@axtary/cli 0.1.0 → 0.2.0

package/README.md

@@ -13,34 +13,144 @@ axtary init     # scaffold a starter axtary.yml
 axtary demo     # run fake GitHub/Slack/Linear actions through the proxy + ledger
 ```
 
-`init` then `demo` reaches a first blocked action in under a minute with no credentials. The full rail — proxy, gating a real agent via the Claude Code hook or the MCP wrapper — is in [docs/quickstart.md](https://github.com/axtary/axtary/blob/main/docs/quickstart.md).
+`init` then `demo` reaches a first blocked action in under a minute with no credentials. The full rail — proxy, gating a real agent via the Claude Code hook or the MCP wrapper — is in the [Quickstart](https://www.axtary.com/docs/quickstart).
+
+To start from a scoped policy, use one of the PRD templates:
+
+```sh
+axtary init --template repo-only-coding
+axtary policy test .axtary/policy-tests/repo-only-coding.policies.test.yml --config axtary.yml
+axtary demo --config axtary.yml --template repo-only-coding
+```
+
+Available templates: `repo-only-coding`, `staging-reads`, `incident-investigation`, `ticket-updates`, `doc-search`, and `guarded-prod`.
 
 ## Commands
 
 ```sh
-axtary init
+axtary init [--template repo-only-coding|staging-reads|incident-investigation|ticket-updates|doc-search|guarded-prod]
 axtary demo --config axtary.yml --json
+axtary demo --config axtary.yml --template repo-only-coding
 axtary doctor connectors --config axtary.yml --json
 axtary proxy --config axtary.yml
+axtary revoke ap_<id> [--reason "..."] [--by user:operator]
+axtary revocations [--json]
+axtary issuer-keys [--rotate] [--retire-after 1200]
+axtary status [--json]
+axtary caep-map --issuer https://idp.example --subject '{"format":"opaque","id":"session"}' --root ap_<id>
 axtary smoke --config axtary.yml
+axtary policy simulate action.json --config examples/axtary.policies.yml
+axtary policy test examples/policies.test.yml --config examples/axtary.policies.yml
 axtary test-policy --config axtary.yml --fixtures examples/policy-fixtures
 axtary run workflow github-pr-review --real --config examples/axtary.real.yml [--tamper]
+axtary run workflow github-depth --real --config examples/axtary.real.yml --repo org/repo
+axtary run workflow postgres-read --real --config examples/axtary.postgres.yml --database appdb --statement 'SELECT id FROM public.items WHERE tenant_id = $1' --parameters '["tenant-a"]'
+axtary hook install claude --owner user:operator --repo org/repo
+axtary hook install cursor --owner user:operator --repo org/repo
+axtary hook install codex --owner user:operator --repo org/repo
 axtary hook claude-code --proxy http://127.0.0.1:7331
-axtary mcp serve --config axtary.yml [--wrap '<upstream mcp command>']
+axtary hook cursor --proxy http://127.0.0.1:7331
+axtary hook codex --proxy http://127.0.0.1:7331
+axtary mcp serve --config axtary.yml [--wrap '<upstream mcp command>' | --wrap-url https://host/mcp]
+axtary mcp login --wrap-url https://host/mcp [--scope 'a b']
+axtary mcp sessions [--json]
+axtary mcp logout --wrap-url https://host/mcp
+axtary mcp pins [--pins axtary.mcp-pins.json] [--json]
+axtary mcp trust-publisher --publisher mcp-publisher://acme --jwks publisher.jwks.json
+axtary mcp publishers
+axtary mcp verify-definition --definition tool.json --statement tool.jwt --publisher mcp-publisher://acme
+axtary mcp review --wrap-url https://host/mcp [--signed-definitions .axtary/mcp-signed-definitions.json] [--accept]
+axtary mcp conformance --wrap-url https://host/mcp --tool read_tool --arguments '{}' [--accept]
+axtary mcp drift-demo [--json]
+axtary connect linear [--client-id <id> | --client-id-env NAME]
+axtary connect slack --redirect-uri https://<tunnel>/callback
+axtary connect jira --redirect-uri https://<tunnel>/callback [--cloud-id ID]
+axtary connect drive --redirect-uri https://<tunnel>/callback
+axtary connections [--json]
+axtary disconnect <provider>
+axtary run workflow drive-read --real --config examples/axtary.drive.yml
+axtary attest-ledger --ledger .axtary/actions.jsonl --out attestation.json
+axtary verify-export attestation.json
+axtary prove-inclusion attestation.json --record ap_<jti> --out proof.json
+axtary prove-consistency first.json second.json --out proof.json
+axtary verify-proof proof.json --bundle attestation.json
+axtary forensics attestation.json
 axtary export-ledger --format siem-jsonl
 axtary sync-ledger --endpoint https://app.example/api/ledger/sync
+axtary export-otel --endpoint http://127.0.0.1:4318/v1/traces
 ```
 
-- `init` scaffolds a starter `axtary.yml` and prints the quickstart rail (`docs/quickstart.md`).
-- `demo` loads config, creates an ephemeral signing key, runs fake GitHub, Slack, Linear, and Jira actions through the proxy, writes the local JSONL ledger, and prints a structured result.
-- `doctor connectors` reports per-provider readiness — mode, missing env names, required scopes, smoke commands — without leaking secret values.
-- `proxy` starts a long-running local HTTP enforcement point with `GET /health`, `GET /state`, `POST /actions` (authorize + execute), and `POST /authorize` (decision, ActionPass, and ledger record without execution — the agent-hook path). It uses fake SaaS adapters by default and can route GitHub, Slack, Linear, AWS, GCP, and local docs actions when their adapter modes are enabled. File-backed configs are cached and policy is reloaded when `axtary.yml` changes.
-- `smoke` validates configured providers without writes: GitHub REST calls `/user`, Slack Web calls `auth.test`, Linear GraphQL queries `viewer`, AWS calls STS `GetCallerIdentity`, GCP checks project access, and local docs checks configured roots.
-- `test-policy` evaluates JSON fixtures against the loaded YAML policy and fails when an expected decision or reason differs.
+- `init` scaffolds a starter `axtary.yml` and prints the quickstart rail (`docs/quickstart.md`). `--template <name>` applies one of the six reusable scope templates and writes `.axtary/policy-tests/<name>.policies.test.yml` so the scaffold can be tested immediately.
+- `demo` loads config, creates an ephemeral signing key, runs fake GitHub, Slack, Linear, and Jira actions through the proxy, writes the local JSONL ledger, and prints a structured result. `demo --template <name>` is policy-only: it runs the template's representative allow/deny fixtures and makes no provider calls.
+- `doctor connectors` reports per-provider readiness — mode, missing env names,
+  required scopes, smoke commands — without leaking secret values. Jira and
+  Linear, Postgres, and Google Drive plans are generated by their native connector descriptors; current
+  reported scopes are Jira `read:jira-work`/`write:jira-work` and Linear
+  `read`/`write`.
+- `proxy` starts a long-running local HTTP enforcement point with `GET /health`, `GET /state`, `GET /revocations`, `GET /.well-known/jwks.json`, `GET /statuslists/actionpasses`, `POST /ssf/events`, `POST /actions` (authorize + execute), and `POST /authorize` (decision, ActionPass, and ledger record without execution — the agent-hook path). It uses fake SaaS adapters by default and can route GitHub, Slack, Linear, Jira Cloud, AWS, GCP, and local docs actions when their adapter modes are enabled. File-backed configs are cached and policy is reloaded when `axtary.yml` changes.
+- `revoke` writes a durable local revocation for one ActionPass `jti`;
+  `revocations` lists that state. Both share
+  `.axtary/actionpass-trust-store.json` with the proxy and MCP wrapper by
+  default, or an explicit `--trust-store` path. Running processes re-check the
+  source on every pass presentation, so revocation takes effect without a
+  restart; unreadable or corrupt state blocks execution.
+- With `runtime.status.enabled` (the default), the proxy issues ActionPass v2,
+  persists a private issuer keyring and status allocation store, publishes
+  public JWKS and a signed freshness-bounded status list, and updates that list
+  when `revoke` targets an allocated pass. `issuer-keys --rotate` changes the
+  durable active key; restart the proxy to begin issuing with it. CLI and HTTP
+  metadata never return private keys.
+- `runtime.caep.enabled` opts into a generic final SSF/CAEP receiver. Configure
+  transmitter issuer, audience, and JWKS URI, then use `caep-map` to associate
+  an exact SSF subject with live root pass IDs. Valid `session-revoked` events
+  invalidate those roots; duplicate deliveries are idempotent. This is not a
+  claim of vendor-specific IdP support.
+- `smoke` validates configured providers without writes: GitHub REST calls `/user`, Slack Web calls `auth.test`, Linear GraphQL queries `viewer`, Jira REST calls `/myself`, AWS calls STS `GetCallerIdentity`, GCP checks project access, and local docs checks configured roots.
+- `policy simulate` dry-runs one normalized action and reports the selected decision, determining rule, every rule match/miss, and attached obligations.
+- `policy test` runs a `policies.test.yml` fixture harness and exits non-zero on a decision, reason, or determining-rule mismatch, making the policy file directly CI-testable.
+- `test-policy` evaluates JSON fixtures against the loaded YAML policy and fails when an expected decision or reason differs. `--parity` additionally runs the same fixtures through executable Cedar and OPA/Rego engines and fails on any cross-engine disagreement (see `examples/policies/README.md`).
 - `run workflow github-pr-review --real` executes the design-partner workflow (Linear read → docs search → GitHub branch/file/PR → approved Slack post) through proxy-compatible wiring; `--tamper` mutates the approved payload and proves the block (see `docs/sandbox-runbook.md`).
-- `hook claude-code` reads a Claude Code PreToolUse payload from stdin, normalizes file tools into content actions, and returns allow/ask/deny from the running proxy (see `docs/claude-code-hook.md`).
-- `mcp serve` runs a stdio MCP server whose wrapped tools are policy-gated at pinned definition hashes (see `docs/mcp-wrapper.md`).
-- `export-ledger` / `sync-ledger` export verified ledger records locally or upload them to the hosted control plane with signed sync tokens.
+- `run workflow github-depth --real` is GitHub-only depth: it opens a draft PR,
+  then writes an inline review comment, a check run, and an issue comment — each
+  step governed and ledgered. `run workflow postgres-read --real` runs one
+  parameterized SELECT through policy, ActionPass, a read-only transaction, and
+  RLS checks; writes are denied before execution.
+- `connect <linear|slack|jira|drive>` runs the provider's browser OAuth flow and
+  stores the token in the local credential broker (macOS keychain or a `0600`
+  file) — tokens are never pasted or printed. `connections` lists connected
+  providers (metadata only); `disconnect <provider>` removes a stored credential.
+- `hook install <claude|cursor|codex>` writes the project runtime hook config
+  (`.claude/settings.json`, `.cursor/hooks.json`, or `.codex/hooks.json`) with
+  the resolved local CLI path. It is idempotent and preserves unrelated hooks.
+- `hook claude-code`, `hook cursor`, and `hook codex` read their runtime's
+  pre-tool payload from stdin, normalize supported file operations into content
+  actions, and return the runtime-specific decision from the running proxy.
+- `mcp serve` runs a stdio MCP server whose stdio or Streamable HTTP upstream tools are policy-gated at persisted definition hashes (see `docs/mcp-wrapper.md`).
+- `mcp trust-publisher` registers public JWKS in the local owner-readable
+  publisher trust store; `mcp publishers` lists identities and key ids;
+  `mcp verify-definition` verifies one statement against the exact definition.
+- `mcp review` compares a live server's advertised definitions with persisted
+  pins and an optional signed-definition registry. It displays verified
+  publisher/semver evidence and the version-chain verdict (`continuous`,
+  `broken_chain`, or `version_not_incremented`); untrusted or invalid
+  signatures cannot be accepted.
+- `mcp conformance` executes one explicitly selected live tool through pins → policy → ActionPass v1/DPoP → ledger, proves a labeled synthetic pin mismatch is quarantined, independently verifies a signed ledger export, and writes a secret-free per-server receipt for the dashboard.
+- `mcp drift-demo` reproduces the tool-poisoning block in one command: the definition mutates after review, the hash drifts, and the identical call is denied before the upstream invoker runs — approved and attempted hashes land in the ledger.
+- `mcp login` runs OAuth 2.1 discovery + PKCE consent for an OAuth-protected
+  remote MCP server and stores the bearer in the local broker; `mcp sessions`
+  lists sessions (resource/issuer/scopes/expiry, never tokens); `mcp logout`
+  deletes one; `mcp pins` lists the persisted tool-definition pins.
+- `export-ledger` / `sync-ledger` export verified ledger records locally or upload them to the hosted control plane with signed sync tokens. `attest-ledger` / `verify-export` create and independently verify signed, self-contained ledger evidence.
+- `prove-inclusion` / `prove-consistency` / `verify-proof` produce and
+  independently verify RFC 6962 Merkle inclusion and consistency proofs over
+  attested exports, so a third party can check one record or two heads without
+  trusting Axtary. `forensics` reconstructs an incident offline from the ledger:
+  authority attenuation, reconstructibility, and cascade containment.
+- `export-otel` posts a verified ledger segment to an OTLP/HTTP trace endpoint
+  as payload-free GenAI `execute_tool` spans. `proxy --otlp-endpoint` streams
+  the same projection after each durable append. These spans carry decisions,
+  reasons, hashes, and audit dimensions, never payload bodies, tokens, file
+  contents, result rows, or raw shell commands.
 
 ## Real Provider Smoke Test
 

package/dist/bin.js

@@ -1,4 +1,14 @@
 #!/usr/bin/env node
 import { runAxtaryCli } from "./index.js";
+function exitQuietlyOnBrokenPipe(stream) {
+    stream.on("error", (error) => {
+        if (error.code === "EPIPE") {
+            process.exit(0);
+        }
+        throw error;
+    });
+}
+exitQuietlyOnBrokenPipe(process.stdout);
+exitQuietlyOnBrokenPipe(process.stderr);
 process.exitCode = await runAxtaryCli();
 //# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,CAAC,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC"}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,SAAS,uBAAuB,CAAC,MAA0B;IACzD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;QAClD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AACxC,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAExC,OAAO,CAAC,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC"}

package/dist/claude-code-hook.d.ts

@@ -11,6 +11,7 @@ export type ClaudeCodeHookPayload = {
 export type ClaudeCodeNormalization = {
     mapped: true;
     action: NormalizedAction;
+    actions: NormalizedAction[];
 } | {
     mapped: false;
     reason: string;
@@ -42,4 +43,23 @@ export type ClaudeCodeHookRunResult = {
 export declare function parseClaudeCodeHookPayload(payloadText: string): ClaudeCodeHookPayload;
 export declare function normalizeClaudeCodeToolCall(payload: ClaudeCodeHookPayload, options?: ClaudeCodeNormalizeOptions): ClaudeCodeNormalization;
 export declare function runClaudeCodeHook(input: ClaudeCodeHookRunInput): Promise<ClaudeCodeHookRunResult>;
+export type ProxyAuthorizeHttpResponse = {
+    status: "authorized" | "step_up" | "blocked" | "malformed";
+    decision?: {
+        reasons?: string[];
+    };
+    ledger?: {
+        lineNumber?: number;
+    };
+    hints?: string[];
+    explanation?: {
+        summary?: string;
+    };
+};
+export declare const DENY_RANK = 3;
+/** Severity rank for picking the most restrictive decision across ops. */
+export declare function authorizeRank(status: ProxyAuthorizeHttpResponse["status"]): number;
+export declare function postAuthorize(fetchImpl: typeof fetch | undefined, url: string, action: NormalizedAction, timeoutMs: number): Promise<ProxyAuthorizeHttpResponse>;
+export declare function workspaceRelativePath(path: string, cwd: string | null): string;
+export declare function errorReason(error: unknown): string;
 //# sourceMappingURL=claude-code-hook.d.ts.map

package/dist/claude-code-hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code-hook.d.ts","sourceRoot":"","sources":["../src/claude-code-hook.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAE5B,eAAO,MAAM,+BAA+B,+BAA+B,CAAC;AAC5E,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AACzD,eAAO,MAAM,uBAAuB,OAAQ,CAAC;AAE7C,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,0BAA0B,GAAG;IACvC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,YAAY,CAAC;AAE3E,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,aAAa,EAAE,OAAO,+BAA+B,CAAC;IACtD,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,CA+BrF;AAcD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,GAAE,0BAA+B,GACvC,uBAAuB,CAmEzB;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,uBAAuB,CAAC,CA2ElC"}
+{"version":3,"file":"claude-code-hook.d.ts","sourceRoot":"","sources":["../src/claude-code-hook.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAO5B,eAAO,MAAM,+BAA+B,+BAA+B,CAAC;AAC5E,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AACzD,eAAO,MAAM,uBAAuB,OAAQ,CAAC;AAE7C,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAAE,GACvE;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,0BAA0B,GAAG;IACvC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,YAAY,CAAC;AAE3E,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,aAAa,EAAE,OAAO,+BAA+B,CAAC;IACtD,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,CA+BrF;AAgBD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,GAAE,0BAA+B,GACvC,uBAAuB,CA+EzB;AAsDD,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,uBAAuB,CAAC,CA2FlC;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;IAC3D,QAAQ,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAClC,MAAM,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpC,CAAC;AAEF,eAAO,MAAM,SAAS,IAAI,CAAC;AAE3B,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,MAAM,EAAE,0BAA0B,CAAC,QAAQ,CAAC,GAAG,MAAM,CAIlF;AAED,wBAAsB,aAAa,CACjC,SAAS,EAAE,OAAO,KAAK,GAAG,SAAS,EACnC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,gBAAgB,EACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,0BAA0B,CAAC,CA2BrC;AA2BD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAwB9E;AAkBD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAElD"}

package/dist/claude-code-hook.js

@@ -1,6 +1,7 @@
 import { realpathSync } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { parseNormalizedAction, } from "@axtary/actionpass";
+import { classifyShellFileOps, } from "./shell-file-normalize.js";
 export const CLAUDE_CODE_HOOK_SCHEMA_VERSION = "axtary.claude_code_hook.v0";
 export const DEFAULT_PROXY_URL = "http://127.0.0.1:7331";
 export const DEFAULT_HOOK_TIMEOUT_MS = 5_000;
@@ -40,7 +41,22 @@ const WRITE_TOOLS = {
     Edit: "file_path",
     NotebookEdit: "notebook_path",
 };
+const SHELL_TOOLS = new Set(["Bash"]);
 export function normalizeClaudeCodeToolCall(payload, options = {}) {
+    if (SHELL_TOOLS.has(payload.toolName)) {
+        const command = typeof payload.toolInput.command === "string"
+            ? payload.toolInput.command
+            : "";
+        const ops = command ? classifyShellFileOps(command) : [];
+        if (ops.length === 0) {
+            return { mapped: false, reason: `claude_code_shell_no_file_op:${payload.toolName}` };
+        }
+        // Every file op a command performs is governed (e.g. `cp secret dest`
+        // governs the source read AND the destination write); the run loop denies
+        // if any op is denied. Fail-closed across the whole command.
+        const actions = ops.map((op) => buildShellContentAction(op, payload, options));
+        return { mapped: true, action: actions[0], actions };
+    }
     const readPathField = READ_TOOLS[payload.toolName];
     const writePathField = WRITE_TOOLS[payload.toolName];
     if (!readPathField && !writePathField) {
@@ -68,38 +84,79 @@ export function normalizeClaudeCodeToolCall(payload, options = {}) {
         },
     };
     if (readPathField) {
-        return {
-            mapped: true,
-            action: parseNormalizedAction({
-                ...base,
-                capability: {
-                    tool: "github.contents.read",
-                    resource: repoResource,
-                    payload: {
-                        path,
-                        source: "claude-code-hook",
-                        claudeCodeTool: payload.toolName,
-                    },
+        const action = parseNormalizedAction({
+            ...base,
+            capability: {
+                tool: "github.contents.read",
+                resource: repoResource,
+                payload: {
+                    path,
+                    source: "claude-code-hook",
+                    claudeCodeTool: payload.toolName,
                 },
-            }),
-        };
+            },
+        });
+        return { mapped: true, action, actions: [action] };
     }
-    return {
-        mapped: true,
-        action: parseNormalizedAction({
+    const action = parseNormalizedAction({
+        ...base,
+        capability: {
+            tool: "github.contents.write",
+            resource: repoResource,
+            payload: {
+                path,
+                branch: options.branch ?? "workspace",
+                source: "claude-code-hook",
+                claudeCodeTool: payload.toolName,
+            },
+        },
+    });
+    return { mapped: true, action, actions: [action] };
+}
+function buildShellContentAction(op, payload, options) {
+    const path = workspaceRelativePath(op.path, payload.cwd);
+    const repoResource = options.repoResource ?? "repo:local/workspace";
+    const taskId = payload.sessionId
+        ? `claude-code:${payload.sessionId.slice(0, 12)}`
+        : "claude-code:session";
+    const base = {
+        actor: {
+            agentId: "agent:claude-code",
+            humanOwner: options.humanOwner ?? "user:local-developer",
+            runtime: "claude-code",
+        },
+        intent: {
+            taskId,
+            declaredGoal: `Claude Code ${payload.toolName} tool call`,
+        },
+    };
+    if (op.kind === "read") {
+        return parseNormalizedAction({
             ...base,
             capability: {
-                tool: "github.contents.write",
+                tool: "github.contents.read",
                 resource: repoResource,
                 payload: {
                     path,
-                    branch: options.branch ?? "workspace",
                     source: "claude-code-hook",
                     claudeCodeTool: payload.toolName,
                 },
             },
-        }),
-    };
+        });
+    }
+    return parseNormalizedAction({
+        ...base,
+        capability: {
+            tool: "github.contents.write",
+            resource: repoResource,
+            payload: {
+                path,
+                branch: options.branch ?? "workspace",
+                source: "claude-code-hook",
+                claudeCodeTool: payload.toolName,
+            },
+        },
+    });
 }
 export async function runClaudeCodeHook(input) {
     let payload;
@@ -129,17 +186,31 @@ export async function runClaudeCodeHook(input) {
     }
     const proxyUrl = (input.proxyUrl ?? DEFAULT_PROXY_URL).replace(/\/$/, "");
     const fetchImpl = input.fetch ?? globalThis.fetch;
-    const normalizedTool = normalization.action.capability.tool;
-    let response;
-    try {
-        response = await postAuthorize(fetchImpl, `${proxyUrl}/authorize`, normalization.action, input.timeoutMs ?? DEFAULT_HOOK_TIMEOUT_MS);
-    }
-    catch (error) {
-        return decisionResult(payload.toolName, normalizedTool, "deny", [
-            `Axtary blocked this tool call: local proxy unreachable at ${proxyUrl} (${errorReason(error)}).`,
-            "Start it with: axtary proxy --config axtary.yml",
-        ]);
+    const timeoutMs = input.timeoutMs ?? DEFAULT_HOOK_TIMEOUT_MS;
+    // Authorize every governed op (e.g. both the source read and destination write
+    // of `cp secret dest`); the most restrictive decision wins — deny > step_up >
+    // allow — and a hard deny short-circuits the rest. Fail-closed.
+    let best = null;
+    for (const action of normalization.actions) {
+        let response;
+        try {
+            response = await postAuthorize(fetchImpl, `${proxyUrl}/authorize`, action, timeoutMs);
+        }
+        catch (error) {
+            return decisionResult(payload.toolName, action.capability.tool, "deny", [
+                `Axtary blocked this tool call: local proxy unreachable at ${proxyUrl} (${errorReason(error)}).`,
+                "Start it with: axtary proxy --config axtary.yml",
+            ]);
+        }
+        const rank = authorizeRank(response.status);
+        if (!best || rank > best.rank) {
+            best = { action, response, rank };
+        }
+        if (rank === DENY_RANK)
+            break; // hard deny is maximal
     }
+    const response = best.response;
+    const normalizedTool = best.action.capability.tool;
     const reasons = response.decision?.reasons ?? [];
     const hints = response.hints ?? [];
     const summary = response.explanation?.summary ?? reasons.join(", ");
@@ -164,7 +235,16 @@ export async function runClaudeCodeHook(input) {
         ledgerLine.trim(),
     ]);
 }
-async function postAuthorize(fetchImpl, url, action, timeoutMs) {
+export const DENY_RANK = 3;
+/** Severity rank for picking the most restrictive decision across ops. */
+export function authorizeRank(status) {
+    if (status === "blocked" || status === "malformed")
+        return DENY_RANK;
+    if (status === "step_up")
+        return 2;
+    return 1; // authorized
+}
+export async function postAuthorize(fetchImpl, url, action, timeoutMs) {
     if (!fetchImpl) {
         throw new Error("fetch_unavailable");
     }
@@ -204,7 +284,7 @@ function decisionResult(tool, normalizedTool, decision, reasonParts) {
         exitCode: 0,
     };
 }
-function workspaceRelativePath(path, cwd) {
+export function workspaceRelativePath(path, cwd) {
     if (!isAbsolute(path)) {
         return path;
     }
@@ -240,7 +320,7 @@ function resolveSymlinks(path) {
 function unique(values) {
     return [...new Set(values)];
 }
-function errorReason(error) {
+export function errorReason(error) {
     return error instanceof Error ? error.message : "unknown_error";
 }
 //# sourceMappingURL=claude-code-hook.js.map

package/dist/claude-code-hook.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code-hook.js","sourceRoot":"","sources":["../src/claude-code-hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnF,OAAO,EACL,qBAAqB,GAGtB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,+BAA+B,GAAG,4BAA4B,CAAC;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAyC7C,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,IAAI,GAAY,CAAC;IAEjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;IAElC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,GACb,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QAC7F,CAAC,CAAE,MAAM,CAAC,UAAwC;QAClD,CAAC,CAAC,EAAE,CAAC;IAET,OAAO;QACL,SAAS,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QAC3E,GAAG,EAAE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QACvD,QAAQ;QACR,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAA2B;IACzC,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,MAAM,WAAW,GAA2B;IAC1C,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,WAAW;IACjB,YAAY,EAAE,eAAe;CAC9B,CAAC;AAEF,MAAM,UAAU,2BAA2B,CACzC,OAA8B,EAC9B,UAAsC,EAAE;IAExC,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErD,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,6BAA6B,OAAO,CAAC,QAAQ,EAAE;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,IAAI,cAAe,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,qBAAqB,CAChC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EACjE,OAAO,CAAC,GAAG,CACZ,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS;QAC9B,CAAC,CAAC,eAAe,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACjD,CAAC,CAAC,qBAAqB,CAAC;IAC1B,MAAM,IAAI,GAAG;QACX,KAAK,EAAE;YACL,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,sBAAsB;YACxD,OAAO,EAAE,aAAa;SACvB;QACD,MAAM,EAAE;YACN,MAAM;YACN,YAAY,EAAE,eAAe,OAAO,CAAC,QAAQ,YAAY;SAC1D;KACF,CAAC;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,qBAAqB,CAAC;gBAC5B,GAAG,IAAI;gBACP,UAAU,EAAE;oBACV,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ,EAAE,YAAY;oBACtB,OAAO,EAAE;wBACP,IAAI;wBACJ,MAAM,EAAE,kBAAkB;wBAC1B,cAAc,EAAE,OAAO,CAAC,QAAQ;qBACjC;iBACF;aACF,CAAC;SACH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,qBAAqB,CAAC;YAC5B,GAAG,IAAI;YACP,UAAU,EAAE;gBACV,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;oBACP,IAAI;oBACJ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW;oBACrC,MAAM,EAAE,kBAAkB;oBAC1B,cAAc,EAAE,OAAO,CAAC,QAAQ;iBACjC;aACF;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA6B;IAE7B,IAAI,OAA8B,CAAC;IAEnC,IAAI,CAAC;QACH,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACxC,oEAAoE,WAAW,CAAC,KAAK,CAAC,mCAAmC;SAC1H,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAG,2BAA2B,CAAC,OAAO,EAAE;QACzD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO;YACL,aAAa,EAAE,+BAA+B;YAC9C,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;YACtB,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;IAC5D,IAAI,QAAoC,CAAC;IAEzC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,aAAa,CAC5B,SAAS,EACT,GAAG,QAAQ,YAAY,EACvB,aAAa,CAAC,MAAM,EACpB,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAC3C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE;YAC9D,6DAA6D,QAAQ,KAAK,WAAW,CAAC,KAAK,CAAC,IAAI;YAChG,iDAAiD;SAClD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,UAAU,GACd,OAAO,QAAQ,CAAC,MAAM,EAAE,UAAU,KAAK,QAAQ;QAC7C,CAAC,CAAC,gBAAgB,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG;QAC/C,CAAC,CAAC,EAAE,CAAC;IAET,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACrC,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE;YAC/D,qBAAqB,cAAc,KAAK,OAAO,GAAG,UAAU,EAAE;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE;YAC7D,sCAAsC,cAAc,KAAK,OAAO,EAAE;YAClE,GAAG,KAAK;YACR,UAAU,CAAC,IAAI,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE;QAC9D,kBAAkB,cAAc,KAAK,OAAO,EAAE;QAC9C,GAAG,KAAK;QACR,UAAU,CAAC,IAAI,EAAE;KAClB,CAAC,CAAC;AACL,CAAC;AAUD,KAAK,UAAU,aAAa,CAC1B,SAAmC,EACnC,GAAW,EACX,MAAwB,EACxB,SAAiB;IAEjB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAC5B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;KACvC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAC;IAEnE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IACE,IAAI,CAAC,MAAM,KAAK,YAAY;QAC5B,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,IAAI,CAAC,MAAM,KAAK,WAAW,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CACrB,IAAmB,EACnB,cAA6B,EAC7B,QAAkC,EAClC,WAAqB;IAErB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEvE,OAAO;QACL,aAAa,EAAE,+BAA+B;QAC9C,MAAM,EAAE,QAAQ;QAChB,IAAI;QACJ,cAAc;QACd,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;YACrB,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,QAAQ;gBAC5B,wBAAwB,EAAE,MAAM;aACjC;SACF,CAAC;QACF,QAAQ,EAAE,CAAC;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,GAAkB;IAC7D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEzD,KAAK,MAAM,aAAa,IAAI,UAAU,EAAE,CAAC;QACvC,KAAK,MAAM,aAAa,IAAI,KAAK,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YAE5D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,GAAG,CAAC;YACb,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;AAClE,CAAC"}
+{"version":3,"file":"claude-code-hook.js","sourceRoot":"","sources":["../src/claude-code-hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnF,OAAO,EACL,qBAAqB,GAGtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,CAAC,MAAM,+BAA+B,GAAG,4BAA4B,CAAC;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAyC7C,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,IAAI,GAAY,CAAC;IAEjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;IAElC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,GACb,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QAC7F,CAAC,CAAE,MAAM,CAAC,UAAwC;QAClD,CAAC,CAAC,EAAE,CAAC;IAET,OAAO;QACL,SAAS,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QAC3E,GAAG,EAAE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QACvD,QAAQ;QACR,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAA2B;IACzC,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,MAAM,WAAW,GAA2B;IAC1C,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,WAAW;IACjB,YAAY,EAAE,eAAe;CAC9B,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAEtC,MAAM,UAAU,2BAA2B,CACzC,OAA8B,EAC9B,UAAsC,EAAE;IAExC,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,KAAK,QAAQ;YAC3C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO;YAC3B,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QACvF,CAAC;QACD,sEAAsE;QACtE,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErD,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,6BAA6B,OAAO,CAAC,QAAQ,EAAE;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,IAAI,cAAe,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,qBAAqB,CAChC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EACjE,OAAO,CAAC,GAAG,CACZ,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS;QAC9B,CAAC,CAAC,eAAe,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACjD,CAAC,CAAC,qBAAqB,CAAC;IAC1B,MAAM,IAAI,GAAG;QACX,KAAK,EAAE;YACL,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,sBAAsB;YACxD,OAAO,EAAE,aAAa;SACvB;QACD,MAAM,EAAE;YACN,MAAM;YACN,YAAY,EAAE,eAAe,OAAO,CAAC,QAAQ,YAAY;SAC1D;KACF,CAAC;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,GAAG,IAAI;YACP,UAAU,EAAE;gBACV,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;oBACP,IAAI;oBACJ,MAAM,EAAE,kBAAkB;oBAC1B,cAAc,EAAE,OAAO,CAAC,QAAQ;iBACjC;aACF;SACF,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACnC,GAAG,IAAI;QACP,UAAU,EAAE;YACV,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE;gBACP,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW;gBACrC,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,OAAO,CAAC,QAAQ;aACjC;SACF;KACF,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,uBAAuB,CAC9B,EAAe,EACf,OAA8B,EAC9B,OAAmC;IAEnC,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS;QAC9B,CAAC,CAAC,eAAe,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACjD,CAAC,CAAC,qBAAqB,CAAC;IAC1B,MAAM,IAAI,GAAG;QACX,KAAK,EAAE;YACL,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,sBAAsB;YACxD,OAAO,EAAE,aAAa;SACvB;QACD,MAAM,EAAE;YACN,MAAM;YACN,YAAY,EAAE,eAAe,OAAO,CAAC,QAAQ,YAAY;SAC1D;KACF,CAAC;IAEF,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,qBAAqB,CAAC;YAC3B,GAAG,IAAI;YACP,UAAU,EAAE;gBACV,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;oBACP,IAAI;oBACJ,MAAM,EAAE,kBAAkB;oBAC1B,cAAc,EAAE,OAAO,CAAC,QAAQ;iBACjC;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,qBAAqB,CAAC;QAC3B,GAAG,IAAI;QACP,UAAU,EAAE;YACV,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE;gBACP,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW;gBACrC,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,OAAO,CAAC,QAAQ;aACjC;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA6B;IAE7B,IAAI,OAA8B,CAAC;IAEnC,IAAI,CAAC;QACH,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACxC,oEAAoE,WAAW,CAAC,KAAK,CAAC,mCAAmC;SAC1H,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAG,2BAA2B,CAAC,OAAO,EAAE;QACzD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO;YACL,aAAa,EAAE,+BAA+B;YAC9C,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;YACtB,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAE7D,+EAA+E;IAC/E,8EAA8E;IAC9E,gEAAgE;IAChE,IAAI,IAAI,GACN,IAAI,CAAC;IAEP,KAAK,MAAM,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAI,QAAoC,CAAC;QACzC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,aAAa,CAC5B,SAAS,EACT,GAAG,QAAQ,YAAY,EACvB,MAAM,EACN,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE;gBACtE,6DAA6D,QAAQ,KAAK,WAAW,CAAC,KAAK,CAAC,IAAI;gBAChG,iDAAiD;aAClD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,uBAAuB;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,cAAc,GAAG,IAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,UAAU,GACd,OAAO,QAAQ,CAAC,MAAM,EAAE,UAAU,KAAK,QAAQ;QAC7C,CAAC,CAAC,gBAAgB,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG;QAC/C,CAAC,CAAC,EAAE,CAAC;IAET,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACrC,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE;YAC/D,qBAAqB,cAAc,KAAK,OAAO,GAAG,UAAU,EAAE;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE;YAC7D,sCAAsC,cAAc,KAAK,OAAO,EAAE;YAClE,GAAG,KAAK;YACR,UAAU,CAAC,IAAI,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE;QAC9D,kBAAkB,cAAc,KAAK,OAAO,EAAE;QAC9C,GAAG,KAAK;QACR,UAAU,CAAC,IAAI,EAAE;KAClB,CAAC,CAAC;AACL,CAAC;AAUD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAE3B,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAC,MAA4C;IACxE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IACrE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,CAAC,aAAa;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAmC,EACnC,GAAW,EACX,MAAwB,EACxB,SAAiB;IAEjB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAC5B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;KACvC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAC;IAEnE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IACE,IAAI,CAAC,MAAM,KAAK,YAAY;QAC5B,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,IAAI,CAAC,MAAM,KAAK,WAAW,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CACrB,IAAmB,EACnB,cAA6B,EAC7B,QAAkC,EAClC,WAAqB;IAErB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEvE,OAAO;QACL,aAAa,EAAE,+BAA+B;QAC9C,MAAM,EAAE,QAAQ;QAChB,IAAI;QACJ,cAAc;QACd,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;YACrB,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,QAAQ;gBAC5B,wBAAwB,EAAE,MAAM;aACjC;SACF,CAAC;QACF,QAAQ,EAAE,CAAC;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,GAAkB;IACpE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEzD,KAAK,MAAM,aAAa,IAAI,UAAU,EAAE,CAAC;QACvC,KAAK,MAAM,aAAa,IAAI,KAAK,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YAE5D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,GAAG,CAAC;YACb,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;AAClE,CAAC"}

package/dist/codex-hook.d.ts

@@ -0,0 +1,48 @@
+import { type JsonValue, type NormalizedAction } from "@axtary/actionpass";
+export { classifyShellCommand, classifyShellFileOps } from "./shell-file-normalize.js";
+export declare const CODEX_HOOK_SCHEMA_VERSION = "axtary.codex_hook.v0";
+export type CodexHookPayload = {
+    hookEventName: string | null;
+    sessionId: string | null;
+    cwd: string | null;
+    toolName: string;
+    toolInput: Record<string, JsonValue>;
+};
+export type CodexNormalization = {
+    mapped: true;
+    action: NormalizedAction;
+    actions: NormalizedAction[];
+} | {
+    mapped: false;
+    reason: string;
+};
+export type CodexNormalizeOptions = {
+    repoResource?: string;
+    humanOwner?: string;
+    branch?: string;
+};
+export type CodexHookRunInput = {
+    payloadText: string;
+    proxyUrl?: string;
+    repoResource?: string;
+    humanOwner?: string;
+    branch?: string;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+};
+export type CodexHookRunResult = {
+    schemaVersion: typeof CODEX_HOOK_SCHEMA_VERSION;
+    /** Proxy decision semantics; `no_opinion` emits no decision. */
+    status: "allow" | "step_up" | "deny" | "no_opinion";
+    tool: string | null;
+    normalizedTool: string | null;
+    reason: string | null;
+    /** JSON for stdout (Codex `hookSpecificOutput`), or null for no opinion. */
+    output: string | null;
+    /** Always 0: decisions (incl. fail-closed denials) live in the JSON. */
+    exitCode: number;
+};
+export declare function parseCodexHookPayload(payloadText: string): CodexHookPayload;
+export declare function normalizeCodexToolCall(payload: CodexHookPayload, options?: CodexNormalizeOptions): CodexNormalization;
+export declare function runCodexHook(input: CodexHookRunInput): Promise<CodexHookRunResult>;
+//# sourceMappingURL=codex-hook.d.ts.map

package/dist/codex-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hook.d.ts","sourceRoot":"","sources":["../src/codex-hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAkB5B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAoBvF,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAEhE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAAE,GACvE;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,qBAAqB,GAAG;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,OAAO,yBAAyB,CAAC;IAChD,gEAAgE;IAChE,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,YAAY,CAAC;IACpD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAmC3E;AAkED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,gBAAgB,EACzB,OAAO,GAAE,qBAA0B,GAClC,kBAAkB,CAoDpB;AAMD,wBAAsB,YAAY,CAChC,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAwG7B"}