greprag 5.40.1 → 5.42.0

package/dist/index.js

@@ -53,6 +53,7 @@ const mechanic_1 = require("./commands/mechanic");
 const memory_1 = require("./commands/memory");
 const session_1 = require("./commands/session");
 const checkpoint_1 = require("./commands/checkpoint");
+const context_governor_1 = require("./commands/context-governor");
 const identity_1 = require("./commands/identity");
 const skill_1 = require("./commands/skill");
 const project_1 = require("./commands/project");
@@ -62,6 +63,9 @@ const codex_1 = require("./commands/codex");
 const opencode_relay_1 = require("./commands/opencode-relay");
 const opencode_watch_1 = require("./commands/opencode-watch");
 const inbox_retract_1 = require("./commands/inbox-retract");
+const crush_1 = require("./commands/crush");
+const crush_stats_1 = require("./commands/crush-stats");
+const archive_1 = require("./commands/archive");
 const inbox_watch_1 = require("./commands/inbox-watch");
 const discord_1 = require("./commands/discord");
 const project_anchor_1 = require("./project-anchor");
@@ -182,71 +186,64 @@ async function apiDelete(url, apiKey) {
         throw new Error(`API ${res.status}: ${await res.text()}`);
     return res.json();
 }
-const INBOX_HELP = `greprag inbox — read + manage your async message inbox.
-
-  greprag inbox                     List unread for THIS session: its own lines
-                                    only (sender or recipient). Other sessions'
-                                    private lines AND the front desk are hidden;
-                                    a footer counts any front-desk mail waiting.
-  greprag inbox --front-desk        Read the front desk: the tenant catch-all
-                                    (cold opens + inbound email). Add --peek to
-                                    survey without marking read.
-  greprag inbox --all               Audit peek: drop the per-session scope (every
-                                    session's lines) AND include already-read.
-  greprag inbox --peek              List WITHOUT marking read (non-mutating).
-  greprag inbox --session <8hex>    Scope to one specific session's view.
-  greprag inbox --project <name>    Filter to one project's inbox.
-  greprag inbox watch [...]         Long-lived SSE stream (run under Monitor).
-    [--receptionist]                Attend the front desk — wake live on a cold
-                                    open / inbound email (else only manual check).
-  greprag inbox watchers [--json]   List live armed watchers under your tenant.
-  greprag inbox reap                Kill orphaned watcher processes (consumer gone)
-                                    + sweep stale pidfiles. Runs auto at session start.
-  greprag inbox claim <id>          Receptionist: claim a front-desk record so a
-                                    co-armed receptionist stands down (no dup reply).
-  greprag inbox keep <id>           Extend a message's TTL.
-  greprag inbox delete <id>         Delete a message.
-
-To SEND or REPLY (top-level command, NOT an inbox subcommand):
-  greprag send --to discord:<snowflake> "reply"            Reply to a Discord DM.
-  greprag send "msg" --to <handle>@greprag.com              Cold open (tenant catch-all).
-  greprag send "msg" --to <handle>@greprag.com/<session>   Message a specific session.
-  greprag send "msg" --to <h>@greprag.com/<session> --in-reply-to <front-desk-id>
+const INBOX_HELP = `greprag inbox — read + manage your async message inbox.
+
+  greprag inbox                     List unread for THIS session: its own lines
+                                    only (sender or recipient). Other sessions'
+                                    private lines AND the front desk are hidden;
+                                    a footer counts any front-desk mail waiting.
+  greprag inbox --front-desk        Read the front desk: the tenant catch-all
+                                    (cold opens + inbound email). Add --peek to
+                                    survey without marking read.
+  greprag inbox --all               Audit peek: drop the per-session scope (every
+                                    session's lines) AND include already-read.
+  greprag inbox --peek              List WITHOUT marking read (non-mutating).
+  greprag inbox --session <8hex>    Scope to one specific session's view.
+  greprag inbox --project <name>    Filter to one project's inbox.
+  greprag inbox watch [...]         Long-lived SSE stream (run under Monitor).
+    [--receptionist]                Attend the front desk — wake live on a cold
+                                    open / inbound email (else only manual check).
+  greprag inbox watchers [--json]   List live armed watchers under your tenant.
+  greprag inbox reap                Kill orphaned watcher processes (consumer gone)
+                                    + sweep stale pidfiles. Runs auto at session start.
+  greprag inbox claim <id>          Receptionist: claim a front-desk record so a
+                                    co-armed receptionist stands down (no dup reply).
+  greprag inbox keep <id>           Extend a message's TTL.
+  greprag inbox delete <id>         Delete a message.
+
+To SEND or REPLY (top-level command, NOT an inbox subcommand):
+  greprag send --to discord:<snowflake> "reply"            Reply to a Discord DM.
+  greprag send "msg" --to <handle>@greprag.com              Cold open (tenant catch-all).
+  greprag send "msg" --to <handle>@greprag.com/<session>   Message a specific session.
+  greprag send "msg" --to <h>@greprag.com/<session> --in-reply-to <front-desk-id>
                                                            Reply that threads a cold open.`;
-const INBOX_WATCH_HELP = `greprag inbox watch — long-lived SSE subscriber for live inbox delivery.
-
-Run under the Claude Code Monitor tool: each printed line becomes one
-notification, so a parent waiting on a chip report gets it the instant it
-lands instead of polling.
-
-  greprag inbox watch                 Tenant-wide stream.
-  greprag inbox watch --project <name>  Only messages addressed to this project.
-  greprag inbox watch --session <id>    Only messages targeting this session
-                                        (plus the front-desk catch-all). Strictest.
-  greprag inbox watch --since <id|iso>  Resume from a known cursor.
-  greprag inbox watch --json            One JSON object per line (preferred under Monitor).
-  greprag inbox watch --receptionist    Attend the front desk — wake live on a
-                                        cold open / inbound email.
-  greprag inbox watch --no-supervise    Run the SSE loop directly, skipping the
-                                        in-process supervisor (tests/debugging).
-  greprag inbox watch --owner-pid <n>   Owning claude.exe PID (stamped by the arm
-                                        directive; the reaper keeps this watcher
-                                        iff that PID is a live claude.exe).
-  greprag inbox watch --monitor-pid <n> Monitor-task bash PID, Windows pid space
-                                        (the arm command stamps it from
-                                        /proc/$$/winpid). The watcher self-
-                                        terminates when it dies — covers TaskStop,
-                                        which kills the Monitor task but not
-                                        claude.exe. 0 = no stamp.
-
-Arm it BARE under Monitor (persistent:true) — no "while true ... sleep 1" wrapper
-(removed 2026-06-04; it orphaned and OOM-crashed the host). Resilience by default:
-the watch SUPERVISES itself — a parent spawns the SSE loop as a child (Win32
-CreateProcess, not Cygwin fork) and respawns it on any non-clean exit (crash,
-undici error, OS kill); and it SELF-TERMINATES when its Monitor consumer's pipe
-breaks (session reload/end) OR its Monitor task's stamped bash PID dies
-(TaskStop) so it never orphans. Within-session robustness only; a watcher cannot
-survive session reload / --resume / /compact.
+const INBOX_WATCH_HELP = `greprag inbox watch — long-lived SSE subscriber for live inbox delivery.
+
+Run under the Claude Code Monitor tool: each printed line becomes one
+notification, so a parent waiting on a chip report gets it the instant it
+lands instead of polling.
+
+  greprag inbox watch                 Tenant-wide stream.
+  greprag inbox watch --project <name>  Only messages addressed to this project.
+  greprag inbox watch --session <id>    Only messages targeting this session
+                                        (plus the front-desk catch-all). Strictest.
+  greprag inbox watch --since <id|iso>  Resume from a known cursor.
+  greprag inbox watch --json            One JSON object per line (preferred under Monitor).
+  greprag inbox watch --receptionist    Attend the front desk — wake live on a
+                                        cold open / inbound email.
+  greprag inbox watch --no-supervise    Run the SSE loop directly, skipping the
+                                        in-process supervisor (tests/debugging).
+  greprag inbox watch --owner-pid <n>   Owning claude.exe PID (stamped by the arm
+                                        directive; the reaper keeps this watcher
+                                        iff that PID is a live claude.exe).
+
+Arm it BARE under Monitor (persistent:true) — no "while true ... sleep 1" wrapper
+(removed 2026-06-04; it orphaned and OOM-crashed the host). Resilience by default:
+the watch SUPERVISES itself — a parent spawns the SSE loop as a child (Win32
+CreateProcess, not Cygwin fork) and respawns it on any non-clean exit (crash,
+undici error, OS kill); and it SELF-TERMINATES when its Monitor consumer's pipe
+breaks (session reload/end) so it never orphans. Within-session robustness only;
+a watcher cannot survive session reload / --resume / /compact.
 adr: adr/monitor-resilience.md`;
 /** greprag inbox [--all] [--session <id>] | inbox keep <id> | inbox delete <id> | inbox watch */
 /** greprag desk — the machine's desk-line (reverse-RPC relay to the cloud).
@@ -1177,274 +1174,305 @@ async function retract(args) {
     console.log((0, inbox_retract_1.formatRetractResult)(result.status));
 }
 // -- Main ------------------------------------------------------------------
-const INIT_HELP = `greprag init — configure GrepRAG for an agent client.
-
-  greprag init
-  greprag init --codex [--tenant-id <handle>|--api-key <key>] [--install-watcher]
-  greprag init --claude [--tenant-id <handle>|--api-key <key>]
-  greprag init --opencode [--tenant-id <handle>|--api-key <key>]
-  greprag init --all [--root <path>]
-  greprag init --global [--name <name>]
-
-Options:
-  --tenant-id <handle>     Provision/use public handle <handle>@greprag.com.
-                           Example: --tenant-id tanya -> tanya@greprag.com
-  --api-key <key>          Use an existing GrepRAG API key instead of provisioning.
-  --codex                  Configure Codex hooks + /greprag skill.
-  --install-watcher        With --codex, install the live inbox watcher at login.
-  --claude                 Configure Claude Code hooks + /greprag skill.
-  --opencode               Configure OpenCode plugin.
-
-Codex Desktop trust step:
-  After init, start a fresh Codex session, then open Settings -> Settings -> Hooks
+const INIT_HELP = `greprag init — configure GrepRAG for an agent client.
+
+  greprag init
+  greprag init --codex [--tenant-id <handle>|--api-key <key>] [--install-watcher]
+  greprag init --claude [--tenant-id <handle>|--api-key <key>]
+  greprag init --opencode [--tenant-id <handle>|--api-key <key>]
+  greprag init --all [--root <path>]
+  greprag init --global [--name <name>]
+
+Options:
+  --tenant-id <handle>     Provision/use public handle <handle>@greprag.com.
+                           Example: --tenant-id tanya -> tanya@greprag.com
+  --api-key <key>          Use an existing GrepRAG API key instead of provisioning.
+  --codex                  Configure Codex hooks + /greprag skill.
+  --install-watcher        With --codex, install the live inbox watcher at login.
+  --claude                 Configure Claude Code hooks + /greprag skill.
+  --opencode               Configure OpenCode plugin.
+
+Codex Desktop trust step:
+  After init, start a fresh Codex session, then open Settings -> Settings -> Hooks
   and trust the GrepRAG hooks.`;
-const HELP = `
-greprag — agent memory for Claude Code, Codex, and OpenCode
-
-Commands:
-  init [--api-key <key>] [--tenant-id <handle>]
-                                  Auto-detect/ask for Codex, Claude Code, or OpenCode
-  init --claude [--api-key <key>] [--tenant-id <handle>]
-                                  Configure hooks + API key for Claude Code
-  init --global [--name <name>]    Create ~/.greprag/project.json (global anchor)
-  init --opencode [--api-key <key>] [--tenant-id <handle>]
-                                  Configure plugin + anchor for OpenCode
-  init --codex [--api-key <key>] [--tenant-id <handle>] [--install-watcher]
-                                  Configure lifecycle hooks + anchor for Codex
-  init --all [--root <path>]       Standard init for cwd, then bulk-register every
-                                   other git repo at depth 1 under <path> (default:
-                                   parent of repo root). Each becomes inbox-addressable.
-  status [--json] [--claude|--codex|--opencode]
-                                  Installation, auth, platform hooks/plugins, and project state
-  codex watch [--session <id>]    Foreground live-push sidecar for Codex.
-  codex startup install          Start the Codex live-push sidecar at login.
-  project-id                       Print the current project_id
-  session-id [--full]              Print this session's id (8-hex, or full UUID with --full).
-  discover [--json]                Tenant-wide structure: every project, per-shape row counts,
-                                   activity ranges. For cross-project advisors.
-  doctor [--inspect] [--yes]       Diagnose + repair orphan project_ids and identity drift
-  smell "<text>"                   Shortcut for \`greprag fix log "<text>"\`.
-
-Inbox (email-style messaging across tenants):
-  inbox [--all] [--session <id>] [--project <name>] [--peek]
-                                List unread, auto-scoped to THIS session: its own
-                                lines (sender OR recipient) + the front desk
-                                (tenant catch-all). Other sessions' private lines
-                                are hidden by default.
-                                --all = audit peek: drop the per-session scope
-                                (every session's lines) AND include read history.
-                                --session scopes to one specific session's view.
-                                --project filters by project name.
-                                --peek: NON-MUTATING — does not mark any message read.
-  inbox watchers [--json]       List currently-attached live watchers under this
-                                tenant. Each row: project · title (session_id) —
-                                project + nano title resolved from session memory.
-                                Use to find session ids the orchestrator can message into.
-  inbox watch                   Long-lived SSE stream — prints each message as it lands.
-                                Self-supervising by default: a parent process
-                                respawns the SSE loop (via CreateProcess) on any
-                                non-clean exit — within-session robustness, not
-                                reload-survival. "inbox watch --help" for details.
-    [--project <name>]          Filter to one project inbox (default: tenant-wide).
-    [--session <id>]            Filter to messages targeting this session
-                                (plus the front-desk catch-all).
-    [--receptionist]            Attend the front desk — wake live on a tenant
-                                catch-all (cold open / inbound email). Without it,
-                                cold opens surface only on a manual inbox check.
-    [--since <id|iso>]          Resume after a message id or timestamp.
-    [--json]                    Emit raw JSON per line (for piping to Monitor).
-    [--no-supervise]            Run the SSE loop directly (no supervisor) — tests/debug.
-  inbox claim <id>              Receptionist: claim a front-desk record (cold open /
-                                inbound email). First claimant wins; a co-armed
-                                receptionist stands down — no double-reply.
-  inbox keep <id>               Extend a read message's TTL (default delete after 14 days)
-  inbox delete <id>             Permanently delete a message
-  send "body" --to <addr>       Send a message. Body is markdown.
-                                <addr> is a bare handle (tenant catch-all) or
-                                handle/<target> — see Addresses below.
-  send --body-file <path> --to <addr>
-                                Send a long/multiline body from a file.
-  send --stdin --to <addr>      Read message body from stdin.
-    --from-session <id>         Sender's session — denormalized so the recipient can
-                                reply by session without re-discovery.
-    --memory <uuid>             (repeatable) back-pointer to a memory row
-    --artifact <type:id>        (repeatable) e.g. commit:abc123, pr:#42, deploy:def
-    --file <path[:lines]>       (repeatable) e.g. src/auth.ts, src/auth.ts:42, src/x.ts:10-15
-    --ref-json '<json>'         escape hatch — full references object
-    --in-reply-to <id>          Thread a reply back to a front-desk record (cold open /
-                                inbound email) — sets references.in_reply_to so the
-                                ensuing private line continues that conversation.
-    --to-desk                   Self-addressed internal mail — posts to THIS project's own
-                                desk (no recipient; omit --to). Requires --type.
-    --type <internal-type>      Internal messageType for --to-desk (e.g. lore_smell). Queue
-                                item drained by its consumer — never wakes a watcher and is
-                                hidden from the default inbox (audit via 'inbox --all').
-  retract <code>                Pull back a previously-sent message (code is printed on send).
-  discord pair                  Pair Discord DMs to this project — generates a code to DM the bot.
-  discord unpair                Remove the Discord pairing.
-  discord me                    Show current Discord pairing + handoff state.
-  discord handoff [--ttl N]     Pin DMs to this session for N min (default 60); bot DMs a confirmation.
-  discord unhandoff             Clear the handoff pin (DMs revert to default project).
-  discord typing                Refresh the "typing…" indicator on the paired DM thread.
-  send "body" --to discord:<snowflake>
-                                Outbound DM to a paired Discord user from any session.
-                                Unread → hard delete. Read → body replaced with a retracted notice.
-                                Idempotent: double-retract is a no-op.
-
-  Addresses:
-    Cold open: <handle>@greprag.com                 tenant catch-all — first contact when
-                                                    you don't know their session. Lands on
-                                                    their front desk for a manual check;
-                                                    no live ping.
-    Session:   <handle>@greprag.com/<session-uuid>  session-to-session (normal, live)
-    Self-desk: --to-desk --type <internal-type>     internal queue item on your own project
-                                                    desk — no recipient, no wake; drained by
-                                                    its typed consumer (e.g. lore_smell).
-    --session and --project flags were removed; the address carries the target.
-    Project broadcasts (<handle>@greprag.com/<project-name>) were removed.
-
-Email (agent-email front desk — drain inbound attachments to local disk):
-  email [pending]               List pending front-desk email (envelope only).
-  email pull --id <record>      Pull ONE record's attachments to local disk.
-  email pull --all-pending      Pull EVERY pending record's attachments.
-    [--to <dir>]                Save dir. Default: --to > $GREPRAG_EMAIL_DIR >
-                               anchor email_dir > ~/.greprag/email/<project>.
-    [--quiet]                  Only print the one-line summary.
-                               Saved as <subject-slug>-<index>.<ext>; re-pulls
-                               are idempotent. Auto-save: set email_autosave=true
-                               in .greprag/project.json so the mail hook pulls
-                               new attachments each turn.
-
-Memory (episodic project memory — turn/hourly/daily/ship-event):
-  memory search "<query>"        Lexical retrieval over the project's memory.
-                                Same v5 RRF + adjacency pipeline as 'corpus
-                                search'. Use when looking up a specific
-                                problem, bug, or topic.
-    [--limit N=5] [--shape <name>] [--project <name>] [--format markdown|json]
-  memory recap                   Recent daily summaries (SessionStart shape).
-    [--daily-last N=7] [--project <name>] [--format markdown|json]
-  memory daily   [--last N=7]    Most-recent daily summaries.
-  memory hourly  [--last N=24]   Most-recent hourly summaries.
-  memory turns   [--last N=20]   Raw per-turn envelopes (21-day TTL).
-  memory ships   [--last N=50]   Ship-event rows (commits/PRs/deploys/releases).
-    Common flags: [--project <name>] [--from ISO --to ISO] [--format markdown|json]
-  memory compact <hour|day|week> [--now ISO]
-                                Manual compaction trigger (backfill / admin use).
-  (Aliases: 'briefing' → 'recap' (renamed v5.16.0); 'odyssey' → 'memory'
-   top-level verb (kept for v5.8.0 scripts).)
-
-Project fixes (emergent friction → fix → repair, reviewed via /mechanic):
-  fix log "<text>" [--scope <S>] [--repaired] [--project <name>] [--source-session <id>]
-                                Open a fix. Default: raw friction queued for /mechanic
-                                to digest (no flags needed). --repaired records a known
-                                durable rule directly (requires --scope).
-                                Top-level alias: greprag smell "<text>".
-  fix list [--all] [--repaired] [--project <name>] [--format json]
-                                Open queue by default; --repaired = resolved durable
-                                rules grouped by scope; --all = tenant-wide census.
-  fix repair <id> "<rule>" [--scope <S>] [--project <name>]
-                                Resolve a fix: record the durable rule, close the entry.
-  fix delete <nodeId> [--project <name>]
-                                Hard-remove a fix (noise / cleanup).
-  fix search "<query>" [--scope <S>] [--limit N=10] [--project <name>] [--format markdown|json]
-                                Lexical search across the project's fixes.
-  fix scopes [--project <name>] Distinct scope labels present in this project.
-
-Mechanic control plane (repairs as data — 'greprag mechanic --help'):
-  mechanic status [--format json]      Inventory of live repairs; ⚑ = ready to graduate.
-  mechanic enable <nodeId>             Ratify a shadow repair → active.
-  mechanic disable <nodeId> [--retire] active → shadow (default) or terminal retire.
-  mechanic why <nodeId>                Provenance: friction → fix → repair chain.
-  mechanic off | on                    Panic switch — suspend/resume ALL repairs (local file).
-
-Checkpoints (operator-triggered episodic bookmarks):
-  checkpoint save "<title>" [--note "<text>"] [--since "<duration>"]
-                            [--project <name>] [--source-session <id>] [--force]
-                                Server synthesizes the session window into a
-                                summary + claims (gemini-2.5-flash), stores as
-                                shape='checkpoint' in the project's memory store.
-                                Title must be 5+ words & specific (server
-                                hard-rejects generic / project-name-only).
-  checkpoint list [--project <name>] [--status open|closed|all] [--all]
-                                Default: open only. --all drops the status filter.
-  checkpoint show <nodeId> [--project <name>]
-                                Print summary + NEXT line + claims + note.
-  checkpoint edit-note <nodeId> --append "<text>"   |   --replace "<text>"
-                                Update the operator-note overlay rendered below
-                                the synthesis on show.
-  checkpoint close <nodeId> [--project <name>]
-                                Flip to closed (keeps history). Idempotent.
-  checkpoint delete <nodeId> [--project <name>] [--yes]
-                                Hard delete. "close keeps history; delete is
-                                for typos."
-
-Corpus (upload + search arbitrary text — books, codebases, references):
-  corpus upload <file|url> --raw|--enriched   Create a store + ingest. Mode REQUIRED:
-    [--name <N>] [--kind <K>]   --raw (lexical — docs/code) | --enriched (per-node
-    [--refresh hourly|daily|manual|off]   LLM vocab bridge — prose/voice). K: docs|
-                                prose|transcript|codebase|voice|generic (default docs). html/pdf/docx/
-                                xlsx/csv convert server-side. --refresh tracks a URL
-                                for the freshness loop (URLs only; default off).
-  corpus search <store> "<intent>" [--limit 5] [--section "<h>"] [--shape S]
-                                Single-store search. <store> is a UUID or name.
-  corpus search "<intent>" --all|--store <ref>...  [--kind K] [--limit 8]
-                                Multistore search (RRF-fused). --all = every store.
-  corpus section <store> "<heading>"
-                                Every node under a heading (forgiving: any depth,
-                                dash/case-insensitive).
-  corpus walk <store> <nodeId> [--before 2 --after 2]
-                                Show a node and its surrounding context.
-  corpus status <store>         Write-side enrichment progress (per-node vocab bridge).
-  corpus refresh <store>        Manually re-check a tracked source (re-ingest changed blocks).
-  corpus sources <store>        Freshness state: source, policy, last change, next check.
-  corpus list [--kind K]        List stores under this tenant.
-  corpus delete <store> [--yes] Delete a store and its nodes.
-
-Identity (public handle + vanity alias — real email is auth-only, never a routing address):
-  identity show  |  whoami      Print numeric handle + claimed aliases.
-  identity claim <alias>        Claim a vanity alias (e.g. "travis" → travis@greprag.com).
-  identity release <alias>      Drop a claimed alias.
-
-Skills (opt-in advisor skills bundled with the CLI):
-  skill list                    Show bundled skills and install status
-  skill install <name>          Install a bundled advisor (e.g. discord, content-advisor)
-  skill uninstall <name>        Remove a previously-installed advisor
-
-Project metadata (rename / merge / list):
-  project rename <new-name> [--yes]
-                                Rename the project at cwd (anchor + registry + API
-                                + store metadata). Confirms before writing.
-  project merge --from <X> --into <Y> [--apply] [--name <override>] [--json]
-                                Consolidate one project into another. Defaults to
-                                dry-run. --from/--into accept a UUID or project_name.
-                                --name renames the target in the same step.
-  project list [--json]         Every project under this tenant, with anchor + rows.
-
-Opencode (bridge inbox SSE into a running opencode desktop session — the
-Monitor equivalent, since opencode is turn-based by default):
-  opencode relay --session <id>  [options]
-                                Subscribe to /v1/inbox/stream and inject each
-                                message as a fresh turn in the named opencode
-                                desktop session via /session/{id}/prompt_async.
-                                See \`greprag opencode --help\` for flags.
-
-Other:
-  expand --chunk <id>           Expand a memory cluster (siblings, adjacent, linked)
-  help [--all]                  Show this overview. --all appends every command's
-                                full --help — the complete, always-current guide.
-
-Examples:
-  greprag init                                       # standard repo setup
-  greprag init --global                              # Cowork / unanchored sessions
-  greprag init --all                                 # register every sibling repo for inbox
-  greprag init --all --root C:\\                     # scan a specific directory
-  greprag inbox
-  greprag send "done with migration" --to alice@greprag.com/abc12345
-                                                     # session-targeted (normal)
-  greprag send "deploy approved" --to alice@greprag.com
-                                                     # cold open — alice's front desk
-  greprag send "Bug in auth flow — repro at line 42" --to alice@greprag.com/abc12345 \
-    --file src/auth.ts:42 --artifact commit:abc123
+const HELP = `
+greprag — agent memory for Claude Code, Codex, and OpenCode
+
+Commands:
+  init [--api-key <key>] [--tenant-id <handle>]
+                                  Auto-detect/ask for Codex, Claude Code, or OpenCode
+  init --claude [--api-key <key>] [--tenant-id <handle>]
+                                  Configure hooks + API key for Claude Code
+  init --global [--name <name>]    Create ~/.greprag/project.json (global anchor)
+  init --opencode [--api-key <key>] [--tenant-id <handle>]
+                                  Configure plugin + anchor for OpenCode
+  init --codex [--api-key <key>] [--tenant-id <handle>] [--install-watcher]
+                                  Configure lifecycle hooks + anchor for Codex
+  init --all [--root <path>]       Standard init for cwd, then bulk-register every
+                                   other git repo at depth 1 under <path> (default:
+                                   parent of repo root). Each becomes inbox-addressable.
+  status [--json] [--claude|--codex|--opencode]
+                                  Installation, auth, platform hooks/plugins, and project state
+  codex watch [--session <id>]    Foreground live-push sidecar for Codex.
+  codex startup install          Start the Codex live-push sidecar at login.
+  project-id                       Print the current project_id
+  session-id [--full]              Print this session's id (8-hex, or full UUID with --full).
+  discover [--json]                Tenant-wide structure: every project, per-shape row counts,
+                                   activity ranges. For cross-project advisors.
+  doctor [--inspect] [--yes]       Diagnose + repair orphan project_ids and identity drift
+  smell "<text>"                   Shortcut for \`greprag fix log "<text>"\`.
+  context status [--session <id>]  Context-size governor readout: live tokens, threshold,
+                                   % consumed, turns since the crossover advisory last fired.
+                                   "context --help" for config (threshold + off-switch).
+
+Inbox (email-style messaging across tenants):
+  inbox [--all] [--session <id>] [--project <name>] [--peek]
+                                List unread, auto-scoped to THIS session: its own
+                                lines (sender OR recipient) + the front desk
+                                (tenant catch-all). Other sessions' private lines
+                                are hidden by default.
+                                --all = audit peek: drop the per-session scope
+                                (every session's lines) AND include read history.
+                                --session scopes to one specific session's view.
+                                --project filters by project name.
+                                --peek: NON-MUTATING — does not mark any message read.
+  inbox watchers [--json]       List currently-attached live watchers under this
+                                tenant. Each row: project · title (session_id) —
+                                project + nano title resolved from session memory.
+                                Use to find session ids the orchestrator can message into.
+  inbox watch                   Long-lived SSE stream — prints each message as it lands.
+                                Self-supervising by default: a parent process
+                                respawns the SSE loop (via CreateProcess) on any
+                                non-clean exit — within-session robustness, not
+                                reload-survival. "inbox watch --help" for details.
+    [--project <name>]          Filter to one project inbox (default: tenant-wide).
+    [--session <id>]            Filter to messages targeting this session
+                                (plus the front-desk catch-all).
+    [--receptionist]            Attend the front desk — wake live on a tenant
+                                catch-all (cold open / inbound email). Without it,
+                                cold opens surface only on a manual inbox check.
+    [--since <id|iso>]          Resume after a message id or timestamp.
+    [--json]                    Emit raw JSON per line (for piping to Monitor).
+    [--no-supervise]            Run the SSE loop directly (no supervisor) — tests/debug.
+  inbox claim <id>              Receptionist: claim a front-desk record (cold open /
+                                inbound email). First claimant wins; a co-armed
+                                receptionist stands down — no double-reply.
+  inbox keep <id>               Extend a read message's TTL (default delete after 14 days)
+  inbox delete <id>             Permanently delete a message
+  send "body" --to <addr>       Send a message. Body is markdown.
+                                <addr> is a bare handle (tenant catch-all) or
+                                handle/<target> — see Addresses below.
+  send --body-file <path> --to <addr>
+                                Send a long/multiline body from a file.
+  send --stdin --to <addr>      Read message body from stdin.
+    --from-session <id>         Sender's session — denormalized so the recipient can
+                                reply by session without re-discovery.
+    --memory <uuid>             (repeatable) back-pointer to a memory row
+    --artifact <type:id>        (repeatable) e.g. commit:abc123, pr:#42, deploy:def
+    --file <path[:lines]>       (repeatable) e.g. src/auth.ts, src/auth.ts:42, src/x.ts:10-15
+    --ref-json '<json>'         escape hatch — full references object
+    --in-reply-to <id>          Thread a reply back to a front-desk record (cold open /
+                                inbound email) — sets references.in_reply_to so the
+                                ensuing private line continues that conversation.
+    --to-desk                   Self-addressed internal mail — posts to THIS project's own
+                                desk (no recipient; omit --to). Requires --type.
+    --type <internal-type>      Internal messageType for --to-desk (e.g. lore_smell). Queue
+                                item drained by its consumer — never wakes a watcher and is
+                                hidden from the default inbox (audit via 'inbox --all').
+  retract <code>                Pull back a previously-sent message (code is printed on send).
+  discord pair                  Pair Discord DMs to this project — generates a code to DM the bot.
+  discord unpair                Remove the Discord pairing.
+  discord me                    Show current Discord pairing + handoff state.
+  discord handoff [--ttl N]     Pin DMs to this session for N min (default 60); bot DMs a confirmation.
+  discord unhandoff             Clear the handoff pin (DMs revert to default project).
+  discord typing                Refresh the "typing…" indicator on the paired DM thread.
+  send "body" --to discord:<snowflake>
+                                Outbound DM to a paired Discord user from any session.
+                                Unread → hard delete. Read → body replaced with a retracted notice.
+                                Idempotent: double-retract is a no-op.
+
+  Addresses:
+    Cold open: <handle>@greprag.com                 tenant catch-all — first contact when
+                                                    you don't know their session. Lands on
+                                                    their front desk for a manual check;
+                                                    no live ping.
+    Session:   <handle>@greprag.com/<session-uuid>  session-to-session (normal, live)
+    Self-desk: --to-desk --type <internal-type>     internal queue item on your own project
+                                                    desk — no recipient, no wake; drained by
+                                                    its typed consumer (e.g. lore_smell).
+    --session and --project flags were removed; the address carries the target.
+    Project broadcasts (<handle>@greprag.com/<project-name>) were removed.
+
+Email (agent-email front desk — drain inbound attachments to local disk):
+  email [pending]               List pending front-desk email (envelope only).
+  email pull --id <record>      Pull ONE record's attachments to local disk.
+  email pull --all-pending      Pull EVERY pending record's attachments.
+    [--to <dir>]                Save dir. Default: --to > $GREPRAG_EMAIL_DIR >
+                               anchor email_dir > ~/.greprag/email/<project>.
+    [--quiet]                  Only print the one-line summary.
+                               Saved as <subject-slug>-<index>.<ext>; re-pulls
+                               are idempotent. Auto-save: set email_autosave=true
+                               in .greprag/project.json so the mail hook pulls
+                               new attachments each turn.
+
+Memory (episodic project memory — turn/hourly/daily/ship-event):
+  memory search "<query>"        Lexical retrieval over the project's memory.
+                                Same v5 RRF + adjacency pipeline as 'corpus
+                                search'. Use when looking up a specific
+                                problem, bug, or topic.
+    [--limit N=5] [--shape <name>] [--project <name>] [--format markdown|json]
+  memory recap                   Recent daily summaries (SessionStart shape).
+    [--daily-last N=7] [--project <name>] [--format markdown|json]
+  memory daily   [--last N=7]    Most-recent daily summaries.
+  memory hourly  [--last N=24]   Most-recent hourly summaries.
+  memory turns   [--last N=20]   Raw per-turn envelopes (21-day TTL).
+  memory ships   [--last N=50]   Ship-event rows (commits/PRs/deploys/releases).
+    Common flags: [--project <name>] [--from ISO --to ISO] [--format markdown|json]
+  memory compact <hour|day|week> [--now ISO]
+                                Manual compaction trigger (backfill / admin use).
+  (Aliases: 'briefing' → 'recap' (renamed v5.16.0); 'odyssey' → 'memory'
+   top-level verb (kept for v5.8.0 scripts).)
+
+Project fixes (emergent friction → fix → repair, reviewed via /mechanic):
+  fix log "<text>" [--scope <S>] [--repaired] [--project <name>] [--source-session <id>]
+                                Open a fix. Default: raw friction queued for /mechanic
+                                to digest (no flags needed). --repaired records a known
+                                durable rule directly (requires --scope).
+                                Top-level alias: greprag smell "<text>".
+  fix list [--all] [--repaired] [--project <name>] [--format json]
+                                Open queue by default; --repaired = resolved durable
+                                rules grouped by scope; --all = tenant-wide census.
+  fix repair <id> "<rule>" [--scope <S>] [--project <name>]
+                                Resolve a fix: record the durable rule, close the entry.
+  fix delete <nodeId> [--project <name>]
+                                Hard-remove a fix (noise / cleanup).
+  fix search "<query>" [--scope <S>] [--limit N=10] [--project <name>] [--format markdown|json]
+                                Lexical search across the project's fixes.
+  fix scopes [--project <name>] Distinct scope labels present in this project.
+
+Mechanic control plane (repairs as data — 'greprag mechanic --help'):
+  mechanic status [--format json]      Inventory of live repairs; ⚑ = ready to graduate.
+  mechanic enable <nodeId>             Ratify a shadow repair → active.
+  mechanic disable <nodeId> [--retire] active → shadow (default) or terminal retire.
+  mechanic why <nodeId>                Provenance: friction → fix → repair chain.
+  mechanic off | on                    Panic switch — suspend/resume ALL repairs (local file).
+
+Checkpoints (operator-triggered episodic bookmarks):
+  checkpoint save "<title>" [--note "<text>"] [--since "<duration>"]
+                            [--project <name>] [--source-session <id>] [--force]
+                                Server synthesizes the session window into a
+                                summary + claims (gemini-2.5-flash), stores as
+                                shape='checkpoint' in the project's memory store.
+                                Title must be 5+ words & specific (server
+                                hard-rejects generic / project-name-only).
+  checkpoint list [--project <name>] [--status open|closed|all] [--all]
+                                Default: open only. --all drops the status filter.
+  checkpoint show <nodeId> [--project <name>]
+                                Print summary + NEXT line + claims + note.
+  checkpoint edit-note <nodeId> --append "<text>"   |   --replace "<text>"
+                                Update the operator-note overlay rendered below
+                                the synthesis on show.
+  checkpoint close <nodeId> [--project <name>]
+                                Flip to closed (keeps history). Idempotent.
+  checkpoint delete <nodeId> [--project <name>] [--yes]
+                                Hard delete. "close keeps history; delete is
+                                for typos."
+
+Corpus (upload + search arbitrary text — books, codebases, references):
+  corpus upload <file|url> --raw|--enriched   Create a store + ingest. Mode REQUIRED:
+    [--name <N>] [--kind <K>]   --raw (lexical — docs/code) | --enriched (per-node
+    [--refresh hourly|daily|manual|off]   LLM vocab bridge — prose/voice). K: docs|
+                                prose|transcript|codebase|voice|generic (default docs). html/pdf/docx/
+                                xlsx/csv convert server-side. --refresh tracks a URL
+                                for the freshness loop (URLs only; default off).
+  corpus search <store> "<intent>" [--limit 5] [--section "<h>"] [--shape S]
+                                Single-store search. <store> is a UUID or name.
+  corpus search "<intent>" --all|--store <ref>...  [--kind K] [--limit 8]
+                                Multistore search (RRF-fused). --all = every store.
+  corpus section <store> "<heading>"
+                                Every node under a heading (forgiving: any depth,
+                                dash/case-insensitive).
+  corpus walk <store> <nodeId> [--before 2 --after 2]
+                                Show a node and its surrounding context.
+  corpus status <store>         Write-side enrichment progress (per-node vocab bridge).
+  corpus refresh <store>        Manually re-check a tracked source (re-ingest changed blocks).
+  corpus sources <store>        Freshness state: source, policy, last change, next check.
+  corpus list [--kind K]        List stores under this tenant.
+  corpus delete <store> [--yes] Delete a store and its nodes.
+
+Crush (pre-LLM tool-output compression — safe inside pipes, always exits 0):
+  crush --type <log|search|json> [--ccr] [--query "words"]
+                                Read stdin, write the crushed version to stdout.
+                                log = build/test output (keep errors/traces/summaries),
+                                search = grep/rg output (keep scored top matches),
+                                json = large arrays (keep errors/outliers/first+last).
+                                --ccr stashes the ORIGINAL locally and appends a
+                                trailing <<ccr:HASH>> marker. If compression wouldn't
+                                save tokens (or input is tiny), stdin passes through
+                                verbatim — never breaks the pipe.
+  crush stats                   Totals + ratios from the pipe-wrap stats log
+                                (~/.greprag/crush-stats.jsonl — one record per
+                                --stats invocation; the PreToolUse pipe-wrap
+                                hook passes --stats on every rewrite).
+  retrieve <hash>               Print a CCR-stashed original back to stdout.
+                                Store: ~/.greprag/ccr.db (override GREPRAG_CCR_DB).
+
+Archive (governed compact — lossless PNG snapshot of the pre-compact transcript):
+  archive render --transcript <path> [--out-dir <dir>] [--session <8hex>]
+                                Render the transcript main chain to pixel-font
+                                PNGs (~30K chars/page, pixel round-trip verified)
+                                and index pages in the CCR store. The PreCompact
+                                hook runs this automatically before compaction.
+  archive list [--session <id>] Indexed archives with page -> turn ranges.
+  archive snippet [--session <id>]
+                                Print the documented /compact instruction block
+                                (preserve/compress rules + archive pointer line).
+
+Identity (public handle + vanity alias — real email is auth-only, never a routing address):
+  identity show  |  whoami      Print numeric handle + claimed aliases.
+  identity claim <alias>        Claim a vanity alias (e.g. "travis" → travis@greprag.com).
+  identity release <alias>      Drop a claimed alias.
+
+Skills (opt-in advisor skills bundled with the CLI):
+  skill list                    Show bundled skills and install status
+  skill install <name>          Install a bundled advisor (e.g. discord, content-advisor)
+  skill uninstall <name>        Remove a previously-installed advisor
+
+Project metadata (rename / merge / list):
+  project rename <new-name> [--yes]
+                                Rename the project at cwd (anchor + registry + API
+                                + store metadata). Confirms before writing.
+  project merge --from <X> --into <Y> [--apply] [--name <override>] [--json]
+                                Consolidate one project into another. Defaults to
+                                dry-run. --from/--into accept a UUID or project_name.
+                                --name renames the target in the same step.
+  project list [--json]         Every project under this tenant, with anchor + rows.
+
+Opencode (bridge inbox SSE into a running opencode desktop session — the
+Monitor equivalent, since opencode is turn-based by default):
+  opencode relay --session <id>  [options]
+                                Subscribe to /v1/inbox/stream and inject each
+                                message as a fresh turn in the named opencode
+                                desktop session via /session/{id}/prompt_async.
+                                See \`greprag opencode --help\` for flags.
+
+Other:
+  expand --chunk <id>           Expand a memory cluster (siblings, adjacent, linked)
+  help [--all]                  Show this overview. --all appends every command's
+                                full --help — the complete, always-current guide.
+
+Examples:
+  greprag init                                       # standard repo setup
+  greprag init --global                              # Cowork / unanchored sessions
+  greprag init --all                                 # register every sibling repo for inbox
+  greprag init --all --root C:\\                     # scan a specific directory
+  greprag inbox
+  greprag send "done with migration" --to alice@greprag.com/abc12345
+                                                     # session-targeted (normal)
+  greprag send "deploy approved" --to alice@greprag.com
+                                                     # cold open — alice's front desk
+  greprag send "Bug in auth flow — repro at line 42" --to alice@greprag.com/abc12345 \
+    --file src/auth.ts:42 --artifact commit:abc123
 `.trim();
 /** Groups that ship their own detailed `--help`. `help --all` invokes each one
  *  live and captures its output, so the assembled guide is rendered from the
@@ -1466,125 +1494,127 @@ const HELP_ALL_GROUPS = [
     ['project', project_1.runProject],
     ['skill', skill_1.runSkill],
     ['opencode', opencode],
+    ['crush', crush_1.runCrush],
+    ['archive', archive_1.runArchive],
 ];
-const OPENCODE_HELP = `greprag opencode — bridge greprag inbox into a running opencode desktop
-session, plus a file-watching capture pipeline for episodic memory.
-
-Two subcommands:
-
-  greprag opencode relay    Bridge greprag inbox into a running opencode
-                            desktop session. Single POST to
-                            /session/{id}/prompt_async enqueues a fresh turn;
-                            the desktop app renders it into the conversation
-                            feed via the same SSE channel the engine uses.
-                            Desktop-only by design — the TUI control plane
-                            is deprecated.
-
-                            Session-to-session by default: the relay derives
-                            the greprag 8-hex from the opencode session UUID
-                            and filters the inbox stream to only messages
-                            addressed to THIS session. Use --tenant-wide to
-                            opt into the noisy debug mode (every message in
-                            the tenant, including messages for other
-                            sessions).
-
-  greprag opencode watch    Long-lived SQLite poller on opencode's local DB.
-                            Captures every (user, assistant) turn pair to
-                            greprag memory. Bypasses opencode's event bus
-                            entirely — reads the same rows the engine writes
-                            the moment a turn completes.
-
-opencode is turn-based: it has no built-in "Monitor" tool like Claude Code.
-\`relay\` is the bridge for live inbox delivery. \`watch\` is the capture
-pipeline. Run both, in separate processes, as long-lived siblings.
-
-opencode relay — bridge greprag inbox into a running opencode desktop
-session.
-
-This command subscribes to /v1/inbox/stream (same SSE channel inbox watch
-uses) and POSTs every inbound message to /session/{id}/prompt_async on
-the running opencode server. The receiving desktop session renders the
-injected prompt as a fresh turn in its conversation feed.
-
-Usage:
-  greprag opencode relay --session <opencode-session-id> [options]
-
-Required:
-  --session <id>         opencode session id (UUID). Find via
-                          \`opencode session list\` or the session header in
-                          the opencode UI.
-
-Options:
-  --opencode-url <u>     opencode server base URL.
-                          Default http://127.0.0.1:4096.
-                          Env override: OPENCODE_URL.
-  --project <name>       Filter the inbox stream to one project.
-  --inbox-session <8hex> Filter to one greprag session (8-hex id). Default
-                          is auto-derived from --session (truncateSessionId)
-                          so the relay only sees messages addressed to THIS
-                          opencode session. Pass explicitly to override
-                          (e.g. share one greprag session across multiple
-                          opencode sessions).
-  --tenant-wide          See every message in the tenant's inbox stream,
-                          including messages addressed to other sessions.
-                          Debug flag — noisy, usually wrong.
-  --since <id-or-iso>    Resume cursor.
-  --print                Pretty-print each message to stdout.
-  --dry-run              Resolve + format, do not POST.
-
-Resilience mirrors inbox-watch: exponential backoff, idle timeout,
-cursor-preserving reconnect. Production wraps this in a \`while true\` shell
-loop so process death auto-restarts:
-
-  while true; do greprag opencode relay --session <id>; \\
-    echo "[restart]" >&2; sleep 1; done
-
-Senders reach THIS session by addressing
-\`<handle>@greprag.com/<8hex>\` where <8hex> is the first 8 hex chars of the
-opencode session id (or pass \`--from-session <8hex>\` so the recipient can
-reply back by session without re-discovering it).
-
-
-opencode watch — SQLite-polling turn capture for episodic memory.
-
-opencode persists every message + part as a row in
-  %USERPROFILE%\\.local\\share\\opencode\\opencode.db (SQLite, WAL mode)
-the moment the AI finishes streaming. This command polls that DB every
-1-2s, joins \`message\` to \`session\` to recover the working directory,
-walks up to the greprag anchor, and POSTs the (user, assistant) pair to
-/v1/memory/turn. No event bus. No sidecar auth. No plugin loader.
-
-Why this exists: opencode Desktop's event bus does not reliably emit
-\`message.updated\` for the user's active session, so a plugin hook is
-unreliable for capture. The on-disk DB is the source of truth — it is
-written by the engine itself the moment a turn completes.
-
-Usage:
-  greprag opencode watch [options]
-
-Options:
-  --interval <ms>        Poll interval. Default 1500.
-  --db <path>            Override DB path. Default
-                          %USERPROFILE%\\.local\\share\\opencode\\opencode.db
-  --project <dir>        Only capture turns whose session.directory
-                          resolves to this directory (anchor walk-up
-                          target). Useful when running this once per
-                          worktree.
-  --since <ms>           Resume from this epoch ms. Default reads the
-                          cursor (~/.greprag/opencode-watch.cursor).
-                          On first run, captures every historical turn.
-  --cursor <file>        Override the cursor file path.
-  --reset-cursor         Delete the cursor file before starting. Use
-                          with --since <ms> to re-capture from a point.
-  --json                 Print one JSON object per captured turn to
-                          stdout, instead of human-readable status to
-                          stderr.
-  --dry-run              Print the would-be POST body, do not send.
-
-Run under a long-lived shell loop or as a Windows service:
-
-  while true; do greprag opencode watch; \\
-    echo "[restart]" >&2; sleep 1; done
+const OPENCODE_HELP = `greprag opencode — bridge greprag inbox into a running opencode desktop
+session, plus a file-watching capture pipeline for episodic memory.
+
+Two subcommands:
+
+  greprag opencode relay    Bridge greprag inbox into a running opencode
+                            desktop session. Single POST to
+                            /session/{id}/prompt_async enqueues a fresh turn;
+                            the desktop app renders it into the conversation
+                            feed via the same SSE channel the engine uses.
+                            Desktop-only by design — the TUI control plane
+                            is deprecated.
+
+                            Session-to-session by default: the relay derives
+                            the greprag 8-hex from the opencode session UUID
+                            and filters the inbox stream to only messages
+                            addressed to THIS session. Use --tenant-wide to
+                            opt into the noisy debug mode (every message in
+                            the tenant, including messages for other
+                            sessions).
+
+  greprag opencode watch    Long-lived SQLite poller on opencode's local DB.
+                            Captures every (user, assistant) turn pair to
+                            greprag memory. Bypasses opencode's event bus
+                            entirely — reads the same rows the engine writes
+                            the moment a turn completes.
+
+opencode is turn-based: it has no built-in "Monitor" tool like Claude Code.
+\`relay\` is the bridge for live inbox delivery. \`watch\` is the capture
+pipeline. Run both, in separate processes, as long-lived siblings.
+
+opencode relay — bridge greprag inbox into a running opencode desktop
+session.
+
+This command subscribes to /v1/inbox/stream (same SSE channel inbox watch
+uses) and POSTs every inbound message to /session/{id}/prompt_async on
+the running opencode server. The receiving desktop session renders the
+injected prompt as a fresh turn in its conversation feed.
+
+Usage:
+  greprag opencode relay --session <opencode-session-id> [options]
+
+Required:
+  --session <id>         opencode session id (UUID). Find via
+                          \`opencode session list\` or the session header in
+                          the opencode UI.
+
+Options:
+  --opencode-url <u>     opencode server base URL.
+                          Default http://127.0.0.1:4096.
+                          Env override: OPENCODE_URL.
+  --project <name>       Filter the inbox stream to one project.
+  --inbox-session <8hex> Filter to one greprag session (8-hex id). Default
+                          is auto-derived from --session (truncateSessionId)
+                          so the relay only sees messages addressed to THIS
+                          opencode session. Pass explicitly to override
+                          (e.g. share one greprag session across multiple
+                          opencode sessions).
+  --tenant-wide          See every message in the tenant's inbox stream,
+                          including messages addressed to other sessions.
+                          Debug flag — noisy, usually wrong.
+  --since <id-or-iso>    Resume cursor.
+  --print                Pretty-print each message to stdout.
+  --dry-run              Resolve + format, do not POST.
+
+Resilience mirrors inbox-watch: exponential backoff, idle timeout,
+cursor-preserving reconnect. Production wraps this in a \`while true\` shell
+loop so process death auto-restarts:
+
+  while true; do greprag opencode relay --session <id>; \\
+    echo "[restart]" >&2; sleep 1; done
+
+Senders reach THIS session by addressing
+\`<handle>@greprag.com/<8hex>\` where <8hex> is the first 8 hex chars of the
+opencode session id (or pass \`--from-session <8hex>\` so the recipient can
+reply back by session without re-discovering it).
+
+
+opencode watch — SQLite-polling turn capture for episodic memory.
+
+opencode persists every message + part as a row in
+  %USERPROFILE%\\.local\\share\\opencode\\opencode.db (SQLite, WAL mode)
+the moment the AI finishes streaming. This command polls that DB every
+1-2s, joins \`message\` to \`session\` to recover the working directory,
+walks up to the greprag anchor, and POSTs the (user, assistant) pair to
+/v1/memory/turn. No event bus. No sidecar auth. No plugin loader.
+
+Why this exists: opencode Desktop's event bus does not reliably emit
+\`message.updated\` for the user's active session, so a plugin hook is
+unreliable for capture. The on-disk DB is the source of truth — it is
+written by the engine itself the moment a turn completes.
+
+Usage:
+  greprag opencode watch [options]
+
+Options:
+  --interval <ms>        Poll interval. Default 1500.
+  --db <path>            Override DB path. Default
+                          %USERPROFILE%\\.local\\share\\opencode\\opencode.db
+  --project <dir>        Only capture turns whose session.directory
+                          resolves to this directory (anchor walk-up
+                          target). Useful when running this once per
+                          worktree.
+  --since <ms>           Resume from this epoch ms. Default reads the
+                          cursor (~/.greprag/opencode-watch.cursor).
+                          On first run, captures every historical turn.
+  --cursor <file>        Override the cursor file path.
+  --reset-cursor         Delete the cursor file before starting. Use
+                          with --since <ms> to re-capture from a point.
+  --json                 Print one JSON object per captured turn to
+                          stdout, instead of human-readable status to
+                          stderr.
+  --dry-run              Print the would-be POST body, do not send.
+
+Run under a long-lived shell loop or as a Windows service:
+
+  while true; do greprag opencode watch; \\
+    echo "[restart]" >&2; sleep 1; done
 `;
 /** greprag opencode <subcommand> — TUI bridge + capture watcher. */
 async function opencode(args) {
@@ -1708,7 +1738,15 @@ async function main() {
         case 'smell': return (0, fix_1.runFix)(['log', ...subArgs]); // field shortcut for `fix log`
         case 'memory': return (0, memory_1.runMemory)(subArgs);
         case 'odyssey': return (0, memory_1.runMemory)(subArgs); // silent alias kept for v5.8.0-era scripts; brand stays on marketing surfaces only.
+        case 'crush':
+            // `crush stats` is the savings readout; everything else is the stdin pipe.
+            if (subArgs[0] === 'stats')
+                return (0, crush_stats_1.runCrushStats)(subArgs.slice(1));
+            return (0, crush_1.runCrush)(subArgs);
+        case 'retrieve': return (0, crush_1.runRetrieve)(subArgs);
+        case 'archive': return (0, archive_1.runArchive)(subArgs); // governed compact: PNG transcript archive
         case 'checkpoint': return (0, checkpoint_1.runCheckpoint)(subArgs);
+        case 'context': return (0, context_governor_1.runContext)(subArgs); // context-size governor: status readout
         case 'identity': return (0, identity_1.runIdentity)(subArgs);
         case 'whoami': return (0, identity_1.runIdentity)(['show']);
         case 'skill': return (0, skill_1.runSkill)(subArgs);