greprag 5.73.2 → 5.73.4

package/dist/hook.js

@@ -49,6 +49,8 @@ const project_anchor_1 = require("./project-anchor");
 const mechanic_role_1 = require("./mechanic-role");
 const assistant_doctrine_1 = require("./assistant-doctrine");
 const session_id_1 = require("./session-id");
+const hook_runtime_1 = require("./hook-runtime");
+const codex_prompt_cache_1 = require("./codex-prompt-cache");
 // adr: adr/memory-provenance-capture.md — classify harness-injected user text
 // (skill bodies, continuation summaries, chip prompts) pre-LLM at capture and
 // elide it so it never lands as a searchable turn node.
@@ -80,7 +82,6 @@ const guard_1 = require("./guard");
 const reminder_registry_1 = require("./commands/reminder-registry");
 const inbox_primer_reminder_1 = require("./commands/inbox-primer-reminder");
 const skill_activation_manifest_1 = require("./skill-activation-manifest");
-const friction_reminder_1 = require("./commands/friction-reminder");
 const worktree_state_1 = require("./worktree-state");
 // Ingress-trigger bridge, Adapter A (LOCAL/state half) — the Stop hook computes
 // the deterministic state values (stress / turnCount / keyword-seen) from the
@@ -130,69 +131,14 @@ const ship_through_gate_1 = require("./commands/ship-through-gate");
 // continuity, distilled server-side, transitions applied to the local store.
 const procedure_watch_1 = require("./procedure-watch");
 const inline_atom_hook_1 = require("./inline-atom-hook");
+const inline_atom_background_1 = require("./inline-atom-background");
+const reminder_injector_1 = require("./reminder-injector");
 const skill_landing_1 = require("./skill-landing");
 const skill_mirror_client_1 = require("./skill-mirror-client");
 const doc_mirror_client_1 = require("./doc-mirror-client");
 const equipped_loadouts_cache_1 = require("./equipped-loadouts-cache");
 const codex_chip_hooks_1 = require("./codex-chip-hooks");
-const API_URL_DEFAULT = 'https://api.greprag.com';
 const MAX_FIELD_CHARS = 500_000; // safety cap per text field
-// ---------- Env + config ---------------------------------------------------
-function loadEnvFile(filePath) {
-    try {
-        const content = fs.readFileSync(filePath, 'utf-8');
-        for (const line of content.split('\n')) {
-            const trimmed = line.trim();
-            if (!trimmed || trimmed.startsWith('#'))
-                continue;
-            const eqIdx = trimmed.indexOf('=');
-            if (eqIdx < 1)
-                continue;
-            const key = trimmed.slice(0, eqIdx).trim();
-            let value = trimmed.slice(eqIdx + 1).trim();
-            if ((value.startsWith('"') && value.endsWith('"')) ||
-                (value.startsWith("'") && value.endsWith("'"))) {
-                value = value.slice(1, -1);
-            }
-            if (!process.env[key])
-                process.env[key] = value;
-        }
-    }
-    catch { /* file missing — fine */ }
-}
-function ensureEnv(cwd) {
-    const homeDir = process.env.HOME || process.env.USERPROFILE || '';
-    if (homeDir) {
-        loadEnvFile(path.join(homeDir, '.greprag', '.env'));
-        if (!process.env.GREPRAG_API_KEY)
-            loadEnvFile(path.join(homeDir, '.env'));
-    }
-    if (!process.env.GREPRAG_API_KEY)
-        loadEnvFile(path.join(cwd, '.env'));
-}
-function getConfig(cwd) {
-    ensureEnv(cwd);
-    return {
-        apiUrl: process.env.GREPRAG_API_URL || API_URL_DEFAULT,
-        apiKey: process.env.GREPRAG_API_KEY || '',
-        enabled: process.env.MEMORY_HOOK_ENABLED === 'true',
-    };
-}
-async function apiCall(url, apiKey, body) {
-    const res = await fetch(url, {
-        method: 'POST',
-        headers: {
-            'Authorization': `Bearer ${apiKey}`,
-            'Content-Type': 'application/json',
-        },
-        body: JSON.stringify(body),
-    });
-    if (!res.ok) {
-        process.stderr.write(`[greprag-hook] API ${res.status}: ${await res.text()}\n`);
-        return null;
-    }
-    return res.json();
-}
 function extractText(content) {
     if (typeof content === 'string')
         return content.trim();
@@ -397,67 +343,6 @@ function parseLatestTurn(transcriptPath) {
         provenance: (0, turn_provenance_1.classifyUserText)(userPrompt),
     };
 }
-function codexCacheDir() {
-    const home = process.env.HOME || process.env.USERPROFILE || '';
-    if (!home)
-        return null;
-    return path.join(home, '.greprag', 'codex');
-}
-function promptCachePath(sessionId, turnId) {
-    const dir = codexCacheDir();
-    if (!dir || !sessionId)
-        return null;
-    const raw = turnId || sessionId;
-    const safe = raw.replace(/[^a-zA-Z0-9_.-]/g, '_').slice(0, 160);
-    return path.join(dir, `${safe}.json`);
-}
-function latestPromptCachePath(sessionId) {
-    const dir = codexCacheDir();
-    if (!dir || !sessionId)
-        return null;
-    const safe = sessionId.replace(/[^a-zA-Z0-9_.-]/g, '_').slice(0, 160);
-    return path.join(dir, `${safe}.latest.json`);
-}
-function cacheCodexPrompt(input) {
-    if (typeof input.prompt !== 'string' || !input.prompt.trim() || !input.session_id)
-        return;
-    const entry = {
-        sessionId: input.session_id,
-        turnId: input.turn_id || null,
-        prompt: input.prompt,
-        model: input.model || null,
-        cwd: input.cwd || process.cwd(),
-        createdAt: new Date().toISOString(),
-    };
-    const paths = [
-        promptCachePath(input.session_id, input.turn_id),
-        latestPromptCachePath(input.session_id),
-    ].filter((p) => !!p);
-    for (const file of paths) {
-        try {
-            const dir = path.dirname(file);
-            if (!fs.existsSync(dir))
-                fs.mkdirSync(dir, { recursive: true });
-            fs.writeFileSync(file, JSON.stringify(entry, null, 2) + '\n');
-        }
-        catch { /* prompt cache is best-effort */ }
-    }
-}
-function readCodexPromptCache(input) {
-    const paths = [
-        promptCachePath(input.session_id, input.turn_id),
-        latestPromptCachePath(input.session_id),
-    ].filter((p) => !!p);
-    for (const file of paths) {
-        try {
-            const parsed = JSON.parse(fs.readFileSync(file, 'utf-8'));
-            if (parsed && typeof parsed.prompt === 'string' && parsed.prompt.trim())
-                return parsed;
-        }
-        catch { /* try next */ }
-    }
-    return null;
-}
 /** Walk subagent transcripts under <session>/subagents/ and pull tool_use
  *  blocks that fired during the current turn. Returns flattened ToolCall[]
  *  augmented with _output where a matching tool_result exists in the same
@@ -1125,7 +1010,7 @@ async function fetchDocPointers(apiUrl, apiKey, anchor, cwd) {
 // ---------- Store ---------------------------------------------------------
 async function store(input, source = 'claude-code') {
     const cwd = input.cwd || process.cwd();
-    const cfg = getConfig(cwd);
+    const cfg = (0, hook_runtime_1.getHookConfig)(cwd);
     if (!cfg.enabled || !cfg.apiKey)
         return;
     const anchor = (0, project_anchor_1.readAnchor)(cwd);
@@ -1135,7 +1020,7 @@ async function store(input, source = 'claude-code') {
         return;
     const turn = parseLatestTurn(input.transcript_path);
     if (source === 'codex' && (!turn.userPrompt || !turn.agentResponse)) {
-        const cached = readCodexPromptCache(input);
+        const cached = (0, codex_prompt_cache_1.readCodexPromptCache)(input);
         if (!turn.userPrompt && cached) {
             turn.userPrompt = cached.prompt;
             turn.provenance = (0, turn_provenance_1.classifyUserText)(cached.prompt);
@@ -1185,7 +1070,7 @@ async function store(input, source = 'claude-code') {
     }));
     const toolCalls = (0, secret_scrubber_1.scrubObject)(toolCallsForApi, redaction);
     const artifactRefs = shipEvents.map(ev => `${ev.artifactType}:${ev.artifactId.slice(0, 12)}`);
-    await apiCall(`${cfg.apiUrl}/v1/memory/turn`, cfg.apiKey, {
+    await (0, hook_runtime_1.apiCall)(`${cfg.apiUrl}/v1/memory/turn`, cfg.apiKey, {
         projectId: anchor.projectId,
         projectName: anchor.projectName,
         branch,
@@ -1209,7 +1094,7 @@ async function store(input, source = 'claude-code') {
     const docEvents = collectDocEvents(turn.filesTouched, cwd);
     if (docEvents.length > 0) {
         try {
-            await apiCall(`${cfg.apiUrl}/v1/docptr/${anchor.projectId}/events`, cfg.apiKey, {
+            await (0, hook_runtime_1.apiCall)(`${cfg.apiUrl}/v1/docptr/${anchor.projectId}/events`, cfg.apiKey, {
                 projectName: anchor.projectName,
                 events: docEvents,
             });
@@ -1222,7 +1107,7 @@ async function store(input, source = 'claude-code') {
     try {
         const mirror = (0, doc_mirror_client_1.collectTouchedDocMirrorDocs)(turn.filesTouched, cwd);
         if (mirror.docs.length > 0) {
-            await apiCall(`${cfg.apiUrl}/v1/doc/${anchor.projectId}/mirror`, cfg.apiKey, {
+            await (0, hook_runtime_1.apiCall)(`${cfg.apiUrl}/v1/doc/${anchor.projectId}/mirror`, cfg.apiKey, {
                 projectName: anchor.projectName,
                 docs: mirror.docs.map(({ contentHash: _contentHash, ...doc }) => doc),
                 mode: 'upsert',
@@ -1240,13 +1125,25 @@ async function store(input, source = 'claude-code') {
         }
         catch { /* fail-open — a procedure outage never fails the Stop hook */ }
     }
-    // Inline-Atom Episode Capture (docs/capture-system.md): new backtick
-    // candidates, active episodes, and replay receipts share one Flash-Lite
-    // observation call. Closed episodes alone reach the Flash distiller.
-    try {
-        await (0, inline_atom_hook_1.observeInlineAtoms)(cfg, anchor, input.session_id, userPrompt, agentResponse, toolCalls);
+    // Inline-Atom Episode Capture (docs/capture-system.md): the detector/distiller
+    // is network-backed. Codex Stop spools it to a detached worker so the app's
+    // UI-critical Stop path does not wait on judge/distill calls; Claude Code keeps
+    // the prior synchronous lifecycle.
+    if (source === 'codex') {
+        (0, inline_atom_background_1.spawnInlineAtomObserver)({
+            cwd,
+            sessionId: input.session_id,
+            userPrompt,
+            agentResponse,
+            toolCalls,
+        });
+    }
+    else {
+        try {
+            await (0, inline_atom_hook_1.observeInlineAtoms)(cfg, anchor, input.session_id, userPrompt, agentResponse, toolCalls);
+        }
+        catch { /* fail-open — an inline-atom miss never fails the Stop hook */ }
     }
-    catch { /* fail-open — an inline-atom miss never fails the Stop hook */ }
     // Skill mirror (docs/load-system.md Tier 3): a skill-load turn shadows that
     // skill's current markdown into the tenant's load store — upload ONLY on
     // change (local hash state), so an unchanged skill costs zero network.
@@ -1304,25 +1201,6 @@ async function fetchCorpusApiDocs(apiUrl, apiKey) {
         return [];
     }
 }
-/** Fetch this session's OWN unread count — messages addressed to `to_session_id =
- *  <short>` (mail a peer or the operator sent to THIS session). Safe + non-eavesdrop:
- *  reads only this session's mail, NOT the project-wide count the v5.6.1 removal retired
- *  (that count betrayed a sibling session's private DMs). Powers the watcher-arm module's
- *  grounded "a peer messaged you" nag. Returns 0 on any error. adr: adr/session-id-awareness.md */
-async function fetchSessionUnread(apiUrl, apiKey, short) {
-    try {
-        const res = await fetch(`${apiUrl}/v1/inbox?count_only=1&session_id=${encodeURIComponent(short)}`, {
-            headers: { 'Authorization': `Bearer ${apiKey}` },
-        });
-        if (!res.ok)
-            return 0;
-        const data = await res.json();
-        return data.unread_count || 0;
-    }
-    catch {
-        return 0;
-    }
-}
 /** Identity-drift warning rate limiter.
  *
  *  The drift warning ("stored ID ≠ git-derived ID, run `greprag doctor`") used
@@ -1392,7 +1270,7 @@ function writeRecapOutput(text, mode) {
     if (!text)
         return;
     if (mode === 'additionalContext') {
-        writeAdditionalContext('SessionStart', text);
+        (0, hook_runtime_1.writeAdditionalContext)('SessionStart', text);
         return;
     }
     process.stdout.write(text);
@@ -1477,6 +1355,9 @@ async function checkForUpdate() {
  *  Storage and display are both UTC. The agent can compute local time itself
  *  if needed — a server-side UTC display avoids straddle-day confusion. */
 async function recap(input, mode = 'plain', opts = {}) {
+    const platform = opts.platform || 'claude-code';
+    const hasLocalMonitorLifecycle = platform === 'claude-code';
+    let sessionOwnerPid = null;
     // SessionStart watcher cleanup (best-effort, side-effect only — never writes to
     // stdout, which carries this hook's additionalContext JSON). Three snapshot-free
     // passes: (1) refresh THIS session's owner record (current claude.exe PID) FIRST,
@@ -1485,21 +1366,23 @@ async function recap(input, mode = 'plain', opts = {}) {
     // only the surplus, never below K (no death-detection → no false-kill); (3) GC —
     // reap a session whose owner has stayed dead past the grace window (the hard-
     // crash leak EPIPE can't catch). adr: adr/monitor-resilience.md
-    try {
-        const short = (0, session_id_1.truncateSessionId)(input.session_id);
-        if (short)
-            (0, watcher_registry_1.resolveClaudeOwnerPid)(short); // refresh this session's owner FIRST
-        const capped = (0, watcher_registry_1.reapOrphanWatchers)();
-        const gc = (0, watcher_registry_1.gcDeadSessions)();
-        const n = capped.killed.length + gc.killed.length;
-        if (n > 0) {
-            process.stderr.write(`[greprag] watcher cleanup: capped ${capped.killed.length}, gc'd ${gc.killed.length} ` +
-                `[${[...capped.killed, ...gc.killed].join(', ')}]\n`);
+    if (hasLocalMonitorLifecycle) {
+        try {
+            const short = (0, session_id_1.truncateSessionId)(input.session_id);
+            if (short)
+                sessionOwnerPid = (0, watcher_registry_1.resolveClaudeOwnerPid)(short); // refresh this session's owner FIRST
+            const capped = (0, watcher_registry_1.reapOrphanWatchers)();
+            const gc = (0, watcher_registry_1.gcDeadSessions)();
+            const n = capped.killed.length + gc.killed.length;
+            if (n > 0) {
+                process.stderr.write(`[greprag] watcher cleanup: capped ${capped.killed.length}, gc'd ${gc.killed.length} ` +
+                    `[${[...capped.killed, ...gc.killed].join(', ')}]\n`);
+            }
         }
+        catch { /* cleanup is best-effort — never block session start */ }
     }
-    catch { /* cleanup is best-effort — never block session start */ }
     const cwd = input.cwd || process.cwd();
-    const cfg = getConfig(cwd);
+    const cfg = (0, hook_runtime_1.getHookConfig)(cwd);
     if (!cfg.enabled || !cfg.apiKey)
         return;
     // Ensure the machine's desk-line is up (idempotent singleton). One per machine,
@@ -1527,10 +1410,8 @@ async function recap(input, mode = 'plain', opts = {}) {
     // Mechanic matchset boot pull (D5) — rides the existing SessionStart call
     // (D1: no new round trips). Best-effort: a fetch failure leaves any prior
     // cache in place and never blocks the recap.
-    try {
-        await (0, guard_1.fetchAndCacheMatchset)(cfg.apiUrl, cfg.apiKey, anchor.projectId, opts.platform || 'claude-code');
-    }
-    catch { /* fail-open */ }
+    const matchsetPromise = (0, guard_1.fetchAndCacheMatchset)(cfg.apiUrl, cfg.apiKey, anchor.projectId, platform)
+        .catch(() => null);
     // Setup warning — surfaced at session start when the project's identity is
     // either unstable (path-hash fallback) OR drifting (file UUID differs from
     // what git would derive, indicating an old random UUID minted before git
@@ -1573,22 +1454,22 @@ async function recap(input, mode = 'plain', opts = {}) {
     // Corpus-announce signal — the names of the api-docs-tagged reference banks on
     // tap, so the corpus module can tell the agent to search them before answering
     // from training data. Best-effort; empty → the announce stays silent.
-    const corpusApiDocs = await fetchCorpusApiDocs(cfg.apiUrl, cfg.apiKey);
+    const corpusApiDocsPromise = fetchCorpusApiDocs(cfg.apiUrl, cfg.apiKey);
     // Doc-pointer announce signal (docs/doc-pointer-system.md) — one reconcile+list
     // round trip: vanished docs go stale server-side, active pointers come back for
     // the "core documents" block. Best-effort; empty → the announce stays silent.
-    const docPointers = await fetchDocPointers(cfg.apiUrl, cfg.apiKey, anchor, cwd);
+    const docPointersPromise = fetchDocPointers(cfg.apiUrl, cfg.apiKey, anchor, cwd);
     // Enrichment-health signal (fix c2eb8777) — the live Gemini probe verdict.
     // Null when healthy or unreachable; a positive failure fires the outage announce.
-    const enrichmentDown = await fetchEnrichmentDown(cfg.apiUrl, cfg.apiKey);
+    const enrichmentDownPromise = fetchEnrichmentDown(cfg.apiUrl, cfg.apiKey);
     // Skill Learning Loop landing leg (docs/skill-learning-loop.md): pending
     // gains → auto-land references into learnings docs, hold rule/scope
     // proposals for the announce. Best-effort; undefined → announce silent.
-    const skillGains = await fetchAndLandSkillGains(cfg.apiUrl, cfg.apiKey, anchor, cwd);
+    const skillGainsPromise = fetchAndLandSkillGains(cfg.apiUrl, cfg.apiKey, anchor, cwd);
     // Tier-3 skill activation manifest (docs/load-system.md): fetch canonical
     // full descriptions, then omit skills this harness already advertises
     // natively. Best-effort; the renderer remains pure.
-    const mirroredSkills = await (async () => {
+    const mirroredSkillsPromise = (async () => {
         try {
             const params = new URLSearchParams({ scope: 'effective', projectId: anchor.projectId });
             const res = await fetch(`${cfg.apiUrl}/v1/skillmirror?${params.toString()}`, {
@@ -1599,7 +1480,7 @@ async function recap(input, mode = 'plain', opts = {}) {
             const data = await res.json();
             return (0, skill_activation_manifest_1.activationFromApiRows)({
                 rows: data.skills || [],
-                platform: opts.platform || 'claude-code',
+                platform,
                 cwd,
                 homeDir: process.env.HOME || process.env.USERPROFILE || '',
             });
@@ -1612,7 +1493,7 @@ async function recap(input, mode = 'plain', opts = {}) {
     // self-inflating skill bundles. SessionStart fetch → the ONE advisor announce
     // line each; ALSO cached locally so the per-turn Match sensor reads it without
     // network. Best-effort; undefined/empty → the loadout-registrar stays silent.
-    const loadoutState = await (async () => {
+    const loadoutStatePromise = (async () => {
         const empty = { decls: undefined, pending: [] };
         try {
             const res = await fetch(`${cfg.apiUrl}/v1/loadout/equipped`, {
@@ -1637,6 +1518,21 @@ async function recap(input, mode = 'plain', opts = {}) {
             return empty;
         }
     })();
+    const updateAvailablePromise = checkForUpdate();
+    const bodyPromise = (!opts.compact && anchor.sessionStartRecap)
+        ? (0, opencode_plugin_helpers_1.buildRecapBody)(cfg.apiUrl, cfg.apiKey, anchor)
+        : Promise.resolve('');
+    const [, corpusApiDocs, docPointers, enrichmentDown, skillGains, mirroredSkills, loadoutState, updateAvailable, body,] = await Promise.all([
+        matchsetPromise,
+        corpusApiDocsPromise,
+        docPointersPromise,
+        enrichmentDownPromise,
+        skillGainsPromise,
+        mirroredSkillsPromise,
+        loadoutStatePromise,
+        updateAvailablePromise,
+        bodyPromise,
+    ]);
     const equippedLoadouts = loadoutState.decls;
     // Loadout version-gate deficiency (docs/loadout.md §Version gating step 3): a
     // pending loadout whose equip floor is ABOVE the installed CLI version can't be
@@ -1659,9 +1555,6 @@ async function recap(input, mode = 'plain', opts = {}) {
     const assistantDoctrine = (0, project_anchor_1.isAssistantProject)(anchor)
         ? (0, assistant_doctrine_1.buildAssistantDoctrineContext)(cwd)
         : null;
-    // Deficiency-gated upgrade announce: daily-cached npm check → tell the user to
-    // upgrade when behind. This is how a release actually propagates to everyone.
-    const updateAvailable = await checkForUpdate();
     // Active Procedure installs (adr/procedure-install-control-plane.md). Local,
     // operator-owned state; missing/corrupt installs fail closed to no announce.
     const procedureAnnounces = (() => {
@@ -1694,7 +1587,7 @@ async function recap(input, mode = 'plain', opts = {}) {
     } })();
     const announceEnv = {
         short: announceShort, turnCount: 0, stress: 0, armed: false, sessionUnread: 0,
-        ownerPid: announceShort ? (0, watcher_registry_1.resolveClaudeOwnerPid)(announceShort) : null,
+        ownerPid: hasLocalMonitorLifecycle ? sessionOwnerPid : null,
         alias: (0, session_id_1.readIdentityAlias)(),
         assistant: (() => { try {
             return (0, project_anchor_1.isAssistantProject)(anchor);
@@ -1704,7 +1597,7 @@ async function recap(input, mode = 'plain', opts = {}) {
         } })(),
         mechanic: announceMechanic,
         mechanicLive: announceMechanicLive,
-        platform: opts.platform || 'claude-code',
+        platform,
         projectName: anchor.projectName,
         setupWarning,
         assistantDoctrine,
@@ -1718,7 +1611,7 @@ async function recap(input, mode = 'plain', opts = {}) {
         updateAvailable,
         loadoutUpdateRequired,
     };
-    let announceReg = mechanicKilled() ? reminder_registry_1.REGISTRY.filter(m => m.id !== 'mechanic-friction') : reminder_registry_1.REGISTRY;
+    let announceReg = (0, reminder_injector_1.mechanicKilled)() ? reminder_registry_1.REGISTRY.filter(m => m.id !== 'mechanic-friction') : reminder_registry_1.REGISTRY;
     if (!announceShort)
         announceReg = announceReg.filter(m => m.id !== 'watcher-arm');
     // PostCompact: a compaction wiped the once-loaded SessionStart announces from context.
@@ -1752,7 +1645,6 @@ async function recap(input, mode = 'plain', opts = {}) {
     // function the opencode plugin uses, so the body pushed to the system
     // prompt is byte-identical across harnesses. See adr/opencode-monitor-
     // relay.md 2026-06-06 (g).
-    const body = await (0, opencode_plugin_helpers_1.buildRecapBody)(cfg.apiUrl, cfg.apiKey, anchor);
     // No hourlies → no recap block. Setup warning / checkpoint hint still
     // surface via preamble if they're pending.
     if (!body) {
@@ -1805,30 +1697,22 @@ async function recap(input, mode = 'plain', opts = {}) {
  *  here, so a separate SessionStart arm was pure redundancy). Reads only the
  *  watcher registry — no inbox content/count — so the v5.6.1 leak stays closed.
  *  Gated on greprag being configured. adr: adr/session-id-awareness.md */
-function writeAdditionalContext(hookEventName, additionalContext) {
-    process.stdout.write(JSON.stringify({
-        hookSpecificOutput: {
-            hookEventName,
-            additionalContext,
-        },
-    }) + '\n');
-}
 async function codexInbox(input, debounce = true) {
-    const cfg = getConfig(input.cwd || process.cwd());
+    const cfg = (0, hook_runtime_1.getHookConfig)(input.cwd || process.cwd());
     const context = await (0, codex_steering_1.buildCodexInboxSteering)(input, cfg, { debounce });
     if (!context)
         return;
-    writeAdditionalContext(input.hook_event_name || 'PostToolUse', context);
+    (0, hook_runtime_1.writeAdditionalContext)(input.hook_event_name || 'PostToolUse', context);
 }
 function codexPermissionContext(input) {
     const context = (0, codex_hook_events_1.buildCodexPermissionContext)(input);
     if (context)
-        writeAdditionalContext(input.hook_event_name || 'PermissionRequest', context);
+        (0, hook_runtime_1.writeAdditionalContext)(input.hook_event_name || 'PermissionRequest', context);
 }
 function codexSubagentStart(input) {
     const context = (0, codex_hook_events_1.recordCodexSubagentStart)(input);
     if (context)
-        writeAdditionalContext(input.hook_event_name || 'SubagentStart', context);
+        (0, hook_runtime_1.writeAdditionalContext)(input.hook_event_name || 'SubagentStart', context);
 }
 /** UserPromptSubmit — Procedure System trigger leg (docs/procedure-system.md
  *  §V1 LEARN-leg build spec, component 2). Two paths off a Tier-1 trigger hit:
@@ -1862,7 +1746,7 @@ async function procedureCheck(input) {
             return;
         const m = raw;
         if (m && m.procedure.status !== 'stale') {
-            writeAdditionalContext(input.hook_event_name || 'UserPromptSubmit', (0, procedure_1.buildProcedureInjection)(m.procedure));
+            (0, hook_runtime_1.writeAdditionalContext)(input.hook_event_name || 'UserPromptSubmit', (0, procedure_1.buildProcedureInjection)(m.procedure));
             (0, procedure_watch_1.openWatchIfIdle)(anchor.projectId, m.procedure.verb, 'REPLAY');
             return;
         }
@@ -1879,14 +1763,14 @@ async function procedureCheck(input) {
 }
 async function notify(input, source = 'claude-code', chipContext) {
     if (source === 'codex')
-        cacheCodexPrompt(input);
+        (0, codex_prompt_cache_1.cacheCodexPrompt)(input);
     const duplicateDelegation = source === 'codex'
         ? (0, codex_delegation_dedupe_1.checkCodexDelegationDuplicate)(input)
         : null;
-    const cfg = getConfig(input.cwd || process.cwd());
+    const cfg = (0, hook_runtime_1.getHookConfig)(input.cwd || process.cwd());
     if (!cfg.enabled || !cfg.apiKey) { // unconfigured → local-only checks
         if (duplicateDelegation)
-            writeAdditionalContext('UserPromptSubmit', duplicateDelegation);
+            (0, hook_runtime_1.writeAdditionalContext)('UserPromptSubmit', duplicateDelegation);
         return;
     }
     const short = (0, session_id_1.truncateSessionId)(input.session_id);
@@ -1908,11 +1792,11 @@ async function notify(input, source = 'claude-code', chipContext) {
         const context = await (0, codex_steering_1.buildCodexInboxSteering)(input, cfg, {
             excludeMessageIds: liveMessageId ? [liveMessageId] : [],
         });
-        const reminders = await injectReminders(input, cfg, short, 'codex');
+        const reminders = await (0, reminder_injector_1.injectReminders)(input, cfg, short, 'codex');
         const inlineAtoms = (0, inline_atom_hook_1.buildPendingInlineAtomContext)(input, short);
         const parts = [duplicateDelegation, chipContext, context, reminders, inlineAtoms].filter((p) => !!p);
         if (parts.length)
-            writeAdditionalContext('UserPromptSubmit', parts.join('\n\n'));
+            (0, hook_runtime_1.writeAdditionalContext)('UserPromptSubmit', parts.join('\n\n'));
         return;
     }
     // Reminder-interrupt registry container (docs/reminder-interrupt.md §Registry spec):
@@ -1920,181 +1804,11 @@ async function notify(input, source = 'claude-code', chipContext) {
     // proven-registered `notify` hook — so arming never depends on a freshly-merged
     // subcommand reaching the operator's settings. Fires whatever's deficient (stacking),
     // and auto-silences each module the instant its deficiency resolves.
-    const reminders = await injectReminders(input, cfg, short);
+    const reminders = await (0, reminder_injector_1.injectReminders)(input, cfg, short);
     const inlineAtoms = (0, inline_atom_hook_1.buildPendingInlineAtomContext)(input, short);
     const parts = [reminders, inlineAtoms].filter((p) => !!p);
     if (parts.length)
-        writeAdditionalContext('UserPromptSubmit', parts.join('\n\n'));
-}
-/** Has the operator hit the Mechanic kill switch (`mechanic off` → the D8 panic
- *  switch file the guard dispatcher also checks first)? When set, the active-
- *  Mechanic pair (SessionStart announce + per-turn friction reminder) stays quiet,
- *  so the same switch that quiets the dispatcher quiets this pair too. Fail-quiet:
- *  any fs error reads as NOT killed (the pair keeps working). */
-function mechanicKilled() {
-    try {
-        return fs.existsSync((0, guard_1.killSwitchPath)());
-    }
-    catch {
-        return false;
-    }
-}
-/** Local path for this project's friction-reminder fire-counter (Measurement,
- *  docs/reminder-interrupt.md). Sits beside the matchset cache under the shared
- *  `~/.greprag/state` dir. */
-function frictionStatsPath(projectId) {
-    const home = process.env.HOME || process.env.USERPROFILE || '';
-    return path.join(home, '.greprag', 'state', `friction-reminder-${projectId}.json`);
-}
-/** Fire-counter I/O (the adherence DENOMINATOR). Reads the prior stats, tallies one
- *  fire via the PURE tallyFrictionFire, writes them back. Fully best-effort: a miss
- *  never blocks the turn. The numerator (Mechanic Chips actually spawned) lands
- *  via tallyMechanicSpawn from the spawn path — see the report's Measurement note. */
-function recordFrictionFire(projectId, tier, turnCount) {
-    try {
-        const file = frictionStatsPath(projectId);
-        let prior = null;
-        try {
-            prior = JSON.parse(fs.readFileSync(file, 'utf-8'));
-        }
-        catch { /* none yet */ }
-        const next = (0, friction_reminder_1.tallyFrictionFire)(prior, tier, turnCount, new Date().toISOString());
-        const dir = path.dirname(file);
-        if (!fs.existsSync(dir))
-            fs.mkdirSync(dir, { recursive: true });
-        fs.writeFileSync(file, JSON.stringify(next, null, 2) + '\n');
-    }
-    catch { /* counter is best-effort — never block the turn */ }
-}
-function mechanicLiveNoticePath(projectId, sessionId) {
-    const home = process.env.HOME || process.env.USERPROFILE || '';
-    return path.join(home, '.greprag', 'state', `mechanic-live-notice-${projectId}-${sessionId}.json`);
-}
-function mechanicLiveNoticeDue(input) {
-    if (!input.projectId || !input.sessionId || !input.mechanicLive || input.mechanic)
-        return false;
-    const epoch = input.mechanicEpoch || `legacy:${input.mechanicSessionId || 'project-wide'}`;
-    const key = `${epoch}:${input.mechanicSessionId || 'project-wide'}`;
-    try {
-        const file = mechanicLiveNoticePath(input.projectId, input.sessionId);
-        try {
-            const prior = JSON.parse(fs.readFileSync(file, 'utf-8'));
-            if (prior.key === key)
-                return false;
-        }
-        catch { /* no prior notice */ }
-        const dir = path.dirname(file);
-        if (!fs.existsSync(dir))
-            fs.mkdirSync(dir, { recursive: true });
-        fs.writeFileSync(file, JSON.stringify({ key, at: new Date().toISOString() }, null, 2) + '\n');
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/** The reminder-interrupt registry CONTAINER call (docs/reminder-interrupt.md §Registry
- *  spec) — invoked from the proven-registered `notify` hook (claude-code path). Assembles
- *  the live env (the ONLY i/o: armed via isLocallyArmed, this session's own unread, the
- *  Stop-stashed stress/turnCount, the front-desk envelope notice) and fires every module
- *  whose detector reports deficient: watcher-arm (unarmed → nag if a peer messaged you, else
- *  nudge; silent when armed), the stress-gated mechanic-friction, and front-desk (a soft
- *  "you've got mail" when a new envelope landed). The memory PRIMER announces at SessionStart;
- *  the auto-inject was dropped (knowledge injection, not a reminder — docs/reminder-interrupt.md).
- *  The announce-only modules (setup-warning / checkpoint / assistant-doctrine) stay silent per
- *  turn — their env signals are SessionStart-only. Stacking; emitted once. Fail-open — any miss
- *  → silent. The Mechanic kill switch drops ONLY the mechanic module; the rest keep working. */
-async function injectReminders(input, cfg, short, platform = 'claude-code') {
-    try {
-        const cwd = input.cwd || process.cwd();
-        const anchor = (0, project_anchor_1.readAnchor)(cwd);
-        const codex = platform === 'codex';
-        const armed = codex ? true : (0, watcher_registry_1.isLocallyArmed)(short);
-        const sessionUnread = (codex || armed) ? 0 : await fetchSessionUnread(cfg.apiUrl, cfg.apiKey, short);
-        const ownerPid = (codex || armed) ? null : (0, watcher_registry_1.resolveClaudeOwnerPid)(short);
-        let assistant = false;
-        let mechanic = false;
-        let mechanicLive = false;
-        let mechanicEpoch = null;
-        let mechanicSessionId = null;
-        try {
-            assistant = (0, project_anchor_1.isAssistantProject)(anchor);
-        }
-        catch { /* fail-open */ }
-        try {
-            mechanicLive = (0, mechanic_role_1.isMechanicProject)(anchor);
-            mechanic = (0, mechanic_role_1.isMechanicSession)(anchor, short);
-            mechanicEpoch = (0, mechanic_role_1.readMechanicRoleEpoch)(anchor);
-            mechanicSessionId = (0, mechanic_role_1.readMechanicSessionId)(anchor);
-        }
-        catch { /* fail-open */ }
-        // Stress/turnCount from the Stop-stashed state bag (no LLM/network here).
-        const state = anchor.projectId
-            ? ((0, guard_1.readMatchsetCache)(anchor.projectId)?.stateValues || {})
-            : {};
-        const turnCount = typeof state.turnCount === 'number' ? state.turnCount : 0;
-        const stress = typeof state.stress === 'number' ? state.stress : 0;
-        const bootstrapFriction = state.bootstrapFriction === true ? {
-            level: typeof state.bootstrapFrictionLevel === 'number' ? state.bootstrapFrictionLevel : 2,
-            command: typeof state.bootstrapFrictionCommand === 'string' ? state.bootstrapFrictionCommand : null,
-            error: typeof state.bootstrapFrictionError === 'string' ? state.bootstrapFrictionError : null,
-            signal: typeof state.bootstrapFrictionSignal === 'string' ? state.bootstrapFrictionSignal : null,
-            repeats: typeof state.bootstrapFrictionRepeats === 'number' ? state.bootstrapFrictionRepeats : null,
-        } : null;
-        // NOTE: the per-turn memory AUTO-INJECT (recall-intent → search → surface a hit) was
-        // DROPPED 2026-06-22. It was knowledge-injection, NOT a behavioral reminder — a
-        // different (undeveloped) system that was jammed into this registry for lack of a slot.
-        // It also collided with the agent's own better-targeted `greprag memory search` (taught
-        // by the memory primer). The memory PRIMER (the announce) stays; only the auto-inject is
-        // gone. docs/reminder-interrupt.md (the landed map: reminder ≠ knowledge injection).
-        // Loadout Match sensor (docs/loadout.md): the prompt text is the `prompt`
-        // read surface; the equipped-loadout decls come from the SessionStart-written
-        // LOCAL cache (zero network on the hot path). Both undefined → registrar silent.
-        const promptText = typeof input.prompt === 'string' ? input.prompt : null;
-        const equippedLoadouts = (() => {
-            const cached = (0, equipped_loadouts_cache_1.readEquippedLoadouts)();
-            return cached.length ? cached : undefined;
-        })();
-        const env = {
-            short, turnCount, stress, armed, sessionUnread,
-            bootstrapFriction,
-            ownerPid, alias: (0, session_id_1.readIdentityAlias)(), assistant, mechanic, mechanicLive,
-            mechanicLiveNotice: mechanicLiveNoticeDue({
-                projectId: anchor.projectId,
-                sessionId: short,
-                mechanic,
-                mechanicLive,
-                mechanicEpoch,
-                mechanicSessionId,
-            }),
-            platform,
-            promptText,
-            equippedLoadouts,
-        };
-        // UserPromptSubmit evaluates the prompt-source modules only (command-source
-        // modules — the collision Match — run at PreToolUse). Kill switch drops ONLY
-        // the mechanic module — watcher-arm keeps working.
-        const base = (0, reminder_registry_1.promptModules)().filter(m => !codex || m.id !== 'watcher-arm');
-        const reg = mechanicKilled() ? base.filter(m => m.id !== 'mechanic-friction') : base;
-        const fired = (0, reminder_registry_1.collectReminders)(env, reg);
-        if (!fired.length)
-            return null;
-        // Authoring rule #4 — frame nag/nudge with the act-now directive envelope; ambient
-        // stays a soft pointer. Emit ONCE (stacking via join) so multiple due modules ride a
-        // single additionalContext.
-        const parts = fired.map(f => f.tier === 'ambient' ? f.line : (0, guard_1.wrapDirective)(f.line));
-        // Fire-counter (adherence denominator) for the fix-spawn reflex — best-effort.
-        // grepragOS Law 4 retired the old stress → mechanic_friction forwarding path:
-        // the hook reminds, the agent spawns one FIX chip per friction unit, and no
-        // hidden queue/catch-all row is emitted behind the working session.
-        const mf = fired.find(f => f.id === 'mechanic-friction');
-        if (mf && mf.tier !== 'ambient' && anchor.projectId) {
-            recordFrictionFire(anchor.projectId, mf.tier, turnCount);
-        }
-        return parts.join('\n\n');
-    }
-    catch { /* fail-open — a reminder miss never breaks the turn */ }
-    return null;
+        (0, hook_runtime_1.writeAdditionalContext)('UserPromptSubmit', parts.join('\n\n'));
 }
 /** RETIRED 2026-06-20 — the per-turn reminder injection moved into the registry
  *  container (`injectReminders`, called from `notify`), so watcher-arm + mechanic-friction
@@ -2120,13 +1834,13 @@ async function frictionReminder(_input) {
  *  never blocks the turn. Unconfigured / no API key → silent. */
 async function mail(input) {
     const cwd = input.cwd || process.cwd();
-    const cfg = getConfig(cwd);
+    const cfg = (0, hook_runtime_1.getHookConfig)(cwd);
     if (!cfg.enabled || !cfg.apiKey)
         return; // unconfigured → silent
     try {
         const auto = await maybeAutoSaveAttachments(cwd, cfg.apiUrl, cfg.apiKey);
         if (auto)
-            writeAdditionalContext(input.hook_event_name || 'UserPromptSubmit', auto);
+            (0, hook_runtime_1.writeAdditionalContext)(input.hook_event_name || 'UserPromptSubmit', auto);
     }
     catch { /* drain is best-effort — never block a turn */ }
 }
@@ -2154,7 +1868,7 @@ async function maybeAutoSaveAttachments(cwd, apiUrl, apiKey) {
  *  debugging: wire it as a second UserPromptSubmit hook to see arm state.
  *  adr: adr/session-id-awareness.md */
 async function armCheck(input) {
-    const cfg = getConfig(input.cwd || process.cwd());
+    const cfg = (0, hook_runtime_1.getHookConfig)(input.cwd || process.cwd());
     if (!cfg.enabled || !cfg.apiKey)
         return;
     const short = (0, session_id_1.truncateSessionId)(input.session_id);
@@ -2178,7 +1892,7 @@ async function armCheck(input) {
  *  Fail-quiet: any miss → silent. docs/schematic-triggers.md */
 async function collisionCheck(input) {
     const cwd = input.cwd || process.cwd();
-    const cfg = getConfig(cwd);
+    const cfg = (0, hook_runtime_1.getHookConfig)(cwd);
     if (!cfg.enabled || !cfg.apiKey)
         return; // unconfigured → silent
     const short = (0, session_id_1.truncateSessionId)(input.session_id);
@@ -2202,7 +1916,7 @@ async function collisionCheck(input) {
         alias: (0, session_id_1.readIdentityAlias)(),
     });
     if (context)
-        writeAdditionalContext(input.hook_event_name || 'SessionStart', context);
+        (0, hook_runtime_1.writeAdditionalContext)(input.hook_event_name || 'SessionStart', context);
 }
 /** Inbox drain-on-arm — `greprag-hook drain`. Wire on SessionStart
  *  (startup|resume|compact) = on arm. Drains THIS session's unread, session-
@@ -2216,7 +1930,7 @@ async function collisionCheck(input) {
  *  never blocks SessionStart. adr: adr/monitor-resilience.md */
 async function drain(input) {
     const cwd = input.cwd || process.cwd();
-    const cfg = getConfig(cwd);
+    const cfg = (0, hook_runtime_1.getHookConfig)(cwd);
     if (!cfg.enabled || !cfg.apiKey)
         return; // unconfigured → silent
     const short = (0, session_id_1.truncateSessionId)(input.session_id);
@@ -2224,7 +1938,7 @@ async function drain(input) {
         return; // no session id → silent
     const result = await (0, inbox_drain_1.runInboxDrain)({ session: short, apiUrl: cfg.apiUrl, apiKey: cfg.apiKey });
     if (result.context) {
-        writeAdditionalContext(input.hook_event_name || 'SessionStart', result.context);
+        (0, hook_runtime_1.writeAdditionalContext)(input.hook_event_name || 'SessionStart', result.context);
     }
 }
 function validateChip(title, prompt) {
@@ -2303,7 +2017,7 @@ function guard(input) {
 function stateUpdate(input) {
     try {
         const cwd = input.cwd || process.cwd();
-        const cfg = getConfig(cwd);
+        const cfg = (0, hook_runtime_1.getHookConfig)(cwd);
         if (!cfg.enabled || !cfg.apiKey)
             return;
         const anchor = (0, project_anchor_1.readAnchor)(cwd);
@@ -2334,7 +2048,7 @@ function stateUpdate(input) {
  *  requires its local artifact/action attestation. docs/collision-schematic.md */
 async function coordinateGate(input, codex = false) {
     const cwd = input.cwd || process.cwd();
-    const cfg = getConfig(cwd);
+    const cfg = (0, hook_runtime_1.getHookConfig)(cwd);
     if (!cfg.enabled || !cfg.apiKey)
         return; // unconfigured → silent
     const short = (0, session_id_1.truncateSessionId)(input.session_id);
@@ -2456,7 +2170,7 @@ async function coordinateGate(input, codex = false) {
 /** Detached background child: refetch the matchset + rewrite the cache. */
 async function guardRefresh(input) {
     const cwd = input.cwd || process.cwd();
-    const cfg = getConfig(cwd);
+    const cfg = (0, hook_runtime_1.getHookConfig)(cwd);
     if (!cfg.apiKey)
         return;
     const anchor = (0, project_anchor_1.readAnchor)(cwd);
@@ -2466,7 +2180,7 @@ async function guardRefresh(input) {
 }
 /** Detached background child: drain tally spools to the server (202 route). */
 async function guardFlush(input) {
-    const cfg = getConfig(input.cwd || process.cwd());
+    const cfg = (0, hook_runtime_1.getHookConfig)(input.cwd || process.cwd());
     if (!cfg.apiKey)
         return;
     await (0, guard_1.flushTallySpools)(cfg.apiUrl, cfg.apiKey);
@@ -2635,7 +2349,7 @@ async function main() {
         // whose output reaches the model. Points at the PNG archive.
         const pointer = await (0, archive_1.buildArchivePointer)(input);
         if (pointer)
-            writeAdditionalContext('SessionStart', pointer);
+            (0, hook_runtime_1.writeAdditionalContext)('SessionStart', pointer);
     }
     else if (subcommand === 'codex-store') {
         await store(input, 'codex');