imprnt 0.1.4-edge.100 → 0.1.4-edge.103

package/CLAUDE.md

@@ -194,7 +194,7 @@ Core is the vault + `ingest → recall → check`. Everything else (a task-mirro
 - **`recall` searches `vault/` only, forever.** Sibling dirs + `raw/` are outside the corpus by construction. A plugin surfaces into search only by **proposing one low-frequency summary note** (the escape hatch).
 - **Behavior plugins** are a separate class: ship a fixed-size fragment the **user wires into the agent's system prompt**. The vault never auto-injects. Remove = delete the wire-in. No referee for conflicting fragments, the user owns composition. (The old system imposed. imprnt composes.)
 - **Harness plugins** are the third class: they customize Claude Code itself, never the vault (timemachine's PreToolUse snapshot hook, the statusline, a skill). The same plugin folder doubles as a **native Claude Code plugin** (`.claude-plugin/plugin.json` + `hooks/` + `skills/`, Anthropic's format) and/or carries **`imp-settings.json`** (the settings keys Claude only takes via config, e.g. `statusLine`, with `${PLUGIN_DIR}` as the plugin's absolute dir). `imp` carries enabled ones into every claude session it launches: one `--plugin-dir` per native plugin + one merged `--settings` (gemini has no host for claude harness plugins, so `imp --gemini` skips them with a warning). Stock `claude` stays stock, nothing is ever written to settings files, `plugin rm` undoes everything.
-- **Capability modules** are the one bend in "share nothing": a module may *provide* a capability another *consumes* (the session-host brokers an authed-session token to the kleinanzeigen watcher). Bounded so it can't re-bloat core: the consumer copies a tiny client (`sessionToken(site) -> string | null`) over a **localhost broker**, never imports the provider or reads its folder. The invariant that replaces "no cross-plugin reads": **removing a provider degrades a consumer gracefully** (`null` = host down, fall back), never breaks it. This is a third contact surface (vault . agent-context . broker), fenced like the sync edge: deterministic, answer-on-request, auditable (token fingerprint, never the token), never resident. The litmus extends: zero core edits to add/remove a *provider* too, because there is no capability registry in core. Credential-holding modules follow the auth finding: human login once, read-only attach, never copy a profile, never automate the password. Full rules: `plugins/README.md`.
+- **Capability modules** are the one bend in "share nothing": a module may *provide* a capability another *consumes* (a warm-browser module brokering an authed-session token to a watcher that needs a login is the shape). Bounded so it can't re-bloat core: the consumer copies a tiny client (`sessionToken(site) -> string | null`) over a **localhost broker**, never imports the provider or reads its folder. The invariant that replaces "no cross-plugin reads": **removing a provider degrades a consumer gracefully** (`null` = host down, fall back), never breaks it. This is a third contact surface (vault . agent-context . broker), fenced like the sync edge: deterministic, answer-on-request, auditable (token fingerprint, never the token), never resident. The litmus extends: zero core edits to add/remove a *provider* too, because there is no capability registry in core. Credential-holding modules follow the auth finding: human login once, read-only attach, never copy a profile, never automate the password. Full rules: `plugins/README.md`.
 - **Secrets are env vars at the plugin's edge.** A plugin calling an external service reads its key from an env var named in its README and fails loud when missing. Keys never land in the vault, the plugin folder, or anything committed. No central secret store.
 - **Commands only, no forced daemon.** The user schedules sync. Install/remove is manual (README `## Install` / `## Remove` + `rm -rf`), no registry.
 - **Core ↔ plugin contact = exactly four convention-based contact points**, all dumb and uniform: `imprnt check --all` globs `plugins/*/check.js` (each plugin's built artifact, or `check.mjs`, with `.js` winning when both exist), runs each with `node`, reads **exit code only**, forwards stdout verbatim, never parses plugin output. `imprnt ingest --apply` files staged notes the plugins drop in `plugins/*/proposed/`. `imp` turns the enable list into launch flags (`--plugin-dir` per native plugin + one merged `--settings`) for the session it spawns. `imprnt <module> <command>` dispatches to `plugins/<module>/<module>.js` or `<module>.mjs` (stdio inherited, exit code passed through, a built-in subcommand always wins, zero per-module logic). All discover by filename/dir convention, never by import, never by naming a specific plugin. Fence: core may provide read-only *aggregation* helpers, never write/orchestration. (Not k8s liveness/readiness. Nothing runs, so the only health question is "is the data sound", which is what `check` answers.)

package/dist/cli.js

@@ -2202,7 +2202,7 @@ function bestPassages(absPath, n) {
   const out = paras.filter((p) => keep.has(p));
   return out.length ? out : paras.slice(0, n);
 }
-var args2, vault2, limit = 15, gap = 0, passages = 0, proximity = false, coverage = false, stem = false, positional2, query, vocab, MAX_SYNONYM_NGRAM, STOPWORDS, tokenize = (text2) => {
+var args2, vault2, limit = 15, gap = 0, passages = 0, proximity = true, coverage = true, stem = true, positional2, query, vocab, MAX_SYNONYM_NGRAM, STOPWORDS, tokenize = (text2) => {
   const raw = text2.normalize("NFC").toLowerCase().replace(/['’]/gu, "").split(/[^\p{L}\p{N}]+/u).filter(Boolean);
   return stem ? raw.map(stemWord) : raw;
 }, phraseSynonymTokens = (q) => {
@@ -2255,10 +2255,16 @@ var init_recall = __esm(() => {
       limit = n;
     } else if (args2[i] === "--proximity") {
       proximity = true;
+    } else if (args2[i] === "--no-proximity") {
+      proximity = false;
     } else if (args2[i] === "--coverage") {
       coverage = true;
+    } else if (args2[i] === "--no-coverage") {
+      coverage = false;
     } else if (args2[i] === "--stem") {
       stem = true;
+    } else if (args2[i] === "--no-stem") {
+      stem = false;
     } else if (args2[i] === "--passages") {
       const tok = args2[++i];
       if (tok === undefined || !/^[0-9]+$/.test(tok)) {
@@ -4070,7 +4076,7 @@ engine (same subcommands under \`imp\` or \`imprnt\`):
   imprnt global rm <name> [--purge]        disable a global module; --purge deletes the global copy
   imprnt global list                       show globally-enabled modules
   imprnt vault list|archive|restore        the vault as its own object — outlives any agent
-  imprnt <module> <command> [...]          run an installed module's command (e.g. \`imprnt session-host login\`, \`imprnt kleinanzeigen sync\`) — no \`node\` paths
+  imprnt <module> <command> [...]          run an installed module's command (e.g. \`imprnt kopeika sync\`) — no \`node\` paths
 
 layout: entities (people · orgs · holdings) · domains (identity · health · finances · work · life · projects) · forms (events · mistakes)
 the vault is plain markdown. an agent greps it directly — no MCP, no DB.`);

package/dist/imp.js

@@ -2202,7 +2202,7 @@ function bestPassages(absPath, n) {
   const out = paras.filter((p) => keep.has(p));
   return out.length ? out : paras.slice(0, n);
 }
-var args2, vault2, limit = 15, gap = 0, passages = 0, proximity = false, coverage = false, stem = false, positional2, query, vocab, MAX_SYNONYM_NGRAM, STOPWORDS, tokenize = (text2) => {
+var args2, vault2, limit = 15, gap = 0, passages = 0, proximity = true, coverage = true, stem = true, positional2, query, vocab, MAX_SYNONYM_NGRAM, STOPWORDS, tokenize = (text2) => {
   const raw = text2.normalize("NFC").toLowerCase().replace(/['’]/gu, "").split(/[^\p{L}\p{N}]+/u).filter(Boolean);
   return stem ? raw.map(stemWord) : raw;
 }, phraseSynonymTokens = (q) => {
@@ -2255,10 +2255,16 @@ var init_recall = __esm(() => {
       limit = n;
     } else if (args2[i] === "--proximity") {
       proximity = true;
+    } else if (args2[i] === "--no-proximity") {
+      proximity = false;
     } else if (args2[i] === "--coverage") {
       coverage = true;
+    } else if (args2[i] === "--no-coverage") {
+      coverage = false;
     } else if (args2[i] === "--stem") {
       stem = true;
+    } else if (args2[i] === "--no-stem") {
+      stem = false;
     } else if (args2[i] === "--passages") {
       const tok = args2[++i];
       if (tok === undefined || !/^[0-9]+$/.test(tok)) {
@@ -4070,7 +4076,7 @@ engine (same subcommands under \`imp\` or \`imprnt\`):
   imprnt global rm <name> [--purge]        disable a global module; --purge deletes the global copy
   imprnt global list                       show globally-enabled modules
   imprnt vault list|archive|restore        the vault as its own object — outlives any agent
-  imprnt <module> <command> [...]          run an installed module's command (e.g. \`imprnt session-host login\`, \`imprnt kleinanzeigen sync\`) — no \`node\` paths
+  imprnt <module> <command> [...]          run an installed module's command (e.g. \`imprnt kopeika sync\`) — no \`node\` paths
 
 layout: entities (people · orgs · holdings) · domains (identity · health · finances · work · life · projects) · forms (events · mistakes)
 the vault is plain markdown. an agent greps it directly — no MCP, no DB.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "imprnt",
-  "version": "0.1.4-edge.100",
+  "version": "0.1.4-edge.103",
   "stable": true,
   "description": "Deterministic-first, plain-markdown knowledge vault. Code does the bulk transform. The LLM only touches the irreducibly-semantic 20%. Native grep plus BM25 retrieval, zero MCP on the vault.",
   "type": "module",