greprag 5.68.0 → 5.69.2

package/dist/hook.js

@@ -106,11 +106,13 @@ const archive_1 = require("./commands/archive");
 // repo (cloud watcher registry) and inject a coordinate-now directive. All real
 // logic lives in ./commands/collision-check. docs/schematic-triggers.md
 const collision_check_1 = require("./commands/collision-check");
-// Coordinate-GATE (PreToolUse) — on a risky shared-state action (git merge/push/
-// deploy) do a FRESH inbox-watchers read and, if a peer is live in THIS repo, raise
-// a permission `ask` so the agent coordinates before merging. Source-agnostic eval
-// (runCoordinateGate) + PreToolUse adapter. docs/collision-schematic.md
+// Coordinate-GATE (PreToolUse) — on risky shared-state actions, Claude/OpenCode
+// consult the watcher registry; Codex additionally requires committed,
+// artifact-bound native/cross-harness conferral evidence. ask is unsupported by
+// Codex, so its adapter uses deny + agent-correctable evidence. adr:
+// adr/codex-coordinate-gate.md
 const coordinate_gate_1 = require("./commands/coordinate-gate");
+const codex_coordinate_1 = require("./commands/codex-coordinate");
 // (The asyncRewake idle-wake poll was REVERTED 2026-06-23 — falsified: a detached
 // process's exit-2 has no harness event to attach to in true deep idle, so it never
 // woke an idle session. Only a live Monitor task delivers to idle. adr: adr/monitor-
@@ -123,11 +125,11 @@ const inbox_drain_1 = require("./commands/inbox-drain");
 const procedure_1 = require("./procedure");
 const ship_through_gate_1 = require("./commands/ship-through-gate");
 // Procedure System LEARN leg (docs/procedure-system.md §V1 LEARN-leg build
-// spec): the span watch — opened at UserPromptSubmit (procedureCheck), observed
+// spec): the episode watch — opened at UserPromptSubmit (procedureCheck), observed
 // per turn by the Stop hook (observeProcedureTurn), closed by negative
 // continuity, distilled server-side, transitions applied to the local store.
 const procedure_watch_1 = require("./procedure-watch");
-const inline_atom_1 = require("./inline-atom");
+const inline_atom_hook_1 = require("./inline-atom-hook");
 const skill_landing_1 = require("./skill-landing");
 const skill_mirror_client_1 = require("./skill-mirror-client");
 const equipped_loadouts_cache_1 = require("./equipped-loadouts-cache");
@@ -950,42 +952,6 @@ async function observeProcedureTurn(cfg, anchor, turn, cwd, redaction) {
     }
     (0, procedure_watch_1.writeProcedureWatch)(anchor.projectId, next);
 }
-async function observeInlineAtoms(cfg, anchor, turn, sessionId, userPrompt, agentResponse) {
-    const atoms = (0, inline_atom_1.mergeInlineAtoms)(userPrompt, agentResponse);
-    if (atoms.length === 0)
-        return;
-    // Provider policy:
-    // - auto/greprag: portable command-hook path, costed to GrepRAG Flash-Lite.
-    // - harness: reserved for Claude Code's native Haiku prompt-hook bridge. Until
-    //   that bridge can write the same local state file, fall back to GrepRAG.
-    // - off: disable the detector.
-    const provider = (process.env.GREPRAG_INLINE_ATOM_JUDGE || 'auto').toLowerCase();
-    if (provider === 'off')
-        return;
-    let verdicts = [];
-    try {
-        const res = await fetch(`${cfg.apiUrl}/v1/inline-atom/${anchor.projectId}/judge`, {
-            method: 'POST',
-            headers: { 'Authorization': `Bearer ${cfg.apiKey}`, 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                projectName: anchor.projectName,
-                user: userPrompt,
-                assistant: agentResponse,
-                atoms,
-                provider: provider === 'harness' ? 'greprag-fallback' : 'greprag',
-            }),
-        });
-        if (res.ok) {
-            const data = await res.json();
-            verdicts = Array.isArray(data.verdicts) ? data.verdicts : [];
-        }
-    }
-    catch { /* detector is best-effort */ }
-    (0, inline_atom_1.promoteInlineAtomResolutions)(anchor.projectId, (0, session_id_1.truncateSessionId)(sessionId) || null, verdicts);
-    if (verdicts.some(v => v.label === 'friction')) {
-        (0, inline_atom_1.writeInlineAtomFriction)(anchor.projectId, (0, session_id_1.truncateSessionId)(sessionId) || null, verdicts);
-    }
-}
 /** SessionStart fetch: the live enrichment-health verdict (fix c2eb8777).
  *  Null = healthy OR unreachable — the outage announce only fires on a
  *  POSITIVE probe failure, so an API blip never cries wolf. The worker
@@ -1249,7 +1215,7 @@ async function store(input, source = 'claude-code') {
         }
         catch { /* best-effort — a docptr outage never fails the Stop hook */ }
     }
-    // Procedure System span observer (docs/procedure-system.md V1 LEARN leg):
+    // Procedure System episode observer (docs/procedure-system.md V1 LEARN leg):
     // gated on "a watch file exists" — zero cost when no watch is open. One
     // synchronous flash-lite continuity call per observed turn; close/watchdog
     // logic is pure in procedure-watch.ts. Best-effort, never throws.
@@ -1259,12 +1225,11 @@ async function store(input, source = 'claude-code') {
         }
         catch { /* fail-open — a procedure outage never fails the Stop hook */ }
     }
-    // Inline-Atom Friction Capture (docs/capture-system.md): if this turn's prose
-    // contains inline backticked atoms, make ONE batched cheap-judge call. Neutral
-    // report atoms stop here; friction writes a local next-turn memory/search
-    // directive. Best-effort, never blocks capture.
+    // Inline-Atom Episode Capture (docs/capture-system.md): new backtick
+    // candidates, active episodes, and replay receipts share one Flash-Lite
+    // observation call. Closed episodes alone reach the Flash distiller.
     try {
-        await observeInlineAtoms(cfg, anchor, turn, input.session_id, userPrompt, agentResponse);
+        await (0, inline_atom_hook_1.observeInlineAtoms)(cfg, anchor, input.session_id, userPrompt, agentResponse, toolCalls);
     }
     catch { /* fail-open — an inline-atom miss never fails the Stop hook */ }
     // Skill mirror (docs/load-system.md Tier 3): a skill-load turn shadows that
@@ -1929,7 +1894,7 @@ async function notify(input, source = 'claude-code', chipContext) {
             excludeMessageIds: liveMessageId ? [liveMessageId] : [],
         });
         const reminders = await injectReminders(input, cfg, short, 'codex');
-        const inlineAtoms = buildPendingInlineAtomContext(input, short);
+        const inlineAtoms = (0, inline_atom_hook_1.buildPendingInlineAtomContext)(input, short);
         const parts = [duplicateDelegation, chipContext, context, reminders, inlineAtoms].filter((p) => !!p);
         if (parts.length)
             writeAdditionalContext('UserPromptSubmit', parts.join('\n\n'));
@@ -1941,24 +1906,11 @@ async function notify(input, source = 'claude-code', chipContext) {
     // subcommand reaching the operator's settings. Fires whatever's deficient (stacking),
     // and auto-silences each module the instant its deficiency resolves.
     const reminders = await injectReminders(input, cfg, short);
-    const inlineAtoms = buildPendingInlineAtomContext(input, short);
+    const inlineAtoms = (0, inline_atom_hook_1.buildPendingInlineAtomContext)(input, short);
     const parts = [reminders, inlineAtoms].filter((p) => !!p);
     if (parts.length)
         writeAdditionalContext('UserPromptSubmit', parts.join('\n\n'));
 }
-function buildPendingInlineAtomContext(input, short) {
-    try {
-        const anchor = (0, project_anchor_1.readAnchor)(input.cwd || process.cwd());
-        if (!anchor.projectId)
-            return null;
-        const records = (0, inline_atom_1.readAndClearInlineAtomFriction)(anchor.projectId, short);
-        const prompt = typeof input.prompt === 'string' ? input.prompt : '';
-        return (0, inline_atom_1.buildInlineAtomContext)({ projectId: anchor.projectId, prompt, records });
-    }
-    catch {
-        return null;
-    }
-}
 /** Has the operator hit the Mechanic kill switch (`mechanic off` → the D8 panic
  *  switch file the guard dispatcher also checks first)? When set, the active-
  *  Mechanic pair (SessionStart announce + per-turn friction reminder) stays quiet,
@@ -2356,17 +2308,16 @@ function stateUpdate(input) {
     }
     catch { /* state update is best-effort — never block the turn */ }
 }
-/** PreToolUse coordinate-GATE — `greprag-hook coordinate-gate`. On a risky
- *  shared-state action (git merge / push / deploy) does a FRESH inbox-watchers
- *  read and, if another live session is working in THIS repo, raises a permission
- *  `ask` (a true pause before the irreversible action) whose reason names the
- *  live peers and tells the agent to message them first. Fires the network read
+/** PreToolUse coordinate-GATE. On a risky shared-state action (git merge / push /
+ *  deploy), does a FRESH inbox-watchers read. Claude/OpenCode inject the roster;
+ *  Codex denies until committed, artifact-bound conferral evidence exists.
+ *  Both paths name live peers and tell the agent to message them first. Fires the network read
  *  ONLY for risky commands — a non-risky Bash call is classified locally and
  *  exits silent, no network. NO dedup: a fresh read every fire (a stale roster at
  *  merge is the exact failure this prevents). Reads only the watcher registry (no
- *  inbox content) — no eavesdrop surface. Fail-quiet: any miss → silent, the
- *  action proceeds ungated. docs/collision-schematic.md */
-async function coordinateGate(input) {
+ *  inbox content) — no eavesdrop surface. Watcher misses fail quiet; Codex still
+ *  requires its local artifact/action attestation. docs/collision-schematic.md */
+async function coordinateGate(input, codex = false) {
     const cwd = input.cwd || process.cwd();
     const cfg = getConfig(cwd);
     if (!cfg.enabled || !cfg.apiKey)
@@ -2388,6 +2339,28 @@ async function coordinateGate(input) {
     }
     if (!anchor.projectId)
         return; // unanchored → nothing to match
+    // First Codex denial is local. Only an already-attested retry pays for the
+    // fresh watcher read, so API latency cannot bypass commit-first enforcement.
+    if (codex) {
+        const local = (0, codex_coordinate_1.evaluateCodexCoordinationGate)({
+            projectId: anchor.projectId,
+            sessionId: short,
+            cwd,
+            trigger,
+            command: typeof toolInput.command === 'string' ? toolInput.command : '',
+            watcherPeers: [],
+        });
+        if (!local.ready) {
+            process.stdout.write(JSON.stringify({
+                hookSpecificOutput: {
+                    hookEventName: input.hook_event_name || 'PreToolUse',
+                    permissionDecision: 'deny',
+                    permissionDecisionReason: local.reason,
+                },
+            }) + '\n');
+            return;
+        }
+    }
     // I/O stays in the hook: fresh peer read off the hot path → env.collisionPeers.
     const peers = await (0, coordinate_gate_1.resolveCollisionPeers)({
         short,
@@ -2397,6 +2370,26 @@ async function coordinateGate(input) {
         apiKey: cfg.apiKey,
         alias: (0, session_id_1.readIdentityAlias)(),
     });
+    if (codex) {
+        const current = (0, codex_coordinate_1.evaluateCodexCoordinationGate)({
+            projectId: anchor.projectId,
+            sessionId: short,
+            cwd,
+            trigger,
+            command: typeof toolInput.command === 'string' ? toolInput.command : '',
+            watcherPeers: peers.map(peer => peer.short),
+        });
+        if (!current.ready) {
+            process.stdout.write(JSON.stringify({
+                hookSpecificOutput: {
+                    hookEventName: input.hook_event_name || 'PreToolUse',
+                    permissionDecision: 'deny',
+                    permissionDecisionReason: current.reason,
+                },
+            }) + '\n');
+            return;
+        }
+    }
     // ship-through: review is a run prerequisite, not a human permission prompt.
     // It applies to routine merge/deploy only; standalone push keeps its own gate.
     try {
@@ -2434,9 +2427,10 @@ async function coordinateGate(input) {
     const fired = (0, reminder_registry_1.collectReminders)(env, (0, reminder_registry_1.commandModules)());
     if (!fired.length)
         return;
-    // EFFECT: inject as additionalContext — advisory heads-up, NO permission pause.
+    // Non-Codex effect: inject as additionalContext — advisory heads-up, NO permission pause.
     // `ask` was too intrusive (prompted on every git op while peers were live); inject
-    // keeps the agent aware without a manual-allow. adr: adr/monitor-resilience.md
+    // keeps the agent aware without a manual-allow. Codex uses the evidence gate above.
+    // adr: adr/codex-coordinate-gate.md
     process.stdout.write(JSON.stringify({
         hookSpecificOutput: {
             hookEventName: input.hook_event_name || 'PreToolUse',
@@ -2466,7 +2460,7 @@ async function main() {
     const subcommand = process.argv[2];
     const validSubs = new Set([
         'store', 'recap', 'recompact', 'notify', 'mail', 'friction-reminder', 'session-id', 'pre-spawn-check', 'armcheck',
-        'collision-check', 'drain', 'coordinate-gate', 'procedure-check',
+        'collision-check', 'drain', 'coordinate-gate', 'codex-coordinate-gate', 'procedure-check',
         'guard', 'guard-refresh', 'guard-flush',
         'context-probe', 'context-check', 'crush-wrap',
         'pre-compact', 'archive-pointer',
@@ -2475,7 +2469,7 @@ async function main() {
         'codex-chip-hook',
     ]);
     if (!validSubs.has(subcommand)) {
-        process.stderr.write(`Usage: greprag-hook <store|recap|recompact|notify|mail|friction-reminder|procedure-check|session-id|pre-spawn-check|armcheck|collision-check|drain|coordinate-gate|guard|guard-refresh|guard-flush|context-probe|context-check|crush-wrap|pre-compact|archive-pointer|codex-store|codex-notify|codex-inbox|codex-recap|codex-permission-context|codex-subagent-start|codex-chip-hook>\n`);
+        process.stderr.write(`Usage: greprag-hook <store|recap|recompact|notify|mail|friction-reminder|procedure-check|session-id|pre-spawn-check|armcheck|collision-check|drain|coordinate-gate|codex-coordinate-gate|guard|guard-refresh|guard-flush|context-probe|context-check|crush-wrap|pre-compact|archive-pointer|codex-store|codex-notify|codex-inbox|codex-recap|codex-permission-context|codex-subagent-start|codex-chip-hook>\n`);
         process.exit(1);
     }
     let input = {};
@@ -2578,11 +2572,17 @@ async function main() {
         await drain(input);
     }
     else if (subcommand === 'coordinate-gate') {
-        // PreToolUse[Bash] — on a risky shared-state action (git merge/push/deploy),
-        // fresh inbox-watchers read → permission `ask` if a peer is live in this repo.
+        // Claude/OpenCode PreToolUse[Bash] — fresh watcher read + context injection
+        // when a risky shared-state action has a live same-repo peer.
         // docs/collision-schematic.md
         await coordinateGate(input);
     }
+    else if (subcommand === 'codex-coordinate-gate') {
+        // Codex PreToolUse[Bash] — deny risky shared-state actions until the
+        // committed artifact has fresh native + cross-harness conferral evidence.
+        // adr: adr/codex-coordinate-gate.md
+        await coordinateGate(input, true);
+    }
     else if (subcommand === 'context-probe') {
         // Stop probe — transcript-tail context-size measurement, local state only.
         (0, context_governor_1.runContextProbe)(input);