@code-yeongyu/senpi 2026.6.21 → 2026.6.30

package/dist/core/extensions/builtin/hooks/plugin-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-loader.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/plugin-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACN,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,QAAQ,EAER,aAAa,EAGb,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,aAAa,GACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAgB9C,MAAM,UAAU,sBAAsB,CAAC,OAAsC;IAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC;IAC3D,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,YAAY,CAAC;YAC3B,YAAY;YACZ,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,GAAG;YACH,YAAY;YACZ,UAAU;YACV,UAAU,EAAE,YAAY;SACxB,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CACf,UAAU,CACT,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,+BAA+B,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EACpG,MAAM,CACN,CACD,CAAC;QACF,OAAO,WAAW,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,YAAY,EAAE,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;QACrG,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QACjG,CAAC;aAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;IACF,CAAC;IAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,mBAAmB,KAAK,KAAK,IAAI,WAAW,CAAC,EAAE,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7F,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;IAED,OAAO,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC3C,OAA8B,EAC9B,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;IACtC,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;AAC/B,CAAC;AAED,SAAS,sBAAsB,CAC9B,QAAiB,EACjB,OAAsC,EACtC,GAAkB,EAClB,YAAoB,EACpB,WAA6B;IAE7B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,WAAW,CAAC,IAAI,CACf,UAAU,CACT,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,oCAAoC,EAAE,IAAI,EAAE,GAAG,EAAE,EAClF,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CACzC,CACD,CAAC;QACF,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,OAAO,mBAAmB,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,mBAAmB,CAC3B,KAAc,EACd,IAAY,EACZ,OAAsC,EACtC,GAAkB,EAClB,YAAoB,EACpB,WAA6B;IAE7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,WAAW,CAAC,IAAI,CACf,UAAU,CACT,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,EACzD,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CACzC,CACD,CAAC;YACF,OAAO,EAAE,CAAC;QACX,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,WAAW,CAAC,IAAI,CACf,UAAU,CACT,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,oCAAoC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAC5F,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAC1C,CACD,CAAC;YACF,OAAO,EAAE,CAAC;QACX,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,OAAO,EAAE,CAAC;IACX,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,WAAW,CAAC,IAAI,CACf,UAAU,CACT,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sDAAsD,EAAE,IAAI,EAAE,EAC/F,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CACzC,CACD,CAAC;IACF,OAAO,EAAE,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CACnB,MAAkC,EAClC,OAAsC,EACtC,GAAkB,EAClB,YAAoB,EACpB,WAA6B;IAE7B,MAAM,OAAO,GAA+B,EAAE,CAAC;IAC/C,MAAM,kBAAkB,GAA4B,EAAE,CAAC;IACvD,MAAM,gBAAgB,GAAqB,EAAE,CAAC;IAE9C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,YAAY,CAAC;YAC3B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,aAAa;YACnD,YAAY,EAAE,OAAO,CAAC,YAAY,GAAG,KAAK;YAC1C,GAAG;YACH,YAAY;YACZ,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;YACvC,UAAU,EAAE,KAAK,CAAC,GAAG;SACrB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACjD,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACP,gBAAgB,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,CAAC;YAC7C,CAAC;QACF,CAAC;QACD,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO;QACN,WAAW,EAAE,CAAC,GAAG,WAAW,EAAE,GAAG,gBAAgB,CAAC;QAClD,MAAM,EAAE,EAAE,WAAW,EAAE,gBAAgB,EAAE,kBAAkB,EAAE;QAC7D,OAAO;KACP,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,WAAsC;IAC1D,OAAO;QACN,WAAW;QACX,MAAM,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,EAAE,EAAE;QAC/C,OAAO,EAAE,EAAE;KACX,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import { join, resolve } from \"node:path\";\nimport { diagnostic } from \"./diagnostics.ts\";\nimport {\n\tbuildPluginEnv,\n\tDEFAULT_HOOK_PATH,\n\tdirectoryExists,\n\tfileExists,\n\tisRecord,\n\ttype LoadPluginHookManifestOptions,\n\tMANIFEST_PATH,\n\ttype PluginHookEnv,\n\ttype PluginHookSourceMetadata,\n\tpluginSource,\n\treadJsonFile,\n\tresolveContainedPath,\n\tsourceForPath,\n} from \"./plugin-manifest.ts\";\nimport { validateHookHandlerSafety } from \"./safety.ts\";\nimport { parseHookConfig } from \"./schema.ts\";\nimport type { ExecutableHookHandler, HookDiagnostic, ParsedHookConfig } from \"./types.ts\";\n\nexport type { LoadPluginHookManifestOptions, PluginHookEnv, PluginHookSourceMetadata } from \"./plugin-manifest.ts\";\n\nexport type PluginHookManifestLoadResult = {\n\treadonly sources: readonly PluginHookSourceMetadata[];\n\treadonly parsed: ParsedHookConfig;\n\treadonly diagnostics: readonly HookDiagnostic[];\n};\n\ntype HookSourceDraft = {\n\treadonly key: string;\n\treadonly config: unknown;\n};\n\nexport function loadPluginHookManifest(options: LoadPluginHookManifestOptions): PluginHookManifestLoadResult {\n\tconst pluginRoot = resolve(options.pluginRoot);\n\tconst manifestPath = join(pluginRoot, MANIFEST_PATH);\n\tconst env = buildPluginEnv(pluginRoot, options.dataRoot);\n\tconst discoveredAt = options.discoveredAt ?? \"pre-session\";\n\tconst diagnostics: HookDiagnostic[] = [];\n\tconst drafts: HookSourceDraft[] = [];\n\n\tif (!directoryExists(pluginRoot)) {\n\t\tconst source = pluginSource({\n\t\t\tdiscoveredAt,\n\t\t\tdisplayOrder: options.displayOrder,\n\t\t\tenv,\n\t\t\tmanifestPath,\n\t\t\tpluginRoot,\n\t\t\tsourcePath: manifestPath,\n\t\t});\n\t\tdiagnostics.push(\n\t\t\tdiagnostic(\n\t\t\t\t{ code: \"invalid_root\", message: `Plugin root does not exist: ${pluginRoot}`, path: \"$.pluginRoot\" },\n\t\t\t\tsource,\n\t\t\t),\n\t\t);\n\t\treturn emptyResult(diagnostics);\n\t}\n\n\tif (fileExists(manifestPath)) {\n\t\tconst manifest = readJsonFile(manifestPath, manifestPath, sourceForPath(options, env, manifestPath));\n\t\tif (manifest.ok) {\n\t\t\tdrafts.push(...readManifestHookDrafts(manifest.value, options, env, manifestPath, diagnostics));\n\t\t} else {\n\t\t\tdiagnostics.push(manifest.diagnostic);\n\t\t}\n\t}\n\n\tconst defaultPath = resolveContainedPath(pluginRoot, DEFAULT_HOOK_PATH);\n\tif (options.includeDefaultHooks !== false && defaultPath.ok && fileExists(defaultPath.path)) {\n\t\tconst source = sourceForPath(options, env, defaultPath.path);\n\t\tconst config = readJsonFile(defaultPath.path, manifestPath, source);\n\t\tif (config.ok) {\n\t\t\tdrafts.push({ config: config.value, key: defaultPath.path });\n\t\t} else {\n\t\t\tdiagnostics.push(config.diagnostic);\n\t\t}\n\t}\n\n\treturn parseDrafts(drafts, options, env, manifestPath, diagnostics);\n}\n\nexport function selectHookCommandForPlatform(\n\thandler: ExecutableHookHandler,\n\tplatform: NodeJS.Platform = process.platform,\n): string {\n\tif (platform === \"win32\" && handler.config.commandWindows !== undefined) {\n\t\treturn handler.config.commandWindows;\n\t}\n\treturn handler.config.command;\n}\n\nfunction readManifestHookDrafts(\n\tmanifest: unknown,\n\toptions: LoadPluginHookManifestOptions,\n\tenv: PluginHookEnv,\n\tmanifestPath: string,\n\tdiagnostics: HookDiagnostic[],\n): HookSourceDraft[] {\n\tif (!isRecord(manifest)) {\n\t\tdiagnostics.push(\n\t\t\tdiagnostic(\n\t\t\t\t{ code: \"invalid_root\", message: \"Plugin manifest must be an object.\", path: \"$\" },\n\t\t\t\tsourceForPath(options, env, manifestPath),\n\t\t\t),\n\t\t);\n\t\treturn [];\n\t}\n\n\tconst hooks = manifest.hooks;\n\tif (hooks === undefined) {\n\t\treturn [];\n\t}\n\treturn normalizeHookDrafts(hooks, \"$.hooks\", options, env, manifestPath, diagnostics);\n}\n\nfunction normalizeHookDrafts(\n\tvalue: unknown,\n\tpath: string,\n\toptions: LoadPluginHookManifestOptions,\n\tenv: PluginHookEnv,\n\tmanifestPath: string,\n\tdiagnostics: HookDiagnostic[],\n): HookSourceDraft[] {\n\tif (typeof value === \"string\") {\n\t\tconst resolved = resolveContainedPath(options.pluginRoot, value);\n\t\tif (!resolved.ok) {\n\t\t\tdiagnostics.push(\n\t\t\t\tdiagnostic(\n\t\t\t\t\t{ code: \"invalid_root\", message: resolved.message, path },\n\t\t\t\t\tsourceForPath(options, env, manifestPath),\n\t\t\t\t),\n\t\t\t);\n\t\t\treturn [];\n\t\t}\n\t\tif (!fileExists(resolved.path)) {\n\t\t\tdiagnostics.push(\n\t\t\t\tdiagnostic(\n\t\t\t\t\t{ code: \"invalid_root\", message: `Plugin hook file does not exist: ${resolved.path}`, path },\n\t\t\t\t\tsourceForPath(options, env, resolved.path),\n\t\t\t\t),\n\t\t\t);\n\t\t\treturn [];\n\t\t}\n\t\tconst source = sourceForPath(options, env, resolved.path);\n\t\tconst parsed = readJsonFile(resolved.path, manifestPath, source);\n\t\tif (parsed.ok) {\n\t\t\treturn [{ config: parsed.value, key: resolved.path }];\n\t\t}\n\t\tdiagnostics.push(parsed.diagnostic);\n\t\treturn [];\n\t}\n\n\tif (Array.isArray(value)) {\n\t\tconst drafts: HookSourceDraft[] = [];\n\t\tfor (const [index, item] of value.entries()) {\n\t\t\tdrafts.push(...normalizeHookDrafts(item, `${path}[${index}]`, options, env, manifestPath, diagnostics));\n\t\t}\n\t\treturn drafts;\n\t}\n\n\tif (isRecord(value)) {\n\t\treturn [{ config: value, key: `${manifestPath}#${inlineKeyPath(path)}` }];\n\t}\n\n\tdiagnostics.push(\n\t\tdiagnostic(\n\t\t\t{ code: \"invalid_root\", message: \"Plugin manifest hooks must be a path or hook object.\", path },\n\t\t\tsourceForPath(options, env, manifestPath),\n\t\t),\n\t);\n\treturn [];\n}\n\nfunction parseDrafts(\n\tdrafts: readonly HookSourceDraft[],\n\toptions: LoadPluginHookManifestOptions,\n\tenv: PluginHookEnv,\n\tmanifestPath: string,\n\tdiagnostics: HookDiagnostic[],\n): PluginHookManifestLoadResult {\n\tconst sources: PluginHookSourceMetadata[] = [];\n\tconst executableHandlers: ExecutableHookHandler[] = [];\n\tconst parseDiagnostics: HookDiagnostic[] = [];\n\n\tfor (const [index, draft] of drafts.entries()) {\n\t\tconst source = pluginSource({\n\t\t\tdiscoveredAt: options.discoveredAt ?? \"pre-session\",\n\t\t\tdisplayOrder: options.displayOrder + index,\n\t\t\tenv,\n\t\t\tmanifestPath,\n\t\t\tpluginRoot: resolve(options.pluginRoot),\n\t\t\tsourcePath: draft.key,\n\t\t});\n\t\tsources.push(source);\n\t\tconst parsed = parseHookConfig(draft.config, source);\n\t\tfor (const handler of parsed.executableHandlers) {\n\t\t\tconst safetyDiagnostics = validateHookHandlerSafety(handler);\n\t\t\tif (safetyDiagnostics.length === 0) {\n\t\t\t\texecutableHandlers.push(handler);\n\t\t\t} else {\n\t\t\t\tparseDiagnostics.push(...safetyDiagnostics);\n\t\t\t}\n\t\t}\n\t\tparseDiagnostics.push(...parsed.diagnostics);\n\t}\n\n\treturn {\n\t\tdiagnostics: [...diagnostics, ...parseDiagnostics],\n\t\tparsed: { diagnostics: parseDiagnostics, executableHandlers },\n\t\tsources,\n\t};\n}\n\nfunction emptyResult(diagnostics: readonly HookDiagnostic[]): PluginHookManifestLoadResult {\n\treturn {\n\t\tdiagnostics,\n\t\tparsed: { diagnostics, executableHandlers: [] },\n\t\tsources: [],\n\t};\n}\n\nfunction inlineKeyPath(path: string): string {\n\treturn path.replace(/^\\$\\.?/, \"\");\n}\n"]}

package/dist/core/extensions/builtin/hooks/plugin-manifest.d.ts

@@ -0,0 +1,47 @@
+import type { HookDiagnostic, HookDiscoveryTiming, HookSourceMetadata } from "./types.ts";
+export declare const MANIFEST_PATH = ".codex-plugin/plugin.json";
+export declare const DEFAULT_HOOK_PATH = "hooks/hooks.json";
+export type PluginHookEnv = {
+    readonly PLUGIN_ROOT: string;
+    readonly PLUGIN_DATA: string;
+    readonly CLAUDE_PLUGIN_ROOT: string;
+    readonly CLAUDE_PLUGIN_DATA: string;
+};
+export type PluginHookSourceMetadata = HookSourceMetadata & {
+    readonly pluginEnv: PluginHookEnv;
+};
+export type LoadPluginHookManifestOptions = {
+    readonly pluginRoot: string;
+    readonly displayOrder: number;
+    readonly discoveredAt?: HookDiscoveryTiming;
+    readonly dataRoot?: string;
+    readonly includeDefaultHooks?: boolean;
+};
+export declare function buildPluginEnv(pluginRoot: string, dataRoot: string | undefined): PluginHookEnv;
+export declare function pluginSource(input: {
+    readonly discoveredAt: HookDiscoveryTiming;
+    readonly displayOrder: number;
+    readonly env: PluginHookEnv;
+    readonly manifestPath: string;
+    readonly pluginRoot: string;
+    readonly sourcePath: string;
+}): PluginHookSourceMetadata;
+export declare function sourceForPath(options: LoadPluginHookManifestOptions, env: PluginHookEnv, sourcePath: string): PluginHookSourceMetadata;
+export declare function resolveContainedPath(pluginRootInput: string, manifestPathInput: string): {
+    readonly ok: true;
+    readonly path: string;
+} | {
+    readonly ok: false;
+    readonly message: string;
+};
+export declare function readJsonFile(path: string, manifestPath: string, source: PluginHookSourceMetadata): {
+    readonly ok: true;
+    readonly value: unknown;
+} | {
+    readonly ok: false;
+    readonly diagnostic: HookDiagnostic;
+};
+export declare function fileExists(path: string): boolean;
+export declare function directoryExists(path: string): boolean;
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+//# sourceMappingURL=plugin-manifest.d.ts.map

package/dist/core/extensions/builtin/hooks/plugin-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-manifest.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/plugin-manifest.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE1F,eAAO,MAAM,aAAa,8BAA8B,CAAC;AACzD,eAAO,MAAM,iBAAiB,qBAAqB,CAAC;AAEpD,MAAM,MAAM,aAAa,GAAG;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG;IAC3D,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACvC,CAAC;AAEF,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,CAQ9F;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE;IACnC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B,GAAG,wBAAwB,CAU3B;AAED,wBAAgB,aAAa,CAC5B,OAAO,EAAE,6BAA6B,EACtC,GAAG,EAAE,aAAa,EAClB,UAAU,EAAE,MAAM,GAChB,wBAAwB,CAU1B;AAED,wBAAgB,oBAAoB,CACnC,eAAe,EAAE,MAAM,EACvB,iBAAiB,EAAE,MAAM,GACvB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAoBjG;AAED,wBAAgB,YAAY,CAC3B,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,wBAAwB,GAC9B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAA;CAAE,CAgB9G;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE"}

package/dist/core/extensions/builtin/hooks/plugin-manifest.js

@@ -0,0 +1,86 @@
+import { existsSync, readFileSync, realpathSync, statSync } from "node:fs";
+import { isAbsolute, join, relative, resolve } from "node:path";
+import { diagnostic } from "./diagnostics.js";
+export const MANIFEST_PATH = ".codex-plugin/plugin.json";
+export const DEFAULT_HOOK_PATH = "hooks/hooks.json";
+export function buildPluginEnv(pluginRoot, dataRoot) {
+    const pluginData = dataRoot === undefined ? join(pluginRoot, ".plugin-data") : resolve(dataRoot);
+    return {
+        CLAUDE_PLUGIN_DATA: pluginData,
+        CLAUDE_PLUGIN_ROOT: pluginRoot,
+        PLUGIN_DATA: pluginData,
+        PLUGIN_ROOT: pluginRoot,
+    };
+}
+export function pluginSource(input) {
+    return {
+        discoveredAt: input.discoveredAt,
+        displayOrder: input.displayOrder,
+        manifestPath: input.manifestPath,
+        pluginEnv: input.env,
+        pluginRoot: input.pluginRoot,
+        scope: "plugin",
+        sourcePath: input.sourcePath,
+    };
+}
+export function sourceForPath(options, env, sourcePath) {
+    const pluginRoot = resolve(options.pluginRoot);
+    return pluginSource({
+        discoveredAt: options.discoveredAt ?? "pre-session",
+        displayOrder: options.displayOrder,
+        env,
+        manifestPath: join(pluginRoot, MANIFEST_PATH),
+        pluginRoot,
+        sourcePath,
+    });
+}
+export function resolveContainedPath(pluginRootInput, manifestPathInput) {
+    const pluginRoot = resolve(pluginRootInput);
+    const normalizedInput = manifestPathInput.replaceAll("\\", "/").replace(/^\.\//, "");
+    const resolvedPath = isAbsolute(normalizedInput) ? resolve(normalizedInput) : resolve(pluginRoot, normalizedInput);
+    if (!isContained(pluginRoot, resolvedPath)) {
+        return {
+            message: `Plugin hook path is outside plugin root: ${manifestPathInput}`,
+            ok: false,
+        };
+    }
+    if (fileExists(resolvedPath)) {
+        const realPath = realpathSync(resolvedPath);
+        if (!isContained(realpathSync(pluginRoot), realPath)) {
+            return {
+                message: `Plugin hook path is outside plugin root: ${manifestPathInput}`,
+                ok: false,
+            };
+        }
+    }
+    return { ok: true, path: resolvedPath };
+}
+export function readJsonFile(path, manifestPath, source) {
+    try {
+        const value = JSON.parse(readFileSync(path, "utf-8"));
+        return { ok: true, value };
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            return {
+                diagnostic: diagnostic({ code: "invalid_root", message: `Could not read plugin hook JSON: ${error.message}`, path: "$" }, { ...source, manifestPath }),
+                ok: false,
+            };
+        }
+        throw error;
+    }
+}
+export function fileExists(path) {
+    return existsSync(path) && statSync(path).isFile();
+}
+export function directoryExists(path) {
+    return existsSync(path) && statSync(path).isDirectory();
+}
+export function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isContained(root, target) {
+    const rel = relative(root, target);
+    return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
+}
+//# sourceMappingURL=plugin-manifest.js.map

package/dist/core/extensions/builtin/hooks/plugin-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-manifest.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/plugin-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,CAAC,MAAM,aAAa,GAAG,2BAA2B,CAAC;AACzD,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAqBpD,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,QAA4B;IAC9E,MAAM,UAAU,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjG,OAAO;QACN,kBAAkB,EAAE,UAAU;QAC9B,kBAAkB,EAAE,UAAU;QAC9B,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,UAAU;KACvB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAO5B;IACA,OAAO;QACN,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,GAAG;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,QAAQ;QACf,UAAU,EAAE,KAAK,CAAC,UAAU;KAC5B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC5B,OAAsC,EACtC,GAAkB,EAClB,UAAkB;IAElB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO,YAAY,CAAC;QACnB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,aAAa;QACnD,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,GAAG;QACH,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC;QAC7C,UAAU;QACV,UAAU;KACV,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,eAAuB,EACvB,iBAAyB;IAEzB,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACnH,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5C,OAAO;YACN,OAAO,EAAE,4CAA4C,iBAAiB,EAAE;YACxE,EAAE,EAAE,KAAK;SACT,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtD,OAAO;gBACN,OAAO,EAAE,4CAA4C,iBAAiB,EAAE;gBACxE,EAAE,EAAE,KAAK;aACT,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,YAAY,CAC3B,IAAY,EACZ,YAAoB,EACpB,MAAgC;IAEhC,IAAI,CAAC;QACJ,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC5B,OAAO;gBACN,UAAU,EAAE,UAAU,CACrB,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,oCAAoC,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EACjG,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,CAC3B;gBACD,EAAE,EAAE,KAAK;aACT,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACtC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC3C,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC","sourcesContent":["import { existsSync, readFileSync, realpathSync, statSync } from \"node:fs\";\nimport { isAbsolute, join, relative, resolve } from \"node:path\";\nimport { diagnostic } from \"./diagnostics.ts\";\nimport type { HookDiagnostic, HookDiscoveryTiming, HookSourceMetadata } from \"./types.ts\";\n\nexport const MANIFEST_PATH = \".codex-plugin/plugin.json\";\nexport const DEFAULT_HOOK_PATH = \"hooks/hooks.json\";\n\nexport type PluginHookEnv = {\n\treadonly PLUGIN_ROOT: string;\n\treadonly PLUGIN_DATA: string;\n\treadonly CLAUDE_PLUGIN_ROOT: string;\n\treadonly CLAUDE_PLUGIN_DATA: string;\n};\n\nexport type PluginHookSourceMetadata = HookSourceMetadata & {\n\treadonly pluginEnv: PluginHookEnv;\n};\n\nexport type LoadPluginHookManifestOptions = {\n\treadonly pluginRoot: string;\n\treadonly displayOrder: number;\n\treadonly discoveredAt?: HookDiscoveryTiming;\n\treadonly dataRoot?: string;\n\treadonly includeDefaultHooks?: boolean;\n};\n\nexport function buildPluginEnv(pluginRoot: string, dataRoot: string | undefined): PluginHookEnv {\n\tconst pluginData = dataRoot === undefined ? join(pluginRoot, \".plugin-data\") : resolve(dataRoot);\n\treturn {\n\t\tCLAUDE_PLUGIN_DATA: pluginData,\n\t\tCLAUDE_PLUGIN_ROOT: pluginRoot,\n\t\tPLUGIN_DATA: pluginData,\n\t\tPLUGIN_ROOT: pluginRoot,\n\t};\n}\n\nexport function pluginSource(input: {\n\treadonly discoveredAt: HookDiscoveryTiming;\n\treadonly displayOrder: number;\n\treadonly env: PluginHookEnv;\n\treadonly manifestPath: string;\n\treadonly pluginRoot: string;\n\treadonly sourcePath: string;\n}): PluginHookSourceMetadata {\n\treturn {\n\t\tdiscoveredAt: input.discoveredAt,\n\t\tdisplayOrder: input.displayOrder,\n\t\tmanifestPath: input.manifestPath,\n\t\tpluginEnv: input.env,\n\t\tpluginRoot: input.pluginRoot,\n\t\tscope: \"plugin\",\n\t\tsourcePath: input.sourcePath,\n\t};\n}\n\nexport function sourceForPath(\n\toptions: LoadPluginHookManifestOptions,\n\tenv: PluginHookEnv,\n\tsourcePath: string,\n): PluginHookSourceMetadata {\n\tconst pluginRoot = resolve(options.pluginRoot);\n\treturn pluginSource({\n\t\tdiscoveredAt: options.discoveredAt ?? \"pre-session\",\n\t\tdisplayOrder: options.displayOrder,\n\t\tenv,\n\t\tmanifestPath: join(pluginRoot, MANIFEST_PATH),\n\t\tpluginRoot,\n\t\tsourcePath,\n\t});\n}\n\nexport function resolveContainedPath(\n\tpluginRootInput: string,\n\tmanifestPathInput: string,\n): { readonly ok: true; readonly path: string } | { readonly ok: false; readonly message: string } {\n\tconst pluginRoot = resolve(pluginRootInput);\n\tconst normalizedInput = manifestPathInput.replaceAll(\"\\\\\", \"/\").replace(/^\\.\\//, \"\");\n\tconst resolvedPath = isAbsolute(normalizedInput) ? resolve(normalizedInput) : resolve(pluginRoot, normalizedInput);\n\tif (!isContained(pluginRoot, resolvedPath)) {\n\t\treturn {\n\t\t\tmessage: `Plugin hook path is outside plugin root: ${manifestPathInput}`,\n\t\t\tok: false,\n\t\t};\n\t}\n\tif (fileExists(resolvedPath)) {\n\t\tconst realPath = realpathSync(resolvedPath);\n\t\tif (!isContained(realpathSync(pluginRoot), realPath)) {\n\t\t\treturn {\n\t\t\t\tmessage: `Plugin hook path is outside plugin root: ${manifestPathInput}`,\n\t\t\t\tok: false,\n\t\t\t};\n\t\t}\n\t}\n\treturn { ok: true, path: resolvedPath };\n}\n\nexport function readJsonFile(\n\tpath: string,\n\tmanifestPath: string,\n\tsource: PluginHookSourceMetadata,\n): { readonly ok: true; readonly value: unknown } | { readonly ok: false; readonly diagnostic: HookDiagnostic } {\n\ttry {\n\t\tconst value: unknown = JSON.parse(readFileSync(path, \"utf-8\"));\n\t\treturn { ok: true, value };\n\t} catch (error) {\n\t\tif (error instanceof Error) {\n\t\t\treturn {\n\t\t\t\tdiagnostic: diagnostic(\n\t\t\t\t\t{ code: \"invalid_root\", message: `Could not read plugin hook JSON: ${error.message}`, path: \"$\" },\n\t\t\t\t\t{ ...source, manifestPath },\n\t\t\t\t),\n\t\t\t\tok: false,\n\t\t\t};\n\t\t}\n\t\tthrow error;\n\t}\n}\n\nexport function fileExists(path: string): boolean {\n\treturn existsSync(path) && statSync(path).isFile();\n}\n\nexport function directoryExists(path: string): boolean {\n\treturn existsSync(path) && statSync(path).isDirectory();\n}\n\nexport function isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isContained(root: string, target: string): boolean {\n\tconst rel = relative(root, target);\n\treturn rel === \"\" || (!rel.startsWith(\"..\") && !isAbsolute(rel));\n}\n"]}

package/dist/core/extensions/builtin/hooks/prompt-adapter.d.ts

@@ -0,0 +1,30 @@
+import type { HookDispatchResult } from "./dispatcher.ts";
+import type { HookDiagnostic, HookInputWire } from "./types.ts";
+export declare const HOOK_CUSTOM_MESSAGE_TYPE = "senpi.hook";
+export declare const USER_PROMPT_BLOCK_REASON = "UserPromptSubmit hook blocked the prompt.";
+export type UserPromptHookInputOptions = {
+    readonly cwd: string;
+    readonly permissionMode: string;
+    readonly prompt: string;
+    readonly sessionId: string;
+    readonly transcriptPath?: string;
+};
+export type PendingPromptHookContext = {
+    readonly additionalContext: readonly string[];
+    readonly diagnostics: readonly HookDiagnostic[];
+    readonly systemMessages: readonly string[];
+};
+export declare function buildUserPromptHookInput(options: UserPromptHookInputOptions): HookInputWire;
+export declare function promptContextFromResult(result: HookDispatchResult): PendingPromptHookContext | undefined;
+export declare function promptBlockReasonFromResult(result: HookDispatchResult): string;
+export declare function formatPromptContextMessage(pending: PendingPromptHookContext): string | undefined;
+export declare function appendSystemMessages(systemPrompt: string, messages: readonly string[]): string;
+export declare function safeDiagnosticDetails(diagnostic: HookDiagnostic): {
+    readonly code: HookDiagnostic["code"];
+    readonly event?: string;
+    readonly message: string;
+    readonly path: string;
+    readonly severity: HookDiagnostic["severity"];
+    readonly sourcePath: string;
+};
+//# sourceMappingURL=prompt-adapter.d.ts.map

package/dist/core/extensions/builtin/hooks/prompt-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-adapter.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/prompt-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhE,eAAO,MAAM,wBAAwB,eAAe,CAAC;AACrD,eAAO,MAAM,wBAAwB,8CAA8C,CAAC;AAEpF,MAAM,MAAM,0BAA0B,GAAG;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACtC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,SAAS,cAAc,EAAE,CAAC;IAChD,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,0BAA0B,GAAG,aAAa,CAS3F;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,GAAG,wBAAwB,GAAG,SAAS,CAaxG;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAU9E;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,GAAG,SAAS,CAGhG;AAED,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAG9F;AAED,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,cAAc,GAAG;IAClE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B,CASA"}

package/dist/core/extensions/builtin/hooks/prompt-adapter.js

@@ -0,0 +1,59 @@
+export const HOOK_CUSTOM_MESSAGE_TYPE = "senpi.hook";
+export const USER_PROMPT_BLOCK_REASON = "UserPromptSubmit hook blocked the prompt.";
+export function buildUserPromptHookInput(options) {
+    return {
+        cwd: options.cwd,
+        event: "UserPromptSubmit",
+        permission_mode: options.permissionMode,
+        prompt: options.prompt,
+        session_id: options.sessionId,
+        ...(options.transcriptPath === undefined ? {} : { transcript_path: options.transcriptPath }),
+    };
+}
+export function promptContextFromResult(result) {
+    const additionalContext = [];
+    const systemMessages = [];
+    for (const summary of result.summaries) {
+        const context = summary.output.additionalContext;
+        if (context !== undefined)
+            additionalContext.push(context);
+        const systemMessage = summary.output.systemMessage;
+        if (systemMessage !== undefined)
+            systemMessages.push(systemMessage);
+    }
+    if (additionalContext.length === 0 && systemMessages.length === 0 && result.diagnostics.length === 0) {
+        return undefined;
+    }
+    return { additionalContext, diagnostics: result.diagnostics, systemMessages };
+}
+export function promptBlockReasonFromResult(result) {
+    if (result.decision.kind !== "block")
+        return USER_PROMPT_BLOCK_REASON;
+    const sourcePath = result.decision.source.sourcePath;
+    const blocker = result.summaries.find((summary) => (summary.output.decision === "block" || summary.output.decision === "deny") &&
+        summary.handler.source.sourcePath === sourcePath);
+    if (blocker?.run.exitCode === 2)
+        return USER_PROMPT_BLOCK_REASON;
+    return result.decision.reason ?? USER_PROMPT_BLOCK_REASON;
+}
+export function formatPromptContextMessage(pending) {
+    if (pending.additionalContext.length === 0)
+        return undefined;
+    return pending.additionalContext.join("\n\n");
+}
+export function appendSystemMessages(systemPrompt, messages) {
+    if (messages.length === 0)
+        return systemPrompt;
+    return `${systemPrompt}\n\n${messages.join("\n\n")}`;
+}
+export function safeDiagnosticDetails(diagnostic) {
+    return {
+        code: diagnostic.code,
+        ...(diagnostic.event === undefined ? {} : { event: diagnostic.event }),
+        message: diagnostic.message,
+        path: diagnostic.path,
+        severity: diagnostic.severity,
+        sourcePath: diagnostic.source.sourcePath,
+    };
+}
+//# sourceMappingURL=prompt-adapter.js.map

package/dist/core/extensions/builtin/hooks/prompt-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-adapter.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/prompt-adapter.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAAC;AACrD,MAAM,CAAC,MAAM,wBAAwB,GAAG,2CAA2C,CAAC;AAgBpF,MAAM,UAAU,wBAAwB,CAAC,OAAmC;IAC3E,OAAO;QACN,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,kBAAkB;QACzB,eAAe,EAAE,OAAO,CAAC,cAAc;QACvC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;KAC5F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAA0B;IACjE,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACjD,IAAI,OAAO,KAAK,SAAS;YAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;QACnD,IAAI,aAAa,KAAK,SAAS;YAAE,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAA0B;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,wBAAwB,CAAC;IACtE,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CACpC,CAAC,OAAO,EAAE,EAAE,CACX,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC;QAC3E,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CACjD,CAAC;IACF,IAAI,OAAO,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,wBAAwB,CAAC;IACjE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,wBAAwB,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAiC;IAC3E,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7D,OAAO,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,YAAoB,EAAE,QAA2B;IACrF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAC/C,OAAO,GAAG,YAAY,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAA0B;IAQ/D,OAAO;QACN,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACtE,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU;KACxC,CAAC;AACH,CAAC","sourcesContent":["import type { HookDispatchResult } from \"./dispatcher.ts\";\nimport type { HookDiagnostic, HookInputWire } from \"./types.ts\";\n\nexport const HOOK_CUSTOM_MESSAGE_TYPE = \"senpi.hook\";\nexport const USER_PROMPT_BLOCK_REASON = \"UserPromptSubmit hook blocked the prompt.\";\n\nexport type UserPromptHookInputOptions = {\n\treadonly cwd: string;\n\treadonly permissionMode: string;\n\treadonly prompt: string;\n\treadonly sessionId: string;\n\treadonly transcriptPath?: string;\n};\n\nexport type PendingPromptHookContext = {\n\treadonly additionalContext: readonly string[];\n\treadonly diagnostics: readonly HookDiagnostic[];\n\treadonly systemMessages: readonly string[];\n};\n\nexport function buildUserPromptHookInput(options: UserPromptHookInputOptions): HookInputWire {\n\treturn {\n\t\tcwd: options.cwd,\n\t\tevent: \"UserPromptSubmit\",\n\t\tpermission_mode: options.permissionMode,\n\t\tprompt: options.prompt,\n\t\tsession_id: options.sessionId,\n\t\t...(options.transcriptPath === undefined ? {} : { transcript_path: options.transcriptPath }),\n\t};\n}\n\nexport function promptContextFromResult(result: HookDispatchResult): PendingPromptHookContext | undefined {\n\tconst additionalContext: string[] = [];\n\tconst systemMessages: string[] = [];\n\tfor (const summary of result.summaries) {\n\t\tconst context = summary.output.additionalContext;\n\t\tif (context !== undefined) additionalContext.push(context);\n\t\tconst systemMessage = summary.output.systemMessage;\n\t\tif (systemMessage !== undefined) systemMessages.push(systemMessage);\n\t}\n\tif (additionalContext.length === 0 && systemMessages.length === 0 && result.diagnostics.length === 0) {\n\t\treturn undefined;\n\t}\n\treturn { additionalContext, diagnostics: result.diagnostics, systemMessages };\n}\n\nexport function promptBlockReasonFromResult(result: HookDispatchResult): string {\n\tif (result.decision.kind !== \"block\") return USER_PROMPT_BLOCK_REASON;\n\tconst sourcePath = result.decision.source.sourcePath;\n\tconst blocker = result.summaries.find(\n\t\t(summary) =>\n\t\t\t(summary.output.decision === \"block\" || summary.output.decision === \"deny\") &&\n\t\t\tsummary.handler.source.sourcePath === sourcePath,\n\t);\n\tif (blocker?.run.exitCode === 2) return USER_PROMPT_BLOCK_REASON;\n\treturn result.decision.reason ?? USER_PROMPT_BLOCK_REASON;\n}\n\nexport function formatPromptContextMessage(pending: PendingPromptHookContext): string | undefined {\n\tif (pending.additionalContext.length === 0) return undefined;\n\treturn pending.additionalContext.join(\"\\n\\n\");\n}\n\nexport function appendSystemMessages(systemPrompt: string, messages: readonly string[]): string {\n\tif (messages.length === 0) return systemPrompt;\n\treturn `${systemPrompt}\\n\\n${messages.join(\"\\n\\n\")}`;\n}\n\nexport function safeDiagnosticDetails(diagnostic: HookDiagnostic): {\n\treadonly code: HookDiagnostic[\"code\"];\n\treadonly event?: string;\n\treadonly message: string;\n\treadonly path: string;\n\treadonly severity: HookDiagnostic[\"severity\"];\n\treadonly sourcePath: string;\n} {\n\treturn {\n\t\tcode: diagnostic.code,\n\t\t...(diagnostic.event === undefined ? {} : { event: diagnostic.event }),\n\t\tmessage: diagnostic.message,\n\t\tpath: diagnostic.path,\n\t\tseverity: diagnostic.severity,\n\t\tsourcePath: diagnostic.source.sourcePath,\n\t};\n}\n"]}

package/dist/core/extensions/builtin/hooks/safety.d.ts

@@ -0,0 +1,14 @@
+import type { ExecutableHookHandler, HookDiagnostic, HookInputWire } from "./types.ts";
+export { applyHookOutputSafety, DEFAULT_STDERR_LIMIT_BYTES, DEFAULT_STDOUT_LIMIT_BYTES, type HookOutputPolicy, type HookOutputSafetyMetadata, type HookSafeOutput, type HookStreamSafetyMetadata, } from "./output-bounds.ts";
+export declare const DEFAULT_HOOK_TIMEOUT_SECONDS = 600;
+type HookEnvironmentOptions = {
+    readonly handler: ExecutableHookHandler;
+    readonly input: HookInputWire;
+    readonly sourceEnv: NodeJS.ProcessEnv;
+    readonly envPassthrough?: readonly string[];
+};
+export declare function resolveHookTimeoutSeconds(handler: ExecutableHookHandler): number;
+export declare function isValidHookTimeoutSeconds(timeout: number): boolean;
+export declare function buildHookEnvironment(options: HookEnvironmentOptions): NodeJS.ProcessEnv;
+export declare function validateHookHandlerSafety(handler: ExecutableHookHandler): readonly HookDiagnostic[];
+//# sourceMappingURL=safety.d.ts.map

package/dist/core/extensions/builtin/hooks/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/safety.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,aAAa,EAAsB,MAAM,YAAY,CAAC;AAE3G,OAAO,EACN,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAC1B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,wBAAwB,GAC7B,MAAM,oBAAoB,CAAC;AAE5B,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAmBhD,KAAK,sBAAsB,GAAG;IAC7B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C,CAAC;AAOF,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAShF;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAAC,UAAU,CAoBvF;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,qBAAqB,GAAG,SAAS,cAAc,EAAE,CAQnG"}

package/dist/core/extensions/builtin/hooks/safety.js

@@ -0,0 +1,179 @@
+import { existsSync, realpathSync } from "node:fs";
+import { isAbsolute, relative, resolve } from "node:path";
+import { diagnostic } from "./diagnostics.js";
+export { applyHookOutputSafety, DEFAULT_STDERR_LIMIT_BYTES, DEFAULT_STDOUT_LIMIT_BYTES, } from "./output-bounds.js";
+export const DEFAULT_HOOK_TIMEOUT_SECONDS = 600;
+const MINIMAL_INHERITED_ENV = [
+    "PATH",
+    "HOME",
+    "USER",
+    "USERNAME",
+    "LOGNAME",
+    "SHELL",
+    "TMPDIR",
+    "TMP",
+    "TEMP",
+    "SystemRoot",
+    "ComSpec",
+    "PATHEXT",
+];
+const PLUGIN_ROOT_TEMPLATE_TOKEN = "$" + "{PLUGIN_ROOT}";
+const PLUGIN_ROOT_TOKENS = [PLUGIN_ROOT_TEMPLATE_TOKEN, "$PLUGIN_ROOT", "%PLUGIN_ROOT%"];
+export function resolveHookTimeoutSeconds(handler) {
+    const timeout = handler.config.timeout;
+    if (timeout === undefined) {
+        return DEFAULT_HOOK_TIMEOUT_SECONDS;
+    }
+    if (!isValidHookTimeoutSeconds(timeout)) {
+        throw new Error("Invalid command hook timeout reached runtime execution.");
+    }
+    return timeout;
+}
+export function isValidHookTimeoutSeconds(timeout) {
+    return Number.isFinite(timeout) && timeout > 0;
+}
+export function buildHookEnvironment(options) {
+    const env = {};
+    for (const key of MINIMAL_INHERITED_ENV) {
+        const value = options.sourceEnv[key];
+        if (value !== undefined)
+            env[key] = value;
+    }
+    for (const key of options.envPassthrough ?? []) {
+        const value = options.sourceEnv[key];
+        if (value !== undefined)
+            env[key] = value;
+    }
+    const pluginEnv = pluginEnvForSource(options.handler.source);
+    if (pluginEnv !== undefined) {
+        env.PLUGIN_ROOT = pluginEnv.PLUGIN_ROOT;
+        env.PLUGIN_DATA = pluginEnv.PLUGIN_DATA;
+        env.CLAUDE_PLUGIN_ROOT = pluginEnv.CLAUDE_PLUGIN_ROOT;
+        env.CLAUDE_PLUGIN_DATA = pluginEnv.CLAUDE_PLUGIN_DATA;
+    }
+    env.SENPI_HOOK_SOURCE = options.handler.source.sourcePath;
+    env.SENPI_HOOK_EVENT = options.input.event;
+    return env;
+}
+export function validateHookHandlerSafety(handler) {
+    if (handler.source.scope !== "plugin" || handler.source.pluginRoot === undefined)
+        return [];
+    return [
+        ...validateCommandField(handler, "command", handler.config.command),
+        ...(handler.config.commandWindows === undefined
+            ? []
+            : validateCommandField(handler, "commandWindows", handler.config.commandWindows)),
+    ];
+}
+function validateCommandField(handler, field, command) {
+    const diagnostics = [];
+    for (const target of extractPluginRootTargets(command, handler.source.pluginRoot ?? "")) {
+        const path = `hooks.${handler.event}[${handler.groupIndex}].hooks[${handler.handlerIndex}].${field}`;
+        if (!isContained(resolve(handler.source.pluginRoot ?? ""), target.resolvedPath)) {
+            diagnostics.push(diagnostic({
+                code: "invalid_command_target",
+                event: handler.event,
+                message: `Plugin command target is outside plugin root: ${target.raw}`,
+                path,
+            }, handler.source));
+            continue;
+        }
+        if (!existsSync(target.resolvedPath)) {
+            diagnostics.push(diagnostic({
+                code: "missing_command_target",
+                event: handler.event,
+                message: `Plugin command target does not exist: ${target.raw}`,
+                path,
+            }, handler.source));
+            continue;
+        }
+        const realTarget = realpathSync(target.resolvedPath);
+        const realRoot = realpathSync(resolve(handler.source.pluginRoot ?? ""));
+        if (!isContained(realRoot, realTarget)) {
+            diagnostics.push(diagnostic({
+                code: "invalid_command_target",
+                event: handler.event,
+                message: `Plugin command target resolves outside plugin root: ${target.raw}`,
+                path,
+            }, handler.source));
+        }
+    }
+    return diagnostics;
+}
+function extractPluginRootTargets(command, pluginRoot) {
+    const targets = [];
+    for (const word of readCommandWords(command)) {
+        for (const token of PLUGIN_ROOT_TOKENS) {
+            if (!word.expanded.includes(token))
+                continue;
+            const expanded = word.expanded.replaceAll(token, pluginRoot).replaceAll("\\", "/");
+            targets.push({ raw: word.raw, resolvedPath: resolve(expanded) });
+        }
+    }
+    return targets;
+}
+function readCommandWords(command) {
+    const words = [];
+    let index = 0;
+    while (index < command.length) {
+        while (index < command.length && isCommandWordTerminator(command[index]))
+            index += 1;
+        if (index >= command.length)
+            break;
+        const start = index;
+        let expanded = "";
+        while (index < command.length && !isCommandWordTerminator(command[index])) {
+            const char = command[index];
+            if (char === "'" || char === '"' || char === "`") {
+                const quote = char;
+                index += 1;
+                while (index < command.length && command[index] !== quote) {
+                    expanded += command[index];
+                    index += 1;
+                }
+                if (command[index] === quote)
+                    index += 1;
+                continue;
+            }
+            expanded += char;
+            index += 1;
+        }
+        words.push({ expanded, raw: command.slice(start, index) });
+    }
+    return words;
+}
+function isCommandWordTerminator(char) {
+    return (char === undefined ||
+        char === " " ||
+        char === "\t" ||
+        char === "\n" ||
+        char === ";" ||
+        char === "&" ||
+        char === "|" ||
+        char === "<" ||
+        char === ">" ||
+        char === ")");
+}
+function isContained(root, target) {
+    const rel = relative(root, target);
+    return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
+}
+function pluginEnvForSource(source) {
+    if (!("pluginEnv" in source))
+        return undefined;
+    const pluginEnv = source.pluginEnv;
+    if (!isPluginHookEnv(pluginEnv))
+        return undefined;
+    return pluginEnv;
+}
+function isPluginHookEnv(value) {
+    return (isRecord(value) &&
+        typeof value.PLUGIN_ROOT === "string" &&
+        typeof value.PLUGIN_DATA === "string" &&
+        typeof value.CLAUDE_PLUGIN_ROOT === "string" &&
+        typeof value.CLAUDE_PLUGIN_DATA === "string");
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=safety.js.map

package/dist/core/extensions/builtin/hooks/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI9C,OAAO,EACN,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,GAK1B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEhD,MAAM,qBAAqB,GAAG;IAC7B,MAAM;IACN,MAAM;IACN,MAAM;IACN,UAAU;IACV,SAAS;IACT,OAAO;IACP,QAAQ;IACR,KAAK;IACL,MAAM;IACN,YAAY;IACZ,SAAS;IACT,SAAS;CACA,CAAC;AACX,MAAM,0BAA0B,GAAG,GAAG,GAAG,eAAe,CAAC;AACzD,MAAM,kBAAkB,GAAG,CAAC,0BAA0B,EAAE,cAAc,EAAE,eAAe,CAAU,CAAC;AAclG,MAAM,UAAU,yBAAyB,CAAC,OAA8B;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;IACvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,4BAA4B,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAA+B;IACnE,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3C,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3C,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7B,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;QACxC,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;QACxC,GAAG,CAAC,kBAAkB,GAAG,SAAS,CAAC,kBAAkB,CAAC;QACtD,GAAG,CAAC,kBAAkB,GAAG,SAAS,CAAC,kBAAkB,CAAC;IACvD,CAAC;IACD,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;IAC1D,GAAG,CAAC,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IAC3C,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAA8B;IACvE,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC5F,OAAO;QACN,GAAG,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,oBAAoB,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;KAClF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC5B,OAA8B,EAC9B,KAAmC,EACnC,OAAe;IAEf,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,GAAG,SAAS,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,WAAW,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACrG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACjF,WAAW,CAAC,IAAI,CACf,UAAU,CACT;gBACC,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,iDAAiD,MAAM,CAAC,GAAG,EAAE;gBACtE,IAAI;aACJ,EACD,OAAO,CAAC,MAAM,CACd,CACD,CAAC;YACF,SAAS;QACV,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,WAAW,CAAC,IAAI,CACf,UAAU,CACT;gBACC,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,yCAAyC,MAAM,CAAC,GAAG,EAAE;gBAC9D,IAAI;aACJ,EACD,OAAO,CAAC,MAAM,CACd,CACD,CAAC;YACF,SAAS;QACV,CAAC;QACD,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YACxC,WAAW,CAAC,IAAI,CACf,UAAU,CACT;gBACC,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,uDAAuD,MAAM,CAAC,GAAG,EAAE;gBAC5E,IAAI;aACJ,EACD,OAAO,CAAC,MAAM,CACd,CACD,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe,EAAE,UAAkB;IACpE,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACxC,MAAM,KAAK,GAA0D,EAAE,CAAC;IACxE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/B,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QACrF,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM;QAEnC,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAClD,MAAM,KAAK,GAAG,IAAI,CAAC;gBACnB,KAAK,IAAI,CAAC,CAAC;gBACX,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC3D,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC3B,KAAK,IAAI,CAAC,CAAC;gBACZ,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK;oBAAE,KAAK,IAAI,CAAC,CAAC;gBACzC,SAAS;YACV,CAAC;YACD,QAAQ,IAAI,IAAI,CAAC;YACjB,KAAK,IAAI,CAAC,CAAC;QACZ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAwB;IACxD,OAAO,CACN,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,IAAI;QACb,IAAI,KAAK,IAAI;QACb,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,GAAG,CACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA0B;IACrD,IAAI,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ;QAC5C,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ,CAC5C,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["import { existsSync, realpathSync } from \"node:fs\";\nimport { isAbsolute, relative, resolve } from \"node:path\";\nimport { diagnostic } from \"./diagnostics.ts\";\nimport type { PluginHookEnv } from \"./plugin-manifest.ts\";\nimport type { ExecutableHookHandler, HookDiagnostic, HookInputWire, HookSourceMetadata } from \"./types.ts\";\n\nexport {\n\tapplyHookOutputSafety,\n\tDEFAULT_STDERR_LIMIT_BYTES,\n\tDEFAULT_STDOUT_LIMIT_BYTES,\n\ttype HookOutputPolicy,\n\ttype HookOutputSafetyMetadata,\n\ttype HookSafeOutput,\n\ttype HookStreamSafetyMetadata,\n} from \"./output-bounds.ts\";\n\nexport const DEFAULT_HOOK_TIMEOUT_SECONDS = 600;\n\nconst MINIMAL_INHERITED_ENV = [\n\t\"PATH\",\n\t\"HOME\",\n\t\"USER\",\n\t\"USERNAME\",\n\t\"LOGNAME\",\n\t\"SHELL\",\n\t\"TMPDIR\",\n\t\"TMP\",\n\t\"TEMP\",\n\t\"SystemRoot\",\n\t\"ComSpec\",\n\t\"PATHEXT\",\n] as const;\nconst PLUGIN_ROOT_TEMPLATE_TOKEN = \"$\" + \"{PLUGIN_ROOT}\";\nconst PLUGIN_ROOT_TOKENS = [PLUGIN_ROOT_TEMPLATE_TOKEN, \"$PLUGIN_ROOT\", \"%PLUGIN_ROOT%\"] as const;\n\ntype HookEnvironmentOptions = {\n\treadonly handler: ExecutableHookHandler;\n\treadonly input: HookInputWire;\n\treadonly sourceEnv: NodeJS.ProcessEnv;\n\treadonly envPassthrough?: readonly string[];\n};\n\ntype PluginRootTarget = {\n\treadonly raw: string;\n\treadonly resolvedPath: string;\n};\n\nexport function resolveHookTimeoutSeconds(handler: ExecutableHookHandler): number {\n\tconst timeout = handler.config.timeout;\n\tif (timeout === undefined) {\n\t\treturn DEFAULT_HOOK_TIMEOUT_SECONDS;\n\t}\n\tif (!isValidHookTimeoutSeconds(timeout)) {\n\t\tthrow new Error(\"Invalid command hook timeout reached runtime execution.\");\n\t}\n\treturn timeout;\n}\n\nexport function isValidHookTimeoutSeconds(timeout: number): boolean {\n\treturn Number.isFinite(timeout) && timeout > 0;\n}\n\nexport function buildHookEnvironment(options: HookEnvironmentOptions): NodeJS.ProcessEnv {\n\tconst env: NodeJS.ProcessEnv = {};\n\tfor (const key of MINIMAL_INHERITED_ENV) {\n\t\tconst value = options.sourceEnv[key];\n\t\tif (value !== undefined) env[key] = value;\n\t}\n\tfor (const key of options.envPassthrough ?? []) {\n\t\tconst value = options.sourceEnv[key];\n\t\tif (value !== undefined) env[key] = value;\n\t}\n\tconst pluginEnv = pluginEnvForSource(options.handler.source);\n\tif (pluginEnv !== undefined) {\n\t\tenv.PLUGIN_ROOT = pluginEnv.PLUGIN_ROOT;\n\t\tenv.PLUGIN_DATA = pluginEnv.PLUGIN_DATA;\n\t\tenv.CLAUDE_PLUGIN_ROOT = pluginEnv.CLAUDE_PLUGIN_ROOT;\n\t\tenv.CLAUDE_PLUGIN_DATA = pluginEnv.CLAUDE_PLUGIN_DATA;\n\t}\n\tenv.SENPI_HOOK_SOURCE = options.handler.source.sourcePath;\n\tenv.SENPI_HOOK_EVENT = options.input.event;\n\treturn env;\n}\n\nexport function validateHookHandlerSafety(handler: ExecutableHookHandler): readonly HookDiagnostic[] {\n\tif (handler.source.scope !== \"plugin\" || handler.source.pluginRoot === undefined) return [];\n\treturn [\n\t\t...validateCommandField(handler, \"command\", handler.config.command),\n\t\t...(handler.config.commandWindows === undefined\n\t\t\t? []\n\t\t\t: validateCommandField(handler, \"commandWindows\", handler.config.commandWindows)),\n\t];\n}\n\nfunction validateCommandField(\n\thandler: ExecutableHookHandler,\n\tfield: \"command\" | \"commandWindows\",\n\tcommand: string,\n): readonly HookDiagnostic[] {\n\tconst diagnostics: HookDiagnostic[] = [];\n\tfor (const target of extractPluginRootTargets(command, handler.source.pluginRoot ?? \"\")) {\n\t\tconst path = `hooks.${handler.event}[${handler.groupIndex}].hooks[${handler.handlerIndex}].${field}`;\n\t\tif (!isContained(resolve(handler.source.pluginRoot ?? \"\"), target.resolvedPath)) {\n\t\t\tdiagnostics.push(\n\t\t\t\tdiagnostic(\n\t\t\t\t\t{\n\t\t\t\t\t\tcode: \"invalid_command_target\",\n\t\t\t\t\t\tevent: handler.event,\n\t\t\t\t\t\tmessage: `Plugin command target is outside plugin root: ${target.raw}`,\n\t\t\t\t\t\tpath,\n\t\t\t\t\t},\n\t\t\t\t\thandler.source,\n\t\t\t\t),\n\t\t\t);\n\t\t\tcontinue;\n\t\t}\n\t\tif (!existsSync(target.resolvedPath)) {\n\t\t\tdiagnostics.push(\n\t\t\t\tdiagnostic(\n\t\t\t\t\t{\n\t\t\t\t\t\tcode: \"missing_command_target\",\n\t\t\t\t\t\tevent: handler.event,\n\t\t\t\t\t\tmessage: `Plugin command target does not exist: ${target.raw}`,\n\t\t\t\t\t\tpath,\n\t\t\t\t\t},\n\t\t\t\t\thandler.source,\n\t\t\t\t),\n\t\t\t);\n\t\t\tcontinue;\n\t\t}\n\t\tconst realTarget = realpathSync(target.resolvedPath);\n\t\tconst realRoot = realpathSync(resolve(handler.source.pluginRoot ?? \"\"));\n\t\tif (!isContained(realRoot, realTarget)) {\n\t\t\tdiagnostics.push(\n\t\t\t\tdiagnostic(\n\t\t\t\t\t{\n\t\t\t\t\t\tcode: \"invalid_command_target\",\n\t\t\t\t\t\tevent: handler.event,\n\t\t\t\t\t\tmessage: `Plugin command target resolves outside plugin root: ${target.raw}`,\n\t\t\t\t\t\tpath,\n\t\t\t\t\t},\n\t\t\t\t\thandler.source,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t}\n\treturn diagnostics;\n}\n\nfunction extractPluginRootTargets(command: string, pluginRoot: string): readonly PluginRootTarget[] {\n\tconst targets: PluginRootTarget[] = [];\n\tfor (const word of readCommandWords(command)) {\n\t\tfor (const token of PLUGIN_ROOT_TOKENS) {\n\t\t\tif (!word.expanded.includes(token)) continue;\n\t\t\tconst expanded = word.expanded.replaceAll(token, pluginRoot).replaceAll(\"\\\\\", \"/\");\n\t\t\ttargets.push({ raw: word.raw, resolvedPath: resolve(expanded) });\n\t\t}\n\t}\n\treturn targets;\n}\n\nfunction readCommandWords(command: string): readonly { readonly expanded: string; readonly raw: string }[] {\n\tconst words: { readonly expanded: string; readonly raw: string }[] = [];\n\tlet index = 0;\n\twhile (index < command.length) {\n\t\twhile (index < command.length && isCommandWordTerminator(command[index])) index += 1;\n\t\tif (index >= command.length) break;\n\n\t\tconst start = index;\n\t\tlet expanded = \"\";\n\t\twhile (index < command.length && !isCommandWordTerminator(command[index])) {\n\t\t\tconst char = command[index];\n\t\t\tif (char === \"'\" || char === '\"' || char === \"`\") {\n\t\t\t\tconst quote = char;\n\t\t\t\tindex += 1;\n\t\t\t\twhile (index < command.length && command[index] !== quote) {\n\t\t\t\t\texpanded += command[index];\n\t\t\t\t\tindex += 1;\n\t\t\t\t}\n\t\t\t\tif (command[index] === quote) index += 1;\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\texpanded += char;\n\t\t\tindex += 1;\n\t\t}\n\t\twords.push({ expanded, raw: command.slice(start, index) });\n\t}\n\treturn words;\n}\n\nfunction isCommandWordTerminator(char: string | undefined): boolean {\n\treturn (\n\t\tchar === undefined ||\n\t\tchar === \" \" ||\n\t\tchar === \"\\t\" ||\n\t\tchar === \"\\n\" ||\n\t\tchar === \";\" ||\n\t\tchar === \"&\" ||\n\t\tchar === \"|\" ||\n\t\tchar === \"<\" ||\n\t\tchar === \">\" ||\n\t\tchar === \")\"\n\t);\n}\n\nfunction isContained(root: string, target: string): boolean {\n\tconst rel = relative(root, target);\n\treturn rel === \"\" || (!rel.startsWith(\"..\") && !isAbsolute(rel));\n}\n\nfunction pluginEnvForSource(source: HookSourceMetadata): PluginHookEnv | undefined {\n\tif (!(\"pluginEnv\" in source)) return undefined;\n\tconst pluginEnv = source.pluginEnv;\n\tif (!isPluginHookEnv(pluginEnv)) return undefined;\n\treturn pluginEnv;\n}\n\nfunction isPluginHookEnv(value: unknown): value is PluginHookEnv {\n\treturn (\n\t\tisRecord(value) &&\n\t\ttypeof value.PLUGIN_ROOT === \"string\" &&\n\t\ttypeof value.PLUGIN_DATA === \"string\" &&\n\t\ttypeof value.CLAUDE_PLUGIN_ROOT === \"string\" &&\n\t\ttypeof value.CLAUDE_PLUGIN_DATA === \"string\"\n\t);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n"]}

package/dist/core/extensions/builtin/hooks/schema.d.ts

@@ -0,0 +1,3 @@
+import type { HookSourceMetadata, ParsedHookConfig } from "./types.ts";
+export declare function parseHookConfig(input: unknown, source: HookSourceMetadata): ParsedHookConfig;
+//# sourceMappingURL=schema.d.ts.map

package/dist/core/extensions/builtin/hooks/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/schema.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGX,kBAAkB,EAClB,gBAAgB,EAEhB,MAAM,YAAY,CAAC;AAMpB,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,GAAG,gBAAgB,CA0C5F"}

package/dist/core/extensions/builtin/hooks/schema.js

@@ -0,0 +1,94 @@
+import { diagnostic } from "./diagnostics.js";
+import { parseHandler } from "./handler.js";
+import { SUPPORTED_HOOK_EVENTS, UNSUPPORTED_KNOWN_HOOK_EVENTS } from "./types.js";
+const SUPPORTED_EVENT_SET = new Set(SUPPORTED_HOOK_EVENTS);
+const UNSUPPORTED_EVENT_SET = new Set(UNSUPPORTED_KNOWN_HOOK_EVENTS);
+export function parseHookConfig(input, source) {
+    const diagnostics = [];
+    const executableHandlers = [];
+    if (!isRecord(input)) {
+        diagnostics.push(diagnostic({ code: "invalid_root", message: "Hook config must be an object.", path: "$" }, source));
+        return { executableHandlers, diagnostics };
+    }
+    const hooks = input.hooks;
+    if (!isRecord(hooks)) {
+        diagnostics.push(diagnostic({ code: "invalid_hooks", message: "Hook config must contain an object hooks field.", path: "hooks" }, source));
+        return { executableHandlers, diagnostics };
+    }
+    for (const [eventName, groups] of Object.entries(hooks)) {
+        if (isSupportedHookEvent(eventName)) {
+            executableHandlers.push(...parseSupportedEvent(eventName, groups, source, diagnostics));
+            continue;
+        }
+        diagnostics.push(diagnostic({
+            code: isUnsupportedKnownHookEvent(eventName) ? "unsupported_event" : "unknown_event",
+            event: eventName,
+            message: `Hook event ${eventName} is not executable in builtin hooks v1.`,
+            path: `hooks.${eventName}`,
+            severity: "warning",
+        }, source));
+    }
+    return { executableHandlers, diagnostics };
+}
+function parseSupportedEvent(event, groups, source, diagnostics) {
+    if (!Array.isArray(groups)) {
+        diagnostics.push(diagnostic({
+            code: "invalid_event_config",
+            event,
+            message: "Hook event entries must be an array.",
+            path: `hooks.${event}`,
+        }, source));
+        return [];
+    }
+    const handlers = [];
+    for (const [groupIndex, group] of groups.entries()) {
+        const groupPath = `hooks.${event}[${groupIndex}]`;
+        if (!isRecord(group)) {
+            diagnostics.push(diagnostic({
+                code: "invalid_handler_group",
+                event,
+                message: "Hook matcher group must be an object.",
+                path: groupPath,
+            }, source));
+            continue;
+        }
+        const matcher = parseMatcher(group.matcher, groupPath, event, source, diagnostics);
+        const hookList = group.hooks;
+        if (!Array.isArray(hookList)) {
+            diagnostics.push(diagnostic({
+                code: "invalid_handler_list",
+                event,
+                message: "Hook matcher group hooks must be an array.",
+                path: `${groupPath}.hooks`,
+            }, source));
+            continue;
+        }
+        for (const [handlerIndex, handler] of hookList.entries()) {
+            const parsed = parseHandler(handler, { event, matcher, groupIndex, handlerIndex, source, diagnostics });
+            if (parsed) {
+                handlers.push(parsed);
+            }
+        }
+    }
+    return handlers;
+}
+function parseMatcher(value, groupPath, event, source, diagnostics) {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (typeof value === "string") {
+        return value;
+    }
+    diagnostics.push(diagnostic({ code: "invalid_matcher", event, message: "Hook matcher must be a string.", path: `${groupPath}.matcher` }, source));
+    return undefined;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isSupportedHookEvent(value) {
+    return SUPPORTED_EVENT_SET.has(value);
+}
+function isUnsupportedKnownHookEvent(value) {
+    return UNSUPPORTED_EVENT_SET.has(value);
+}
+//# sourceMappingURL=schema.js.map