context-mode 1.0.168 → 2.0.0-next.5

package/configs/zed/AGENTS.md

@@ -1,68 +0,0 @@
-# context-mode — MANDATORY routing rules
-
-context-mode MCP tools available. Rules protect context window from flooding. One unrouted command dumps 56 KB into context. Zed has NO hooks — these instructions are ONLY enforcement. Follow strictly.
-
-## Think in Code — MANDATORY
-
-Analyze/count/filter/compare/search/parse/transform data: **write code** via `mcp:context-mode:ctx_execute(language, code)`, `console.log()` only the answer. Do NOT read raw data into context. PROGRAM the analysis, not COMPUTE it. Pure JavaScript — Node.js built-ins only (`fs`, `path`, `child_process`). `try/catch`, handle `null`/`undefined`. One script replaces ten tool calls.
-
-## BLOCKED — do NOT use
-
-### curl / wget — FORBIDDEN
-Do NOT use `curl`/`wget` in shell. Dumps raw HTTP into context.
-Use: `mcp:context-mode:ctx_fetch_and_index(url, source)` or `mcp:context-mode:ctx_execute(language: "javascript", code: "const r = await fetch(...)")`
-
-### Inline HTTP — FORBIDDEN
-No `node -e "fetch(..."`, `python -c "requests.get(..."`. Bypasses sandbox.
-Use: `mcp:context-mode:ctx_execute(language, code)` — only stdout enters context
-
-### Direct web fetching — FORBIDDEN
-Raw HTML can exceed 100 KB.
-Use: `mcp:context-mode:ctx_fetch_and_index(url, source)` then `mcp:context-mode:ctx_search(queries)`
-
-## REDIRECTED — use sandbox
-
-### Shell (>20 lines output)
-Shell ONLY for: `git`, `mkdir`, `rm`, `mv`, `cd`, `ls`, `npm install`, `pip install`.
-Otherwise: `mcp:context-mode:ctx_batch_execute(commands, queries)` or `mcp:context-mode:ctx_execute(language: "javascript", code: "...")`. Use `language: "shell"` only when code matches the host shell.
-
-### File reading (for analysis)
-Reading to **edit** → reading correct. Reading to **analyze/explore/summarize** → `mcp:context-mode:ctx_execute_file(path, language, code)`.
-
-### grep / search (large results)
-Use `mcp:context-mode:ctx_execute(language: "javascript", code: "...")` in sandbox for portable filtering/counting.
-
-## Tool selection
-
-1. **GATHER**: `mcp:context-mode:ctx_batch_execute(commands, queries)` — runs all commands, auto-indexes, returns search. ONE call replaces 30+. Each command: `{label: "header", command: "..."}`.
-2. **FOLLOW-UP**: `mcp:context-mode:ctx_search(queries: ["q1", "q2", ...])` — all questions as array, ONE call.
-3. **PROCESSING**: `mcp:context-mode:ctx_execute(language, code)` | `mcp:context-mode:ctx_execute_file(path, language, code)` — sandbox, only stdout enters context.
-4. **WEB**: `mcp:context-mode:ctx_fetch_and_index(url, source)` then `mcp:context-mode:ctx_search(queries)` — raw HTML never enters context.
-5. **INDEX**: `mcp:context-mode:ctx_index(content, source)` — store in FTS5 for later search.
-
-## Parallel I/O batches
-
-For multi-URL fetches or multi-API calls, **always** include `concurrency: N` (1-8):
-
-- `mcp:context-mode:ctx_batch_execute(commands: [3+ network commands], concurrency: 5)` — gh, curl, dig, docker inspect, multi-region cloud queries
-- `mcp:context-mode:ctx_fetch_and_index(requests: [{url, source}, ...], concurrency: 5)` — multi-URL batch fetch
-
-**Use concurrency 4-8** for I/O-bound work (network calls, API queries). **Keep concurrency 1** for CPU-bound (npm test, build, lint) or commands sharing state (ports, lock files, same-repo writes).
-
-GitHub API rate-limit: cap at 4 for `gh` calls.
-
-## Output
-
-Write artifacts to FILES — never inline. Return: file path + 1-line description.
-Descriptive source labels for `search(source: "label")`.
-
-## ctx commands
-
-| Command | Action |
-|---------|--------|
-| `ctx stats` | Call `stats` MCP tool, display full output verbatim |
-| `ctx doctor` | Call `doctor` MCP tool, run returned shell command, display as checklist |
-| `ctx upgrade` | Call `upgrade` MCP tool, run returned shell command, display as checklist |
-| `ctx purge` | Call `mcp:context-mode:purge` MCP tool with confirm: true. Warns before wiping knowledge base. |
-
-After /clear or /compact: knowledge base and session stats preserved. Use `ctx purge` to start fresh.

package/hooks/antigravity-cli/payload.mjs

@@ -1,98 +0,0 @@
-/**
- * Shared Antigravity CLI (`agy`) hook payload normalization.
- *
- * The only refs-backed field is the working directory: the upstream hook example
- * (refs/platforms/antigravity-cli/examples/title/title.sh:10, README.md:11)
- * reads it from `workspace.current_dir` (an OBJECT field). We read that FIRST.
- *
- * The remaining fields below are empirically-derived/UNVERIFIED — no upstream
- * agy doc or example confirms this shape; they are best-effort assumptions:
- *   { conversationId, stepIdx, toolCall: { name, args }, error,
- *     workspacePaths: [..], transcriptPath, artifactDirectoryPath }
- *
- * The shared context-mode capture/routing code expects Claude-shaped fields, so
- * keep this mapping in one place for PreToolUse/PostToolUse/Stop.
- */
-
-export function parseAgyPayload(raw) {
-  try {
-    const cleaned = String(raw ?? "").replace(/^\uFEFF/, "").trim();
-    return cleaned ? JSON.parse(cleaned) : {};
-  } catch {
-    return {};
-  }
-}
-
-export function getAgyProjectDir(payload) {
-  // Refs-backed FIRST: workspace.current_dir is the only upstream-documented
-  // field (examples/title/title.sh:10). `workspacePaths[0]` is an unverified
-  // fallback kept defensively.
-  const workspace = payload?.workspace;
-  if (workspace && typeof workspace === "object" && typeof workspace.current_dir === "string" && workspace.current_dir) {
-    return workspace.current_dir;
-  }
-  return Array.isArray(payload?.workspacePaths) && payload.workspacePaths.length > 0
-    ? String(payload.workspacePaths[0])
-    : undefined;
-}
-
-// agy native tool-name -> canonical map. Keep in sync with the two other copies:
-// hooks/core/routing.mjs (TOOL_ALIASES) and src/session/extract.ts
-// (TOOL_NAME_NORMALIZE). Three layers normalize independently; adding a new agy
-// tool means updating all three (a single shared table is a follow-up cleanup).
-function normalizeAgyToolName(name) {
-  switch (name) {
-    case "run_command":
-      return "Bash";
-    case "view_file":
-      return "Read";
-    case "grep_search":
-      return "Grep";
-    case "list_dir":
-      return "LS";
-    case "web_fetch":
-    case "read_url_content":
-      return "WebFetch";
-    case "search_web":
-      return "WebSearch";
-    default:
-      return name;
-  }
-}
-
-function normalizeAgyToolInput(toolName, args) {
-  const input = args && typeof args === "object" ? { ...args } : {};
-  const canonical = normalizeAgyToolName(toolName);
-  if (canonical === "Bash" && typeof input.CommandLine === "string" && typeof input.command !== "string") {
-    input.command = input.CommandLine;
-  }
-  if (canonical === "WebFetch") {
-    const url = input.url ?? input.URL ?? input.Url;
-    if (typeof url === "string" && typeof input.url !== "string") input.url = url;
-  }
-  if (canonical === "Read") {
-    const filePath = input.file_path ?? input.path ?? input.AbsolutePath ?? input.FilePath;
-    if (typeof filePath === "string" && typeof input.file_path !== "string") input.file_path = filePath;
-  }
-  if (canonical === "Grep") {
-    const pattern = input.pattern ?? input.Pattern ?? input.query ?? input.Query;
-    if (typeof pattern === "string" && typeof input.pattern !== "string") input.pattern = pattern;
-  }
-  return input;
-}
-
-export function fromAgy(payload) {
-  const toolCall = payload?.toolCall ?? {};
-  const rawToolName = toolCall?.name ?? "";
-  return {
-    session_id: payload?.conversationId,
-    transcript_path: payload?.transcriptPath,
-    cwd: getAgyProjectDir(payload),
-    tool_name: normalizeAgyToolName(rawToolName),
-    tool_input: normalizeAgyToolInput(rawToolName, toolCall?.args),
-    tool_response: typeof payload?.error === "string" ? payload.error : "",
-    tool_output: {
-      isError: typeof payload?.error === "string" && payload.error.length > 0,
-    },
-  };
-}

package/hooks/antigravity-cli/posttooluse.mjs

@@ -1,138 +0,0 @@
-#!/usr/bin/env node
-import "../suppress-stderr.mjs";
-import "../ensure-deps.mjs";
-/**
- * Antigravity CLI (`agy`) PostToolUse hook — session event capture.
- *
- * agy fires hooks from a config at ~/.gemini/config/hooks.json (or via an
- * installed agy plugin's hooks/hooks.json) and pipes a payload whose shape
- * differs from the Claude-Code/Codex wire format this pipeline expects:
- *
- *   { conversationId, stepIdx, toolCall: { name, args }, error,
- *     workspacePaths: [..], transcriptPath, artifactDirectoryPath }
- *
- * The event name arrives as argv (set in hooks.json), NOT in the payload, and
- * the hook CWD is ~/.gemini/config — so the project dir MUST come from
- * workspacePaths[0], never process.cwd(). We translate agy's payload into the
- * Claude-shaped `input` the shared extractor/attribution pipeline consumes,
- * then reuse it unchanged. This hook is capture-only and emits no stdout.
- */
-
-import {
-  readStdin,
-  getSessionId,
-  getSessionDBPath,
-  getInputProjectDir,
-  ANTIGRAVITY_CLI_OPTS,
-} from "../session-helpers.mjs";
-import { createSessionLoaders, attributeAndInsertEvents } from "../session-loaders.mjs";
-import { readFileSync, unlinkSync } from "node:fs";
-import { dirname, resolve } from "node:path";
-import { tmpdir } from "node:os";
-import { fileURLToPath } from "node:url";
-import { fromAgy, parseAgyPayload } from "./payload.mjs";
-
-const HOOK_DIR = dirname(fileURLToPath(import.meta.url));
-const { loadSessionDB, loadExtract, loadProjectAttribution } = createSessionLoaders(HOOK_DIR);
-const OPTS = ANTIGRAVITY_CLI_OPTS;
-
-try {
-  const input = fromAgy(parseAgyPayload(await readStdin()));
-
-  if (input.tool_name) {
-    const projectDir = getInputProjectDir(input, OPTS);
-
-    const { extractEvents } = await loadExtract();
-    const { resolveProjectAttributions } = await loadProjectAttribution();
-    const { SessionDB } = await loadSessionDB();
-
-    const dbPath = getSessionDBPath(OPTS, projectDir);
-    const db = new SessionDB({ dbPath });
-    const sessionId = getSessionId(input, OPTS);
-
-    db.ensureSession(sessionId, projectDir);
-
-    const normalizedInput = {
-      tool_name: input.tool_name,
-      tool_input: input.tool_input ?? {},
-      tool_response: input.tool_response ?? "",
-      tool_output: input.tool_output,
-    };
-
-    const events = extractEvents(normalizedInput);
-    attributeAndInsertEvents(db, sessionId, events, input, projectDir, "PostToolUse", resolveProjectAttributions);
-
-    try {
-      const rejectedPath = resolve(tmpdir(), `context-mode-rejected-${sessionId}.txt`);
-      let rejectedData;
-      try {
-        rejectedData = readFileSync(rejectedPath, "utf-8").trim();
-        unlinkSync(rejectedPath);
-      } catch { /* no marker */ }
-      if (rejectedData) {
-        const colonIdx = rejectedData.indexOf(":");
-        const rejTool = colonIdx > 0 ? rejectedData.slice(0, colonIdx) : rejectedData;
-        const rejReason = colonIdx > 0 ? rejectedData.slice(colonIdx + 1) : "denied";
-        attributeAndInsertEvents(
-          db,
-          sessionId,
-          [{
-            type: "rejected",
-            category: "rejected-approach",
-            data: `${rejTool}: ${rejReason}`,
-            priority: 2,
-          }],
-          input,
-          projectDir,
-          "PreToolUse",
-          resolveProjectAttributions,
-        );
-      }
-    } catch { /* best-effort */ }
-
-    try {
-      const redirectPath = resolve(tmpdir(), `context-mode-redirect-${sessionId}.txt`);
-      let redirectData;
-      try {
-        redirectData = readFileSync(redirectPath, "utf-8").trim();
-        unlinkSync(redirectPath);
-      } catch { /* no marker */ }
-
-      if (redirectData) {
-        const i1 = redirectData.indexOf(":");
-        const i2 = i1 >= 0 ? redirectData.indexOf(":", i1 + 1) : -1;
-        const i3 = i2 >= 0 ? redirectData.indexOf(":", i2 + 1) : -1;
-        if (i1 > 0 && i2 > i1 && i3 > i2) {
-          const tool = redirectData.slice(0, i1);
-          const type = redirectData.slice(i1 + 1, i2);
-          const bytesRaw = redirectData.slice(i2 + 1, i3);
-          const summary = redirectData.slice(i3 + 1);
-          const bytesAvoided = Number.parseInt(bytesRaw, 10);
-          if (Number.isFinite(bytesAvoided) && bytesAvoided > 0) {
-            attributeAndInsertEvents(
-              db,
-              sessionId,
-              [{
-                type,
-                category: "redirect",
-                data: `${tool}: ${summary}`,
-                priority: 2,
-                bytes_avoided: bytesAvoided,
-              }],
-              input,
-              projectDir,
-              "PreToolUse",
-              resolveProjectAttributions,
-            );
-          }
-        }
-      }
-    } catch { /* best-effort */ }
-
-    db.close();
-  }
-} catch {
-  // Swallow errors — a hook must never fail the host agent.
-}
-
-// Capture-only hook: emit nothing.

package/hooks/antigravity-cli/pretooluse.mjs

@@ -1,78 +0,0 @@
-#!/usr/bin/env node
-import "../suppress-stderr.mjs";
-/**
- * Antigravity CLI (`agy`) PreToolUse hook — bounded routing enforcement.
- *
- * agy honors top-level `{ decision: "deny" | "ask", reason }` responses for
- * PreToolUse. It does not honor additionalContext, so mapped context guidance is
- * emitted as a deny-and-retry instruction. We register only tools with existing
- * core routing branches (Bash/Read/Grep/WebFetch), not LS/search_web.
- */
-
-import { dirname, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { readStdin } from "../core/stdin.mjs";
-import { routePreToolUse, initSecurity } from "../core/routing.mjs";
-import { formatDecision } from "../core/formatters.mjs";
-import { fromAgy, getAgyProjectDir, parseAgyPayload } from "./payload.mjs";
-import { getSessionId, ANTIGRAVITY_CLI_OPTS } from "../session-helpers.mjs";
-
-const __hookDir = dirname(fileURLToPath(import.meta.url));
-
-try {
-  await initSecurity(resolve(__hookDir, "..", "..", "build"));
-
-  const payload = parseAgyPayload(await readStdin());
-  const input = fromAgy(payload);
-
-  const decision = routePreToolUse(
-    String(input.tool_name ?? ""),
-    input.tool_input ?? {},
-    getAgyProjectDir(payload),
-    "antigravity-cli",
-    input.session_id,
-  );
-  const response = formatDecision("antigravity-cli", decision);
-
-  if (decision && input.tool_name) {
-    // Key markers on the SAME id posttooluse.mjs reads. getSessionId prefers the
-    // transcript UUID over conversationId, so deriving it any other way here
-    // (e.g. input.session_id) would miss the handoff whenever agy's transcript
-    // is <uuid>.jsonl and silently drop the rejected/redirect analytics.
-    const sessionId = getSessionId(input, ANTIGRAVITY_CLI_OPTS);
-    const formattedDeny = response && typeof response === "object" && response.decision === "deny";
-    if (formattedDeny || decision.action === "deny" || decision.action === "modify") {
-      try {
-        const reason = formattedDeny
-          ? (response.reason || "denied")
-          : decision.action === "deny"
-            ? (decision.reason || "denied")
-            : "Redirected to context-mode sandbox";
-        writeFileSync(
-          resolve(tmpdir(), `context-mode-rejected-${sessionId}.txt`),
-          `${input.tool_name}:${reason}`,
-          "utf-8",
-        );
-      } catch { /* best-effort */ }
-    }
-    if (decision.redirectMeta) {
-      try {
-        const meta = decision.redirectMeta;
-        const summary = String(meta.commandSummary ?? "").slice(0, 200);
-        writeFileSync(
-          resolve(tmpdir(), `context-mode-redirect-${sessionId}.txt`),
-          `${meta.tool}:${meta.type}:${meta.bytesAvoided}:${summary}`,
-          "utf-8",
-        );
-      } catch { /* best-effort */ }
-    }
-  }
-
-  if (response !== null) {
-    process.stdout.write(JSON.stringify(response) + "\n");
-  }
-} catch {
-  // Fail OPEN. Empty stdout + exit 0 lets agy continue the tool call.
-}

package/hooks/antigravity-cli/stop.mjs

@@ -1,58 +0,0 @@
-#!/usr/bin/env node
-import "../suppress-stderr.mjs";
-import "../ensure-deps.mjs";
-/**
- * Antigravity CLI (`agy`) Stop hook — session-end capture.
- *
- * agy's verified hook list exposes `Stop` ("when agent tries to exit") and no
- * separate SessionEnd hook, so this records a single session_end marker when
- * agy emits it. `agy -p` probes have not emitted Stop, so registration is
- * best-effort. The hook is capture-only and emits no stdout.
- */
-
-import {
-  readStdin,
-  getSessionId,
-  getSessionDBPath,
-  getInputProjectDir,
-  ANTIGRAVITY_CLI_OPTS,
-} from "../session-helpers.mjs";
-import { createSessionLoaders } from "../session-loaders.mjs";
-import { dirname } from "node:path";
-import { fileURLToPath } from "node:url";
-import { fromAgy, parseAgyPayload } from "./payload.mjs";
-
-const HOOK_DIR = dirname(fileURLToPath(import.meta.url));
-const { loadSessionDB } = createSessionLoaders(HOOK_DIR);
-const OPTS = ANTIGRAVITY_CLI_OPTS;
-
-try {
-  const payload = parseAgyPayload(await readStdin());
-  const input = fromAgy(payload);
-  const projectDir = getInputProjectDir(input, OPTS);
-
-  const { SessionDB } = await loadSessionDB();
-  const dbPath = getSessionDBPath(OPTS, projectDir);
-  const db = new SessionDB({ dbPath });
-  const sessionId = getSessionId(input, OPTS);
-
-  db.ensureSession(sessionId, projectDir);
-  db.insertEvent(
-    sessionId,
-    {
-      type: "session_end",
-      category: "session",
-      priority: 1,
-      data: JSON.stringify({
-        status: payload?.status ?? "stopped",
-        stepIdx: payload?.stepIdx ?? null,
-        transcriptPath: payload?.transcriptPath ?? null,
-      }),
-    },
-    "Stop",
-  );
-
-  db.close();
-} catch {
-  // A hook must never fail the host agent.
-}

package/hooks/auto-injection.mjs

@@ -1,102 +0,0 @@
-/**
- * Auto-injection for compaction events.
- *
- * Builds a prioritized, budget-capped injection block from session events.
- * Only fires on source === "compact" (wired in sessionstart.mjs).
- *
- * Priority order:
- *   P1: Role (behavioral_directive) — always first, never truncated
- *   P2: Decisions (rules) — latest 5, overflow reduces to 3
- *   P3: Skills (active_skills) — unique names, latest 10
- *   P4: Intent (session_mode) — latest
- *
- * Hard cap: 500 tokens (~2000 chars at 4 chars/token).
- */
-
-/**
- * Rough token estimate: ~4 chars per token.
- * @param {string} text
- * @returns {number}
- */
-export function estimateTokens(text) {
-  return Math.ceil(text.length / 4);
-}
-
-/**
- * Build auto-injection block from session events.
- * @param {Array<{category: string, data: string}>} events
- * @returns {string} XML block or empty string
- */
-export function buildAutoInjection(events) {
-  // Single O(N) pass instead of 4× O(N) Array.filter() loops. UserPromptSubmit
-  // fires this on every prompt; with N up to 100 events the prior implementation
-  // walked the array 4 times per prompt — wasteful on macOS, painful on Windows
-  // where V8 cold paths cost more.
-  let role;
-  const decisionsAll = [];
-  const skillsSeen = new Set();
-  const skillsOrdered = [];
-  let intent;
-  for (const e of events) {
-    switch (e.category) {
-      case "role":
-        role = e;
-        break;
-      case "decision":
-        decisionsAll.push(e);
-        break;
-      case "skill":
-        if (!skillsSeen.has(e.data)) {
-          skillsSeen.add(e.data);
-          skillsOrdered.push(e.data);
-        }
-        break;
-      case "intent":
-        intent = e;
-        break;
-    }
-  }
-
-  const parts = [];
-  let budget = 500; // hard cap in tokens
-
-  // P1: Role (always first, never truncated from output)
-  if (role) {
-    const text = `<behavioral_directive>\n${role.data.slice(0, 400)}\n</behavioral_directive>`;
-    parts.push(text);
-    budget -= estimateTokens(text);
-  }
-
-  // P2: Decisions (latest 5)
-  const decisions = decisionsAll.slice(-5);
-  if (decisions.length > 0) {
-    const lines = decisions.map(d => `- ${d.data.slice(0, 100)}`).join("\n");
-    const text = `<rules>\nFollow these decisions:\n${lines}\n</rules>`;
-    const cost = estimateTokens(text);
-    if (cost <= budget) {
-      parts.push(text);
-      budget -= cost;
-    } else {
-      // Overflow: reduce to 3 decisions
-      const reduced = decisions.slice(-3).map(d => `- ${d.data.slice(0, 100)}`).join("\n");
-      const fallback = `<rules>\nFollow these decisions:\n${reduced}\n</rules>`;
-      parts.push(fallback);
-      budget -= estimateTokens(fallback);
-    }
-  }
-
-  // P3: Skills (unique names, latest 10)
-  if (skillsOrdered.length > 0 && budget > 50) {
-    const text = `<active_skills>\nRe-invoke if relevant: ${skillsOrdered.slice(-10).join(", ")}\nTo reload: call the Skill tool with the skill name.\n</active_skills>`;
-    parts.push(text);
-    budget -= estimateTokens(text);
-  }
-
-  // P4: Intent (latest)
-  if (intent && budget > 20) {
-    parts.push(`<session_mode>${intent.data}</session_mode>`);
-  }
-
-  if (parts.length === 0) return "";
-  return `<session_state source="compaction">\n\n${parts.join("\n\n")}\n\n</session_state>`;
-}