throughline 0.9.0 → 0.9.1

package/CHANGELOG.md

@@ -10,6 +10,29 @@ shipped to npm but were not individually tagged on GitHub.
 
 ## [Unreleased]
 
+## [0.9.1] — 2026-08-14
+
+### Fixed
+
+- Claude-facing SessionStart, UserPromptSubmit, and Stop entrypoints now ignore
+  non-Claude camelCase envelopes immediately after JSON parsing and before any
+  database, state, VS Code task, handoff, transcript, or runtime-error side
+  effect. The boundary requires non-empty `sessionId` and `hookEventName` and
+  the absence of Claude's `session_id`; it does not convert payloads or add a
+  Grok transcript reader.
+
+### Changed
+
+- CI now uses the shared factory workflow for the maintained native and WSL2
+  environments.
+
+### Documentation
+
+- Synchronized the current README, Codex skill, contributor entrypoint, docs
+  overview, and implementation plan around the v0.9.0 read-only handoff-context
+  contract. Historical ADRs, archived plans, and RAG source records remain
+  unchanged as point-in-time evidence.
+
 ## [0.9.0] — 2026-08-04
 
 ### Added

package/README.ja.md

@@ -343,6 +343,19 @@ Throughline state をまだ書いていない現在セッションも表示で
 | `throughline status` | DB 統計表示 (sessions / skeletons / bodies / details) |
 | `throughline --version` | インストール済みバージョンを表示 |
 
+### ローカルlauncher向けread-only handoff context
+
+通常handoffを実行せず、同一端末のlauncherからThroughline記憶だけを使う場合は次を呼ぶ:
+
+```bash
+throughline handoff-context --session codex:<thread-id> --json
+```
+
+成功時の`throughline.handoff_context.v1`は`schema`、`status`、`sessionId`、`context`だけを返す。
+`context`はSessionStartと同じ予算付き継承文脈で、DB作成・migration・baton消費・session merge・
+latest session推測・`sessions.merged_into`変更・L1/L2/L3 rowの所属変更は行わない。AItermは任意の
+別vendor portable forkでこの境界を使う。Observer feedはcompleted-turn projectionであり代替ではない。
+
 スラッシュコマンド (Claude Code 内でユーザーが叩く):
 
 | コマンド | 役割 |

package/README.md

@@ -765,15 +765,12 @@ entry to the `tasks` array yourself:
 
 ## Commands
 
-**v0.6.3 は2026-07-14に公開済みです。** factory diagnostics は Codex の managed
-`UserPromptSubmit` / `PostToolUse` / `Stop` hooks がすべて canonical `ready` の場合に
-Codex readiness を `ready` と返す。Claude connector は未検査のまま明示的に
-`unverified` とし、Codex-only overall を妨げない。local runtime error
-aggregate は collection が既定OFFで、canonical dotagents config の
-`collection.enabled: true` を明示した場合だけ収集します。いずれも network I/O は
-行いません。`throughline@0.6.3`、tag / GitHub Release、公開 CI run
-`29284655280`（9/9 green）を確認済みです。npm registry artifact の shasum は
-`4f3fcd2598a75f026358dae7f3eb3165242b580b` です。
+**v0.9.0 was published on 2026-08-04.** It adds the versioned, read-only
+`handoff-context` boundary for local launchers. The command opens only an
+existing database and leaves baton state, session ownership, and memory rows
+unchanged. Existing factory diagnostics, Observer, runtime-error, capture, and
+normal handoff behavior remain available under the same explicit-failure and
+local-only contracts.
 
 | Command                                        | What it does                                                 |
 | ---------------------------------------------- | ------------------------------------------------------------ |
@@ -822,6 +819,23 @@ aggregate は collection が既定OFFで、canonical dotagents config の
 | `throughline status`                           | Print DB statistics (sessions, skeletons, bodies, details)   |
 | `throughline --version`                        | Print the installed version                                  |
 
+### Read-only handoff context for local launchers
+
+Use this boundary when a local launcher needs Throughline memory without
+performing a normal handoff:
+
+```bash
+throughline handoff-context --session codex:<thread-id> --json
+```
+
+The successful `throughline.handoff_context.v1` object contains only `schema`,
+`status`, `sessionId`, and `context`. The context is the same budgeted
+inheritance text used by SessionStart. The command does not create or migrate a
+database, consume a baton, merge sessions, infer a latest session, change
+`sessions.merged_into`, or reassign L1/L2/L3 rows. AIterm uses this boundary for
+its optional cross-vendor portable fork; the Observer feed is a separate
+completed-turn projection and is not a substitute.
+
 Slash commands (invoked by the user in Claude Code):
 
 | Command       | What it does                                                      |

package/codex/skills/throughline/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: throughline
-description: Use when the user asks to use Throughline from Codex, continue or restore Throughline memory, prepare a new Codex thread handoff, summarize a captured Codex session, or check whether the Throughline Codex Stop hook captured the current session. Hide long Throughline command details behind this workflow.
+description: Use when the user asks to use Throughline from Codex, continue or restore Throughline memory, export read-only handoff context for a local launcher, prepare a new Codex thread handoff, summarize a captured Codex session, or check whether the Throughline Codex Stop hook captured the current session. Hide long Throughline command details behind this workflow.
 ---
 
 # Throughline
@@ -112,6 +112,22 @@ throughline codex-summarize --session codex:<current-thread-id> --json
 Codex-primary summarization uses the Codex CLI backend. Do not claim it fell
 back to Claude Haiku.
 
+### "export memory" / "portable fork context"
+
+Run:
+
+```bash
+throughline handoff-context --session <exact-session-id> --json
+```
+
+This is a local read-only export for another launcher. It requires an exact
+session id and returns `schema`, `status`, `sessionId`, and `context`. It does
+not create or migrate the database, consume a baton, merge sessions, move
+memory rows, or change `sessions.merged_into`. Do not substitute the Observer
+completed-turn feed, infer the latest session, or read the SQLite database
+directly. If the command fails or returns no context, report that failure
+instead of falling back to a different memory source.
+
 ### "trim" / "rewind" / "rollback" / "context cleanup"
 
 Default to the same fresh-thread handoff flow as bare `$throughline` when the

package/docs/00_overview.md

@@ -18,9 +18,9 @@
 | [10_transcript_injection_plan.md](10_transcript_injection_plan.md) | transcript injection 検証計画と v0.5 実機結果 |
 | [11_codex_monitor_implementation_plan.md](11_codex_monitor_implementation_plan.md) | Codex monitor 対応の実装記録 |
 | [13_native_factory_diagnostics_plan.md](13_native_factory_diagnostics_plan.md) | native factory read-only readiness 診断の実装記録 |
-| [14_observer_completed_turn_feed_plan.md](14_observer_completed_turn_feed_plan.md) | Observer向けcompleted-only read / wait CLIのactive計画。CLI・opaque cursor・pagination・最大3600秒waitは実装済み、公開／full regression gateは継続中 |
+| [14_observer_completed_turn_feed_plan.md](14_observer_completed_turn_feed_plan.md) | Observer向けcompleted-only read / wait CLIの完了済み設計・受入記録。v0.7.0で公開済み |
 | [15_windows_ci_release_latency_plan.md](15_windows_ci_release_latency_plan.md) | Windows CI 18分の原因、ACL安全網を維持した短縮、release gateの受入条件 |
-| [16_readonly_handoff_context_plan.md](16_readonly_handoff_context_plan.md) | DB所有権を変更せずSessionStartと同じ記憶を返す、ローカルランチャー向けread-only I/F |
+| [16_readonly_handoff_context_plan.md](16_readonly_handoff_context_plan.md) | DB所有権を変更せずSessionStartと同じ記憶を返す、ローカルランチャー向けread-only I/F。v0.9.0で公開済み |
 | [BUGHUB_RUNTIME_ERROR_STORE_PLAN.md](BUGHUB_RUNTIME_ERROR_STORE_PLAN.md) | local runtime error aggregate store の契約と実装 TODO |
 
 ## Supporting Records
@@ -44,6 +44,11 @@ ThroughlineはClaude Stop receiptとCodex rolloutの`task_complete`だけからc
 ObserverがDB、WAL、rolloutを直接監視するfallbackは持たない。waitは最大3600秒で、`changed`、`timeout`、
 `resync_required`、`ambiguous_parent`を返す。
 
+portable contextの公開境界は`throughline handoff-context --session <id> --json`である。既存DBを
+read-onlyで開き、SessionStartと同じbudgeted inheritance contextを返すが、baton、merge、
+`sessions.merged_into`、L1/L2/L3 rowの`session_id`は変更しない。Observer境界とは用途もschemaも別で、
+AIterm v0.23.0はこのCLIだけをconsumer境界として使う。
+
 ## Entrypoints
 
 - [../CLAUDE.md](../CLAUDE.md): AI 作業者向けの正本。

package/docs/16_readonly_handoff_context_plan.md

@@ -8,6 +8,15 @@
 
 実行 ToDo、依存、状態、完了証拠の正本は Lattice plan `readonly-handoff-context` とする。
 
+## 完了
+
+2026-08-04に`throughline@0.9.0`としてnpm、tag、GitHub Release、global installまで公開した。
+focused契約testと全回帰は729 pass／1 skip／0 fail。AIterm v0.23.0の代表cross-vendor smokeでは
+Codex source memoryをClaudeへ注入し、前後でsource session、`sessions.merged_into`、L1/L2/L3 row所属が
+完全一致することを確認した。公開後の現行ドキュメント全域監査は、Latticeの終端ToDoを再openして
+README、作業者入口、配布Codex skill、docs索引、計画、CHANGELOGへ同期した。変更Markdownの
+相対リンク監査とCLI help／handoff-contextのfocused test 5/5を通過した。
+
 ## 契約
 
 - `throughline handoff-context --session <id> --json` は session を明示必須とする。

package/docs/adr/0020-windows-ci-release-latency.md

@@ -54,3 +54,26 @@ read-only refuterによる敵対的検証ではP0はなく、次のP1を設計
 - matrix縮小
 - npm自動publish、credential保管
 - release番号だけを根拠にした性能成功扱い
+
+## Terminal audit evidence
+
+2026-08-08 に公開後の終端監査を再確認し、次を受け入れた。
+
+- 公開commit `df215fcaeb6d09d13bfbf5389c6f7c98a995b25c` は現在の `origin/main` の祖先で、
+  annotated tag `v0.8.7` は同commitへ解決する。
+- GitHub Actions run `29726067549` は公開commitに対して9/9 greenである。Windows jobは
+  2分46秒／2分53秒／2分59秒、unit test stepは2分14秒／2分26秒／2分38秒で、
+  5分SLOと3分目標を満たした。
+- GitHub Release `v0.8.7` はdraft／prereleaseではなく公開済みで、公開commit、CI run、
+  Windows実測、npm shasumを保持する。
+- npm registryの `throughline@0.8.7` はshasum
+  `35a50f6878095d0881e75ebfb1da097a8da937c8`、integrity
+  `sha512-7Z/Mz0FRT2bJaxOLl+M8AYlNp5AhmaouQYeiLQ5BKu94+iyo/p1l1vrOhlFHWMlNSv4a89mGYtEAzolPZGRKtA==`
+  を返す。registryから再取得したtarballも同じSHA-1で、212 entries、package version `0.8.7`
+  を確認した。
+- 元のrelease sessionではregistry版global install、`throughline --version = 0.8.7`、
+  managed hooks／skillの再install、migration、`doctor --codex` exit 0まで受け入れた。
+  現在のglobal installは後続release `0.9.0`へ正当に更新済みのため、監査目的のdowngradeは行わない。
+
+以上により、製品受入は2026-07-20時点で完了しており、遅延していたLattice terminal-auditの
+記録を証拠付きで閉じてよいと裁定する。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "throughline",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "type": "module",
   "description": "Claude Code hooks plugin for structured context compression (/clear-safe persistent memory)",
   "keywords": [

package/src/hook-entrypoints.test.mjs

@@ -34,10 +34,10 @@ function childEnv(home) {
   };
 }
 
-function runNode(args, { home, cwd = REPO_ROOT, input = '' }) {
+function runNode(args, { home, cwd = REPO_ROOT, input = '', env = {} }) {
   return spawnSync(process.execPath, args, {
     cwd,
-    env: childEnv(home),
+    env: { ...childEnv(home), ...env },
     input,
     encoding: 'utf8',
   });
@@ -74,6 +74,71 @@ test('hook modules can be imported without executing their hook body', () => {
   }
 });
 
+test('Grok camelCase envelopes are unsupported no-op before Throughline side effects [GF04T]', () => {
+  const home = makeTempHome();
+  const project = makeTempProject();
+  const common = {
+    sessionId: 'grok-session',
+    cwd: project,
+    workspaceRoot: project,
+    timestamp: '2026-08-14T00:00:00Z',
+    permissionMode: 'default',
+  };
+  const cases = [
+    {
+      event: 'SessionStart',
+      entrypoint: 'src/session-start.mjs',
+      input: { ...common, hookEventName: 'session_start', source: 'startup' },
+    },
+    {
+      event: 'UserPromptSubmit',
+      entrypoint: 'src/prompt-submit.mjs',
+      input: { ...common, hookEventName: 'user_prompt_submit', prompt: 'hello' },
+    },
+    {
+      event: 'Stop',
+      entrypoint: 'src/turn-processor.mjs',
+      input: {
+        ...common,
+        hookEventName: 'stop',
+        reason: 'end_turn',
+        stopHookActive: false,
+        lastAssistantMessage: 'done',
+        backgroundTasks: [],
+        sessionCrons: [],
+      },
+    },
+  ];
+
+  try {
+    const results = cases.map(({ event, entrypoint, input }) => {
+      const result = runNode([join(REPO_ROOT, entrypoint)], {
+        home,
+        cwd: project,
+        input: JSON.stringify(input),
+        env: { THROUGHLINE_NO_VSCODE: '0', TERM_PROGRAM: 'vscode' },
+      });
+      return { event, status: result.status, stdout: result.stdout, stderr: result.stderr };
+    });
+
+    assert.deepEqual(
+      {
+        results,
+        throughlineStateExists: existsSync(join(home, '.throughline')),
+        vscodeTaskExists: existsSync(join(project, '.vscode', 'tasks.json')),
+      },
+      {
+        results: cases.map(({ event }) => ({ event, status: 0, stdout: '', stderr: '' })),
+        throughlineStateExists: false,
+        vscodeTaskExists: false,
+      },
+    );
+  } finally {
+    rmSync(project, { recursive: true, force: true });
+    rmSync(home, { recursive: true, force: true });
+  }
+});
+
 test('prompt-submit subprocess writes a /tl baton into an isolated DB', () => {
   const home = makeTempHome();
   const project = makeTempProject();

package/src/hook-envelope.mjs

@@ -0,0 +1,12 @@
+// Grok can invoke Claude-compatible hook commands with its camelCase wire.
+// Throughline does not support Grok as a host, so this envelope is ignored
+// before DB, state, VS Code task, transcript, or runtime-error side effects.
+export function isUnsupportedNonClaudeEnvelope(payload) {
+  return payload !== null
+    && typeof payload === 'object'
+    && typeof payload.sessionId === 'string'
+    && payload.sessionId.length > 0
+    && typeof payload.hookEventName === 'string'
+    && payload.hookEventName.length > 0
+    && !Object.hasOwn(payload, 'session_id');
+}

package/src/prompt-submit.mjs

@@ -42,6 +42,7 @@ import { join, dirname } from 'node:path';
 import { homedir } from 'node:os';
 import { pathToFileURL } from 'node:url';
 import { recordRuntimeErrorBestEffort } from './runtime-error-store.mjs';
+import { isUnsupportedNonClaudeEnvelope } from './hook-envelope.mjs';
 
 // Phase 0-5 spike marker (SessionStart の spike-inject.flag とは別)
 const PROMPT_SPIKE_MARKER_PATH = join(homedir(), '.throughline', 'spike-prompt.flag');
@@ -143,6 +144,7 @@ export async function run() {
   });
 
   const payload = JSON.parse(raw);
+  if (isUnsupportedNonClaudeEnvelope(payload)) return;
   const { session_id, cwd, prompt } = payload;
 
   // VSCode 新規プロジェクトへの tasks.json 自動プロビジョニング。

package/src/session-start.mjs

@@ -32,6 +32,7 @@ import { logDecision } from './decision-log.mjs';
 import { existsSync } from 'node:fs';
 import { pathToFileURL } from 'node:url';
 import { recordRuntimeErrorBestEffort } from './runtime-error-store.mjs';
+import { isUnsupportedNonClaudeEnvelope } from './hook-envelope.mjs';
 
 const ENV_DISABLE_AUTO_HANDOFF = 'THROUGHLINE_DISABLE_AUTO_HANDOFF';
 
@@ -91,6 +92,7 @@ export async function run() {
   });
 
   const payload = JSON.parse(raw);
+  if (isUnsupportedNonClaudeEnvelope(payload)) return;
   const { session_id, cwd, source, transcript_path } = payload;
 
   if (!session_id) throw new Error('Missing session_id in SessionStart payload');

package/src/turn-processor.mjs

@@ -46,6 +46,7 @@ import { readLatestUsage } from './transcript-usage.mjs';
 import { pathToFileURL } from 'node:url';
 import { recordRuntimeErrorBestEffort } from './runtime-error-store.mjs';
 import { writeCompletedTurnReceipt } from './completed-turn-receipts.mjs';
+import { isUnsupportedNonClaudeEnvelope } from './hook-envelope.mjs';
 
 /** 直近 N ターンは bodies を生で残し、それより古いものだけ L1 要約する。 */
 export const L2_WINDOW = 20;
@@ -191,6 +192,7 @@ export async function run() {
   });
 
   const payload = JSON.parse(raw || '{}');
+  if (isUnsupportedNonClaudeEnvelope(payload)) return;
   const { session_id, transcript_path, cwd, last_assistant_message } = payload;
   if (!session_id) throw new Error('Missing session_id in Stop payload');