claude-smart 0.2.35 → 0.2.36

package/README.md

@@ -13,7 +13,7 @@
     <img src="https://img.shields.io/badge/License-Apache%202.0-blue.svg" alt="License">
   </a>
   <a href="plugin/pyproject.toml">
-    <img src="https://img.shields.io/badge/version-0.2.35-green.svg" alt="Version">
+    <img src="https://img.shields.io/badge/version-0.2.36-green.svg" alt="Version">
   </a>
   <a href="plugin/pyproject.toml">
     <img src="https://img.shields.io/badge/python-%3E%3D3.12-brightgreen.svg" alt="Python">
@@ -81,6 +81,9 @@ Four things this changes:
 npx claude-smart install     # or: uvx claude-smart install
 ```
 
+Use `--read-only` to install context-loading hooks without the hooks that
+publish interactions for learning.
+
 Then restart Claude Code.
 
 Requires Node.js (for `npx`) or uv (for `uvx`) to already exist.
@@ -110,6 +113,8 @@ claude plugin uninstall claude-smart@reflexioai
 npx claude-smart install --host codex
 ```
 
+Add `--read-only` to skip the publish interactions hook.
+
 Then fully quit and reopen Codex so hooks reload.
 
 Requires the `codex` CLI on `PATH` and Node.js (for `npx`).

package/bin/claude-smart.js

@@ -39,8 +39,8 @@ const CODEX_MARKETPLACE_DISPLAY_NAME = "ReflexioAI";
 const CODEX_PLUGIN_ID = `claude-smart@${CODEX_MARKETPLACE_NAME}`;
 const REFLEXIO_ENV_PATH = join(homedir(), ".reflexio", ".env");
 const MANAGED_REFLEXIO_URL = "https://www.reflexio.ai/";
-const REFLEXIO_USER_ID_ENV = "REFLEXIO_USER_ID";
 const MANAGED_SETUP_ENV = "CLAUDE_SMART_MANAGED_SETUP";
+const CLAUDE_SMART_READ_ONLY_ENV = "CLAUDE_SMART_READ_ONLY";
 const REFLEXIO_DIR = join(homedir(), ".reflexio");
 const CLAUDE_SMART_STATE_DIR = join(homedir(), ".claude-smart");
 const CODEX_CONFIG_PATH = join(homedir(), ".codex", "config.toml");
@@ -258,25 +258,6 @@ function setReflexioEnvVars(values) {
   return added;
 }
 
-function readReflexioEnvValue(key) {
-  const existing = existsSync(REFLEXIO_ENV_PATH)
-    ? readFileSync(REFLEXIO_ENV_PATH, "utf8")
-    : "";
-  for (const line of existing.split(/\r?\n/)) {
-    const parsed = parseEnvLine(line);
-    if (!parsed || parsed.key !== key) continue;
-    let value = line.slice(line.indexOf("=") + 1).trim();
-    if (
-      (value.startsWith('"') && value.endsWith('"')) ||
-      (value.startsWith("'") && value.endsWith("'"))
-    ) {
-      value = value.slice(1, -1);
-    }
-    return value;
-  }
-  return "";
-}
-
 function maskSecret(value) {
   if (!value) return "";
   if (value.length <= 8) return "*".repeat(value.length);
@@ -286,26 +267,33 @@ function maskSecret(value) {
 
 function configureReflexioSetup(args) {
   const apiKey = parseOptionalArg(args, "--api-key").trim();
+  const readOnly = parseReadOnly(args);
   if (apiKey) {
     const reflexioUrl = parseOptionalArg(args, "--reflexio-url") || MANAGED_REFLEXIO_URL;
-    const userId = readReflexioEnvValue(REFLEXIO_USER_ID_ENV) || crypto.randomUUID();
-    const added = setReflexioEnvVars({
+    const values = {
       REFLEXIO_URL: reflexioUrl,
       REFLEXIO_API_KEY: apiKey,
-      [REFLEXIO_USER_ID_ENV]: userId,
-    });
+    };
+    if (readOnly) values[CLAUDE_SMART_READ_ONLY_ENV] = "1";
+    const added = setReflexioEnvVars(values);
     const changed = added.length > 0 ? added.join(", ") : "managed Reflexio settings";
     process.stdout.write(
       `Configured ${REFLEXIO_ENV_PATH} for managed Reflexio (${changed}; API key ${maskSecret(apiKey)}).\n`,
     );
     process.env.REFLEXIO_URL = reflexioUrl;
     process.env.REFLEXIO_API_KEY = apiKey;
-    process.env[REFLEXIO_USER_ID_ENV] = userId;
     process.env[MANAGED_SETUP_ENV] = "1";
     return;
   }
 
   const added = seedReflexioEnv();
+  if (readOnly) {
+    added.push(
+      ...setReflexioEnvVars({
+        [CLAUDE_SMART_READ_ONLY_ENV]: "1",
+      }),
+    );
+  }
   if (added.length > 0) {
     process.stdout.write(`Seeded ${REFLEXIO_ENV_PATH} with ${added.join(", ")}.\n`);
   }
@@ -752,6 +740,38 @@ function quoteCommandPart(part) {
   return `"${String(part).replace(/"/g, '\\"')}"`;
 }
 
+function commandIsPublishHook(command) {
+  if (typeof command !== "string") return false;
+  return (
+    /hook_entry\.sh\b[\s"']+(?:codex|claude-code)[\s"']+(?:stop|session-end)\b/.test(command) ||
+    /codex-hook\.js"?(?:\s+"?hook"?){1}\s+"?(?:stop|session-end)"?/.test(command)
+  );
+}
+
+function prunePublishHooksForReadOnly(pluginRoot) {
+  for (const hookFile of ["hooks.json", "codex-hooks.json"]) {
+    const hookPath = join(pluginRoot, "hooks", hookFile);
+    if (!existsSync(hookPath)) continue;
+    const parsed = JSON.parse(readFileSync(hookPath, "utf8"));
+    const hooksByEvent = parsed.hooks || {};
+    for (const event of Object.keys(hooksByEvent)) {
+      const blocks = [];
+      for (const block of hooksByEvent[event] || []) {
+        const keptHooks = (block.hooks || []).filter(
+          (hook) => !commandIsPublishHook(hook && hook.command),
+        );
+        if (keptHooks.length > 0) blocks.push({ ...block, hooks: keptHooks });
+      }
+      if (blocks.length > 0) {
+        hooksByEvent[event] = blocks;
+      } else {
+        delete hooksByEvent[event];
+      }
+    }
+    writeFileSync(hookPath, JSON.stringify(parsed, null, 2) + "\n");
+  }
+}
+
 function patchCodexHooksForNode(pluginRoot, nodePath) {
   const hookPath = join(pluginRoot, "hooks", "codex-hooks.json");
   const parsed = JSON.parse(readFileSync(hookPath, "utf8"));
@@ -796,11 +816,12 @@ function ensurePluginRoot(pluginRoot) {
   }
 }
 
-async function bootstrapPluginRuntime(pluginRoot) {
+async function bootstrapPluginRuntime(pluginRoot, options = {}) {
   assertSupportedRuntimePlatform();
   process.stdout.write("Preparing claude-smart runtime for hooks...\n");
   const nodeRuntime = await ensurePrivateNode();
   patchCodexHooksForNode(pluginRoot, nodeRuntime.node);
+  if (options.readOnly) prunePublishHooksForReadOnly(pluginRoot);
   ensurePluginRoot(pluginRoot);
   const uv = await ensureUv();
   const env = runtimeEnv([dirname(uv), ...privateNodeBinDirs()]);
@@ -850,6 +871,7 @@ function printHelp() {
       "  npx claude-smart install --host codex          Register the plugin marketplace for Codex",
       "  npx claude-smart install --source <owner/repo> Override the marketplace source",
       "  npx claude-smart install --api-key <key>        Use managed Reflexio service",
+      "  npx claude-smart install --read-only            Install without publish interactions hooks",
       "  npx claude-smart uninstall --host codex        Remove the Codex marketplace registration",
       "  npx claude-smart --help                        Show this help",
       "",
@@ -858,7 +880,7 @@ function printHelp() {
       `  2. claude plugin install ${PLUGIN_SPEC}`,
       "  3. Appends CLAUDE_SMART_USE_LOCAL_CLI=1 and CLAUDE_SMART_USE_LOCAL_EMBEDDING=1",
       "     to ~/.reflexio/.env (idempotent).",
-      "     Passing --api-key writes REFLEXIO_URL, REFLEXIO_API_KEY, and REFLEXIO_USER_ID instead.",
+      "     Passing --api-key writes REFLEXIO_URL and REFLEXIO_API_KEY instead.",
       "",
       "Codex install:",
       `  1. Copies the bundled marketplace to ${CODEX_MARKETPLACE_DIR}`,
@@ -917,6 +939,10 @@ function parseHost(args) {
   return value;
 }
 
+function parseReadOnly(args) {
+  return args.includes("--read-only");
+}
+
 function copyCodexMarketplace() {
   for (const rel of CODEX_REQUIRED_FILES) {
     const path = join(PACKAGE_ROOT, rel);
@@ -1368,6 +1394,7 @@ async function runInstall(args) {
   }
 
   const source = parseSource(args);
+  const readOnly = parseReadOnly(args);
   configureReflexioSetup(args);
 
   const steps = [
@@ -1387,6 +1414,10 @@ async function runInstall(args) {
 
   try {
     const pluginRoot = await bootstrapClaudeCodeInstall();
+    if (readOnly) {
+      prunePublishHooksForReadOnly(pluginRoot);
+      process.stdout.write("Installed read-only hook manifest; publish interactions hooks are disabled.\n");
+    }
     process.stdout.write(`Prepared claude-smart runtime at ${pluginRoot}.\n`);
     if (refreshDashboardService(pluginRoot)) {
       process.stdout.write("Refreshed claude-smart dashboard service.\n");
@@ -1417,9 +1448,13 @@ async function runInstallCodex(args) {
     process.stderr.write("error: 'codex' CLI not found on PATH. Install Codex first.\n");
     process.exit(1);
   }
+  const readOnly = parseReadOnly(args);
   configureReflexioSetup(args);
 
   const marketplaceRoot = copyCodexMarketplace();
+  if (readOnly) {
+    prunePublishHooksForReadOnly(codexMarketplacePluginRoot(marketplaceRoot));
+  }
   process.stdout.write(`Prepared Codex marketplace at ${marketplaceRoot}.\n`);
 
   let code = await runCodex(["plugin", "marketplace", "add", marketplaceRoot]);
@@ -1460,7 +1495,10 @@ async function runInstallCodex(args) {
   try {
     cacheDir = installCodexPluginCache(codexMarketplacePluginRoot(marketplaceRoot));
     process.stdout.write(`Installed Codex plugin cache at ${cacheDir}.\n`);
-    await bootstrapPluginRuntime(cacheDir);
+    await bootstrapPluginRuntime(cacheDir, { readOnly });
+    if (readOnly) {
+      process.stdout.write("Installed read-only hook manifest; publish interactions hooks are disabled.\n");
+    }
     if (refreshDashboardService(cacheDir)) {
       process.stdout.write("Refreshed claude-smart dashboard service.\n");
     }
@@ -1581,4 +1619,5 @@ module.exports = {
   configureReflexioSetup,
   patchCodexHooksForNode,
   platformSupportError,
+  prunePublishHooksForReadOnly,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-smart",
-  "version": "0.2.35",
+  "version": "0.2.36",
   "description": "Self-improving Claude Code plugin — learns from corrections via reflexio",
   "keywords": [
     "claude",

package/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-smart",
-  "version": "0.2.35",
+  "version": "0.2.36",
   "description": "Self-improving Claude Code plugin — learns from corrections across sessions via reflexio",
   "author": {
     "name": "Yi Lu"

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-smart",
-  "version": "0.2.35",
+  "version": "0.2.36",
   "description": "Self-improving coding assistant plugin — learns from corrections across sessions via reflexio",
   "author": {
     "name": "Yi Lu"

package/plugin/README.md

@@ -16,6 +16,9 @@ under `~/.claude-smart/` when they are missing. If Node.js is already installed,
 `npx claude-smart install` is equivalent; if uv is already installed,
 `uvx claude-smart install` is equivalent.
 
+Add `--read-only` to either install command to skip hooks that publish
+interactions for learning.
+
 Supported vanilla native targets are Apple Silicon macOS 14+ and Windows x64.
 Intel Mac, macOS 13 or older, and Windows ARM fail early because the local
 embedding/ML dependency stack does not provide a complete native wheel set.

package/plugin/dashboard/app/configure/env/page.tsx

@@ -206,6 +206,21 @@ export default function ConfigureEnvPage() {
                 />
               </div>
 
+              <div className="flex items-start justify-between gap-4">
+                <div className="min-w-0">
+                  <Label htmlFor="read-only-mode">CLAUDE_SMART_READ_ONLY</Label>
+                  <p className="text-xs text-muted-foreground mt-0.5">
+                    Keep session context available but skip publishing
+                    interactions to Reflexio.
+                  </p>
+                </div>
+                <Switch
+                  id="read-only-mode"
+                  checked={!!config.CLAUDE_SMART_READ_ONLY}
+                  onCheckedChange={(v) => update("CLAUDE_SMART_READ_ONLY", v)}
+                />
+              </div>
+
               <div className="space-y-2">
                 <Label>CLAUDE_SMART_CLI_PATH</Label>
                 <Input

package/plugin/dashboard/lib/config-file.ts

@@ -11,9 +11,9 @@ import type { ClaudeSmartConfig } from "./types";
 const KNOWN_KEYS = [
   "REFLEXIO_URL",
   "REFLEXIO_API_KEY",
-  "REFLEXIO_USER_ID",
   "CLAUDE_SMART_USE_LOCAL_CLI",
   "CLAUDE_SMART_USE_LOCAL_EMBEDDING",
+  "CLAUDE_SMART_READ_ONLY",
   "CLAUDE_SMART_CLI_PATH",
   "CLAUDE_SMART_CLI_TIMEOUT",
   "CLAUDE_SMART_STATE_DIR",
@@ -24,6 +24,7 @@ const KNOWN = new Set<string>(KNOWN_KEYS);
 const BOOL_KEYS = new Set([
   "CLAUDE_SMART_USE_LOCAL_CLI",
   "CLAUDE_SMART_USE_LOCAL_EMBEDDING",
+  "CLAUDE_SMART_READ_ONLY",
 ]);
 
 function envPath(): string {
@@ -50,9 +51,9 @@ export async function readConfig(): Promise<ClaudeSmartConfig> {
   const defaults: ClaudeSmartConfig = {
     REFLEXIO_URL: "http://localhost:8071/",
     REFLEXIO_API_KEY: "",
-    REFLEXIO_USER_ID: "",
     CLAUDE_SMART_USE_LOCAL_CLI: false,
     CLAUDE_SMART_USE_LOCAL_EMBEDDING: false,
+    CLAUDE_SMART_READ_ONLY: false,
     CLAUDE_SMART_CLI_PATH: "",
     CLAUDE_SMART_CLI_TIMEOUT: "120",
     CLAUDE_SMART_STATE_DIR: "",

package/plugin/dashboard/lib/types.ts

@@ -114,10 +114,10 @@ export interface SessionDetail {
 export interface ClaudeSmartConfig {
   REFLEXIO_URL: string;
   REFLEXIO_API_KEY: string;
-  REFLEXIO_USER_ID: string;
   REFLEXIO_API_KEY_SET?: boolean;
   CLAUDE_SMART_USE_LOCAL_CLI: boolean;
   CLAUDE_SMART_USE_LOCAL_EMBEDDING: boolean;
+  CLAUDE_SMART_READ_ONLY: boolean;
   CLAUDE_SMART_CLI_PATH: string;
   CLAUDE_SMART_CLI_TIMEOUT: string;
   CLAUDE_SMART_STATE_DIR: string;

package/plugin/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "claude-smart"
-version = "0.2.35"
+version = "0.2.36"
 description = "Self-improving Claude Code plugin — learns from corrections via reflexio"
 readme = "README.md"
 requires-python = ">=3.12"

package/plugin/scripts/_lib.sh

@@ -63,15 +63,15 @@ claude_smart_source_reflexio_env() {
     value="${value#"${value%%[![:space:]]*}"}"
     value="${value%"${value##*[![:space:]]}"}"
     case "$key" in
-      # Reflexio identity: file always wins so a rotated key/url overrides
+      # Managed Reflexio config: file always wins so a rotated key/url overrides
       # whatever a long-lived managed backend or dashboard process inherited.
-      REFLEXIO_URL|REFLEXIO_API_KEY|REFLEXIO_USER_ID)
+      REFLEXIO_URL|REFLEXIO_API_KEY)
         value="$(claude_smart_env_unquote "$value")"
         export "$key=$value"
         ;;
       # CLAUDE_SMART_* flags: respect anything the caller already exported so
       # per-session overrides (e.g., a manual test) take precedence over the file.
-      CLAUDE_SMART_USE_LOCAL_CLI|CLAUDE_SMART_USE_LOCAL_EMBEDDING|CLAUDE_SMART_BACKEND_AUTOSTART|CLAUDE_SMART_DASHBOARD_AUTOSTART|CLAUDE_SMART_CLI_PATH|CLAUDE_SMART_CLI_TIMEOUT|CLAUDE_SMART_STATE_DIR|CLAUDE_SMART_ENABLE_OPTIMIZER)
+      CLAUDE_SMART_USE_LOCAL_CLI|CLAUDE_SMART_USE_LOCAL_EMBEDDING|CLAUDE_SMART_READ_ONLY|CLAUDE_SMART_BACKEND_AUTOSTART|CLAUDE_SMART_DASHBOARD_AUTOSTART|CLAUDE_SMART_CLI_PATH|CLAUDE_SMART_CLI_TIMEOUT|CLAUDE_SMART_STATE_DIR|CLAUDE_SMART_ENABLE_OPTIMIZER)
         if [ -z "$(eval "printf '%s' \"\${$key:-}\"")" ]; then
           value="$(claude_smart_env_unquote "$value")"
           export "$key=$value"

package/plugin/scripts/codex-hook.js

@@ -183,11 +183,11 @@ function loadReflexioEnv() {
   const managedReflexioKeys = new Set([
     "REFLEXIO_URL",
     "REFLEXIO_API_KEY",
-    "REFLEXIO_USER_ID",
   ]);
   const localConfigKeys = new Set([
     "CLAUDE_SMART_USE_LOCAL_CLI",
     "CLAUDE_SMART_USE_LOCAL_EMBEDDING",
+    "CLAUDE_SMART_READ_ONLY",
     "CLAUDE_SMART_BACKEND_AUTOSTART",
     "CLAUDE_SMART_DASHBOARD_AUTOSTART",
     "CLAUDE_SMART_CLI_PATH",

package/plugin/scripts/smart-install.sh

@@ -472,25 +472,10 @@ claude_smart_env_upsert() {
   fi
 }
 
-claude_smart_generate_uuid() {
-  if [ -r /proc/sys/kernel/random/uuid ]; then
-    cat /proc/sys/kernel/random/uuid
-  elif command -v python3 >/dev/null 2>&1; then
-    python3 -c 'import uuid; print(uuid.uuid4())'
-  elif command -v python >/dev/null 2>&1; then
-    python -c 'import uuid; print(uuid.uuid4())'
-  else
-    date +%s%N | sed -E 's/^(.{8})(.{4})(.{4})(.{4})(.{12}).*/\1-\2-\3-\4-\5/'
-  fi
-}
-
 if [ "${CLAUDE_SMART_MANAGED_SETUP:-}" = "1" ] && [ -n "${REFLEXIO_API_KEY:-}" ]; then
   REFLEXIO_URL="${REFLEXIO_URL:-https://www.reflexio.ai/}"
-  REFLEXIO_USER_ID="${REFLEXIO_USER_ID:-$(claude_smart_env_value REFLEXIO_USER_ID || true)}"
-  REFLEXIO_USER_ID="${REFLEXIO_USER_ID:-$(claude_smart_generate_uuid)}"
   claude_smart_env_upsert REFLEXIO_URL "$REFLEXIO_URL"
   claude_smart_env_upsert REFLEXIO_API_KEY "$REFLEXIO_API_KEY"
-  claude_smart_env_upsert REFLEXIO_USER_ID "$REFLEXIO_USER_ID"
   chmod 600 "$REFLEXIO_ENV"
   echo "[claude-smart] configured managed Reflexio in $REFLEXIO_ENV" >&2
 elif [ -z "${REFLEXIO_API_KEY:-}" ]; then

package/plugin/src/claude_smart/cli.py

@@ -30,7 +30,6 @@ import shutil
 import subprocess
 import sys
 import time
-import uuid
 from dataclasses import dataclass
 from pathlib import Path
 
@@ -145,34 +144,15 @@ def _seed_reflexio_env() -> list[str]:
 
 def _seed_managed_reflexio_env(*, api_key: str, reflexio_url: str) -> list[str]:
     """Write managed Reflexio connection settings to ``~/.reflexio/.env``."""
-    user_id = _read_reflexio_env_value(env_config.REFLEXIO_USER_ID_ENV) or str(
-        uuid.uuid4()
-    )
     return env_config.set_env_vars(
         _REFLEXIO_ENV_PATH,
         {
             env_config.REFLEXIO_URL_ENV: reflexio_url,
             env_config.REFLEXIO_API_KEY_ENV: api_key,
-            env_config.REFLEXIO_USER_ID_ENV: user_id,
         },
     )
 
 
-def _read_reflexio_env_value(key: str) -> str:
-    try:
-        text = _REFLEXIO_ENV_PATH.read_text()
-    except OSError:
-        return ""
-    for line in text.splitlines():
-        parsed = env_config.parse_env_line(line)
-        if parsed is None:
-            continue
-        parsed_key, value = parsed
-        if parsed_key == key:
-            return value
-    return ""
-
-
 def _semver_tuple(path: Path) -> tuple[int, int, int] | None:
     parts = path.name.split(".", 2)
     if len(parts) != 3:
@@ -328,6 +308,54 @@ def _prepare_codex_local_marketplace() -> Path:
     return marketplace_root
 
 
+def _command_is_publish_hook(command: object) -> bool:
+    if not isinstance(command, str):
+        return False
+    return bool(
+        re.search(
+            r"hook_entry\.sh\b[\s\"']+(?:codex|claude-code)[\s\"']+(?:stop|session-end)\b",
+            command,
+        )
+        or re.search(
+            r"codex-hook\.js\"?(?:\s+\"?hook\"?){1}\s+\"?(?:stop|session-end)\"?",
+            command,
+        )
+    )
+
+
+def _prune_publish_hooks_for_read_only(plugin_root: Path) -> None:
+    """Remove publish-to-reflexio hook commands from a copied/installed plugin."""
+    for hook_file in ("hooks.json", "codex-hooks.json"):
+        hook_path = plugin_root / "hooks" / hook_file
+        if not hook_path.is_file():
+            continue
+        parsed = json.loads(hook_path.read_text())
+        hooks_by_event = parsed.get("hooks")
+        if not isinstance(hooks_by_event, dict):
+            continue
+        for event in list(hooks_by_event):
+            blocks = []
+            for block in hooks_by_event.get(event) or []:
+                if not isinstance(block, dict):
+                    continue
+                kept_hooks = [
+                    hook
+                    for hook in block.get("hooks") or []
+                    if not _command_is_publish_hook(
+                        hook.get("command") if isinstance(hook, dict) else None
+                    )
+                ]
+                if kept_hooks:
+                    next_block = dict(block)
+                    next_block["hooks"] = kept_hooks
+                    blocks.append(next_block)
+            if blocks:
+                hooks_by_event[event] = blocks
+            else:
+                del hooks_by_event[event]
+        hook_path.write_text(json.dumps(parsed, indent=2) + "\n")
+
+
 def _run_codex(args: list[str]) -> subprocess.CompletedProcess[str]:
     """Invoke the ``codex`` CLI with a hard timeout.
 
@@ -797,11 +825,19 @@ def _register_codex_marketplace(root: Path) -> tuple[bool, str]:
 
 def _configure_reflexio_setup(args: argparse.Namespace) -> None:
     api_key = (getattr(args, "api_key", "") or "").strip()
+    read_only = getattr(args, "read_only", None)
     if api_key:
         reflexio_url = (
             getattr(args, "reflexio_url", "") or _MANAGED_REFLEXIO_URL
         ).strip()
         added = _seed_managed_reflexio_env(api_key=api_key, reflexio_url=reflexio_url)
+        if read_only:
+            added.extend(
+                env_config.set_env_vars(
+                    _REFLEXIO_ENV_PATH,
+                    {env_config.CLAUDE_SMART_READ_ONLY_ENV: "1"},
+                )
+            )
         changed = ", ".join(added) if added else "managed Reflexio settings"
         sys.stdout.write(
             f"Configured {_REFLEXIO_ENV_PATH} for managed Reflexio "
@@ -810,6 +846,13 @@ def _configure_reflexio_setup(args: argparse.Namespace) -> None:
         return
 
     added = _seed_reflexio_env()
+    if read_only:
+        added.extend(
+            env_config.set_env_vars(
+                _REFLEXIO_ENV_PATH,
+                {env_config.CLAUDE_SMART_READ_ONLY_ENV: "1"},
+            )
+        )
     if added:
         sys.stdout.write(f"Seeded {_REFLEXIO_ENV_PATH} with {', '.join(added)}.\n")
 
@@ -846,6 +889,11 @@ def cmd_install_codex(args: argparse.Namespace) -> int:
         )
         return 1
     marketplace_root = _prepare_codex_local_marketplace()
+    read_only = bool(getattr(args, "read_only", False))
+    if read_only:
+        _prune_publish_hooks_for_read_only(
+            marketplace_root / _CODEX_LOCAL_PLUGIN_PATH
+        )
 
     hooks_ok, hooks_msg = _enable_codex_plugin_hooks()
     if hooks_ok:
@@ -869,6 +917,10 @@ def cmd_install_codex(args: argparse.Namespace) -> int:
         )
         if installed:
             sys.stdout.write(f"{install_msg}.\n")
+            if read_only:
+                sys.stdout.write(
+                    "Installed read-only hook manifest; publish interactions hooks are disabled.\n"
+                )
             trusted, trust_msg = _trust_codex_plugin_hooks(Path.cwd())
             if not trusted:
                 # The app-server can race against the just-installed cache.
@@ -957,6 +1009,11 @@ def cmd_install(args: argparse.Namespace) -> int:
             "Fix the issue above, then run /claude-smart:restart or restart Claude Code to retry.\n"
         )
         return 1
+    if bool(getattr(args, "read_only", False)):
+        _prune_publish_hooks_for_read_only(Path(message))
+        sys.stdout.write(
+            "Installed read-only hook manifest; publish interactions hooks are disabled.\n"
+        )
     sys.stdout.write(f"Prepared claude-smart runtime at {message}.\n")
 
     sys.stdout.write(
@@ -1135,6 +1192,12 @@ def cmd_learn(args: argparse.Namespace) -> int:
         int: 0 on success or no-op (no active session, or nothing to
             publish), 1 if reflexio is unreachable.
     """
+    if env_config.env_truthy(env_config.CLAUDE_SMART_READ_ONLY_ENV):
+        sys.stdout.write(
+            "claude-smart is in read-only mode (CLAUDE_SMART_READ_ONLY=1); "
+            "skipping publish.\n"
+        )
+        return 0
     session_id = args.session or _latest_session_id()
     if not session_id:
         sys.stdout.write("No active claude-smart session buffer found.\n")
@@ -1779,6 +1842,13 @@ def _build_parser() -> argparse.ArgumentParser:
         default=_MANAGED_REFLEXIO_URL,
         help="Managed Reflexio URL used only when --api-key is provided",
     )
+    inst.add_argument(
+        "--read-only",
+        action="store_const",
+        const=True,
+        default=None,
+        help="Install without publish interactions hooks",
+    )
     inst.set_defaults(func=cmd_install)
 
     upd = sub.add_parser("update", help="Update claude-smart to the latest version")

package/plugin/src/claude_smart/env_config.py

@@ -9,7 +9,7 @@ REFLEXIO_ENV_PATH = Path.home() / ".reflexio" / ".env"
 MANAGED_REFLEXIO_URL = "https://www.reflexio.ai/"
 REFLEXIO_URL_ENV = "REFLEXIO_URL"
 REFLEXIO_API_KEY_ENV = "REFLEXIO_API_KEY"
-REFLEXIO_USER_ID_ENV = "REFLEXIO_USER_ID"
+CLAUDE_SMART_READ_ONLY_ENV = "CLAUDE_SMART_READ_ONLY"
 
 
 def parse_env_line(line: str) -> tuple[str, str] | None:
@@ -89,6 +89,11 @@ def set_env_vars(path: Path, values: dict[str, str]) -> list[str]:
     return added
 
 
+def env_truthy(name: str) -> bool:
+    """Return True when an environment flag is explicitly enabled."""
+    return os.environ.get(name, "").strip().lower() in {"1", "true", "yes", "on"}
+
+
 def mask_secret(value: str) -> str:
     """Return a display-safe API key preview."""
     if not value:

package/plugin/src/claude_smart/events/session_end.py

@@ -21,7 +21,7 @@ import time
 from pathlib import Path
 from typing import Any
 
-from claude_smart import ids, publish, state
+from claude_smart import env_config, ids, publish, state
 from claude_smart.events.stop import (
     _read_transcript_entries,
     _scan_transcript_for_assistant_text,
@@ -58,6 +58,9 @@ def handle(payload: dict[str, Any]) -> tuple[publish.PublishStatus, int] | None:
         project_id=project_id,
         transcript_path=payload.get("transcript_path"),
     )
+    if env_config.env_truthy(env_config.CLAUDE_SMART_READ_ONLY_ENV):
+        state.mark_all_published(session_id)
+        return ("nothing", 0)
 
     # ``force_extraction=True`` makes the reflexio server run the
     # extractor synchronously for this publish, so by the time the HTTP

package/plugin/src/claude_smart/events/stop.py

@@ -9,7 +9,7 @@ import time
 from pathlib import Path
 from typing import Any
 
-from claude_smart import cs_cite, ids, internal_call, publish, runtime, state
+from claude_smart import cs_cite, env_config, ids, internal_call, publish, runtime, state
 
 _LOGGER = logging.getLogger(__name__)
 
@@ -413,6 +413,9 @@ def handle(payload: dict[str, Any]) -> tuple[publish.PublishStatus, int] | None:
     if cited_items:
         record["cited_items"] = cited_items
     state.append(session_id, record)
+    if env_config.env_truthy(env_config.CLAUDE_SMART_READ_ONLY_ENV):
+        state.mark_all_published(session_id)
+        return ("nothing", 0)
     return publish.publish_unpublished(
         session_id=session_id,
         project_id=project_id,

package/plugin/src/claude_smart/hook.py

@@ -24,7 +24,7 @@ from contextlib import redirect_stdout
 from io import StringIO
 from typing import Any
 
-from claude_smart import hook_log, ids, runtime
+from claude_smart import env_config, hook_log, ids, runtime
 from claude_smart.internal_call import is_internal_invocation
 
 _LOGGER = logging.getLogger(__name__)
@@ -94,6 +94,7 @@ def main(argv: list[str] | None = None) -> int:
     argv = argv if argv is not None else sys.argv[1:]
     host, event = _parse_args(argv)
     runtime.set_host(host)
+    env_config.load_reflexio_env()
     if not event:
         _LOGGER.warning("hook dispatcher called with no event name")
         emit_continue()

package/plugin/src/claude_smart/ids.py

@@ -19,21 +19,16 @@ from __future__ import annotations
 import logging
 import os
 import subprocess  # noqa: S404 — git invocation with a fixed flag set.
-import uuid
 from pathlib import Path
 
-from claude_smart import env_config
-
 _LOGGER = logging.getLogger(__name__)
 
 
 def resolve_project_id(cwd: str | os.PathLike[str] | None = None) -> str:
     """Return a stable project identifier for the given working directory.
 
-    Managed Reflexio installs are user-scoped instead of project-scoped:
-    when ``REFLEXIO_API_KEY`` is configured, the persisted
-    ``REFLEXIO_USER_ID`` UUID is returned. Local installs without an API key
-    keep using the git/project name.
+    Local and managed/API-key installs both use the git/project name as
+    Reflexio's ``user_id``.
 
     Prefers the basename of the git toplevel (so worktrees, submodules, and
     `cd src/` all still map to the same project). Falls back to the cwd
@@ -45,10 +40,6 @@ def resolve_project_id(cwd: str | os.PathLike[str] | None = None) -> str:
     Returns:
         str: A non-empty identifier. Never raises.
     """
-    managed_user_id = _managed_user_id()
-    if managed_user_id:
-        return managed_user_id
-
     base = Path(cwd) if cwd is not None else Path.cwd()
     try:
         result = subprocess.run(  # noqa: S603, S607 — fixed argv, cwd is a Path.
@@ -66,23 +57,3 @@ def resolve_project_id(cwd: str | os.PathLike[str] | None = None) -> str:
     except (FileNotFoundError, subprocess.TimeoutExpired) as exc:
         _LOGGER.debug("git toplevel resolution failed: %s", exc)
     return base.name or "unknown-project"
-
-
-def _managed_user_id() -> str:
-    env_config.load_reflexio_env()
-    if not os.environ.get(env_config.REFLEXIO_API_KEY_ENV):
-        return ""
-    user_id = os.environ.get(env_config.REFLEXIO_USER_ID_ENV, "").strip()
-    if user_id:
-        return user_id
-
-    user_id = str(uuid.uuid4())
-    try:
-        env_config.set_env_vars(
-            env_config.REFLEXIO_ENV_PATH,
-            {env_config.REFLEXIO_USER_ID_ENV: user_id},
-        )
-    except OSError as exc:
-        _LOGGER.debug("could not persist managed Reflexio user id: %s", exc)
-    os.environ[env_config.REFLEXIO_USER_ID_ENV] = user_id
-    return user_id

package/plugin/src/claude_smart/publish.py

@@ -29,11 +29,10 @@ def publish_unpublished(
 
     Args:
         session_id (str): Claude Code session id, attached to each interaction.
-        project_id (str): Stable user-scope id resolved by ``ids``. Local mode
-            uses the project name; managed/API-key mode uses the persisted
-            ``REFLEXIO_USER_ID`` UUID. ``agent_version`` is hardcoded to
-            ``"claude-code"`` in the adapter so skills roll up
-            globally per agent rather than per project.
+        project_id (str): Stable user-scope id resolved by ``ids`` from the
+            project name. ``agent_version`` is hardcoded to ``"claude-code"``
+            in the adapter so skills roll up globally per agent rather than
+            per project.
         force_extraction (bool): Whether to ask reflexio to run extraction
             synchronously instead of queuing for the next sweep.
         override_learning_stall (bool): Whether to bypass a recorded

package/plugin/src/claude_smart/reflexio_adapter.py

@@ -250,9 +250,8 @@ class Adapter:
     def fetch_user_playbooks(self, *, project_id: str, top_k: int = 10) -> list[Any]:
         """Fetch CURRENT user playbooks for ``project_id``.
 
-        User playbooks are scoped by the resolved user id: local installs use
-        the project name, while managed installs use ``REFLEXIO_USER_ID``.
-        Filtering mirrors the publish path
+        User playbooks are scoped by the resolved project id. Filtering mirrors
+        the publish path
         (``publish_interaction(user_id=project_id, …)``).
 
         Args:

package/plugin/src/claude_smart/state.py

@@ -150,6 +150,15 @@ def append(session_id: str, record: dict[str, Any]) -> None:
         fh.write(line)
 
 
+def mark_all_published(session_id: str) -> None:
+    """Advance the watermark over every currently buffered record.
+
+    Read-only mode still needs to retire any already-buffered interactions so
+    they cannot publish later if learning is re-enabled.
+    """
+    append(session_id, {"published_up_to": len(read_all(session_id))})
+
+
 def read_all(session_id: str) -> list[dict[str, Any]]:
     """Return every record in the buffer as a list of dicts. Missing file → []."""
     path = session_path(session_id)

package/plugin/uv.lock

@@ -419,7 +419,7 @@ wheels = [
 
 [[package]]
 name = "claude-smart"
-version = "0.2.35"
+version = "0.2.36"
 source = { editable = "." }
 dependencies = [
     { name = "chromadb" },
@@ -1179,11 +1179,11 @@ wheels = [
 
 [[package]]
 name = "json-repair"
-version = "0.59.5"
+version = "0.59.10"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/b7/67/eba7fad54ff6f5cce6db4e01f596fc68156b5c7e864af0aa07ad48e880a1/json_repair-0.59.5.tar.gz", hash = "sha256:bb886ee054e99066be8a337b67a986b6a50d79be9a5ad37ae81966e698990784", size = 48632, upload-time = "2026-04-24T11:41:38.133Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/d3/7c/e95bb03068572146eba37e8175c760f470ea0a6097310e16bbf2bc6e6457/json_repair-0.59.10.tar.gz", hash = "sha256:2e4b85537c752d8a513ea28fdad891e5ede32c83de745366b97f648b8c34ede7", size = 49133, upload-time = "2026-05-14T06:41:51.222Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/3e/aa/0529dee460b745b93f6abc97b56b7527314c5167ba29ab7a5bd5c08de01f/json_repair-0.59.5-py3-none-any.whl", hash = "sha256:6869965bd1cc1aaaa04dc85865c26fbb76d9a2d83a20010f5eae2563b1567827", size = 47282, upload-time = "2026-04-24T11:41:36.653Z" },
+    { url = "https://files.pythonhosted.org/packages/ee/87/49b20c6b81493d55c311f711ed87319d0fbad8bd0bbfbe36e52103af36bd/json_repair-0.59.10-py3-none-any.whl", hash = "sha256:5468fa3eaadcc9b4a5646776bc4176e2fe5f374b5848a15f468cce3b60e3db0e", size = 47742, upload-time = "2026-05-14T06:41:49.812Z" },
 ]
 
 [[package]]
@@ -1711,11 +1711,14 @@ wheels = [
 
 [[package]]
 name = "nvidia-cublas"
-version = "13.1.0.3"
+version = "13.1.1.3"
 source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "nvidia-cuda-nvrtc" },
+]
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/e1/a5/fce49e2ae977e0ccc084e5adafceb4f0ac0c8333cb6863501618a7277f67/nvidia_cublas-13.1.0.3-py3-none-manylinux_2_27_aarch64.whl", hash = "sha256:c86fc7f7ae36d7528288c5d88098edcb7b02c633d262e7ddbb86b0ad91be5df2", size = 542851226, upload-time = "2025-10-09T08:59:04.818Z" },
-    { url = "https://files.pythonhosted.org/packages/e7/44/423ac00af4dd95a5aeb27207e2c0d9b7118702149bf4704c3ddb55bb7429/nvidia_cublas-13.1.0.3-py3-none-manylinux_2_27_x86_64.whl", hash = "sha256:ee8722c1f0145ab246bccb9e452153b5e0515fd094c3678df50b2a0888b8b171", size = 423133236, upload-time = "2025-10-09T08:59:32.536Z" },
+    { url = "https://files.pythonhosted.org/packages/a7/a1/0bd24ee8c8d03adac032fd2909426a00c88f8c57961b1277ded97f91119f/nvidia_cublas-13.1.1.3-py3-none-manylinux_2_27_aarch64.whl", hash = "sha256:b7a210458267ac818974c53038fbec2e969d5c99f305ab15c72522fa9f001dd5", size = 542848918, upload-time = "2026-04-08T18:46:22.985Z" },
+    { url = "https://files.pythonhosted.org/packages/3b/cd/154ca20c38269e05eff77c1464e6c1da89f50a6390b565e9d82e06bc11e1/nvidia_cublas-13.1.1.3-py3-none-manylinux_2_27_x86_64.whl", hash = "sha256:37936a16db8fe4ac1f065c2139360608a543a09275cb1a1af612e08cfa065436", size = 423138758, upload-time = "2026-04-08T18:46:58.655Z" },
 ]
 
 [[package]]
@@ -3016,7 +3019,7 @@ wheels = [
 
 [[package]]
 name = "sentence-transformers"
-version = "5.4.1"
+version = "5.5.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "huggingface-hub" },
@@ -3028,9 +3031,9 @@ dependencies = [
     { name = "transformers" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/4d/68/7f98c221940ce783b492ad6140384daf2e2918cd7175009d6a362c22b9ee/sentence_transformers-5.4.1.tar.gz", hash = "sha256:436bcb1182a0ff42a8fb2b1c43498a70d0a75b688d182f2cd0d1dd115af61ddc", size = 428910, upload-time = "2026-04-14T13:34:59.006Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/cf/d4/7ef93157485e978c016f49da05363c1e4e7237beb5343b64b5631101f0f1/sentence_transformers-5.5.1.tar.gz", hash = "sha256:02b7740dfc60bdbbcb6061625f5d97a5c1a4e2d3baac5f9391b912bb5eae2290", size = 445161, upload-time = "2026-05-20T07:37:44.465Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/c5/d9/3a9b6f2ccdedc9dc00fe37b2fc58f58f8efbff44565cf4bf39d8568bb13a/sentence_transformers-5.4.1-py3-none-any.whl", hash = "sha256:a6d640fc363849b63affb8e140e9d328feabab86f83d58ac3e16b1c28140b790", size = 571311, upload-time = "2026-04-14T13:34:57.731Z" },
+    { url = "https://files.pythonhosted.org/packages/bf/03/ee99a6b030e7a2e056547729f8a4709dd93e13d9c6f07590f74c395c4017/sentence_transformers-5.5.1-py3-none-any.whl", hash = "sha256:4fe11d433badc5282d32f7fc08bc714216b7a5aca426f9df77a45a554756deb7", size = 588887, upload-time = "2026-05-20T07:37:43.004Z" },
 ]
 
 [[package]]
@@ -3281,7 +3284,7 @@ wheels = [
 
 [[package]]
 name = "transformers"
-version = "5.7.0"
+version = "5.9.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "huggingface-hub" },
@@ -3294,9 +3297,9 @@ dependencies = [
     { name = "tqdm" },
     { name = "typer" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/4d/fe/7e84d20ac7d4d5d14bac2eab5976088d86342959fc2c0da54b4c2fc99856/transformers-5.7.0.tar.gz", hash = "sha256:a9d35cf39804e3456c1f9bc1a79ad5ffa878640a61f51f66f71c97f4b4e2ce10", size = 8401287, upload-time = "2026-04-28T18:30:09.75Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/51/58/7f843608f2e8421f86bb97060b54649be6239ec612b82bf9d41e65c26c00/transformers-5.9.0.tar.gz", hash = "sha256:25997cb8fa6053533171634b6162d7df54346530ec2aa9b42bb834e63668c842", size = 8642240, upload-time = "2026-05-20T14:50:49.278Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/60/60/86a9fe3037bec221094e2acb680219ad88b77006edba42fc0407a577ca93/transformers-5.7.0-py3-none-any.whl", hash = "sha256:869660cd8fc92badc041f5551bf755a42f4b9558c93341bf3fa3eeed7065079c", size = 10474236, upload-time = "2026-04-28T18:30:05.655Z" },
+    { url = "https://files.pythonhosted.org/packages/02/ca/2eaa5359f2ccb8c2e1656bc26305ad0cf438aa392ce4b29ae67a315c186e/transformers-5.9.0-py3-none-any.whl", hash = "sha256:1d19509bcff7028ebc6b277d71caa712e8353778463d38764237d14b42b52788", size = 10787648, upload-time = "2026-05-20T14:50:45.337Z" },
 ]
 
 [[package]]