@moreih29/nexus-core 0.16.2 → 0.18.2

package/assets/hooks/capability-matrix.yml

@@ -1,313 +0,0 @@
-# capability-matrix.yml
-# nexus-core hook system capability matrix
-#
-# This file is the single source of truth for portability_tier auto-derivation
-# in build-hooks.ts. The build script reads this file via js-yaml (or equivalent)
-# and cross-references each hook's requires_capabilities[] against the matrix.
-#
-# Schema:
-#   Each top-level key is a dot-notation capability ID.
-#   Each entry has three harness keys: claude, codex, opencode.
-#   Values: true | false | partial
-#     true    — fully supported, behavior is defined and verified
-#     false   — not supported; the build will apply fallback policy (warn|skip|error)
-#               as specified in the hook's meta.yml
-#     partial — supported only under specific conditions (see per-entry note)
-#   note      — required when value is partial or false; cites issue/PR where relevant
-#
-# Partial semantics: "operates only under specific matchers, timing conditions,
-# or platform constraints — not universally available within the event."
-#
-# Updated: 2026-04-18
-# Maintained by: nexus-core team
-
-capabilities:
-
-  # ─── Event: session lifecycle ─────────────────────────────────────────────
-
-  event.session_start:
-    claude: true
-    codex: true
-    opencode: true
-    note: >
-      Claude: SessionStart hook. Codex: SessionStart hook (experimental flag required —
-      see runtime.experimental_flag_required). OpenCode: session.created Bus event
-      received via the generic `event` hook key.
-
-  event.user_prompt_submit:
-    claude: true
-    codex: true
-    opencode: true
-    note: >
-      Claude: UserPromptSubmit hook. Codex: UserPromptSubmit hook.
-      OpenCode: UserPromptSubmit maps to experimental.chat.system.transform
-      (fires immediately before each LLM call) or chat.message hook for
-      per-message interception.
-
-  # ─── Event: PreToolUse ────────────────────────────────────────────────────
-
-  event.pre_tool_use.bash:
-    claude: true
-    codex: true
-    opencode: true
-    note: >
-      Claude: PreToolUse matcher "Bash". Codex: PreToolUse currently emits only
-      for Bash — https://github.com/openai/codex/issues/16732 (open, PR #18391 pending).
-      OpenCode: tool.execute.before fires for all built-in tools including bash.
-
-  event.pre_tool_use.edit:
-    claude: true
-    codex: false
-    opencode: true
-    note: >
-      Codex: apply_patch does not emit PreToolUse/PostToolUse at this time.
-      Fix prepared in PR #18391 (OpenAI employee fcoury-oai, approved by canvrno-oai,
-      pending merge) — https://github.com/openai/codex/pull/18391.
-      When merged, update codex value to true and add release note to sister projects.
-      Claude: PreToolUse matcher "Edit|MultiEdit". OpenCode: tool.execute.before
-      fires for edit and apply_patch tools.
-
-  event.pre_tool_use.mcp:
-    claude: true
-    codex: false
-    opencode: false
-    note: >
-      MCP tool interception is Claude-only. Codex does not emit PreToolUse for MCP
-      tools — https://github.com/openai/codex/issues/16732. OpenCode tool.execute.before
-      does not fire for MCP tool calls —
-      https://github.com/sst/opencode/issues/2319 (open, unresolved).
-      Tier 2 user plugins can add MCP PreToolUse hooks in Claude environments only.
-
-  # ─── Event: PostToolUse ───────────────────────────────────────────────────
-
-  event.post_tool_use.bash:
-    claude: true
-    codex: true
-    opencode: true
-    note: >
-      Claude: PostToolUse matcher "Bash". Codex: PostToolUse emits for Bash
-      (verified in direct experiment — codex-cli 0.121.0, macOS).
-      OpenCode: tool.execute.after fires for bash tool.
-
-  event.post_tool_use.read:
-    claude: true
-    codex: false
-    opencode: true
-    note: >
-      Codex has no independent Read tool; file reads use shell (cat/head/tail).
-      The wrapper Bash-parsing layer maps cat|head|tail|less|more to Read as a
-      best-effort equivalent (see event.post_tool_use.bash_parsed).
-      Direct Read-equivalent PostToolUse is not available natively in Codex.
-      OpenCode: tool.execute.after fires for the read tool.
-
-  event.post_tool_use.edit:
-    claude: true
-    codex: false
-    opencode: true
-    note: >
-      Codex: apply_patch does not emit PostToolUse — same constraint as
-      event.pre_tool_use.edit. PR #18391 addresses this —
-      https://github.com/openai/codex/pull/18391.
-      Shell-based edits (echo > file, sed -i, heredoc) are partially captured
-      via event.post_tool_use.bash_parsed.
-      Claude: PostToolUse matcher "Edit|MultiEdit|Write".
-      OpenCode: tool.execute.after fires for edit, write, and apply_patch tools.
-
-  event.post_tool_use.bash_parsed:
-    claude: false
-    codex: true
-    opencode: false
-    note: >
-      Codex-specific capability: the nexus wrapper parses Bash commands to derive
-      equivalent nexus tool_name values. Mapping table (best-effort, complex pipes
-      and sudo are not parsed):
-        cat|head|tail|less|more <file>  -> Read
-        ls <path>                       -> LS
-        find <path>                     -> Glob
-        rg|grep <pattern> <path>        -> Grep
-        echo <text> > <file>            -> Write
-        echo <text> >> <file>           -> Edit
-        sed -i <...> <file>             -> Edit
-        cat > <file> <<EOF (heredoc)    -> Write
-        tee <file>                      -> Write
-        touch <file>                    -> Write
-        cp <src> <dst>                  -> Write (dst)
-        mv <src> <dst>                  -> Edit (dst)
-      This provides partial PostToolUse coverage for file operations that Codex
-      expresses as shell commands. Claude and OpenCode have dedicated first-class
-      tools and do not require this shim.
-
-  # ─── Event: subagent lifecycle ────────────────────────────────────────────
-
-  event.subagent_start:
-    claude: true
-    codex: true
-    opencode: true
-    note: >
-      Claude: SubagentStart hook. Codex: SubagentStart hook (thread_spawn jsonl
-      payload in transcript — codex-nexus adapter parses spawn_agent call).
-      OpenCode: tool.execute.before with input.tool === "task" matcher in mountHooks
-      (opencode-nexus verified pattern). agent_id equals subagent session ID and is
-      immutable across all three harnesses.
-
-  event.subagent_stop:
-    claude: true
-    codex: true
-    opencode: true
-    note: >
-      Claude: SubagentStop hook. Codex: SubagentStop hook (thread_close jsonl payload).
-      OpenCode: tool.execute.after with input.tool === "task" matcher in mountHooks.
-      agent-finalize uses tool.execute.after output.output append as an approved
-      exception (#6 decision — SubagentStop is the sole approved use of
-      tool.execute.after context injection in the nexus standard).
-
-  # ─── Output: additionalContext injection ──────────────────────────────────
-
-  output.additional_context.session_start:
-    claude: true
-    codex: true
-    opencode: true
-    note: >
-      Claude: additionalContext field in SessionStart hook output injected as a
-      system-reminder block (max 10,000 chars per hook; multiple hooks are merged).
-      Codex: additionalContext in SessionStart hookSpecificOutput — verified in
-      direct experiment (codex-cli 0.121.0, macOS).
-      OpenCode: experimental.chat.system.transform output.system.push at
-      session.created time.
-
-  output.additional_context.user_prompt:
-    claude: true
-    codex: true
-    opencode: true
-    note: >
-      Claude: additionalContext in UserPromptSubmit hook output.
-      Codex: additionalContext field in UserPromptSubmit hook output.
-      OpenCode: experimental.chat.system.transform fires before every LLM call;
-      this is the primary context injection mechanism for user-prompt-equivalent
-      interception. Note: fires on every LLM call, not only on new user messages —
-      buffered state must be cleared after one injection to prevent duplication.
-
-  output.additional_context.subagent_stop:
-    claude: true
-    codex: true
-    opencode: true
-    note: >
-      Claude: additionalContext in SubagentStop hook output.
-      Codex: additionalContext in SubagentStop (thread_close) hook output.
-      OpenCode: agent-finalize hook uses tool.execute.after output.output append
-      as an approved exception; the nexus wrapper translates this to the
-      additional_context semantic for subagent stop notifications.
-
-  output.additional_context.post_tool:
-    claude: true
-    codex: true
-    opencode: false
-    note: >
-      OpenCode: tool.execute.after can technically append to output.output and the
-      LLM receives the modified tool result (verified in direct experiment 2026-04-18).
-      However, all three sister projects (claude-nexus, opencode-nexus, codex-nexus)
-      use PostToolUse exclusively for telemetry/state-tracking side effects — not
-      context injection. This capability is not adopted in the nexus standard
-      (#6 decision — YAGNI). Marked false to prevent accidental use; user plugins
-      may use tool.execute.after output.output append as an escape hatch.
-      Context for future consideration: see .nexus/memory/external-opencode-hooks-tools.md §13.
-      Claude: additionalContext in PostToolUse output.
-      Codex: additionalContext in PostToolUse hookSpecificOutput.
-
-  # ─── Output: decision / control flow ──────────────────────────────────────
-
-  output.decision_block:
-    claude: true
-    codex: true
-    opencode: true
-    note: >
-      Claude: decision:"block" in hook stdout JSON (or exit 2 + stderr).
-      PostToolUse decision:block blocks the tool result from being fed back to
-      the model (the tool itself has already executed).
-      Codex: decision:"block" + reason in hook stdout JSON, or exit 2 + stderr;
-      both are functionally equivalent. Priority order: continue:false >
-      decision:block > exit 2.
-      OpenCode: throw new Error(...) in tool.execute.before blocks tool execution;
-      mountHooks translates nexus decision:block to throw. PostToolUse block is not
-      available in OpenCode (tool.execute.after cannot prevent tool result delivery).
-
-  output.updated_input.tool:
-    claude: true
-    codex: false
-    opencode: true
-    note: >
-      Claude: updatedInput field in PreToolUse output completely replaces tool
-      arguments (partial updates are not supported — any missing fields are lost).
-      Effective only when permissionDecision is "allow" or "ask".
-      Codex: updatedInput is parsed but is currently not applied — fail-open (noop).
-      The field is silently ignored with no error or warning —
-      https://github.com/openai/codex/issues/16732 (related tracking issue).
-      OpenCode: output.args mutation in tool.execute.before; mountHooks assigns
-      the nexus updatedInput value to output.args (reference is mutated in-place).
-
-  output.continue_false:
-    claude: true
-    codex: true
-    opencode: true
-    note: >
-      Claude: continue:false with optional stopReason (displayed to the user,
-      not to the model). Globally terminates the current session turn immediately,
-      taking precedence over all event-specific decision fields.
-      Codex: continue:false is the highest-priority control flow signal —
-      overrides decision:block and exit 2. Scope is turn termination (session-level
-      termination is unconfirmed per documentation). Supported on
-      SessionStart, UserPromptSubmit, PostToolUse, and Stop events.
-      OpenCode: mountHooks translates continue:false to throw, which terminates
-      tool execution and the current session turn.
-
-  # ─── Runtime: flags and prerequisites ─────────────────────────────────────
-
-  runtime.experimental_flag_required:
-    claude: false
-    codex: true
-    opencode: false
-    note: >
-      Codex requires an opt-in feature flag to activate the hook system.
-      ~/.codex/config.toml must contain:
-        [features]
-        codex_hooks = true
-      Without this flag, hooks.json is silently ignored (no error, no warning).
-      Windows: the entire Codex hook system is currently disabled regardless of
-      the flag (documented as a temporary measure by OpenAI).
-      Claude and OpenCode activate hook processing without any experimental flag.
-
-  # ─── Permission hooks ──────────────────────────────────────────────────────
-
-  event.permission_request:
-    claude: true
-    codex: partial
-    opencode: false
-    note: >
-      Claude: PermissionRequest hook fires when a permission dialog is triggered;
-      output supports permissionDecision allow|deny|ask|defer.
-      Codex: permission_request.rs confirmed present in codex-rs/hooks/src/events/
-      (discovered 2026-04-18 — external-codex-hooks-tools.md §12). This makes Codex
-      hooks 6 events, not 5. stdin/stdout semantics and matcher behavior are
-      unverified; marked partial pending investigation.
-      OpenCode: permission.ask hook exists but is not firing due to a missing
-      Plugin.trigger call in PermissionNext.ask() —
-      https://github.com/sst/opencode/issues/7006 (open).
-      PR #19453 (anomalyco fork) proposes a fix but is not merged into sst/opencode
-      main. PermissionRequest is outside the portable standard until #7006 is resolved.
-
-  # ─── Context injection: PreToolUse ────────────────────────────────────────
-
-  output.additional_context.pre_tool:
-    claude: true
-    codex: partial
-    opencode: true
-    note: >
-      Claude: additionalContext in PreToolUse output is injected as a system-reminder
-      before tool execution (when permissionDecision is not "defer").
-      Codex: additionalContext in PreToolUse output is parsed but the field is
-      currently not implemented — fail-open (noop). Marked partial because the field
-      is accepted without error but has no observable effect on the model.
-      See external-codex-hooks-tools.md §10-2.
-      OpenCode: tool.execute.before can prepend context to output.args for
-      prompt-bearing tools (such as task/subagent), or buffer context for delivery
-      via experimental.chat.system.transform on the subsequent LLM call.

package/assets/hooks/post-tool-telemetry/handler.test.ts

@@ -1,302 +0,0 @@
-import { describe, it, expect, beforeEach, afterEach } from "bun:test";
-import fs from "node:fs";
-import fsPromises from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import handler from "./handler.ts";
-import type { NexusHookInput } from "../../../src/hooks/types.ts";
-
-// ---------------------------------------------------------------------------
-// Fixture helpers
-// ---------------------------------------------------------------------------
-
-let tmpDir: string;
-
-beforeEach(() => {
-  tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "nexus-post-tool-"));
-});
-
-afterEach(async () => {
-  await fsPromises.rm(tmpDir, { recursive: true, force: true });
-});
-
-/** Build a minimal PostToolUse input */
-function makeInput(
-  overrides: Partial<Extract<NexusHookInput, { hook_event_name: "PostToolUse" }>> & {
-    tool_input?: Record<string, unknown>;
-  },
-): NexusHookInput {
-  return {
-    hook_event_name: "PostToolUse",
-    session_id: "sid-test",
-    cwd: tmpDir,
-    tool_name: "Edit",
-    agent_id: "agent-engineer",
-    ...overrides,
-  } as NexusHookInput;
-}
-
-function toolLogPath(sessionId = "sid-test"): string {
-  return path.join(tmpDir, ".nexus/state", sessionId, "tool-log.jsonl");
-}
-
-function memAccessPath(): string {
-  return path.join(tmpDir, ".nexus/memory-access.jsonl");
-}
-
-function readJsonLines(filePath: string): unknown[] {
-  const raw = fs.readFileSync(filePath, "utf8");
-  return raw
-    .trimEnd()
-    .split("\n")
-    .filter((l) => l.trim() !== "")
-    .map((l) => JSON.parse(l));
-}
-
-// ---------------------------------------------------------------------------
-// Scenario 1 — Edit + agent_id present → tool-log.jsonl 1-line append
-// ---------------------------------------------------------------------------
-
-describe("scenario 1: Edit + agent_id → tool-log append", () => {
-  it("appends one record to .nexus/state/sessions/<sid>/tool-log.jsonl", async () => {
-    const input = makeInput({
-      tool_name: "Edit",
-      agent_id: "agent-engineer",
-      tool_input: { file_path: path.join(tmpDir, "src/foo.ts") },
-    });
-
-    const result = await handler(input);
-
-    // No additional_context or block returned
-    expect(result).toBeUndefined();
-
-    const logFile = toolLogPath();
-    expect(fs.existsSync(logFile)).toBe(true);
-
-    const lines = readJsonLines(logFile);
-    expect(lines).toHaveLength(1);
-
-    const entry = lines[0] as Record<string, unknown>;
-    expect(entry.agent_id).toBe("agent-engineer");
-    expect(entry.tool).toBe("Edit");
-    expect(entry.file).toBe("src/foo.ts");
-    expect(entry.status).toBe("ok");
-    expect(typeof entry.ts).toBe("string");
-    expect(() => new Date(entry.ts as string)).not.toThrow();
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Scenario 2 — Read + file_path within .nexus/memory/** → memory-access.jsonl append
-// ---------------------------------------------------------------------------
-
-describe("scenario 2: Read + memory path → memory-access.jsonl append", () => {
-  it("appends one record to .nexus/memory-access.jsonl", async () => {
-    const memFile = path.join(tmpDir, ".nexus/memory/lessons.md");
-    // File does not need to exist; only the path matters for the hook
-
-    const input = makeInput({
-      tool_name: "Read",
-      agent_id: "agent-researcher",
-      tool_input: { file_path: memFile },
-    });
-
-    await handler(input);
-
-    const accFile = memAccessPath();
-    expect(fs.existsSync(accFile)).toBe(true);
-
-    const lines = readJsonLines(accFile);
-    expect(lines).toHaveLength(1);
-
-    const entry = lines[0] as Record<string, unknown>;
-    expect(entry.path).toBe(".nexus/memory/lessons.md");
-    expect(entry.agent).toBe("agent-researcher");
-    expect(typeof entry.accessed_at).toBe("string");
-    expect(() => new Date(entry.accessed_at as string)).not.toThrow();
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Scenario 3 — Read + other path (src/foo.ts) → memory-access.jsonl NOT written
-// ---------------------------------------------------------------------------
-
-describe("scenario 3: Read + non-memory path → memory-access skip", () => {
-  it("does not create memory-access.jsonl for a non-memory file path", async () => {
-    const input = makeInput({
-      tool_name: "Read",
-      agent_id: "agent-engineer",
-      tool_input: { file_path: path.join(tmpDir, "src/foo.ts") },
-    });
-
-    await handler(input);
-
-    expect(fs.existsSync(memAccessPath())).toBe(false);
-    // tool-log is also not written because tool is Read (not an edit tool)
-    expect(fs.existsSync(toolLogPath())).toBe(false);
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Scenario 4 — Lead (agent_id = null) + Edit → tool-log skip
-// ---------------------------------------------------------------------------
-
-describe("scenario 4: Lead (agent_id null) + Edit → tool-log skip", () => {
-  it("does not write tool-log.jsonl when agent_id is null", async () => {
-    const input = makeInput({
-      tool_name: "Edit",
-      agent_id: null,
-      tool_input: { file_path: path.join(tmpDir, "src/bar.ts") },
-    });
-
-    await handler(input);
-
-    expect(fs.existsSync(toolLogPath())).toBe(false);
-  });
-
-  it("does not write tool-log.jsonl when agent_id is undefined", async () => {
-    const input: NexusHookInput = {
-      hook_event_name: "PostToolUse",
-      session_id: "sid-test",
-      cwd: tmpDir,
-      tool_name: "Edit",
-      // agent_id intentionally omitted
-      tool_input: { file_path: path.join(tmpDir, "src/bar.ts") },
-    };
-
-    await handler(input);
-
-    expect(fs.existsSync(toolLogPath())).toBe(false);
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Scenario 5 — NotebookEdit + notebook_path (no file_path) → tool-log uses notebook_path
-// ---------------------------------------------------------------------------
-
-describe("scenario 5: NotebookEdit + notebook_path → tool-log with notebook_path", () => {
-  it("uses notebook_path when file_path is absent", async () => {
-    const nbPath = path.join(tmpDir, "notebooks/analysis.ipynb");
-
-    const input = makeInput({
-      tool_name: "NotebookEdit",
-      agent_id: "agent-engineer",
-      tool_input: { notebook_path: nbPath },
-      // no file_path key
-    });
-
-    await handler(input);
-
-    const logFile = toolLogPath();
-    expect(fs.existsSync(logFile)).toBe(true);
-
-    const lines = readJsonLines(logFile);
-    expect(lines).toHaveLength(1);
-
-    const entry = lines[0] as Record<string, unknown>;
-    expect(entry.tool).toBe("NotebookEdit");
-    expect(entry.file).toBe("notebooks/analysis.ipynb");
-    expect(entry.agent_id).toBe("agent-engineer");
-    expect(entry.status).toBe("ok");
-  });
-
-  it("prefers file_path over notebook_path when both are present", async () => {
-    const input = makeInput({
-      tool_name: "NotebookEdit",
-      agent_id: "agent-engineer",
-      tool_input: {
-        file_path: path.join(tmpDir, "src/primary.ipynb"),
-        notebook_path: path.join(tmpDir, "notebooks/secondary.ipynb"),
-      },
-    });
-
-    await handler(input);
-
-    const lines = readJsonLines(toolLogPath());
-    const entry = lines[0] as Record<string, unknown>;
-    // file_path is ?? first, so it wins
-    expect(entry.file).toBe("src/primary.ipynb");
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Scenario 6 — 100 parallel appendJsonLine → jsonl integrity
-// ---------------------------------------------------------------------------
-
-describe("scenario 6: 100 parallel handler calls → jsonl integrity", () => {
-  it("all 100 lines are valid JSON and each has expected shape", async () => {
-    const inputs = Array.from({ length: 100 }, (_, i) =>
-      makeInput({
-        tool_name: "Edit",
-        agent_id: `agent-${i}`,
-        session_id: "sid-parallel",
-        tool_input: { file_path: path.join(tmpDir, `src/file-${i}.ts`) },
-      }),
-    );
-
-    await Promise.all(inputs.map((inp) => handler(inp)));
-
-    const logFile = toolLogPath("sid-parallel");
-    expect(fs.existsSync(logFile)).toBe(true);
-
-    const raw = fs.readFileSync(logFile, "utf8");
-    const lines = raw
-      .trimEnd()
-      .split("\n")
-      .filter((l) => l.trim() !== "");
-
-    expect(lines).toHaveLength(100);
-
-    for (const line of lines) {
-      let parsed: unknown;
-      expect(() => {
-        parsed = JSON.parse(line);
-      }).not.toThrow();
-
-      const entry = parsed as Record<string, unknown>;
-      expect(typeof entry.ts).toBe("string");
-      expect(typeof entry.agent_id).toBe("string");
-      expect(entry.tool).toBe("Edit");
-      expect(typeof entry.file).toBe("string");
-      expect(entry.status).toBe("ok");
-    }
-  }, 15_000);
-});
-
-// ---------------------------------------------------------------------------
-// Scenario 7 — handler returns no additional_context and no block
-// ---------------------------------------------------------------------------
-
-describe("scenario 7: handler returns no additional_context / block", () => {
-  it("returns undefined for Edit + agent_id call", async () => {
-    const result = await handler(
-      makeInput({
-        tool_name: "Edit",
-        agent_id: "agent-engineer",
-        tool_input: { file_path: path.join(tmpDir, "src/x.ts") },
-      }),
-    );
-    expect(result).toBeUndefined();
-  });
-
-  it("returns undefined for Read + memory path call", async () => {
-    const result = await handler(
-      makeInput({
-        tool_name: "Read",
-        agent_id: "agent-researcher",
-        tool_input: { file_path: path.join(tmpDir, ".nexus/memory/ref.md") },
-      }),
-    );
-    expect(result).toBeUndefined();
-  });
-
-  it("returns undefined for non-PostToolUse event (early return)", async () => {
-    const input: NexusHookInput = {
-      hook_event_name: "SessionStart",
-      session_id: "sid-test",
-      cwd: tmpDir,
-    };
-    const result = await handler(input);
-    expect(result).toBeUndefined();
-  });
-});

package/assets/hooks/post-tool-telemetry/handler.ts

@@ -1,49 +0,0 @@
-import type { HookHandler } from "../../../src/hooks/types.js";
-import { appendJsonLine } from "../../../src/shared/json-store.js";
-import { join, resolve, relative } from "node:path";
-
-const EDIT_TOOLS = new Set(["Edit", "Write", "MultiEdit", "ApplyPatch", "NotebookEdit"]);
-
-function isWithinMemory(filePath: string, projectRoot: string): boolean {
-  const memRoot = resolve(projectRoot, ".nexus/memory");
-  const abs = resolve(filePath);
-  return abs.startsWith(memRoot + "/") || abs === memRoot;
-}
-
-const handler: HookHandler = async (input) => {
-  if (input.hook_event_name !== "PostToolUse") return;
-
-  const { cwd, session_id, tool_name, agent_id } = input;
-  const toolInput = (input.tool_input ?? {}) as Record<string, unknown>;
-
-  // 1. Memory access tracking (Read)
-  if (tool_name === "Read") {
-    const filePath = toolInput.file_path as string | undefined;
-    if (filePath && isWithinMemory(filePath, cwd)) {
-      appendJsonLine(join(cwd, ".nexus/memory-access.jsonl"), {
-        path: relative(cwd, resolve(filePath)),
-        accessed_at: new Date().toISOString(),
-        agent: agent_id ?? null,
-      });
-    }
-  }
-
-  // 2. Tool-log append (edit tools + agent_id present)
-  if (EDIT_TOOLS.has(tool_name) && agent_id) {
-    const filePath = (toolInput.file_path ?? toolInput.notebook_path) as string | undefined;
-    if (filePath) {
-      appendJsonLine(
-        join(cwd, ".nexus/state", session_id, "tool-log.jsonl"),
-        {
-          ts: new Date().toISOString(),
-          agent_id,
-          tool: tool_name,
-          file: relative(cwd, resolve(filePath)),
-          status: "ok",
-        },
-      );
-    }
-  }
-};
-
-export default handler;

package/assets/hooks/post-tool-telemetry/meta.yml

@@ -1,11 +0,0 @@
-name: post-tool-telemetry
-description: Track memory access and file-edit operations for strength/forgetting signals and audit
-events: [PostToolUse]
-matcher: "Read|Edit|Write|MultiEdit|ApplyPatch|NotebookEdit|Bash"
-timeout: 5
-fallback: warn
-priority: 10
-requires_capabilities:
-  - event.post_tool_use.read
-  - event.post_tool_use.edit
-  - event.post_tool_use.bash_parsed