@mxalbert/context-mode 2.0.0

package/configs/zed/AGENTS.md

@@ -0,0 +1,68 @@
+# context-mode — MANDATORY routing rules
+
+context-mode MCP tools available. Rules protect context window from flooding. One unrouted command dumps 56 KB into context. Zed has NO hooks — these instructions are ONLY enforcement. Follow strictly.
+
+## Think in Code — MANDATORY
+
+Analyze/count/filter/compare/search/parse/transform data: **write code** via `mcp:context-mode:ctx_execute(language, code)`, `console.log()` only the answer. Do NOT read raw data into context. PROGRAM the analysis, not COMPUTE it. Pure JavaScript — Node.js built-ins only (`fs`, `path`, `child_process`). `try/catch`, handle `null`/`undefined`. One script replaces ten tool calls.
+
+## BLOCKED — do NOT use
+
+### curl / wget — FORBIDDEN
+Do NOT use `curl`/`wget` in shell. Dumps raw HTTP into context.
+Use: `mcp:context-mode:ctx_fetch_and_index(url, source)` or `mcp:context-mode:ctx_execute(language: "javascript", code: "const r = await fetch(...)")`
+
+### Inline HTTP — FORBIDDEN
+No `node -e "fetch(..."`, `python -c "requests.get(..."`. Bypasses sandbox.
+Use: `mcp:context-mode:ctx_execute(language, code)` — only stdout enters context
+
+### Direct web fetching — FORBIDDEN
+Raw HTML can exceed 100 KB.
+Use: `mcp:context-mode:ctx_fetch_and_index(url, source)` then `mcp:context-mode:ctx_search(queries)`
+
+## REDIRECTED — use sandbox
+
+### Shell (>20 lines output)
+Shell ONLY for: `git`, `mkdir`, `rm`, `mv`, `cd`, `ls`, `npm install`, `pip install`.
+Otherwise: `mcp:context-mode:ctx_batch_execute(commands, queries)` or `mcp:context-mode:ctx_execute(language: "javascript", code: "...")`. Use `language: "shell"` only when code matches the host shell.
+
+### File reading (for analysis)
+Reading to **edit** → reading correct. Reading to **analyze/explore/summarize** → `mcp:context-mode:ctx_execute_file(path, language, code)`.
+
+### grep / search (large results)
+Use `mcp:context-mode:ctx_execute(language: "javascript", code: "...")` in sandbox for portable filtering/counting.
+
+## Tool selection
+
+1. **GATHER**: `mcp:context-mode:ctx_batch_execute(commands, queries)` — runs all commands, auto-indexes, returns search. ONE call replaces 30+. Each command: `{label: "header", command: "..."}`.
+2. **FOLLOW-UP**: `mcp:context-mode:ctx_search(queries: ["q1", "q2", ...])` — all questions as array, ONE call.
+3. **PROCESSING**: `mcp:context-mode:ctx_execute(language, code)` | `mcp:context-mode:ctx_execute_file(path, language, code)` — sandbox, only stdout enters context.
+4. **WEB**: `mcp:context-mode:ctx_fetch_and_index(url, source)` then `mcp:context-mode:ctx_search(queries)` — raw HTML never enters context.
+5. **INDEX**: `mcp:context-mode:ctx_index(content, source)` — store in FTS5 for later search.
+
+## Parallel I/O batches
+
+For multi-URL fetches or multi-API calls, **always** include `concurrency: N` (1-8):
+
+- `mcp:context-mode:ctx_batch_execute(commands: [3+ network commands], concurrency: 5)` — gh, curl, dig, docker inspect, multi-region cloud queries
+- `mcp:context-mode:ctx_fetch_and_index(requests: [{url, source}, ...], concurrency: 5)` — multi-URL batch fetch
+
+**Use concurrency 4-8** for I/O-bound work (network calls, API queries). **Keep concurrency 1** for CPU-bound (npm test, build, lint) or commands sharing state (ports, lock files, same-repo writes).
+
+GitHub API rate-limit: cap at 4 for `gh` calls.
+
+## Output
+
+Write artifacts to FILES — never inline. Return: file path + 1-line description.
+Descriptive source labels for `search(source: "label")`.
+
+## ctx commands
+
+| Command | Action |
+|---------|--------|
+| `ctx stats` | Call `stats` MCP tool, display full output verbatim |
+| `ctx doctor` | Call `doctor` MCP tool, run returned shell command, display as checklist |
+| `ctx upgrade` | Call `upgrade` MCP tool, run returned shell command, display as checklist |
+| `ctx purge` | Call `mcp:context-mode:purge` MCP tool with confirm: true. Warns before wiping knowledge base. |
+
+After /clear or /compact: knowledge base and session stats preserved. Use `ctx purge` to start fresh.

package/hooks/antigravity-cli/payload.mjs

@@ -0,0 +1,98 @@
+/**
+ * Shared Antigravity CLI (`agy`) hook payload normalization.
+ *
+ * The only refs-backed field is the working directory: the upstream hook example
+ * (refs/platforms/antigravity-cli/examples/title/title.sh:10, README.md:11)
+ * reads it from `workspace.current_dir` (an OBJECT field). We read that FIRST.
+ *
+ * The remaining fields below are empirically-derived/UNVERIFIED — no upstream
+ * agy doc or example confirms this shape; they are best-effort assumptions:
+ *   { conversationId, stepIdx, toolCall: { name, args }, error,
+ *     workspacePaths: [..], transcriptPath, artifactDirectoryPath }
+ *
+ * The shared context-mode capture/routing code expects Claude-shaped fields, so
+ * keep this mapping in one place for PreToolUse/PostToolUse/Stop.
+ */
+
+export function parseAgyPayload(raw) {
+  try {
+    const cleaned = String(raw ?? "").replace(/^\uFEFF/, "").trim();
+    return cleaned ? JSON.parse(cleaned) : {};
+  } catch {
+    return {};
+  }
+}
+
+export function getAgyProjectDir(payload) {
+  // Refs-backed FIRST: workspace.current_dir is the only upstream-documented
+  // field (examples/title/title.sh:10). `workspacePaths[0]` is an unverified
+  // fallback kept defensively.
+  const workspace = payload?.workspace;
+  if (workspace && typeof workspace === "object" && typeof workspace.current_dir === "string" && workspace.current_dir) {
+    return workspace.current_dir;
+  }
+  return Array.isArray(payload?.workspacePaths) && payload.workspacePaths.length > 0
+    ? String(payload.workspacePaths[0])
+    : undefined;
+}
+
+// agy native tool-name -> canonical map. Keep in sync with the two other copies:
+// hooks/core/routing.mjs (TOOL_ALIASES) and src/session/extract.ts
+// (TOOL_NAME_NORMALIZE). Three layers normalize independently; adding a new agy
+// tool means updating all three (a single shared table is a follow-up cleanup).
+function normalizeAgyToolName(name) {
+  switch (name) {
+    case "run_command":
+      return "Bash";
+    case "view_file":
+      return "Read";
+    case "grep_search":
+      return "Grep";
+    case "list_dir":
+      return "LS";
+    case "web_fetch":
+    case "read_url_content":
+      return "WebFetch";
+    case "search_web":
+      return "WebSearch";
+    default:
+      return name;
+  }
+}
+
+function normalizeAgyToolInput(toolName, args) {
+  const input = args && typeof args === "object" ? { ...args } : {};
+  const canonical = normalizeAgyToolName(toolName);
+  if (canonical === "Bash" && typeof input.CommandLine === "string" && typeof input.command !== "string") {
+    input.command = input.CommandLine;
+  }
+  if (canonical === "WebFetch") {
+    const url = input.url ?? input.URL ?? input.Url;
+    if (typeof url === "string" && typeof input.url !== "string") input.url = url;
+  }
+  if (canonical === "Read") {
+    const filePath = input.file_path ?? input.path ?? input.AbsolutePath ?? input.FilePath;
+    if (typeof filePath === "string" && typeof input.file_path !== "string") input.file_path = filePath;
+  }
+  if (canonical === "Grep") {
+    const pattern = input.pattern ?? input.Pattern ?? input.query ?? input.Query;
+    if (typeof pattern === "string" && typeof input.pattern !== "string") input.pattern = pattern;
+  }
+  return input;
+}
+
+export function fromAgy(payload) {
+  const toolCall = payload?.toolCall ?? {};
+  const rawToolName = toolCall?.name ?? "";
+  return {
+    session_id: payload?.conversationId,
+    transcript_path: payload?.transcriptPath,
+    cwd: getAgyProjectDir(payload),
+    tool_name: normalizeAgyToolName(rawToolName),
+    tool_input: normalizeAgyToolInput(rawToolName, toolCall?.args),
+    tool_response: typeof payload?.error === "string" ? payload.error : "",
+    tool_output: {
+      isError: typeof payload?.error === "string" && payload.error.length > 0,
+    },
+  };
+}

package/hooks/antigravity-cli/posttooluse.mjs

@@ -0,0 +1,138 @@
+#!/usr/bin/env node
+import "../suppress-stderr.mjs";
+import "../ensure-deps.mjs";
+/**
+ * Antigravity CLI (`agy`) PostToolUse hook — session event capture.
+ *
+ * agy fires hooks from a config at ~/.gemini/config/hooks.json (or via an
+ * installed agy plugin's hooks/hooks.json) and pipes a payload whose shape
+ * differs from the Claude-Code/Codex wire format this pipeline expects:
+ *
+ *   { conversationId, stepIdx, toolCall: { name, args }, error,
+ *     workspacePaths: [..], transcriptPath, artifactDirectoryPath }
+ *
+ * The event name arrives as argv (set in hooks.json), NOT in the payload, and
+ * the hook CWD is ~/.gemini/config — so the project dir MUST come from
+ * workspacePaths[0], never process.cwd(). We translate agy's payload into the
+ * Claude-shaped `input` the shared extractor/attribution pipeline consumes,
+ * then reuse it unchanged. This hook is capture-only and emits no stdout.
+ */
+
+import {
+  readStdin,
+  getSessionId,
+  getSessionDBPath,
+  getInputProjectDir,
+  ANTIGRAVITY_CLI_OPTS,
+} from "../session-helpers.mjs";
+import { createSessionLoaders, attributeAndInsertEvents } from "../session-loaders.mjs";
+import { readFileSync, unlinkSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { tmpdir } from "node:os";
+import { fileURLToPath } from "node:url";
+import { fromAgy, parseAgyPayload } from "./payload.mjs";
+
+const HOOK_DIR = dirname(fileURLToPath(import.meta.url));
+const { loadSessionDB, loadExtract, loadProjectAttribution } = createSessionLoaders(HOOK_DIR);
+const OPTS = ANTIGRAVITY_CLI_OPTS;
+
+try {
+  const input = fromAgy(parseAgyPayload(await readStdin()));
+
+  if (input.tool_name) {
+    const projectDir = getInputProjectDir(input, OPTS);
+
+    const { extractEvents } = await loadExtract();
+    const { resolveProjectAttributions } = await loadProjectAttribution();
+    const { SessionDB } = await loadSessionDB();
+
+    const dbPath = getSessionDBPath(OPTS, projectDir);
+    const db = new SessionDB({ dbPath });
+    const sessionId = getSessionId(input, OPTS);
+
+    db.ensureSession(sessionId, projectDir);
+
+    const normalizedInput = {
+      tool_name: input.tool_name,
+      tool_input: input.tool_input ?? {},
+      tool_response: input.tool_response ?? "",
+      tool_output: input.tool_output,
+    };
+
+    const events = extractEvents(normalizedInput);
+    attributeAndInsertEvents(db, sessionId, events, input, projectDir, "PostToolUse", resolveProjectAttributions);
+
+    try {
+      const rejectedPath = resolve(tmpdir(), `context-mode-rejected-${sessionId}.txt`);
+      let rejectedData;
+      try {
+        rejectedData = readFileSync(rejectedPath, "utf-8").trim();
+        unlinkSync(rejectedPath);
+      } catch { /* no marker */ }
+      if (rejectedData) {
+        const colonIdx = rejectedData.indexOf(":");
+        const rejTool = colonIdx > 0 ? rejectedData.slice(0, colonIdx) : rejectedData;
+        const rejReason = colonIdx > 0 ? rejectedData.slice(colonIdx + 1) : "denied";
+        attributeAndInsertEvents(
+          db,
+          sessionId,
+          [{
+            type: "rejected",
+            category: "rejected-approach",
+            data: `${rejTool}: ${rejReason}`,
+            priority: 2,
+          }],
+          input,
+          projectDir,
+          "PreToolUse",
+          resolveProjectAttributions,
+        );
+      }
+    } catch { /* best-effort */ }
+
+    try {
+      const redirectPath = resolve(tmpdir(), `context-mode-redirect-${sessionId}.txt`);
+      let redirectData;
+      try {
+        redirectData = readFileSync(redirectPath, "utf-8").trim();
+        unlinkSync(redirectPath);
+      } catch { /* no marker */ }
+
+      if (redirectData) {
+        const i1 = redirectData.indexOf(":");
+        const i2 = i1 >= 0 ? redirectData.indexOf(":", i1 + 1) : -1;
+        const i3 = i2 >= 0 ? redirectData.indexOf(":", i2 + 1) : -1;
+        if (i1 > 0 && i2 > i1 && i3 > i2) {
+          const tool = redirectData.slice(0, i1);
+          const type = redirectData.slice(i1 + 1, i2);
+          const bytesRaw = redirectData.slice(i2 + 1, i3);
+          const summary = redirectData.slice(i3 + 1);
+          const bytesAvoided = Number.parseInt(bytesRaw, 10);
+          if (Number.isFinite(bytesAvoided) && bytesAvoided > 0) {
+            attributeAndInsertEvents(
+              db,
+              sessionId,
+              [{
+                type,
+                category: "redirect",
+                data: `${tool}: ${summary}`,
+                priority: 2,
+                bytes_avoided: bytesAvoided,
+              }],
+              input,
+              projectDir,
+              "PreToolUse",
+              resolveProjectAttributions,
+            );
+          }
+        }
+      }
+    } catch { /* best-effort */ }
+
+    db.close();
+  }
+} catch {
+  // Swallow errors — a hook must never fail the host agent.
+}
+
+// Capture-only hook: emit nothing.

package/hooks/antigravity-cli/pretooluse.mjs

@@ -0,0 +1,78 @@
+#!/usr/bin/env node
+import "../suppress-stderr.mjs";
+/**
+ * Antigravity CLI (`agy`) PreToolUse hook — bounded routing enforcement.
+ *
+ * agy honors top-level `{ decision: "deny" | "ask", reason }` responses for
+ * PreToolUse. It does not honor additionalContext, so mapped context guidance is
+ * emitted as a deny-and-retry instruction. We register only tools with existing
+ * core routing branches (Bash/Read/Grep/WebFetch), not LS/search_web.
+ */
+
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { readStdin } from "../core/stdin.mjs";
+import { routePreToolUse, initSecurity } from "../core/routing.mjs";
+import { formatDecision } from "../core/formatters.mjs";
+import { fromAgy, getAgyProjectDir, parseAgyPayload } from "./payload.mjs";
+import { getSessionId, ANTIGRAVITY_CLI_OPTS } from "../session-helpers.mjs";
+
+const __hookDir = dirname(fileURLToPath(import.meta.url));
+
+try {
+  await initSecurity(resolve(__hookDir, "..", "..", "build"));
+
+  const payload = parseAgyPayload(await readStdin());
+  const input = fromAgy(payload);
+
+  const decision = routePreToolUse(
+    String(input.tool_name ?? ""),
+    input.tool_input ?? {},
+    getAgyProjectDir(payload),
+    "antigravity-cli",
+    input.session_id,
+  );
+  const response = formatDecision("antigravity-cli", decision);
+
+  if (decision && input.tool_name) {
+    // Key markers on the SAME id posttooluse.mjs reads. getSessionId prefers the
+    // transcript UUID over conversationId, so deriving it any other way here
+    // (e.g. input.session_id) would miss the handoff whenever agy's transcript
+    // is <uuid>.jsonl and silently drop the rejected/redirect analytics.
+    const sessionId = getSessionId(input, ANTIGRAVITY_CLI_OPTS);
+    const formattedDeny = response && typeof response === "object" && response.decision === "deny";
+    if (formattedDeny || decision.action === "deny" || decision.action === "modify") {
+      try {
+        const reason = formattedDeny
+          ? (response.reason || "denied")
+          : decision.action === "deny"
+            ? (decision.reason || "denied")
+            : "Redirected to context-mode sandbox";
+        writeFileSync(
+          resolve(tmpdir(), `context-mode-rejected-${sessionId}.txt`),
+          `${input.tool_name}:${reason}`,
+          "utf-8",
+        );
+      } catch { /* best-effort */ }
+    }
+    if (decision.redirectMeta) {
+      try {
+        const meta = decision.redirectMeta;
+        const summary = String(meta.commandSummary ?? "").slice(0, 200);
+        writeFileSync(
+          resolve(tmpdir(), `context-mode-redirect-${sessionId}.txt`),
+          `${meta.tool}:${meta.type}:${meta.bytesAvoided}:${summary}`,
+          "utf-8",
+        );
+      } catch { /* best-effort */ }
+    }
+  }
+
+  if (response !== null) {
+    process.stdout.write(JSON.stringify(response) + "\n");
+  }
+} catch {
+  // Fail OPEN. Empty stdout + exit 0 lets agy continue the tool call.
+}

package/hooks/antigravity-cli/stop.mjs

@@ -0,0 +1,58 @@
+#!/usr/bin/env node
+import "../suppress-stderr.mjs";
+import "../ensure-deps.mjs";
+/**
+ * Antigravity CLI (`agy`) Stop hook — session-end capture.
+ *
+ * agy's verified hook list exposes `Stop` ("when agent tries to exit") and no
+ * separate SessionEnd hook, so this records a single session_end marker when
+ * agy emits it. `agy -p` probes have not emitted Stop, so registration is
+ * best-effort. The hook is capture-only and emits no stdout.
+ */
+
+import {
+  readStdin,
+  getSessionId,
+  getSessionDBPath,
+  getInputProjectDir,
+  ANTIGRAVITY_CLI_OPTS,
+} from "../session-helpers.mjs";
+import { createSessionLoaders } from "../session-loaders.mjs";
+import { dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { fromAgy, parseAgyPayload } from "./payload.mjs";
+
+const HOOK_DIR = dirname(fileURLToPath(import.meta.url));
+const { loadSessionDB } = createSessionLoaders(HOOK_DIR);
+const OPTS = ANTIGRAVITY_CLI_OPTS;
+
+try {
+  const payload = parseAgyPayload(await readStdin());
+  const input = fromAgy(payload);
+  const projectDir = getInputProjectDir(input, OPTS);
+
+  const { SessionDB } = await loadSessionDB();
+  const dbPath = getSessionDBPath(OPTS, projectDir);
+  const db = new SessionDB({ dbPath });
+  const sessionId = getSessionId(input, OPTS);
+
+  db.ensureSession(sessionId, projectDir);
+  db.insertEvent(
+    sessionId,
+    {
+      type: "session_end",
+      category: "session",
+      priority: 1,
+      data: JSON.stringify({
+        status: payload?.status ?? "stopped",
+        stepIdx: payload?.stepIdx ?? null,
+        transcriptPath: payload?.transcriptPath ?? null,
+      }),
+    },
+    "Stop",
+  );
+
+  db.close();
+} catch {
+  // A hook must never fail the host agent.
+}

package/hooks/auto-injection.mjs

@@ -0,0 +1,102 @@
+/**
+ * Auto-injection for compaction events.
+ *
+ * Builds a prioritized, budget-capped injection block from session events.
+ * Only fires on source === "compact" (wired in sessionstart.mjs).
+ *
+ * Priority order:
+ *   P1: Role (behavioral_directive) — always first, never truncated
+ *   P2: Decisions (rules) — latest 5, overflow reduces to 3
+ *   P3: Skills (active_skills) — unique names, latest 10
+ *   P4: Intent (session_mode) — latest
+ *
+ * Hard cap: 500 tokens (~2000 chars at 4 chars/token).
+ */
+
+/**
+ * Rough token estimate: ~4 chars per token.
+ * @param {string} text
+ * @returns {number}
+ */
+export function estimateTokens(text) {
+  return Math.ceil(text.length / 4);
+}
+
+/**
+ * Build auto-injection block from session events.
+ * @param {Array<{category: string, data: string}>} events
+ * @returns {string} XML block or empty string
+ */
+export function buildAutoInjection(events) {
+  // Single O(N) pass instead of 4× O(N) Array.filter() loops. UserPromptSubmit
+  // fires this on every prompt; with N up to 100 events the prior implementation
+  // walked the array 4 times per prompt — wasteful on macOS, painful on Windows
+  // where V8 cold paths cost more.
+  let role;
+  const decisionsAll = [];
+  const skillsSeen = new Set();
+  const skillsOrdered = [];
+  let intent;
+  for (const e of events) {
+    switch (e.category) {
+      case "role":
+        role = e;
+        break;
+      case "decision":
+        decisionsAll.push(e);
+        break;
+      case "skill":
+        if (!skillsSeen.has(e.data)) {
+          skillsSeen.add(e.data);
+          skillsOrdered.push(e.data);
+        }
+        break;
+      case "intent":
+        intent = e;
+        break;
+    }
+  }
+
+  const parts = [];
+  let budget = 500; // hard cap in tokens
+
+  // P1: Role (always first, never truncated from output)
+  if (role) {
+    const text = `<behavioral_directive>\n${role.data.slice(0, 400)}\n</behavioral_directive>`;
+    parts.push(text);
+    budget -= estimateTokens(text);
+  }
+
+  // P2: Decisions (latest 5)
+  const decisions = decisionsAll.slice(-5);
+  if (decisions.length > 0) {
+    const lines = decisions.map(d => `- ${d.data.slice(0, 100)}`).join("\n");
+    const text = `<rules>\nFollow these decisions:\n${lines}\n</rules>`;
+    const cost = estimateTokens(text);
+    if (cost <= budget) {
+      parts.push(text);
+      budget -= cost;
+    } else {
+      // Overflow: reduce to 3 decisions
+      const reduced = decisions.slice(-3).map(d => `- ${d.data.slice(0, 100)}`).join("\n");
+      const fallback = `<rules>\nFollow these decisions:\n${reduced}\n</rules>`;
+      parts.push(fallback);
+      budget -= estimateTokens(fallback);
+    }
+  }
+
+  // P3: Skills (unique names, latest 10)
+  if (skillsOrdered.length > 0 && budget > 50) {
+    const text = `<active_skills>\nRe-invoke if relevant: ${skillsOrdered.slice(-10).join(", ")}\nTo reload: call the Skill tool with the skill name.\n</active_skills>`;
+    parts.push(text);
+    budget -= estimateTokens(text);
+  }
+
+  // P4: Intent (latest)
+  if (intent && budget > 20) {
+    parts.push(`<session_mode>${intent.data}</session_mode>`);
+  }
+
+  if (parts.length === 0) return "";
+  return `<session_state source="compaction">\n\n${parts.join("\n\n")}\n\n</session_state>`;
+}