trail-code 0.0.0-stage → 0.28.0-semantic.3

package/dist/claude/paths.js

@@ -0,0 +1,22 @@
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+// This module ships inside the package at <pkgRoot>/dist/claude/paths.js. Resolving graft's
+// own CLI and sibling scripts relative to THIS file — not the project dir — is what makes the
+// hooks work when graft is installed as a dependency in someone else's repo (where
+// <projectDir>/dist/ does not exist). In graft's own repo it resolves to ./dist all the same.
+const CLAUDE_DIR = dirname(fileURLToPath(import.meta.url));
+/** Absolute path to the graft CLI (`<pkgRoot>/dist/cli.js`), resolved from this module. */
+export function graftCliPath() {
+    return join(CLAUDE_DIR, '..', 'cli.js');
+}
+/** Absolute path to this package's `dist/claude` dir. Baked into the generated shims at
+ * init time as their primary resolution candidate, so the statusline/hooks find graft
+ * without runtime guesswork — correct regardless of how Node was installed. */
+export function claudeDistDir() {
+    return CLAUDE_DIR;
+}
+/** Absolute path to a sibling script in the claude dir (e.g. `sync-run.js`). */
+export function claudeScriptPath(name) {
+    return join(CLAUDE_DIR, name);
+}
+//# sourceMappingURL=paths.js.map

package/dist/claude/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/claude/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,4FAA4F;AAC5F,8FAA8F;AAC9F,mFAAmF;AACnF,8FAA8F;AAC9F,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE3D,2FAA2F;AAC3F,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED;;+EAE+E;AAC/E,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC"}

package/dist/claude/session-metrics.d.ts

@@ -0,0 +1,73 @@
+import { type SessionState } from './state.js';
+import type { AgentHost } from '../telemetry/contract.js';
+export type ToolKind = 'graft' | 'source';
+/** An MCP-style tool name (server-prefixed), as opposed to a native Read/Shell.
+ *  Used to hand graft MCP calls to the dedicated MCP hook so a host that fires
+ *  BOTH a generic post-tool hook and an MCP hook can't double-count them. */
+export declare function isMcpToolName(toolName: string): boolean;
+/**
+ * Whether a tool name is one of graft's MCP tools, across every host prefix.
+ * Anchored on the real name list (`graft_find_code`, its legacy aliases, …), not
+ * a loose `includes('graft')`: a third-party MCP tool whose name merely contains
+ * "graft" (or a repo working on graft itself) must not count as a graft read —
+ * the same care `commandInvokesGraft` takes for the CLI side. Strips the host
+ * prefix first (`mcp__graft__graft_find_code`, `MCP:graft_find_code`) by taking
+ * the last delimited segment. */
+export declare function isGraftMcpTool(toolName: string): boolean;
+/** Whether a shell command line invokes the CLI under either name (any of its install shapes). */
+export declare function commandInvokesGraft(command: string): boolean;
+/**
+ * Classify one tool use as a graft retrieval, a source read, or neither
+ * (an edit, a task spawn, an unrelated shell command — no retrieval signal).
+ * `command` is the shell command line when `toolName` is the host's shell tool.
+ */
+export declare function classifyToolUse(toolName?: string, command?: string): ToolKind | null;
+/** Sum every `[graft] tokens saved ≈ N` footer in a blob of tool output. Thin
+ *  alias over {@link sumSavingsFooters}, which lives next to the code that writes
+ *  the footer so the two can't drift. */
+export declare function parseSavings(blob: string): number;
+export interface ToolUse {
+    /** 'graft' → graftReads++, 'source' → sourceReads++, null/absent → neither. */
+    kind?: ToolKind | null;
+    /** Tokens the retrieval saved, parsed from its footer. Added to the running total. */
+    savedTokens?: number;
+    /** The host recording this use. Stamped on the session file (once) so the
+     * `session_summary` is attributed correctly no matter which host later flushes it. */
+    host?: AgentHost;
+}
+/**
+ * Fold one tool use into a session's counters. A no-op when there is nothing to
+ * record (kind null and no savings), so a host can call it unconditionally after
+ * every tool without first checking whether the tool was interesting — the
+ * no-write path is what keeps it cheap on the Write/Edit/Task majority.
+ *
+ * Best-effort read-modify-write, not locked — mirroring `patchStats` in
+ * util/state.ts. Two tool-use hooks racing on the same session file can lose a
+ * count; that is acceptable for an episodic usage estimate (worst case is an
+ * undercount by one, never corruption thanks to the atomic write), and a lock
+ * here would contend with the build lock these hooks also touch.
+ */
+export declare function recordToolUse(dir: string, sessionId: string, use: ToolUse): void;
+export interface SessionSummary extends SessionState {
+    id: string;
+}
+/** The most-recently-touched session file for a repo, or null when none exist —
+ *  what `graft stats` shows by default: the session you were just in. */
+export declare function latestSession(dir: string): SessionSummary | null;
+/**
+ * A one-line-per-fact readout of a session's usage mix — Cursor has no
+ * statusline, so this is how you see the numbers the Claude Code bar would show.
+ * Reads local JSON only; sends nothing.
+ */
+/**
+ * What this repo's most recent session has actually been paying per million
+ * input tokens, or null when no turn has been billed yet.
+ *
+ * `latestSession` rather than a session id because the callers are CLI and MCP
+ * processes answering one query: they know the repo, never the host's session
+ * id. The rate belongs to the repo's current session, which is the one whose
+ * reply the number is about to appear in.
+ */
+export declare function sessionInputRate(dir: string): number | null;
+export declare function formatSessionStats(s: SessionSummary | null): string;
+//# sourceMappingURL=session-metrics.d.ts.map

package/dist/claude/session-metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-metrics.d.ts","sourceRoot":"","sources":["../../src/claude/session-metrics.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAyD,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AACtG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAI1D,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAc1C;;6EAE6E;AAC7E,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGvD;AAED;;;;;;;iCAOiC;AACjC,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIxD;AAED,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAQ5D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAOpF;AAED;;yCAEyC;AACzC,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,MAAM,WAAW,OAAO;IACtB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;0FACsF;IACtF,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAehF;AAED,MAAM,WAAW,cAAe,SAAQ,YAAY;IAClD,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;yEACyE;AACzE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAWhE;AAED;;;;GAIG;AACH;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAO3D;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,cAAc,GAAG,IAAI,GAAG,MAAM,CAwBnE"}

package/dist/claude/session-metrics.js

@@ -0,0 +1,209 @@
+/**
+ * Session usage accounting, shared across every host (Claude Code, Cursor, and
+ * plain MCP). It answers the one question the README rests on: when an agent had
+ * both graft and grep in front of it, which did it reach for, and how much did
+ * that save?
+ *
+ * The counters (`graftReads`, `sourceReads`, `savedTokens`) already live on
+ * {@link SessionState}; before this module nothing ever incremented the first
+ * two, so `session_summary` telemetry shipped 0/0 for every session. Everything
+ * here is a pure classify + read-modify-write over `graft/.cache/session/`, so a
+ * host adapter is a few lines: parse its payload, call {@link recordToolUse}.
+ *
+ * Two payload shapes feed it, confirmed against the vendor docs rather than
+ * guessed (the matcher depends on getting the names right):
+ *
+ *   - Claude Code `PostToolUse`  — `{ tool_name, tool_input: { command }, tool_response }`.
+ *     A graft retrieval prints a `[graft] tokens saved ≈ N` footer into
+ *     `tool_response`, which is itself proof graft ran.
+ *   - Cursor `postToolUse`       — `{ tool_name, tool_input, tool_output, conversation_id }`
+ *     (https://cursor.com/docs/hooks). `tool_output` is the JSON-stringified
+ *     result; a Shell `graft …` call carries the same footer inside its stdout.
+ *   - Cursor `afterMCPExecution` — `{ tool_name, tool_input, result_json, duration }`.
+ *     Fires only for MCP tools, so a graft tool is recognised by its name and
+ *     its savings read out of `result_json`.
+ *
+ * MCP tool names arrive host-prefixed in different shapes (`graft_find_code`,
+ * `MCP:graft_find_code`, `mcp__graft__graft_find_code`). {@link isGraftMcpTool}
+ * strips the prefix to the last delimited segment and checks it against the real
+ * name list (`GRAFT_MCP_TOOL_NAMES`), so a graft tool is recognised across every
+ * host format while a third-party tool that merely contains "graft" is not.
+ */
+import { statSync } from 'node:fs';
+import { join } from 'node:path';
+import { sumSavingsFooters } from '../context/savings.js';
+import { dollarsSaved, formatDollars } from '../context/price.js';
+import { readSession, writeSession, sessionDir, listSessionIds } from './state.js';
+import { GRAFT_MCP_TOOL_NAMES } from '../mcp/tool-names.js';
+import { brand, cmd } from '../brand.js';
+/** Native tools that mean "the agent went to read source itself" — the grep/read
+ *  path graft is meant to replace. These are the host tool NAMES (Claude Code and
+ *  Cursor both use Read/Grep/Glob; Cursor adds Search); shell builtins like `ls`
+ *  are commands, never tool names, so they belong to the Shell branch, not here.
+ *  Compared lower-cased. */
+const SOURCE_TOOLS = new Set(['read', 'grep', 'glob', 'search']);
+/** The host's shell tool, whose `command` we then inspect for a graft invocation. */
+function isShellTool(t) {
+    return t === 'bash' || t === 'shell';
+}
+/** An MCP-style tool name (server-prefixed), as opposed to a native Read/Shell.
+ *  Used to hand graft MCP calls to the dedicated MCP hook so a host that fires
+ *  BOTH a generic post-tool hook and an MCP hook can't double-count them. */
+export function isMcpToolName(toolName) {
+    const t = toolName.toLowerCase();
+    return t.startsWith('mcp') || t.includes(':') || t.includes('__');
+}
+/**
+ * Whether a tool name is one of graft's MCP tools, across every host prefix.
+ * Anchored on the real name list (`graft_find_code`, its legacy aliases, …), not
+ * a loose `includes('graft')`: a third-party MCP tool whose name merely contains
+ * "graft" (or a repo working on graft itself) must not count as a graft read —
+ * the same care `commandInvokesGraft` takes for the CLI side. Strips the host
+ * prefix first (`mcp__graft__graft_find_code`, `MCP:graft_find_code`) by taking
+ * the last delimited segment. */
+export function isGraftMcpTool(toolName) {
+    const t = toolName.toLowerCase();
+    const bare = t.split(/[:./]|__/).pop() ?? t;
+    return GRAFT_MCP_TOOL_NAMES.has(bare);
+}
+/** Whether a shell command line invokes the CLI under either name (any of its install shapes). */
+export function commandInvokesGraft(command) {
+    const c = command.trim();
+    // running from a source checkout
+    if (/dist[/\\](cli|bin[/\\](trail|graft))\.js/.test(c))
+        return true;
+    // `graft …`, `graft-dev …`, `npx [-y] [@nanonets/]graft …`, and the same for
+    // `trail` / `@trailhq/trail-code`, at the start of the line or of a &&/;/| segment —
+    // not "mygraft" or a path that merely contains it.
+    return /(^|[|&;]\s*)(npx\s+(-y\s+)?(@nanonets\/|@trailhq\/)?)?(graft|trail)(-dev)?\b/i.test(c);
+}
+/**
+ * Classify one tool use as a graft retrieval, a source read, or neither
+ * (an edit, a task spawn, an unrelated shell command — no retrieval signal).
+ * `command` is the shell command line when `toolName` is the host's shell tool.
+ */
+export function classifyToolUse(toolName, command) {
+    const t = (toolName ?? '').toLowerCase();
+    if (!t)
+        return null;
+    if (isGraftMcpTool(t))
+        return 'graft';
+    if (SOURCE_TOOLS.has(t))
+        return 'source';
+    if (isShellTool(t) && command && commandInvokesGraft(command))
+        return 'graft';
+    return null;
+}
+/** Sum every `[graft] tokens saved ≈ N` footer in a blob of tool output. Thin
+ *  alias over {@link sumSavingsFooters}, which lives next to the code that writes
+ *  the footer so the two can't drift. */
+export function parseSavings(blob) {
+    return sumSavingsFooters(blob);
+}
+/**
+ * Fold one tool use into a session's counters. A no-op when there is nothing to
+ * record (kind null and no savings), so a host can call it unconditionally after
+ * every tool without first checking whether the tool was interesting — the
+ * no-write path is what keeps it cheap on the Write/Edit/Task majority.
+ *
+ * Best-effort read-modify-write, not locked — mirroring `patchStats` in
+ * util/state.ts. Two tool-use hooks racing on the same session file can lose a
+ * count; that is acceptable for an episodic usage estimate (worst case is an
+ * undercount by one, never corruption thanks to the atomic write), and a lock
+ * here would contend with the build lock these hooks also touch.
+ */
+export function recordToolUse(dir, sessionId, use) {
+    const saved = use.savedTokens ?? 0;
+    if (!use.kind && saved <= 0)
+        return;
+    const id = sessionId || 'default';
+    const s = readSession(dir, id);
+    if (use.kind === 'graft')
+        s.graftReads = (s.graftReads ?? 0) + 1;
+    else if (use.kind === 'source')
+        s.sourceReads = (s.sourceReads ?? 0) + 1;
+    if (saved > 0)
+        s.savedTokens = (s.savedTokens ?? 0) + saved;
+    // A graft use owes a tally in this turn's reply; the Stop hook (countTallyTurn)
+    // resolves whether it got one and clears the flag. A flag, not a count — a turn
+    // with several graft calls is still one reply to the user.
+    if (use.kind === 'graft')
+        s.turnUsedGraft = true;
+    // Stamp the host once; the first tool use that lands owns the attribution.
+    if (use.host && !s.host)
+        s.host = use.host;
+    writeSession(dir, id, s);
+}
+/** The most-recently-touched session file for a repo, or null when none exist —
+ *  what `graft stats` shows by default: the session you were just in. */
+export function latestSession(dir) {
+    const sdir = sessionDir(dir);
+    let bestId = null;
+    let bestMtime = -Infinity;
+    for (const id of listSessionIds(dir)) {
+        let mtime;
+        try {
+            mtime = statSync(join(sdir, `${id}.json`)).mtimeMs;
+        }
+        catch {
+            continue;
+        }
+        if (mtime > bestMtime) {
+            bestMtime = mtime;
+            bestId = id;
+        }
+    }
+    if (bestId === null)
+        return null;
+    return { id: bestId, ...readSession(dir, bestId) };
+}
+/**
+ * A one-line-per-fact readout of a session's usage mix — Cursor has no
+ * statusline, so this is how you see the numbers the Claude Code bar would show.
+ * Reads local JSON only; sends nothing.
+ */
+/**
+ * What this repo's most recent session has actually been paying per million
+ * input tokens, or null when no turn has been billed yet.
+ *
+ * `latestSession` rather than a session id because the callers are CLI and MCP
+ * processes answering one query: they know the repo, never the host's session
+ * id. The rate belongs to the repo's current session, which is the one whose
+ * reply the number is about to appear in.
+ */
+export function sessionInputRate(dir) {
+    const s = latestSession(dir);
+    if (!s?.inputCostMicros || !s?.inputTokensBilled)
+        return null;
+    // Micro-dollars per token and dollars per million tokens are the same number:
+    // both divide by 1e6 once. Returned as $/Mtok because that is the unit the
+    // price table is written in and the one a reader can sanity-check against it.
+    return s.inputCostMicros / s.inputTokensBilled;
+}
+export function formatSessionStats(s) {
+    if (s === null) {
+        return `${cmd('graft stats')}: no session recorded yet. Use ${brand()} in an agent session, then look again.`;
+    }
+    const graft = s.graftReads ?? 0;
+    const source = s.sourceReads ?? 0;
+    const saved = s.savedTokens ?? 0;
+    const total = graft + source;
+    const mix = total === 0 ? 'no retrieval yet' : `${Math.round((graft / total) * 100)}% graft`;
+    const lines = [
+        `${cmd('graft stats')}: session ${s.id}`,
+        `  graft reads:   ${graft}`,
+        `  source reads:  ${source}   (Read / Grep / Glob)`,
+        `  mix:           ${mix}`,
+        `  tokens saved:  ~${saved.toLocaleString()}`,
+    ];
+    // Omitted, not zeroed, when no turn has been billed yet: a host whose hooks
+    // name no transcript can't know what a token costs here, and a made-up rate
+    // would be worse than the silence.
+    const usd = dollarsSaved(saved, s.inputCostMicros, s.inputTokensBilled);
+    if (usd !== null)
+        lines.push(`  value saved:   ~${formatDollars(usd)}`);
+    if (s.promptAsks)
+        lines.push(`  prompts asked: ${s.promptAsks}`);
+    return lines.join('\n');
+}
+//# sourceMappingURL=session-metrics.js.map

package/dist/claude/session-metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-metrics.js","sourceRoot":"","sources":["../../src/claude/session-metrics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAqB,MAAM,YAAY,CAAC;AAEtG,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAIzC;;;;4BAI4B;AAC5B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEjE,qFAAqF;AACrF,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAC;AACvC,CAAC;AAED;;6EAE6E;AAC7E,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;iCAOiC;AACjC,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5C,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzB,iCAAiC;IACjC,IAAI,0CAA0C,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,6EAA6E;IAC7E,qFAAqF;IACrF,mDAAmD;IACnD,OAAO,+EAA+E,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAiB,EAAE,OAAgB;IACjE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,cAAc,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IACtC,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;yCAEyC;AACzC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,SAAiB,EAAE,GAAY;IACxE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO;IACpC,MAAM,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC;IAClC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;QAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;SAC5D,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,IAAI,KAAK,GAAG,CAAC;QAAE,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IAC5D,gFAAgF;IAChF,gFAAgF;IAChF,2DAA2D;IAC3D,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;QAAE,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC;IACjD,2EAA2E;IAC3E,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IAC3C,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3B,CAAC;AAMD;yEACyE;AACzE,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,SAAS,GAAG,CAAC,QAAQ,CAAC;IAC1B,KAAK,MAAM,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/E,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YAAC,SAAS,GAAG,KAAK,CAAC;YAAC,MAAM,GAAG,EAAE,CAAC;QAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,EAAE,eAAe,IAAI,CAAC,CAAC,EAAE,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC9D,8EAA8E;IAC9E,2EAA2E;IAC3E,8EAA8E;IAC9E,OAAO,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,iBAAiB,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAAwB;IACzD,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,OAAO,GAAG,GAAG,CAAC,aAAa,CAAC,kCAAkC,KAAK,EAAE,wCAAwC,CAAC;IAChH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC7B,MAAM,GAAG,GACP,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC;IACnF,MAAM,KAAK,GAAG;QACZ,GAAG,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE;QACxC,oBAAoB,KAAK,EAAE;QAC3B,oBAAoB,MAAM,yBAAyB;QACnD,oBAAoB,GAAG,EAAE;QACzB,qBAAqB,KAAK,CAAC,cAAc,EAAE,EAAE;KAC9C,CAAC;IACF,4EAA4E;IAC5E,4EAA4E;IAC5E,mCAAmC;IACnC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACxE,IAAI,GAAG,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/claude/settings-merge.d.ts

@@ -0,0 +1,76 @@
+type Json = Record<string, any>;
+/**
+ * A hook command that exits 0 whatever happens to it (every event since D116 item 6; PreToolUse first, for this). Copilot CLI reads
+ * the repo's `.claude/settings.json` and denies the tool call when a
+ * PreToolUse hook exits non-zero, so a shim that can't be found (a host
+ * started in a subfolder without CLAUDE_PROJECT_DIR, the shim gone after an
+ * uninstall) or a missing node would deny every shell command. `|| exit 0`
+ * means the same in sh and Windows cmd. The hook's answer travels as JSON on
+ * stdout, never as an exit code, so nothing is lost by it.
+ */
+export declare function failOpen(command: string): string;
+/** trail's committed hook, `.trail/hook.cjs`, run for one event. */
+export declare function trailHookCmd(arg: string): string;
+/**
+ * Is this allowlist entry one graft wrote?
+ *
+ * Scoped to the forms graft is actually invoked as — NOT any rule mentioning
+ * "graft". A user who allowlists their own `Bash(graft-mytool:*)` keeps it; only
+ * graft's own set is replaced, which is what lets a renamed entry disappear on
+ * upgrade instead of accumulating beside its replacement.
+ */
+export declare function isGraftAllowEntry(entry: unknown): boolean;
+/** Is this footer regex graft's? It points at the card tree, which is graft's alone. */
+export declare function isGraftFooterRegex(re: unknown): boolean;
+/** True when init should write (or refresh) Graft's Claude Code statusLine. */
+export declare function statuslineWanted(opts?: {
+    statusline?: boolean;
+}): boolean;
+export declare function mergeGraftSettings(existing: Json, opts?: {
+    statusline?: boolean;
+    name?: 'graft' | 'trail';
+}): {
+    merged: Json;
+    warnings: string[];
+};
+/**
+ * The hook blocks alone, merged into a settings file, with the shims addressed by
+ * absolute path — `~/.claude/settings.json`, where a write reaches every project on
+ * the machine (see hosts/claude-global.ts for why that copy has to exist).
+ *
+ * Hooks only, deliberately. `mergeGraftSettings` also claims the statusline, the
+ * footer regex and a Bash allowlist, and each of those is a reasonable thing to
+ * accept for a repo you ran `graft init` in and an unreasonable thing to impose on
+ * every repo you ever open — a statusline especially, since a session allows exactly
+ * one and taking it globally would silently outrank the user's own. The hooks are the
+ * piece that has to be global, because they are what a worktree loses.
+ *
+ * Same idempotent shape as the repo merge: graft's prior entries are dropped before
+ * the current set is added, so re-running converges instead of stacking.
+ */
+export declare function mergeGraftHooks(existing: Json, helpers: string): {
+    merged: Json;
+};
+/**
+ * trail's part of the committed `.claude/settings.json`: one SessionStart entry
+ * running `.trail/hook.cjs`, and nothing else. For a teammate without trail it
+ * shows the learnings and offers trail; with trail it hands off to the install.
+ * Anything an older init put here (status line, the other hooks, allowlist,
+ * footer regex) comes out, so the file a team commits is the same on every machine.
+ */
+export declare function mergeTrailShared(existing: Json): Json;
+/**
+ * trail's part of `.claude/settings.local.json`, the person's own: the status
+ * line, the footer regex and the allowlist, plus, when `~/.claude` doesn't carry
+ * them (`--no-global`), the hooks for every event but session start, which the
+ * shared file already runs once.
+ */
+export declare function mergeTrailLocal(existing: Json, opts?: {
+    statusline?: boolean;
+    hooks?: boolean;
+}): {
+    merged: Json;
+    warnings: string[];
+};
+export {};
+//# sourceMappingURL=settings-merge.d.ts.map

package/dist/claude/settings-merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-merge.d.ts","sourceRoot":"","sources":["../../src/claude/settings-merge.ts"],"names":[],"mappings":"AAEA,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAmChC;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhD;AACD,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAsDD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAEvD;AAOD,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAE7E;AA8BD,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,IAAI,EACd,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAA;CAAO,GAC5D;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAuCtC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,IAAI,CAAA;CAAE,CASjF;AA+BD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAQrD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,IAAI,EACd,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GACnD;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAoBtC"}