create-egregore 0.21.0-runtime-mvp.19 → 0.21.0-runtime-mvp.20

package/assets/egregore-launcher.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// egregore-launcher-version: 0.21.0-runtime-mvp.19
+// egregore-launcher-version: 0.21.0-runtime-mvp.20
 //
 // egregore — launch and browse Egregore instances from your terminal.
 // Installed by create-egregore. Reads ~/.egregore/instances.json.
@@ -35,7 +35,7 @@ const crypto = require("node:crypto");
 const { spawnSync, spawn } = require("node:child_process");
 const readline = require("node:readline");
 
-const VERSION = "0.21.0-runtime-mvp.19";
+const VERSION = "0.21.0-runtime-mvp.20";
 const REGISTRY = path.join(os.homedir(), ".egregore", "instances.json");
 const DEFAULT_FILE = path.join(os.homedir(), ".egregore", "default");
 const UPDATE_CACHE_FILE = path.join(os.homedir(), ".egregore", "update-check.json");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-egregore",
-  "version": "0.21.0-runtime-mvp.19",
+  "version": "0.21.0-runtime-mvp.20",
   "description": "Set up Egregore for your team in one command — installs the egregore launcher and your choice of Claude Code, Codex, or Pi.",
   "license": "MIT",
   "bin": {

package/runtime/claude/.claude/hooks/memory-read-guard.sh

@@ -8,8 +8,8 @@
 # memory files right after a clean search), so this hook enforces it.
 #
 # Scope: a retrieval episode. The guard engages only while this session's
-# evidence packet is fresh (written within the last EGREGORE_RETRIEVAL_WINDOW_MIN
-# minutes, default 15). Outside an episode — editing a decision record, a skill
+# retrieval episode is fresh (a search or open within the last
+# EGREGORE_RETRIEVAL_WINDOW_MIN minutes, default 15). Outside an episode — editing a decision record, a skill
 # reading memory, ordinary work — memory reads are untouched. Edit and Write
 # are never the guard's business. Searching memory with grep passes.
 #
@@ -26,10 +26,14 @@ case "$TOOL" in Bash|Read) ;; *) exit 0 ;; esac
 # --- Retrieval episode: this session's packet exists and is fresh ---------
 SESSION=$(cat "$PROJECT_DIR/.egregore-session-id" 2>/dev/null | tr -cd 'A-Za-z0-9_.-')
 [ -n "$SESSION" ] || exit 0
-PACKET="${TMPDIR:-/tmp}/egregore-retrieval-context/$SESSION.context"
-[ -f "$PACKET" ] || exit 0
+# The packet itself is consumed by the PostToolUse hook the moment it is
+# attached, so the episode is recorded by a marker that bin/search.sh and the
+# PostToolUse hook both touch. The packet is checked too, for the window
+# between its write and its consumption.
+CTX_DIR="${TMPDIR:-/tmp}/egregore-retrieval-context"
 WINDOW_MIN="${EGREGORE_RETRIEVAL_WINDOW_MIN:-15}"
-[ -n "$(find "$PACKET" -mmin "-$WINDOW_MIN" 2>/dev/null)" ] || exit 0
+_fresh() { [ -f "$1" ] && [ -n "$(find "$1" -mmin "-$WINDOW_MIN" 2>/dev/null)" ]; }
+_fresh "$CTX_DIR/$SESSION.episode" || _fresh "$CTX_DIR/$SESSION.context" || exit 0
 
 _block() {
   printf 'Egregore: memory sources are opened through the private evidence packet, not printed into the transcript.\n' >&2

package/runtime/claude/.claude/hooks/retrieval-context.sh

@@ -39,5 +39,8 @@ jq -Rs '{
     )
   }
 }' "$PACKET"
+# The packet is one-shot, but the retrieval episode is not: leave a marker so
+# memory-read-guard.sh keeps routing raw memory reads through the opener.
+touch "${PACKET%.context}.episode" 2>/dev/null || true
 rm -f "$PACKET"
 exit 0

package/runtime/claude/bin/search.sh

@@ -283,6 +283,10 @@ cmd_query() {
     }
     umask 077
     printf '%s\n' "$out" > "$packet"
+    # The PostToolUse hook consumes the packet the moment it attaches it; the
+    # episode marker outlives that so the memory-read guard knows a retrieval
+    # just happened.
+    touch "${packet%.context}.episode" 2>/dev/null || true
     _banner_and_emit "$label" "$t0" "$emit" "$out" 1
   else
     _banner_and_emit "$label" "$t0" "$emit" "$out"
@@ -343,6 +347,7 @@ case "${1:-}" in
       umask 077
       if _runtime open "$OPEN_PATH" > "$packet" 2>"$packet.err"; then
         rm -f "$packet.err"
+        touch "${packet%.context}.episode" 2>/dev/null || true
         echo "↳ opened $OPEN_PATH · content attached privately"
       else
         cat "$packet.err" >&2 2>/dev/null

package/runtime/codex/bin/search.sh

@@ -283,6 +283,10 @@ cmd_query() {
     }
     umask 077
     printf '%s\n' "$out" > "$packet"
+    # The PostToolUse hook consumes the packet the moment it attaches it; the
+    # episode marker outlives that so the memory-read guard knows a retrieval
+    # just happened.
+    touch "${packet%.context}.episode" 2>/dev/null || true
     _banner_and_emit "$label" "$t0" "$emit" "$out" 1
   else
     _banner_and_emit "$label" "$t0" "$emit" "$out"
@@ -343,6 +347,7 @@ case "${1:-}" in
       umask 077
       if _runtime open "$OPEN_PATH" > "$packet" 2>"$packet.err"; then
         rm -f "$packet.err"
+        touch "${packet%.context}.episode" 2>/dev/null || true
         echo "↳ opened $OPEN_PATH · content attached privately"
       else
         cat "$packet.err" >&2 2>/dev/null

package/runtime/pi/bin/search.sh

@@ -283,6 +283,10 @@ cmd_query() {
     }
     umask 077
     printf '%s\n' "$out" > "$packet"
+    # The PostToolUse hook consumes the packet the moment it attaches it; the
+    # episode marker outlives that so the memory-read guard knows a retrieval
+    # just happened.
+    touch "${packet%.context}.episode" 2>/dev/null || true
     _banner_and_emit "$label" "$t0" "$emit" "$out" 1
   else
     _banner_and_emit "$label" "$t0" "$emit" "$out"
@@ -343,6 +347,7 @@ case "${1:-}" in
       umask 077
       if _runtime open "$OPEN_PATH" > "$packet" 2>"$packet.err"; then
         rm -f "$packet.err"
+        touch "${packet%.context}.episode" 2>/dev/null || true
         echo "↳ opened $OPEN_PATH · content attached privately"
       else
         cat "$packet.err" >&2 2>/dev/null

package/runtime/prime/bin/search.sh

@@ -283,6 +283,10 @@ cmd_query() {
     }
     umask 077
     printf '%s\n' "$out" > "$packet"
+    # The PostToolUse hook consumes the packet the moment it attaches it; the
+    # episode marker outlives that so the memory-read guard knows a retrieval
+    # just happened.
+    touch "${packet%.context}.episode" 2>/dev/null || true
     _banner_and_emit "$label" "$t0" "$emit" "$out" 1
   else
     _banner_and_emit "$label" "$t0" "$emit" "$out"
@@ -343,6 +347,7 @@ case "${1:-}" in
       umask 077
       if _runtime open "$OPEN_PATH" > "$packet" 2>"$packet.err"; then
         rm -f "$packet.err"
+        touch "${packet%.context}.episode" 2>/dev/null || true
         echo "↳ opened $OPEN_PATH · content attached privately"
       else
         cat "$packet.err" >&2 2>/dev/null