@alpacakit/script-hooks 0.1.0-beta.36

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Masahiro Tonomura (codemafia0000)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,12 @@
+# @alpacakit/script-hooks
+
+Validate and resolve registered local script paths, match them by string key,
+and run JSON payloads through `.sh`, `.js`, `.mjs`, or `.py` hooks. The root
+entry exports the schemas, path resolver, registry, result, and observation
+contracts; import the subprocess adapter from `@alpacakit/script-hooks/node`.
+
+The Node runner writes one JSON value followed by LF to stdin and returns
+expected script exits and timeouts as result values. Timeout teardown uses a
+POSIX process group and is therefore supported on Linux and macOS. The runner
+does not choose or filter the environment, sandbox scripts, schedule
+concurrency, or retry failures; those policies belong to the host application.

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./model.js";
+export * from "./observation.js";
+export * from "./path.js";
+export * from "./registry.js";
+export * from "./schema.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export * from "./model.js";
+export * from "./observation.js";
+export * from "./path.js";
+export * from "./registry.js";
+export * from "./schema.js";

package/dist/model.d.ts

@@ -0,0 +1,72 @@
+import type { Brand, JsonValue } from "@alpacakit/core";
+export type ScriptHookPath = Brand<string, "ScriptHookPath">;
+export type ScriptHookAbsolutePath = Brand<string, "ScriptHookAbsolutePath">;
+export type ScriptHookEntry<Key extends string> = {
+    readonly path: ScriptHookPath;
+    readonly on: readonly Key[];
+};
+export type ResolvedScriptHookEntry<Key extends string> = ScriptHookEntry<Key> & {
+    readonly absolutePath: ScriptHookAbsolutePath;
+};
+export interface ScriptHookRegistry<Key extends string, Entry extends ResolvedScriptHookEntry<Key> = ResolvedScriptHookEntry<Key>> {
+    list(): readonly Entry[];
+    matching(key: Key): readonly Entry[];
+}
+export type ResolveScriptHookPathResult = {
+    readonly kind: "resolved";
+    readonly absolutePath: ScriptHookAbsolutePath;
+} | {
+    readonly kind: "outside_root";
+}
+/** The candidate (or a path component) does not exist: an expected failure
+ *  for a user-supplied hook path, not a fault. */
+ | {
+    readonly kind: "missing";
+};
+export type ScriptHookTermination = {
+    readonly kind: "exit";
+    readonly exitCode: number;
+} | {
+    readonly kind: "signal";
+    readonly signal: string;
+} | {
+    readonly kind: "unknown";
+};
+export type ScriptHookRunResult = {
+    readonly kind: "succeeded";
+    readonly stderrTail: string | null;
+} | {
+    readonly kind: "failed";
+    readonly stderrTail: string | null;
+    readonly termination: ScriptHookTermination;
+} | {
+    readonly kind: "timed_out";
+    readonly stderrTail: string | null;
+};
+export type ScriptHookObservedRunResult = {
+    readonly kind: "succeeded";
+    readonly stderrTail: string;
+} | Exclude<ScriptHookRunResult, {
+    readonly kind: "succeeded";
+}>;
+export interface ScriptHookRunner<Payload extends JsonValue = JsonValue> {
+    run(input: {
+        readonly hookPath: ScriptHookAbsolutePath;
+        readonly payload: Payload;
+    }): Promise<ScriptHookRunResult>;
+}
+export type ScriptHookObservation<Payload extends JsonValue = JsonValue> = {
+    readonly kind: "run";
+    readonly payload: Payload;
+    readonly hookPath: ScriptHookAbsolutePath;
+    readonly result: ScriptHookObservedRunResult;
+} | {
+    readonly kind: "runner_failure";
+    readonly payload: Payload;
+    readonly hookPath: ScriptHookAbsolutePath;
+    readonly message: string;
+};
+export interface ScriptHookObserver<Payload extends JsonValue = JsonValue> {
+    report(observation: ScriptHookObservation<Payload>): void | Promise<void>;
+}
+//# sourceMappingURL=model.d.ts.map

package/dist/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAExD,MAAM,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAE7D,MAAM,MAAM,sBAAsB,GAAG,KAAK,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;AAE7E,MAAM,MAAM,eAAe,CAAC,GAAG,SAAS,MAAM,IAAI;IAChD,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,EAAE,EAAE,SAAS,GAAG,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,GAAG,SAAS,MAAM,IACpD,eAAe,CAAC,GAAG,CAAC,GAAG;IACrB,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;CAC/C,CAAC;AAEJ,MAAM,WAAW,kBAAkB,CACjC,GAAG,SAAS,MAAM,EAClB,KAAK,SAAS,uBAAuB,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,GAAG,CAAC;IAEzE,IAAI,IAAI,SAAS,KAAK,EAAE,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,KAAK,EAAE,CAAC;CACtC;AAED,MAAM,MAAM,2BAA2B,GACnC;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;CAC/C,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE;AACnC;kDACkD;GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAClE;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;CAC7C,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEvE,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3D,OAAO,CAAC,mBAAmB,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AAEjE,MAAM,WAAW,gBAAgB,CAAC,OAAO,SAAS,SAAS,GAAG,SAAS;IACrE,GAAG,CAAC,KAAK,EAAE;QACT,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;QAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;KAC3B,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,qBAAqB,CAAC,OAAO,SAAS,SAAS,GAAG,SAAS,IACnE;IACE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;CAC9C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,kBAAkB,CAAC,OAAO,SAAS,SAAS,GAAG,SAAS;IACvE,MAAM,CAAC,WAAW,EAAE,qBAAqB,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E"}

package/dist/model.js

@@ -0,0 +1 @@
+export {};

package/dist/node.d.ts

@@ -0,0 +1,2 @@
+export { createAgentsExecScriptHookRunner } from "./runner.js";
+//# sourceMappingURL=node.d.ts.map

package/dist/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAC"}

package/dist/node.js

@@ -0,0 +1 @@
+export { createAgentsExecScriptHookRunner } from "./runner.js";

package/dist/observation.d.ts

@@ -0,0 +1,5 @@
+import type { JsonValue } from "@alpacakit/core";
+import type { ScriptHookObservation, ScriptHookObservedRunResult, ScriptHookObserver, ScriptHookRunResult } from "./model.js";
+export declare function isScriptHookRunResultObservable(result: ScriptHookRunResult): result is ScriptHookObservedRunResult;
+export declare function reportScriptHookObservationSafely<Payload extends JsonValue>(observer: ScriptHookObserver<Payload>, observation: ScriptHookObservation<Payload>): Promise<void>;
+//# sourceMappingURL=observation.d.ts.map

package/dist/observation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observation.d.ts","sourceRoot":"","sources":["../src/observation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAEpB,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,mBAAmB,GAC1B,MAAM,IAAI,2BAA2B,CAEvC;AAED,wBAAsB,iCAAiC,CACrD,OAAO,SAAS,SAAS,EAEzB,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,EACrC,WAAW,EAAE,qBAAqB,CAAC,OAAO,CAAC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/observation.js

@@ -0,0 +1,11 @@
+export function isScriptHookRunResultObservable(result) {
+    return result.kind !== "succeeded" || result.stderrTail !== null;
+}
+export async function reportScriptHookObservationSafely(observer, observation) {
+    try {
+        await observer.report(observation);
+    }
+    catch {
+        // Observation is diagnostic-only and never alters execution flow.
+    }
+}

package/dist/path.d.ts

@@ -0,0 +1,3 @@
+import type { ResolveScriptHookPathResult, ScriptHookPath } from "./model.js";
+export declare function resolveScriptHookPath(root: string, relative: ScriptHookPath): Promise<ResolveScriptHookPathResult>;
+//# sourceMappingURL=path.d.ts.map

package/dist/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../src/path.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,2BAA2B,EAE3B,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,2BAA2B,CAAC,CAuBtC"}

package/dist/path.js

@@ -0,0 +1,31 @@
+import { realpath } from "node:fs/promises";
+import path from "node:path";
+export async function resolveScriptHookPath(root, relative) {
+    const canonicalRoot = await realpath(root);
+    let canonicalCandidate;
+    try {
+        canonicalCandidate = await realpath(path.resolve(root, relative));
+    }
+    catch (error) {
+        if (isMissingPathError(error)) {
+            return { kind: "missing" };
+        }
+        throw error;
+    }
+    const relativeToRoot = path.relative(canonicalRoot, canonicalCandidate);
+    if (relativeToRoot === ".." ||
+        relativeToRoot.startsWith(`..${path.sep}`) ||
+        path.isAbsolute(relativeToRoot)) {
+        return { kind: "outside_root" };
+    }
+    return {
+        kind: "resolved",
+        absolutePath: canonicalCandidate,
+    };
+}
+function isMissingPathError(error) {
+    return (error instanceof Error &&
+        "code" in error &&
+        (error.code === "ENOENT" ||
+            error.code === "ENOTDIR"));
+}

package/dist/registry.d.ts

@@ -0,0 +1,3 @@
+import type { ResolvedScriptHookEntry, ScriptHookRegistry } from "./model.js";
+export declare function createScriptHookRegistry<Key extends string, Entry extends ResolvedScriptHookEntry<Key>>(entries: readonly Entry[]): ScriptHookRegistry<Key, Entry>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE9E,wBAAgB,wBAAwB,CACtC,GAAG,SAAS,MAAM,EAClB,KAAK,SAAS,uBAAuB,CAAC,GAAG,CAAC,EAC1C,OAAO,EAAE,SAAS,KAAK,EAAE,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAK3D"}

package/dist/registry.js

@@ -0,0 +1,6 @@
+export function createScriptHookRegistry(entries) {
+    return {
+        list: () => [...entries],
+        matching: (key) => entries.filter((entry) => entry.on.includes(key)),
+    };
+}

package/dist/runner.d.ts

@@ -0,0 +1,12 @@
+import { type Clock, type Exec } from "@alpacakit/agents";
+import type { JsonValue } from "@alpacakit/core";
+import type { ScriptHookRunner } from "./model.js";
+export declare function createAgentsExecScriptHookRunner<Payload extends JsonValue>(input: {
+    readonly exec: Exec;
+    readonly clock: Clock;
+    readonly baseEnv: Readonly<Record<string, string>>;
+    readonly cwd: string;
+    readonly timeoutMs: number;
+    readonly killGraceMs: number;
+}): ScriptHookRunner<Payload>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,KAAK,EACV,KAAK,IAAI,EAEV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EACV,gBAAgB,EAGjB,MAAM,YAAY,CAAC;AAWpB,wBAAgB,gCAAgC,CAC9C,OAAO,SAAS,SAAS,EACzB,KAAK,EAAE;IACP,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAyE5B"}

package/dist/runner.js

@@ -0,0 +1,110 @@
+import { extname } from "node:path";
+import { OUTPUT_CHANNEL, PROCESS_SIGNAL, redactSecrets, } from "@alpacakit/agents";
+const STDERR_MAX_CHARS = 4_000;
+const STDERR_COLLECTION_MAX_CHARS = STDERR_MAX_CHARS * 2;
+const RUNNER_BY_EXTENSION = {
+    ".sh": "bash",
+    ".js": "node",
+    ".mjs": "node",
+    ".py": "python3",
+};
+export function createAgentsExecScriptHookRunner(input) {
+    return {
+        run: async ({ hookPath, payload }) => {
+            const child = input.exec.spawn({
+                command: runnerForPath(hookPath),
+                args: [hookPath],
+                cwd: input.cwd,
+                env: { ...input.baseEnv },
+                stdin: `${JSON.stringify(payload)}\n`,
+                processGroup: true,
+            });
+            let stderr = "";
+            let timedOut = false;
+            let resolveEscalation = () => { };
+            let rejectEscalation = () => { };
+            const escalation = new Promise((resolve, reject) => {
+                resolveEscalation = resolve;
+                rejectEscalation = reject;
+            });
+            void escalation.catch(() => { });
+            let rejectSignalFailure = () => { };
+            const signalFailure = new Promise((_resolve, reject) => {
+                rejectSignalFailure = reject;
+            });
+            void signalFailure.catch(() => { });
+            const cancelTimeout = input.clock.setTimeout(() => {
+                timedOut = true;
+                try {
+                    child.kill(PROCESS_SIGNAL.sigterm);
+                }
+                catch (error) {
+                    rejectSignalFailure(error);
+                }
+                input.clock.setTimeout(() => {
+                    try {
+                        child.kill(PROCESS_SIGNAL.sigkill);
+                        resolveEscalation();
+                    }
+                    catch (error) {
+                        rejectEscalation(error);
+                        rejectSignalFailure(error);
+                    }
+                }, input.killGraceMs);
+            }, input.timeoutMs);
+            try {
+                const collectOutput = (async () => {
+                    for await (const chunk of child.chunks) {
+                        if (chunk.channel === OUTPUT_CHANNEL.stderr) {
+                            stderr = appendTail(stderr, chunk.text);
+                        }
+                    }
+                })();
+                const [exit] = await Promise.race([
+                    Promise.all([child.exit, collectOutput]),
+                    signalFailure,
+                ]);
+                const stderrTail = summarizeStderr(stderr);
+                if (timedOut) {
+                    await escalation;
+                    return { kind: "timed_out", stderrTail };
+                }
+                if (exit.code === 0) {
+                    return { kind: "succeeded", stderrTail };
+                }
+                return {
+                    kind: "failed",
+                    termination: terminationFromExit(exit),
+                    stderrTail,
+                };
+            }
+            finally {
+                cancelTimeout();
+            }
+        },
+    };
+}
+function runnerForPath(filePath) {
+    const extension = extname(filePath).toLowerCase();
+    const runner = RUNNER_BY_EXTENSION[extension];
+    if (runner === undefined) {
+        throw new Error(`Unsupported script hook extension: ${extension}`);
+    }
+    return runner;
+}
+function terminationFromExit(exit) {
+    if (exit.code !== null) {
+        return { kind: "exit", exitCode: exit.code };
+    }
+    if (exit.signal !== null) {
+        return { kind: "signal", signal: exit.signal };
+    }
+    return { kind: "unknown" };
+}
+function appendTail(current, chunk) {
+    return `${current}${chunk}`.slice(-STDERR_COLLECTION_MAX_CHARS);
+}
+function summarizeStderr(stderr) {
+    const summary = redactSecrets(stderr).trim();
+    return summary === "" ? null : summary.slice(-STDERR_MAX_CHARS);
+}

package/dist/schema.d.ts

@@ -0,0 +1,5 @@
+import { z } from "zod";
+import type { ScriptHookEntry } from "./model.js";
+export declare const scriptHookPathSchema: z.ZodType<import("@alpacakit/core").Brand<string, "ScriptHookPath">, unknown, z.core.$ZodTypeInternals<import("@alpacakit/core").Brand<string, "ScriptHookPath">, unknown>>;
+export declare function createScriptHookEntrySchema<Key extends string>(keySchema: z.ZodType<Key>): z.ZodType<ScriptHookEntry<Key>>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAkB,MAAM,YAAY,CAAC;AAMlE,eAAO,MAAM,oBAAoB,6KAEc,CAAC;AAEhD,wBAAgB,2BAA2B,CAAC,GAAG,SAAS,MAAM,EAC5D,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GACxB,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAWjC"}

package/dist/schema.js

@@ -0,0 +1,24 @@
+import { brandedStringSchema, strictReadonlyObject } from "@alpacakit/core";
+import { posix, win32, extname } from "node:path";
+import { z } from "zod";
+const SUPPORTED_EXTENSIONS = new Set([".sh", ".js", ".mjs", ".py"]);
+const PATH_ERROR = "Expected a non-traversing relative .sh, .js, .mjs, or .py hook path.";
+export const scriptHookPathSchema = brandedStringSchema().refine(isSupportedRelativePath, PATH_ERROR);
+export function createScriptHookEntrySchema(keySchema) {
+    return strictReadonlyObject({
+        path: scriptHookPathSchema,
+        on: z
+            .array(keySchema)
+            .min(1)
+            .refine((keys) => new Set(keys).size === keys.length, {
+            message: "Expected each script hook key only once.",
+        })
+            .readonly(),
+    });
+}
+function isSupportedRelativePath(value) {
+    return (!posix.isAbsolute(value) &&
+        !win32.isAbsolute(value) &&
+        !value.split(/[\\/]/u).includes("..") &&
+        SUPPORTED_EXTENSIONS.has(extname(value).toLowerCase()));
+}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@alpacakit/script-hooks",
+  "version": "0.1.0-beta.36",
+  "description": "Validate, register, and run local JSON-fed script hooks.",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./node": {
+      "types": "./dist/node.d.ts",
+      "import": "./dist/node.js"
+    }
+  },
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README*.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@alpacakit/core": "0.1.0-beta.36",
+    "@alpacakit/agents": "0.1.0-beta.36"
+  },
+  "peerDependencies": {
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18",
+    "zod": "4.3.6"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
+}