@bjoernrochel/sevro 1.0.0 → 1.1.1

package/dist/src/hosts/skill-hook-handler.js

@@ -0,0 +1,228 @@
+import { randomUUID } from "node:crypto";
+import { open, readFile, stat, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { isRecord } from "../value-guards.js";
+const MAX_INPUT_BYTES = 8 * 1024 * 1024;
+const MAX_RECEIPT_BYTES = 4 * 1024 * 1024;
+const MIN_PAGE_CHARACTERS = 32;
+function spend(budget, count) {
+    budget.comparisons -= count;
+    if (budget.comparisons < 0)
+        throw new Error("skill page matching exceeds limit");
+}
+function spendAnchor(budget) {
+    budget.anchors--;
+    if (budget.anchors < 0)
+        throw new Error("skill page anchors exceed limit");
+}
+function matchingLength(body, text, bodyStart, textStart, direction, budget) {
+    const available = direction === 1
+        ? Math.min(body.length - bodyStart, text.length - textStart)
+        : Math.min(bodyStart + 1, textStart + 1);
+    for (let length = 0; length < available; length++) {
+        spend(budget, 1);
+        if (body[bodyStart + direction * length] !==
+            text[textStart + direction * length])
+            return length;
+    }
+    return available;
+}
+function lineOffsets(body) {
+    const offsets = new Map();
+    for (const line of body.matchAll(/[^\n]*(?:\n|$)/g)) {
+        if (!line[0].trim())
+            continue;
+        const positions = offsets.get(line[0]) ?? [];
+        positions.push(line.index);
+        offsets.set(line[0], positions);
+    }
+    return offsets;
+}
+function anchoredRange(body, text, bodyStart, textStart, anchorLength, budget) {
+    spendAnchor(budget);
+    const before = matchingLength(body, text, bodyStart - 1, textStart - 1, -1, budget);
+    const after = matchingLength(body, text, bodyStart + anchorLength, textStart + anchorLength, 1, budget);
+    return {
+        start: bodyStart - before,
+        end: bodyStart + anchorLength + after,
+        outputEnd: textStart + anchorLength + after,
+    };
+}
+function uniqueRange(body, start, end, budget) {
+    spend(budget, body.length * 2);
+    const fragment = body.slice(start, end);
+    return (body.indexOf(fragment) === start && body.indexOf(fragment, start + 1) === -1);
+}
+function lineRanges(body, text, line, positions, budget) {
+    const result = {
+        found: false,
+        ranges: [],
+        matchedUntil: 0,
+    };
+    for (const offset of positions) {
+        const range = anchoredRange(body, text, offset, line.index, line[0].length, budget);
+        if (range.end - range.start < MIN_PAGE_CHARACTERS)
+            continue;
+        result.found = true;
+        if (uniqueRange(body, range.start, range.end, budget))
+            result.ranges.push([range.start, range.end]);
+        result.matchedUntil = Math.max(result.matchedUntil, range.outputEnd);
+    }
+    return result;
+}
+function textRanges(body, text, budget) {
+    const offsets = lineOffsets(body);
+    const result = { found: false, ranges: [] };
+    let matchedUntil = 0;
+    for (const line of text.matchAll(/[^\n]*(?:\n|$)/g)) {
+        if (line.index < matchedUntil)
+            continue;
+        const match = lineRanges(body, text, line, offsets.get(line[0]) ?? [], budget);
+        result.found ||= match.found;
+        result.ranges.push(...match.ranges);
+        matchedUntil = Math.max(matchedUntil, match.matchedUntil);
+    }
+    return result;
+}
+function skillRanges(skill, texts, budget) {
+    const matches = texts.map((text) => textRanges(skill.body, text, budget));
+    if (!matches.some((match) => match.found))
+        return [];
+    return [
+        {
+            invocation: skill.invocation,
+            sha256: skill.sha256,
+            ranges: matches.flatMap((match) => match.ranges),
+        },
+    ];
+}
+function label(value) {
+    return typeof value === "string" && /^[A-Za-z0-9_.:-]{1,256}$/.test(value)
+        ? value
+        : null;
+}
+function responseTexts(value, depth = 0) {
+    if (depth > 16)
+        throw new Error("skill hook response nesting exceeds limit");
+    if (typeof value === "string")
+        return [value];
+    return responseValues(value).flatMap((child) => responseTexts(child, depth + 1));
+}
+function responseValues(value) {
+    if (Array.isArray(value))
+        return value;
+    return isRecord(value) ? Object.values(value) : [];
+}
+function completeBodyRanges(text, skill, budget) {
+    spend(budget, text.length);
+    const ranges = [];
+    let start = text.indexOf(skill.body);
+    while (start !== -1) {
+        spendAnchor(budget);
+        ranges.push([start, start + skill.body.length]);
+        start = text.indexOf(skill.body, start + 1);
+    }
+    return ranges;
+}
+function textOutsideRanges(text, ranges) {
+    const remaining = [];
+    let cursor = 0;
+    for (const [start, end] of ranges.sort((a, b) => a[0] - b[0])) {
+        if (start > cursor)
+            remaining.push(text.slice(cursor, start));
+        cursor = Math.max(cursor, end);
+    }
+    remaining.push(text.slice(cursor));
+    return remaining;
+}
+function textsOutsideCompleteBodies(texts, skills, budget) {
+    return texts.flatMap((text) => textOutsideRanges(text, skills.flatMap((skill) => completeBodyRanges(text, skill, budget))));
+}
+function invocations(event, configuration) {
+    if (event.hook_event_name !== "PostToolUse")
+        return { invocations: [], ambiguousInvocations: [] };
+    const texts = responseTexts(event.tool_response);
+    const matched = configuration.skills.filter((skill) => texts.some((text) => text.includes(skill.body)));
+    const ambiguous = matched.filter((skill) => matched.some((other) => other.sha256 === skill.sha256 && other.invocation !== skill.invocation));
+    const ambiguousNames = new Set(ambiguous.map((skill) => skill.invocation));
+    const unambiguous = matched.filter((skill) => !ambiguousNames.has(skill.invocation));
+    const budget = { comparisons: 4 * MAX_INPUT_BYTES, anchors: 4096 };
+    const remainingTexts = textsOutsideCompleteBodies(texts, unambiguous, budget);
+    const bodyRanges = configuration.skills
+        .filter((skill) => !matched.includes(skill))
+        .flatMap((skill) => skillRanges(skill, remainingTexts, budget));
+    return {
+        invocations: [...new Set(unambiguous.map((skill) => skill.invocation))],
+        ambiguousInvocations: [...ambiguousNames],
+        ...(bodyRanges.length ? { bodyRanges } : {}),
+    };
+}
+export function skillHookReceipt(input, configuration) {
+    if (!isRecord(input) || typeof input.hook_event_name !== "string")
+        throw new Error("invalid skill hook input");
+    const receipt = {
+        event: input.hook_event_name,
+        sessionId: label(input.session_id),
+        turnId: label(input.turn_id),
+        toolUseId: label(input.tool_use_id),
+        toolName: label(input.tool_name),
+        ...invocations(input, configuration),
+        partial: false,
+    };
+    receipt.partial =
+        !validReceiptIdentity(receipt) || receipt.ambiguousInvocations.length > 0;
+    return receipt;
+}
+function validReceiptIdentity(receipt) {
+    if (!receipt.sessionId)
+        return false;
+    return (!receipt.event.includes("ToolUse") ||
+        (receipt.toolUseId !== null && receipt.toolName !== null));
+}
+async function boundedInput() {
+    const chunks = [];
+    let bytes = 0;
+    for await (const chunk of process.stdin) {
+        bytes += chunk.byteLength;
+        if (bytes > MAX_INPUT_BYTES)
+            throw new Error("skill hook input too large");
+        chunks.push(chunk);
+    }
+    return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+}
+async function appendReceipt(root, receipt) {
+    const path = join(root, "events.jsonl");
+    const size = await stat(path).then((file) => file.size, () => 0);
+    if (size > MAX_RECEIPT_BYTES) {
+        await writeFile(join(root, "partial"), "limit\n", { mode: 0o600 });
+        return;
+    }
+    const file = await open(path, "a", 0o600);
+    try {
+        await file.write(JSON.stringify(receipt) + "\n");
+    }
+    finally {
+        await file.close();
+    }
+}
+/** A silent observer: errors affect evidence availability, never tool decisions. */
+export async function runSkillHook(configurationPath) {
+    const configuration = JSON.parse(await readFile(configurationPath, "utf8"));
+    try {
+        await appendReceipt(configuration.receipts, skillHookReceipt(await boundedInput(), configuration));
+    }
+    catch {
+        await writeFile(join(configuration.receipts, "partial"), randomUUID(), {
+            mode: 0o600,
+        });
+    }
+}
+if (import.meta.main) {
+    try {
+        await runSkillHook(process.argv[2] ?? "");
+    }
+    catch {
+        // Missing receipts remain unavailable; hook failures never alter the task.
+    }
+}
+//# sourceMappingURL=skill-hook-handler.js.map

package/dist/src/hosts/skill-hook-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-hook-handler.js","sourceRoot":"","sources":["skill-hook-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,oBAAoB;AACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,yBAAyB;AACnE,OAAO,EAAE,IAAI,EAAE,kBAAkB;AACjC,OAAO,EAAE,QAAQ,EAAE,2BAAwB;AAE3C,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AA8B1C,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAM/B,SAAS,KAAK,CAAC,MAAmB,EAAE,KAAa;IAC/C,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC;IAC5B,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,MAAmB;IACtC,MAAM,CAAC,OAAO,EAAE,CAAC;IACjB,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CACrB,IAAY,EACZ,IAAY,EACZ,SAAiB,EACjB,SAAiB,EACjB,SAAiB,EACjB,MAAmB;IAEnB,MAAM,SAAS,GACb,SAAS,KAAK,CAAC;QACb,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC5D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;QAClD,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjB,IACE,IAAI,CAAC,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;YACpC,IAAI,CAAC,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;YAEpC,OAAO,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YAAE,SAAS;QAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CACpB,IAAY,EACZ,IAAY,EACZ,SAAiB,EACjB,SAAiB,EACjB,YAAoB,EACpB,MAAmB;IAEnB,WAAW,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,MAAM,GAAG,cAAc,CAC3B,IAAI,EACJ,IAAI,EACJ,SAAS,GAAG,CAAC,EACb,SAAS,GAAG,CAAC,EACb,CAAC,CAAC,EACF,MAAM,CACP,CAAC;IACF,MAAM,KAAK,GAAG,cAAc,CAC1B,IAAI,EACJ,IAAI,EACJ,SAAS,GAAG,YAAY,EACxB,SAAS,GAAG,YAAY,EACxB,CAAC,EACD,MAAM,CACP,CAAC;IACF,OAAO;QACL,KAAK,EAAE,SAAS,GAAG,MAAM;QACzB,GAAG,EAAE,SAAS,GAAG,YAAY,GAAG,KAAK;QACrC,SAAS,EAAE,SAAS,GAAG,YAAY,GAAG,KAAK;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,KAAa,EACb,GAAW,EACX,MAAmB;IAEnB,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,CACL,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,IAAY,EACZ,IAAY,EACZ,IAAqB,EACrB,SAAmB,EACnB,MAAmB;IAEnB,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,EAAwB;QAChC,YAAY,EAAE,CAAC;KAChB,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,aAAa,CACzB,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EACd,MAAM,CACP,CAAC;QACF,IAAI,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,GAAG,mBAAmB;YAAE,SAAS;QAC5D,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,MAAmB;IACjE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAwB,EAAE,CAAC;IAClE,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,KAAK,GAAG,YAAY;YAAE,SAAS;QACxC,MAAM,KAAK,GAAG,UAAU,CACtB,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAC1B,MAAM,CACP,CAAC;QACF,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAClB,KAAgB,EAChB,KAAe,EACf,MAAmB;IAEnB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrD,OAAO;QACL;YACE,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;SACjD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QACxE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC9C,IAAI,KAAK,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7C,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAY,EACZ,KAAgB,EAChB,MAAmB;IAEnB,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,WAAW,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,MAA0B;IACjE,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,GAAG,MAAM;YAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9D,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAe,EACf,MAAmB,EACnB,MAAmB;IAEnB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5B,iBAAiB,CACf,IAAI,EACJ,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CACnE,CACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAA8B,EAC9B,aAAqC;IAMrC,IAAI,KAAK,CAAC,eAAe,KAAK,aAAa;QACzC,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACpD,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAChD,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CACzE,CACF,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CACjD,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,CAAC,GAAG,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACnE,MAAM,cAAc,GAAG,0BAA0B,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM;SACpC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAC3C,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACvE,oBAAoB,EAAE,CAAC,GAAG,cAAc,CAAC;QACzC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAc,EACd,aAAqC;IAErC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;QAC/D,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,eAAe;QAC5B,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QAClC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5B,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;QACnC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QAChC,GAAG,WAAW,CAAC,KAAK,EAAE,aAAa,CAAC;QACpC,OAAO,EAAE,KAAK;KACf,CAAC;IACF,OAAO,CAAC,OAAO;QACb,CAAC,oBAAoB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAyB;IACrD,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,CACL,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAClC,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAkC,EAAE,CAAC;QACrE,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1B,IAAI,KAAK,GAAG,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,OAAyB;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAChC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EACnB,GAAG,EAAE,CAAC,CAAC,CACR,CAAC;IACF,IAAI,IAAI,GAAG,iBAAiB,EAAE,CAAC;QAC7B,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACnD,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,iBAAyB;IAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAC9B,MAAM,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAChB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,aAAa,CACjB,aAAa,CAAC,QAAQ,EACtB,gBAAgB,CAAC,MAAM,YAAY,EAAE,EAAE,aAAa,CAAC,CACtD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE;YACrE,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;IAC7E,CAAC;AACH,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { open, readFile, stat, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { isRecord } from \"../value-guards\";\n\nconst MAX_INPUT_BYTES = 8 * 1024 * 1024;\nconst MAX_RECEIPT_BYTES = 4 * 1024 * 1024;\n\nexport interface HookSkill {\n  invocation: string;\n  sha256: string;\n  body: string;\n}\nexport interface SkillHookConfiguration {\n  host: \"codex\";\n  receipts: string;\n  skills: HookSkill[];\n  catalogComplete: boolean;\n}\nexport interface SkillHookReceipt {\n  event: string;\n  sessionId: string | null;\n  turnId: string | null;\n  toolUseId: string | null;\n  toolName: string | null;\n  invocations: string[];\n  ambiguousInvocations: string[];\n  bodyRanges?: SkillBodyRanges[];\n  partial: boolean;\n}\nexport interface SkillBodyRanges {\n  invocation: string;\n  sha256: string;\n  ranges: [number, number][];\n}\n\nconst MIN_PAGE_CHARACTERS = 32;\ninterface MatchBudget {\n  comparisons: number;\n  anchors: number;\n}\n\nfunction spend(budget: MatchBudget, count: number) {\n  budget.comparisons -= count;\n  if (budget.comparisons < 0)\n    throw new Error(\"skill page matching exceeds limit\");\n}\n\nfunction spendAnchor(budget: MatchBudget) {\n  budget.anchors--;\n  if (budget.anchors < 0) throw new Error(\"skill page anchors exceed limit\");\n}\n\nfunction matchingLength(\n  body: string,\n  text: string,\n  bodyStart: number,\n  textStart: number,\n  direction: number,\n  budget: MatchBudget,\n): number {\n  const available =\n    direction === 1\n      ? Math.min(body.length - bodyStart, text.length - textStart)\n      : Math.min(bodyStart + 1, textStart + 1);\n  for (let length = 0; length < available; length++) {\n    spend(budget, 1);\n    if (\n      body[bodyStart + direction * length] !==\n      text[textStart + direction * length]\n    )\n      return length;\n  }\n  return available;\n}\n\nfunction lineOffsets(body: string) {\n  const offsets = new Map<string, number[]>();\n  for (const line of body.matchAll(/[^\\n]*(?:\\n|$)/g)) {\n    if (!line[0].trim()) continue;\n    const positions = offsets.get(line[0]) ?? [];\n    positions.push(line.index);\n    offsets.set(line[0], positions);\n  }\n  return offsets;\n}\n\nfunction anchoredRange(\n  body: string,\n  text: string,\n  bodyStart: number,\n  textStart: number,\n  anchorLength: number,\n  budget: MatchBudget,\n) {\n  spendAnchor(budget);\n  const before = matchingLength(\n    body,\n    text,\n    bodyStart - 1,\n    textStart - 1,\n    -1,\n    budget,\n  );\n  const after = matchingLength(\n    body,\n    text,\n    bodyStart + anchorLength,\n    textStart + anchorLength,\n    1,\n    budget,\n  );\n  return {\n    start: bodyStart - before,\n    end: bodyStart + anchorLength + after,\n    outputEnd: textStart + anchorLength + after,\n  };\n}\n\nfunction uniqueRange(\n  body: string,\n  start: number,\n  end: number,\n  budget: MatchBudget,\n) {\n  spend(budget, body.length * 2);\n  const fragment = body.slice(start, end);\n  return (\n    body.indexOf(fragment) === start && body.indexOf(fragment, start + 1) === -1\n  );\n}\n\nfunction lineRanges(\n  body: string,\n  text: string,\n  line: RegExpExecArray,\n  positions: number[],\n  budget: MatchBudget,\n) {\n  const result = {\n    found: false,\n    ranges: [] as [number, number][],\n    matchedUntil: 0,\n  };\n  for (const offset of positions) {\n    const range = anchoredRange(\n      body,\n      text,\n      offset,\n      line.index,\n      line[0].length,\n      budget,\n    );\n    if (range.end - range.start < MIN_PAGE_CHARACTERS) continue;\n    result.found = true;\n    if (uniqueRange(body, range.start, range.end, budget))\n      result.ranges.push([range.start, range.end]);\n    result.matchedUntil = Math.max(result.matchedUntil, range.outputEnd);\n  }\n  return result;\n}\n\nfunction textRanges(body: string, text: string, budget: MatchBudget) {\n  const offsets = lineOffsets(body);\n  const result = { found: false, ranges: [] as [number, number][] };\n  let matchedUntil = 0;\n  for (const line of text.matchAll(/[^\\n]*(?:\\n|$)/g)) {\n    if (line.index < matchedUntil) continue;\n    const match = lineRanges(\n      body,\n      text,\n      line,\n      offsets.get(line[0]) ?? [],\n      budget,\n    );\n    result.found ||= match.found;\n    result.ranges.push(...match.ranges);\n    matchedUntil = Math.max(matchedUntil, match.matchedUntil);\n  }\n  return result;\n}\n\nfunction skillRanges(\n  skill: HookSkill,\n  texts: string[],\n  budget: MatchBudget,\n): SkillBodyRanges[] {\n  const matches = texts.map((text) => textRanges(skill.body, text, budget));\n  if (!matches.some((match) => match.found)) return [];\n  return [\n    {\n      invocation: skill.invocation,\n      sha256: skill.sha256,\n      ranges: matches.flatMap((match) => match.ranges),\n    },\n  ];\n}\n\nfunction label(value: unknown): string | null {\n  return typeof value === \"string\" && /^[A-Za-z0-9_.:-]{1,256}$/.test(value)\n    ? value\n    : null;\n}\n\nfunction responseTexts(value: unknown, depth = 0): string[] {\n  if (depth > 16) throw new Error(\"skill hook response nesting exceeds limit\");\n  if (typeof value === \"string\") return [value];\n  return responseValues(value).flatMap((child) =>\n    responseTexts(child, depth + 1),\n  );\n}\n\nfunction responseValues(value: unknown): unknown[] {\n  if (Array.isArray(value)) return value;\n  return isRecord(value) ? Object.values(value) : [];\n}\n\nfunction completeBodyRanges(\n  text: string,\n  skill: HookSkill,\n  budget: MatchBudget,\n): [number, number][] {\n  spend(budget, text.length);\n  const ranges: [number, number][] = [];\n  let start = text.indexOf(skill.body);\n  while (start !== -1) {\n    spendAnchor(budget);\n    ranges.push([start, start + skill.body.length]);\n    start = text.indexOf(skill.body, start + 1);\n  }\n  return ranges;\n}\n\nfunction textOutsideRanges(text: string, ranges: [number, number][]) {\n  const remaining: string[] = [];\n  let cursor = 0;\n  for (const [start, end] of ranges.sort((a, b) => a[0] - b[0])) {\n    if (start > cursor) remaining.push(text.slice(cursor, start));\n    cursor = Math.max(cursor, end);\n  }\n  remaining.push(text.slice(cursor));\n  return remaining;\n}\n\nfunction textsOutsideCompleteBodies(\n  texts: string[],\n  skills: HookSkill[],\n  budget: MatchBudget,\n) {\n  return texts.flatMap((text) =>\n    textOutsideRanges(\n      text,\n      skills.flatMap((skill) => completeBodyRanges(text, skill, budget)),\n    ),\n  );\n}\n\nfunction invocations(\n  event: Record<string, unknown>,\n  configuration: SkillHookConfiguration,\n): {\n  invocations: string[];\n  ambiguousInvocations: string[];\n  bodyRanges?: SkillBodyRanges[];\n} {\n  if (event.hook_event_name !== \"PostToolUse\")\n    return { invocations: [], ambiguousInvocations: [] };\n  const texts = responseTexts(event.tool_response);\n  const matched = configuration.skills.filter((skill) =>\n    texts.some((text) => text.includes(skill.body)),\n  );\n  const ambiguous = matched.filter((skill) =>\n    matched.some(\n      (other) =>\n        other.sha256 === skill.sha256 && other.invocation !== skill.invocation,\n    ),\n  );\n  const ambiguousNames = new Set(ambiguous.map((skill) => skill.invocation));\n  const unambiguous = matched.filter(\n    (skill) => !ambiguousNames.has(skill.invocation),\n  );\n  const budget = { comparisons: 4 * MAX_INPUT_BYTES, anchors: 4096 };\n  const remainingTexts = textsOutsideCompleteBodies(texts, unambiguous, budget);\n  const bodyRanges = configuration.skills\n    .filter((skill) => !matched.includes(skill))\n    .flatMap((skill) => skillRanges(skill, remainingTexts, budget));\n  return {\n    invocations: [...new Set(unambiguous.map((skill) => skill.invocation))],\n    ambiguousInvocations: [...ambiguousNames],\n    ...(bodyRanges.length ? { bodyRanges } : {}),\n  };\n}\n\nexport function skillHookReceipt(\n  input: unknown,\n  configuration: SkillHookConfiguration,\n): SkillHookReceipt {\n  if (!isRecord(input) || typeof input.hook_event_name !== \"string\")\n    throw new Error(\"invalid skill hook input\");\n  const receipt = {\n    event: input.hook_event_name,\n    sessionId: label(input.session_id),\n    turnId: label(input.turn_id),\n    toolUseId: label(input.tool_use_id),\n    toolName: label(input.tool_name),\n    ...invocations(input, configuration),\n    partial: false,\n  };\n  receipt.partial =\n    !validReceiptIdentity(receipt) || receipt.ambiguousInvocations.length > 0;\n  return receipt;\n}\n\nfunction validReceiptIdentity(receipt: SkillHookReceipt): boolean {\n  if (!receipt.sessionId) return false;\n  return (\n    !receipt.event.includes(\"ToolUse\") ||\n    (receipt.toolUseId !== null && receipt.toolName !== null)\n  );\n}\n\nasync function boundedInput(): Promise<unknown> {\n  const chunks: Uint8Array[] = [];\n  let bytes = 0;\n  for await (const chunk of process.stdin as AsyncIterable<Uint8Array>) {\n    bytes += chunk.byteLength;\n    if (bytes > MAX_INPUT_BYTES) throw new Error(\"skill hook input too large\");\n    chunks.push(chunk);\n  }\n  return JSON.parse(Buffer.concat(chunks).toString(\"utf8\")) as unknown;\n}\n\nasync function appendReceipt(root: string, receipt: SkillHookReceipt) {\n  const path = join(root, \"events.jsonl\");\n  const size = await stat(path).then(\n    (file) => file.size,\n    () => 0,\n  );\n  if (size > MAX_RECEIPT_BYTES) {\n    await writeFile(join(root, \"partial\"), \"limit\\n\", { mode: 0o600 });\n    return;\n  }\n  const file = await open(path, \"a\", 0o600);\n  try {\n    await file.write(JSON.stringify(receipt) + \"\\n\");\n  } finally {\n    await file.close();\n  }\n}\n\n/** A silent observer: errors affect evidence availability, never tool decisions. */\nexport async function runSkillHook(configurationPath: string): Promise<void> {\n  const configuration = JSON.parse(\n    await readFile(configurationPath, \"utf8\"),\n  ) as SkillHookConfiguration;\n  try {\n    await appendReceipt(\n      configuration.receipts,\n      skillHookReceipt(await boundedInput(), configuration),\n    );\n  } catch {\n    await writeFile(join(configuration.receipts, \"partial\"), randomUUID(), {\n      mode: 0o600,\n    });\n  }\n}\n\nif (import.meta.main) {\n  try {\n    await runSkillHook(process.argv[2] ?? \"\");\n  } catch {\n    // Missing receipts remain unavailable; hook failures never alter the task.\n  }\n}\n"]}