project-sentinel

What it hooks into

From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.

Events

session.startsession.endclassic.SessionStartclassic.UserPromptSubmitsession.attachsession.measuresession.compactprompt.submitprompt.contextprompt.composeturn.startturn.stepturn.completeclassic.PreModelSwitchclassic.PostModelSwitchclassic.PostToolBatchsession.appendclassic.Stoptool.callagent.offeragent.spawncommand.runui.messageui.closeui.render

API calls

$.agent.list$.clock.after$.clock.every$.clock.now$.command.list$.command.register$.command.run$.env.get$.fs.exists$.fs.read$.fs.stat$.model.classify$.model.fork$.process.run$.process.spawn$.prompt.fill$.prompt.read$.prompt.submit$.session.compact$.session.id$.session.model$.session.repo$.session.root$.session.send$.session.surfaces$.session.usage$.session.version$.settings.read$.state.get$.state.set$.store.delete$.store.get$.store.set$.too$.tool.call$.tool.check

Draws

AbovePromptPaneToolUseToolResultToolGroupSpinnerSessionMode

Can see

classic hookscompactionevery promptthe system prompt/"^mcp__project-sentinel__milestones$"/ calls/"^mcp__project-sentinel__decision_request$"/ callsevery tool callsubagent spawns

Reach

level 2 of 3 other: $.process.spawnother: $.prompt.readother: $.state.getother: $.state.setother: $.tooother: $.tool.checkruns processesdrives Claudewrites the prompt boxreads filesreads env varsreads settingspersists state