basemind 0.24.0

Full AI context layer over MCP — tree-sitter code-map, document RAG (PDF/Office/HTML/email + OCR + reranker), shared agent memory, on-demand web crawl, git history + blame + per-symbol diff. 300+ languages, 10+ coding-agent harnesses, content-addressed Fjall + LanceDB.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

#!/usr/bin/env bash
# basemind PreToolUse guard.
#
# Fires only for the codebase-search tools (matcher "Grep|Glob" in hooks.json) and
# steers the agent toward basemind's indexed tools, which return paths + line numbers
# instead of file bodies. Three modes via the BASEMIND_GUARD env var:
#
#   nudge    (default) — allow the call, attach a one-time advisory pointing at the
#                        cheaper basemind tool. Fires once per session per tool.
#   redirect           — deny the call with a reason telling the agent to use the
#                        basemind tool instead. Enforcing; no dedup.
#   off                — no-op.
#
# Caveat: whether Claude Code fires PreToolUse inside subagents is undocumented, so
# this reliably covers main-session tool calls; subagent coverage is best-effort.
#
# Output is the PreToolUse JSON result on stdout; the hook never blocks startup and
# degrades to a silent no-op (exit 0 = proceed normally) when it cannot run.
set -euo pipefail

MODE="${BASEMIND_GUARD:-nudge}"
[ "${MODE}" = "off" ] && exit 0

# Need jq to read the event payload + emit well-formed JSON; degrade to no-op if absent.
command -v jq >/dev/null 2>&1 || exit 0

input="$(cat 2>/dev/null || true)"
[ -n "${input}" ] || exit 0
tool="$(printf '%s' "${input}" | jq -r '.tool_name // empty' 2>/dev/null || true)"
session="$(printf '%s' "${input}" | jq -r '.session_id // "nosession"' 2>/dev/null || echo nosession)"

# Tailor the suggestion to the tool. Anything outside the matcher set just proceeds.
case "${tool}" in
Grep)
  alt="basemind: code mode=symbols (definitions), code mode=references / mode=callers (call sites), or code mode=grep (indexed regex over content)"
  ;;
Glob)
  alt="basemind: code mode=files (indexed paths, with language / path filters), or code mode=find (fuzzy path search)"
  ;;
*)
  exit 0
  ;;
esac

emit_allow() {
  jq -cn --arg m "$1" \
    '{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"allow",additionalContext:$m}}'
}
emit_deny() {
  jq -cn --arg m "$1" \
    '{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:$m}}'
}

if [ "${MODE}" = "redirect" ]; then
  emit_deny "Use ${alt} instead of ${tool} for codebase navigation — it answers from the index \
(paths + line numbers, a fraction of the tokens). Set BASEMIND_GUARD=nudge to make this advisory, \
or BASEMIND_GUARD=off to disable."
  exit 0
fi

# nudge: one advisory per session per tool so it informs without nagging.
# Sanitize session_id before building a path from it — it is untrusted input, and a
# value containing "/" or ".." would otherwise let the marker escape marker_dir.
# Collapse everything outside [A-Za-z0-9._-] to "_".
safe_session="$(printf '%s' "${session}" | tr -c 'A-Za-z0-9._-' '_')"
[ -n "${safe_session}" ] || safe_session="nosession"
marker_dir="${TMPDIR:-/tmp}/basemind-guard"
marker="${marker_dir}/${safe_session}.${tool}"
mkdir -p "${marker_dir}" 2>/dev/null || true
if [ -e "${marker}" ]; then
  exit 0
fi
: >"${marker}" 2>/dev/null || true

emit_allow "basemind is indexed for this repo. For codebase structure, prefer ${alt} — it returns \
paths + line numbers without reading file bodies, at a fraction of the tokens. Proceeding with \
${tool} for now. (BASEMIND_GUARD=off silences this; =redirect enforces it.)"
exit 0