Function cbm_install_hook_gate_script

src/cli/cli.c:2046–2092

Install the search-augmenter shim to ~/.claude/hooks/. * The shim is a thin wrapper that delegates to ` hook-augment`, * which adds graph context to Grep/Glob calls. It NEVER blocks a tool call: * a missing/old/hung binary results in a silent exit 0 (issue #362/#288). * The legacy filename `cbm-code-discovery-gate` is retained so existing * settings.json entries and uninstall keep wor

 * The legacy filename `cbm-code-discovery-gate` is retained so existing
 * settings.json entries and uninstall keep working with zero migration. */
void cbm_install_hook_gate_script(const char *home, const char *binary_path) {
    if (!home || !binary_path) {
        return;
    }
    /* Defensive: refuse to embed a binary path containing a double-quote, which
     * would break the BIN="..." shell quoting in the generated shim. In normal
     * installs this is unreachable (paths come from cbm_detect_self_path), but
     * fail-loud here beats silently emitting a malformed script. */
    if (strchr(binary_path, '"') != NULL) {
        return;
    }
    char config_dir[CLI_BUF_1K];
    cbm_claude_config_dir(home, config_dir, sizeof(config_dir));
    if (!config_dir[0]) {
        return;
    }
    char hooks_dir[CLI_BUF_1K];
    snprintf(hooks_dir, sizeof(hooks_dir), "%s/hooks", config_dir);
    cbm_mkdir_p(hooks_dir, CLI_OCTAL_PERM);

    char script_path[CLI_BUF_1K];
    snprintf(script_path, sizeof(script_path), "%s/" CMM_HOOK_GATE_SCRIPT, hooks_dir);

    FILE *f = fopen(script_path, "w");
    if (!f) {
        return;
    }
    (void)fprintf(f,
                  "#!/usr/bin/env bash\n"
                  "# codebase-memory-mcp search augmenter (Claude Code PreToolUse).\n"
                  "# NOTE: the legacy filename is kept for zero-migration upgrades.\n"
                  "# Despite the name this NEVER blocks a tool call - it only adds\n"
                  "# graph context. Any failure is silent (exit 0, no output).\n"
                  "BIN=\"%s\"\n"
                  "[ -x \"$BIN\" ] || exit 0\n"
                  "\"$BIN\" hook-augment 2>/dev/null\n"
                  "exit 0\n",
                  binary_path);
    /* fchmod before close to avoid TOCTOU race (CodeQL cpp/toctou-race-condition) */
#ifndef _WIN32
    fchmod(fileno(f), CLI_OCTAL_PERM);
#endif
    (void)fclose(f);
#ifdef _WIN32
    chmod(script_path, CLI_OCTAL_PERM);
#endif
}

/* SessionStart hook: remind agent to use MCP tools on every context reset. */
#define CMM_SESSION_REMINDER_SCRIPT "cbm-session-reminder"