code-context-control 2.59.0__tar.gz → 2.60.0__tar.gz

{code_context_control-2.59.0 → code_context_control-2.60.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-context-control
-Version: 2.59.0
+Version: 2.60.0
 Summary: Local code-intelligence layer for AI coding tools (Claude Code, Codex, Copilot, Cursor, Antigravity). Retrieve less, read less, edit safer — version the configs that shape your agent (CLAUDE.md, skills, hooks, MCP), and manage multi-project + sub-project hierarchies from a local hub.
 Author-email: Dimitri Tselenchuk <dtselenc@gmail.com>
 License-Expression: Apache-2.0
@@ -243,6 +243,8 @@ Manage `CLAUDE.md`, `AGENTS.md` (Codex), `GEMINI.md`, and `.github/copilot-instr
 
 C3-generated content is wrapped in a `<!-- C3:BEGIN … -->` / `<!-- C3:END -->` block. Regenerating (or `Compact`) only rewrites that block — **anything you write outside it is preserved**, so it's safe to keep your own notes in the same file.
 
+**Live repo map (v2.60.0):** generated docs no longer embed a frozen project tree. They carry a stable pointer to `.c3/MAP.md` — a machine-owned, byte-stable map (commands, entry points, module one-liners, tree) that C3 refreshes automatically via edit hooks and a first-tool-call freshness check. Manage it with `c3 map status|ensure|refresh`; set `map.enabled=false` in `.c3/config.json` to restore the embedded tree.
+
 ### 7. Chat — browse prior AI conversations
 
 <p align="center">

{code_context_control-2.59.0 → code_context_control-2.60.0}/README.md

@@ -180,6 +180,8 @@ Manage `CLAUDE.md`, `AGENTS.md` (Codex), `GEMINI.md`, and `.github/copilot-instr
 
 C3-generated content is wrapped in a `<!-- C3:BEGIN … -->` / `<!-- C3:END -->` block. Regenerating (or `Compact`) only rewrites that block — **anything you write outside it is preserved**, so it's safe to keep your own notes in the same file.
 
+**Live repo map (v2.60.0):** generated docs no longer embed a frozen project tree. They carry a stable pointer to `.c3/MAP.md` — a machine-owned, byte-stable map (commands, entry points, module one-liners, tree) that C3 refreshes automatically via edit hooks and a first-tool-call freshness check. Manage it with `c3 map status|ensure|refresh`; set `map.enabled=false` in `.c3/config.json` to restore the embedded tree.
+
 ### 7. Chat — browse prior AI conversations
 
 <p align="center">

{code_context_control-2.59.0 → code_context_control-2.60.0}/cli/c3.py

@@ -92,7 +92,7 @@ console = Console() if HAS_RICH else None
 # Config
 CONFIG_DIR = ".c3"
 CONFIG_FILE = ".c3/config.json"
-__version__ = "2.59.0"
+__version__ = "2.60.0"
 
 
 def _command_deps() -> CommandDeps:
@@ -1313,6 +1313,12 @@ def cmd_claudemd(args):
     return common_cmd_claudemd(args, _command_deps())
 
 
+def cmd_map(args):
+    """Live repo map (.c3/MAP.md) commands."""
+    from cli.commands.common import cmd_map as common_cmd_map
+    return common_cmd_map(args, _command_deps())
+
+
 def cmd_stats(args):
     """Show comprehensive stats."""
     return common_cmd_stats(args, _command_deps())
@@ -7162,6 +7168,7 @@ def main():
         "decode": cmd_decode,
         "session": cmd_session,
         "claudemd": cmd_claudemd,
+        "map": cmd_map,
         "stats": cmd_stats,
         "benchmark": cmd_benchmark,
         "session-benchmark": cmd_session_benchmark,

{code_context_control-2.59.0 → code_context_control-2.60.0}/cli/commands/common.py

@@ -159,6 +159,57 @@ def cmd_session(args, deps: CommandDeps):
         print(context)
 
 
+def cmd_map(args, deps: CommandDeps):
+    """Live repo map (.c3/MAP.md): status | ensure | refresh."""
+    config = deps.load_config()
+    project_path = config.get("project_path", ".")
+
+    from services.repo_map import RepoMapService
+
+    sm = deps.SessionManager(project_path)
+    svc = RepoMapService(project_path, session_mgr=sm)
+
+    if args.map_cmd == "status":
+        result = svc.status()
+    elif args.map_cmd == "ensure":
+        result = svc.ensure()
+    else:
+        result = svc.refresh()
+
+    if getattr(args, "json", False):
+        print(json.dumps(result, indent=2))
+        return
+
+    if args.map_cmd == "status":
+        state = "STALE" if result["stale"] else ("FRESH" if result["exists"] else "MISSING")
+        deps.print_header(f"Repo Map — {state}")
+        print(f"  Path: {svc.map_path}")
+        if result.get("generated_at"):
+            print(f"  Generated: {result['generated_at']}")
+        if result.get("tokens"):
+            print(f"  Tokens: {result['tokens']}")
+        if result.get("reasons"):
+            print(f"  Stale reasons: {', '.join(result['reasons'])}")
+        if result.get("truncated"):
+            print("  [WARN] Map is truncated (file cap or token budget hit)")
+    else:
+        action = result.get("action", "?")
+        label = {
+            "regenerated": "Map regenerated",
+            "meta_only": "Content unchanged (meta refreshed)",
+            "fresh": "Already fresh — nothing to do",
+            "locked": "Another process is regenerating — skipped",
+            "disabled": "Repo map disabled (map.enabled=false in .c3/config.json)",
+        }.get(action, action)
+        deps.print_header(f"Repo Map — {label}")
+        if result.get("tokens"):
+            print(f"  Tokens: {result['tokens']}, duration: {result.get('duration_ms', '?')}ms")
+        if result.get("reasons"):
+            print(f"  Triggered by: {', '.join(result['reasons'])}")
+        if result.get("truncated"):
+            print("  [WARN] Map is truncated (file cap or token budget hit)")
+
+
 def cmd_claudemd(args, deps: CommandDeps):
     """Instructions file generation commands."""
     config = deps.load_config()

{code_context_control-2.59.0 → code_context_control-2.60.0}/cli/commands/parser.py

@@ -61,6 +61,10 @@ def build_parser(version: str, parse_cli_ide_arg):
     p_claudemd.add_argument("claudemd_cmd", choices=["generate", "save", "check"])
     p_claudemd.add_argument("--nano", action="store_true", help="Generate nano mode (~250 tokens) instead of full compact mode")
 
+    p_map = subparsers.add_parser("map", help="Live repo map (.c3/MAP.md) management")
+    p_map.add_argument("map_cmd", choices=["status", "ensure", "refresh"])
+    p_map.add_argument("--json", action="store_true", help="Emit JSON result")
+
     subparsers.add_parser("stats", help="Show statistics")
 
     p_benchmark = subparsers.add_parser("benchmark", help="Run with/without-C3 workflow benchmark")

{code_context_control-2.59.0 → code_context_control-2.60.0}/cli/guide/tools.html

@@ -126,6 +126,7 @@
       <a href="#c3_task" class="sidebar-link"><span class="icon">✅</span> c3_task</a>
       <a href="#c3_bitbucket" class="sidebar-link"><span class="icon">🪣</span> c3_bitbucket</a>
       <a href="#c3_credentials" class="sidebar-link"><span class="icon">🔐</span> c3_credentials</a>
+      <a href="#c3_jira" class="sidebar-link"><span class="icon">🎫</span> c3_jira</a>
     </div>
     <div class="sidebar-section">
       <div class="sidebar-label">Cross-project</div>
@@ -163,6 +164,7 @@
         <a href="#c3_artifacts" class="toc-item">c3_artifacts <span class="cat">Config</span></a>
         <a href="#c3_bitbucket" class="toc-item">c3_bitbucket <span class="cat">SCM</span></a>
         <a href="#c3_credentials" class="toc-item">c3_credentials <span class="cat">Secrets</span></a>
+        <a href="#c3_jira" class="toc-item">c3_jira <span class="cat">Issues</span></a>
         <a href="#c3_project"  class="toc-item">c3_project  <span class="cat">Multi-project</span></a>
       </div>
     </div>
@@ -1280,6 +1282,57 @@ c3_shell(cmd=<span class="str">'curl -H "Authorization: Bearer {{cred:API_KEY}}"
           <p class="tool-desc"><strong>Surfaces:</strong> the <code>c3 creds</code> CLI (<code>set</code> / <code>get</code> / <code>list</code> / <code>rm</code> / <code>import .env</code>, <code>--global</code> for the shared scope), a per-project dashboard <strong>Credentials</strong> tab, and — since v2.59.0 — a top-level <strong>Credentials</strong> view in the Hub: a Global-vault manager plus a per-project browser with shadowing shown both ways ("shadows global" on project entries, "shadowed in N projects" on globals); the Hub's per-project drill panel manages too. No HTTP route ever returns a stored value (write-only wire contract, endpoint-sweep tested), every mutation is ledger-logged by name, the vault is hard-excluded from the Oracle Discovery API, and cross-project (<code>c3_project</code>) shells run with credentials disabled.</p>
         </div>
       </div>
+
+      <!-- c3_jira -->
+      <div class="tool-card" id="c3_jira">
+        <div class="tool-card-header">
+          <span class="tool-name">c3_jira</span>
+          <div class="tag-row">
+            <span class="badge badge-purple">issue tracking</span>
+            <span class="badge">v2.56.0</span>
+          </div>
+          <span class="tool-tagline">Jira Cloud + Data Center — search, create, transition, comment through one tool</span>
+        </div>
+        <div class="tool-card-body">
+          <p class="tool-desc">One tool for both Jira deployments: <strong>Cloud</strong> (REST v3, email + API token, ADF bodies handled transparently) and self-hosted <strong>Data Center / Server</strong> (REST v2, PAT Bearer, plain-text bodies) — normalized to a single DTO surface with an opaque pagination cursor. Transport is stdlib <code>urllib</code> (no new dependencies); reads get one bounded 429 retry honoring <code>Retry-After</code>, mutations are <em>never</em> auto-retried. Tokens live in the OS keyring keyed by <code>(base_url, username)</code>; the <code>jira</code> config section resolves project → home <strong>wholesale from a single file</strong>, so a repository's committed config can never field-override a home account's URL or TLS settings (credential-redirect hardening). HTTPS-only.</p>
+
+          <p class="tool-desc"><strong>Setup:</strong> <code>c3 jira login --url https://yoursite.atlassian.net</code> (Cloud inferred for <code>*.atlassian.net</code>; add <code>--deployment data_center</code> for self-hosted, <code>--ca-bundle</code> for enterprise certs, <code>--global</code> for a home config reusable across projects), then <code>c3 jira set-default --project PROJ</code>. Manage accounts with <code>c3 jira status / use / logout</code>.</p>
+
+          <h4>Actions</h4>
+          <table class="params-table">
+            <thead><tr><th>Action</th><th>Group</th><th>Description</th></tr></thead>
+            <tbody>
+              <tr><td class="param-name">status, whoami</td><td>Read</td><td class="param-desc">Active account, deployment, defaults, server probe / authenticated user</td></tr>
+              <tr><td class="param-name">search</td><td>Read</td><td class="param-desc">Raw JQL, paginated (helper-built JQL elsewhere is always quoted)</td></tr>
+              <tr><td class="param-name">my_issues</td><td>Read</td><td class="param-desc">Open issues assigned to the token's user (statusCategory-aware)</td></tr>
+              <tr><td class="param-name">get_issue, list_projects, list_transitions</td><td>Read</td><td class="param-desc">Issue detail with comments / project discovery / legal transitions for an issue</td></tr>
+              <tr><td class="param-name">get_create_metadata, search_users</td><td>Read</td><td class="param-desc">Required + allowed fields per project/type; user lookup for assignment</td></tr>
+              <tr><td class="param-name">create_issue</td><td>Write</td><td class="param-desc">Pre-validates against create metadata and returns machine-readable missing required fields instead of guessing defaults</td></tr>
+              <tr><td class="param-name">comment, transition, assign</td><td>Write</td><td class="param-desc">Comment on / move (accepts transition id <em>or</em> name) / assign an issue</td></tr>
+            </tbody>
+          </table>
+
+          <h4>Examples</h4>
+          <pre><code><span class="com"># Connection + account probe, then my open work</span>
+c3_jira(action=<span class="str">'status'</span>)
+c3_jira(action=<span class="str">'my_issues'</span>)
+
+<span class="com"># Raw JQL search</span>
+c3_jira(action=<span class="str">'search'</span>, jql=<span class="str">'project = PROJ AND status != Done ORDER BY updated DESC'</span>)
+
+<span class="com"># Create — required fields come from metadata, not guesses</span>
+c3_jira(action=<span class="str">'get_create_metadata'</span>, project=<span class="str">'PROJ'</span>, issue_type=<span class="str">'Task'</span>)
+c3_jira(action=<span class="str">'create_issue'</span>, project=<span class="str">'PROJ'</span>, issue_type=<span class="str">'Task'</span>,
+        summary=<span class="str">'Fix login flow'</span>, description=<span class="str">'Steps in thread'</span>)
+
+<span class="com"># Move it along — id or name both work</span>
+c3_jira(action=<span class="str">'list_transitions'</span>, issue=<span class="str">'PROJ-123'</span>)
+c3_jira(action=<span class="str">'transition'</span>, issue=<span class="str">'PROJ-123'</span>, transition=<span class="str">'In Progress'</span>)
+c3_jira(action=<span class="str">'comment'</span>, issue=<span class="str">'PROJ-123'</span>, body=<span class="str">'Deployed to staging'</span>)</code></pre>
+
+          <p class="tool-desc"><strong>Surfaces &amp; audit:</strong> the per-project dashboard gets a <strong>Jira tab</strong> (My Work board grouped by statusCategory, JQL search, an issue drawer with transition buttons + comments, and an Activity view) backed by <code>/api/jira/*</code> routes. Issue keys like <code>PROJ-123</code> are auto-linked from branch names and edit-ledger entries (acronym denylist, so UTF-8 / SHA-256 / CVE-2024 never match), and the issue drawer shows the local ledger activity for the open issue — that Activity view works with no account configured. Mutations (<code>create_issue</code>, <code>comment</code>, <code>transition</code>, <code>assign</code>) are edit-ledger-logged with identifiers only — bodies are never logged. Read actions are safe in plan mode.</p>
+        </div>
+      </div>
     </div>
 
     <!-- ═══════════════════════════════════════ CROSS-PROJECT ═════ -->

{code_context_control-2.59.0 → code_context_control-2.60.0}/cli/guide/workflow.html

@@ -250,6 +250,7 @@
       <a href="#session-restart" class="sidebar-link"><span class="icon">🔄</span> Session Restart</a>
       <a href="#terse-skill" class="sidebar-link"><span class="icon">⚡</span> /terse Skill</a>
       <a href="#subprojects" class="sidebar-link"><span class="icon">🌳</span> Sub-projects</a>
+      <a href="#repo-map" class="sidebar-link"><span class="icon">🗺️</span> Live Repo Map</a>
       <a href="#native-fallback" class="sidebar-link"><span class="icon">⚠️</span> Native Fallback</a>
     </div>
   </aside>
@@ -984,6 +985,53 @@ c3_memory(action=<span class="str">'recall'</span>, query=<span class="str">'pay
 
     <hr class="divider">
 
+    <!-- Live repo map -->
+    <section class="section" id="repo-map">
+      <div class="section-title"><span class="icon">🗺️</span> Live Repo Map (v2.60.0)</div>
+
+      <p>Instruction docs (CLAUDE.md / AGENTS.md) no longer embed a frozen project tree. They carry a stable pointer to <code>.c3/MAP.md</code> — a machine-owned map C3 keeps fresh automatically. One map serves every consumer: Claude Code, Codex, Antigravity.</p>
+
+      <p>The map contains, in priority order: build/test commands, entry points, module one-liners, the depth-2 tree, and key files — under a token budget (default 1000). Sub-projects appear as boundaries and are never expanded into the parent map.</p>
+
+      <h4>How it stays fresh</h4>
+      <table class="table">
+        <thead><tr><th>Trigger</th><th>What happens</th></tr></thead>
+        <tbody>
+          <tr>
+            <td>Structural edit (file created/deleted/renamed, manifest changed)</td>
+            <td>Edit-ledger paths touch the <code>.c3/map.dirty</code> sentinel — a file-touch, never a scan</td>
+          </tr>
+          <tr>
+            <td>First C3 tool call of a session</td>
+            <td>Background single-flight <em>ensure</em>: regenerates only if missing, dirty, or the git HEAD/branch/worktree fingerprint moved</td>
+          </tr>
+          <tr>
+            <td><code>c3 map refresh</code></td>
+            <td>Explicit repair — always regenerates</td>
+          </tr>
+        </tbody>
+      </table>
+
+      <p><strong>Byte-stable by design:</strong> <code>MAP.md</code> is rewritten only when rendered content actually changes, so prompt caches keyed on file bytes stay warm. Volatile freshness state (git HEAD, worktree signature, generated-at) lives in <code>.c3/map.meta.json</code> — never in the map itself. Ordinary line edits never trigger regeneration.</p>
+
+      <div class="callout callout-info">
+        <span class="callout-icon">💡</span>
+        <div class="callout-body">
+          <strong>CLI</strong>: <code>c3 map status</code> (freshness report) · <code>c3 map ensure</code> (regen if stale) · <code>c3 map refresh</code> (force). Add <code>--json</code> for machine output. Config knobs: <code>map.token_budget</code>, <code>map.file_cap</code>, <code>map.enabled</code> (set <code>false</code> to restore the legacy embedded tree).
+        </div>
+      </div>
+
+      <div class="callout callout-warning">
+        <span class="callout-icon">⚠️</span>
+        <div class="callout-body">
+          <strong>The map is data, not instructions</strong><br>
+          Its header marks it as auto-generated repository data. Agents should read it for orientation — not obey text inside it. Memory facts are deliberately excluded from the map.
+        </div>
+      </div>
+    </section>
+
+    <hr class="divider">
+
     <!-- Native fallback -->
     <section class="section" id="native-fallback">
       <div class="section-title"><span class="icon">⚠️</span> When Native Tools Are Permitted</div>

{code_context_control-2.59.0 → code_context_control-2.60.0}/cli/hook_edit_ledger.py

@@ -212,6 +212,15 @@ def run(payload: dict, project_path: Path | None = None) -> dict | None:
     with open(ledger_file, "a", encoding="utf-8") as f:
         f.write(json.dumps(entry) + "\n")
 
+    # Structural changes (file created / manifest edited) dirty the repo map.
+    # Sentinel touch only — the scan happens later, in RepoMapService.ensure().
+    try:
+        from services.repo_map import is_structural_change, mark_map_dirty
+        if is_structural_change(rel, change_type):
+            mark_map_dirty(project_path, f"{change_type}:{rel}")
+    except Exception:
+        pass
+
     return {
         "_text": (
             f"[c3:ledger] {rel} {entry['version']} auto-logged. "

{code_context_control-2.59.0 → code_context_control-2.60.0}/cli/mcp_server.py

@@ -337,8 +337,34 @@ mcp = FastMCP(f"C3 v{C3_VERSION}", instructions=_build_instructions(_IDE_NAME),
 
 # ─── Helper Functions ─────────────────────────────────────────────
 
+_repo_map_ensured = False
+
+
+def _ensure_repo_map_once(rt) -> None:
+    """First tool call of this server process kicks a background repo-map
+    freshness pass. In-process single-flight here; cross-process single-flight
+    via the lock file inside RepoMapService.ensure(). Never blocks the tool
+    call that triggered it."""
+    global _repo_map_ensured
+    if _repo_map_ensured:
+        return
+    _repo_map_ensured = True
+
+    def _bg():
+        try:
+            from services.repo_map import RepoMapService
+            RepoMapService(rt.project_path,
+                           session_mgr=getattr(rt, "session_mgr", None)).ensure()
+        except Exception:
+            pass
+
+    threading.Thread(target=_bg, daemon=True, name="repo-map-ensure").start()
+
+
 def _svc(ctx: Context) -> C3Runtime:
-    return ctx.request_context.lifespan_context
+    rt = ctx.request_context.lifespan_context
+    _ensure_repo_map_once(rt)
+    return rt
 
 
 _last_tool_call_time: float = 0.0

{code_context_control-2.59.0 → code_context_control-2.60.0}/cli/tools/agent.py

@@ -530,7 +530,7 @@ def _wf_codex_test_gen(scope, context, svc, steps_log):
     if context:
         gen_context += f"\n\nAdditional context: {context}"
 
-    model = dcfg.get("codex_default_model", "gpt-5.3-codex-spark")
+    model = dcfg.get("codex_default_model", "")
     timeout = int(dcfg.get("codex_timeout", 180))
 
     steps_log.append("codex_generate")
@@ -544,7 +544,7 @@ def _wf_codex_test_gen(scope, context, svc, steps_log):
     parts = [f"--- Test generation for {len(files)} file(s) ---"]
     parts.append(f"Files: {file_list}")
     parts.append("Sandbox: workspace-write")
-    parts.append(f"Model: {model}")
+    parts.append(f"Model: {model or 'cli-default'}")
     if ok:
         parts.append(f"\n--- Codex output ---\n{output}")
     else:
@@ -1005,7 +1005,7 @@ def _try_delegate(svc, task_type: str, task: str, context: str, steps_log: list,
                 steps_log.append("codex(skipped:health_check_failed)")
                 return ""
             cdef = CODEX_MODELS.get(task_type, CODEX_MODELS.get("ask", {}))
-            model = dcfg.get("codex_default_model") or cdef.get("model", "gpt-5.3-codex-spark")
+            model = dcfg.get("codex_default_model") or cdef.get("model", "")
             sandbox = dcfg.get("codex_default_sandbox") or cdef.get("sandbox", "read-only")
             reasoning = dcfg.get("codex_reasoning_effort") or cdef.get("reasoning", "high")
             timeout = int(dcfg.get("codex_timeout", 90))
@@ -1109,7 +1109,7 @@ def _try_delegate(svc, task_type: str, task: str, context: str, steps_log: list,
             )
             if _codex_ok and _dm_auto._codex_available is not False:
                 cdef = CODEX_MODELS.get(task_type, CODEX_MODELS.get("ask", {}))
-                c_model = dcfg.get("codex_default_model") or cdef.get("model", "gpt-5.3-codex-spark")
+                c_model = dcfg.get("codex_default_model") or cdef.get("model", "")
                 c_sandbox = dcfg.get("codex_default_sandbox") or cdef.get("sandbox", "read-only")
                 c_reason = dcfg.get("codex_reasoning_effort") or cdef.get("reasoning", "high")
                 c_timeout = int(dcfg.get("codex_timeout", 90))

{code_context_control-2.59.0 → code_context_control-2.60.0}/cli/tools/delegate.py

@@ -115,15 +115,19 @@ def _popen_kwargs():
 # Codex CLI backend
 # ---------------------------------------------------------------------------
 
+# No "model" keys here on purpose: a pinned model name goes stale and breaks
+# accounts that don't support it (ChatGPT-plan logins reject retired models
+# outright). Resolution order: .c3 config codex_default_model → the user's own
+# Codex CLI default (~/.codex/config.toml). Empty model = omit -m entirely.
 CODEX_MODELS = {
-    "review":   {"model": "gpt-5.3-codex-spark", "sandbox": "read-only",      "reasoning": "high"},
-    "explain":  {"model": "gpt-5.3-codex-spark", "sandbox": "read-only",      "reasoning": "medium"},
-    "improve":  {"model": "gpt-5.4",             "sandbox": "read-only",      "reasoning": "high"},
-    "diagnose": {"model": "gpt-5.3-codex",       "sandbox": "read-only",      "reasoning": "high"},
-    "test":     {"model": "gpt-5.3-codex-spark", "sandbox": "workspace-write", "reasoning": "medium"},
-    "summarize":{"model": "gpt-5.3-codex-spark", "sandbox": "read-only",      "reasoning": "low"},
-    "docstring":{"model": "gpt-5.3-codex-spark", "sandbox": "read-only",      "reasoning": "low"},
-    "ask":      {"model": "gpt-5.3-codex-spark", "sandbox": "read-only",      "reasoning": "medium"},
+    "review":   {"sandbox": "read-only",       "reasoning": "high"},
+    "explain":  {"sandbox": "read-only",       "reasoning": "medium"},
+    "improve":  {"sandbox": "read-only",       "reasoning": "high"},
+    "diagnose": {"sandbox": "read-only",       "reasoning": "high"},
+    "test":     {"sandbox": "workspace-write", "reasoning": "medium"},
+    "summarize":{"sandbox": "read-only",       "reasoning": "low"},
+    "docstring":{"sandbox": "read-only",       "reasoning": "low"},
+    "ask":      {"sandbox": "read-only",       "reasoning": "medium"},
 }
 
 _codex_available: bool | None = None  # cached after first check
@@ -560,6 +564,26 @@ def check_codex() -> dict:
         return {"status": "error", "detail": str(e)}
 
 
+def _codex_cmd(prompt: str, model: str, sandbox: str, reasoning: str) -> list:
+    """Build the codex exec argv.
+
+    An empty/falsy model omits ``-m`` so the user's own Codex CLI default
+    (~/.codex/config.toml) applies — never pin a fallback model name here.
+    """
+    codex_exe = _which("codex") or "codex"
+    cmd = [codex_exe, "exec"]
+    if model:
+        cmd += ["-m", model]
+    cmd += [
+        "--config", f"model_reasoning_effort={reasoning}",
+        "--sandbox", sandbox,
+        "--full-auto",
+        "--skip-git-repo-check",
+        prompt,
+    ]
+    return cmd
+
+
 def _run_codex(task: str, context: str, model: str, sandbox: str,
                reasoning: str = "high", timeout: int = 120,
                idle_timeout: int = 20,
@@ -570,16 +594,7 @@ def _run_codex(task: str, context: str, model: str, sandbox: str,
     seconds (catches MCP startup hangs). Also enforces total timeout.
     """
     prompt = f"{task}\n\nContext:\n{context}" if context else task
-    codex_exe = _which("codex") or "codex"
-    cmd = [
-        codex_exe, "exec",
-        "-m", model,
-        "--config", f"model_reasoning_effort={reasoning}",
-        "--sandbox", sandbox,
-        "--full-auto",
-        "--skip-git-repo-check",
-        prompt,
-    ]
+    cmd = _codex_cmd(prompt, model, sandbox, reasoning)
     try:
         proc = subprocess.Popen(
             harden_win_argv(cmd),
@@ -897,7 +912,7 @@ def _handle_codex_delegate(task: str, task_type: str, context: str,
 
     # Resolve model/sandbox/reasoning from config or defaults
     cdef = CODEX_MODELS.get(task_type, CODEX_MODELS.get("ask", {}))
-    model = dcfg.get("codex_default_model") or cdef.get("model", "gpt-5.3-codex-spark")
+    model = dcfg.get("codex_default_model") or cdef.get("model", "")
     sandbox = dcfg.get("codex_default_sandbox") or cdef.get("sandbox", "read-only")
     reasoning = dcfg.get("codex_reasoning_effort") or cdef.get("reasoning", "high")
     timeout = int(dcfg.get("codex_timeout", 120))
@@ -926,7 +941,7 @@ def _handle_codex_delegate(task: str, task_type: str, context: str,
                         cached_resp, "cached")
 
     # Run Codex
-    _log_progress(svc, f"[delegate] Codex {model} ({sandbox}, reasoning={reasoning})...")
+    _log_progress(svc, f"[delegate] Codex {model or 'cli-default'} ({sandbox}, reasoning={reasoning})...")
     t0 = time.monotonic()
     output, ok = _run_codex(
         task=task, context=enriched,

{code_context_control-2.59.0 → code_context_control-2.60.0}/code_context_control.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-context-control
-Version: 2.59.0
+Version: 2.60.0
 Summary: Local code-intelligence layer for AI coding tools (Claude Code, Codex, Copilot, Cursor, Antigravity). Retrieve less, read less, edit safer — version the configs that shape your agent (CLAUDE.md, skills, hooks, MCP), and manage multi-project + sub-project hierarchies from a local hub.
 Author-email: Dimitri Tselenchuk <dtselenc@gmail.com>
 License-Expression: Apache-2.0
@@ -243,6 +243,8 @@ Manage `CLAUDE.md`, `AGENTS.md` (Codex), `GEMINI.md`, and `.github/copilot-instr
 
 C3-generated content is wrapped in a `<!-- C3:BEGIN … -->` / `<!-- C3:END -->` block. Regenerating (or `Compact`) only rewrites that block — **anything you write outside it is preserved**, so it's safe to keep your own notes in the same file.
 
+**Live repo map (v2.60.0):** generated docs no longer embed a frozen project tree. They carry a stable pointer to `.c3/MAP.md` — a machine-owned, byte-stable map (commands, entry points, module one-liners, tree) that C3 refreshes automatically via edit hooks and a first-tool-call freshness check. Manage it with `c3 map status|ensure|refresh`; set `map.enabled=false` in `.c3/config.json` to restore the embedded tree.
+
 ### 7. Chat — browse prior AI conversations
 
 <p align="center">

{code_context_control-2.59.0 → code_context_control-2.60.0}/code_context_control.egg-info/SOURCES.txt

@@ -205,6 +205,7 @@ services/project_manager.py
 services/project_runtime.py
 services/protocol.py
 services/proxy_state.py
+services/repo_map.py
 services/retention.py
 services/retrieval_broker.py
 services/router.py
@@ -287,6 +288,7 @@ tests/test_memory_distiller.py
 tests/test_memory_graph_api.py
 tests/test_memory_queue.py
 tests/test_memory_system.py
+tests/test_no_stale_model_pins.py
 tests/test_notification_dedup.py
 tests/test_notification_discipline.py
 tests/test_ollama_credentials.py
@@ -310,6 +312,7 @@ tests/test_project_tool.py
 tests/test_read_coercion.py
 tests/test_read_edit_parity.py
 tests/test_related_facts.py
+tests/test_repo_map.py
 tests/test_response_boilerplate.py
 tests/test_retention.py
 tests/test_review_digest.py

{code_context_control-2.59.0 → code_context_control-2.60.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "code-context-control"
-version = "2.59.0"
+version = "2.60.0"
 description = "Local code-intelligence layer for AI coding tools (Claude Code, Codex, Copilot, Cursor, Antigravity). Retrieve less, read less, edit safer — version the configs that shape your agent (CLAUDE.md, skills, hooks, MCP), and manage multi-project + sub-project hierarchies from a local hub."
 readme = "README.md"
 requires-python = ">=3.10"

{code_context_control-2.59.0 → code_context_control-2.60.0}/services/agents.py

@@ -1554,7 +1554,7 @@ class EditLedgerEnricherAgent(BackgroundAgent):
                 f"--- {f} ---\n{d}" for _, f, d in batch
             )
             task = "Review these recent edits for regressions, bugs, or issues. Be concise — only flag real problems."
-            model = self.delegate_config.get("codex_default_model", "gpt-5.3-codex-spark")
+            model = self.delegate_config.get("codex_default_model", "")
             timeout = int(self.delegate_config.get("codex_timeout", 120))
 
             output, ok = _run_codex(

{code_context_control-2.59.0 → code_context_control-2.60.0}/services/claude_md.py

@@ -55,6 +55,16 @@ In plan mode, all c3_* read tools (search, read, compress, filter, validate, sta
 - Reading entire files when c3_compress + c3_read would be more surgical
 - Skipping c3_validate after making edits"""
 
+# Pointer that replaces the embedded Project Context tree (v2.60.0).
+# The live map is machine-owned and auto-refreshed; instruction docs carry
+# only this stable pointer so they never go stale and never fight the
+# line budget. Works for every consumer (Claude Code, Codex, Antigravity).
+MAP_POINTER_BLOCK = """\
+Live repo map: `.c3/MAP.md` — tree, commands, entry points, module
+one-liners. Read it BEFORE any file discovery. C3 refreshes it
+automatically (edit hooks + first tool call); if it is missing or looks
+stale, run `c3 map refresh`. Freshness state: `.c3/map.meta.json`."""
+
 # Ultra-compact workflow for nano mode (~250 tokens vs ~800 for full)
 C3_NANO_WORKFLOW = """\
 ## C3 Tools — MANDATORY
@@ -230,6 +240,17 @@ class ClaudeMdManager:
 
         return workflow
 
+    def _repo_map_enabled(self) -> bool:
+        """Live repo map is default-on; map.enabled=false in .c3/config.json
+        restores the legacy embedded tree."""
+        try:
+            with open(self.project_path / ".c3" / "config.json",
+                      encoding="utf-8") as f:
+                cfg = json.load(f) or {}
+            return bool(cfg.get("map", {}).get("enabled", True))
+        except (OSError, ValueError):
+            return True
+
     def generate(self, include_sessions: bool = True, mode: str = "compact") -> dict:
         """Generate token-efficient CLAUDE.md from live project data.
 
@@ -264,20 +285,29 @@ class ClaudeMdManager:
         # C3 workflow instructions (compact)
         parts.append(self._build_c3_workflow(nano=False))
 
-        # Project structure
-        parts.append("\n# Project Context\n")
-        parts.append(self.session_mgr._scan_project_structure())
-
-        # Tech stack
-        parts.append("\n## Tech Stack\n")
-        parts.append(self.session_mgr._detect_tech_stack())
-
-        # Key files (compact)
-        key_files = self._detect_key_files()
-        if key_files:
-            parts.append("\n## Key Files\n")
-            for kf in key_files[:5]:
-                parts.append(f"- `{kf['file']}` — {kf['reason']}")
+        # Project context: pointer to the live repo map when enabled
+        # (v2.60.0), legacy embedded tree otherwise. The map is regenerated
+        # automatically (hooks + first-tool-call ensure), so the pointer
+        # never goes stale the way an embedded tree did.
+        map_enabled = self._repo_map_enabled()
+        if map_enabled:
+            parts.append("\n# Project Context\n")
+            parts.append(MAP_POINTER_BLOCK)
+        else:
+            # Project structure
+            parts.append("\n# Project Context\n")
+            parts.append(self.session_mgr._scan_project_structure())
+
+            # Tech stack
+            parts.append("\n## Tech Stack\n")
+            parts.append(self.session_mgr._detect_tech_stack())
+
+            # Key files (compact)
+            key_files = self._detect_key_files()
+            if key_files:
+                parts.append("\n## Key Files\n")
+                for kf in key_files[:5]:
+                    parts.append(f"- `{kf['file']}` — {kf['reason']}")
 
         # Top learned facts only (rest available via c3_memory recall)
         promoted_facts = [

{code_context_control-2.59.0 → code_context_control-2.60.0}/services/edit_ledger.py

@@ -133,6 +133,13 @@ class EditLedger:
                 f.write(json.dumps(entry) + "\n")
         if self._total_count is not None:
             self._total_count += 1
+        # Structural changes dirty the repo map (sentinel touch, never raises).
+        try:
+            from services.repo_map import is_structural_change, mark_map_dirty
+            if is_structural_change(rel, change_type):
+                mark_map_dirty(self.project_path, f"{change_type}:{rel}")
+        except Exception:
+            pass
         return entry
 
     def get_history(self, file: str = None, limit: int = 50,