warn("  AGENTS.md's Errata block was edited; preserved it. Add an explicit instruction to read .errata/context.md each turn.");
+  } else {
+    console.log("  AGENTS.md now tells Codex to read live context at the start of each turn.");
+  }
   console.log("  Context loads on SessionStart/UserPromptSubmit and refreshes after tools when changed.");
-  console.log("  Tool capture and /api/turn harvesting remain enabled.");
-  console.log("  Restart/resume Codex to reload config, then review and trust the hooks with /hooks.");
-  console.log("  If your Codex version gates hooks, enable [features] codex_hooks = true.");
+  console.log("  Tool and final-reply capture are configured; hooks must be trusted before they run.");
+  console.log(`  ${CODEX_HOOK_REVIEW_HELP}`);
+  console.log("  Use Reload hooks in that screen after installation. Restarting alone does not grant trust.");
+  console.log("  No standalone Codex CLI is required for desktop setup.");
+  console.log("  Run `errata doctor` here to check hook discovery and trust; installation alone is not activation.");
+  console.log("  Respect an explicit [features] hooks = false setting (older builds use codex_hooks).");
   console.log("  Older Codex versions may not support every event; update if hooks do not fire.");
 }
 async function refreshLinkedCodexHooks(args2) {
@@ -90812,7 +90984,7 @@ async function cmdDash(args2) {
       await yieldToLoop2();
       try {
         const items = selectDurableMemory(handle2.sharedStore, r.engine.profile);
-        const res = bleedRules(join40(r.root, ".claude", "rules"), items);
+        const res = bleedRules(join41(r.root, ".claude", "rules"), items);
         if (res.written || res.pruned) {
           console.log(
             `[rules:${r.entry.name}] ${res.written} collective principle(s) \u2192 .claude/rules` + (res.pruned ? `, ${res.pruned} pruned` : "")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.6-dev.2752",
+  "version": "2.0.6-dev.2766",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {

package/pass-worker.mjs

@@ -27255,6 +27255,11 @@ var AGENTS_POINTER_BODY = [
   "Live agent context for this checkout \u2014 priors, open problems, the capture",
   "protocol \u2014 is maintained by the errata daemon at `.errata/context.md`.",
   "",
+  "At the beginning of each task and each new user turn, read that file before",
+  "substantive work. Use the current file in preference to an earlier snapshot.",
+  "If it is absent, continue normally. In Codex, an `@` mention alone does not",
+  "load the file; read it explicitly.",
+  "",
   "It is gitignored ON PURPOSE: it is this machine's runtime state, not repo",
   "content. Committing it would prime your teammates with your graph.",
   "",