code-context-control 2.59.0__tar.gz → 2.61.0__tar.gz

{code_context_control-2.59.0 → code_context_control-2.61.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-context-control
-Version: 2.59.0
+Version: 2.61.0
 Summary: Local code-intelligence layer for AI coding tools (Claude Code, Codex, Copilot, Cursor, Antigravity). Retrieve less, read less, edit safer — version the configs that shape your agent (CLAUDE.md, skills, hooks, MCP), and manage multi-project + sub-project hierarchies from a local hub.
 Author-email: Dimitri Tselenchuk <dtselenc@gmail.com>
 License-Expression: Apache-2.0
@@ -243,6 +243,8 @@ Manage `CLAUDE.md`, `AGENTS.md` (Codex), `GEMINI.md`, and `.github/copilot-instr
 
 C3-generated content is wrapped in a `<!-- C3:BEGIN … -->` / `<!-- C3:END -->` block. Regenerating (or `Compact`) only rewrites that block — **anything you write outside it is preserved**, so it's safe to keep your own notes in the same file.
 
+**Live repo map (v2.60.0):** generated docs no longer embed a frozen project tree. They carry a stable pointer to `.c3/MAP.md` — a machine-owned, byte-stable map (commands, entry points, module one-liners, tree) that C3 refreshes automatically via edit hooks and a first-tool-call freshness check. Manage it with `c3 map status|ensure|refresh`; set `map.enabled=false` in `.c3/config.json` to restore the embedded tree.
+
 ### 7. Chat — browse prior AI conversations
 
 <p align="center">
@@ -359,12 +361,30 @@ with credentials disabled, and the vault is hard-excluded from the Oracle
 Discovery API.
 
 Since **v2.59.0** the Hub has a top-level **Credentials** view: manage the
-global vault (`~/.c3`) and every registered project's entries from one place —
-create / edit / delete / `.env` import / flag toggles, with shadowing shown
-both ways ("shadows global" on project entries, "shadowed in N projects" on
-globals). The write-only wire contract extends to the hub: values are
-submitted inbound-only and **no hub route ever returns a stored value** (there
-is no `reveal` on the hub at all).
+global vault (`~/.c3`) and every registered project's entries from one place,
+with overriding shown both ways ("overrides global" on project entries,
+"overridden ×N" on globals). **v2.61.0** makes it navigable at scale:
+
+- **Cross-project search** — <kbd>/</kbd> or <kbd>Ctrl/⌘-K</kbd>. Free words
+  match name / description / env var / project; `project:` `scope:` `type:`
+  `storage:` `name:` `env:` `inject:` `agent:` `shadow:` qualifiers narrow
+  further. Results are **grouped by credential name**, so "where is
+  `STRIPE_KEY` defined and which one wins?" is one glance instead of forty
+  accordions. `agent:true` and `inject:true` are one-key exposure audits.
+- **Per-credential settings drawer** — metadata, the two exposure switches
+  with their blast radius written out, an on-demand resolution check +
+  fingerprint, write-only value replacement, usage and override
+  relationships, and a separated danger zone.
+- **Right-click context menu** on any row (also `⋯` and <kbd>Shift</kbd>+<kbd>F10</kbd>),
+  with typed confirmations replacing `window.confirm`: deleting or granting
+  agent-read access requires typing the credential's name.
+
+The write-only wire contract extends to the hub: values are submitted
+inbound-only, **no hub route ever returns a stored value** (there is no
+`reveal` on the hub at all), and search indexes metadata only.
+
+Full documentation: [`cli/guide/credentials.html`](cli/guide/credentials.html)
+— open it in the app at `/guide/credentials.html`.
 
 ### Jira — Cloud + Data Center (v2.56.0)
 

{code_context_control-2.59.0 → code_context_control-2.61.0}/README.md

@@ -180,6 +180,8 @@ Manage `CLAUDE.md`, `AGENTS.md` (Codex), `GEMINI.md`, and `.github/copilot-instr
 
 C3-generated content is wrapped in a `<!-- C3:BEGIN … -->` / `<!-- C3:END -->` block. Regenerating (or `Compact`) only rewrites that block — **anything you write outside it is preserved**, so it's safe to keep your own notes in the same file.
 
+**Live repo map (v2.60.0):** generated docs no longer embed a frozen project tree. They carry a stable pointer to `.c3/MAP.md` — a machine-owned, byte-stable map (commands, entry points, module one-liners, tree) that C3 refreshes automatically via edit hooks and a first-tool-call freshness check. Manage it with `c3 map status|ensure|refresh`; set `map.enabled=false` in `.c3/config.json` to restore the embedded tree.
+
 ### 7. Chat — browse prior AI conversations
 
 <p align="center">
@@ -296,12 +298,30 @@ with credentials disabled, and the vault is hard-excluded from the Oracle
 Discovery API.
 
 Since **v2.59.0** the Hub has a top-level **Credentials** view: manage the
-global vault (`~/.c3`) and every registered project's entries from one place —
-create / edit / delete / `.env` import / flag toggles, with shadowing shown
-both ways ("shadows global" on project entries, "shadowed in N projects" on
-globals). The write-only wire contract extends to the hub: values are
-submitted inbound-only and **no hub route ever returns a stored value** (there
-is no `reveal` on the hub at all).
+global vault (`~/.c3`) and every registered project's entries from one place,
+with overriding shown both ways ("overrides global" on project entries,
+"overridden ×N" on globals). **v2.61.0** makes it navigable at scale:
+
+- **Cross-project search** — <kbd>/</kbd> or <kbd>Ctrl/⌘-K</kbd>. Free words
+  match name / description / env var / project; `project:` `scope:` `type:`
+  `storage:` `name:` `env:` `inject:` `agent:` `shadow:` qualifiers narrow
+  further. Results are **grouped by credential name**, so "where is
+  `STRIPE_KEY` defined and which one wins?" is one glance instead of forty
+  accordions. `agent:true` and `inject:true` are one-key exposure audits.
+- **Per-credential settings drawer** — metadata, the two exposure switches
+  with their blast radius written out, an on-demand resolution check +
+  fingerprint, write-only value replacement, usage and override
+  relationships, and a separated danger zone.
+- **Right-click context menu** on any row (also `⋯` and <kbd>Shift</kbd>+<kbd>F10</kbd>),
+  with typed confirmations replacing `window.confirm`: deleting or granting
+  agent-read access requires typing the credential's name.
+
+The write-only wire contract extends to the hub: values are submitted
+inbound-only, **no hub route ever returns a stored value** (there is no
+`reveal` on the hub at all), and search indexes metadata only.
+
+Full documentation: [`cli/guide/credentials.html`](cli/guide/credentials.html)
+— open it in the app at `/guide/credentials.html`.
 
 ### Jira — Cloud + Data Center (v2.56.0)
 

{code_context_control-2.59.0 → code_context_control-2.61.0}/cli/c3.py

@@ -92,7 +92,7 @@ console = Console() if HAS_RICH else None
 # Config
 CONFIG_DIR = ".c3"
 CONFIG_FILE = ".c3/config.json"
-__version__ = "2.59.0"
+__version__ = "2.61.0"
 
 
 def _command_deps() -> CommandDeps:
@@ -1313,6 +1313,12 @@ def cmd_claudemd(args):
     return common_cmd_claudemd(args, _command_deps())
 
 
+def cmd_map(args):
+    """Live repo map (.c3/MAP.md) commands."""
+    from cli.commands.common import cmd_map as common_cmd_map
+    return common_cmd_map(args, _command_deps())
+
+
 def cmd_stats(args):
     """Show comprehensive stats."""
     return common_cmd_stats(args, _command_deps())
@@ -5122,22 +5128,33 @@ def cmd_install_mcp(args):
         settings = _safe_read_json(settings_path, str(settings_path))
 
         # Build hook commands using the Python executable that runs c3.
-        # On Windows, Claude Code executes hooks via /usr/bin/bash (Git Bash), which cannot
-        # parse Windows absolute paths containing parentheses (e.g. "(C3)"). Prefix with
-        # cmd.exe so it handles path resolution instead of bash.
         #
-        # Use "cmd.exe" WITH the extension, not bare "cmd": Git Bash does not resolve bare
-        # "cmd" on PATH, so the old "cmd /c …" prefix silently failed to launch any hook
-        # (verified: under bash, "cmd.exe /c '<py>' '<hook>'" runs and writes the signal
-        # file; "cmd /c …" returns "cmd: command not found"). The single-quoted paths are
-        # correct — bash strips them and re-quotes for cmd.exe, preserving spaces/parens.
-        _hook_prefix = "cmd.exe /c " if sys.platform == "win32" else ""
+        # Windows: do NOT wrap in cmd.exe. Claude Code runs hooks through Git Bash,
+        # whose MSYS argument conversion rewrites a standalone "/c" into "C:/" before
+        # cmd.exe ever sees it — so cmd.exe starts INTERACTIVELY, prints its banner,
+        # and reads the hook's stdin JSON payload as console commands. The hook never
+        # runs, and any ">" token in the payload becomes a shell redirect that silently
+        # creates junk files in the repo root.
+        #
+        # Verified 2026-07-26 under Git Bash on Windows 11:
+        #   python -c "import sys;print(sys.argv)" /c foo   ->  ['-c', 'C:/', 'foo']
+        #   cmd.exe /c '<py>' -c "print('x')"               ->  banner, no execution
+        #   '<py>' '<hook>' posttool                        ->  runs, stdin intact
+        # Both "cmd /c" (bash cannot resolve bare "cmd") and "cmd.exe /c" are broken;
+        # the wrapper was never needed. A double-quoted forward-slash path is parsed
+        # correctly by bash AND cmd, including paths containing spaces or parentheses
+        # (e.g. "Claude Code Companion (C3)"), which is why the wrapper was added.
+        def _hook_arg(raw: str) -> str:
+            if sys.platform == "win32":
+                return '"' + str(raw).replace("\\", "/") + '"'
+            return shlex.quote(str(raw))
+
         # v2.42: single dispatcher script per hook event instead of N separate
         # per-hook commands. One interpreter spawn per event; the dispatcher
         # (cli/hook_dispatch.py) runs all applicable sub-hooks in-process.
         _dispatch_base = (
-            f"{_hook_prefix}{shlex.quote(sys.executable)} "
-            f"{shlex.quote(str(cli_dir / 'hook_dispatch.py'))}"
+            f"{_hook_arg(sys.executable)} "
+            f"{_hook_arg(str(cli_dir / 'hook_dispatch.py'))}"
         )
         hook_pretool_cmd  = f"{_dispatch_base} pretool"
         hook_posttool_cmd = f"{_dispatch_base} posttool"
@@ -7162,6 +7179,7 @@ def main():
         "decode": cmd_decode,
         "session": cmd_session,
         "claudemd": cmd_claudemd,
+        "map": cmd_map,
         "stats": cmd_stats,
         "benchmark": cmd_benchmark,
         "session-benchmark": cmd_session_benchmark,

{code_context_control-2.59.0 → code_context_control-2.61.0}/cli/commands/common.py

@@ -159,6 +159,57 @@ def cmd_session(args, deps: CommandDeps):
         print(context)
 
 
+def cmd_map(args, deps: CommandDeps):
+    """Live repo map (.c3/MAP.md): status | ensure | refresh."""
+    config = deps.load_config()
+    project_path = config.get("project_path", ".")
+
+    from services.repo_map import RepoMapService
+
+    sm = deps.SessionManager(project_path)
+    svc = RepoMapService(project_path, session_mgr=sm)
+
+    if args.map_cmd == "status":
+        result = svc.status()
+    elif args.map_cmd == "ensure":
+        result = svc.ensure()
+    else:
+        result = svc.refresh()
+
+    if getattr(args, "json", False):
+        print(json.dumps(result, indent=2))
+        return
+
+    if args.map_cmd == "status":
+        state = "STALE" if result["stale"] else ("FRESH" if result["exists"] else "MISSING")
+        deps.print_header(f"Repo Map — {state}")
+        print(f"  Path: {svc.map_path}")
+        if result.get("generated_at"):
+            print(f"  Generated: {result['generated_at']}")
+        if result.get("tokens"):
+            print(f"  Tokens: {result['tokens']}")
+        if result.get("reasons"):
+            print(f"  Stale reasons: {', '.join(result['reasons'])}")
+        if result.get("truncated"):
+            print("  [WARN] Map is truncated (file cap or token budget hit)")
+    else:
+        action = result.get("action", "?")
+        label = {
+            "regenerated": "Map regenerated",
+            "meta_only": "Content unchanged (meta refreshed)",
+            "fresh": "Already fresh — nothing to do",
+            "locked": "Another process is regenerating — skipped",
+            "disabled": "Repo map disabled (map.enabled=false in .c3/config.json)",
+        }.get(action, action)
+        deps.print_header(f"Repo Map — {label}")
+        if result.get("tokens"):
+            print(f"  Tokens: {result['tokens']}, duration: {result.get('duration_ms', '?')}ms")
+        if result.get("reasons"):
+            print(f"  Triggered by: {', '.join(result['reasons'])}")
+        if result.get("truncated"):
+            print("  [WARN] Map is truncated (file cap or token budget hit)")
+
+
 def cmd_claudemd(args, deps: CommandDeps):
     """Instructions file generation commands."""
     config = deps.load_config()

{code_context_control-2.59.0 → code_context_control-2.61.0}/cli/commands/parser.py

@@ -61,6 +61,10 @@ def build_parser(version: str, parse_cli_ide_arg):
     p_claudemd.add_argument("claudemd_cmd", choices=["generate", "save", "check"])
     p_claudemd.add_argument("--nano", action="store_true", help="Generate nano mode (~250 tokens) instead of full compact mode")
 
+    p_map = subparsers.add_parser("map", help="Live repo map (.c3/MAP.md) management")
+    p_map.add_argument("map_cmd", choices=["status", "ensure", "refresh"])
+    p_map.add_argument("--json", action="store_true", help="Emit JSON result")
+
     subparsers.add_parser("stats", help="Show statistics")
 
     p_benchmark = subparsers.add_parser("benchmark", help="Run with/without-C3 workflow benchmark")

{code_context_control-2.59.0 → code_context_control-2.61.0}/cli/guide/bitbucket.html

@@ -77,6 +77,7 @@
       <a href="getting-started.html">Get Started</a>
       <a href="workflow.html">Workflow</a>
       <a href="tools.html">Tools</a>
+      <a href="credentials.html">Credentials</a>
       <a href="bitbucket.html" class="active">Bitbucket</a>
       <a href="oracle.html">Oracle</a>
       <a href="https://github.com/sponsors/drknowhow" target="_blank" rel="noopener" style="color:#EA4AAA">&#9829; Sponsor</a>