memroot 0.1.0-alpha.0

package/dist/plugins/claude/.claude-plugin/plugin.json

@@ -0,0 +1,9 @@
+{
+  "name": "memroot",
+  "version": "0.1.0-alpha.0",
+  "description": "Memroot installation status and capability discovery.",
+  "author": {
+    "name": "Memroot"
+  },
+  "skills": "./skills/"
+}

package/dist/plugins/claude/README.md

@@ -0,0 +1,14 @@
+# Memroot for Claude Code
+
+This is the complete, self-contained Memroot plugin root, version `0.1.0-alpha.0`. The setup utility copies this folder into a durable installation before native registration. Node.js is the only runtime requirement. No script refers to the npm cache or files outside this bundle.
+
+The status skill and `node scripts/status.mjs` explain this release's capabilities. Installation status is available. Browser sign-in, cloud memory retrieval, session capture, extraction, and graph building are unavailable. The scripts do not read repository files, transcripts, credentials, or configuration, make network requests, or write data.
+
+The SessionStart hook supplies a short, static capability notice. It accepts at most 64 KiB of event JSON and waits at most 500 ms for stdin. Malformed inputs and unrelated events exit quietly. It never includes event fields in output. There is no Stop or SessionEnd handler because this release cannot capture or upload sessions.
+
+Inspect the installed plugin through the agent's native plugin interface.
+
+Official references verified September 13, 2026:
+
+- [Plugin packaging and native installation](https://code.claude.com/docs/en/plugins-reference)
+- [Hook event and output contracts](https://code.claude.com/docs/en/hooks)

package/dist/plugins/claude/hooks/hooks.json

@@ -0,0 +1,16 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "startup|resume|clear|compact",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/session-start.mjs\"",
+            "timeout": 3
+          }
+        ]
+      }
+    ]
+  }
+}

package/dist/plugins/claude/scripts/session-start.mjs

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+// The native host owns hook trust. This script reads only the small event
+// envelope from stdin; it never reads a transcript or other referenced file.
+const maximumBytes = 64 * 1024;
+const allowedSources = new Set(["startup", "resume", "clear", "compact"]);
+let bytes = 0;
+let chunks = [];
+let finished = false;
+
+function finish(output = "") {
+  if (finished) return;
+  finished = true;
+  clearTimeout(deadline);
+  chunks = [];
+  process.stdin.destroy();
+  if (output) {
+    process.stdout.write(output, () => process.exit(0));
+  } else {
+    process.exit(0);
+  }
+}
+
+// Fail quietly if the host never closes stdin. Native host timeout is a final
+// bound; this shorter deadline avoids delaying an interactive session.
+const deadline = setTimeout(() => finish(), 500);
+process.stdout.on("error", () => process.exit(0));
+process.stdin.on("error", () => finish());
+process.stdin.on("data", (chunk) => {
+  bytes += chunk.length;
+  if (bytes > maximumBytes) {
+    finish();
+    return;
+  }
+  chunks.push(chunk);
+});
+process.stdin.on("end", () => {
+  let event;
+  try {
+    event = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+  } catch {
+    finish();
+    return;
+  }
+  if (
+    event === null ||
+    typeof event !== "object" ||
+    Array.isArray(event) ||
+    event.hook_event_name !== "SessionStart" ||
+    !allowedSources.has(event.source)
+  ) {
+    finish();
+    return;
+  }
+  finish(
+    `${JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: "SessionStart",
+        additionalContext:
+          "Memroot plugin is installed but not connected. This release provides installation status only; cloud sign-in, memory retrieval, and session capture are unavailable. If the user asks about Memroot, use its status skill. No session content is captured or uploaded.",
+      },
+    })}\n`,
+  );
+});

package/dist/plugins/claude/scripts/status.mjs

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+// Static capabilities of this installed bundle, not a cloud connectivity probe.
+// Intentionally has no filesystem access, network access, or dependencies.
+process.stdout.write(
+  `${JSON.stringify({
+    plugin: "memroot",
+    version: "0.1.0-alpha.0",
+    agent: "claude",
+    connection: "not_connected",
+    capabilities: {
+      installationStatus: true,
+      cloudAuthentication: false,
+      memoryRetrieval: false,
+      sessionCapture: false,
+      extraction: false,
+    },
+    message:
+      "Memroot plugin is installed. This release is not connected to Memroot cloud; browser sign-in, memory retrieval, and session capture are not available.",
+  })}\n`,
+);

package/dist/plugins/claude/skills/status/SKILL.md

@@ -0,0 +1,18 @@
+---
+name: status
+description: Use when the user asks whether Memroot is installed or connected, whether memories are being captured, or which Memroot capabilities are available.
+---
+
+# Memroot status
+
+Run the bundled [status script](../../scripts/status.mjs) with Node.js. Resolve it relative to this skill's installed directory; it remains inside the plugin after installation. In a shell where the native plugin variable is available:
+
+```sh
+node "${CLAUDE_PLUGIN_ROOT}/scripts/status.mjs"
+```
+
+Report the returned version and capabilities. The script describes this installed bundle; it does not check an account, network service, workspace installation record, or hook trust.
+
+This release has no cloud authentication, retrieval, extraction, or session capture. An installed plugin does not mean that the account is connected or that graph building is active. If asked to save or retrieve memory, explain that the connection capability is unavailable in this release. Do not collect transcripts or credentials, create a substitute local memory store, or invent a cloud endpoint.
+
+For installer diagnostics, the user can run `npx memroot doctor`.

package/dist/plugins/codex/.codex-plugin/plugin.json

@@ -0,0 +1,18 @@
+{
+  "name": "memroot",
+  "version": "0.1.0-alpha.0",
+  "description": "Memroot installation status and capability discovery.",
+  "author": {
+    "name": "Memroot"
+  },
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "Memroot",
+    "shortDescription": "Check Memroot installation and available capabilities.",
+    "longDescription": "Inspect this Memroot plugin's installed version and capabilities. Cloud connection and memory workflows are not available in this release.",
+    "developerName": "Memroot",
+    "category": "Productivity",
+    "capabilities": ["Read"],
+    "defaultPrompt": ["Check my Memroot plugin status."]
+  }
+}

package/dist/plugins/codex/README.md

@@ -0,0 +1,16 @@
+# Memroot for Codex
+
+This is the complete, self-contained Memroot plugin root, version `0.1.0-alpha.0`. The setup utility copies this folder into a durable installation before native registration. Node.js is the only runtime requirement. No script refers to the npm cache or files outside this bundle.
+
+The status skill and `node scripts/status.mjs` explain this release's capabilities. Installation status is available. Browser sign-in, cloud memory retrieval, session capture, extraction, and graph building are unavailable. The scripts do not read repository files, transcripts, credentials, or configuration, make network requests, or write data.
+
+The SessionStart hook supplies a short, static capability notice. It accepts at most 64 KiB of event JSON and waits at most 500 ms for stdin. Malformed inputs and unrelated events exit quietly. It never includes event fields in output. There is no Stop or SessionEnd handler because this release cannot capture or upload sessions.
+
+After installation, review and trust the hook through `/hooks` in Codex. Plugin installation does not establish hook trust. Changed hook definitions require review again.
+
+Official references verified September 13, 2026:
+
+- [OpenAI plugin packaging](https://developers.openai.com/plugins/build/plugins)
+- [OpenAI hook contracts and trust](https://learn.chatgpt.com/docs/hooks)
+
+The compatibility manifest intentionally relies on default `hooks/hooks.json` discovery. Hook commands use `PLUGIN_ROOT`; Codex also provides Claude-compatible plugin variables.

package/dist/plugins/codex/hooks/hooks.json

@@ -0,0 +1,16 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "startup|resume|clear|compact",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${PLUGIN_ROOT}/scripts/session-start.mjs\"",
+            "timeout": 3
+          }
+        ]
+      }
+    ]
+  }
+}

package/dist/plugins/codex/scripts/session-start.mjs

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+// The native host owns hook trust. This script reads only the small event
+// envelope from stdin; it never reads a transcript or other referenced file.
+const maximumBytes = 64 * 1024;
+const allowedSources = new Set(["startup", "resume", "clear", "compact"]);
+let bytes = 0;
+let chunks = [];
+let finished = false;
+
+function finish(output = "") {
+  if (finished) return;
+  finished = true;
+  clearTimeout(deadline);
+  chunks = [];
+  process.stdin.destroy();
+  if (output) {
+    process.stdout.write(output, () => process.exit(0));
+  } else {
+    process.exit(0);
+  }
+}
+
+// Fail quietly if the host never closes stdin. Native host timeout is a final
+// bound; this shorter deadline avoids delaying an interactive session.
+const deadline = setTimeout(() => finish(), 500);
+process.stdout.on("error", () => process.exit(0));
+process.stdin.on("error", () => finish());
+process.stdin.on("data", (chunk) => {
+  bytes += chunk.length;
+  if (bytes > maximumBytes) {
+    finish();
+    return;
+  }
+  chunks.push(chunk);
+});
+process.stdin.on("end", () => {
+  let event;
+  try {
+    event = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+  } catch {
+    finish();
+    return;
+  }
+  if (
+    event === null ||
+    typeof event !== "object" ||
+    Array.isArray(event) ||
+    event.hook_event_name !== "SessionStart" ||
+    !allowedSources.has(event.source)
+  ) {
+    finish();
+    return;
+  }
+  finish(
+    `${JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: "SessionStart",
+        additionalContext:
+          "Memroot plugin is installed but not connected. This release provides installation status only; cloud sign-in, memory retrieval, and session capture are unavailable. If the user asks about Memroot, use its status skill. No session content is captured or uploaded.",
+      },
+    })}\n`,
+  );
+});

package/dist/plugins/codex/scripts/status.mjs

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+// Static capabilities of this installed bundle, not a cloud connectivity probe.
+// Intentionally has no filesystem access, network access, or dependencies.
+process.stdout.write(
+  `${JSON.stringify({
+    plugin: "memroot",
+    version: "0.1.0-alpha.0",
+    agent: "codex",
+    connection: "not_connected",
+    capabilities: {
+      installationStatus: true,
+      cloudAuthentication: false,
+      memoryRetrieval: false,
+      sessionCapture: false,
+      extraction: false,
+    },
+    message:
+      "Memroot plugin is installed. This release is not connected to Memroot cloud; browser sign-in, memory retrieval, and session capture are not available.",
+  })}\n`,
+);

package/dist/plugins/codex/skills/status/SKILL.md

@@ -0,0 +1,18 @@
+---
+name: status
+description: Use when the user asks whether Memroot is installed or connected, whether memories are being captured, or which Memroot capabilities are available.
+---
+
+# Memroot status
+
+Run the bundled [status script](../../scripts/status.mjs) with Node.js. Resolve it relative to this skill's installed directory; it remains inside the plugin after installation. In a shell where the native plugin variable is available:
+
+```sh
+node "${PLUGIN_ROOT}/scripts/status.mjs"
+```
+
+Report the returned version and capabilities. The script describes this installed bundle; it does not check an account, network service, workspace installation record, or hook trust.
+
+This release has no cloud authentication, retrieval, extraction, or session capture. An installed plugin does not mean that the account is connected or that graph building is active. If asked to save or retrieve memory, explain that the connection capability is unavailable in this release. Do not collect transcripts or credentials, create a substitute local memory store, or invent a cloud endpoint.
+
+For installer diagnostics, the user can run `npx memroot doctor`.

package/dist/plugins/grok/.claude-plugin/plugin.json

@@ -0,0 +1,9 @@
+{
+  "name": "memroot",
+  "version": "0.1.0-alpha.0",
+  "description": "Memroot installation status and capability discovery.",
+  "author": {
+    "name": "Memroot"
+  },
+  "skills": "./skills/"
+}

package/dist/plugins/grok/README.md

@@ -0,0 +1,14 @@
+# Memroot for Grok Build
+
+This is the complete, self-contained Memroot plugin root, version `0.1.0-alpha.0`. The setup utility copies this folder into a durable installation before native registration. Node.js is the only runtime requirement. No script refers to the npm cache or files outside this bundle.
+
+The status skill and `node scripts/status.mjs` explain this release's capabilities. Installation status is available. Browser sign-in, cloud memory retrieval, session capture, extraction, and graph building are unavailable. The scripts do not read repository files, transcripts, credentials, or configuration, make network requests, or write data.
+
+Grok ignores stdout for passive hook events, including SessionStart. Therefore this bundle uses a discoverable status skill and intentionally declares no lifecycle handlers in hooks/hooks.json. It uses the documented Claude-compatible plugin manifest.
+
+Inspect the installed plugin through the agent's native plugin interface.
+
+Official references verified September 13, 2026:
+
+- [Plugin loading and Claude compatibility](https://docs.x.ai/build/features/skills-plugins-marketplaces)
+- [Hook contract and passive stdout behavior](https://docs.x.ai/build/features/hooks)

package/dist/plugins/grok/hooks/hooks.json

@@ -0,0 +1,3 @@
+{
+  "hooks": {}
+}

package/dist/plugins/grok/scripts/status.mjs

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+// Static capabilities of this installed bundle, not a cloud connectivity probe.
+// Intentionally has no filesystem access, network access, or dependencies.
+process.stdout.write(
+  `${JSON.stringify({
+    plugin: "memroot",
+    version: "0.1.0-alpha.0",
+    agent: "grok",
+    connection: "not_connected",
+    capabilities: {
+      installationStatus: true,
+      cloudAuthentication: false,
+      memoryRetrieval: false,
+      sessionCapture: false,
+      extraction: false,
+    },
+    message:
+      "Memroot plugin is installed. This release is not connected to Memroot cloud; browser sign-in, memory retrieval, and session capture are not available.",
+  })}\n`,
+);

package/dist/plugins/grok/skills/status/SKILL.md

@@ -0,0 +1,18 @@
+---
+name: status
+description: Use when the user asks whether Memroot is installed or connected, whether memories are being captured, or which Memroot capabilities are available.
+---
+
+# Memroot status
+
+Run the bundled [status script](../../scripts/status.mjs) with Node.js. Resolve it relative to this skill's installed directory; it remains inside the plugin after installation. In a shell where the native plugin variable is available:
+
+```sh
+node "${GROK_PLUGIN_ROOT}/scripts/status.mjs"
+```
+
+Report the returned version and capabilities. The script describes this installed bundle; it does not check an account, network service, workspace installation record, or hook trust.
+
+This release has no cloud authentication, retrieval, extraction, or session capture. An installed plugin does not mean that the account is connected or that graph building is active. If asked to save or retrieve memory, explain that the connection capability is unavailable in this release. Do not collect transcripts or credentials, create a substitute local memory store, or invent a cloud endpoint.
+
+For installer diagnostics, the user can run `npx memroot doctor`.

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "memroot",
+  "version": "0.1.0-alpha.0",
+  "description": "Install Memroot's native coding-agent plugins",
+  "type": "module",
+  "license": "UNLICENSED",
+  "os": [
+    "darwin",
+    "linux"
+  ],
+  "homepage": "https://memroot.dev",
+  "engines": {
+    "node": ">=22"
+  },
+  "bin": {
+    "memroot": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "scripts": {
+    "build": "node build.mjs",
+    "typecheck": "tsc --noEmit",
+    "test": "pnpm build && node --test test/*.test.mjs",
+    "prepack": "pnpm build"
+  },
+  "devDependencies": {
+    "esbuild": "0.28.2",
+    "@clack/prompts": "1.8.0"
+  }
+}