@miniaxolotl/grove-claude-plugin 1.10.0 → 1.11.1

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "grove",
-  "version": "1.10.0",
+  "version": "1.11.1",
   "description": "Private memory across your agents: remember, recall, inspect and forget.",
   "author": {
     "name": "Bramble Labs Inc."

package/README.md

@@ -4,6 +4,8 @@ Install `grove@grove` from the `miniaxolotl/grove` marketplace, or use
 `grove init --client claude --url https://YOUR-GROVE-API`. Includes the four memory
 tools, setup/memory skills, optional SessionStart recall and complete prebuilt
 executables. No lifecycle build or database installation is required.
+The actual Claude host needs Node 22+ on PATH. Use `grove doctor --client claude`
+for local checks, or add `--probe`; separately verify the running host's MCP status.
 
 ```text
 /plugin install grove --marketplace miniaxolotl/grove

package/dist/bridge.js

@@ -36,7 +36,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var define_GROVE_TELEMETRY_default;
 var init_define_GROVE_TELEMETRY = __esm({
   "<define:__GROVE_TELEMETRY__>"() {
-    define_GROVE_TELEMETRY_default = { enabled: true, revision: "cb9b1a44ac8afee6d1c1aafd0f8a34e30c1e8d52", version: "1.10.0", component: "cli", key: "phc_AqVrjhk7W2X2pFjyngY7uWxcSSRREfJhgr8mBmKbXYEh", cliDsn: "https://3f6d0711b5890dea4ce8e6ccf2a1a7fd@o4511632209346560.ingest.us.sentry.io/4512290791620608", apiDsn: "https://4524e8910e318110277babdfe818999b@o4511632209346560.ingest.us.sentry.io/4512290791489536" };
+    define_GROVE_TELEMETRY_default = { enabled: true, revision: "ad1b9fe27941b0dc370ee3a0c4742dd6215e9f41", version: "1.11.1", component: "cli", key: "phc_AqVrjhk7W2X2pFjyngY7uWxcSSRREfJhgr8mBmKbXYEh", cliDsn: "https://3f6d0711b5890dea4ce8e6ccf2a1a7fd@o4511632209346560.ingest.us.sentry.io/4512290791620608", apiDsn: "https://4524e8910e318110277babdfe818999b@o4511632209346560.ingest.us.sentry.io/4512290791489536" };
   }
 });
 
@@ -48447,7 +48447,23 @@ var ApiClient = class {
         redirect: "error",
         cache: "no-store"
       });
-      const result = await response.json();
+      let result;
+      try {
+        result = await response.json();
+      } catch (error48) {
+        if (signal.aborted || !(error48 instanceof SyntaxError)) throw error48;
+        throw new GroveError(
+          "invalid_response",
+          "Invalid Grove API response",
+          response.ok ? 502 : response.status
+        );
+      }
+      if (!result || typeof result !== "object" || Array.isArray(result) || typeof result.success !== "boolean" || !result.success && (!result.error || typeof result.error.code !== "string" || typeof result.error.message !== "string"))
+        throw new GroveError(
+          "invalid_response",
+          "Invalid Grove API response",
+          response.ok ? 502 : response.status
+        );
       if (!response.ok || !result.success) {
         const error48 = !result.success ? result.error : void 0;
         throw new GroveError(
@@ -48465,6 +48481,7 @@ var ApiClient = class {
       completed = true;
       return result.data;
     } catch (error48) {
+      options.signal?.throwIfAborted();
       if (error48 instanceof GroveError) throw error48;
       throw new GroveError(
         signal.aborted ? "timeout" : "unreachable",
@@ -48500,9 +48517,14 @@ async function atomicJson(path, value) {
 }
 async function readConfig() {
   try {
-    return JSON.parse(
+    const value = JSON.parse(
       await readFile(join3(configDirectory(), "config.json"), "utf8")
     );
+    const record2 = (entry) => !!entry && typeof entry === "object" && !Array.isArray(entry);
+    const strings = (entry) => record2(entry) && Object.values(entry).every((item) => typeof item === "string");
+    if (!record2(value) || value.origin !== void 0 && typeof value.origin !== "string" || value.paused !== void 0 && typeof value.paused !== "boolean" || value.generation !== void 0 && (!Number.isSafeInteger(value.generation) || Number(value.generation) < 0) || value.origins !== void 0 && !strings(value.origins) || value.accounts !== void 0 && (!record2(value.accounts) || !Object.values(value.accounts).every(strings)))
+      throw new Error("Invalid local configuration");
+    return value;
   } catch (error48) {
     if (error48.code === "ENOENT") return {};
     throw new GroveError(
@@ -48610,6 +48632,21 @@ function credentialPath(origin, agent, accountId) {
     `credentials-${hash2(`${origin}|${agent}|${accountId}`)}.json`
   );
 }
+var credentialAuthSchema = external_exports.object({
+  key: external_exports.string().trim().min(1).optional(),
+  tokens: OAuthTokensSchema.extend({
+    access_token: external_exports.string().trim().min(1),
+    token_type: external_exports.string().trim().min(1),
+    refresh_token: external_exports.string().trim().min(1).optional()
+  }).optional(),
+  expiresAt: external_exports.number().nonnegative().optional(),
+  client: OAuthClientInformationSchema.extend({
+    client_id: external_exports.string().trim().min(1)
+  }).optional(),
+  redirectUrl: external_exports.url().optional()
+}).refine(
+  (value) => !!value.key || !!(value.tokens && value.client && value.redirectUrl)
+);
 async function loadCredentials(origin, agent) {
   const accountId = (await readConfig()).accounts?.[origin]?.[agent];
   if (!accountId)
@@ -48618,20 +48655,37 @@ async function loadCredentials(origin, agent) {
       `Run grove login --client ${agent} --url ${origin}`,
       401
     );
+  let value;
   try {
-    const value = JSON.parse(
+    value = JSON.parse(
       await readFile(credentialPath(origin, agent, accountId), "utf8")
     );
-    if (value.origin !== origin || value.agent !== agent || value.accountId !== accountId)
-      throw new Error();
-    return value;
-  } catch {
+  } catch (error48) {
+    if (error48.code !== "ENOENT")
+      throw new GroveError(
+        "credential_store_unavailable",
+        "Grove credentials could not be read. Check local store permissions and integrity; no credentials were changed.",
+        503
+      );
     throw new GroveError(
       "sign_in_required",
-      "Grove credentials are missing or invalid; sign in again",
+      "Grove credentials are missing; sign in again",
       401
     );
   }
+  if (!value || value.origin !== origin || value.agent !== agent || value.accountId !== accountId)
+    throw new GroveError(
+      "sign_in_required",
+      "Grove credential identity does not match; sign in again",
+      401
+    );
+  if (!credentialAuthSchema.safeParse(value).success)
+    throw new GroveError(
+      "credential_store_unavailable",
+      "Grove credentials are incomplete or damaged. Check local store integrity; no credentials were changed.",
+      503
+    );
+  return value;
 }
 var BrowserOAuthProvider = class {
   constructor(data, redirect) {