inbox

What it hooks into

From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.

Events

session.startsession.attachclassic.SessionStartsession.endprompt.submitturn.startprompt.composetool.describetool.checktool.callclassic.PermissionRequestclassic.StopFailureclassic.Stopturn.completeprompt.contextsession.appendcommand.runui.closeui.renderconfig.set

API calls

$.clock.every$.clock.now$.clock.sleep$.command.register$.config.list$.env.get$.fs.exists$.fs.stat$.fs.write$.model.complete$.model.fork$.process.run$.prompt.submit$.session.append$.session.cwd$.session.id$.session.messages$.session.root$.session.surfaces$.session.turns$.state.get$.state.set$.store.delete$.store.get$.store.keys$.store.set$.tool.call$.tool.register$.u$.ui.copy

Draws

AbovePromptPane

Can see

classic hooksevery promptmcp__inbox__record_finding callsmcp__inbox__close callsmcp__inbox__run_check callsevery tool callthe system prompt

Reach

level 2 of 3 other: $.state.getother: $.state.setother: $.uruns processeswrites filesdrives Claudereads filesreads env varsreads the transcriptpersists statedraws