@mnemonik/codex-hooks 0.1.0

package/dist/hook.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/hook.js

@@ -0,0 +1,306 @@
+#!/usr/bin/env node
+import { existsSync } from 'node:fs';
+import { stdout, stderr, stdin, exit } from 'node:process';
+import { relative } from 'node:path';
+import { extractToolFileTargets } from './lib/applyPatch.js';
+import { additionalContext, continueStop, denyPreToolUse, systemMessage, trimContext, } from './lib/codexOutput.js';
+import { isNonInteractive, parseBypass, resolveConfig } from './lib/env.js';
+import { fetchHookContext, fetchSnapshot, reportBypass, reportGateFired, trackIdeEdit, } from './lib/http.js';
+import { BUILT_IN_DESTRUCTIVE, matchCommand, tokenize } from './lib/shellTokens.js';
+const POLICY_DEDUP_WINDOW_MS = 60_000;
+const MUST_CONFIRM_DEDUP_WINDOW_MS = 60_000;
+async function readStdin() {
+    return new Promise((res) => {
+        let buf = '';
+        let settled = false;
+        const finish = (value) => {
+            if (settled)
+                return;
+            settled = true;
+            res(value);
+        };
+        stdin.setEncoding('utf8');
+        stdin.on('data', (chunk) => {
+            buf += chunk;
+            if (buf.length > 1_048_576)
+                finish(null);
+        });
+        stdin.on('end', () => {
+            try {
+                finish(JSON.parse(buf));
+            }
+            catch {
+                finish(null);
+            }
+        });
+        stdin.on('error', () => finish(null));
+    });
+}
+function writeOutput(output) {
+    if (output)
+        stdout.write(JSON.stringify(output));
+    exit(0);
+}
+function writeAllow() {
+    exit(0);
+}
+function warnAndAllow(message) {
+    stderr.write(`mnemonik-codex-hook: ${message}\n`);
+    exit(0);
+}
+function sessionId(input) {
+    return input.session_id ?? input.turn_id ?? 'codex-unknown-session';
+}
+async function emitGateFired(input, config, tool, mode, outcome) {
+    await reportGateFired({
+        server: config.server,
+        apiKey: config.apiKey,
+        cwd: input.cwd,
+        codexSessionId: sessionId(input),
+        tool,
+        mode,
+        outcome,
+    });
+}
+function covered(snapshot, cwd, absolutePath) {
+    const rel = relative(cwd, absolutePath);
+    return snapshot.coveredFiles.includes(absolutePath) || snapshot.coveredFiles.includes(rel);
+}
+async function getSnapshotOrFailOpen(input, config, tool, mode) {
+    if (!config.apiKey) {
+        warnAndAllow('MNEMONIK_API_KEY missing - fail-open. Run mnemonik-codex-hooks install.');
+    }
+    const snapshot = await fetchSnapshot({
+        server: config.server,
+        apiKey: config.apiKey,
+        cwd: input.cwd,
+        codexSessionId: sessionId(input),
+    });
+    if (!snapshot) {
+        await emitGateFired(input, config, tool, mode, 'unreachable');
+        warnAndAllow('mnemonik server unreachable - fail-open.');
+    }
+    if (!snapshot.ok && snapshot.reason !== 'no_active_session') {
+        await emitGateFired(input, config, tool, mode, snapshot.reason ?? 'snapshot_not_ok');
+        writeAllow();
+    }
+    return snapshot;
+}
+async function handleContextEvent(input, config) {
+    if (config.contextualHooks.promptContext === 'off')
+        writeAllow();
+    if (!config.apiKey)
+        writeAllow();
+    const ctx = await fetchHookContext({
+        server: config.server,
+        apiKey: config.apiKey,
+        cwd: input.cwd,
+        codexSessionId: sessionId(input),
+        event: input.hook_event_name,
+        prompt: input.prompt,
+        toolName: input.tool_name,
+    });
+    if (!ctx?.ok || !ctx.additionalContext)
+        writeAllow();
+    writeOutput(additionalContext(input.hook_event_name, trimContext(ctx.additionalContext)));
+}
+async function handlePreEdit(input, config) {
+    const mode = config.contextualHooks.preEditGate;
+    const tool = input.tool_name ?? 'apply_patch';
+    if (mode === 'off') {
+        await emitGateFired(input, config, tool, 'off', 'off');
+        writeAllow();
+    }
+    const targets = extractToolFileTargets(tool, input.tool_input, input.cwd);
+    const existingTargets = targets.filter((t) => t.operation !== 'add' && existsSync(t.path));
+    if (existingTargets.length === 0) {
+        await emitGateFired(input, config, tool, mode, 'new_or_no_file');
+        writeAllow();
+    }
+    const snapshot = await getSnapshotOrFailOpen(input, config, tool, mode);
+    if (!snapshot)
+        writeAllow();
+    const uncovered = existingTargets.filter((t) => !covered(snapshot, input.cwd, t.path));
+    if (uncovered.length === 0) {
+        await emitGateFired(input, config, tool, mode, 'covered');
+        writeAllow();
+    }
+    const files = uncovered.map((t) => relative(input.cwd, t.path));
+    if (mode === 'advisory') {
+        await emitGateFired(input, config, tool, mode, 'nudge');
+        writeOutput(systemMessage([
+            `Mnemonik: file_context has not been called for ${files.map((f) => `"${f}"`).join(', ')} in this session.`,
+            'Codex PreToolUse cannot inject additionalContext reliably, so this is a systemMessage advisory.',
+            'Recommended: call mnemonik.file_context({ filePaths: [...] }) before editing existing files.',
+        ].join(' ')));
+    }
+    await emitGateFired(input, config, tool, mode, 'deny');
+    writeOutput(denyPreToolUse([
+        'MNEMONIK_FILE_CONTEXT_REQUIRED',
+        `Edit blocked: file_context has not been called for ${files.map((f) => `"${f}"`).join(', ')} in this session.`,
+        'Fix: call mnemonik.file_context({ filePaths: [...] }) first.',
+        'Bypass: MNEMONIK_BYPASS_HOOKS=1 MNEMONIK_BYPASS_TYPE=<typo|formatting|regenerated|already_grounded|other>.',
+    ].join('\n')));
+}
+async function handlePreBash(input, config) {
+    const mode = config.contextualHooks.preBashGate;
+    if (mode === 'off') {
+        await emitGateFired(input, config, 'Bash', 'off', 'off');
+        writeAllow();
+    }
+    const command = typeof input.tool_input?.command === 'string' ? input.tool_input.command : '';
+    if (!command.trim())
+        writeAllow();
+    const snapshot = await getSnapshotOrFailOpen(input, config, 'Bash', mode);
+    if (!snapshot)
+        writeAllow();
+    const projectForbidden = snapshot.policies.forbiddenCommand.map((p) => p.pattern);
+    const projectMustConfirm = snapshot.policies.mustConfirm.map((p) => p.pattern);
+    const forbiddenPatterns = [...BUILT_IN_DESTRUCTIVE, ...projectForbidden];
+    const { commands } = tokenize(command);
+    let forbiddenHit = null;
+    let mustConfirmHit = null;
+    for (const tokens of commands) {
+        forbiddenHit = forbiddenHit ?? matchCommand(tokens, forbiddenPatterns);
+        mustConfirmHit = mustConfirmHit ?? matchCommand(tokens, projectMustConfirm);
+        if (forbiddenHit && mustConfirmHit)
+            break;
+    }
+    if (!forbiddenHit && !mustConfirmHit) {
+        await emitGateFired(input, config, 'Bash', mode, 'no_match');
+        writeAllow();
+    }
+    const now = snapshot.now;
+    const checkedRecently = (pattern) => {
+        const ts = snapshot.recentPolicyChecks[pattern];
+        return typeof ts === 'number' && now - ts < POLICY_DEDUP_WINDOW_MS;
+    };
+    const pausedRecently = typeof snapshot.mustConfirmPauseAt === 'number' &&
+        now - snapshot.mustConfirmPauseAt < MUST_CONFIRM_DEDUP_WINDOW_MS;
+    const hit = forbiddenHit ?? mustConfirmHit;
+    if (forbiddenHit && checkedRecently(forbiddenHit)) {
+        await emitGateFired(input, config, 'Bash', mode, 'dedup_checked');
+        writeAllow();
+    }
+    if (mustConfirmHit && (checkedRecently(mustConfirmHit) || pausedRecently)) {
+        await emitGateFired(input, config, 'Bash', mode, 'dedup_paused');
+        writeAllow();
+    }
+    if (mode === 'advisory') {
+        const kind = forbiddenHit ? 'forbiddenCommand' : 'mustConfirm';
+        await emitGateFired(input, config, 'Bash', mode, `advisory_${kind}`);
+        writeOutput(systemMessage([
+            `Mnemonik policy hit (${kind}): pattern "${hit}" matched the command.`,
+            'Recommended: call mnemonik.policy({ action: "check", command }) before running, or pause for user confirmation where required.',
+        ].join(' ')));
+    }
+    await emitGateFired(input, config, 'Bash', mode, 'deny');
+    writeOutput(denyPreToolUse([
+        'MNEMONIK_POLICY_GATE',
+        `Bash blocked: pattern "${hit}" requires a manual policy check or mustConfirm pause first.`,
+        'Fix: call mnemonik.policy({ action: "check", command }) and act on the response.',
+    ].join('\n')));
+}
+async function handlePostTool(input, config) {
+    const tool = input.tool_name ?? '';
+    const targets = extractToolFileTargets(tool, input.tool_input, input.cwd);
+    for (const target of targets) {
+        await trackIdeEdit({
+            server: config.server,
+            apiKey: config.apiKey,
+            sessionId: sessionId(input),
+            filePath: target.path,
+        });
+    }
+    if (!config.apiKey)
+        writeAllow();
+    const ctx = await fetchHookContext({
+        server: config.server,
+        apiKey: config.apiKey,
+        cwd: input.cwd,
+        codexSessionId: sessionId(input),
+        event: 'PostToolUse',
+        toolName: tool,
+        filePaths: targets.map((t) => t.path),
+    });
+    if (!ctx?.ok || !ctx.additionalContext)
+        writeAllow();
+    writeOutput(additionalContext('PostToolUse', trimContext(ctx.additionalContext, 8_000)));
+}
+async function handleStop(input, config) {
+    if (config.contextualHooks.checkpointPressure === 'off' || input.stop_hook_active === true) {
+        writeAllow();
+    }
+    if (!config.apiKey)
+        writeAllow();
+    const ctx = await fetchHookContext({
+        server: config.server,
+        apiKey: config.apiKey,
+        cwd: input.cwd,
+        codexSessionId: sessionId(input),
+        event: 'Stop',
+        lastAssistantMessage: input.last_assistant_message,
+    });
+    if (!ctx?.ok || !ctx.continuationReason)
+        writeAllow();
+    writeOutput(continueStop(trimContext(ctx.continuationReason, 4_000)));
+}
+async function dispatch(input) {
+    if (isNonInteractive())
+        writeAllow();
+    const bypass = parseBypass();
+    if (bypass.invalidReason) {
+        stderr.write(`mnemonik-codex-hook: invalid bypass envelope - ${bypass.invalidReason}\n`);
+    }
+    const config = await resolveConfig(input.cwd);
+    if (bypass.active) {
+        await reportBypass({
+            server: config.server,
+            apiKey: config.apiKey,
+            cwd: input.cwd,
+            codexSessionId: sessionId(input),
+            tool: input.tool_name ?? input.hook_event_name,
+            bypassType: bypass.type ?? 'unknown',
+            detail: bypass.detail,
+        });
+        writeAllow();
+    }
+    switch (input.hook_event_name) {
+        case 'SessionStart':
+        case 'UserPromptSubmit':
+            await handleContextEvent(input, config);
+            break;
+        case 'PreToolUse':
+            if (input.tool_name === 'apply_patch' ||
+                input.tool_name === 'Edit' ||
+                input.tool_name === 'Write') {
+                await handlePreEdit(input, config);
+            }
+            if (input.tool_name === 'Bash' || input.tool_name === 'shell') {
+                await handlePreBash(input, config);
+            }
+            writeAllow();
+            break;
+        case 'PostToolUse':
+            await handlePostTool(input, config);
+            break;
+        case 'Stop':
+            await handleStop(input, config);
+            break;
+        default:
+            writeAllow();
+    }
+}
+(async () => {
+    try {
+        const input = await readStdin();
+        if (!input)
+            writeAllow();
+        await dispatch(input);
+    }
+    catch (err) {
+        stderr.write(`mnemonik-codex-hook: dispatcher error (fail-open) - ${err instanceof Error ? err.message : String(err)}\n`);
+        writeAllow();
+    }
+})();
+//# sourceMappingURL=hook.js.map

package/dist/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../src/hook.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,eAAe,EACf,YAAY,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGpF,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAE5C,KAAK,UAAU,SAAS;IACtB,OAAO,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,KAA4B,EAAE,EAAE;YAC9C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,CAAC;QACb,CAAC,CAAC;QACF,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACjC,GAAG,IAAI,KAAK,CAAC;YACb,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACnB,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,MAA8B;IACjD,IAAI,MAAM;QAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,CAAC,KAAK,CAAC,wBAAwB,OAAO,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,CAAC,CAAC;AACV,CAAC;AAED,SAAS,SAAS,CAAC,KAAqB;IACtC,OAAO,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,KAAqB,EACrB,MAAkB,EAClB,IAAY,EACZ,IAAoC,EACpC,OAAe;IAEf,MAAM,eAAe,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC;QAChC,IAAI;QACJ,IAAI;QACJ,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,QAA0B,EAAE,GAAW,EAAE,YAAoB;IAC5E,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC7F,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,KAAqB,EACrB,MAAkB,EAClB,IAAY,EACZ,IAAoC;IAEpC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,YAAY,CAAC,yEAAyE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAO;QACtB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC9D,YAAY,CAAC,0CAA0C,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QAC5D,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,IAAI,iBAAiB,CAAC,CAAC;QACrF,UAAU,EAAE,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,KAAqB,EAAE,MAAkB;IACzE,IAAI,MAAM,CAAC,eAAe,CAAC,aAAa,KAAK,KAAK;QAAE,UAAU,EAAE,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,UAAU,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC;QAChC,KAAK,EAAE,KAAK,CAAC,eAAe;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB;QAAE,UAAU,EAAE,CAAC;IACrD,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,eAAe,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAqB,EAAE,MAAkB;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,aAAa,CAAC;IAC9C,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACvD,UAAU,EAAE,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACjE,UAAU,EAAE,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ;QAAE,UAAU,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1D,UAAU,EAAE,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,WAAW,CACT,aAAa,CACX;YACE,kDAAkD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB;YAC1G,iGAAiG;YACjG,8FAA8F;SAC/F,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CACF,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACvD,WAAW,CACT,cAAc,CACZ;QACE,gCAAgC;QAChC,sDAAsD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB;QAC9G,8DAA8D;QAC9D,4GAA4G;KAC7G,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAqB,EAAE,MAAkB;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC;IAChD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,UAAU,EAAE,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,UAAU,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ;QAAE,UAAU,EAAE,CAAC;IAC5B,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAClF,MAAM,kBAAkB,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/E,MAAM,iBAAiB,GAAG,CAAC,GAAG,oBAAoB,EAAE,GAAG,gBAAgB,CAAC,CAAC;IACzE,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEvC,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,YAAY,GAAG,YAAY,IAAI,YAAY,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QACvE,cAAc,GAAG,cAAc,IAAI,YAAY,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC5E,IAAI,YAAY,IAAI,cAAc;YAAE,MAAM;IAC5C,CAAC;IACD,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7D,UAAU,EAAE,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;IACzB,MAAM,eAAe,GAAG,CAAC,OAAe,EAAW,EAAE;QACnD,MAAM,EAAE,GAAG,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,GAAG,GAAG,EAAE,GAAG,sBAAsB,CAAC;IACrE,CAAC,CAAC;IACF,MAAM,cAAc,GAClB,OAAO,QAAQ,CAAC,kBAAkB,KAAK,QAAQ;QAC/C,GAAG,GAAG,QAAQ,CAAC,kBAAkB,GAAG,4BAA4B,CAAC;IACnE,MAAM,GAAG,GAAG,YAAY,IAAI,cAAe,CAAC;IAC5C,IAAI,YAAY,IAAI,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;QAClD,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QAClE,UAAU,EAAE,CAAC;IACf,CAAC;IACD,IAAI,cAAc,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,EAAE,CAAC;QAC1E,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACjE,UAAU,EAAE,CAAC;IACf,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC;QAC/D,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;QACrE,WAAW,CACT,aAAa,CACX;YACE,wBAAwB,IAAI,eAAe,GAAG,wBAAwB;YACtE,gIAAgI;SACjI,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CACF,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACzD,WAAW,CACT,cAAc,CACZ;QACE,sBAAsB;QACtB,0BAA0B,GAAG,8DAA8D;QAC3F,kFAAkF;KACnF,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAqB,EAAE,MAAkB;IACrE,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,YAAY,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC;YAC3B,QAAQ,EAAE,MAAM,CAAC,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,UAAU,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC;QAChC,KAAK,EAAE,aAAa;QACpB,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KACtC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB;QAAE,UAAU,EAAE,CAAC;IACrD,WAAW,CAAC,iBAAiB,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAqB,EAAE,MAAkB;IACjE,IAAI,MAAM,CAAC,eAAe,CAAC,kBAAkB,KAAK,KAAK,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC3F,UAAU,EAAE,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,UAAU,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC;QAChC,KAAK,EAAE,MAAM;QACb,oBAAoB,EAAE,KAAK,CAAC,sBAAsB;KACnD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB;QAAE,UAAU,EAAE,CAAC;IACtD,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAAqB;IAC3C,IAAI,gBAAgB,EAAE;QAAE,UAAU,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,kDAAkD,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,YAAY,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC;YAChC,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,eAAe;YAC9C,UAAU,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;YACpC,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,UAAU,EAAE,CAAC;IACf,CAAC;IAED,QAAQ,KAAK,CAAC,eAAe,EAAE,CAAC;QAC9B,KAAK,cAAc,CAAC;QACpB,KAAK,kBAAkB;YACrB,MAAM,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM;QACR,KAAK,YAAY;YACf,IACE,KAAK,CAAC,SAAS,KAAK,aAAa;gBACjC,KAAK,CAAC,SAAS,KAAK,MAAM;gBAC1B,KAAK,CAAC,SAAS,KAAK,OAAO,EAC3B,CAAC;gBACD,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;gBAC9D,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACrC,CAAC;YACD,UAAU,EAAE,CAAC;YACb,MAAM;QACR,KAAK,aAAa;YAChB,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACpC,MAAM;QACR,KAAK,MAAM;YACT,MAAM,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAChC,MAAM;QACR;YACE,UAAU,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,CAAC,KAAK,IAAI,EAAE;IACV,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,UAAU,EAAE,CAAC;QACzB,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CACV,uDAAuD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC5G,CAAC;QACF,UAAU,EAAE,CAAC;IACf,CAAC;AACH,CAAC,CAAC,EAAE,CAAC"}

package/dist/install.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+declare function ensureCodexHooksFeature(configToml: string): string;
+export { ensureCodexHooksFeature };

package/dist/install.js

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+import { existsSync } from 'node:fs';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const HOOK_TAG = 'mnemonik-codex-hooks';
+function resolveDispatcherPath() {
+    const here = fileURLToPath(import.meta.url);
+    return resolve(dirname(here), 'hook.js');
+}
+function buildHookEntry(dispatcher, statusMessage, timeout = 5) {
+    return {
+        type: 'command',
+        command: `node ${JSON.stringify(dispatcher)}`,
+        timeout,
+        statusMessage,
+    };
+}
+function isMnemonikGroup(group) {
+    if (group.matcher === HOOK_TAG)
+        return true;
+    return Boolean(group.hooks?.some((h) => typeof h.command === 'string' && h.command.includes('codex-hooks')));
+}
+function patchHookGroup(groups, matcher, entry) {
+    const filtered = (groups ?? []).filter((g) => !isMnemonikGroup(g));
+    const group = { hooks: [entry] };
+    if (matcher !== undefined)
+        group.matcher = matcher;
+    filtered.push(group);
+    return filtered;
+}
+async function readHooksJson(path) {
+    if (!existsSync(path))
+        return {};
+    try {
+        const raw = await readFile(path, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`Could not parse ${path}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+async function writeJson(path, value) {
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, JSON.stringify(value, null, 2) + '\n', 'utf8');
+}
+function ensureCodexHooksFeature(configToml) {
+    if (/^\s*codex_hooks\s*=\s*true\s*$/m.test(configToml))
+        return configToml;
+    if (/^\s*codex_hooks\s*=/m.test(configToml)) {
+        return configToml.replace(/^\s*codex_hooks\s*=.*$/m, 'codex_hooks = true');
+    }
+    const featureHeader = configToml.match(/^\[features\]\s*$/m);
+    if (!featureHeader?.index && featureHeader?.index !== 0) {
+        const prefix = configToml.endsWith('\n') || configToml.length === 0 ? configToml : `${configToml}\n`;
+        return `${prefix}\n[features]\ncodex_hooks = true\n`;
+    }
+    const insertAt = featureHeader.index + featureHeader[0].length;
+    return `${configToml.slice(0, insertAt)}\ncodex_hooks = true${configToml.slice(insertAt)}`;
+}
+async function ensureConfigFlag(path) {
+    const raw = existsSync(path) ? await readFile(path, 'utf8') : '';
+    const next = ensureCodexHooksFeature(raw);
+    if (next !== raw) {
+        await mkdir(dirname(path), { recursive: true });
+        await writeFile(path, next.endsWith('\n') ? next : `${next}\n`, 'utf8');
+    }
+}
+async function main() {
+    const cwd = process.cwd();
+    const codexDir = join(cwd, '.codex');
+    const hooksPath = join(codexDir, 'hooks.json');
+    const configPath = join(codexDir, 'config.toml');
+    const dispatcher = resolveDispatcherPath();
+    if (!existsSync(dispatcher)) {
+        console.error(`mnemonik-codex-hooks: dispatcher not found at ${dispatcher}. Did the package install correctly?`);
+        return 1;
+    }
+    const hooksJson = await readHooksJson(hooksPath);
+    const hooks = (hooksJson.hooks ?? {});
+    const entry = buildHookEntry(dispatcher, 'Checking Mnemonik context');
+    hooks.SessionStart = patchHookGroup(hooks.SessionStart, 'startup|resume|clear', buildHookEntry(dispatcher, 'Loading Mnemonik context'));
+    hooks.UserPromptSubmit = patchHookGroup(hooks.UserPromptSubmit, undefined, buildHookEntry(dispatcher, 'Loading Mnemonik prompt context'));
+    hooks.PreToolUse = patchHookGroup(hooks.PreToolUse, 'Bash|apply_patch|Edit|Write', entry);
+    hooks.PostToolUse = patchHookGroup(hooks.PostToolUse, 'apply_patch|Edit|Write|mcp__mnemonik__.*', buildHookEntry(dispatcher, 'Updating Mnemonik context'));
+    hooks.Stop = patchHookGroup(hooks.Stop, undefined, buildHookEntry(dispatcher, 'Checking Mnemonik checkpoint state'));
+    hooksJson.hooks = hooks;
+    await writeJson(hooksPath, hooksJson);
+    await ensureConfigFlag(configPath);
+    console.log([
+        `mnemonik-codex-hooks: wired into ${hooksPath}`,
+        `  feature flag -> ${configPath}`,
+        `  dispatcher   -> ${dispatcher}`,
+        '',
+        'Installed Codex hooks only. This does not install or modify skills, rules, AGENTS.md, .mnemonik.json, or MCP config.',
+        'Defaults are advisory. Configure .mnemonik.json contextualHooks to change modes.',
+    ].join('\n'));
+    return 0;
+}
+if (process.argv[1] === fileURLToPath(import.meta.url)) {
+    main()
+        .then((code) => process.exit(code))
+        .catch((err) => {
+        console.error(`mnemonik-codex-hooks: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    });
+}
+export { ensureCodexHooksFeature };
+//# sourceMappingURL=install.js.map

package/dist/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AAmBxC,SAAS,qBAAqB;IAC5B,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,aAAqB,EAAE,OAAO,GAAG,CAAC;IAC5E,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;QAC7C,OAAO;QACP,aAAa;KACd,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAgB;IACvC,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,OAAO,CACZ,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,MAA+B,EAC/B,OAA2B,EAC3B,KAAkB;IAElB,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAc,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5C,IAAI,OAAO,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IACnD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,KAAc;IACnD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,IAAI,iCAAiC,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1E,IAAI,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,OAAO,UAAU,CAAC,OAAO,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC7D,IAAI,CAAC,aAAa,EAAE,KAAK,IAAI,aAAa,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GACV,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,CAAC;QACxF,OAAO,GAAG,MAAM,oCAAoC,CAAC;IACvD,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,uBAAuB,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC;IAE3C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CACX,iDAAiD,UAAU,sCAAsC,CAClG,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAgC,CAAC;IACrE,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;IAEtE,KAAK,CAAC,YAAY,GAAG,cAAc,CACjC,KAAK,CAAC,YAAY,EAClB,sBAAsB,EACtB,cAAc,CAAC,UAAU,EAAE,0BAA0B,CAAC,CACvD,CAAC;IACF,KAAK,CAAC,gBAAgB,GAAG,cAAc,CACrC,KAAK,CAAC,gBAAgB,EACtB,SAAS,EACT,cAAc,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAC9D,CAAC;IACF,KAAK,CAAC,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,6BAA6B,EAAE,KAAK,CAAC,CAAC;IAC1F,KAAK,CAAC,WAAW,GAAG,cAAc,CAChC,KAAK,CAAC,WAAW,EACjB,0CAA0C,EAC1C,cAAc,CAAC,UAAU,EAAE,2BAA2B,CAAC,CACxD,CAAC;IACF,KAAK,CAAC,IAAI,GAAG,cAAc,CACzB,KAAK,CAAC,IAAI,EACV,SAAS,EACT,cAAc,CAAC,UAAU,EAAE,oCAAoC,CAAC,CACjE,CAAC;IAEF,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC;IACxB,MAAM,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACtC,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAEnC,OAAO,CAAC,GAAG,CACT;QACE,oCAAoC,SAAS,EAAE;QAC/C,qBAAqB,UAAU,EAAE;QACjC,qBAAqB,UAAU,EAAE;QACjC,EAAE;QACF,sHAAsH;QACtH,kFAAkF;KACnF,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvD,IAAI,EAAE;SACH,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAClC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,OAAO,CAAC,KAAK,CAAC,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/lib/applyPatch.d.ts

@@ -0,0 +1,6 @@
+export interface PatchTarget {
+    path: string;
+    operation: 'add' | 'update' | 'delete';
+}
+export declare function extractPatchTargets(patch: string, cwd: string): PatchTarget[];
+export declare function extractToolFileTargets(toolName: string, toolInput: Record<string, unknown> | undefined, cwd: string): PatchTarget[];

package/dist/lib/applyPatch.js

@@ -0,0 +1,58 @@
+import { isAbsolute, resolve } from 'node:path';
+const ADD = '*** Add File: ';
+const UPDATE = '*** Update File: ';
+const DELETE = '*** Delete File: ';
+export function extractPatchTargets(patch, cwd) {
+    const targets = [];
+    const seen = new Set();
+    for (const rawLine of patch.split(/\r?\n/)) {
+        const line = rawLine.trimEnd();
+        let operation = null;
+        let filePath = '';
+        if (line.startsWith(ADD)) {
+            operation = 'add';
+            filePath = line.slice(ADD.length).trim();
+        }
+        else if (line.startsWith(UPDATE)) {
+            operation = 'update';
+            filePath = line.slice(UPDATE.length).trim();
+        }
+        else if (line.startsWith(DELETE)) {
+            operation = 'delete';
+            filePath = line.slice(DELETE.length).trim();
+        }
+        if (!operation || !filePath)
+            continue;
+        const absolute = isAbsolute(filePath) ? filePath : resolve(cwd, filePath);
+        const key = `${operation}:${absolute}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        targets.push({ path: absolute, operation });
+    }
+    return targets;
+}
+export function extractToolFileTargets(toolName, toolInput, cwd) {
+    if (!toolInput)
+        return [];
+    if (toolName === 'apply_patch') {
+        const patch = typeof toolInput.patch === 'string'
+            ? toolInput.patch
+            : typeof toolInput.input === 'string'
+                ? toolInput.input
+                : typeof toolInput.command === 'string'
+                    ? toolInput.command
+                    : '';
+        return extractPatchTargets(patch, cwd);
+    }
+    const raw = typeof toolInput.file_path === 'string'
+        ? toolInput.file_path
+        : typeof toolInput.path === 'string'
+            ? toolInput.path
+            : null;
+    if (!raw)
+        return [];
+    const path = isAbsolute(raw) ? raw : resolve(cwd, raw);
+    return [{ path, operation: toolName === 'Write' ? 'add' : 'update' }];
+}
+//# sourceMappingURL=applyPatch.js.map

package/dist/lib/applyPatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applyPatch.js","sourceRoot":"","sources":["../../src/lib/applyPatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOhD,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,GAAW;IAC5D,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,SAAS,GAAoC,IAAI,CAAC;QACtD,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,SAAS,GAAG,KAAK,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,SAAS,GAAG,QAAQ,CAAC;YACrB,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,SAAS,GAAG,QAAQ,CAAC;YACrB,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;YAAE,SAAS;QACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,SAA8C,EAC9C,GAAW;IAEX,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,KAAK,GACT,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;YACjC,CAAC,CAAC,SAAS,CAAC,KAAK;YACjB,CAAC,CAAC,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;gBACnC,CAAC,CAAC,SAAS,CAAC,KAAK;gBACjB,CAAC,CAAC,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;oBACrC,CAAC,CAAC,SAAS,CAAC,OAAO;oBACnB,CAAC,CAAC,EAAE,CAAC;QACb,OAAO,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,GAAG,GACP,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;QACrC,CAAC,CAAC,SAAS,CAAC,SAAS;QACrB,CAAC,CAAC,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;YAClC,CAAC,CAAC,SAAS,CAAC,IAAI;YAChB,CAAC,CAAC,IAAI,CAAC;IACb,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AACxE,CAAC"}

package/dist/lib/codexOutput.d.ts

@@ -0,0 +1,6 @@
+import type { CodexHookEvent, CodexHookOutput } from './types.js';
+export declare function additionalContext(event: CodexHookEvent, text: string): CodexHookOutput;
+export declare function systemMessage(message: string): CodexHookOutput;
+export declare function denyPreToolUse(reason: string): CodexHookOutput;
+export declare function continueStop(reason: string): CodexHookOutput;
+export declare function trimContext(text: string, maxBytes?: number): string;

package/dist/lib/codexOutput.js

@@ -0,0 +1,46 @@
+export function additionalContext(event, text) {
+    return {
+        hookSpecificOutput: {
+            hookEventName: event,
+            additionalContext: text,
+        },
+    };
+}
+export function systemMessage(message) {
+    return { systemMessage: message };
+}
+export function denyPreToolUse(reason) {
+    return {
+        decision: 'block',
+        reason,
+        hookSpecificOutput: {
+            hookEventName: 'PreToolUse',
+            permissionDecision: 'deny',
+            permissionDecisionReason: reason,
+        },
+    };
+}
+export function continueStop(reason) {
+    return {
+        decision: 'block',
+        reason,
+        hookSpecificOutput: {
+            hookEventName: 'Stop',
+            additionalContext: reason,
+        },
+    };
+}
+export function trimContext(text, maxBytes = 12_000) {
+    if (Buffer.byteLength(text, 'utf8') <= maxBytes)
+        return text;
+    const suffix = '\n\n[Mnemonik: context exceeded hook budget. Call memory_get/file_context for full detail if needed.]';
+    const budget = Math.max(0, maxBytes - Buffer.byteLength(suffix, 'utf8'));
+    let out = '';
+    for (const ch of text) {
+        if (Buffer.byteLength(out + ch, 'utf8') > budget)
+            break;
+        out += ch;
+    }
+    return out + suffix;
+}
+//# sourceMappingURL=codexOutput.js.map

package/dist/lib/codexOutput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexOutput.js","sourceRoot":"","sources":["../../src/lib/codexOutput.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,iBAAiB,CAAC,KAAqB,EAAE,IAAY;IACnE,OAAO;QACL,kBAAkB,EAAE;YAClB,aAAa,EAAE,KAAK;YACpB,iBAAiB,EAAE,IAAI;SACxB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,MAAM;QACN,kBAAkB,EAAE;YAClB,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,MAAM;YAC1B,wBAAwB,EAAE,MAAM;SACjC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,MAAM;QACN,kBAAkB,EAAE;YAClB,aAAa,EAAE,MAAM;YACrB,iBAAiB,EAAE,MAAM;SAC1B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,QAAQ,GAAG,MAAM;IACzD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,MAAM,GACV,uGAAuG,CAAC;IAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,EAAE,EAAE,MAAM,CAAC,GAAG,MAAM;YAAE,MAAM;QACxD,GAAG,IAAI,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,GAAG,MAAM,CAAC;AACtB,CAAC"}

package/dist/lib/env.d.ts

@@ -0,0 +1,4 @@
+import { type BypassEnvelope, type HookConfig } from './types.js';
+export declare function isNonInteractive(env?: NodeJS.ProcessEnv): boolean;
+export declare function parseBypass(env?: NodeJS.ProcessEnv): BypassEnvelope;
+export declare function resolveConfig(cwd: string, env?: NodeJS.ProcessEnv): Promise<HookConfig>;

package/dist/lib/env.js

@@ -0,0 +1,78 @@
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { DEFAULT_CONTEXTUAL_HOOKS, DEFAULT_SERVER, } from './types.js';
+const VALID_BYPASS_TYPES = new Set([
+    'typo',
+    'formatting',
+    'regenerated',
+    'already_grounded',
+    'other',
+]);
+export function isNonInteractive(env = process.env) {
+    if (env.CI === 'true')
+        return true;
+    if (env.GITHUB_ACTIONS === 'true')
+        return true;
+    if (env.MNEMONIK_NONINTERACTIVE === '1')
+        return true;
+    return false;
+}
+export function parseBypass(env = process.env) {
+    if (env.MNEMONIK_BYPASS_HOOKS !== '1') {
+        return { active: false, type: null, detail: null, invalidReason: null };
+    }
+    const rawType = (env.MNEMONIK_BYPASS_TYPE ?? '').trim().toLowerCase();
+    if (!rawType) {
+        return {
+            active: false,
+            type: null,
+            detail: null,
+            invalidReason: 'MNEMONIK_BYPASS_TYPE is required when MNEMONIK_BYPASS_HOOKS=1',
+        };
+    }
+    if (!VALID_BYPASS_TYPES.has(rawType)) {
+        return {
+            active: false,
+            type: null,
+            detail: null,
+            invalidReason: `MNEMONIK_BYPASS_TYPE must be one of ${[...VALID_BYPASS_TYPES].join('|')}`,
+        };
+    }
+    const type = rawType;
+    if (type === 'other') {
+        const detail = (env.MNEMONIK_BYPASS_DETAIL ?? '').trim();
+        if (detail.length < 50 || detail.length > 200) {
+            return {
+                active: false,
+                type: null,
+                detail: null,
+                invalidReason: "MNEMONIK_BYPASS_TYPE='other' requires MNEMONIK_BYPASS_DETAIL of 50-200 chars",
+            };
+        }
+        return { active: true, type, detail, invalidReason: null };
+    }
+    return { active: true, type, detail: null, invalidReason: null };
+}
+async function readJson(path) {
+    try {
+        const raw = await readFile(path, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export async function resolveConfig(cwd, env = process.env) {
+    const scanner = await readJson(join(homedir(), '.mnemonik', 'scanner.json'));
+    const projectConfig = await readJson(join(cwd, '.mnemonik.json'));
+    const apiKey = env.MNEMONIK_API_KEY?.trim() || scanner?.apiKey?.trim() || null;
+    const server = (env.MNEMONIK_SERVER?.trim() || scanner?.server?.trim() || DEFAULT_SERVER).replace(/\/$/, '');
+    const contextualHooks = {
+        ...DEFAULT_CONTEXTUAL_HOOKS,
+        ...(projectConfig?.forcingFunctions ?? {}),
+        ...(projectConfig?.contextualHooks ?? {}),
+    };
+    return { apiKey, server, contextualHooks };
+}
+//# sourceMappingURL=env.js.map

package/dist/lib/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/lib/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,cAAc,GAIf,MAAM,YAAY,CAAC;AAEpB,MAAM,kBAAkB,GAA4B,IAAI,GAAG,CAAC;IAC1D,MAAM;IACN,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,GAAG,CAAC,cAAc,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,GAAG,CAAC,uBAAuB,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9D,IAAI,GAAG,CAAC,qBAAqB,KAAK,GAAG,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,IAAI;YACZ,aAAa,EAAE,+DAA+D;SAC/E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAqB,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,IAAI;YACZ,aAAa,EAAE,uCAAuC,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAqB,CAAC;IACnC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC9C,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI;gBACZ,aAAa,EACX,8EAA8E;aACjF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACnE,CAAC;AAgBD,KAAK,UAAU,QAAQ,CAAI,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAW,EACX,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAc,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAC1F,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAe,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEhF,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/E,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,cAAc,CAAC,CAAC,OAAO,CAC/F,KAAK,EACL,EAAE,CACH,CAAC;IAEF,MAAM,eAAe,GAAkC;QACrD,GAAG,wBAAwB;QAC3B,GAAG,CAAC,aAAa,EAAE,gBAAgB,IAAI,EAAE,CAAC;QAC1C,GAAG,CAAC,aAAa,EAAE,eAAe,IAAI,EAAE,CAAC;KAC1C,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AAC7C,CAAC"}

package/dist/lib/http.d.ts

@@ -0,0 +1,46 @@
+import type { HookContextResponse, SnapshotResponse } from './types.js';
+export interface FetchSnapshotInput {
+    server: string;
+    apiKey: string;
+    cwd: string;
+    codexSessionId: string;
+}
+export declare function fetchSnapshot(input: FetchSnapshotInput): Promise<SnapshotResponse | null>;
+export interface FetchHookContextInput {
+    server: string;
+    apiKey: string;
+    cwd: string;
+    codexSessionId: string;
+    event: string;
+    prompt?: string;
+    toolName?: string;
+    filePaths?: string[];
+    lastAssistantMessage?: string | null;
+}
+export declare function fetchHookContext(input: FetchHookContextInput): Promise<HookContextResponse | null>;
+export interface ReportGateFiredInput {
+    server: string;
+    apiKey: string | null;
+    cwd: string;
+    codexSessionId: string;
+    tool: string;
+    mode: 'advisory' | 'enforce' | 'off';
+    outcome: string;
+}
+export declare function reportGateFired(input: ReportGateFiredInput): Promise<void>;
+export interface ReportBypassInput {
+    server: string;
+    apiKey: string | null;
+    cwd: string;
+    codexSessionId: string;
+    tool: string;
+    bypassType: string;
+    detail: string | null;
+}
+export declare function reportBypass(input: ReportBypassInput): Promise<void>;
+export declare function trackIdeEdit(input: {
+    server: string;
+    apiKey: string | null;
+    sessionId: string;
+    filePath: string;
+}): Promise<void>;

package/dist/lib/http.js

@@ -0,0 +1,153 @@
+const FETCH_TIMEOUT_MS = 2000;
+const TELEMETRY_TIMEOUT_MS = 500;
+const POST_TOOL_TIMEOUT_MS = 1500;
+function withTimeout(ms) {
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), ms);
+    return { signal: ac.signal, cleanup: () => clearTimeout(timer) };
+}
+export async function fetchSnapshot(input) {
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/hooks/snapshot`;
+    const { signal, cleanup } = withTimeout(FETCH_TIMEOUT_MS);
+    try {
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({
+                cwd: input.cwd,
+                claudeSessionId: input.codexSessionId,
+                host: 'codex',
+            }),
+            signal,
+        });
+        if (!res.ok)
+            return null;
+        return (await res.json());
+    }
+    catch {
+        return null;
+    }
+    finally {
+        cleanup();
+    }
+}
+export async function fetchHookContext(input) {
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/hooks/context`;
+    const { signal, cleanup } = withTimeout(FETCH_TIMEOUT_MS);
+    try {
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({
+                host: 'codex',
+                event: input.event,
+                cwd: input.cwd,
+                sessionId: input.codexSessionId,
+                prompt: input.prompt,
+                toolName: input.toolName,
+                filePaths: input.filePaths,
+                lastAssistantMessage: input.lastAssistantMessage,
+            }),
+            signal,
+        });
+        if (!res.ok)
+            return null;
+        return (await res.json());
+    }
+    catch {
+        return null;
+    }
+    finally {
+        cleanup();
+    }
+}
+export async function reportGateFired(input) {
+    if (!input.apiKey)
+        return;
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/hooks/gate-fired`;
+    const { signal, cleanup } = withTimeout(TELEMETRY_TIMEOUT_MS);
+    try {
+        await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({
+                cwd: input.cwd,
+                host: 'codex',
+                codexSessionId: input.codexSessionId,
+                tool: input.tool,
+                mode: input.mode,
+                outcome: input.outcome,
+            }),
+            signal,
+        });
+    }
+    catch {
+        // Telemetry must not crash hooks.
+    }
+    finally {
+        cleanup();
+    }
+}
+export async function reportBypass(input) {
+    if (!input.apiKey)
+        return;
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/hooks/bypass`;
+    const { signal, cleanup } = withTimeout(TELEMETRY_TIMEOUT_MS);
+    try {
+        await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({
+                cwd: input.cwd,
+                host: 'codex',
+                codexSessionId: input.codexSessionId,
+                tool: input.tool,
+                bypassType: input.bypassType,
+                detail: input.detail,
+            }),
+            signal,
+        });
+    }
+    catch {
+        // Telemetry must not crash hooks.
+    }
+    finally {
+        cleanup();
+    }
+}
+export async function trackIdeEdit(input) {
+    if (!input.apiKey)
+        return;
+    const url = `${input.server.replace(/\/$/, '')}/api/v1/session/track-ide-edit`;
+    const { signal, cleanup } = withTimeout(POST_TOOL_TIMEOUT_MS);
+    try {
+        await fetch(url, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify({ sessionId: input.sessionId, filePath: input.filePath, host: 'codex' }),
+            signal,
+        });
+    }
+    catch {
+        // Best effort only.
+    }
+    finally {
+        cleanup();
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/lib/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/lib/http.ts"],"names":[],"mappings":"AAEA,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;AACnE,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAyB;IAC3D,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC;IACvE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,eAAe,EAAE,KAAK,CAAC,cAAc;gBACrC,IAAI,EAAE,OAAO;aACd,CAAC;YACF,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAA4B;IAE5B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC;IACtE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,SAAS,EAAE,KAAK,CAAC,cAAc;gBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;aACjD,CAAC;YACF,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAA2B;IAC/D,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC;IACzE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,EAAE;YACf,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,IAAI,EAAE,OAAO;gBACb,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;YACF,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAwB;IACzD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC;IACrE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,EAAE;YACf,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,IAAI,EAAE,OAAO;gBACb,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC;YACF,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAKlC;IACC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,gCAAgC,CAAC;IAC/E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,EAAE;YACf,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC7F,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/lib/shellTokens.d.ts

@@ -0,0 +1,6 @@
+export interface TokenizeResult {
+    commands: string[][];
+}
+export declare const BUILT_IN_DESTRUCTIVE: readonly string[];
+export declare function tokenize(input: string): TokenizeResult;
+export declare function matchCommand(commandTokens: string[], patterns: string[]): string | null;

package/dist/lib/shellTokens.js

@@ -0,0 +1,173 @@
+export const BUILT_IN_DESTRUCTIVE = [
+    'git push origin main',
+    'git push origin master',
+    'git push --force',
+    'git reset --hard',
+    'git merge main',
+    'git merge master',
+    'git branch -D',
+    'npm publish',
+    'pnpm publish',
+    'yarn publish',
+    'docker rm',
+    'docker rmi',
+    'kubectl delete',
+    'rm -rf /',
+    'rm -rf ~',
+    'rm -rf $HOME',
+];
+export function tokenize(input) {
+    const commands = [];
+    let current = [];
+    let buf = '';
+    let mode = 'normal';
+    const flushToken = () => {
+        if (buf.length > 0) {
+            current.push(buf);
+            buf = '';
+        }
+    };
+    const flushCommand = () => {
+        flushToken();
+        if (current.length > 0)
+            commands.push(current);
+        current = [];
+    };
+    for (let i = 0; i < input.length; i++) {
+        const c = input[i];
+        if (mode === 'single') {
+            if (c === "'")
+                mode = 'normal';
+            else
+                buf += c;
+            continue;
+        }
+        if (mode === 'double') {
+            if (c === '"')
+                mode = 'normal';
+            else if (c === '\\' && i + 1 < input.length)
+                buf += input[++i];
+            else
+                buf += c;
+            continue;
+        }
+        if (c === "'") {
+            mode = 'single';
+            continue;
+        }
+        if (c === '"') {
+            mode = 'double';
+            continue;
+        }
+        if (c === '\\' && i + 1 < input.length) {
+            buf += input[++i];
+            continue;
+        }
+        if (c === ' ' || c === '\t' || c === '\n') {
+            flushToken();
+            continue;
+        }
+        if ((c === '|' && input[i + 1] === '|') ||
+            (c === '&' && input[i + 1] === '&') ||
+            (c === '>' && input[i + 1] === '>') ||
+            (c === '<' && input[i + 1] === '<')) {
+            flushCommand();
+            i++;
+            continue;
+        }
+        if (c === '|' || c === ';' || c === '&' || c === '>' || c === '<') {
+            flushCommand();
+            continue;
+        }
+        buf += c;
+    }
+    flushCommand();
+    return { commands };
+}
+export function matchCommand(commandTokens, patterns) {
+    if (commandTokens.length === 0 || patterns.length === 0)
+        return null;
+    const joined = commandTokens.join(' ').trim();
+    for (const raw of patterns) {
+        const pattern = raw.trim();
+        if (!pattern)
+            continue;
+        const explicitRegex = parseExplicitRegex(pattern);
+        if (explicitRegex !== null) {
+            try {
+                if (new RegExp(explicitRegex.body, explicitRegex.flags).test(joined))
+                    return pattern;
+            }
+            catch {
+                /* ignore invalid regex */
+            }
+            continue;
+        }
+        const segments = pattern.includes('|')
+            ? pattern
+                .split('|')
+                .map((s) => s.trim())
+                .filter(Boolean)
+            : [pattern];
+        for (const segment of segments) {
+            if (matchOneSegment(segment, commandTokens, joined))
+                return pattern;
+        }
+    }
+    return null;
+}
+function matchOneSegment(segment, commandTokens, joined) {
+    if (looksLikeRegex(segment)) {
+        try {
+            return new RegExp(segment).test(joined);
+        }
+        catch {
+            return false;
+        }
+    }
+    const tokens = segment.split(/\s+/).filter(Boolean);
+    if (tokens.length === 0)
+        return false;
+    return matchTokenSubsequence(commandTokens, tokens);
+}
+function parseExplicitRegex(pattern) {
+    if (!pattern.startsWith('/'))
+        return null;
+    const tail = pattern.endsWith('/i') ? '/i' : pattern.endsWith('/') ? '/' : null;
+    if (!tail)
+        return null;
+    return { body: pattern.slice(1, pattern.length - tail.length), flags: tail === '/i' ? 'i' : '' };
+}
+function looksLikeRegex(pattern) {
+    return /[|\\.^$()+?{}[\]]/.test(pattern);
+}
+function matchTokenSubsequence(commandTokens, patternTokens) {
+    for (let start = 0; start <= commandTokens.length - patternTokens.length; start++) {
+        let ok = true;
+        for (let i = 0; i < patternTokens.length; i++) {
+            const cmd = commandTokens[start + i] ?? '';
+            const pat = patternTokens[i] ?? '';
+            if (pat === '*')
+                continue;
+            if (pat.includes('*')) {
+                const escaped = pat
+                    .split('*')
+                    .map((seg) => seg.replace(/[.+?^${}()|[\]\\]/g, '\\$&'))
+                    .join('.*');
+                if (!new RegExp(`^${escaped}$`).test(cmd)) {
+                    ok = false;
+                    break;
+                }
+                continue;
+            }
+            if (cmd !== pat) {
+                ok = false;
+                break;
+            }
+        }
+        if (ok)
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=shellTokens.js.map

package/dist/lib/shellTokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellTokens.js","sourceRoot":"","sources":["../../src/lib/shellTokens.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,sBAAsB;IACtB,wBAAwB;IACxB,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;IACf,aAAa;IACb,cAAc;IACd,cAAc;IACd,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,UAAU;IACV,UAAU;IACV,cAAc;CACN,CAAC;AAEX,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAmC,QAAQ,CAAC;IAEpD,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,GAAG,GAAG,EAAE,CAAC;QACX,CAAC;IACH,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,UAAU,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,GAAG,EAAE,CAAC;IACf,CAAC,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,GAAG;gBAAE,IAAI,GAAG,QAAQ,CAAC;;gBAC1B,GAAG,IAAI,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,GAAG;gBAAE,IAAI,GAAG,QAAQ,CAAC;iBAC1B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;gBAAE,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;;gBAC1D,GAAG,IAAI,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,QAAQ,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,QAAQ,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1C,UAAU,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,IACE,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;YACnC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;YACnC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;YACnC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EACnC,CAAC;YACD,YAAY,EAAE,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAClE,YAAY,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,YAAY,EAAE,CAAC;IACf,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,aAAuB,EAAE,QAAkB;IACtE,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,OAAO,OAAO,CAAC;YACvF,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YACpC,CAAC,CAAC,OAAO;iBACJ,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACd,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC;gBAAE,OAAO,OAAO,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,aAAuB,EAAE,MAAc;IAC/E,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,qBAAqB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACnG,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAAC,aAAuB,EAAE,aAAuB;IAC7E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,aAAa,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClF,IAAI,EAAE,GAAG,IAAI,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,GAAG,KAAK,GAAG;gBAAE,SAAS;YAC1B,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,GAAG;qBAChB,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;qBACvD,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1C,EAAE,GAAG,KAAK,CAAC;oBACX,MAAM;gBACR,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,EAAE,GAAG,KAAK,CAAC;gBACX,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/lib/types.d.ts

@@ -0,0 +1,78 @@
+export type CodexHookEvent = 'SessionStart' | 'UserPromptSubmit' | 'PreToolUse' | 'PermissionRequest' | 'PostToolUse' | 'Stop';
+export interface CodexHookInput {
+    session_id?: string;
+    cwd: string;
+    hook_event_name: CodexHookEvent;
+    turn_id?: string;
+    source?: 'startup' | 'resume' | string;
+    prompt?: string;
+    stop_hook_active?: boolean;
+    last_assistant_message?: string | null;
+    tool_name?: string;
+    tool_use_id?: string;
+    tool_input?: Record<string, unknown>;
+    tool_response?: unknown;
+}
+export interface CodexHookOutput {
+    continue?: boolean;
+    stopReason?: string;
+    systemMessage?: string;
+    suppressOutput?: boolean;
+    decision?: 'block';
+    reason?: string;
+    hookSpecificOutput?: {
+        hookEventName: CodexHookEvent;
+        additionalContext?: string;
+        permissionDecision?: 'deny';
+        permissionDecisionReason?: string;
+    };
+}
+export type BypassType = 'typo' | 'formatting' | 'regenerated' | 'already_grounded' | 'other';
+export interface BypassEnvelope {
+    active: boolean;
+    type: BypassType | null;
+    detail: string | null;
+    invalidReason: string | null;
+}
+export interface SnapshotResponse {
+    ok: boolean;
+    reason?: 'unauthorized' | 'no_project' | 'no_active_session';
+    coveredFiles: string[];
+    editedFiles: string[];
+    mustConfirmPauseAt: number | null;
+    recentPolicyChecks: Record<string, number>;
+    policies: {
+        forbiddenCommand: Array<{
+            pattern: string;
+            description: string;
+        }>;
+        mustConfirm: Array<{
+            pattern: string;
+            description: string;
+            replacement: string | null;
+        }>;
+    };
+    sessionsMerged: number;
+    now: number;
+}
+export interface HookContextResponse {
+    ok: boolean;
+    reason?: 'unauthorized' | 'no_project' | 'invalid' | 'unavailable';
+    additionalContext?: string;
+    systemMessage?: string;
+    continuationReason?: string;
+    contextBytes?: number;
+}
+export interface HookConfig {
+    apiKey: string | null;
+    server: string;
+    contextualHooks: {
+        promptContext: 'advisory' | 'off';
+        preEditGate: 'advisory' | 'enforce' | 'off';
+        preBashGate: 'advisory' | 'enforce' | 'off';
+        checkpointPressure: 'advisory' | 'off';
+        advisoryAutoFetch: boolean;
+    };
+}
+export declare const DEFAULT_CONTEXTUAL_HOOKS: HookConfig['contextualHooks'];
+export declare const DEFAULT_SERVER = "https://api.mnemonik.dev";

package/dist/lib/types.js

@@ -0,0 +1,9 @@
+export const DEFAULT_CONTEXTUAL_HOOKS = {
+    promptContext: 'advisory',
+    preEditGate: 'advisory',
+    preBashGate: 'advisory',
+    checkpointPressure: 'advisory',
+    advisoryAutoFetch: true,
+};
+export const DEFAULT_SERVER = 'https://api.mnemonik.dev';
+//# sourceMappingURL=types.js.map

package/dist/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAmFA,MAAM,CAAC,MAAM,wBAAwB,GAAkC;IACrE,aAAa,EAAE,UAAU;IACzB,WAAW,EAAE,UAAU;IACvB,WAAW,EAAE,UAAU;IACvB,kBAAkB,EAAE,UAAU;IAC9B,iBAAiB,EAAE,IAAI;CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,0BAA0B,CAAC"}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@mnemonik/codex-hooks",
+  "version": "0.1.0",
+  "description": "Codex lifecycle hooks for Mnemonik memory awareness and host-side grounding gates. Hooks only: does not install skills, rules, AGENTS.md, .mnemonik.json, or MCP config.",
+  "type": "module",
+  "bin": {
+    "mnemonik-codex-hooks": "dist/install.js"
+  },
+  "main": "dist/install.js",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "mnemonik",
+    "codex",
+    "hooks"
+  ],
+  "license": "MIT",
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.3.3",
+    "vitest": "^4.1.5"
+  }
+}