@mnemonik/grok-hooks 0.1.0

package/dist/dispatcher.d.ts

@@ -0,0 +1,14 @@
+import type { GrokDecision, GrokHookInput } from './lib/types.js';
+export declare function captureHostTz(): string | undefined;
+export declare function resolveTargetFile(input: GrokHookInput): string | null;
+export declare function isTrivialSearchReplace(toolInput: Record<string, unknown> | undefined): boolean;
+export declare function extractMcpCall(input: GrokHookInput): {
+    tool: string;
+    args: Record<string, unknown>;
+} | null;
+export declare function extractMcpResult(toolResult: unknown): unknown;
+/**
+ * Return the exact JSON Grok should receive on stdout, or null for an empty
+ * successful response. All passive events deliberately return null.
+ */
+export declare function handleHook(input: GrokHookInput): Promise<GrokDecision | null>;

package/dist/dispatcher.js

@@ -0,0 +1,289 @@
+import { existsSync } from 'node:fs';
+import { isAbsolute, resolve } from 'node:path';
+import { isNonInteractive, parseBypass, resolveConfig } from './lib/env.js';
+import { postBypass, postEdit, postInjections, postMcpPrecheck, postMcpRecord, postPreCompact, } from './lib/http.js';
+import { findProjectIdentity } from './lib/identity.js';
+import { matchIrreducibleDeny } from './lib/shellTokens.js';
+const MCP_TOOL = /^mnemonik__(.+)$/;
+const GROK_PRETOOL_DIRECTIVES = new Set([
+    'file_context_required',
+    'policy_check_required',
+    'checkpoint_required',
+]);
+export function captureHostTz() {
+    try {
+        return Intl.DateTimeFormat().resolvedOptions().timeZone;
+    }
+    catch {
+        return process.env.TZ;
+    }
+}
+export function resolveTargetFile(input) {
+    const raw = typeof input.toolInput?.file_path === 'string' ? input.toolInput.file_path : null;
+    if (!raw)
+        return null;
+    return isAbsolute(raw) ? raw : resolve(input.cwd, raw);
+}
+export function isTrivialSearchReplace(toolInput) {
+    if (!toolInput)
+        return false;
+    const oldText = typeof toolInput.old_string === 'string' ? toolInput.old_string : null;
+    const newText = typeof toolInput.new_string === 'string' ? toolInput.new_string : null;
+    if (oldText === null || newText === null || oldText.length === 0 || newText.length === 0) {
+        return false;
+    }
+    if (oldText.includes('\n') || newText.includes('\n'))
+        return false;
+    if (oldText.length > 100 || newText.length > 100)
+        return false;
+    return Math.min(oldText.length, newText.length) / Math.max(oldText.length, newText.length) >= 0.6;
+}
+export function extractMcpCall(input) {
+    const match = MCP_TOOL.exec(input.toolName ?? '');
+    if (!match?.[1])
+        return null;
+    const wrapped = input.toolInput?.tool_input;
+    const args = wrapped !== null && typeof wrapped === 'object' && !Array.isArray(wrapped)
+        ? wrapped
+        : (input.toolInput ?? {});
+    return { tool: match[1], args };
+}
+export function extractMcpResult(toolResult) {
+    if (toolResult === null || typeof toolResult !== 'object' || Array.isArray(toolResult)) {
+        return toolResult;
+    }
+    const result = toolResult;
+    const output = result.output;
+    if (output === null || typeof output !== 'object' || Array.isArray(output))
+        return toolResult;
+    const okay = output.OkayOutput;
+    if (typeof okay !== 'string')
+        return output;
+    try {
+        return JSON.parse(okay);
+    }
+    catch {
+        return okay;
+    }
+}
+function eventName(input) {
+    return input.hookEventName.replace(/_/g, '').toLowerCase();
+}
+function denyFromInjection(injection) {
+    const action = injection.hostDecision === 'ask'
+        ? 'Pause and ask the user for confirmation. Retry only after they approve.'
+        : 'Apply this required Mnemonik context or policy before retrying.';
+    return {
+        decision: 'deny',
+        reason: `${action}\n\n${injection.envelope}`,
+    };
+}
+/**
+ * Defense in depth for Grok's deny-only PreToolUse channel. The server filters
+ * candidates before bus evaluation, but the published client must not turn a
+ * future advisory response into a blocking decision if that contract drifts.
+ */
+function firstDeliverablePreToolDirective(result) {
+    if (!result?.ok)
+        return null;
+    return (result.injections.find((injection) => injection.kind === 'directive' && GROK_PRETOOL_DIRECTIVES.has(injection.signal)) ?? null);
+}
+async function common(input) {
+    const [config, identity] = await Promise.all([resolveConfig(), findProjectIdentity(input.cwd)]);
+    return { config, projectId: identity?.projectId };
+}
+async function observe(input, event, config, projectId, toolName, toolArgs) {
+    await postInjections({
+        config,
+        cwd: input.cwd,
+        projectId,
+        sessionId: input.sessionId,
+        event,
+        observeOnly: true,
+        prompt: event === 'UserPromptSubmit' ? input.prompt : undefined,
+        toolName,
+        toolArgs,
+        tz: captureHostTz(),
+    });
+}
+async function handlePreToolUse(input, config, projectId) {
+    const mcp = extractMcpCall(input);
+    if (mcp) {
+        if (!config.apiKey)
+            return null;
+        const precheck = await postMcpPrecheck({
+            config,
+            cwd: input.cwd,
+            projectId,
+            sessionId: input.sessionId,
+            ...mcp,
+        });
+        if (precheck?.ok && (precheck.verdict === 'deny' || precheck.verdict === 'ask')) {
+            const instruction = precheck.verdict === 'ask'
+                ? 'Ask the user for confirmation, then retry this Mnemonik call if approved.'
+                : 'Do not run this Mnemonik call.';
+            return {
+                decision: 'deny',
+                reason: `${instruction}\n\n${precheck.agentMessage ?? precheck.ruleId ?? 'Mnemonik ordering rule blocked this call.'}`,
+            };
+        }
+        return null;
+    }
+    if (input.toolName === 'run_terminal_command') {
+        const command = typeof input.toolInput?.command === 'string' ? input.toolInput.command : '';
+        const irreducible = matchIrreducibleDeny(command);
+        if (irreducible) {
+            return {
+                decision: 'deny',
+                reason: `Mnemonik blocked catastrophic command pattern ${irreducible}.`,
+            };
+        }
+        if (!config.apiKey)
+            return null;
+        const result = await postInjections({
+            config,
+            cwd: input.cwd,
+            projectId,
+            sessionId: input.sessionId,
+            event: 'PreToolUse',
+            toolName: input.toolName,
+            toolArgs: input.toolInput,
+            tz: captureHostTz(),
+        });
+        const directive = firstDeliverablePreToolDirective(result);
+        return directive ? denyFromInjection(directive) : null;
+    }
+    if (input.toolName === 'search_replace') {
+        if (!config.apiKey)
+            return null;
+        const target = resolveTargetFile(input);
+        if ((target && !existsSync(target)) || isTrivialSearchReplace(input.toolInput))
+            return null;
+        const result = await postInjections({
+            config,
+            cwd: input.cwd,
+            projectId,
+            sessionId: input.sessionId,
+            event: 'PreToolUse',
+            toolName: input.toolName,
+            toolArgs: input.toolInput,
+            filePaths: target ? [target] : [],
+            tz: captureHostTz(),
+        });
+        const directive = firstDeliverablePreToolDirective(result);
+        return directive ? denyFromInjection(directive) : null;
+    }
+    return null;
+}
+async function handlePostToolUse(input, config, projectId) {
+    if (!config.apiKey)
+        return;
+    const mcp = extractMcpCall(input);
+    if (mcp) {
+        await postMcpRecord({
+            config,
+            cwd: input.cwd,
+            projectId,
+            sessionId: input.sessionId,
+            ...mcp,
+            result: extractMcpResult(input.toolResult),
+        });
+        await observe(input, 'PostToolUse', config, projectId, mcp.tool, mcp.args);
+        return;
+    }
+    if (input.toolName === 'search_replace') {
+        const target = resolveTargetFile(input);
+        if (target) {
+            await postEdit({
+                config,
+                cwd: input.cwd,
+                projectId,
+                sessionId: input.sessionId,
+                filePath: target,
+            });
+        }
+        await observe(input, 'PostToolUse', config, projectId, input.toolName, input.toolInput);
+    }
+}
+async function handleStop(input, config, projectId) {
+    // Grok emits one final observe-only Stop during shutdown/channel close.
+    // It also re-fires Stop after a continuation; allow that second stop to avoid
+    // an agent loop if the first reminder could not be acted on.
+    if (!config.apiKey || input.reason !== 'end_turn' || input.stopHookActive)
+        return null;
+    const result = await postInjections({
+        config,
+        cwd: input.cwd,
+        projectId,
+        sessionId: input.sessionId,
+        event: 'Stop',
+        stopHookActive: input.stopHookActive,
+        tz: captureHostTz(),
+    });
+    const checkpoint = result?.ok
+        ? result.injections.find((injection) => injection.kind === 'directive' && injection.signal === 'checkpoint_required')
+        : undefined;
+    return checkpoint
+        ? {
+            hookSpecificOutput: {
+                hookEventName: 'Stop',
+                additionalContext: checkpoint.envelope,
+            },
+        }
+        : null;
+}
+/**
+ * Return the exact JSON Grok should receive on stdout, or null for an empty
+ * successful response. All passive events deliberately return null.
+ */
+export async function handleHook(input) {
+    if (isNonInteractive())
+        return null;
+    const bypass = parseBypass();
+    if (bypass.invalidReason) {
+        process.stderr.write(`mnemonik-grok-hook: invalid bypass envelope - ${bypass.invalidReason}\n`);
+    }
+    const { config, projectId } = await common(input);
+    if (bypass.active) {
+        await postBypass({
+            config,
+            cwd: input.cwd,
+            projectId,
+            sessionId: input.sessionId,
+            tool: input.toolName ?? input.hookEventName,
+            bypassType: bypass.type ?? 'unknown',
+            detail: bypass.detail,
+        });
+        return null;
+    }
+    switch (eventName(input)) {
+        case 'pretooluse':
+            return handlePreToolUse(input, config, projectId);
+        case 'posttooluse':
+            await handlePostToolUse(input, config, projectId);
+            return null;
+        case 'sessionstart':
+            if (config.apiKey)
+                await observe(input, 'SessionStart', config, projectId);
+            return null;
+        case 'userpromptsubmit':
+            if (config.apiKey)
+                await observe(input, 'UserPromptSubmit', config, projectId);
+            return null;
+        case 'precompact':
+            if (config.apiKey) {
+                await postPreCompact({
+                    config,
+                    cwd: input.cwd,
+                    projectId,
+                    sessionId: input.sessionId,
+                });
+            }
+            return null;
+        case 'stop':
+            return handleStop(input, config, projectId);
+        default:
+            return null;
+    }
+}
+//# sourceMappingURL=dispatcher.js.map

package/dist/dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.js","sourceRoot":"","sources":["../src/dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EACL,UAAU,EACV,QAAQ,EACR,cAAc,EACd,eAAe,EACf,aAAa,EACb,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAG5D,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AACpC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,uBAAuB;IACvB,uBAAuB;IACvB,qBAAqB;CACtB,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAoB;IACpD,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,SAAS,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9F,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAA8C;IACnF,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,OAAO,GAAG,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,MAAM,OAAO,GAAG,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAAoB;IAEpB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC;IAC5C,MAAM,IAAI,GACR,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACxE,CAAC,CAAE,OAAmC;QACtC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC9B,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,MAAM,GAAG,UAAqC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IAC9F,MAAM,IAAI,GAAI,MAAkC,CAAC,UAAU,CAAC;IAC5D,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAoB;IACrC,OAAO,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAoB;IAC7C,MAAM,MAAM,GACV,SAAS,CAAC,YAAY,KAAK,KAAK;QAC9B,CAAC,CAAC,yEAAyE;QAC3E,CAAC,CAAC,iEAAiE,CAAC;IACxE,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,GAAG,MAAM,OAAO,SAAS,CAAC,QAAQ,EAAE;KAC7C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,gCAAgC,CACvC,MAGQ;IAER,IAAI,CAAC,MAAM,EAAE,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,CACL,MAAM,CAAC,UAAU,CAAC,IAAI,CACpB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,IAAI,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAC/F,IAAI,IAAI,CACV,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,KAAoB;IAIxC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,KAAoB,EACpB,KAA0D,EAC1D,MAAkB,EAClB,SAAkB,EAClB,QAAiB,EACjB,QAAkC;IAElC,MAAM,cAAc,CAAC;QACnB,MAAM;QACN,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS;QACT,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,KAAK,KAAK,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC/D,QAAQ;QACR,QAAQ;QACR,EAAE,EAAE,aAAa,EAAE;KACpB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,KAAoB,EACpB,MAAkB,EAClB,SAAkB;IAElB,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC;YACrC,MAAM;YACN,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS;YACT,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,GAAG;SACP,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,MAAM,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC;YAChF,MAAM,WAAW,GACf,QAAQ,CAAC,OAAO,KAAK,KAAK;gBACxB,CAAC,CAAC,2EAA2E;gBAC7E,CAAC,CAAC,gCAAgC,CAAC;YACvC,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,GAAG,WAAW,OAAO,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,MAAM,IAAI,2CAA2C,EAAE;aACvH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,SAAS,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,iDAAiD,WAAW,GAAG;aACxE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;YAClC,MAAM;YACN,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS;YACT,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,SAAS;YACzB,EAAE,EAAE,aAAa,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,gCAAgC,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5F,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;YAClC,MAAM;YACN,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS;YACT,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,SAAS;YACzB,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;YACjC,EAAE,EAAE,aAAa,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,gCAAgC,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,KAAoB,EACpB,MAAkB,EAClB,SAAkB;IAElB,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO;IAC3B,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,aAAa,CAAC;YAClB,MAAM;YACN,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS;YACT,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,GAAG;YACN,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;SAC3C,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,QAAQ,CAAC;gBACb,MAAM;gBACN,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,SAAS;gBACT,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,KAAoB,EACpB,MAAkB,EAClB,SAAkB;IAElB,wEAAwE;IACxE,8EAA8E;IAC9E,6DAA6D;IAC7D,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACvF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,MAAM;QACN,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS;QACT,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,MAAM;QACb,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,EAAE,EAAE,aAAa,EAAE;KACpB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,EAAE,EAAE;QAC3B,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CACpB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,IAAI,SAAS,CAAC,MAAM,KAAK,qBAAqB,CAC5F;QACH,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,UAAU;QACf,CAAC,CAAC;YACE,kBAAkB,EAAE;gBAClB,aAAa,EAAE,MAAM;gBACrB,iBAAiB,EAAE,UAAU,CAAC,QAAQ;aACvC;SACF;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAoB;IACnD,IAAI,gBAAgB,EAAE;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,UAAU,CAAC;YACf,MAAM;YACN,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS;YACT,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa;YAC3C,UAAU,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;YACpC,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,YAAY;YACf,OAAO,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACpD,KAAK,aAAa;YAChB,MAAM,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,KAAK,cAAc;YACjB,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC;QACd,KAAK,kBAAkB;YACrB,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,KAAK,YAAY;YACf,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,cAAc,CAAC;oBACnB,MAAM;oBACN,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,SAAS;oBACT,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC9C;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/hook.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/hook.js

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+import { stderr, stdin, stdout } from 'node:process';
+import { handleHook } from './dispatcher.js';
+async function readInput() {
+    let body = '';
+    stdin.setEncoding('utf8');
+    for await (const chunk of stdin) {
+        body += chunk;
+        if (body.length > 1_048_576)
+            return null;
+    }
+    try {
+        const value = JSON.parse(body);
+        if (value === null || typeof value !== 'object' || Array.isArray(value))
+            return null;
+        const input = value;
+        if (typeof input.hookEventName !== 'string' ||
+            typeof input.sessionId !== 'string' ||
+            typeof input.cwd !== 'string') {
+            return null;
+        }
+        return input;
+    }
+    catch {
+        return null;
+    }
+}
+try {
+    const input = await readInput();
+    if (input) {
+        const decision = await handleHook(input);
+        if (decision)
+            stdout.write(JSON.stringify(decision));
+    }
+}
+catch (error) {
+    // Every Grok hook failure is fail-open. Keep stdout empty: malformed JSON on
+    // an active hook also fails open, but an empty success is cleaner and leaves
+    // Grok's hook diagnostics unambiguous.
+    stderr.write(`mnemonik-grok-hook: fail-open — ${error instanceof Error ? error.message : String(error)}\n`);
+}
+//# sourceMappingURL=hook.js.map

package/dist/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../src/hook.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,KAAK,UAAU,SAAS;IACtB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI,KAAK,CAAC;QACd,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrF,MAAM,KAAK,GAAG,KAA+B,CAAC;QAC9C,IACE,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;YACvC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAC7B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAsB,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,IAAI,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,QAAQ;YAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,6EAA6E;IAC7E,6EAA6E;IAC7E,uCAAuC;IACvC,MAAM,CAAC,KAAK,CACV,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAC9F,CAAC;AACJ,CAAC"}

package/dist/install.d.ts

@@ -0,0 +1,28 @@
+#!/usr/bin/env node
+type Scope = 'host' | 'project';
+interface HookHandler {
+    type: string;
+    command?: string;
+    timeout?: number;
+    [key: string]: unknown;
+}
+interface HookGroup {
+    matcher?: string;
+    hooks?: HookHandler[];
+    [key: string]: unknown;
+}
+interface GrokHookFile {
+    hooks?: Record<string, HookGroup[]>;
+    [key: string]: unknown;
+}
+export declare function parseArgs(argv: string[]): {
+    scope: Scope;
+};
+export declare function resolveHookConfigPath(scope: Scope, cwd: string, env?: Partial<Record<'HOME' | 'USERPROFILE' | 'GROK_HOME', string | undefined>>): string;
+export declare function buildManagedCommand(dispatcherPath: string): string;
+/** Pure merge used by installer tests and the CLI. */
+export declare function patchHookFile(file: GrokHookFile, command: string, install: boolean): GrokHookFile;
+/** An absent alternate scope must stay absent; only clean up a file that exists. */
+export declare function shouldRewriteAlternate(raw: string | null, next: string | null): boolean;
+export declare function runInstaller(argv: string[]): Promise<number>;
+export {};

package/dist/install.js

@@ -0,0 +1,364 @@
+#!/usr/bin/env node
+import { createHash, randomBytes } from 'node:crypto';
+import { cp, lstat, mkdir, open, readFile, readdir, realpath, rename, rm, stat, } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+const PACKAGE_NAME = '@mnemonik/grok-hooks';
+const OWNER = 'grok-hooks';
+const LAUNCHER_SOURCE = "const u=Buffer.from(process.argv[1],'base64url').toString('utf8');process.argv[1]=require('node:url').fileURLToPath(u);import(u).catch(e=>{console.error(e);process.exitCode=1})";
+function code(error) {
+    return error && typeof error === 'object' && 'code' in error
+        ? String(error.code)
+        : undefined;
+}
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+export function parseArgs(argv) {
+    let scope = 'host';
+    let explicit = null;
+    let sawInstall = false;
+    for (const argument of argv) {
+        if (argument === 'install' && !sawInstall) {
+            sawInstall = true;
+            continue;
+        }
+        const parsed = argument === '--scope=project'
+            ? 'project'
+            : argument === '--scope=user' || argument === '--scope=host'
+                ? 'host'
+                : null;
+        if (!parsed)
+            throw new Error(`Unknown installer argument: ${argument}`);
+        if (explicit && explicit !== parsed)
+            throw new Error('Conflicting --scope arguments');
+        explicit = parsed;
+        scope = parsed;
+    }
+    return { scope };
+}
+function resolveHome(env = process.env) {
+    const home = env.HOME?.trim() || env.USERPROFILE?.trim();
+    if (!home)
+        throw new Error('Could not determine home directory for Grok hook install');
+    return home;
+}
+export function resolveHookConfigPath(scope, cwd, env = process.env) {
+    if (scope === 'project')
+        return join(cwd, '.grok', 'hooks', 'mnemonik.json');
+    const grokHome = env.GROK_HOME?.trim() || join(resolveHome(env), '.grok');
+    return join(grokHome, 'hooks', 'mnemonik.json');
+}
+export function buildManagedCommand(dispatcherPath) {
+    const token = Buffer.from(pathToFileURL(resolve(dispatcherPath)).href, 'utf8').toString('base64url');
+    return `node -e ${JSON.stringify(LAUNCHER_SOURCE)} -- ${token} --mnemonik-owner=${OWNER}`;
+}
+function isManagedCommand(command) {
+    if (command.endsWith(` --mnemonik-owner=${OWNER}`))
+        return true;
+    const normalized = command.replace(/\\/g, '/');
+    return (normalized.includes(`/node_modules/${PACKAGE_NAME}/dist/hook.js`) ||
+        normalized.includes('/packages/grok-hooks/dist/hook.js'));
+}
+function validateHookFile(value) {
+    if (!isRecord(value))
+        throw new Error('expected a top-level JSON object');
+    if (value.hooks === undefined)
+        return value;
+    if (!isRecord(value.hooks))
+        throw new Error('expected "hooks" to be a JSON object');
+    for (const [event, groups] of Object.entries(value.hooks)) {
+        if (!Array.isArray(groups) || !groups.every(isRecord)) {
+            throw new Error(`expected "hooks.${event}" to be an array of hook groups`);
+        }
+        for (const group of groups) {
+            if (!Array.isArray(group.hooks) || !group.hooks.every(isRecord)) {
+                throw new Error(`expected "hooks.${event}[].hooks" to be an array`);
+            }
+            for (const handler of group.hooks) {
+                if (handler.command !== undefined && typeof handler.command !== 'string') {
+                    throw new Error(`expected "hooks.${event}[].hooks[].command" to be a string`);
+                }
+            }
+        }
+    }
+    return value;
+}
+function removeManaged(file) {
+    if (!file.hooks)
+        return;
+    for (const [event, groups] of Object.entries(file.hooks)) {
+        const remaining = [];
+        for (const group of groups) {
+            const handlers = (group.hooks ?? []).filter((handler) => typeof handler.command !== 'string' || !isManagedCommand(handler.command));
+            if (handlers.length > 0)
+                remaining.push({ ...group, hooks: handlers });
+        }
+        if (remaining.length > 0)
+            file.hooks[event] = remaining;
+        else
+            delete file.hooks[event];
+    }
+    if (Object.keys(file.hooks).length === 0)
+        delete file.hooks;
+}
+function managedGroup(command, matcher) {
+    return {
+        ...(matcher ? { matcher } : {}),
+        hooks: [{ type: 'command', command, timeout: 5 }],
+    };
+}
+/** Pure merge used by installer tests and the CLI. */
+export function patchHookFile(file, command, install) {
+    const next = structuredClone(file);
+    removeManaged(next);
+    if (!install)
+        return next;
+    const hooks = (next.hooks ??= {});
+    hooks.PreToolUse = [
+        ...(hooks.PreToolUse ?? []),
+        managedGroup(command, 'search_replace|run_terminal_command|mnemonik__.*'),
+    ];
+    hooks.PostToolUse = [
+        ...(hooks.PostToolUse ?? []),
+        managedGroup(command, 'search_replace|mnemonik__.*'),
+    ];
+    hooks.SessionStart = [...(hooks.SessionStart ?? []), managedGroup(command)];
+    hooks.UserPromptSubmit = [...(hooks.UserPromptSubmit ?? []), managedGroup(command)];
+    hooks.Stop = [...(hooks.Stop ?? []), managedGroup(command)];
+    hooks.PreCompact = [...(hooks.PreCompact ?? []), managedGroup(command)];
+    return next;
+}
+async function readHookFile(path) {
+    try {
+        const raw = await readFile(path, 'utf8');
+        try {
+            return { file: validateHookFile(JSON.parse(raw)), raw };
+        }
+        catch (error) {
+            throw new Error(`Could not parse ${path}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    catch (error) {
+        if (code(error) === 'ENOENT')
+            return { file: {}, raw: null };
+        throw error;
+    }
+}
+async function writableTarget(path) {
+    try {
+        return await realpath(path);
+    }
+    catch (error) {
+        if (code(error) !== 'ENOENT')
+            throw error;
+        try {
+            if ((await lstat(path)).isSymbolicLink()) {
+                throw new Error(`Refusing dangling configuration symlink ${path}`);
+            }
+        }
+        catch (inspectError) {
+            if (code(inspectError) !== 'ENOENT')
+                throw inspectError;
+        }
+        return path;
+    }
+}
+async function atomicWrite(path, next, expected) {
+    const target = await writableTarget(path);
+    await mkdir(dirname(target), { recursive: true });
+    let current = null;
+    try {
+        current = await readFile(target, 'utf8');
+    }
+    catch (error) {
+        if (code(error) !== 'ENOENT')
+            throw error;
+    }
+    if (current !== expected)
+        throw new Error(`Configuration changed concurrently: ${path}`);
+    let mode = 0o600;
+    try {
+        mode = (await stat(target)).mode & 0o777;
+    }
+    catch (error) {
+        if (code(error) !== 'ENOENT')
+            throw error;
+    }
+    const temporary = join(dirname(target), `.mnemonik-${process.pid}-${randomBytes(6).toString('hex')}.json`);
+    const handle = await open(temporary, 'wx', mode);
+    try {
+        await handle.writeFile(next, 'utf8');
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+    try {
+        let beforeRename = null;
+        try {
+            beforeRename = await readFile(target, 'utf8');
+        }
+        catch (error) {
+            if (code(error) !== 'ENOENT')
+                throw error;
+        }
+        if (beforeRename !== expected) {
+            throw new Error(`Configuration changed concurrently: ${path}`);
+        }
+        await rename(temporary, target);
+    }
+    finally {
+        await rm(temporary, { force: true }).catch(() => undefined);
+    }
+}
+async function withLock(path, action) {
+    await mkdir(dirname(path), { recursive: true });
+    for (let attempt = 0; attempt < 100; attempt += 1) {
+        try {
+            await mkdir(path, { mode: 0o700 });
+            try {
+                return await action();
+            }
+            finally {
+                await rm(path, { recursive: true, force: true });
+            }
+        }
+        catch (error) {
+            if (code(error) !== 'EEXIST')
+                throw error;
+            const age = Date.now() - (await stat(path)).mtimeMs;
+            if (age > 120_000) {
+                await rm(path, { recursive: true, force: true });
+                continue;
+            }
+            await new Promise((done) => setTimeout(done, 20));
+        }
+    }
+    throw new Error(`Timed out waiting for installer lock ${path}`);
+}
+async function hashTree(root) {
+    const hash = createHash('sha256');
+    const walk = async (directory, relative) => {
+        const entries = await readdir(directory, { withFileTypes: true });
+        entries.sort((a, b) => a.name.localeCompare(b.name));
+        for (const entry of entries) {
+            const childRelative = relative ? join(relative, entry.name) : entry.name;
+            const child = join(directory, entry.name);
+            if (entry.isDirectory())
+                await walk(child, childRelative);
+            else if (entry.isFile()) {
+                hash.update(`${childRelative}\0`);
+                hash.update(await readFile(child));
+            }
+            else {
+                throw new Error(`Unsupported runtime artifact ${child}`);
+            }
+        }
+    };
+    await walk(root, '');
+    return hash.digest('hex');
+}
+async function installRuntime(home) {
+    // dist/install.js -> package root
+    const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+    const manifest = JSON.parse(await readFile(join(packageRoot, 'package.json'), 'utf8'));
+    if (manifest.name !== PACKAGE_NAME || typeof manifest.version !== 'string') {
+        throw new Error(`Invalid ${PACKAGE_NAME} package manifest`);
+    }
+    const digest = (await hashTree(join(packageRoot, 'dist'))).slice(0, 16);
+    const container = join(home, '.mnemonik', 'hooks', OWNER);
+    const root = join(container, `${manifest.version}-${digest}`);
+    const installedPackage = join(root, 'package');
+    const installedHook = join(installedPackage, 'dist', 'hook.js');
+    await mkdir(container, { recursive: true });
+    await withLock(join(container, '.install.lock'), async () => {
+        try {
+            if ((await stat(installedHook)).isFile())
+                return;
+        }
+        catch (error) {
+            if (code(error) !== 'ENOENT')
+                throw error;
+        }
+        const staging = join(container, `.stage-${process.pid}-${randomBytes(6).toString('hex')}`);
+        try {
+            await mkdir(join(staging, 'package'), { recursive: true });
+            await cp(join(packageRoot, 'dist'), join(staging, 'package', 'dist'), { recursive: true });
+            await cp(join(packageRoot, 'package.json'), join(staging, 'package', 'package.json'));
+            await rename(staging, root);
+        }
+        catch (error) {
+            if (code(error) !== 'EEXIST' && code(error) !== 'ENOTEMPTY')
+                throw error;
+        }
+        finally {
+            await rm(staging, { recursive: true, force: true }).catch(() => undefined);
+        }
+        if (!(await stat(installedHook)).isFile()) {
+            throw new Error(`Durable Grok hook runtime did not install at ${installedHook}`);
+        }
+    });
+    return installedHook;
+}
+/** An absent alternate scope must stay absent; only clean up a file that exists. */
+export function shouldRewriteAlternate(raw, next) {
+    return raw !== null && next !== null && next !== raw;
+}
+export async function runInstaller(argv) {
+    const { scope } = parseArgs(argv);
+    const cwd = process.cwd();
+    const home = resolveHome();
+    const targetPath = resolveHookConfigPath(scope, cwd);
+    const alternatePath = resolveHookConfigPath(scope === 'host' ? 'project' : 'host', cwd);
+    const dispatcher = await installRuntime(home);
+    const command = buildManagedCommand(dispatcher);
+    const lockKey = createHash('sha256')
+        .update([resolve(targetPath), resolve(alternatePath)].sort().join('\0'))
+        .digest('hex')
+        .slice(0, 32);
+    await withLock(join(home, '.mnemonik', 'hooks', '.config-locks', `${lockKey}.lock`), async () => {
+        const target = await readHookFile(targetPath);
+        const samePath = resolve(targetPath) === resolve(alternatePath);
+        const alternate = samePath ? null : await readHookFile(alternatePath);
+        const nextTarget = `${JSON.stringify(patchHookFile(target.file, command, true), null, 2)}\n`;
+        const nextAlternate = alternate
+            ? `${JSON.stringify(patchHookFile(alternate.file, command, false), null, 2)}\n`
+            : null;
+        const alternateChanged = alternate !== null && shouldRewriteAlternate(alternate.raw, nextAlternate);
+        if (alternateChanged) {
+            await atomicWrite(alternatePath, nextAlternate, alternate.raw);
+        }
+        try {
+            if (nextTarget !== target.raw)
+                await atomicWrite(targetPath, nextTarget, target.raw);
+        }
+        catch (error) {
+            if (alternate && alternateChanged) {
+                await atomicWrite(alternatePath, alternate.raw, nextAlternate);
+            }
+            throw error;
+        }
+    });
+    console.log(`Mnemonik Grok hooks installed (${scope} scope).`);
+    console.log('  hooks only -> does not install or modify skills, rules, AGENTS.md, .mnemonik.json, or MCP config');
+    console.log(`  config     -> ${targetPath}`);
+    console.log(`  dispatcher -> ${dispatcher}`);
+    if (scope === 'project') {
+        console.log('  trust      -> run /hooks-trust in Grok (project hooks require folder trust)');
+    }
+    console.log('Restart Grok, then run /hooks to verify the loaded Mnemonik entries.');
+    return 0;
+}
+const invokedPath = process.argv[1] ? pathToFileURL(resolve(process.argv[1])).href : '';
+if (invokedPath === import.meta.url) {
+    runInstaller(process.argv.slice(2))
+        .then((exitCode) => {
+        process.exitCode = exitCode;
+    })
+        .catch((error) => {
+        console.error(`mnemonik-grok-hooks: ${error instanceof Error ? error.message : String(error)}`);
+        process.exitCode = 1;
+    });
+}
+//# sourceMappingURL=install.js.map

package/dist/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,EAAE,EACF,KAAK,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,QAAQ,EACR,MAAM,EACN,EAAE,EACF,IAAI,GACL,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAExD,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAC5C,MAAM,KAAK,GAAG,YAAY,CAAC;AAC3B,MAAM,eAAe,GACnB,kLAAkL,CAAC;AA0BrL,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK;QAC1D,CAAC,CAAC,MAAM,CAAE,KAAmB,CAAC,IAAI,CAAC;QACnC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,IAAI,KAAK,GAAU,MAAM,CAAC;IAC1B,IAAI,QAAQ,GAAiB,IAAI,CAAC;IAClC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1C,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GACV,QAAQ,KAAK,iBAAiB;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,cAAc;gBAC1D,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,IAAI,CAAC;QACb,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;QACxE,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACtF,QAAQ,GAAG,MAAM,CAAC;QAClB,KAAK,GAAG,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAClB,GAAG,GAAgE,OAAO,CAAC,GAAG;IAE9E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACzD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAY,EACZ,GAAW,EACX,GAAG,GAA8E,OAAO,CAAC,GAAG;IAE5F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,cAAsB;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CACrF,WAAW,CACZ,CAAC;IACF,OAAO,WAAW,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,KAAK,qBAAqB,KAAK,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,qBAAqB,KAAK,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/C,OAAO,CACL,UAAU,CAAC,QAAQ,CAAC,iBAAiB,YAAY,eAAe,CAAC;QACjE,UAAU,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,KAAqB,CAAC;IAC5D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACpF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,iCAAiC,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,0BAA0B,CAAC,CAAC;YACtE,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAClC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACzE,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,oCAAoC,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAqB,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa,CAAC,IAAkB;IACvC,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO;IACxB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,SAAS,GAAgB,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CACzC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CACvF,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;;YACnD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,OAAgB;IACrD,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,aAAa,CAAC,IAAkB,EAAE,OAAe,EAAE,OAAgB;IACjF,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,aAAa,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IAClC,KAAK,CAAC,UAAU,GAAG;QACjB,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3B,YAAY,CAAC,OAAO,EAAE,kDAAkD,CAAC;KAC1E,CAAC;IACF,KAAK,CAAC,WAAW,GAAG;QAClB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;QAC5B,YAAY,CAAC,OAAO,EAAE,6BAA6B,CAAC;KACrD,CAAC;IACF,KAAK,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,KAAK,CAAC,gBAAgB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,KAAK,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC,EAAE,GAAG,EAAE,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC7D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ;gBAAE,MAAM,YAAY,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,QAAuB;IAC5E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;IACzF,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAC5C,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CACpB,OAAO,CAAC,MAAM,CAAC,EACf,aAAa,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAClE,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC;QACH,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAC5C,CAAC;QACD,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAI,IAAY,EAAE,MAAwB;IAC/D,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,EAAE,CAAC;YACxB,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD,IAAI,GAAG,GAAG,OAAO,EAAE,CAAC;gBAClB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjD,SAAS;YACX,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,EAAE,SAAiB,EAAE,QAAgB,EAAiB,EAAE;QACxE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACzE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;iBACrD,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,GAAG,aAAa,IAAI,CAAC,CAAC;gBAClC,IAAI,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,kCAAkC;IAClC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAGpF,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,WAAW,YAAY,mBAAmB,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC,CAAC;IAC9D,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAChE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,KAAK,IAAI,EAAE;QAC1D,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3F,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;YACtF,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,WAAW;gBAAE,MAAM,KAAK,CAAC;QAC3E,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,gDAAgD,aAAa,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,GAAkB,EAAE,IAAmB;IAC5E,OAAO,GAAG,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,qBAAqB,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC;SACjC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACvE,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,OAAO,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAC7F,MAAM,aAAa,GAAG,SAAS;YAC7B,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;YAC/E,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,gBAAgB,GACpB,SAAS,KAAK,IAAI,IAAI,sBAAsB,CAAC,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC7E,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,WAAW,CAAC,aAAa,EAAE,aAAc,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC;YACH,IAAI,UAAU,KAAK,MAAM,CAAC,GAAG;gBAAE,MAAM,WAAW,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,IAAI,gBAAgB,EAAE,CAAC;gBAClC,MAAM,WAAW,CAAC,aAAa,EAAE,SAAS,CAAC,GAAI,EAAE,aAAa,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,kCAAkC,KAAK,UAAU,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CACT,oGAAoG,CACrG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;IACpF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACxF,IAAI,WAAW,KAAK,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAChC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACjB,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACf,OAAO,CAAC,KAAK,CACX,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACjF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/lib/env.d.ts

@@ -0,0 +1,4 @@
+import { type BypassEnvelope, type HookConfig } from './types.js';
+export declare function isNonInteractive(env?: NodeJS.ProcessEnv): boolean;
+export declare function parseBypass(env?: NodeJS.ProcessEnv): BypassEnvelope;
+export declare function resolveConfig(env?: NodeJS.ProcessEnv): Promise<HookConfig>;

package/dist/lib/env.js

@@ -0,0 +1,65 @@
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { DEFAULT_SERVER } from './types.js';
+const VALID_BYPASS_TYPES = new Set([
+    'typo',
+    'formatting',
+    'regenerated',
+    'already_grounded',
+    'other',
+]);
+export function isNonInteractive(env = process.env) {
+    return env.CI === 'true' || env.GITHUB_ACTIONS === 'true' || env.MNEMONIK_NONINTERACTIVE === '1';
+}
+export function parseBypass(env = process.env) {
+    if (env.MNEMONIK_BYPASS_HOOKS !== '1') {
+        return { active: false, type: null, detail: null, invalidReason: null };
+    }
+    const rawType = (env.MNEMONIK_BYPASS_TYPE ?? '').trim().toLowerCase();
+    if (!rawType) {
+        return {
+            active: false,
+            type: null,
+            detail: null,
+            invalidReason: 'MNEMONIK_BYPASS_TYPE is required when MNEMONIK_BYPASS_HOOKS=1',
+        };
+    }
+    if (!VALID_BYPASS_TYPES.has(rawType)) {
+        return {
+            active: false,
+            type: null,
+            detail: null,
+            invalidReason: `MNEMONIK_BYPASS_TYPE must be one of ${[...VALID_BYPASS_TYPES].join('|')}`,
+        };
+    }
+    const type = rawType;
+    if (type === 'other') {
+        const detail = (env.MNEMONIK_BYPASS_DETAIL ?? '').trim();
+        if (detail.length < 50 || detail.length > 200) {
+            return {
+                active: false,
+                type: null,
+                detail: null,
+                invalidReason: "MNEMONIK_BYPASS_TYPE='other' requires MNEMONIK_BYPASS_DETAIL of 50-200 chars",
+            };
+        }
+        return { active: true, type, detail, invalidReason: null };
+    }
+    return { active: true, type, detail: null, invalidReason: null };
+}
+export async function resolveConfig(env = process.env) {
+    let scanner = null;
+    const home = env.HOME?.trim() || env.USERPROFILE?.trim() || homedir();
+    try {
+        scanner = JSON.parse(await readFile(join(home, '.mnemonik', 'scanner.json'), 'utf8'));
+    }
+    catch {
+        scanner = null;
+    }
+    return {
+        apiKey: env.MNEMONIK_API_KEY?.trim() || scanner?.apiKey?.trim() || null,
+        server: (env.MNEMONIK_SERVER?.trim() || scanner?.server?.trim() || DEFAULT_SERVER).replace(/\/$/, ''),
+    };
+}
+//# sourceMappingURL=env.js.map

package/dist/lib/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/lib/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAyD,MAAM,YAAY,CAAC;AAEnG,MAAM,kBAAkB,GAA4B,IAAI,GAAG,CAAC;IAC1D,MAAM;IACN,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACnE,OAAO,GAAG,CAAC,EAAE,KAAK,MAAM,IAAI,GAAG,CAAC,cAAc,KAAK,MAAM,IAAI,GAAG,CAAC,uBAAuB,KAAK,GAAG,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC9D,IAAI,GAAG,CAAC,qBAAqB,KAAK,GAAG,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,IAAI;YACZ,aAAa,EAAE,+DAA+D;SAC/E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAqB,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,IAAI;YACZ,aAAa,EAAE,uCAAuC,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SAC1F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAqB,CAAC;IACnC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC9C,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI;gBACZ,aAAa,EACX,8EAA8E;aACjF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACnE,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACtE,IAAI,OAAO,GAAyB,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;IACtE,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAClB,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAC/C,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI;QACvE,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,cAAc,CAAC,CAAC,OAAO,CACxF,KAAK,EACL,EAAE,CACH;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/http.d.ts

@@ -0,0 +1,39 @@
+import type { HookConfig, InjectionsResponse, McpPrecheckResponse } from './types.js';
+interface BaseRequest {
+    config: HookConfig;
+    cwd: string;
+    projectId?: string;
+    sessionId: string;
+}
+export interface PostInjectionsInput extends BaseRequest {
+    event: 'SessionStart' | 'UserPromptSubmit' | 'PreToolUse' | 'PostToolUse' | 'Stop';
+    observeOnly?: boolean;
+    prompt?: string;
+    toolName?: string;
+    toolArgs?: Record<string, unknown>;
+    filePaths?: string[];
+    stopHookActive?: boolean;
+    tz?: string;
+}
+export declare function postInjections(input: PostInjectionsInput): Promise<InjectionsResponse | null>;
+export interface PostMcpPrecheckInput extends BaseRequest {
+    tool: string;
+    args: Record<string, unknown>;
+}
+export declare function postMcpPrecheck(input: PostMcpPrecheckInput): Promise<McpPrecheckResponse | null>;
+export interface PostMcpRecordInput extends PostMcpPrecheckInput {
+    result: unknown;
+}
+export declare function postMcpRecord(input: PostMcpRecordInput): Promise<void>;
+export interface PostEditInput extends BaseRequest {
+    filePath: string;
+}
+export declare function postEdit(input: PostEditInput): Promise<void>;
+export declare function postPreCompact(input: BaseRequest): Promise<void>;
+export interface PostBypassInput extends BaseRequest {
+    tool: string;
+    bypassType: string;
+    detail: string | null;
+}
+export declare function postBypass(input: PostBypassInput): Promise<void>;
+export {};

package/dist/lib/http.js

@@ -0,0 +1,92 @@
+// Kept local because the durable npx runtime is intentionally dependency-free.
+// These match the shared hook budgets used by the other host packages.
+const FETCH_TIMEOUT_MS = 2_000;
+const MCP_PRECHECK_TIMEOUT_MS = 2_000;
+const TELEMETRY_TIMEOUT_MS = 500;
+async function postJson(config, path, body, timeoutMs) {
+    if (!config.apiKey)
+        return null;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const response = await fetch(`${config.server}${path}`, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${config.apiKey}`,
+            },
+            body: JSON.stringify(body),
+            signal: controller.signal,
+        });
+        if (!response.ok)
+            return null;
+        return (await response.json());
+    }
+    catch {
+        return null;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+export function postInjections(input) {
+    return postJson(input.config, '/api/v1/hooks/injections', {
+        cwd: input.cwd,
+        projectId: input.projectId,
+        sessionId: input.sessionId,
+        event: input.event,
+        host: 'grok',
+        observeOnly: input.observeOnly,
+        prompt: input.prompt,
+        toolName: input.toolName,
+        toolArgs: input.toolArgs,
+        filePaths: input.filePaths,
+        stopHookActive: input.stopHookActive,
+        tz: input.tz,
+    }, FETCH_TIMEOUT_MS);
+}
+export function postMcpPrecheck(input) {
+    return postJson(input.config, '/api/v1/hooks/mcp-precheck', {
+        cwd: input.cwd,
+        projectId: input.projectId,
+        cursorSessionId: input.sessionId,
+        tool: input.tool,
+        args: input.args,
+        host: 'grok',
+    }, MCP_PRECHECK_TIMEOUT_MS);
+}
+export async function postMcpRecord(input) {
+    await postJson(input.config, '/api/v1/hooks/mcp-record', {
+        cwd: input.cwd,
+        projectId: input.projectId,
+        cursorSessionId: input.sessionId,
+        tool: input.tool,
+        args: input.args,
+        result: input.result,
+        host: 'grok',
+    }, TELEMETRY_TIMEOUT_MS);
+}
+export async function postEdit(input) {
+    await postJson(input.config, '/api/v1/session/track-ide-edit', { sessionId: input.sessionId, filePath: input.filePath, cwd: input.cwd }, TELEMETRY_TIMEOUT_MS);
+}
+export async function postPreCompact(input) {
+    await postJson(input.config, '/api/v1/hooks/pre-compact', {
+        cwd: input.cwd,
+        projectId: input.projectId,
+        claudeSessionId: input.sessionId,
+    }, 4_000);
+}
+export async function postBypass(input) {
+    await postJson(input.config, '/api/v1/hooks/bypass', {
+        cwd: input.cwd,
+        projectId: input.projectId,
+        host: 'grok',
+        // The telemetry endpoint's legacy normalized field is still named
+        // claudeSessionId for every host.
+        claudeSessionId: input.sessionId,
+        tool: input.tool,
+        bypassType: input.bypassType,
+        detail: input.detail,
+    }, TELEMETRY_TIMEOUT_MS);
+}
+//# sourceMappingURL=http.js.map

package/dist/lib/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/lib/http.ts"],"names":[],"mappings":"AAEA,+EAA+E;AAC/E,uEAAuE;AACvE,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AASjC,KAAK,UAAU,QAAQ,CACrB,MAAkB,EAClB,IAAY,EACZ,IAA6B,EAC7B,SAAiB;IAEjB,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;aACzC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAaD,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,OAAO,QAAQ,CACb,KAAK,CAAC,MAAM,EACZ,0BAA0B,EAC1B;QACE,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,EACD,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,eAAe,CAAC,KAA2B;IACzD,OAAO,QAAQ,CACb,KAAK,CAAC,MAAM,EACZ,4BAA4B,EAC5B;QACE,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,MAAM;KACb,EACD,uBAAuB,CACxB,CAAC;AACJ,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAyB;IAC3D,MAAM,QAAQ,CACZ,KAAK,CAAC,MAAM,EACZ,0BAA0B,EAC1B;QACE,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,MAAM;KACb,EACD,oBAAoB,CACrB,CAAC;AACJ,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAoB;IACjD,MAAM,QAAQ,CACZ,KAAK,CAAC,MAAM,EACZ,gCAAgC,EAChC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EACxE,oBAAoB,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAkB;IACrD,MAAM,QAAQ,CACZ,KAAK,CAAC,MAAM,EACZ,2BAA2B,EAC3B;QACE,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,SAAS;KACjC,EACD,KAAK,CACN,CAAC;AACJ,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAsB;IACrD,MAAM,QAAQ,CACZ,KAAK,CAAC,MAAM,EACZ,sBAAsB,EACtB;QACE,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,MAAM;QACZ,kEAAkE;QAClE,kCAAkC;QAClC,eAAe,EAAE,KAAK,CAAC,SAAS;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,EACD,oBAAoB,CACrB,CAAC;AACJ,CAAC"}

package/dist/lib/identity.d.ts

@@ -0,0 +1,6 @@
+export interface ProjectIdentity {
+    projectId: string;
+    projectName?: string;
+    projectRoot: string;
+}
+export declare function findProjectIdentity(startCwd: string): Promise<ProjectIdentity | null>;

package/dist/lib/identity.js

@@ -0,0 +1,34 @@
+import { readFile } from 'node:fs/promises';
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+const cache = new Map();
+export async function findProjectIdentity(startCwd) {
+    if (!startCwd)
+        return null;
+    if (cache.has(startCwd))
+        return cache.get(startCwd);
+    let directory = isAbsolute(startCwd) ? startCwd : resolve(startCwd);
+    for (let depth = 0; depth <= 10; depth += 1) {
+        try {
+            const parsed = JSON.parse(await readFile(join(directory, '.mnemonik.json'), 'utf8'));
+            if (typeof parsed.projectId === 'string' && parsed.projectId.length > 0) {
+                const identity = {
+                    projectId: parsed.projectId,
+                    projectName: typeof parsed.projectName === 'string' ? parsed.projectName : undefined,
+                    projectRoot: directory,
+                };
+                cache.set(startCwd, identity);
+                return identity;
+            }
+        }
+        catch {
+            // Missing, unreadable, or malformed: keep walking upward.
+        }
+        const parent = dirname(directory);
+        if (parent === directory)
+            break;
+        directory = parent;
+    }
+    cache.set(startCwd, null);
+    return null;
+}
+//# sourceMappingURL=identity.js.map

package/dist/lib/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/lib/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQ/D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkC,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;IACrD,IAAI,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAC/B,CAAC;YAC7B,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxE,MAAM,QAAQ,GAAoB;oBAChC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;oBACpF,WAAW,EAAE,SAAS;iBACvB,CAAC;gBACF,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAC9B,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM;QAChC,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/shellTokens.d.ts

@@ -0,0 +1 @@
+export declare function matchIrreducibleDeny(command: string): string | null;

package/dist/lib/shellTokens.js

@@ -0,0 +1,28 @@
+/**
+ * Irreducible deny-floor for catastrophic, irreversible commands.
+ * Kept byte-for-byte equivalent to the other host packages' three patterns.
+ * Every other policy match is server-owned; this local floor is the only
+ * protection that remains available during a network outage.
+ */
+const IRREDUCIBLE_DENY = [
+    {
+        name: 'rm-rf-root-or-home',
+        pattern: /\brm\s+-[a-zA-Z]*r[a-zA-Z]*f?[a-zA-Z]*\s+(?:\/|~|\$HOME)(?![A-Za-z0-9/_-])/,
+    },
+    {
+        name: 'dd-of-whole-disk',
+        pattern: /\bdd\b[^|;&]*\bof=\/dev\/(?:sd[a-z]|nvme\d+n\d+|hd[a-z]|vd[a-z])(?![A-Za-z0-9])/,
+    },
+    {
+        name: 'mkfs-whole-disk',
+        pattern: /\bmkfs(?:\.[a-z0-9]+)?\b[^|;&]*?\s\/dev\/(?:sd[a-z]|nvme\d+n\d+|hd[a-z]|vd[a-z])(?![A-Za-z0-9])/,
+    },
+];
+export function matchIrreducibleDeny(command) {
+    for (const entry of IRREDUCIBLE_DENY) {
+        if (entry.pattern.test(command))
+            return entry.name;
+    }
+    return null;
+}
+//# sourceMappingURL=shellTokens.js.map

package/dist/lib/shellTokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellTokens.js","sourceRoot":"","sources":["../../src/lib/shellTokens.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,gBAAgB,GAAqD;IACzE;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,4EAA4E;KACtF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,iFAAiF;KAC3F;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EACL,iGAAiG;KACpG;CACF,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/types.d.ts

@@ -0,0 +1,63 @@
+/** Narrow subset of Grok's native hook wire format used by this package. */
+export type GrokHookEventName = 'session_start' | 'user_prompt_submit' | 'pre_tool_use' | 'post_tool_use' | 'stop' | 'pre_compact' | string;
+export interface GrokHookInput {
+    hookEventName: GrokHookEventName;
+    sessionId: string;
+    cwd: string;
+    workspaceRoot?: string;
+    timestamp?: string;
+    permissionMode?: 'default' | 'auto' | 'plan' | 'bypassPermissions' | string;
+    prompt?: string;
+    promptId?: string;
+    toolName?: string;
+    toolInput?: Record<string, unknown>;
+    toolInputTruncated?: boolean;
+    toolResult?: unknown;
+    toolResultTruncated?: boolean;
+    toolUseId?: string;
+    stopHookActive?: boolean;
+    reason?: string;
+    lastAssistantMessage?: string;
+}
+export type GrokDecision = {
+    decision: 'allow';
+} | {
+    decision: 'deny';
+    reason: string;
+} | {
+    hookSpecificOutput: {
+        hookEventName: 'Stop';
+        additionalContext: string;
+    };
+};
+export interface HookConfig {
+    apiKey: string | null;
+    server: string;
+}
+export type BypassType = 'typo' | 'formatting' | 'regenerated' | 'already_grounded' | 'other';
+export interface BypassEnvelope {
+    active: boolean;
+    type: BypassType | null;
+    detail: string | null;
+    invalidReason: string | null;
+}
+export interface Injection {
+    signal: string;
+    kind: 'directive' | 'nudge';
+    envelope: string;
+    deliveryHint: 'additional_context' | 'system_message';
+    hostDecision?: 'deny' | 'ask';
+}
+export interface InjectionsResponse {
+    ok: boolean;
+    reason?: string;
+    injections: Injection[];
+}
+export interface McpPrecheckResponse {
+    ok: boolean;
+    reason?: string;
+    verdict?: 'allow' | 'deny' | 'ask';
+    ruleId?: string;
+    agentMessage?: string;
+}
+export declare const DEFAULT_SERVER = "https://api.mnemonik.dev";

package/dist/lib/types.js

@@ -0,0 +1,2 @@
+export const DEFAULT_SERVER = 'https://api.mnemonik.dev';
+//# sourceMappingURL=types.js.map

package/dist/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AA4EA,MAAM,CAAC,MAAM,cAAc,GAAG,0BAA0B,CAAC"}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@mnemonik/grok-hooks",
+  "version": "0.1.0",
+  "description": "Grok lifecycle hooks for Mnemonik host-side gates and session bookkeeping. Uses Grok-native PreToolUse and Stop decisions; passive hooks never claim to inject model context.",
+  "type": "module",
+  "bin": {
+    "mnemonik-grok-hooks": "dist/install.js"
+  },
+  "main": "dist/install.js",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "node ../../node_modules/@typescript/native/bin/tsc",
+    "typecheck": "node ../../node_modules/@typescript/native/bin/tsc --noEmit -p tsconfig.test.json",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prepublishOnly": "npm run build"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "mnemonik",
+    "grok",
+    "grok-build",
+    "hooks"
+  ],
+  "license": "UNLICENSED",
+  "devDependencies": {
+    "@types/node": "^20.19.43",
+    "@typescript/native": "npm:typescript@7.0.2",
+    "vitest": "^4.1.10"
+  }
+}