memorix 1.1.11 → 1.1.13

package/docs/AGENT_OPERATOR_PLAYBOOK.md

@@ -236,7 +236,7 @@ memorix setup --agent omp --global
 What this installs depends on the target agent:
 
 - Claude Code: local `memorix-local` marketplace plugin, best-effort `claude plugin install memorix@memorix-local`, plugin-bundled stdio MCP, hooks, skills, plus `CLAUDE.md` guidance.
-- Codex: local Personal marketplace plugin under `~/.codex/plugins/memorix`, marketplace entry at `~/.agents/plugins/marketplace.json`, best-effort `codex plugin add memorix@personal`, plugin-bundled stdio MCP, hooks, skills, plus `AGENTS.md` guidance.
+- Codex: local Personal marketplace plugin under `~/.codex/plugins/memorix`, marketplace entry at `~/.agents/plugins/marketplace.json`, best-effort `codex plugin add memorix@personal`, plugin-bundled stdio MCP, skills, and `SessionStart` / `UserPromptSubmit` / `PostToolUse` / `PreCompact` / `Stop` hooks, plus `AGENTS.md` guidance. Codex asks the user to review plugin hooks once in `/hooks` before non-managed hooks run.
 - GitHub Copilot CLI: local plugin package under `~/.copilot/plugins/local/memorix`, best-effort `copilot plugin install <local-path>`, plugin-bundled stdio MCP, hooks, and skills.
 - Cursor: Cursor MCP config, `.cursor/rules/memorix.mdc`, skills, and hook guidance through Cursor's project config surfaces.
 - Pi: user Pi package with extension-based hook capture and a Memorix skill, registered through `pi install <path> --approve`; project-local setup uses `-l`.
@@ -661,7 +661,7 @@ If it reports stale MCP command paths, missing `memorix` MCP entries, missing Cl
 memorix repair agents --agent <agent>
 ```
 
-Repair only rewrites Memorix-owned MCP entries and Memorix-owned guidance blocks. It should not edit unrelated user config.
+Repair only rewrites Memorix-owned MCP entries, Memorix-owned guidance blocks, and an explicitly targeted Codex Memorix plugin bundle. It does not edit unrelated user config or turn on a user-disabled Codex plugin; enable that one from `/plugins`.
 
 ### 1. Is the workspace a Git repo?
 

package/docs/DEVELOPMENT.md

@@ -300,32 +300,25 @@ is intentional after reviewing the diff, rerun with
 - dashboard
 - Git Memory
 - config diagnostics
+- `memorix setup --agent codex --global` followed by `memorix doctor agents --agent codex --scope global --json` in an isolated home, when changing the Codex integration
 
 4. inspect package contents:
 
 ```bash
 npm pack --dry-run --json
-npm pack --workspace @memorix/ai --dry-run --json
-npm pack --workspace @memorix/agent-core --dry-run --json
-npm pack --workspace @memorix/tui --dry-run --json
-npm pack --workspace @memorix/memcode --dry-run --json
 ```
 
 5. commit and push
-6. publish manually when ready, in dependency order:
+6. publish the supported public package manually when ready:
 
 ```bash
-npm publish --workspace @memorix/ai --access public
-npm publish --workspace @memorix/agent-core --access public
-npm publish --workspace @memorix/tui --access public
-npm publish --workspace @memorix/memcode --access public
 npm publish --access public
 ```
 
 Notes:
 
 - `prepublishOnly` runs build + test, but does not contact live model catalog APIs
-- `memorix` depends on `@memorix/memcode`; `@memorix/memcode` depends on `@memorix/ai`, `@memorix/agent-core`, and `@memorix/tui`, so publish workspaces before the root package
+- `@memorix/ai`, `@memorix/agent-core`, `@memorix/tui`, and `@memorix/memcode` are internal workspaces. Their code is bundled into the root `memorix` distribution and they must stay `private` unless the project deliberately establishes an owned npm scope and a separate package-support contract.
 - npm publish is usually manual, especially when 2FA is enabled
 - GitHub release automation should not be treated as a substitute for manual runtime validation
 

package/docs/INTEGRATIONS.md

@@ -49,7 +49,7 @@ Generated guidance also has scope:
 | Agent | Recommended install | Official entry | What gets installed | Notes |
 | --- | --- | --- | --- | --- |
 | Claude Code | `memorix setup --agent claude --global` | Claude Code plugin marketplace | Local `memorix-local` marketplace, plugin-bundled stdio MCP, skills, hooks, plus `CLAUDE.md` guidance | Setup attempts `claude plugin marketplace add` and `claude plugin install memorix@memorix-local`. |
-| Codex | `memorix setup --agent codex --global` | Codex Personal marketplace plugin | Local plugin under `~/.codex/plugins/memorix`, Personal marketplace entry, plugin-bundled stdio MCP, skills, hooks, plus `AGENTS.md` guidance | Setup attempts `codex plugin add memorix@personal`. |
+| Codex | `memorix setup --agent codex --global` | Codex Personal marketplace plugin | Local plugin under `~/.codex/plugins/memorix`, Personal marketplace entry, plugin-bundled stdio MCP, skills, hooks, plus `AGENTS.md` guidance | Setup attempts `codex plugin add memorix@personal`. Run `memorix doctor agents --agent codex --scope global` to verify the bundle, marketplace, enabled state, and five declared/trusted hooks; start a new thread after setup. |
 | GitHub Copilot CLI | `memorix setup --agent copilot --global` | Copilot CLI plugin package | Local plugin under `~/.copilot/plugins/local/memorix` with MCP, skills, and hooks | Setup attempts `copilot plugin install <local-path>` when Copilot CLI is available. |
 | Cursor | `memorix setup --agent cursor --global` | Cursor MCP and rules config | Cursor MCP config, `.cursor/rules/memorix.mdc`, skills, and hook guidance | Reload Cursor after setup so it can pick up project config changes. |
 | Gemini CLI | `memorix setup --agent gemini-cli --global` | Gemini CLI extension | Extension under `~/.gemini/extensions/memorix` with MCP, `GEMINI.md` context, hooks, commands, and skills | Antigravity CLI has an official Gemini CLI migration path, but Gemini CLI remains an active standalone Google CLI target. |

package/docs/SETUP.md

@@ -132,7 +132,9 @@ memorix doctor agents --agent <agent>
 memorix repair agents --agent <agent>
 ```
 
-The doctor checks Memorix-owned MCP entries and guidance files for stale command paths, missing `memorix` MCP servers, missing Claude `alwaysLoad`, and outdated Memory Autopilot rules.
+The doctor checks Memorix-owned MCP entries and guidance files for stale command paths, missing `memorix` MCP servers, missing Claude `alwaysLoad`, and outdated Memory Autopilot rules. For `codex --scope global`, it also checks the local plugin bundle, Personal marketplace entry, five declared lifecycle hooks, Codex's trusted hook state, and the installed/enabled state reported by `codex plugin list`.
+
+After Codex setup, start a new thread so enabled plugins can load. Codex does not expose a command that proves hooks are already active inside the current thread. If doctor reports `codex-plugin-disabled`, open `/plugins` and turn Memorix on there; repair does not toggle a user-disabled plugin.
 
 ### Option B: manual stdio MCP
 

package/docs/dev-log/progress.txt

@@ -4,62 +4,43 @@
 > older notes when they conflict.
 
 ## Current State
-- Phase: 1.1.11 runtime integrity, release-ready pending branch promotion
-- Branch: `codex/1.1.11-runtime-integrity`
-- Last updated: 2026-07-16
-- Goal: make normal memory writes, first-turn context, Code Memory refresh,
-  lifecycle maintenance, and operator diagnostics predictable as data grows.
+- Phase: 1.1.13 ready to publish
+- Branch: `codex/1.1.13-release-contract`
+- Last updated: 2026-07-17
+- Goal: make Codex global setup diagnosable end to end, remove the accidental
+  workspace publish lane, restore the Star History chart, then publish a clean
+  1.1.13 before beginning 1.2 work.
 
 ## Completed Recently
-- Replaced normal observation write/cleanup full-table persistence with targeted
-  SQLite mutations while preserving topic-key and generation safety.
-- Made retention and consolidation project-scoped, bounded, cursor-resumable
-  maintenance jobs.
-- Added a durable SQLite maintenance queue with leases, retries, heartbeat
-  renewal, credential-redacted failure records, and completed-history pruning.
-- Added a real compiled child-process runner for retention, consolidation, and
-  Code Memory refresh; vector recovery remains in the owning Orama process.
-- Made CodeGraph Lite incremental, multi-language, dependency-aware, and safe
-  against oversized generated files. `codegraph.max_file_bytes` / TOML
-  `max_file_bytes` controls the per-file limit.
-- Let the project context, context pack, graph context, and Code Memory status
-  tools answer directly from project-scoped SQLite before full Orama hydration.
-- Added control-plane maintenance target registration and dashboard maintenance
-  diagnostics without crossing HTTP session runtime state.
-- Removed the obsolete JSON file watcher; SQLite generation checks now own
-  cross-process freshness.
-- Unified behavior settings with resolved TOML/YAML configuration so injection,
-  formation, auto-cleanup, and sync advisory do not silently fall back to a
-  separate legacy JSON path.
-- Updated dashboard System Status with maintenance state and made dashboard
-  navigation/content work on a 390px mobile viewport.
-- Added a non-root Docker regression check.
-- Made completed-job pruning part of the enqueue transaction, so a failed
-  enqueue cannot leave partially-pruned operator history behind.
+- Released `memorix@1.1.12`, tagged `v1.1.12`, with native Codex lifecycle
+  hooks, Windows-safe OpenCode hook resolution, scope-isolated setup, and
+  cache-first semantic-vector hydration.
+- `memorix setup --agent codex --global` now stamps the copied plugin manifest
+  with the running Memorix version instead of leaving the template version.
+- `memorix doctor agents --agent codex --scope global` now reports four
+  independently useful facts: the local bundle and declared hook contract, the
+  Personal marketplace entry, Codex's installed/enabled plugin state, and the
+  trusted state for each Codex lifecycle hook.
+- Repair only refreshes Memorix-owned files. A disabled plugin or untrusted
+  hook remains an explicit user action in Codex's plugin/hook UI.
+- `@memorix/ai`, `@memorix/agent-core`, `@memorix/tui`, and
+  `@memorix/memcode` are explicitly internal workspaces. The public release
+  contract is the bundled root `memorix` package.
+- Restored the AVIDS2/memorix Star History chart at the bottom of both READMEs.
 
 ## Verification Snapshot
-- The full test suite passes, including runtime, CodeGraph, configuration,
-  server, dashboard, Docker, and cross-process freshness coverage.
-- `npm run lint` passes.
-- `npm run build` passes and emits `dist/maintenance-runner.js`.
-- Built runner smoke completed a real retention job through stdin/stdout.
-- Built stdio MCP smoke connected in about one second, listed 17 lite tools,
-  and called project context, context pack, graph context, and Code Memory
-  status successfully in a fresh temporary Git project.
-- Dashboard was checked in a real browser at 1440x900 and 390x844; maintenance
-  status is visible and no text is clipped by the mobile layout.
-- `npm pack --dry-run`, an actual `npm pack`, a clean temporary install, and a
-  built stdio MCP smoke all pass. Production dependency audit reports zero
-  vulnerabilities.
-- A read-only local Claude Code release review found no P0 issues; its one
-  confirmed queue transaction finding has a regression test and is fixed.
-
-## Known Boundary
-- Orama remains process-local. Search and stateful write/session tools still
-  wait for full runtime hydration; bootstrap-safe context tools do not.
-- CodeGraph Lite is an incremental local structural map, not a replacement for
-  an AST/language-server intelligence product.
+- Focused Codex setup, hook, doctor, and release-contract regressions pass.
+- `npm run lint`, `npm run build`, and the full serial `npm test` suite pass.
+- `npm pack --dry-run` includes the root runtime, plugin templates, hooks,
+  READMEs, and docs at `memorix@1.1.13`.
+- A clean normal npm installation of the tarball completed a real stdio MCP
+  store/search call against an isolated Git repository and exposed the expected
+  seven-tool micro profile.
+- An isolated real Codex CLI setup installed and enabled `memorix@personal`,
+  stamped the manifest at `1.1.13`, and let doctor verify the bundle,
+  marketplace, runtime state, and pending first-use hook trust separately.
+- The Star History embed uses Star History's current `/image` README endpoint.
 
 ## Next Steps
-- Commit the verified 1.1.11 change set, promote it through the normal `main`
-  branch flow, tag `v1.1.11`, and publish the already-verified npm package.
+- Push/merge/tag/publish `v1.1.13`, then create the 1.2 development baseline
+  from the released main branch.

package/docs/hooks-architecture.md

@@ -9,17 +9,17 @@
 
 ### 事件映射表
 
-| 语义 | VS Code Copilot | Claude Code | Windsurf | Cursor (Beta) | Kiro |
-|------|----------------|-------------|----------|---------------|------|
-| 会话开始 | SessionStart | SessionStart | — | — | — |
-| 用户输入 | UserPromptSubmit | UserPromptSubmit | pre_user_prompt | beforeSubmitPrompt | user prompt |
-| 工具调用前 | PreToolUse | PreToolUse | pre_mcp_tool_use | beforeMCPExecution | — |
-| 工具调用后 | PostToolUse | PostToolUse | post_mcp_tool_use | — | — |
-| 文件编辑后 | PostToolUse(write) | PostToolUse(write) | post_write_code | afterFileEdit | file save |
-| 命令执行后 | PostToolUse(cmd) | PostToolUse(cmd) | post_run_command | — | — |
-| AI 回复后 | — | — | post_cascade_response | — | agent turn |
-| 上下文压缩前 | PreCompact | PreCompact | — | — | — |
-| 会话结束 | Stop | Stop | — | stop | — |
+| 语义 | VS Code Copilot | Claude Code | Codex | Windsurf | Cursor (Beta) | Kiro |
+|------|----------------|-------------|-------|----------|---------------|------|
+| 会话开始 | SessionStart | SessionStart | SessionStart | — | — | — |
+| 用户输入 | UserPromptSubmit | UserPromptSubmit | UserPromptSubmit | pre_user_prompt | beforeSubmitPrompt | user prompt |
+| 工具调用前 | PreToolUse | PreToolUse | — | pre_mcp_tool_use | beforeMCPExecution | — |
+| 工具调用后 | PostToolUse | PostToolUse | PostToolUse | post_mcp_tool_use | — | — |
+| 文件编辑后 | PostToolUse(write) | PostToolUse(write) | PostToolUse(apply_patch) | post_write_code | afterFileEdit | file save |
+| 命令执行后 | PostToolUse(cmd) | PostToolUse(cmd) | PostToolUse(Bash) | post_run_command | — | — |
+| AI 回复后 | — | — | Stop | post_cascade_response | — | agent turn |
+| 上下文压缩前 | PreCompact | PreCompact | PreCompact | — | — | — |
+| 会话结束 | Stop | Stop | Stop | — | stop | — |
 
 ### 配置文件位置
 
@@ -27,6 +27,7 @@
 |-------|---------|------|
 | VS Code Copilot | `.github/hooks/*.json` | Claude Code 兼容 |
 | Claude Code | `.claude/settings.json` | 原生 |
+| Codex | Memorix 插件内 `hooks/hooks.json` | Codex plugin hooks；通过 `memorix setup --agent codex` 安装 |
 | Windsurf | `.windsurf/cascade.json` | Windsurf 格式 |
 | Cursor | `.cursor/hooks.json` | Cursor 格式 |
 | Kiro | `.kiro/hooks/*.hook.md` | Markdown + YAML |
@@ -39,6 +40,9 @@
 // VS Code / Claude Code
 { "hookEventName": "PostToolUse", "sessionId": "...", "cwd": "...", "tool_name": "write", ... }
 
+// Codex
+{ "hook_event_name": "PostToolUse", "session_id": "...", "cwd": "...", "tool_name": "apply_patch", ... }
+
 // Windsurf  
 { "agent_action_name": "post_write_code", "trajectory_id": "...", "tool_info": { "file_path": "..." } }
 
@@ -80,10 +84,18 @@ memorix hook <normalized_event> [--agent <agent_name>]
 ```bash
 memorix hooks install
 # 自动检测已安装的 Agent → 生成对应配置文件
-# 支持: --agent cursor|windsurf|claude|copilot|kiro|codex
+# 支持: --agent cursor|windsurf|claude|copilot|kiro
 # 支持: --project (仅当前项目) | --global (全局)
 ```
 
+Codex 使用插件入口而不是 fallback 配置文件：
+
+```bash
+memorix setup --agent codex --global
+```
+
+安装后，Codex 首次要求时在 `/hooks` 中审核 Memorix 插件的 hook 定义。
+
 ## 文件结构
 
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.1.11",
+  "version": "1.1.13",
   "description": "Local-first shared memory layer for AI coding agents across MCP clients, Git history, reasoning context, and project sessions.",
   "type": "module",
   "sideEffects": false,

package/plugins/codex/memorix/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.1.0",
+  "version": "1.1.13",
   "description": "Shared workspace memory for Codex and other AI coding agents.",
   "author": {
     "name": "AVIDS2",
@@ -17,6 +17,7 @@
   ],
   "skills": "./skills/",
   "mcpServers": "./.mcp.json",
+  "hooks": "./hooks/hooks.json",
   "interface": {
     "displayName": "Memorix",
     "shortDescription": "Shared local memory for coding agents.",

package/plugins/codex/memorix/hooks/hooks.json

@@ -2,10 +2,12 @@
   "hooks": {
     "SessionStart": [
       {
+        "matcher": "startup|resume|clear|compact",
         "hooks": [
           {
             "type": "command",
             "command": "memorix hook --agent codex",
+            "commandWindows": "memorix.cmd hook --agent codex",
             "timeout": 10
           }
         ]
@@ -13,10 +15,12 @@
     ],
     "PostToolUse": [
       {
+        "matcher": "*",
         "hooks": [
           {
             "type": "command",
             "command": "memorix hook --agent codex",
+            "commandWindows": "memorix.cmd hook --agent codex",
             "timeout": 10
           }
         ]
@@ -28,6 +32,32 @@
           {
             "type": "command",
             "command": "memorix hook --agent codex",
+            "commandWindows": "memorix.cmd hook --agent codex",
+            "timeout": 10
+          }
+        ]
+      }
+    ],
+    "PreCompact": [
+      {
+        "matcher": "manual|auto",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "memorix hook --agent codex",
+            "commandWindows": "memorix.cmd hook --agent codex",
+            "timeout": 10
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "memorix hook --agent codex",
+            "commandWindows": "memorix.cmd hook --agent codex",
             "timeout": 10
           }
         ]