throughline 0.10.0 → 0.10.1

package/CHANGELOG.md

@@ -10,6 +10,25 @@ shipped to npm but were not individually tagged on GitHub.
 
 ## [Unreleased]
 
+## [0.10.1] — 2026-08-23
+
+### Changed
+
+- Internal refactor with no behavior change. Vendor (hook host) identity and
+  per-host behavior moved into `src/hosts/` — `hosts/identity.mjs` is the
+  single source of the `codex:` / `grok:` session prefixes (previously
+  duplicated across four files), and the shared hook entrypoints
+  (`session-start` / `prompt-submit` / `process-turn`) now branch through
+  `hosts/{claude,codex,grok}.mjs` adapters instead of inline host checks.
+  `src/hook-envelope.mjs` is merged into `hosts/grok.mjs`.
+- OS-specific code moved into `src/os/` — the Windows owner-only ACL
+  PowerShell implementation that was duplicated verbatim in
+  `runtime-error-store` and `completed-turn-receipts` is now the single
+  `os/windows-acl.mjs`, alongside macOS Terminal launch, OS URL open,
+  shell/AppleScript quoting, Windows path case folding, and the portable
+  spawn helper. DB schema, injection contract, and every CLI surface are
+  unchanged; full regression is 761 pass / 0 fail.
+
 ## [0.10.0] — 2026-08-17
 
 ### Added
@@ -1271,7 +1290,11 @@ two attempts, instrument first instead of patching again.
 
 ---
 
-[Unreleased]: https://github.com/kitepon-rgb/Throughline/compare/v0.8.9...HEAD
+[Unreleased]: https://github.com/kitepon-rgb/Throughline/compare/v0.10.1...HEAD
+[0.10.1]: https://github.com/kitepon-rgb/Throughline/compare/v0.10.0...v0.10.1
+[0.10.0]: https://github.com/kitepon-rgb/Throughline/compare/v0.9.1...v0.10.0
+[0.9.1]: https://github.com/kitepon-rgb/Throughline/compare/v0.9.0...v0.9.1
+[0.9.0]: https://github.com/kitepon-rgb/Throughline/compare/v0.8.9...v0.9.0
 [0.8.9]: https://github.com/kitepon-rgb/Throughline/compare/v0.8.8...v0.8.9
 [0.8.8]: https://github.com/kitepon-rgb/Throughline/compare/v0.8.7...v0.8.8
 [0.8.7]: https://github.com/kitepon-rgb/Throughline/compare/v0.8.6...v0.8.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "throughline",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "type": "module",
   "description": "Persistent memory hooks for Claude Code, Codex, and Grok (/clear-safe context compression)",
   "keywords": [

package/src/auditor-context.mjs

@@ -3,6 +3,7 @@ import { homedir } from 'node:os';
 import { isAbsolute, join, resolve, sep } from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
 import { buildBodyRowsFromActiveTurns } from './codex-capture.mjs';
+import { isCodexSessionId } from './hosts/identity.mjs';
 import { parseCodexRolloutFile } from './codex-rollout-memory.mjs';
 import { getLogicalTurnGroups } from './transcript-reader.mjs';
 import { hashAuditorBody, normalizeAuditorBody } from './body-digest.mjs';
@@ -119,7 +120,7 @@ export function readAuditorContext({
 
     const latest = completed.at(-1);
     const stableTurnIdentityAvailable = Number.isInteger(expectedTurnNumber) && expectedTurnNumber >= 0;
-    const codexPairIdentity = sessionId.startsWith('codex:') && expectedOriginSessionId === sessionId;
+    const codexPairIdentity = isCodexSessionId(sessionId) && expectedOriginSessionId === sessionId;
     const expectationComplete =
       typeof expectedOriginSessionId === 'string' && expectedOriginSessionId.length > 0 &&
       (stableTurnIdentityAvailable || codexPairIdentity) &&

package/src/cli/codex-handoff-start.mjs

@@ -6,7 +6,9 @@ import { buildCodexHandoffModelSmokePrompt } from '../codex-handoff-model-smoke.
 import { runCodexNewThreadHandoff } from '../codex-app-server.mjs';
 import { estimateTokens } from '../token-estimator.mjs';
 import { sameProjectPath } from '../project-path.mjs';
-import { spawnSync } from 'node:child_process';
+import { shQuote } from '../os/shell.mjs';
+import { openUrlWithOsHandler } from '../os/open-url.mjs';
+import { runTerminalDoScript } from '../os/macos-terminal.mjs';
 
 async function readStdin() {
   let raw = '';
@@ -319,12 +321,7 @@ function openStartedCodexThread({ threadId, host, cwd }) {
 
   if (resolvedHost === 'desktop' || resolvedHost === 'vscode') {
     const url = resolvedHost === 'desktop' ? desktopUrl : vscodeUrl;
-    const result =
-      process.platform === 'darwin'
-        ? spawnSync('open', [url], { encoding: 'utf8' })
-        : process.platform === 'win32'
-          ? spawnSync('cmd.exe', ['/c', 'start', '', url], { encoding: 'utf8' })
-          : spawnSync('xdg-open', [url], { encoding: 'utf8' });
+    const result = openUrlWithOsHandler(url);
     if (result.status !== 0) {
       return {
         status: 'failed',
@@ -353,14 +350,7 @@ function openStartedCodexThread({ threadId, host, cwd }) {
   if (resolvedHost === 'cli') {
     if (process.platform === 'darwin') {
       const shellCommand = `cd ${shQuote(cwd)} && TERM=xterm-256color codex resume ${shQuote(threadId)} --no-alt-screen`;
-      const result = spawnSync('osascript', [], {
-        input: `tell application "Terminal"
-  activate
-  do script ${appleString(shellCommand)}
-end tell
-`,
-        encoding: 'utf8',
-      });
+      const result = runTerminalDoScript(shellCommand);
       if (result.status !== 0) {
         return {
           status: 'failed',
@@ -409,14 +399,6 @@ end tell
   };
 }
 
-function shQuote(value) {
-  return `'${String(value).replaceAll("'", "'\\''")}'`;
-}
-
-function appleString(value) {
-  return `"${String(value).replaceAll('\\', '\\\\').replaceAll('"', '\\"')}"`;
-}
-
 export async function run(args) {
   let parsed;
   try {

package/src/cli/codex-summarize.mjs

@@ -1,4 +1,5 @@
 import { getDb } from '../db.mjs';
+import { isCodexSessionId } from '../hosts/identity.mjs';
 import {
   L2_WINDOW,
   countDistinctBodyTurns,
@@ -94,7 +95,7 @@ function insertSkeleton(db, { sessionId, originSessionId, turnNumber, summary, c
 }
 
 export function summarizeCodexSession(db, { sessionId, projectPath, max, env = process.env }) {
-  if (!sessionId?.startsWith('codex:')) {
+  if (!isCodexSessionId(sessionId)) {
     throw new Error('codex-summarize requires a codex:<thread-id> session');
   }
 

package/src/cli/codex-visibility-smoke.mjs

@@ -1,4 +1,5 @@
 import { randomUUID } from 'node:crypto';
+import { CODEX_SESSION_PREFIX, codexSessionIdToThreadId, isCodexSessionId } from '../hosts/identity.mjs';
 
 import { getDb } from '../db.mjs';
 import { buildHandoffRecord } from '../handoff-record.mjs';
@@ -82,10 +83,10 @@ function parseArgs(args) {
   }
 
   if (!out.sessionId && out.codexThreadId) {
-    out.sessionId = `codex:${out.codexThreadId}`;
+    out.sessionId = `${CODEX_SESSION_PREFIX}${out.codexThreadId}`;
   }
-  if (!out.codexThreadId && out.sessionId?.startsWith('codex:')) {
-    out.codexThreadId = out.sessionId.slice('codex:'.length);
+  if (!out.codexThreadId && isCodexSessionId(out.sessionId)) {
+    out.codexThreadId = codexSessionIdToThreadId(out.sessionId);
   }
 
   return out;
@@ -154,7 +155,7 @@ export async function run(args) {
   const db = getDb();
   const sessionId = parsed.sessionId ?? findLatestCodexSessionId(db, process.cwd());
   const codexThreadId =
-    parsed.codexThreadId ?? (sessionId?.startsWith('codex:') ? sessionId.slice('codex:'.length) : null);
+    parsed.codexThreadId ?? codexSessionIdToThreadId(sessionId);
   if (!sessionId || !codexThreadId) {
     process.stderr.write(
       '[codex-visibility-smoke] pass --session codex:<thread-id> or --codex-thread-id <id>.\n',

package/src/cli/grok-continue.mjs

@@ -1,10 +1,11 @@
-import { spawn } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
 import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
 import { homedir, tmpdir } from 'node:os';
 import { delimiter, join } from 'node:path';
 
 import { readHandoffContext, readSessionProjectPath } from './handoff-context.mjs';
+import { shQuote } from '../os/shell.mjs';
+import { appleScriptForTerminalExec, runTerminalScriptDetached } from '../os/macos-terminal.mjs';
 
 export const GROK_CONTINUE_PREAMBLE = 'この発言は直前 Throughline 席の履歴を前提とする。';
 export const GROK_CONTINUE_REQUEST = '直前の作業の自然な続きとして応答すること。';
@@ -29,10 +30,6 @@ export function buildGrokContinuePrompt(context) {
   return `${GROK_CONTINUE_PREAMBLE}\n\n${context}\n\n${GROK_CONTINUE_REQUEST}\n\n${GROK_CONTINUE_WAIT}`;
 }
 
-export function shQuote(value) {
-  return `'${String(value).replace(/'/g, `'\\''`)}'`;
-}
-
 export function resolveGrokBin({
   home = homedir(),
   env = process.env,
@@ -62,15 +59,8 @@ export function buildLaunchScript({ cwd, grokBin, sessionUuid, promptFile }) {
   ].join('\n');
 }
 
-export function appleScriptForLaunch(launchScriptPath) {
-  return [
-    'tell application "Terminal"',
-    '  activate',
-    `  do script "exec " & quoted form of ${JSON.stringify(launchScriptPath)}`,
-    'end tell',
-    '',
-  ].join('\n');
-}
+// macOS Terminal 起動の実体は os/macos-terminal.mjs (OS 境界)。
+export const appleScriptForLaunch = appleScriptForTerminalExec;
 
 export function buildContinuePlan({
   context,
@@ -113,13 +103,10 @@ export function writeLaunchArtifacts({
   return { promptFile, launchFile };
 }
 
-export function defaultSpawnLaunch({ launchFile, spawnImpl = spawn }) {
-  const child = spawnImpl('osascript', ['-e', appleScriptForLaunch(launchFile)], {
-    detached: true,
-    stdio: 'ignore',
-  });
-  child.unref?.();
-  return child;
+export function defaultSpawnLaunch({ launchFile, spawnImpl }) {
+  return spawnImpl === undefined
+    ? runTerminalScriptDetached({ launchFile })
+    : runTerminalScriptDetached({ launchFile, spawnImpl });
 }
 
 export function run(argv = [], {

package/src/cli/runtime-errors.test.mjs

@@ -8,7 +8,7 @@ import { fileURLToPath } from 'node:url';
 
 import { parseArgs, run } from './runtime-errors.mjs';
 import { defaultFactoryReporterConfigPath } from '../runtime-error-store.mjs';
-import { applyWindowsPrivateAcl } from '../windows-acl-test-helper.mjs';
+import { applyWindowsPrivateAcl } from '../os/windows-acl-test-helper.mjs';
 
 test('runtime-errors CLI: strict command surface accepts no raw payload options', () => {
   assert.deepEqual(parseArgs(['snapshot', '--after-cursor', '2', '--limit', '3', '--json']), {

package/src/codex-capture.mjs

@@ -1,23 +1,19 @@
 import { parseCodexRolloutFile } from './codex-rollout-memory.mjs';
 import { defaultCodexHome, findCodexThreadCandidate } from './codex-thread-index.mjs';
-
-export const CODEX_SESSION_PREFIX = 'codex:';
-
-export function buildCodexThroughlineSessionId(threadId) {
-  if (typeof threadId !== 'string' || threadId.trim().length === 0) {
-    throw new Error('threadId is required');
-  }
-  return `${CODEX_SESSION_PREFIX}${threadId.trim()}`;
-}
-
-export function isCodexThroughlineSessionId(sessionId) {
-  return typeof sessionId === 'string' && sessionId.startsWith(CODEX_SESSION_PREFIX);
-}
-
-export function codexSessionIdToThreadId(sessionId) {
-  if (!isCodexThroughlineSessionId(sessionId)) return null;
-  return sessionId.slice(CODEX_SESSION_PREFIX.length) || null;
-}
+import {
+  CODEX_SESSION_PREFIX,
+  buildCodexThroughlineSessionId,
+  codexSessionIdToThreadId,
+  isCodexSessionId,
+} from './hosts/identity.mjs';
+
+// session identity の正本は hosts/identity.mjs。既存 import 面のため再 export する。
+export {
+  CODEX_SESSION_PREFIX,
+  buildCodexThroughlineSessionId,
+  codexSessionIdToThreadId,
+};
+export const isCodexThroughlineSessionId = isCodexSessionId;
 
 export function captureCodexRolloutToDb(
   db,

package/src/codex-handoff-model-smoke.mjs

@@ -1,4 +1,4 @@
-import { spawnPortableSync } from './portable-spawn-sync.mjs';
+import { spawnPortableSync } from './os/portable-spawn-sync.mjs';
 
 export const CODEX_HANDOFF_MODEL_SMOKE_ENV = 'THROUGHLINE_EXPERIMENTAL_CODEX_HANDOFF_MODEL_SMOKE';
 export const DEFAULT_CODEX_HANDOFF_MODEL_SMOKE_TIMEOUT_MS = 120_000;

package/src/codex-sidecar.mjs

@@ -1,4 +1,4 @@
-import { spawnPortableSync } from './portable-spawn-sync.mjs';
+import { spawnPortableSync } from './os/portable-spawn-sync.mjs';
 
 export const CODEX_SIDECAR_WORKFLOWS = Object.freeze([
   'review',

package/src/completed-turn-receipts.mjs

@@ -8,12 +8,12 @@ import {
   rmSync,
   writeFileSync,
 } from 'node:fs';
-import childProcess from 'node:child_process';
-import { homedir, platform as hostPlatform } from 'node:os';
+import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
 import { hashAuditorBody } from './body-digest.mjs';
 import { normalizeProjectPathForCompare } from './project-path.mjs';
+import { applyAndVerifyWindowsAcl, isWindows, verifyWindowsAcl } from './os/windows-acl.mjs';
 
 export const COMPLETED_TURN_RECEIPT_STORE_SCHEMA = 'throughline.completed_turn_receipts.v1';
 export const COMPLETED_TURN_RECEIPT_SCHEMA_VERSION = '1.0';
@@ -21,7 +21,6 @@ export const COMPLETED_TURN_RECEIPT_LIMIT = 256;
 
 const PRIVATE_DIRECTORY_CAPABILITY = Symbol('throughline.completed-turn-receipt-directory');
 // CI実測でPowerShellコールドスタートが3.0〜3.2秒に達しflakeしたため15秒 (run 29586852389 / 29628634501)
-const WINDOWS_ACL_TIMEOUT_MS = 15_000;
 
 export function defaultCompletedTurnReceiptStorePath(projectSha256, env = process.env) {
   if (!isSha256(projectSha256)) throw new TypeError('projectSha256 must be a SHA-256 digest');
@@ -351,30 +350,4 @@ function assertExactOptions(options) {
     throw new TypeError('completed turn receipt options are invalid');
   }
 }
-function isWindows(env = process.env) { return env.OS === 'Windows_NT' || hostPlatform() === 'win32'; }
-
-function applyAndVerifyWindowsAcl(path, directory) { runWindowsAclScript(path, directory, WINDOWS_ACL_APPLY_SCRIPT); }
-function verifyWindowsAcl(path, directory) { runWindowsAclScript(path, directory, WINDOWS_ACL_VERIFY_SCRIPT); }
-function runWindowsAclScript(path, directory, script) {
-  const result = childProcess.spawnSync('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', script], {
-    env: { ...process.env, THROUGHLINE_ACL_PATH: path, THROUGHLINE_ACL_DIRECTORY: directory ? '1' : '0' },
-    stdio: 'ignore', timeout: WINDOWS_ACL_TIMEOUT_MS, windowsHide: true,
-  });
-  if (result.status !== 0) throw new Error('Windows owner-only ACL verification failed');
-}
 
-const WINDOWS_ACL_VERIFY_SCRIPT = String.raw`
-$p=$env:THROUGHLINE_ACL_PATH; $isDir=$env:THROUGHLINE_ACL_DIRECTORY -eq '1'; $sid=[System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value
-$acl=if($isDir){[System.IO.Directory]::GetAccessControl($p)}else{[System.IO.File]::GetAccessControl($p)}
-$owner=$acl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value
-if($owner -ne $sid){exit 41}; $rules=@($acl.GetAccessRules($true,$true,[System.Security.Principal.SecurityIdentifier])); if($rules.Count -ne 1){exit 42}
-$r=$rules[0]; if($r.IdentityReference.Value -ne $sid -or $r.AccessControlType -ne 'Allow' -or $r.IsInherited -or ($r.FileSystemRights -band [System.Security.AccessControl.FileSystemRights]::FullControl) -ne [System.Security.AccessControl.FileSystemRights]::FullControl){exit 43}
-`;
-
-const WINDOWS_ACL_APPLY_SCRIPT = String.raw`
-$p=$env:THROUGHLINE_ACL_PATH; $sid=[System.Security.Principal.WindowsIdentity]::GetCurrent().User
-$isDir=$env:THROUGHLINE_ACL_DIRECTORY -eq '1'; $acl=if($isDir){New-Object System.Security.AccessControl.DirectorySecurity}else{New-Object System.Security.AccessControl.FileSecurity}; $acl.SetAccessRuleProtection($true,$false)
-$flags=if($isDir){[System.Security.AccessControl.InheritanceFlags]'ContainerInherit, ObjectInherit'}else{[System.Security.AccessControl.InheritanceFlags]::None}
-$rule=New-Object System.Security.AccessControl.FileSystemAccessRule($sid,'FullControl',$flags,[System.Security.AccessControl.PropagationFlags]::None,[System.Security.AccessControl.AccessControlType]::Allow)
-$acl.SetOwner($sid); $acl.AddAccessRule($rule); if($isDir){[System.IO.Directory]::SetAccessControl($p,$acl)}else{[System.IO.File]::SetAccessControl($p,$acl)}
-` + WINDOWS_ACL_VERIFY_SCRIPT;

package/src/completed-turn-receipts.test.mjs

@@ -12,7 +12,7 @@ import {
   writeCompletedTurnReceipt,
 } from './completed-turn-receipts.mjs';
 import { seedCompletedTurnReceiptStore } from './completed-turn-receipts-test-fixture.mjs';
-import { verifyWindowsPrivateAcl } from './windows-acl-test-helper.mjs';
+import { verifyWindowsPrivateAcl } from './os/windows-acl-test-helper.mjs';
 
 function sandbox() {
   const root = mkdtempSync(join(tmpdir(), 'throughline-completed-receipts-'));

package/src/haiku-summarizer.mjs

@@ -50,7 +50,7 @@ import {
   CODEX_SIDECAR_STATUS,
   runCodexSidecarCommand,
 } from './codex-sidecar.mjs';
-import { spawnPortableSync } from './portable-spawn-sync.mjs';
+import { spawnPortableSync } from './os/portable-spawn-sync.mjs';
 
 const MODEL = 'claude-haiku-4-5-20251001';
 // Codex CLI 要約の既定。gpt-5.6-luna@low@1/5 は 2026-07-17 の実測評価で選定

package/src/handoff-record.mjs

@@ -6,9 +6,11 @@
  * persisted to DB; adapters can render it for Claude, Codex, or diagnostics.
  */
 
+import { CODEX_SESSION_PREFIX } from './hosts/identity.mjs';
+
 export const HANDOFF_RECORD_VERSION = 1;
 export const N_RECENT_L2 = 20;
-export const CODEX_SESSION_PREFIX = 'codex:';
+export { CODEX_SESSION_PREFIX };
 
 const DEFAULT_INTENT = 'continue implementation';
 const DEFAULT_CONSTRAINTS = [

package/src/hosts/claude.mjs

@@ -0,0 +1,27 @@
+/**
+ * hosts/claude.mjs — Claude host adapter
+ *
+ * Claude は Throughline の基準 host。hook payload は snake_case のまま届き、
+ * 引き継ぎ注入は UserPromptSubmit hook の stdout でモデルへ渡る。
+ */
+import { CLAUDE_HOST, hostOfSessionId } from './identity.mjs';
+
+export const claudeHostAdapter = Object.freeze({
+  host: CLAUDE_HOST,
+  matchesSessionId: (sessionId) => hostOfSessionId(sessionId) === CLAUDE_HOST,
+  // Claude Stop payload の last_assistant_message を transcript 可視化の
+  // barrier に使う (ADR 0012)。
+  waitsForStopTranscriptFlush: true,
+  // Claude は UserPromptSubmit stdout がそのままモデル可視 context になる。
+  deliverHandoffInjection({ text, stdout = process.stdout }) {
+    stdout.write(text + '\n');
+    return { delivered: true };
+  },
+  // Claude の prompt は裸の slash command がそのまま届く。
+  resolveCommandPrompt({ prompt }) {
+    return prompt;
+  },
+  afterBatonWrite() {
+    return { launched: false };
+  },
+});

package/src/hosts/codex.mjs

@@ -0,0 +1,28 @@
+/**
+ * hosts/codex.mjs — Codex host adapter
+ *
+ * Codex session (`codex:<thread_id>`) は Claude-facing hook (SessionStart /
+ * UserPromptSubmit / Stop) を通らず、専用入口 `throughline codex-hook`
+ * ([src/cli/codex-hook.mjs](../cli/codex-hook.mjs)) で capture される。
+ * この adapter は共有コードが Codex session を Claude と取り違えないための
+ * 識別と、Claude-facing hook に Codex session が流入した場合の既存挙動
+ * (Claude と同じ経路で処理する) を明文化する。
+ */
+import { CODEX_HOST, isCodexSessionId } from './identity.mjs';
+
+export const codexHostAdapter = Object.freeze({
+  host: CODEX_HOST,
+  matchesSessionId: isCodexSessionId,
+  // 既存挙動: Claude Stop hook の flush barrier は grok 以外 (codex: 含む) に適用される。
+  waitsForStopTranscriptFlush: true,
+  deliverHandoffInjection({ text, stdout = process.stdout }) {
+    stdout.write(text + '\n');
+    return { delivered: true };
+  },
+  resolveCommandPrompt({ prompt }) {
+    return prompt;
+  },
+  afterBatonWrite() {
+    return { launched: false };
+  },
+});

package/src/hosts/grok.mjs

@@ -0,0 +1,96 @@
+/**
+ * hosts/grok.mjs — Grok host 境界 (envelope 正規化 + hook adapter)
+ *
+ * Grok sends Claude-compatible hook commands with a camelCase wire
+ * (sessionId, hookEventName) and no session_id. Throughline treats that
+ * envelope as host=grok: normalize to the Claude snake_case contract and
+ * prefix session ids so they never mix with Claude predecessor search.
+ *
+ * Grok 固有の挙動 (v0.10.0 / ADR 0021):
+ *   - UserPromptSubmit stdout はモデルへ渡らないため、引き継ぎ注入は
+ *     chat_history.jsonl への直接書き込みで行う
+ *   - hook prompt は `<user_query>` 包装のため、裸の slash command 判定には
+ *     chat_history の最新 user 発話を使う
+ *   - `/tl` 成功後だけ grok-continue で後継の対話 grok を立てる
+ *   - Stop hook の transcript flush barrier は Claude transcript 専用のため使わない
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+
+import { GROK_HOST, GROK_SESSION_PREFIX, grokBareSessionId, isGrokSessionId } from './identity.mjs';
+import { injectGrokHandoffContext } from '../grok-history-inject.mjs';
+import { readTranscript } from '../transcript-reader.mjs';
+import { run as runGrokContinue } from '../cli/grok-continue.mjs';
+
+export { GROK_SESSION_PREFIX, grokBareSessionId };
+
+export function isGrokEnvelope(payload) {
+  return payload !== null
+    && typeof payload === 'object'
+    && typeof payload.sessionId === 'string'
+    && payload.sessionId.length > 0
+    && typeof payload.hookEventName === 'string'
+    && payload.hookEventName.length > 0
+    && !Object.hasOwn(payload, 'session_id');
+}
+
+export function deriveGrokChatHistoryPath(projectPath, sessionId, { home = homedir() } = {}) {
+  const bare = grokBareSessionId(sessionId);
+  if (!projectPath || !bare) return null;
+  return join(home, '.grok', 'sessions', encodeURIComponent(projectPath), bare, 'chat_history.jsonl');
+}
+
+export function normalizeGrokHookPayload(payload, { home = homedir() } = {}) {
+  if (!isGrokEnvelope(payload)) return payload;
+  const cwd = typeof payload.cwd === 'string' && payload.cwd.length > 0
+    ? payload.cwd
+    : (typeof payload.workspaceRoot === 'string' ? payload.workspaceRoot : undefined);
+  // Live Grok Stop sets transcriptPath to updates.jsonl (sessionUpdate frames,
+  // no user/assistant rows). L2 lives in chat_history.jsonl only.
+  const transcriptPath = deriveGrokChatHistoryPath(cwd, payload.sessionId, { home });
+  return {
+    ...payload,
+    session_id: `${GROK_SESSION_PREFIX}${payload.sessionId}`,
+    cwd,
+    source: payload.source,
+    prompt: payload.prompt,
+    hook_event_name: payload.hookEventName,
+    transcript_path: transcriptPath,
+    last_assistant_message: payload.lastAssistantMessage,
+  };
+}
+
+function lastUserPromptText(transcriptPath) {
+  const turns = readTranscript(transcriptPath);
+  for (let i = turns.length - 1; i >= 0; i--) {
+    if (turns[i].role === 'user') return turns[i].content;
+  }
+  return '';
+}
+
+export const grokHostAdapter = Object.freeze({
+  host: GROK_HOST,
+  matchesSessionId: isGrokSessionId,
+  // Claude Stop transcript flush barrier は Claude transcript の完了行を待つ機構。
+  // Grok の chat_history には適用しない (既存挙動)。
+  waitsForStopTranscriptFlush: false,
+  // Grok は UserPromptSubmit stdout をモデルへ渡さないため chat_history に直接注入する。
+  deliverHandoffInjection({ payload, text }) {
+    const injected = injectGrokHandoffContext(payload.transcript_path, text);
+    return injected.injected
+      ? { delivered: true }
+      : { delivered: false, reason: `grok chat_history inject skipped: ${injected.reason}` };
+  },
+  // Grok の hook prompt は `<user_query>` 包装 + skill 本文のため、裸の /tl 判定は
+  // chat_history の最新 user 発話へ fallback する。
+  resolveCommandPrompt({ prompt, payload, isCommandPrompt }) {
+    if (isCommandPrompt(prompt)) return prompt;
+    return lastUserPromptText(payload.transcript_path);
+  },
+  // Grok `/tl` 成功後だけ、源セッションの project_path で後継の対話 grok を立てる。
+  afterBatonWrite({ trigger, sessionId, cwd, continueRun = runGrokContinue }) {
+    if (trigger !== 'tl') return { launched: false };
+    const code = continueRun(['--session', sessionId], { cwd });
+    return { launched: true, exitCode: code };
+  },
+});

package/src/{hook-envelope.test.mjs → hosts/grok.test.mjs}

@@ -6,7 +6,7 @@ import {
   deriveGrokChatHistoryPath,
   isGrokEnvelope,
   normalizeHookPayload,
-} from './hook-envelope.mjs';
+} from './index.mjs';
 
 test('isGrokEnvelope detects camelCase wire without session_id', () => {
   assert.equal(

package/src/hosts/identity.mjs

@@ -0,0 +1,71 @@
+/**
+ * hosts/identity.mjs — ベンダー (hook host) 識別の唯一の正本
+ *
+ * Throughline は Claude / Codex / Grok の 3 hook host を同じ SQLite に保存する。
+ * host の見分け方は session_id prefix だけであり、その prefix 定義と判定関数を
+ * このファイルに一元化する。共有コード (hook 入口・monitor・state-file・
+ * predecessor 検索) は文字列リテラルを直接持たず、必ずここを参照する。
+ *
+ * 新しい host を足す場合はここへ prefix / host 名を追加し、
+ * `src/hosts/<host>.mjs` に adapter を実装する。
+ */
+
+export const CLAUDE_HOST = 'claude';
+export const CODEX_HOST = 'codex';
+export const GROK_HOST = 'grok';
+
+export const CODEX_SESSION_PREFIX = 'codex:';
+export const GROK_SESSION_PREFIX = 'grok:';
+
+/**
+ * Claude session は prefix を持たない。auto handoff の前任検索 (Claude 専用) は
+ * この一覧の prefix を持つ session を除外する。
+ */
+export const NON_CLAUDE_SESSION_PREFIXES = Object.freeze([
+  CODEX_SESSION_PREFIX,
+  GROK_SESSION_PREFIX,
+]);
+
+/**
+ * state ファイルに保存できる host 値。Grok session は Claude 互換 hook 経路で
+ * 保存されるため state 上は 'claude' として扱う (既存挙動)。
+ */
+export const KNOWN_STATE_HOSTS = Object.freeze([CLAUDE_HOST, CODEX_HOST]);
+
+export function isCodexSessionId(sessionId) {
+  return typeof sessionId === 'string' && sessionId.startsWith(CODEX_SESSION_PREFIX);
+}
+
+export function isGrokSessionId(sessionId) {
+  return typeof sessionId === 'string' && sessionId.startsWith(GROK_SESSION_PREFIX);
+}
+
+/**
+ * session_id から hook host を返す。prefix なしは Claude。
+ * @param {string} sessionId
+ * @returns {'claude'|'codex'|'grok'}
+ */
+export function hostOfSessionId(sessionId) {
+  if (isCodexSessionId(sessionId)) return CODEX_HOST;
+  if (isGrokSessionId(sessionId)) return GROK_HOST;
+  return CLAUDE_HOST;
+}
+
+export function buildCodexThroughlineSessionId(threadId) {
+  if (typeof threadId !== 'string' || threadId.trim().length === 0) {
+    throw new Error('threadId is required');
+  }
+  return `${CODEX_SESSION_PREFIX}${threadId.trim()}`;
+}
+
+export function codexSessionIdToThreadId(sessionId) {
+  if (!isCodexSessionId(sessionId)) return null;
+  return sessionId.slice(CODEX_SESSION_PREFIX.length) || null;
+}
+
+export function grokBareSessionId(sessionId) {
+  if (typeof sessionId !== 'string' || sessionId.length === 0) return null;
+  return sessionId.startsWith(GROK_SESSION_PREFIX)
+    ? sessionId.slice(GROK_SESSION_PREFIX.length)
+    : sessionId;
+}