karea

What the scan recorded

Observed events

every prompt, compaction, every tool call

Hooks

session.start, command.run {command=ksync}, command.run {command=clear}, session.end, prompt.submit, turn.complete, session.compact, tool.call, ui.render {component=PromptHint}, ui.render {component=AbovePrompt}, ui.render {component=Pane, requestId=karea-task}

API calls

$.clock.after, $.clock.every, $.clock.now, $.command.register, $.command.run, $.env.get, $.fs.write, $.http.fetch, $.mcp.call, $.model.complete, $.prompt.submit, $.session.id, $.state.get, $.state.set, $.store.get, $.store.set, $.ui.ask, $.ui.log, $.ui.open, $.ui.resolve, $.ui.status, $.ui.toast

Validation on 2.1.308

fails on 2.1.308

Validator output

modules../register.tsx: karea.syncing is not declared: the manifest's types contract must name it in interface PluginState { karea: { syncing: ... } }; ./register.tsx hooks: session.start, command.run{command=ksync}, command.run{command=clear}, session.end, prompt.submit, turn.complete, session.compact, tool.call, ui.render{component=PromptHint}, ui.render{component=AbovePrompt}, ui.render{component=Pane, requestId=karea-task}; ./register.tsx answers its own command: command.run{command=ksync}; ./register.tsx gating hook with .catch: command.run{command=clear}; ./register.tsx gating hook with .catch: prompt.submit; ./register.tsx gating hook with .catch: session.compact; ./register.tsx gating hook with .catch: tool.call; ./register.tsx calls: $.clock.after, $.clock.every, $.clock.now, $.command.register, $.command.run, $.env.get (via kareaSyncLoaded, refreshChip, restoreTask), $.fs.write (via refreshChip), $.http.fetch (via call), $.mcp.call (via kareaMcpRaw, linkQuestionToMeeting, upcomingMeetings), $.model.complete (via analyzeTurn), $.prompt.submit, $.session.id (via activate, currentSessionId, refreshChip), $.state.get, $.state.set, $.store.get (via saveTask, savedTask), $.store.set (via saveTask), $.ui.ask, $.ui.log, $.ui.open, $.ui.resolve, $.ui.status, $.ui.toast (via flagRemote); ./register.tsx env writes: nothing; ./register.tsx env reads: CLAUDE_CODE_PLUGIN_DIRS, HOME, KAREA_TASK; ./register.tsx state writes: karea.active, karea.briefPending, karea.chipNow, karea.clearArmed, karea.contextAges, karea.earlier, karea.events, karea.lastCheckAt, karea.lastPrompt, karea.lastPromptAt, karea.lastSyncAt, karea.needsReread, karea.openDecisions, karea.pending, karea.remote, karea.seenChanges, karea.snapshot, karea.syncing, karea.touched, karea.turnWrote, karea.watermark; ./register.tsx state reads: karea.active, karea.briefPending, karea.chipNow, karea.clearArmed, karea.contextAges, karea.earlier, karea.events, karea.lastCheckAt, karea.lastPrompt, karea.lastPromptAt, karea.lastSyncAt, karea.needsReread, karea.openDecisions, karea.pending, karea.remote, karea.seenChanges, karea.snapshot, karea.syncing, karea.touched, karea.turnWrote, karea.watermark

Scanned revision

2a7509c9c1bd

Marketplace warnings

karea-agentic

UI rewrite review

UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. plugins/karea/hooks/rules.ts:31, plugins/karea/hooks/rules.ts:32

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.