@memnexus-ai/cli 1.7.234 → 1.7.236

package/dist/lib/renderable-retrieval.d.ts

@@ -42,6 +42,17 @@
  *    stdout, and only when degraded — matching the server convention that a
  *    healthy response gains no new fields (search.schema.ts).
  *
+ * ANCHOR-GATE SUPPRESSION (#5450) — A SECOND, DISTINCT CONDITION
+ *
+ * The fulltext-anchor gate can discard a non-empty candidate set and return `[]`
+ * while every branch reports healthy, so `degraded` is false. The server already
+ * discloses it (`meta.anchorGateSuppressed`, `meta.anchorGateDiscardedCount`);
+ * the CLI dropped it, and the human surfaces printed "Found 0 results". It is
+ * carried as `AnchorSuppressionState`, kept apart from `DegradationState`
+ * because a suppressed empty is not a branch failure. JSON/YAML stdout is
+ * UNCHANGED for this condition: the markers already ride through `meta`
+ * untouched, and machine callers may depend on the current shape.
+ *
  * This module deliberately has no imports: colouring is the caller's job, and a
  * dependency-free module keeps the type-level enforcement test cheap to run.
  */
@@ -62,6 +73,22 @@ export interface DegradationState {
     readonly degraded: boolean;
     readonly failures: readonly BranchFailure[];
 }
+/**
+ * Whether the fulltext-anchor gate threw candidates away on this response
+ * (GH #5450), and how many.
+ *
+ * SEPARATE from `DegradationState` on purpose. The gate can null a candidate set
+ * while every retrieval branch reports ok, so `degraded` is FALSE on this path
+ * and the CLI's degraded warning never fires. Folding the two together would
+ * mislabel a healthy-but-suppressed response as a branch failure and lose the
+ * discarded count. `suppressed` is never optional and `discardedCount` is always
+ * a number, for the same reason `failures` is always an array: there is no
+ * `undefined` for a renderer to read as "fine".
+ */
+export interface AnchorSuppressionState {
+    readonly suppressed: boolean;
+    readonly discardedCount: number;
+}
 /** A normalised search hit: `{ memory, score, matchedVia }`. */
 export interface SearchResultItem {
     readonly memory: Record<string, any>;
@@ -72,6 +99,11 @@ export interface SearchResultItem {
 export declare const DEGRADED_MARKER = "\u26A0 Degraded retrieval";
 /** Suffix appended to a command's headline when the response is degraded. */
 export declare const DEGRADED_HEADLINE_SUFFIX = " \u2014 INCOMPLETE (degraded retrieval)";
+/**
+ * Shared marker text for a suppressed result set. Distinct string from
+ * `DEGRADED_MARKER` so the two conditions stay greppable apart in agent logs.
+ */
+export declare const SUPPRESSED_MARKER = "\u26A0 Results DISCARDED (anchor gate)";
 /**
  * The stderr warning line for a response, or null when the response is healthy.
  * Plain text — the caller applies colour.
@@ -84,6 +116,23 @@ export declare function degradationWarningLine(health: DegradationState): string
 export declare function degradationSummaryLine(health: DegradationState): string | null;
 /** Headline suffix for spinners; empty string when healthy. */
 export declare function degradationHeadlineSuffix(health: DegradationState): string;
+/**
+ * The stderr warning line for a suppressed result set, or null when nothing was
+ * discarded. Plain text — the caller applies colour.
+ *
+ * The wording has one job: an agent skimming this output must not conclude that
+ * nothing exists. That conclusion is the actual harm in #5450 — every roleguide
+ * in this repo gates work on a memory search, and a cheerful "Found 0 results"
+ * passes that gate with a wrong answer.
+ */
+export declare function suppressionWarningLine(suppression: AnchorSuppressionState): string | null;
+/**
+ * A one-line marker for human stdout renderers (table footer, llm/compact
+ * header). Null when nothing was discarded.
+ */
+export declare function suppressionSummaryLine(suppression: AnchorSuppressionState): string | null;
+/** Headline suffix for spinners; empty string when nothing was discarded. */
+export declare function suppressionHeadlineSuffix(suppression: AnchorSuppressionState): string;
 /**
  * A search response that has been through the health mapping.
  *
@@ -101,6 +150,11 @@ export declare class RenderableSearchResult {
     readonly temporalMetadata: any;
     /** Retrieval health. Always populated. */
     readonly health: DegradationState;
+    /**
+     * Anchor-gate suppression (#5450). Always populated, and deliberately NOT
+     * folded into `health`: a suppressed empty is not a branch failure.
+     */
+    readonly suppression: AnchorSuppressionState;
     private readonly body;
     private constructor();
     /**

package/dist/lib/renderable-retrieval.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"renderable-retrieval.d.ts","sourceRoot":"","sources":["../../src/lib/renderable-retrieval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,6EAA6E;AAC7E,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAElE,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CAC7C;AAED,gEAAgE;AAChE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,6EAA6E;AAC7E,eAAO,MAAM,eAAe,8BAAyB,CAAC;AAEtD,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB,4CAAuC,CAAC;AAqI7E;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAU9E;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAK9E;AAED,+DAA+D;AAC/D,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAE1E;AAWD;;;;;GAKG;AACH,qBAAa,sBAAsB;IAE/B,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE;IAC7C,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,yCAAyC;IACzC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS;IACzC,6CAA6C;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,GAAG;IAC9B,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAXvB,OAAO;IAcP;;;;;;;;OAQG;IACH,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,sBAAsB;IAc7D;;;;OAIG;IACH,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,sBAAsB;IAQ9D;;;OAGG;IACH,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAa1C;AAED;;;;;;GAMG;AACH,qBAAa,sBAAsB;IAE/B,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;IACvB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,SAAS;IACpC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,SAAS;IACpC,QAAQ,CAAC,uBAAuB,EAAE,GAAG;IACrC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI;IATvB,OAAO;IAYP,iFAAiF;IACjF,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,sBAAsB;IAe7D,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAS1C;AAED;;;;;GAKG;AACH,qBAAa,yBAAyB;IAElC,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAHnC,OAAO;IAMP,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,yBAAyB;IAKhE,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAS1C"}
+{"version":3,"file":"renderable-retrieval.d.ts","sourceRoot":"","sources":["../../src/lib/renderable-retrieval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,6EAA6E;AAC7E,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAElE,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CAC7C;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,gEAAgE;AAChE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,6EAA6E;AAC7E,eAAO,MAAM,eAAe,8BAAyB,CAAC;AAEtD,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB,4CAAuC,CAAC;AAE7E;;;GAGG;AACH,eAAO,MAAM,iBAAiB,2CAAsC,CAAC;AAmKrE;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAU9E;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAK9E;AAED,+DAA+D;AAC/D,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAE1E;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,sBAAsB,GAAG,MAAM,GAAG,IAAI,CASzF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,sBAAsB,GAAG,MAAM,GAAG,IAAI,CAMzF;AAED,6EAA6E;AAC7E,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,sBAAsB,GAAG,MAAM,CAKrF;AAWD;;;;;GAKG;AACH,qBAAa,sBAAsB;IAE/B,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE;IAC7C,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,yCAAyC;IACzC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS;IACzC,6CAA6C;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,GAAG;IAC9B,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IACjC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,sBAAsB;IAC5C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAhBvB,OAAO;IAmBP;;;;;;;;OAQG;IACH,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,sBAAsB;IAe7D;;;;OAIG;IACH,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,sBAAsB;IAgB9D;;;OAGG;IACH,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAa1C;AAED;;;;;;GAMG;AACH,qBAAa,sBAAsB;IAE/B,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;IACvB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,SAAS;IACpC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,SAAS;IACpC,QAAQ,CAAC,uBAAuB,EAAE,GAAG;IACrC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI;IATvB,OAAO;IAYP,iFAAiF;IACjF,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,sBAAsB;IAe7D,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAS1C;AAED;;;;;GAKG;AACH,qBAAa,yBAAyB;IAElC,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAHnC,OAAO;IAMP,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,yBAAyB;IAKhE,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAS1C"}

package/dist/lib/renderable-retrieval.js

@@ -43,22 +43,45 @@
  *    stdout, and only when degraded — matching the server convention that a
  *    healthy response gains no new fields (search.schema.ts).
  *
+ * ANCHOR-GATE SUPPRESSION (#5450) — A SECOND, DISTINCT CONDITION
+ *
+ * The fulltext-anchor gate can discard a non-empty candidate set and return `[]`
+ * while every branch reports healthy, so `degraded` is false. The server already
+ * discloses it (`meta.anchorGateSuppressed`, `meta.anchorGateDiscardedCount`);
+ * the CLI dropped it, and the human surfaces printed "Found 0 results". It is
+ * carried as `AnchorSuppressionState`, kept apart from `DegradationState`
+ * because a suppressed empty is not a branch failure. JSON/YAML stdout is
+ * UNCHANGED for this condition: the markers already ride through `meta`
+ * untouched, and machine callers may depend on the current shape.
+ *
  * This module deliberately has no imports: colouring is the caller's job, and a
  * dependency-free module keeps the type-level enforcement test cheap to run.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RenderableContextBriefing = exports.RenderableDigestResult = exports.RenderableSearchResult = exports.DEGRADED_HEADLINE_SUFFIX = exports.DEGRADED_MARKER = void 0;
+exports.RenderableContextBriefing = exports.RenderableDigestResult = exports.RenderableSearchResult = exports.SUPPRESSED_MARKER = exports.DEGRADED_HEADLINE_SUFFIX = exports.DEGRADED_MARKER = void 0;
 exports.degradationWarningLine = degradationWarningLine;
 exports.degradationSummaryLine = degradationSummaryLine;
 exports.degradationHeadlineSuffix = degradationHeadlineSuffix;
+exports.suppressionWarningLine = suppressionWarningLine;
+exports.suppressionSummaryLine = suppressionSummaryLine;
+exports.suppressionHeadlineSuffix = suppressionHeadlineSuffix;
 /** Shared marker text. Every surface uses this string so it is greppable. */
 exports.DEGRADED_MARKER = '⚠ Degraded retrieval';
 /** Suffix appended to a command's headline when the response is degraded. */
 exports.DEGRADED_HEADLINE_SUFFIX = ' — INCOMPLETE (degraded retrieval)';
+/**
+ * Shared marker text for a suppressed result set. Distinct string from
+ * `DEGRADED_MARKER` so the two conditions stay greppable apart in agent logs.
+ */
+exports.SUPPRESSED_MARKER = '⚠ Results DISCARDED (anchor gate)';
 const HEALTHY = Object.freeze({
     degraded: false,
     failures: Object.freeze([]),
 });
+const NOT_SUPPRESSED = Object.freeze({
+    suppressed: false,
+    discardedCount: 0,
+});
 /**
  * Branch names are server-supplied and land on stderr, which agents read.
  * Constrain them to an identifier shape and cap the count rather than echoing
@@ -103,6 +126,29 @@ function readDegradation(container) {
         return HEALTHY;
     return Object.freeze({ degraded: true, failures: readBranchFailures(c.branchFailures) });
 }
+/**
+ * Read the fulltext-anchor-gate disclosure from a wire `meta` container
+ * (`meta.anchorGateSuppressed` + `meta.anchorGateDiscardedCount`, attached by
+ * the SearchHealth class in core-api/src/routes/memories.routes.ts).
+ *
+ * The server was already correct: it discloses both fields. The CLI dropped them
+ * because `readDegradation` is keyed on `degraded`, which is false here (#5450).
+ * This is the single place those two field names are read.
+ *
+ * Tolerant of either field arriving alone: the count is authoritative when it is
+ * a positive number, and a bare `anchorGateSuppressed: true` still counts as
+ * suppressed (with an unknown count) rather than being silently dropped.
+ */
+function readAnchorSuppression(container) {
+    const c = container;
+    if (!c || typeof c !== 'object')
+        return NOT_SUPPRESSED;
+    const raw = c.anchorGateDiscardedCount;
+    const count = typeof raw === 'number' && Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 0;
+    if (c.anchorGateSuppressed !== true && count === 0)
+        return NOT_SUPPRESSED;
+    return Object.freeze({ suppressed: true, discardedCount: count });
+}
 /**
  * build-context reports failure per SECTION rather than per search branch
  * (`meta.timedOutSections` / `meta.failedSections`, memories.routes.ts). Map
@@ -206,6 +252,66 @@ function degradationSummaryLine(health) {
 function degradationHeadlineSuffix(health) {
     return health.degraded ? exports.DEGRADED_HEADLINE_SUFFIX : '';
 }
+/**
+ * How the discarded count reads when the server sent the flag but no number.
+ *
+ * "CANDIDATE result", not "matching result" (#5450 review): the count is
+ * `anchorGateDiscardedCount`, which counts candidates the gate REJECTED, and
+ * rejecting weak candidates is what the gate is for — some fraction of them are
+ * genuinely irrelevant. Claiming N *matching* memories were withheld would send
+ * an agent re-querying for memories that are not there, and reporting to its own
+ * caller that the store holds matches it could not retrieve.
+ *
+ * The subject AND its verb are returned together ("1 candidate result was" /
+ * "28 candidate results were"): the verb has to agree with the singularised
+ * noun, so a call site that supplies its own hard-coded "were" produces
+ * "1 candidate result were". These lines exist to be believed by an agent
+ * skimming them — a visible grammar error in a warning whose whole job is to
+ * carry authority undermines it. Call sites must not add a verb.
+ */
+function discardedPhrase(suppression) {
+    if (suppression.discardedCount === 1)
+        return '1 candidate result was';
+    return suppression.discardedCount > 0
+        ? `${suppression.discardedCount} candidate results were`
+        : 'candidate results were';
+}
+/**
+ * The stderr warning line for a suppressed result set, or null when nothing was
+ * discarded. Plain text — the caller applies colour.
+ *
+ * The wording has one job: an agent skimming this output must not conclude that
+ * nothing exists. That conclusion is the actual harm in #5450 — every roleguide
+ * in this repo gates work on a memory search, and a cheerful "Found 0 results"
+ * passes that gate with a wrong answer.
+ */
+function suppressionWarningLine(suppression) {
+    if (!suppression.suppressed)
+        return null;
+    return (`${exports.SUPPRESSED_MARKER} — ${discardedPhrase(suppression)} retrieved and then DISCARDED ` +
+        'by the fulltext-anchor gate before output. This result set is short or empty because ' +
+        'results were THROWN AWAY, not because nothing matched. It is NOT evidence that nothing ' +
+        'exists — re-run with different wording, or use --format json to read ' +
+        'meta.anchorGateDiscardedCount.');
+}
+/**
+ * A one-line marker for human stdout renderers (table footer, llm/compact
+ * header). Null when nothing was discarded.
+ */
+function suppressionSummaryLine(suppression) {
+    if (!suppression.suppressed)
+        return null;
+    return (`${exports.SUPPRESSED_MARKER} — ${discardedPhrase(suppression)} DISCARDED before output. ` +
+        'An empty or short result set here is NOT evidence that nothing exists.');
+}
+/** Headline suffix for spinners; empty string when nothing was discarded. */
+function suppressionHeadlineSuffix(suppression) {
+    if (!suppression.suppressed)
+        return '';
+    return suppression.discardedCount > 0
+        ? ` — ${suppression.discardedCount} DISCARDED, not proof of absence`
+        : ' — results DISCARDED, not proof of absence';
+}
 function normaliseResults(raw) {
     if (!Array.isArray(raw))
         return Object.freeze([]);
@@ -223,6 +329,7 @@ class RenderableSearchResult {
     searchMethod;
     temporalMetadata;
     health;
+    suppression;
     body;
     constructor(
     /** Normalised `{ memory, score, matchedVia }` hits. */
@@ -234,12 +341,18 @@ class RenderableSearchResult {
     /** `meta.temporalMetadata`, when present. */
     temporalMetadata, 
     /** Retrieval health. Always populated. */
-    health, body) {
+    health, 
+    /**
+     * Anchor-gate suppression (#5450). Always populated, and deliberately NOT
+     * folded into `health`: a suppressed empty is not a branch failure.
+     */
+    suppression, body) {
         this.results = results;
         this.total = total;
         this.searchMethod = searchMethod;
         this.temporalMetadata = temporalMetadata;
         this.health = health;
+        this.suppression = suppression;
         this.body = body;
     }
     /**
@@ -255,7 +368,7 @@ class RenderableSearchResult {
         const b = (body ?? {});
         const results = normaliseResults(b.data);
         const meta = b.meta;
-        return new RenderableSearchResult(results, typeof meta?.total === 'number' ? meta.total : results.length, typeof meta?.searchMethod === 'string' ? meta.searchMethod : undefined, meta?.temporalMetadata, readDegradation(meta), b);
+        return new RenderableSearchResult(results, typeof meta?.total === 'number' ? meta.total : results.length, typeof meta?.searchMethod === 'string' ? meta.searchMethod : undefined, meta?.temporalMetadata, readDegradation(meta), readAnchorSuppression(meta), b);
     }
     /**
      * Map a `/api/memories` list body (recap's no-query path). The list endpoint
@@ -265,7 +378,7 @@ class RenderableSearchResult {
     static fromListResponse(body) {
         const b = (body ?? {});
         const results = Object.freeze((Array.isArray(b.data) ? b.data : []).map((m) => ({ memory: m })));
-        return new RenderableSearchResult(results, results.length, undefined, undefined, HEALTHY, b);
+        return new RenderableSearchResult(results, results.length, undefined, undefined, HEALTHY, NOT_SUPPRESSED, b);
     }
     /**
      * The JSON/YAML payload: the response body with results normalised, plus a

package/dist/lib/renderable-retrieval.js.map

@@ -1 +1 @@
-{"version":3,"file":"renderable-retrieval.js","sourceRoot":"","sources":["../../src/lib/renderable-retrieval.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;;;AA0KH,wDAUC;AAMD,wDAKC;AAGD,8DAEC;AAvKD,6EAA6E;AAChE,QAAA,eAAe,GAAG,sBAAsB,CAAC;AAEtD,6EAA6E;AAChE,QAAA,wBAAwB,GAAG,oCAAoC,CAAC;AAE7E,MAAM,OAAO,GAAqB,MAAM,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAA6B;CACxD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AACpD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC;IACjD,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAa,EAAE,IAAI,IAAK,KAAa,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1E,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAE,KAAa,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB;YAAE,MAAM;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,SAAkB;IACzC,MAAM,CAAC,GAAG,SAAgF,CAAC;IAC3F,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACvE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,SAAkB;IAChD,MAAM,CAAC,GAAG,SAGG,CAAC;IACd,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACvE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,MAA2B,EAAE,EAAE;QAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO;QAChC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC1E,IAAI,QAAQ,CAAC,MAAM,IAAI,gBAAgB;gBAAE,OAAO;YAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,MAAwB;IAC7C,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,qBAAqB,CAC5B,SAAkB,EAClB,MAAwB;IAExB,MAAM,CAAC,GAAG,SAAoC,CAAC;IAC/C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAC5B,SAAkB,EAClB,MAAwB;IAExB,MAAM,CAAC,GAAG,SAAoC,CAAC;IAC/C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,MAA2B,EAAE,EAAE,CAC5C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxE,OAAO;QACL,GAAG,CAAC;QACJ,GAAG,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,MAAwB;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;QACzB,CAAC,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACxC,CAAC,CAAC,uCAAuC,CAAC;IAC5C,OAAO,CACL,GAAG,uBAAe,MAAM,MAAM,gDAAgD;QAC9E,iCAAiC,CAClC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,MAAwB;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,OAAO,GAAG,uBAAe,GAAG,MAAM,kCAAkC,CAAC;AACvE,CAAC;AAED,+DAA+D;AAC/D,SAAgB,yBAAyB,CAAC,MAAwB;IAChE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,gCAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAgC,CAAC;IACjF,OAAO,MAAM,CAAC,MAAM,CAClB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CACjB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAC9E,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAa,sBAAsB;IAGtB;IAEA;IAEA;IAEA;IAEA;IACQ;IAXnB;IACE,uDAAuD;IAC9C,OAAoC;IAC7C,oEAAoE;IAC3D,KAAa;IACtB,yCAAyC;IAChC,YAAgC;IACzC,6CAA6C;IACpC,gBAAqB;IAC9B,0CAA0C;IACjC,MAAwB,EAChB,IAA6B;QATrC,YAAO,GAAP,OAAO,CAA6B;QAEpC,UAAK,GAAL,KAAK,CAAQ;QAEb,iBAAY,GAAZ,YAAY,CAAoB;QAEhC,qBAAgB,GAAhB,gBAAgB,CAAK;QAErB,WAAM,GAAN,MAAM,CAAkB;QAChB,SAAI,GAAJ,IAAI,CAAyB;IAC7C,CAAC;IAEJ;;;;;;;;OAQG;IACH,MAAM,CAAC,eAAe,CAAC,IAAa;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;QAC9C,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuC,CAAC;QACvD,OAAO,IAAI,sBAAsB,CAC/B,OAAO,EACP,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAC7D,OAAO,IAAI,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EACtE,IAAI,EAAE,gBAAgB,EACtB,eAAe,CAAC,IAAI,CAAC,EACrB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,gBAAgB,CAAC,IAAa;QACnC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CACxC,CAAC;QACjC,OAAO,IAAI,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,sEAAsE;QACtE,qEAAqE;QACrE,gBAAgB;QAChB,OAAO;YACL,GAAG,IAAI,CAAC,IAAI;YACZ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;gBAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;CACF;AApED,wDAoEC;AAED;;;;;;GAMG;AACH,MAAa,sBAAsB;IAEtB;IAEA;IACA;IACA;IACA;IACA;IACA;IACQ;IATnB,YACW,MAAc;IACvB,2EAA2E;IAClE,QAA6B,EAC7B,OAAc,EACd,QAA2B,EAC3B,QAA2B,EAC3B,uBAA4B,EAC5B,MAAwB,EAChB,IAA6B;QARrC,WAAM,GAAN,MAAM,CAAQ;QAEd,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,YAAO,GAAP,OAAO,CAAO;QACd,aAAQ,GAAR,QAAQ,CAAmB;QAC3B,aAAQ,GAAR,QAAQ,CAAmB;QAC3B,4BAAuB,GAAvB,uBAAuB,CAAK;QAC5B,WAAM,GAAN,MAAM,CAAkB;QAChB,SAAI,GAAJ,IAAI,CAAyB;IAC7C,CAAC;IAEJ,iFAAiF;IACjF,MAAM,CAAC,eAAe,CAAC,IAAa;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;QAC9C,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAwB,CAAC;QAC3D,OAAO,IAAI,sBAAsB,CAC/B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAC5C,QAAQ,EACR,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EACzC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAClD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAClD,CAAC,CAAC,uBAAuB,EACzB,eAAe,CAAC,QAAQ,CAAC,EACzB,CAAC,CACF,CAAC;IACJ,CAAC;IAED,cAAc;QACZ,OAAO;YACL,GAAG,IAAI,CAAC,IAAI;YACZ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;CACF;AAtCD,wDAsCC;AAED;;;;;GAKG;AACH,MAAa,yBAAyB;IAGzB;IACA;IAHX;IACE,+DAA+D;IACtD,IAAyB,EACzB,MAAwB;QADxB,SAAI,GAAJ,IAAI,CAAqB;QACzB,WAAM,GAAN,MAAM,CAAkB;IAChC,CAAC;IAEJ,MAAM,CAAC,eAAe,CAAC,IAAa;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;QAC9C,OAAO,IAAI,yBAAyB,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,cAAc;QACZ,OAAO;YACL,GAAG,IAAI,CAAC,IAAI;YACZ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;gBAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;CACF;AArBD,8DAqBC"}
+{"version":3,"file":"renderable-retrieval.js","sourceRoot":"","sources":["../../src/lib/renderable-retrieval.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;;;AA+NH,wDAUC;AAMD,wDAKC;AAGD,8DAEC;AAmCD,wDASC;AAMD,wDAMC;AAGD,8DAKC;AA3QD,6EAA6E;AAChE,QAAA,eAAe,GAAG,sBAAsB,CAAC;AAEtD,6EAA6E;AAChE,QAAA,wBAAwB,GAAG,oCAAoC,CAAC;AAE7E;;;GAGG;AACU,QAAA,iBAAiB,GAAG,mCAAmC,CAAC;AAErE,MAAM,OAAO,GAAqB,MAAM,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAA6B;CACxD,CAAC,CAAC;AAEH,MAAM,cAAc,GAA2B,MAAM,CAAC,MAAM,CAAC;IAC3D,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,CAAC;CAClB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AACpD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC;IACjD,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAa,EAAE,IAAI,IAAK,KAAa,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1E,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAE,KAAa,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB;YAAE,MAAM;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,SAAkB;IACzC,MAAM,CAAC,GAAG,SAAgF,CAAC;IAC3F,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACvE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,qBAAqB,CAAC,SAAkB;IAC/C,MAAM,CAAC,GAAG,SAGG,CAAC;IACd,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC;IACvD,MAAM,GAAG,GAAG,CAAC,CAAC,wBAAwB,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,IAAI,CAAC,CAAC,oBAAoB,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC;IAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,SAAkB;IAChD,MAAM,CAAC,GAAG,SAGG,CAAC;IACd,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACvE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,MAA2B,EAAE,EAAE;QAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO;QAChC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC1E,IAAI,QAAQ,CAAC,MAAM,IAAI,gBAAgB;gBAAE,OAAO;YAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,MAAwB;IAC7C,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,qBAAqB,CAC5B,SAAkB,EAClB,MAAwB;IAExB,MAAM,CAAC,GAAG,SAAoC,CAAC;IAC/C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAC5B,SAAkB,EAClB,MAAwB;IAExB,MAAM,CAAC,GAAG,SAAoC,CAAC;IAC/C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,MAA2B,EAAE,EAAE,CAC5C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxE,OAAO;QACL,GAAG,CAAC;QACJ,GAAG,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,MAAwB;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;QACzB,CAAC,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACxC,CAAC,CAAC,uCAAuC,CAAC;IAC5C,OAAO,CACL,GAAG,uBAAe,MAAM,MAAM,gDAAgD;QAC9E,iCAAiC,CAClC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,MAAwB;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,OAAO,GAAG,uBAAe,GAAG,MAAM,kCAAkC,CAAC;AACvE,CAAC;AAED,+DAA+D;AAC/D,SAAgB,yBAAyB,CAAC,MAAwB;IAChE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,gCAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,eAAe,CAAC,WAAmC;IAC1D,IAAI,WAAW,CAAC,cAAc,KAAK,CAAC;QAAE,OAAO,wBAAwB,CAAC;IACtE,OAAO,WAAW,CAAC,cAAc,GAAG,CAAC;QACnC,CAAC,CAAC,GAAG,WAAW,CAAC,cAAc,yBAAyB;QACxD,CAAC,CAAC,wBAAwB,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAAC,WAAmC;IACxE,IAAI,CAAC,WAAW,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,CACL,GAAG,yBAAiB,MAAM,eAAe,CAAC,WAAW,CAAC,gCAAgC;QACtF,uFAAuF;QACvF,yFAAyF;QACzF,uEAAuE;QACvE,gCAAgC,CACjC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,WAAmC;IACxE,IAAI,CAAC,WAAW,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,CACL,GAAG,yBAAiB,MAAM,eAAe,CAAC,WAAW,CAAC,4BAA4B;QAClF,wEAAwE,CACzE,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAgB,yBAAyB,CAAC,WAAmC;IAC3E,IAAI,CAAC,WAAW,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,WAAW,CAAC,cAAc,GAAG,CAAC;QACnC,CAAC,CAAC,MAAM,WAAW,CAAC,cAAc,kCAAkC;QACpE,CAAC,CAAC,4CAA4C,CAAC;AACnD,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAgC,CAAC;IACjF,OAAO,MAAM,CAAC,MAAM,CAClB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CACjB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAC9E,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAa,sBAAsB;IAGtB;IAEA;IAEA;IAEA;IAEA;IAKA;IACQ;IAhBnB;IACE,uDAAuD;IAC9C,OAAoC;IAC7C,oEAAoE;IAC3D,KAAa;IACtB,yCAAyC;IAChC,YAAgC;IACzC,6CAA6C;IACpC,gBAAqB;IAC9B,0CAA0C;IACjC,MAAwB;IACjC;;;OAGG;IACM,WAAmC,EAC3B,IAA6B;QAdrC,YAAO,GAAP,OAAO,CAA6B;QAEpC,UAAK,GAAL,KAAK,CAAQ;QAEb,iBAAY,GAAZ,YAAY,CAAoB;QAEhC,qBAAgB,GAAhB,gBAAgB,CAAK;QAErB,WAAM,GAAN,MAAM,CAAkB;QAKxB,gBAAW,GAAX,WAAW,CAAwB;QAC3B,SAAI,GAAJ,IAAI,CAAyB;IAC7C,CAAC;IAEJ;;;;;;;;OAQG;IACH,MAAM,CAAC,eAAe,CAAC,IAAa;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;QAC9C,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuC,CAAC;QACvD,OAAO,IAAI,sBAAsB,CAC/B,OAAO,EACP,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAC7D,OAAO,IAAI,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EACtE,IAAI,EAAE,gBAAgB,EACtB,eAAe,CAAC,IAAI,CAAC,EACrB,qBAAqB,CAAC,IAAI,CAAC,EAC3B,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,gBAAgB,CAAC,IAAa;QACnC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CACxC,CAAC;QACjC,OAAO,IAAI,sBAAsB,CAC/B,OAAO,EACP,OAAO,CAAC,MAAM,EACd,SAAS,EACT,SAAS,EACT,OAAO,EACP,cAAc,EACd,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,sEAAsE;QACtE,qEAAqE;QACrE,gBAAgB;QAChB,OAAO;YACL,GAAG,IAAI,CAAC,IAAI;YACZ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;gBAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;CACF;AAlFD,wDAkFC;AAED;;;;;;GAMG;AACH,MAAa,sBAAsB;IAEtB;IAEA;IACA;IACA;IACA;IACA;IACA;IACQ;IATnB,YACW,MAAc;IACvB,2EAA2E;IAClE,QAA6B,EAC7B,OAAc,EACd,QAA2B,EAC3B,QAA2B,EAC3B,uBAA4B,EAC5B,MAAwB,EAChB,IAA6B;QARrC,WAAM,GAAN,MAAM,CAAQ;QAEd,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,YAAO,GAAP,OAAO,CAAO;QACd,aAAQ,GAAR,QAAQ,CAAmB;QAC3B,aAAQ,GAAR,QAAQ,CAAmB;QAC3B,4BAAuB,GAAvB,uBAAuB,CAAK;QAC5B,WAAM,GAAN,MAAM,CAAkB;QAChB,SAAI,GAAJ,IAAI,CAAyB;IAC7C,CAAC;IAEJ,iFAAiF;IACjF,MAAM,CAAC,eAAe,CAAC,IAAa;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;QAC9C,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAwB,CAAC;QAC3D,OAAO,IAAI,sBAAsB,CAC/B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAC5C,QAAQ,EACR,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EACzC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAClD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAClD,CAAC,CAAC,uBAAuB,EACzB,eAAe,CAAC,QAAQ,CAAC,EACzB,CAAC,CACF,CAAC;IACJ,CAAC;IAED,cAAc;QACZ,OAAO;YACL,GAAG,IAAI,CAAC,IAAI;YACZ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;CACF;AAtCD,wDAsCC;AAED;;;;;GAKG;AACH,MAAa,yBAAyB;IAGzB;IACA;IAHX;IACE,+DAA+D;IACtD,IAAyB,EACzB,MAAwB;QADxB,SAAI,GAAJ,IAAI,CAAqB;QACzB,WAAM,GAAN,MAAM,CAAkB;IAChC,CAAC;IAEJ,MAAM,CAAC,eAAe,CAAC,IAAa;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;QAC9C,OAAO,IAAI,yBAAyB,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,cAAc;QACZ,OAAO;YACL,GAAG,IAAI,CAAC,IAAI;YACZ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;gBAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;CACF;AArBD,8DAqBC"}

package/hooks/capture-precompact.sh

@@ -201,6 +201,263 @@ $(echo "$RECENT_RESULTS" | head -c 1500)"
 # Truncate total content to ~5000 chars
 CONTENT=$(echo "$CONTENT" | head -c 5000)
 
+# ── 6b. Resolve project scope (codeContext) ──────────────────────────────
+# Auto-captured memories carried no scope at all, so they leaked into every
+# team's scoped searches and polluted build_context (#5158, #4957). PR #3281
+# fixed that for the commit path only; this is the same resolution for the
+# capture hooks, using the same sources and the same precedence.
+#
+# Mirrors resolveCommitCodeContext() in cli/src/lib/commit-context/code-context.ts:
+#   1. MX_CODE_CONTEXT env var — operator-controlled, higher trust. It wins over
+#      the file (CWE-345): a checked-in file from an untrusted clone must not
+#      override the scope the operator set explicitly.
+#   2. <projectRoot>/.mx-code-context.json — repo-controlled, lower trust.
+#   3. Neither present or neither usable -> NO scope. The memory is created
+#      unlabeled, exactly as it was before this block existed. No default is
+#      invented: a guessed label is invisible to the scope that should see it
+#      and visible to one that should not, which is worse than no label.
+#
+# Every command in this block must end up returning 0. The EXIT/ERR trap set in
+# section 4 exits the hook, so a non-zero status here would discard the
+# pre-compaction context over a missing config file — a far worse regression
+# than the unlabeled memories this fixes. The absent-config path is the common
+# one today.
+CODE_CONTEXT_MAX_BYTES=65536
+
+# Walk up for the git project root, mirroring findProjectRoot() in
+# cli/src/lib/commit-context/local-cache.ts. `-e`, not `-d`: inside a git
+# worktree `.git` is a FILE, and the worktree root — not the main repo — is the
+# project root (the TS uses fs.existsSync, which makes no such distinction).
+find_project_root() { # <start-dir> -> project root on stdout, or nothing
+  local dir
+  dir=$(cd "$1" 2>/dev/null && pwd -P) || return 0
+  while [[ -n "$dir" && "$dir" != "/" ]]; do
+    if [[ -e "$dir/.git" ]]; then
+      printf '%s' "$dir"
+      return 0
+    fi
+    dir=$(dirname "$dir" 2>/dev/null) || return 0
+  done
+  return 0
+}
+
+# Keep only the six known keys whose values are non-empty strings, cap each,
+# and emit NOTHING when nothing usable remains — so an empty or scope-free
+# object is never passed as if it were a label. Malformed JSON makes jq exit
+# non-zero with no output, which lands in the same "no scope" branch.
+#
+# `-s` (slurp) is load-bearing, not a style choice. jq accepts a STREAM of JSON
+# documents: without `-s` the filter runs once per document and `jq -c` prints
+# one line each, so a config holding two concatenated or newline-separated
+# objects produced a MULTI-LINE string that was passed verbatim as one
+# --code-context argument. parseCodeContextFlag() (cli/src/commands/memories.ts)
+# JSON.parse()s it and process.exit(1)s before any network call. In THIS hook
+# that loss is unrecoverable: the transcript the capture would have summarized
+# is compacted away immediately afterwards. The `!= "{}"` guard below did not
+# catch it either: `{"zzz":1}{"team":"b"}` normalizes to the two lines
+# `{}` + `{"team":"b"}`, and that whole string is not `{}`. Slurping into an
+# array and taking the first element means exactly one line can ever be emitted.
+#
+# The cap is 100 CODEPOINTS, deliberately below the server's 200. The server's
+# CodeContextSchema uses Zod `.max(200)`, which counts UTF-16 code units, while
+# jq's `[0:N]` slices by codepoint. Every astral-plane character (emoji, CJK
+# extensions, mathematical alphanumerics) is 1 codepoint but 2 UTF-16 units, so
+# a `[0:200]` cap emitted values of up to 400 units — over the server maximum,
+# a 400 from the API, and the same silent capture loss. Since no codepoint
+# exceeds 2 UTF-16 units, 100 codepoints can never exceed 200 units. Scope
+# labels are short names (product/team/service); the extra truncation is
+# unreachable in practice, and truncating is recoverable where a rejected
+# request is not.
+normalize_code_context() { # JSON on stdin -> normalized JSON object, or nothing
+  local out
+  out=$(jq -s -c '
+    (.[0] // {}) as $raw
+    | if ($raw | type) == "object" then
+        reduce ("product","repo","service","component","team","role") as $k ({};
+          if ($raw[$k] | type) == "string" and ($raw[$k] | length) > 0
+          then .[$k] = ($raw[$k][0:100])
+          else . end)
+      else {} end
+  ' 2>/dev/null) || return 0
+  # The newline test is belt-and-braces: `-s` already guarantees one document,
+  # and jq -c escapes newlines inside string values. Nothing multi-line may ever
+  # reach --code-context again, whatever the filter above does.
+  if [[ -n "$out" && "$out" != "{}" && "$out" != "null" && "$out" != *$'\n'* ]]; then
+    printf '%s' "$out"
+  fi
+  return 0
+}
+
+CODE_CONTEXT_JSON=""
+
+# 1. Env var. Tested for presence only — the value is never echoed or logged.
+if [[ -n "${MX_CODE_CONTEXT:-}" ]]; then
+  CODE_CONTEXT_JSON=$(printf '%s' "$MX_CODE_CONTEXT" | normalize_code_context) || CODE_CONTEXT_JSON=""
+fi
+
+# 2. Repo file — consulted only when the env var yielded nothing usable.
+if [[ -z "$CODE_CONTEXT_JSON" ]]; then
+  # ORDER IS LOAD-BEARING: harness-provided project dir, then the worktree path,
+  # then the cwd. Each source is TRIED IN TURN, and the transcript's directory
+  # is not a source at all. Both properties are corrections to earlier forms and
+  # both are pinned by the suite; read this before rewriting the expression.
+  #
+  # WHY EACH SOURCE IS TRIED SEPARATELY. The earlier form collapsed all three
+  # into ONE call: `find_project_root "${CLAUDE_PROJECT_DIR:-${CLAUDE_WORKTREE_PATH:-$(pwd)}}"`.
+  # `:-` substitutes only when a variable is UNSET or EMPTY — never when it is
+  # set to something useless. So a CLAUDE_PROJECT_DIR that is set but resolves
+  # to no repository (a stale path, a deleted directory, a path outside any
+  # checkout) consumed the single attempt and the cwd was NEVER consulted.
+  # Measured: CLAUDE_PROJECT_DIR=/proc and =/nonexistent/zz each produced
+  # {"product":"home","team":"DOTFILES-WRONG-SCOPE"} from the $HOME config.
+  # The loop below consults the next source instead, which `:-` cannot express.
+  #
+  # WHAT IS ACTUALLY KNOWN ABOUT CLAUDE_PROJECT_DIR IN THE CUSTOMER CONTEXT.
+  # It is the documented hook variable, and it is the right first source when it
+  # is present. This repo does NOT evidence that it is set for hooks installed
+  # by `mx mcp install`: every other reference to it is fleet code, and it was
+  # measured UNSET in a live Claude Code tool process (a tool process is not a
+  # hook process, so that is not disproof — but it is not confirmation either).
+  # The expression below is therefore designed to be CORRECT WHEN IT IS ABSENT:
+  # an unset or empty value is skipped by the loop and the cwd carries the case.
+  # Do not restructure this so that a present CLAUDE_PROJECT_DIR is required.
+  # WHY THE TRANSCRIPT DIRECTORY IS NOT A SOURCE. It has no legitimate resolving
+  # power, and the reason is DEPTH-INDEPENDENT — do not restate it as a claim
+  # about the transcript's nesting. An earlier version of this comment argued
+  # from a flat ~/.claude/projects/<slug>/<id>.jsonl layout and enumerated the
+  # three directories a walk could reach. That premise is false here. Measured
+  # on this machine: transcripts sit at BOTH depth 2 and depth 4 under
+  # ~/.claude/projects — 310 at depth 2, 5621 deeper — so any argument of the
+  # form "the walk can only ever reach these three named directories" does not
+  # hold. The premise that does hold, and that does not depend on depth:
+  #
+  #     .git anywhere under ~/.claude, any depth: 0   (also no .hg, no .svn)
+  #
+  # An upward walk from any transcript directory traverses only directories
+  # inside ~/.claude, none of which carries a repository marker, so it cannot
+  # terminate inside that subtree at any depth. That leaves $HOME as its ONLY
+  # reachable non-empty outcome, which is precisely the defect this block exists
+  # to prevent: keeping dotfiles in git is common, so $HOME/.git exists on many
+  # machines, and with $HOME/.mx-code-context.json present every capture from
+  # every worktree on the machine was labelled from the home config. A
+  # confidently wrong label is worse than no label — invisible to the scope that
+  # should see it, visible to one that must not. Do not reintroduce it.
+  #
+  # CAVEAT, stated because this is a claim about a directory OUTSIDE this
+  # repository: it could stop being true, and nothing in this codebase would
+  # notice if a repository ever appeared under ~/.claude. Removing the leg does
+  # not depend on the caveat holding — the leg is simply gone — but any future
+  # argument to reinstate it must re-measure rather than cite this line.
+  #
+  # WHY $HOME IS REFUSED OUTRIGHT, AND WHY BOTH SIDES ARE CANONICALIZED. Belt
+  # and braces for the residual where the cwd itself is $HOME or a directory
+  # beneath it whose nearest .git is $HOME's. It also closes a consequence that
+  # is easy to miss: CC_ROOT is the basis of the symlink containment test below,
+  # so a CC_ROOT of $HOME silently widens "contained in the project" to
+  # "anywhere in the home directory", and $HOME/.mx-code-context.json symlinked
+  # to any other file under $HOME would resolve and be used. The cost is not
+  # supporting a user whose real project IS their home directory; that is the
+  # same confusion we want rejected.
+  #
+  # The comparison MUST canonicalize $HOME. CC_ROOT always arrives canonical —
+  # find_project_root builds it with `cd … && pwd -P` — while $HOME arrives
+  # verbatim from the environment, so a literal `==` against "$HOME" misses on
+  # every spelling that is not byte-identical. Four spellings were measured
+  # leaking the home label through a symlinked $HOME/.mx-code-context.json: a
+  # trailing slash ("/home/x/"), a "/." suffix ("/home/x/."), $HOME set to a
+  # SYMLINK to the real home, and a cwd reached through that same symlink.
+  # Symlinked home directories are routine — macOS firmlinks, NFS corporate
+  # homes, container images mapping /home/user onto another volume — so the
+  # trigger is a normal configuration and the miss is silent: the refusal does
+  # not fire, and the containment widening above returns with it. `cd … && pwd -P`
+  # is the same primitive find_project_root uses and handles all four in one step.
+  #
+  # HOME unset, or pointing at nothing, leaves _home_real empty and no refusal
+  # fires. That is unchanged from the previous `-n "${HOME:-}"` guard, not a
+  # regression. The `|| _home_real=""` is REQUIRED, not decorative: without it a
+  # failing `cd` leaves the assignment non-zero and last on its path, which fires
+  # the ERR trap and abandons the capture.
+  #
+  # ERR-TRAP SAFETY — verified, not assumed, because a regression here fires
+  # `trap 'exit 0' ERR` and silently abandons the capture. The loop body's only
+  # status-bearing statement is a `$(...)` assignment of find_project_root, which
+  # returns 0 on every path including the `cd` failure. The break is written as
+  # an `if` block for the same reason the $HOME refusal is. The earlier one-line
+  # form `[[ -n "$CC_ROOT" ]] && break` returns 1 whenever the loop CONTINUES —
+  # an earlier version of this comment claimed it returned 0, which was wrong. It
+  # was safe only POSITIONALLY: as a non-final command of an `&&` list it is
+  # exempt under the errexit rules, so nothing fired. That safety depends on
+  # where the statement sits and would evaporate the moment this loop became the
+  # last statement of a function: the function would return 1 and any `$(...)`
+  # call of it would fire the trap. The `if` form returns 0 and removes the
+  # positional dependence.
+  #
+  # The same reasoning is why the $HOME refusal is an `if` block ON PURPOSE: the
+  # one-line `[[ "$CC_ROOT" == "$_home_real" ]] && CC_ROOT=""` returns 1 when the
+  # test is false, and was measured firing the ERR trap when it landed last in an
+  # enclosing block. `pwd 2>/dev/null` keeps a deleted cwd from printing "error
+  # retrieving current directory" onto the hook's real stderr. This safety comes
+  # from find_project_root always returning 0, not from this hook omitting
+  # `set -E`, so it survives someone adding `set -E` later. Do not introduce a
+  # bare command on this path.
+  CC_ROOT=""
+  for _cand in "${CLAUDE_PROJECT_DIR:-}" "${CLAUDE_WORKTREE_PATH:-}" "$(pwd 2>/dev/null)"; do
+    [[ -n "$_cand" ]] || continue
+    CC_ROOT=$(find_project_root "$_cand")
+    if [[ -n "$CC_ROOT" ]]; then break; fi
+  done
+  _home_real=$(cd "${HOME:-/nonexistent}" 2>/dev/null && pwd -P) || _home_real=""
+  if [[ -n "$_home_real" && "$CC_ROOT" == "$_home_real" ]]; then
+    CC_ROOT=""
+  fi
+  CC_FILE="${CC_ROOT}/.mx-code-context.json"
+  if [[ -n "$CC_ROOT" ]]; then
+    # CWE-59. `-f`, `-r` and the read all follow symlinks, so a repo could check
+    # in `.mx-code-context.json` as a symlink to any file on the user's machine
+    # and the six allowlisted keys of it would be uploaded to the user's own
+    # MemNexus account. Resolve the path and require the result to stay inside
+    # the project root — the containment this same hook already applies to the
+    # transcript path earlier. Read through the RESOLVED path, so the link is
+    # not traversed a second time.
+    CC_REAL=$(realpath "$CC_FILE" 2>/dev/null || printf '')
+    if [[ -n "$CC_REAL" && "$CC_REAL" == "$CC_ROOT"/* && -f "$CC_REAL" && -r "$CC_REAL" ]]; then
+      # One open, bounded at the source (same 64KB bound as the TS resolver).
+      # The previous form size-checked with `wc -c` and then re-opened for jq:
+      # two opens on a path an untrusted repo controls, so a concurrent writer
+      # could present a small file to `wc` and a huge one to `jq` (TOCTOU) on a
+      # hot path. `head -c` bounds the read itself, which changes >64KB from
+      # "skipped" to "truncated, then rejected as invalid JSON" — the same
+      # observable outcome, no scope.
+      #
+      # `2>/dev/null` precedes the input redirect ON PURPOSE. Redirections apply
+      # left to right, so with `<"$CC_REAL" 2>/dev/null` a file that turned
+      # unreadable between the `-r` test and the open makes bash print the full
+      # path and "Permission denied" to the hook's REAL stderr, before the
+      # discard takes effect. Verified: reversing these two words reintroduces
+      # that leak. Do not reorder.
+      #
+      # The bytes are PIPED into jq, never routed through a variable. Bash
+      # strips NUL bytes out of command-substitution output and warns while
+      # doing it — from the parent shell reading the substitution, so the
+      # `2>/dev/null` above does not suppress that warning. Via a variable,
+      # `{"team":"a<NUL>b"}` printed a warning naming this script and line to
+      # the hook's real stderr, and then RESOLVED to team "ab": input the file
+      # does not contain, silently repaired before validation instead of
+      # rejected by it. Piping keeps the NUL inside jq, which rejects the
+      # document as malformed. Do not reintroduce an intermediate variable.
+      CODE_CONTEXT_JSON=$(head -c "$CODE_CONTEXT_MAX_BYTES" 2>/dev/null <"$CC_REAL" | normalize_code_context) || CODE_CONTEXT_JSON=""
+    fi
+  fi
+fi
+
+# Nothing resolved -> pass nothing at all, so the create command line is
+# byte-identical to the pre-scope version. The `[@]+` guard keeps an empty array
+# safe to expand under `set -u` on bash < 4.4.
+CODE_CONTEXT_ARGS=()
+if [[ -n "$CODE_CONTEXT_JSON" ]]; then
+  CODE_CONTEXT_ARGS=(--code-context "$CODE_CONTEXT_JSON")
+fi
+
 # ── 7. Save memory (with timeout — never block compaction) ───────────────
 TIMEOUT_CMD=""
 if command -v timeout >/dev/null 2>&1; then
@@ -219,6 +476,7 @@ $TIMEOUT_CMD mx memories create \
   --conversation-id "NEW" \
   --content "$CONTENT" \
   --topics "auto-captured,precompact" \
+  "${CODE_CONTEXT_ARGS[@]+"${CODE_CONTEXT_ARGS[@]}"}" \
   >/dev/null 2>&1 || CREATE_STATUS=$?
 
 if [[ "$CREATE_STATUS" -ne 0 ]]; then