greprag 5.49.16 → 5.50.0

package/dist/commands/skillgain.js

@@ -0,0 +1,109 @@
+"use strict";
+/** greprag skillgain — the Skill Learning Loop's operator/agent verbs
+ *  (docs/skill-learning-loop.md). The landing leg auto-lands reference gains;
+ *  rule/scope PROPOSALS park at the operator gate and are resolved here:
+ *
+ *    skillgain list            pending gains for this project (all types)
+ *    skillgain done <8hex>     the proposal was applied to the skill (per
+ *                              skill-fix-conventions, diff shown + accepted)
+ *    skillgain reject <8hex>   the proposal was bogus — never show it again
+ *
+ *  Thin client over /v1/skillgain; project resolved from cwd like every
+ *  other command. Self-contained dispatcher + body (the CLI command pattern). */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runSkillGain = runSkillGain;
+const project_anchor_1 = require("../project-anchor");
+const skill_landing_1 = require("../skill-landing");
+function getConfig() {
+    return {
+        apiUrl: process.env.GREPRAG_API_URL || 'https://api.greprag.com',
+        apiKey: process.env.GREPRAG_API_KEY || '',
+    };
+}
+const HELP = `greprag skillgain — Skill Learning Loop queue (docs/skill-learning-loop.md)
+
+USAGE
+  greprag skillgain list             Pending gains for this project (not yet landed).
+  greprag skillgain reject <8hex>    The UNDO: mark a gain bogus AND remove its
+                                     landed artifacts (the fuse line in SKILL.md
+                                     + the docs/learned/<slug>.md doc).
+  greprag skillgain done <8hex>      Manually mark a pending gain resolved
+                                     (rarely needed — landing is automatic and a
+                                     digested fuse needs no marking).
+
+Gains land automatically at session start as a briefcase (fuse line + focused
+doc) and SELF-APPLY on the skill's next invocation.`;
+async function runSkillGain(args) {
+    const sub = args[0];
+    const cfg = getConfig();
+    if (!cfg.apiKey) {
+        console.error('GREPRAG_API_KEY not set — run `greprag init` first.');
+        process.exit(1);
+    }
+    const anchor = (0, project_anchor_1.readAnchor)(process.cwd());
+    if (sub === 'list') {
+        const res = await fetch(`${cfg.apiUrl}/v1/skillgain/${anchor.projectId}/pending`, {
+            headers: { 'Authorization': `Bearer ${cfg.apiKey}` },
+        });
+        if (!res.ok) {
+            console.error(`API ${res.status}`);
+            process.exit(1);
+        }
+        const data = await res.json();
+        const gains = data.gains || [];
+        if (gains.length === 0) {
+            console.log('No pending skill gains.');
+            return;
+        }
+        for (const g of gains) {
+            console.log(`[${g.nodeId}] ${g.skill} · ${g.gainType}\n  ${g.text}`);
+        }
+        return;
+    }
+    if (sub === 'done' || sub === 'reject') {
+        const nodeId = (args[1] || '').toLowerCase();
+        if (!/^[0-9a-f]{8}$/.test(nodeId)) {
+            console.error(`Usage: greprag skillgain ${sub} <8hex>`);
+            process.exit(1);
+        }
+        const status = sub === 'done' ? 'landed' : 'rejected';
+        const res = await fetch(`${cfg.apiUrl}/v1/skillgain/${anchor.projectId}/status`, {
+            method: 'POST',
+            headers: { 'Authorization': `Bearer ${cfg.apiKey}`, 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                projectName: anchor.projectName,
+                updates: [{ nodeId, status }],
+            }),
+        });
+        if (!res.ok) {
+            console.error(`API ${res.status}`);
+            process.exit(1);
+        }
+        const data = await res.json();
+        if ((data.updated || 0) === 0) {
+            console.error(`[${nodeId}] not found in ${anchor.projectName}'s skillgain queue.`);
+            process.exit(1);
+        }
+        console.log(`[${nodeId}] → ${status}`);
+        // Reject is the UNDO: also remove any landed artifacts (the fuse line in
+        // SKILL.md + the docs/learned/<slug>.md doc). Skill name via the record.
+        if (sub === 'reject') {
+            try {
+                const gr = await fetch(`${cfg.apiUrl}/v1/skillgain/${anchor.projectId}/gain/${nodeId}`, { headers: { 'Authorization': `Bearer ${cfg.apiKey}` } });
+                if (gr.ok) {
+                    const gd = await gr.json();
+                    if (gd.gain?.skill) {
+                        const homeDir = process.env.HOME || process.env.USERPROFILE || '';
+                        const removed = (0, skill_landing_1.removeLandedGain)(gd.gain.skill, nodeId, process.cwd(), homeDir);
+                        if (removed)
+                            console.log(`  removed landed artifacts from ${gd.gain.skill}`);
+                    }
+                }
+            }
+            catch { /* best-effort — the stamp makes manual cleanup findable */ }
+        }
+        return;
+    }
+    console.log(HELP);
+}
+//# sourceMappingURL=skillgain.js.map

package/dist/commands/skillgain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillgain.js","sourceRoot":"","sources":["../../src/commands/skillgain.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;iFAUiF;;AA0BjF,oCAsEC;AA9FD,sDAA+C;AAC/C,oDAAoD;AAEpD,SAAS,SAAS;IAChB,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,yBAAyB;QAChE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;;;oDAYuC,CAAC;AAE9C,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,2BAAU,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEzC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,iBAAiB,MAAM,CAAC,SAAS,UAAU,EAAE;YAChF,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE;SACrD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAE1B,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,iBAAiB,MAAM,CAAC,SAAS,SAAS,EAAE;YAC/E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACxF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;aAC9B,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA0B,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,kBAAkB,MAAM,CAAC,WAAW,qBAAqB,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,OAAO,MAAM,EAAE,CAAC,CAAC;QAEvC,yEAAyE;QACzE,yEAAyE;QACzE,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,KAAK,CACpB,GAAG,GAAG,CAAC,MAAM,iBAAiB,MAAM,CAAC,SAAS,SAAS,MAAM,EAAE,EAC/D,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,CACzD,CAAC;gBACF,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;oBACV,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,EAAmC,CAAC;oBAC5D,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;wBACnB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;wBAClE,MAAM,OAAO,GAAG,IAAA,gCAAgB,EAAC,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;wBAChF,IAAI,OAAO;4BAAE,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC/E,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;QACzE,CAAC;QACD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC"}

package/dist/hook.js

@@ -116,6 +116,8 @@ const coordinate_gate_1 = require("./commands/coordinate-gate");
 // read, advances the poll cursor. Closes the watcher dead-window gap. All real
 // logic lives in ./commands/inbox-drain. adr: adr/monitor-resilience.md
 const inbox_drain_1 = require("./commands/inbox-drain");
+const procedure_1 = require("./procedure");
+const skill_landing_1 = require("./skill-landing");
 const API_URL_DEFAULT = 'https://api.greprag.com';
 const MAX_FIELD_CHARS = 500_000; // safety cap per text field
 // ---------- Env + config ---------------------------------------------------
@@ -747,6 +749,149 @@ function capField(text) {
     const originalKb = (text.length / 1000).toFixed(1);
     return `${truncated}\n\n[truncated: original ${originalKb}KB]`;
 }
+// ---------- Doc pointers (docs/doc-pointer-system.md) ----------------------
+//
+// The Document Pointer System's detect half. No new hook: the Stop hook already
+// sees every file the turn touched (filesTouched), so .md writes ride the same
+// event — a deterministic path filter here, the Flash-Lite worthiness judge
+// server-side. Best-effort end to end: a docptr failure never blocks a turn.
+/** Deterministic pre-filter — the cheap gate BEFORE the LLM judge. Rejects the
+ *  obvious never-index classes so they don't even cost a judge call: non-.md,
+ *  dot-directories (.tmp-*, .claude/, .github/ — harness/scratch, not project
+ *  docs), dependency/build trees, and the harness-owned CLAUDE.md/MEMORY.md
+ *  (always injected anyway — indexing them is circular noise). Judge-worthy
+ *  ambiguity (drafts, beats, plans) is the JUDGE's call, not this filter's. */
+function isDocPathEligible(relPath) {
+    const p = relPath.replace(/\\/g, '/');
+    if (!p.toLowerCase().endsWith('.md'))
+        return false;
+    const segments = p.split('/');
+    const base = segments[segments.length - 1];
+    if (base === 'CLAUDE.md' || base === 'MEMORY.md')
+        return false;
+    for (const seg of segments.slice(0, -1)) {
+        if (seg.startsWith('.'))
+            return false;
+        if (seg === 'node_modules' || seg === 'dist' || seg === 'build' || seg === 'vendor')
+            return false;
+    }
+    return true;
+}
+/** Head-snippet cap posted to the judge (server re-caps defensively). */
+const DOC_EVENT_SNIPPET_CHARS = 2_000;
+/** Max doc events per turn (mirrors the server's MAX_EVENTS_PER_POST). */
+const DOC_EVENTS_PER_TURN = 8;
+/** Turn's touched files → judge-ready doc events: project-relative eligible
+ *  .md paths + head snippets. Files outside cwd (scratchpad, other repos) and
+ *  unreadable files (deleted later in the turn) are skipped silently. */
+function collectDocEvents(filesTouched, cwd) {
+    const events = [];
+    const seen = new Set();
+    for (const abs of filesTouched) {
+        if (events.length >= DOC_EVENTS_PER_TURN)
+            break;
+        const rel = path.relative(cwd, abs).replace(/\\/g, '/');
+        if (!rel || rel.startsWith('..') || path.isAbsolute(rel))
+            continue;
+        if (!isDocPathEligible(rel) || seen.has(rel))
+            continue;
+        try {
+            const snippet = fs.readFileSync(abs, 'utf-8').slice(0, DOC_EVENT_SNIPPET_CHARS);
+            if (!snippet.trim())
+                continue;
+            seen.add(rel);
+            events.push({ path: rel, snippet });
+        }
+        catch { /* deleted/unreadable — skip */ }
+    }
+    return events;
+}
+/** SessionStart fetch: the live enrichment-health verdict (fix c2eb8777).
+ *  Null = healthy OR unreachable — the outage announce only fires on a
+ *  POSITIVE probe failure, so an API blip never cries wolf. The worker
+ *  caches the probe ~5 min; this adds one cheap GET per session start. */
+async function fetchEnrichmentDown(apiUrl, apiKey) {
+    try {
+        const res = await fetch(`${apiUrl}/v1/health/enrichment`, {
+            headers: { 'Authorization': `Bearer ${apiKey}` },
+        });
+        if (!res.ok)
+            return null;
+        const data = await res.json();
+        const e = data.enrichment;
+        if (!e || e.ok || !e.errorClass)
+            return null;
+        return { errorClass: e.errorClass, detail: e.detail, actionHint: e.actionHint };
+    }
+    catch {
+        return null;
+    }
+}
+/** SessionStart pass: the Skill Learning Loop's LANDING leg
+ *  (docs/skill-learning-loop.md — the write-back is CODE, not agent
+ *  voluntarism). Fetch pending gains → auto-land reference-tier into each
+ *  skill's docs/learnings.md → POST landed statuses back → return the report
+ *  for the announce. Undefined on any error → announce silent, gains stay
+ *  pending for the next session start. */
+async function fetchAndLandSkillGains(apiUrl, apiKey, anchor, cwd) {
+    try {
+        const res = await fetch(`${apiUrl}/v1/skillgain/${anchor.projectId}/pending`, {
+            headers: { 'Authorization': `Bearer ${apiKey}` },
+        });
+        if (!res.ok)
+            return undefined;
+        const data = await res.json();
+        const pending = (data.gains || []).filter(g => g.nodeId && g.skill && g.text);
+        if (pending.length === 0)
+            return undefined;
+        const homeDir = process.env.HOME || process.env.USERPROFILE || '';
+        const { report, statusUpdates } = (0, skill_landing_1.landPendingGains)(pending, cwd, homeDir, anchor.projectName);
+        if (statusUpdates.length > 0) {
+            try {
+                await fetch(`${apiUrl}/v1/skillgain/${anchor.projectId}/status`, {
+                    method: 'POST',
+                    headers: { 'Authorization': `Bearer ${apiKey}`, 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ projectName: anchor.projectName, updates: statusUpdates }),
+                });
+            }
+            catch { /* statuses re-sync next start — the stamp keeps lands idempotent */ }
+        }
+        return report.landed.length > 0 ? report : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** SessionStart fetch: ONE reconcile+list round trip. Ships the project's
+ *  tracked .md set (`git ls-files`) so vanished docs go stale server-side, and
+ *  returns the active pointers for the announce. [] on any error → the
+ *  announce stays silent (never blocks a session start). */
+async function fetchDocPointers(apiUrl, apiKey, anchor, cwd) {
+    try {
+        let presentPaths;
+        try {
+            const out = (0, proc_1.safeExecSync)('git ls-files -- "*.md"', {
+                cwd, encoding: 'utf-8', stdio: ['ignore', 'pipe', 'ignore'], windowsHide: true,
+            });
+            presentPaths = out.split('\n').map(s => s.trim()).filter(s => isDocPathEligible(s));
+        }
+        catch { /* not a git repo — list-only reconcile */ }
+        const res = await fetch(`${apiUrl}/v1/docptr/${anchor.projectId}/reconcile`, {
+            method: 'POST',
+            headers: { 'Authorization': `Bearer ${apiKey}`, 'Content-Type': 'application/json' },
+            body: JSON.stringify({ projectName: anchor.projectName, presentPaths }),
+        });
+        if (!res.ok)
+            return [];
+        const data = await res.json();
+        return (data.pointers || [])
+            .filter(p => p.path && p.hook)
+            .map(p => ({ path: p.path, hook: p.hook }));
+    }
+    catch {
+        return [];
+    }
+}
 // ---------- Store ---------------------------------------------------------
 async function store(input, source = 'claude-code') {
     const cwd = input.cwd || process.cwd();
@@ -828,6 +973,19 @@ async function store(input, source = 'claude-code') {
         source,
         provenance,
     });
+    // Doc Pointer System detect half (docs/doc-pointer-system.md): .md writes this
+    // turn → one best-effort event POST; the worthiness judge runs server-side in
+    // waitUntil. After the turn POST (memory capture always wins), never throws.
+    const docEvents = collectDocEvents(turn.filesTouched, cwd);
+    if (docEvents.length > 0) {
+        try {
+            await apiCall(`${cfg.apiUrl}/v1/docptr/${anchor.projectId}/events`, cfg.apiKey, {
+                projectName: anchor.projectName,
+                events: docEvents,
+            });
+        }
+        catch { /* best-effort — a docptr outage never fails the Stop hook */ }
+    }
 }
 // ---------- Main ---------------------------------------------------------
 // ---------- Recap (SessionStart) ------------------------------------------
@@ -1143,6 +1301,17 @@ async function recap(input, mode = 'plain', opts = {}) {
     // tap, so the corpus module can tell the agent to search them before answering
     // from training data. Best-effort; empty → the announce stays silent.
     const corpusApiDocs = await fetchCorpusApiDocs(cfg.apiUrl, cfg.apiKey);
+    // Doc-pointer announce signal (docs/doc-pointer-system.md) — one reconcile+list
+    // round trip: vanished docs go stale server-side, active pointers come back for
+    // the "core documents" block. Best-effort; empty → the announce stays silent.
+    const docPointers = await fetchDocPointers(cfg.apiUrl, cfg.apiKey, anchor, cwd);
+    // Enrichment-health signal (fix c2eb8777) — the live Gemini probe verdict.
+    // Null when healthy or unreachable; a positive failure fires the outage announce.
+    const enrichmentDown = await fetchEnrichmentDown(cfg.apiUrl, cfg.apiKey);
+    // Skill Learning Loop landing leg (docs/skill-learning-loop.md): pending
+    // gains → auto-land references into learnings docs, hold rule/scope
+    // proposals for the announce. Best-effort; undefined → announce silent.
+    const skillGains = await fetchAndLandSkillGains(cfg.apiUrl, cfg.apiKey, anchor, cwd);
     // Assistant doctrine auto-load — fires ONLY for the flagged assistant project
     // (isAssistantProject), so a normal project sees zero change. The hook owns the
     // doctrine-file read; the assistant-doctrine module routes the text. adr: adr/assistant-role.md
@@ -1175,6 +1344,9 @@ async function recap(input, mode = 'plain', opts = {}) {
         setupWarning,
         assistantDoctrine,
         corpusApiDocs,
+        docPointers,
+        enrichmentDown,
+        skillGains,
         updateAvailable,
     };
     let announceReg = mechanicKilled() ? reminder_registry_1.REGISTRY.filter(m => m.id !== 'mechanic-friction') : reminder_registry_1.REGISTRY;
@@ -1289,6 +1461,31 @@ function codexSubagentStart(input) {
     if (context)
         writeAdditionalContext(input.hook_event_name || 'SubagentStart', context);
 }
+/** UserPromptSubmit — Procedure System REPLAY leg (docs/procedure-system.md).
+ *  Match the prompt against the project's procedure store; on a hit inject the
+ *  recipe + gate as additionalContext BEFORE the agent moves, so an operational
+ *  verb runs cleanly instead of by trial-and-error. Pure-local (no network on
+ *  the hot path — reads the file beside the matchset cache), additive, and
+ *  fail-open: a miss or any error never blocks the turn. The Tier-1 intent guard
+ *  (in matchProcedure) suppresses keyword mention-not-request false-fires. */
+async function procedureCheck(input) {
+    try {
+        const prompt = typeof input.prompt === 'string' ? input.prompt : '';
+        if (!prompt.trim())
+            return;
+        const anchor = (0, project_anchor_1.readAnchor)(input.cwd || process.cwd());
+        if (!anchor.projectId)
+            return;
+        const store = (0, procedure_1.readProcedureStore)(anchor.projectId);
+        if (!store.procedures.length)
+            return;
+        const m = (0, procedure_1.matchProcedure)(prompt, store);
+        if (!m)
+            return;
+        writeAdditionalContext(input.hook_event_name || 'UserPromptSubmit', (0, procedure_1.buildProcedureInjection)(m.procedure));
+    }
+    catch { /* fail-open — a procedure miss never blocks the turn */ }
+}
 async function notify(input, source = 'claude-code') {
     if (source === 'codex')
         cacheCodexPrompt(input);
@@ -1738,7 +1935,7 @@ async function main() {
     const subcommand = process.argv[2];
     const validSubs = new Set([
         'store', 'recap', 'recompact', 'notify', 'mail', 'friction-reminder', 'session-id', 'pre-spawn-check', 'armcheck',
-        'collision-check', 'drain', 'coordinate-gate',
+        'collision-check', 'drain', 'coordinate-gate', 'procedure-check',
         'guard', 'guard-refresh', 'guard-flush',
         'context-probe', 'context-check', 'crush-wrap',
         'pre-compact', 'archive-pointer',
@@ -1746,7 +1943,7 @@ async function main() {
         'codex-permission-context', 'codex-subagent-start',
     ]);
     if (!validSubs.has(subcommand)) {
-        process.stderr.write(`Usage: greprag-hook <store|recap|recompact|notify|mail|friction-reminder|session-id|pre-spawn-check|armcheck|collision-check|drain|coordinate-gate|guard|guard-refresh|guard-flush|context-probe|context-check|crush-wrap|pre-compact|archive-pointer|codex-store|codex-notify|codex-inbox|codex-recap|codex-permission-context|codex-subagent-start>\n`);
+        process.stderr.write(`Usage: greprag-hook <store|recap|recompact|notify|mail|friction-reminder|procedure-check|session-id|pre-spawn-check|armcheck|collision-check|drain|coordinate-gate|guard|guard-refresh|guard-flush|context-probe|context-check|crush-wrap|pre-compact|archive-pointer|codex-store|codex-notify|codex-inbox|codex-recap|codex-permission-context|codex-subagent-start>\n`);
         process.exit(1);
     }
     let input = {};
@@ -1781,6 +1978,11 @@ async function main() {
     else if (subcommand === 'mail') {
         await mail(input);
     }
+    else if (subcommand === 'procedure-check') {
+        // UserPromptSubmit — Procedure System REPLAY: inject a matched recipe + gate
+        // before the agent moves. Local, additive, fail-open. docs/procedure-system.md
+        await procedureCheck(input);
+    }
     else if (subcommand === 'friction-reminder') {
         // UserPromptSubmit — the active Mechanic's dynamic friction reminder (beside
         // the arm directive). Stress-driven tier: silent/ambient/nudge/nag. Reads the