@gramatr/mcp 0.7.3 → 0.7.6

package/dist/intelligence/packet2-fetcher.js

@@ -1,11 +1,11 @@
 /**
  * Packet 2 Auto-Fetcher — automatically fetches enrichment when route_request
- * returns packet_2_status: "pending".
+ * returns packet_2_status: "required".
  *
  * Flow:
  *   1. Agent calls gramatr_route_request
  *   2. Server returns Packet 1 immediately with enrichment_id
- *   3. This module detects pending status, calls gramatr_get_enrichment
+ *   3. This module detects required status, calls gramatr_get_enrichment
  *   4. Merges Packet 2 into the response before returning to agent
  *
  * The agent never has to manually call gramatr_get_enrichment — it just works.
@@ -14,14 +14,14 @@ import { callRemoteTool } from '../proxy/remote-client.js';
 const MAX_RETRIES = 3;
 const RETRY_DELAY_MS = 500;
 /**
- * Check if a tool result is a route_request response with pending Packet 2.
+ * Check if a tool result is a route_request response with required Packet 2.
  */
 export function hasPendingPacket2(result) {
     if (!result.content?.[0]?.text)
         return { pending: false };
     try {
         const data = JSON.parse(result.content[0].text);
-        if (data.packet_2_status === 'pending' && data.enrichment_id) {
+        if (data.packet_2_status === 'required' && data.enrichment_id) {
             return { pending: true, enrichmentId: data.enrichment_id };
         }
     }
@@ -59,9 +59,9 @@ export async function fetchAndMergePacket2(result, enrichmentId) {
             await new Promise((resolve) => setTimeout(resolve, RETRY_DELAY_MS));
         }
     }
-    // Enrichment not ready after retries — return original Packet 1 as-is
-    // The agent can still work with Packet 1 alone
-    process.stderr.write(`[gramatr-mcp] Packet 2 not ready after ${MAX_RETRIES} retries, returning Packet 1 only\n`);
+    // Enrichment not ready after retries — return original Packet 1 as-is and
+    // leave the required status intact so the caller can keep polling.
+    process.stderr.write(`[gramatr-mcp] Packet 2 still required after ${MAX_RETRIES} retries; returning Packet 1 and preserving required status\n`);
     return result;
 }
 /**
@@ -73,7 +73,7 @@ function mergePackets(packet1, packet2) {
         const p1Data = JSON.parse(packet1.content[0].text);
         const p2Data = JSON.parse(packet2.content[0].text);
         // Merge Packet 2 into Packet 1
-        p1Data.packet_2 = p2Data;
+        p1Data.packet_2 = p2Data.packet_2 || p2Data;
         p1Data.packet_2_status = 'merged';
         return {
             content: [{ type: 'text', text: JSON.stringify(p1Data) }],

package/dist/intelligence/packet2-fetcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"packet2-fetcher.js","sourceRoot":"","sources":["../../src/intelligence/packet2-fetcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAa3D,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAwB,CAAC;QACvE,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAsB,EACtB,YAAoB;IAEpB,IAAI,UAAU,GAAY,IAAI,CAAC;IAE/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,cAAc,CAAC,wBAAwB,EAAE;gBAC1D,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC;YAEH,+BAA+B;YAC/B,MAAM,YAAY,GAAG,UAA4B,CAAC;YAClD,IAAI,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;gBACrC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAA4B,CAAC;gBACvF,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACpC,iCAAiC;oBACjC,OAAO,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;QAED,uBAAuB;QACvB,IAAI,OAAO,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,+CAA+C;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,WAAW,qCAAqC,CAC3F,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,OAAuB,EAAE,OAAuB;IACpE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAA4B,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAA4B,CAAC;QAE9E,+BAA+B;QAC/B,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC;QACzB,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAC;QAElC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}
+{"version":3,"file":"packet2-fetcher.js","sourceRoot":"","sources":["../../src/intelligence/packet2-fetcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAa3D,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAwB,CAAC;QACvE,IAAI,IAAI,CAAC,eAAe,KAAK,UAAU,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAsB,EACtB,YAAoB;IAEpB,IAAI,UAAU,GAAY,IAAI,CAAC;IAE/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,cAAc,CAAC,wBAAwB,EAAE;gBAC1D,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC;YAEH,+BAA+B;YAC/B,MAAM,YAAY,GAAG,UAA4B,CAAC;YAClD,IAAI,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;gBACrC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAA4B,CAAC;gBACvF,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACpC,iCAAiC;oBACjC,OAAO,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;QAED,uBAAuB;QACvB,IAAI,OAAO,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+CAA+C,WAAW,+DAA+D,CAC1H,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,OAAuB,EAAE,OAAuB;IACpE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAA4B,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAA4B,CAAC;QAE9E,+BAA+B;QAC/B,MAAM,CAAC,QAAQ,GAAI,MAAM,CAAC,QAAgD,IAAI,MAAM,CAAC;QACrF,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAC;QAElC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/proxy/local-client.d.ts

@@ -0,0 +1,49 @@
+/**
+ * local-client.ts — Hook-side client for the local MCP hooks listener.
+ *
+ * Phase IV: Hook subprocesses call this module instead of remote-client.ts.
+ * Routes all tool calls and session-context reads/writes through the local
+ * MCP server when it is running, falling back to direct remote calls otherwise.
+ *
+ * Priority:
+ *   1. Local hooks server (localhost:PORT from ~/.gramatr/.hooks-port)
+ *      → auth already loaded in server process, no token resolution needed
+ *      → data shape validated before any remote call
+ *   2. Direct remote (callRemoteTool from remote-client.ts)
+ *      → hooks resolve their own auth token as before
+ *
+ * The local server's port file is read once per hook process lifetime and
+ * cached. Stale port files (server crashed without cleanup) are caught by a
+ * connection error on first use, which clears the cache and falls through to
+ * direct remote.
+ */
+/** True when the local hooks server port file exists and contains a valid port. */
+export declare function isLocalHooksServerAvailable(): boolean;
+/**
+ * Call a gramatr tool, routing through the local hooks server when available.
+ *
+ * The local server injects auth and enforces data shapes before forwarding to
+ * the remote API. If the local server is unavailable or returns an error,
+ * falls back to a direct remote call via callRemoteTool.
+ */
+export declare function callTool(name: string, args: Record<string, unknown>): Promise<unknown>;
+/**
+ * Push session context to the local server's in-memory store.
+ *
+ * Called by the session-start hook after setSessionContext() so later hook
+ * processes (user-prompt-submit, session-end) can read the context without
+ * hitting the SQLite file or the remote REST API.
+ *
+ * Returns true if the write was acknowledged. A false return is non-fatal —
+ * later hooks fall back to SQLite → remote REST.
+ */
+export declare function pushSessionContextToLocal(ctx: unknown): Promise<boolean>;
+/**
+ * Pull session context from the local server's in-memory store.
+ *
+ * Returns the stored context for the given session_id, or the most recently
+ * written context as a fallback. Returns null if the local server is
+ * unavailable or has no context for this session.
+ */
+export declare function pullSessionContextFromLocal(sessionId: string): Promise<Record<string, unknown> | null>;
+//# sourceMappingURL=local-client.d.ts.map

package/dist/proxy/local-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-client.d.ts","sourceRoot":"","sources":["../../src/proxy/local-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AA6BH,mFAAmF;AACnF,wBAAgB,2BAA2B,IAAI,OAAO,CAErD;AAID;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAID;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAe9E;AAED;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAezC"}

package/dist/proxy/local-client.js

@@ -0,0 +1,135 @@
+/**
+ * local-client.ts — Hook-side client for the local MCP hooks listener.
+ *
+ * Phase IV: Hook subprocesses call this module instead of remote-client.ts.
+ * Routes all tool calls and session-context reads/writes through the local
+ * MCP server when it is running, falling back to direct remote calls otherwise.
+ *
+ * Priority:
+ *   1. Local hooks server (localhost:PORT from ~/.gramatr/.hooks-port)
+ *      → auth already loaded in server process, no token resolution needed
+ *      → data shape validated before any remote call
+ *   2. Direct remote (callRemoteTool from remote-client.ts)
+ *      → hooks resolve their own auth token as before
+ *
+ * The local server's port file is read once per hook process lifetime and
+ * cached. Stale port files (server crashed without cleanup) are caught by a
+ * connection error on first use, which clears the cache and falls through to
+ * direct remote.
+ */
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getGramatrDirFromEnv, getHomeDir } from '../config-runtime.js';
+import { callRemoteTool } from './remote-client.js';
+// ── Port discovery ──
+function getPortFilePath() {
+    const dir = getGramatrDirFromEnv() || join(getHomeDir(), '.gramatr');
+    return join(dir, '.hooks-port');
+}
+// undefined = not yet read; null = not available; number = available
+let _cachedPort = undefined;
+function getLocalPort() {
+    if (_cachedPort !== undefined)
+        return _cachedPort;
+    try {
+        const raw = readFileSync(getPortFilePath(), 'utf8').trim();
+        const port = parseInt(raw, 10);
+        _cachedPort = Number.isFinite(port) && port > 0 ? port : null;
+    }
+    catch {
+        _cachedPort = null;
+    }
+    return _cachedPort;
+}
+/** True when the local hooks server port file exists and contains a valid port. */
+export function isLocalHooksServerAvailable() {
+    return getLocalPort() !== null;
+}
+// ── Tool call proxy ──
+/**
+ * Call a gramatr tool, routing through the local hooks server when available.
+ *
+ * The local server injects auth and enforces data shapes before forwarding to
+ * the remote API. If the local server is unavailable or returns an error,
+ * falls back to a direct remote call via callRemoteTool.
+ */
+export async function callTool(name, args) {
+    const port = getLocalPort();
+    if (port !== null) {
+        try {
+            const res = await fetch(`http://127.0.0.1:${port}/hooks/tool`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ name, args }),
+                signal: AbortSignal.timeout(30000),
+            });
+            // gramatr-allow: B1 — HTTP transport sentinel, caught immediately in the enclosing try/catch
+            if (!res.ok)
+                throw new Error(`HTTP ${res.status}`);
+            const data = await res.json();
+            // gramatr-allow: B1 — error string forwarded from local server, caught immediately in the enclosing try/catch
+            if (data.error)
+                throw new Error(data.error);
+            return data.result;
+        }
+        catch {
+            // Local server failed (stale port file, crash, etc.) — invalidate cache
+            // and fall through to direct remote.
+            _cachedPort = null;
+        }
+    }
+    return callRemoteTool(name, args);
+}
+// ── Session context IPC ──
+/**
+ * Push session context to the local server's in-memory store.
+ *
+ * Called by the session-start hook after setSessionContext() so later hook
+ * processes (user-prompt-submit, session-end) can read the context without
+ * hitting the SQLite file or the remote REST API.
+ *
+ * Returns true if the write was acknowledged. A false return is non-fatal —
+ * later hooks fall back to SQLite → remote REST.
+ */
+export async function pushSessionContextToLocal(ctx) {
+    const port = getLocalPort();
+    if (port === null)
+        return false;
+    try {
+        const res = await fetch(`http://127.0.0.1:${port}/hooks/session`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(ctx),
+            signal: AbortSignal.timeout(3000),
+        });
+        return res.ok;
+    }
+    catch {
+        _cachedPort = null; // Invalidate on connection failure
+        return false;
+    }
+}
+/**
+ * Pull session context from the local server's in-memory store.
+ *
+ * Returns the stored context for the given session_id, or the most recently
+ * written context as a fallback. Returns null if the local server is
+ * unavailable or has no context for this session.
+ */
+export async function pullSessionContextFromLocal(sessionId) {
+    const port = getLocalPort();
+    if (port === null)
+        return null;
+    try {
+        const res = await fetch(`http://127.0.0.1:${port}/hooks/session?session_id=${encodeURIComponent(sessionId)}`, { signal: AbortSignal.timeout(3000) });
+        if (!res.ok)
+            return null;
+        const data = await res.json();
+        return data.ctx;
+    }
+    catch {
+        _cachedPort = null;
+        return null;
+    }
+}
+//# sourceMappingURL=local-client.js.map

package/dist/proxy/local-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-client.js","sourceRoot":"","sources":["../../src/proxy/local-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,uBAAuB;AAEvB,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,oBAAoB,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;AAClC,CAAC;AAED,qEAAqE;AACrE,IAAI,WAAW,GAA8B,SAAS,CAAC;AAEvD,SAAS,YAAY;IACnB,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,2BAA2B;IACzC,OAAO,YAAY,EAAE,KAAK,IAAI,CAAC;AACjC,CAAC;AAED,wBAAwB;AAExB;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,IAA6B;IAE7B,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,aAAa,EAAE;gBAC7D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACpC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;aACnC,CAAC,CAAC;YACH,6FAA6F;YAC7F,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA0C,CAAC;YACtE,8GAA8G;YAC9G,IAAI,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,qCAAqC;YACrC,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,4BAA4B;AAE5B;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAAY;IAC1D,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,gBAAgB,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;YACzB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,CAAC,CAAC,mCAAmC;QACvD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,SAAiB;IAEjB,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,oBAAoB,IAAI,6BAA6B,kBAAkB,CAAC,SAAS,CAAC,EAAE,EACpF,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CACtC,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6C,CAAC;QACzE,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/server/auth.d.ts

@@ -1,7 +1,12 @@
 /**
  * Auth token resolution for the local MCP server.
  *
- * Reads the auth token once at startup from ~/.gramatr.json.
+ * Reads the auth token from the same canonical sources used by the rest of the
+ * client stack:
+ *   1. GRAMATR_API_KEY
+ *   2. GRAMATR_TOKEN / AIOS_MCP_TOKEN
+ *   3. ~/.gramatr.json (or $GRAMATR_DIR/../.gramatr.json)
+ *
  * Injects as Authorization: Bearer on every proxied request.
  * Re-reads on 401 from remote (token may have been refreshed).
  */

package/dist/server/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkBH;;;GAGG;AACH,wBAAgB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAGxC;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAoB5C;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAcrC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAuCH;;;GAGG;AACH,wBAAgB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAGxC;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAgB5C;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAQrC"}

package/dist/server/auth.js

@@ -1,16 +1,36 @@
 /**
  * Auth token resolution for the local MCP server.
  *
- * Reads the auth token once at startup from ~/.gramatr.json.
+ * Reads the auth token from the same canonical sources used by the rest of the
+ * client stack:
+ *   1. GRAMATR_API_KEY
+ *   2. GRAMATR_TOKEN / AIOS_MCP_TOKEN
+ *   3. ~/.gramatr.json (or $GRAMATR_DIR/../.gramatr.json)
+ *
  * Injects as Authorization: Bearer on every proxied request.
  * Re-reads on 401 from remote (token may have been refreshed).
  */
 import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-// gramatr-allow: C1 — MCP package is standalone config reader, no @gramatr/core
-const HOME = process.env.HOME || process.env.USERPROFILE || '';
-const CONFIG_PATH = join(HOME, '.gramatr.json');
+import { dirname, join } from 'node:path';
+import { getGramatrDirFromEnv, getGramatrTokenFromEnv, getGramatrUrlFromEnv, getHomeDir, } from '../config-runtime.js';
 let cachedToken = null;
+function getConfigPath() {
+    const gramatrDir = getGramatrDirFromEnv();
+    if (gramatrDir) {
+        return join(dirname(gramatrDir), '.gramatr.json');
+    }
+    const home = getHomeDir();
+    return join(home, '.gramatr.json');
+}
+function readConfig() {
+    try {
+        const raw = readFileSync(getConfigPath(), 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Read the auth token from ~/.gramatr.json.
  * Caches in memory — call refreshToken() to force re-read.
@@ -25,42 +45,30 @@ export function getToken() {
  * Called on startup and on 401 from remote.
  */
 export function refreshToken() {
-    try {
-        const raw = readFileSync(CONFIG_PATH, 'utf8');
-        const config = JSON.parse(raw);
-        // API key takes priority (env var)
-        // gramatr-allow: C1 — MCP package is standalone config reader
-        const envKey = process.env.GRAMATR_API_KEY;
-        if (envKey) {
-            cachedToken = envKey;
-            return cachedToken;
-        }
-        cachedToken = config.token || null;
+    const envKey = process.env.GRAMATR_API_KEY;
+    if (envKey) {
+        cachedToken = envKey;
         return cachedToken;
     }
-    catch {
-        // Config file doesn't exist or is malformed
-        cachedToken = null;
-        return null;
+    const envToken = getGramatrTokenFromEnv();
+    if (envToken) {
+        cachedToken = envToken;
+        return cachedToken;
     }
+    const config = readConfig();
+    cachedToken = config?.token || null;
+    return cachedToken;
 }
 /**
  * Get the remote server base URL.
  * Reads from env or config file.
  */
 export function getServerUrl() {
-    // gramatr-allow: C1 — MCP package is standalone config reader
-    if (process.env.GRAMATR_URL) {
-        // gramatr-allow: C1 — MCP package is standalone config reader
-        return process.env.GRAMATR_URL.replace(/\/mcp\/?$/, '');
-    }
-    try {
-        const raw = readFileSync(CONFIG_PATH, 'utf8');
-        const config = JSON.parse(raw);
-        return (config.server_url || 'https://api.gramatr.com').replace(/\/mcp\/?$/, '');
-    }
-    catch {
-        return 'https://api.gramatr.com';
+    const envUrl = getGramatrUrlFromEnv();
+    if (envUrl) {
+        return envUrl.replace(/\/mcp\/?$/, '');
     }
+    const config = readConfig();
+    return (config?.server_url || 'https://api.gramatr.com').replace(/\/mcp\/?$/, '');
 }
 //# sourceMappingURL=auth.js.map

package/dist/server/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,gFAAgF;AAChF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;AAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;AAShD,IAAI,WAAW,GAAkB,IAAI,CAAC;AAEtC;;;GAGG;AACH,MAAM,UAAU,QAAQ;IACtB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,OAAO,YAAY,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAkB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE9C,mCAAmC;QACnC,8DAA8D;QAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YACX,WAAW,GAAG,MAAM,CAAC;YACrB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,WAAW,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC;QACnC,OAAO,WAAW,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;QAC5C,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,8DAA8D;IAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5B,8DAA8D;QAC9D,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAkB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,yBAAyB,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,yBAAyB,CAAC;IACnC,CAAC;AACH,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,UAAU,GACX,MAAM,sBAAsB,CAAC;AAS9B,IAAI,WAAW,GAAkB,IAAI,CAAC;AAEtC,SAAS,aAAa;IACpB,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;IAC1C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,OAAO,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ;IACtB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,OAAO,YAAY,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC3C,IAAI,MAAM,EAAE,CAAC;QACX,WAAW,GAAG,MAAM,CAAC;QACrB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,WAAW,GAAG,QAAQ,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,WAAW,GAAG,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC;IACpC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACtC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,CAAC,MAAM,EAAE,UAAU,IAAI,yBAAyB,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACpF,CAAC"}

package/dist/server/hooks-listener.d.ts

@@ -0,0 +1,32 @@
+/**
+ * hooks-listener.ts — Local HTTP IPC server for hook subprocesses.
+ *
+ * Phase IV: The local MCP proxy server opens a lightweight HTTP listener on a
+ * random localhost port at startup and writes the port to ~/.gramatr/.hooks-port.
+ * Hook subprocesses (session-start, user-prompt-submit, session-end) discover
+ * this port and route calls through the local server instead of calling the
+ * remote server directly.
+ *
+ * Benefits:
+ *   - Auth managed in one place: the local server has the token; hooks never
+ *     need to resolve or refresh it themselves.
+ *   - Single enforcement point for data shapes and schema validation before
+ *     any call reaches the remote API.
+ *   - Cross-hook session context via in-process memory (no SQLite file needed).
+ *   - Faster: localhost vs. internet round-trip for session context reads.
+ *
+ * Fallback: if the port file is absent (local server not running), hooks fall
+ * back to direct remote calls with their own auth resolution.
+ */
+/**
+ * Start the hooks IPC listener on a random localhost port.
+ * Writes the port to ~/.gramatr/.hooks-port so hook subprocesses can find it.
+ * Returns the assigned port number.
+ */
+export declare function startHooksListener(): Promise<number>;
+/**
+ * Stop the hooks listener and remove the port file.
+ * Called on server shutdown so stale hooks know to fall back to direct remote.
+ */
+export declare function stopHooksListener(): void;
+//# sourceMappingURL=hooks-listener.d.ts.map

package/dist/server/hooks-listener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-listener.d.ts","sourceRoot":"","sources":["../../src/server/hooks-listener.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA2FH;;;;GAIG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CA4B1D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAIxC"}

package/dist/server/hooks-listener.js

@@ -0,0 +1,144 @@
+/**
+ * hooks-listener.ts — Local HTTP IPC server for hook subprocesses.
+ *
+ * Phase IV: The local MCP proxy server opens a lightweight HTTP listener on a
+ * random localhost port at startup and writes the port to ~/.gramatr/.hooks-port.
+ * Hook subprocesses (session-start, user-prompt-submit, session-end) discover
+ * this port and route calls through the local server instead of calling the
+ * remote server directly.
+ *
+ * Benefits:
+ *   - Auth managed in one place: the local server has the token; hooks never
+ *     need to resolve or refresh it themselves.
+ *   - Single enforcement point for data shapes and schema validation before
+ *     any call reaches the remote API.
+ *   - Cross-hook session context via in-process memory (no SQLite file needed).
+ *   - Faster: localhost vs. internet round-trip for session context reads.
+ *
+ * Fallback: if the port file is absent (local server not running), hooks fall
+ * back to direct remote calls with their own auth resolution.
+ */
+import { createServer } from 'node:http';
+import { existsSync, mkdirSync, unlinkSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getGramatrDirFromEnv, getHomeDir } from '../config-runtime.js';
+import { callRemoteTool } from '../proxy/remote-client.js';
+// ── In-memory session context store ──
+// Keys: session_id (string) + '__latest__' sentinel for the most recent write.
+// Hooks that don't know the session_id (e.g. a status query) fall back to __latest__.
+const sessionStore = new Map();
+// ── Port file path ──
+function getPortFilePath() {
+    const dir = getGramatrDirFromEnv() || join(getHomeDir(), '.gramatr');
+    return join(dir, '.hooks-port');
+}
+// ── Request helpers ──
+async function readBody(req) {
+    return new Promise((resolve) => {
+        const chunks = [];
+        req.on('data', (chunk) => chunks.push(chunk));
+        req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
+        req.on('error', () => resolve(''));
+    });
+}
+function json(res, status, body) {
+    res.writeHead(status, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify(body));
+}
+// ── Route handlers ──
+async function handleRequest(req, res) {
+    const url = new URL(req.url || '/', 'http://localhost');
+    const method = (req.method || 'GET').toUpperCase();
+    // ── POST /hooks/tool — proxy a gramatr tool call with server-managed auth ──
+    if (url.pathname === '/hooks/tool' && method === 'POST') {
+        const raw = await readBody(req);
+        try {
+            const { name, args } = JSON.parse(raw);
+            if (!name || typeof name !== 'string') {
+                json(res, 400, { error: 'name is required' });
+                return;
+            }
+            const result = await callRemoteTool(name, args ?? {});
+            json(res, 200, { result });
+        }
+        catch (err) {
+            json(res, 502, { error: err instanceof Error ? err.message : String(err) });
+        }
+        return;
+    }
+    // ── GET /hooks/session?session_id=xxx — retrieve session context ──
+    if (url.pathname === '/hooks/session' && method === 'GET') {
+        const sessionId = url.searchParams.get('session_id');
+        const ctx = (sessionId ? sessionStore.get(sessionId) : null)
+            ?? sessionStore.get('__latest__')
+            ?? null;
+        json(res, 200, { ctx });
+        return;
+    }
+    // ── POST /hooks/session — store session context ──
+    if (url.pathname === '/hooks/session' && method === 'POST') {
+        const raw = await readBody(req);
+        try {
+            const ctx = JSON.parse(raw);
+            const sessionId = ctx?.session_id;
+            if (sessionId)
+                sessionStore.set(sessionId, ctx);
+            sessionStore.set('__latest__', ctx);
+            json(res, 200, { ok: true });
+        }
+        catch {
+            json(res, 400, { error: 'Invalid JSON' });
+        }
+        return;
+    }
+    json(res, 404, { error: 'Not found' });
+}
+// ── Lifecycle ──
+let _server = null;
+/**
+ * Start the hooks IPC listener on a random localhost port.
+ * Writes the port to ~/.gramatr/.hooks-port so hook subprocesses can find it.
+ * Returns the assigned port number.
+ */
+export async function startHooksListener() {
+    // Ensure the directory exists for the port file
+    const dir = getGramatrDirFromEnv() || join(getHomeDir(), '.gramatr');
+    try {
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+    }
+    catch { /* non-critical — port file write will fail gracefully below */ }
+    return new Promise((resolve, reject) => {
+        _server = createServer((req, res) => {
+            handleRequest(req, res).catch((err) => {
+                json(res, 500, { error: err instanceof Error ? err.message : String(err) });
+            });
+        });
+        _server.listen(0, '127.0.0.1', () => {
+            const addr = _server.address();
+            const port = typeof addr === 'object' && addr !== null ? addr.port : 0;
+            try {
+                // mode 0o600: readable only by the current user
+                writeFileSync(getPortFilePath(), String(port), { mode: 0o600 });
+            }
+            catch {
+                // Non-critical — hooks will fall back to SQLite + direct remote
+            }
+            resolve(port);
+        });
+        _server.once('error', reject);
+    });
+}
+/**
+ * Stop the hooks listener and remove the port file.
+ * Called on server shutdown so stale hooks know to fall back to direct remote.
+ */
+export function stopHooksListener() {
+    _server?.close();
+    _server = null;
+    try {
+        unlinkSync(getPortFilePath());
+    }
+    catch { /* best-effort cleanup */ }
+}
+//# sourceMappingURL=hooks-listener.js.map

package/dist/server/hooks-listener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-listener.js","sourceRoot":"","sources":["../../src/server/hooks-listener.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,wCAAwC;AACxC,+EAA+E;AAC/E,sFAAsF;AACtF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmC,CAAC;AAEhE,uBAAuB;AAEvB,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,oBAAoB,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;AAClC,CAAC;AAED,wBAAwB;AAExB,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,uBAAuB;AAEvB,KAAK,UAAU,aAAa,CAAC,GAAoB,EAAE,GAAmB;IACpE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAEnD,8EAA8E;IAC9E,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoD,CAAC;YAC1F,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO;IACT,CAAC;IAED,qEAAqE;IACrE,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;eACvD,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;eAC9B,IAAI,CAAC;QACV,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,oDAAoD;IACpD,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YACvD,MAAM,SAAS,GAAG,GAAG,EAAE,UAAgC,CAAC;YACxD,IAAI,SAAS;gBAAE,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAChD,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,kBAAkB;AAElB,IAAI,OAAO,GAAkB,IAAI,CAAC;AAElC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,gDAAgD;IAChD,MAAM,GAAG,GAAG,oBAAoB,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC,CAAC,+DAA+D,CAAC,CAAC;IAE3E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,OAAO,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAClC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC7C,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAClC,MAAM,IAAI,GAAG,OAAQ,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC;gBACH,gDAAgD;gBAChD,aAAa,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,EAAE,KAAK,EAAE,CAAC;IACjB,OAAO,GAAG,IAAI,CAAC;IACf,IAAI,CAAC;QAAC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;AAC5E,CAAC"}

package/dist/server/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAwBnE;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAuDrC;AAED;;GAEG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAwDjD"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAyBnE;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAuDrC;AAED;;GAEG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAuEjD"}

package/dist/server/server.js

@@ -25,16 +25,17 @@ import { loadRemoteResources, getResources } from '../proxy/resource-registry.js
 import { proxyToolCall } from '../proxy/tool-proxy.js';
 import { fetchRemotePrompt, fetchRemoteResource } from '../proxy/remote-client.js';
 import { getToken } from './auth.js';
+import { startHooksListener, stopHooksListener } from './hooks-listener.js';
 import { getLocalToolDefinitions } from '../tools/local-tools.js';
 import { replayQueue } from '../queue/replay.js';
 import { queueSize } from '../queue/offline-queue.js';
+import { VERSION } from '../hooks/lib/version.js';
 const SERVER_NAME = 'gramatr-mcp';
-const SERVER_VERSION = '0.0.5';
 /**
  * Create and configure the MCP server.
  */
 export function createServer() {
-    const server = new Server({ name: SERVER_NAME, version: SERVER_VERSION }, { capabilities: { tools: {}, prompts: {}, resources: {} } });
+    const server = new Server({ name: SERVER_NAME, version: VERSION }, { capabilities: { tools: {}, prompts: {}, resources: {} } });
     // ── tools/list handler — remote + local tools ──
     server.setRequestHandler(ListToolsRequestSchema, async () => {
         const remoteTools = getTools();
@@ -124,10 +125,24 @@ export async function startServer() {
         process.stderr.write(`[gramatr-mcp] Found ${pending} queued call(s), replaying...\n`);
         void replayQueue();
     }
-    // Create and start the server
+    // Create and start the MCP stdio server
     const server = createServer();
     const transport = new StdioServerTransport();
     await server.connect(transport);
     process.stderr.write(`[gramatr-mcp] Server started (stdio transport)\n`);
+    // Start hooks IPC listener so hook subprocesses can route through this
+    // process for auth, schema enforcement, and session context storage.
+    try {
+        const hooksPort = await startHooksListener();
+        process.stderr.write(`[gramatr-mcp] Hooks listener on port ${hooksPort}\n`);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`[gramatr-mcp] Warning: hooks listener failed to start (${msg})\n`);
+    }
+    // Clean up port file on exit so stale hooks fall back to direct remote.
+    process.on('exit', () => stopHooksListener());
+    process.on('SIGTERM', () => { stopHooksListener(); process.exit(0); });
+    process.on('SIGINT', () => { stopHooksListener(); process.exit(0); });
 }
 //# sourceMappingURL=server.js.map