@calliopelabs/cli 2.3.0 → 3.0.0

package/dist/hooks.js

@@ -18,19 +18,61 @@ function debugLog(message, ...args) {
 // ============================================================================
 const HOOKS_DIR = path.join(os.homedir(), '.calliope-cli', 'hooks');
 const HOOKS_FILE = path.join(HOOKS_DIR, 'hooks.json');
+/**
+ * Events on which a hook may veto an operation (exit code 42). For these
+ * events the hook MUST be awaited so its blocking result is honored, even
+ * if the hook is flagged `async`. Otherwise an `async: true` flag could
+ * silently neutralize a guardrail.
+ */
+const BLOCKING_EVENTS = new Set([
+    'pre-tool',
+    'pre-shell',
+    'pre-write',
+    'pre-read',
+    'session-start',
+]);
 function ensureHooksDir() {
     if (!fs.existsSync(HOOKS_DIR)) {
-        fs.mkdirSync(HOOKS_DIR, { recursive: true });
+        fs.mkdirSync(HOOKS_DIR, { recursive: true, mode: 0o700 });
     }
 }
 /**
- * Load hooks configuration
+ * hooks.json is a trust boundary: its `command` strings run as arbitrary
+ * shell on routine events. Refuse to load it if it is writable by group or
+ * other, since any process that can write it gains persistent code-exec.
+ * Returns true if safe to load.
+ */
+function hooksFileIsSafe() {
+    try {
+        const mode = fs.statSync(HOOKS_FILE).mode;
+        // Reject if group-writable (0o020) or world-writable (0o002).
+        if (mode & 0o022) {
+            debugLog(`Refusing to load hooks.json: file is group/world-writable (mode ${(mode & 0o777).toString(8)}). ` +
+                `Run: chmod 600 ${HOOKS_FILE}`);
+            return false;
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Load hooks configuration.
+ *
+ * SECURITY: hooks.json is a trusted file — its `command` strings are executed
+ * as shell. It must not be writable by group/other, and the directory must
+ * never be agent-writable. Hooks are refused (not executed) if the file has
+ * loose permissions.
  */
 export function loadHooks() {
     ensureHooksDir();
     if (!fs.existsSync(HOOKS_FILE)) {
         return [];
     }
+    if (!hooksFileIsSafe()) {
+        return [];
+    }
     try {
         return JSON.parse(fs.readFileSync(HOOKS_FILE, 'utf-8'));
     }
@@ -39,11 +81,19 @@ export function loadHooks() {
     }
 }
 /**
- * Save hooks configuration
+ * Save hooks configuration. Written with restrictive (0600) permissions so the
+ * trusted command list is not exposed to or writable by other users.
  */
 export function saveHooks(hooks) {
     ensureHooksDir();
-    fs.writeFileSync(HOOKS_FILE, JSON.stringify(hooks, null, 2));
+    fs.writeFileSync(HOOKS_FILE, JSON.stringify(hooks, null, 2), { mode: 0o600 });
+    // writeFileSync `mode` only applies on create; enforce perms on existing files too.
+    try {
+        fs.chmodSync(HOOKS_FILE, 0o600);
+    }
+    catch {
+        /* best effort */
+    }
 }
 // ============================================================================
 // Hook Management
@@ -114,28 +164,58 @@ async function runHookCommand(hook, context) {
         if (context.toolArgs) {
             env.CALLIOPE_TOOL_ARGS = JSON.stringify(context.toolArgs);
         }
+        // `detached` puts the shell and its children in their own process group so
+        // the timeout can kill the whole group (a shell child cannot escape it).
         const proc = spawn('sh', ['-c', hook.command], {
             env,
             stdio: ['pipe', 'pipe', 'pipe'],
-            timeout,
+            detached: true,
         });
         let stdout = '';
         let stderr = '';
+        let timedOut = false;
+        let killTimer;
         proc.stdout?.on('data', (data) => {
             stdout += data.toString();
         });
         proc.stderr?.on('data', (data) => {
             stderr += data.toString();
         });
+        // Signal the whole process group (negative pid) so the shell's children die
+        // too. Fall back to signalling the process directly if the group is gone.
+        const signalGroup = (signal) => {
+            try {
+                if (proc.pid !== undefined) {
+                    process.kill(-proc.pid, signal);
+                }
+            }
+            catch {
+                try {
+                    proc.kill(signal);
+                }
+                catch {
+                    /* already dead */
+                }
+            }
+        };
+        // Hard timeout: SIGTERM, then SIGKILL after a short grace period so a
+        // command that traps/ignores SIGTERM cannot outlive its timeout.
         const timer = setTimeout(() => {
-            proc.kill();
-            resolve({
-                success: false,
-                error: 'Hook timed out',
-            });
+            timedOut = true;
+            signalGroup('SIGTERM');
+            killTimer = setTimeout(() => signalGroup('SIGKILL'), 2000);
         }, timeout);
         proc.on('close', (code) => {
             clearTimeout(timer);
+            if (killTimer)
+                clearTimeout(killTimer);
+            if (timedOut) {
+                resolve({
+                    success: false,
+                    error: 'Hook timed out',
+                });
+                return;
+            }
             // Exit code 42 means "block the operation"
             const blocked = code === 42;
             resolve({
@@ -147,6 +227,8 @@ async function runHookCommand(hook, context) {
         });
         proc.on('error', (err) => {
             clearTimeout(timer);
+            if (killTimer)
+                clearTimeout(killTimer);
             resolve({
                 success: false,
                 error: err.message,
@@ -187,7 +269,11 @@ export async function executeHooks(event, context) {
             if (!matches)
                 continue;
         }
-        if (hook.async) {
+        // For blocking events, the exit-42 veto contract must be enforced, so the
+        // hook is always awaited regardless of its `async` flag. Allowing
+        // fire-and-forget here would let `async: true` silently neutralize a
+        // guardrail (the discarded result could never set `blocked`).
+        if (hook.async && !BLOCKING_EVENTS.has(event)) {
             // Fire and forget with debug logging
             runHookCommand(hook, fullContext).catch((err) => {
                 debugLog(`Async hook '${hook.id}' failed:`, err instanceof Error ? err.message : err);

package/dist/hooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../src/hooks.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,uBAAuB;AACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC;AACjD,SAAS,QAAQ,CAAC,OAAe,EAAE,GAAG,IAAe;IACnD,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAmDD,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;AACpE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AAEtD,SAAS,cAAc;IACrB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,cAAc,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,cAAc,EAAE,CAAC;IACjB,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,IAAsB;IAC5C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAS;QACpB,GAAG,IAAI;QACP,EAAE,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;KACnE,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACvB,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,EAAU,EAAE,OAAgB;IACrD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACvB,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAgB;IAC/C,OAAO,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAU,EACV,OAAoB;IAEpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;QAEtC,iCAAiC;QACjC,MAAM,GAAG,GAAuC;YAC9C,GAAG,OAAO,CAAC,GAAG;YACd,cAAc,EAAE,OAAO,CAAC,KAAK;YAC7B,aAAa,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;YACjC,aAAa,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YACrC,gBAAgB,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YACvC,gBAAgB,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YACvC,cAAc,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;SACpC,CAAC;QAEF,mCAAmC;QACnC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YAC7C,GAAG;YACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,gBAAgB;aACxB,CAAC,CAAC;QACL,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,2CAA2C;YAC3C,MAAM,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC;YAE5B,OAAO,CAAC;gBACN,OAAO,EAAE,IAAI,KAAK,CAAC,IAAI,OAAO;gBAC9B,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS;gBACjC,OAAO;aACR,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,GAAG,CAAC,OAAO;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAgB,EAChB,OAA6B;IAE7B,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,WAAW,GAAgB,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC;IAEvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,+BAA+B;QAC/B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,sBAAsB;YACtB,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5C,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC;YACD,yBAAyB;iBACpB,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5C,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;YACD,4BAA4B;iBACvB,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACjD,CAAC;YACD,oCAAoC;iBAC/B,CAAC;gBACJ,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7D,CAAC;YAED,IAAI,CAAC,OAAO;gBAAE,SAAS;QACzB,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,qCAAqC;YACrC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC9C,QAAQ,CAAC,eAAe,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACxF,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAErB,4CAA4C;YAC5C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAgB,EAChB,OAA6B;IAE7B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAEnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,iBAAiB;aAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO;IAE7B,+CAA+C;IAC/C,MAAM,QAAQ,GAA4B;QACxC;YACE,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,mEAAmE;YAC5E,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,YAAY;SACxB;QACD;YACE,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,uDAAuD;YAChE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,UAAU;SACtB;QACD;YACE,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,iEAAiE;YAC1E,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,UAAU;SACtB;KACF,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC1B,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,OAAO,GAAG,MAAM,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../src/hooks.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,uBAAuB;AACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC;AACjD,SAAS,QAAQ,CAAC,OAAe,EAAE,GAAG,IAAe;IACnD,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAmDD,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;AACpE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,eAAe,GAA2B,IAAI,GAAG,CAAY;IACjE,UAAU;IACV,WAAW;IACX,WAAW;IACX,UAAU;IACV,eAAe;CAChB,CAAC,CAAC;AAEH,SAAS,cAAc;IACrB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QAC1C,8DAA8D;QAC9D,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YACjB,QAAQ,CACN,mEAAmE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;gBAChG,kBAAkB,UAAU,EAAE,CACjC,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS;IACvB,cAAc,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,cAAc,EAAE,CAAC;IACjB,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9E,oFAAoF;IACpF,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,IAAsB;IAC5C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAS;QACpB,GAAG,IAAI;QACP,EAAE,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;KACnE,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACvB,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,EAAU,EAAE,OAAgB;IACrD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACvB,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAgB;IAC/C,OAAO,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAU,EACV,OAAoB;IAEpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;QAEtC,iCAAiC;QACjC,MAAM,GAAG,GAAuC;YAC9C,GAAG,OAAO,CAAC,GAAG;YACd,cAAc,EAAE,OAAO,CAAC,KAAK;YAC7B,aAAa,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;YACjC,aAAa,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YACrC,gBAAgB,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YACvC,gBAAgB,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YACvC,cAAc,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;SACpC,CAAC;QAEF,mCAAmC;QACnC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5D,CAAC;QAED,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YAC7C,GAAG;YACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,SAAoD,CAAC;QAEzD,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,4EAA4E;QAC5E,0EAA0E;QAC1E,MAAM,WAAW,GAAG,CAAC,MAAsB,EAAQ,EAAE;YACnD,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,CAAC;gBAAC,MAAM,CAAC;oBACP,kBAAkB;gBACpB,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,sEAAsE;QACtE,iEAAiE;QACjE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,WAAW,CAAC,SAAS,CAAC,CAAC;YACvB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7D,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YAEvC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC;oBACN,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,gBAAgB;iBACxB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,2CAA2C;YAC3C,MAAM,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC;YAE5B,OAAO,CAAC;gBACN,OAAO,EAAE,IAAI,KAAK,CAAC,IAAI,OAAO;gBAC9B,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS;gBACjC,OAAO;aACR,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,CAAC;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,GAAG,CAAC,OAAO;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAgB,EAChB,OAA6B;IAE7B,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,WAAW,GAAgB,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC;IAEvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,+BAA+B;QAC/B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,sBAAsB;YACtB,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5C,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC;YACD,yBAAyB;iBACpB,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5C,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;YACD,4BAA4B;iBACvB,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACjD,CAAC;YACD,oCAAoC;iBAC/B,CAAC;gBACJ,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7D,CAAC;YAED,IAAI,CAAC,OAAO;gBAAE,SAAS;QACzB,CAAC;QAED,0EAA0E;QAC1E,kEAAkE;QAClE,qEAAqE;QACrE,8DAA8D;QAC9D,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,qCAAqC;YACrC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC9C,QAAQ,CAAC,eAAe,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACxF,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAErB,4CAA4C;YAC5C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAgB,EAChB,OAA6B;IAE7B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAEnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,iBAAiB;aAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO;IAE7B,+CAA+C;IAC/C,MAAM,QAAQ,GAA4B;QACxC;YACE,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,mEAAmE;YAC5E,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,YAAY;SACxB;QACD;YACE,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,uDAAuD;YAChE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,UAAU;SACtB;QACD;YACE,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,iEAAiE;YAC1E,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,UAAU;SACtB;KACF,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC1B,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,OAAO,GAAG,MAAM,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}

package/dist/hud/api.d.ts

@@ -1,35 +1,20 @@
 /**
  * HUD API
  *
- * State management, discovery, and helper functions.
+ * Palette state management plus Ink/ANSI color helpers. The CLI ships a single
+ * built-in skin and three palettes (default / light / monochrome) mapped from
+ * the dark / light / no-color themes.
  */
 import type { Skin, Palette, BoxChars, SemanticColorKey } from './types.js';
-export declare function getSkin(name?: string): Skin;
-export declare function applySkin(name: string): boolean;
 export declare function getCurrentSkin(): Skin;
-export declare function listSkins(): Array<{
-    name: string;
-    description: string;
-    custom: boolean;
-}>;
 export declare function getPalette(name?: string): Palette;
 export declare function applyPalette(name: string): boolean;
 export declare function getCurrentPalette(): Palette;
-export declare function listPalettes(): Array<{
-    name: string;
-    description: string;
-    custom: boolean;
-}>;
-export declare function applyHUD(skinName: string, paletteName: string, _companionName?: string): void;
-export declare function discoverSkins(): Skin[];
-export declare function discoverPalettes(): Palette[];
 export declare function getBoxChars(skin?: Skin): BoxChars;
 export declare function getSpinnerFrames(skin?: Skin): string[];
 export declare function getPaletteColor(key: SemanticColorKey): string;
 export declare function paletteColorize(text: string, key: SemanticColorKey): string;
 export declare function getInkColor(key: SemanticColorKey): string;
 export declare function getInkBorderStyle(skin?: Skin): string;
-export declare function saveCustomSkin(skin: Skin): void;
-export declare function saveCustomPalette(palette: Palette): void;
 export declare function clearHUDCache(): void;
 //# sourceMappingURL=api.d.ts.map

package/dist/hud/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/hud/api.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAiB,MAAM,YAAY,CAAC;AAgL3F,wBAAgB,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAqB3C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO/C;AAED,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAED,wBAAgB,SAAS,IAAI,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CA6BzF;AAMD,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAqBjD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOlD;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,wBAAgB,YAAY,IAAI,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CA6B5F;AAMD,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAG7F;AAMD,wBAAgB,aAAa,IAAI,IAAI,EAAE,CAsBtC;AAED,wBAAgB,gBAAgB,IAAI,OAAO,EAAE,CAsB5C;AAMD,wBAAgB,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,QAAQ,CAMjD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,EAAE,CAMtD;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAG7D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAG3E;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAGzD;AA0BD,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAUrD;AAMD,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAM/C;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAMxD;AAED,wBAAgB,aAAa,IAAI,IAAI,CAGpC"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/hud/api.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAc5E,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAMD,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAKjD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMlD;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAMD,wBAAgB,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,QAAQ,CAMjD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,EAAE,CAMtD;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAG7D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAG3E;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAGzD;AA0BD,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAUrD;AAED,wBAAgB,aAAa,IAAI,IAAI,CAEpC"}

package/dist/hud/api.js

@@ -1,284 +1,35 @@
 /**
  * HUD API
  *
- * State management, discovery, and helper functions.
+ * Palette state management plus Ink/ANSI color helpers. The CLI ships a single
+ * built-in skin and three palettes (default / light / monochrome) mapped from
+ * the dark / light / no-color themes.
  */
-import * as fs from 'fs';
-import * as path from 'path';
-import * as os from 'os';
 import { colors as ANSI } from '../styles.js';
 import { SKINS, BOX_STYLES, SPINNER_SETS } from './skins.js';
 import { PALETTES } from './palettes.js';
 // ============================================================================
-// Schema Validation
-// ============================================================================
-/** Maximum size for a custom JSON file (1MB) */
-const MAX_CUSTOM_FILE_SIZE = 1_048_576;
-/** Maximum number of banner art lines */
-const MAX_BANNER_ART_LINES = 100;
-/** Maximum length of any single string field */
-const MAX_STRING_LENGTH = 1000;
-/**
- * Strip ANSI escape sequences that could manipulate terminal state
- * beyond standard color codes (CSI sequences for cursor movement, screen clear, etc.)
- */
-function sanitizeString(s) {
-    // Remove OSC (Operating System Command) sequences - potential for title/clipboard injection
-    // Remove CSI sequences for cursor movement, erase, scroll (but keep SGR color codes \e[...m)
-    return s
-        .replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g, '') // OSC sequences
-        .replace(/\x1b\[[\d;]*[ABCDEFGHJKSTfnsu]/g, '') // CSI cursor/erase sequences
-        .replace(/\x1b\[\?[\d;]*[hl]/g, ''); // CSI private mode set/reset
-}
-/**
- * Validate and sanitize a loaded custom Skin JSON object.
- * Returns a validated Skin or null if the data is invalid.
- */
-function validateSkin(data) {
-    if (typeof data !== 'object' || data === null)
-        return null;
-    const d = data;
-    // Required string fields
-    if (typeof d.name !== 'string' || d.name.length === 0 || d.name.length > MAX_STRING_LENGTH)
-        return null;
-    if (typeof d.description !== 'string' || d.description.length > MAX_STRING_LENGTH)
-        return null;
-    // banner
-    if (typeof d.banner !== 'object' || d.banner === null)
-        return null;
-    const banner = d.banner;
-    if (!Array.isArray(banner.art))
-        return null;
-    if (banner.art.length > MAX_BANNER_ART_LINES)
-        return null;
-    for (let i = 0; i < banner.art.length; i++) {
-        if (typeof banner.art[i] !== 'string')
-            return null;
-        if (banner.art[i].length > MAX_STRING_LENGTH)
-            return null;
-        banner.art[i] = sanitizeString(banner.art[i]);
-    }
-    const validBannerStyles = ['full', 'compact', 'none'];
-    if (typeof banner.style !== 'string' || !validBannerStyles.includes(banner.style))
-        return null;
-    // borders
-    if (typeof d.borders !== 'object' || d.borders === null)
-        return null;
-    const borders = d.borders;
-    const validBorderStyles = ['rounded', 'sharp', 'double', 'ascii', 'custom', 'none'];
-    if (typeof borders.style !== 'string' || !validBorderStyles.includes(borders.style))
-        return null;
-    // decorations
-    if (typeof d.decorations !== 'object' || d.decorations === null)
-        return null;
-    const decorations = d.decorations;
-    if (typeof decorations.promptPrefix !== 'string')
-        return null;
-    if (typeof decorations.assistantPrefix !== 'string')
-        return null;
-    if (typeof decorations.toolPrefix !== 'string')
-        return null;
-    if (typeof decorations.toolSuffix !== 'string')
-        return null;
-    if (typeof decorations.separator !== 'string')
-        return null;
-    const validSpinners = ['braille', 'dots', 'simple', 'blocks', 'custom'];
-    if (typeof decorations.spinner !== 'string' || !validSpinners.includes(decorations.spinner))
-        return null;
-    // Sanitize decoration strings
-    decorations.promptPrefix = sanitizeString(decorations.promptPrefix);
-    decorations.assistantPrefix = sanitizeString(decorations.assistantPrefix);
-    decorations.toolPrefix = sanitizeString(decorations.toolPrefix);
-    decorations.toolSuffix = sanitizeString(decorations.toolSuffix);
-    decorations.separator = sanitizeString(decorations.separator);
-    // diff
-    if (typeof d.diff !== 'object' || d.diff === null)
-        return null;
-    const diff = d.diff;
-    const validDiffStyles = ['inline', 'unified', 'side-by-side'];
-    if (typeof diff.style !== 'string' || !validDiffStyles.includes(diff.style))
-        return null;
-    if (typeof diff.showLineNumbers !== 'boolean')
-        return null;
-    if (typeof diff.contextLines !== 'number')
-        return null;
-    if (typeof diff.maxLineWidth !== 'number')
-        return null;
-    if (typeof diff.wordDiff !== 'boolean')
-        return null;
-    // density
-    const validDensities = ['normal', 'compact', 'spacious'];
-    if (typeof d.density !== 'string' || !validDensities.includes(d.density))
-        return null;
-    // responsive
-    if (typeof d.responsive !== 'object' || d.responsive === null)
-        return null;
-    const responsive = d.responsive;
-    if (typeof responsive.compact !== 'number' || typeof responsive.wide !== 'number')
-        return null;
-    return data;
-}
-/** Required keys for a PaletteColors object */
-const PALETTE_COLOR_KEYS = [
-    'primary', 'secondary', 'accent',
-    'text', 'textDim', 'textBold',
-    'user', 'assistant', 'system', 'error',
-    'codeKeyword', 'codeString', 'codeNumber', 'codeComment', 'codeFunction',
-    'diffAdd', 'diffRemove', 'diffContext',
-    'success', 'warning', 'info',
-    'border', 'background', 'selection',
-];
-/**
- * Validate and sanitize a loaded custom Palette JSON object.
- * Returns a validated Palette or null if the data is invalid.
- */
-function validatePalette(data) {
-    if (typeof data !== 'object' || data === null)
-        return null;
-    const d = data;
-    if (typeof d.name !== 'string' || d.name.length === 0 || d.name.length > MAX_STRING_LENGTH)
-        return null;
-    if (typeof d.description !== 'string' || d.description.length > MAX_STRING_LENGTH)
-        return null;
-    if (typeof d.colors !== 'object' || d.colors === null)
-        return null;
-    const colors = d.colors;
-    // Validate all required color keys exist and are strings (ANSI codes)
-    for (const key of PALETTE_COLOR_KEYS) {
-        if (typeof colors[key] !== 'string')
-            return null;
-        if (colors[key].length > MAX_STRING_LENGTH)
-            return null;
-        // Sanitize color values
-        colors[key] = sanitizeString(colors[key]);
-    }
-    return data;
-}
-/**
- * Safely load and validate a custom JSON file with size limits.
- */
-function loadCustomJSON(filePath) {
-    try {
-        const stat = fs.statSync(filePath);
-        if (stat.size > MAX_CUSTOM_FILE_SIZE) {
-            console.warn(`Custom theme file too large (${stat.size} bytes, max ${MAX_CUSTOM_FILE_SIZE}): ${filePath}`);
-            return null;
-        }
-        return JSON.parse(fs.readFileSync(filePath, 'utf-8'));
-    }
-    catch {
-        return null;
-    }
-}
-// ============================================================================
 // State
 // ============================================================================
-let currentSkin = null;
 let currentPalette = null;
 // ============================================================================
-// Directories
-// ============================================================================
-const HUD_DIR = path.join(os.homedir(), '.calliope-cli');
-const SKINS_DIR = path.join(HUD_DIR, 'skins');
-const PALETTES_DIR = path.join(HUD_DIR, 'palettes');
-function ensureDir(dir) {
-    if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true });
-    }
-}
-// ============================================================================
-// Skin Management
+// Skin (single built-in skin)
 // ============================================================================
-export function getSkin(name) {
-    if (!name) {
-        if (currentSkin)
-            return currentSkin;
-        return SKINS.clean;
-    }
-    if (SKINS[name])
-        return SKINS[name];
-    // Check custom skins directory
-    ensureDir(SKINS_DIR);
-    const customPath = path.join(SKINS_DIR, `${name}.json`);
-    if (fs.existsSync(customPath)) {
-        const raw = loadCustomJSON(customPath);
-        if (raw) {
-            const validated = validateSkin(raw);
-            if (validated)
-                return validated;
-            console.warn(`Custom skin "${name}" failed schema validation — using default`);
-        }
-    }
-    return SKINS.clean;
-}
-export function applySkin(name) {
-    const skin = getSkin(name);
-    if (skin.name === name || SKINS[name]) {
-        currentSkin = skin;
-        return true;
-    }
-    return false;
-}
 export function getCurrentSkin() {
-    return currentSkin || SKINS.clean;
-}
-export function listSkins() {
-    const result = [];
-    for (const [name, skin] of Object.entries(SKINS)) {
-        result.push({ name, description: skin.description, custom: false });
-    }
-    ensureDir(SKINS_DIR);
-    try {
-        const files = fs.readdirSync(SKINS_DIR);
-        for (const file of files) {
-            if (file.endsWith('.json')) {
-                const name = file.slice(0, -5);
-                if (!SKINS[name]) {
-                    const raw = loadCustomJSON(path.join(SKINS_DIR, file));
-                    if (raw) {
-                        const skin = validateSkin(raw);
-                        if (skin) {
-                            result.push({ name, description: skin.description || '', custom: true });
-                        }
-                    }
-                }
-            }
-        }
-    }
-    catch {
-        // Directory read failed
-    }
-    return result;
+    return SKINS.clean;
 }
 // ============================================================================
 // Palette Management
 // ============================================================================
 export function getPalette(name) {
     if (!name) {
-        if (currentPalette)
-            return currentPalette;
-        return PALETTES.default;
-    }
-    if (PALETTES[name])
-        return PALETTES[name];
-    // Check custom palettes directory
-    ensureDir(PALETTES_DIR);
-    const customPath = path.join(PALETTES_DIR, `${name}.json`);
-    if (fs.existsSync(customPath)) {
-        const raw = loadCustomJSON(customPath);
-        if (raw) {
-            const validated = validatePalette(raw);
-            if (validated)
-                return validated;
-            console.warn(`Custom palette "${name}" failed schema validation — using default`);
-        }
+        return currentPalette || PALETTES.default;
     }
-    return PALETTES.default;
+    return PALETTES[name] || PALETTES.default;
 }
 export function applyPalette(name) {
-    const palette = getPalette(name);
-    if (palette.name === name || PALETTES[name]) {
-        currentPalette = palette;
+    if (PALETTES[name]) {
+        currentPalette = PALETTES[name];
         return true;
     }
     return false;
@@ -286,88 +37,6 @@ export function applyPalette(name) {
 export function getCurrentPalette() {
     return currentPalette || PALETTES.default;
 }
-export function listPalettes() {
-    const result = [];
-    for (const [name, palette] of Object.entries(PALETTES)) {
-        result.push({ name, description: palette.description, custom: false });
-    }
-    ensureDir(PALETTES_DIR);
-    try {
-        const files = fs.readdirSync(PALETTES_DIR);
-        for (const file of files) {
-            if (file.endsWith('.json')) {
-                const name = file.slice(0, -5);
-                if (!PALETTES[name]) {
-                    const raw = loadCustomJSON(path.join(PALETTES_DIR, file));
-                    if (raw) {
-                        const palette = validatePalette(raw);
-                        if (palette) {
-                            result.push({ name, description: palette.description || '', custom: true });
-                        }
-                    }
-                }
-            }
-        }
-    }
-    catch {
-        // Directory read failed
-    }
-    return result;
-}
-// ============================================================================
-// HUD Apply
-// ============================================================================
-export function applyHUD(skinName, paletteName, _companionName) {
-    applySkin(skinName);
-    applyPalette(paletteName);
-}
-// ============================================================================
-// Discovery
-// ============================================================================
-export function discoverSkins() {
-    const result = Object.values(SKINS);
-    ensureDir(SKINS_DIR);
-    try {
-        const files = fs.readdirSync(SKINS_DIR);
-        for (const file of files) {
-            if (file.endsWith('.json')) {
-                const raw = loadCustomJSON(path.join(SKINS_DIR, file));
-                if (raw) {
-                    const skin = validateSkin(raw);
-                    if (skin && skin.name && !SKINS[skin.name]) {
-                        result.push(skin);
-                    }
-                }
-            }
-        }
-    }
-    catch {
-        // Directory read failed
-    }
-    return result;
-}
-export function discoverPalettes() {
-    const result = Object.values(PALETTES);
-    ensureDir(PALETTES_DIR);
-    try {
-        const files = fs.readdirSync(PALETTES_DIR);
-        for (const file of files) {
-            if (file.endsWith('.json')) {
-                const raw = loadCustomJSON(path.join(PALETTES_DIR, file));
-                if (raw) {
-                    const palette = validatePalette(raw);
-                    if (palette && palette.name && !PALETTES[palette.name]) {
-                        result.push(palette);
-                    }
-                }
-            }
-        }
-    }
-    catch {
-        // Directory read failed
-    }
-    return result;
-}
 // ============================================================================
 // Helpers
 // ============================================================================
@@ -430,19 +99,7 @@ export function getInkBorderStyle(skin) {
     };
     return map[s.borders.style] || 'round';
 }
-// ============================================================================
-// Save custom skin/palette
-// ============================================================================
-export function saveCustomSkin(skin) {
-    ensureDir(SKINS_DIR);
-    fs.writeFileSync(path.join(SKINS_DIR, `${skin.name}.json`), JSON.stringify(skin, null, 2));
-}
-export function saveCustomPalette(palette) {
-    ensureDir(PALETTES_DIR);
-    fs.writeFileSync(path.join(PALETTES_DIR, `${palette.name}.json`), JSON.stringify(palette, null, 2));
-}
 export function clearHUDCache() {
-    currentSkin = null;
     currentPalette = null;
 }
 //# sourceMappingURL=api.js.map