rename(547): the plugin is grimoire — manifest, MCP key, hooks, env, skills

Step 3 of the Scribe -> Grimoire rename.

- Plugin `grimoire` in marketplace `grimoire-plugin`, MCP server key
  `grimoire`, so tools reach a session as mcp__plugin_grimoire_grimoire__*.
- hooks/scribe_* -> hooks/grimoire_*, their shell functions and the TMPDIR
  ledgers with them; SCRIBE_URL / SCRIBE_TOKEN / SCRIBE_HOOK_DIR /
  SCRIBE_LEDGER_DIRS -> GRIMOIRE_*; the project marker is `.grimoire`.
- skills/using-scribe -> using-grimoire, /grimoire:sync, stored processes
  arrive as grimoire-proc-<slug>; moment_actions names them the same way.
- Migration 0124 rewrites stored skill names (rule_moments,
  rule_moment_judgments, moment_mappings) from scribe:/scribe-proc- to
  grimoire:/grimoire-proc-, so a rule mounted on a skill keeps firing.
- Settings' install commands and MCP-only defaults, the docs and the
  tests follow.
- scripts/check_plugin.py drops the smoke event for a report-check hook
  that has no file in plugin/hooks.

Kept on purpose: the secret-sealing label, and the names that let backups
written as Scribe restore and be counted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_rule_opened_ledger.py

@@ -36,7 +36,7 @@ from grimoire.services.plugin_context import _rule_hint_line
 
 ROOT = Path(__file__).resolve().parents[1]
 HOOKS = ROOT / "plugin" / "hooks"
-RECORDER = HOOKS / "scribe_record_opened.sh"
+RECORDER = HOOKS / "grimoire_record_opened.sh"
 
 
 def _rule(rid=156, kind="rule"):
@@ -98,33 +98,33 @@ def _run_recorder(event: dict, tmp: Path) -> Path:
     out = subprocess.run(["bash", str(RECORDER)], input=json.dumps(event),
                          capture_output=True, text=True, env=env, timeout=30)
     assert out.returncode == 0, out.stderr
-    return tmp / "scribe-priorart" / "s1.opened.ids"
+    return tmp / "grimoire-priorart" / "s1.opened.ids"
 
 
 def test_opening_a_rule_is_recorded(tmp_path):
     led = _run_recorder(
-        {"session_id": "s1", "tool_name": "mcp__scribe__get_rule",
+        {"session_id": "s1", "tool_name": "mcp__grimoire__get_rule",
          "tool_input": {"rule_id": 156}}, tmp_path)
     assert led.exists()
     assert led.read_text().split("\t")[0] == "156"
 
 
 def test_the_entry_is_stamped_so_it_ages_like_the_naming_ledger(tmp_path):
-    """Both ledgers are read by `scribe_rules_live`, which ages on that stamp.
+    """Both ledgers are read by `grimoire_rules_live`, which ages on that stamp.
     An unstamped entry never expires — bounded, but it would mean an opened
     rule stays 'opened' for a session's whole life."""
     led = _run_recorder(
-        {"session_id": "s1", "tool_name": "mcp__scribe__get_rule",
+        {"session_id": "s1", "tool_name": "mcp__grimoire__get_rule",
          "tool_input": {"rule_id": 9}}, tmp_path)
     parts = led.read_text().strip().split("\t")
     assert len(parts) == 2 and parts[1].isdigit()
 
 
 @pytest.mark.parametrize("event", [
-    {"session_id": "s1", "tool_name": "mcp__scribe__get_rule", "tool_input": {}},
-    {"session_id": "s1", "tool_name": "mcp__scribe__get_rule",
+    {"session_id": "s1", "tool_name": "mcp__grimoire__get_rule", "tool_input": {}},
+    {"session_id": "s1", "tool_name": "mcp__grimoire__get_rule",
      "tool_input": {"rule_id": "../../etc"}},
-    {"tool_name": "mcp__scribe__get_rule", "tool_input": {"rule_id": 5}},
+    {"tool_name": "mcp__grimoire__get_rule", "tool_input": {"rule_id": 5}},
 ])
 def test_an_event_with_nothing_usable_records_nothing_and_still_exits_zero(event, tmp_path):
     """A hook that fails a tool call over bookkeeping is worse than one that
@@ -150,11 +150,11 @@ def test_the_recorder_is_registered_on_the_get_rule_tool():
     hooks = json.loads((HOOKS / "hooks.json").read_text())["hooks"]
     posts = hooks["PostToolUse"]
     mine = [b for b in posts
-            if any("scribe_record_opened.sh" in h["command"] for h in b["hooks"])]
+            if any("grimoire_record_opened.sh" in h["command"] for h in b["hooks"])]
     assert len(mine) == 1, "the opened-recorder is not registered exactly once"
     # An MCP tool's server segment varies with how the plugin was installed, so
     # the matcher must not pin one spelling of it.
     matcher = mine[0]["matcher"]
-    assert re.fullmatch(matcher, "mcp__plugin_scribe_scribe__get_rule"), matcher
-    assert re.fullmatch(matcher, "mcp__scribe__get_rule"), matcher
+    assert re.fullmatch(matcher, "mcp__plugin_grimoire_grimoire__get_rule"), matcher
+    assert re.fullmatch(matcher, "mcp__grimoire__get_rule"), matcher
     assert not re.fullmatch(matcher, "Bash"), matcher