polis

What it hooks into

From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.

Events

session.startsession.endprompt.composeprompt.submittool.checktool.callcommand.runturn.startturn.stepturn.completeagent.spawnskill.promptsession.measureclassic.PermissionRequestclassic.PermissionDeniedclassic.PostToolUseclassic.PostToolUseFailureclassic.SubagentStopclassic.Stopui.render

API calls

$.agent.list$.agent.register$.clock.after$.clock.every$.clock.now$.command.list$.command.register$.fs.exists$.fs.write$.model.classify$.process.run$.prompt.fill$.prompt.submit$.session.cwd$.session.id$.session.repo$.session.surfaces$.session.usage$.state.get$.state.set$.store.get$.store.set$.tool.register$.turn.abort$.ui.log$.ui.open$.ui.panes$.ui.resolve$.ui.status$.ui.toast

Draws

AbovePromptPane

Can see

every promptmcp__polis__project callssubagent spawnsevery tool callTodoWrite callsTaskCreate callsTaskUpdate callsevery skillclassic hooks

Reach

level 2 of 3 runs processeswrites filesdrives Claudewrites the prompt boxreads filesreads mod statepersists statedraws