@code-yeongyu/senpi 2026.6.28-4 → 2026.6.30

package/dist/core/extensions/builtin/hooks/matcher.js

@@ -0,0 +1,109 @@
+import { diagnostic } from "./diagnostics.js";
+const TOOL_MATCHER_ALIASES = {
+    apply_patch: ["ApplyPatch", "functions.apply_patch"],
+    bash: ["Bash", "Shell", "shell", "exec_command", "functions.exec_command"],
+    create_goal: ["CreateGoal"],
+    edit: ["Edit", "MultiEdit", "multi_edit"],
+    find: ["Find", "Glob", "glob", "file_search"],
+    get_goal: ["GetGoal"],
+    grep: ["Grep", "Search", "grep_app"],
+    ls: ["LS", "List", "list"],
+    read: ["Read", "open", "read_file"],
+    todoread: ["TodoRead"],
+    todowrite: ["TodoWrite"],
+    update_goal: ["UpdateGoal"],
+    web_search: ["WebSearch", "web-search"],
+    webfetch: ["WebFetch", "web_fetch", "web-fetch"],
+    write: ["Write", "write_file"],
+};
+export function matchingHookHandlers(input, handlers) {
+    const subject = matcherSubject(input);
+    const selected = [];
+    const diagnostics = [];
+    for (const handler of handlers) {
+        if (handler.event !== input.event) {
+            continue;
+        }
+        if (subject.kind === "ignored") {
+            selected.push(handler);
+            continue;
+        }
+        const match = matchesMatcher(handler, subject.inputs);
+        diagnostics.push(...match.diagnostics);
+        if (match.matched) {
+            selected.push(handler);
+        }
+    }
+    return { handlers: selected, diagnostics };
+}
+function matcherSubject(input) {
+    switch (input.event) {
+        case "UserPromptSubmit":
+        case "Stop":
+            return { kind: "ignored" };
+        case "PreToolUse":
+        case "PostToolUse":
+            return { kind: "inputs", inputs: toolMatcherInputs(input.toolName) };
+        case "SessionStart":
+        case "PreCompact":
+        case "PostCompact":
+            return { kind: "inputs", inputs: [input.event] };
+    }
+}
+function toolMatcherInputs(toolName) {
+    const values = new Set();
+    addMatcherInput(values, toolName);
+    const lowerToolName = toolName.toLowerCase();
+    addMatcherInput(values, lowerToolName);
+    addMatcherInput(values, toClaudeToolName(lowerToolName));
+    for (const alias of TOOL_MATCHER_ALIASES[lowerToolName] ?? []) {
+        addMatcherInput(values, alias);
+    }
+    return [...values];
+}
+function addMatcherInput(values, value) {
+    const trimmed = value.trim();
+    if (trimmed.length > 0) {
+        values.add(trimmed);
+    }
+}
+function toClaudeToolName(toolName) {
+    return toolName
+        .split(/[-_]/)
+        .filter((part) => part.length > 0)
+        .map((part) => `${part.slice(0, 1).toUpperCase()}${part.slice(1)}`)
+        .join("");
+}
+function matchesMatcher(handler, inputs) {
+    const matcher = handler.matcher?.trim();
+    if (matcher === undefined || matcher.length === 0 || matcher === "*") {
+        return { matched: true, diagnostics: [] };
+    }
+    const literalMatched = matcher
+        .split(/[|,]/)
+        .map((part) => part.trim())
+        .filter((part) => part.length > 0)
+        .some((part) => inputs.includes(part));
+    try {
+        const regex = new RegExp(matcher);
+        return { matched: literalMatched || inputs.some((input) => regex.test(input)), diagnostics: [] };
+    }
+    catch (error) {
+        if (error instanceof SyntaxError) {
+            return {
+                matched: literalMatched,
+                diagnostics: [
+                    diagnostic({
+                        code: "invalid_matcher",
+                        event: handler.event,
+                        message: `Hook matcher is not a valid JavaScript regular expression: ${error.message}`,
+                        path: `hooks.${handler.event}[${handler.groupIndex}].matcher`,
+                        severity: "warning",
+                    }, handler.source),
+                ],
+            };
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=matcher.js.map

package/dist/core/extensions/builtin/hooks/matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matcher.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/matcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAU9C,MAAM,oBAAoB,GAAgD;IACzE,WAAW,EAAE,CAAC,YAAY,EAAE,uBAAuB,CAAC;IACpD,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,wBAAwB,CAAC;IAC1E,WAAW,EAAE,CAAC,YAAY,CAAC;IAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC;IACzC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC;IAC7C,QAAQ,EAAE,CAAC,SAAS,CAAC;IACrB,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;IACpC,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC;IACnC,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,SAAS,EAAE,CAAC,WAAW,CAAC;IACxB,WAAW,EAAE,CAAC,YAAY,CAAC;IAC3B,UAAU,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IACvC,QAAQ,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC;IAChD,KAAK,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;CACrB,CAAC;AAEX,MAAM,UAAU,oBAAoB,CACnC,KAAoB,EACpB,QAA0C;IAE1C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,MAAM,WAAW,GAAqB,EAAE,CAAC;IAEzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;YACnC,SAAS;QACV,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,SAAS;QACV,CAAC;QAED,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACF,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC3C,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,kBAAkB,CAAC;QACxB,KAAK,MAAM;YACV,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC5B,KAAK,YAAY,CAAC;QAClB,KAAK,aAAa;YACjB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtE,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY,CAAC;QAClB,KAAK,aAAa;YACjB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACnD,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAElC,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7C,eAAe,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACvC,eAAe,CAAC,MAAM,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;IAEzD,KAAK,MAAM,KAAK,IAAI,oBAAoB,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/D,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,MAAmB,EAAE,KAAa;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACzC,OAAO,QAAQ;SACb,KAAK,CAAC,MAAM,CAAC;SACb,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,IAAI,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CACtB,OAA8B,EAC9B,MAAyB;IAEzB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,cAAc,GAAG,OAAO;SAC5B,KAAK,CAAC,MAAM,CAAC;SACb,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAExC,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAClG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YAClC,OAAO;gBACN,OAAO,EAAE,cAAc;gBACvB,WAAW,EAAE;oBACZ,UAAU,CACT;wBACC,IAAI,EAAE,iBAAiB;wBACvB,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,OAAO,EAAE,8DAA8D,KAAK,CAAC,OAAO,EAAE;wBACtF,IAAI,EAAE,SAAS,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,WAAW;wBAC7D,QAAQ,EAAE,SAAS;qBACnB,EACD,OAAO,CAAC,MAAM,CACd;iBACD;aACD,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC","sourcesContent":["import { diagnostic } from \"./diagnostics.ts\";\nimport type { ExecutableHookHandler, HookDiagnostic, HookInputWire } from \"./types.ts\";\n\nexport type HookMatcherResult = {\n\treadonly handlers: readonly ExecutableHookHandler[];\n\treadonly diagnostics: readonly HookDiagnostic[];\n};\n\ntype MatcherSubject = { readonly kind: \"ignored\" } | { readonly kind: \"inputs\"; readonly inputs: readonly string[] };\n\nconst TOOL_MATCHER_ALIASES: Readonly<Record<string, readonly string[]>> = {\n\tapply_patch: [\"ApplyPatch\", \"functions.apply_patch\"],\n\tbash: [\"Bash\", \"Shell\", \"shell\", \"exec_command\", \"functions.exec_command\"],\n\tcreate_goal: [\"CreateGoal\"],\n\tedit: [\"Edit\", \"MultiEdit\", \"multi_edit\"],\n\tfind: [\"Find\", \"Glob\", \"glob\", \"file_search\"],\n\tget_goal: [\"GetGoal\"],\n\tgrep: [\"Grep\", \"Search\", \"grep_app\"],\n\tls: [\"LS\", \"List\", \"list\"],\n\tread: [\"Read\", \"open\", \"read_file\"],\n\ttodoread: [\"TodoRead\"],\n\ttodowrite: [\"TodoWrite\"],\n\tupdate_goal: [\"UpdateGoal\"],\n\tweb_search: [\"WebSearch\", \"web-search\"],\n\twebfetch: [\"WebFetch\", \"web_fetch\", \"web-fetch\"],\n\twrite: [\"Write\", \"write_file\"],\n} as const;\n\nexport function matchingHookHandlers(\n\tinput: HookInputWire,\n\thandlers: readonly ExecutableHookHandler[],\n): HookMatcherResult {\n\tconst subject = matcherSubject(input);\n\tconst selected: ExecutableHookHandler[] = [];\n\tconst diagnostics: HookDiagnostic[] = [];\n\n\tfor (const handler of handlers) {\n\t\tif (handler.event !== input.event) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (subject.kind === \"ignored\") {\n\t\t\tselected.push(handler);\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst match = matchesMatcher(handler, subject.inputs);\n\t\tdiagnostics.push(...match.diagnostics);\n\t\tif (match.matched) {\n\t\t\tselected.push(handler);\n\t\t}\n\t}\n\n\treturn { handlers: selected, diagnostics };\n}\n\nfunction matcherSubject(input: HookInputWire): MatcherSubject {\n\tswitch (input.event) {\n\t\tcase \"UserPromptSubmit\":\n\t\tcase \"Stop\":\n\t\t\treturn { kind: \"ignored\" };\n\t\tcase \"PreToolUse\":\n\t\tcase \"PostToolUse\":\n\t\t\treturn { kind: \"inputs\", inputs: toolMatcherInputs(input.toolName) };\n\t\tcase \"SessionStart\":\n\t\tcase \"PreCompact\":\n\t\tcase \"PostCompact\":\n\t\t\treturn { kind: \"inputs\", inputs: [input.event] };\n\t}\n}\n\nfunction toolMatcherInputs(toolName: string): readonly string[] {\n\tconst values = new Set<string>();\n\taddMatcherInput(values, toolName);\n\n\tconst lowerToolName = toolName.toLowerCase();\n\taddMatcherInput(values, lowerToolName);\n\taddMatcherInput(values, toClaudeToolName(lowerToolName));\n\n\tfor (const alias of TOOL_MATCHER_ALIASES[lowerToolName] ?? []) {\n\t\taddMatcherInput(values, alias);\n\t}\n\n\treturn [...values];\n}\n\nfunction addMatcherInput(values: Set<string>, value: string): void {\n\tconst trimmed = value.trim();\n\tif (trimmed.length > 0) {\n\t\tvalues.add(trimmed);\n\t}\n}\n\nfunction toClaudeToolName(toolName: string): string {\n\treturn toolName\n\t\t.split(/[-_]/)\n\t\t.filter((part) => part.length > 0)\n\t\t.map((part) => `${part.slice(0, 1).toUpperCase()}${part.slice(1)}`)\n\t\t.join(\"\");\n}\n\nfunction matchesMatcher(\n\thandler: ExecutableHookHandler,\n\tinputs: readonly string[],\n): { readonly matched: boolean; readonly diagnostics: readonly HookDiagnostic[] } {\n\tconst matcher = handler.matcher?.trim();\n\tif (matcher === undefined || matcher.length === 0 || matcher === \"*\") {\n\t\treturn { matched: true, diagnostics: [] };\n\t}\n\n\tconst literalMatched = matcher\n\t\t.split(/[|,]/)\n\t\t.map((part) => part.trim())\n\t\t.filter((part) => part.length > 0)\n\t\t.some((part) => inputs.includes(part));\n\n\ttry {\n\t\tconst regex = new RegExp(matcher);\n\t\treturn { matched: literalMatched || inputs.some((input) => regex.test(input)), diagnostics: [] };\n\t} catch (error) {\n\t\tif (error instanceof SyntaxError) {\n\t\t\treturn {\n\t\t\t\tmatched: literalMatched,\n\t\t\t\tdiagnostics: [\n\t\t\t\t\tdiagnostic(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tcode: \"invalid_matcher\",\n\t\t\t\t\t\t\tevent: handler.event,\n\t\t\t\t\t\t\tmessage: `Hook matcher is not a valid JavaScript regular expression: ${error.message}`,\n\t\t\t\t\t\t\tpath: `hooks.${handler.event}[${handler.groupIndex}].matcher`,\n\t\t\t\t\t\t\tseverity: \"warning\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\thandler.source,\n\t\t\t\t\t),\n\t\t\t\t],\n\t\t\t};\n\t\t}\n\t\tthrow error;\n\t}\n}\n"]}

package/dist/core/extensions/builtin/hooks/output-bounds.d.ts

@@ -0,0 +1,29 @@
+export declare const DEFAULT_STDOUT_LIMIT_BYTES: number;
+export declare const DEFAULT_STDERR_LIMIT_BYTES: number;
+export type HookOutputPolicy = {
+    readonly maxStdoutBytes?: number;
+    readonly maxStderrBytes?: number;
+    readonly spillDir?: string;
+};
+export type HookStreamSafetyMetadata = {
+    readonly originalBytes: number;
+    readonly returnedBytes: number;
+    readonly redacted: boolean;
+    readonly spilled: boolean;
+    readonly truncated: boolean;
+    readonly spillPath?: string;
+};
+export type HookOutputSafetyMetadata = {
+    readonly stdout: HookStreamSafetyMetadata;
+    readonly stderr: HookStreamSafetyMetadata;
+};
+export type HookSafeOutput = {
+    readonly text: string;
+    readonly safety: HookStreamSafetyMetadata;
+};
+export declare function applyHookOutputSafety(stream: "stderr" | "stdout", text: string, policy: HookOutputPolicy | undefined, capture?: {
+    readonly originalBytes: number;
+    readonly truncated: boolean;
+}): HookSafeOutput;
+export declare function redactHookTokenValues(text: string, replacement?: string): string;
+//# sourceMappingURL=output-bounds.d.ts.map

package/dist/core/extensions/builtin/hooks/output-bounds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-bounds.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/output-bounds.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,0BAA0B,QAAY,CAAC;AACpD,eAAO,MAAM,0BAA0B,QAAY,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACtC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC1C,CAAC;AAEF,wBAAgB,qBAAqB,CACpC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAC3B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GACvE,cAAc,CAqBhB;AAWD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,SAAe,GAAG,MAAM,CAItF"}

package/dist/core/extensions/builtin/hooks/output-bounds.js

@@ -0,0 +1,47 @@
+import { randomUUID } from "node:crypto";
+import { mkdirSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+export const DEFAULT_STDOUT_LIMIT_BYTES = 64 * 1024;
+export const DEFAULT_STDERR_LIMIT_BYTES = 64 * 1024;
+export function applyHookOutputSafety(stream, text, policy, capture) {
+    const originalBytes = capture?.originalBytes ?? Buffer.byteLength(text);
+    const redactedText = redactHookOutput(text);
+    const redacted = redactedText !== text;
+    const limit = stream === "stdout" ? policy?.maxStdoutBytes : policy?.maxStderrBytes;
+    const maxBytes = limit ?? (stream === "stdout" ? DEFAULT_STDOUT_LIMIT_BYTES : DEFAULT_STDERR_LIMIT_BYTES);
+    const redactedBytes = Buffer.byteLength(redactedText);
+    const truncated = capture?.truncated === true || redactedBytes > maxBytes;
+    const spillPath = truncated ? spillRedactedOutput(stream, redactedText, policy) : undefined;
+    const returnedText = truncated ? Buffer.from(redactedText).subarray(0, maxBytes).toString("utf8") : redactedText;
+    return {
+        safety: {
+            originalBytes,
+            redacted,
+            returnedBytes: Buffer.byteLength(returnedText),
+            spilled: spillPath !== undefined,
+            ...(spillPath === undefined ? {} : { spillPath }),
+            truncated,
+        },
+        text: returnedText,
+    };
+}
+function redactHookOutput(text) {
+    return redactHookTokenValues(text
+        .replace(/\b([A-Z][A-Z0-9_]*(?:API_KEY|SECRET|TOKEN|PASSWORD|AUTH)[A-Z0-9_]*)=([^\s'"]+)/g, "$1=[REDACTED]")
+        .replace(/\b(Authorization:\s*Bearer\s+)([^\s'"]+)/gi, "$1[REDACTED]")
+        .replace(/\b(Bearer\s+)(sk-[A-Za-z0-9._-]+)/g, "$1[REDACTED]"));
+}
+export function redactHookTokenValues(text, replacement = "[REDACTED]") {
+    return text
+        .replace(/\bghp_[A-Za-z0-9]{20,}\b/g, replacement)
+        .replace(/\bgithub_pat_[A-Za-z0-9_]{20,}\b/g, replacement);
+}
+function spillRedactedOutput(stream, text, policy) {
+    const spillDir = policy?.spillDir ?? join(tmpdir(), "senpi-hook-output");
+    mkdirSync(spillDir, { recursive: true });
+    const path = join(spillDir, `hook-${stream}-${process.pid}-${randomUUID()}.txt`);
+    writeFileSync(path, text);
+    return path;
+}
+//# sourceMappingURL=output-bounds.js.map

package/dist/core/extensions/builtin/hooks/output-bounds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-bounds.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/output-bounds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,CAAC;AACpD,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,CAAC;AA2BpD,MAAM,UAAU,qBAAqB,CACpC,MAA2B,EAC3B,IAAY,EACZ,MAAoC,EACpC,OAAyE;IAEzE,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,YAAY,KAAK,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC;IACpF,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAC1G,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,KAAK,IAAI,IAAI,aAAa,GAAG,QAAQ,CAAC;IAC1E,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACjH,OAAO;QACN,MAAM,EAAE;YACP,aAAa;YACb,QAAQ;YACR,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;YAC9C,OAAO,EAAE,SAAS,KAAK,SAAS;YAChC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,SAAS;SACT;QACD,IAAI,EAAE,YAAY;KAClB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACrC,OAAO,qBAAqB,CAC3B,IAAI;SACF,OAAO,CAAC,iFAAiF,EAAE,eAAe,CAAC;SAC3G,OAAO,CAAC,4CAA4C,EAAE,cAAc,CAAC;SACrE,OAAO,CAAC,oCAAoC,EAAE,cAAc,CAAC,CAC/D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,WAAW,GAAG,YAAY;IAC7E,OAAO,IAAI;SACT,OAAO,CAAC,2BAA2B,EAAE,WAAW,CAAC;SACjD,OAAO,CAAC,mCAAmC,EAAE,WAAW,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA2B,EAAE,IAAY,EAAE,MAAoC;IAC3G,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACzE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IACjF,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACb,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdirSync, writeFileSync } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\n\nexport const DEFAULT_STDOUT_LIMIT_BYTES = 64 * 1024;\nexport const DEFAULT_STDERR_LIMIT_BYTES = 64 * 1024;\n\nexport type HookOutputPolicy = {\n\treadonly maxStdoutBytes?: number;\n\treadonly maxStderrBytes?: number;\n\treadonly spillDir?: string;\n};\n\nexport type HookStreamSafetyMetadata = {\n\treadonly originalBytes: number;\n\treadonly returnedBytes: number;\n\treadonly redacted: boolean;\n\treadonly spilled: boolean;\n\treadonly truncated: boolean;\n\treadonly spillPath?: string;\n};\n\nexport type HookOutputSafetyMetadata = {\n\treadonly stdout: HookStreamSafetyMetadata;\n\treadonly stderr: HookStreamSafetyMetadata;\n};\n\nexport type HookSafeOutput = {\n\treadonly text: string;\n\treadonly safety: HookStreamSafetyMetadata;\n};\n\nexport function applyHookOutputSafety(\n\tstream: \"stderr\" | \"stdout\",\n\ttext: string,\n\tpolicy: HookOutputPolicy | undefined,\n\tcapture?: { readonly originalBytes: number; readonly truncated: boolean },\n): HookSafeOutput {\n\tconst originalBytes = capture?.originalBytes ?? Buffer.byteLength(text);\n\tconst redactedText = redactHookOutput(text);\n\tconst redacted = redactedText !== text;\n\tconst limit = stream === \"stdout\" ? policy?.maxStdoutBytes : policy?.maxStderrBytes;\n\tconst maxBytes = limit ?? (stream === \"stdout\" ? DEFAULT_STDOUT_LIMIT_BYTES : DEFAULT_STDERR_LIMIT_BYTES);\n\tconst redactedBytes = Buffer.byteLength(redactedText);\n\tconst truncated = capture?.truncated === true || redactedBytes > maxBytes;\n\tconst spillPath = truncated ? spillRedactedOutput(stream, redactedText, policy) : undefined;\n\tconst returnedText = truncated ? Buffer.from(redactedText).subarray(0, maxBytes).toString(\"utf8\") : redactedText;\n\treturn {\n\t\tsafety: {\n\t\t\toriginalBytes,\n\t\t\tredacted,\n\t\t\treturnedBytes: Buffer.byteLength(returnedText),\n\t\t\tspilled: spillPath !== undefined,\n\t\t\t...(spillPath === undefined ? {} : { spillPath }),\n\t\t\ttruncated,\n\t\t},\n\t\ttext: returnedText,\n\t};\n}\n\nfunction redactHookOutput(text: string): string {\n\treturn redactHookTokenValues(\n\t\ttext\n\t\t\t.replace(/\\b([A-Z][A-Z0-9_]*(?:API_KEY|SECRET|TOKEN|PASSWORD|AUTH)[A-Z0-9_]*)=([^\\s'\"]+)/g, \"$1=[REDACTED]\")\n\t\t\t.replace(/\\b(Authorization:\\s*Bearer\\s+)([^\\s'\"]+)/gi, \"$1[REDACTED]\")\n\t\t\t.replace(/\\b(Bearer\\s+)(sk-[A-Za-z0-9._-]+)/g, \"$1[REDACTED]\"),\n\t);\n}\n\nexport function redactHookTokenValues(text: string, replacement = \"[REDACTED]\"): string {\n\treturn text\n\t\t.replace(/\\bghp_[A-Za-z0-9]{20,}\\b/g, replacement)\n\t\t.replace(/\\bgithub_pat_[A-Za-z0-9_]{20,}\\b/g, replacement);\n}\n\nfunction spillRedactedOutput(stream: \"stderr\" | \"stdout\", text: string, policy: HookOutputPolicy | undefined): string {\n\tconst spillDir = policy?.spillDir ?? join(tmpdir(), \"senpi-hook-output\");\n\tmkdirSync(spillDir, { recursive: true });\n\tconst path = join(spillDir, `hook-${stream}-${process.pid}-${randomUUID()}.txt`);\n\twriteFileSync(path, text);\n\treturn path;\n}\n"]}

package/dist/core/extensions/builtin/hooks/output-parser.d.ts

@@ -0,0 +1,27 @@
+import type { HookDiagnostic, HookSourceMetadata, SupportedHookEvent } from "./types.ts";
+export type HookOutputParseInput = {
+    readonly event: SupportedHookEvent;
+    readonly exitCode: number;
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly source: HookSourceMetadata;
+};
+type HookDecision = "allow" | "approve" | "ask" | "block" | "deny";
+type MutableHookOutput = {
+    decision?: HookDecision;
+    reason?: string;
+    additionalContext?: string;
+    updatedInput?: unknown;
+    updatedToolOutput?: unknown;
+    continue?: boolean;
+    stopReason?: string;
+    suppressOutput?: boolean;
+    systemMessage?: string;
+};
+export type ParsedHookOutput = {
+    readonly output: Readonly<MutableHookOutput>;
+    readonly diagnostics: readonly HookDiagnostic[];
+};
+export declare function parseHookOutput(input: HookOutputParseInput): ParsedHookOutput;
+export {};
+//# sourceMappingURL=output-parser.d.ts.map

package/dist/core/extensions/builtin/hooks/output-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-parser.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/output-parser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEzF,MAAM,MAAM,oBAAoB,GAAG;IAClC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACpC,CAAC;AAEF,KAAK,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;AACnE,KAAK,iBAAiB,GAAG;IACxB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,SAAS,cAAc,EAAE,CAAC;CAChD,CAAC;AAgBF,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,gBAAgB,CAe7E"}

package/dist/core/extensions/builtin/hooks/output-parser.js

@@ -0,0 +1,168 @@
+import { diagnostic } from "./diagnostics.js";
+const SYSTEM_MESSAGE_EVENTS = new Set([
+    "PreToolUse",
+    "PostToolUse",
+    "UserPromptSubmit",
+    "SessionStart",
+    "Stop",
+]);
+export function parseHookOutput(input) {
+    const state = { input, output: {}, diagnostics: [] };
+    const stderr = text(input.stderr);
+    if (input.exitCode === 2) {
+        return { output: { decision: "block", ...(stderr === undefined ? {} : { reason: stderr }) }, diagnostics: [] };
+    }
+    const stdout = input.stdout.trim();
+    if (stdout.length === 0)
+        return parsedOutput(state);
+    const parsed = parseStdoutJson(stdout, state);
+    if (!isRecord(parsed))
+        return parsedOutput(state);
+    parseUniversal(parsed, state);
+    const specific = parseSpecific(parsed.hookSpecificOutput, state);
+    if (specific === "mismatched" || specific === "invalid")
+        return parsedOutput(state);
+    parseEvent(parsed, specific, state);
+    return parsedOutput(state);
+}
+function parseStdoutJson(stdout, state) {
+    try {
+        const parsed = JSON.parse(stdout);
+        if (isRecord(parsed))
+            return parsed;
+        add(state, "invalid_root", "stdout", "Hook stdout JSON must be an object.");
+    }
+    catch (error) {
+        if (!(error instanceof SyntaxError))
+            throw error;
+        add(state, "invalid_root", "stdout", "Hook stdout must be valid JSON.");
+    }
+    return undefined;
+}
+function parseUniversal(parsed, state) {
+    if (typeof parsed.continue === "boolean") {
+        state.output.continue = parsed.continue;
+        if (state.input.event === "Stop" && parsed.continue === false)
+            state.output.decision = "block";
+    }
+    copyText(parsed.stopReason, "stopReason", state);
+    if (typeof parsed.suppressOutput === "boolean")
+        state.output.suppressOutput = parsed.suppressOutput;
+    if (parsed.systemMessage === undefined)
+        return;
+    if (SYSTEM_MESSAGE_EVENTS.has(state.input.event)) {
+        copyText(parsed.systemMessage, "systemMessage", state);
+        return;
+    }
+    add(state, "unsupported_field", "stdout.systemMessage", "Hook systemMessage is not supported for this event.", "warning");
+}
+function parseSpecific(value, state) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value)) {
+        add(state, "invalid_event_config", "stdout.hookSpecificOutput", "Hook hookSpecificOutput field must be an object.");
+        return "invalid";
+    }
+    const eventName = value.hookEventName;
+    if (eventName === undefined || eventName === state.input.event)
+        return value;
+    add(state, "invalid_event_config", "stdout.hookSpecificOutput.hookEventName", `Hook output event ${String(eventName)} does not match ${state.input.event}.`);
+    return "mismatched";
+}
+function parseEvent(parsed, specific, state) {
+    switch (state.input.event) {
+        case "PreToolUse":
+            parsePreToolUse(parsed, specific, state);
+            return;
+        case "PostToolUse":
+            blockOnlyDecision(parsed.decision, "PostToolUse", state);
+            copyText(parsed.reason, "reason", state);
+            copyText(specific?.additionalContext ?? parsed.additionalContext, "additionalContext", state);
+            copyUnknown(specific?.updatedToolOutput ?? parsed.updatedToolOutput, "updatedToolOutput", state);
+            return;
+        case "UserPromptSubmit":
+            blockOnlyDecision(parsed.decision, "UserPromptSubmit", state);
+            copyText(parsed.reason, "reason", state);
+            copyText(specific?.additionalContext ?? parsed.additionalContext, "additionalContext", state);
+            rejectPromptReplacement(specific, state);
+            return;
+        case "Stop":
+            if (parsed.decision === "block")
+                state.output.decision = "block";
+            else if (parsed.decision !== undefined && parsed.decision !== "continue") {
+                add(state, "unsupported_field", "stdout.decision", "Stop only supports decision block or continue.", "warning");
+            }
+            copyText(parsed.reason, "reason", state);
+            copyText(specific?.additionalContext ?? parsed.additionalContext, "additionalContext", state);
+            return;
+        case "SessionStart":
+            copyText(specific?.additionalContext ?? parsed.additionalContext, "additionalContext", state);
+            if (parsed.decision !== undefined) {
+                add(state, "unsupported_field", "stdout.decision", "SessionStart does not support decisions.", "warning");
+            }
+            return;
+        case "PreCompact":
+        case "PostCompact":
+            return;
+    }
+}
+function parsePreToolUse(parsed, specific, state) {
+    const decision = preToolUseDecision(specific?.permissionDecision ?? parsed.decision);
+    if (decision !== undefined)
+        state.output.decision = decision;
+    copyText(specific?.permissionDecisionReason ?? parsed.reason, "reason", state);
+    copyText(specific?.additionalContext ?? parsed.additionalContext, "additionalContext", state);
+    const updatedInput = specific?.updatedInput ?? parsed.updatedInput;
+    if (updatedInput === undefined)
+        return;
+    if (specific?.permissionDecision === "allow") {
+        state.output.updatedInput = updatedInput;
+        return;
+    }
+    add(state, "unsupported_field", "stdout.hookSpecificOutput.updatedInput", "PreToolUse updatedInput is only applied when permissionDecision is allow.", "warning");
+}
+function blockOnlyDecision(value, event, state) {
+    if (value === "block")
+        state.output.decision = "block";
+    else if (value !== undefined)
+        add(state, "unsupported_field", "stdout.decision", `${event} only supports decision block.`, "warning");
+}
+function rejectPromptReplacement(specific, state) {
+    for (const field of ["prompt", "updatedPrompt", "replacementPrompt"]) {
+        if (specific !== undefined && Object.hasOwn(specific, field)) {
+            add(state, "unsupported_field", `stdout.hookSpecificOutput.${field}`, "UserPromptSubmit prompt replacement is not supported.", "warning");
+        }
+    }
+}
+function preToolUseDecision(value) {
+    if (value === "allow" || value === "approve" || value === "ask")
+        return value;
+    if (value === "deny" || value === "block")
+        return "deny";
+    return undefined;
+}
+function copyText(value, field, state) {
+    const normalized = text(value);
+    if (normalized !== undefined)
+        state.output[field] = normalized;
+}
+function copyUnknown(value, field, state) {
+    if (value !== undefined)
+        state.output[field] = value;
+}
+function add(state, code, path, message, severity) {
+    state.diagnostics.push(diagnostic({ code, event: state.input.event, message, path, ...(severity === undefined ? {} : { severity }) }, state.input.source));
+}
+function text(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed.length === 0 ? undefined : trimmed;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parsedOutput(state) {
+    return { output: state.output, diagnostics: state.diagnostics };
+}
+//# sourceMappingURL=output-parser.js.map

package/dist/core/extensions/builtin/hooks/output-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-parser.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/output-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAmC9C,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAqB;IACzD,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,cAAc;IACd,MAAM;CACN,CAAC,CAAC;AAEH,MAAM,UAAU,eAAe,CAAC,KAA2B;IAC1D,MAAM,KAAK,GAAe,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAChH,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAClD,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IACpF,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,KAAiB;IACzD,IAAI,CAAC;QACJ,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QACpC,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,qCAAqC,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;YAAE,MAAM,KAAK,CAAC;QACjD,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,iCAAiC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,MAA+B,EAAE,KAAiB;IACzE,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC1C,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACxC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;YAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC;IAChG,CAAC;IACD,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,SAAS;QAAE,KAAK,CAAC,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;IACpG,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO;IAC/C,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO;IACR,CAAC;IACD,GAAG,CACF,KAAK,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qDAAqD,EACrD,SAAS,CACT,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACrB,KAAc,EACd,KAAiB;IAEjB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,GAAG,CACF,KAAK,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,kDAAkD,CAClD,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC;IACtC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC7E,GAAG,CACF,KAAK,EACL,sBAAsB,EACtB,yCAAyC,EACzC,qBAAqB,MAAM,CAAC,SAAS,CAAC,mBAAmB,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAC7E,CAAC;IACF,OAAO,YAAY,CAAC;AACrB,CAAC;AAED,SAAS,UAAU,CAClB,MAA+B,EAC/B,QAA6C,EAC7C,KAAiB;IAEjB,QAAQ,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3B,KAAK,YAAY;YAChB,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO;QACR,KAAK,aAAa;YACjB,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;YACzD,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;YAC9F,WAAW,CAAC,QAAQ,EAAE,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;YACjG,OAAO;QACR,KAAK,kBAAkB;YACtB,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;YAC9D,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;YAC9F,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO;QACR,KAAK,MAAM;YACV,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;gBAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC;iBAC5D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC1E,GAAG,CACF,KAAK,EACL,mBAAmB,EACnB,iBAAiB,EACjB,gDAAgD,EAChD,SAAS,CACT,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;YAC9F,OAAO;QACR,KAAK,cAAc;YAClB,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;YAC9F,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACnC,GAAG,CAAC,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,0CAA0C,EAAE,SAAS,CAAC,CAAC;YAC3G,CAAC;YACD,OAAO;QACR,KAAK,YAAY,CAAC;QAClB,KAAK,aAAa;YACjB,OAAO;IACT,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CACvB,MAA+B,EAC/B,QAA6C,EAC7C,KAAiB;IAEjB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,kBAAkB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrF,IAAI,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7D,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/E,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,QAAQ,EAAE,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;IACnE,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO;IACvC,IAAI,QAAQ,EAAE,kBAAkB,KAAK,OAAO,EAAE,CAAC;QAC9C,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QACzC,OAAO;IACR,CAAC;IACD,GAAG,CACF,KAAK,EACL,mBAAmB,EACnB,wCAAwC,EACxC,2EAA2E,EAC3E,SAAS,CACT,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa,EAAE,KAAiB;IAC1E,IAAI,KAAK,KAAK,OAAO;QAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC;SAClD,IAAI,KAAK,KAAK,SAAS;QAC3B,GAAG,CAAC,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,GAAG,KAAK,gCAAgC,EAAE,SAAS,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,uBAAuB,CAAC,QAA6C,EAAE,KAAiB;IAChG,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACtE,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YAC9D,GAAG,CACF,KAAK,EACL,mBAAmB,EACnB,6BAA6B,KAAK,EAAE,EACpC,uDAAuD,EACvD,SAAS,CACT,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9E,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IACzD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAChB,KAAc,EACd,KAAsE,EACtE,KAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,UAAU,KAAK,SAAS;QAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAA0B,EAAE,KAAiB;IACjF,IAAI,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;AACtD,CAAC;AAED,SAAS,GAAG,CACX,KAAiB,EACjB,IAAmE,EACnE,IAAY,EACZ,OAAe,EACf,QAA8B;IAE9B,KAAK,CAAC,WAAW,CAAC,IAAI,CACrB,UAAU,CACT,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAClG,KAAK,CAAC,KAAK,CAAC,MAAM,CAClB,CACD,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB;IACtC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;AACjE,CAAC","sourcesContent":["import { diagnostic } from \"./diagnostics.ts\";\nimport type { HookDiagnostic, HookSourceMetadata, SupportedHookEvent } from \"./types.ts\";\n\nexport type HookOutputParseInput = {\n\treadonly event: SupportedHookEvent;\n\treadonly exitCode: number;\n\treadonly stdout: string;\n\treadonly stderr: string;\n\treadonly source: HookSourceMetadata;\n};\n\ntype HookDecision = \"allow\" | \"approve\" | \"ask\" | \"block\" | \"deny\";\ntype MutableHookOutput = {\n\tdecision?: HookDecision;\n\treason?: string;\n\tadditionalContext?: string;\n\tupdatedInput?: unknown;\n\tupdatedToolOutput?: unknown;\n\tcontinue?: boolean;\n\tstopReason?: string;\n\tsuppressOutput?: boolean;\n\tsystemMessage?: string;\n};\n\nexport type ParsedHookOutput = {\n\treadonly output: Readonly<MutableHookOutput>;\n\treadonly diagnostics: readonly HookDiagnostic[];\n};\n\ntype ParseState = {\n\treadonly input: HookOutputParseInput;\n\treadonly output: MutableHookOutput;\n\treadonly diagnostics: HookDiagnostic[];\n};\n\nconst SYSTEM_MESSAGE_EVENTS = new Set<SupportedHookEvent>([\n\t\"PreToolUse\",\n\t\"PostToolUse\",\n\t\"UserPromptSubmit\",\n\t\"SessionStart\",\n\t\"Stop\",\n]);\n\nexport function parseHookOutput(input: HookOutputParseInput): ParsedHookOutput {\n\tconst state: ParseState = { input, output: {}, diagnostics: [] };\n\tconst stderr = text(input.stderr);\n\tif (input.exitCode === 2) {\n\t\treturn { output: { decision: \"block\", ...(stderr === undefined ? {} : { reason: stderr }) }, diagnostics: [] };\n\t}\n\tconst stdout = input.stdout.trim();\n\tif (stdout.length === 0) return parsedOutput(state);\n\tconst parsed = parseStdoutJson(stdout, state);\n\tif (!isRecord(parsed)) return parsedOutput(state);\n\tparseUniversal(parsed, state);\n\tconst specific = parseSpecific(parsed.hookSpecificOutput, state);\n\tif (specific === \"mismatched\" || specific === \"invalid\") return parsedOutput(state);\n\tparseEvent(parsed, specific, state);\n\treturn parsedOutput(state);\n}\n\nfunction parseStdoutJson(stdout: string, state: ParseState): unknown {\n\ttry {\n\t\tconst parsed: unknown = JSON.parse(stdout);\n\t\tif (isRecord(parsed)) return parsed;\n\t\tadd(state, \"invalid_root\", \"stdout\", \"Hook stdout JSON must be an object.\");\n\t} catch (error) {\n\t\tif (!(error instanceof SyntaxError)) throw error;\n\t\tadd(state, \"invalid_root\", \"stdout\", \"Hook stdout must be valid JSON.\");\n\t}\n\treturn undefined;\n}\n\nfunction parseUniversal(parsed: Record<string, unknown>, state: ParseState): void {\n\tif (typeof parsed.continue === \"boolean\") {\n\t\tstate.output.continue = parsed.continue;\n\t\tif (state.input.event === \"Stop\" && parsed.continue === false) state.output.decision = \"block\";\n\t}\n\tcopyText(parsed.stopReason, \"stopReason\", state);\n\tif (typeof parsed.suppressOutput === \"boolean\") state.output.suppressOutput = parsed.suppressOutput;\n\tif (parsed.systemMessage === undefined) return;\n\tif (SYSTEM_MESSAGE_EVENTS.has(state.input.event)) {\n\t\tcopyText(parsed.systemMessage, \"systemMessage\", state);\n\t\treturn;\n\t}\n\tadd(\n\t\tstate,\n\t\t\"unsupported_field\",\n\t\t\"stdout.systemMessage\",\n\t\t\"Hook systemMessage is not supported for this event.\",\n\t\t\"warning\",\n\t);\n}\n\nfunction parseSpecific(\n\tvalue: unknown,\n\tstate: ParseState,\n): Record<string, unknown> | \"invalid\" | \"mismatched\" | undefined {\n\tif (value === undefined) return undefined;\n\tif (!isRecord(value)) {\n\t\tadd(\n\t\t\tstate,\n\t\t\t\"invalid_event_config\",\n\t\t\t\"stdout.hookSpecificOutput\",\n\t\t\t\"Hook hookSpecificOutput field must be an object.\",\n\t\t);\n\t\treturn \"invalid\";\n\t}\n\tconst eventName = value.hookEventName;\n\tif (eventName === undefined || eventName === state.input.event) return value;\n\tadd(\n\t\tstate,\n\t\t\"invalid_event_config\",\n\t\t\"stdout.hookSpecificOutput.hookEventName\",\n\t\t`Hook output event ${String(eventName)} does not match ${state.input.event}.`,\n\t);\n\treturn \"mismatched\";\n}\n\nfunction parseEvent(\n\tparsed: Record<string, unknown>,\n\tspecific: Record<string, unknown> | undefined,\n\tstate: ParseState,\n): void {\n\tswitch (state.input.event) {\n\t\tcase \"PreToolUse\":\n\t\t\tparsePreToolUse(parsed, specific, state);\n\t\t\treturn;\n\t\tcase \"PostToolUse\":\n\t\t\tblockOnlyDecision(parsed.decision, \"PostToolUse\", state);\n\t\t\tcopyText(parsed.reason, \"reason\", state);\n\t\t\tcopyText(specific?.additionalContext ?? parsed.additionalContext, \"additionalContext\", state);\n\t\t\tcopyUnknown(specific?.updatedToolOutput ?? parsed.updatedToolOutput, \"updatedToolOutput\", state);\n\t\t\treturn;\n\t\tcase \"UserPromptSubmit\":\n\t\t\tblockOnlyDecision(parsed.decision, \"UserPromptSubmit\", state);\n\t\t\tcopyText(parsed.reason, \"reason\", state);\n\t\t\tcopyText(specific?.additionalContext ?? parsed.additionalContext, \"additionalContext\", state);\n\t\t\trejectPromptReplacement(specific, state);\n\t\t\treturn;\n\t\tcase \"Stop\":\n\t\t\tif (parsed.decision === \"block\") state.output.decision = \"block\";\n\t\t\telse if (parsed.decision !== undefined && parsed.decision !== \"continue\") {\n\t\t\t\tadd(\n\t\t\t\t\tstate,\n\t\t\t\t\t\"unsupported_field\",\n\t\t\t\t\t\"stdout.decision\",\n\t\t\t\t\t\"Stop only supports decision block or continue.\",\n\t\t\t\t\t\"warning\",\n\t\t\t\t);\n\t\t\t}\n\t\t\tcopyText(parsed.reason, \"reason\", state);\n\t\t\tcopyText(specific?.additionalContext ?? parsed.additionalContext, \"additionalContext\", state);\n\t\t\treturn;\n\t\tcase \"SessionStart\":\n\t\t\tcopyText(specific?.additionalContext ?? parsed.additionalContext, \"additionalContext\", state);\n\t\t\tif (parsed.decision !== undefined) {\n\t\t\t\tadd(state, \"unsupported_field\", \"stdout.decision\", \"SessionStart does not support decisions.\", \"warning\");\n\t\t\t}\n\t\t\treturn;\n\t\tcase \"PreCompact\":\n\t\tcase \"PostCompact\":\n\t\t\treturn;\n\t}\n}\n\nfunction parsePreToolUse(\n\tparsed: Record<string, unknown>,\n\tspecific: Record<string, unknown> | undefined,\n\tstate: ParseState,\n): void {\n\tconst decision = preToolUseDecision(specific?.permissionDecision ?? parsed.decision);\n\tif (decision !== undefined) state.output.decision = decision;\n\tcopyText(specific?.permissionDecisionReason ?? parsed.reason, \"reason\", state);\n\tcopyText(specific?.additionalContext ?? parsed.additionalContext, \"additionalContext\", state);\n\tconst updatedInput = specific?.updatedInput ?? parsed.updatedInput;\n\tif (updatedInput === undefined) return;\n\tif (specific?.permissionDecision === \"allow\") {\n\t\tstate.output.updatedInput = updatedInput;\n\t\treturn;\n\t}\n\tadd(\n\t\tstate,\n\t\t\"unsupported_field\",\n\t\t\"stdout.hookSpecificOutput.updatedInput\",\n\t\t\"PreToolUse updatedInput is only applied when permissionDecision is allow.\",\n\t\t\"warning\",\n\t);\n}\n\nfunction blockOnlyDecision(value: unknown, event: string, state: ParseState): void {\n\tif (value === \"block\") state.output.decision = \"block\";\n\telse if (value !== undefined)\n\t\tadd(state, \"unsupported_field\", \"stdout.decision\", `${event} only supports decision block.`, \"warning\");\n}\n\nfunction rejectPromptReplacement(specific: Record<string, unknown> | undefined, state: ParseState): void {\n\tfor (const field of [\"prompt\", \"updatedPrompt\", \"replacementPrompt\"]) {\n\t\tif (specific !== undefined && Object.hasOwn(specific, field)) {\n\t\t\tadd(\n\t\t\t\tstate,\n\t\t\t\t\"unsupported_field\",\n\t\t\t\t`stdout.hookSpecificOutput.${field}`,\n\t\t\t\t\"UserPromptSubmit prompt replacement is not supported.\",\n\t\t\t\t\"warning\",\n\t\t\t);\n\t\t}\n\t}\n}\n\nfunction preToolUseDecision(value: unknown): HookDecision | undefined {\n\tif (value === \"allow\" || value === \"approve\" || value === \"ask\") return value;\n\tif (value === \"deny\" || value === \"block\") return \"deny\";\n\treturn undefined;\n}\n\nfunction copyText(\n\tvalue: unknown,\n\tfield: \"additionalContext\" | \"reason\" | \"stopReason\" | \"systemMessage\",\n\tstate: ParseState,\n): void {\n\tconst normalized = text(value);\n\tif (normalized !== undefined) state.output[field] = normalized;\n}\n\nfunction copyUnknown(value: unknown, field: \"updatedToolOutput\", state: ParseState): void {\n\tif (value !== undefined) state.output[field] = value;\n}\n\nfunction add(\n\tstate: ParseState,\n\tcode: \"invalid_event_config\" | \"invalid_root\" | \"unsupported_field\",\n\tpath: string,\n\tmessage: string,\n\tseverity?: \"error\" | \"warning\",\n): void {\n\tstate.diagnostics.push(\n\t\tdiagnostic(\n\t\t\t{ code, event: state.input.event, message, path, ...(severity === undefined ? {} : { severity }) },\n\t\t\tstate.input.source,\n\t\t),\n\t);\n}\n\nfunction text(value: unknown): string | undefined {\n\tif (typeof value !== \"string\") return undefined;\n\tconst trimmed = value.trim();\n\treturn trimmed.length === 0 ? undefined : trimmed;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction parsedOutput(state: ParseState): ParsedHookOutput {\n\treturn { output: state.output, diagnostics: state.diagnostics };\n}\n"]}

package/dist/core/extensions/builtin/hooks/plugin-loader.d.ts

@@ -0,0 +1,11 @@
+import { type LoadPluginHookManifestOptions, type PluginHookSourceMetadata } from "./plugin-manifest.ts";
+import type { ExecutableHookHandler, HookDiagnostic, ParsedHookConfig } from "./types.ts";
+export type { LoadPluginHookManifestOptions, PluginHookEnv, PluginHookSourceMetadata } from "./plugin-manifest.ts";
+export type PluginHookManifestLoadResult = {
+    readonly sources: readonly PluginHookSourceMetadata[];
+    readonly parsed: ParsedHookConfig;
+    readonly diagnostics: readonly HookDiagnostic[];
+};
+export declare function loadPluginHookManifest(options: LoadPluginHookManifestOptions): PluginHookManifestLoadResult;
+export declare function selectHookCommandForPlatform(handler: ExecutableHookHandler, platform?: NodeJS.Platform): string;
+//# sourceMappingURL=plugin-loader.d.ts.map

package/dist/core/extensions/builtin/hooks/plugin-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-loader.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/hooks/plugin-loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAMN,KAAK,6BAA6B,EAGlC,KAAK,wBAAwB,EAK7B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE1F,YAAY,EAAE,6BAA6B,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEnH,MAAM,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,SAAS,cAAc,EAAE,CAAC;CAChD,CAAC;AAOF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,6BAA6B,GAAG,4BAA4B,CA+C3G;AAED,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,qBAAqB,EAC9B,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C,MAAM,CAKR"}

package/dist/core/extensions/builtin/hooks/plugin-loader.js

@@ -0,0 +1,138 @@
+import { join, resolve } from "node:path";
+import { diagnostic } from "./diagnostics.js";
+import { buildPluginEnv, DEFAULT_HOOK_PATH, directoryExists, fileExists, isRecord, MANIFEST_PATH, pluginSource, readJsonFile, resolveContainedPath, sourceForPath, } from "./plugin-manifest.js";
+import { validateHookHandlerSafety } from "./safety.js";
+import { parseHookConfig } from "./schema.js";
+export function loadPluginHookManifest(options) {
+    const pluginRoot = resolve(options.pluginRoot);
+    const manifestPath = join(pluginRoot, MANIFEST_PATH);
+    const env = buildPluginEnv(pluginRoot, options.dataRoot);
+    const discoveredAt = options.discoveredAt ?? "pre-session";
+    const diagnostics = [];
+    const drafts = [];
+    if (!directoryExists(pluginRoot)) {
+        const source = pluginSource({
+            discoveredAt,
+            displayOrder: options.displayOrder,
+            env,
+            manifestPath,
+            pluginRoot,
+            sourcePath: manifestPath,
+        });
+        diagnostics.push(diagnostic({ code: "invalid_root", message: `Plugin root does not exist: ${pluginRoot}`, path: "$.pluginRoot" }, source));
+        return emptyResult(diagnostics);
+    }
+    if (fileExists(manifestPath)) {
+        const manifest = readJsonFile(manifestPath, manifestPath, sourceForPath(options, env, manifestPath));
+        if (manifest.ok) {
+            drafts.push(...readManifestHookDrafts(manifest.value, options, env, manifestPath, diagnostics));
+        }
+        else {
+            diagnostics.push(manifest.diagnostic);
+        }
+    }
+    const defaultPath = resolveContainedPath(pluginRoot, DEFAULT_HOOK_PATH);
+    if (options.includeDefaultHooks !== false && defaultPath.ok && fileExists(defaultPath.path)) {
+        const source = sourceForPath(options, env, defaultPath.path);
+        const config = readJsonFile(defaultPath.path, manifestPath, source);
+        if (config.ok) {
+            drafts.push({ config: config.value, key: defaultPath.path });
+        }
+        else {
+            diagnostics.push(config.diagnostic);
+        }
+    }
+    return parseDrafts(drafts, options, env, manifestPath, diagnostics);
+}
+export function selectHookCommandForPlatform(handler, platform = process.platform) {
+    if (platform === "win32" && handler.config.commandWindows !== undefined) {
+        return handler.config.commandWindows;
+    }
+    return handler.config.command;
+}
+function readManifestHookDrafts(manifest, options, env, manifestPath, diagnostics) {
+    if (!isRecord(manifest)) {
+        diagnostics.push(diagnostic({ code: "invalid_root", message: "Plugin manifest must be an object.", path: "$" }, sourceForPath(options, env, manifestPath)));
+        return [];
+    }
+    const hooks = manifest.hooks;
+    if (hooks === undefined) {
+        return [];
+    }
+    return normalizeHookDrafts(hooks, "$.hooks", options, env, manifestPath, diagnostics);
+}
+function normalizeHookDrafts(value, path, options, env, manifestPath, diagnostics) {
+    if (typeof value === "string") {
+        const resolved = resolveContainedPath(options.pluginRoot, value);
+        if (!resolved.ok) {
+            diagnostics.push(diagnostic({ code: "invalid_root", message: resolved.message, path }, sourceForPath(options, env, manifestPath)));
+            return [];
+        }
+        if (!fileExists(resolved.path)) {
+            diagnostics.push(diagnostic({ code: "invalid_root", message: `Plugin hook file does not exist: ${resolved.path}`, path }, sourceForPath(options, env, resolved.path)));
+            return [];
+        }
+        const source = sourceForPath(options, env, resolved.path);
+        const parsed = readJsonFile(resolved.path, manifestPath, source);
+        if (parsed.ok) {
+            return [{ config: parsed.value, key: resolved.path }];
+        }
+        diagnostics.push(parsed.diagnostic);
+        return [];
+    }
+    if (Array.isArray(value)) {
+        const drafts = [];
+        for (const [index, item] of value.entries()) {
+            drafts.push(...normalizeHookDrafts(item, `${path}[${index}]`, options, env, manifestPath, diagnostics));
+        }
+        return drafts;
+    }
+    if (isRecord(value)) {
+        return [{ config: value, key: `${manifestPath}#${inlineKeyPath(path)}` }];
+    }
+    diagnostics.push(diagnostic({ code: "invalid_root", message: "Plugin manifest hooks must be a path or hook object.", path }, sourceForPath(options, env, manifestPath)));
+    return [];
+}
+function parseDrafts(drafts, options, env, manifestPath, diagnostics) {
+    const sources = [];
+    const executableHandlers = [];
+    const parseDiagnostics = [];
+    for (const [index, draft] of drafts.entries()) {
+        const source = pluginSource({
+            discoveredAt: options.discoveredAt ?? "pre-session",
+            displayOrder: options.displayOrder + index,
+            env,
+            manifestPath,
+            pluginRoot: resolve(options.pluginRoot),
+            sourcePath: draft.key,
+        });
+        sources.push(source);
+        const parsed = parseHookConfig(draft.config, source);
+        for (const handler of parsed.executableHandlers) {
+            const safetyDiagnostics = validateHookHandlerSafety(handler);
+            if (safetyDiagnostics.length === 0) {
+                executableHandlers.push(handler);
+            }
+            else {
+                parseDiagnostics.push(...safetyDiagnostics);
+            }
+        }
+        parseDiagnostics.push(...parsed.diagnostics);
+    }
+    return {
+        diagnostics: [...diagnostics, ...parseDiagnostics],
+        parsed: { diagnostics: parseDiagnostics, executableHandlers },
+        sources,
+    };
+}
+function emptyResult(diagnostics) {
+    return {
+        diagnostics,
+        parsed: { diagnostics, executableHandlers: [] },
+        sources: [],
+    };
+}
+function inlineKeyPath(path) {
+    return path.replace(/^\$\.?/, "");
+}
+//# sourceMappingURL=plugin-loader.js.map