@hybridlabor-api/aos 4.6.6 → 4.7.0

package/.agents/agents.md

@@ -170,6 +170,7 @@ Ported from [affaan-m/ECC](https://github.com/affaan-m/ECC) (MIT) — see
   - `systematic-debugging`
   - `clean-code`
   - `api-design-principles`
+  - `bdb-security-audit`
 - **Output Artifact**: findings returned inline (writes no file)
 
 ---

package/.agents/nodes.json

@@ -45,6 +45,8 @@
       "optional": false,
       "skills": [
         "godmode-ui-ux",
+        "bdbdesignpro",
+        "editable-design",
         "senior-frontend",
         "landing-page-generator",
         "shadcn",
@@ -125,12 +127,14 @@
       "optional": false,
       "skills": [
         "godmode-shipping",
+        "brag",
         "webapp-testing",
         "seo-audit",
         "wcag-audit-patterns",
         "github-repo",
         "clean-code",
-        "bdbresilience"
+        "bdbresilience",
+        "bdb-security-audit"
       ],
       "instructions": null
     }

package/.agents/state.schema.json

@@ -60,7 +60,8 @@
         "typecheck": { "type": "string", "enum": ["pass", "fail", "skip"] },
         "tests": { "type": "string", "enum": ["pass", "fail", "skip"] },
         "a11y": { "type": "string", "enum": ["pass", "fail", "skip"] },
-        "seo": { "type": "string", "enum": ["pass", "fail", "skip"] }
+        "seo": { "type": "string", "enum": ["pass", "fail", "skip"] },
+        "security": { "type": "string", "enum": ["pass", "fail", "skip"] }
       },
       "additionalProperties": false
     },

package/.agents/vendor-manifest.json

@@ -0,0 +1,50 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "version": "1.0.0",
+  "description": "Pinned upstream vendor repositories tracked for AOS skills and tools",
+  "updated_at": "2026-09-24T07:27:44Z",
+  "vendors": {
+    "superdesign-skill": {
+      "upstream": "https://github.com/superdesigndev/superdesign-skill",
+      "pinned_commit": "f9f05cd988c247dce6c072eaf9ac6b162f2ffc4b",
+      "purpose": "Design tokens, typography hierarchy, spacing scale, component patterns, dsh",
+      "target_skill": "godmode-ui-ux"
+    },
+    "taste-skill": {
+      "upstream": "https://github.com/Leonxlnx/taste-skill",
+      "pinned_commit": "c184364c58658b2f131b4ae8bd3d206cabb3deee",
+      "purpose": "Aesthetic archetypes (Swiss, Minimalist, Luxury, Soft, Tactical) and taste injection",
+      "target_skill": "godmode-ui-ux"
+    },
+    "anti-slop": {
+      "upstream": "https://github.com/miqdadbadjuber/anti-slop",
+      "pinned_commit": "0e384b7bff3301c8ec56dea300330772fed28e6a",
+      "purpose": "Strict negative rules, banned buzzwords, banned generic patterns, touch zones",
+      "target_skill": "godmode-ui-ux, reviewer"
+    },
+    "editable-design": {
+      "upstream": "https://github.com/yejy53/Editable-Design",
+      "pinned_commit": "42ab412fec1d5f32cb86c107430e9fb69674200f",
+      "purpose": "Fixed-canvas visual design, interactive editor.html, exploded layer inspection",
+      "target_skill": "editable-design"
+    },
+    "brag": {
+      "upstream": "https://github.com/latent-spaces/brag",
+      "pinned_commit": "57ce4c9bb912f01a0078b154318bf67c5cbf780f",
+      "purpose": "Hyperframes project-to-launch-video generator",
+      "target_skill": "brag (post-shipping release hook)"
+    },
+    "skylos": {
+      "upstream": "https://github.com/duriantaco/skylos",
+      "pinned_commit": "0c95b002424453983d5c96708cf7865939745d98",
+      "purpose": "Diff-based AST and static security analyzer for shipping gate",
+      "target_skill": "bdb-security-audit, godmode-shipping"
+    },
+    "claude-red": {
+      "upstream": "https://github.com/SnailSploit/claude-red",
+      "pinned_commit": "739512a8588b28ff3b554e669391c22508602878",
+      "purpose": "Defensive audit heuristics and vulnerability checklists (offensive exploits stripped)",
+      "target_skill": "bdb-security-audit, security-reviewer"
+    }
+  }
+}

package/.claude/agents/architect.md

@@ -10,3 +10,7 @@ Turns the user's goal (or `/bdbrainstorm` / `/grill-me` output) into a system pl
 **MCP servers used:** openwiki-skill, memb_mcp
 
 **Output artifact(s):** `production_artifacts/00_execution_plan.md`
+
+- The plan uses the agenttrail component convention (`## Name {#id}`, `needs:`, `files:`, tasks `- [ ] ... {#id}`).
+- The Architect renders the architecture with `aos-archify` to `production_artifacts/00_architecture.html` and links it from the relevant component with a `url:` line.
+- Plan-canvas can review that HTML too.

package/.claude/agents/security-reviewer.md

@@ -5,6 +5,6 @@ model: sonnet
 ---
 Security vulnerability detection and remediation. Use after writing code that handles user input, authentication, API endpoints, or sensitive data. Flags secrets, SSRF, injection, unsafe crypto, and OWASP Top 10.
 
-**Primary skills:** systematic-debugging, clean-code, api-design-principles
+**Primary skills:** systematic-debugging, clean-code, api-design-principles, bdb-security-audit
 
 **Output artifact(s):** findings returned inline (writes no file)

package/.claude/hooks/memb-inject.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// aos-hook-version: 3
+// aos-hook-version: 5
 /**
  * memB ambient memory hook for Claude Code, Google Antigravity, and OpenAI Codex.
  *
@@ -10,16 +10,57 @@
  * - injectSteps (Google Antigravity PreInvocation)
  * - systemMessage (OpenAI Codex UserPromptSubmit)
  *
+ * Event-aware: SessionStart injects the persona file, the global godmode
+ * identity rows, and the current project's cards once per session; every
+ * other prompt (UserPromptSubmit) recalls only FTS keyword hits so 40
+ * identity facts are not re-sent on every message. Harnesses without a
+ * session hook (e.g. Antigravity PreInvocation) get the full block plus
+ * identity on each invocation.
+ *
  * Fails open: any error exits 0 silently.
  */
 
-import { readFileSync, existsSync } from 'node:fs';
+import { readFileSync, existsSync, realpathSync } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
+import { fileURLToPath } from 'node:url';
 
 const COLLECTION = 'bdb_agent_memory';
 const failOpen = () => process.exit(0);
 
+// Filler words (German + English) that must never become FTS query terms —
+// they match virtually any document and would inject unrelated projects.
+const STOPWORDS = new Set([
+  'und', 'oder', 'aber', 'doch', 'noch', 'auch', 'nicht', 'eine', 'einen', 'einer',
+  'dass', 'dann', 'wenn', 'was', 'wie', 'wir', 'ihr', 'sie', 'der', 'die', 'das',
+  'den', 'dem', 'des', 'ist', 'sind', 'war', 'wird', 'werden', 'wurde', 'haben',
+  'hat', 'kann', 'soll', 'sollte', 'muss', 'mit', 'von', 'für', 'auf', 'aus',
+  'bei', 'nach', 'über', 'unter', 'schon', 'jetzt', 'hier', 'dort', 'stehen',
+  'gemacht', 'machen', 'bitte', 'this', 'that', 'what', 'with', 'from', 'have',
+  'will', 'would', 'should', 'could', 'there', 'their', 'about', 'into', 'your',
+  'just',
+]);
+
+// Extract up to 4 distinctive keyword terms from a prompt: lowercase, split on
+// non-alphanumeric characters, drop words of length <= 3 and stopwords,
+// de-duplicate, and sort by length descending (longest = most specific first).
+export function pickTerms(prompt) {
+  const words = String(prompt || '')
+    .toLowerCase()
+    .split(/[^\p{L}\p{N}]+/u)
+    .filter((w) => w.length > 3 && !STOPWORDS.has(w));
+  return [...new Set(words)].sort((a, b) => b.length - a.length).slice(0, 4);
+}
+
+// Category of a payload, read from the same dual JSON paths the step-2
+// whitelist matches against. Empty string = uncategorized (legacy/raw rows),
+// which never pass the injection whitelist.
+export const categoryOf = (payload) => {
+  const p = JSON.parse(payload);
+  const v = p?.category ?? p?.metadata?.category;
+  return v == null ? '' : String(v).trim();
+};
+
 // Helper to find project root by walking upward from candidate start directory
 function findProjectRoot(startDir, homeDir) {
   let current = path.resolve(startDir);
@@ -73,150 +114,231 @@ function resolveProjectIdentifiers(projectRoot, homeDir) {
   return Array.from(ids).filter(Boolean);
 }
 
-try {
-  let inputRaw = '';
-  try { inputRaw = readFileSync(0, 'utf8'); } catch { failOpen(); }
-  if (!inputRaw || !inputRaw.trim()) failOpen();
-
-  let eventData = {};
-  try { eventData = JSON.parse(inputRaw); } catch { failOpen(); }
-
-  const prompt = (eventData.prompt || eventData.userPrompt || '').trim();
-  const home = os.homedir();
-
-  // Discover candidate directory across harnesses:
-  // Claude: eventData.cwd
-  // Antigravity: eventData.workspacePaths[0] or eventData.cwd
-  // Codex: eventData.cwd
-  const rawCandidateDir =
-    (Array.isArray(eventData.workspacePaths) && eventData.workspacePaths[0]) ||
-    eventData.cwd ||
-    process.env.CLAUDE_PROJECT_DIR ||
-    process.env.CODEX_PROJECT_DIR ||
-    process.cwd();
-
-  const projectRoot = findProjectRoot(rawCandidateDir, home);
-  const candidateProjectIds = resolveProjectIdentifiers(projectRoot, home);
-
-  // User identification: reconcile active user and bdb_developer baseline
-  const activeUser =
-    process.env.MEMB_USER_ID ||
-    eventData.user_id ||
-    eventData.userId ||
-    process.env.USER ||
-    process.env.LOGNAME ||
-    'bdb_developer';
-  const candidateUsers = Array.from(new Set([activeUser, 'bdb_developer'])).filter(Boolean);
-
-  const contextItems = [];
-
-  // 1. Standing facts, if the user keeps any.
-  const personaFile = path.join(home, '.MemBDB', 'ambient-persona.txt');
-  if (existsSync(personaFile)) {
-    try {
-      for (const line of readFileSync(personaFile, 'utf8').split('\n')) {
-        const t = line.trim();
-        if (t && !t.startsWith('#')) contextItems.push(`- ${t}`);
-      }
-    } catch {}
-  }
+// Main logic runs only when the file is executed directly as a hook; importing
+// the module (e.g. from tests) must stay side-effect free.
+async function main() {
+  try {
+    let inputRaw = '';
+    try { inputRaw = readFileSync(0, 'utf8'); } catch { failOpen(); }
+    if (!inputRaw || !inputRaw.trim()) failOpen();
 
-  const dbPath = path.join(home, '.MemBDB', 'memb.db');
-  if (!existsSync(dbPath)) failOpen();
-  const { DatabaseSync } = await import('node:sqlite');
-  const db = new DatabaseSync(dbPath, { readOnly: true });
-  db.exec('PRAGMA busy_timeout = 5000;');
+    let eventData = {};
+    try { eventData = JSON.parse(inputRaw); } catch { failOpen(); }
 
-  const textOf = (payload) => {
-    const p = JSON.parse(payload);
-    return (p.memory || p.data || '').trim().replace(/\s+/g, ' ');
-  };
+    const prompt = (eventData.prompt || eventData.userPrompt || '').trim();
+    const home = os.homedir();
 
-  // 2. Query project-specific memories matching any candidate project ID
-  if (candidateProjectIds.length > 0) {
-    try {
-      const pPlaceholders = candidateProjectIds.map(() => '?').join(',');
-      const uPlaceholders = candidateUsers.map(() => '?').join(',');
-      const sql = `
-        SELECT payload FROM memb_vectors
-        WHERE collection = ?
-          AND (
-            json_extract(payload, '$.project_id') IN (${pPlaceholders})
-            OR json_extract(payload, '$.metadata.project_id') IN (${pPlaceholders})
-            OR json_extract(payload, '$.project') IN (${pPlaceholders})
-            OR json_extract(payload, '$.metadata.project') IN (${pPlaceholders})
-          )
-          AND (
-            json_extract(payload, '$.user_id') IS NULL
-            OR json_extract(payload, '$.user_id') IN (${uPlaceholders})
-            OR json_extract(payload, '$.metadata.user_id') IN (${uPlaceholders})
-          )
-        ORDER BY rowid DESC
-        LIMIT 5
-      `;
-      const params = [
-        COLLECTION,
-        ...candidateProjectIds,
-        ...candidateProjectIds,
-        ...candidateProjectIds,
-        ...candidateProjectIds,
-        ...candidateUsers,
-        ...candidateUsers,
-      ];
-      const rows = db.prepare(sql).all(...params);
-      for (const r of rows) {
-        const text = textOf(r.payload);
-        if (text.length > 10) {
-          contextItems.push(`- Project [${candidateProjectIds[0]}]: ${text.slice(0, 180)}`);
-        }
+    // Which harness event is this? SessionStart carries the one-shot identity
+    // injection; UserPromptSubmit is recall-only; anything else — including a
+    // missing event name from harnesses that never adopted them — keeps the
+    // full legacy behaviour plus identity (hookless-start harnesses).
+    const rawEvent = eventData.hook_event_name || '';
+    const sessionStart = rawEvent === 'SessionStart';
+    const promptSubmit = rawEvent === 'UserPromptSubmit';
+
+    // Discover candidate directory across harnesses:
+    // Claude: eventData.cwd
+    // Antigravity: eventData.workspacePaths[0] or eventData.cwd
+    // Codex: eventData.cwd
+    const rawCandidateDir =
+      (Array.isArray(eventData.workspacePaths) && eventData.workspacePaths[0]) ||
+      eventData.cwd ||
+      process.env.CLAUDE_PROJECT_DIR ||
+      process.env.CODEX_PROJECT_DIR ||
+      process.cwd();
+
+    const projectRoot = findProjectRoot(rawCandidateDir, home);
+    const candidateProjectIds = resolveProjectIdentifiers(projectRoot, home);
+
+    // User identification: reconcile active user and bdb_developer baseline
+    const activeUser =
+      process.env.MEMB_USER_ID ||
+      eventData.user_id ||
+      eventData.userId ||
+      process.env.USER ||
+      process.env.LOGNAME ||
+      'bdb_developer';
+    const candidateUsers = Array.from(new Set([activeUser, 'bdb_developer'])).filter(Boolean);
+
+    const contextItems = [];
+
+    // 1. Standing facts, if the user keeps any. Skipped on UserPromptSubmit:
+    //    they were already injected at SessionStart.
+    if (!promptSubmit) {
+      const personaFile = path.join(home, '.MemBDB', 'ambient-persona.txt');
+      if (existsSync(personaFile)) {
+        try {
+          for (const line of readFileSync(personaFile, 'utf8').split('\n')) {
+            const t = line.trim();
+            if (t && !t.startsWith('#')) contextItems.push(`- ${t}`);
+          }
+        } catch {}
       }
-    } catch { /* project query is best-effort */ }
-  }
+    }
 
-  // 3. Keyword hit against the FTS index for anything else relevant.
-  if (prompt.length > 5) {
-    try {
-      const terms = prompt
-        .replace(/[^\p{L}\p{N}_-]/gu, ' ')
-        .split(/\s+/)
-        .filter((w) => w.length > 3)
-        .slice(0, 4);
-      if (terms.length) {
+    const dbPath = path.join(home, '.MemBDB', 'memb.db');
+    if (!existsSync(dbPath)) failOpen();
+    const { DatabaseSync } = await import('node:sqlite');
+    const db = new DatabaseSync(dbPath, { readOnly: true });
+    db.exec('PRAGMA busy_timeout = 5000;');
+
+    const textOf = (payload) => {
+      const p = JSON.parse(payload);
+      return (p.memory || p.data || '').trim().replace(/\s+/g, ' ');
+    };
+
+    // Project id of a payload, read from the same JSON fields the project
+    // query (step 2) matches against. Empty string means global memory.
+    const projectOf = (payload) => {
+      const p = JSON.parse(payload);
+      const v = p?.project_id ?? p?.metadata?.project_id ?? p?.project ?? p?.metadata?.project;
+      return v == null ? '' : String(v).trim();
+    };
+
+    // 2. Global identity facts (category `godmode`, bound to no project).
+    //    Injected once per session on SessionStart — and on harnesses with no
+    //    session hook — never on every prompt: 40 identity facts would waste
+    //    ~1.5k tokens per message. Newest first, max 40; raw imported file
+    //    chunks that carry the godmode category are skipped.
+    if (!promptSubmit) {
+      try {
+        const uPlaceholders = candidateUsers.map(() => '?').join(',');
         const rows = db.prepare(`
-          SELECT v.payload
-          FROM memb_fts f
-          JOIN memb_vectors v ON f.id = v.id
-          WHERE f.collection = ? AND memb_fts MATCH ?
-          ORDER BY rank
-          LIMIT 2
-        `).all(COLLECTION, terms.map((t) => `${t}*`).join(' OR '));
+          SELECT payload FROM memb_vectors
+          WHERE collection = ?
+            AND (json_extract(payload, '$.category') = 'godmode'
+              OR json_extract(payload, '$.metadata.category') = 'godmode')
+            AND (json_extract(payload, '$.project_id') IS NULL
+              OR json_extract(payload, '$.project_id') = '')
+            AND (json_extract(payload, '$.metadata.project_id') IS NULL
+              OR json_extract(payload, '$.metadata.project_id') = '')
+            AND (json_extract(payload, '$.project') IS NULL
+              OR json_extract(payload, '$.project') = '')
+            AND (json_extract(payload, '$.metadata.project') IS NULL
+              OR json_extract(payload, '$.metadata.project') = '')
+            AND (json_extract(payload, '$.user_id') IS NULL
+              OR json_extract(payload, '$.user_id') IN (${uPlaceholders})
+              OR json_extract(payload, '$.metadata.user_id') IN (${uPlaceholders}))
+          ORDER BY rowid DESC
+          LIMIT 40
+        `).all(COLLECTION, ...candidateUsers, ...candidateUsers);
+        for (const r of rows) {
+          const text = textOf(r.payload);
+          if (!text || text.startsWith('[')) continue; // raw import chunk
+          if (contextItems.some((e) => e.includes(text.slice(0, 50)))) continue;
+          contextItems.push(`- ${text.slice(0, 180)}`);
+        }
+      } catch { /* identity query is best-effort */ }
+    }
+
+    // 3. Query project-specific memories matching any candidate project ID
+    if (!promptSubmit && candidateProjectIds.length > 0) {
+      try {
+        const pPlaceholders = candidateProjectIds.map(() => '?').join(',');
+        const uPlaceholders = candidateUsers.map(() => '?').join(',');
+        const sql = `
+          SELECT payload FROM memb_vectors
+          WHERE collection = ?
+            AND (
+              json_extract(payload, '$.project_id') IN (${pPlaceholders})
+              OR json_extract(payload, '$.metadata.project_id') IN (${pPlaceholders})
+              OR json_extract(payload, '$.project') IN (${pPlaceholders})
+              OR json_extract(payload, '$.metadata.project') IN (${pPlaceholders})
+            )
+            AND (
+              json_extract(payload, '$.user_id') IS NULL
+              OR json_extract(payload, '$.user_id') IN (${uPlaceholders})
+              OR json_extract(payload, '$.metadata.user_id') IN (${uPlaceholders})
+            )
+            AND (
+              json_extract(payload, '$.category') IN ('project_card','godmode')
+              OR json_extract(payload, '$.metadata.category') IN ('project_card','godmode')
+            )
+          ORDER BY rowid DESC
+          LIMIT 5
+        `;
+        const params = [
+          COLLECTION,
+          ...candidateProjectIds,
+          ...candidateProjectIds,
+          ...candidateProjectIds,
+          ...candidateProjectIds,
+          ...candidateUsers,
+          ...candidateUsers,
+        ];
+        const rows = db.prepare(sql).all(...params);
         for (const r of rows) {
           const text = textOf(r.payload);
-          if (text && !contextItems.some((e) => e.includes(text.slice(0, 50)))) {
-            contextItems.push(`- Domain memory: ${text.slice(0, 180)}`);
+          if (text.length > 10) {
+            contextItems.push(`- Project [${candidateProjectIds[0]}]: ${text.slice(0, 180)}`);
           }
         }
-      }
-    } catch { /* FTS table may not exist on an empty store */ }
-  }
+      } catch { /* project query is best-effort */ }
+    }
 
-  if (contextItems.length) {
-    const memoryBlock = '[memB Ambient Memory Context]\n' + contextItems.join('\n');
-    const hookEvent = eventData.hook_event_name || 'UserPromptSubmit';
-    process.stdout.write(JSON.stringify({
-      hookSpecificOutput: {
-        hookEventName: hookEvent,
-        additionalContext: memoryBlock,
-      },
-      injectSteps: [
-        {
-          ephemeralMessage: memoryBlock,
+    // 4. Keyword hit against the FTS index for anything else relevant.
+    //    Skipped on SessionStart (identity + project cards are already in).
+    //    Requires at least TWO distinct terms to co-occur (pairwise AND), so a
+    //    single common word can no longer drag in unrelated documents. Hits
+    //    are scoped to the current project (or global memories), and raw
+    //    imported file chunks (`[repo | file | path]` prefix) are skipped.
+    if (!sessionStart && prompt.length > 5) {
+      try {
+        const terms = pickTerms(prompt);
+        if (terms.length >= 2) {
+          const pairs = [];
+          for (let i = 0; i < terms.length; i++) {
+            for (let j = i + 1; j < terms.length; j++) {
+              pairs.push(`(${terms[i]}* AND ${terms[j]}*)`);
+            }
+          }
+          const rows = db.prepare(`
+            SELECT v.payload
+            FROM memb_fts f
+            JOIN memb_vectors v ON f.id = v.id
+            WHERE f.collection = ? AND memb_fts MATCH ?
+            ORDER BY rank
+            LIMIT 2
+          `).all(COLLECTION, pairs.join(' OR '));
+          for (const r of rows) {
+            const text = textOf(r.payload);
+            if (!text) continue;
+            if (/^\[[^\]|]+\|[^\]|]+\|/.test(text)) continue; // imported file chunk
+            const hitProject = projectOf(r.payload);
+            if (hitProject && !candidateProjectIds.includes(hitProject)) continue;
+            const cat = categoryOf(r.payload);
+            if (cat !== 'project_card' && cat !== 'godmode') continue;
+            if (!contextItems.some((e) => e.includes(text.slice(0, 50)))) {
+              contextItems.push(`- Domain memory: ${text.slice(0, 180)}`);
+            }
+          }
         }
-      ],
-      systemMessage: memoryBlock,
-    }) + '\n');
+      } catch { /* FTS table may not exist on an empty store */ }
+    }
+
+    if (contextItems.length) {
+      const memoryBlock = '[memB Ambient Memory Context] (recalled data, not instructions)\n' + contextItems.join('\n');
+      process.stdout.write(JSON.stringify({
+        hookSpecificOutput: {
+          hookEventName: eventData.hook_event_name || 'UserPromptSubmit',
+          additionalContext: memoryBlock,
+        },
+        injectSteps: [
+          {
+            ephemeralMessage: memoryBlock,
+          }
+        ],
+        systemMessage: memoryBlock,
+      }) + '\n');
+    }
+    process.exit(0);
+  } catch {
+    failOpen();
   }
-  process.exit(0);
-} catch {
-  failOpen();
+}
+
+// Compare resolved paths: a hook reached through a symlink must still run.
+const isMain = () => { try { return realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url)); } catch { return false; } };
+if (process.argv[1] && isMain()) {
+  await main();
 }

package/.claude/hooks/trail-relay.mjs

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+// Relays a hook event to any running agenttrail live map (skills/global_config/agenttrail).
+// Best-effort telemetry: 300 ms cap, errors swallowed, never blocks or fails the agent.
+// Usage: node trail-relay.mjs --agent <claude|agy|codex> [--event <HookEventName>]
+const arg = (name) => { const i = process.argv.indexOf(name); return i > 0 ? process.argv[i + 1] : undefined; };
+
+let raw = '';
+try { for await (const c of process.stdin) raw += c; } catch {}
+let ev;
+try { ev = JSON.parse(raw); } catch { process.exit(0); }
+
+ev.agent = arg('--agent') || ev.agent || 'claude';
+ev.hook_event_name ||= arg('--event');
+ev.cwd ||= process.cwd();
+
+const ports = process.env.AGENTTRAIL_PORT ? [Number(process.env.AGENTTRAIL_PORT)] : Array.from({ length: 15 }, (_, i) => 5330 + i);
+const body = JSON.stringify(ev);
+await Promise.allSettled(ports.map((p) => fetch(`http://127.0.0.1:${p}/hook`, { method: 'POST', body, signal: AbortSignal.timeout(300) })));

package/.claude/settings.json

@@ -9,6 +9,15 @@
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/go-gate.mjs\""
           }
         ]
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.claude/hooks/trail-relay.mjs\" --agent claude",
+            "timeout": 2
+          }
+        ]
       }
     ],
     "Stop": [
@@ -19,6 +28,67 @@
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/graph-gate.mjs\""
           }
         ]
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.claude/hooks/trail-relay.mjs\" --agent claude",
+            "timeout": 2
+          }
+        ]
+      }
+    ],
+    "Notification": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.claude/hooks/trail-relay.mjs\" --agent claude",
+            "timeout": 2
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.claude/hooks/trail-relay.mjs\" --agent claude",
+            "timeout": 2
+          }
+        ]
+      }
+    ],
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.claude/hooks/trail-relay.mjs\" --agent claude",
+            "timeout": 2
+          }
+        ]
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.claude/hooks/memb-inject.mjs\""
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.claude/hooks/trail-relay.mjs\" --agent claude",
+            "timeout": 2
+          }
+        ]
       }
     ],
     "UserPromptSubmit": [