@mickey-kras/hindsight-memory-router-coding-agents 0.8.2 → 0.8.9

package/DEVIATIONS.md

@@ -1,49 +1,167 @@
 # Router deviations
 
-- Managed harness identity, HTTPS endpoint, token environment references, and explicit path mappings replace upstream endpoint/token/dynamic-bank configuration.
-- `optInOnly` is enforced from managed mappings. Normal config cannot rename banks or override identity/credentials.
-- All HTTP requests use the shared bank/operation guard. Bank listing intersects router-visible banks with configured IDs.
-- Recall/reflect fan out through the shared coordinator. Other reads remain explicitly bank-addressed.
-- 401/403 are terminal; upstream credential retry is replaced by runtime environment resolution on each request.
-- Optional human mode resolves a short-lived session from native OS secure storage on every request. Browser login uses the router's loopback OIDC/PKCE exchange; sign-out revokes and deletes the session. Persistent application credentials remain separate.
-- Redirects and raw server error bodies are blocked. Automatic upstream replacement and installer token migration are disabled.
-- Diagnostic and ordinary log files use an allowlist of timing, counts, booleans and bounded classifications at every verbosity. Prompts, answers, failure text, identifiers, paths, URLs and arbitrary progress messages are omitted; no content-debug mode is provided. Existing log files are not purged by an upgrade.
-- Upstream transcript parsing, provenance tags, retain payloads, hooks and harness adapters remain the baseline, with deliberate routing, privacy, installer and reliability adaptations. This is not a claim of identical behavior; the changes and source hashes below define the maintained differences.
-- Manual document ingestion uses the shared exact-title hash identity. Legacy IDs remain untouched; see the root README migration note.
-- `src/core/inject.ts` rewords the reflect rendering rules to "commit, PR and issue ids": the upstream "commit/PR/issue" slash token trips the Memory Router encoded-payload request scan, which rejects the reflect query with 422 suspicious_content.
+- Managed harness identity, HTTPS endpoint, token environment references, and explicit path mappings replace upstream configuration for endpoints, tokens and dynamic banks.
+- Managed mappings enforce `optInOnly`. Normal configuration cannot rename banks or override identity or credentials.
+- All HTTP requests use the shared guard for banks and operations. Bank listing intersects router-visible banks with configured IDs.
+- Recall and reflect use the shared coordinator to read multiple banks. Other reads need an explicit bank address.
+- A 401/403 response is terminal. Runtime environment resolution on each request replaces upstream credential retry.
+- Optional human mode resolves a short-lived session from native OS secure storage on every request.
+  Browser login uses the router's loopback OIDC exchange with PKCE. Sign-out revokes and deletes the session.
+  Persistent application credentials remain separate.
+- The client blocks redirects and raw server error bodies. The integration disables automatic upstream replacement and installer token migration.
+- At every verbosity, diagnostic and ordinary log files contain only timing, counts, booleans and bounded classifications.
+  They omit prompts, answers, failure text, identifiers, paths, URLs and arbitrary progress messages.
+  There is no content-debug mode. An upgrade does not remove existing log files.
+- Upstream transcript parsing, provenance tags, retain payloads, hooks and harness adapters remain the baseline.
+  This fork changes routing, privacy, installation and reliability. It does not claim the same behavior.
+  The changes and source hashes below define the maintained differences.
+- Manual document ingestion uses the shared exact-title hash identity. Legacy IDs do not change. See the migration note in the root README.
+- `src/core/inject.ts` changes the reflect rendering rules to "commit, PR and issue ids".
+  The upstream token `commit/PR/issue` triggers the Memory Router encoded-payload request scan.
+  That scan rejects the reflect query with 422 suspicious_content.
 
-The source hashes in `UPSTREAM.json` describe the pristine snapshot. `LOCAL_CHANGES.json` pins adapted files.
-The regression suite covers unchanged transcript/provenance code; root tests cover the changed security contracts.
-Live harness and deployed Memory Router compatibility must be verified before rollout.
+The source hashes in `UPSTREAM.json` describe the original snapshot. `LOCAL_CHANGES.json` pins adapted files.
+The regression suite covers unchanged code for transcripts and provenance. Root tests cover the changed security contracts.
 
-Bank configuration is operator-managed (`manageBankConfig: false`). Provision coding missions/strategies before ingestion. Read-only principals disable automatic ingestion and write-back. Local usage can read existing host transcripts, but journal-only hosts capture prompts and replies only when session retention is enabled and the principal can write the resolved bank.
-Session state uses per-user private directories (0700 on POSIX), regular files (0600), and exclusive atomic temporary files. Owned legacy directories are secured and migrated; symlinks, hard links, and foreign-owned paths are rejected.
-Memory content is not reused from session caches; lifecycle flags remain cached. A denied application-token value remains blocked until it changes; human credentials require explicit login after expiry or denial.
+Before deployment, check compatibility with live harnesses and the deployed Memory Router.
 
-Reliability fixes use explicit sorting, global replacements, Node ANSI stripping, optional arguments, and non-empty installer regex matches. Transcript escape decoding retains UTF-16 surrogate behavior.
+The operator manages bank configuration (`manageBankConfig: false`). Before ingestion, configure coding missions and strategies.
+Read-only principals disable automatic ingestion and write-back. Local usage can read existing host transcripts.
 
-Dependencies are classified by their package declarations; bundling does not make declared runtime dependencies development-only. Direct runtime dependencies are `@modelcontextprotocol/sdk`, `@napi-rs/keyring`, `jsonc-parser`, `smol-toml` and `zod`. Development dependencies are `@opencode-ai/plugin`, `@opencode-ai/sdk`, `@opencode/plugin`, `@types/node`, `tsup`, `typescript` and `vitest`.
+Journal-only hosts capture prompts and replies only if session retention applies and the principal can write the resolved bank.
 
-The complete override inventory is `@opencode/plugin > @opentelemetry/core` (`>=2.8.0 <3.0.0`), `esbuild` (`>=0.25.0 <1.0.0`), `fast-uri` (`>=3.1.6 <4.0.0`), `hono` (`>=4.13.7 <5.0.0`), `http-cache-semantics` (`4.3.0`), `ip-address` (`>=10.5.1 <11.0.0`), `postcss` (`>=8.5.23 <9.0.0`) and `vite` (`>=6.4.3 <7.0.0`). These ranges constrain the dependency graph; exact resolved versions are in `npm-shrinkwrap.json`. Reassess compatibility and advisories when updating, rather than assuming these overrides are permanently required or sufficient.
+Session state uses per-user private directories (0700 on POSIX), regular files (0600), and exclusive atomic temporary files.
+The integration secures and migrates owned legacy directories. It rejects symlinks, hard links, and foreign-owned paths.
 
-Survey admission is scoped to the managed router URL, principal and bank. Tokens never enter lease keys; credential rotation keeps the same lease. Normal config cannot override the managed principal. No CodeQL suppression is used.
+It does not reuse memory content from session caches. Lifecycle flags remain cached.
+A denied application-token value remains blocked until it changes. Human credentials need explicit login after expiry or denial.
 
-Upstream baseline is coding-agents 0.8.1 at the shared v1.0.0 commit. Downstream package versions remain independent. The managed README, generated companion skill and disabled daemon implementation remain router-owned: upstream endpoint setup, dynamic banks, local daemon and update instructions are unsupported. The package uses npm-shrinkwrap.json; upstream package-lock.json stays intentionally absent.
+Reliability fixes use explicit sorting, global replacements, Node ANSI stripping, optional arguments, and non-empty installer regex matches.
+Transcript escape decoding retains UTF-16 surrogate behavior.
 
-New upstream append capability, retry budgets, query bounds, page scoping and document freshness reads use the existing guarded client. Version probing accepts GET /v1/version and falls back to /version; authorization failures remain terminal. Router error bodies are redacted, so a 404 cannot latch page support off based on its upstream body.
+Package declarations classify dependencies. Bundling does not make declared runtime dependencies development-only.
+Direct runtime dependencies are `@modelcontextprotocol/sdk`, `@napi-rs/keyring`, `jsonc-parser`, `smol-toml` and `zod`.
+Development dependencies are `@opencode-ai/plugin`, `@opencode-ai/sdk`, `@opencode/plugin`, `@types/node`, `tsup`, `typescript` and `vitest`.
 
-Grok tool-hook context is stored privately and delivered only after managed credentials and the current project mapping are validated. Its handoff key includes endpoint, primary bank, the canonical physical path of the recorded session root, session, a hash of the actual effective principal and the complete managed read-bank scope. Moving into a subdirectory preserves the handoff only while both the live directory and recorded root remain authorized for the same bank and the live directory remains physically inside that root. Every bank that could contribute to aggregated memory is freshly authorized in parallel under one shared 15-second deadline before delivery; scope/principal changes and server revocations reject the handoff. The effective endpoint, physical workspace and project mapping are resolved again after awaited reads and grant probes. Authorization failures discard it permanently. Tokens never enter identity keys. Pending context uses immutable blocks with atomic claims per publication; concurrent tools may deliver separate blocks, and waiting-block deduplication is best-effort. Delivery reads at most 64 blocks per event, leaving later blocks for subsequent events; terminal denial discards the bound scope's pending snapshot. Session caches retain attempt counters and lifecycle flags, never memory content.
+The complete override inventory is:
 
-New Kimi, WorkBuddy, CodeBuddy and TraeCode entries use managed identity and branded registration names. Trae workspace MCP files are written only by explicit transactional installation for operator-mapped projects; hooks only report the workspace-MCP gate. Global settings and workspace SQLite enable switches remain user-managed.
+| Dependency | Range |
+| --- | --- |
+| `@opencode/plugin > @opentelemetry/core` | `>=2.8.0 <3.0.0` |
+| `@opencode-ai/plugin > zod` | `>=4.6.6 <5.0.0` |
+| `esbuild` | `>=0.25.0 <1.0.0` |
+| `fast-uri` | `>=3.1.9 <4.0.0` |
+| `hono` | `>=4.13.11 <5.0.0` |
+| `http-cache-semantics` | `4.3.0` |
+| `ip-address` | `>=10.5.1 <11.0.0` |
+| `postcss` | `>=8.5.23 <9.0.0` |
+| `vite` | `>=6.4.3 <7.0.0` |
 
-Managed settings are reapplied after every path/bank override, including paths without a bank section. Project prompt tuning stays available; read-only principals cannot restore ingestion, surveys or bank management. The shared transport composes over the current host dispatcher to disable Undici's header/body timeout caps while preserving the request's AbortSignal deadline and proxy setup.
+These ranges constrain the dependency graph. `npm-shrinkwrap.json` contains exact resolved versions.
+When you update dependencies, assess compatibility and advisories again.
+Do not assume that these overrides remain necessary or enough.
 
-SessionStart readiness probes propagate terminal authorization failures before launching further background work; transient failures retain their fallback behavior. Append capabilities and accepted-operation cursors belong to one bank, so a managed bank switch re-probes the destination and starts from a replacement transcript. Grok's native hooks file and generated backup, and Trae's generated JSON backups, are covered by installer transactions.
+Survey admission uses the managed router URL, principal and bank as its scope.
+Tokens never enter lease keys. Credential rotation keeps the same lease.
 
-Multi-source conversation retention preserves rollout contributions in their original order and rereads their sources when rebuilding the shared document. Sources must remain readable, including replies previously retained before their transcript was flushed. Reconstruction supports up to 16 source references and refuses any decoded source or assembled document exceeding 32 MiB of serialized turns or 100,000 turns. Missing or ambiguous sources, unknown legacy continuation boundaries, moving copied prefixes and exceeded limits stop the write with a diagnostic instead of replacing the document with incomplete data. Single-source and persistent-runtime retention retain their existing size behavior.
+Normal configuration cannot override the managed principal. The code uses no CodeQL suppression.
 
-SessionStart propagates failures to the shared lifecycle entrypoint. Hook lifecycle entrypoints observe rejected work, emit one fixed stderr diagnostic and exit 1 without adding protocol stdout. Authorization denial remains terminal. Seed launch waits only for the child spawn/error event; failure is reported without raw exception text, and manual success means launched, not extraction complete.
+The upstream baseline is coding-agents 0.8.2 at the shared v1.1.0 release commit. Downstream package versions remain independent.
+The router maintains the managed README, generated companion skill and disabled daemon implementation.
+This fork does not support upstream endpoint setup, dynamic banks, local daemon and update instructions.
 
-Sync requires a confirmed zero active-operation count. Unavailable or malformed operation probes remain unknown; background settlement retries for up to 15 minutes and reports unconfirmed settlement at timeout. Authorization denial remains terminal.
+The package uses npm-shrinkwrap.json. Upstream package-lock.json remains intentionally absent.
 
-Persistent runtimes admit at most 256 sessions per workspace. Explicit host disposal releases completed state; admission evicts the least-recently-used idle session when end events are unavailable. Active prompts, transcript fetches, retains and dirty or buffered cursors stay pinned. When every slot is pinned, new sessions skip automatic recall/retention with a `session_capacity_reached` diagnostic; existing work continues. Evicted sessions resume with a full transcript replacement. OpenCode2 global events require current scoped-prompt admission, and keyed injection never falls back to another session. Cline keeps only the latest prompt ID for up to 256 sessions. Usage counters restart after eviction, so resumed transcripts can repeat local usage records.
+New upstream append capability, retry budgets, query bounds, page scoping and document freshness reads use the existing guarded client.
+Version probing accepts GET /v1/version and falls back to /version. Authorization failures remain terminal.
+
+The router removes error body content. Thus, a 404 cannot disable page support based on its upstream body.
+
+Grok tool-hook context uses private storage. Delivery requires valid managed credentials and a valid current project mapping.
+The handoff key contains these fields:
+
+- Endpoint and primary bank.
+- Canonical physical path of the recorded session root.
+- Session.
+- Hash of the actual effective principal.
+- Complete managed read-bank scope.
+
+A move into a subdirectory preserves the handoff only under both conditions:
+
+- The live directory and recorded root remain authorized for the same bank.
+- The live directory remains physically inside that root.
+
+Before delivery, every bank that can contribute memory receives a new authorization check.
+These checks run in parallel under one shared 15-second deadline.
+Changes to scope or principal and server revocations reject the handoff.
+After awaited reads and grant probes, the integration resolves the effective endpoint, physical workspace and project mapping again.
+
+Authorization failures discard the handoff permanently. Tokens never enter identity keys.
+
+Pending context uses immutable blocks with atomic claims per publication.
+Concurrent tools can deliver separate blocks. Waiting-block deduplication is best-effort.
+
+Delivery reads at most 64 blocks per event. Later blocks remain for next events.
+Terminal denial discards the bound scope's pending snapshot.
+
+Session caches retain retry counters and lifecycle flags. They never retain memory content.
+
+New Kimi, WorkBuddy, CodeBuddy and TraeCode entries use managed identity and branded registration names.
+Only explicit transactional installation writes MCP files for Trae workspaces for operator-mapped projects.
+Hooks only report the workspace-MCP gate. Users manage global settings and workspace SQLite enable switches.
+
+The integration reapplies managed settings after every override for paths or banks, including paths without a bank section.
+Project prompt adjustments remain available. Read-only principals cannot restore ingestion, surveys or bank management.
+The shared transport uses the current host dispatcher to disable Undici's timeout caps for headers and bodies.
+
+It preserves the request's AbortSignal deadline and proxy setup.
+
+Before further background work starts, SessionStart readiness probes propagate terminal authorization failures.
+Transient failures retain their fallback behavior. Append capabilities and accepted-operation cursors belong to one bank.
+Thus, a managed bank switch probes the destination again and starts from a replacement transcript.
+
+Installer transactions cover Grok's native hooks file and generated backup. They also cover Trae's generated JSON backups.
+
+Multi-source conversation retention preserves rollout contributions in their original order.
+It reads their sources again when it rebuilds the shared document.
+Sources must remain readable, including replies retained before the host flushed their transcript.
+Reconstruction supports up to 16 source references.
+
+It rejects any decoded source or assembled document that exceeds 32 MiB of serialized turns or 100,000 turns.
+The following conditions stop the write with a diagnostic:
+
+- Missing or ambiguous sources.
+- Unknown legacy continuation boundaries.
+- Moving copied prefixes.
+- Exceeded limits.
+
+The integration does not replace the document with incomplete data.
+Single-source and persistent-runtime retention keep their existing size behavior.
+
+SessionStart propagates failures to the shared lifecycle entrypoint.
+Hook lifecycle entrypoints observe rejected work, emit one fixed stderr diagnostic and exit 1 without protocol stdout.
+Authorization denial remains terminal. Seed launch waits only for the child spawn or error event.
+
+Failure reports omit raw exception text. Manual success means that launch occurred. It does not mean that extraction is complete.
+
+Sync requires a confirmed zero active-operation count. Unavailable or malformed operation probes remain unknown.
+
+Background settlement retries for up to 15 minutes. At timeout, it reports unconfirmed settlement. Authorization denial remains terminal.
+
+Persistent runtimes admit at most 256 sessions per workspace. When the host explicitly disposes of a session, the runtime releases completed state.
+If end events are unavailable, admission evicts the least-recently-used idle session.
+Active prompts, transcript fetches, retains and dirty or buffered cursors stay pinned.
+
+If all slots stay pinned, new sessions skip automatic recall and retention with a `session_capacity_reached` diagnostic. Existing work continues.
+Evicted sessions resume with a full transcript replacement.
+
+OpenCode2 global events need current scoped-prompt admission. Keyed injection never falls back to another session.
+Cline keeps only the latest prompt ID for up to 256 sessions.
+
+Usage counters restart after eviction. Thus, resumed transcripts can repeat local usage records.
+
+Managed git-log synchronization retains bounded full replacement semantics. Upstream incremental appends lack an expected-base precondition.
+Two asynchronous writes from the same persisted head can overlap after HEAD changes, despite distinct operation IDs.
+This fork does not import the append implementation until that concurrency contract exists.
+
+Authorization denials remain terminal. The maintained git-log tests cover pending writes across changed heads.

package/README.md

@@ -1,7 +1,7 @@
 # Coding agents
 
-Source: `vectorize-io/hindsight/hindsight-integrations/coding-agents`, v0.8.1.
-The superseded per-agent integrations are not imported.
+Source: `vectorize-io/hindsight/hindsight-integrations/coding-agents`, v0.8.2.
+This fork does not import the superseded per-agent integrations.
 
 Set `HINDSIGHT_ROUTER_CONFIG` to an absolute, operator-managed JSON file:
 
@@ -31,28 +31,54 @@ Set `HINDSIGHT_ROUTER_CONFIG` to an absolute, operator-managed JSON file:
 }
 ```
 
-Resolve each named environment variable through the deployment's secret manager before launching that harness.
+Before you start a harness, resolve each named environment variable through the deployment's secret manager.
 Give each harness only its own token. Never put token values in JSON, arguments, or this repository.
-Create matching per-principal + bank + scope grants in Memory Router first.
+First, create matching grants for each principal, bank and scope in Memory Router.
 
-**client routing != authorization; Memory Router grants are authoritative**
+Client routing does not grant access. The router controls access through its grants.
 
-Install the verified release coding-agents tarball and run its `hindsight-coding-agents install` command.
+Install the verified release coding-agents tarball.
+Run its `hindsight-coding-agents install` command.
 The upstream harness hooks, plugin entrypoints, transcript readers, and background ingestion remain packaged.
-Install from this artifact; do not run upstream's `npx` installer over it.
+
+Install from this artifact. Do not replace it with upstream's `npx` installer.
 
 Only explicit managed path mappings opt a project in. Child directories inherit their mapping.
-Use the principal's write bank in mappings for writable projects; map an assigned read bank for a read-only principal.
-Unmapped paths, unknown harnesses, and missing secrets fail closed. No dynamic repository banks.
-Upstream normal config may tune prompts and ingestion, but cannot change identity, credentials, endpoint, or grants. `banks.<id>.bank` and path-level bank renames are ignored; change the operator-managed `mapPathToBank` and matching server grants instead.
+For writable projects, use the principal's write bank in mappings. For a read-only principal, map an assigned read bank.
+
+Unmapped paths, unknown harnesses, and missing secrets stop access. The integration does not create dynamic repository banks.
+Normal upstream configuration can adjust prompts and ingestion. It cannot change identity, credentials, endpoint, or grants.
+
+The integration ignores `banks.<id>.bank` and path-level bank renames.
+To change banks, change the operator-managed `mapPathToBank` and matching server grants.
+
+Coding agents accept and validate legacy managed JSON keys for compatibility. These keys have no effect:
+`recallTimeoutMs`, `recallMaxTokens`, `retainQueueFlushIntervalMs`, `queueMaxAgeMs`, `queueMaxItems`, `queueMaxBytes` and `queueDir`.
+During migration, remove them. Adjust the retrieval settings in normal coding-agent configuration.
+
+Coding agents have no OpenClaw-style durable outage queue or replay timer. Ingestion uses the upstream retry and cursor mechanisms.
+Managed `queueMaxAgeMs` accepts `-1` or a positive integer. Unlike OpenClaw, it rejects `0`.
 
-Legacy managed JSON keys `recallTimeoutMs`, `recallMaxTokens`, `retainQueueFlushIntervalMs`, `queueMaxAgeMs`, `queueMaxItems`, `queueMaxBytes` and `queueDir` are accepted and validated for compatibility but have no effect in coding agents. Remove them when migrating; tune retrieval in normal coding-agent config. There is no OpenClaw-style durable outage queue or replay timer here; ingestion uses the upstream retry/cursor mechanisms. Managed `queueMaxAgeMs` accepts `-1` or a positive integer and rejects `0`, unlike OpenClaw.
+`pageRefreshEveryTurns` and `HINDSIGHT_PAGE_REFRESH_EVERY_TURNS` do not reduce hook page-list reads.
+Session caches omit page lists that contain memory. Each prompt hook fetches newly authorized pages.
 
-`pageRefreshEveryTurns` (and `HINDSIGHT_PAGE_REFRESH_EVERY_TURNS`) does not reduce hook page-list reads: memory-bearing page lists are deliberately omitted from session caches, so each prompt hook fetches freshly authorized pages. The setting still controls how often the roster/tool guide is injected, not how often it is fetched; omission or `0` means every turn (`1`). It does not configure persistent-plugin refresh behavior. Do not restore cached memory content to implement a cadence.
+The setting controls how often hooks inject the roster and tool guide. It does not control how often hooks fetch the guide.
+An omitted value or `0` means every turn (`1`). The setting does not configure persistent-plugin refresh behavior.
+
+Do not restore cached memory content to control refresh frequency.
 
 Recall and reflect read the assigned union, with a 4,096-token shared budget.
-Recall/reflect use the caller's configured deadline: automatic retrieval uses `injectTimeoutMs` (7,000 ms), automatic reflect uses `reflectTimeoutMs` (20,000 ms), and the reflect tool uses `reflectToolTimeoutMs` (when omitted, the greater of 330,000 ms and the configured `reflectTimeoutMs`; an explicit positive tool timeout can be lower). Generic requests without a caller signal default to 15 seconds. Raising a hook deadline also requires enough time in the host hook configuration.
+Recall and reflect use the caller's configured deadline:
+
+- Automatic retrieval uses `injectTimeoutMs` (7,000 ms).
+- Automatic reflect uses `reflectTimeoutMs` (20,000 ms).
+- The reflect tool uses `reflectToolTimeoutMs`. If omitted, this is the greater of 330,000 ms and the configured `reflectTimeoutMs`. An explicit positive tool timeout can be lower.
+
+Generic requests without a caller signal default to 15 seconds.
+If you increase a hook deadline, also allow enough time in the host hook configuration.
 Transient failures return partial results with a diagnostic. Any 401/403 discards all results.
-Other bank/config/page reads use an explicit assigned bank; mutations cannot target additional read banks.
+
+Other reads for banks, configuration and pages use an explicit assigned bank. Mutations can target only the write bank.
 
 See `DEVIATIONS.md` for intentional differences and `UPSTREAM.json` for exact provenance.
+

package/UPSTREAM.json

@@ -1,8 +1,8 @@
 {
-  "commit": "39c65ffe2f140d0c84cee58566cad8900c5b9908",
+  "commit": "a5a619b5ca59c5c39e0f96be6f7a31fabd136bd5",
   "files": {
     ".gitignore": "adb911f1ff2d2103411b4bbe90a167b4c7ef5acd38231fff55519c581f2bbd1b",
-    "README.md": "93c6c188f47536022afff8d836496f4268e07a39cc007a5d449ebfadfc0be21c",
+    "README.md": "87f35964226b72c8a8bcdfec5f7d6d1d1e07187bd29ebe2b27241f77669ab830",
     "cordis.patch.yml": "0109fe6515d1c4fb25f30d14fa532f341a116d58e813864eb764053b9cbcceae",
     "e2e/Dockerfile.base": "c0f450ed6ee4c0cf0d7ea4420e4108fcd46e7360fef9a257392a6148d1ec1910",
     "e2e/Dockerfile.claude-code": "aa2087e40d91384d76de9962c804b5fc1fbed5ad4af49d17689ade4239baa186",
@@ -29,12 +29,12 @@
     "e2e/zcode-e2e-exec.sh": "66d9ad1fc55356c931fe5ae53bee4ce42863fce80270b5a29fa742898e919703",
     "hooks/hooks.json": "1d0617fd75a5729fa5b5fdb67b248384eaa74bf2c647c3b494b2fe05d83e292e",
     "index.js": "4d906968db9b5d32c27db47799700b1b4739cd16bd3322c23b8842593af3264d",
-    "package-lock.json": "ca2b39660d53b0f5f3ff3c887f40540165286ab865fea74bf9a7a1845938a0c9",
-    "package.json": "12510aa835394fe548839f92d32a35449277544128c771dbcea8d6906bb466c8",
-    "plugin.json": "7d39522d47063c2c9fc9bfbd64c3bbea1da8f830423420ccff8bbe64ad15e133",
+    "package-lock.json": "df25ee2d0444348448a4875682389bed0bec4213d78681a1df4047b9984b5d17",
+    "package.json": "c1ea323677927a79f295e0ecb3730c21f982edb59d27254f3b6d3ca6f41d2020",
+    "plugin.json": "bc6827dbba0bdf1b48d9c76d017c79ed72203ad31d095a8a124ac25ee13cd407",
     "scripts/build-skill.mjs": "6aa241650e1c76905a86dd6b6ccaa544786ad7246c62554f2c548a064b404b80",
-    "skill/SKILL.md": "30d04263f840c03f6ad90293255165bac108db662754488343717ccb800580f5",
     "skill-src/preamble.md": "711d0830e7192a55fc725226d41c47bf993437687f1d1dfd5a84056c1cbe8b64",
+    "skill/SKILL.md": "dd3a78db3e533f5053fb3f478d8de5971d0a4473cc26b48ed1107630bea1ff27",
     "src/antigravity-hook.ts": "fba83a6133dee3058d4e0cc596ee9cfbd9197bdbb58f54b1530c47a2b8b7c74f",
     "src/antigravity-statusline.test.ts": "e3e4b1f93967dbf0133cb87677978dd422b672a02d1138829f4fdcac1a6069d5",
     "src/antigravity-statusline.ts": "9e4fd2f6ed17bceff7a80b9078384e523b2b18bb84779f289f8b467a204bf614",
@@ -75,9 +75,9 @@
     "src/core/git-layout.test.ts": "19b035a97d52457c70b78e9a79128d23aa0ecd5f0ceca47a0415141f8f413848",
     "src/core/git-layout.ts": "2f4be171b6252d41cb0d9582c0879cca92206e28ca82ea6a24c187ce68bafc19",
     "src/core/git-stderr.test.ts": "e32bf64f33620020a129d35396897a9d53799e0c66d8a6b6f6333065f0b6b3b7",
-    "src/core/git.gitlog.test.ts": "f8a5d7bdc371f3cf45b8b40f7f92b0b2dd433afdabf6d209ef478fc5f8add175",
+    "src/core/git.gitlog.test.ts": "845ba224163f97d8815b1f7e7efcfec2c5d5e2c8dfb1ec8ee829fb700ad36cc3",
     "src/core/git.test.ts": "3adf7e25fc5ccb6dfbe39b2c7e4edb723c6403f3397a387f5f82d0f83076649f",
-    "src/core/git.ts": "0bd216aa92701608b1d4729cea15863d9b87bcf67bb77d698223f5cf4c16e26c",
+    "src/core/git.ts": "74af05b42c09c2d37d0287303a0e149c4c88ebe049bb17e13de86343e6bc7f41",
     "src/core/hindsight.pages.test.ts": "130af6279155e3f6a96b71b237ef1351528a119a24685ea8c337551979901110",
     "src/core/hindsight.test.ts": "8ef84394a5a06c63126bf9663814e2b35f72f0bfd913420582ebf9c155628441",
     "src/core/hindsight.ts": "0b3a204f84f3bd2f2317d5bcab31ea9ffb0ba94a05c48b4ac5f9e5aa8d7d65b8",
@@ -210,6 +210,7 @@
     "src/grok-hook.ts": "59f85f9a5cc26c82c748bd993c54dfa929f36237985ba0e8262d3b9d031d120e",
     "src/grok-sessionstart-hook.ts": "e80a45a2571139008472fb13b27958c31f3ff158f05b7e0693d502bd69ca5128",
     "src/grok-stop-hook.ts": "abb8c9b7523a79d54d38244996fff821ea222d9141501cda7d0231c5307b74d0",
+    "src/harness.e2e.test.ts": "cf3d328fb6efafeef83dad2822248d7ea76c3e5ab91e91cfc28d06fe643fdcb7",
     "src/harness/hook-lifecycle.test.ts": "c1acb1be5417e777456b248e3243e2d1e71f7463e9a5a00838af328314fd2438",
     "src/harness/hook-lifecycle.ts": "71f704b1227ef50d8eb9a00c833d5a9b677b890f6db3baa976a66932efc52a63",
     "src/harness/opencode.test.ts": "ec7529733b5c599724a8dd80c6873fe4d061920fb8cb5e5204290f4415292244",
@@ -222,7 +223,6 @@
     "src/harness/plugin-entry.ts": "3b6a14000cc9c8c90ff07af6b0cabc33ad8c32f424b18ac0fef56b8ea29e514b",
     "src/harness/registry.test.ts": "ea3fd02adfeca8c07c695b47ef4c2a3799665e7289a36e08712bca3c376fbd35",
     "src/harness/registry.ts": "75b56ebbc527d4a30efe554e479dc8606b8dd6b205161fd497abe51d886a8d24",
-    "src/harness.e2e.test.ts": "cf3d328fb6efafeef83dad2822248d7ea76c3e5ab91e91cfc28d06fe643fdcb7",
     "src/hindsight-seed.ts": "f1a45eabde45121f4979fcc5b94bd0966a43c0c0277172b45e273a1f093b5c38",
     "src/index.ts": "f98fb7b77d62fd74176fe572a232fda6436591eba9fec109aeb13047a4a03841",
     "src/install-ui.test.ts": "e44d5a0009ce1f56aab547e1cf11c63ef4caad9c81f85f1753a8dd38b056930e",
@@ -259,5 +259,5 @@
   },
   "path": "hindsight-integrations/coding-agents",
   "source": "https://github.com/vectorize-io/hindsight",
-  "version": "0.8.1"
+  "version": "0.8.2"
 }

package/dist/antigravity-hook.js

@@ -1277,7 +1277,7 @@ var PLUGIN_GOVERNED_BANK_FIELDS = [
 ];
 
 // package.json
-var version = "0.8.2";
+var version = "0.8.9";
 
 // src/core/util.ts
 import { accessSync, constants } from "fs";
@@ -3175,20 +3175,25 @@ function* readJsonl(path) {
   try {
     const buffer = Buffer.allocUnsafe(CHUNK_BYTES);
     const decoder = new StringDecoder("utf8");
-    let pending = "";
+    let fragments = [];
     let position = 0;
     for (; ; ) {
       const bytesRead = readSync2(fd, buffer, 0, buffer.length, position);
       if (bytesRead <= 0) break;
       position += bytesRead;
-      pending += decoder.write(buffer.subarray(0, bytesRead));
+      const chunk = decoder.write(buffer.subarray(0, bytesRead));
+      let start = 0;
       let newline;
-      while ((newline = pending.indexOf("\n")) !== -1) {
-        yield pending.slice(0, newline);
-        pending = pending.slice(newline + 1);
+      while ((newline = chunk.indexOf("\n", start)) !== -1) {
+        fragments.push(chunk.slice(start, newline));
+        yield fragments.join("");
+        fragments = [];
+        start = newline + 1;
       }
+      if (start < chunk.length) fragments.push(chunk.slice(start));
     }
-    pending += decoder.end();
+    fragments.push(decoder.end());
+    const pending = fragments.join("");
     if (pending) yield pending;
   } finally {
     closeSync2(fd);
@@ -4577,7 +4582,7 @@ var $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat"
 var version2 = {
   major: 4,
   minor: 6,
-  patch: 5
+  patch: 7
 };
 
 // node_modules/zod/v4/core/schemas.js

package/dist/antigravity-statusline.js

@@ -880,7 +880,7 @@ var PLUGIN_GOVERNED_BANK_FIELDS = [
 ];
 
 // package.json
-var version = "0.8.2";
+var version = "0.8.9";
 
 // src/core/util.ts
 import { accessSync, constants } from "fs";

package/dist/antigravity-stop-hook.js

@@ -1214,7 +1214,7 @@ var PLUGIN_GOVERNED_BANK_FIELDS = [
 ];
 
 // package.json
-var version = "0.8.2";
+var version = "0.8.9";
 
 // src/core/util.ts
 import { accessSync, constants } from "fs";
@@ -3142,20 +3142,25 @@ function* readJsonl(path) {
   try {
     const buffer = Buffer.allocUnsafe(CHUNK_BYTES);
     const decoder = new StringDecoder("utf8");
-    let pending = "";
+    let fragments = [];
     let position = 0;
     for (; ; ) {
       const bytesRead = readSync2(fd, buffer, 0, buffer.length, position);
       if (bytesRead <= 0) break;
       position += bytesRead;
-      pending += decoder.write(buffer.subarray(0, bytesRead));
+      const chunk = decoder.write(buffer.subarray(0, bytesRead));
+      let start = 0;
       let newline;
-      while ((newline = pending.indexOf("\n")) !== -1) {
-        yield pending.slice(0, newline);
-        pending = pending.slice(newline + 1);
+      while ((newline = chunk.indexOf("\n", start)) !== -1) {
+        fragments.push(chunk.slice(start, newline));
+        yield fragments.join("");
+        fragments = [];
+        start = newline + 1;
       }
+      if (start < chunk.length) fragments.push(chunk.slice(start));
     }
-    pending += decoder.end();
+    fragments.push(decoder.end());
+    const pending = fragments.join("");
     if (pending) yield pending;
   } finally {
     closeSync2(fd);
@@ -4770,7 +4775,7 @@ var $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat"
 var version2 = {
   major: 4,
   minor: 6,
-  patch: 5
+  patch: 7
 };
 
 // node_modules/zod/v4/core/schemas.js

package/dist/claude-hook.js

@@ -1277,7 +1277,7 @@ var PLUGIN_GOVERNED_BANK_FIELDS = [
 ];
 
 // package.json
-var version = "0.8.2";
+var version = "0.8.9";
 
 // src/core/util.ts
 import { accessSync, constants } from "fs";
@@ -3175,20 +3175,25 @@ function* readJsonl(path) {
   try {
     const buffer = Buffer.allocUnsafe(CHUNK_BYTES);
     const decoder = new StringDecoder("utf8");
-    let pending = "";
+    let fragments = [];
     let position = 0;
     for (; ; ) {
       const bytesRead = readSync2(fd, buffer, 0, buffer.length, position);
       if (bytesRead <= 0) break;
       position += bytesRead;
-      pending += decoder.write(buffer.subarray(0, bytesRead));
+      const chunk = decoder.write(buffer.subarray(0, bytesRead));
+      let start = 0;
       let newline;
-      while ((newline = pending.indexOf("\n")) !== -1) {
-        yield pending.slice(0, newline);
-        pending = pending.slice(newline + 1);
+      while ((newline = chunk.indexOf("\n", start)) !== -1) {
+        fragments.push(chunk.slice(start, newline));
+        yield fragments.join("");
+        fragments = [];
+        start = newline + 1;
       }
+      if (start < chunk.length) fragments.push(chunk.slice(start));
     }
-    pending += decoder.end();
+    fragments.push(decoder.end());
+    const pending = fragments.join("");
     if (pending) yield pending;
   } finally {
     closeSync2(fd);
@@ -4577,7 +4582,7 @@ var $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat"
 var version2 = {
   major: 4,
   minor: 6,
-  patch: 5
+  patch: 7
 };
 
 // node_modules/zod/v4/core/schemas.js

package/dist/claude-sessionstart-hook.js

@@ -1348,7 +1348,7 @@ var PLUGIN_GOVERNED_BANK_FIELDS = [
 ];
 
 // package.json
-var version = "0.8.2";
+var version = "0.8.9";
 
 // src/core/util.ts
 import { accessSync, constants } from "fs";
@@ -2924,20 +2924,25 @@ function* readJsonl(path) {
   try {
     const buffer = Buffer.allocUnsafe(CHUNK_BYTES);
     const decoder = new StringDecoder("utf8");
-    let pending = "";
+    let fragments = [];
     let position = 0;
     for (; ; ) {
       const bytesRead = readSync2(fd, buffer, 0, buffer.length, position);
       if (bytesRead <= 0) break;
       position += bytesRead;
-      pending += decoder.write(buffer.subarray(0, bytesRead));
+      const chunk = decoder.write(buffer.subarray(0, bytesRead));
+      let start = 0;
       let newline;
-      while ((newline = pending.indexOf("\n")) !== -1) {
-        yield pending.slice(0, newline);
-        pending = pending.slice(newline + 1);
+      while ((newline = chunk.indexOf("\n", start)) !== -1) {
+        fragments.push(chunk.slice(start, newline));
+        yield fragments.join("");
+        fragments = [];
+        start = newline + 1;
       }
+      if (start < chunk.length) fragments.push(chunk.slice(start));
     }
-    pending += decoder.end();
+    fragments.push(decoder.end());
+    const pending = fragments.join("");
     if (pending) yield pending;
   } finally {
     closeSync2(fd);
@@ -5260,7 +5265,7 @@ var $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat"
 var version2 = {
   major: 4,
   minor: 6,
-  patch: 5
+  patch: 7
 };
 
 // node_modules/zod/v4/core/schemas.js

package/dist/claude-stop-hook.js

@@ -1214,7 +1214,7 @@ var PLUGIN_GOVERNED_BANK_FIELDS = [
 ];
 
 // package.json
-var version = "0.8.2";
+var version = "0.8.9";
 
 // src/core/util.ts
 import { accessSync, constants } from "fs";
@@ -3142,20 +3142,25 @@ function* readJsonl(path) {
   try {
     const buffer = Buffer.allocUnsafe(CHUNK_BYTES);
     const decoder = new StringDecoder("utf8");
-    let pending = "";
+    let fragments = [];
     let position = 0;
     for (; ; ) {
       const bytesRead = readSync2(fd, buffer, 0, buffer.length, position);
       if (bytesRead <= 0) break;
       position += bytesRead;
-      pending += decoder.write(buffer.subarray(0, bytesRead));
+      const chunk = decoder.write(buffer.subarray(0, bytesRead));
+      let start = 0;
       let newline;
-      while ((newline = pending.indexOf("\n")) !== -1) {
-        yield pending.slice(0, newline);
-        pending = pending.slice(newline + 1);
+      while ((newline = chunk.indexOf("\n", start)) !== -1) {
+        fragments.push(chunk.slice(start, newline));
+        yield fragments.join("");
+        fragments = [];
+        start = newline + 1;
       }
+      if (start < chunk.length) fragments.push(chunk.slice(start));
     }
-    pending += decoder.end();
+    fragments.push(decoder.end());
+    const pending = fragments.join("");
     if (pending) yield pending;
   } finally {
     closeSync2(fd);
@@ -4770,7 +4775,7 @@ var $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat"
 var version2 = {
   major: 4,
   minor: 6,
-  patch: 5
+  patch: 7
 };
 
 // node_modules/zod/v4/core/schemas.js