memhook 0.2.0 → 0.3.0

package/dist/src/init.js

@@ -0,0 +1,283 @@
+/**
+ * `memhook init` / `memhook uninstall` orchestration.
+ *
+ * These are INTERACTIVE, user-invoked commands — NOT the hook entrypoint. They
+ * are allowed to prompt, own the TTY, print to stdout, and exit non-zero on
+ * user error (docs/SPECIFICATION.md §9: "memhook run is the only command that
+ * must obey the fail-soft contract"). The one hard rule: they must never
+ * corrupt `~/.claude/settings.json`. So:
+ *   - the merge itself is pure + unit-tested (src/install.ts),
+ *   - an unparseable settings file aborts rather than being overwritten,
+ *   - every write is preceded by a timestamped backup,
+ *   - `--dry-run` prints the plan and writes nothing.
+ *
+ * All file I/O lives here; `install.ts` stays pure.
+ */
+import { copyFileSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { createInterface } from "node:readline/promises";
+import { stringify as yamlStringify } from "yaml";
+import { addHooks, removeHooks } from "./install.js";
+import { buildCatalog } from "./catalog.js";
+import { loadConfig } from "./config.js";
+import { makeAnsi } from "./ansi.js";
+const PROVIDERS = ["anthropic", "openai", "ollama"];
+const DEFAULT_KEY_ENV = {
+    anthropic: "ANTHROPIC_API_KEY",
+    openai: "OPENAI_API_KEY",
+    ollama: undefined,
+};
+/** A backup path next to `path`, stamped so successive runs never collide. */
+export function backupPath(path, stamp) {
+    return `${path}.bak-${stamp}`;
+}
+function stampNow() {
+    return new Date()
+        .toISOString()
+        .replace(/[:.]/g, "-")
+        .replace(/-(\d{3})Z$/, "Z");
+}
+function defaultSettingsPath() {
+    return join(homedir(), ".claude", "settings.json");
+}
+function configYamlPath() {
+    return join(homedir(), ".config", "memhook", "config.yaml");
+}
+/**
+ * Build the minimal YAML config object for the chosen provider — only keys that
+ * differ from the built-in defaults are emitted, so the file stays small and
+ * the anthropic-default install writes no config at all.
+ */
+export function buildConfigObject(opts) {
+    const provider = {};
+    if (opts.provider !== "anthropic")
+        provider["type"] = opts.provider;
+    if (opts.model)
+        provider["model"] = opts.model;
+    if (opts.apiKeyEnv && opts.apiKeyEnv !== DEFAULT_KEY_ENV[opts.provider]) {
+        provider["apiKeyEnv"] = opts.apiKeyEnv;
+    }
+    return Object.keys(provider).length > 0 ? { provider } : null;
+}
+function makeIo(env) {
+    const ansi = makeAnsi({ isTTY: Boolean(process.stdout.isTTY), env });
+    return { out: (s) => process.stdout.write(s + "\n"), ansi };
+}
+/**
+ * Read + JSON-parse settings; returns `{}` for a missing/empty file, throws for
+ * invalid JSON. Reads-then-handles-ENOENT rather than checking existence first,
+ * which avoids a check-then-use race (CodeQL js/file-system-race).
+ */
+function readSettings(path) {
+    let text;
+    try {
+        text = readFileSync(path, "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return {};
+        throw err;
+    }
+    if (text.trim() === "")
+        return {};
+    return JSON.parse(text);
+}
+function writeJson(path, value) {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, JSON.stringify(value, null, 2) + "\n", "utf8");
+}
+/**
+ * Copy `path` to its timestamped backup; returns false when there was nothing
+ * to back up (file absent). Copy-then-handle-ENOENT — not an `existsSync`
+ * pre-check — avoids a check-then-use race and is robust if the file vanishes.
+ */
+function backupFile(path, stamp) {
+    try {
+        copyFileSync(path, backupPath(path, stamp));
+        return true;
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return false;
+        throw err;
+    }
+}
+// ── memhook init ──────────────────────────────────────────────────────────
+export async function runInit(opts, env = process.env) {
+    const io = makeIo(env);
+    const { ansi } = io;
+    const settingsPath = opts.settingsPath ?? defaultSettingsPath();
+    const interactive = !opts.yes && Boolean(process.stdin.isTTY) && !opts.dryRun;
+    io.out(ansi.bold("memhook init") + ansi.dim(" — wire memhook into Claude Code\n"));
+    // 1. Provider / key / model — flags win, then prompts, then defaults.
+    let provider = opts.provider ?? "anthropic";
+    const model = opts.model;
+    let apiKeyEnv = opts.apiKeyEnv;
+    if (interactive) {
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        try {
+            const p = (await rl.question(`Provider ${ansi.dim("[anthropic]")} / openai / ollama: `))
+                .trim()
+                .toLowerCase();
+            if (p && PROVIDERS.includes(p))
+                provider = p;
+            if (provider !== "ollama") {
+                const defKey = DEFAULT_KEY_ENV[provider];
+                const k = (await rl.question(`API key env var ${ansi.dim(`[${defKey}]`)}: `)).trim();
+                apiKeyEnv = k || apiKeyEnv || defKey;
+            }
+        }
+        finally {
+            rl.close();
+        }
+    }
+    else {
+        apiKeyEnv = apiKeyEnv ?? DEFAULT_KEY_ENV[provider];
+    }
+    // 2. Compute the settings.json merge (pure).
+    let existing;
+    try {
+        existing = readSettings(settingsPath);
+    }
+    catch {
+        io.out(ansi.red("✗ ") +
+            `${settingsPath} is not valid JSON. Refusing to overwrite it.\n` +
+            ansi.dim("  Fix or move the file, then re-run `memhook init`."));
+        return 1;
+    }
+    const merge = addHooks(existing, opts.bin);
+    const configObj = buildConfigObject({ provider, model, apiKeyEnv });
+    // 3. Plan summary.
+    io.out(ansi.bold("\nPlan"));
+    if (merge.added.length > 0) {
+        io.out(`  ${ansi.green("+")} hook ${merge.added.join(" + ")} → ${settingsPath}`);
+        io.out(`      ${ansi.dim(`backup → ${backupPath(settingsPath, "<timestamp>")}`)}`);
+    }
+    for (const ev of merge.alreadyPresent) {
+        io.out(`  ${ansi.dim("·")} hook ${ev} already wired ${ansi.dim("(skip)")}`);
+    }
+    if (configObj) {
+        io.out(`  ${ansi.green("+")} config → ${configYamlPath()} ${ansi.dim(`(provider: ${provider})`)}`);
+    }
+    else {
+        io.out(`  ${ansi.dim("·")} provider anthropic (default) ${ansi.dim("— no config file needed")}`);
+    }
+    if (!opts.noCatalog)
+        io.out(`  ${ansi.green("+")} build catalog`);
+    // 4. API-key heads-up (never blocks; just warns).
+    if (provider !== "ollama" && apiKeyEnv && !env[apiKeyEnv]) {
+        io.out(`\n  ${ansi.yellow("!")} ${apiKeyEnv} is not set in this shell — ` +
+            ansi.dim(`export it before memhook can route (the hook fails soft until then).`));
+    }
+    if (opts.dryRun) {
+        io.out(ansi.dim("\n(dry run — nothing written)"));
+        return 0;
+    }
+    if (interactive) {
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        try {
+            const go = (await rl.question(`\n${ansi.bold("Proceed?")} ${ansi.dim("[Y/n]")} `))
+                .trim()
+                .toLowerCase();
+            if (go === "n" || go === "no") {
+                io.out(ansi.dim("Aborted. Nothing written."));
+                return 0;
+            }
+        }
+        finally {
+            rl.close();
+        }
+    }
+    // 5. Write (settings first, with backup).
+    const stamp = stampNow();
+    if (merge.added.length > 0) {
+        backupFile(settingsPath, stamp);
+        writeJson(settingsPath, merge.settings);
+        io.out(`${ansi.green("✓")} wired ${merge.added.join(" + ")} into ${settingsPath}`);
+    }
+    if (configObj) {
+        const cfgPath = configYamlPath();
+        backupFile(cfgPath, stamp);
+        mkdirSync(dirname(cfgPath), { recursive: true });
+        writeFileSync(cfgPath, yamlStringify(configObj), "utf8");
+        io.out(`${ansi.green("✓")} wrote ${cfgPath}`);
+    }
+    // 6. Bootstrap memory dirs so build-catalog + the router have somewhere to look.
+    for (const d of [join(homedir(), ".claude", "rules"), join(homedir(), ".claude", "projects")]) {
+        mkdirSync(d, { recursive: true });
+    }
+    // 7. Seed the catalog.
+    if (!opts.noCatalog) {
+        try {
+            const config = loadConfig(env);
+            const res = buildCatalog({ cwd: process.cwd(), outputPath: config.catalog.path });
+            io.out(`${ansi.green("✓")} catalog ${config.catalog.path} ${ansi.dim(`(${res.lines}L)`)}`);
+        }
+        catch {
+            io.out(ansi.yellow("! ") + "catalog build skipped (run `memhook build-catalog` later)");
+        }
+    }
+    io.out(`\n${ansi.green("Done.")} Restart Claude Code, then watch it live with ` +
+        ansi.bold("memhook tail") +
+        ".");
+    return 0;
+}
+// ── memhook uninstall ───────────────────────────────────────────────────────
+export async function runUninstall(opts, env = process.env) {
+    const io = makeIo(env);
+    const { ansi } = io;
+    const settingsPath = opts.settingsPath ?? defaultSettingsPath();
+    const interactive = !opts.yes && Boolean(process.stdin.isTTY) && !opts.dryRun;
+    io.out(ansi.bold("memhook uninstall") + ansi.dim(" — remove memhook hooks\n"));
+    let existing;
+    try {
+        existing = readSettings(settingsPath);
+    }
+    catch {
+        io.out(ansi.red("✗ ") + `${settingsPath} is not valid JSON. Refusing to touch it.`);
+        return 1;
+    }
+    const result = removeHooks(existing);
+    if (result.removed === 0) {
+        io.out(ansi.dim("No memhook hooks found. Nothing to do."));
+        return 0;
+    }
+    io.out(ansi.bold("Plan"));
+    io.out(`  ${ansi.red("-")} ${result.removed} memhook hook(s) from ${result.removedEvents.join(" + ")}`);
+    io.out(`      ${ansi.dim(`backup → ${backupPath(settingsPath, "<timestamp>")}`)}`);
+    if (opts.purge)
+        io.out(`  ${ansi.red("-")} purge cache + log`);
+    if (opts.dryRun) {
+        io.out(ansi.dim("\n(dry run — nothing written)"));
+        return 0;
+    }
+    if (interactive) {
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        try {
+            const go = (await rl.question(`\n${ansi.bold("Proceed?")} ${ansi.dim("[y/N]")} `))
+                .trim()
+                .toLowerCase();
+            if (go !== "y" && go !== "yes") {
+                io.out(ansi.dim("Aborted. Nothing written."));
+                return 0;
+            }
+        }
+        finally {
+            rl.close();
+        }
+    }
+    const stamp = stampNow();
+    backupFile(settingsPath, stamp);
+    writeJson(settingsPath, result.settings);
+    io.out(`${ansi.green("✓")} removed ${result.removed} hook(s) from ${settingsPath}`);
+    if (opts.purge) {
+        const config = loadConfig(env);
+        for (const target of [config.cache.dir, config.logging.jsonlPath]) {
+            io.out(ansi.dim(`  (left in place: ${target} — remove manually if desired)`));
+        }
+    }
+    io.out(`\n${ansi.green("Done.")} Restart Claude Code to drop the hooks.`);
+    return 0;
+}
+//# sourceMappingURL=init.js.map

package/dist/src/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAiB,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAqB,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAa,MAAM,WAAW,CAAC;AAEhD,MAAM,SAAS,GAAmB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACpE,MAAM,eAAe,GAA6C;IAChE,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,SAAS;CAClB,CAAC;AAoBF,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAAa;IACpD,OAAO,GAAG,IAAI,QAAQ,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,IAAI,IAAI,EAAE;SACd,WAAW,EAAE;SACb,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAIjC;IACC,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW;QAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;IACpE,IAAI,IAAI,CAAC,KAAK;QAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;IAC/C,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,QAAQ,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAOD,SAAS,MAAM,CAAC,GAAsB;IACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACrE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAc;IAC7C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC7C,IAAI,CAAC;QACH,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,6EAA6E;AAE7E,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACpB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAE9E,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;IAEnF,sEAAsE;IACtE,IAAI,QAAQ,GAAiB,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAE/B,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;iBACrF,IAAI,EAAE;iBACN,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,IAAK,SAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,QAAQ,GAAG,CAAiB,CAAC;YAE3E,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;gBACzC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrF,SAAS,GAAG,CAAC,IAAI,SAAS,IAAI,MAAM,CAAC;YACvC,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,SAAS,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED,6CAA6C;IAC7C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,EAAE,CAAC,GAAG,CACJ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACZ,GAAG,YAAY,iDAAiD;YAChE,IAAI,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAClE,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAEpE,mBAAmB;IACnB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;QACjF,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACtC,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,EAAE,CAAC,GAAG,CACJ,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,QAAQ,GAAG,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CACJ,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,iCAAiC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAElE,kDAAkD;IAClD,IAAI,QAAQ,KAAK,QAAQ,IAAI,SAAS,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,EAAE,CAAC,GAAG,CACJ,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,SAAS,8BAA8B;YAChE,IAAI,CAAC,GAAG,CAAC,sEAAsE,CAAC,CACnF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;iBAC/E,IAAI,EAAE;iBACN,WAAW,EAAE,CAAC;YACjB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC9B,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBAC9C,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAChC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;QACjC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3B,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,iFAAiF;IACjF,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QAC9F,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClF,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,2DAA2D,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,EAAE,CAAC,GAAG,CACJ,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gDAAgD;QACtE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;QACzB,GAAG,CACN,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAsB,EACtB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACpB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAE9E,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAE/E,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,YAAY,2CAA2C,CAAC,CAAC;QACpF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACzB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1B,EAAE,CAAC,GAAG,CACJ,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,yBAAyB,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAChG,CAAC;IACF,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,KAAK;QAAE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE/D,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;iBAC/E,IAAI,EAAE;iBACN,WAAW,EAAE,CAAC;YACjB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBAC/B,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBAC9C,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAChC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,OAAO,iBAAiB,YAAY,EAAE,CAAC,CAAC;IAEpF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAClE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,MAAM,gCAAgC,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;IAC1E,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/src/install.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Pure settings.json hook wiring — the dangerous-but-testable core of
+ * `memhook init` / `memhook uninstall`.
+ *
+ * Everything here is a pure data transform: it takes the parsed contents of
+ * `~/.claude/settings.json` and returns a NEW object with memhook's hooks
+ * added or removed. There is NO file I/O in this module — the orchestration
+ * layer (`src/init.ts`) handles reading, backing up, and writing. Keeping the
+ * merge pure means the idempotency / non-clobbering guarantees are unit-tested
+ * without touching anyone's real config (the one file we must never corrupt).
+ *
+ * The Claude Code hook shape (sourced from the README + docs/SPECIFICATION.md
+ * §10) is:
+ *
+ *   {
+ *     "hooks": {
+ *       "UserPromptSubmit": [ { "hooks": [ { "type": "command", "command": "memhook run" } ] } ],
+ *       "SessionStart":     [ { "hooks": [ { "type": "command", "command": "memhook build-catalog" } ] } ]
+ *     }
+ *   }
+ *
+ * Each event maps to an array of matcher-groups; each group has a `hooks` array
+ * of `{ type, command }`. memhook contributes one group per event and leaves
+ * every other key — and every other user hook — untouched.
+ */
+/** The two events memhook wires, paired with the subcommand each runs. */
+export declare const MEMHOOK_HOOKS: readonly [{
+    readonly event: "UserPromptSubmit";
+    readonly subcommand: "run";
+}, {
+    readonly event: "SessionStart";
+    readonly subcommand: "build-catalog";
+}];
+export type HookEvent = (typeof MEMHOOK_HOOKS)[number]["event"];
+export interface HookCommand {
+    type: "command";
+    command: string;
+    [key: string]: unknown;
+}
+export interface HookGroup {
+    hooks?: HookCommand[];
+    [key: string]: unknown;
+}
+export interface Settings {
+    hooks?: Record<string, HookGroup[]>;
+    [key: string]: unknown;
+}
+export interface AddResult {
+    settings: Settings;
+    /** Events where a memhook hook was newly added. */
+    added: HookEvent[];
+    /** Events where a memhook hook was already present (idempotent no-op). */
+    alreadyPresent: HookEvent[];
+}
+export interface RemoveResult {
+    settings: Settings;
+    /** Number of individual memhook hook commands removed. */
+    removed: number;
+    /** Event names a memhook hook was removed from. */
+    removedEvents: string[];
+}
+/**
+ * If `command` invokes the memhook binary, return its subcommand
+ * (e.g. "run", "build-catalog"), else null. Matches the README form
+ * (`memhook run`), an absolute-path form (`/usr/local/bin/memhook run`), and a
+ * node form (`node dist/bin/memhook.js run`). Detection is binary-name based
+ * (not the configured invocation), so `uninstall` cleans up a hook regardless
+ * of how it was originally written.
+ */
+export declare function memhookSubcommand(command: unknown): string | null;
+/**
+ * Return a deep clone with memhook's hooks added. Idempotent: an event that
+ * already has a memhook hook for its subcommand is left untouched. Every other
+ * key and every other user hook is preserved exactly.
+ *
+ * @param input  parsed settings.json (non-object input is treated as `{}`)
+ * @param bin    the command used to invoke memhook (default `"memhook"`)
+ */
+export declare function addHooks(input: unknown, bin?: string): AddResult;
+/**
+ * Return a deep clone with every memhook hook removed. Scans ALL hook events
+ * (not just the two memhook registers) so a hook moved by hand is still cleaned
+ * up. Empties that result — a group whose `hooks` becomes empty, an event whose
+ * group list becomes empty — are pruned so no dangling shells are left behind.
+ */
+export declare function removeHooks(input: unknown): RemoveResult;
+//# sourceMappingURL=install.d.ts.map

package/dist/src/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,aAAa;;;;;;EAGhB,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;AAEhE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,QAAQ,CAAC;IACnB,mDAAmD;IACnD,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,0EAA0E;IAC1E,cAAc,EAAE,SAAS,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,QAAQ,CAAC;IACnB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAMD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAIjE;AAQD;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,SAAY,GAAG,SAAS,CAmBnE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAqCxD"}

package/dist/src/install.js

@@ -0,0 +1,124 @@
+/**
+ * Pure settings.json hook wiring — the dangerous-but-testable core of
+ * `memhook init` / `memhook uninstall`.
+ *
+ * Everything here is a pure data transform: it takes the parsed contents of
+ * `~/.claude/settings.json` and returns a NEW object with memhook's hooks
+ * added or removed. There is NO file I/O in this module — the orchestration
+ * layer (`src/init.ts`) handles reading, backing up, and writing. Keeping the
+ * merge pure means the idempotency / non-clobbering guarantees are unit-tested
+ * without touching anyone's real config (the one file we must never corrupt).
+ *
+ * The Claude Code hook shape (sourced from the README + docs/SPECIFICATION.md
+ * §10) is:
+ *
+ *   {
+ *     "hooks": {
+ *       "UserPromptSubmit": [ { "hooks": [ { "type": "command", "command": "memhook run" } ] } ],
+ *       "SessionStart":     [ { "hooks": [ { "type": "command", "command": "memhook build-catalog" } ] } ]
+ *     }
+ *   }
+ *
+ * Each event maps to an array of matcher-groups; each group has a `hooks` array
+ * of `{ type, command }`. memhook contributes one group per event and leaves
+ * every other key — and every other user hook — untouched.
+ */
+/** The two events memhook wires, paired with the subcommand each runs. */
+export const MEMHOOK_HOOKS = [
+    { event: "UserPromptSubmit", subcommand: "run" },
+    { event: "SessionStart", subcommand: "build-catalog" },
+];
+function isPlainObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+/**
+ * If `command` invokes the memhook binary, return its subcommand
+ * (e.g. "run", "build-catalog"), else null. Matches the README form
+ * (`memhook run`), an absolute-path form (`/usr/local/bin/memhook run`), and a
+ * node form (`node dist/bin/memhook.js run`). Detection is binary-name based
+ * (not the configured invocation), so `uninstall` cleans up a hook regardless
+ * of how it was originally written.
+ */
+export function memhookSubcommand(command) {
+    if (typeof command !== "string")
+        return null;
+    const m = command.match(/(?:^|[\s/\\])memhook(?:\.[cm]?js)?["']?\s+([a-z][a-z-]*)/i);
+    return m?.[1] ? m[1].toLowerCase() : null;
+}
+/** True if `group` contains a memhook hook for `subcommand`. */
+function groupHasMemhook(group, subcommand) {
+    if (!Array.isArray(group.hooks))
+        return false;
+    return group.hooks.some((h) => memhookSubcommand(h?.command) === subcommand);
+}
+/**
+ * Return a deep clone with memhook's hooks added. Idempotent: an event that
+ * already has a memhook hook for its subcommand is left untouched. Every other
+ * key and every other user hook is preserved exactly.
+ *
+ * @param input  parsed settings.json (non-object input is treated as `{}`)
+ * @param bin    the command used to invoke memhook (default `"memhook"`)
+ */
+export function addHooks(input, bin = "memhook") {
+    const settings = isPlainObject(input) ? structuredClone(input) : {};
+    if (!isPlainObject(settings.hooks))
+        settings.hooks = {};
+    const hooks = settings.hooks;
+    const added = [];
+    const alreadyPresent = [];
+    for (const { event, subcommand } of MEMHOOK_HOOKS) {
+        const list = Array.isArray(hooks[event]) ? hooks[event] : (hooks[event] = []);
+        if (list.some((g) => isPlainObject(g) && groupHasMemhook(g, subcommand))) {
+            alreadyPresent.push(event);
+            continue;
+        }
+        list.push({ hooks: [{ type: "command", command: `${bin} ${subcommand}` }] });
+        added.push(event);
+    }
+    return { settings, added, alreadyPresent };
+}
+/**
+ * Return a deep clone with every memhook hook removed. Scans ALL hook events
+ * (not just the two memhook registers) so a hook moved by hand is still cleaned
+ * up. Empties that result — a group whose `hooks` becomes empty, an event whose
+ * group list becomes empty — are pruned so no dangling shells are left behind.
+ */
+export function removeHooks(input) {
+    const settings = isPlainObject(input) ? structuredClone(input) : {};
+    let removed = 0;
+    const removedEvents = [];
+    if (!isPlainObject(settings.hooks))
+        return { settings, removed, removedEvents };
+    const hooks = settings.hooks;
+    for (const event of Object.keys(hooks)) {
+        const list = hooks[event];
+        if (!Array.isArray(list))
+            continue;
+        let removedHere = 0;
+        const kept = [];
+        for (const group of list) {
+            if (!isPlainObject(group) || !Array.isArray(group.hooks)) {
+                kept.push(group);
+                continue;
+            }
+            const before = group.hooks.length;
+            group.hooks = group.hooks.filter((h) => memhookSubcommand(h?.command) === null);
+            removedHere += before - group.hooks.length;
+            // Drop a group only if WE emptied it (a group that was already empty, or
+            // empty for other reasons, is preserved untouched).
+            if (group.hooks.length > 0 || before === 0)
+                kept.push(group);
+        }
+        if (removedHere > 0) {
+            removed += removedHere;
+            removedEvents.push(event);
+            if (kept.length > 0)
+                hooks[event] = kept;
+            // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+            else
+                delete hooks[event];
+        }
+    }
+    return { settings, removed, removedEvents };
+}
+//# sourceMappingURL=install.js.map

package/dist/src/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,EAAE,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,KAAK,EAAE;IAChD,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE;CAC9C,CAAC;AAoCX,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACrF,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,gEAAgE;AAChE,SAAS,eAAe,CAAC,KAAgB,EAAE,UAAkB;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc,EAAE,GAAG,GAAG,SAAS;IACtD,MAAM,QAAQ,GAAa,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,eAAe,CAAC,KAAK,CAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;IACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAE7B,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,cAAc,GAAgB,EAAE,CAAC;IAEvC,KAAK,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,aAAa,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YACzE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,QAAQ,GAAa,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,eAAe,CAAC,KAAK,CAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QAEnC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,MAAM,IAAI,GAAgB,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC,IAAI,CAAC,KAAkB,CAAC,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;YAClC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;YAChF,WAAW,IAAI,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;YAC3C,yEAAyE;YACzE,oDAAoD;YACpD,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,IAAI,WAAW,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YACzC,gEAAgE;;gBAC3D,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC9C,CAAC"}

package/dist/src/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAkBH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,kBAAkB,EAAE;QAClB,aAAa,EAAE,kBAAkB,CAAC;QAClC,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH;AAuBD,wBAAsB,KAAK,CACzB,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,UAAU,CAAC,CA0JrB"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAoBH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,kBAAkB,EAAE;QAClB,aAAa,EAAE,kBAAkB,CAAC;QAClC,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH;AAuBD,wBAAsB,KAAK,CACzB,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,UAAU,CAAC,CAyKrB"}

package/dist/src/router.js

@@ -18,7 +18,7 @@
  * Fail-soft: every error path falls back to empty additionalContext.
  * Never blocks Claude Code.
  */
-import { existsSync, readFileSync, statSync, appendFileSync, mkdirSync, readdirSync, } from "node:fs";
+import { existsSync, readFileSync, openSync, fstatSync, closeSync, appendFileSync, mkdirSync, readdirSync, } from "node:fs";
 import { join, dirname, basename } from "node:path";
 import { LocalCache } from "./cache.js";
 import { loadConfig } from "./config.js";
@@ -52,7 +52,26 @@ export async function route(stdinJson, env = process.env) {
         logEntry(config, baseLog(input.prompt, "pre_filter_skip"));
         return EMPTY;
     }
-    if (!existsSync(config.catalog.path)) {
+    // Read the catalog through a single fd: `fstat` gives the cache-key mtime and
+    // we read the content from the same handle. Using one open fd — instead of
+    // `existsSync`/`statSync` then `readFileSync` on the path — closes a
+    // check-then-use window (CodeQL js/file-system-race). A missing or unreadable
+    // catalog falls through to `no_catalog` (fail-soft). The content is only used
+    // on a cache miss, but reading it here (a small index file) keeps the catalog
+    // access to one race-free handle.
+    let catalogContent;
+    let catalogMtimeMs;
+    try {
+        const fd = openSync(config.catalog.path, "r");
+        try {
+            catalogMtimeMs = fstatSync(fd).mtimeMs;
+            catalogContent = readFileSync(fd, "utf8");
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    catch {
         logEntry(config, baseLog(input.prompt, "no_catalog"));
         return EMPTY;
     }
@@ -63,12 +82,11 @@ export async function route(stdinJson, env = process.env) {
         logEntry(config, baseLog(input.prompt, "no_api_key"));
         return EMPTY;
     }
-    const catalogStat = statSync(config.catalog.path);
     const cache = new LocalCache(config.cache.dir, config.cache.ttlMin, config.cache.evictionDays);
     const cacheKey = config.cache.enabled
         ? cache.key({
             prompt: input.prompt,
-            catalogMtimeMs: catalogStat.mtimeMs,
+            catalogMtimeMs,
             cwd,
             scriptVersion: config.scriptVersion,
             provider: `${config.provider.type}:${config.provider.model}`,
@@ -93,7 +111,6 @@ export async function route(stdinJson, env = process.env) {
         }
     }
     if (!fromCache) {
-        const catalogContent = readFileSync(config.catalog.path, "utf8");
         const systemPrompt = buildSystemPrompt(catalogContent);
         // Provider construction can throw on bad config; the constructor `throw`s
         // are reachable from the hook, so they MUST be caught here (fail-soft).
@@ -252,10 +269,16 @@ function readSelected(basenames, cwd, config) {
         seen.push(name);
         for (const dir of dirs) {
             const file = join(dir, name);
-            if (!existsSync(file))
+            // Read directly and treat a read failure as "not in this dir" — no
+            // existsSync precheck, so no check-then-use race (CodeQL js/file-system-race).
+            let content;
+            try {
+                content = readFileSync(file, "utf8");
+            }
+            catch {
                 continue;
+            }
             // Cap-A1 projection check — pre-injection, allow ≥1 file always.
-            const content = readFileSync(file, "utf8");
             const projected = additional.length + content.length + 64;
             if (injected > 0 && projected > config.selection.maxAdditionalChars) {
                 return { additional, injected, allBasenames: seen };
@@ -329,6 +352,10 @@ function logEntry(config, entry) {
             additional_size_chars: entry.additionalSizeChars,
             additional_size_tokens_est: entry.additionalSizeTokensEst,
             status: entry.status,
+            // Additive field (v0.3) — the model that handled this turn. Read by
+            // `memhook tail`. The frozen log schema permits adding fields; never
+            // rename/remove existing ones (docs/SPECIFICATION.md §14).
+            model: config.provider.model,
         });
         appendFileSync(config.logging.jsonlPath, line + "\n", "utf8");
     }