@brunobracaioli/aibrain 0.4.0-beta.12 → 0.4.0-beta.13

package/dist/monitor.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 // @ts-check
 
-import { access } from 'node:fs/promises';
+import { access, realpath } from 'node:fs/promises';
 import { constants } from 'node:fs';
 import { spawn } from 'node:child_process';
 import { dirname, join } from 'node:path';
@@ -19,6 +19,13 @@ import {
   parseCodexEngineering,
 } from './codex-engineering.mjs';
 import { CODEX_MCP_ENV, codexMcpConfigArgs, parseCodexMcp } from './mcp-servers.mjs';
+import {
+  CODEX_HOOKS_ENV,
+  GUARDRAILS_SESSION_ENV,
+  codexHookConfigArgs,
+  guardrailsSessionValue,
+  parseCodexHooks,
+} from './codex-hooks.mjs';
 
 const root = dirname(fileURLToPath(import.meta.url));
 const endpoint = process.env.AIBRAIN_MCP_URL?.trim();
@@ -59,6 +66,35 @@ try {
 } catch {
   catalogServers = [];
 }
+// Guardrail hooks (E6b) follow the pack as well, and need the state root the pack
+// was checked against: their session value points at this launch's folder. The
+// flags are the whole catalog with byte-stable commands (codex-hooks.mjs). A
+// malformed value, or a package without the dispatcher, starts the session without
+// them.
+/** @type {{ args: string[], session: string } | null} */
+let guardrails = null;
+try {
+  const stateRoot = process.env.AIBRAIN_STATE_DIR;
+  const hooks =
+    engineering === null || stateRoot === undefined
+      ? null
+      : parseCodexHooks(process.env[CODEX_HOOKS_ENV]);
+  if (hooks !== null && engineering !== null && stateRoot !== undefined) {
+    // The real path, as the launcher's hooks/list probe uses (prepareCodexGuardrails).
+    const dispatcher = await realpath(join(root, 'guardrails', 'run.mjs'));
+    await access(dispatcher, constants.R_OK);
+    guardrails = {
+      args: codexHookConfigArgs({ node: process.execPath, dispatcher }),
+      session: guardrailsSessionValue(hooks, {
+        // The pack sits in <launch>/engineering/skills, inside <state>/runtime.
+        launchDirectory: dirname(dirname(engineering.skillsRoot)),
+        stateRoot,
+      }),
+    };
+  }
+} catch {
+  guardrails = null;
+}
 const policyText = process.env.CODEX_CONTEXT_POLICY_JSON;
 let policy;
 if (policyText === undefined) {
@@ -119,6 +155,11 @@ delete env[CODEX_APP_SERVER_PROFILE];
 delete env[CODEX_ENGINEERING_ENV];
 delete env[CODEX_ENGINEERING_SKILLS_ROOT_ENV];
 delete env[CODEX_MCP_ENV];
+delete env[CODEX_HOOKS_ENV];
+// Only this monitor sets the value the hook processes read; one inherited from an
+// outer session never reaches the app-server.
+delete env[GUARDRAILS_SESSION_ENV];
+if (guardrails !== null) env[GUARDRAILS_SESSION_ENV] = guardrails.session;
 if (engineering !== null) env[CODEX_ENGINEERING_SKILLS_ROOT_ENV] = engineering.skillsRoot;
 if (launchEnvelope?.profile !== undefined) env[CODEX_APP_SERVER_PROFILE] = launchEnvelope.profile;
 if (policy !== null) env.CODEX_CONTEXT_POLICY_JSON = JSON.stringify(policy);
@@ -142,6 +183,7 @@ const child = spawn(
     ...(launchEnvelope === null ? [] : ownedAppServerConfigArgs(launchEnvelope)),
     ...(engineering === null ? [] : codexEngineeringConfigArgs(engineering)),
     ...codexMcpConfigArgs(catalogServers),
+    ...(guardrails === null ? [] : guardrails.args),
   ],
   { cwd: process.cwd(), env, stdio: 'inherit' },
 );

package/dist/package.json

@@ -1,5 +1,5 @@
 {
   "name": "@brunobracaioli/aibrain",
-  "version": "0.4.0-beta.12",
+  "version": "0.4.0-beta.13",
   "type": "module"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brunobracaioli/aibrain",
-  "version": "0.4.0-beta.12",
+  "version": "0.4.0-beta.13",
   "private": false,
   "description": "AISAC client for Claude Code and Codex: AI Brain memory, context management and AISAC Engineering",
   "license": "UNLICENSED",