eminiar 0.9.0 → 0.9.1

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "eminiar",
   "displayName": "Eminiar",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Local-first context, memory and knowledge graph for Claude Code: sandboxed execution, FTS5 + vector search, session continuity, code graph.",
   "author": {
     "name": "Ryan Dick"

package/dist/cli.js

@@ -30645,10 +30645,10 @@ async function search(db, query, opts = {}) {
     }
   }
   const fused = rrf(lists);
-  const top = [...fused.entries()].sort((a, b) => b[1] - a[1]).slice(0, Math.max(limit * 4, 20));
-  const chunks = db.getChunks(top.map(([id]) => id));
+  const top2 = [...fused.entries()].sort((a, b) => b[1] - a[1]).slice(0, Math.max(limit * 4, 20));
+  const chunks = db.getChunks(top2.map(([id]) => id));
   const byId = new Map(chunks.map((c) => [c.id, c]));
-  const scored = top.map(([id, score]) => ({ chunk: byId.get(id), score, matched: [] })).filter((s) => !!s.chunk);
+  const scored = top2.map(([id, score]) => ({ chunk: byId.get(id), score, matched: [] })).filter((s) => !!s.chunk);
   const allTerms = [...terms, ...parsed.phrases];
   const ranked = rerank(scored, allTerms);
   const seenHash = /* @__PURE__ */ new Set();
@@ -30866,10 +30866,10 @@ function cycles(nodes, edges) {
     stack.push(start);
     onStack.add(start);
     while (work.length) {
-      const top = work[work.length - 1];
-      const succ = adj.get(top.n);
-      if (top.i < succ.length) {
-        const m = succ[top.i++];
+      const top2 = work[work.length - 1];
+      const succ = adj.get(top2.n);
+      if (top2.i < succ.length) {
+        const m = succ[top2.i++];
         if (!idx.has(m)) {
           idx.set(m, counter);
           low.set(m, counter);
@@ -30878,20 +30878,20 @@ function cycles(nodes, edges) {
           onStack.add(m);
           work.push({ n: m, i: 0 });
         } else if (onStack.has(m)) {
-          low.set(top.n, Math.min(low.get(top.n), idx.get(m)));
+          low.set(top2.n, Math.min(low.get(top2.n), idx.get(m)));
         }
       } else {
         work.pop();
         const parent = work[work.length - 1];
-        if (parent) low.set(parent.n, Math.min(low.get(parent.n), low.get(top.n)));
-        if (low.get(top.n) === idx.get(top.n)) {
+        if (parent) low.set(parent.n, Math.min(low.get(parent.n), low.get(top2.n)));
+        if (low.get(top2.n) === idx.get(top2.n)) {
           const comp = [];
           let m;
           do {
             m = stack.pop();
             onStack.delete(m);
             comp.push(m);
-          } while (m !== top.n);
+          } while (m !== top2.n);
           if (comp.length > 1) out.push(comp.sort());
         }
       }
@@ -31046,8 +31046,8 @@ function computeMetrics(db) {
 function topFolder(paths2) {
   const counts = /* @__PURE__ */ new Map();
   for (const p of paths2) {
-    const top = p.includes("/") ? `${p.split("/")[0]}/` : "(root)";
-    counts.set(top, (counts.get(top) ?? 0) + 1);
+    const top2 = p.includes("/") ? `${p.split("/")[0]}/` : "(root)";
+    counts.set(top2, (counts.get(top2) ?? 0) + 1);
   }
   return [...counts.entries()].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]))[0]?.[0] ?? "";
 }
@@ -31560,7 +31560,7 @@ function chunkBySymbols(code, rel, symbols, opts = DEFAULT_CHUNKER) {
   const valid = symbols.filter(
     (s) => s.startLine >= 1 && s.endLine >= s.startLine && s.endLine <= total
   );
-  const top = valid.filter((s) => depthOf(s.name) === 1).sort((a, b) => a.startLine - b.startLine || b.endLine - a.endLine);
+  const top2 = valid.filter((s) => depthOf(s.name) === 1).sort((a, b) => a.startLine - b.startLine || b.endLine - a.endLine);
   const membersOf = (parent) => valid.filter(
     (s) => depthOf(s.name) === depthOf(parent.name) + 1 && s.name.startsWith(`${parent.name}.`) && s.startLine >= parent.startLine && s.endLine <= parent.endLine
   ).sort((a, b) => a.startLine - b.startLine);
@@ -31589,7 +31589,7 @@ function chunkBySymbols(code, rel, symbols, opts = DEFAULT_CHUNKER) {
     }
     tiny = [];
   };
-  for (const sym of top) {
+  for (const sym of top2) {
     if (sym.startLine < cursor) continue;
     const a = extendUp(sym.startLine, cursor - 1);
     const b = sym.endLine;
@@ -32691,11 +32691,11 @@ async function parsePhp(root, rel, code) {
       if (file3) {
         if (file3 !== rel) addImport(fileId(file3), label, fqn, line, 0.95);
       } else {
-        const top = fqn.split("\\")[0];
-        importedPkgs.add(top);
-        if (!imports.has(pkgId(top)))
-          nodes.push({ id: pkgId(top), kind: "package", name: top, source: "tree-sitter" });
-        addImport(pkgId(top), label, fqn, line, 1);
+        const top2 = fqn.split("\\")[0];
+        importedPkgs.add(top2);
+        if (!imports.has(pkgId(top2)))
+          nodes.push({ id: pkgId(top2), kind: "package", name: top2, source: "tree-sitter" });
+        addImport(pkgId(top2), label, fqn, line, 1);
       }
       if (kind) scope.set(local, { id: pkgId(fqn.split("\\")[0]), confidence: 0.6 });
       else classUses.set(local, fqn);
@@ -32802,8 +32802,8 @@ async function parsePhp(root, rel, code) {
         return;
     }
   }
-  function insideDecl(n, top) {
-    for (let cur = n.parent; cur && cur.id !== top.id; cur = cur.parent) {
+  function insideDecl(n, top2) {
+    for (let cur = n.parent; cur && cur.id !== top2.id; cur = cur.parent) {
       if (cur.type === "function_definition" || cur.type === "method_declaration") return true;
       if (CLASS_KINDS[cur.type]) return true;
     }
@@ -35950,8 +35950,8 @@ function gitignoreHint(ctx) {
   const file3 = join22(ctx.root, ".gitignore");
   if (!existsSync17(file3)) return void 0;
   const dir = memoriesRel(ctx);
-  const top = dir.split("/")[0];
-  const ignored = readFileSync16(file3, "utf8").split(/\r?\n/).map((l) => l.trim().replace(/^\//, "").replace(/\/$/, "")).some((l) => l === top || l === dir || l === `${top}/**` || l === `${dir}/**`);
+  const top2 = dir.split("/")[0];
+  const ignored = readFileSync16(file3, "utf8").split(/\r?\n/).map((l) => l.trim().replace(/^\//, "").replace(/\/$/, "")).some((l) => l === top2 || l === dir || l === `${top2}/**` || l === `${dir}/**`);
   return ignored ? `note: .gitignore ignores ${dir}, so memories stay local to this machine (remove that line to share them with the team)` : void 0;
 }
 var import_fast_glob3, MEMORY_KINDS, SEGMENT, NAME_RE, MEM_LINK_RE, PATH_RE, hinted;
@@ -36614,11 +36614,11 @@ function folderRows(files, languages2) {
     score: Number((a.score / a.files).toFixed(3)),
     languages: a.langs
   }));
-  const top = new Map(rows.filter((r) => r.path.split("/").length <= 2).map((r) => [r.path, r]));
+  const top2 = new Map(rows.filter((r) => r.path.split("/").length <= 2).map((r) => [r.path, r]));
   return rows.filter((r) => {
     const segs = r.path.split("/");
     if (segs.length <= 2) return true;
-    return (top.get(`${segs[0]}/`)?.files ?? 0) >= 12;
+    return (top2.get(`${segs[0]}/`)?.files ?? 0) >= 12;
   }).sort((a, b) => a.path.localeCompare(b.path));
 }
 function entryPoints(root, db) {
@@ -42255,6 +42255,63 @@ var init_recall = __esm({
   }
 });
 
+// src/session/routing-stats.ts
+function routingStats(events) {
+  const byTool = {};
+  let decisions = 0;
+  for (const e of events) {
+    if (e.category !== ROUTING_CATEGORY) continue;
+    let p;
+    try {
+      p = JSON.parse(e.payload);
+    } catch {
+      continue;
+    }
+    if (!p.tool) continue;
+    decisions++;
+    let row = byTool[p.tool];
+    if (!row) {
+      row = { calls: 0, denied: 0, annotated: 0, targets: {}, rules: {} };
+      byTool[p.tool] = row;
+    }
+    row.calls++;
+    if (p.decision === "deny") {
+      row.denied++;
+      if (p.target) row.targets[p.target] = (row.targets[p.target] ?? 0) + 1;
+      if (p.rule) row.rules[p.rule] = (row.rules[p.rule] ?? 0) + 1;
+    } else if (p.decision === "annotate") row.annotated++;
+  }
+  return { decisions, byTool };
+}
+function formatRoutingStats(title, s) {
+  if (!s.decisions) return `${title}: no routing decisions recorded yet`;
+  const tools = Object.entries(s.byTool).sort((a, b) => b[1].calls - a[1].calls).map(([tool, r]) => {
+    const pct = Math.round(100 * r.denied / r.calls);
+    const parts = [`${tool} ${r.denied}/${r.calls} denied (${pct}%)`];
+    if (r.annotated) parts.push(`${r.annotated} annotated`);
+    return parts.join(", ");
+  });
+  const lines = [`${title}: ${s.decisions} native call(s) \u2014 ${tools.join(" \xB7 ")}`];
+  const rules = {};
+  const targets = {};
+  for (const r of Object.values(s.byTool)) {
+    for (const [k, v] of Object.entries(r.rules)) rules[k] = (rules[k] ?? 0) + v;
+    for (const [k, v] of Object.entries(r.targets)) targets[k] = (targets[k] ?? 0) + v;
+  }
+  if (Object.keys(targets).length)
+    lines.push(`  denied \u2192 ${top(targets)}; by rule: ${top(rules, 6)}`);
+  return lines.join("\n");
+}
+var ROUTING_CATEGORY, top;
+var init_routing_stats = __esm({
+  "src/session/routing-stats.ts"() {
+    "use strict";
+    init_esm_shims();
+    ROUTING_CATEGORY = "routing";
+    top = (m, n = 4) => Object.entries(m).sort((a, b) => b[1] - a[1]).slice(0, n).map(([k, v]) => `${k} \xD7${v}`).join(", ");
+  }
+});
+
 // src/tools/em_stats.ts
 var em_stats_exports = {};
 __export(em_stats_exports, {
@@ -42282,13 +42339,14 @@ var init_em_stats = __esm({
     init_zod();
     init_current();
     init_recall();
+    init_routing_stats();
     init_global();
     init_record();
     init_storage();
     init_types2();
     emStats = defineTool({
       name: "em_stats",
-      description: "Show how much context eminiar has kept out of the conversation: tokens seen vs returned per tool for this session, this project, and lifetime across all projects, plus index/graph sizes and how often proactive recall (memories, docs, history before prompts, reads and edits) fired versus stayed quiet, with the reasons.",
+      description: "Show how much context eminiar has kept out of the conversation: tokens seen vs returned per tool for this session, this project, and lifetime across all projects, plus index/graph sizes, how often routing intercepted native Bash/Read/Grep calls (and by which rule), and how often proactive recall (memories, docs, history before prompts, reads and edits) fired versus stayed quiet, with the reasons.",
       schema: {
         scope: external_exports.enum(["session", "project", "lifetime", "all"]).optional().describe("default all")
       },
@@ -42299,6 +42357,12 @@ var init_em_stats = __esm({
         const parts = [];
         if (scope === "session" || scope === "all") {
           parts.push(formatStats(`session ${sessionId.slice(0, 8)}`, db.statsBySession(sessionId)));
+          parts.push(
+            formatRoutingStats(
+              "routing (session)",
+              routingStats(db.eventsBySession(sessionId, { categories: [ROUTING_CATEGORY] }))
+            )
+          );
           parts.push(
             formatRecallStats(
               "recall (session)",
@@ -42308,6 +42372,12 @@ var init_em_stats = __esm({
         }
         if (scope === "project" || scope === "all") {
           parts.push(formatStats(`project ${ctx.root}`, mergeByTool(db.statsAll())));
+          parts.push(
+            formatRoutingStats(
+              "routing (project, last 2000 calls)",
+              routingStats(db.eventsRecent(2e3, [ROUTING_CATEGORY]))
+            )
+          );
           parts.push(
             formatRecallStats(
               "recall (project, last 2000 decisions)",
@@ -45351,7 +45421,7 @@ Use
   docs add [--pick recommended|local|service|infra|catalog|api|registry|all] [--name N] [--url U ...] [--path P]
            [--glob G ...] [--provider npm:x|pypi:x|go:x|env:X|image:x|api:host] [--depth N] [--max N] [--no-sync]
   docs list | sync [name ...] [--force] | remove <name> | lookup "<q>" [--name N] | resolve <provider>
-  stats [--lifetime]           Context savings and how often proactive recall fired
+  stats [--lifetime]           Context savings, routing interceptions, how often recall fired
   recall ["<q>"]               Memories and session history
   recall --explain "<prompt>" [--session ID]   Why hook recall would (not) fire for a prompt
   recall --file <path>         What a Read/Edit of the file would attach (memories, history)

package/dist/hook.js

@@ -5919,7 +5919,9 @@ var CATEGORIES = {
   tool_call: 4,
   session_start: 4,
   /** A proactive recall decision (fired or quiet) and what it showed; never in the guide. */
-  recall: 4
+  recall: 4,
+  /** A routing decision (allow / annotate / deny) for one native call; never in the guide. */
+  routing: 4
 };
 var GUIDE_ORDER = [
   { title: "Last Request", categories: ["user_prompt"] },
@@ -29119,6 +29121,7 @@ var preCompact = (input2) => {
 // src/hooks/routing.ts
 init_esm_shims();
 import { realpathSync as realpathSync4, statSync as statSync4 } from "fs";
+import { homedir as homedir4 } from "os";
 import { extname as extname2, join as join11, relative as relative4, resolve as resolve3 } from "path";
 
 // src/docs/manifest.ts
@@ -29416,6 +29419,26 @@ function fitBudget(lines, budget) {
   return out.length > budget ? `${out.slice(0, budget - 1)}\u2026` : out;
 }
 
+// src/session/routing-stats.ts
+init_esm_shims();
+var ROUTING_CATEGORY = "routing";
+function recordRouting(db, sessionId, e) {
+  db.eventInsert({
+    sessionId,
+    category: ROUTING_CATEGORY,
+    priority: 4,
+    tool: e.tool,
+    payload: {
+      tool: e.tool,
+      decision: e.decision,
+      ...e.target ? { target: e.target } : {},
+      ...e.rule ? { rule: e.rule } : {},
+      ...e.why ? { why: e.why } : {},
+      ...e.head ? { head: e.head.slice(0, 120) } : {}
+    }
+  });
+}
+
 // src/session/server-alive.ts
 init_esm_shims();
 import { existsSync as existsSync7, mkdirSync as mkdirSync4, readdirSync, rmSync, writeFileSync as writeFileSync3 } from "fs";
@@ -29609,29 +29632,201 @@ var BIG_TEXT_EXT = /* @__PURE__ */ new Set([
 function withoutHeredocs(cmd) {
   return cmd.replace(/<<-?\s*(['"]?)(\w+)\1[^\n]*\n[\s\S]*?\n\s*\2\s*(?=\n|$)/g, "<<$2");
 }
+function splitUnquoted(s, sep2) {
+  const out = [];
+  let cur = "";
+  let quote2;
+  for (let i = 0; i < s.length; i++) {
+    const ch = s[i];
+    if (quote2) {
+      cur += ch;
+      if (ch === quote2 && s[i - 1] !== "\\") quote2 = void 0;
+      continue;
+    }
+    if (ch === "'" || ch === '"') {
+      quote2 = ch;
+      cur += ch;
+      continue;
+    }
+    const n = sep2(s, i);
+    if (n) {
+      out.push(cur);
+      cur = "";
+      i += n - 1;
+      continue;
+    }
+    cur += ch;
+  }
+  out.push(cur);
+  return out.map((p) => p.trim()).filter(Boolean);
+}
+function commandSegments(cmd) {
+  return splitUnquoted(cmd, (s, i) => {
+    const ch = s[i];
+    if (ch === ";" || ch === "\n") return 1;
+    if ((ch === "&" || ch === "|") && s[i + 1] === ch) return 2;
+    return 0;
+  });
+}
+function pipeStages(segment) {
+  return splitUnquoted(segment, (s, i) => s[i] === "|" && s[i + 1] !== "|" ? 1 : 0);
+}
+function headLines(stage) {
+  const m = /(?:^|\s)(?:-n\s*=?\s*|-)(\d+)(?=\s|$)|--lines[= ](\d+)/.exec(stage);
+  return m ? Number(m[1] ?? m[2]) : 10;
+}
+var BOUNDED_LINES = 400;
+function bounds(stage) {
+  if (/^\s*wc\b/.test(stage)) return true;
+  if (!/^\s*(head|tail)\b/.test(stage) || /(^|\s)-c\b|--bytes\b/.test(stage)) return false;
+  return headLines(stage) <= BOUNDED_LINES;
+}
+var MUTATING = /^\s*(?:(?:sudo|env|[A-Z_][A-Z0-9_]*=\S*)\s+)*(git\s+(add|commit|checkout|switch|push|pull|fetch|merge|rebase|stash|reset|restore|cherry-pick|revert|tag|init|clone|worktree|mv|rm|am|apply|submodule)|npm\s+(install|i|ci|uninstall|un|link|publish|version|update|up|dedupe)|pnpm\s+(install|i|add|remove|rm|update|up|link)|yarn\s+(add|remove|install|upgrade)|pip3?\s+(install|uninstall)|cargo\s+(add|install)|brew\s+(install|uninstall|upgrade)|gh\s+(pr|issue|release|repo)\s+(create|edit|merge|close|comment|delete|ready)|rm|mv|cp|mkdir|rmdir|touch|chmod|chown|ln|sed\s+(?:-\S+\s+)*-i|tee)\b/;
+var WRITES_FILE = /(?:^|\s|\d)>{1,2}\s*(?!&)(?!\/dev\/null)\S/;
+function mutates(segment) {
+  return MUTATING.test(segment) || WRITES_FILE.test(segment);
+}
+var READ_LIMIT = 200 * 1024;
+var BIG_TEXT_LIMIT = 20 * 1024;
+var GREP_VALUE_FLAGS = /* @__PURE__ */ new Set([
+  "-e",
+  "-f",
+  "-m",
+  "-A",
+  "-B",
+  "-C",
+  "-d",
+  "-g",
+  "-t",
+  "-T",
+  "--regexp",
+  "--file",
+  "--max-count",
+  "--after-context",
+  "--before-context",
+  "--context",
+  "--include",
+  "--exclude",
+  "--glob",
+  "--type"
+]);
+function fileOperands(stage, cwd) {
+  const tokens = stage.trim().split(/\s+/);
+  const cmd = tokens[0];
+  const isGrep = /^(grep|egrep|fgrep|rg)$/.test(cmd);
+  const files = [];
+  let patternGiven = !isGrep;
+  for (let i = 1; i < tokens.length; i++) {
+    const t = tokens[i];
+    if (t === "--") {
+      files.push(...tokens.slice(i + 1));
+      break;
+    }
+    if (t.startsWith("-") && t.length > 1) {
+      if (/^-[ef]$|^--(regexp|file)$/.test(t)) patternGiven = true;
+      if (GREP_VALUE_FLAGS.has(t)) i++;
+      continue;
+    }
+    if (!patternGiven) {
+      patternGiven = true;
+      continue;
+    }
+    files.push(t);
+  }
+  if (!files.length) return void 0;
+  const out = [];
+  for (let f of files) {
+    if (/[*?[\]{}$`\\]/.test(f)) return void 0;
+    f = f.replace(/^['"]|['"]$/g, "");
+    if (f.startsWith("~/")) f = join11(homedir4(), f.slice(2));
+    out.push(resolve3(cwd, f));
+  }
+  return out;
+}
+function stageBytes(stage, cwd) {
+  const files = fileOperands(stage, cwd);
+  if (!files) return void 0;
+  let total = 0;
+  for (const f of files) {
+    try {
+      const st = statSync4(f);
+      if (st.isDirectory()) return void 0;
+      if (BIG_TEXT_EXT.has(extname2(f).toLowerCase()) && st.size > BIG_TEXT_LIMIT)
+        return READ_LIMIT + st.size;
+      total += st.size;
+    } catch {
+    }
+  }
+  return total;
+}
+function sedRangeLines(stage) {
+  const m = /^\s*sed\s+(?:-\S+\s+)*-n\s+['"]?(\d+),(\d+)p['"]?/.exec(stage);
+  return m ? Number(m[2]) - Number(m[1]) + 1 : void 0;
+}
+function firstStageBound(first, cwd) {
+  if (/^\s*(head|tail)\s/.test(first)) return bounds(first) || void 0;
+  const sed = sedRangeLines(first);
+  if (sed !== void 0) return sed <= BOUNDED_LINES || void 0;
+  if (/^\s*du\s+-[a-zA-Z]*s/.test(first)) return true;
+  if (/^\s*git\s+log\b/.test(first) && ONE_COMMIT.test(first)) return true;
+  if (/^\s*(grep|egrep|fgrep|rg)\s/.test(first) && /(^|\s)-[a-zA-Z]*[lLcq][a-zA-Z]*(?=\s|$)|--(files-with-matches|files-without-match|count|quiet)\b/.test(
+    first
+  ))
+    return true;
+  if (/^\s*(cat|grep|egrep|fgrep|rg)\s/.test(first)) {
+    const bytes = stageBytes(first, cwd);
+    if (bytes === void 0) return void 0;
+    if (bytes <= READ_LIMIT) return true;
+    return { rule: "big-read", text: `reads about ${Math.round(bytes / 1024)} KB` };
+  }
+  return void 0;
+}
+function heavySegment(segment, cwd) {
+  if (TINY_BASH.test(segment)) return void 0;
+  const stages = pipeStages(segment);
+  const first = stages[0];
+  if (!first) return void 0;
+  if (stages.length > 1 && bounds(stages[stages.length - 1])) return void 0;
+  const bound = firstStageBound(first, cwd);
+  if (bound === true) return void 0;
+  if (bound) return bound;
+  if (HEAVY_BASH.test(first)) return { rule: "heavy", text: "usually prints a lot" };
+  if (stages.slice(1).some((s) => /^\s*(grep|rg|sort|uniq|jq|less)\b/.test(s)))
+    return { rule: "pipe", text: "streams an unbounded output through a filter" };
+  return void 0;
+}
+function headOf(segment, n = 60) {
+  const one = segment.replace(/\s+/g, " ").trim();
+  return one.length > n ? `${one.slice(0, n - 1)}\u2026` : one;
+}
+function bashSuggestion(raw, cwd) {
+  const cmd = withoutHeredocs(raw);
+  if (!cmd.trim()) return void 0;
+  const segments = commandSegments(cmd);
+  if (segments.some(mutates)) return void 0;
+  const history = historyCall(cmd);
+  if (history) {
+    return {
+      tool: "em_history",
+      rule: "history",
+      reason: `the git history is already classified (commit kinds, fixes traced to the change that caused them, risk per file); em_history ${history} answers this without the raw log`
+    };
+  }
+  for (const segment of segments) {
+    const heavy = heavySegment(segment, cwd);
+    if (!heavy) continue;
+    return {
+      tool: "em_execute",
+      rule: heavy.rule,
+      reason: `\`${headOf(segment)}\` ${heavy.text}; em_execute {language:"shell", code, intent} keeps the output out of context and returns only matching sections`
+    };
+  }
+  return void 0;
+}
 function suggest(toolName, input2, root, extra = {}) {
   switch (toolName) {
-    case "Bash": {
-      const cmd = withoutHeredocs(String(input2.command ?? ""));
-      if (!cmd || TINY_BASH.test(cmd)) return void 0;
-      if (/^\s*cat\b[^|\n]*>/.test(cmd) && !cmd.includes("|")) return void 0;
-      const history = historyCall(cmd);
-      if (history) {
-        return {
-          tool: "em_history",
-          reason: `the git history is already classified (commit kinds, fixes traced to the change that caused them, risk per file); em_history ${history} answers this without the raw log`
-        };
-      }
-      if (/^\s*git\s+log\b/.test(cmd) && ONE_COMMIT.test(cmd) && !cmd.includes("|"))
-        return void 0;
-      if (HEAVY_BASH.test(cmd) || /\|\s*(head|tail|grep|wc|sort|uniq|jq|less)\b/.test(cmd)) {
-        return {
-          tool: "em_execute",
-          reason: `this command is likely to print a lot; em_execute {language:"shell", code, intent} keeps the output out of context and returns only matching sections`
-        };
-      }
-      return void 0;
-    }
+    case "Bash":
+      return bashSuggestion(String(input2.command ?? ""), extra.cwd ?? root);
     case "Read": {
       const fp = String(input2.file_path ?? "");
       if (!fp) return void 0;
@@ -29643,6 +29838,7 @@ function suggest(toolName, input2, root, extra = {}) {
           if (!checkReadPath(loadPermissionRules(root), abs).allowed) return void 0;
           return {
             tool: "em_execute_file",
+            rule: "big-read",
             reason: `${fp} is ${Math.round(st.size / 1024)} KB; em_execute_file {path, code} processes it in the sandbox so only what you print enters context`
           };
         }
@@ -29655,6 +29851,7 @@ function suggest(toolName, input2, root, extra = {}) {
       if (extra.symbol) {
         return {
           tool: "em_symbols",
+          rule: "symbol",
           annotateOnly: !content,
           reason: `the graph indexes "${extra.symbol}": em_symbols {name_path:"${extra.symbol}", mode:"references"} lists its uses, {include_body:true} its definition; em_search {queries:["${extra.symbol}"], source:"code"} finds the code by symbol`
         };
@@ -29662,6 +29859,7 @@ function suggest(toolName, input2, root, extra = {}) {
       if (content) {
         return {
           tool: "em_execute",
+          rule: "content-grep",
           reason: `content-mode grep can be large; em_execute with rg and an intent returns only matching sections (em_search {queries, mode:"regex"} scans the indexed files with context)`
         };
       }
@@ -29830,9 +30028,16 @@ var preToolUse = async (input2) => {
   const graph = graphContext(ctx, input2);
   const hint = joinHints(graph, memo2);
   const symbol2 = input2.tool_name === "Grep" && graph ? literalOf(String(input2.tool_input.pattern ?? "")) : void 0;
-  const s = suggest(input2.tool_name, input2.tool_input, ctx.root, { symbol: symbol2 });
-  if (!s) return withContext(void 0, hint);
-  if (s.annotateOnly) return withContext(annotate(s), hint);
+  const s = suggest(input2.tool_name, input2.tool_input, ctx.root, { symbol: symbol2, cwd: input2.cwd });
+  const record2 = routingRecorder(ctx, input2, s);
+  if (!s) {
+    record2("allow");
+    return withContext(void 0, hint);
+  }
+  if (s.annotateOnly) {
+    record2("annotate", "annotate-only");
+    return withContext(annotate(s), hint);
+  }
   if (mode === "enforce") {
     if (s.prefixPrompt) {
       const prompt = String(input2.tool_input.prompt ?? "");
@@ -29853,6 +30058,7 @@ var preToolUse = async (input2) => {
         "info",
         `enforce \u2192 annotate for ${input2.tool_name}: no eminiar MCP server running for ${ctx.root}`
       );
+      record2("annotate", "no-server");
       return withContext(
         annotate(
           s,
@@ -29861,6 +30067,8 @@ var preToolUse = async (input2) => {
         hint
       );
     }
+    record2("deny");
+    hookLog("info", `deny ${input2.tool_name} \u2192 ${s.tool} [${s.rule ?? "?"}]: ${callHead(input2)}`);
     return {
       hookSpecificOutput: {
         hookEventName: "PreToolUse",
@@ -29869,9 +30077,35 @@ var preToolUse = async (input2) => {
       }
     };
   }
+  record2("annotate", "mode");
   const extra = s.prefixPrompt ? joinHints((await briefFor(ctx, String(input2.tool_input.prompt ?? ""))).trim(), hint) : hint;
   return withContext(annotate(s), extra);
 };
+var ROUTED_TOOLS = /* @__PURE__ */ new Set(["Bash", "Read", "Grep", "WebFetch", "WebSearch"]);
+function callHead(input2) {
+  const t = input2.tool_input ?? {};
+  const v = t.command ?? t.file_path ?? t.pattern ?? t.url ?? t.query ?? "";
+  return headOf(String(v), 120);
+}
+function routingRecorder(ctx, input2, s) {
+  const tool = input2.tool_name ?? "";
+  const sessionId = input2.session_id;
+  if (!sessionId || !ROUTED_TOOLS.has(tool)) return () => {
+  };
+  return (decision, why) => {
+    try {
+      recordRouting(getStorage(ctx, { vectors: false }), sessionId, {
+        tool,
+        decision,
+        target: s?.tool,
+        rule: s?.rule,
+        why,
+        head: callHead(input2)
+      });
+    } catch {
+    }
+  };
+}
 async function briefFor(ctx, task) {
   const parts = [];
   try {

package/dist/server.js

@@ -13703,7 +13703,7 @@ function chunkBySymbols(code, rel, symbols, opts = DEFAULT_CHUNKER) {
   const valid = symbols.filter(
     (s) => s.startLine >= 1 && s.endLine >= s.startLine && s.endLine <= total
   );
-  const top = valid.filter((s) => depthOf(s.name) === 1).sort((a, b) => a.startLine - b.startLine || b.endLine - a.endLine);
+  const top2 = valid.filter((s) => depthOf(s.name) === 1).sort((a, b) => a.startLine - b.startLine || b.endLine - a.endLine);
   const membersOf = (parent) => valid.filter(
     (s) => depthOf(s.name) === depthOf(parent.name) + 1 && s.name.startsWith(`${parent.name}.`) && s.startLine >= parent.startLine && s.endLine <= parent.endLine
   ).sort((a, b) => a.startLine - b.startLine);
@@ -13732,7 +13732,7 @@ function chunkBySymbols(code, rel, symbols, opts = DEFAULT_CHUNKER) {
     }
     tiny = [];
   };
-  for (const sym of top) {
+  for (const sym of top2) {
     if (sym.startLine < cursor) continue;
     const a = extendUp(sym.startLine, cursor - 1);
     const b = sym.endLine;
@@ -14886,11 +14886,11 @@ async function parsePhp(root, rel, code) {
       if (file3) {
         if (file3 !== rel) addImport(fileId(file3), label, fqn, line, 0.95);
       } else {
-        const top = fqn.split("\\")[0];
-        importedPkgs.add(top);
-        if (!imports.has(pkgId(top)))
-          nodes.push({ id: pkgId(top), kind: "package", name: top, source: "tree-sitter" });
-        addImport(pkgId(top), label, fqn, line, 1);
+        const top2 = fqn.split("\\")[0];
+        importedPkgs.add(top2);
+        if (!imports.has(pkgId(top2)))
+          nodes.push({ id: pkgId(top2), kind: "package", name: top2, source: "tree-sitter" });
+        addImport(pkgId(top2), label, fqn, line, 1);
       }
       if (kind) scope.set(local, { id: pkgId(fqn.split("\\")[0]), confidence: 0.6 });
       else classUses.set(local, fqn);
@@ -14997,8 +14997,8 @@ async function parsePhp(root, rel, code) {
         return;
     }
   }
-  function insideDecl(n, top) {
-    for (let cur = n.parent; cur && cur.id !== top.id; cur = cur.parent) {
+  function insideDecl(n, top2) {
+    for (let cur = n.parent; cur && cur.id !== top2.id; cur = cur.parent) {
       if (cur.type === "function_definition" || cur.type === "method_declaration") return true;
       if (CLASS_KINDS[cur.type]) return true;
     }
@@ -17428,10 +17428,10 @@ function cycles(nodes, edges) {
     stack.push(start);
     onStack.add(start);
     while (work.length) {
-      const top = work[work.length - 1];
-      const succ = adj.get(top.n);
-      if (top.i < succ.length) {
-        const m = succ[top.i++];
+      const top2 = work[work.length - 1];
+      const succ = adj.get(top2.n);
+      if (top2.i < succ.length) {
+        const m = succ[top2.i++];
         if (!idx.has(m)) {
           idx.set(m, counter);
           low.set(m, counter);
@@ -17440,20 +17440,20 @@ function cycles(nodes, edges) {
           onStack.add(m);
           work.push({ n: m, i: 0 });
         } else if (onStack.has(m)) {
-          low.set(top.n, Math.min(low.get(top.n), idx.get(m)));
+          low.set(top2.n, Math.min(low.get(top2.n), idx.get(m)));
         }
       } else {
         work.pop();
         const parent = work[work.length - 1];
-        if (parent) low.set(parent.n, Math.min(low.get(parent.n), low.get(top.n)));
-        if (low.get(top.n) === idx.get(top.n)) {
+        if (parent) low.set(parent.n, Math.min(low.get(parent.n), low.get(top2.n)));
+        if (low.get(top2.n) === idx.get(top2.n)) {
           const comp = [];
           let m;
           do {
             m = stack.pop();
             onStack.delete(m);
             comp.push(m);
-          } while (m !== top.n);
+          } while (m !== top2.n);
           if (comp.length > 1) out.push(comp.sort());
         }
       }
@@ -17608,8 +17608,8 @@ function computeMetrics(db) {
 function topFolder(paths2) {
   const counts = /* @__PURE__ */ new Map();
   for (const p of paths2) {
-    const top = p.includes("/") ? `${p.split("/")[0]}/` : "(root)";
-    counts.set(top, (counts.get(top) ?? 0) + 1);
+    const top2 = p.includes("/") ? `${p.split("/")[0]}/` : "(root)";
+    counts.set(top2, (counts.get(top2) ?? 0) + 1);
   }
   return [...counts.entries()].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]))[0]?.[0] ?? "";
 }
@@ -18452,8 +18452,8 @@ function gitignoreHint(ctx) {
   const file3 = join12(ctx.root, ".gitignore");
   if (!existsSync8(file3)) return void 0;
   const dir = memoriesRel(ctx);
-  const top = dir.split("/")[0];
-  const ignored = readFileSync8(file3, "utf8").split(/\r?\n/).map((l) => l.trim().replace(/^\//, "").replace(/\/$/, "")).some((l) => l === top || l === dir || l === `${top}/**` || l === `${dir}/**`);
+  const top2 = dir.split("/")[0];
+  const ignored = readFileSync8(file3, "utf8").split(/\r?\n/).map((l) => l.trim().replace(/^\//, "").replace(/\/$/, "")).some((l) => l === top2 || l === dir || l === `${top2}/**` || l === `${dir}/**`);
   return ignored ? `note: .gitignore ignores ${dir}, so memories stay local to this machine (remove that line to share them with the team)` : void 0;
 }
 var import_fast_glob3, MEMORY_KINDS, SEGMENT, NAME_RE, MEM_LINK_RE, PATH_RE, hinted;
@@ -51219,11 +51219,11 @@ function folderRows(files, languages2) {
     score: Number((a.score / a.files).toFixed(3)),
     languages: a.langs
   }));
-  const top = new Map(rows.filter((r) => r.path.split("/").length <= 2).map((r) => [r.path, r]));
+  const top2 = new Map(rows.filter((r) => r.path.split("/").length <= 2).map((r) => [r.path, r]));
   return rows.filter((r) => {
     const segs = r.path.split("/");
     if (segs.length <= 2) return true;
-    return (top.get(`${segs[0]}/`)?.files ?? 0) >= 12;
+    return (top2.get(`${segs[0]}/`)?.files ?? 0) >= 12;
   }).sort((a, b) => a.path.localeCompare(b.path));
 }
 function entryPoints(root, db) {
@@ -52869,10 +52869,10 @@ async function search(db, query, opts = {}) {
     }
   }
   const fused = rrf(lists);
-  const top = [...fused.entries()].sort((a, b) => b[1] - a[1]).slice(0, Math.max(limit * 4, 20));
-  const chunks = db.getChunks(top.map(([id]) => id));
+  const top2 = [...fused.entries()].sort((a, b) => b[1] - a[1]).slice(0, Math.max(limit * 4, 20));
+  const chunks = db.getChunks(top2.map(([id]) => id));
   const byId = new Map(chunks.map((c) => [c.id, c]));
-  const scored = top.map(([id, score]) => ({ chunk: byId.get(id), score, matched: [] })).filter((s) => !!s.chunk);
+  const scored = top2.map(([id, score]) => ({ chunk: byId.get(id), score, matched: [] })).filter((s) => !!s.chunk);
   const allTerms = [...terms, ...parsed.phrases];
   const ranked = rerank(scored, allTerms);
   const seenHash = /* @__PURE__ */ new Set();
@@ -57892,12 +57892,12 @@ function renderBranch(m, name, limit = 20) {
     );
     const files = /* @__PURE__ */ new Map();
     for (const c of own2) for (const f of c.files) files.set(f.path, (files.get(f.path) ?? 0) + 1);
-    const top = [...files.entries()].sort((a, b2) => b2[1] - a[1]).slice(0, 10);
-    if (top.length)
+    const top2 = [...files.entries()].sort((a, b2) => b2[1] - a[1]).slice(0, 10);
+    if (top2.length)
       lines.push(
-        `files touched: ${top.map(([p, n]) => n > 1 ? `${p} \xD7${n}` : p).join(", ")}${files.size > 10 ? ` \u2026 +${files.size - 10}` : ""}`
+        `files touched: ${top2.map(([p, n]) => n > 1 ? `${p} \xD7${n}` : p).join(", ")}${files.size > 10 ? ` \u2026 +${files.size - 10}` : ""}`
       );
-    const risky = top.map(([p]) => m.files.get(p)).filter((f) => !!f && f.risk >= 0.3);
+    const risky = top2.map(([p]) => m.files.get(p)).filter((f) => !!f && f.risk >= 0.3);
     if (risky.length)
       lines.push(
         `touches bug-prone files: ${risky.map((f) => `${f.path} (${f.risk.toFixed(2)})`).join(", ")}`
@@ -58598,10 +58598,61 @@ function formatRecallStats(title, s) {
   return lines.join("\n");
 }
 
+// src/session/routing-stats.ts
+init_esm_shims();
+var ROUTING_CATEGORY = "routing";
+function routingStats(events) {
+  const byTool = {};
+  let decisions = 0;
+  for (const e of events) {
+    if (e.category !== ROUTING_CATEGORY) continue;
+    let p;
+    try {
+      p = JSON.parse(e.payload);
+    } catch {
+      continue;
+    }
+    if (!p.tool) continue;
+    decisions++;
+    let row = byTool[p.tool];
+    if (!row) {
+      row = { calls: 0, denied: 0, annotated: 0, targets: {}, rules: {} };
+      byTool[p.tool] = row;
+    }
+    row.calls++;
+    if (p.decision === "deny") {
+      row.denied++;
+      if (p.target) row.targets[p.target] = (row.targets[p.target] ?? 0) + 1;
+      if (p.rule) row.rules[p.rule] = (row.rules[p.rule] ?? 0) + 1;
+    } else if (p.decision === "annotate") row.annotated++;
+  }
+  return { decisions, byTool };
+}
+var top = (m, n = 4) => Object.entries(m).sort((a, b) => b[1] - a[1]).slice(0, n).map(([k, v]) => `${k} \xD7${v}`).join(", ");
+function formatRoutingStats(title, s) {
+  if (!s.decisions) return `${title}: no routing decisions recorded yet`;
+  const tools2 = Object.entries(s.byTool).sort((a, b) => b[1].calls - a[1].calls).map(([tool, r]) => {
+    const pct = Math.round(100 * r.denied / r.calls);
+    const parts = [`${tool} ${r.denied}/${r.calls} denied (${pct}%)`];
+    if (r.annotated) parts.push(`${r.annotated} annotated`);
+    return parts.join(", ");
+  });
+  const lines = [`${title}: ${s.decisions} native call(s) \u2014 ${tools2.join(" \xB7 ")}`];
+  const rules = {};
+  const targets = {};
+  for (const r of Object.values(s.byTool)) {
+    for (const [k, v] of Object.entries(r.rules)) rules[k] = (rules[k] ?? 0) + v;
+    for (const [k, v] of Object.entries(r.targets)) targets[k] = (targets[k] ?? 0) + v;
+  }
+  if (Object.keys(targets).length)
+    lines.push(`  denied \u2192 ${top(targets)}; by rule: ${top(rules, 6)}`);
+  return lines.join("\n");
+}
+
 // src/tools/em_stats.ts
 var emStats = defineTool({
   name: "em_stats",
-  description: "Show how much context eminiar has kept out of the conversation: tokens seen vs returned per tool for this session, this project, and lifetime across all projects, plus index/graph sizes and how often proactive recall (memories, docs, history before prompts, reads and edits) fired versus stayed quiet, with the reasons.",
+  description: "Show how much context eminiar has kept out of the conversation: tokens seen vs returned per tool for this session, this project, and lifetime across all projects, plus index/graph sizes, how often routing intercepted native Bash/Read/Grep calls (and by which rule), and how often proactive recall (memories, docs, history before prompts, reads and edits) fired versus stayed quiet, with the reasons.",
   schema: {
     scope: external_exports.enum(["session", "project", "lifetime", "all"]).optional().describe("default all")
   },
@@ -58612,6 +58663,12 @@ var emStats = defineTool({
     const parts = [];
     if (scope === "session" || scope === "all") {
       parts.push(formatStats(`session ${sessionId.slice(0, 8)}`, db.statsBySession(sessionId)));
+      parts.push(
+        formatRoutingStats(
+          "routing (session)",
+          routingStats(db.eventsBySession(sessionId, { categories: [ROUTING_CATEGORY] }))
+        )
+      );
       parts.push(
         formatRecallStats(
           "recall (session)",
@@ -58621,6 +58678,12 @@ var emStats = defineTool({
     }
     if (scope === "project" || scope === "all") {
       parts.push(formatStats(`project ${ctx.root}`, mergeByTool(db.statsAll())));
+      parts.push(
+        formatRoutingStats(
+          "routing (project, last 2000 calls)",
+          routingStats(db.eventsRecent(2e3, [ROUTING_CATEGORY]))
+        )
+      );
       parts.push(
         formatRecallStats(
           "recall (project, last 2000 decisions)",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eminiar",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Local-first context, memory and knowledge-graph plugin for Claude Code. Sandboxed execution, FTS5 + vector search, session continuity, and a code graph — nothing leaves your machine.",
   "type": "module",
   "license": "MIT",