@gramatr/mcp 0.10.12 → 0.10.14

package/dist/hooks/user-prompt-submit.js

@@ -1,12 +1,12 @@
-import { getClaudeModelFromEnv, getGramatrTimeoutFromEnv, isGramatrEnrichEnabledFromEnv, } from '../config-runtime.js';
-import { deriveProjectId, getGitContext, readHookInput, } from './lib/gramatr-hook-utils.js';
-import { emitStatus, formatFailureWarning, formatIntelligence, } from './lib/intelligence.js';
-import { persistClassificationResult, routePrompt, shouldSkipPromptRouting, } from './lib/routing.js';
-import { appendOpHistory, appendTurn, getSessionContext, hydrateSessionContextFromServer, isFilesystemAvailable, setLatestClassification, } from './lib/hook-state.js';
-import { resolveHookClientRuntime } from './lib/client-runtime.js';
-import { appendPacketDebugLog } from './lib/packet-debug-log.js';
-import { HOOK_ROUTE_TIMEOUT_DEFAULT_MS, HOOK_ROUTE_TIMEOUT_CAP_MS, } from './generated/hook-timeouts.js';
-import { resolveLocalProjectUuid } from './lib/session.js';
+import { getClaudeModelFromEnv, getGramatrTimeoutFromEnv, isGramatrEnrichEnabledFromEnv, } from "../config-runtime.js";
+import { HOOK_ROUTE_TIMEOUT_CAP_MS, HOOK_ROUTE_TIMEOUT_DEFAULT_MS, } from "./generated/hook-timeouts.js";
+import { resolveHookClientRuntime } from "./lib/client-runtime.js";
+import { deriveProjectId, getGitContext, readHookInput } from "./lib/gramatr-hook-utils.js";
+import { appendOpHistory, appendTurn, getCachedDirective, getSessionContext, hydrateSessionContextFromServer, isFilesystemAvailable, setCachedDirective, setLatestClassification, } from "./lib/hook-state.js";
+import { emitStatus, formatFailureWarning, formatIntelligence, } from "./lib/intelligence.js";
+import { appendPacketDebugLog } from "./lib/packet-debug-log.js";
+import { persistClassificationResult, routePrompt, shouldSkipPromptRouting, } from "./lib/routing.js";
+import { resolveLocalProjectUuid } from "./lib/session.js";
 let turnCounter = 0;
 const TIMEOUT_MS = getGramatrTimeoutFromEnv(HOOK_ROUTE_TIMEOUT_DEFAULT_MS);
 const ENABLED = isGramatrEnrichEnabledFromEnv();
@@ -27,19 +27,19 @@ function persistLastClassification(prompt, sessionId, route, downstreamModel, cl
 }
 function mapRoutingFailure(reason, detail) {
     switch (reason) {
-        case 'auth':
-            return { reason: 'auth', detail };
-        case 'timeout':
-            return { reason: 'timeout', detail };
-        case 'network_error':
-            return { reason: 'server_down', detail };
-        case 'http_error':
-        case 'mcp_error':
-            return { reason: 'server_error', detail };
-        case 'parse_error':
-            return { reason: 'parse_error', detail };
+        case "auth":
+            return { reason: "auth", detail };
+        case "timeout":
+            return { reason: "timeout", detail };
+        case "network_error":
+            return { reason: "server_down", detail };
+        case "http_error":
+        case "mcp_error":
+            return { reason: "server_error", detail };
+        case "parse_error":
+            return { reason: "parse_error", detail };
         default:
-            return { reason: 'unknown', detail };
+            return { reason: "unknown", detail };
     }
 }
 export async function runUserPromptSubmitHook(_args = []) {
@@ -50,17 +50,15 @@ export async function runUserPromptSubmitHook(_args = []) {
     }
     try {
         const input = await readHookInput();
-        const prompt = input.prompt || '';
-        const sessionId = input.session_id || 'unknown';
+        const prompt = input.prompt || "";
+        const sessionId = input.session_id || "unknown";
         if (!prompt || shouldSkipPromptRouting(prompt)) {
             if (prompt)
-                process.stderr.write('[gramatr] enricher: trivial prompt, skipped\n');
+                process.stderr.write("[gramatr] enricher: trivial prompt, skipped\n");
             process.stdout.write(JSON.stringify({}));
             return 0;
         }
-        const downstreamModel = getClaudeModelFromEnv() ||
-            (input.model ?? '') ||
-            '';
+        const downstreamModel = getClaudeModelFromEnv() || (input.model ?? "") || "";
         const git = getGitContext();
         // In filesystem-locked sandboxes, SQLite can't bridge separate hook processes.
         // Fetch session context from the server so we have project_id + interaction_id.
@@ -75,15 +73,15 @@ export async function runUserPromptSubmitHook(_args = []) {
         const localUuid = git
             ? resolveLocalProjectUuid({ directory: git.root, projectName: git.projectName })
             : null;
-        const projectId = localUuid
-            || sessionContext?.project_id
-            || (git ? deriveProjectId(git.remote, git.projectName) : null)
-            || undefined;
+        const projectId = localUuid ||
+            sessionContext?.project_id ||
+            (git ? deriveProjectId(git.remote, git.projectName) : null) ||
+            undefined;
         // gramatr interaction_id is the cross-agent session key — use it for
         // both session_id (server history) and interaction_id (explicit resolution).
         const gramatrInteractionId = sessionContext?.interaction_id || null;
         const gramatrSessionId = gramatrInteractionId || sessionId;
-        process.stderr.write('[gramatr] classifying...\n');
+        process.stderr.write("[gramatr] classifying...\n");
         const t0 = Date.now();
         const routed = await routePrompt({
             prompt,
@@ -107,8 +105,12 @@ export async function runUserPromptSubmitHook(_args = []) {
             agent_name: runtime.agentName,
             downstream_model: downstreamModel,
             status: !result && routed.error
-                ? (routed.error.reason === 'timeout' ? 'timeout' : 'error')
-                : result ? 'ok' : 'skipped',
+                ? routed.error.reason === "timeout"
+                    ? "timeout"
+                    : "error"
+                : result
+                    ? "ok"
+                    : "skipped",
             elapsed_ms: elapsed,
             packet: result ?? null,
             error: routed.error ? { reason: routed.error.reason, detail: routed.error.detail } : null,
@@ -146,7 +148,7 @@ export async function runUserPromptSubmitHook(_args = []) {
             if (tokensSaved > 0) {
                 appendOpHistory({
                     session_id: gramatrSessionId,
-                    tool: 'classification',
+                    tool: "classification",
                     time_ms: es.classifier_time_ms || 0,
                     tokens_saved: tokensSaved,
                     timestamp: Date.now(),
@@ -160,8 +162,12 @@ export async function runUserPromptSubmitHook(_args = []) {
         try {
             const cl = result?.classification || {};
             const _es = result?.execution_summary || {};
+            const hookInput = input;
             appendTurn({
                 session_id: gramatrSessionId,
+                client_session_id: hookInput.session_id ?? null,
+                project_id: sessionContext?.project_id ?? (projectId || null),
+                agent_name: runtime.agentName || null,
                 turn_number: turnCounter++,
                 timestamp: new Date().toISOString(),
                 prompt: prompt.substring(0, 500),
@@ -174,12 +180,64 @@ export async function runUserPromptSubmitHook(_args = []) {
         catch {
             // Non-critical
         }
+        // #1214: cache directives + phase_template + project context from the v2
+        // packet so a later degraded-mode response can still respect hard gates
+        // and phase sequencing when the server is unreachable.
+        try {
+            if (result) {
+                const userId = sessionContext?.entity_id || "default";
+                const behavioralRules = result.behavioral_rules;
+                const behavioralDirectives = result.behavioral_directives;
+                if (behavioralRules || behavioralDirectives) {
+                    setCachedDirective("directives", userId, {
+                        behavioral_rules: behavioralRules ?? null,
+                        behavioral_directives: behavioralDirectives ?? null,
+                    });
+                }
+                const phaseTemplate = result.phase_template ?? (result.packet_1 && result.packet_1.phase_template) ?? null;
+                if (phaseTemplate) {
+                    setCachedDirective("phase_template", userId, phaseTemplate);
+                }
+                const manifestProjectId = result.manifest?.project_id ?? projectId ?? null;
+                if (manifestProjectId) {
+                    setCachedDirective("project_context", userId, {
+                        project_id: manifestProjectId,
+                        interaction_id: result.manifest?.interaction_id ?? gramatrInteractionId ?? null,
+                        session_id: result.manifest?.session_id ?? gramatrSessionId,
+                    });
+                }
+            }
+        }
+        catch {
+            // Non-critical — cache is best-effort.
+        }
         if (!result || !result.classification) {
             if (lastFailure) {
+                // #1214: degraded mode — use cached directives + phase template so the
+                // model still sees hard gates and the phase sequence when the server
+                // call errors or times out.
+                let degradedNotes = "";
+                try {
+                    const userId = sessionContext?.entity_id || "default";
+                    const cachedDirectives = getCachedDirective("directives", userId);
+                    const cachedPhases = getCachedDirective("phase_template", userId);
+                    if (cachedDirectives || cachedPhases) {
+                        const degradedPacket = {
+                            schema: "gmtr.intelligence.contract.v2.degraded",
+                            note: "Server unavailable — directives loaded from local cache.",
+                            ...(cachedDirectives ? { cached_directives: cachedDirectives } : {}),
+                            ...(cachedPhases ? { cached_phase_template: cachedPhases } : {}),
+                        };
+                        degradedNotes = `\n\n${JSON.stringify(degradedPacket)}`;
+                    }
+                }
+                catch {
+                    // Ignore cache read errors — degraded-mode fallback is best effort.
+                }
                 process.stdout.write(JSON.stringify({
                     hookSpecificOutput: {
-                        hookEventName: 'UserPromptSubmit',
-                        additionalContext: formatFailureWarning(lastFailure),
+                        hookEventName: "UserPromptSubmit",
+                        additionalContext: formatFailureWarning(lastFailure) + degradedNotes,
                     },
                 }));
             }
@@ -190,7 +248,7 @@ export async function runUserPromptSubmitHook(_args = []) {
         }
         process.stdout.write(JSON.stringify({
             hookSpecificOutput: {
-                hookEventName: 'UserPromptSubmit',
+                hookEventName: "UserPromptSubmit",
                 additionalContext: formatIntelligence(result, null),
             },
         }));

package/dist/hooks/user-prompt-submit.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-prompt-submit.js","sourceRoot":"","sources":["../../src/hooks/user-prompt-submit.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,GACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,kBAAkB,GAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,2BAA2B,EAC3B,WAAW,EACX,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,eAAe,EACf,UAAU,EACV,iBAAiB,EACjB,+BAA+B,EAC/B,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,IAAI,WAAW,GAAG,CAAC,CAAC;AACpB,MAAM,UAAU,GAAG,wBAAwB,CAAC,6BAA6B,CAAC,CAAC;AAC3E,MAAM,OAAO,GAAG,6BAA6B,EAAE,CAAC;AAEhD,SAAS,yBAAyB,CAChC,MAAc,EACd,SAAiB,EACjB,KAA2B,EAC3B,eAAuB,EACvB,UAAkB,EAClB,SAAiB;IAEjB,IAAI,CAAC;QACH,2BAA2B,CAAC;YAC1B,SAAS;YACT,MAAM;YACN,KAAK;YACL,eAAe;YACf,UAAU;YACV,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,MAAc;IACvD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACpC,KAAK,SAAS;YACZ,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACvC,KAAK,eAAe;YAClB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QAC3C,KAAK,YAAY,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QAC5C,KAAK,aAAa;YAChB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QAC3C;YACE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,QAAkB,EAAE;IAChE,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;QAEhD,IAAI,CAAC,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,IAAI,MAAM;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAClF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YACzC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,eAAe,GACnB,qBAAqB,EAAE;YACvB,CAAE,KAA4B,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3C,EAAE,CAAC;QACL,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,+EAA+E;QAC/E,gFAAgF;QAChF,IAAI,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,cAAc,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAChD,MAAM,+BAA+B,CAAC,SAAS,CAAC,CAAC;YACjD,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QACD,oEAAoE;QACpE,uEAAuE;QACvE,mDAAmD;QACnD,MAAM,SAAS,GAAG,GAAG;YACnB,CAAC,CAAC,uBAAuB,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;YAChF,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,SAAS,GAAG,SAAS;eACtB,cAAc,EAAE,UAAU;eAC1B,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;eAC3D,SAAS,CAAC;QACf,qEAAqE;QACrE,6EAA6E;QAC7E,MAAM,oBAAoB,GAAG,cAAc,EAAE,cAAc,IAAI,IAAI,CAAC;QACpE,MAAM,gBAAgB,GAAG,oBAAoB,IAAI,SAAS,CAAC;QAE3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;YAC/B,MAAM;YACN,SAAS;YACT,SAAS,EAAE,gBAAgB;YAC3B,aAAa,EAAE,oBAAoB,IAAI,SAAS;YAChD,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,yBAAyB,CAAC;SAC3D,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QAChC,IAAI,WAAW,GAAyB,IAAI,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5E,CAAC;QAED,wEAAwE;QACxE,oBAAoB,CAAC;YACnB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,UAAU,EAAE,SAAS,IAAI,IAAI;YAC7B,UAAU,EAAE,gBAAgB;YAC5B,WAAW,EAAE,OAAO,CAAC,UAAU;YAC/B,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,gBAAgB,EAAE,eAAe;YACjC,MAAM,EAAE,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK;gBAC7B,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC3D,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC7B,UAAU,EAAE,OAAO;YACnB,MAAM,EAAE,MAAM,IAAI,IAAI;YACtB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;SAC1F,CAAC,CAAC;QAEH,uEAAuE;QACvE,MAAM,kBAAkB,GAAG,MAAM,EAAE,SAAS,EAAE,aAAa,IAAI,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC;QAE3F,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,kBAAkB,CAAC;YAC9B,MAAM,EAAE,GAAG,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,YAAY,IAAI,CAAC,CAAC;YAC3D,uBAAuB,CAAC;gBACtB,UAAU,EAAE,gBAAgB;gBAC5B,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,IAAI,IAAI;gBAC7C,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,IAAI,IAAI;gBACjD,YAAY,EAAE,WAAW;gBACzB,aAAa,EAAE,EAAE,CAAC,aAAa,IAAI,IAAI;gBACvC,MAAM,EAAE,EAAE,CAAC,YAAY,IAAI,IAAI;gBAC/B,MAAM,EAAE,EAAE,CAAC,WAAW,IAAI,IAAI;gBAC9B,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI;gBACjC,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,IAAI,IAAI;gBAChE,gBAAgB,EAAE,eAAe,IAAI,IAAI;gBACzC,cAAc,EAAE,EAAE,CAAC,cAAc,IAAI,IAAI;gBACzC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;gBACtE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;gBACvB,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gBACzC,gBAAgB,EAAE,IAAI;gBACtB,qBAAqB,EAAE,IAAI;gBAC3B,WAAW,EAAE,OAAO,CAAC,UAAU;gBAC/B,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,EAAE,CAAC,YAAY,IAAI,MAAM,EAAE,eAAe,EAAE,YAAY,IAAI,IAAI;aAC/E,CAAC,CAAC;YACH,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,eAAe,CAAC;oBACd,UAAU,EAAE,gBAAgB;oBAC5B,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,EAAE,CAAC,kBAAkB,IAAI,CAAC;oBACnC,YAAY,EAAE,WAAW;oBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QAED,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAE7G,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;YAC5C,UAAU,CAAC;gBACT,UAAU,EAAE,gBAAgB;gBAC5B,WAAW,EAAE,WAAW,EAAE;gBAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gBAChC,YAAY,EAAE,EAAE,CAAC,YAAY,IAAI,IAAI;gBACrC,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,IAAI;gBACnC,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI;gBACjC,YAAY,EAAE,kBAAkB,CAAC,WAAW,IAAI,kBAAkB,CAAC,YAAY,IAAI,IAAI;aACxF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACtC,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;oBAClC,kBAAkB,EAAE;wBAClB,aAAa,EAAE,kBAAkB;wBACjC,iBAAiB,EAAE,oBAAoB,CAAC,WAAW,CAAC;qBACrD;iBACF,CAAC,CAAC,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,kBAAkB,EAAE;gBAClB,aAAa,EAAE,kBAAkB;gBACjC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;aACpD;SACF,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}
+{"version":3,"file":"user-prompt-submit.js","sourceRoot":"","sources":["../../src/hooks/user-prompt-submit.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5F,OAAO,EACL,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,+BAA+B,EAC/B,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,kBAAkB,GAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,2BAA2B,EAC3B,WAAW,EACX,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAG3D,IAAI,WAAW,GAAG,CAAC,CAAC;AACpB,MAAM,UAAU,GAAG,wBAAwB,CAAC,6BAA6B,CAAC,CAAC;AAC3E,MAAM,OAAO,GAAG,6BAA6B,EAAE,CAAC;AAEhD,SAAS,yBAAyB,CAChC,MAAc,EACd,SAAiB,EACjB,KAA2B,EAC3B,eAAuB,EACvB,UAAkB,EAClB,SAAiB;IAEjB,IAAI,CAAC;QACH,2BAA2B,CAAC;YAC1B,SAAS;YACT,MAAM;YACN,KAAK;YACL,eAAe;YACf,UAAU;YACV,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,MAAc;IACvD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACpC,KAAK,SAAS;YACZ,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACvC,KAAK,eAAe;YAClB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QAC3C,KAAK,YAAY,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QAC5C,KAAK,aAAa;YAChB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QAC3C;YACE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,QAAkB,EAAE;IAChE,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;QAEhD,IAAI,CAAC,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,IAAI,MAAM;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAClF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YACzC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,eAAe,GACnB,qBAAqB,EAAE,IAAI,CAAE,KAA4B,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,+EAA+E;QAC/E,gFAAgF;QAChF,IAAI,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,cAAc,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAChD,MAAM,+BAA+B,CAAC,SAAS,CAAC,CAAC;YACjD,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QACD,oEAAoE;QACpE,uEAAuE;QACvE,mDAAmD;QACnD,MAAM,SAAS,GAAG,GAAG;YACnB,CAAC,CAAC,uBAAuB,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;YAChF,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,SAAS,GACb,SAAS;YACT,cAAc,EAAE,UAAU;YAC1B,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3D,SAAS,CAAC;QACZ,qEAAqE;QACrE,6EAA6E;QAC7E,MAAM,oBAAoB,GAAG,cAAc,EAAE,cAAc,IAAI,IAAI,CAAC;QACpE,MAAM,gBAAgB,GAAG,oBAAoB,IAAI,SAAS,CAAC;QAE3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;YAC/B,MAAM;YACN,SAAS;YACT,SAAS,EAAE,gBAAgB;YAC3B,aAAa,EAAE,oBAAoB,IAAI,SAAS;YAChD,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,yBAAyB,CAAC;SAC3D,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QAChC,IAAI,WAAW,GAAyB,IAAI,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5E,CAAC;QAED,wEAAwE;QACxE,oBAAoB,CAAC;YACnB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,UAAU,EAAE,SAAS,IAAI,IAAI;YAC7B,UAAU,EAAE,gBAAgB;YAC5B,WAAW,EAAE,OAAO,CAAC,UAAU;YAC/B,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,gBAAgB,EAAE,eAAe;YACjC,MAAM,EACJ,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK;gBACrB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;oBACjC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,OAAO;gBACX,CAAC,CAAC,MAAM;oBACN,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,SAAS;YACjB,UAAU,EAAE,OAAO;YACnB,MAAM,EAAE,MAAM,IAAI,IAAI;YACtB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;SAC1F,CAAC,CAAC;QAEH,uEAAuE;QACvE,MAAM,kBAAkB,GAAG,MAAM,EAAE,SAAS,EAAE,aAAa,IAAI,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC;QAE3F,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,kBAAkB,CAAC;YAC9B,MAAM,EAAE,GAAG,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,YAAY,IAAI,CAAC,CAAC;YAC3D,uBAAuB,CAAC;gBACtB,UAAU,EAAE,gBAAgB;gBAC5B,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,IAAI,IAAI;gBAC7C,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,IAAI,IAAI;gBACjD,YAAY,EAAE,WAAW;gBACzB,aAAa,EAAE,EAAE,CAAC,aAAa,IAAI,IAAI;gBACvC,MAAM,EAAE,EAAE,CAAC,YAAY,IAAI,IAAI;gBAC/B,MAAM,EAAE,EAAE,CAAC,WAAW,IAAI,IAAI;gBAC9B,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI;gBACjC,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,IAAI,IAAI;gBAChE,gBAAgB,EAAE,eAAe,IAAI,IAAI;gBACzC,cAAc,EAAE,EAAE,CAAC,cAAc,IAAI,IAAI;gBACzC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;gBACtE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;gBACvB,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gBACzC,gBAAgB,EAAE,IAAI;gBACtB,qBAAqB,EAAE,IAAI;gBAC3B,WAAW,EAAE,OAAO,CAAC,UAAU;gBAC/B,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,EAAE,CAAC,YAAY,IAAI,MAAM,EAAE,eAAe,EAAE,YAAY,IAAI,IAAI;aAC/E,CAAC,CAAC;YACH,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,eAAe,CAAC;oBACd,UAAU,EAAE,gBAAgB;oBAC5B,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,EAAE,CAAC,kBAAkB,IAAI,CAAC;oBACnC,YAAY,EAAE,WAAW;oBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QAED,yBAAyB,CACvB,MAAM,EACN,SAAS,EACT,MAAM,EACN,eAAe,EACf,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,SAAS,CAClB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,KAAuC,CAAC;YAC1D,UAAU,CAAC;gBACT,UAAU,EAAE,gBAAgB;gBAC5B,iBAAiB,EAAE,SAAS,CAAC,UAAU,IAAI,IAAI;gBAC/C,UAAU,EAAE,cAAc,EAAE,UAAU,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;gBAC7D,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBACrC,WAAW,EAAE,WAAW,EAAE;gBAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gBAChC,YAAY,EAAE,EAAE,CAAC,YAAY,IAAI,IAAI;gBACrC,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,IAAI;gBACnC,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI;gBACjC,YAAY,EAAE,kBAAkB,CAAC,WAAW,IAAI,kBAAkB,CAAC,YAAY,IAAI,IAAI;aACxF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QAED,yEAAyE;QACzE,wEAAwE;QACxE,uDAAuD;QACvD,IAAI,CAAC;YACH,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,cAAc,EAAE,SAAS,IAAI,SAAS,CAAC;gBACtD,MAAM,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAChD,MAAM,oBAAoB,GAAG,MAAM,CAAC,qBAAqB,CAAC;gBAC1D,IAAI,eAAe,IAAI,oBAAoB,EAAE,CAAC;oBAC5C,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE;wBACvC,gBAAgB,EAAE,eAAe,IAAI,IAAI;wBACzC,qBAAqB,EAAE,oBAAoB,IAAI,IAAI;qBACpD,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,aAAa,GACjB,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC;gBACvF,IAAI,aAAa,EAAE,CAAC;oBAClB,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;gBAC9D,CAAC;gBACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,EAAE,UAAU,IAAI,SAAS,IAAI,IAAI,CAAC;gBAC3E,IAAI,iBAAiB,EAAE,CAAC;oBACtB,kBAAkB,CAAC,iBAAiB,EAAE,MAAM,EAAE;wBAC5C,UAAU,EAAE,iBAAiB;wBAC7B,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,IAAI,oBAAoB,IAAI,IAAI;wBAC/E,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,IAAI,gBAAgB;qBAC5D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACtC,IAAI,WAAW,EAAE,CAAC;gBAChB,uEAAuE;gBACvE,qEAAqE;gBACrE,4BAA4B;gBAC5B,IAAI,aAAa,GAAG,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,cAAc,EAAE,SAAS,IAAI,SAAS,CAAC;oBACtD,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;oBAClE,MAAM,YAAY,GAAG,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;oBAClE,IAAI,gBAAgB,IAAI,YAAY,EAAE,CAAC;wBACrC,MAAM,cAAc,GAAG;4BACrB,MAAM,EAAE,wCAAwC;4BAChD,IAAI,EAAE,0DAA0D;4BAChE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACpE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACjE,CAAC;wBACF,aAAa,GAAG,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC1D,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;gBACtE,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;oBACb,kBAAkB,EAAE;wBAClB,aAAa,EAAE,kBAAkB;wBACjC,iBAAiB,EAAE,oBAAoB,CAAC,WAAW,CAAC,GAAG,aAAa;qBACrE;iBACF,CAAC,CACH,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,kBAAkB,EAAE;gBAClB,aAAa,EAAE,kBAAkB;gBACjC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;aACpD;SACF,CAAC,CACH,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/server/hooks-listener.d.ts

@@ -1,23 +1,21 @@
 /**
  * hooks-listener.ts — Local HTTP IPC server for hook subprocesses.
  *
- * Phase IV: The local MCP proxy server opens a lightweight HTTP listener on a
- * random localhost port at startup and writes the port to ~/.gramatr/.hooks-port.
- * Hook subprocesses (session-start, user-prompt-submit, session-end) discover
- * this port and route calls through the local server instead of calling the
- * remote server directly.
+ * The local MCP proxy server opens a lightweight HTTP listener on a random
+ * localhost port at startup. Callers (statusline, any separate-process tool)
+ * discover the port via ~/.gramatr/.hooks-port.
  *
- * Benefits:
- *   - Auth managed in one place: the local server has the token; hooks never
- *     need to resolve or refresh it themselves.
- *   - Single enforcement point for data shapes and schema validation before
- *     any call reaches the remote API.
- *   - Cross-hook session context via in-process memory (no SQLite file needed).
- *   - Faster: localhost vs. internet round-trip for session context reads.
+ * Security: every request must present X-Hooks-Secret matching the value in
+ * ~/.gramatr/.hooks-secret (written at startup, mode 0o600). This prevents
+ * other processes on the same machine from hijacking the channel. The secret
+ * is regenerated on each server start.
  *
- * Fallback: if the port file is absent (local server not running), hooks fall
- * back to direct remote calls with their own auth resolution.
+ * Auth policy: callers never carry a JWT. The local server holds the token
+ * and manages all outbound calls to the central server. No fallback to direct
+ * remote calls — if the local server is unavailable, callers show offline.
  */
+/** Return the current IPC secret. Null until startHooksListener() has run. */
+export declare function getHooksSecret(): string | null;
 /**
  * Start the hooks IPC listener on a random localhost port.
  * Writes the port to ~/.gramatr/.hooks-port so hook subprocesses can find it.
@@ -25,8 +23,7 @@
  */
 export declare function startHooksListener(): Promise<number>;
 /**
- * Stop the hooks listener and remove the port file.
- * Called on server shutdown so stale hooks know to fall back to direct remote.
+ * Stop the hooks listener and remove the port + secret files.
  */
 export declare function stopHooksListener(): void;
 //# sourceMappingURL=hooks-listener.d.ts.map

package/dist/server/hooks-listener.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks-listener.d.ts","sourceRoot":"","sources":["../../src/server/hooks-listener.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA2FH;;;;GAIG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CA4B1D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAIxC"}
+{"version":3,"file":"hooks-listener.d.ts","sourceRoot":"","sources":["../../src/server/hooks-listener.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAkBH,8EAA8E;AAC9E,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAE9C;AAyHD;;;;GAIG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CA8B1D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAMxC"}

package/dist/server/hooks-listener.js

@@ -1,36 +1,45 @@
 /**
  * hooks-listener.ts — Local HTTP IPC server for hook subprocesses.
  *
- * Phase IV: The local MCP proxy server opens a lightweight HTTP listener on a
- * random localhost port at startup and writes the port to ~/.gramatr/.hooks-port.
- * Hook subprocesses (session-start, user-prompt-submit, session-end) discover
- * this port and route calls through the local server instead of calling the
- * remote server directly.
+ * The local MCP proxy server opens a lightweight HTTP listener on a random
+ * localhost port at startup. Callers (statusline, any separate-process tool)
+ * discover the port via ~/.gramatr/.hooks-port.
  *
- * Benefits:
- *   - Auth managed in one place: the local server has the token; hooks never
- *     need to resolve or refresh it themselves.
- *   - Single enforcement point for data shapes and schema validation before
- *     any call reaches the remote API.
- *   - Cross-hook session context via in-process memory (no SQLite file needed).
- *   - Faster: localhost vs. internet round-trip for session context reads.
+ * Security: every request must present X-Hooks-Secret matching the value in
+ * ~/.gramatr/.hooks-secret (written at startup, mode 0o600). This prevents
+ * other processes on the same machine from hijacking the channel. The secret
+ * is regenerated on each server start.
  *
- * Fallback: if the port file is absent (local server not running), hooks fall
- * back to direct remote calls with their own auth resolution.
+ * Auth policy: callers never carry a JWT. The local server holds the token
+ * and manages all outbound calls to the central server. No fallback to direct
+ * remote calls — if the local server is unavailable, callers show offline.
  */
 import { createServer } from 'node:http';
 import { existsSync, mkdirSync, unlinkSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
+import { randomBytes } from 'node:crypto';
 import { getGramatrDirFromEnv, getHomeDir } from '../config-runtime.js';
 import { callRemoteTool } from '../proxy/remote-client.js';
+import { getToken, getServerUrl } from './auth.js';
 // ── In-memory session context store ──
 // Keys: session_id (string) + '__latest__' sentinel for the most recent write.
 // Hooks that don't know the session_id (e.g. a status query) fall back to __latest__.
 const sessionStore = new Map();
-// ── Port file path ──
+// ── Per-server-instance shared secret ──
+let _secret = null;
+/** Return the current IPC secret. Null until startHooksListener() has run. */
+export function getHooksSecret() {
+    return _secret;
+}
+// ── Port + secret file paths ──
+function getGramatrDir() {
+    return getGramatrDirFromEnv() || join(getHomeDir(), '.gramatr');
+}
 function getPortFilePath() {
-    const dir = getGramatrDirFromEnv() || join(getHomeDir(), '.gramatr');
-    return join(dir, '.hooks-port');
+    return join(getGramatrDir(), '.hooks-port');
+}
+function getSecretFilePath() {
+    return join(getGramatrDir(), '.hooks-secret');
 }
 // ── Request helpers ──
 async function readBody(req) {
@@ -49,6 +58,12 @@ function json(res, status, body) {
 async function handleRequest(req, res) {
     const url = new URL(req.url || '/', 'http://localhost');
     const method = (req.method || 'GET').toUpperCase();
+    // ── Secret check — reject any caller that doesn't know the secret ──
+    const presented = req.headers['x-hooks-secret'];
+    if (!_secret || presented !== _secret) {
+        json(res, 401, { error: 'Unauthorized' });
+        return;
+    }
     // ── POST /hooks/tool — proxy a gramatr tool call with server-managed auth ──
     if (url.pathname === '/hooks/tool' && method === 'POST') {
         const raw = await readBody(req);
@@ -91,6 +106,33 @@ async function handleRequest(req, res) {
         }
         return;
     }
+    // ── POST /hooks/statusline — proxy statusline render with server-managed auth ──
+    // The statusline binary calls this instead of hitting the central server directly.
+    // Auth token is held by the local server; the caller needs no credentials.
+    if (url.pathname === '/hooks/statusline' && method === 'POST') {
+        const raw = await readBody(req);
+        try {
+            const token = getToken();
+            if (!token) {
+                json(res, 503, { error: 'Local server not authenticated — run npx gramatr login' });
+                return;
+            }
+            const baseUrl = getServerUrl().replace(/\/mcp\/?$/, '');
+            const upstream = await fetch(`${baseUrl}/api/v1/statusline/render`, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' },
+                body: raw,
+                signal: AbortSignal.timeout(2000),
+            });
+            const text = await upstream.text();
+            res.writeHead(upstream.status, { 'Content-Type': 'application/json' });
+            res.end(text);
+        }
+        catch (err) {
+            json(res, 502, { error: err instanceof Error ? err.message : String(err) });
+        }
+        return;
+    }
     json(res, 404, { error: 'Not found' });
 }
 // ── Lifecycle ──
@@ -101,13 +143,18 @@ let _server = null;
  * Returns the assigned port number.
  */
 export async function startHooksListener() {
-    // Ensure the directory exists for the port file
-    const dir = getGramatrDirFromEnv() || join(getHomeDir(), '.gramatr');
+    const dir = getGramatrDir();
     try {
         if (!existsSync(dir))
             mkdirSync(dir, { recursive: true });
     }
-    catch { /* non-critical — port file write will fail gracefully below */ }
+    catch { /* non-critical */ }
+    // Generate a fresh per-run secret and persist it so callers can read it.
+    _secret = randomBytes(32).toString('hex');
+    try {
+        writeFileSync(getSecretFilePath(), _secret, { mode: 0o600 });
+    }
+    catch { /* non-critical — callers will get 401 if they can't read the secret */ }
     return new Promise((resolve, reject) => {
         _server = createServer((req, res) => {
             handleRequest(req, res).catch((err) => {
@@ -118,27 +165,28 @@ export async function startHooksListener() {
             const addr = _server.address();
             const port = typeof addr === 'object' && addr !== null ? addr.port : 0;
             try {
-                // mode 0o600: readable only by the current user
                 writeFileSync(getPortFilePath(), String(port), { mode: 0o600 });
             }
-            catch {
-                // Non-critical — hooks will fall back to SQLite + direct remote
-            }
+            catch { /* non-critical */ }
             resolve(port);
         });
         _server.once('error', reject);
     });
 }
 /**
- * Stop the hooks listener and remove the port file.
- * Called on server shutdown so stale hooks know to fall back to direct remote.
+ * Stop the hooks listener and remove the port + secret files.
  */
 export function stopHooksListener() {
     _server?.close();
     _server = null;
+    _secret = null;
     try {
         unlinkSync(getPortFilePath());
     }
-    catch { /* best-effort cleanup */ }
+    catch { /* best-effort */ }
+    try {
+        unlinkSync(getSecretFilePath());
+    }
+    catch { /* best-effort */ }
 }
 //# sourceMappingURL=hooks-listener.js.map

package/dist/server/hooks-listener.js.map

@@ -1 +1 @@
-{"version":3,"file":"hooks-listener.js","sourceRoot":"","sources":["../../src/server/hooks-listener.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,wCAAwC;AACxC,+EAA+E;AAC/E,sFAAsF;AACtF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmC,CAAC;AAEhE,uBAAuB;AAEvB,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,oBAAoB,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;AAClC,CAAC;AAED,wBAAwB;AAExB,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,uBAAuB;AAEvB,KAAK,UAAU,aAAa,CAAC,GAAoB,EAAE,GAAmB;IACpE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAEnD,8EAA8E;IAC9E,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoD,CAAC;YAC1F,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO;IACT,CAAC;IAED,qEAAqE;IACrE,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;eACvD,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;eAC9B,IAAI,CAAC;QACV,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,oDAAoD;IACpD,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YACvD,MAAM,SAAS,GAAG,GAAG,EAAE,UAAgC,CAAC;YACxD,IAAI,SAAS;gBAAE,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAChD,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,kBAAkB;AAElB,IAAI,OAAO,GAAkB,IAAI,CAAC;AAElC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,gDAAgD;IAChD,MAAM,GAAG,GAAG,oBAAoB,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC,CAAC,+DAA+D,CAAC,CAAC;IAE3E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,OAAO,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAClC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC7C,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAClC,MAAM,IAAI,GAAG,OAAQ,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC;gBACH,gDAAgD;gBAChD,aAAa,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,EAAE,KAAK,EAAE,CAAC;IACjB,OAAO,GAAG,IAAI,CAAC;IACf,IAAI,CAAC;QAAC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;AAC5E,CAAC"}
+{"version":3,"file":"hooks-listener.js","sourceRoot":"","sources":["../../src/server/hooks-listener.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEnD,wCAAwC;AACxC,+EAA+E;AAC/E,sFAAsF;AACtF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmC,CAAC;AAEhE,0CAA0C;AAC1C,IAAI,OAAO,GAAkB,IAAI,CAAC;AAElC,8EAA8E;AAC9E,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iCAAiC;AAEjC,SAAS,aAAa;IACpB,OAAO,oBAAoB,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,aAAa,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,eAAe,CAAC,CAAC;AAChD,CAAC;AAED,wBAAwB;AAExB,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,uBAAuB;AAEvB,KAAK,UAAU,aAAa,CAAC,GAAoB,EAAE,GAAmB;IACpE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAEnD,sEAAsE;IACtE,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoD,CAAC;YAC1F,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO;IACT,CAAC;IAED,qEAAqE;IACrE,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;eACvD,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;eAC9B,IAAI,CAAC;QACV,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,oDAAoD;IACpD,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YACvD,MAAM,SAAS,GAAG,GAAG,EAAE,UAAgC,CAAC;YACxD,IAAI,SAAS;gBAAE,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAChD,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO;IACT,CAAC;IAED,kFAAkF;IAClF,mFAAmF;IACnF,2EAA2E;IAC3E,IAAI,GAAG,CAAC,QAAQ,KAAK,mBAAmB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC,CAAC;gBACpF,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,2BAA2B,EAAE;gBAClE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACjF,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACvE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,kBAAkB;AAElB,IAAI,OAAO,GAAkB,IAAI,CAAC;AAElC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAE9B,yEAAyE;IACzE,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,aAAa,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC,CAAC,uEAAuE,CAAC,CAAC;IAEnF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,OAAO,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAClC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC7C,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAClC,MAAM,IAAI,GAAG,OAAQ,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC;gBACH,aAAa,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,EAAE,KAAK,EAAE,CAAC;IACjB,OAAO,GAAG,IAAI,CAAC;IACf,OAAO,GAAG,IAAI,CAAC;IACf,IAAI,CAAC;QAAC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAClE,IAAI,CAAC;QAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AACtE,CAAC"}

package/dist/tools/local-tools.d.ts

@@ -9,7 +9,7 @@ import type { ToolDefinition } from '../proxy/tool-registry.js';
  */
 export declare function getLocalToolDefinitions(): ToolDefinition[];
 /**
- * Check if a tool name is a local-only tool.
+ * Check if a tool name is handled locally (fully or local-first).
  */
 export declare function isLocalTool(name: string): boolean;
 /**

package/dist/tools/local-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-tools.d.ts","sourceRoot":"","sources":["../../src/tools/local-tools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAGhE;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,cAAc,EAAE,CAgC1D;AAID;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,cAAc,CAAC,CAqBzB"}
+{"version":3,"file":"local-tools.d.ts","sourceRoot":"","sources":["../../src/tools/local-tools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAShE;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,cAAc,EAAE,CA+C1D;AAYD;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,cAAc,CAAC,CAuBzB"}

package/dist/tools/local-tools.js

@@ -10,6 +10,8 @@ import { queueSize } from '../queue/offline-queue.js';
 import { getWebToolDefinitions, isWebTool, handleWebTool } from './web-tools.js';
 import { getMetrics, resetMetrics } from '../metrics/collector.js';
 import { VERSION } from '../hooks/lib/version.js';
+import { getLocalProjectBySlug, getLocalProjectByDirectory, listLocalProjects, } from '../hooks/lib/hook-state.js';
+import { callRemoteTool } from '../proxy/remote-client.js';
 /**
  * Local tool definitions — these get merged into tools/list alongside remote tools.
  */
@@ -43,15 +45,37 @@ export function getLocalToolDefinitions() {
             },
             annotations: { readOnlyHint: true },
         },
+        {
+            name: 'gramatr_resolve_project',
+            description: 'Resolve or list projects. Reads from local SQLite cache first; falls back to server for misses or search. Actions: list (recent projects), resolve (by slug or directory), search (text search — always remote).',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    action: { type: 'string', enum: ['list', 'resolve', 'search'], description: 'list | resolve | search' },
+                    slug: { type: 'string', description: 'Project slug for resolve action.' },
+                    directory: { type: 'string', description: 'Absolute directory path for resolve action.' },
+                    query: { type: 'string', description: 'Search string for search action.' },
+                    limit: { type: 'number', description: 'Max results for list (default 20).' },
+                },
+                required: ['action'],
+            },
+        },
         ...getWebToolDefinitions(),
     ];
 }
 const startTime = Date.now();
+const LOCAL_TOOL_NAMES = new Set([
+    'gramatr_local_status',
+    'gramatr_local_clear_cache',
+    'gramatr_local_config',
+    'gramatr_local_metrics',
+    'gramatr_resolve_project',
+]);
 /**
- * Check if a tool name is a local-only tool.
+ * Check if a tool name is handled locally (fully or local-first).
  */
 export function isLocalTool(name) {
-    return name.startsWith('gramatr_local_');
+    return name.startsWith('gramatr_local_') || LOCAL_TOOL_NAMES.has(name);
 }
 /**
  * Handle a local tool call.
@@ -70,6 +94,8 @@ export async function handleLocalTool(toolName, args) {
             return handleConfig();
         case 'gramatr_local_metrics':
             return handleMetrics(args);
+        case 'gramatr_resolve_project':
+            return handleResolveProject(args);
         default:
             return {
                 content: [{ type: 'text', text: JSON.stringify({ error: `Unknown local tool: ${toolName}` }) }],
@@ -159,4 +185,45 @@ function handleMetrics(args) {
         content: [{ type: 'text', text: JSON.stringify(snapshot, null, 2) }],
     };
 }
+async function handleResolveProject(args) {
+    const action = args.action;
+    // list — return all local projects, sorted by updated_at desc
+    if (action === 'list') {
+        const limit = typeof args.limit === 'number' ? args.limit : 20;
+        try {
+            const rows = listLocalProjects(limit);
+            return {
+                content: [{ type: 'text', text: JSON.stringify({ action: 'list', projects: rows, source: 'local', total: rows.length }, null, 2) }],
+            };
+        }
+        catch {
+            // DB unavailable — fall through to remote
+        }
+    }
+    // resolve — try local first (slug, then directory), then remote on miss
+    if (action === 'resolve') {
+        const slug = typeof args.slug === 'string' ? args.slug : null;
+        const directory = typeof args.directory === 'string' ? args.directory : null;
+        let local = slug ? getLocalProjectBySlug(slug) : null;
+        if (!local && directory)
+            local = getLocalProjectByDirectory(directory);
+        if (local) {
+            return {
+                content: [{ type: 'text', text: JSON.stringify({ action: 'resolve', project: local, source: 'local' }, null, 2) }],
+            };
+        }
+        // Miss — fall through to remote below
+    }
+    // search always goes remote; resolve on local miss falls through here
+    try {
+        const result = await callRemoteTool('gramatr_resolve_project', args);
+        return result;
+    }
+    catch (err) {
+        return {
+            content: [{ type: 'text', text: JSON.stringify({ error: err instanceof Error ? err.message : String(err) }) }],
+            isError: true,
+        };
+    }
+}
 //# sourceMappingURL=local-tools.js.map