klypix-mcp 1.109.0 → 1.110.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "klypix-mcp",
-  "version": "1.109.0",
+  "version": "1.110.0",
   "mcpName": "io.github.dahshanlabs/klypix-mcp",
   "description": "Shared project memory for Claude Code, Codex and Cursor: decisions, corrections, overlap warnings.",
   "type": "module",
@@ -100,7 +100,7 @@
     "bench": "node bin/klypix-mcp.mjs bench",
     "test:bench": "node test/bench.mjs",
     "pretest": "node test/publish-workflow.mjs",
-    "test": "node test/publish-verdict.mjs && node test/npx-owned-names.mjs && node test/project-graph.mjs && node test/project-map-cli.mjs && node test/mcp-auto-update.mjs && node test/mcp-supervisor.mjs && node test/runtime-inspector.mjs && node test/codex-hooks.mjs && node test/request-identity.mjs && node test/session-identity-core.mjs && node test/agent-presence.mjs && node test/message-delivery-v3.mjs && node test/claude-message-delivery-v3.mjs && node test/session-mailbox.mjs && node test/session-reopen.mjs && node test/session-handoff.mjs && node test/continuity-after-kill.mjs && node test/handoff-freshness.mjs && node test/handoff-hosts.mjs && node test/lock-notes.mjs && node test/whose-classify.mjs && node test/whose-ledger.mjs && node test/whose-rescue.mjs && node test/whose-hook.mjs && node test/live-projection.mjs && node test/lane-write-retry.mjs && node test/result-reconcile.mjs && node test/evidence-publication-gate.mjs && node test/release-evidence-cli.mjs && node test/intent-guard.mjs && node test/git-capture-install.mjs && node test/brain-history.mjs && node test/brain-graveyard.mjs && node test/archived-visibility.mjs && node test/finding-routing.mjs && node test/finding-routing-hook.mjs && node test/presence-relay.mjs && node test/network-bridge.mjs && node test/brain-rules.mjs && node test/rule-approval.mjs && node test/rule-approval-stdio.mjs && node test/brain-recall.mjs && node test/install-version.mjs && node test/install-rename-backoff.mjs && node test/project-binding-rebind.mjs && node test/context-gateway.mjs && node test/repo-state.mjs && node test/released-tag-guard.mjs && node test/conformance.mjs && node test/brain-doctor.mjs && node test/version-currency.mjs && node test/ship-capture.mjs && node test/capture-gap.mjs && node test/lane-message.mjs && node test/brain-quality.mjs && node test/brain-connect-orphans.mjs && node test/orphan-gardener.mjs && node test/brief-and-recall.mjs && node test/guard-cards.mjs && node test/layout-cluster.mjs && node test/brain-ask.mjs && node test/brain-ask-words.mjs && node test/retrieval-fusion.mjs && node test/eval-retrieval.mjs && node test/field-report-2026-07-04.mjs && node test/autoprop.mjs && node test/overlay-recency-2026-07-12.mjs && node test/brain-challenge.mjs && node test/brain-lens.mjs && node test/brain-kind.mjs && node test/rule-drafts.mjs && node test/claim-engine.mjs && node test/partial-notes.mjs && node test/lifecycle-prefix.mjs && node test/close-link-safety.mjs && node test/resolve-ledger.mjs && node test/plan-fulfillment.mjs && node test/arrange-receipts.mjs && node test/skill-staleness.mjs && node test/canvas-view.mjs && node test/status-completeness.mjs && node test/semantic-security.mjs && node test/semantic-gate.mjs && node test/memory-runtime.mjs && node test/semantic-cache.mjs && node test/semantic-preparation.mjs && node test/semantic-hash-parity.mjs && node test/enrichment.mjs && node test/provenance.mjs && node test/confirm-trail.mjs && node test/hook-fallback.mjs && node test/eval-hook-lane.mjs && node test/hook-unified-lane.mjs && node test/decay-status.mjs && node test/decay-hook.mjs && node test/marker-suffix-grammar.mjs && node test/marker-after-colon.mjs && node test/evidence-anchors.mjs && node test/brain-evidence.mjs && node test/crowd-safeguards.mjs && node test/presence-visibility.mjs && node test/undeclared-active.mjs && node test/presence-liveness.mjs && node test/observed-scope.mjs && node test/overlap-tiers.mjs && node test/coordination-bench.mjs && node test/release-lease.mjs && node test/release-reconcile.mjs && node test/release-ancestry.mjs && node test/release-claim-join.mjs && node test/release-claims.mjs && node test/release-handshake.mjs && node test/completion-guard.mjs && node test/results-not-manifests.mjs && node test/merge-brains.mjs && node test/merge-readings.mjs && node test/revival-map.mjs && node test/merge-scale.mjs && node test/concurrent-writes.mjs && node test/lock-interop.mjs && node test/capture-write-failure.mjs && node test/a2a-smoke.mjs && node test/one-command-setup.mjs && node test/cli-args.mjs && node test/format-guard.mjs && node test/canvas-groups.mjs && node test/git-tools.mjs && node test/link-compat.mjs && node test/uninstall.mjs && node test/current-guidance.mjs && node test/current-first.mjs && node test/status-shape.mjs && node test/status-hook.mjs && node test/read-canvas-saved-readings.mjs && node test/document-readings.mjs && node test/open-lease.mjs && node test/agent-card-style.mjs && node test/tool-schema-freeze.mjs && node test/small-identity.mjs && node test/app-lease-vectors.mjs && node test/app-tools-stdio.mjs && node test/card-contents-files.mjs && node test/video-prep.mjs && node test/codex-app-table.mjs && node test/plugin-mode.mjs && node test/app-bridge-vectors.mjs && node test/app-bridge-client.mjs && node test/app-tools-static.mjs && node test/app-tools-stdio-live.mjs",
+    "test": "node test/publish-verdict.mjs && node test/npx-owned-names.mjs && node test/project-graph.mjs && node test/project-map-cli.mjs && node test/mcp-auto-update.mjs && node test/mcp-supervisor.mjs && node test/runtime-inspector.mjs && node test/codex-hooks.mjs && node test/request-identity.mjs && node test/session-identity-core.mjs && node test/agent-presence.mjs && node test/message-delivery-v3.mjs && node test/claude-message-delivery-v3.mjs && node test/session-mailbox.mjs && node test/session-reopen.mjs && node test/session-handoff.mjs && node test/continuity-after-kill.mjs && node test/quick-restart.mjs && node test/codex-rollout-asks.mjs && node test/handoff-freshness.mjs && node test/handoff-hosts.mjs && node test/lock-notes.mjs && node test/whose-classify.mjs && node test/whose-ledger.mjs && node test/whose-rescue.mjs && node test/whose-hook.mjs && node test/live-projection.mjs && node test/live-scope.mjs && node test/lane-write-retry.mjs && node test/result-reconcile.mjs && node test/evidence-publication-gate.mjs && node test/release-evidence-cli.mjs && node test/intent-guard.mjs && node test/git-capture-install.mjs && node test/brain-history.mjs && node test/brain-graveyard.mjs && node test/archived-visibility.mjs && node test/finding-routing.mjs && node test/finding-routing-hook.mjs && node test/presence-relay.mjs && node test/network-bridge.mjs && node test/brain-rules.mjs && node test/rule-approval.mjs && node test/rule-approval-stdio.mjs && node test/brain-recall.mjs && node test/install-version.mjs && node test/install-rename-backoff.mjs && node test/project-binding-rebind.mjs && node test/context-gateway.mjs && node test/repo-state.mjs && node test/released-tag-guard.mjs && node test/conformance.mjs && node test/brain-doctor.mjs && node test/version-currency.mjs && node test/ship-capture.mjs && node test/capture-gap.mjs && node test/lane-message.mjs && node test/brain-quality.mjs && node test/brain-connect-orphans.mjs && node test/orphan-gardener.mjs && node test/brief-and-recall.mjs && node test/guard-cards.mjs && node test/layout-cluster.mjs && node test/brain-ask.mjs && node test/brain-ask-words.mjs && node test/retrieval-fusion.mjs && node test/eval-retrieval.mjs && node test/field-report-2026-07-04.mjs && node test/autoprop.mjs && node test/overlay-recency-2026-07-12.mjs && node test/brain-challenge.mjs && node test/brain-lens.mjs && node test/brain-kind.mjs && node test/rule-drafts.mjs && node test/claim-engine.mjs && node test/partial-notes.mjs && node test/lifecycle-prefix.mjs && node test/close-link-safety.mjs && node test/resolve-ledger.mjs && node test/plan-fulfillment.mjs && node test/arrange-receipts.mjs && node test/skill-staleness.mjs && node test/canvas-view.mjs && node test/status-completeness.mjs && node test/semantic-security.mjs && node test/semantic-gate.mjs && node test/memory-runtime.mjs && node test/semantic-cache.mjs && node test/semantic-preparation.mjs && node test/semantic-hash-parity.mjs && node test/enrichment.mjs && node test/provenance.mjs && node test/confirm-trail.mjs && node test/hook-fallback.mjs && node test/eval-hook-lane.mjs && node test/hook-unified-lane.mjs && node test/decay-status.mjs && node test/decay-hook.mjs && node test/marker-suffix-grammar.mjs && node test/marker-after-colon.mjs && node test/evidence-anchors.mjs && node test/brain-evidence.mjs && node test/crowd-safeguards.mjs && node test/presence-visibility.mjs && node test/undeclared-active.mjs && node test/presence-liveness.mjs && node test/observed-scope.mjs && node test/overlap-tiers.mjs && node test/coordination-bench.mjs && node test/release-lease.mjs && node test/release-reconcile.mjs && node test/release-ancestry.mjs && node test/release-claim-join.mjs && node test/release-claims.mjs && node test/release-handshake.mjs && node test/completion-guard.mjs && node test/results-not-manifests.mjs && node test/merge-brains.mjs && node test/merge-readings.mjs && node test/revival-map.mjs && node test/merge-scale.mjs && node test/concurrent-writes.mjs && node test/lock-interop.mjs && node test/capture-write-failure.mjs && node test/a2a-smoke.mjs && node test/one-command-setup.mjs && node test/cli-args.mjs && node test/format-guard.mjs && node test/canvas-groups.mjs && node test/git-tools.mjs && node test/link-compat.mjs && node test/uninstall.mjs && node test/current-guidance.mjs && node test/current-first.mjs && node test/status-shape.mjs && node test/status-hook.mjs && node test/read-canvas-saved-readings.mjs && node test/document-readings.mjs && node test/open-lease.mjs && node test/agent-card-style.mjs && node test/tool-schema-freeze.mjs && node test/small-identity.mjs && node test/app-lease-vectors.mjs && node test/app-tools-stdio.mjs && node test/card-contents-files.mjs && node test/video-prep.mjs && node test/codex-app-table.mjs && node test/plugin-mode.mjs && node test/app-bridge-vectors.mjs && node test/app-bridge-client.mjs && node test/app-tools-static.mjs && node test/app-tools-stdio-live.mjs",
     "test:memory": "node test/memory-runtime.mjs",
     "test:memory:soak": "node --expose-gc test/memory-soak.mjs",
     "runtime": "node bin/klypix-runtime.mjs",

package/src/agent-presence.mjs

@@ -113,8 +113,50 @@ export function isProcessAlive(pid) {
   }
 }
 
+// ── Quick restart (round-4 fix, continuity test 2026-10-30) ─────────────────
+// The grace above made a session killed with its process tree (taskkill /T,
+// a crash, a closed terminal) read as LIVE for 90 s (Claude, host-declared
+// pid) or for the full TTL (Codex, guessed pid only). A new session started
+// 30 s after the kill saw a running peer, was told to leave its files alone,
+// and stood down. The rule below needs no grace because it does not trust one
+// pid: a row is stopped at once only when EVERY process that could still be
+// that session is provably gone on this machine —
+//   · the host itself: the host-declared pid (CLAUDE_PID / KLYPIX_HOST_PID),
+//     and/or `hostTreePid`, the process that launched KLYPIX's MCP supervisor
+//     (the host, or a wrapper the host keeps alive), recorded by the worker;
+//   · KLYPIX's own long-lived writer for the row: the MCP channel owner (an
+//     exact self-recorded pid, written on every heartbeat), on a fresh channel;
+//   · the row's hostPid whatever its source.
+// At least one host pid and the MCP owner are required, so a wrongly-declared
+// host pid (the case the grace guards) can never sweep a session whose MCP
+// worker is still running, and a row with only a lifecycle hook (no MCP
+// owner) or only guessed pids from an older build keeps today's rules.
+// "Cannot say" from any probe (null) keeps the row: a false "stopped" frees a
+// live session's files, which is worse than a false "live".
+// PARITY: global-brain-hook.mjs keeps a verbatim twin (isDeadHostTreeRow).
+export const DEAD_TREE_SETTLE_MS = 5 * 1000;
+const pidOf = (value) => { const n = Number(value); return Number.isInteger(n) && n > 0 ? n : null; };
+export function isDeadHostTreeRow(session, now = Date.now(), probe = isProcessAlive) {
+  if (!session || (session.via === 'cloud' || session.via === 'network')) return false;
+  if (!session.machine || String(session.machine) !== String(MACHINE_ID)) return false;
+  if (now - Number(session.lastSeen || 0) < DEAD_TREE_SETTLE_MS) return false;
+  const host = [];
+  if (String(session.hostPidSource || '') === 'env' && pidOf(session.hostPid)) host.push(pidOf(session.hostPid));
+  if (pidOf(session.hostTreePid)) host.push(pidOf(session.hostTreePid));
+  if (!host.length) return false;
+  const seen = session.channelSeen && typeof session.channelSeen === 'object' && !Array.isArray(session.channelSeen)
+    ? Number(session.channelSeen.mcp) : NaN;
+  if (!Number.isFinite(seen) || now - seen >= MCP_SESSION_FRESH_MS) return false;
+  const owner = pidOf(session.channelOwners && typeof session.channelOwners === 'object' ? session.channelOwners.mcp : null);
+  if (!owner) return false;
+  const pids = [...new Set([...host, owner, pidOf(session.hostPid)].filter(Boolean))];
+  if (pids.length < 2) return false;
+  return pids.every((pid) => probe(pid) === false);
+}
+
 export function isDeadHostRow(session, now = Date.now(), probe = isProcessAlive) {
   if (!session || (session.via === 'cloud' || session.via === 'network')) return false;
+  if (isDeadHostTreeRow(session, now, probe)) return true;
   if (String(session.hostPidSource || '') !== 'env') return false;
   if (!session.machine || String(session.machine) !== String(MACHINE_ID)) return false;
   if (now - Number(session.lastSeen || 0) < DEAD_HOST_GRACE_MS) return false;
@@ -649,6 +691,12 @@ export function normalizeWork(raw) {
   // 1.103.0: the card at handoffCardId was DRAFTED BY KLYPIX from this record
   // (the session never wrote one) — every renderer says so.
   if (raw.handoffAuto === true) out.handoffAuto = true;
+  // Round-4 fix: a hookless Codex session records no prompt; its asks (and
+  // last words) are recovered from its own rollout file once it has stopped.
+  // `asksSource` says so; `rolloutTriedAt` keeps a missing rollout from
+  // being searched for again on every listing.
+  if (raw.asksSource === 'codex-rollout') out.asksSource = 'codex-rollout';
+  if (ms(raw.rolloutTriedAt)) out.rolloutTriedAt = ms(raw.rolloutTriedAt);
   return Object.keys(out).length ? out : null;
 }
 export function mergeWork(previous, patch) {
@@ -1155,6 +1203,10 @@ export function upsertSession({
   cwd = null,
   hostPid = null,
   hostPidSource = null,
+  // The process that launched KLYPIX's MCP supervisor (round-4 fix): the host
+  // or a wrapper it keeps alive. Read only by isDeadHostTreeRow, together with
+  // the MCP owner; never identity.
+  hostTreePid = null,
   logicalSessionId = null,
   identitySource = null,
   aliases,
@@ -1314,6 +1366,7 @@ export function upsertSession({
       // Host-process correlation is diagnostic topology only. A desktop parent
       // can own many chats, so hostPid must never imply identity or deduping.
       hostPid: Number(hostPid) || previous.hostPid || null,
+      hostTreePid: pidOf(hostTreePid) || pidOf(previous.hostTreePid) || null,
       // Provenance of the pid decides what it may be used for: 'env' (declared
       // by the host itself, safe to liveness-probe) vs 'ppid' (a best-effort
       // parent guess, correlation only). ADDITIVE — absent means unknown, and
@@ -2100,6 +2153,7 @@ export function rotateEndedSessionIdentity({
   cwd = null,
   hostPid = null,
   hostPidSource = null,
+  hostTreePid = null,
   identitySource = 'mcp-request',
   home,
   now = Date.now(),
@@ -2158,6 +2212,7 @@ export function rotateEndedSessionIdentity({
       deliveryReachability: sessionDeliveryReachability({ channels: Object.keys(channelSeen), transport }),
       cwd: cwd ? path.resolve(cwd) : (existing?.cwd || path.dirname(brainPath)),
       hostPid: Number(hostPid) || existing?.hostPid || null,
+      hostTreePid: pidOf(hostTreePid) || pidOf(existing?.hostTreePid) || null,
       hostPidSource: (Number(hostPid) && hostPidSource) ? String(hostPidSource).slice(0, 16)
         : existing?.hostPidSource || null,
       logicalSessionId: toKey,
@@ -2204,6 +2259,7 @@ export function switchMcpSessionIdentity({
   cwd = null,
   hostPid = null,
   hostPidSource = null,
+  hostTreePid = null,
   identitySource = 'mcp-request',
   home,
   now = Date.now(),
@@ -2302,6 +2358,7 @@ export function switchMcpSessionIdentity({
       deliveryReachability: sessionDeliveryReachability({ channels: Object.keys(channelSeen), transport }),
       cwd: cwd ? path.resolve(cwd) : (existing?.cwd || path.dirname(brainPath)),
       hostPid: Number(hostPid) || existing?.hostPid || null,
+      hostTreePid: pidOf(hostTreePid) || pidOf(existing?.hostTreePid) || null,
       hostPidSource: (Number(hostPid) && hostPidSource) ? String(hostPidSource).slice(0, 16)
         : existing?.hostPidSource || null,
       logicalSessionId: toKey,
@@ -3196,6 +3253,8 @@ export function listUnfinishedWork({ brainPath, home, now = Date.now(), selfId =
       // 1.109: every prompt it was given (newest last, with line breaks) and
       // whether it was cut off mid-reply — "what is left" lives in these.
       asks: Array.isArray(work.asks) ? work.asks : (work.lastPrompt ? [{ text: work.lastPrompt }] : []),
+      asksSource: work.asksSource || null,
+      rolloutTriedAt: work.rolloutTriedAt || null,
       promptAt: work.promptAt || null,
       cutOff: workCutOff(work),
       lastWords: work.lastWords || '',

package/src/codex-brain-hook.mjs

@@ -22,6 +22,7 @@ import {
 } from './agent-presence.mjs';
 import { recordCodexHookExecution } from './codex-hooks.mjs';
 import { opBrainTaskContext } from './klypix-core.mjs';
+import { recoverCodexRolloutRecords } from './session-handoff.mjs';
 // Namespace import (already in-process via the klypix-core chain, so zero added
 // load cost) so a bundle whose klypix-format predates classifyDecay degrades
 // gracefully — a named import of a missing export would kill the whole hook.
@@ -465,6 +466,8 @@ const CONTINUE_PROMPT_RE = /\b(continue|resume|pick (it |this |that )?up|carry o
 const HANDOFF_ASK_PROMPT_RE = /\b(hand[- ]?off|hand (it|this|the work) (over|off)|before (we|i|you) (hit|reach|approach|run out of) (the )?(limit|context|window|quota)|(context|usage|token|rate) (limit|window|quota)|out of context|switch(ing)? to (claude|another (agent|session|tool)))\b/i;
 const CODEX_HANDOFF_HINT = '🤝 KLYPIX: to hand this session\'s work to the next one (any agent — Claude Code or Codex), call brain_handoff with the task, what is done, what is next, the files and how to verify; the next session on this project sees it at its first brain_sync and takes it with {action:"take"}. Your last reply and commits are recorded automatically at each turn end regardless — but a deliberate handoff says what you know. Never make the human paste a summary into the next session.';
 function unfinishedWorkBlock(brainPath, sessionId) {
+  // Round-4 fix: a stopped hookless Codex session's prompts, from its rollout.
+  try { recoverCodexRolloutRecords({ brainPath, selfId: sessionId }); } catch { /* courtesy */ }
   try {
     return formatUnfinishedWork(listUnfinishedWork({ brainPath, selfId: sessionId }));
   } catch {
@@ -495,8 +498,9 @@ async function lockNotesBlock(projectDir, brainPath, sessionId, sessions, { budg
 }
 
 // Live projection (1.104.0): the same presence / unfinished / keep-off strings
-// this hook emits, written into CLAUDE.local.md and the Codex global
-// instructions file for the NEXT session of any host (session start and Stop).
+// this hook emits, written into CLAUDE.local.md for the NEXT session (session
+// start and Stop). Never into the machine-wide Codex global file (round-4 fix:
+// a project's section there leaked into Codex sessions in other projects).
 // Dynamic import so a stale deployment no-ops; never throws.
 async function projectLiveSafe({ projectDir, sessions, sessionId, lockNotes = '', unfinished = '' }) {
   try {

package/src/global-brain-hook.mjs

@@ -913,8 +913,32 @@ const isProcessAlive = (pid) => {
         return null;   // unrecognized error — "cannot say", never "dead" (TTL rules)
     }
 };
+// Quick restart (round-4 fix) — VERBATIM twin of agent-presence.mjs
+// isDeadHostTreeRow: stopped at once, with no grace, only when every process
+// that could still be the session is provably gone on this machine (a host pid
+// — declared, or the recorded hostTreePid — AND the fresh MCP channel's owner,
+// AND hostPid whatever its source). "Cannot say" keeps the row.
+const DEAD_TREE_SETTLE_MS = 5 * 1000;
+const pidOfRow = (v) => { const n = Number(v); return Number.isInteger(n) && n > 0 ? n : null; };
+const isDeadHostTreeRow = (s, now) => {
+    if (!s || (s.via === 'cloud' || s.via === 'network')) return false;
+    if (!s.machine || String(s.machine) !== MACHINE_ID) return false;
+    if (now - Number(s.lastSeen || 0) < DEAD_TREE_SETTLE_MS) return false;
+    const host = [];
+    if (String(s.hostPidSource || '') === 'env' && pidOfRow(s.hostPid)) host.push(pidOfRow(s.hostPid));
+    if (pidOfRow(s.hostTreePid)) host.push(pidOfRow(s.hostTreePid));
+    if (!host.length) return false;
+    const seen = s.channelSeen && typeof s.channelSeen === 'object' && !Array.isArray(s.channelSeen) ? Number(s.channelSeen.mcp) : NaN;
+    if (!Number.isFinite(seen) || now - seen >= MCP_SESSION_FRESH_MS) return false;
+    const owner = pidOfRow(s.channelOwners && typeof s.channelOwners === 'object' ? s.channelOwners.mcp : null);
+    if (!owner) return false;
+    const pids = [...new Set([...host, owner, pidOfRow(s.hostPid)].filter(Boolean))];
+    if (pids.length < 2) return false;
+    return pids.every(p => isProcessAlive(p) === false);
+};
 const isDeadHostRow = (s, now) => {
     if (!s || (s.via === 'cloud' || s.via === 'network')) return false;
+    if (isDeadHostTreeRow(s, now)) return true;
     if (String(s.hostPidSource || '') !== 'env') return false;
     if (!s.machine || String(s.machine) !== MACHINE_ID) return false;
     if (now - Number(s.lastSeen || 0) < DEAD_HOST_GRACE_MS) return false;
@@ -1672,6 +1696,17 @@ function unfinishedFooter(sid, { max = 4 } = {}) {
         return '\n\n' + lines.join('\n');
     } catch { return ''; }
 }
+// Round-4 fix: a stopped hookless Codex session records no prompt; its newest
+// prompts (and last words) are read from its own rollout file and stored in
+// the lane under the same redaction and size rules, before the footer below
+// reads the record. Same code as brain_sync (session-handoff.mjs); dynamic so
+// a stale flat deployment no-ops; never throws.
+async function recoverCodexAsks(sid) {
+    try {
+        const lib = await import(new URL('./session-handoff.mjs', import.meta.url).href);
+        if (typeof lib.recoverCodexRolloutRecords === 'function') lib.recoverCodexRolloutRecords({ brainPath: BRAIN, selfId: sid || '' });
+    } catch { /* courtesy */ }
+}
 // 📌 Lock notes (1.102.0, bench S5/S5b): a "do not touch" / hands-off / WIP
 // line in this project's AGENTS.md / CLAUDE.md, checked against the lane's
 // live sessions, local branches and uncommitted changes — at session start,
@@ -1704,8 +1739,10 @@ async function lockNotesFooter(sid, { budgetMs } = {}) {
 // Live projection (1.104.0, bench rounds 2–3): write the machine-local half of
 // the brain's state — who is live on this PC and what they hold, the work a
 // stopped session left, the evidence beside every keep-off note — into the
-// files the hosts load by themselves and never commit (CLAUDE.local.md and the
-// Codex global instructions file), at session start and at every Stop. The
+// project file Claude Code loads by itself and never commits (CLAUDE.local.md;
+// never the machine-wide Codex global file — round-4 fix: a project's section
+// there was read by Codex sessions in other projects), at session start and at
+// every Stop. The
 // inputs are the SAME strings this hook prints, so the file and the context
 // cannot disagree. Dynamic import so a stale flat deployment no-ops; never throws.
 async function writeLiveProjection(sid, { lockText = null, unfinishedText = null, budgetMs } = {}) {
@@ -5361,7 +5398,9 @@ async function promptRetrieve(lib) {
     // ⏸️ unfinished work (session handoff): only on a continue-shaped human
     // prompt — SessionStart already printed it once; 🤝 the deliberate-handoff
     // hint when the human asks for one or says the limit is near.
-    const unfinished = humanText !== null && CONTINUE_RE.test(humanText) ? unfinishedFooter(sid) : '';
+    const wantsUnfinished = humanText !== null && CONTINUE_RE.test(humanText);
+    if (wantsUnfinished) await recoverCodexAsks(sid);
+    const unfinished = wantsUnfinished ? unfinishedFooter(sid) : '';
     const handoffHint = humanText !== null ? handoffAskHint(humanText) : '';
     // ── Unified recall (1.87) — the bench-measured two-lane policy ──────────
     // Ported line-for-line from the 2026-09-28 "unified balanced" bench winner
@@ -6453,6 +6492,7 @@ async function read(lib) {
     // The full brief keeps its order.
     const messages = messageFooter(input.session_id || '', input.transcript_path, lib);
     const lockLine = await lockNotesFooter(input.session_id);
+    await recoverCodexAsks(input.session_id);
     const unfinishedLine = unfinishedFooter(input.session_id);
     const out = ultra + messages + lockLine + versionLine + presenceLine + shipObsLine + gitHookNotice + laneWarning + healLine + draftLine
         + receiptLine
@@ -6460,8 +6500,8 @@ async function read(lib) {
         + unfinishedLine
         + selfCheckFooter() + doctorFooter();
     process.stdout.write(out);
-    // The same lock / unfinished strings go into CLAUDE.local.md and the Codex
-    // global file for the NEXT session of any host (live projection).
+    // The same lock / unfinished strings go into CLAUDE.local.md for the NEXT
+    // session (live projection; never into a machine-wide global file).
     await writeLiveProjection(input.session_id, { lockText: lockLine, unfinishedText: unfinishedLine });
     // Heartbeat: prove the brief actually injected (and how big) so a dead or
     // stale live-copy of the hook stops being a silent no-op.

package/src/klypix-core.mjs

@@ -47,7 +47,7 @@ import {
 } from './app-lease.mjs';
 import { LIMITS, assetBytes, dataUrlImage, fitImage, imageSkipReason, locateAsset, mb } from './card-files.mjs';
 import { findProjectBrain, neutralizeMarkers, postPresenceMessage, resolveMessageTarget, readReleaseLease, listActiveSessions, listKnownSessions, sessionStatusLabel, stampSessionWork, listUnfinishedWork, formatUnfinishedWork, formatCheckoutLines, formatAskLines, resumeCommandFor } from './agent-presence.mjs';
-import { normalizeHandoffInput, renderHandoffCard, handoffMachineField, parseHandoffCard, listOpenHandoffCards, formatHandoffCards, isHandoffLine1, HANDOFF_REASONS, clientWord as handoffClientWord, autoHandoffCandidates, draftHandoffFromWork, captureHandoffTurns, inspectHandoffFreshness, formatHandoffFreshness } from './session-handoff.mjs';
+import { normalizeHandoffInput, renderHandoffCard, handoffMachineField, parseHandoffCard, listOpenHandoffCards, formatHandoffCards, isHandoffLine1, HANDOFF_REASONS, clientWord as handoffClientWord, autoHandoffCandidates, draftHandoffFromWork, captureHandoffTurns, inspectHandoffFreshness, formatHandoffFreshness, recoverCodexRolloutRecords } from './session-handoff.mjs';
 import { collectRepoState, commitsInRange, makeContainmentProbe } from './repo-state.mjs';
 import { normalizeCrowdNote, lineagesFor, formatLineage, openObjections, formatObjections, withholdFilter, independentPass, isPeerOpinionOnTopic } from './crowd-safeguards.mjs';
 
@@ -2513,6 +2513,9 @@ export async function opBrainHandoff({ vault, canvas, action = 'write', from = {
     // is archived. Both are courtesies: neither can fail the list.
     let drafted = [];
     let closed = [];
+    // Round-4 fix: a stopped hookless Codex session's prompts come from its
+    // rollout BEFORE the list, the draft and the block read the record.
+    try { recoverCodexRolloutRecords({ brainPath: file, now, selfId: me.sessionId }); } catch { /* courtesy */ }
     if (autoDraft) { try { drafted = await autoDraftHandoffs({ vault, canvas: file, from: me, now }); } catch { drafted = []; } }
     let struct = null;
     try { ({ struct } = await parseKlypix(fs.readFileSync(file))); } catch (e) { return err(`brain_handoff list failed: ${e.message}`); }
@@ -2600,6 +2603,7 @@ export async function opBrainHandoff({ vault, canvas, action = 'write', from = {
     const stampLine = `${verb}: ${handoffClientWord(me.client)} ${me.sessionId.slice(0, 8)} · ${stamp(now)}${extraNote ? ` · ${extraNote}` : ''}`;
     // ── a lane record (automatic layer) ──
     if (!id && session) {
+      if (action === 'take') { try { recoverCodexRolloutRecords({ brainPath: file, now, sessionId: String(session), includeWorking: true, max: 1 }); } catch { /* courtesy */ } }
       const patch = action === 'take'
         ? { takenBy: { id: me.sessionId, client: me.client, at: now } }
         : { doneAt: now, doneBy: me.sessionId };

package/src/live-projection.mjs

@@ -11,20 +11,29 @@
 // LIVE half — which sessions are on this PC right now and what files they
 // hold, what work a stopped session left, and the evidence beside every
 // keep-off note — reached the agent only through hook output and brain_sync,
-// never through a file. This module writes that half into the two files the
-// hosts load by themselves and never commit:
+// never through a file. This module writes that half into the one
+// project-scoped file a host loads by itself and never commits:
 //
 //   • `CLAUDE.local.md` at the project root — Claude Code loads it beside
 //     CLAUDE.md ("personal project-specific preferences; add to .gitignore");
 //     its HTML comments are stripped before injection, so the markers cost
 //     nothing. KLYPIX keeps it out of git through `.git/info/exclude` (local
 //     to this clone, never a committed file).
-//   • the Codex global instructions file — `~/.codex/AGENTS.override.md` when
-//     the person has one, else `~/.codex/AGENTS.md`, the file klypix-mcp
-//     already manages. Codex loads the global file first, then one file per
-//     directory from the project root down, so a project-level override would
-//     HIDE the project's AGENTS.md: never written. One section per project,
-//     keyed by the project's path, pruned when stale.
+//
+// NOT the Codex global instructions file (round-4 fix, continuity test
+// 2026-10-30). 1.104–1.109 also wrote one section per project into
+// `~/.codex/AGENTS.md` (or AGENTS.override.md). That file is MACHINE-WIDE:
+// every Codex session in every project loads all of it, so a section written
+// for project A was read by Codex sessions in project B, and two of three
+// such sessions first tried to take project A's stopped session. Codex has
+// no project-scoped, uncommitted instruction file (a project-level
+// AGENTS.override.md would hide the project's AGENTS.md), so Codex gets the
+// live half where it is already project-scoped: brain_sync and, when
+// installed, the Codex hooks' output for its own cwd. Every write now REMOVES
+// the live sections earlier versions left in the global file
+// (cleanCodexGlobalLive); nothing project-specific is written there again.
+// The same rule holds for every other global, non-project instruction file
+// (~/.claude/CLAUDE.md, ~/.gemini/GEMINI.md, …): no live state, ever.
 //
 // CONTRACT. Snapshot semantics, said in the text: written at session start and
 // stop, not live, not shared, brain_sync is the live source. Bounded (budget
@@ -218,30 +227,48 @@ export function pruneLiveSections(raw, { keep = null, now = Date.now(), staleMs
   return { text: next, dropped: drop.size };
 }
 
-export function writeCodexGlobal(projectDir, body, { now = Date.now(), home = os.homedir(), file = null } = {}) {
-  const root = path.resolve(projectDir);
-  const target = file || codexGlobalInstructionFile(home);
-  try {
-    const key = liveKey(root);
-    let raw = '';
-    try { raw = fs.readFileSync(target, 'utf8'); } catch { /* fresh */ }
-    const pruned = pruneLiveSections(raw, { keep: key, now });
-    const block = wrapLiveBlock(key, body, { at: now, projectDir: root });
-    const next = upsertLiveBlock(pruned.text, key, block);
-    if (stable(next) === stable(raw)) return { path: target, action: 'unchanged', dropped: pruned.dropped };
-    atomicWrite(target, next);
-    return { path: target, action: raw ? 'updated' : 'created', dropped: pruned.dropped };
-  } catch (e) {
-    return { path: target, action: 'failed', error: e?.message || String(e) };
+/**
+ * Remove every live section from the Codex global instruction files (both
+ * AGENTS.override.md and AGENTS.md: a person may add or drop an override at
+ * any time). Only the klypix-live blocks go; the person's text and the static
+ * klypix-codex managed block stay byte-for-byte. Never throws.
+ */
+export function cleanCodexGlobalLive({ home = os.homedir(), files = null } = {}) {
+  const dir = path.join(process.env.CODEX_HOME || path.join(home, '.codex'));
+  const targets = Array.isArray(files) && files.length ? files : [path.join(dir, 'AGENTS.override.md'), path.join(dir, 'AGENTS.md')];
+  const out = { action: 'unchanged', removed: 0, paths: [] };
+  for (const f of targets) {
+    try {
+      const raw = fs.readFileSync(f, 'utf8');
+      const n = listLiveSections(raw).length;
+      if (!n) continue;
+      atomicWrite(f, stripLiveBlocks(raw));
+      out.removed += n; out.paths.push(f); out.action = 'cleaned';
+    } catch (e) {
+      if (e?.code !== 'ENOENT') { out.action = out.action === 'cleaned' ? 'cleaned' : 'failed'; out.error = e?.message || String(e); }
+    }
   }
+  return out;
+}
+
+/**
+ * Deprecated (round-4 fix): the Codex global file is machine-wide, so a
+ * project's live block there leaks into every other project. Kept as an
+ * export for callers built against 1.104–1.109; it never writes a block and
+ * only cleans up what those versions left.
+ */
+export function writeCodexGlobal(_projectDir, _body, { home = os.homedir(), file = null } = {}) {
+  const res = cleanCodexGlobalLive({ home, files: file ? [file] : null });
+  return { path: file || codexGlobalInstructionFile(home), action: res.action === 'cleaned' ? 'cleaned' : (res.action === 'failed' ? 'failed' : 'not-written'), removed: res.removed, ...(res.error ? { error: res.error } : {}) };
 }
 
-/** Both files, never throws. The caller supplies what the hook already computed. */
+/** The project-scoped file, never throws. The caller supplies what the hook already computed. */
 export function projectLive({ projectDir, now = Date.now(), home = os.homedir(), version = '', peers = [], unfinishedText = '', lockNotesText = '', claudeFile = null, codexFile = null } = {}) {
   const body = renderLiveProjection({ projectDir, now, version, peers, unfinishedText, lockNotesText });
   return {
     claude: writeClaudeLocal(projectDir, body, { now, file: claudeFile }),
-    codex: writeCodexGlobal(projectDir, body, { now, home, file: codexFile }),
+    // Never a project's block in the machine-wide Codex file; leftovers removed.
+    codex: writeCodexGlobal(projectDir, body, { home, file: codexFile }),
     bytes: Buffer.byteLength(body),
   };
 }

package/src/mcp-presence.mjs

@@ -1335,6 +1335,14 @@ function clearResultClaimPending({ brainPath, sessionId, home }) {
 
 // The host-pid this server belongs to (Claude Code exports CLAUDE_PID to every
 // child process). Used for the hostmap rotation below and for twin recognition.
+export function resolveHostTreePid(env = process.env, ppid = process.ppid) {
+  if (String(env?.KLYPIX_MCP_SUPERVISED || '') === '1') {
+    const pid = Number(env?.KLYPIX_MCP_HOST_TREE_PID || 0);
+    return Number.isInteger(pid) && pid > 1 ? pid : null;
+  }
+  return Number.isInteger(ppid) && ppid > 1 ? ppid : null;
+}
+
 export function resolveHostPid(env = process.env) {
   const pid = Number(env?.CLAUDE_PID || env?.KLYPIX_HOST_PID || 0);
   return Number.isFinite(pid) && pid > 0 ? pid : null;
@@ -1470,9 +1478,24 @@ export function createMcpPresence({
   // safe to liveness-probe; a 'ppid' guess may be a transient wrapper, so the
   // dead-host sweep never probes it — correlation only. The hostmap path keeps
   // using ONLY the env pid (a guessed pid must never adopt a hostmap identity).
-  const laneHostPid = hostPid
-    || (Number.isInteger(process.ppid) && process.ppid > 0 ? process.ppid : null);
-  const laneHostPidSource = hostPid ? 'env' : (laneHostPid ? 'ppid' : null);
+  // Quick restart (round-4 fix): the process that launched KLYPIX's MCP
+  // supervisor — the host itself, or a wrapper the host keeps alive. A
+  // supervised worker is told it by its supervisor (its own ppid is the
+  // supervisor); an unsupervised one has it as its ppid. Read only by the
+  // lane's isDeadHostTreeRow, beside the MCP owner pid; never identity.
+  const laneHostTreePid = resolveHostTreePid(env);
+  // An env host pid that is NOT the process that launched this MCP server was
+  // inherited from further up (round-4 field case: Claude Code launched from
+  // a shell that already carried another Claude's CLAUDE_PID — Claude sets its
+  // own pid for its hooks but its MCP servers inherit the outer one). Writing
+  // it as host-declared would pin the row to a process that outlives the
+  // session, so the worker leaves the row's host pid to the lifecycle hook
+  // (which Claude gives the right one). A wrapper launch (cmd / npx) also
+  // differs; it loses nothing, because the hook writes the real pid.
+  const envHostPidTrusted = Boolean(hostPid) && (!laneHostTreePid || Number(hostPid) === Number(laneHostTreePid));
+  const laneHostPid = envHostPidTrusted ? hostPid
+    : (hostPid ? null : (Number.isInteger(process.ppid) && process.ppid > 0 ? process.ppid : null));
+  const laneHostPidSource = envHostPidTrusted ? 'env' : (laneHostPid ? 'ppid' : null);
   const effectiveInboxPollMs = Number(env?.KLYPIX_MCP_INBOX_POLL_MS)
     || Number(inboxPollMs)
     || MCP_INBOX_POLL_MS;
@@ -1906,6 +1929,7 @@ export function createMcpPresence({
           cwd: path.dirname(brainPath),
           hostPid: laneHostPid,
           hostPidSource: laneHostPidSource,
+          hostTreePid: laneHostTreePid,
           home,
           now: stamp,
           expectedPid: process.pid,
@@ -1958,6 +1982,7 @@ export function createMcpPresence({
             cwd: path.dirname(brainPath),
             hostPid: laneHostPid,
             hostPidSource: laneHostPidSource,
+            hostTreePid: laneHostTreePid,
             home,
             now: stamp,
             expectedPid: process.pid,
@@ -2194,6 +2219,7 @@ export function createMcpPresence({
       cwd: path.dirname(brainPath),
       hostPid: laneHostPid,
       hostPidSource: laneHostPidSource,
+      hostTreePid: laneHostTreePid,
       logicalSessionId,
       identitySource,
       home,

package/src/mcp-supervisor.mjs

@@ -930,6 +930,9 @@ class Supervisor {
           // probes a guessed pid (see agent-presence.mjs isDeadHostRow).
           hostPid: this.parentPid,
           hostPidSource: 'ppid',
+          // Round-4 fix: who launched this supervisor — read by the lane's
+          // isDeadHostTreeRow only together with this supervisor's own pid.
+          hostTreePid: this.parentPid,
         });
         // Hibernation intentionally has no model-context consumer. Peek only:
         // a best-effort UI warning may wake the human, but the durable note stays
@@ -1178,6 +1181,10 @@ class Supervisor {
         ...process.env,
         KLYPIX_MCP_SUPERVISED: '1',
         KLYPIX_MCP_SUPERVISOR_PID: String(process.pid),
+        // Round-4 fix: the worker's own ppid is this supervisor, so it is told
+        // who launched the supervisor (the host, or its wrapper) for the lane's
+        // quick-restart liveness rule.
+        ...(this.parentPid && this.parentPid > 1 ? { KLYPIX_MCP_HOST_TREE_PID: String(this.parentPid) } : {}),
         KLYPIX_MCP_CONNECTION_ID: this.connectionId,
         // Pin the session id across a hibernation wake (KLYPIX_SESSION_ID wins
         // resolveMcpSessionId's precedence chain) so the woken worker adopts the

package/src/session-handoff.mjs

@@ -30,7 +30,7 @@ import path from 'path';
 import os from 'os';
 import crypto from 'crypto';
 import { HANDOFF_RE, handoffTitle, isOpenHandoffCard } from './klypix-format.mjs';
-import { sessionWorkIsRecent, normalizeModel, normalizeRole, rolesMatch } from './agent-presence.mjs';
+import { sessionWorkIsRecent, normalizeModel, normalizeRole, rolesMatch, listUnfinishedWork, stampSessionWork, normalizeAsks, redactSecretsInText, neutralizeMarkers } from './agent-presence.mjs';
 export { sessionWorkIsRecent };
 
 // A host-neutral, append-only evidence journal. The caller supplies observed
@@ -246,6 +246,87 @@ export function handoffTranscript(sessionId, client, { home = os.homedir(), maxB
   } catch { return unknown('Transcript could not be read'); }
 }
 
+// ── A hookless Codex session's record, from its own rollout (round-4 fix) ──
+// Continuity test round 3 (2026-10-30): a Codex session with no lifecycle
+// hooks records only what it declared through brain_sync — an intent and
+// files — so when it stopped, the automatic unfinished-work block, the take
+// reply and the drafted card had no task list (Claude sessions that skipped
+// brain_handoff review renumbered the steps from the intent and git). Codex
+// writes every conversation to a rollout file under CODEX_HOME/sessions,
+// named after the thread id the lane stores. Once such a session has
+// stopped, its newest prompts are read from that file and stored in the lane
+// under the SAME rules as a hook-recorded prompt (normalizeAsks: newest 3,
+// 4,000 characters each, 8,000 total, line breaks kept, secrets redacted,
+// capture markers neutralized); its last assistant message becomes its last
+// words when it has none. The file is found by exact name only (the same
+// bounded walk as brain_handoff review), read with a smaller byte bound, and
+// a miss is not retried for ROLLOUT_RETRY_MS. Nothing is read for a session
+// that is still live, or that already has recorded prompts.
+export const ROLLOUT_READ_MAX_BYTES = 32 * 1024 * 1024;
+export const ROLLOUT_RETRY_MS = 10 * 60 * 1000;
+export const ROLLOUT_LAST_WORDS_MAX = 600;
+// Codex injects framework text as role "user": one message whose parts are
+// <recommended_plugins>…, "# AGENTS.md instructions for …<INSTRUCTIONS>…" and
+// <environment_context>… (Codex 0.153, round-4 evidence). The transcript
+// reader joins a message's parts, so each injected block is removed wherever
+// it starts a line; what is left (often nothing) is the human's prompt. Only
+// framework-shaped tags: an underscore name, INSTRUCTIONS, or "permissions
+// instructions" — never an HTML-like tag a person might type.
+const INJECTED_BLOCK_RES = [
+  /^# AGENTS\.md instructions for [^\n]*\n+<INSTRUCTIONS>[\s\S]*?<\/INSTRUCTIONS>[ \t]*\n?/gm,
+  /^<([a-z][a-z0-9]*_[a-z0-9_]+)(?:\s[^>\n]*)?>[\s\S]*?<\/\1>[ \t]*\n?/gm,
+  /^<(INSTRUCTIONS|permissions instructions)>[\s\S]*?<\/\1>[ \t]*\n?/gm,
+];
+export function stripInjectedCodexText(text) {
+  let out = String(text || '');
+  for (const re of INJECTED_BLOCK_RES) out = out.replace(re, '');
+  return out.trim();
+}
+export function codexRolloutWork(sessionId, { home = os.homedir(), transcript = handoffTranscript } = {}) {
+  let t;
+  try { t = transcript(sessionId, 'codex', { home, maxBytes: ROLLOUT_READ_MAX_BYTES, maxEntries: 6000 }); }
+  catch { return { status: 'unavailable', reason: 'Transcript could not be read' }; }
+  if (!t || t.status !== 'available') return { status: 'unavailable', reason: t?.reason || 'Transcript unavailable' };
+  const turns = (Array.isArray(t.turns) ? t.turns : [])
+    .map((x) => (x && x.role === 'user' ? { ...x, text: stripInjectedCodexText(x.text) } : x))
+    .filter((x) => x && String(x.text || '').trim());
+  const asks = normalizeAsks(turns.filter((x) => x.role === 'user').map((x) => ({ text: x.text, at: x.at })));
+  const last = [...turns].reverse().find((x) => x.role === 'assistant');
+  let lastWords = '';
+  if (last) {
+    const text = neutralizeMarkers(redactSecretsInText(String(last.text))).replace(/[ \t]+/g, ' ').replace(/\n{3,}/g, '\n\n').trim();
+    lastWords = text.length > ROLLOUT_LAST_WORDS_MAX ? `…${text.slice(-(ROLLOUT_LAST_WORDS_MAX - 1))}` : text;
+  }
+  return { status: 'available', asks, lastWords, lastWordsAt: last?.at || null, file: t.file };
+}
+/** Stamp recovered asks onto stopped hookless Codex records. Sync, bounded, never throws. */
+export function recoverCodexRolloutRecords({ brainPath, home, codexUserHome = os.homedir(), now = Date.now(), selfId = '', sessionId = null, includeWorking = false, max = 3, transcript = handoffTranscript } = {}) {
+  const out = [];
+  if (!brainPath) return out;
+  let list = [];
+  try { list = listUnfinishedWork({ brainPath, home, now, selfId, includeWorking }); } catch { return out; }
+  const want = sessionId ? String(sessionId).toLowerCase() : '';
+  const targets = list.filter((r) => /codex/i.test(String(r.client || ''))
+    && !(Array.isArray(r.asks) && r.asks.length)
+    && (!want || String(r.id).toLowerCase() === want || (want.length >= 8 && String(r.id).toLowerCase().startsWith(want)))
+    && !(Number(r.rolloutTriedAt) > 0 && now - Number(r.rolloutTriedAt) < ROLLOUT_RETRY_MS));
+  for (const r of targets.slice(0, max)) {
+    const got = codexRolloutWork(r.id, { home: codexUserHome, transcript });
+    const patch = { rolloutTriedAt: now };
+    if (got.status === 'available' && got.asks.length) {
+      patch.asks = got.asks;
+      patch.lastPrompt = got.asks[got.asks.length - 1].text;
+      patch.asksSource = 'codex-rollout';
+      if (!r.lastWords && got.lastWords) { patch.lastWords = got.lastWords; if (got.lastWordsAt) patch.lastWordsAt = got.lastWordsAt; }
+    }
+    try {
+      const s = stampSessionWork({ brainPath, sessionId: r.id, patch, home, now });
+      out.push({ id: r.id, recovered: Boolean(patch.asks), asks: patch.asks ? patch.asks.length : 0, stamped: s.ok === true, reason: got.status === 'available' ? null : got.reason });
+    } catch { /* a courtesy: the record still lists without it */ }
+  }
+  return out;
+}
+
 export function inspectHandoffFreshness(h, { cursor = 0, revision, project, transcript = handoffTranscript(h.from?.sessionId, h.from?.client) } = {}) {
   if (transcript.status !== 'available' && project) transcript = capturedTranscript(project, h.from?.sessionId, h.from?.client, os.homedir()) || transcript;
   if (transcript.status !== 'available') return { status: 'unknown', reason: transcript.reason, turns: [], nextCursor: null };