
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@monoes/hooks
Advanced tools
Hook type definitions, an in-memory HookRegistry/HookExecutor, and a WorkerManager with 9 on-demand background workers (health/ddd/security/cache/map/audit/consolidate/progress/reflexion). Not the runtime hook dispatcher — the live path is .claude/helpers
A library, not a runtime dispatcher. Provides hook type definitions, an in-memory HookRegistry/HookExecutor for defining handlers, and a WorkerManager with 9 background workers for Monomind.
Part of the Monomind ecosystem.
The Claude Code hooks that actually fire on every edit/command/task/session
run through the plain CJS handlers in .claude/helpers/ (see
.claude/helpers/hook-handler.cjs), wired up via settings.json. That is
the authoritative, "live" dispatch system.
This package is bridged in as optional enrichment at a handful of
lifecycle events (SessionStart, PreTask, PostTask, PostEdit,
SessionEnd, AgentSpawn) when it's installed and built. HookRegistry
lets you define handlers the CJS layer can call into, but since each hook
event runs in a fresh subprocess, in-memory registrations don't survive
across events. What persists is the workers' output: they write JSON
metrics files under .monomind/metrics/ that the statusline, router, and
doctor read back.
npm install @monoes/hooks
Native module install blocked? The SQLite-backed background workers depend on
better-sqlite3. If it fails to load withCould not locate the bindings file, your npm'sallowScriptspolicy blocked its native build — runnpm install-scripts approve better-sqlite3 && npm rebuild better-sqlite3.
import { HookRegistry, HookExecutor, HookEvent, HookPriority } from '@monoes/hooks';
const registry = new HookRegistry();
const executor = new HookExecutor(registry);
// Register a hook
registry.register(
HookEvent.PreEdit,
async (context) => {
console.log(`Editing: ${context.file?.path}`);
return { success: true };
},
HookPriority.Normal,
{ name: 'log-edits' }
);
// Execute
const result = await executor.preEdit('src/app.ts', 'modify');
| Event | When it fires |
|---|---|
PreToolUse / PostToolUse | Before/after any tool call |
PreEdit / PostEdit | Before/after file modification |
PreRead / PostRead | Before/after file reads |
PreCommand / PostCommand | Before/after shell commands |
PreTask / PostTask / TaskProgress | Task lifecycle |
SessionStart / SessionEnd / SessionRestore | Session lifecycle |
AgentSpawn / AgentTerminate | Agent lifecycle |
PreRoute / PostRoute | Task routing decisions |
PatternLearned / PatternConsolidated | Pattern learning |
| Priority | Value | Use case |
|---|---|---|
Critical | 1000 | Security validation |
High | 100 | Pre-processing |
Normal | 50 | Standard hooks |
Low | 10 | Logging, metrics |
Background | 1 | Async, runs last |
9 on-demand workers, all registered in WORKER_CONFIGS, each a factory
function managed by WorkerManager:
| Worker | Purpose |
|---|---|
health | Monitor disk, memory, CPU, processes |
ddd | DDD progress → .monomind/metrics/ddd-progress.json |
security | Scan for secrets and vulnerabilities |
cache | Clean temp files, old logs, stale cache |
progress | Track implementation progress |
map | Codebase map → .monomind/metrics/codebase-map.json |
audit | Security audit → .monomind/metrics/security-audit.json |
consolidate | Memory consolidation → .monomind/metrics/consolidation.json |
reflexion | Turns failed routed tasks in route-outcomes.jsonl into templated notes with keywords in .monomind/reflexion-store.json, for keyword lookup later (disabled by default) |
The metrics-producing workers run at session start (via the CJS session
handler) and are staleness-gated: each only runs when its output file is
missing or older than 6 hours, with a hard per-worker timeout so session
start is never blocked. WorkerManager can also schedule them on intervals,
persist run state to .monomind/metrics/workers-state.json, raise threshold
alerts, and export statusline data.
import { WorkerManager, createHealthWorker } from '@monoes/hooks';
const manager = new WorkerManager(process.cwd());
manager.register('health', createHealthWorker(process.cwd()));
const result = await manager.runWorker('health');
Earlier versions carried MCP tool schemas, agent synthesis, observability
traces, interrupt checkpoints, statusline generation, and swarm messaging
subsystems. None of it was wired into a running server, so it was deleted.
The CLI (packages/@monomind/cli/src/mcp-tools/) owns the real MCP tools;
this package is just types + registry/executor + workers.
MIT
FAQs
Hook type definitions, an in-memory HookRegistry/HookExecutor, and a WorkerManager with 9 on-demand background workers (health/ddd/security/cache/map/audit/consolidate/progress/reflexion). Not the runtime hook dispatcher — the live path is .claude/helpers
The npm package @monoes/hooks receives a total of 646 weekly downloads. As such, @monoes/hooks popularity was classified as not popular.
We found that @monoes/hooks demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.