codemem 0.47.0-beta.2 → 0.47.0-beta.3

package/dist/index.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import { ACCOUNT_CONNECTION_MIGRATION_STATEMENTS, ACCOUNT_UNLINK_MIGRATION_STATEMENTS, AUTH_LINK_AUTHORITY_CUTOVER_SQL, ContextOnlyReplayError, CoordinatorAccountLinkError, DEDUP_KEY_BACKFILL_JOB, DEFAULT_COORDINATOR_DB_PATH, DedupKeyBackfillRunner, DeviceIdentityError, EXTRACTION_BENCHMARK_QUALITY_WEIGHTS, MUTATING_TOOL_NAMES, MemoryStore, ObserverClient, ObserverOutputError, ObserverOutputTransportError, OwnerProfileEnrollmentError, PROMPT_TRANSPORT_PROTOCOL_RANGE, REF_BACKFILL_JOB, RawEventIngestValidationError, RawEventSweeper, RefBackfillRunner, RemoteCoordinatorRequestError, SCOPE_BACKFILL_JOB, SESSION_CONTEXT_BACKFILL_JOB, SUMMARY_DEDUP_BACKFILL_JOB, ScopeBackfillRunner, SessionContextBackfillRunner, SummaryDedupBackfillRunner, SyncRetentionRunner, TRUSTED_HOOK_MAPPER_OPTIONS, VERSION, VectorModelMigrationRunner, aiBackfillStructuredContent, applyBootstrapSnapshot, applyDistillRule, arePromptTransportProtocolRangesCompatible, atomicReplaceConfigFile, backfillMemoryDedupKeys, backfillNarrativeFromBody, backfillTagsText, backfillVectors, buildBaseUrl, buildDirectPeerAuthHeaders, buildDistillReport, buildPiFlushSignalFromEvent, buildRawEventEnvelopeFromHook, buildRawEventEnvelopeFromPiEvent, buildTieredObserverSelection, buildViewerIdentityTarget, classifyPromptTransportFailure, clonePromptPackAttempt, collectOperationalStatus, compareMemoryRoleReports, connect, connectReadOnly, coordinatorAuthControllerReviewAction, coordinatorCreateGroupAction, coordinatorCreateInviteAction, coordinatorCreateScopeAction, coordinatorDisableDeviceAction, coordinatorEnrollDeviceAction, coordinatorGrantIdentityGroupAction, coordinatorGrantScopeMembershipAction, coordinatorImportInviteAction, coordinatorListBootstrapGrantsAction, coordinatorListDevicesAction, coordinatorListGroupsAction, coordinatorListJoinRequestsAction, coordinatorListScopeMembershipsAction, coordinatorListScopesAction, coordinatorQualifyOwnerAction, coordinatorRemoveDeviceAction, coordinatorRenameDeviceAction, coordinatorReviewInviteAction, coordinatorReviewJoinRequestAction, coordinatorRevokeBootstrapGrantAction, coordinatorRevokeDeviceAction, coordinatorRevokeScopeMembershipAction, coordinatorUpdateScopeAction, createBetterSqliteCoordinatorApp, deactivateLowSignalMemories, deactivateLowSignalObservations, dedupNearDuplicateMemories, describePiObserverStatus, detectInstallKind, draftDistillRule, enrollOwnerProfile, ensureDeviceIdentity, ensureSchemaBootstrapped, estimateExtractionModelCost, expandUserPath, exportMemories, extractApplyPatchPaths, extractionReplayObserverIdentity, fetchAllSnapshotPages, fingerprintPublicKey, flushRawEvents, formatHostPort, getAttributionDiagnostics, getCodememConfigPath, getExtractionBenchmarkProfile, getExtractionModelPricing, getInjectionEvalScenarioPack, getInjectionEvalScenarioPrompts, getMaintenanceJob, getMemoryArtifactReport, getMemoryRoleReport, getRawEventRelinkPlan, getRawEventRelinkReport, getRawEventStatus, getSemanticIndexDiagnostics, getSessionExtractionEval, getSessionExtractionEvalScenario, getUpdateStatus, getWorkspaceCodememConfigPath, hasPendingDedupKeyBackfill, hasPendingRefBackfill, hasPendingScopeBackfill, hasPendingSessionContextBackfill, hasPendingSummaryDedupBackfill, hasUnsyncedSharedMemoryChanges, importMemories, importPiSessions, ingestRawEvents, initDatabase, isAutomaticRecallMeasurement, isCoordinatorControllerAttestationReference, isEmbeddingDisabled, isExplicitUpdateInstallEligible, isReleaseVersionForChannel, judgeDistillReport, linkCoordinatorAccount, listMaintenanceJobs, listPerPeerScopeSyncState, listRetentionScopeIds, loadObserverConfig, loadPublicKey, loadRuntimeSigningPublicKey, loadSqliteVec, mdnsEnabled, mutateCodememConfigFile, normalizeCoordinatorAccountLinkOrigin, normalizePromptTransportProtocolRange, observerBaseUrlForProviderOverride, planReplicationOpsAgePrune, probeCodememViewerLiveness, probeCodememViewerLiveness as probeCodememViewerLiveness$1, probeRequiredNativeRuntime, projectMatchesFilter, promptPackArtifactFingerprint, pruneReplicationOpsUntilCaughtUp, rawEventsGate, readAccountLinkDevice, readCodememConfigFile, readCodememConfigFileAtPath, readCoordinatorAccountLinkStatus, readCoordinatorOwnerReviewLocalEvidence, readCoordinatorSyncConfig, readImportPayload, recordAutomaticRecall, recordPromptPackArtifacts, recordPromptPackTerminal, recordRetrievalSurface, renderUnifiedDiff, replayBatchExtraction, replayBatchExtractionWithTierRouting, requestJson, resolveCodememConfigPath, resolveComparablePath, resolveDbPath, resolveHookProject, resolveKeyPaths, resolvePiAgentDir, resolvePiObserverConfig, resolveProject, resolveProjectRoot, resolveRetrievalSession, retryRawEventFailures, runSyncDaemon, runSyncPass, scanSecretsRetroactive, schema, scoreExtractionBenchmarkOutput, searchPiSessions, setPeerProjectFilter, syncPassPreflight, tryUpdateRetrievalDelivery, updatePeerAddresses, upgradeCoordinatorAccountSchemaFile, upgradeCoordinatorAuthSchemaFile, vacuumDatabase, viewerUrl, writeCodememConfigFile } from "@codemem/core";
+import { ACCOUNT_CONNECTION_MIGRATION_STATEMENTS, ACCOUNT_UNLINK_MIGRATION_STATEMENTS, AUTH_LINK_AUTHORITY_CUTOVER_SQL, ContextOnlyReplayError, CoordinatorAccountLinkError, DEDUP_KEY_BACKFILL_JOB, DEFAULT_COORDINATOR_DB_PATH, DedupKeyBackfillRunner, DeviceIdentityError, EXTRACTION_BENCHMARK_QUALITY_WEIGHTS, FILE_CONTEXT_TRANSPORT_MAX_BYTES, FILE_CONTEXT_TRANSPORT_PROFILE, MUTATING_TOOL_NAMES, MemoryStore, ObserverClient, ObserverOutputError, ObserverOutputTransportError, OwnerProfileEnrollmentError, PROMPT_TRANSPORT_PROTOCOL_RANGE, REF_BACKFILL_JOB, RawEventIngestValidationError, RawEventSweeper, RefBackfillRunner, RemoteCoordinatorRequestError, SCOPE_BACKFILL_JOB, SESSION_CONTEXT_BACKFILL_JOB, SUMMARY_DEDUP_BACKFILL_JOB, ScopeBackfillRunner, SessionContextBackfillRunner, SummaryDedupBackfillRunner, SyncRetentionRunner, TRUSTED_HOOK_MAPPER_OPTIONS, VERSION, VectorModelMigrationRunner, aiBackfillStructuredContent, applyBootstrapSnapshot, applyDistillRule, arePromptTransportProtocolRangesCompatible, atomicReplaceConfigFile, backfillMemoryDedupKeys, backfillNarrativeFromBody, backfillTagsText, backfillVectors, buildBaseUrl, buildDirectPeerAuthHeaders, buildDistillReport, buildPiFlushSignalFromEvent, buildRawEventEnvelopeFromHook, buildRawEventEnvelopeFromPiEvent, buildTieredObserverSelection, buildViewerIdentityTarget, classifyPromptTransportFailure, clonePromptPackAttempt, collectOperationalStatus, compareMemoryRoleReports, connect, connectReadOnly, coordinatorAuthControllerReviewAction, coordinatorCreateGroupAction, coordinatorCreateInviteAction, coordinatorCreateScopeAction, coordinatorDisableDeviceAction, coordinatorEnrollDeviceAction, coordinatorGrantIdentityGroupAction, coordinatorGrantScopeMembershipAction, coordinatorImportInviteAction, coordinatorListBootstrapGrantsAction, coordinatorListDevicesAction, coordinatorListGroupsAction, coordinatorListJoinRequestsAction, coordinatorListScopeMembershipsAction, coordinatorListScopesAction, coordinatorQualifyOwnerAction, coordinatorRemoveDeviceAction, coordinatorRenameDeviceAction, coordinatorReviewInviteAction, coordinatorReviewJoinRequestAction, coordinatorRevokeBootstrapGrantAction, coordinatorRevokeDeviceAction, coordinatorRevokeScopeMembershipAction, coordinatorUpdateScopeAction, createBetterSqliteCoordinatorApp, createFileContextRunner, deactivateLowSignalMemories, deactivateLowSignalObservations, dedupNearDuplicateMemories, describePiObserverStatus, detectInstallKind, dispatchFileContextTransport, draftDistillRule, enrollOwnerProfile, ensureDeviceIdentity, ensureSchemaBootstrapped, estimateExtractionModelCost, expandUserPath, exportMemories, extractApplyPatchPaths, extractionReplayObserverIdentity, fetchAllSnapshotPages, fingerprintPublicKey, flushRawEvents, formatHostPort, getAttributionDiagnostics, getCodememConfigPath, getExtractionBenchmarkProfile, getExtractionModelPricing, getInjectionEvalScenarioPack, getInjectionEvalScenarioPrompts, getMaintenanceJob, getMemoryArtifactReport, getMemoryRoleReport, getRawEventRelinkPlan, getRawEventRelinkReport, getRawEventStatus, getSemanticIndexDiagnostics, getSessionExtractionEval, getSessionExtractionEvalScenario, getUpdateStatus, getWorkspaceCodememConfigPath, hasPendingDedupKeyBackfill, hasPendingRefBackfill, hasPendingScopeBackfill, hasPendingSessionContextBackfill, hasPendingSummaryDedupBackfill, hasUnsyncedSharedMemoryChanges, importMemories, importPiSessions, ingestRawEvents, initDatabase, isAutomaticRecallMeasurement, isCoordinatorControllerAttestationReference, isEmbeddingDisabled, isExplicitUpdateInstallEligible, isReleaseVersionForChannel, judgeDistillReport, linkCoordinatorAccount, listMaintenanceJobs, listPerPeerScopeSyncState, listRetentionScopeIds, loadObserverConfig, loadPublicKey, loadRuntimeSigningPublicKey, loadSqliteVec, mdnsEnabled, mutateCodememConfigFile, normalizeCoordinatorAccountLinkOrigin, normalizePromptTransportProtocolRange, observerBaseUrlForProviderOverride, parseFileContextTransportRequest, planReplicationOpsAgePrune, probeCodememViewerLiveness, probeCodememViewerLiveness as probeCodememViewerLiveness$1, probeRequiredNativeRuntime, projectMatchesFilter, promptPackArtifactFingerprint, pruneReplicationOpsUntilCaughtUp, rawEventsGate, readAccountLinkDevice, readCodememConfigFile, readCodememConfigFileAtPath, readCoordinatorAccountLinkStatus, readCoordinatorOwnerReviewLocalEvidence, readCoordinatorSyncConfig, readImportPayload, recordAutomaticRecall, recordPromptPackArtifacts, recordPromptPackTerminal, renderUnifiedDiff, replayBatchExtraction, replayBatchExtractionWithTierRouting, requestJson, resolveCodememConfigPath, resolveComparablePath, resolveDbPath, resolveHookProject, resolveKeyPaths, resolvePiAgentDir, resolvePiObserverConfig, resolveProject, resolveProjectRoot, retryRawEventFailures, runSyncDaemon, runSyncPass, scanSecretsRetroactive, schema, scoreExtractionBenchmarkOutput, searchPiSessions, setPeerProjectFilter, syncPassPreflight, tryUpdateRetrievalDelivery, updatePeerAddresses, upgradeCoordinatorAccountSchemaFile, upgradeCoordinatorAuthSchemaFile, vacuumDatabase, viewerUrl, writeCodememConfigFile } from "@codemem/core";
 import { Command, Option } from "commander";
 import omelette from "omelette";
-import { randomInt, randomUUID } from "node:crypto";
 import { appendFileSync, copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir, networkInterfaces } from "node:os";
 import { dirname, isAbsolute, join, posix, relative, resolve, sep, win32 } from "node:path";
-import { styleText } from "node:util";
+import { isDeepStrictEqual, styleText } from "node:util";
+import { randomInt, randomUUID } from "node:crypto";
 import * as p from "@clack/prompts";
 import { serve } from "@hono/node-server";
 import { execFileSync, spawn, spawnSync } from "node:child_process";
@@ -79,6 +79,54 @@ function emitJsonError(errorCode, message, exitCode = 1) {
 	process.exitCode = exitCode;
 }
 //#endregion
+//#region src/commands/claude-hook-file-context-transport.ts
+/** Internal packaged-hook transport. Normal CLI invocation keeps its original guards/output. */
+function runClaudeFileContextTransport(payload, opts) {
+	const parsed = parseFileContextTransportRequest(payload);
+	if (!parsed.success) throw new Error("invalid file-context transport request");
+	let request = parsed.data;
+	if ([
+		"1",
+		"true",
+		"yes",
+		"on"
+	].includes(String(process.env.CODEMEM_PLUGIN_IGNORE ?? "").trim().toLowerCase())) return {
+		ok: true,
+		attempt_id: request.attempt_id,
+		request_id: request.request_id,
+		result: { continue: true },
+		delivery_pending: false
+	};
+	const disabled = (value) => [
+		"0",
+		"false",
+		"off"
+	].includes(String(value ?? "").trim().toLowerCase());
+	if (disabled(process.env.CODEMEM_RETRIEVAL_LEDGER)) request = {
+		...request,
+		ledger_enabled: false
+	};
+	if (request.action === "lookup" && disabled(process.env.CODEMEM_FILE_CONTEXT)) {
+		const { relative_path: _path, project: _project, file_mtime_ms: _mtime, ...base } = request;
+		request = {
+			...base,
+			action: "skip",
+			reason: "file_context_disabled"
+		};
+	}
+	const dbPath = resolveDbPath(resolveDbOpt(opts));
+	if (resolve(dbPath) !== resolve(request.db_path) || !isDeepStrictEqual(buildViewerIdentityTarget(), request.identity_target)) throw new Error("file-context target mismatch");
+	const store = new MemoryStore(dbPath);
+	try {
+		if (!store.hasCurrentIdentity()) throw new Error("file-context identity changed");
+		return dispatchFileContextTransport(store, request);
+	} finally {
+		try {
+			store.close();
+		} catch {}
+	}
+}
+//#endregion
 //#region src/commands/claude-hook-plugin-log.ts
 /**
 * Append-only plugin event log used by `claude-hook-inject` and
@@ -130,24 +178,12 @@ function logHookEvent(message) {
 //#endregion
 //#region src/commands/claude-hook-file-context.ts
 var FILE_GATE_MIN_BYTES = 1500;
-var FETCH_LIMIT = 40;
-var DISPLAY_LIMIT = 15;
-var MTIME_FRESH_TOLERANCE_MS = 3e5;
 var SMALL_FILE_BYPASS_PATTERNS = [
 	/\.(json|jsonc|toml|ya?ml)$/i,
 	/\.env(\.|$)/i,
 	/(^|\/)dockerfile(\.|$)/i,
 	/\.config\.(js|ts|mjs|cjs|json)$/i
 ];
-var KIND_ICONS = {
-	decision: "⚖️",
-	bugfix: "🔴",
-	feature: "🟢",
-	refactor: "🔄",
-	discovery: "🔵",
-	change: "✅",
-	exploration: "🔬"
-};
 function emitJson$2(value) {
 	console.log(JSON.stringify(value));
 }
@@ -187,105 +223,6 @@ function statFile(absPath) {
 		return null;
 	}
 }
-function parseJsonArray(value) {
-	if (!value) return [];
-	try {
-		const parsed = JSON.parse(value);
-		if (!Array.isArray(parsed)) return [];
-		return parsed.filter((item) => typeof item === "string");
-	} catch {
-		return [];
-	}
-}
-function normalizePathForCompare(path) {
-	return path.replace(/\\/g, "/");
-}
-function scoreRow(row, normalizedTarget, idx) {
-	const filesModified = parseJsonArray(row.files_modified);
-	const inModified = filesModified.some((f) => normalizePathForCompare(f) === normalizedTarget);
-	let score = 0;
-	if (inModified) score += 2;
-	if (filesModified.length <= 1) score += 2;
-	else if (filesModified.length <= 3) score += 1;
-	return {
-		row,
-		score,
-		idx
-	};
-}
-function scoreAndDedupe(rows, targetPath, limit) {
-	const normalizedTarget = normalizePathForCompare(targetPath);
-	const scored = rows.map((row, idx) => scoreRow(row, normalizedTarget, idx));
-	const bestPerSession = /* @__PURE__ */ new Map();
-	for (const item of scored) {
-		const existing = bestPerSession.get(item.row.session_id);
-		if (!existing || item.score > existing.score || item.score === existing.score && item.idx < existing.idx) bestPerSession.set(item.row.session_id, item);
-	}
-	const deduped = Array.from(bestPerSession.values());
-	deduped.sort((a, b) => b.score - a.score || a.idx - b.idx);
-	return deduped.slice(0, limit).map((s) => s.row);
-}
-function compactTime(timeStr) {
-	return timeStr.toLowerCase().replace(" am", "a").replace(" pm", "p");
-}
-function formatTime(epochMs) {
-	return new Date(epochMs).toLocaleString("en-US", {
-		hour: "numeric",
-		minute: "2-digit",
-		hour12: true
-	});
-}
-function formatDate(epochMs) {
-	return new Date(epochMs).toLocaleString("en-US", {
-		month: "short",
-		day: "numeric",
-		year: "numeric"
-	});
-}
-function formatTimeline(rows, filePath, staleness) {
-	const safePath = filePath.replace(/\\/g, "\\\\").replace(/"/g, "\\\"").replace(/\n/g, "\\n");
-	const enriched = rows.map((row) => ({
-		row,
-		epochMs: Date.parse(row.created_at)
-	})).filter((item) => Number.isFinite(item.epochMs) && item.epochMs > 0);
-	const byDay = /* @__PURE__ */ new Map();
-	for (const item of enriched) {
-		const day = formatDate(item.epochMs);
-		const bucket = byDay.get(day);
-		if (bucket) bucket.push(item);
-		else byDay.set(day, [item]);
-	}
-	const sortedDays = Array.from(byDay.entries()).sort((a, b) => {
-		return Math.min(...a[1].map((i) => i.epochMs)) - Math.min(...b[1].map((i) => i.epochMs));
-	});
-	const ids = rows.map((r) => r.id);
-	const lines = [`This file (${safePath}) has prior codemem observations. The Read result below is unchanged.`, `- Fetch full bodies on demand: memory.get_observations([${ids.join(", ")}]).`];
-	if (staleness) {
-		const driftMinutes = Math.max(1, Math.round((staleness.fileMtimeMs - staleness.newestObservationMs) / 6e4));
-		lines.unshift(`Heads up: this file was modified ~${driftMinutes} min after the most recent observation below. Past entries may be partially stale — verify against the Read result before relying on them.`);
-	}
-	for (const [day, dayItems] of sortedDays) {
-		const chronological = [...dayItems].sort((a, b) => a.epochMs - b.epochMs);
-		lines.push(`### ${day}`);
-		for (const { row, epochMs } of chronological) {
-			const title = (row.title || "Untitled").replace(/[\r\n\t]+/g, " ").replace(/\s+/g, " ").trim().slice(0, 160);
-			const icon = KIND_ICONS[row.kind] ?? "❔";
-			const time = compactTime(formatTime(epochMs));
-			lines.push(`${row.id} ${time} ${icon} (${row.kind}) ${title}`);
-		}
-	}
-	return lines.join("\n");
-}
-function queryByFile(dbPath, relativePath, project, limit) {
-	const store = new MemoryStore(dbPath);
-	try {
-		const opts = { limit };
-		if (project) opts.project = project;
-		return store.findByFile(relativePath, opts);
-	} finally {
-		store.close();
-	}
-}
 function resolveProject$1(payload) {
 	const cwd = typeof payload.cwd === "string" ? payload.cwd : null;
 	return resolveHookProject(cwd, payload.project);
@@ -294,73 +231,45 @@ function sourceSessionId(payload) {
 	const value = payload.session_id;
 	return typeof value === "string" && value.trim() ? value.trim() : null;
 }
-async function buildClaudeFileContext(payload, opts, deps = {}) {
-	if (envTruthy$4(process.env.CODEMEM_PLUGIN_IGNORE)) return continueResult$2();
-	const filePath = extractFilePath(payload);
-	if (!filePath) return continueResult$2();
-	const startedAt = (deps.now ?? (() => /* @__PURE__ */ new Date()))();
-	const attemptId = (deps.createAttemptId ?? randomUUID)();
-	const resolveDb = deps.resolveDb ?? resolveDbPath;
+function fileContextStore(opts, deps) {
 	let resolvedDbPath = null;
 	let activeStore = null;
-	const getStore = () => {
-		resolvedDbPath ??= resolveDb(resolveDbOpt(opts));
-		activeStore ??= (deps.createStore ?? ((dbPath) => new MemoryStore(dbPath)))(resolvedDbPath);
-		return activeStore;
+	const dbPath = () => {
+		resolvedDbPath ??= (deps.resolveDb ?? resolveDbPath)(resolveDbOpt(opts));
+		return resolvedDbPath;
 	};
-	const finish = (result) => {
-		try {
-			activeStore?.close();
-		} catch {}
-		activeStore = null;
-		return result;
-	};
-	const record = (attemptInput) => {
-		if (!envNotDisabled$3(process.env.CODEMEM_RETRIEVAL_LEDGER || "1")) return;
-		try {
-			resolvedDbPath ??= resolveDb(resolveDbOpt(opts));
-			const completedAt = (deps.now ?? (() => /* @__PURE__ */ new Date()))();
-			const ledgerInput = {
-				...attemptInput,
-				attemptId,
-				surface: "file_context",
-				trigger: "automatic",
-				startedAt: startedAt.toISOString(),
-				completedAt: completedAt.toISOString(),
-				latencyMs: Math.max(0, completedAt.getTime() - startedAt.getTime()),
-				recorderVersion: "claude-file-context-v1",
-				source: "claude",
-				streamId: sourceSessionId(payload),
-				sourceSessionId: sourceSessionId(payload),
-				mode: "claude_pre_tool_use_read"
-			};
-			if (deps.recordAttempt) deps.recordAttempt(resolvedDbPath, ledgerInput);
-			else {
-				const store = getStore();
-				recordRetrievalSurface(store.db, {
-					...ledgerInput,
-					sessionId: resolveRetrievalSession(store.db, "claude", ledgerInput.sourceSessionId)
-				});
-			}
-		} catch {}
-	};
-	const updateDelivery = (status) => {
-		if (!envNotDisabled$3(process.env.CODEMEM_RETRIEVAL_LEDGER || "1")) return;
-		try {
-			resolvedDbPath ??= resolveDb(resolveDbOpt(opts));
-			if (deps.updateDelivery) deps.updateDelivery(resolvedDbPath, attemptId, status);
-			else tryUpdateRetrievalDelivery(getStore().db, attemptId, status);
-		} catch {}
-	};
-	if (!envNotDisabled$3(process.env.CODEMEM_FILE_CONTEXT || "1")) {
-		record({
-			retrievalStatus: "skipped",
-			deliveryStatus: "not_attempted",
-			failureCode: "file_context_disabled",
-			failureStage: "configuration"
-		});
-		return finish(continueResult$2());
-	}
+	return {
+		dbPath,
+		getStore: () => {
+			activeStore ??= (deps.createStore ?? ((path) => new MemoryStore(path)))(dbPath());
+			return activeStore;
+		},
+		finish: (result) => {
+			try {
+				activeStore?.close();
+			} catch {}
+			activeStore = null;
+			return result;
+		}
+	};
+}
+function fileContextRunner(payload, store, deps) {
+	const findByFile = deps.queryByFile;
+	const recordAttempt = deps.recordAttempt;
+	const updateDelivery = deps.updateDelivery;
+	return createFileContextRunner({
+		getStore: store.getStore,
+		sourceSessionId: sourceSessionId(payload),
+		ledgerEnabled: () => envNotDisabled$3(process.env.CODEMEM_RETRIEVAL_LEDGER || "1"),
+		now: deps.now,
+		createAttemptId: deps.createAttemptId,
+		log: logHookEvent,
+		...findByFile ? { findByFile: (path, options) => findByFile(store.dbPath(), path, options.project ?? null, options.limit) } : {},
+		...recordAttempt ? { recordAttempt: (input) => recordAttempt(store.dbPath(), input) } : {},
+		...updateDelivery ? { updateDelivery: (attemptId, status) => updateDelivery(store.dbPath(), attemptId, status) } : {}
+	});
+}
+function fileContextPath(filePath, payload) {
 	const cwd = typeof payload.cwd === "string" && payload.cwd.trim() ? payload.cwd : process.cwd();
 	const expandedPath = expandHome$2(filePath);
 	const absolutePath = isAbsolute(expandedPath) ? expandedPath : resolve(cwd, expandedPath);
@@ -368,133 +277,78 @@ async function buildClaudeFileContext(payload, opts, deps = {}) {
 	const escapesCwd = relativePath === ".." || relativePath.startsWith("../") || isAbsolute(relativePath);
 	if (!relativePath || escapesCwd) {
 		logHookEvent(`file_context.skip reason=outside_cwd path=${JSON.stringify(filePath)} cwd=${JSON.stringify(cwd)}`);
-		record({
-			retrievalStatus: "skipped",
-			deliveryStatus: "not_attempted",
-			failureCode: "outside_cwd",
-			failureStage: "path_validation"
-		});
-		return finish(continueResult$2());
+		return null;
 	}
+	return {
+		absolutePath,
+		relativePath
+	};
+}
+async function buildClaudeFileContext(payload, opts, deps = {}) {
+	if (envTruthy$4(process.env.CODEMEM_PLUGIN_IGNORE)) return continueResult$2();
+	const filePath = extractFilePath(payload);
+	if (!filePath) return continueResult$2();
+	const store = fileContextStore(opts, deps);
+	const runner = fileContextRunner(payload, store, deps);
+	if (!envNotDisabled$3(process.env.CODEMEM_FILE_CONTEXT || "1")) return store.finish(runner.skip({ reason: "file_context_disabled" }));
+	const path = fileContextPath(filePath, payload);
+	if (!path) return store.finish(runner.skip({ reason: "outside_cwd" }));
+	const { absolutePath, relativePath } = path;
 	const minBytes = Number.parseInt(process.env.CODEMEM_FILE_CONTEXT_MIN_BYTES ?? `${FILE_GATE_MIN_BYTES}`, 10);
 	const minBytesEffective = Number.isFinite(minBytes) && minBytes >= 0 ? minBytes : FILE_GATE_MIN_BYTES;
 	const stat = (deps.statFile ?? statFile)(absolutePath);
 	if (!stat) {
 		logHookEvent(`file_context.skip reason=stat_failed path=${JSON.stringify(relativePath)}`);
-		record({
-			retrievalStatus: "skipped",
-			deliveryStatus: "not_attempted",
-			failureCode: "stat_failed",
-			failureStage: "file_access",
+		return store.finish(runner.skip({
+			reason: "stat_failed",
 			repositoryPaths: [relativePath]
-		});
-		return finish(continueResult$2());
+		}));
 	}
 	const bypassSizeGate = SMALL_FILE_BYPASS_PATTERNS.some((p) => p.test(relativePath));
 	if (stat.sizeBytes < minBytesEffective && !bypassSizeGate) {
 		logHookEvent(`file_context.skip reason=below_size_gate path=${JSON.stringify(relativePath)} size=${stat.sizeBytes} gate=${minBytesEffective}`);
-		record({
-			retrievalStatus: "skipped",
-			deliveryStatus: "not_attempted",
-			failureCode: "below_size_gate",
-			failureStage: "size_gate",
-			repositoryPaths: [relativePath]
-		});
-		return finish(continueResult$2());
-	}
-	const project = resolveProject$1(payload);
-	const queryFn = deps.queryByFile ?? queryByFile;
-	let rows = [];
-	try {
-		resolvedDbPath ??= resolveDb(resolveDbOpt(opts));
-		rows = deps.queryByFile ? queryFn(resolvedDbPath, relativePath, project, FETCH_LIMIT) : getStore().findByFile(relativePath, {
-			limit: FETCH_LIMIT,
-			...project ? { project } : {}
-		});
-	} catch (err) {
-		logHookEvent(`codemem claude-hook-file-context query failed: ${err instanceof Error ? err.message : String(err)}`);
-		record({
-			retrievalStatus: "failed",
-			deliveryStatus: "not_attempted",
-			failureCode: "query_failed",
-			failureStage: "retrieval",
-			project,
-			filters: project ? { project } : void 0,
+		return store.finish(runner.skip({
+			reason: "below_size_gate",
 			repositoryPaths: [relativePath]
-		});
-		return finish(continueResult$2());
-	}
-	if (rows.length === 0) {
-		logHookEvent(`file_context.skip reason=no_observations path=${JSON.stringify(relativePath)} project=${JSON.stringify(project ?? "")}`);
-		record({
-			retrievalStatus: "no_results",
-			deliveryStatus: "not_attempted",
-			project,
-			filters: project ? { project } : void 0,
-			repositoryPaths: [relativePath]
-		});
-		return finish(continueResult$2());
-	}
-	const top = scoreAndDedupe(rows, relativePath, DISPLAY_LIMIT);
-	if (top.length === 0) {
-		logHookEvent(`file_context.skip reason=no_top_after_dedupe path=${JSON.stringify(relativePath)} candidates=${rows.length}`);
-		record({
-			retrievalStatus: "succeeded",
-			deliveryStatus: "not_attempted",
-			candidateIds: rows.map((row) => row.id),
-			candidateCount: rows.length,
-			selectedIds: [],
-			failureCode: "no_top_after_dedupe",
-			failureStage: "selection",
-			project,
-			filters: project ? { project } : void 0,
-			repositoryPaths: [relativePath]
-		});
-		return finish(continueResult$2());
-	}
-	let staleness = null;
-	if (stat.mtimeMs > 0) {
-		const newestObservationMs = top.reduce((max, row) => {
-			const epoch = Date.parse(row.created_at);
-			return Number.isFinite(epoch) && epoch > max ? epoch : max;
-		}, 0);
-		if (newestObservationMs > 0 && stat.mtimeMs > newestObservationMs + MTIME_FRESH_TOLERANCE_MS) staleness = {
-			fileMtimeMs: stat.mtimeMs,
-			newestObservationMs
-		};
-	}
-	record({
-		retrievalStatus: "succeeded",
-		deliveryStatus: "not_attempted",
-		candidateIds: rows.map((row) => row.id),
-		candidateCount: rows.length,
-		selectedIds: top.map((row) => row.id),
-		project,
-		filters: project ? { project } : void 0,
-		repositoryPaths: [relativePath]
-	});
-	let timeline;
-	try {
-		timeline = formatTimeline(top, relativePath, staleness);
-	} catch {
-		updateDelivery("failed");
-		return finish(continueResult$2());
+		}));
 	}
-	logHookEvent(`file_context.ok path=${JSON.stringify(relativePath)} candidates=${rows.length} surfaced=${top.length} project=${JSON.stringify(project ?? "")} stale=${staleness ? "true" : "false"}`);
-	updateDelivery("handed_off");
-	return finish({ hookSpecificOutput: {
-		hookEventName: "PreToolUse",
-		permissionDecision: "allow",
-		additionalContext: timeline
-	} });
+	return store.finish(runner.run({
+		relativePath,
+		project: resolveProject$1(payload),
+		fileMtimeMs: stat.mtimeMs
+	}));
 }
 var claudeHookFileContextCmd = new Command("claude-hook-file-context").configureHelp(helpStyle).description("Return Claude PreToolUse:Read additionalContext from per-file observation timeline");
 addDbOption(claudeHookFileContextCmd);
+claudeHookFileContextCmd.addOption(new Option("--transport-profile").hideHelp());
+claudeHookFileContextCmd.addOption(new Option("--transport").hideHelp());
 var claudeHookFileContextCommand = claudeHookFileContextCmd.action(async (opts) => {
+	if (opts.transportProfile) {
+		process.stdout.write(`${JSON.stringify(FILE_CONTEXT_TRANSPORT_PROFILE)}\n`);
+		return;
+	}
 	let raw = "";
-	for await (const chunk of process.stdin) raw += String(chunk);
+	for await (const chunk of process.stdin) {
+		raw += String(chunk);
+		if (opts.transport && Buffer.byteLength(raw) > FILE_CONTEXT_TRANSPORT_MAX_BYTES) {
+			emitError$2({
+				error: "parse_error",
+				message: "transport payload too large"
+			});
+			process.exitCode = 1;
+			return;
+		}
+	}
 	const trimmed = raw.trim();
 	if (!trimmed) {
+		if (opts.transport) {
+			process.stdout.write(`${JSON.stringify({
+				error: "parse_error",
+				message: "transport request required"
+			})}\n`);
+			process.exitCode = 1;
+			return;
+		}
 		emitJson$2(continueResult$2());
 		return;
 	}
@@ -518,8 +372,23 @@ var claudeHookFileContextCommand = claudeHookFileContextCmd.action(async (opts)
 		process.exitCode = 1;
 		return;
 	}
-	emitJson$2(await buildClaudeFileContext(payload, opts));
+	await emitFileContext(payload, opts);
 });
+async function emitFileContext(payload, opts) {
+	try {
+		if (opts.transport) {
+			process.stdout.write(`${JSON.stringify(runClaudeFileContextTransport(payload, opts))}\n`);
+			return;
+		}
+		emitJson$2(await buildClaudeFileContext(payload, opts));
+	} catch {
+		emitError$2({
+			error: "file_context_failed",
+			message: "file context unavailable"
+		});
+		process.exitCode = 1;
+	}
+}
 //#endregion
 //#region src/commands/hook-ingest-live-spool.ts
 function spoolLiveHookPayload(dir, payload, logPrefix) {