switchroom 0.12.27 → 0.12.28

package/vendor/hindsight-memory/README.md

@@ -0,0 +1,329 @@
+# Hindsight Memory Plugin for Claude Code
+
+Biomimetic long-term memory for [Claude Code](https://docs.anthropic.com/en/docs/claude-code) using [Hindsight](https://vectorize.io/hindsight). Automatically captures conversations and intelligently recalls relevant context — a complete port of [`hindsight-openclaw`](../openclaw/) adapted to Claude Code's hook-based plugin architecture.
+
+## Quick Start
+
+```bash
+# 1. Add the Hindsight marketplace and install the plugin
+claude plugin marketplace add vectorize-io/hindsight
+claude plugin install hindsight-memory
+
+# 2. Configure your LLM provider for memory extraction
+# Option A: OpenAI (auto-detected)
+export OPENAI_API_KEY="sk-your-key"
+
+# Option B: Anthropic (auto-detected)
+export ANTHROPIC_API_KEY="your-key"
+
+# Option C: No API key needed (uses Claude Code's own model — personal/local use only)
+# See: https://vectorize.io/hindsight/developer/models#claude-code-setup-claude-promax
+export HINDSIGHT_LLM_PROVIDER=claude-code
+
+# Option D: Connect to an external Hindsight server instead of running locally
+mkdir -p ~/.hindsight
+echo '{"hindsightApiUrl": "https://your-hindsight-server.com"}' > ~/.hindsight/claude-code.json
+
+# 3. Start Claude Code — the plugin activates automatically
+claude
+```
+
+That's it! The plugin will automatically start capturing and recalling memories.
+
+## Features
+
+- **Auto-recall** — on every user prompt, queries Hindsight for relevant memories and injects them as context (invisible to the chat transcript, visible to Claude)
+- **Auto-retain** — after every response (or every N turns), extracts and retains conversation content to Hindsight for long-term storage
+- **Daemon management** — can auto-start/stop `hindsight-embed` locally or connect to an external Hindsight server
+- **Dynamic bank IDs** — supports per-agent, per-project, or per-session memory isolation
+- **Channel-agnostic** — works with Claude Code Channels (Telegram, Discord, Slack) or interactive sessions
+- **Zero dependencies** — pure Python stdlib, no pip install required
+
+## Architecture
+
+The plugin uses all four Claude Code hook events:
+
+| Hook | Event | Purpose |
+|------|-------|---------|
+| `session_start.py` | `SessionStart` | Health check — verify Hindsight is reachable |
+| `recall.py` | `UserPromptSubmit` | **Auto-recall** — query memories, inject as `additionalContext` |
+| `retain.py` | `Stop` | **Auto-retain** — extract transcript, POST to Hindsight (async) |
+| `session_end.py` | `SessionEnd` | Cleanup — stop auto-managed daemon if started |
+
+### Library Modules
+
+| Module | Purpose |
+|--------|---------|
+| `lib/client.py` | Hindsight REST API client (stdlib `urllib`) |
+| `lib/config.py` | Configuration loader (settings.json + env overrides) |
+| `lib/daemon.py` | `hindsight-embed` daemon lifecycle (start/stop/health) |
+| `lib/bank.py` | Bank ID derivation + mission management |
+| `lib/content.py` | Content processing (transcript parsing, memory formatting, tag stripping) |
+| `lib/state.py` | File-based state persistence with `fcntl` locking |
+| `lib/llm.py` | LLM provider auto-detection for daemon mode |
+
+### How Recall Works
+
+1. User sends a prompt → `UserPromptSubmit` hook fires
+2. Plugin resolves Hindsight API URL (external, local, or auto-start daemon)
+3. Derives bank ID (static or dynamic from project context)
+4. Composes query from current prompt + optional prior turns
+5. Calls Hindsight recall API
+6. Formats memories into `<hindsight_memories>` block
+7. Outputs via `hookSpecificOutput.additionalContext` — Claude sees it, user doesn't
+
+### How Retain Works
+
+1. Claude responds → `Stop` hook fires (async, non-blocking)
+2. Reads conversation transcript from Claude Code's JSONL file
+3. Applies chunked retention logic (every N turns with sliding window)
+4. Strips `<hindsight_memories>` tags to prevent feedback loops
+5. Extracts text from channel messages (Telegram reply tool calls, etc.)
+6. POSTs formatted transcript to Hindsight retain API
+
+## Connection Modes
+
+The plugin supports three connection modes, matching the Openclaw plugin:
+
+### 1. External API (recommended for production)
+
+Connect to a running Hindsight server (cloud or self-hosted). No local LLM needed — the server handles fact extraction.
+
+```json
+{
+  "hindsightApiUrl": "https://your-hindsight-server.com",
+  "hindsightApiToken": "your-token"
+}
+```
+
+### 2. Local Daemon (auto-managed)
+
+The plugin automatically starts and stops `hindsight-embed` via `uvx`. Requires an LLM provider API key for local fact extraction.
+
+```json
+{
+  "hindsightApiUrl": "",
+  "apiPort": 9077
+}
+```
+
+Set an LLM provider:
+```bash
+export OPENAI_API_KEY="sk-your-key"      # Auto-detected, uses gpt-4o-mini
+# or
+export ANTHROPIC_API_KEY="your-key"       # Auto-detected, uses claude-3-5-haiku
+```
+
+### 3. Existing Local Server
+
+If you already have `hindsight-embed` running, leave `hindsightApiUrl` empty and set `apiPort` to match your server's port. The plugin will detect it automatically.
+
+## Configuration
+
+All settings live in `~/.hindsight/claude-code.json`. Every setting can also be overridden via environment variables. The plugin ships with sensible defaults — you only need to configure what you want to change.
+
+**Loading order** (later entries win):
+1. Built-in defaults (hardcoded in the plugin)
+2. Plugin `settings.json` (ships with the plugin, at `CLAUDE_PLUGIN_ROOT/settings.json`)
+3. User config (`~/.hindsight/claude-code.json` — recommended for your overrides)
+4. Environment variables
+
+---
+
+### Connection & Daemon
+
+These settings control how the plugin connects to the Hindsight API.
+
+| Setting | Env Var | Default | Description |
+|---------|---------|---------|-------------|
+| `hindsightApiUrl` | `HINDSIGHT_API_URL` | `""` (empty) | URL of an external Hindsight API server. When empty, the plugin uses a local daemon instead. |
+| `hindsightApiToken` | `HINDSIGHT_API_TOKEN` | `null` | Authentication token for the external API. Only needed when `hindsightApiUrl` is set. |
+| `apiPort` | `HINDSIGHT_API_PORT` | `9077` | Port used by the local `hindsight-embed` daemon. Change this if you run multiple instances or have a port conflict. |
+| `daemonIdleTimeout` | `HINDSIGHT_DAEMON_IDLE_TIMEOUT` | `0` | Seconds of inactivity before the local daemon shuts itself down. `0` means the daemon stays running until the session ends. |
+| `embedVersion` | `HINDSIGHT_EMBED_VERSION` | `"latest"` | Which version of `hindsight-embed` to install via `uvx`. Pin to a specific version (e.g. `"0.5.2"`) for reproducibility. |
+| `embedPackagePath` | `HINDSIGHT_EMBED_PACKAGE_PATH` | `null` | Local filesystem path to a `hindsight-embed` checkout. When set, the plugin runs from this path instead of installing via `uvx`. Useful for development. |
+
+---
+
+### LLM Provider (local daemon only)
+
+These settings configure which LLM the local daemon uses for fact extraction. They are **ignored** when connecting to an external API (the server uses its own LLM configuration).
+
+| Setting | Env Var | Default | Description |
+|---------|---------|---------|-------------|
+| `llmProvider` | `HINDSIGHT_LLM_PROVIDER` | auto-detect | Which LLM provider to use. Supported values: `openai`, `anthropic`, `gemini`, `groq`, `ollama`, `openai-codex`, `claude-code`. When omitted, the plugin auto-detects by checking for API key env vars in order: `OPENAI_API_KEY` → `ANTHROPIC_API_KEY` → `GEMINI_API_KEY` → `GROQ_API_KEY`. |
+| `llmModel` | `HINDSIGHT_LLM_MODEL` | provider default | Override the default model for the chosen provider (e.g. `"gpt-4o"`, `"claude-sonnet-4-20250514"`). When omitted, the Hindsight API picks a sensible default for each provider. |
+| `llmApiKeyEnv` | — | provider standard | Name of the environment variable that holds the API key. Normally auto-detected (e.g. `OPENAI_API_KEY` for the `openai` provider). Set this only if your key is in a non-standard env var. |
+
+---
+
+### Memory Bank
+
+A **bank** is an isolated memory store — like a separate "brain." These settings control which bank the plugin reads from and writes to.
+
+| Setting | Env Var | Default | Description |
+|---------|---------|---------|-------------|
+| `bankId` | `HINDSIGHT_BANK_ID` | `"claude_code"` | The bank ID to use when `dynamicBankId` is `false`. All sessions share this single bank. |
+| `bankMission` | `HINDSIGHT_BANK_MISSION` | generic assistant prompt | A short description of the agent's identity and purpose. Sent to Hindsight when creating or updating the bank, and used during recall to contextualize results. |
+| `retainMission` | — | extraction prompt | Instructions for the fact extraction LLM — tells it *what* to extract from conversations (e.g. "Extract technical decisions and user preferences"). |
+| `dynamicBankId` | `HINDSIGHT_DYNAMIC_BANK_ID` | `false` | When `true`, the plugin derives a unique bank ID from context fields (see `dynamicBankGranularity`), giving each combination its own isolated memory. |
+| `dynamicBankGranularity` | — | `["agent", "project"]` | Which context fields to combine when building a dynamic bank ID. Available fields: `agent` (agent name), `project` (working directory), `session` (session ID), `channel` (channel ID), `user` (user ID). |
+| `bankIdPrefix` | — | `""` | A string prepended to all bank IDs — both static and dynamic. Useful for namespacing (e.g. `"prod"` or `"staging"`). |
+| `agentName` | `HINDSIGHT_AGENT_NAME` | `"claude-code"` | Name used for the `agent` field in dynamic bank ID derivation. |
+
+---
+
+### Auto-Recall
+
+Auto-recall runs on every user prompt. It queries Hindsight for relevant memories and injects them into Claude's context as invisible `additionalContext` (the user doesn't see them in the chat transcript).
+
+| Setting | Env Var | Default | Description |
+|---------|---------|---------|-------------|
+| `autoRecall` | `HINDSIGHT_AUTO_RECALL` | `true` | Master switch for auto-recall. Set to `false` to disable memory retrieval entirely. |
+| `recallBudget` | `HINDSIGHT_RECALL_BUDGET` | `"mid"` | Controls how hard Hindsight searches for memories. `"low"` = fast, fewer strategies; `"mid"` = balanced; `"high"` = thorough, slower. Affects latency directly. |
+| `recallMaxTokens` | `HINDSIGHT_RECALL_MAX_TOKENS` | `1024` | Maximum number of tokens in the recalled memory block. Lower values reduce context usage but may truncate relevant memories. |
+| `recallTypes` | — | `["world", "experience"]` | Which memory types to retrieve. `"world"` = general facts; `"experience"` = personal experiences; `"observation"` = raw observations. |
+| `recallContextTurns` | `HINDSIGHT_RECALL_CONTEXT_TURNS` | `1` | How many prior conversation turns to include when composing the recall query. `1` = only the latest user message; higher values give more context but may dilute the query. |
+| `recallMaxQueryChars` | `HINDSIGHT_RECALL_MAX_QUERY_CHARS` | `800` | Maximum character length of the query sent to Hindsight. Longer queries are truncated. |
+| `recallRoles` | — | `["user", "assistant"]` | Which message roles to include when building the recall query from prior turns. |
+| `recallPromptPreamble` | — | built-in string | Text placed above the recalled memories in the injected context block. Customize this to change how Claude interprets the memories. |
+
+---
+
+### Auto-Retain
+
+Auto-retain runs after Claude responds. It extracts the conversation transcript and sends it to Hindsight for long-term storage and fact extraction.
+
+| Setting | Env Var | Default | Description |
+|---------|---------|---------|-------------|
+| `autoRetain` | `HINDSIGHT_AUTO_RETAIN` | `true` | Master switch for auto-retain. Set to `false` to disable memory storage entirely. |
+| `retainMode` | `HINDSIGHT_RETAIN_MODE` | `"full-session"` | Retention strategy. `"full-session"` sends the full conversation transcript (with chunking). |
+| `retainEveryNTurns` | — | `10` | How often to retain. `1` = every turn; `10` = every 10th turn. Higher values reduce API calls but delay memory capture. Values > 1 enable **chunked retention** with a sliding window. |
+| `retainOverlapTurns` | — | `2` | When chunked retention fires, this many extra turns from the previous chunk are included for continuity. Total window size = `retainEveryNTurns + retainOverlapTurns`. |
+| `retainRoles` | — | `["user", "assistant"]` | Which message roles to include in the retained transcript. |
+| `retainToolCalls` | — | `true` | Whether to include tool calls (function invocations and results) in the retained transcript. Captures structured actions like file reads, searches, and code edits. |
+| `retainTags` | — | `["{session_id}"]` | Tags attached to the retained document. Supports template placeholders: `{session_id}`, `{bank_id}`, `{timestamp}`, and `{user_id}` (resolved from `HINDSIGHT_USER_ID` env var; empty string if unset). Tags whose resolved form ends in an empty namespace part (e.g. `"user:"` when `HINDSIGHT_USER_ID` is unset) are dropped from the outgoing request. See [Template variables](#template-variables-for-retaintags-and-retainmetadata) below. |
+| `retainMetadata` | — | `{}` | Arbitrary key-value metadata attached to the retained document. Same template placeholders as `retainTags`. |
+| `retainContext` | — | `"claude-code"` | A label attached to retained memories identifying their source. Useful when multiple integrations write to the same bank. |
+
+#### Template variables for `retainTags` and `retainMetadata`
+
+| Variable | Source |
+|----------|--------|
+| `{session_id}` | Current Claude Code session ID |
+| `{bank_id}` | Resolved bank ID (per `bankGranularity`) |
+| `{timestamp}` | ISO 8601 UTC at retain time |
+| `{user_id}` | Value of `HINDSIGHT_USER_ID` env var (empty string if unset) |
+
+##### Example: per-user memory scoping
+
+```json
+{
+  "retainTags": ["user:{user_id}", "session:{session_id}"]
+}
+```
+
+Set `HINDSIGHT_USER_ID=<opaque-user-id>` in your shell profile (`.zshrc`,
+`.bashrc`, etc.). If the env var is unset, the `user:` tag is dropped from the
+outgoing retain request and the rest of the tags are sent as-is — so the same
+`settings.json` works across machines whether you've set the env var or not.
+
+Downstream, `recall` can filter by `tags=["user:alice"]` to isolate memories
+authored by a specific user from a shared bank.
+
+---
+
+### Debug
+
+| Setting | Env Var | Default | Description |
+|---------|---------|---------|-------------|
+| `debug` | `HINDSIGHT_DEBUG` | `false` | Enable verbose logging to stderr. All log lines are prefixed with `[Hindsight]`. Useful for diagnosing connection issues, recall/retain behavior, and bank ID derivation. |
+
+## Claude Code Channels
+
+With [Claude Code Channels](https://docs.anthropic.com/en/docs/claude-code), Claude Code can operate as a persistent background agent connected to Telegram, Discord, Slack, and other messaging platforms. This plugin gives Channel-based agents the same long-term memory that `hindsight-openclaw` provides for Openclaw agents.
+
+For Channel agents, set these environment variables in your Channel configuration:
+
+```bash
+# Per-channel/per-user memory isolation
+export HINDSIGHT_CHANNEL_ID="telegram-group-12345"
+export HINDSIGHT_USER_ID="user-67890"
+```
+
+And enable dynamic bank IDs:
+
+```json
+{
+  "dynamicBankId": true,
+  "dynamicBankGranularity": ["agent", "channel", "user"]
+}
+```
+
+## Troubleshooting
+
+### Plugin not activating
+
+- Verify installation: check that `.claude-plugin/plugin.json` exists in the installed plugin directory
+- Check Claude Code logs for `[Hindsight]` messages (enable `"debug": true` in `~/.hindsight/claude-code.json`)
+
+### Recall returning no memories
+
+- Verify the Hindsight server is reachable: `curl http://localhost:9077/health`
+- Check that the bank has retained content: memories need at least one retain cycle
+- Try increasing `recallBudget` to `"mid"` or `"high"`
+
+### Daemon not starting
+
+- Ensure `uvx` is installed: `pip install uv` or `brew install uv`
+- Check that an LLM API key is set (required for local daemon)
+- Review daemon logs: `tail -f ~/.hindsight/profiles/claude-code.log`
+- Try starting manually: `uvx hindsight-embed@latest daemon --profile claude-code start`
+
+### High latency on recall
+
+- The recall hook has a 12-second timeout. If Hindsight is slow:
+  - Use `recallBudget: "low"` (fewer retrieval strategies)
+  - Reduce `recallMaxTokens`
+  - Consider using an external API with a faster server
+
+### State file issues
+
+- State is stored in `$CLAUDE_PLUGIN_DATA/state/`
+- To reset: delete the `state/` directory
+- Turn counts, bank missions, and daemon state are tracked here
+
+## Development
+
+To test local changes to `hindsight-embed`:
+
+```json
+{
+  "embedPackagePath": "/path/to/hindsight-embed"
+}
+```
+
+The plugin will use `uv run --directory <path> hindsight-embed` instead of `uvx hindsight-embed@latest`.
+
+To view daemon logs:
+
+```bash
+# Check daemon status
+uvx hindsight-embed@latest daemon --profile claude-code status
+
+# View logs
+tail -f ~/.hindsight/profiles/claude-code.log
+
+# List profiles
+uvx hindsight-embed@latest profile list
+```
+
+## Links
+
+- [Hindsight Documentation](https://vectorize.io/hindsight)
+- [Claude Code Documentation](https://docs.anthropic.com/en/docs/claude-code)
+- [GitHub Repository](https://github.com/vectorize-io/hindsight)
+
+## License
+
+MIT

package/vendor/hindsight-memory/hooks/hooks.json

@@ -0,0 +1,49 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/scripts/session_start.py\"",
+            "timeout": 5
+          }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/scripts/recall.py\"",
+            "timeout": 12
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/scripts/retain.py\"",
+            "timeout": 15,
+            "async": true
+          }
+        ]
+      }
+    ],
+    "SessionEnd": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/scripts/session_end.py\"",
+            "timeout": 10
+          }
+        ]
+      }
+    ]
+  }
+}

package/vendor/hindsight-memory/scripts/drain_pending.py

@@ -0,0 +1,190 @@
+#!/usr/bin/env python3
+"""Drain ``~/.hindsight/pending-retains/``.
+
+SessionStart calls into ``drain()`` to retry any retain payloads that
+``session_end.py`` queued on failure (#1071). Each entry is retried up
+to ``MAX_ATTEMPTS`` (5) times; after that it's renamed to ``.dead`` so
+the queue no longer drains it but the operator can still inspect via
+``switchroom doctor``.
+
+Boundaries
+----------
+* Per-entry HTTP timeout: ``HINDSIGHT_DRAIN_TIMEOUT`` (default 5s).
+* Stall guard: if ``STALL_THRESHOLD`` (3) consecutive entries fail with
+  the same error class, we stop draining for this session — that's a
+  systemic outage, not a transient flake, and continuing would only
+  burn the SessionStart timeout budget. The remaining entries stay
+  queued for the next session.
+* Total wall-clock cap: ``HINDSIGHT_DRAIN_BUDGET_S`` (default 4s) so
+  drain never blocks SessionStart longer than the upstream
+  hook timeout permits.
+
+Standalone usage::
+
+    python3 drain_pending.py        # one-shot drain, prints summary
+"""
+
+from __future__ import annotations
+
+import os
+import sys
+import time
+
+sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
+
+from lib.client import HindsightClient
+from lib.config import debug_log, load_config
+from lib.pending import (
+    MAX_ATTEMPTS,
+    delete_entry,
+    iter_entries,
+    mark_dead,
+    update_attempt,
+)
+
+
+STALL_THRESHOLD = 3
+
+
+def _per_entry_timeout() -> int:
+    raw = os.environ.get("HINDSIGHT_DRAIN_TIMEOUT", "5")
+    try:
+        v = int(raw)
+        return max(1, v)
+    except ValueError:
+        return 5
+
+
+def _budget_seconds() -> float:
+    raw = os.environ.get("HINDSIGHT_DRAIN_BUDGET_S", "4")
+    try:
+        v = float(raw)
+        return max(0.5, v)
+    except ValueError:
+        return 4.0
+
+
+def _retry_one(entry: dict, timeout: int) -> None:
+    """POST a single queued retain. Raises on failure."""
+    client = HindsightClient(entry["api_url"], entry.get("api_token"))
+    client.retain(
+        bank_id=entry["bank_id"],
+        content=entry["content"],
+        document_id=entry.get("document_id", "conversation"),
+        context=entry.get("context"),
+        metadata=entry.get("metadata") or {},
+        tags=entry.get("tags"),
+        timeout=timeout,
+    )
+
+
+def drain(config: dict | None = None) -> dict:
+    """Walk the pending-retains directory and retry each entry.
+
+    Returns a summary dict::
+
+        {"drained": int,   # successful retries (entries deleted)
+         "retried": int,   # failures kept for next session
+         "dead":    int,   # entries promoted to .dead this run
+         "stalled": bool,  # stall guard tripped
+         "budget_exceeded": bool}
+    """
+    config = config or load_config()
+    timeout = _per_entry_timeout()
+    budget = _budget_seconds()
+    started = time.monotonic()
+
+    summary = {
+        "drained": 0,
+        "retried": 0,
+        "dead": 0,
+        "stalled": False,
+        "budget_exceeded": False,
+    }
+
+    entries = iter_entries()
+    if not entries:
+        debug_log(config, "drain_pending: queue empty")
+        return summary
+
+    debug_log(config, f"drain_pending: {len(entries)} entries to retry")
+
+    consecutive_failures = 0
+    last_error_class: str | None = None
+
+    for path, entry in entries:
+        if time.monotonic() - started > budget:
+            summary["budget_exceeded"] = True
+            debug_log(config, "drain_pending: total budget exceeded, stopping")
+            break
+
+        try:
+            _retry_one(entry, timeout=timeout)
+        except Exception as e:
+            err_class = type(e).__name__
+            if err_class == last_error_class:
+                consecutive_failures += 1
+            else:
+                consecutive_failures = 1
+                last_error_class = err_class
+
+            attempts = int(entry.get("attempt_count", 1))
+            if attempts >= MAX_ATTEMPTS:
+                marker = mark_dead(path, entry)
+                summary["dead"] += 1
+                print(
+                    f"[Hindsight] drain_pending: entry exceeded {MAX_ATTEMPTS} "
+                    f"attempts, marking dead at {marker} (last error: {err_class}: {e})",
+                    file=sys.stderr,
+                )
+            else:
+                update_attempt(path, entry, e)
+                summary["retried"] += 1
+                debug_log(
+                    config,
+                    f"drain_pending: retry {attempts}/{MAX_ATTEMPTS} failed for {path} ({err_class}: {e})",
+                )
+
+            if consecutive_failures >= STALL_THRESHOLD:
+                summary["stalled"] = True
+                print(
+                    f"[Hindsight] drain_pending: {consecutive_failures} consecutive "
+                    f"failures with {err_class}, stalling drain. Remaining entries "
+                    f"stay queued.",
+                    file=sys.stderr,
+                )
+                break
+            continue
+
+        # Success — delete the entry.
+        delete_entry(path)
+        summary["drained"] += 1
+        consecutive_failures = 0
+        last_error_class = None
+
+    return summary
+
+
+def main() -> int:
+    config = load_config()
+    summary = drain(config)
+    if summary["drained"] or summary["retried"] or summary["dead"]:
+        print(
+            f"[Hindsight] drain_pending: "
+            f"drained={summary['drained']} retried={summary['retried']} "
+            f"dead={summary['dead']} "
+            f"stalled={summary['stalled']} budget_exceeded={summary['budget_exceeded']}",
+            file=sys.stderr,
+        )
+    # Non-zero only when we promoted entries to .dead — that's the
+    # operator-visible signal. Plain retry-still-pending isn't an error,
+    # the next SessionStart picks them up.
+    return 1 if summary["dead"] else 0
+
+
+if __name__ == "__main__":
+    try:
+        sys.exit(main())
+    except Exception as e:
+        print(f"[Hindsight] drain_pending unexpected error: {e}", file=sys.stderr)
+        sys.exit(2)